bZ2dZdZddlZddlZddlZddlZddlZddlmZddl m Z dZ dZ Gdd e Z d Zd Zd Zdd ZdZdZdZdZdZdZdZdZejZejZejZejZejZejZej Z ej!Z!ej"Z"ej#Z#ej$Z$ej%Z%ej&Z&ej'Z'ej(Z(ej)Z)ej*Z*ej+Z+ej,Z,ej-Z-ej.Z.ej/Z/ej0Z0ej1Z1dS)zSamba 4.restructuredTextN)_glue)Ldbcrddg}|D]}tjtjtjt |}tjtj|dr|cStd)z&Return the top level source directory.z../../..z ../../../..source4z)unable to find top level source directory)ospathnormpathjoindirname__file__exists RuntimeError)pathsptopdirs 0/usr/lib/python3/dist-packages/samba/__init__.pysource_tree_topdirr"s  'E !!"',,rwx/H/H!"L"LMM 7>>"',,vy99 : : MMM  B C CCcH t}n#t$rYdSwxYwdS)z?Return True if we are running from within the samba source treeFT)rr)rs rin_source_treer,s;#%% uu 4s  c^eZdZdZ d dZddejfdZdZdZ dZ d Z d d Z d d Z dS)raSimple Samba-specific LDB subclass that takes care of setting up the modules dir, credentials pointers, etc. Please note that this is intended to be for all Samba LDB files, not necessarily the Sam database. For Sam-specific helper functions see samdb.py. Nrch|||nO|tjtjd|||||||| || d}| |(| d} | | r|tjz}|d|||||dSdS)ahOpens a Samba Ldb file. :param url: Optional LDB URL to open :param lp: Optional loadparm object :param modules_dir: Optional modules directory :param session_info: Optional session information :param credentials: Optional credentials, defaults to anonymous. :param flags: Optional LDB flags :param options: Additional options (optional) This is different from a regular Ldb file in that the Samba-specific modules-dir is used by default and that credentials and session_info can be passed through (required by some modules). Nldbc$t|dSN)print)ltexts rmsgzLdb.__init__..msgcs $KKKKKrz ldb:nosynci)set_modules_dirrr r sambaparam modules_dirset_session_infoset_credentials set_loadparmregister_samba_handlersset_utf8_casefoldgetr FLG_NOSYNCset_create_permsconnect) selfurllpr$ session_info credentialsflagsoptionsr nosync_ps r__init__z Ldb.__init__>sB"  "   - - - -  ek.E.E.G.G!O!O P P P  #  ! !, / / /  "   - - - >   b ! ! ! $$&&&        >vvl++H##' e$$$ ? LLeW - - - - - ?rc*|||||g}t|dks|d|dSt|d|}t|dksJ|||S)aGSearch for one attribute as a string. :param basedn: BaseDN for the search. :param attribute: Name of the attribute :param expression: Optional search expression. :param scope: Search scope (defaults to base). :return: Value of attribute as a string or None if it wasn't found. rN)searchlensetschema_format_valuepop)r. attributebasedn expressionscoperesvaluess r searchonez Ldb.searchonetskk&%i[AA s88q==CF9-54SVI&''6{{a'' 6::<<@@@rct ||tjgd}n8#tj$r&}|j\}}|tjkrYd}~dSd}~wwxYw |D]}||jdgdS#tj$r&}|j\}}|tjkrYd}~dSd}~wwxYw)zErases user and computer objects from our AD. This is needed since the 'samldb' module denies the deletion of primary groups. Therefore all groups shouldn't be primary somewhere anymore. z+(|(objectclass=user)(objectclass=computer)))baserAattrsr@Nrelax:0)r9r SCOPE_SUBTREELdbErrorargsERR_NO_SUCH_OBJECTdeletedn)r.rNrBerrorerrnoestrr s rerase_users_computerszLdb.erase_users_computerss ++2S->b)VXXCC|   !JMUD...    1 1 CFYK0000 1 1|   !JMUD.../..... s2#&AAAA!BB7B22B7cLd}||||tjdgddgD]V} ||jdg #tj$r%}|j\}}|tjkrYd}~Od}~wwxYw||tjdgddg}t|dksJd D]Q} ||dg#tj$r%}|j\}}|tjkrYd}~Jd}~wwxYwdS) z~Erase this ldb. :note: Removes all records, except those that are controlled by Samba4's schema. zJ(&(|(objectclass=*)(distinguishedName=*))(!(distinguishedName=@BASEINFO)))zshow_deleted:0zshow_recycled:0)controlsrHNr)z @SUBCLASSESz@MODULESz@OPTIONSz @PARTITIONz @KLUDGEACL) rRr9rrIrMrNrJrKrLr:)r.r?r rOrPrQrBattrs rerase_except_schema_controlledz"Ldb.erase_except_schema_controlleds ""6***;;vs'8k!-=?P,QSS  C  CFYK0000<    % C22232222  kk&#"3f(8:K'LNN3xx1}}}}=  D  D9+....<    % C22232222    s0AB-B  BC--D!<DD!c|dD]Q} ||dg#tj$r%}|j\}}|tjkrYd}~Jd}~wwxYwdS)z%Erase this ldb, removing all records.)z @INDEXLISTz @ATTRIBUTESrHN)rWrMrrJrKrL)r.rVrOrPrQs rerasez Ldb.erases ++---2  D  D9+....<    % C22232222   s2A&A!!A&ct|d5}||ddddS#1swxYwYdS)zHLoad a LDIF file. :param ldif_path: Path to LDIF file. rN)openadd_ldifread)r. ldif_path ldif_files rload_ldif_file_addzLdb.load_ldif_file_adds )S ! ! ,Y MM)..** + + + , , , , , , , , , , , , , , , , , ,s(AA  A c||D]-\}}|tjksJ|||.dS)zJAdd data based on a LDIF string. :param ldif: LDIF text. N) parse_ldifrCHANGETYPE_NONEaddr.ldifrU changetyper s rr]z Ldb.add_ldifsX $t44 $ $OJ!44444 HHS( # # # # $ $rc||D]B\}}|tjkr|||,|||CdS)zQModify database based on a LDIF string. :param ldif: LDIF text. N)rcrCHANGETYPE_ADDremodifyrfs r modify_ldifzLdb.modify_ldifsi $t44 + +OJS///h'''' C****  + +r)NNNNNrNr)__name__ __module__ __qualname____doc__r6r SCOPE_BASErDrRrWrYrar]rlrrrr5sJN484.4.4.4.l+/4AAAA"6'''R   ,,,$$$$ + + + + + +rrc|D]f\}}t|ts Jd|zt|tsJd|d|d|d|z|}g|S)zSubstitute strings of the form ${NAME} in str, replacing with substitutions from values. :param text: Text in which to subsitute. :param values: Dictionary with keys and values. z%r is not a stringzValue z for z is not a stringz${%s})items isinstancestrreplace)rrCnamevalues rsubstitute_varrzs 33 u$$$AA&:T&AAAA%%%XXXEEESWSWSW'XXXX||GdNE22 Krcd|vrdS|d}|d|}td|||dzz)zCheck that all substitution variables in a string have been replaced. If not, raise an exception. :param text: The text to search for substitution variables z${N}z!Not all variables substituted: %sr8)find Exception)r var_startvar_ends rcheck_all_substitutedrsa 4 $IiiY''G 77Q;./0 1 11rct|dd5}|}|t||}t|dddn #1swxYwY|S)zRead a file and sub in variables found in it :param file_name: File to be read (typically from setup directory) param subst_vars: Optional variables to subsitute in the file. r[zutf-8)encodingN)r\r^rzr) file_name subst_vars data_filedatas rread_and_sub_filers iw / / /(9~~  !!$ 33D !$ ' ' ' ((((((((((((((( Ks6AAAc2tj|rtj|t ||}t |d} |||dS#|wxYw)zSetup a file in the private dir. :param template: Path of the template file. :param fname: Path of the file to create. :param subst_vars: Substitution variables. wN)rr runlinkrr\writeclose)templatefnamerrfs r setup_filer#s w~~e % Xz 2 2D UCA     s BBc2|p|dvS)Nz !#$%&'()-.@^_{}~)isalnum)cs ris_valid_netbios_charr8s IIKK 31 334rcht|tkrdS|D]}t|sdSdS)z1Check whether a name is valid as a NetBIOS name. FT)r:MAX_NETBIOS_NAME_LENr)rxxs rvalid_netbios_namer<sK 4yy'''u $Q'' 55  4rcXdd|dzS)z.return a DN from a DNS name domain/forest rootzDC=z,DC=.)r split) dnsdomains rdn_from_dns_namerGs% 6;;ys3344 44rcBttjSr)inttimerrrrcurrent_unix_timerLs ty{{  rcdgt|z}tt|D]=}t||tr||nt ||||<>|S)Nr)r:rangerurord)stringblobis rstring_to_byte_arrayrPsh 3V D 3v;;  NN)&)S99M&))s6!9~~Q Krc&ddlm}|||S)Nr)arcfour_crypt_blob) samba.cryptor)keyrrs rarcfour_encryptrYs'//////  dC ( ((rcddlm}ddlm}dS)zXThis function modifies the samba.net.Net class to contain an export_keytab() method.r)net)dckeytabN)r"rr)rrs renable_net_export_keytabr^s.rr)2rp __docformat__rsysrr samba.paramr"r samba._ldbr_Ldbrrrzrrrrrrrrrrrversion interface_ips fault_setupset_debug_levelget_debug_level float2nttime nttime2float nttime2string nttime2unix unix2nttimegenerate_random_password generate_random_machine_passwordcheck_password_qualitygenerate_random_bytes strcasecmp_mstrstr_mis_ntvfs_fileserver_builtis_heimdal_builtis_ad_dc_builtis_selftest_enabled NTSTATUSError HRESULTError WERRORErrorDsExtendedErrorrrrrrs6*" """"""DDD|+|+|+|+|+$|+|+|+~    111"   $555555 ))) " -#  ''! ! #    9#(#I 53! >!;)%/# !  'r