upgradeprovision --full fails to find CN=NTDS Settings

[Michael Wood]

Hi

On 1 January 2012 15:29, Michael Wood <esiotrot at gmail.com> wrote:
> On 18 December 2011 18:50, Michael Wood <esiotrot at gmail.com> wrote:
>> Hi
>>
>> On 18 December 2011 18:12, Matthieu Patou <mat at samba.org> wrote:
>>> Hi Micheal,
>>>
>>> Please file me a bug and try to ping me within a week on this subject I have
>>> to take a deep look on this subject ...

>> Thanks, its https://bugzilla.samba.org/show_bug.cgi?id=8669

After cherry-picking the following three commits the issue with NTDS
Settings seems to have been resolved:

f66ef5cfbc932dc03a5bea61e9cb10dd8d948128
f05edc0ecb9da2cb00a83b38d0be5812cc4ccf77
3213d1e0b770690b1a964f38fb57ebbcd8ce0746

I notice that it still complains about not being able to set ACLs on
policy-related objects.

Creating a reference provision
No IPv6 address will be assigned
Copy privilege
Update base samdb by searching difference with reference one
Starting update of samdb
There are 76 missing objects
Reloading a merged schema, which might trigger reindexing so please be patient
Schema reloaded!
There are 3 changed objects
Update of samdb finished
Update of secrets.ldb
IMPORTANT!!! If you were using Dynamic DNS before you need to update your
configuration, so that the tkey-gssapi-credential has the following value:
DNS/samba.example.com
Update machine account
Some defaultSecurityDescriptors and/orsecurityDescriptor have changed,
recalculating SD
Unable to set ACLs on policies related objects: an integer is required
Upgrade finished!
Reopenning samdb to trigger reindexing if needed after modification
Reindexing finished

-- 
Michael Wood <esiotrot at gmail.com>