I found a page on the wiki that helped: http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt.  In addition to following the directions under "How to change the user/group LDAP server", I also had to edit /opt/fedora-ds/slapd-<server>/config/dse.ldif and change:
 
under:
dc: cn=Pass Through Authentication,cn=plugins,cn=config
 
I changed:
nssldap-pluginarg0: <url of new server>
 
I'm not sure if the stuff on the wiki page is what did it, or just editing the dse.ldif... I'm new to this and it is still a bit confusing.  But all seems to be good now.  I could log in to the admin console on the second (new) master.  At that point I could have re-enabled the NetscapeRoot on the other (old) master, but I don't want to - I think at this point I can kill the old master (?).
 


From: fedora-directory-users-bounces@redhat.com [mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Andrew Kerr
Sent: Thursday, July 09, 2009 2:32 PM
To: fedora-directory-users@redhat.com
Subject: [389-users] Re-enable or move NetscapeRoot

We are running Fedora DS 1.0.4.  We have two servers doing master-master on NetscapeRoot and our user root.  The machine that was the original master needs to be shut down.  In preparation for its decommission I changed the user root to just a consumer, and I disabled NetscapeRoot.
 
I am now unable to run the console on the remaining master, since it apparently is still trying to connect to the old machine's NetscapeRoot.  How can I either re-enable NetscapeRoot on that old machine, or better yet have the console connect to the other master?  When I start the console I give it the administration URL of the new server, and I thought that was enough - but it isn't.
 
Thanks in advance.
 
This message and the information contained herein is proprietary and confidential and subject to the Amdocs policy statement,
you may review at http://www.amdocs.com/email_disclaimer.asp