Specifications
Chapter 10 Solving Open Directory Problems 2 11
If the Open Directory server’s host name still isn’t its fully qualied DNS name,
restart the server.
3 Make sure the Open Directory master server’s Network preferences are congured to
use the DNS server that resolves the server’s name.
If the Open Directory master server provides its own DNS service, the server’s Network
preferences must be congured to use itself as a DNS server.
4 After conrming the correct DNS conguration for the server, start Kerberos.
See “Starting Kerberos After Setting Up an Open Directory Master” on page 98.
If You Can’t Create an Open Directory Replica
If you try to create two replicas simultaneously, one attempt will succeed and the
other will fail. A subsequent attempt to establish the second replica should succeed.
If you still can’t create the second replica, go to folder /var/run/, look for the le
slapcong.lock, and remove it if it exists. Alternatively, restart the server.
If You Can’t Create an Open Directory Master or Replica from a
Conguration File
You can’t make Mac OS X Server an Open Directory master or Open Directory replica
by dragging a property-list conguration le to the Open Directory Settings pane
in Server Admin. Instead, follow the instructions in “Setting Up an Open Directory
Master” on page 81 or “Setting Up an Open Directory Replica” on page 87.
You can create a property-list conguration le by dragging the miniature window
from the lower right corner of the Settings pane in Server Admin.
If You Can’t Connect a Replica to Your Relay
Make sure your replica has not reached its capacity of 32 replicas. Also make sure that
you are not connecting to a second tier replica instead of a rst tier relay.
If You Can’t Join an Open Directory Replica to an Open Directory That
Is a Subordinate of an Active Directory Server
Before you try to turn the server into a replica of the subordinate Open Directory
server, make sure that you connect the server to the same Active Directory server as
the Open Directory master server you are attempting to connect to. Your replicas must
have access to the Active Directory server for Kerberos to work.