s4-dsdb: Extended samdb.newgroup to set the group's security descriptor.

diff --git a/source4/scripting/python/samba/samdb.py b/source4/scripting/python/samba/samdb.py
index 668c6003d6259b99f85f4425e09b577c4b99bfd5..a59494f953061ffe2eda1f0074d084323e2f9110 100644 (file)
--- a/source4/scripting/python/samba/samdb.py
+++ b/source4/scripting/python/samba/samdb.py
@@ -113,7 +113,7 @@ pwdLastSet: 0
         self.modify_ldif(mod)
 
     def newgroup(self, groupname, groupou=None, grouptype=None,
-                 description=None, mailaddress=None, notes=None):
+                 description=None, mailaddress=None, notes=None, sd=None):
         """Adds a new group with additional parameters
 
         :param groupname: Name of the new group
@@ -121,6 +121,7 @@ pwdLastSet: 0
         :param description: Description of the new group
         :param mailaddress: Email address of the new group
         :param notes: Notes of the new group
+        :param sd: security descriptor of the object
         """
 
         group_dn = "CN=%s,%s,%s" % (groupname, (groupou or "CN=Users"), self.domain_dn())
@@ -143,6 +144,9 @@ pwdLastSet: 0
         if notes is not None:
             ldbmessage["info"] = notes
 
+        if sd is not None:
+            ldbmessage["nTSecurityDescriptor"] = ndr_pack(sd)
+
         self.add(ldbmessage)
 
     def deletegroup(self, groupname):