[PATCH] scripting: No longer install samba_upgradeprovision

Gémes Géza geza at kzsdabas.hu
Sat Mar 2 00:42:07 MST 2013


2013-03-01 21:30 keltezéssel, Gémes Géza írta:
> 2013-03-01 08:58 keltezéssel, Andrew Bartlett írta:
>> On Fri, 2013-03-01 at 18:58 +1100, Andrew Bartlett wrote:
>>> I know this is a sensitive issue, but given the available developer 
>>> time
>>> and the issues we have found so far, I think this is the best option 
>>> for
>>> now.
>>>
>>> Too many of our users just run this tool blindly, when it was 
>>> written to
>>> be run by administrators with a deep knowledge of their Samba
>>> databases.
>>>
>>> My hope is to get this into Samba 4.0.4, so that I am not in a rush to
>>> finish the patches to improve the safety and effectiveness of
>>> samba_upgradeprovision under that deadline.  (patch freeze is in a
>>> little over a week).
>>>
>>> For users upgrading to 4.0.4, I'll see if I can build a dbcheck mode to
>>> just reset the ACLs to the original values (much as what
>>> samba_upgradeprovision does), but do so via the interactive mode that
>>> tool has.
>>>
>>>  From here, I do want to continue to improve this tool, with increased
>>> safely checks (only running on databases that have a positive marker as
>>> being provisioned by Samba), not adding additional partition objects,
>>> only making changes to attributes we want to change (by some kind of
>>> command line option) and generally changing as little about the
>>> installation as possible.
>>>
>>> Finally, I want to have much more testing, not only of 'empty'
>>> provisions, but with additional users in place.  I don't think I can 
>>> get
>>> the tool to a state where I'm happy with it being safe in the 
>>> timeframe,
>>> which is why I would like to buy more time by steering our users away
>>> from it.
>> (and now with the patch for review/comment/push).
>>
>> Thanks,
>>
>> Andrew Bartlett
>>
> Hi,
>
> I would want to try it (already looking for testing the possibility of 
> getting rid of search:acl restrictions and apply delegations). However 
> what version shall I apply this patch against, will it apply to 4.0.3?
>
> Cheers
>
> Geza Gemes
Hi,

Sorry for the previous noise, I've just read the patch and found that it 
only disables installing upgradeprovision.

Cheers

Geza Gemes


More information about the samba-technical mailing list