b4ddlZddlmZddlmZddlmZddlm Z m Z m Z m Z Gdde Z Gdde ZGd d e ZGd d eZGd de ZGdde ZdS)N)system_session)SamDB)Command CommandError SuperCommandOptioncleZdZdZdZejejejdZ e ddde dd gZ d d Z d S) cmd_forest_showzDisplay forest settings. These settings control the behaviour of all domain controllers in this forest. This displays those settings from the replicated configuration partition. z%prog [options] sambaopts versionoptscredopts-H--URL%LDB URL for database or target serverURLHhelptypemetavardestNc6|}||}t|t||}|}|jd|} || tj|j } | d} |j d| z|j D]\} |j | d| | dd0#t$r |j d| zYYwxYwdS) Nurl session_info credentialslp,)basescopeattrsrzSettings for %s :  z%s: ) get_loadparmget_credentialsrr domain_dnobjectdnsearchldb SCOPE_BASE attributesoutfwriteKeyError) selfrrr r rcredssamdbr' object_dnres res_objectattrs 5/usr/lib/python3/dist-packages/samba/netcmd/forest.pyrunzcmd_forest_show.run4sA  # # % %((,,!.*:*:"'B000OO%% #}}}ii8 ll !%22 V  +i7888O ; ;D ; dddJt4DQ4G4G4G HIIII ; ; ;  2T 9::::: ; ; ;s?,C,,'DDNNNN)__name__ __module__ __qualname____doc__synopsisoptions SambaOptionsVersionOptionsCredentialsOptionstakes_optiongroupsrstr takes_optionsr8r7r r s!H)-. tW#JS 2 2 2M ;;;;;;rGr czeZdZdZdZdZdZejej ej dZ e ddde dd gZd gZd d ZdS)cmd_forest_setzQModify forest settings. This will alter the setting specified to value. Nz%prog value [options]r rrrrrrvaluec|}||}t|t||}|} |jd| } t j} t j|| | _ t j |t j |j | |j <| | |jd|j d|ddS)Nrrzset r#r$)r%r&rrr'r(r*MessageDndnMessageElementFLAG_MOD_REPLACE attributemodifyr-r.) r0rJrrr r rr1r2r'r3ms r7r8zcmd_forest_set.rungs  # # % %((,,!.*:*:"'B000OO%% #}}}ii8  KMMveY''. 3'99$.  Q $...%%%@AAAAArGr9)r:r;r<r=rQr(r>r?r@rArBrCrrDrE takes_argsr8rFrGr7rIrIOs IH&H)-. tW#JS 2 2 2M JBBBBBBrGrIceZdZdZdZdgZdS)!cmd_forest_show_directory_servicezDisplay Directory Service settings for the forest. These settings control how the Directory Service behaves on all domain controllers in the forest. ?CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration dsheuristicsN)r:r;r<r=r(r,rFrGr7rVrV}s( QH !JJJrGrVceZdZdZdZdZdS)-cmd_forest_set_directory_service_dsheuristicsaySet the value of dsheuristics on the Directory Service. This value alters the behaviour of the Directory Service on all domain controllers in the forest. Documentation related to this parameter can be found here: https://msdn.microsoft.com/en-us/library/cc223560.aspx In summary each "character" of the number-string, controls a setting. A common setting is to set the value "2" in the 7th character. This controls anonymous search behaviour. Example: dsheuristics 0000002 This would allow anonymous LDAP searches to the domain (you may still need to alter access controls to allow this). rWrXN)r:r;r<r=r(rQrFrGr7rZrZs%QHIIIrGrZcJeZdZdZiZeed<eed<dS)cmd_forest_directory_servicez*Forest configuration partition management.showrXN)r:r;r<r= subcommandsrVrZrFrGr7r\r\sA44K;;==K"O"O"Q"QKrGr\c0eZdZdZiZeed<dS) cmd_forestzForest management.directory_serviceN)r:r;r<r=r^r\rFrGr7r`r`s/K'C'C'E'EK#$$$rGr`)r* samba.getoptgetoptr? samba.authr samba.samdbr samba.netcmdrrrrr rIrVrZr\r`rFrGr7rgs& %%%%%%-;-;-;-;-;g-;-;-;`)B)B)B)B)BW)B)B)B\""""""""N(RRRRR<RRRFFFFFFFFFFrG