From 9eb022c8c65663425e60a10a12c2ec52c3017a59 Mon Sep 17 00:00:00 2001 From: Andrew Bartlett Date: Tue, 16 Oct 2012 13:08:22 +1100 Subject: provision: No longer use the wheel group in new AD Domains The issue here is that if we set S-1-5-32-544 (administrators) to a GID only, then users cannot force a mandetory profile to be owned by administrators (which is a requirement). There is no particularly useful reason for us to enforce this matching a system group. Andrew Bartlett --- source4/scripting/python/samba/tests/posixacl.py | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) (limited to 'source4/scripting/python/samba/tests') diff --git a/source4/scripting/python/samba/tests/posixacl.py b/source4/scripting/python/samba/tests/posixacl.py index 066cc97373..78a07f7c94 100644 --- a/source4/scripting/python/samba/tests/posixacl.py +++ b/source4/scripting/python/samba/tests/posixacl.py @@ -147,7 +147,7 @@ class PosixAclMappingTests(TestCase): (LA_uid,LA_type) = s4_passdb.sid_to_id(LA_sid) self.assertEquals(LA_type, idmap.ID_TYPE_UID) (BA_gid,BA_type) = s4_passdb.sid_to_id(BA_sid) - self.assertEquals(BA_type, idmap.ID_TYPE_GID) + self.assertEquals(BA_type, idmap.ID_TYPE_BOTH) (SO_gid,SO_type) = s4_passdb.sid_to_id(SO_sid) self.assertEquals(SO_type, idmap.ID_TYPE_BOTH) (SY_gid,SY_type) = s4_passdb.sid_to_id(SY_sid) @@ -194,7 +194,7 @@ class PosixAclMappingTests(TestCase): # user::rwx # user:root:rwx (selftest user actually) # group::rwx -# group:wheel:rwx +# group:Local Admins:rwx # group:3000000:r-x # group:3000001:rwx # group:3000002:r-x @@ -274,7 +274,7 @@ class PosixAclMappingTests(TestCase): (LA_uid,LA_type) = s4_passdb.sid_to_id(LA_sid) self.assertEquals(LA_type, idmap.ID_TYPE_UID) (BA_gid,BA_type) = s4_passdb.sid_to_id(BA_sid) - self.assertEquals(BA_type, idmap.ID_TYPE_GID) + self.assertEquals(BA_type, idmap.ID_TYPE_BOTH) (SO_gid,SO_type) = s4_passdb.sid_to_id(SO_sid) self.assertEquals(SO_type, idmap.ID_TYPE_BOTH) (SY_gid,SY_type) = s4_passdb.sid_to_id(SY_sid) @@ -327,7 +327,7 @@ class PosixAclMappingTests(TestCase): # user::rwx # user:root:rwx (selftest user actually) # group::rwx -# group:wheel:rwx +# group:Local Admins:rwx # group:3000000:r-x # group:3000001:rwx # group:3000002:r-x -- cgit