ACLs and upgrades

Marc Muehlfeld samba at marc-muehlfeld.de
Tue Mar 19 11:11:15 MDT 2013


Hello Andrew,

thank you for your detailed explanation.


Am 18.03.2013 23:46, schrieb Andrew Bartlett:
> So, where does this leave us?  At this point the only option I can
> sensibly consider is providing a tool to forcibly reset the well known
> security descriptors (including removing your delegation on
> cn=computers), but to add it to dbcheck, to run in that interactive
> tool.  That way, you can choose to keep your delegation (but have the
> rest of the SD be incorrect), or accept the reset (and re-add any
> delegation later).

What are the steps/commands to reset the ACLs, when I want to upgrade 
from 4.0.1?

Or do you recommend to stay at my version and wait until you have your 
'samba-tool dbcheck --reset-well-known-acls' finished? If so, I can test 
the new option for you, of course.

For me it isn't a big thing to re-add my delegations. I think I'll 
better have everything correct, instead of saving a bit of time for 
re-adding the delegations.


Regards,
Marc


More information about the samba-technical mailing list