Trying to understand upgradeprovision
Andrew Bartlett
abartlet at samba.org
Wed Feb 13 22:31:41 MST 2013
Matthieu,
I've been adding tests to help me understand upgradeprovision, what it
can do and what it can't do.
The branch this mail is based on is here:
https://git.samba.org/abartlet/samba.git/?p=abartlet/samba.git/.git;a=shortlog;h=refs/heads/samba-tool-and-acls
The issue I have is that I can't find any clear description of what
--full does, and how we can safely use upgradeprovision to correct the
ACLs that were incorrect in our 4.0.0 release.
Is it the case that without --full, we only do things so clear that we
should probably do them in dbcheck instead (and have upgradeprovision
run dbcheck at the end?)
I had been under the impression that the SD recalculation was done
regardless, but when I run these commands:
bin/samba-tool ldapcmp st/provision/alpha13_upgrade/private/sam.ldb
st/provision/alpha13_upgrade_reference/private/sam.ldb --two domain
schema --sd > /tmp/ldapcmp-upgrade_sd.txt
bin/samba-tool ldapcmp st/provision/alpha13_upgrade_full/private/sam.ldb
st/provision/alpha13_upgrade_reference/private/sam.ldb --two domain
schema --sd > /tmp/ldapcmp-upgrade_full_sd.txt
I see that the SDs are only fixed if we run with --full. My concern is
that this mode changes many, many other things about the database, and I
would prefer to find a 'lighter touch' way to handle this.
Anyway, I include the output from those commands, in the hope that you
can shed some light. To reproduce, on my branch first run 'make test
TESTS=alpha13' and the directories will be produced.
Thanks,
Andrew Bartlett
--
Andrew Bartlett http://samba.org/~abartlet/
Authentication Developer, Samba Team http://samba.org
-------------- next part --------------
* Place-holders for st/provision/alpha13_upgrade_full/private/sam.ldb:
${DOMAIN_DN} => DC=alpha13,DC=samba,DC=corp
${DOMAIN_NETBIOS} => SAMBA
${SERVER_NAME} => ['ARES']
${DOMAIN_NAME} => alpha13.samba.corp
* Place-holders for st/provision/alpha13_upgrade_reference/private/sam.ldb:
${DOMAIN_DN} => DC=alpha13,DC=samba,DC=corp
${DOMAIN_NETBIOS} => SAMBA
${SERVER_NAME} => ['ARES']
${DOMAIN_NAME} => alpha13.samba.corp
* Comparing [DOMAIN] context...
* Objects to be compared: 206
Comparing:
'CN=ARES,OU=Domain Controllers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_full/private/sam.ldb]
'CN=ARES,OU=Domain Controllers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
ACEs found only in st/provision/alpha13_upgrade_full/private/sam.ldb:
(OA;;SW;DNS-Host-Name-Attributes;;DA)
(OA;;SW;DNS-Host-Name-Attributes;;PS)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(OA;;SW;Validated-DNS-Host-Name;;DA)
(OA;;SW;Validated-DNS-Host-Name;;PS)
FAILED
* Result for [DOMAIN]: FAILURE
* Comparing [SCHEMA] context...
* Objects to be compared: 1550
* Result for [SCHEMA]: SUCCESS
-------------- next part --------------
* Place-holders for st/provision/alpha13_upgrade/private/sam.ldb:
${DOMAIN_DN} => DC=alpha13,DC=samba,DC=corp
${DOMAIN_NETBIOS} => SAMBA
${SERVER_NAME} => ['ARES']
${DOMAIN_NAME} => alpha13.samba.corp
* Place-holders for st/provision/alpha13_upgrade_reference/private/sam.ldb:
${DOMAIN_DN} => DC=alpha13,DC=samba,DC=corp
${DOMAIN_NETBIOS} => SAMBA
${SERVER_NAME} => ['ARES']
${DOMAIN_NAME} => alpha13.samba.corp
* Comparing [DOMAIN] context...
* Objects to be compared: 206
Comparing:
'CN=ARES,OU=Domain Controllers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=ARES,OU=Domain Controllers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(OA;;SW;DNS-Host-Name-Attributes;;DA)
(OA;;SW;DNS-Host-Name-Attributes;;PS)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(OA;;SW;Validated-DNS-Host-Name;;DA)
(OA;;SW;Validated-DNS-Host-Name;;PS)
FAILED
Comparing:
'CN=Builtin,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=Builtin,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 23
=> 66
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPLCLORC;;;DA)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;;RP;;;WD)
(A;;RPLCLORC;;;ED)
(A;;RPRC;;;RU)
(A;;RPWPCRCCLCLORCWOWDSW;;;DA)
(A;CI;LC;;;RU)
(A;CI;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA)
(A;CI;RPWPCRCCLCLORCWOWDSDSW;;;BA)
(OA;;CR;Create-Inbound-Forest-Trust;;IF)
(OA;;CR;DS-Replication-Get-Changes-All;;BA)
(OA;;CR;DS-Replication-Get-Changes-All;;DD)
(OA;;CR;DS-Replication-Get-Changes-In-Filtered-Set;;BA)
(OA;;CR;DS-Replication-Get-Changes-In-Filtered-Set;;ED)
(OA;;CR;DS-Replication-Get-Changes;;BA)
(OA;;CR;DS-Replication-Get-Changes;;ED)
(OA;;CR;DS-Replication-Get-Changes;;ER)
(OA;;CR;DS-Replication-Manage-Topology;;BA)
(OA;;CR;DS-Replication-Manage-Topology;;ED)
(OA;;CR;DS-Replication-Synchronize;;BA)
(OA;;CR;DS-Replication-Synchronize;;ED)
(OA;;CR;Enable-Per-User-Reversibly-Encrypted-Password;;AU)
(OA;;CR;Read-Only-Replication-Secret-Synchronization;;BA)
(OA;;CR;Read-Only-Replication-Secret-Synchronization;;ED)
(OA;;CR;Unexpire-Password;;AU)
(OA;;CR;Update-Password-Not-Required-Bit;;AU)
(OA;;RP;Domain-Other-Parameters;;AU)
(OA;;RP;Domain-Other-Parameters;;RU)
(OA;;RP;Domain-Password;;RU)
(OA;CIIO;RP;General-Information;User;RU)
(OA;CIIO;RP;General-Information;inetOrgPerson;RU)
(OA;CIIO;RP;Membership;User;RU)
(OA;CIIO;RP;Membership;inetOrgPerson;RU)
(OA;CIIO;RP;RAS-Information;User;RU)
(OA;CIIO;RP;RAS-Information;inetOrgPerson;RU)
(OA;CIIO;RP;Token-Groups;Computer;ED)
(OA;CIIO;RP;Token-Groups;Group;ED)
(OA;CIIO;RP;Token-Groups;User;ED)
(OA;CIIO;RP;User-Account-Restrictions;User;RU)
(OA;CIIO;RP;User-Account-Restrictions;inetOrgPerson;RU)
(OA;CIIO;RP;User-Logon;User;RU)
(OA;CIIO;RP;User-Logon;inetOrgPerson;RU)
(OA;CIIO;RPLCLORC;;Group;RU)
(OA;CIIO;RPLCLORC;;User;RU)
(OA;CIIO;RPLCLORC;;inetOrgPerson;RU)
(OA;CIIO;RPWPCR;Private-Information;;PS)
FAILED
Comparing:
'CN=Computers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=Computers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 23
=> 28
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSW;;;DA)
(OA;;CCDC;Computer;;AO)
(OA;;CCDC;Group;;AO)
(OA;;CCDC;Print-Queue;;PO)
(OA;;CCDC;User;;AO)
(OA;;CCDC;inetOrgPerson;;AO)
FAILED
Comparing:
'CN=Infrastructure,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=Infrastructure,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 21
=> 23
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;0x0fffffff;;;SY)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;;RPLCLORC;;;AU)
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)
(A;;RPWPCRCCLCLORCWOWDSW;;;DA)
FAILED
Comparing:
'CN=LostAndFound,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=LostAndFound,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSW;;;DA)
FAILED
Comparing:
'CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 23
=> 24
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPLCLORC;;;AU)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CI;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;;RPWPCRCCLCLORCWOWDSW;;;DA)
FAILED
Comparing:
'CN=Users,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=Users,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 23
=> 27
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSW;;;DA)
(OA;;CCDC;Group;;AO)
(OA;;CCDC;Print-Queue;;PO)
(OA;;CCDC;User;;AO)
(OA;;CCDC;inetOrgPerson;;AO)
FAILED
Comparing:
'DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=@,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 26
=> 28
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=a.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=b.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=c.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=d.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=e.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=f.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=g.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=h.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=i.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=j.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=k.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=l.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'DC=m.root-servers.net,DC=RootDNSServers,CN=MicrosoftDNS,CN=System,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 25
=> 27
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;DnsAdmins)
(A;CIID;RPWPCRCCDCLCRCWOWDSDDTSW;;;ED)
FAILED
Comparing:
'OU=Domain Controllers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'OU=Domain Controllers,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 29
=> 24
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;DA)
(OA;;CCDC;Computer;;AO)
(OA;;CCDC;Group;;AO)
(OA;;CCDC;Print-Queue;;PO)
(OA;;CCDC;User;;AO)
(OA;;CCDC;inetOrgPerson;;AO)
(OA;CIIOID;RPWPCR;Private-Information;;PS)
ACEs found only in st/provision/alpha13_upgrade_reference/private/sam.ldb:
(A;;RPWPCRCCLCLORCWOWDSW;;;DA)
(OA;CIID;RPWPCR;Private-Information;;PS)
FAILED
* Result for [DOMAIN]: FAILURE
* Comparing [SCHEMA] context...
* Objects to be compared: 1550
Comparing:
'CN=Schema,CN=Configuration,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade/private/sam.ldb]
'CN=Schema,CN=Configuration,DC=alpha13,DC=samba,DC=corp' [st/provision/alpha13_upgrade_reference/private/sam.ldb]
Difference in ACE count:
=> 18
=> 17
ACEs found only in st/provision/alpha13_upgrade/private/sam.ldb:
(A;;RPWPCCDCLCLORCWOWDSDDTSW;;;LA)
FAILED
* Result for [SCHEMA]: FAILURE
More information about the samba-technical
mailing list