7 Commits

Author	SHA1	Message	Date
Nadezhda Ivanova	a38d04a7a8	s4-tools: Added --sddl option, which allows the user to add an ACE to an object's security descriptor in SDDL format ... Useful for testing purposes. Autobuild-User: Nadezhda Ivanova <nivanova@samba.org> Autobuild-Date: Thu Feb 10 15:28:04 CET 2011 on sn-devel-104	2011-02-10 15:28:04 +01:00
Andrew Tridgell	4cb423f527	s4-python: python is not always in /usr/bin ... Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org>	2010-06-24 18:46:57 +10:00
Jelmer Vernooij	7a6f1c7842	s4-python: Fix formatting, use standard convention to call instance methods.	2010-04-08 23:20:36 +02:00
Jelmer Vernooij	d7a46ee129	s4-python: Simplify code, improve formatting.	2010-04-08 23:20:36 +02:00
Jelmer Vernooij	479fd9c03f	s4-net: Simplify SamDB connect code.	2010-04-08 12:21:35 +02:00
Jelmer Vernooij	13a6aee591	s4-python: Remove duplicate definition of GUID_DRS_* constants.	2010-04-03 23:47:25 +02:00
Nadezhda Ivanova	a212c1dedb	Added a net acl ds command for modification of ACLs on directory objects ... At present the command supports only addition of control access rigts, done so DRS access checks can be tested. It will be expanded to deal with most ways to modify and view a DS ACL. Shifted commands a bit. What used to be net acl is now "net acl nt" as apposed to this, which is "net acl ds" ./bin/net acl ds set --help Usage: set --objectdn=objectdn --car=control right --action=[deny|allow] --trusteedn=trustee-dn Options: -h, --help show this help message and exit --host=HOST LDB URL for database or target server --car=CAR The access control right to allow or deny --action=ACTION Deny or allow access --objectdn=OBJECTDN DN of the object whose SD to modify --trusteedn=TRUSTEEDN DN of the entity that gets access Samba Common Options: -s FILE, --configfile=FILE Configuration file Credentials Options: --simple-bind-dn=DN DN to use for a simple bind --password=PASSWORD Password -U USERNAME, --username=USERNAME Username -W WORKGROUP, --workgroup=WORKGROUP Workgroup -N, --no-pass Don't ask for a password -k KERBEROS, --kerberos=KERBEROS Use Kerberos	2010-03-16 13:37:48 +02:00