[PATCH] scripting: No longer install samba_upgradeprovision

Gémes Géza geza at kzsdabas.hu
Fri Mar 1 13:30:01 MST 2013


2013-03-01 08:58 keltezéssel, Andrew Bartlett írta:
> On Fri, 2013-03-01 at 18:58 +1100, Andrew Bartlett wrote:
>> I know this is a sensitive issue, but given the available developer time
>> and the issues we have found so far, I think this is the best option for
>> now.
>>
>> Too many of our users just run this tool blindly, when it was written to
>> be run by administrators with a deep knowledge of their Samba
>> databases.
>>
>> My hope is to get this into Samba 4.0.4, so that I am not in a rush to
>> finish the patches to improve the safety and effectiveness of
>> samba_upgradeprovision under that deadline.  (patch freeze is in a
>> little over a week).
>>
>> For users upgrading to 4.0.4, I'll see if I can build a dbcheck mode to
>> just reset the ACLs to the original values (much as what
>> samba_upgradeprovision does), but do so via the interactive mode that
>> tool has.
>>
>>  From here, I do want to continue to improve this tool, with increased
>> safely checks (only running on databases that have a positive marker as
>> being provisioned by Samba), not adding additional partition objects,
>> only making changes to attributes we want to change (by some kind of
>> command line option) and generally changing as little about the
>> installation as possible.
>>
>> Finally, I want to have much more testing, not only of 'empty'
>> provisions, but with additional users in place.  I don't think I can get
>> the tool to a state where I'm happy with it being safe in the timeframe,
>> which is why I would like to buy more time by steering our users away
>> from it.
> (and now with the patch for review/comment/push).
>
> Thanks,
>
> Andrew Bartlett
>
Hi,

I would want to try it (already looking for testing the possibility of 
getting rid of search:acl restrictions and apply delegations). However 
what version shall I apply this patch against, will it apply to 4.0.3?

Cheers

Geza Gemes


More information about the samba-technical mailing list