sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-08-04 08:22:08 +03:00
Code Activity

s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format

Browse Source 
Useful for testing purposes.

Autobuild-User: Nadezhda Ivanova <nivanova@samba.org>
Autobuild-Date: Thu Feb 10 15:28:04 CET 2011 on sn-devel-104
This commit is contained in:
Nadezhda Ivanova
2011-02-10 15:04:23 +02:00
parent 6d3625de67
commit a38d04a7a8
1 changed files with 8 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
source4/scripting/python/samba/netcmd/dsacl.py
View File

@ -79,6 +79,8 @@ class cmd_ds_acl_set(Command):
type="string"), type="string"),
Option("--trusteedn", help="DN of the entity that gets access", Option("--trusteedn", help="DN of the entity that gets access",
type="string"), type="string"),
Option("--sddl", help="An ACE or group of ACEs to be added on the object",
type="string"),
] ]
def find_trustee_sid(self, samdb, trusteedn): def find_trustee_sid(self, samdb, trusteedn):
@ -133,13 +135,13 @@ class cmd_ds_acl_set(Command):
print "new descriptor for %s:" % object_dn print "new descriptor for %s:" % object_dn
print desc_sddl print desc_sddl
def run(self, car, action, objectdn, trusteedn, def run(self, car, action, objectdn, trusteedn, sddl,
host=None, credopts=None, sambaopts=None, versionopts=None): host=None, credopts=None, sambaopts=None, versionopts=None):
lp = sambaopts.get_loadparm() lp = sambaopts.get_loadparm()
creds = credopts.get_credentials(lp) creds = credopts.get_credentials(lp)
if (car is None or action is None or objectdn is None or if sddl is None and (car is None or action is None
trusteedn is None): or objectdn is None or trusteedn is None):
return self.usage() return self.usage()
samdb = SamDB(url=host, session_info=system_session(), samdb = SamDB(url=host, session_info=system_session(),
@ -159,7 +161,9 @@ class cmd_ds_acl_set(Command):
'ro-repl-secret-sync' : GUID_DRS_RO_REPL_SECRET_SYNC, 'ro-repl-secret-sync' : GUID_DRS_RO_REPL_SECRET_SYNC,
} }
sid = self.find_trustee_sid(samdb, trusteedn) sid = self.find_trustee_sid(samdb, trusteedn)
if action == "allow": if sddl:
new_ace = sddl
elif action == "allow":
new_ace = "(OA;;CR;%s;;%s)" % (cars[car], str(sid)) new_ace = "(OA;;CR;%s;;%s)" % (cars[car], str(sid))
elif action == "deny": elif action == "deny":
new_ace = "(OD;;CR;%s;;%s)" % (cars[car], str(sid)) new_ace = "(OD;;CR;%s;;%s)" % (cars[car], str(sid))