X-Git-Url: http://git.samba.org/samba.git/?p=ira%2Fwip.git;a=blobdiff_plain;f=source4%2Fscripting%2Fpython%2Fsamba%2F__init__.py;h=06e276c2d0765afadb6913be81e8bfa3158eb807;hp=52788623012a6f41dd2091b8cbb9d065136b8d60;hb=992d35d38a95280dfa18f0ad5f518d2b8342c7dc;hpb=b2e91d41194abcc7abc803fc3dc66eb635fcbd25

diff --git a/source4/scripting/python/samba/__init__.py b/source4/scripting/python/samba/__init__.py
index 52788623012..06e276c2d07 100644
--- a/source4/scripting/python/samba/__init__.py
+++ b/source4/scripting/python/samba/__init__.py
@@ -103,18 +103,25 @@ class Ldb(ldb.Ldb):
             if nosync_p is not None and nosync_p == true:
                 flags |= FLG_NOSYNC
 
+        self.set_create_perms()
+
         if url is not None:
             self.connect(url, flags, options)
 
-    def set_credentials(self, credentials):
-        glue.ldb_set_credentials(self, credentials)
-
     def set_session_info(self, session_info):
         glue.ldb_set_session_info(self, session_info)
 
+    def set_credentials(self, credentials):
+        glue.ldb_set_credentials(self, credentials)
+
     def set_loadparm(self, lp_ctx):
         glue.ldb_set_loadparm(self, lp_ctx)
 
+    def set_create_perms(self, perms=0600):
+        # we usually want Samba databases to be private. If we later find we
+        # need one public, we will have to change this here
+        super(Ldb, self).set_create_perms(perms)
+
     def searchone(self, attribute, basedn=None, expression=None, 
                   scope=ldb.SCOPE_BASE):
         """Search for one attribute as a string.