[PATCH] scripting: No longer install samba_upgradeprovision

Andrew Bartlett abartlet at samba.org
Fri Mar 1 00:58:02 MST 2013


I know this is a sensitive issue, but given the available developer time
and the issues we have found so far, I think this is the best option for
now. 

Too many of our users just run this tool blindly, when it was written to
be run by administrators with a deep knowledge of their Samba
databases.  

My hope is to get this into Samba 4.0.4, so that I am not in a rush to
finish the patches to improve the safety and effectiveness of
samba_upgradeprovision under that deadline.  (patch freeze is in a
little over a week). 

For users upgrading to 4.0.4, I'll see if I can build a dbcheck mode to
just reset the ACLs to the original values (much as what
samba_upgradeprovision does), but do so via the interactive mode that
tool has.

>From here, I do want to continue to improve this tool, with increased
safely checks (only running on databases that have a positive marker as
being provisioned by Samba), not adding additional partition objects,
only making changes to attributes we want to change (by some kind of
command line option) and generally changing as little about the
installation as possible. 

Finally, I want to have much more testing, not only of 'empty'
provisions, but with additional users in place.  I don't think I can get
the tool to a state where I'm happy with it being safe in the timeframe,
which is why I would like to buy more time by steering our users away
from it. 

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org




More information about the samba-technical mailing list