[Patch] add --as-sddl option to getntacl and create setntacl

[Andrew Bartlett]

On Mon, 2009-10-26 at 00:33 +0300, Matthieu Patou wrote:
> Hello,
> 
> Find attach 2 patchs, the first one for creating the setntacl tool and 
> for improving command line parsing in getntacl.
> The second one is an improvement of the provision to put all the GPO 
> stuff together (and out of setup_samdb). It also include calls to 
> setntacl for  setting ACL on files as they are in the AD so that GPMC 
> will be more happy.

The tools look good, but need tests (otherwise they will shortly
break).  

The changes to provision however still need work - I really don't like
the idea of shelling out to setntacl like that.  Can we instead have
what that tool does put into a library and then wrapped with python
bindings?

(this would also make it much easier to write tests for).

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org
Samba Developer, Cisco Inc.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20091028/32c64b81/attachment.pgp>