You can reset the Open Directory administrator password in Mavericks without affecting user data. You might need to do this, for example, if an Open Directory administrator departs without sharing the password.
- On the Open Directory server, open Terminal and execute this command:
ldapsearch -LLL -x -H ldap://127.0.0.1 -s base namingContexts
- In the output, look for the dc= entries, such as dc=ldap1,dc=example,dc=com. Note these entries.
- Log in to the server as an administrator.
- Open Terminal, then execute the following command. Replace the sample dc= entries with the entries you noted before. Also, if the directory administrator account's uid is not diradmin, change the command accordingly.
sudo ldappasswd -x -H ldapi://%2Fvar%2Frun%2Fldapi -S uid=diradmin,cn=users,dc=ldap1,dc=example,dc=com
- Enter your administrator account password when prompted.
- At the "New Password:" prompt, enter the new directory administrator password you want to use. Enter it again when prompted.