sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-07-28 11:42:03 +03:00
Code Activity

provision: Set the security descriptor while creating partitions

Browse Source 
With Matthieu's patch, the setting of security descriptor on
partition dn at create time works correctly.

Autobuild-User: Amitay Isaacs <amitay@samba.org>
Autobuild-Date: Wed Nov 16 08:54:25 CET 2011 on sn-devel-104
This commit is contained in:
Amitay Isaacs
2011-11-16 11:18:18 +11:00
committed by Amitay Isaacs
parent b91dd516b5
commit 8507adb8d0
2 changed files with 4 additions and 12 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
source4/scripting/python/samba/provision/sambadns.py
View File

@ -49,13 +49,6 @@ def modify_ldif(ldb, ldif_file, subst_vars, controls=["relax:0"]):
data = read_and_sub_file(ldif_file_path, subst_vars)
ldb.modify_ldif(data, controls)
def set_security_descriptor(samdb, dn_str, descriptor):
msg = ldb.Message()
msg.dn = ldb.Dn(samdb, dn_str)
msg["nTSecurityDescriptor"] = ldb.MessageElement(descriptor,
ldb.FLAG_MOD_REPLACE, "nTSecurityDescriptor")
samdb.modify(msg, controls=["relax:0"])
def setup_ldb(ldb, ldif_path, subst_vars):
"""Import a LDIF a file into a LDB handle, optionally substituting
variables.
@ -224,16 +217,13 @@ class SRVRecord(dnsp.DnssrvRpcRecord):
def setup_dns_partitions(samdb, domainsid, domaindn, forestdn, configdn, serverdn):
domainzone_dn = "DC=DomainDnsZones,%s" % domaindn
forestzone_dn = "DC=ForestDnsZones,%s" % forestdn
descriptor = get_dns_partition_descriptor(domainsid)
add_ldif(samdb, "provision_dnszones_partitions.ldif", {
"DOMAINZONE_DN": domainzone_dn,
"FORESTZONE_DN": forestzone_dn,
"SECDESC" : b64encode(descriptor)
})
descriptor = get_dns_partition_descriptor(domainsid)
set_security_descriptor(samdb, domainzone_dn, descriptor)
set_security_descriptor(samdb, forestzone_dn, descriptor)
domainzone_guid = get_domainguid(samdb, domainzone_dn)
forestzone_guid = get_domainguid(samdb, forestzone_dn)