allow_remaining

diff --git a/python/samba/netcmd/ldapcmp.py b/python/samba/netcmd/ldapcmp.py
index 17c62928a55ed6a457b512084465bf0dff5d1daa..0a4e1bf20010e022dbad88b894104e5692dee67e 100644 (file)
--- a/python/samba/netcmd/ldapcmp.py
+++ b/python/samba/netcmd/ldapcmp.py
@@ -216,7 +216,7 @@ class LDAPBase(object):
     def get_descriptor_sddl(self, object_dn):
         res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["nTSecurityDescriptor"])
         desc = res[0]["nTSecurityDescriptor"][0]
-        desc = ndr_unpack(security.descriptor, desc)
+        desc = ndr_unpack(security.descriptor, desc,allow_remaining=True)
         return desc.as_sddl(self.domain_sid)
 
     def guid_as_string(self, guid_blob):