summaryrefslogtreecommitdiff
path: root/source4/scripting/bin/upgradeprovision
AgeCommit message (Collapse)AuthorFilesLines
2010-03-01upgradeprovision: split the big script to put reusable functions appartMatthieu Patou1-231/+48
Signed-off-by: Jelmer Vernooij <jelmer@samba.org>
2010-02-26s4:provision: use generate_random_password()Stefan Metzmacher1-1/+1
metze
2010-01-21upgradeprovision: forbid running upgradeprovision when there is more than 1 DCMatthieu Patou1-0/+20
2010-01-21upgradeprovision: mark rIDAvailablePool never upgradedMatthieu Patou1-16/+121
handle properly the fact that missing object might depend on some other in order to be correctly created debug change also if we are in debugall mode
2010-01-21upgradeprovision: reformat + add groupType as possibly overwrittenMatthieu Patou1-9/+12
2010-01-21upgradeprovision: improve info messagesMatthieu Patou1-7/+5
2010-01-21Revert "s4:upgradeprovision - fix up the script regarding linked attributes"Matthieu Patou1-46/+12
This reverts commit 2cedefabc93c8a1fcb49d65a3f78a344e814f826.
2010-01-21upgradeprovision: never use xattr it's pointless in this usecaseMatthieu Patou1-1/+1
2010-01-10s4:upgradeprovision - fix up the script regarding linked attributesMatthias Dieter Wallnöfer1-12/+46
We have to try to add new objects until between two iterations we didn't make any progress. Either we are then done (no objects remaining) or we are incapable to do this fully automatically. The latter can happen if important system objects (builtin groups, users...) moved (e.g. consider one of my recent comments). Then the new object can't be added if it contains the same "sAMAccountName" attribute as the old one. We have to let the user delete the old one (also to give him a chance to backup personal changes - if needed) and only then the script is capable to add the new one onto the right place. Make this clear with an exhaustive error output. I personally don't see a good way how to do this better for now so I would leave this as a manual step.
2010-01-10s4:upgradeprovision - Reformat commentsMatthias Dieter Wallnöfer1-28/+44
Make them break at line 80 (better readability).
2009-12-15s4: rename res/res2 to something more explicitMatthieu Patou1-71/+68
2009-12-15s4: upgradeprovision handle renaming and knownobjectsMatthieu Patou1-6/+18
2009-12-15s4: upgradeprovision rename also when there is a mismatch on the case of ↵Matthieu Patou1-2/+7
name attribute Renaming not only helps when name attribute is not here it also helps when the case is not the good one. So in order to avoid problem and have as much as possible similar provision we should use the rename whenever a name difference appear.
2009-12-15s4: reorder action to permit old provision to be correctly upgradedMatthieu Patou1-5/+8
2009-12-01s4: Remove targetdir as it can cause some trouble and can be replaced by an ↵Matthieu Patou1-3/+1
adapted -s smb.conf Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-01s4: Handle the case in secrets.ldb without name attributeMatthieu Patou1-5/+25
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-01s4: don't forget to update defaultSecurityDescriptorMatthieu Patou1-2/+3
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-12-01s4: load the domain level of the current provision and create a provision ↵Matthieu Patou1-2/+8
with the same domain level Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2009-11-28s4: fix SD update and password change in upgrade scriptMatthieu Patou1-82/+90
- reserve a new Samba OID for recalculate SD control - fix the update SD function - fix handling of kvno in the update_machine_account_password function - fix handling of handles in RPC winreg server Signed-off-by: Andrew Tridgell <tridge@samba.org>
2009-11-27s4:upgradeprovision Rework update_machine_account_password() tranactionsAndrew Bartlett1-4/+6
This balances the transaction_begin() and transactin_prepare_commit() calls Andrew Bartlett
2009-11-27s4:upgradeprovision Use mkdtemp to create unique tempoary directory namesAndrew Bartlett1-2/+3
2009-11-27s4:upgradeprovision Rework script, and reset machine account pwAndrew Bartlett1-27/+58
The rework corrects some duplication and errors in the original script, found when preparing an automated test of the script. The code to reset the machine account password avoids issues with AES keys and salting, which may not otherwise be solved by the upgrade. Andrew Bartlett
2009-11-27s4: Improve updateprovisionMatthieu Patou1-33/+52
* Define a simple upgrade process mode (module storage change, file name change, copy of new file) * Move the schema, configuration and current object upgrade into full upgrade mode * Added the --full switch to select the full upgrade mode, and made simple upgrade mode the default * Make updateprovision works without any switch (update the provision in the default location) * Cleanup the messages * Create the reference provision in a subdirectory of the updated provision
2009-11-27s4: Rename the scriptMatthieu Patou1-0/+694