From: Stefan Metzmacher <metze@samba.org>
Date: Mon, 13 Mar 2023 10:57:14 +0000 (+0100)
Subject: domain_update: make use of '"CN"' in sddl instead of using an explicit SID
X-Git-Tag: talloc-2.4.1~1327
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=c87f2606ae3a2dbca369b8b94d2255371a963226;p=thirdparty%2Fsamba.git

domain_update: make use of '"CN"' in sddl instead of using an explicit SID

Signed-off-by: Stefan Metzmacher <metze@samba.org>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
---

diff --git a/python/samba/domain_update.py b/python/samba/domain_update.py
index eeee5e96035..3fca10d5ccc 100644
--- a/python/samba/domain_update.py
+++ b/python/samba/domain_update.py
@@ -327,7 +327,7 @@ objectClass: msTPM-InformationObjectsContainer
             return
         self.raise_if_not_fix(op)
 
-        ace = "(OA;;CR;3e0f7e18-2c7a-4c10-ba82-4d926db99a3e;;%s-522)" % str(self.domain_sid)
+        ace = "(OA;;CR;3e0f7e18-2c7a-4c10-ba82-4d926db99a3e;;CN)"
 
         res = self.samdb.search(base=self.domain_dn,
                                 scope=ldb.SCOPE_BASE,