domain_update: make use of '"CN"' in sddl instead of using an explicit SID

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>

diff --git a/python/samba/domain_update.py b/python/samba/domain_update.py
index eeee5e96035c5b422fa26b2de762c9f69e2e8373..3fca10d5cccd4f92d9aff0f261248369db1e1312 100644 (file)
--- a/python/samba/domain_update.py
+++ b/python/samba/domain_update.py
@@ -327,7 +327,7 @@ objectClass: msTPM-InformationObjectsContainer
             return
         self.raise_if_not_fix(op)
 
-        ace = "(OA;;CR;3e0f7e18-2c7a-4c10-ba82-4d926db99a3e;;%s-522)" % str(self.domain_sid)
+        ace = "(OA;;CR;3e0f7e18-2c7a-4c10-ba82-4d926db99a3e;;CN)"
 
         res = self.samdb.search(base=self.domain_dn,
                                 scope=ldb.SCOPE_BASE,