Please try to upgrade an alpha10 when enforcing new rules in samdb

[Matthieu Patou]

  Hello,

I'm trying hard to make one more time upgradeprovision work against all 
the change that are introduced in the code of samba4.

It would be just great if you could do a test with upgradeprovision 
--full -s path_to_alpha10_smb.conf when you modify the samdb code (and 
especially when you add more strict checks).

For instance I just stubble on changeset 3cdc83d4 :     
s4:subtree_rename LDB module - introduce the "systemFlags" protection rules

Although this is good, it breaks upgradeprovision when it tries to 
rename object that have been badly named first (and that can't be 
removed as the SID is a special one ... :

Existing object CN=Well-Known-Security-Id-System,CN=WellKnown Security 
Principals,CN=Configuration,DC=home,DC=matws,DC=net must be replaced by 
CN=System,CN=WellKnown Security 
Principals,CN=Configuration,DC=home,DC=matws,DC=net,Renaming old object
Traceback (most recent call last):
   File "./scripting/bin/upgradeprovision", line 1580, in <module>
     schema):
   File "./scripting/bin/upgradeprovision", line 1225, in update_samdb
     schema, highestUSN)
   File "./scripting/bin/upgradeprovision", line 1002, in update_partition
     add_missing_entries(ref_samdb, samdb, names, basedn, listMissing)
   File "./scripting/bin/upgradeprovision", line 674, in add_missing_entries
     hashMissing, index)
   File "./scripting/bin/upgradeprovision", line 535, in add_missing_object
     if handle_special_add(samdb, dn, names):
   File "./scripting/bin/upgradeprovision", line 475, in handle_special_add
     samdb.rename(oldDn, objDn)
_ldb.LdbError: (53, "subtree_rename: Cannot rename 
CN=Well-Known-Security-Id-System,CN=WellKnown Security 
Principals,CN=Configuration,DC=home,DC=matws,DC=net, it isn't permitted !")

It will give you an idea that you are breaking upgradeprovision and that 
maybe you can do things in a different way not to break it, and if it's 
not possible then we can discuss ...

In the particular case of this changeset I guess that the relax control 
has to be used, any idea or remarks ?

Matthieu

-- 
Matthieu Patou
Samba Team        http://samba.org