Please test v4-0-test for the AD DC!

[Andrew Bartlett]

On Wed, 2013-01-30 at 17:14 +0100, Marc Muehlfeld wrote:
> Am 30.01.2013 13:37, schrieb Andrew Bartlett:
> > Now would be a really good time for users with test environments to test
> > out the v4-0-test branch.
> 
> I have two open bug reports yet (last updated the reports this week after 
> trying with the latest master version):
> 
> - FSMO: https://bugzilla.samba.org/show_bug.cgi?id=9461#c5
> 
> - Delegation: https://bugzilla.samba.org/show_bug.cgi?id=9267

We are quite aware of both of those reports.  We still think that the
situation is better than it was, and plan to continue looking into the
issues.

> > Older installations will need to run
> > 'samba_upgradeprovision' to have our automatic tool fix the existing
> > databases.
> 
> What are "older installations"? In #3267 Metze told me to run 
> samba_upgradeprovision and samba-tool dbcheck --fix (after upgrading from 
> 4.0.1). But this reset the ACLs, too and my configured delegations are gone.

We probably need to make this side-effect more clear.  The
samba_upgradeprovision tool has smarts that can potentially avoid this,
but I'm not sure if those are applied to fixing the default ACLs.  

The dbcheck (modulo bugs) tool only fixes proven incorrect data, and in
this case it just rewrites the inherited parts of ACLs.  But this is why
it takes the more cautious approach of asking about each change by
default. 

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org