[Pkg-samba-maint] Bug#462045: Bug#462045: Bug#462045: samba: automagically add initial set of domain groups

[Steve Langasek]

On Wed, Jan 14, 2009 at 06:33:29PM +0100, Christian Perrier wrote:
> Quoting Steve Langasek (vorlon at debian.org):

> > > (medium-priority debconf question, etc.)

> > What reason is there to ask the user at all about this?  If the user wants
> > to map these NT groups to different Unix groups, then it's still
> > straightforward to do that, AFAIK.  Is there some reason that it's wrong
> > (== insecure) to always map these groups by default, even if they'll be
> > changed later?

> I'd say "mostly to avoid being 'accused' to do things in the back of
> our users without warning them".

> Also because it might add some complication to our maintainer scripts
> in order to first check if there are already existing group mappings,
> preserve them, etc, etc.

I'm only arguing for setting up group mappings on initial install, not on
upgrade - so that's easy to check for in the maintainer scripts.

> It's more a general feeling I have that packages shouldn't maybe try
> to do too many 'nice' things when installed. Something I haven't been
> always thinking but am more and more convinced of as the time goes on.

Oh.  I'm always in favor of packages doing 'nice' things on install.  I just
think we need to have a very high bar for what 'nice' is. :-)

> The counter argument is that you seem to feel this is acceptable and
> that you're generally the conservative person in the team, Steve....

> (/me already laughs out loud imagining that I will point folks to a
> mail where I say that vorlon is conservative)

I'm already chuckling here, thinking back over some of the ill-fated changes
I've introduced in Samba in the past ;)  But then, maybe I'm getting more
conservative in my old age, too. :-)

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek at ubuntu.com                                     vorlon at debian.org