uUc@sdZddlZddlZddlZddlZddlZddlmZddlmZm Z ddl m Z m Z ddl mZdZdejfd YZdS( s(Convenience functions for using the SAM.iN(tdsdb(t ndr_unpacktndr_pack(tdrsblobstmisc(tnormalise_int32trestructuredTexttSamDBcBseZdZiZiZd>d>d>d>d>dd>eed>d Zd>dd>dZdZ dZ dZ dZ dZ d>eed Zd Zd>d>d>d>d>d>d>d>d Zd Zed Zeed>d>d>d>d>d>d>d>d>d>d>d>d>d>d>d>d>ed>d>d>d>d>d>d>dZdZed>dZedZdZdZeeedZdZdZeeedZdZedZ dZ!dZ"dZ#dZ$dZ%dZ&d Z'd!Z(d"Z)d#Z*d$Z+d%Z,ed&Z-ed'Z.d(Z/d)Z0d*Z1d+Z2d,Z3ed-Z4d.Z5d/Z6d0Z7d1Z8d2Z9d3Z:d4Z;d5Z<d6Z=d7Z>d8Z?d9Z@d>d>d>d:ZAd;ZBd<ZCd=ZDRS(?sThe SAM database.ic Cs||_| sd}n'|dkr?|dk r?|j}n||_tt|jd|d|d|d|d|d|d||rtj|n| dk rtj || ndS(Nturltlpt modules_dirt session_infot credentialstflagstoptions( R tNonet samdb_urlRtsuperRt__init__Rt_dsdb_set_global_schemat_dsdb_set_am_rodc( tselfRR R R R R Rt global_schemat auto_connecttam_rodc((s//usr/lib/python2.7/dist-packages/samba/samdb.pyR,s   $ cCsi|jdk r7tjj| r7|jj|}n||_tt|j d|d|d|dS(sconnect to the databaseRR RN( R Rtostpathtexistst private_pathRRRtconnect(RRR R((s//usr/lib/python2.7/dist-packages/samba/samdb.pyRAs " cCs tj|S(sreturn True if we are an RODC(Rt_am_rodc(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pyRJscCs tj|S(s%return True if we are an PDC emulator(Rt_am_pdc(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pytam_pdcNscCst|jS(sreturn the domain DN(tstrtget_default_basedn(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt domain_dnRscCs&tjj}|j||dtdS(s|Disables an account :param search_filter: LDAP filter to find the user (eg samccountname=name) tonN(tsambaRtUF_ACCOUNTDISABLEttoggle_userAccountFlagstTrue(Rt search_filterR ((s//usr/lib/python2.7/dist-packages/samba/samdb.pytdisable_accountVs cCs0tjjtjjB}|j||dtdS(s{Enables an account :param search_filter: LDAP filter to find the user (eg samccountname=name) R$N(R%RR&tUF_PASSWD_NOTREQDR'tFalse(RR)R ((s//usr/lib/python2.7/dist-packages/samba/samdb.pytenable_account`sc Cs7|jd|jdtjd|ddg}t|dkrUtd|nt|dksmt|dj}t|ddd}|r|r||@rd |} t| n||B} n5|r||@ rd |} t| n||@} || krd Sd ||| f} |j | d S( snToggle_userAccountFlags :param search_filter: LDAP filter to find the user (eg samccountname=name) :param flags: samba.dsdb.UF_* flags :param on: on=True (default) => set, on=False => unset :param strict: strict=False (default) ignore if no action is needed strict=True raises an Exception if... tbasetscopet expressiontattrstuserAccountControlis!Unable to find account where '%s'is Account flag(s) '%s' already sets"Account flag(s) '%s' already unsetNs| dn: %s changetype: modify delete: userAccountControl userAccountControl: %u add: userAccountControl userAccountControl: %u ( tsearchR#tldbt SCOPE_SUBTREEtlent ExceptiontAssertionErrortdntintt modify_ldif( RR)R t flags_strR$tstricttrest account_dntold_uacterrortnew_uactmod((s//usr/lib/python2.7/dist-packages/samba/samdb.pyR'js(        c Cs|jd|jdtjd|dg}t|dkrRtd|nt|dksjt|dj}d|}|j|d S( sForces a password change at next login :param search_filter: LDAP filter to find the user (eg samccountname=name) R.R/R0R1isUnable to find user "%s"is= dn: %s changetype: modify replace: pwdLastSet pwdLastSet: 0 N( R3R#R4R5R6R7R8R9R;(RR)R>tuser_dnRC((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt#force_password_change_at_next_logins  c Csd||pd|jf} i| d6|d6dd6} |dk rYt|| d   (FF  c% Cs?d}|d-k r||7}n|d-k r<|d|7}n|d-k rY|d|7}n|}|d-kr|dk r|}nd||pd|jf} tj||jjjdd}!d||!f}"i| d6|d 6|"d 6d d 6}#|d-k r||#d st posixAccounttuidt uidNumberRMtgecost loginShelltunixHomeDirectoryRORNsABCD!efgh12345$67890tunixUserPasswords(samAccountName=%s)N(RR#R4tDnt canonical_strtreplaceRtanytmaptMessageR9tMessageElementt FLAG_MOD_ADDR!tFLAG_MOD_REPLACER^RQtmodifyt setpasswordR]R`Ra(%Rtusernametpasswordt'force_password_change_at_next_login_reqtuseusernameascntuseroutsurnamet givennameRut profilepatht scriptpatht homedrivet homedirectorytjobtitleR{R|RJRUtinternetaddressttelephonenumbertphysicaldeliveryofficeRWRt uidnumberRXRt loginshellRRYtunixhomet displaynametcnRDt dnsdomaintuser_principal_nameR[t ldbmessage2((s//usr/lib/python2.7/dist-packages/samba/samdb.pytnewuser)s+     *                                     % % % % %      c Csdtj|d|jf}|jy|jd|jdtjd|dg}t|dkrtd|nt|d kst|j |dj Wn|j n X|j d S( sIDeletes a user :param username: Name of the target user s,(&(sAMAccountName=%s)(objectCategory=%s,%s))s$CN=Person,CN=Schema,CN=ConfigurationR.R/R0R1isUnable to find user "%s"iN( R4R]R#R^R3R5R6R7R8R_R9R`Ra(RRtfilterttarget((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt deleteusers"  c Cs@|jy|jd|jdtjd|dg}t|dkretd|p[|nt|dkrtdt||fn|dj}td |d d j d }d |t j |f}|j ||r |j d t|dn|j|Wn|jn X|jdS(sSets the password for a user :param search_filter: LDAP filter to find the user (eg samccountname=name) :param password: Password for the user :param force_change_at_next_login: Force password change R.R/R0R1isUnable to find user "%s"is*Matched %u multiple users with filter "%s"t"sutf-8s utf-16-les? dn: %s changetype: modify replace: unicodePwd unicodePwd:: %s s(distinguishedName=t)N(R^R3R#R4R5R6R7R9tunicodetencodetbase64t b64encodeR;RER!R-R`Ra( RR)Rtforce_change_at_next_loginRR>RDtpwtsetpw((s//usr/lib/python2.7/dist-packages/samba/samdb.pyRs(     c CsB|jy|jd|jdtjd|dddg}t|dkretd|nt|d ks}t|dj}t |ddd}t |ddd}|r|d B}d}n)|d @}t j |t t j }d |||f}|j |Wn|jn X|jd S(s Sets the account expiry for a user :param search_filter: LDAP filter to find the user (eg samaccountname=name) :param expiry_seconds: expiry time from now in seconds :param no_expiry_req: if set, then don't expire password R.R/R0R1R2taccountExpiresisUnable to find user "%s"iisy dn: %s changetype: modify replace: userAccountControl userAccountControl: %u replace: accountExpires accountExpires: %u Ni(R^R3R#R4R5R6R7R8R9R:R%t unix2nttimettimeR;R`Ra( RR)texpiry_secondst no_expiry_reqR>RDR2Rtsetexp((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt setexpiry s,       cCstj||dS(s`Change the domain SID used by this LDB. :param sid: The new domain sid to use. N(Rt_samdb_set_domain_sid(Rtsid((s//usr/lib/python2.7/dist-packages/samba/samdb.pytset_domain_sid6scCs tj|S(s&Read the domain SID used by this LDB. (Rt_samdb_get_domain_sid(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_domain_sid=ssSID for the domaincCstj||dS(soSet the invocation id for this SamDB handle. :param invocation_id: GUID of the invocation id. N(Rt_dsdb_set_ntds_invocation_id(Rt invocation_id((s//usr/lib/python2.7/dist-packages/samba/samdb.pytset_invocation_idDscCs tj|S(sGet the invocation_id id(Rt_samdb_ntds_invocation_id(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_invocation_idKssInvocation ID GUIDcCstj||S(N(Rt_dsdb_get_oid_from_attid(Rtattid((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_oid_from_attidRscCstj|||S(sNreturn the attribute ID for a LDAP attribute as an integer as found in DRSUAPI(Rt$_dsdb_get_attid_from_lDAPDisplayName(Rtldap_display_namet is_schema_nc((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_attid_from_lDAPDisplayNameUs cCstj||S(s6return the syntax OID for a LDAP attribute as a string(Rt)_dsdb_get_syntax_oid_from_lDAPDisplayName(RR((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt#get_syntax_oid_from_lDAPDisplayName[scCstj||S(s8return the systemFlags for a LDAP attribute as a integer(Rt*_dsdb_get_systemFlags_from_lDAPDisplayName(RR((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt$get_systemFlags_from_lDAPDisplayName_scCstj||S(s3return the linkID for a LDAP attribute as a integer(Rt%_dsdb_get_linkId_from_lDAPDisplayName(RR((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_linkId_from_lDAPDisplayNamecscCstj||S(s;return the lDAPDisplayName from an integer DRS attribute ID(Rt"_dsdb_get_lDAPDisplayName_by_attid(RR((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_lDAPDisplayName_by_attidgscCstj||S(sreturn the attribute name of the corresponding backlink from the name of a forward link attribute. If there is no backlink return None(Rt'_dsdb_get_backlink_from_lDAPDisplayName(RR((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt!get_backlink_from_lDAPDisplayNamekscCstj||dS(sSet the NTDS Settings DN, as would be returned on the dsServiceName rootDSE attribute. This allows the DN to be set before the database fully exists :param ntds_settings_dn: The new DN to use N(Rt_samdb_set_ntds_settings_dn(Rtntds_settings_dn((s//usr/lib/python2.7/dist-packages/samba/samdb.pytset_ntds_settings_dnpscCs tj|S(sGet the NTDS objectGUID(Rt_samdb_ntds_objectGUID(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt get_ntds_GUIDzscCs tj|S(sGet the server site name(Rt_samdb_server_site_name(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pytserver_site_name~scCs4|jdddtjddg}|dddS(s return the DNS name of this hostR.RmR/R1t dNSHostNamei(R3R4t SCOPE_BASE(RR>((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt host_dns_names$cCs#|j}|jjddS(s&return the DNS name of the domain rootRni(R"Rtsplit(RR#((s//usr/lib/python2.7/dist-packages/samba/samdb.pytdomain_dns_names cCs#|j}|jjddS(s&return the DNS name of the forest rootRni(tget_root_basednRR(Rt forest_dn((s//usr/lib/python2.7/dist-packages/samba/samdb.pytforest_dns_names cCstj||S(N(Rt_dsdb_load_partition_usn(Rtbase_dn((s//usr/lib/python2.7/dist-packages/samba/samdb.pytload_partition_usnscCs|j|jd|dS(Ntwrite_indices_and_attributes(tset_schema_from_ldbR4(RtschemaR((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt set_schemascCstj|||dS(N(Rt_dsdb_set_schema_from_ldb(Rtldb_connR((s//usr/lib/python2.7/dist-packages/samba/samdb.pyRscCstj|||S(sBconvert a list of attribute values to a DRSUAPI DsReplicaAttribute(Rt_dsdb_DsReplicaAttribute(RR4Rt ldif_elements((s//usr/lib/python2.7/dist-packages/samba/samdb.pytdsdb_DsReplicaAttributescCstj|||S(s$normalise a list of attribute values(Rt_dsdb_normalise_attributes(RR4RR((s//usr/lib/python2.7/dist-packages/samba/samdb.pytdsdb_normalise_attributesscCs_t|jjdkr(|jn|jj|j|rW|j|j|SdSdS(s Get from an attid the associated attribute :param attid: The attribute id for searched attribute :return: The name of the attribute associated with this id iN(R6t hash_oid_nametkeyst_populate_oid_attidthas_keyRR(RR((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_attribute_from_attids  cCsi|_|jddddgdddg}t|dkrxB|D]7}t|jd}||jt|jdtet strDisplay((s//usr/lib/python2.7/dist-packages/samba/samdb.pyRs    c Cs|jdd|dtjddgddg}t|dkrGd Sttjt|dd}|j }t|j j dkr|j nx[|j D]P}|j|j}|j j|r|j|j |jkr|jSqWd S( s[Get the version field trom the replPropertyMetaData for the given field :param dn: The on which we want to get the version :param att: The name of the attribute :return: The value of the version field in the replPropertyMetaData for the given attribute. None if the attribute is not replicated R0sdistinguishedName=%sR/Rssearch_options:1:2R1treplPropertyMetaDataiN(R3R4R5R6RRRtreplPropertyMetaDataBlobR!tctrRRRtarrayRRRtlowertversion(RR9tattR>treplRtotatt_oid((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt"get_attribute_replmetadata_versions"        c Cs|jdd|dtjddgddg}t|dkrGdSttjt|dd}|j }t j t t j }t} t|jjdkr|jnx|jD]} |j| j} |jj| r|j|j| jkrt} |jtj} || _|| _tj|j| _| | _ | | _!qqW| r6|r6t|jdkr6tj"} d | _|j| j} |jtj} || _|| _tj|j| _| | _ | | _!t} |j}|j#| |j$d |_$||_n| rt%|}tj&}|dj'|_'tj(|tj)d|d<|j*|d gndS( NR0sdistinguishedName=%sR/Rssearch_options:1:2R1RiiZ is#local_oid:1.3.6.1.4.1.7165.4.3.14:0(+R3R4R5R6RRRRR!RR%RR:RR,RRRRRRRRR(tsequence_numbertSEQ_NEXTRtoriginating_change_timeRtGUIDRtoriginating_invocation_idtoriginating_usnt local_usntreplPropertyMetaData1tappendtcountRRR9RRR(RR9Rtvaluet addifnotexistR>RRtnowtfoundR R tseqto2ttabtreplBlobtmsg((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt"set_attribute_replmetadata_versions^         "             cCstj|dS(N(Rt'_dsdb_write_prefixes_from_schema_to_ldb(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pytwrite_prefixes_from_schemascCs tj|S(N(Rt_dsdb_get_partitions_dn(R((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_partitions_dnscCstj||S(N(Rt_dsdb_get_nc_root(RR9((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt get_nc_rootscCs|jjt|}d}|dk r<|j|}n|dkrtj|||}|dkrm|S|dkri|jt|<|jt|}n|||((s//usr/lib/python2.7/dist-packages/samba/samdb.pyt get_minPwdAge1s 'cCsTtj}tj||j|_tj|tjd|d<|j|dS(Nt minPwdLength(R4RRR#R9RRR(RRR-((s//usr/lib/python2.7/dist-packages/samba/samdb.pytset_minPwdLength:s cCse|j|jdtjddg}t|dkr=dSd|dkrQdS|dddSdS(NR/R1R0i(R3R#R4RR6R(RR>((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_minPwdLength@s 'cCsTtj}tj||j|_tj|tjd|d<|j|dS(Nt pwdProperties(R4RRR#R9RRR(RRR-((s//usr/lib/python2.7/dist-packages/samba/samdb.pytset_pwdPropertiesIs cCse|j|jdtjddg}t|dkr=dSd|dkrQdS|dddSdS(NR/R1R3i(R3R#R4RR6R(RR>((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_pwdPropertiesOs 'cCstj}tj|d|jj|_|dk r\tj|tjd|dR:((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_dsheuristicsds  cCsdi|d6dd6}|r'||d((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_dsServiceNames$cCs4|jdddtjddg}|dddS(s"get the server DN from the rootDSER.RmR/R1t serverNamei(R3R4R(RR>((s//usr/lib/python2.7/dist-packages/samba/samdb.pytget_serverNames$N(Et__name__t __module__t__doc__RR&RR(RRRR R#R*R-R,R'RER\RdRlRRRRRRtpropertyt domain_sidRRRRRRRRRRRRRRRRRRRRRRRR RR!R#R%R+R.R/R1R2R4R5R;R<R?R RBRD(((s//usr/lib/python2.7/dist-packages/samba/samdb.pyR&s      ,  -  9       ' +                            5          (RGR%R4RRRRt samba.ndrRRt samba.dcerpcRRt samba.commonRt __docformat__tLdbR(((s//usr/lib/python2.7/dist-packages/samba/samdb.pyts