s4-provision: Fixed owner/group for hard-coded Sites descriptor.

We must not specify explicitly owner and group. As there is a difference between WIN_2003 and WIN_2008, we should let descriptor
module compute the correct default ones. Also removed inherited ACEs, they are ignored during SD creation anyway.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Mon Jan 17 18:23:24 CET 2011 on sn-devel-104

diff --git a/source4/scripting/python/samba/provision/__init__.py b/source4/scripting/python/samba/provision/__init__.py
index 3e402b2fd5da0b1b147840c0ee5b91216a1db691..e200083a333f1ab74f071cef6f1a2a62a31e519d 100644 (file)
--- a/source4/scripting/python/samba/provision/__init__.py
+++ b/source4/scripting/python/samba/provision/__init__.py
@@ -106,11 +106,9 @@ def find_setup_dir():
 # "get_schema_descriptor" is located in "schema.py"
 
 def get_sites_descriptor(domain_sid):
-    sddl = "O:EAG:EAD:AI(A;;RPLCLORC;;;AU)" \
+    sddl = "D:(A;;RPLCLORC;;;AU)" \
            "(A;;RPWPCRCCLCLORCWOWDSW;;;EA)" \
            "(A;;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)" \
-           "(A;CIID;RPWPCRCCDCLCLORCWOWDSDDTSW;;;EA)" \
-           "(A;CIID;RPWPCRCCLCLORCWOWDSDSW;;;DA)" \
            "S:AI(AU;CISA;CCDCSDDT;;;WD)" \
            "(OU;CIIOSA;CR;;f0f8ffab-1191-11d0-a060-00aa006c33ed;WD)" \
            "(OU;CIIOSA;WP;f30e3bbe-9ff0-11d1-b603-0000f80367c1;bf967ab3-0de6-11d0-a285-00aa003049e2;WD)" \