s4:netcmd/gpo.py: let get_gpo_info explicitly ask for the full ntSecurityDescriptor

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Michael Adam <obnox@samba.org>
(cherry picked from commit 325e92190852ae317c42c26ab86d32818d119381)

diff --git a/source4/scripting/python/samba/netcmd/gpo.py b/source4/scripting/python/samba/netcmd/gpo.py
index f57c96591c31b69a3675ee13e792ac42b28feb1b..cc6381990b3dbfa51f0f2d9b84cd975fe57c2a27 100644 (file)
--- a/source4/scripting/python/samba/netcmd/gpo.py
+++ b/source4/scripting/python/samba/netcmd/gpo.py
@@ -126,7 +126,8 @@ def get_gpo_dn(samdb, gpo):
     return dn
 
 
-def get_gpo_info(samdb, gpo=None, displayname=None, dn=None):
+def get_gpo_info(samdb, gpo=None, displayname=None, dn=None,
+                 sd_flags=security.SECINFO_OWNER|security.SECINFO_GROUP|security.SECINFO_DACL|security.SECINFO_SACL):
     '''Get GPO information using gpo, displayname or dn'''
 
     policies_dn = samdb.get_default_basedn()
@@ -154,7 +155,8 @@ def get_gpo_info(samdb, gpo=None, displayname=None, dn=None):
                                     'flags',
                                     'name',
                                     'displayName',
-                                    'gPCFileSysPath'])
+                                    'gPCFileSysPath'],
+                            controls=['sd_flags:1:%d' % sd_flags])
     except Exception, e:
         if gpo is not None:
             mesg = "Cannot get information for GPO %s" % gpo