allow_remaining

diff --git a/source4/scripting/python/samba/netcmd/ldapcmp.py b/source4/scripting/python/samba/netcmd/ldapcmp.py
index 8398205e4badefd096076f7169fd91f977f3d62d..338d744f121c996f718f7b50b8411630c0ffb92e 100644 (file)
--- a/source4/scripting/python/samba/netcmd/ldapcmp.py
+++ b/source4/scripting/python/samba/netcmd/ldapcmp.py
@@ -220,7 +220,7 @@ class LDAPBase(object):
     def get_descriptor_sddl(self, object_dn):
         res = self.ldb.search(base=object_dn, scope=SCOPE_BASE, attrs=["nTSecurityDescriptor"])
         desc = res[0]["nTSecurityDescriptor"][0]
-        desc = ndr_unpack(security.descriptor, desc)
+        desc = ndr_unpack(security.descriptor, desc,allow_remaining=True)
         return desc.as_sddl(self.domain_sid)
 
     def guid_as_string(self, guid_blob):