diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2012-10-16 13:08:22 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2012-10-18 17:10:58 +1100 |
| commit | 9eb022c8c65663425e60a10a12c2ec52c3017a59 (patch) | |
| tree | ac9de49562116ecce543befa92abdaae5f497bcc /source4/scripting/python/samba/netcmd | |
| parent | b557f34c80c9326d9aa887366501366bf3956ce1 (diff) | |
| download | samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.tar.gz samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.tar.xz samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.zip | |
provision: No longer use the wheel group in new AD Domains
The issue here is that if we set S-1-5-32-544 (administrators) to a
GID only, then users cannot force a mandetory profile to be owned by
administrators (which is a requirement).
There is no particularly useful reason for us to enforce this matching
a system group.
Andrew Bartlett
Diffstat (limited to 'source4/scripting/python/samba/netcmd')
| -rw-r--r-- | source4/scripting/python/samba/netcmd/domain.py | 5 |
1 files changed, 1 insertions, 4 deletions
diff --git a/source4/scripting/python/samba/netcmd/domain.py b/source4/scripting/python/samba/netcmd/domain.py index 6e3f35a0afc..4ba305c2713 100644 --- a/source4/scripting/python/samba/netcmd/domain.py +++ b/source4/scripting/python/samba/netcmd/domain.py @@ -186,8 +186,6 @@ class cmd_domain_provision(Command): help="choose 'root' unix username"), Option("--nobody", type="string", metavar="USERNAME", help="choose 'nobody' user"), - Option("--wheel", type="string", metavar="GROUPNAME", - help="choose 'wheel' privileged group"), Option("--users", type="string", metavar="GROUPNAME", help="choose 'users' group"), Option("--quiet", help="Be quiet", action="store_true"), @@ -237,7 +235,6 @@ class cmd_domain_provision(Command): ldapadminpass=None, root=None, nobody=None, - wheel=None, users=None, quiet=None, blank=None, @@ -393,7 +390,7 @@ class cmd_domain_provision(Command): krbtgtpass=krbtgtpass, machinepass=machinepass, dns_backend=dns_backend, dns_forwarder=dns_forwarder, dnspass=dnspass, root=root, nobody=nobody, - wheel=wheel, users=users, + users=users, serverrole=server_role, dom_for_fun_level=dom_for_fun_level, backend_type=ldap_backend_type, ldapadminpass=ldapadminpass, ol_mmr_urls=ol_mmr_urls, |