bddlmZddlZddlZddlmZddlZddlm Z ddl m Z m Z m Z mZddlmZddlmZddlmZmZmZdd lmZmZdd lmZdd lmZdd lmZmZm Z m!Z!m"Z"dd l#m$Z$ddlm%Z%dZ&dZ'dZ(dZ)dZ*Gdde Z+Gdde Z,Gdde Z-Gdde Z.Gdde Z/Gdde Z0Gd d!e Z1Gd"d#eZ2dS)$N)common)system_session)Command CommandErrorOption SuperCommand) attr_default)SamDB) drs_utils nttime2stringdsdb)drsuapimisc) join_clone)colour)get_partition_mapsget_utdv_edgesget_utdv_distancesget_utdv_summaryget_kcc_and_dsas) get_string)get_default_backend_storec tj|j|j|j\|_|_|_dS#t$r}td|jz|d}~wwxYw)z'make a DRSUAPI connection to the serverzDRS connection to %s failedN) r drsuapi_connectserverlpcredsrdrsuapi_handlebind_supported_extensions Exceptionrctxes 2/usr/lib/python3/dist-packages/samba/netcmd/drs.pyrr4sJKTKdeheoqtqwy|zCLDLDHc(#*G*G*G JJJ83:EqIIIJs8< A#AA#c td|jzt|j|j|_dS#t $r}td|jz|d}~wwxYw)z$make a ldap connection to the server ldap://%surl session_info credentialsrzLDAP connection to %s failedN)r rrrrsamdbr!rr"s r% samdb_connectr-<szKkCJ6'5'7'7&)iCF<<<  KKK9CJFJJJKs6: A!AA!c*|\}}|dkrdSd||fzS)z*return "was successful" or an error stringrzwas successfulzfailed, result %u (%s))werrecodeestrings r% drs_errmsgr3Fs+UG zz #ug&6 66c$|d}|ddks|ddks |ddkrtd|z|d d d }|d d d }||fS) z+parse a NTDS DN returning a site and server,rzCN=NTDS Settingsz CN=ServerszCN=Siteszbad NTDS DN %sr=)split RuntimeError)ntds_dnarsites r%drs_parse_ntds_dnr@Ns cAt!!!QqT\%9%9QqTZ=O=O+g5666 qTZZ__Q F qTZZ__Q D &>r4classicc jeZdZdZdZejejejdZ e ddddd e d d ddd e d dddd e ddddde ddddde e dddde ddd gZ d!gZ d"Zd#Zd$Zd%d%d%d%e d&dfd'Zd(Zd)Zd*Zd+Zd,Zd-Zd.Zd%S)/cmd_drs_showreplzShow replication status.%prog [] [options] sambaopts versionoptscredopts--jsonz"replication details in JSON formatformat store_constjson)helpdestactionconstz --summaryz5summarize overall DRS health as seen from this serversummaryz--pull-summaryz:Have we successfully replicated from all relevent servers? pull_summaryz--notify-summarynotify_summaryzsHave we successfully notified all relevent servers of local changes, and did they say they successfully replicated?)rOrPrNrMz --classiczprint local replication detailsrA)rMrNrOrPdefaultz-vz --verbosez Be verbose store_truerMrOz--colorzUse colour output (yes|no|auto)no)rMrTDC?c  t|j}|j|t|jt |j|jt|jt|j dd} |j d|ztj gn=#tj$r+}|j\}}|tjkrd|d<nYd}~nd}~wwxYw t#|j \}}|d||d <n#t$$rYnwxYw|S) z8Convert an ldb neighbour object into a python dictionaryF)NC dnDSA objectGUIDlast attempt timelast attempt messageconsecutive failures last successNTDS DN is deletedz basescopeattrsTraN\DSA)strsource_dsa_obj_guidnaming_context_dnr last_attemptr3result_last_attemptconsecutive_sync_failures last_successsource_dsa_obj_dnr,searchldb SCOPE_BASELdbErrorargsERR_NO_SUCH_OBJECTr@r<) selfndsa_objectguiddr$errno_r?rs r%parse_neighbourz cmd_drs_showrepl.parse_neighbour~sIQ233(,!.q~!>!>$.q/D$E$E$%$?)!.991.//   J  ;#?$'N$&  ( ( ( (|   JUA..."&,    .q/BCCNT6#'440AeHH    D s*3*BC-!CC!C>> D  D c|d|dzd|vr|d|dzn|d|dz|d|dz|d |d d |d |d |dz|d|dz|ddS)z&print one set of neighbour informationz%srZrgz %s via RPCz NTDS DN: %sr`z DSA object GUID: %sr[z Last attempt @ r\ r]z %u consecutive failure(s).r^z Last success @ %sr_N)message)rvrys r%print_neighbourz cmd_drs_showrepl.print_neighbours TAgJ&''' A:: LL!E(2 3 3 3 3 LL1Y<7 8 8 8 .3C1DDEEE 15H3I3I3I345K3L3LN O O O 5-./ 0 0 0 ,q/@@AAA Rr4ctj}||_ jjd|\}}n%#t $r}t d|z|d}~wwxYwfd|jD}|S)Nrz"DsReplicaGetInfo of type %u failedc:g|]}|Sr/)r|).0rwrvs r% z3cmd_drs_showrepl.get_neighbours..s'<<7Ja7O7O"))#... , , ,!*- 1 1|$-.!33s>7Ja7O7O$++C000  -  LL&EFF G G G . V\*IJJKKK)..C((---- . V\*GHHIII+..C((----1 V^L1122222r4c,|dS)NrQrrvs r%rzcmd_drs_showrepl.summary_outputs**9555r4c,|dS)NrSrrs r%rz&cmd_drs_showrepl.notify_summary_outputs**+;<<:::r4c t|t||j}t |\}} |j|t jgd}n$#t$r}td|zd}~wwxYwtt|dddt|j d|dddt|j d|dddd}|j|d }|tj}|tj} g} |D]} t%| d dd \} } }t%| d t%| d dtt| ddtt| d ddkd}| | |j|t jdg}t%|ddd|d<nM#t j$r)}|j\}}|t jkrd|d<Yd}~nd}~wt2t4f$rYnwxYwg|d<| dgD]Z}t%|d}|d|dt|df[||| | ||dS)N)options objectGUID invocationIdrbzFailed to search NTDS DN %srrrrz(objectClass=nTDSConnection))rc expression fromServerr6nameenabledConnectionTRUE)r remote DNrenabled dnsHostNamedns nameTra replicates NCzmS-DS-ReplicatesNCReason:r:r7)dsarrNTDSConnectionsr?r)rr-r,get_dsServiceNamer@rprqrrr!rintr rschema_format_valuerr!DRSUAPI_DS_REPLICA_INFO_NEIGHBORSDRSUAPI_DS_REPLICA_INFO_REPSTOrh partitionupperrrsrtruKeyError IndexErrorrr;)rvr=r?rntdsr$ dsa_detailsconnrepsfromrepsto conn_detailscc_rdnsep c_server_dnry c_server_resrzr{rr>s r%rz$cmd_drs_showrepl.get_local_repl_datasd*..00*733v H:$$'OxOxOx$yyDD H H H>??$TZ%C%Cd1gl3A6&8&899&tz'E'Ed1gn5a8(:(:;;   z  g:X YY&&w'PQQ$$W%KLL  = =A&)!L/!*<&=&=&G&G&L&L #E3 AfI <!344|Ay!<<==&|A7J)/(1(12227%''VD A    " " " #z00k7:~8E 1 H H !$LOM$B1$E F F* < + + +V C222&*AlOj)    "$Ao UU5r:: = =FFLL%%/"))1Q4QqT*;<<<< =  +    s7 )A55 B?BBA J((K27KK21K2c|}|d}|d}|d}|d}|d}|d}||d||d|d z|d |d z|d |d z|d|D]}|||d|D]}||gd} |d|D]} |d| dr|d|d| dz|dt | dz|d| dz|d| dz|d|d| d z| drv| dD]k\} } |d | z|d!| z| D]3} t t| d"| zr|d#| z4l|d$dS)%Nrrrrr?rrfzDSA Options: 0x%08xrzDSA object GUID: %srzDSA invocationId: %s rz==== INBOUND NEIGHBORS ==== z==== OUTBOUND NEIGHBORS ==== ) NTDSCONN_KCC_GC_TOPOLOGYNTDSCONN_KCC_RING_TOPOLOGY#NTDSCONN_KCC_MINIMIZE_HOPS_TOPOLOGY#NTDSCONN_KCC_STALE_SERVERS_TOPOLOGY,NTDSCONN_KCC_OSCILLATING_CONNECTION_TOPOLOGY"NTDSCONN_KCC_INTERSITE_GC_TOPOLOGYNTDSCONN_KCC_INTERSITE_TOPOLOGY%NTDSCONN_KCC_SERVER_FAILOVER_TOPOLOGY#NTDSCONN_KCC_SITE_FAILOVER_TOPOLOGY&NTDSCONN_KCC_REDUNDANT_SERVER_TOPOLOGYz!==== KCC CONNECTION OBJECTS ==== z Connection --raz' WARNING: Connection to DELETED server!z Connection name: %srz Enabled : %srz Server DNS name : %srz Server DN name : %srz TransportType: RPCz options: 0x%08Xrz ReplicatesNC: %sz Reason: 0x%08xrz %sz)Warning: No NC replicated for Connection!)rrrrrhrgetattrr)rvrrrrrr?rrwreasonsryncreasonss r%rzcmd_drs_showrepl.classic_outputCs!''))5k  #h-. F|h vv./// *[-CCDDD *[-FFGGG - N0KKLLL 4555 $ $A   # # # # 5666 $ $A   # # # # = = = 9::: J JA LL ) ) )uu\"" I GHHH LL01V9< = = = LL03q|3D3D3J3J3L3LL M M M LL1AEE*4E4EE F F F LL1AkNB C C C LL1 2 2 2 LL.9= > > >! J"#O"499JBLL!7"!<===LL!5!>???$99"4A..79 LLa88899 HIIII) J Jr4)__name__ __module__ __qualname____doc__synopsisr SambaOptionsVersionOptionsCredentialsOptionstakes_optiongroupsrDEFAULT_SHOWREPL_FORMAT takes_options takes_argsr|rrrrrrrrrrr/r4r%rCrC[s""'H)-. xB]& B B B{#5]) E E E (D]. J J J !-%H# % % % {!B]). 0 0 0 t[|LIIIy@   %M,J>      Tt*!!!!0--- #3#3#3J666===;;;= = = ~6J6J6J6J6Jr4rCcReZdZdZdZejejejdZ dgZ ddZ dS) cmd_drs_kccz)Trigger knowledge consistency center run.rDrErXNc||_|tj|j}||_||jd|_t|tj } |j |j d|n"#t$r}td|d}~wwxYw|d|zdS)NTrrzDsExecuteKCC failedz#Consistency check on %s successful.)rrrrrrrrr DsExecuteKCC1 DsExecuteKCCrr!rr)rvrrFrHrGrr$s r%rzcmd_drs_kcc.runs((** :&tw//B --dg-MM $&& 9 L % %d&91d C C C C 9 9 94a88 8 9 :R?@@@@@s!B"" C,B<<CNNNN rrrrrrrrrrrrr/r4r%rr|si33'H)-. J%)'+AAAAAAr4rc 8eZdZdZdZejejejdZ gdZ e ddde d d de d d de d dde ddde ddde ddde dddgZ ddZ ddZdS)cmd_drs_replicatez+Replicate a naming context between two DCs.z/%prog [options]rE)DEST_DC SOURCE_DCNCz --add-refz&use ADD_REF to add to repsTo on sourcerUrVz --sync-forcedz,use SYNC_FORCED to force inbound replicationz --sync-allz&use SYNC_ALL to replicate from all DCsz --full-synczresync all objectsz--localzIpull changes directly into the local database (destination DC is ignored)z--local-onlinez_pull changes into the local database (destination DC is ignored) as a normal online replicationz --async-opz use ASYNC_OP for the replicationz--single-objectz\Replicate only the object specified, instead of the whole Naming Context (only with --local)Fc r||_t|ttd|j|jd|_td|jzt|j|j|_|jdtj dg}|ddd|_ |j|j tj d g}tj |jd |dd d|_tj |j}tj |j}|j} t"j} |rt"j} d }|jt+jd |jz|j|j|j|} |j} | ||| | || | \} }n%#t2$r}t5d |z|d}~wwxYw|j|r(|d| |||jjfzdS|d| |||jjfzdS)z+replicate from a source DC to the local SAMNr)r*r)r+rflagsr'r(r dsServiceNamerbrTzncacn_ip_tcp:%s[seal])rodc full_syncexop sync_forcedzError replicating DN %szMFull Replication of all %d objects and %d links from %s to %s was successful.zPIncremental replication of %d objects and %d links from %s to %s was successful.)rrr rrr local_samdbr,rprqrrr=rGUIDr ntds_guidget_invocation_idrDRSUAPI_EXOP_NONEDRSUAPI_EXOP_REPL_OBJtransaction_startr drs_Replicateam_rodc replicater!rtransaction_commitrr))rvrrr  single_objectr ressource_dsa_invocation_iddest_dsa_invocation_iddestination_dsa_guidr replr  num_objects num_linksr$s r%drs_local_replicatez%cmd_drs_replicate.drs_local_replicates   !n.>.>D-1ZDG'(***{T[8(6(8(8'+zdg??? %%2S^-<,=&??1vo.q1 %%4'L'+w'+z43C'=??'')) B'+~~b6N6J;?@I;?BM (6(O(O $[)) B B B82=qAA A B %%'''  1 LL9%y)*.00 1 1 1 1 1 LL9%y)*.00 1 1 1 1 1s H)) I 3II Nc ||_| |_| |jd|_|r||||| |dS| r/t jd|j}tj}nt||j}|j }| sd|_ t||j |j dt!j|dt!j|d g }t%|d krt'd |z|d d }|j |t jdddg}t%|d krt'd|z|d dd }t+t-|dd }d }|t.jzs|t jz}|r|t jz}|r|t jz}|r|t jz}|r|t jz}| r|t jz} t?j |||||n'#t>j!$r}t'd|d}~wwxYw| r|"d|d|ddS|"d|d|ddS)NTr)r rr z irpc:dreplsrv)lp_ctxi,z!(&(objectCategory=server)(|(name=z)(dNSHostName=z))))rcrrerzFailed to find source DC %sdnz5(|(objectCategory=nTDSDSA)(objectCategory=nTDSDSARO))rr)rcrdrrez Failed to find source NTDS DN %szDsReplicaSync failedzReplicate from z to z was started.z was successful.)#rrrrrr rr policy_handlerrrequest_timeoutr-r,rpget_config_basednrq binary_encodelenrSCOPE_ONELEVELrr r$DS_NTDSDSA_OPT_DISABLE_OUTBOUND_REPLDRSUAPI_DRS_WRIT_REPDRSUAPI_DRS_ADD_REFDRSUAPI_DRS_SYNC_FORCEDDRSUAPI_DRS_SYNC_ALLDRSUAPI_DRS_FULL_SYNC_NOWDRSUAPI_DRS_ASYNC_OPr sendDsReplicaSync drsExceptionr)rvrrradd_refr sync_allr local local_onlineasync_oprrFrHrG server_bindserver_bind_handlemsg server_dnsource_dsa_guid dsa_options req_optionsestrs r%rzcmd_drs_replicate.runs0  ((**--dg-MM    $ $Yi3@1< % > > > F  5!//$'JJJK!%!3!5!5   D ! ! !,K!%!4  1*0K 'djTZ%A%A%C%C%C  i ( ( ( (  i ( ( ( (,*')  ** s88q=="!EE!E 3333sssCDDDD &)<<=== % (<<=== di!5 6 6 G LL*TY-EE F F F F F G Gr4rrr/r4r%rArACso,,'H)-. J%)'+QGQGQGQGQGQGr4rAceZdZdZdZejejejdZ dgZ e dddd gZ d d d d dZ ddZdS)cmd_drs_optionszJQuery or change 'options' for NTDS Settings object of a Domain Controller.rDrErXz --dsa-optionzDSA option to enable/disablerhza{+|-}IS_GC | {+|-}DISABLE_INBOUND_REPL | {+|-}DISABLE_OUTBOUND_REPL | {+|-}DISABLE_NTDSCONN_XLATE)rMtypemetavarrr7r8)IS_GCDISABLE_INBOUND_REPLDISABLE_OUTBOUND_REPLDISABLE_NTDSCONN_XLATENc |_|tjj}|_|jd_tj }j |tj dg}t|ddd fdjD}dd|z|rB|dd d vrt#d |z|d d} | jvrt#d |z|dd d kr j| z n j| z tj} tjj|| _tjt/ tjd| d<j|  fd jD}dd|zdSdS)NTrrrbrc4g|]}j|z|Sr/ option_maprxdsa_optsrvs r%rz'cmd_drs_options.run..s*PPP!$/!2Dx2OPAPPPr4zCurrent DSA options: z, r)+-zUnknown option %src4g|]}j|z|Sr/rrs r%rz'cmd_drs_options.run..s*TTTadoa6H86STTTTr4zNew DSA options: )rrrrrrrr-r,rrprqrrrrrjoinrkeysMessageDnr#MessageElementrhFLAG_MOD_REPLACEmodify) rvr dsa_optionrFrHrGr=rcur_optsflagmrs ` @r%rzcmd_drs_options.runsF((** :&tw//B --dg-MM d*..00jWCN9+VVs1vi(+,,QPPPPtPPP ,tyy/B/BBCCC  D"1"~Z//"#6#CDDDabb>D4?//1111"#6#CDDD"1"~$$DOD11T_T222 A6$*g..AD-c(mmS=QS\]]AiL J  a TTTTT4?TTTH LL,tyy/B/BB C C C C C# D Dr4)NNNNN)rrrrrrrrrrrrrrrr/r4r%rrsTT'H)-. J ~$Bz | | |M &*4+5,688J '+7;%D%D%D%D%D%Dr4rc eZdZdZdZejejejdZ e dde e dde e d d d d e ddd e dddddgde ze ddddgZ dgZ d dZdS)!cmd_drs_clone_dc_databasez9Replicate an initial clone of domain, but DO NOT JOIN it.z%prog [options]rEz--serverz DC to join)rMrz --targetdirz#where to store provision (required)z-qz--quietzBe quietrUrVz--include-secretszAlso replicate secret valuesz--backend-storechoice BACKENDSTOREtdbmdbz7Specify the database backend to be used (default is %s))rrchoicesrMz--backend-store-sizebytesSIZEzeSpecify the size of the backend database, currentlyonly supported by lmdb backends (default is 8 Gb).)rrrMdomainNFc |} || } |||}|tdt ||| | |d|| | |  dS)N)rquietz$--targetdir option must be specifiedSAMBA_INTERNAL) loggerrrrr dns_backend targetdirinclude_secrets backend_storebackend_store_size)rr get_loggerrr)rvrrFrHrGrrrrrrrrrrs r%rzcmd_drs_clone_dc_database.runs # # % %((,,>>  EFF F&u .>&!.&8  : : : : : :r4) NNNNNFFFNN)rrrrrrrrrrrrhrrrrr/r4r%rrs*CC,H)-. z 3777}#HsSSStYZ EEE")GP\]]] xu~&(A(A(C(CD E E E %GVI J J J MJ37598=37::::::r4rc eZdZdZdZejejejdZ e ddddd e d d d e ddde ddde ddde dddgZ dZ dZ ddZdS)cmd_drs_uptodatenesszShow uptodateness statusz%prog [options]rEz-Hz--URLURLHz%LDB URL for database or target server)rrNrMz-pz --partitionzrestrict to this partition)rMrIrUzPrint data in json format)rOrMz --maximumz#Print maximum out-of-date-ness onlyz--medianz"Print median out-of-date-ness onlyz--fullz Print full out-of-date-ness datac.tj|dS)Nr7r)rLdumps)rvpartitions_summariess r%format_as_jsonz#cmd_drs_uptodateness.format_as_json+sz.q9999r4cg}|D]S\}}d|D}|ddd|}||Td|S)Nc"g|] \}}|d| S)rr/)rkvs r%rz7cmd_drs_uptodateness.format_as_text..1s'CCC41aAA&CCCr415r~r )itemsrr)rvrlines part_namerQrlines r%format_as_textz#cmd_drs_uptodateness.format_as_text.s"6"<"<">">   IwCC7==??CCCE!*DIIe,<,<,<=D LL    yyr4NFc |} || d} t|| | \}}|j}t |\}}|r#||vr ||}||i}nt d|zg}|r|d|r|di}i}|D]C\}}t|||| | }t||}t||}|||<|||<D|r| |}n-|r| |}n| |}t||jdS)NTrzunknown partition %smaximummedian)filters)file)rrrr,rrrrrrrrrprintr)rvrrrLrrfullrFrHrGrrrr local_kccdsasr,short_partitionsr{part_dnrpartitions_distancesrr utdv_edges distancesrQoutputs r%rzcmd_drs_uptodateness.run6s  # # % %((d(CC*1b%88 4077!  G,,,*95$-w#7  "#9I#EFFF  & NN9 % % %  % NN8 $ $ $!!"2"8"8":": 6 6 Iw' 4"eLLJ*:t<>FF C,,-ABB,,-ABB f49%%%%%%r4) NNFFFFNNNFF)rrrrrrrrrrrrrrrr/r4r%rrs/"" H)-. tWe#; = = =t]0 2 2 2x / 1 1 1{<9 ; ; ;z,8 : : :x 6 8 8 8 M:::   %):?7;!&*&*&*&*&*&*&r4rceZdZdZiZeed<eed<eed<eed<e ed<e ed<e ed<d S) cmd_drsz0Directory Replication Services (DRS) management.bindkccrshowreplrzclone-dc-database uptodatenessN) rrrr subcommandsrArrrCrrrr/r4r%rrcs::K&,..K$K0022K ..00K ,_..K '@'@'B'BK#$"6"6"8"8Kr4r)3 samba.getoptgetoptrrqloggingrrrL samba.authr samba.netcmdrrrr samba.netcmd.commonr samba.samdbr sambar r r samba.dcerpcrr samba.joinrrsamba.uptodatenessrrrrr samba.commonrrrr-r3r@rrCrrrArrrrr/r4r%r ss,  %%%%%% -,,,,,0000000000&&&&&&&&!!!!!!$#####111111JJJKKK777$^J^J^J^J^Jw^J^J^JB AAAAA'AAABc[c[c[c[c[c[c[c[L^G^G^G^G^G7^G^G^GB<D<D<D<D<Dg<D<D<D~+:+:+:+:+:+:+:+:\O&O&O&O&O&7O&O&O&d 9 9 9 9 9l 9 9 9 9 9r4