Experience with migration from samba3 to samba4 and ovirt tests

Alejandro aescanero at gmail.com
Wed Nov 28 03:53:04 MST 2012


Updating patch. Actual status:

A option in samba-tool domain classicupgrade: --add-upn=(yes|no) default yes
A subcclass in samba-tool user upn set|delete|show
A option in samba-tool user create --upn=UPN
A option in samba-tool user create --no-upn=(yes|no) -> exclusive with
--upn default no
Changes in smbtorture test in samba.tests.samba_tool.user:
- Check if userPrincipalName is created in form username at REALM
- Check samba-tool user upn set|delete with URL and without URL

I need to do some tests, but I think I'm near to finish this patch.




2012/11/21 Andrew Bartlett <abartlet at samba.org>

> On Tue, 2012-11-20 at 19:59 +0100, Alejandro wrote:
> > For now I set this options:
> >
> > A option in samba-tool domain classicupgrade: --add-upn=(yes|no) default
> yes
> > A subcclass in samba-tool user upn set|delete|show
> > A option in samba-tool user create (--upn=UPN)
>
> We should probably also have --no-upn and make adding username at REALM the
> default.  If the ADUC tools do that much by default, we should probably
> do the same - it is not correct for external programs to rely on this,
> but we can't change them overnight, and if this makes new users 'more
> like' what AD adds, then I guess we should do that.
>
> > I need more information about torture tests of samba-tool commands, any
> > clue?
>
> See scripting/python/samba/tests/samba_tool/user.py for what to extend.
>
> > 2012/11/16 Lukasz Zalewski <lukas at eecs.qmul.ac.uk>
> >
> > > On 15/11/12 16:24, Alejandro wrote:
> > >
> > >>
> > >> I prefer to use a "samba-tool user upn add|delete|list" command in
> place
> > >> of "samba-tool spn" because samba-tool user has options -H and
> -filter ,
> > >> the spn only use ldb, no remote access.
> > >>
> > > Sorry was only referring to the layout of subcommands within spn not
> the
> > > physical location. I think conceptually they do belong to user
> subsection.
> >
> >
> > >
> > >>
> > >>     Also given that samba-tool user create automatically generates upn
> > >>     for new users maybe the migration script should do the same?
> > >>
> > >>
> > >> See  "samba-tool domain classicupgrade (--add-upn)" --add-upn is a
> > >> optional switch to add the UPN to each migrate user.
> > >>
> > > What i was aiming at was to make add upn functionality compulsory
> rather
> > > than optional (through --add-upn flag) in a same way as user create
> does.
> > >
> > >
> > Do you like something as  "--add-upn" option (yes|no) with "yes" as
> default
> > value?
> >
> >
> >
> > > Regards
> > >
> > > L
> > >
> > >
> > Greets
> >
>
> --
> Andrew Bartlett                                http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
>
>
>
>


-- 
Alejandro Escanero Blanco
Consultor de sistemas basados en fuentes abiertas
Desarrollador de FusionDirectory (http://www.fusiondirectory.org)
Blog: http://www.disasterproject.com
Jabber: blainett at jabberes.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: upn_v4.patch
Type: application/octet-stream
Size: 25936 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20121128/4d5d923b/attachment.obj>


More information about the samba-technical mailing list