1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00

netcmd: models: add default SDDL to group_msa_membership

LA can be used for the administrator and Windows will expand that on save, making the group_sddl method redundant.

Signed-off-by: Rob van der Linde <rob@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
This commit is contained in:
Rob van der Linde 2024-02-19 14:47:57 +13:00 committed by Andrew Bartlett
parent 9f167b9b77
commit 4e31942d1f

View File

@ -99,7 +99,8 @@ class GroupManagedServiceAccount(User):
"""A GroupManagedServiceAccount is a type of User with additional fields."""
managed_password_interval = IntegerField("msDS-ManagedPasswordInterval")
dns_host_name = StringField("dNSHostName")
group_msa_membership = SDDLField("msDS-GroupMSAMembership")
group_msa_membership = SDDLField("msDS-GroupMSAMembership",
default="O:BAD:(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;LA)")
managed_password_id = BinaryField("msDS-ManagedPasswordId",
readonly=True, hidden=True)
managed_password_previous_id = BinaryField("msDS-ManagedPasswordPreviousId",