mirror of
https://github.com/samba-team/samba.git
synced 2025-07-02 20:59:09 +03:00
s4:Foreign security principals - Fix them up
I fixed them up to match with Windows Server 2003. I don't think that the creation of them in the provision script is needed so I put them in the "provision_users.ldif" file.
This commit is contained in:
@ -503,25 +503,6 @@ def setup_name_mappings(samdb, idmap, sid, domaindn, root_uid, nobody_uid,
|
||||
:param users_gid: gid of the UNIX users group.
|
||||
:param wheel_gid: gid of the UNIX wheel group."""
|
||||
|
||||
def add_foreign(self, domaindn, sid, desc):
|
||||
"""Add a foreign security principle."""
|
||||
add = """
|
||||
dn: CN=%s,CN=ForeignSecurityPrincipals,%s
|
||||
objectClass: top
|
||||
objectClass: foreignSecurityPrincipal
|
||||
description: %s
|
||||
""" % (sid, domaindn, desc)
|
||||
# deliberately ignore errors from this, as the records may
|
||||
# already exist
|
||||
for msg in self.parse_ldif(add):
|
||||
self.add(msg[1])
|
||||
|
||||
add_foreign(samdb, domaindn, "S-1-5-7", "Anonymous")
|
||||
add_foreign(samdb, domaindn, "S-1-1-0", "World")
|
||||
add_foreign(samdb, domaindn, "S-1-5-2", "Network")
|
||||
add_foreign(samdb, domaindn, "S-1-5-18", "System")
|
||||
add_foreign(samdb, domaindn, "S-1-5-11", "Authenticated Users")
|
||||
|
||||
idmap.setup_name_mapping("S-1-5-7", idmap.TYPE_UID, nobody_uid)
|
||||
idmap.setup_name_mapping("S-1-5-32-544", idmap.TYPE_GID, wheel_gid)
|
||||
|
||||
|
Reference in New Issue
Block a user