[PATCH] : script to rebuild extended DN attributes

Andrew Bartlett abartlet at samba.org
Tue Sep 8 01:22:13 MDT 2009

On Tue, 2009-09-08 at 11:18 +0400, Matthieu Patou wrote:
> On 09/08/2009 10:56 AM, Andrew Bartlett wrote:
> > On Tue, 2009-09-08 at 10:50 +0400, Matthieu Patou wrote:
> >    
> >> Hello,
> >>
> >> This is a reviewed and corrected version of the script that (re)build
> >> extended DNs.
> >>
> >> This version use the python bindings instead of LDIF because now
> >> replacing attributes works ...
> >> It also use the control search_options to go into the whole provision
> >> without the need to specify each partitions.
> >>
> >>
> >> Let me know ...
> >>      
> > It's looking good.  A version of this that handles forward links only
> > (but not backlinks, or cases where the extended DN is present) belongs
> > at the end of our provision.
> >
> >    
> As far as I remember LDB is not very happy when you are trying to edit 
> backlinks. But I'm not even sure I understand your remarks here ...

While your 'non-extended DNs' come from an old DB, we have a similar
issue with the main database after the provision (but perhaps we should
solve it with a pre-commit hook).

> > I still don't know what the modify_modules stuff is doing in there
> > however.  Shouldn't that be replaced by doing a provision
> > --partitions-only to fix up the module list (etc)?
> >    
> Maybe a good solution but not so long time ago provision 
> --partitions-only used to smashed secrets.ldb is it still the case ?

I think it still does, but we can fix that.  (yet more options...).  It
is about to get a lot more use as we start looking seriously at

Andrew Bartlett

Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20090908/89dd89da/attachment.pgp>

More information about the samba-technical mailing list