byddlmZddlZddlZddlZddlmZmZddl m Z ddl m Z ddl mZddlmZmZddlmZddlmZmZmZmZdd lmZd d lmZGd d eZGddeZGddeZGddeZ GddeZ!GddeZ"GddeZ#GddeZ$dS)N) check_callCalledProcessError) attrgetter)system_session)SamDB) credentialsdsdb)Net)Command CommandError SuperCommandOption) get_bytes)commonceZdZdZdZedddedded d e ed d e edde edde edde edde edde edde edde edde edde ed d!e ed"d#e ed$d%e gZd&gZe j e j e j d'Z d*d)Zd(S)+cmd_addaAdd a new contact. This command adds a new contact to the Active Directory domain. The name of the new contact can be specified by the first argument 'contactname' or the --given-name, --initial and --surname arguments. If no 'contactname' is given, contact's name will be made up of the given arguments by combining the given-name, initials and surname. Each argument is optional. A dot ('.') will be appended to the initials automatically. Example1: samba-tool contact add "James T. Kirk" --job-title=Captain \ -H ldap://samba.samdom.example.com -UAdministrator%Passw1rd The example shows how to add a new contact to the domain against a remote LDAP server. Example2: samba-tool contact add --given-name=James --initials=T --surname=Kirk The example shows how to add a new contact to the domain against a local server. The resulting name is "James T. Kirk". z%prog [contactname] [options]-H--URL%LDB URL for database or target serverURLHhelptypemetavardestz--ouzDN of alternative location (with or without domainDN counterpart) in which the new contact will be created. E.g. 'OU='. Default is the domain base.rr --surnamezContact's surname --given-namezContact's given name --initialszContact's initials--display-namezContact's display namez --job-titlezContact's job titlez --departmentzContact's departmentz --companyzContact's companyz --descriptionzContact's description--mail-addresszContact's email addressz--internet-addresszContact's home pagez--telephone-numberzContact's phone numberz--mobile-numberzContact's mobile phone numberz--physical-delivery-officezContact's office locationzfullcontactname? sambaoptscredopts versionoptsNc`|}||} t|t||}|||||| | | | | ||||||}n"#t $r}t d|d}~wwxYw|jd|zdS)Nurl session_inforlp)fullcontactnameousurname givennameinitials displaynamejobtitle departmentcompany description mailaddressinternetaddresstelephonenumber mobilenumberphysicaldeliveryofficezFailed to add contactz Contact '%s' added successfully ) get_loadparmget_credentialsrr newcontact Exceptionr outfwrite)selfr-r%r&r'rr.r/ given_namer1 display_name job_titler4r5r6 mail_addressinternet_addresstelephone_number mobile_numberphysical_delivery_officer,credssamdbret_namees 6/usr/lib/python3/dist-packages/samba/netcmd/contact.pyrunz cmd_add.runjs* # # % %((,, ;a'5'7'7&+!!!E'' /$!("%'( 0 0*'?(AAHH  ; ; ;6:: : ; ;hFGGGGGsAA// B9B  B)NNNNNNNNNNNNNNNNNNN__name__ __module__ __qualname____doc__synopsisrstr takes_options takes_argsoptions SambaOptionsCredentialsOptionsVersionOptionstakes_optiongroupsrPrOrr+s0/H tW#JS 2 2 2v3     {!43???~$:EEE|"6SAAA&>SIII}#8sCCC~$:EEE{!43???%<3GGG&?cJJJ#*?cJJJ#*BMMM 3    +/   /M8%%J).-!!!%)'0H0H0H0H0H0Hr`rczeZdZdZdZedddeddgZd gZe j e j e j d Z d d Zd S) cmd_deletea4Delete a contact. This command deletes a contact object from the Active Directory domain. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. Example: samba-tool contact delete Contact1 \ -H ldap://samba.samdom.example.com \ --username=Administrator --password=Passw1rd The example shows how to delete a contact in the domain against a remote LDAP server. %prog [options]rrrrrr contactnamer$Nc|}||d}t|t||}|} t j} dt j|z} | drLd} t j } | |} n'#t$r} td|d| d} ~ wwxYw || | | d g } | d j}n #t $rtd |zwxYwt#| d krUt%| t'd D]$}|jd|jz%td|z ||n%#t$r} td|z| d} ~ wwxYw|jd|zdS)NTfallback_machiner)!(&(objectClass=contact)(name=%s))CN=(objectClass=contact) Invalid dn "": dnbasescope expressionattrsrUnable to find contact "%s"rkey found: %s FMultiple results for contact '%s' Please specify the contact's full DNzFailed to remove contact "%s"zDeleted contact %s )r<r=rr domain_dnldb SCOPE_SUBTREE binary_encodeupper startswith SCOPE_BASEnormalize_dn_in_domainr?r searchrm IndexErrorlensortedrr@rAdelete)rBrdr%r&r'rr,rKrLbase_dnrpfilterrNres contact_dnmsgs rOrPzcmd_delete.runsd  # # % %((d(CC!#1#3#3"'//##!5#K001      ) )% 0 0 5,FNE 566{CC 5 5 5"l$/KK$4555 5 N,,G%**0&*V--CQJJ N N N< LMM M N s88a<<cz$'7'7888 8 8   67777 F* +,, , Q LL $ $ $ $ Q Q Q>LaPP P Q .<=====s<8C C2C--C26'DD;'F== GGGNNNNrQr_r`rOrbrbs /H t;    M J).- 0>0>0>0>0>0>r`rbc eZdZdZdZedddedded d d e ed ddddgZej ej ej dZ ddZ dS)cmd_listzList all contacts. z%prog [options]rrrrrrz-bz --base-dnzSpecify base DN to use.rz --full-dnfull_dnF store_truez.Display contact's full DN instead of the name.)rdefaultactionrr$Ncb|}||d}t|t||} | } |r| |} | | tjddg} t| dkrdS|rEt| td D]$} |j d | jz%dS| D]6} | dd } |j d | z7dS) NTrfr)rjname)rprqrrrrmrtz%s )idx)r<r=rrrxrrryrzrrrr@rArmget)rBr%r&r'rrrr,rKrL search_dnrr contact_names rOrPz cmd_list.runsT # # % %((d(CC!#1#3#3"' OO%%  >44W==Ill9!$!2&="(++ HHMM F  cz$'7'7888 1 1 0000 F 3 3C776q711L IOOF\1 2 2 2 2 3 3r`)NNNNNF)rRrSrTrUrVrrWrXrZr[r\r]r^rPr_r`rOrrs!H t;     t[-    {"D  F F FM$).- "3"3"3"3"3"3r`rceZdZdZdZedddedded d e gZd gZe j e j e j d Z ddZdS)cmd_editaHModify a contact. This command will allow editing of a contact object in the Active Directory domain. You will then be able to add or change attributes and their values. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact edit Contact1 -H ldap://samba.samdom.example.com \ -U Administrator --password=Passw1rd Example1 shows how to edit a contact's attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact edit CN=Contact2,OU=people,DC=samdom,DC=example,DC=com Example2 shows how to edit a contact's attributes in the domain against a local server. The contact, which is located in the 'people' OU, is specified by the full distinguished name. Example3: samba-tool contact edit Contact3 --editor=nano Example3 shows how to edit a contact's attributes in the domain against a local server using the 'nano' editor. rcrrrrrrz--editorzQEditor to use instead of the system default, or 'vi' if no system default is set.rrdr$Nc|}||d}t|t||} | } t j} dt j|z} | drLd} t j } | |} n'#t$r} td|d| d} ~ wwxYw | | | | }|d j}n #t $rtd |zwxYwt#|d krUt%|t'd D]$}|jd|jz%td|z|D]}t-j| |}|#t0jd}|d}t7jd5}|t;|| t?||j gn"#tB$r} tCd| d} ~ wwxYwtE|j 5}|#}dddn #1swxYwYdddn #1swxYwY| $|}tK|d }| &||}t#|d kr|jddS | '|n%#t$r} td|z| d} ~ wwxYw|jd|zdS)NTrfr)rhrirjrkrl)rorprqrrsrrmrtrvrwEDITORviz.tmp)suffixzERROR: zNothing to do zFailed to modify contact '%s': z#Modified contact '%s' successfully )(r<r=rrrxryrzr{r|r}r~rr?r rrmrrrrr@rArget_ldif_for_editorosenvironrtempfileNamedTemporaryFilerflushrrropenread parse_ldifnextmsg_diffmodify)rBrdr%r&r'reditorr,rKrLrrprrNrrr result_ldift_file edited_fileedited_message msgs_edited msg_edited res_msg_diffs rOrPz cmd_edit.runqsX # # % %((d(CC!.*:*:"'B000//##!5$[112      ) )% 0 0 5,FNE 566{CC 5 5 5"l$/KK$4555 5 N,,G%**022CQJJ N N N< LMM M N s88a<<cz$'7'7888 8 8   67777 F* +,, , 8 8C 4UC@@K~11>!F,F;;; 8v Y{33444 ; 45555);;;,Y:::;&+&&8+%0%5%5%7%7N888888888888888 8 8 8 8 8 8 8 8 8 8 8 8 8 8 8&&~66 +&&q) ~~c:66 |   ! ! IOO- . . . F " LL & & & & " " "@;N "" " " >LMMMMMs8C C2C--C26%DD987J50IJ5 I&I!!I&&J5=J J5J" "J5%J" &J55J9 <J9 2M M*M%%M*NNNNNrQr_r`rOrr6s##H/H t;     z;    M J).- KNKNKNKNKNKNr`rceZdZdZdZedddedded d ed gZd gZe j e j e j dZ ddZdS)cmd_showaDisplay a contact. This command displays a contact object with it's attributes in the Active Directory domain. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact show Contact1 -H ldap://samba.samdom.example.com \ -U Administrator --password=Passw1rd Example1 shows how to display a contact's attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact show CN=Contact2,OU=people,DC=samdom,DC=example,DC=com Example2 shows how to display a contact's attributes in the domain against a local server. The contact, which is located in the 'people' OU, is specified by the full distinguished name. Example3: samba-tool contact show Contact3 --attributes=mail,mobile Example3 shows how to display a contact's mail and mobile attributes. rcrrrrrrz --attributesz:Comma separated list of attributes, which will be printed. contact_attrs)rrrrdr$Nc|}||d}t|t||} | } t j} d} |r|d} dt j|z} | drLd} t j } | |} n'#t$r}td|d |d}~wwxYw | | | | | }|d j}n #t"$rtd |zwxYwt%|d krUt'|t)dD]$}|jd|jz%td|z|D]1}t/j| |}|j|2dS)NTrfr),rhrirjrkrl)rorqrprrrrsrrmrtrvzAMultiple results for contact '%s' Please specify the contact's DN)r<r=rrrxryrzsplitr{r|r}r~rr?r rrmrrrrr@rArr)rBrdr%r&r'rrr,rKrLrrprrrrNrrr contact_ldifs rOrPz cmd_show.runsR # # % %((d(CC!#1#3#3"'//##!  -!'',,E5#K001      ) )% 0 0 5,FNE 566{CC 5 5 5"l$/KK$4555 5 N,,G*0%*%*,,CQJJ N N N< LMM M N s88a<<cz$'7'7888 8 8   67777 A* +,, , * *C!5eSAAL IOOL ) ) ) ) * *s$C'' D 1DD &D66ErrQr_r`rOrrs""F/H t;     ~.#  % % % M J).- 4*4*4*4*4*4*r`rc|eZdZdZdZedddeddgZd d gZe j e j e j d Z dd Zd S)cmd_movea]Move a contact object to an organizational unit or container. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The name of the organizational unit or container can be specified as the distinguished name, with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact move Contact1 'OU=people' \ -H ldap://samba.samdom.example.com -U Administrator Example1 shows how to move a contact Contact1 into the 'people' organizational unit on a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact move Contact1 OU=Contacts,DC=samdom,DC=example,DC=com Example2 shows how to move a contact Contact1 into the OU=Contacts organizational unit on the local server. z-%prog [options]rrrrrrrd new_parent_dnr$Nc@|}||d}t|t||} | } t j} dt j|z} | drLd} t j } | |} n'#t$r} td|d| d} ~ wwxYw | | | | d g }|d j}n #t $rtd |zwxYwt#|d krUt%|t'd D]$}|jd|jz%td|z | |}n'#t$r} td|d| d} ~ wwxYwt j| t/|}|t#|d z || | ||n%#t$r} td|z| d} ~ wwxYw|jd|d|ddS)NTrfr)rhrirjrkrlrmrnrrsrrtrvrwzInvalid new_parent_dn "zFailed to move contact "%s"zMoved contact "z" into "z" )r<r=rrrxryrzr{r|r}r~rr?r rrmrrrrr@rADnrWremove_base_componentsadd_baserename)rBrdrr%r&r'rr,rKrLrrprrNrrrfull_new_parent_dnfull_new_contact_dns rOrPz cmd_move.runbs- # # % %((d(CC!#1#3#3"'//##!5#K001      ) )% 0 0 5,FNE 566{CC 5 5 5"l$/KK$4555 5 N,,G%**0&*V--CQJJ N N N< LMM M N s88a<<cz$'7'7888 8 8   67777 F* +,, , 3!&!=!=m!L!L   3 3 3, - qq 233 3 3"fUC OO<<223z??Q3FGGG$$%7888 O LL%8 9 9 9 9 O O O<{JANN N O $&8&8&8: ; ; ; ; ;sT8C C2C--C26'DD;'F== G!GG!I I:"I55I:rrQr_r`rOrr1s<?H t;    M 1J).- <;<;<;<;<;<;r`rc 0eZdZdZdZedddedded d e ed d e edde eddededddedde edde gZdgZe j e j e j dZ d dZdS)! cmd_renameaRename a contact and related attributes. This command allows to set the contact's name related attributes. The contact's new CN will be made up by combining the given-name, initials and surname. A dot ('.') will be appended to the initials automatically, if required. Use the --force-new-cn option to specify the new CN manually and the --reset-cn option to reset this changes. Use an empty attribute value to remove the specified attribute. The contactname specified on the command is the CN. The command may be run locally from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact rename "John Doe" --surname=Bloggs \ --force-new-cn=John Example1 shows how to change the surname ('sn' attribute) of a contact 'John Doe' to 'Bloggs' and change the CN to 'John' on the local server. Example2: samba-tool contact rename "J Doe" --given-name=John -H ldap://samba.samdom.example.com -U administrator Example2 shows how to rename the given name of a contact 'J Doe' to 'John'. The contact's cn will be renamed automatically, based on the given name, initials and surname, if the previous CN is the standard combination of the previous name attributes. The -H parameter is used to specify the remote target server. rcrrrrrrrz New surnamerr zNew given namer!z New initialsz--force-new-cnz^Specify a new CN (RDN) instead of using a combination of the given name, initials and surname.NEW_CN)rrrz --reset-cnzSet the CN (RDN) to the combination of the given name, initials and surname. Use this option to reset the changes made with the --force-new-cn option.r)rrr"zNew display namer#zNew email addressrdr$Nc | r| rtd| dkrtd|} || d}t|t || }t j||}dt j|z} | |t j |gd }|d }|j }n #t$rtd |zwxYw| }|d d }| | }n||||| }||}t|t|ko0t|t|kp| pt!| }t j|d|z}|||dkr|rtd|zt j}||_ |||d||||d||||d||||d| |||d| t)|d k}| |dkr|||r|||n9#t0$r,}|td|z|d}~wwxYw||r$|jd|d|d|d|rk|jd|z|D];}|dkr |j|d||r||ndd:dSdS) NzEIt is not allowed to specify --force-new-cn together with --reset-cn.z:Failed to rename contact - delete protected attribute 'CN'Trfr)rh)rsn givenNamecnr1 displayNamemailrnrrsr) old_attrsrCr1r/)rzCN=%szFailed to rename contact '%s' - can not set an empty CN (please use --force-new-cn to specify a different CN or --given-name, --initials or --surname to set name attributes)rrr1rrzFailed to rename contact "%s"zRenamed CN of contact "z" from "z" to "z" successfully zEFollowing attributes of contact "%s" have been changed successfully: rmz: z [removed] )r r<r=rrryrrxr{rrzrmrparentfullname_from_namesrWboolrMessageprepare_attr_replacertransaction_startrrr?transaction_canceltransaction_commitr@rAkeys)rBrdr&r%r'rr/rCr1 force_new_cnrDrFreset_cnr,rKrLrxrr old_contactrcontact_parent_dnold_cnnew_cn excepted_cnmust_change_cnnew_contact_dnrcontact_attributes_changedrNattrs rOrPzcmd_rename.runs  /@@F//+/FF VF 3:f++[)9)999"9&*<&8&8 w'788 1222 R<LaPP P Q   """  N IOOO0; VVVVVVM N N N & F IOO69DF G G G%**,, F F4<< ddd,T25DM$4G4G8C5D5D!EFFFF  F F F Fs$24C''D/3K## L-'LL) NNNNNNNNNNNrQr_r`rOrrs##J/H tW8e# / / / {!    ~$    |"    ? + + + |G#  $ $ $ &    '   3 M< J).-KOOS;?bFbFbFbFbFbFr`rceZdZdZiZeed<eed<eed<eed<eed<e ed<e ed<e ed <d S) cmd_contactzContact management.addcreatereditlistmoveshowrN) rRrSrTrU subcommandsrrbrrrrrr_r`rOrrRsK K#GIIK&JLLK"(**K"(**K"(**K"(**K&JLLKr`r)% samba.getoptgetoptrZryrr subprocessrroperatorr samba.authr samba.samdbrsambarr samba.netr samba.netcmdr r r r samba.commonrrrrrbrrrrrrr_r`rOrs& 55555555%%%%%% #"""""oHoHoHoHoHgoHoHoHdT>T>T>T>T>T>T>T>n?3?3?3?3?3w?3?3?3DFNFNFNFNFNwFNFNFNRo*o*o*o*o*wo*o*o*dm;m;m;m;m;wm;m;m;^pFpFpFpFpFpFpFpFd ) ) ) ) ), ) ) ) ) )r`