summaryrefslogtreecommitdiff
path: root/source4/scripting/bin/upgradeprovision
AgeCommit message (Collapse)AuthorFilesLines
2010-07-08s4 upgradeprovision: For SID > 1000 do not copy them, let the system ↵Matthieu Patou1-0/+6
regenerated a new one This should avoid colliion with newly added objects that use the same SID as existing users in the upgraded provision. Signed-off-by: Matthias Dieter Wallnöfer <mdw@samba.org>
2010-06-24s4:upgradeprovision - fix include order for "ldb"Matthias Dieter Wallnöfer1-1/+1
Patch originally posted on the list by Matthieu Patou.
2010-06-21s4 upgradeprovision: fix the logging stuff so that it actually logMatthieu Patou1-0/+2
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20Some more formatting fixes, move schema related functions from Ldb to Schema.Jelmer Vernooij1-4/+5
2010-06-20Formatting cleanups; use True/False for booleans, unnecessary backslashes, ↵Jelmer Vernooij1-61/+63
spacing.
2010-06-20s4-python: Remove trivial function, replace by dictionary.Jelmer Vernooij1-4/+11
2010-06-20s4 upgradeprovision: Check that the policy for DC is present if not warn the ↵Matthieu Patou1-4/+14
user Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: add an option to force the rebuilding of FS ACLs on ↵Matthieu Patou1-1/+6
sysvols share Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: Restyle importsMatthieu Patou1-15/+15
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: Move functions to helpers and improve codeMatthieu Patou1-197/+48
Among code improvement the most significant part is that we now compare DN object instead of their string representation. It allow to better react to case an white space difference. Some new move objects have been added (ie. System into well known security principals). This will allow more unittesting Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: Add documentation on the update processMatthieu Patou1-9/+162
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: move some functions to upgradehelpers for unit testsMatthieu Patou1-129/+13
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: Fix styleMatthieu Patou1-85/+137
reformat *_update_samdb functions fix_partition_sd rebuild_sd update_samdb update_privilege update_machine_account_password update_gpo Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: Use replPropertyMetaData for better guessMatthieu Patou1-179/+565
Rework upgradeprovision in order to get more precise updates when doing upgrade provision. This is done through the use of replPropertyMetaData information and raw information revealed by the "reveal" control. The code has been changed also to avoid double free error when changing the schema (for old provision). Checking of SD is done a bit more cleverly as we compare the different parts for an ACL separately. Fix logic when upgrading provision without replPropertyMetaData infos Also for old provision (pre alpha9) do not copy the usn range because data here will be wrong Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: Reformat attributes lists and reformat parserMatthieu Patou1-17/+33
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: Inform about new dns dynamic update if the provision ↵Matthieu Patou1-3/+41
didn't have it Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgradeprovision: fix styleMatthieu Patou1-76/+123
add_deletedobj_containers add missing objects clean add-mising handle special add + dump denied Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgrade provision: Refactor code to do all the modification within 1 ↵Matthieu Patou1-308/+413
transaction Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-20s4 upgrade provision: Fix style in gen_dn_indexMatthieu Patou1-2/+1
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-06-13upgradeprovision: Use logging infrastructure.Jelmer Vernooij1-13/+14
2010-06-13upgrade: Properly cancel/commit transactions in a couple more places.Jelmer Vernooij1-122/+135
2010-06-13s4-python: Start using standard python logging infrastructure ratherJelmer Vernooij1-4/+5
than simple messaging callbacks.
2010-04-21s4-upgradeprovision: fixed --realm option duplicate in upgrade_from_s3Andrew Tridgell1-1/+1
2010-04-08s4-python: More cleanups.Jelmer Vernooij1-0/+1
2010-04-08s4-python: Simplify code, improve formatting.Jelmer Vernooij1-17/+25
2010-04-07s4-python: Move samdb_ntds_objectGUID to pydsdb.Jelmer Vernooij1-2/+1
2010-03-28upgradeprovision: Fix formatting, syntax error.Jelmer Vernooij1-17/+20
2010-03-28s4 upgradeprovision: add information about upgrade in oEMInformation to keep ↵Matthieu Patou1-2/+15
a better trace of different updates Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-28s4: allow upgrade provision to fix acl and missing dir on GPO dirsMatthieu Patou1-1/+18
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-25python: use '#!/usr/bin/env python' to cope with varying install locationsAndrew Tridgell1-1/+1
this should be much more portable
2010-03-01More formatting fixes.Jelmer Vernooij1-69/+74
2010-03-01Fix formatting.Jelmer Vernooij1-734/+734
2010-03-01upgradeprovision: Remove unused imports, use shutil.rmtree rather thanJelmer Vernooij1-11/+7
rmall.
2010-03-01upgradeprovision: Move to pythondoc formatMatthieu Patou1-23/+172
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-01upgradeprovision: Allow script to be called with pydocMatthieu Patou1-40/+42
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-01upgrade provision: change the meaning of handle_security_desc to be similar ↵Matthieu Patou1-3/+3
to handle_special_case Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-01upgradeprovision: code cleanupMatthieu Patou1-49/+57
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-03-01upgradeprovision: split the big script to put reusable functions appartMatthieu Patou1-231/+48
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-02-26s4:provision: use generate_random_password()Stefan Metzmacher1-1/+1
metze
2010-01-21upgradeprovision: forbid running upgradeprovision when there is more than 1 DCMatthieu Patou1-0/+20
2010-01-21upgradeprovision: mark rIDAvailablePool never upgradedMatthieu Patou1-16/+121
handle properly the fact that missing object might depend on some other in order to be correctly created debug change also if we are in debugall mode
2010-01-21upgradeprovision: reformat + add groupType as possibly overwrittenMatthieu Patou1-9/+12
2010-01-21upgradeprovision: improve info messagesMatthieu Patou1-7/+5
2010-01-21Revert "s4:upgradeprovision - fix up the script regarding linked attributes"Matthieu Patou1-46/+12
This reverts commit 2cedefabc93c8a1fcb49d65a3f78a344e814f826.
2010-01-21upgradeprovision: never use xattr it's pointless in this usecaseMatthieu Patou1-1/+1
2010-01-10s4:upgradeprovision - fix up the script regarding linked attributesMatthias Dieter Wallnöfer1-12/+46
We have to try to add new objects until between two iterations we didn't make any progress. Either we are then done (no objects remaining) or we are incapable to do this fully automatically. The latter can happen if important system objects (builtin groups, users...) moved (e.g. consider one of my recent comments). Then the new object can't be added if it contains the same "sAMAccountName" attribute as the old one. We have to let the user delete the old one (also to give him a chance to backup personal changes - if needed) and only then the script is capable to add the new one onto the right place. Make this clear with an exhaustive error output. I personally don't see a good way how to do this better for now so I would leave this as a manual step.
2010-01-10s4:upgradeprovision - Reformat commentsMatthias Dieter Wallnöfer1-28/+44
Make them break at line 80 (better readability).
2009-12-15s4: rename res/res2 to something more explicitMatthieu Patou1-71/+68
2009-12-15s4: upgradeprovision handle renaming and knownobjectsMatthieu Patou1-6/+18
2009-12-15s4: upgradeprovision rename also when there is a mismatch on the case of ↵Matthieu Patou1-2/+7
name attribute Renaming not only helps when name attribute is not here it also helps when the case is not the good one. So in order to avoid problem and have as much as possible similar provision we should use the rename whenever a name difference appear.