diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2012-10-16 13:08:22 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2012-10-18 17:10:58 +1100 |
| commit | 9eb022c8c65663425e60a10a12c2ec52c3017a59 (patch) | |
| tree | ac9de49562116ecce543befa92abdaae5f497bcc /source4/scripting/python/samba/upgrade.py | |
| parent | b557f34c80c9326d9aa887366501366bf3956ce1 (diff) | |
| download | samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.tar.gz samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.tar.xz samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.zip | |
provision: No longer use the wheel group in new AD Domains
The issue here is that if we set S-1-5-32-544 (administrators) to a
GID only, then users cannot force a mandetory profile to be owned by
administrators (which is a requirement).
There is no particularly useful reason for us to enforce this matching
a system group.
Andrew Bartlett
Diffstat (limited to 'source4/scripting/python/samba/upgrade.py')
| -rw-r--r-- | source4/scripting/python/samba/upgrade.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source4/scripting/python/samba/upgrade.py b/source4/scripting/python/samba/upgrade.py index 194983c02a0..786bb6518ee 100644 --- a/source4/scripting/python/samba/upgrade.py +++ b/source4/scripting/python/samba/upgrade.py @@ -908,7 +908,7 @@ Please fix this account before attempting to upgrade again if result.server_role == "active directory domain controller": setsysvolacl(result.samdb, result.paths.netlogon, result.paths.sysvol, - result.paths.root_uid, result.paths.wheel_gid, + result.paths.root_uid, result.paths.root_gid, security.dom_sid(result.domainsid), result.names.dnsdomain, result.names.domaindn, result.lp, use_ntvfs) |