[Patch] add --as-sddl option to getntacl and create setntacl

[Matthias Dieter Wallnöfer]

Dear Matthieu,

from now on I'll hesitate a bit more when applying extern patches since 
I often had to revert them (e.g. "rebuilddn" script, WMIC improvement). 
Since there are people who are much more skilled than I in reviewing 
patches (since they work much longer with the code) I'd prefer them 
(abartlet, tridge, Jelmer ...) to give a comment first. So we can 
prevent this nasty reverting if something doesn't fit.

Also, good testing is always welcome.

Matthias

Matthieu Patou schrieb:
> Matthias,
>
> Find attached a patch for getntacl to add the --as-sddl option and a 
> new program: setntacl that allow to set the security.NTACL attribute 
> in command line.
> This program can be useful for admins who wants to set NT ACL for 
> files but without needing to time Windows adminstrator password.
>
> This program could be also very useful to solve bug 5483 as we can use 
> it during provision to set ACLs on policy files and dirs so that ACL 
> in the AD and ACL on the files are in sync.
>
> Any comment welcome !
> Matthieu.