NCP Remove Trustees Script

0 Likes

This bash script will parse the trustees kept in the NCP trustee_database.xml file (media/nss/VOLUME/._NETWARE/.trusteee_database.xml) for the supplied NSS volume and create a script that will remove the trustees using the "ncpcon rights" commands.



WARNING: Make sure to backup your trustees before running the ncpcon-remove-VOLUME.sh script with the "metamig" utility.





Save Example (backs up all NSS VOL1 metadata):


metamig save VOL1 > metamig-bu-VOL1.txt

Restore Example (restores only trustee NSS VOL1 metadata)
metaming restore VOL1 -m t < metamig-bu-VOL1.txt


Steps to use:




  1. Extract the ncp-remove-trustees.tgz file with "tar xzvf ncp-remove-trustees.tgz" Then make ncp-remove-trustees.sh executable.

  • Execute the ncp-remove-trustees.sh script as the "root" user and supply the volume name.

    Where you execute the script from will be where the ncpcon-remove-VOLUME.sh script will be located. Other files needed for processing are /tmp/trusteepath-VOLUME.txt and /tmp/trusteename-VOLUME.txt (delete them when you no longer need them)


    The ncp-remove-trustees.sh script will not remove any trustees from the volume. You have to execute that output script for trustees to actually be removed. This lets you see what it is going to do before you execute ncpcon-remove-VOLUME.sh


  • Add the execute permission to ncpcon-remove-VOLUME.sh

  • Run the ncpcon-remove-VOLUME.sh script.

Labels:

How To-Best Practice
Collateral
Comment List
Anonymous
  • If a directory name contains the word "name" like /media/nss/VOL/xxxx/domainnames, the script fails with different lines count:
    Error: .....files do not have the same number of lines....

    Change line 10 from the script:
    original:
    cat /media/nss/$VOL/._NETWARE/.trustee_database.xml | egrep "name" | cut -d ">" -f2 | cut -d "<" -f1 | sed s/^.// > /tmp/trusteename-$VOL.txt

    changed:
    cat /media/nss/$VOL/._NETWARE/.trustee_database.xml | egrep "" | cut -d ">" -f2 | cut -d "<" -f1 | sed s/^.// > /tmp/trusteename-$VOL.txt

    Hope, that nobody has a directory, that containsthe word ""....
Related Discussions
Recommended