Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am attempting to set up an Open Directory replica server in Mac OS X Lion server 10.7.1 I have the master set up and working (as far as I can tell) fine. When I go to the second machine and attempt to set it up as an open directory replica, it looks like it works as well- the setup dialog runs through with no errors, and the replica server shows up on the master as ok. However, the replica server never show itself as being a replica - as soon as I refresh the view in server admin, it says Role: Standalone directory again. Sometimes it will show itself as being a replica briefly, but only until the server admin view is refreshed. How can I get the replica role to stick? Thanks.

share|improve this question
up vote 0 down vote accepted

The UI for configuring Open Directory isn't very good about reporting errors. Check the log (/Library/Logs/slapconfig.log, shown as the Configuration Log in the Open Directory -> Logs section of Server Admin) to see what really happened.

The standard problems with replica setup are SSH access (make sure you can SSH from the replica-to-be to the master and authenticate as root with a password), and DNS (make sure that when the replica looks up its hostname it gets back its IP address, and when it looks up its IP address it gets back its hostname).

share|improve this answer
Thanks. Looking at that log I saw references to failed attempts to store a password, which led me to the system keychain. Deleting that and allowing it to be re-created fixed the issue. Of course, you have to be careful you don't loose any necessary certificates or the like in the process. – ibrewster Sep 3 '11 at 4:47
FYI- there is a Keychain First Aid option in Keychain Access you can use to try to repair a keychain before deleting the whole thing and starting from scratch. – Meltemi Dec 18 '12 at 23:45

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.