WANTED: Difficult NT ACLs with their posix mappings

[Andrew Bartlett]

I'm adding tests to ensure that complex and difficult NT ACLs are
correctly mapped to the correct or at least closest posix equivalent.

This will, for the first time, provide a unit test of our NT -> POSIX
ACL mapping layer.  

If you have some particularly tricky ACLs in SDDL format, and the
matching posix representation I would like to work with you to extend
the new posixacls.py test to assert that we do not break this conversion
in future, if we need to change the posix ACL mapping code. 

I'll need the domain SID, the SDDL, the getfacl output and the SID
mappings.  If you can reproduce setting this acl in the plugin_s4_dc
environment this would be ideal.  (run vfstest under
SELFTEST_TESTENV=plugin_s4_dc make testenv).

We may need to create some extra groups.

Andrew Bartlett
-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org