[FFe] New version of zentyal-samba

[Jorge Salamero Sanz]

We need to upload a new version of zentyal-samba, this is required for:

* current version doesn't work with zentyal-common and zentyal-core recently uploaded

* new versions brings support of samba4 to accomplish https://blueprints.launchpad.net/ubuntu/+spec/servercloud-q-samba4-interface

* we have been working with the Edubuntu team to have a samba4 management interface, this new version brings this feature https://blueprints.launchpad.net/ubuntu/+spec/other-edubuntu-zentyal-integration

(upload of zentyal-users and zentyal-squid will be necessary too)

[Stéphane Graber (stgraber)]

Can you detail a bit more which package will get new features, what packages will be added and confirm that the upgrade path works properly from the old to the new version?

[Jorge Salamero Sanz (bencer)]

The 3 packages bring new features:

zentyal-users:

* major rewrite to support Heimdal Kerberos
* New master-slave architecture using REST instead LDAP replication (avoiding chained slapd replica, translucent, frontend)
migration is not possible as all passwords are stored in Kerberos keys format and before we had different hashes but no plain-text

zentyal-samba:

* major rewrite to support samba4
* integration betweek samba4, OpenLDAP and external Heimdal Kerberos
* roles supported: standalone domain controller, existing Windows domain controller/member
migration is not possible as we move from a samba3 based solution to a samba4 based solution

zentyal-squid:

* support of complex browsing policies multiple time slots based
* rewrite of the URL categories database dansguardian configuration to scale with many different profiles
existing configuration will keep working

[Jonathan Carter (jonathan)]

Jorge asked me to provide some comment on the FFe request.

This update doesn't seem to affect anything else outside of Zentyal itself (which it only seems to improve). It seems like a low-risk updates and if there are minor issues then there is at least still time to fix it, it seems better to get these changes in sooner rather than later for that reason.

[Jorge Salamero Sanz (bencer)]

To clarify our plans here, as I said there is no migration path between the old samba3-hashed passwords and the new samba4-kerberos keys version. We want to upload this now as contains new features, eventually if new bugfixing-only releases appear before 13th September, Zentyal release date, we will fill new FFe for them.

[Jorge Salamero Sanz (bencer)]

Attached build log.

[Jorge Salamero Sanz (bencer)]

Attached install log.

[Jorge Salamero Sanz (bencer)]

Attached screenshot of zentyal-samba, reflecting samba4 specific changes.

[Jorge Salamero Sanz (bencer)]

The plan here is to upload zentyal-users 2.3.15+quantal1, zentyal-samba 2.3.12+quantal1 and zentyal-squid 2.3.11+quantal1 already available on my ppa: https://launchpad.net/~bencer/+archive/zentyal-2.3-q/.

These packages contain all the new features commented on #2, also you can find full changelog here:

http://git.zentyal.org/zentyal.git/blob/refs/heads/quantal:/main/users/ChangeLog
http://git.zentyal.org/zentyal.git/blob/refs/heads/quantal:/main/samba/ChangeLog
http://git.zentyal.org/zentyal.git/blob/refs/heads/quantal:/main/squid/ChangeLog

Our final release is 13th September, we will upload new versions then, but only with bugfixing and no new features, so no need to go through a FFe.

[Jorge Salamero Sanz (bencer)]

Attached debdiff too.

[Iulian Udrea (iulian)]

What are these: #1042861, #1042859? Are -ltps and -ups completely new packages? If yes why are the bugs filed agains -core? Are -ltps and -ups required to make -samba work?

You're making this process harder than it ought to be. At the beginning you said that -samba has to be updated in order to work with -common and -core. I wonder why you've uploaded -common and -core if you already knew that -samba would not work.

Why do we have to update -users and -squid? What are the relationships between these packages?

I would prefer to have these packages in a working state at the moment. What is needed in order to acomplish this?

[Jorge Salamero Sanz (bencer)]

#1042861, #1042859 are completely new packages, not necessary to make -samba work. I filled FFe for them because we had blueprints for them and was in the roadmap to make them into Quantal but we arrived late.

-common and -core were uploaded and samba was not ready yet, so we decided to upload the core functionality first and same a few days later, time run out and we entered in freeze...

To have packages in a working state we need to approve this FFe that request the upload of zentyal-users, zentyal-samba and zentyal-squid.

[Iulian Udrea (iulian)]

-users, -squid, -samba approved. Go ahead and upload.

[Stefano Rivera (stefanor)]

All 3 uploaded.