From 476a172f15d98adad63e439497f3e1248b786606 Mon Sep 17 00:00:00 2001 From: Stefan Metzmacher Date: Thu, 29 Nov 2012 09:57:44 +0100 Subject: [PATCH] s4:samba-tool/gpo: set the same security.descriptor type as the Windows GUI Signed-off-by: Stefan Metzmacher --- source4/scripting/python/samba/netcmd/gpo.py | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/source4/scripting/python/samba/netcmd/gpo.py b/source4/scripting/python/samba/netcmd/gpo.py index 23b562eb6358..675b7b2e2910 100644 --- a/source4/scripting/python/samba/netcmd/gpo.py +++ b/source4/scripting/python/samba/netcmd/gpo.py @@ -986,8 +986,12 @@ class cmd_create(Command): # Create a file system security descriptor domain_sid = security.dom_sid(self.samdb.get_domain_sid()) - sddl = dsacl2fsacl(ds_sd, domain_sid) - fs_sd = security.descriptor.from_sddl(sddl, domain_sid) + fs_sd = dsacl2fsacl(ds_sd, domain_sid, as_sddl=False) + fs_sd.type = security.SEC_DESC_SELF_RELATIVE + fs_sd.type |= security.SEC_DESC_DACL_PROTECTED + fs_sd.type |= security.SEC_DESC_DACL_AUTO_INHERITED + fs_sd.type |= security.SEC_DESC_DACL_AUTO_INHERIT_REQ + fs_sd.type |= security.SEC_DESC_SACL_AUTO_INHERITED # Copy GPO directory create_directory_hier(conn, sharepath) -- 2.34.1