EUc@sddlZddlZddlmZddlmZmZmZddlm Z ddl m Z m Z de fdYZdefd YZed ejjDZd efd YZd efdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefdYZdefd YZd!Z d"Z!d#Z"dS($iN(tdsdb(tdrsblobstdrsuapitmisc(tdsdb_Dn(t ndr_unpacktndr_packtKCCErrorcBseZRS((t__name__t __module__(((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR$stNCTypecBs&eZedd\ZZZZZRS(ii(RR trangetunknowntschematdomaintconfigt application(((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR (sccs1|]'\}}|d dkr||fVqdS(it__N((t.0tktv((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pys ,st NamingContextcBs_eZdZdZdZdZdZdZdZdZ dZ d Z RS( sBase class for a naming context. Holds the DN, GUID, SID (if available) and type of the DN. Subclasses may inherit from this and specialize cCs+||_d|_d|_tj|_dS(sKInstantiate a NamingContext :param nc_dnstr: NC dn string N(tnc_dnstrtNonetnc_guidtnc_sidR R tnc_type(tselfR((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt__init__6s   cCsd|jjf}|d|j}|dt|j}|jdkrW|d}n |d}|dt|j|jf}|S(s!Debug dump string output of classs%s:s nc_dnstr=%ss nc_guid=%ss nc_sid=s nc_sid=s nc_type=%s (%s)N( t __class__RRtstrRRRt nctype_lutR(Rttext((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt__str__@s  cCsddg}y(|jd|jdtjd|}Wn5tjk rk\}}td|j|fnX|d}d|krtj|jd|dd|_ nd|kr|dd|_ n|j dk st dS(Nt objectGUIDt objectSidtbasetscopetattrss)Unable to find naming context (%s) - (%s)i( tsearchRtldbt SCOPE_BASEtLdbErrort ExceptionRtGUIDtschema_format_valueRRRtAssertionError(RtsamdbR&trestenumtestrtmsg((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytload_ncOs    cCs(|jtjkst|jtjkS(sReturn True if NC is schema(RR R R.R (R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt is_schemabscCs(|jtjkst|jtjkS(sReturn True if NC is domain(RR R R.R(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt is_domaingscCs(|jtjkst|jtjkS(s Return True if NC is application(RR R R.R(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytis_applicationlscCs(|jtjkst|jtjkS(sReturn True if NC is config(RR R R.R(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt is_configqscCs|jdkr|j|n|jt|jkrItj|_nT|jt|j krstj |_n*|j dk rtj |_n tj |_dS(soGiven an NC object, identify what type is is thru the samdb basedn strings and NC sid value N(RRR4RRtget_schema_basednR R Rtget_config_basednRRRR(RR/((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytidentify_by_basednvscCsx|dkrtj|_n7|dkr6tj|_n|dkrR|j|n|jtjkrt|j|ndS(s>Given an NC which has been discovered thru the nTDSDSA database object, determine what type of NC it is (i.e. schema, config, domain, application) via the use of the schema attribute under which the NC was found. :param attr: attr of nTDSDSA object where NC DN appears smsDS-HasDomainNCsthasPartialReplicaNCst hasMasterNCsN(R RRR;R (RR/tattr((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytidentify_by_dsa_attrs   ( RR t__doc__RR!R4R5R6R7R8R;R?(((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR/s       t NCReplicacBseZdZdZdZddZdZdZdZ dZ dZ d Z e d Zd Zd Zd ZdZdZRS(sNaming context replica that is relative to a specific DSA. This is a more specific form of NamingContext class (inheriting from that class) and it identifies unique attributes of the DSA's replica for a NC. cCse||_||_t|_t|_t|_d|_d|_g|_ t|_ t j ||dS(sInstantiate a Naming Context Replica :param dsa_guid: GUID of DSA where replica appears :param nc_dnstr: NC dn string iN( t rep_dsa_dnstrt rep_dsa_guidtFalset rep_defaultt rep_partialtrep_rotrep_instantiated_flagsRtrep_fsmo_role_ownert rep_repsFromtrep_present_criteria_oneRR(Rt dsa_dnstrtdsa_guidR((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRs         cCsd|jj}|d|j}|d|j}|d|j}|d|j}|d|j}|d|j}|d|j}x|j D]}|d |}qWd t j ||fS( s!Debug dump string output of classs%s:s dsa_dnstr=%ss dsa_guid=%ss default=%ss ro=%ss partial=%ss present=%ss fsmo_role_owner=%ss %ss%s %s( RRRBRCRERGRFt is_presentRIRJRR!(RR trep((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR!scCs%|dkrd|_n ||_dS(s*Set or clear NC replica instantiated flagsiN(RRH(Rtflags((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytset_instantiated_flagss  cCs|dkr!t|_t|_n|dkr9t|_n|dkrt|_|jt|jkr|jt|jkrt|_qnB|dkrt|_t|_n!|dkrt|_t |_nt j |||dS(sGiven an NC which has been discovered thru the nTDSDSA database object, determine what type of NC replica it is (i.e. partial, read only, default) :param attr: attr of nTDSDSA object where NC DN appears R<smsDS-HasDomainNCsR=smsDS-hasFullReplicaNCssmsDS-hasMasterNCsN( tTrueRFRKRERRR9R:RGRDRR?(RR/R>((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR?s"            cCs|jS(sMWhether this is a default domain for the dsa that this NC appears on (RE(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt is_defaultscCs|jS(s&Return True if NC replica is read only(RG(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytis_roscCs|jS(s$Return True if NC replica is partial(RF(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt is_partial"scCs'|jr#|jtj@dkr#tStS(s7Given an NC replica which has been discovered thru the nTDSDSA database object and populated with replica flags from the msDS-HasInstantiatedNCs; return whether the NC replica is present (true) or if the IT_NC_GOING flag is set then the NC replica is not present (false) i(RKRHRtINSTANCE_TYPE_NC_GOINGRRRD(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRN&s cCsy+|jd|jdtjddg}Wn5tjk rb\}}td|j|fnX|d}d|krxC|dD]4}t|jttj |}|j j |qWndS(s*Given an NC replica which has been discovered thru the nTDSDSA database object, load the repsFrom attribute for the local replica. held by my dsa. The repsFrom attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on R$R%R&trepsFroms!Unable to find NC for (%s) - (%s)iN( R'RR(R)R*R+t RepsFromToRRtrepsFromToBlobRJtappend(RR/R0R1R2R3tvalueRO((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyt load_repsFrom2s   c Cs<t}g}g}xh|jD]]}|jrD|j|t}qn|jrc|jt}n|jt|jqWx|D]}|jj |qWg}| s|rdSt j }t j ||j |_t j|t jd|ds(tjoinRJ(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytdumpstr_to_be_deletedscCsdjd|jDS(Ns css'|]}|jrt|VqdS(N(R^R(RRv((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pys s(RwRJ(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytdumpstr_to_be_modifiedscCsy+|jd|jdtjddg}Wn5tjk rb\}}td|j|fnX|d}d|kr|d|_ndS(sGiven an NC replica which has been discovered thru the nTDSDSA database object, load the fSMORoleOwner attribute. R$R%R&t fSMORoleOwners!Unable to find NC for (%s) - (%s)iN(R'RR(R)R*R+RI(RR/R0R1R2R3((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytload_fsmo_roless  cCs&|jdk r"|j|kr"tStS(N(RIRRRRD(RRL((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytis_fsmo_role_ownersN(RR R@RR!RRQR?RSRTRURNR\RDRlRuRxRyR{R|(((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRAs     1     ?   tDirectoryServiceAgentcBseZdZdZdZdZdZdZdZdZ dZ d Z d Z d Z d Zd ZedZdZdZdZdZdZdZRS(cCsg||_d|_d|_t|_t|_d|_d|_d|_ i|_ i|_ i|_ dS(sInitialize DSA class. Class is subsequently fully populated by calling the load_dsa() method :param dsa_dnstr: DN of the nTDSDSA iN( RLRRMtdsa_ividRDt dsa_is_rot dsa_is_istgt dsa_optionst dsa_behaviort default_dnstrtcurrent_rep_tabletneeded_rep_tablet connect_table(RRL((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRs          cCsd|jj}|jd k r3|d|j}n|jd k r\|dt|j}n|jd k r|dt|j}n|d|j}|d|j}|d|j }|d}|d |j }|d }|d |j }|d }|d |j }|S( s!Debug dump string output of classs%s:s dsa_dnstr=%ss dsa_guid=%ss dsa_ivid=%ss ro=%ss gc=%ss istg=%ss current_replica_table:s %ss needed_replica_table:s connect_table:N( RRRLRRMRR~RTtis_gctis_istgtdumpstr_current_replica_tabletdumpstr_needed_replica_tabletdumpstr_connect_table(RR ((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR!s"   cCs|jj|S(N(Rtget(RR((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytget_current_replicascCs|jp|jS(sAReturns True if dsa is intersite topology generator for it's site(RR(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRscCs|jS(s1Returns True if dsa a read only domain controller(R(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRTscCs|jtj@dkrtStS(s*Returns True if dsa hosts a global catalogi(toptionsRtDS_NTDSDSA_OPT_IS_GCRRRD(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR scCs|j|krtStS(sIs dsa at minimum windows level greater than or equal to (version) :param version: Windows version to test against (e.g. DS_DOMAIN_FUNCTION_2008) (RRRRD(RRo((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytis_minimum_behaviorscCs|jtj@dkrtStS(s>Whether this allows NTDSConnection translation in its options.i(RRt%DS_NTDSDSA_OPT_DISABLE_NTDSCONN_XLATERRRD(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytis_translate_ntdsconn_disabledscCs|j|jfS(s5Return DSA current and needed replica tables (RR(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytget_rep_tables scCs|jjd\}}}|S(s(Get the parent DN string of this object.t,(RLt partition(Rtheadtsepttail((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytget_parent_dnstr%scCsydddddg}y(|jd|jdtjd|}Wn5tjk rt\}}td |j|fnX|d }tj|jd|dd |_ d |krtj|jd|d d |_ nd|krt |dd |_ nd|kr,|dd d kr,t |_n t|_d|kr[t |dd |_n|j||j|d S(sLoad a DSA from the samdb. Prior initialization has given us the DN of the DSA that we are to load. This method initializes all other attributes, including loading the NC replica table for this DSA. R"t invocationIDRs msDS-isRODCsmsDS-Behavior-VersionR$R%R&s&Unable to find nTDSDSA for (%s) - (%s)it invocationIdtTRUEN(R'RLR(R)R*R+RR,R-RMR~tintRRRRRDRtload_current_replica_tabletload_connection_table(RR/R&R0R1R2R3((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytload_dsa*s4          c Csddddddg}y(|jd|jdtjd |}Wn5tjk rw\}}td |j|fnXi}t|d d krx|d jD]}|d krqnx|d |D]}t||} | j } t | j } | |kr-t |j|j | } | || |j||n|jrZ|j||n|jr|j|||j|qqWx|D]}|j|=qWdS(szMethod to commit any uncommitted nTDSConnections modifications that are in our table. These would be identified connections that are marked to be added or deleted :param samdb: database to commit DSA connection list to :param ro: if (true) then peform internal operations but do not write to the database (readonly) N( Rtitemst to_be_addedt commit_addedtto_be_modifiedtcommit_modifiedR]tcommit_deletedRZ(RR/RhtdelconnRR((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytcommit_connectionss     cCs&||jkst||j|s(RwR(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRscCsdjd|jDS(s0Debug dump string output of needed replica tables css|]}t|VqdS(N(R(RRv((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pys s(RwR(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRscCsdjd|jDS(s)Debug dump string output of connect tables css|]}t|VqdS(N(R(RRv((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pys s(RwR(R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRscCsdttj|j}t|}t|_t|_||_||_ ||_ |dk r}|j |_ |j|_n|dk r||_n t|_|j|||S(sSet up a new connection for the DSA based on input parameters. Connection will be added to the DSA connect_table and will be marked as "to be added" pending a call to commit_connections() sCN=%s,N(Rtuuidtuuid4RLRRRRtenabledRRRPRRttransport_dnstrtguidttransport_guidtscheduletnew_connection_scheduleR(RRRPt transportRtschedRR((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pytnew_connections           (RR RR!RRRTRRRRRRRRRRDRRRRRRR(((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR}s*          / R        RcBseZdZdZdZdZdZedZedZ edZ dZ d Z d Z d Zd Zd ZdZdZdZdZdZdZdZdZRS(s5Class defines a nTDSConnection found under a DSA cCsy||_d|_t|_d|_t|_t|_t|_d|_ d|_ d|_ d|_ d|_ d|_dS(Ni(RRRRDRt whenCreatedRR]RRt system_flagsRRRR(RR((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR%s            cCsd|jj|jf}|d|j}|d|j}|d|j}|d|j}|d|j}|d|j}|d|j }|d |j }|j dk r|d t |j }n|jdk r|d t |j}n|d |j}|jdk r|d |jj7}|d|jj7}|d|jj7}xt|jjD]~\}}|d||jf7}|d||jf7}|d|7}x)|jj|jD]}|d|}qW|d}qbWn|S(s1Debug dump string output of NTDSConnection objects %s: dn=%ss enabled=%ss to_be_added=%ss to_be_deleted=%ss to_be_modified=%ss options=0x%08Xs system_flags=0x%08Xs whenCreated=%ds transport_dn=%ss guid=%ss transport_guid=%ss from_dn=%ss schedule.size=%ss schedule.bandwidth=%ss schedule.numberOfSchedules=%ss" schedule.headerArray[%d].type=%ds$ schedule.headerArray[%d].offset=%ds schedule.dataArray[%d].slots[ s0x%X t]N(RRRRRR]RRRRRRRRRRRtsizet bandwidthtnumberOfSchedulest enumeratet headerArrayttypetoffsett dataArraytslots(RR titheadertslot((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR!4s:cCs/ddddddddg}y(|jd |jd tjd |}Wn5tjk r}\}}td |j|fnX|d }d|krt|dd |_nd|kr|dd jj j dkrt |_ qnd|krt|dd |_ nd|krJtj|jd|dd |_nd|krt||dd }|j|t|jnd|krttj|dd |_nd|krtj|dd |_nd|kr+t||dd }t|j|_|jdk s+tndS(sGiven a NTDSConnection object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. RtenabledConnectionRRR"t transportTypet fromServert systemFlagsR$R%R&s-Unable to find nTDSConnection for (%s) - (%s)iRN(R'RR(R)R*R+RRtuppertlstriptrstripRRRRRR,R-RRtload_connection_transportRRdRRRtstring_to_timeRRRR.(RR/R&R0R1R2R3R((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyR[sH     &       cCsdg}y%|jd|dtjd|}Wn2tjk rb\}}td||fnXd|dkr|d}||_tj|jd|dd|_ n|jdk st |j dk st dS(sGiven a NTDSConnection object which enumerates a transport DN, load the transport information for the connection object :param tdnstr: transport DN to load R"R$R%R&s$Unable to find transport (%s) - (%s)iN( R'R(R)R*R+RRR,R-RRR.(RR/ttdnstrR&R0R1R2R3((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRs   cCsr|jstt|_|r"dSy|j|jWn5tjk rm\}}td|j|fnXdS(sLocal helper routine for commit_connections() which handles committed connections that are to be deleted from the database database Ns/Could not delete nTDSConnection for (%s) - (%s)(R]R.RDtdeleteRR(R*R+(RR/RhR1R2((s7/usr/lib/python2.7/dist-packages/samba/kcc/kcc_utils.pyRs c Cs|jstt|_|r"dSt}y=|jd|jdtj}t|dkrdt}nWnGtj k r\}}|tj krt d|j|fqnX|rt d|jn|j rd}nd}tj }tj||j|_tjd tjd |d s4  \6g@X