[Patch] add --as-sddl option to getntacl and create setntacl

Matthieu Patou mat at matws.net
Thu Sep 24 00:55:37 MDT 2009

Hello Matthias,
I understand your reaction.

In any case if someone can review it ...
Btw I updated this patch see the new version attached.


On 09/23/2009 04:28 PM, Matthias Dieter Wallnöfer wrote:
> Dear Matthieu,
> from now on I'll hesitate a bit more when applying extern patches since
> I often had to revert them (e.g. "rebuilddn" script, WMIC improvement).
> Since there are people who are much more skilled than I in reviewing
> patches (since they work much longer with the code) I'd prefer them
> (abartlet, tridge, Jelmer ...) to give a comment first. So we can
> prevent this nasty reverting if something doesn't fit.
> Also, good testing is always welcome.
> Matthias
> Matthieu Patou schrieb:
>> Matthias,
>> Find attached a patch for getntacl to add the --as-sddl option and a
>> new program: setntacl that allow to set the security.NTACL attribute
>> in command line.
>> This program can be useful for admins who wants to set NT ACL for
>> files but without needing to time Windows adminstrator password.
>> This program could be also very useful to solve bug 5483 as we can use
>> it during provision to set ACLs on policy files and dirs so that ACL
>> in the AD and ACL on the files are in sync.
>> Any comment welcome !
>> Matthieu.

More information about the samba-technical mailing list