r24462: - Removing all ACEs was causing removal of the DACL entirely. Win2000 ignored
commit319df380e579fd860348a8f08a584e13161dde9d
authorDerrell Lipman <derrell@samba.org>
Wed, 15 Aug 2007 13:44:44 +0000 (15 13:44 +0000)
committerGerald (Jerry) Carter <jerry@samba.org>
Wed, 10 Oct 2007 17:29:50 +0000 (10 12:29 -0500)
tree07a9918cdad47abdb334828c05c95fca3217505e
parent0fecd8a0c3aaa64e137d2efd3f9cc7705837ea2a
r24462: - Removing all ACEs was causing removal of the DACL entirely.  Win2000 ignored
  the request, presumably due to the PROTECTED flag not being set.  Setting
  that flag (in make_sec_desc()) has much wider implications than just to
  libsmbclient, so instead of modifying that, we'll remove security
  descriptors by setting the number of ACEs to zero.  At some point, we might
  want to look into whether we should actually be setting the PROTECTED flag
  in the DACL.

  Reference http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/distrib/dsce_ctl_qxju.mspx?mfr=true

Derrell
source/libsmb/libsmbclient.c