The Lemur Gots to Get Loco

Tongue Man

Yeoun Man

Never Been in Love

Whooooooo-eeeeeee!!!

What's Creepier than a Robot Snake?

A robot snake in your swimming pool.  I don't know about you guys, but I'll be checking my toilet for one of these every time I sit down now.

Maybe that's just me.

I probably shouldn't have said that out loud.

Joe Cocker for the Narcotic-Impaired

The Happiest Day of Her Life

What Androids Dream Of

Okay, Last SDDL Post

I just wanted to really quick apologize to anyone who followed the broken link over the last couple of days from the old post to try to get to the Python SDDL post.  

Due to a misreading of the SDDL specification I didn't realize that the O: and G: sections could exist simultaneously in the same string with the D: or S: sections.

Anyway, the upshot is that this module parses SDDL strings much better, and now supports the other formats as well.

More Fun with SDDL, Python Style!

It seems like I still get a couple of hits a week from people looking for SDDLTranslate.exe, so I decided to update it.  Win32::SDDL was my first and only object-oriented Perl module, but lately I've discovered that making OO modules is much easier in Python (don't get me wrong, I still love Perl, but where it's better, it's better).

So let's get down to the nitty gritty:

SDDL.py is the Python module that makes this work.  

All SDDL.SDDL objects have the following attributes:

sddl_string: the SDDL string that was passed to initialize the object.

target: If the target is a service, set this to 'service'

sddl_type: the type of string, D (DACL), S (SACL)

acl: a list of SDDL.ACE objects representing Access Control Entries if the type is DACL or SACL, empty if the type is Owner or Group

owner_sid: the sid of the owner

owner_account: the account name of the owner

group_sid: the sid of the group

group_account: the account name of the group

ACCESS: a dictionary of constants used in SDDL, updated to reflect the target type

All SDDL.ACE objects in the acl attribute have the following attributes:

ace_string: the string contained between the parentheses before parsing

flags: the translated flags indicated in the ace_string.   Usually blank.

perms: the translated perms indicated in the ace_string.

ace_type: allow, deny, etc.

object_type: can be the GUID of the object type.  Usually blank.

inherited_type: GUID of object types inherited.  Usually blank.

trustee: The credential being allowed or denied access.  This is either translated from one of the constants or obtained by converting the SID string in the ace_string to an account name.

The new version of SDDLTranslate now handles SDDL strings in the format O: and G: as well as the DACL and SACL formats.

You will need to install Python if you haven't already.  I recommend ActivePython.  You'll also want to download Tim Golden's wmi module.

In case you missed the links, that's:

http://www.tojo2000.com/SDDL/SDDL.py

and

http://www.tojo2000.com/SDDL/SDDLTranslate.py

Note: I don't have a good replacement for PerlApp that works with Python, so I'll only be releasing the .py files.  If you want, you can use py2exe to convert the program to a packaged EXE, but you'll end up with a directory full of files.  I do use py2exe, and it works, but I'll leave that as an exercise up to the reader.  Shoot me an email if you can't get it to work and I'll help you out if I have time.

Landmark Death Penalty Ruling: "It's Bad-ass"

Supreme Court Rules Death Penalty Is 'Totally Badass'

Bush Surveys Destruction, Lends Support

Bush Tours America To Survey Damage Caused By His Disastrous Presidency

How to Confuse an Idiot

An Old Classic from Trigger Happy TV