s4:dsdb: Use control to relax constratints on acl ldb module

Add DSDB_CONTROL_SAMR_CREATE_COMPUTER_ACCOUNT to ldb request when creating
a computer account through SAM-R to relax the constraints on dNSHostName and
servicePrincipalName attributes.

Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>
dsdb-tests: Improve test for SeMachineAccountPrivilege

On quota exceeded error, windows machines return NT_STATUS_QUOTA_EXCEEDED,
while samba returns NT_STATUS_ACCESS_DENIED. Handle both values when checking
the returned error code.

Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>
dsdb-tests: Improve test for SeMachineAccountPrivilege

Add reference security descriptor created by Windows Server 2008 R2

Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>
dsdb-tests: Format fixes for SeMachineAccountPrivilege test

Signed-off-by: Samuel Cabrero <samuelcabrero@kernevil.me>