Tool

jmortenson's picture
tool
Reads:

4666

Score:
3.5
3.5
2
 
Comments:

1

NCP Remove Trustees Script

Author Info

11 November 2011 - 1:18pm
Submitted by: jmortenson

(View Disclaimer)

license: 
gpl v2

This bash script will parse the trustees kept in the NCP trustee_database.xml file (media/nss/VOLUME/._NETWARE/.trusteee_database.xml) for the supplied NSS volume and create a script that will remove the trustees using the "ncpcon rights" commands.

WARNING: Make sure to backup your trustees before running the ncpcon-remove-VOLUME.sh script with the "metamig" utility.

Save Example (backs up all NSS VOL1 metadata):

metamig save VOL1 > metamig-bu-VOL1.txt
   

Restore Example (restores only trustee NSS VOL1 metadata)

metaming restore VOL1 -m t < metamig-bu-VOL1.txt
   

Steps to use:

  1. Extract the ncp-remove-trustees.tgz file with "tar xzvf ncp-remove-trustees.tgz" Then make ncp-remove-trustees.sh executable.
  2. Execute the ncp-remove-trustees.sh script as the "root" user and supply the volume name.

    Where you execute the script from will be where the ncpcon-remove-VOLUME.sh script will be located. Other files needed for processing are /tmp/trusteepath-VOLUME.txt and /tmp/trusteename-VOLUME.txt (delete them when you no longer need them)

    The ncp-remove-trustees.sh script will not remove any trustees from the volume. You have to execute that output script for trustees to actually be removed. This lets you see what it is going to do before you execute ncpcon-remove-VOLUME.sh

  3. Add the execute permission to ncpcon-remove-VOLUME.sh
  4. Run the ncpcon-remove-VOLUME.sh script.
AttachmentSize
ncp-remove-trustees.tgz874 bytes

Disclaimer: As with everything else at Cool Solutions, this content is definitely not supported by Novell (so don't even think of calling Support if you try something and it blows up).

It was contributed by a community member and is published "as is." It seems to have worked for at least one person, and might work for you. But please be sure to test, test, test before you do anything drastic with it.




User Comments

hschoene's picture

small bug in the script

Submitted by hschoene on 20 February 2012 - 7:03am.

If a directory name contains the word "name" like /media/nss/VOL/xxxx/domainnames, the script fails with different lines count:
Error: .....files do not have the same number of lines....

Change line 10 from the script:
original:
cat /media/nss/$VOL/._NETWARE/.trustee_database.xml | egrep "name" | cut -d ">" -f2 | cut -d "<" -f1 | sed s/^.// > /tmp/trusteename-$VOL.txt

changed:
cat /media/nss/$VOL/._NETWARE/.trustee_database.xml | egrep "" | cut -d ">" -f2 | cut -d "<" -f1 | sed s/^.// > /tmp/trusteename-$VOL.txt

Hope, that nobody has a directory, that containsthe word ""....

© 2013 Novell