schema: Re-work extended rights handling in provision (prep for 2012R2)
authorAndrew Bartlett <abartlet@samba.org>
Mon, 11 Dec 2017 01:42:55 +0000 (14:42 +1300)
committerAndrew Bartlett <abartlet@samba.org>
Thu, 14 Dec 2017 07:20:16 +0000 (08:20 +0100)
commitd67f706b34d3bae05c7155092aa29d7e1148e7e6
treede0a340fa86f9f01b2383afac90d827db8bacfe5
parentd6e0f43ab98fff300ffdc7a888bbc84f74e580f0
schema: Re-work extended rights handling in provision (prep for 2012R2)

Add the changes needed to provision a 2012 DC (mostly this just affects
the Extended Rights objects) by moving to the new extended-rights.ldif

The localizationDisplayId is not documented in MS-ATDS so these values
are moved to provision_configuation_modify.ldif and applied after the
display-specifiers.ldif

We don't enable the 2012R2 mode yet. The ${INC2012} variable
just gets replaced with '#' so the lines get commented out and not
applied.

This approach allows us to support provisioning both a 2008R2 DC or
a 2012R2 DC (so that we can test we can upgrade a 2008 DC to 2012).

Signed-off-by: Tim Beale <timbeale@catalyst.net.nz>
Signed-off-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Garming Sam <garming@catalyst.net.nz>
python/samba/provision/__init__.py
selftest/knownfail.d/schema45 [new file with mode: 0644]
source4/setup/provision_configuration.ldif
source4/setup/provision_configuration_modify.ldif
testprogs/blackbox/upgradeprovision-oldrelease.sh