Thomas Whitten wrote:
>> Does an svccfg delprop against a "required" property fail? That's the
>> primary thing I would be looking for, so that an admin can't break the
>> system by deleting the property.
>
> No, svccfg delprop will allow you to delete a required property. As long
> as you readd the property before doing a refresh, you will end up with a
> valid state.
>
> svccfg validate will tell you if you have a missing required property.
Experimentation suggests that, at least for properties specified at the
service level, svccfg validate checks the running copy of the values,
rather than the tentative uncommitted copy. Doesn't it rather defeat the
purpose of a validation step if you have to give the potentially-bad data
to the service before you can check to see if it's valid?
Is this a bug, or am I missing something?
svc:/system/idmap> validate idmap:default
svc:/system/idmap> delprop config/unresolvable_sid_mapping
svc:/system/idmap> select default
svc:/system/idmap:default> validate
svc:/system/idmap:default> refresh
svc:/system/idmap:default> validate
Required property missing:
FMRI="svc:/system/idmap:default"
Property group="config"
Name of missing property="unresolvable_sid_mapping"
Template source="svc:/system/idmap:default"
pg_pattern name="config"
pg_pattern type="application"
prop_pattern name="unresolvable_sid_mapping"
prop_pattern type="boolean"
