How do I remove authenticated Open Directory binding to itself?
While trying to get this done I accidentally found a way to do this:


On the server, in Directory Utility, in Services/LDAPv3 I tried to
add another copy of the local server (127.0.0.1). The same name was
not accepted so I went manual, created it with the name localhost
This was created, but then it turned out that it had overwritten the
previous OD. All my users, everything was gone. Panic.
I stopped OD in Server.app
Ran "sudo slapconfig -destroyldapserver" in Terminal
Ran "sudo slapconfig -restoredb 20200112-albus-odbackup.sparseimage"
(I did make a backup before I went mucking about)


My OD is now up and running again, the users are back it took Server.app a while to sync with reality) and the authenticated binding between the server and itself is gone. /LDAPv3/127.0.0.1 only shows one computer, so I'll need to reauthenticate the client machine.

Probably not the way to do it and certainly not for the faint of heart.