[Patch] add --as-sddl option to getntacl and create setntacl
Matthias Dieter Wallnöfer
mdw at samba.org
Wed Sep 23 06:28:08 MDT 2009
Dear Matthieu,
from now on I'll hesitate a bit more when applying extern patches since
I often had to revert them (e.g. "rebuilddn" script, WMIC improvement).
Since there are people who are much more skilled than I in reviewing
patches (since they work much longer with the code) I'd prefer them
(abartlet, tridge, Jelmer ...) to give a comment first. So we can
prevent this nasty reverting if something doesn't fit.
Also, good testing is always welcome.
Matthias
Matthieu Patou schrieb:
> Matthias,
>
> Find attached a patch for getntacl to add the --as-sddl option and a
> new program: setntacl that allow to set the security.NTACL attribute
> in command line.
> This program can be useful for admins who wants to set NT ACL for
> files but without needing to time Windows adminstrator password.
>
> This program could be also very useful to solve bug 5483 as we can use
> it during provision to set ACLs on policy files and dirs so that ACL
> in the AD and ACL on the files are in sync.
>
> Any comment welcome !
> Matthieu.
More information about the samba-technical
mailing list