I have an OSX 10.5 Leopard Server Open Directory master. I have an OSX 10.6 Snow Leopard Server Open Directory master into which I want to migrate all users.
Stipulate that I don't want to use the export/import tools in Server Admin; I want to use slapcat/slapadd and mkpassdb.
Here's my procedure:
- ``slapcat'' on src
- ``mkpassdb -backupdb'' on src
- setup clean OD master on dst
- ``mkpassdb -backupdb'' on dst
- ``mkpassdb -dump | grep Public'' on dst
- munge the src.ldif to modify the search base, remove any redundant entries such as objectClass: container and cn=config, remove any duplicate accounts e.g. root,diradmin.
- munge the src.ldif to replace the old password server publickey in "authAuthority: ;ApplePasswordServer;slotId" attributes with the pubkey of the dst
- stop slapd, ``slapadd -l src.ldif''
- ``mkpassdb -mergeparent src_dump dst_dump''
- ``mkpassdb -kerberize''
- start slapd
But, of course, it doesn't work - I should be able to login with my old credentials, but I can't. If I set my password using Workgroup Manager in the new directory, I can login just fine.
What am I missing - how can I coax more verbosity/diagnosis out of mkpassdb? Is there a different tool I can use? Can I directly examine the password store to find out what hashes are being written?