allow_remaining

diff --git a/python/samba/netcmd/ldapcmp.py b/python/samba/netcmd/ldapcmp.py
index 96b94f2c16a2de575e0f9cc5eb0119f841a7fff6..53a43d6f5a54d290ee836123d577b7a0ad38b1ad 100644 (file)
--- a/python/samba/netcmd/ldapcmp.py
+++ b/python/samba/netcmd/ldapcmp.py
@@ -220,7 +220,7 @@ class LDAPBase(object):
     def get_descriptor_sddl(self, object_dn):
         res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["nTSecurityDescriptor"])
         desc = res[0]["nTSecurityDescriptor"][0]
-        desc = ndr_unpack(security.descriptor, desc)
+        desc = ndr_unpack(security.descriptor, desc,allow_remaining=True)
         return desc.as_sddl(self.domain_sid)
 
     def guid_as_string(self, guid_blob):