bW<ddlZddlZddlZddlmZddlmZmZmZddl m Z ddl m Z m Z ddlmZGddeZGd d eZed ejDZGd d eZGddeZGddeZGddeZGddeZGddeZGddeZGddeZGddeZ GddeZ!Gd d!eZ"d"Z#d#Z$d$Z%dS)%N)dsdb)drsblobsdrsuapimisc)dsdb_Dn) ndr_unpackndr_pack)CounterceZdZdS)KCCErrorN)__name__ __module__ __qualname__5/usr/lib/python3/dist-packages/samba/kcc/kcc_utils.pyr r %sDrr c2eZdZedd\ZZZZZdS)NCTyperN) r rrrangeunknownschemadomainconfig applicationrrrrr)s(5:U1a[[2Wfffkkkrrc#@K|]\}}|dddk||fVdS)N__r).0kvs r r".s6NNTQ"1" 1a& NNrc6eZdZdZdZdZdZdZdZdZ dS) NamingContextzBase class for a naming context. Holds the DN, GUID, SID (if available) and type of the DN. Subclasses may inherit from this and specialize cR||_d|_d|_tj|_dS)zKInstantiate a NamingContext :param nc_dnstr: NC dn string N)nc_dnstrnc_guidnc_sidrrnc_typeselfr&s r__init__zNamingContext.__init__8s& !   ~ rc|jjdd|jzzdt|jzz}|j|dz}n|dz}|dt |jd|jd z}|S) !Debug dump string output of class:z nc_dnstr=%sz nc_guid=%sNz nc_sid=z nc_sid=z nc_type= ()) __class__r r&strr'r( nctype_lutr)r+texts r__str__zNamingContext.__str__Bs///1 4=01#dl"3"334 ; //DD00Dtz$,/G/G/G/3|||== rcddg} ||jtj|}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}d|vr9tj| d|dd|_ d|vr|dd|_ |j JdS)N objectGUID objectSidbasescopeattrszUnable to find naming context () - (r1r) searchr&ldb SCOPE_BASELdbErrorargsr rGUIDschema_format_valuer'r()r+samdbr>reseenumestrmsgs rload_nczNamingContext.load_ncQs  2,,DM%(^5BBCC| 2 2 26LT4( MMM444122 2 2!f 3  9U%>%>|%(%6q%9&;&;<Given an NC which has been discovered thru the nTDSDSA database object, determine what type of NC it is (i.e. schema, config, domain, application) via the use of the schema attribute under which the NC was found. :param attr: attr of nTDSDSA object where NC DN appears msDS-HasDomainNCshasPartialReplicaNCs hasMasterNCsN)rrr)rUrr+rGattrs ridentify_by_dsa_attrz"NamingContext.identify_by_dsa_attrs & & &!=DLL+ + +!=DLL ^ # #  # #E * * * <6> ) )  # #E * * * * * * )rN) r rr__doc__r,r7rMrQrUr\rrrr$r$1sx &&&   ((((--- ....+++++rr$c~eZdZdZdZdZddZdZdZdZ d Z d Z d Z dd Z dZdZdZdZdZdZddZdS) NCReplicazNaming context replica that is relative to a specific DSA. This is a more specific form of NamingContext class (inheriting from that class) and it identifies unique attributes of the DSA's replica for a NC. c|j|_|j|_d|_d|_d|_d|_d|_g|_ g|_ d|_ t ||dS)zInstantiate a Naming Context Replica :param dsa_guid: GUID of DSA where replica appears :param nc_dnstr: NC dn string FrN) dsa_dnstr rep_dsa_dnstrdsa_guid rep_dsa_guid rep_default rep_partialrep_rorep_instantiated_flagsrep_fsmo_role_owner rep_repsFrom rep_repsTorep_present_criteria_oner$r,)r+dsar&s rr,zNCReplica.__init__sz !]L   &'##' ).% tX.....rcd|jjzd|jzzd|jzzd|jzzd|jzzd|jzzd|zzd|jzzd d |j Dzd d |j Dz}t |d |S) r.%s: dsa_dnstr=%s dsa_guid=%sz default=%s ro=%sz partial=%sz present=%sz fsmo_role_owner=%sc3 K|] }d|zV dS %sNrrreps rr"z$NCReplica.__str__..s&AAv|AAAAAArc3 K|] }d|zV dSrurrws rr"z$NCReplica.__str__..s&??v|??????r )r2r rbrdrergrf is_presentrijoinrjrkr$r7r5s rr7zNCReplica.__str__st~..!D$667 4#445 $"223T[( )  $"22 3  $//"3"33 4($*BBCwwAAt/@AAAAABww??t????? @)006666==rrc||_dS)z*Set or clear NC replica instantiated flagsN)rh)r+flagss rset_instantiated_flagsz NCReplica.set_instantiated_flagss&+###rc|dkrd|_d|_n|dkrd|_n|dkrcd|_|jt |kr1|jt |krd|_n)|dkrd|_d|_n|dkrd|_d|_t |||dS) zGiven an NC which has been discovered thru the nTDSDSA database object, determine what type of NC replica it is (i.e. partial, read only, default) :param attr: attr of nTDSDSA object where NC DN appears rXTrWrYmsDS-hasFullReplicaNCsmsDS-hasMasterNCsFN) rfrlrer&r3rSrTrgr$r\rZs rr\zNCReplica.identify_by_dsa_attrs ) ) )#D ,0D ) ) ( ( (#D  ^ # #,0D )}E$;$;$=$= > >>>}E$;$;$=$= > >>>#' - - -,0D )DKK( ( (,0D )DK **4=====rc|jS)zMWhether this is a default domain for the dsa that this NC appears on )rerPs r is_defaultzNCReplica.is_default s rc|jS)z&Return True if NC replica is read only)rgrPs ris_rozNCReplica.is_ros {rc|jS)z$Return True if NC replica is partial)rfrPs r is_partialzNCReplica.is_partials rcH|jr|jtjzdkrdSdS)a7Given an NC replica which has been discovered thru the nTDSDSA database object and populated with replica flags from the msDS-HasInstantiatedNCs; return whether the NC replica is present (true) or if the IT_NC_GOING flag is set then the NC replica is not present (false) rTF)rlrhrINSTANCE_TYPE_NC_GOINGrPs rr{zNCReplica.is_presents/  (   &)D D I I4urc ||jtjdg}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}d|vr|dD]} ttj |}n5#t$r(} td|ztj Yd} ~ Kd} ~ wwxYwt|j|} |j| dSdS) a*Given an NC replica which has been discovered thru the nTDSDSA database object, load the repsFrom attribute for the local replica. held by my dsa. The repsFrom attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on repsFromr;Unable to find NC for (r?r1Nrzbad repsFrom NDR: %rfile)r@r&rArBrCrDr rrrepsFromToBlob RuntimeErrorprintsysstderr RepsFromTorjappend) r+rGrHe1rJrKrLvalueunpackedrIrxs r load_repsFromzNCReplica.load_repsFrom%sU  2,,DM&0\33CC| 2 2 27LT4( MMM444122 2 2 !f   Z . .)(*A5IIHH#0E:"z++++HHHH!99!((----   . .,(+A$%AA$>B C #CC Fcd}g}g}|jD]r}|jr||d}!|r|d}|t |js|D]}|j|g}|r|rdStj }tj ||j |_ tj |tjd|d< ||dS#tj$r }t#d|j d|dd}~wwxYw)zCommit repsFrom to the databaseFTNrzCould not set repsFrom for (r?r1)rj to_be_deletedr is_modifiedset_unmodifiedr ndr_blobremoverAMessageDnr&dnMessageElementFLAG_MOD_REPLACEmodifyrCr ) r+rGrornewrepsdelrepsrmrKs rcommit_repsFromzNCReplica.commit_repsFromBs) 8 8H % x(((##%% ''))) NN8H$566 7 7 7 7  / /H   $ $X . . . .    F KMMveT]++  w(DE$D??Ec ||jtjdg}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}d|vr]|dd}ttj |}|j dkrtd |j z|j j |_dSg|_dS) aFGiven an NC replica which has been discovered thru the nTDSDSA database object, load the replUpToDateVector attribute for the local replica. held by my dsa. The replUpToDateVector attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on replUpToDateVectorr;rr?r1Nrrz(Unexpected replUpToDateVector version %d)r@r&rArBrCrDr rrreplUpToDateVectorBlobversionAttributeErrorctrcursorsrep_replUpToDateVector_cursors) r+rGrHe2rJrKrLrblobs rload_replUpToDateVectorz!NCReplica.load_replUpToDateVectors 2,,DM&:%;==CC| 2 2 27LT4( MMM444122 2 2 !f 3 & &,-a0Eh=#%%D|q  $%O'+|&455537(2BD / / /24D / / /(+A$%AA$cJdd|jDS)Nrzc3BK|]}|j t|VdSN)rr3rxs rr"z2NCReplica.dumpstr_to_be_deleted..s/NNAaoNQNNNNNNrr|rjrPs rdumpstr_to_be_deletedzNCReplica.dumpstr_to_be_deleted&yyNN):NNNNNNrcJdd|jDS)Nrzc3\K|]'}|t|V(dSr)rr3rs rr"z3NCReplica.dumpstr_to_be_modified..s5NNAammooNQNNNNNNrrrPs rdumpstr_to_be_modifiedz NCReplica.dumpstr_to_be_modifiedrrc ||jtjdg}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}d|vr|d|_dSdS)zGiven an NC replica which has been discovered thru the nTDSDSA database object, load the fSMORoleOwner attribute. fSMORoleOwnerr;rr?r1Nr)r@r&rArBrCrDr ri)r+rGrHe3rJrKrLs rload_fsmo_roleszNCReplica.load_fsmo_roless 2,,DM&5%688CC| 2 2 27LT4( MMM444122 2 2 !f c ! !'*?';D $ $ $ " !rc.|j |j|krdSdS)NTF)rir+ras ris_fsmo_role_ownerzNCReplica.is_fsmo_role_owners#  # /  #y 0 04urc ||jtjdg}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}d|vr|dD]} ttj |}n5#t$r(} td|ztj Yd} ~ Kd} ~ wwxYwt|j|} |j| dSdS) aGiven an NC replica which has been discovered thru the nTDSDSA database object, load the repsTo attribute for the local replica. held by my dsa. The repsTo attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on This is responsible for push replication, not scheduled pull replication. Not to be confused for repsFrom. repsTor;rr?r1Nrzbad repsTo NDR: %rr)r@r&rArBrCrDr rrrrrrrrrkr) r+rGrHe4rJrKrLrrrIrxs r load_repsTozNCReplica.load_repsTosQ 2,,DM&.Z11CC| 2 2 27LT4( MMM444122 2 2 !f s??X , ,)(*A5IIHH#.%8"z++++HHHH!99&&s++++ ? , ,rcd}g}g}|jD]r}|jr||d}!|r|d}|t |js|D]}|j|g}|r|rdStj }tj ||j |_ tj |tjd|d< ||dS#tj$r }t#d|j d|dd}~wwxYw)zCommit repsTo to the databaseFTNrzCould not set repsTo for (r?r1)rkrrrrr rrrArrr&rrrrrCr ) r+rGrrrrrrrKs r commit_repsTozNCReplica.commit_repsTos}o 6 6F # v&&&!!## %%''' NN8FO44 5 5 5 5 + +F O " "6 * * * *    F KMMveT]++  w( > > >,,,,/>/>/>b         ...:=2=2=2=2~555BOOOOOO<<<& ,,,@=2=2=2=2=2=2rr_ceZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZdZddZdZdZdZdZdZdZdS)DirectoryServiceAgentc||_d|_d|_d|_d|_d|_d|_d|_i|_i|_ i|_ dS)zInitialize DSA class. Class is subsequently fully populated by calling the load_dsa() method :param dsa_dnstr: DN of the nTDSDSA NFr) rarcdsa_ivid dsa_is_ro dsa_is_istgoptions dsa_behavior default_dnstrcurrent_rep_tableneeded_rep_table connect_tablers rr,zDirectoryServiceAgent.__init__#sc#    !"$!#  rcd|jjz}|j |d|jzz}|j|dt |jzz}|j|dt |jzz}|d|zd|zzd|zzd zd | zzd zd | zzd zd | zzz }|S) r.roNrprqz dsa_ivid=%srrz gc=%sz istg=%sz current_replica_table:rvz needed_replica_table:z connect_table:) r2r rarcr3rris_gcis_istgdumpstr_current_replica_tabledumpstr_needed_replica_tabledumpstr_connect_tabler5s rr7zDirectoryServiceAgent.__str__@s*t~.. > %,t~==D = $+c$-.@.@@@D = $+c$-.@.@@@D djjll*djjll*+ ./++;;=== > * * ::<<< =##335556 6 rc6|j|Sr)rgetr*s rget_current_replicaz)DirectoryServiceAgent.get_current_replicaWs%))(333rc|jp|jS)zAReturns True if dsa is intersite topology generator for it's site)rrrPs rrzDirectoryServiceAgent.is_istgZs14>1rc|jS)z1Returns True if dsa a read only domain controller)rrPs rrzDirectoryServiceAgent.is_ro_s ~rc:|jtjzdkrdSdS)z*Returns True if dsa hosts a global catalogrTF)rrDS_NTDSDSA_OPT_IS_GCrPs rrzDirectoryServiceAgent.is_gccs! L44 4 : :4urc |j|krdSdS)zIs dsa at minimum windows level greater than or equal to (version) :param version: Windows version to test against (e.g. DS_DOMAIN_FUNCTION_2008) TF)r)r+rs ris_minimum_behaviorz)DirectoryServiceAgent.is_minimum_behavioris   ' '4urc:|jtjzdkrdSdS)z>Whether this allows NTDSConnection translation in its options.rTF)rr%DS_NTDSDSA_OPT_DISABLE_NTDSCONN_XLATErPs ris_translate_ntdsconn_disabledz4DirectoryServiceAgent.is_translate_ntdsconn_disabledss! L4E E! K K4urc|j|jfS)z5Return DSA current and needed replica tables )rrrPs rget_rep_tablesz$DirectoryServiceAgent.get_rep_tablesys%t'<<rHe5rJrKrLs rload_dsazDirectoryServiceAgent.load_dsas***  3,,DN#.%*,,CC| 3 3 37LT4( NNNDDD233 3 3 !f %";";L"%l"3A"6#8#899 S  Ie&?&? &).&9!&<'>'>??DM   s9~a011DL C  CM(:1(=$>$>&$H$H!DNN"DN "c ) ) #C(?$@$C D DD  ''... ""5)))))rNc*gd} ||jtj|}n<#tj$r*}|j\}}t d|jd|dd}~wwxYwi}t|ddkr|dD]}|dkr |d|D]} t|| d } | } t| j } | |vrt|| } | || <n|| } |d kr| | | ||| r| |_nt d |jz||_dS) a#Method to load the NC replica's listed for DSA object. This method queries the samdb for (hasMasterNCs, msDS-hasMasterNCs, hasPartialReplicaNCs, msDS-HasDomainNCs, msDS-hasFullReplicaNCs, and msDS-HasInstantiatedNCs) to determine complete list of NC replicas that are enumerated for the DSA. Once a NC replica is loaded it is identified (schema, config, etc) and the other replica attributes (partial, ro, etc) are determined. :param samdb: database to query for DSA replica list )rYrrXrWrmsDS-HasInstantiatedNCsr;z Unable to find nTDSDSA NCs for (r?r1Nrrutf8rzNo nTDSDSA NCs for (%s))r@rarArBrCrDr lenkeysrdecodeget_binary_integerr3rr_rr\rrr)r+rGncattrsrHe6rJrK tmp_tabler rdsdnr~dnstrrxs rrz0DirectoryServiceAgent.load_current_replica_tables     3,,DN#.%,..CC| 3 3 37LT4( NNNDDD233 3 3   s1v;;??V[[]] 3 399 !VAY33E#5%,,v*>*>??D 3355ELLEI--'e44+. %(('.555225999 ,,UA666~~''3-2*-3 3>4t~EFF F"+rNc$||j|j<dS)z]Method to add a NC replica that "should be present" to the needed_rep_table. N)rr&)r+rxs radd_needed_replicaz(DirectoryServiceAgent.add_needed_replicas/2cl+++rcr ||jtjd}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|D]N}t|j}||j vr t|}| |||j |<OdS)zMethod to load the nTDSConnections listed for DSA object. :param samdb: database to query for DSA connection list z(objectClass=nTDSConnection)r<r= expression#Unable to find nTDSConnection for (r?r1N) r@rarA SCOPE_SUBTREErCrDr r3rrNTDSConnectionload_connection) r+rGrHe7rJrKrLrconnects rrz+DirectoryServiceAgent.load_connection_table s  3,,DN%(%6*HJJCC| 3 3 37LT4( NNNDDD233 3 3  0 0CKKE***$U++G  # #E * * *(/D u % % 0 0s'*A#%AA#Fc:g}|jD]q\}}|jr||||jr||||jr+|||||r|D] }|j|= dS)azMethod to commit any uncommitted nTDSConnections modifications that are in our table. These would be identified connections that are marked to be added or deleted :param samdb: database to commit DSA connection list to :param ro: if (true) then peform internal operations but do not write to the database (readonly) N) ritems to_be_added commit_addedto_be_modifiedcommit_modifiedrcommit_deletedr)r+rGrdelconnrrs rcommit_connectionsz(DirectoryServiceAgent.commit_connections's"06688 & &NE7" 0$$UB///% 3''r222$ &&&ub111u%%% * *E"5)) * *rc0||jvsJ||j|<dSr)r)r+rrs radd_connectionz$DirectoryServiceAgent.add_connectionBs)D.....$+5!!!rcg}|jD]/}||kr||0|S)zScan DSA nTDSConnection table and return connection with a "fromServer" dn string equivalent to method input parameter. :param from_dnstr: search for this from server entry )rvaluesget_from_dnstrr)r+ from_dnstranswerrs rget_connection_by_from_dnstrz2DirectoryServiceAgent.get_connection_by_from_dnstrFsV)0022 ' 'G%%'':55 g&&& rcJdd|jDS)z1Debug dump string output of current replica tablerzc34K|]}t|VdSrr3rs rr"zFDirectoryServiceAgent.dumpstr_current_replica_table..Vs(@@AQ@@@@@@r)r|rrPs rrz3DirectoryServiceAgent.dumpstr_current_replica_tableTs&yy@@)?@@@@@@rcJdd|jDS)z0Debug dump string output of needed replica tablerzc34K|]}t|VdSrr/rs rr"zEDirectoryServiceAgent.dumpstr_needed_replica_table..Zs(??AQ??????r)r|rrPs rrz2DirectoryServiceAgent.dumpstr_needed_replica_tableXs&yy??)>??????rcJdd|jDS)z)Debug dump string output of connect tablerzc34K|]}t|VdSrr/rs rr"z>DirectoryServiceAgent.dumpstr_connect_table..^s(<.&\\4$\\\\\\r])r2r rr7rrr rr8rCr9r:r3r;r*r<size bandwidthnumberOfSchedules enumerate headerArraytypeoffsetr| dataArrayslots)r+r6iheaders rr7zNTDSConnection.__str__s"&!8!8!8$**E$,./#d&667&(::;')<< = $dl2 3 )4+<< =$d&667%t';;< 9 MC NN2 2D   * +c$2E.F.FF FD&88 = $ *T]-??/$-2IIJ8]456 6D 't}'@AA   6?FK()AV]+,-=q@ A \\4=;RST;U;[\\\\\ ]   rc&gd} ||jtj|}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}d|vr t|dd|_d |vr\t|d d d krd |_ d |vr t|d d|_ tj|d |d d|_n%#t&$rt d|jzwxYwd|vrWt)||ddd}||t|jd|vr+t1t2j|dd|_d|vr2tjt|dd|_d|vrQt)||ddd}t|j|_|jJdSdS)zGiven a NTDSConnection object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )renabledConnectionr<rCr9 transportType fromServer systemFlagsr;rr?r1NrrrarTrdr9z4Unable to find objectGUID in nTDSConnection for (%s)rbrr<rCrc)r@rrArBrCrDr rrr3upperlstriprstripr7r8rrErFr:KeyErrorrr load_connection_transportrrrr<string_to_timerCr*) r+rGr>rHe8rJrKrLrs rrzNTDSConnection.load_connections     /,,DJcn%*,,CC| / / /7LT4( JJJ.// / / !f   s9~a011DL # % %3*+A.//5577>>@@GGIIVSS# C   #C $6q$9 : :D  6 %33L47 4Ea4HJJKK II 6 6 6&)-566 6 6 c ! !5#o"6q"9"@"@"H"HIID  * *5#dg,, ? ? ?   &x'8#j/!:LMMDM C  "1#c-6H6K2L2LMMD  3  5#l"3A"6"="=f"E"EFFD!$'llDO?...  /.s '.A'%A""A'9E"E7cdg} ||tj|}n7#tj$r%}|j\}}t d|d|dd}~wwxYwd|dvrH|d}||_tj| d|dd|_ |jJ|j JdS)zGiven a NTDSConnection object which enumerates a transport DN, load the transport information for the connection object :param tdnstr: transport DN to load r9r;zUnable to find transport (r?r1Nr) r@rArBrCrDr r9rrErFr;) r+rGtdnstrr>rHe9rJrKrLs rriz(NTDSConnection.load_connection_transports   +,,F%(^5BBCC| + + +7LT4("FFDDD*++ + + 3q6 ! !a&C#)D  %33L47 4Ea4HJJKK  #///".....s"(A AAFc|jsJd|_|rdS ||jdS#tj$r*}|j\}}t d|jd|dd}~wwxYw)zLocal helper routine for commit_connections() which handles committed connections that are to be deleted from the database database FNz%Could not delete nTDSConnection for (r?r1)rdeleterrArCrDr )r+rGre10rJrKs rr"zNTDSConnection.commit_deleted s !!!!"   F / LL $ $ $ $ $| / / /8LT4( JJJ.// / /s2A+%A&&A+c|jsJd|_|rdSd} ||jtj}t |dkrd}nQ#tj$r?}|j\}}|tjkrtd|jd|dYd}~nd}~wwxYw|rtd |jz|j rd }nd }tj } tj ||j| _ tjd tjd | d <tjd tjd| d<tj|tjd| d<tj|jtjd| d<tjt#|jtjd| d<tjt#|jtjd| d<|j5tjt#|jtjd| d<|j5tjt-|jtjd| d< || dS#tj$r*} | j\}}td|jd|dd} ~ wwxYw)zLocal helper routine for commit_connections() which handles committed connections that are to be added to the database FNr<r=rTUnable to search for (r?r1z'nTDSConnection for (%s) already exists!rFALSEnTDSConnection objectClassshowInAdvancedViewOnlyrarcrrdrbr<z"Could not add nTDSConnection for ()rr@rrArBrrCrDERR_NO_SUCH_OBJECTr r7rrrr FLAG_MOD_ADDr*r3rr8r9r<r add) r+rGrfoundrLe11rJrK enablestrre12s rrzNTDSConnection.commit_addeds      F 3,,DJcn,EEC3xx1}}| 3 3 38LT4s---h $ DDD 2333.---- 3  'D:&'' ' < III KMMveTZ((  /1A, . . -  vs'77 9 9 "#  y#*:2 4 4   t0@, O O ,  s4<00#2BI N N )   s4#455s7G, . . -   +"3t';#<#N#244 o  = $"8DM#:#:#ZAA jM / IIaLLLLL| / / /8LT4( JJJ.// / /s/;AB"#5BB"0JK%J;;KcN|jsJd|_|rdS ||jtjnc#tj$rQ}|j\}}|tjkrtd|jztd|jd|dd}~wwxYw|j rd}nd }tj }tj ||j|_ tj |tjd |d <tj |jtjd |d <tj t!|jtjd |d <tj t!|jtjd |d <|j6tj t!|jtjd|d<n#tj gtjd|d<|j6tj t-|jtjd|d<n#tj gtjd|d< ||dS#tj$r*}|j\}}td|jd|dd}~wwxYw)zLocal helper routine for commit_connections() which handles committed connections that are to be modified to the database FNrsz&nTDSConnection for (%s) doesn't exist!rtr?r1rrurarcrrdrbr<z%Could not modify nTDSConnection for ()r r@rrArBrCrDryr r7rrrrrr*r3rr8r9FLAG_MOD_DELETEr<r r) r+rGre13rJrKr~re14s rr!zNTDSConnection.commit_modifiedcs """"#   F / LLdjL ? ? ? ?| / / /8LT4s---G#z *+++( JJJ.// /  / < III KMMveTZ((  y#*>2 4 4   t0D+ - - ,  s4<00#2F( * * )   s4#455s7K, . . -   +"3t';#<#<#JJ o   "2s':OLL o  = $"8DM#:#:#EE jMM "2s':JGG jM / LLOOOOO| / / /8LT4( JJJ.// / /s.&=B A BBI++J$:%JJ$c||_dSr)r )r+ truefalses r set_modifiedzNTDSConnection.set_modifieds'rc|j|jjddS|jjdjD]}|dzdkrdSdS)zzReturns True if our schedule includes at least one replication interval within the week. False otherwise NrFT)r<r\r])r+rRs r!is_schedule_minimum_once_per_weekz0NTDSConnection.is_schedule_minimum_once_per_weeks\ = DM$;A$>$F5M+A.4  Dt ##tt$urc&|j|duS|dS|jj|jks*|jj|jks|jj|jkrdSt |jjD]\}}|jj|j|j|jkrdS|jj|j|j|jkrdSt|jj |j |j |j D]\}}||krdSdS)zReturns True if our schedule is equivalent to the input comparison schedule. :param shed: schedule to compare to NFT) r<rUrVrWrXrYrZr[zipr\r])r+r?r^r_abs ris_equivalent_schedulez%NTDSConnection.is_equivalent_schedules1 = D= =5 ] 5: - - ] $ 7 7 ] ,0G G G5"4=#<== ! !IAv}(+0E4Ea4H4MMMuu}(+2 #*++uuDM3A6<!OA.466 ! !166 555 !trc:|jtjzdkrdSdS)zMReturns True if NTDS Connection specifies RODC topology only rFT)rrNTDSCONN_OPT_RODC_TOPOLOGYrPs ris_rodc_topologyzNTDSConnection.is_rodc_topologys# <$9 9Q > >5trc:|jtjzdkrdSdS)zReturns True if NTDS Connection was generated by the KCC topology algorithm as opposed to set by the administrator rFT)rrNTDSCONN_OPT_IS_GENERATEDrPs r is_generatedzNTDSConnection.is_generateds# <$8 8A = =5trc:|jtjzdkrdSdS)zGReturns True if NTDS Connection should override notify default rFT)rr$NTDSCONN_OPT_OVERRIDE_NOTIFY_DEFAULTrPs ris_override_notify_defaultz)NTDSConnection.is_override_notify_defaults# <$C Cq H H5trc:|jtjzdkrdSdS)z:Returns True if NTDS Connection should use notify rFT)rrNTDSCONN_OPT_USE_NOTIFYrPs r is_use_notifyzNTDSConnection.is_use_notifys# <$6 6! ; ;5trc:|jtjzdkrdSdS)z?Returns True if NTDS Connection should use twoway sync rFT)rrNTDSCONN_OPT_TWOWAY_SYNCrPs ris_twoway_synczNTDSConnection.is_twoway_syncs# <$7 71 < <5trc:|jtjzdkrdSdS)zRReturns True if NTDS Connection intersite compression is disabled rFT)rr*NTDSCONN_OPT_DISABLE_INTERSITE_COMPRESSIONrPs r!is_intersite_compression_disabledz0NTDSConnection.is_intersite_compression_disableds# <$I IQ N N5trc:|jtjzdkrdSdS)zBReturns True if NTDS Connection has a user owned schedule rFT)rr NTDSCONN_OPT_USER_OWNED_SCHEDULErPs ris_user_owned_schedulez%NTDSConnection.is_user_owned_schedules# <$? ?1 D D5trc|jS)z3Returns True if NTDS Connection is enabled )r7rPs r is_enabledzNTDSConnection.is_enableds |rc|jS)z%Return fromServer dn string attribute)r*rPs rr)zNTDSConnection.get_from_dnstrs rNr)r rrr]r,r7rrir"rr!rrrrrrrrrrrr)rrrrrsW   $$$L7/7/7/r///2////&E/E/E/E/NE/E/E/E/N(((   &&&P rrc6eZdZdZdZdZdZdZdZdZ dS) Partitiona!A naming context discovered thru Partitions DN of the config schema. This is a more specific form of NamingContext class (inheriting from that class) and it identifies unique attributes enumerated in the Partitions such as which nTDSDSAs are cross referenced for replicas c||_d|_d|_g|_g|_t |ddS)NTr)partstrr7r8rw_location_listro_location_listr$r,)r+rs rr,zPartition.__init__(sF   " " tT*****rcgd} ||jtj|}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}|D].}|dkr |d kret||d d krd |_ nd |_ u|d kr!t||d|_||D]} t|| d} t| j} |dkr| |_G|dkr|j| h|dkr|j| 0||dS)aGiven a Partition class object that has been initialized with its partition dn string, load the partition from the sam database, identify the type of the partition (schema, domain, etc) and record the list of nTDSDSAs that appear in the cross reference attributes msDS-NC-Replica-Locations and msDS-NC-RO-Replica-Locations. :param samdb: sam database to load partition from )nCNameEnabledrdmsDS-NC-Replica-LocationsmsDS-NC-RO-Replica-Locationsr;zUnable to find partition for (r?r1NrrrrTFrdrrrr)r@rrArBrCrDr r r3rerfrgr7rr8rr rr&rrrrU) r+rGr>rHe15rJrKrLr rrrs rload_partitionzPartition.load_partition4s111  1,,DL%*,,CC| 1 1 18LT4( LLL$$$011 1 1!f  ADyyI~~s1vay>>''))002299;;vEE#'DLL#(DLM!!$'Aq NN!Q  uell6&:&:;;DG ==$)DM333)00777666)007777 $ &&&&&rNc|jS)z-Returns True if partition is enabled )rrPs rrzPartition.is_enabledns rc:|jtjzdkrdSdS)zReturns True if this is not an Active Directory NC in our forest but is instead something else (e.g. a foreign NC) rTF)r8rSYSTEM_FLAG_CR_NTDS_NCrPs r is_foreignzPartition.is_foreignss$   ; ; A A45rc,d}d}|jtjkp9|jtjkp$|jtjko|j|jk}|jtjkr5|r|j |j vrd}n|j |j vrd}| rE|jtjkr0|j|jkr |j |j vs|j |j vrd}d}|r|s|rd}|||fS)zTests whether this partition should have an NC replica on the target dsa. This method returns a tuple of needed=True/False, ro=True/False, partial=True/False :param target_dsa: should NC be present on target dsa FT) r)rrrrr&rrrrarrr)r+ target_dsarpartialneededs rshould_be_presentzPartition.should_be_present|s? ,&-/>,&-/><6=0==J$<<  <6- - -!! "'4+@@@!F'4+@@@!F       LFM ) ) MZ5 5 5  !T%: : :  !T%: : :FG  z'')) W Br7""rcdt|zd|jzzdd|jDzdd|jDz}|S)r.z%sz partdn=%srsc3 K|] }d|zV dS)z msDS-NC-Replica-Locations=%sNrrr s rr"z$Partition.__str__..s(]]!9A=]]]]]]rc3 K|] }d|zV dS)z! msDS-NC-RO-Replica-Locations=%sNrrs rr"z$Partition.__str__..s(``QrHself_rese16rJrKrLs r load_sitezSite.load_sites *DO;/// ),,D%*,,C||+7.$::HH| ) ) )8LT4( DD$$$()) ) ) !f    #C N1$5 6 6D  '3 . .C45a899  $ '# - -&)#.I*J1*M&N&ND #qk 3  !Yu'@'@'*<'8';(=(=>>DN %     sA AB* B  Bc ||jtjd}n3#tj$r!}|j\}}t d|zd}~wwxYw|D]l}t|j}||j vr t|}| |||j |<| s ||j |<mdS)zDiscover all nTDSDSA thru the sites entry and instantiate and load the DSAs. Each dsa is inserted into the dsa_table by dn string. z(objectClass=nTDSDSA))r=rzUnable to find nTDSDSAs - (%s)N)r@rrArrCrDr r3rrrrrr) r+rGrHe17rJrKrLrrms rrzSite.load_all_dsas  D,,t%(%6*ACCCC| D D D8LT4;dBCC C D / /CKKE&&'..C LL   %(DN5 !99;; /+.!%( / /s'*AAAc6|j|S)zReturn a previously loaded DSA object by consulting the sites dsa_table for the provided DSA dn string :return: None if DSA doesn't exist )rrrDs rget_dsaz Site.get_dsas ~!!%(((rcj|jrd|_|j|_dSt |}||||t|j d}|j dkrd}n |j dzdz}|j |j}|b||ur^| |}d } |jD]} |j| jkrd} n| s|} d} n>|j| jz |krd} d} n&|} | j} n| |} |j} | |j| z |zzt'|z} || }d|_||urd S|j|jkrdS|j|_|rdSd |jz}t+j}t+j|||_t+j|jt*jd |d < ||n-#t*j$r}t;d |d |dd}~wwxYwdS)alDetermine if my DC should be an intersite topology generator. If my DC is the istg and is both a writeable DC and the database is opened in write mode then we perform an originating update to set the interSiteTopologyGenerator attribute in the NTDS Site Settings object. An RODC always acts as an ISTG for itself. Tc*t|jSr)r rc)rms rz"Site.select_istg..5sHS\22r)keyrlPC<iNFrrz.Could not set interSiteTopologyGenerator for (r?r1)rrrarget_dsa_config_reprrsortedrr(rrrindexrrsource_dsa_invocation_idrlast_sync_successrrrArrrrrrrCr )r+rGmydsarc_repD_sortfd_dsaj_idxr|cursori_idxt_timek_idxrrrKs r select_istgzSite.select_istgs ?  $E ',D $4"5)) E""" %%e,,,    $ $ & &22444$  "a ' '&AA'",x7A""4#;<<  e!3!3(LL''EE>  >V%DDD EEE 2 v77!;;1LL''E[F4;/A56#f++E u     5  #u 6 64#(?   4*DO; KMMveT""  u0D; = = &'  LLOOOO|   (ttt  ts0HH0H++H0c2|jtjzdkS)z8Returns True if intra-site topology is disabled for siter)rr-DS_NTDSSETTINGS_OPT_IS_AUTO_TOPOLOGY_DISABLEDrPs ris_intrasite_topology_disabledz#Site.is_intrasite_topology_disableds#!BCGHI Irc2|jtjzdkS)z8Returns True if inter-site topology is disabled for siter)rr8DS_NTDSSETTINGS_OPT_IS_INTER_SITE_AUTO_TOPOLOGY_DISABLEDrPs ris_intersite_topology_disabledz#Site.is_intersite_topology_disableds!"NO rc2|jtjzdkS)z:Returns True if selection of random bridgehead is disabledr)rr1DS_NTDSSETTINGS_OPT_IS_RAND_BH_SELECTION_DISABLEDrPs ris_random_bridgehead_disabledz"Site.is_random_bridgehead_disabled#!FGKLM Mrc2|jtjzdkS)z1Returns True if detect stale is disabled for siter)rr1DS_NTDSSETTINGS_OPT_IS_TOPL_DETECT_STALE_DISABLEDrPs ris_detect_stale_disabledzSite.is_detect_stale_disabledrrc2|jtjzdkS)z||jrdSdS)z"Return True if dsa is in this siteTF)rra)r+rms r same_sitezSite.same_sites" << & & 4urcjt|jdkrt|jdkrdSdS)NrTF)rrrrPs r is_rodc_sitezSite.is_rodc_sites6 t~   " "s4+<'='='B'B4urcd|jjzd|jzzd|jzzd|jzzd|jzz}|jD] \}}|d|zz}|S)r.roz dn=%sz options=0x%Xz topo_generator=%sz topo_failover=%drv)r2r rrrrrr)r+r6rrms rr7z Site.__str__st~..T_,-!D$556')AAB&(?? @ ,,.. ' 'HC&3,&DD rN)r rrr]r,rrrrrrrrrrrr7rrrrrs#!#!#!J///<)))gggRIII  MMM MMM HHH       rrc6eZdZdZdZdZdZdZdZdZ dS) GraphNodezA graph node describing a set of edges that should be directed to it. Each edge is a connection for a particular naming context replica directed from another node in the forest to this node. c0||_||_g|_dS)zInstantiate the graph node according to a DSA dn string :param max_node_edges: maximum number of edges that should ever be directed to the node N) max_edgesra edge_from)r+ramax_node_edgess rr,zGraphNode.__init__s ("rcd|jjzd|jzzd|jzz}t |jD]$\}}t |tr |d||fzz }%|S)Nrorpz max_edges=%dz edge_from[%d]=%s)r2r rarrXr isinstancer3)r+r6r^edges rr7zGraphNode.__str__szt~..!DN23!DN23!00 ; ;GAt$$$ ;.!T:: rct|tsJ||jkrdS||jvrdSt |j|jkrdS|j|dS)zAdd an edge from the dsa to our graph nodes edge from list :param from_dsa_dnstr: the dsa that the edge emanates from FT)r r3rarrrr)r+from_dsa_dnstrs r add_edge_fromzGraphNode.add_edge_fromsw .#..... T^ + +5 T^ + +5 t~  $. 0 05 n---trcr|jD]}||jdS)aeFor each nTDSConnection object associated with a particular DSA, we test if it implies an edge to this graph node (i.e. the "fromServer" attribute). If it does then we add an edge from the server unless we are over the max edges for this graph node :param dsa: dsa with a dnstr equivalent to his graph node N)rr(rr*)r+rmrs radd_edges_from_connectionsz$GraphNode.add_edges_from_connectionssF(//11 3 3G   w1 2 2 2 2 3 3rc|jD]v}||}d}|D]}|rd}|r8tj}tjtjz}|||||dwdS)zFor each edge directed to this graph node, ensure there is a corresponding nTDSConnection object in the dsa. FTN)rr,rrrSYSTEM_FLAG_CONFIG_ALLOW_RENAMESYSTEM_FLAG_CONFIG_ALLOW_MOVEr@) r+rmr> edge_dnstr connections found_validroptr~s radd_connections_from_edgesz$GraphNode.add_connections_from_edges#s.! H! HJ:::FFK K& # #++--"   0C978E   sE9j$ G G G GC! H! HrcDt|j|jkrdSdS)z.es(ZZE/%7ZZZZZZr) r2r rr3r:rr rr|r!r5s rr7zTransport.__str__]s"&!8!8!8$**Es49~~-.$,./%t'889ty( ) wwZZTEYZZZZZ [ rcgd} ||jtj|}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}tj| d|dd|_ d |vr t|d d|_ d |vr t|d d|_d |vr t|d d|_d |vre|d D]^}t!||d } t| j} | |jvr|j| ]dSdS)zGiven a Transport object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )r9rrbridgeheadServerListBLtransportAddressAttributer;zUnable to find Transport for (r?r1Nrr9rr(rr'r)r@rrArBrCrDr rrErFr:rrr3r rrr rr!r) r+rGr>rHe18rJrKrLrrrs rload_transportzTransport.load_transportis ...  /,,DJcn%*,,CC| / / /8LT4( JJJ.// / / !fIe77 !,/24455    s9~a011DL &# - - #C(C$DQ$G H HD  S==CKN++DI #s * *56 7 7uell6&:&:;;DG  444(//666 + * 7 7rNN)r rrr]r,r7r*rrrrrQsK"""   %7%7%7%7%7rrc8eZdZdZd dZdZdZdZdZdZ dS) rzClass encapsulation of the NDR repsFromToBlob. Removes the necessity of external code having to understand about other_info or manipulation of update flags. Nc0d|jd<||jd<d|jd<|utj|jd<d|jd_d|jd<d|jd <tjx|jdj_|jd <dS||jd<|jj|jd <|jdkr%|jjj|jd<d|jd <dS|jjj|jd<|jjj |jd <dS) NFrr&r update_flagsr dns_name1 dns_name2 other_info) __dict__rrrrepsFromTo1OtherInforr1dns_namer/r0)r+r&rs rr,zRepsFromTo.__init__s). o&$, j!(+ n%8  (0(?(A(ADM* %03DM* % -)-DM+ &)-DM+ &/7.K.M.M NDM* % ) 4 l+++)1DM* %*2,*ADM, '3&&-5\-D-M k*-1 k***-5\-D-N k*-5\-D-N k***rcd|jjzd|jzzd|jzzd|jzzd|jzzd|jzzd|jzzd|jzzd |j zzd |j zzd |j zzd |j zzd |j zzdzdd|jDzdz}|S)r.roz dnstr=%sz update_flags=0x%Xz version=%dz source_dsa_obj_guid=%sz source_dsa_invocation_id=%srHz replica_flags=0x%Xz consecutive_sync_failures=%dz last_success=%sz last_attempt=%sz dns_name1=%sz dns_name2=%sz schedule[ rsc3 K|] }d|zV dSrPrrQs rr"z%RepsFromTo.__str__..s&@@$w~@@@@@@rrT)r2r r&r-rsource_dsa_obj_guidrr; replica_flagsconsecutive_sync_failures last_success last_attemptr/r0r|r<r5s rr7zRepsFromTo.__str__s-t~.. -.&)::; $,./,d.FF G 2./ 0')<<=($*<<=3/0 1%t'88 9%t'88 9"DN2 3"DN23  ww@@$-@@@@@!A"#& rcJ|dvrj|dvr |jdxxtjzcc<n#|dvr|jdxxtjzcc<t |jdj||n|dvrp||jd<|jdjdkr(|jd|jdjj_n|jd|jdjj_ n|d vrW||jd <|jdjdkrt||jd |jdjj_ nF|d vr ||jd <n7|d vr ||jd<n(|dvrtd|ztd|z|jdxxtj zcc<dS)zSet an attribute and chyange update flag. Be aware that setting any RepsFromTo attribute will set the drsuapi.DRSUAPI_DRS_UPDATE_ADDRESS update flag. r<r8r;r7rr9r:r;)r8r-)r<rr/r/r.r0r0r&r&rrrz$Attempt to set readonly attribute %sUnknown attribute %sN) r2rDRSUAPI_DRS_UPDATE_FLAGSDRSUAPI_DRS_UPDATE_SCHEDULEsetattrrrr1r4r/rr0DRSUAPI_DRS_UPDATE_ADDRESS)r+itemrs r __setattr__zRepsFromTo.__setattr__s $ $ $ ((( n---1QQ----%% n---1TT--- DM*-14 ? ? ? ? ] " ").DM+ &}Z(0C77M+. j)-8AAM+. j)-8BB] " ").DM+ &}Z(0C77$T***M+. j)-8BB\ ! !(-DM* % % & & &-2DM/ * * [  !G$!NOO O !7$!>?? ? n%%%)KK%%%%%rc.|dvr t|jdj|S|dvr|jdjS|dvrN|jdjdkr|jdjjjS|jdjjjS|dvrA|jdjdkrt||jdjjjS|dvr |jdS|d vr |jd S|d vr |jd Std |z)zzOverload of RepsFromTo attribute retrieval. Allows external code to ignore substructures within the blob r=rrBr>r.r?rArr@r&r-r-rC) getattrr2rrr1r4r/rr0)r+rHs r __getattr__zRepsFromTo.__getattr__s; $ $ $4=48$?? ? [ =,4 4 ] " "}Z(0C77}Z04?HH}Z04?II ] " "}Z(0C77$T***}Z04?II & & &=1 1 \ ! !=, , % % %=0 03d:;;;rc|jdkSrrKrPs rrzRepsFromTo.is_modified;s!S()rcd|jd<dS)Nrr-)r2rPs rrzRepsFromTo.set_unmodified>s(+ n%%%r)NN) r rrr]r,r7rIrMrrrrrrrs 2O2O2O2Oh00L0L0Ld#<#<#.drSrrTz site_list=r0r1)r2r rrr8rSrTr<rUrVrWrXrYrZr[r|r\r]rU)r+r6r^r_r:rs rr7zSiteLink.__str__Os"&!8!8!8$**E$,./$t'889ty()!4=0 1 = $ *T]-??/$-2IIJ8]456 6D 't}'@AA   6?V[)*AV]+,-=q@ A \\4=;RST;U;[\\\\\ ]   ? ?HD"4TTT222>>DD rcgd} ||jtj|dg}n<#tj$r*}|j\}}t d|jd|dd}~wwxYw|d}d |vr t|d d|_d |vr t|d d|_ d |vr t|d d|_ d |vr t|d d|_ d |vr|d D]}t|| d} tj| jd} t%| j} | | f|jvr|j| | fd|vr!t+t,j||_dSt1|_dS)zGiven a siteLink object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )rrdrSr< replIntervalsiteListz extended_dn:0)r<r=r>controlszUnable to find SiteLink for (r?r1NrrrdrSrYrZrrEr<)r@rrArBrCrDr rrr8rSrTrr rrErget_extended_componentr3rUrrrr<r=) r+rGr>rHe19rJrKrLrrr:rs r load_sitelinkzSiteLink.load_sitelinkks   /,,DJcn%*o5FHHCC| / / /8LT4( JJJ.// / / !f   s9~a011DL C   #C $6q$9 : :D  S==CKN++DI S N 3A 677DM   Z 9 9uell6&:&:;;y!?!?!G!GHHDG %=66N))4-888   &x'8%@@DMMM355DMMMs)0A)%A$$A)N)r rrr]r,r7r^rrrrQrQBsK8-6-6-6-6-6rrQceZdZdZdS)KCCFailedObjectcL||_||_||_||_||_dSr)r5 failure_counttime_first_failure last_resultr4)r+r5rbrcrdr4s rr,zKCCFailedObject.__init__s, *"4&  rN)r rrr,rrrr`r`s#!!!!!rr`c|jD]}|r|cStd|jz)Nz)Unable to find config NC replica for (%s))rr(rQr ra)rmrs rrrsa&--// ??   LLL  >=! " ""rctj}d|_d|_d|_tj}d|_d|_|g|_tj }dgdz|_ |g|_ |S)zCreate a default schedule for an NTDSConnection or Sitelink. This is packed differently from the repltimes schedule used elsewhere in KCC (where the 168 nibbles are packed into 84 bytes). rr.) rr<rUrVrWscheduleHeaderrZr[rY scheduleSlotsr]r\)r<r_datas rr=r=sy ""HHMH!"H  $ & &FFKFM"8H  ! # #D#DJH Orc g}||tjd}||tjd}t }d}|D]}|j}||xxdz cc<| | kr|dz }t|t|krg} |D]2}|j|vr| |3d tj |tj t|} | D]} tj t| j} ||tjdgd | d g } ||tjdd gd | | d g }t| dkrGt|dkr3t| ddd}t|ddd}||kr3d }|dd D]}tj|t|}|}| }|||krd}n)|||kr|| krd}n|r@| j}| | |S)a Discover which sites have no DCs and whose lowest single-hop cost distance for any link attached to that site is linked to the site supplied. We compare the lowest cost of your single-hop link to this site to all of those available (if it exists). This means that a lower ranked siteLink with only the uncovered site can trump any available links (but this can only be done with specific, poorly enacted user configuration). If the site is connected to more than one other site with the same siteLink, only the largest site (failing that sorted alphabetically) creates the DNS records. :param samdb database :param site_name origin site (with a DC) :return a list of sites this site should be covering (for DNS) z*(&(objectClass=server)(serverReference=*))rz(objectClass=site)rr.zCN={},CN=Sites,{}rSz&(&(objectClass=siteLink)(siteList={}))zserver_sort:1:0:cost)r<r=r>rr[rZz3(&(objectClass=siteLink)(siteList={})(siteList={}))TF)r@rTrArr rparent canonical_str get_rdn_valuelowerrrformat binary_encoder3rr)rG site_namesites_to_cover server_ressite_res sites_in_usedc_countrLsite_dnsites_uncovered own_site_dnsite encoded_dn link_res1 link_res2cost1cost2to_coversite_val site_dn_strsite_rdnsite_cover_rdns runcovered_sites_to_coverrs&N5#:#:#<#<$'$5*566J ||!8!8!:!:"%"3';==H99LH&--//((**W**,,---2---  " " ( ( * *ioo.?.? ? ? MH <CMM)) , ,Cv##%%\99&&s+++)00  i ( (  c%"9"9";";<< = =  $0 B0 BD*3tw<<88J %*A*A*C*C+.+>   )! Z 8  H!fUCMM::G")"7"7"9"9K&4466<<>>H#K08;;#(&{3x??"Y__%6%666#(B%)W%:%:%<%*>*@*@AAA r)&rrAr5sambar samba.dcerpcrrr samba.samdbr samba.ndrrr collectionsr Exceptionr objectrdictr2rr4r$r_rrrrrrrrQr`rr=rrrrrs,   ********     y   AAAAAVAAA TNNV_%:%:%<%<NNN N N n+n+n+n+n+Fn+n+n+b|2|2|2|2|2 |2|2|2~ [[[[[F[[[| _____V___D QQQQQ QQQhppppp6pppf ffffffffR=7=7=7=7=7=7=7=7@n,n,n,n,n,n,n,n,bV6V6V6V6V6vV6V6V6r!!!!!f!!!"""Bhhhhhr