I found a page on the wiki that helped:
http://directory.fedoraproject.org/wiki/Howto:AdminServerLDAPMgmt. In
addition to following the directions under "How to change the user/group
LDAP server", I also had to edit
/opt/fedora-ds/slapd-<server>/config/dse.ldif and change:
under:
dc: cn=Pass Through Authentication,cn=plugins,cn=config
I changed:
nssldap-pluginarg0: <url of new server>
I'm not sure if the stuff on the wiki page is what did it, or just
editing the dse.ldif... I'm new to this and it is still a bit confusing.
But all seems to be good now. I could log in to the admin console on
the second (new) master. At that point I could have re-enabled the
NetscapeRoot on the other (old) master, but I don't want to - I think at
this point I can kill the old master (?).
________________________________
From: fedora-directory-users-bounces(a)redhat.com
[mailto:fedora-directory-users-bounces@redhat.com] On Behalf Of Andrew
Kerr
Sent: Thursday, July 09, 2009 2:32 PM
To: fedora-directory-users(a)redhat.com
Subject: [389-users] Re-enable or move NetscapeRoot
We are running Fedora DS 1.0.4. We have two servers doing master-master
on NetscapeRoot and our user root. The machine that was the original
master needs to be shut down. In preparation for its decommission I
changed the user root to just a consumer, and I disabled NetscapeRoot.
I am now unable to run the console on the remaining master, since it
apparently is still trying to connect to the old machine's NetscapeRoot.
How can I either re-enable NetscapeRoot on that old machine, or better
yet have the console connect to the other master? When I start the
console I give it the administration URL of the new server, and I
thought that was enough - but it isn't.
Thanks in advance.
This message and the information contained herein is proprietary and
confidential and subject to the Amdocs policy statement,
you may review at
http://www.amdocs.com/email_disclaimer.asp