[PATCH] scripting: No longer install samba_upgradeprovision

[Andrew Bartlett]

On Fri, 2013-03-01 at 18:58 +1100, Andrew Bartlett wrote:
> I know this is a sensitive issue, but given the available developer time
> and the issues we have found so far, I think this is the best option for
> now. 
> 
> Too many of our users just run this tool blindly, when it was written to
> be run by administrators with a deep knowledge of their Samba
> databases.  
> 
> My hope is to get this into Samba 4.0.4, so that I am not in a rush to
> finish the patches to improve the safety and effectiveness of
> samba_upgradeprovision under that deadline.  (patch freeze is in a
> little over a week). 
> 
> For users upgrading to 4.0.4, I'll see if I can build a dbcheck mode to
> just reset the ACLs to the original values (much as what
> samba_upgradeprovision does), but do so via the interactive mode that
> tool has.
> 
> From here, I do want to continue to improve this tool, with increased
> safely checks (only running on databases that have a positive marker as
> being provisioned by Samba), not adding additional partition objects,
> only making changes to attributes we want to change (by some kind of
> command line option) and generally changing as little about the
> installation as possible. 
> 
> Finally, I want to have much more testing, not only of 'empty'
> provisions, but with additional users in place.  I don't think I can get
> the tool to a state where I'm happy with it being safe in the timeframe,
> which is why I would like to buy more time by steering our users away
> from it. 

(and now with the patch for review/comment/push).

Thanks,

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org

-------------- next part --------------
A non-text attachment was scrubbed...
Name: 0001-scripting-No-longer-install-samba_upgradeprovision.patch
Type: text/x-patch
Size: 1886 bytes
Desc: not available
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20130301/5a90112b/attachment.bin>