1

I have a brand new Mac Mini I have installed the OS X Server app on it.

DNS Settings report no problems.

OpenDirectory will not stay operational. I never even had a chance to add any users. Can't get it do do anything but crash.

I haven't figured out how to restart it, I've followed instructions for resetting everything on the server app and received identical results.

Upon "starting" OpenDirectory it appears to start and then immediately stops.

sudo changeip -checkhostname

Reports no issues.

sudo launchctl unload /System/LIbrary/LaunchDaemons/org.openldap.slapd.plist

Tells me it is unable to unload.

I'm completely lost.

As I mentioned I was never able to do ANYTHING with OpenDirectory, so if there's a way I can wipe and reinstall that'd be great. I have no data to recover or backup.

1

I had the same problem initially too. But for many months now, though, Open Directory has been working as expected and serves our many users' credentials reliably.

It was only after the following that Open Directory settled down:

  • I was 100% sure that the OS X Server's DNS and reverse DNS was consistent, as viewed from within and without our network, and
  • that the DNS records matched exactly the domain name on the SSL Certificate we purchased.

If there are any inconsistencies between these, then the Server app just can't make all the assumptions about its identity that it needs to.

If all this sounds simple - we did not find it so.

This was our experience after several failed attempts and several attempts where we thought things were working but Open Directory flaked out. Yours will be different e.g. if your OS X Server is not internet-facing:

  • Important Note: All this had to be done on OS X before the Server app was installed successfully and running reliably. This will require special attention if you bought a Mac Mini with Server included. You have to get the OS X identity issues sorted before you go ahead with the step of installing the OS X Server app. It's installation is quite brilliant ... if all its (few) assumptions are met; but can cause a right mess if they aren't!
  • I had to double and triple check before I realised that I had not told the people selling me our fixed IP Addresses (BT in the UK) the correct FQDN to resolve reverse DNS to.
  • We decided to use OS X Server's DNS to manage all the domains we manage. So, in the case of our Server's FQDN, we had to tell BT to delegate the DNS to our OS X Server's IP Address.
  • These interactions with external parties can take from many hours to a few days and should be completed to your satisfaction before you unwrap the Server app. Don't expect instant installation of Server until this is all sorted.
  • I had to play games with the router to have OS Server's external FQDN name on the local network. In our case (BT Business Hub 3) we had OS X connect to the router with DHCP but the router was set to give OS X the correct external fixed IP Address. This is a quirk with this particular router. Normally you are recommended to use OS X System Preferences Network Settings a fixed IP address; in our case we had to allow the router to give it a fixed IP address.
  • All this had to be done before OS X Server was installed successfully

An ideal place to start

The perennial advice - that still stands - is to start by running sudo changeip -checkhostname

(Although, ironically, I don't think changeip is there until afer you've installed Server ... so maybe it's only ideal after you've already got things right!)

When you can: run sudo changeip -checkhostname make sure you get the response:

...
The names match. There is nothing to change.
dirserv:success = "success"

and make sure that Current HostName value == the name on your SSL Certificate == the name on the front page of the Server app GUI

Open Ports

Another thing: ensure that your Server can be reached by the ports that it needs. These can be more than you might imagine. I just did this port scan (using the Network Utility on my MacBook) of our Server and you can see what ports it has open to provide its services. See also Apple support page for Well Known Ports

Port Scan has started…

Port Scanning host: 81.123.123.123

     Open TCP Port:     22          ssh
     Open TCP Port:     25          smtp
     Open TCP Port:     53          domain
     Open TCP Port:     80          http
     Open TCP Port:     88          kerberos
     Open TCP Port:     106         3com-tsmux
     Open TCP Port:     110         pop3
     Open TCP Port:     143         imap
     Open TCP Port:     311         asip-webadmin
     Open TCP Port:     389         ldap
     Open TCP Port:     443         https
     Open TCP Port:     464         kpasswd
     Open TCP Port:     587         submission
     Open TCP Port:     625         dec_dlm
     Open TCP Port:     636         ldaps
     Open TCP Port:     749         kerberos-adm
     Open TCP Port:     993         imaps
     Open TCP Port:     995         pop3s
     Open TCP Port:     1640        cert-responder
     Open TCP Port:     3659        apple-sasl
     Open TCP Port:     4190        sieve
     Open TCP Port:     5900        rfb
     Open TCP Port:     7654
     Open TCP Port:     8008        http-alt
     Open TCP Port:     8443        pcsync-https
     Open TCP Port:     8800        sunwebadmin
     Open TCP Port:     8843
Port Scan has completed…
0

I had exactly the same problem. Open Directory seems to be very unstable in the newer iterations of OS X. The only thing that ever worked for me was performing a clean reinstall of OS X.

0

I would recommend an erase and install. In fact, I would zero the hard drive.

If you have dual hard drives, I strongly recommend RAID 1 (Mirroring)

If you follow these instructions, OS X Server, especially Open Directory will run well:

Reinstall OS X

BEFORE you install OS X Server, be sure to do the following:

Change the name of your Startup Volume NOW (if you want to change it).

Name your computer and enable remote management (System Prefs > Sharing)

Set Energy Prefs to "Never Sleep"

Assign a fixed/manual IP address to the Ethernet interface

Disable all other network interfaces

Make sure you have a real domain name. Don't make one up. Don't use .local

If your Mac mini will not also act as the DNS server, you must have forward and reverse DNS entries on another DNS server for the Mac mini (should match the computer name you set up.) Make sure this DNS server is listed in your network settings.

MAKE SURE you have an active Ethernet connection (even if it's just to a switch connected to nothing else) BEFORE you run Server.app

NOW you can install and run Server.app to set up OS X Server on your Mac mini.

Set up your server as if it will be accessible from the Internet, using a fully qualified Domain Name, NOT .local or .private

IF you are not using another DNS server on your network. - Set up DNS - After the Server.app set up, DNS should be running. - In your Network preferences, remove all DNS server entries except 127.0.0.1, which was added by Server.app.

All of these steps are best practices (even if not fully documented). Follow them.

  • Regarding the DNS setups. If this computer is not, and will not be connected to the internet, what is your suggestion? – SouthFresh Oct 27 '14 at 21:53
  • Every botched OS X Install I've seen used .local and every one I've had success – marc_grubb Oct 28 '14 at 11:41
  • Is it possible to correctly set up the DNS like you said above, but without the system having any connection to the internet. This computer will not have a connection to the internet at all. – SouthFresh Oct 29 '14 at 0:56
  • (Previous comment was cut off - oops.) Every botched OS X Install I've seen used .local and every one with which I've had immediate success used a Fully Qualified Domain Name (FQDN). – marc_grubb Nov 11 '14 at 20:16
  • I would suggest using another computer as the DNS Server and making sure this DNS server has forward and reverse DNS entries for the OD Master. – marc_grubb Nov 11 '14 at 20:23

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .