diff options
| author | Andrew Bartlett <abartlet@samba.org> | 2012-10-16 13:08:22 +1100 |
|---|---|---|
| committer | Andrew Bartlett <abartlet@samba.org> | 2012-10-18 17:10:58 +1100 |
| commit | 9eb022c8c65663425e60a10a12c2ec52c3017a59 (patch) | |
| tree | ac9de49562116ecce543befa92abdaae5f497bcc /source4/scripting/bin | |
| parent | b557f34c80c9326d9aa887366501366bf3956ce1 (diff) | |
| download | samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.tar.gz samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.tar.bz2 samba-9eb022c8c65663425e60a10a12c2ec52c3017a59.zip | |
provision: No longer use the wheel group in new AD Domains
The issue here is that if we set S-1-5-32-544 (administrators) to a
GID only, then users cannot force a mandetory profile to be owned by
administrators (which is a requirement).
There is no particularly useful reason for us to enforce this matching
a system group.
Andrew Bartlett
Diffstat (limited to 'source4/scripting/bin')
| -rwxr-xr-x | source4/scripting/bin/samba_upgradedns | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/source4/scripting/bin/samba_upgradedns b/source4/scripting/bin/samba_upgradedns index 8304134161..ba597cfa07 100755 --- a/source4/scripting/bin/samba_upgradedns +++ b/source4/scripting/bin/samba_upgradedns @@ -91,7 +91,7 @@ def fix_names(pnames): names.domaindn = pnames.domaindn[0] names.configdn = pnames.configdn[0] names.schemadn = pnames.schemadn[0] - names.wheel_gid = pnames.wheel_gid[0] + names.root_gid = pnames.root_gid names.serverdn = str(pnames.serverdn) return names |