P'Wc@sddlZddlZddlZddlmZddlmZddlmZddlmZddlm Z ddl m Z m Z ddlm Z dd lmZdd lmZdd lmZmZdd lmZmZd efdYZdS(iN(t b64decode(tdsdb(tcommon(tmisc(tdrsuapi(t ndr_unpacktndr_pack(tdrsblobs(tdsdb_Dn(tsecurity(tget_wellknown_sdst get_diff_sds(tsystem_sessiont admin_sessiontdbcheckcBs3eZdZeeeeeeedZeejgdgdZdZ eedZ dZ dZ e dZd Zd Zd Zd Zd ZdZdZdZdZdZdZdZdZdZdZdZdZdZ dZ!dZ"dZ#dZ$dZ%d Z&d!Z'd"Z(d#Z)d$Z*d%Z+d&Z,d'Z-d(Z.d)Z/d*Z0d+Z1d,Z2d-Z3d.Z4d/Z5d0Z6d1Z7d2Z8d3Z9d4Z:dgd5Z;d6Z<d7Z=d8Z>RS(9scheck a SAM database for errorsc  Cs||_d|_|p||_||_||_||_||_t|_ t|_ t|_ t|_ t|_ t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_t|_ ||_!t|_"||_#t$j%|d|j&|_'t$j%|d|j(|_)|j*|_+t$j%|d|j&|_,t$j%||j-|_.i|_/t0|j|_1t|_2t3|_4i|_5yc|j6dd|j&dt$j7ddg} t8t9j:| d dd } t;| |j5d |_?t@d|jA|_B|jj6d|j.dt$j7dd d g} d | d kr| d d |_Cn-d | d kr(| d d |_Cn d|_C|jj6dd dt$j7ddg} y{| d d} g|_Dx]| D]U}y;|jjEt$j%|j|tFjG}|jDjH|WqytIk rqyXqyWWn!tIk rntJk rnXdS(NsCN=Infrastructure,sCN=Partitions,%ssCN=RID Manager$,CN=System,tbasesCN=DnsAdmins,CN=Users,%stscopetattrst objectSidit DnsAdminssmsDS-hasMasterNCst hasMasterNCsttnamingContexts(KtsamdbtNonet dict_oid_namet samdb_schematverbosetfixtyestquiettFalsetremove_all_unknown_attributestremove_all_empty_attributestfix_all_normalisationtfix_all_DN_GUIDstfix_all_binary_dntremove_all_deleted_DN_linkstfix_all_target_mismatchtfix_all_metadatatfix_time_metadatatfix_all_missing_backlinkstfix_all_orphaned_backlinkst fix_rmd_flagstfix_ntsecuritydescriptort$fix_ntsecuritydescriptor_owner_grouptseize_fsmo_roletmove_to_lost_and_foundtfix_instancetypet"fix_replmetadata_zero_invocationidtfix_replmetadata_unsorted_attidtfix_deleted_deleted_objectstfix_dntfix_base64_userparameterstfix_utf8_userparameterstfix_doubled_userparameterstreset_well_known_aclstreset_all_well_known_aclstin_transactiontldbtDnt domain_dntinfrastructure_dntget_config_basednt naming_dntget_schema_basednt schema_dntrid_dntget_dsServiceNametntds_dsatclass_schemaIDGUIDR t wellknown_sdstfix_all_missing_objectclasstsettdn_settname_maptsearcht SCOPE_BASERR tdom_sidtstrtLdbErrortERR_NO_SUCH_OBJECTR tsystem_session_infoR tget_domain_sidtadmin_session_infot write_ncstdeleted_objects_containerstget_wellknown_dnRt!DS_GUID_DELETED_OBJECTS_CONTAINERtappendtKeyErrort IndexError(tselfRRRRRRR:R8trest dnsadmins_sidtenumtestrtncstnctdn((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt__init__'s                                     "  - '       t*c Cs|jjd|d|ddgd|}|jdt|d}xC|D];}|jjt|j||j|jd|7}qNW|d kr||j 7}n|dkr|j r|jdn|jd t||f|S( s>perform a database check, returning the number of errors foundRRRRctcontrolssChecking %u objectsis$Please use --fix to fix these errorssChecked %u objects (%u errors)N( RRLtreporttlenRJtaddRORct check_objectRt check_rootdseR(R\tDNRRfRR]t error_counttobject((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytcheck_databases*   cCs|js|GHndS(s#print a message unless quiet is setN(R(R\tmsg((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyRgs cCsH|js tS|jr|jS|jr/t}ntj|d|d|S(sconfirm a changetforcedt allow_all(RRRRtTrueRtconfirm(R\RpRrRq((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyRts    cCs|js tS|jr|jSt||dkr6tSt||dkrTt}n |j}tj|d|dt}|dkrt||dtS|dkrt||dtS|S(s(confirm a change with support for "all" tNONEtALLRqRr( RRRRtgetattrRsRRttsetattr(R\Rptall_attrRqtc((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt confirm_alls"      cCs}|jr|jd|ny.|dtjg}|jj|d|Wn+tk rx}|jd||ftSXtS(s&delete dn with optional verbose outputs delete DN %sslocal_oid:%s:0Rfs%s : %s( RRgRtDSDB_CONTROL_DBCHECKRtdeletet ExceptionRRs(R\RcRfRpterr((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt do_deletes cCs|jr+|j|jj|tjny4|dtjg}|jj|d|d|Wn+t k r}|jd||ft SXt S(s-perform a modify with optional verbose outputslocal_oid:%s:0Rftvalidates%s : %s( RRgRt write_ldifR;tCHANGETYPE_MODIFYRR|tmodifyR~RRs(R\tmRfRpRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt do_modifys " cCs|jr8|jdt|t|t|fny;||}|dtjg}|jj||d|Wn+tk r}|jd||ftSXt S(s-perform a modify with optional verbose outputsDdn: %s changeType: modrdn newrdn: %s deleteOldRdn: 1 newSuperior: %sslocal_oid:%s:0Rfs%s : %s( RRgRORR|RtrenameR~RRs(R\tfrom_dntto_rdntto_baseRfRptto_dnR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt do_renames ) cCs|jd||f|jd||fdsH|jd|dStj}||_tjdtj|||<|j|ddgd |d tr|jd |ndS( sfix empty attributessERROR: Empty attribute %s in %ss"Remove empty attribute %s from %s?R!sNot fixing empty attribute %sNRsrelax:0sshow_recycled:1s#Failed to remove empty attribute %sRsRemoved empty attribute %s( RgR{R;tMessageRctMessageElementtFLAG_MOD_DELETERR(R\RctattrnameR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_empty_attributes  c Cs|jd||fg}x|D]}|jj|j||g}t|dkr|jd||j|dfq$|d|kr$|jd||df|j||dfq$q$W|jd||fds|jd |d Stj}||_ x|t dt|D]e}||\}} tj |tj ||d |<| dkr&tj | tj ||d | %s'sIIf you cannot re-sync from another DC, do you wish to delete object '%s'?RHs1Not deleting object with missing objectclass '%s'Nsrelax:0sFailed to remove DN %ss Removed DN %s(RgRt get_nc_rootR{R(R\Rc((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_missing_objectclass)s# cCs|jd|||f|jd||jddsN|jddStj}||_tj|tj||d<|j|dd tj gd |r|jd |ndS( s(handle a DN pointing to a deleted objects4ERROR: target DN is deleted for %s in object %s - %ss#Target GUID points at deleted DN %ssRemove DN link?R%s Not removingNt old_valuesshow_recycled:1slocal_oid:%s:0s(Failed to remove deleted DN attribute %ss"Removed deleted DN on attribute %s( RgR{R;RRcRRRRR|(R\RcRRRt correct_dnR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_deleted_dn3s    cCsk|jj|}|d@dkrNt|jddkrN|jddS|j|||||dS(sEhandle a missing target DN (both GUID and DN string form are missing)iis\0ADELis"Not removing dangling forward linkN(Rtget_linkId_from_lDAPDisplayNameROtfindRgR(R\RcRRRtlinkID((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_missing_dn_GUIDAs + c Cs|jd||||fddg}y7|jjdt|jdtjdgd|}WnMtjk r\}} |jd|j| f|j||||d SXt |d kr|jd |j|j||||d S|d j|_|j d t|d s1|jd|d Stj } || _tj |tj || dERROR: missing backlink attribute '%s' in %s for link %s in %ssFix missing backlink %sR)sNot fixing missing backlink %sNRRsshow_recycled:1s!Failed to fix missing backlink %ssFixed missing backlink %s( RgRcR{R;RRRRR(R\RRRt backlink_namet target_dnR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_missing_backlinks    cCst|jjd}|jd|||j|jjf|jd|dsl|jd|dStj}|j|_tjt |tj ||d<|j |dd d gd |r|jd |ndS( s"handle a incorrect RMD_FLAGS valuet RMD_FLAGSsHERROR: incorrect RMD_FLAGS value %u for attribute '%s' in %s for link %ssFix incorrect RMD_FLAGS %uR+s!Not fixing incorrect RMD_FLAGS %uNRsshow_recycled:1sreveal_internals:0sshow_deleted:0s$Failed to fix incorrect RMD_FLAGS %usFixed incorrect RMD_FLAGS %u( tintRctget_extended_componentRgt extended_strR{R;RRRORR(R\RRt revealed_dnt rmd_flagsR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_incorrect_rmd_flagss)  " cCs|jd||j||f|jd|dsK|jd|dStj}|j|_tj|tj||d<|j|ddgd |r|jd |ndS( s handle a orphaned backlink values?ERROR: orphaned backlink attribute '%s' in %s for link %s in %ssRemove orphaned backlink %sR*s!Not removing orphaned backlink %sNtvaluesshow_recycled:1srelax:0s"Failed to fix orphaned backlink %ssFixed orphaned backlink %s(RgRcR{R;RRRR(R\RRRt link_nameRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_orphaned_backlinks    cCs|jd|j|jjddtjddg}t|dksPt|ddd}|jd|j|fd s|jd |j|fd Stj }|j|_tj |tj d |d <|j |gd|j|fr|jd|j|fnd S(shandle a missing fSMORoleOwners*ERROR: fSMORoleOwner not found for role %sRRRt dsServiceNameiis8Sieze role %s onto current DC by adding fSMORoleOwner=%sR.s>Not Siezing role %s onto current DC by adding fSMORoleOwner=%sNt fSMORoleOwnerRsBFailed to sieze role %s onto current DC by adding fSMORoleOwner=%ss9Siezed role %s onto current DC by adding fSMORoleOwner=%s( RgRcRRLR;RMRhtAssertionErrorR{RRRR(R\RR]t serviceNameR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_no_fsmoRoleOwners   c Cs|jd|j|jd|jdsE|jd|jdSt}|jjy:|jj|j}|jj|tj }t j |jt |j}|j t|d|j|j||ddgd |j||fr|jd |j||ft j}|j|_t jt |jjt jd |d <|j|gd ||r|jd ||t}qnWn|jjnX|r|jjn |jjdS(shandle a missing parents%ERROR: parent object not found for %ss!Move object %s into LostAndFound?R/s&Not moving object %s into LostAndFoundNisshow_deleted:0srelax:0s2Failed to rename object %s into lostAndFound at %ss)Renamed object %s into lostAndFound at %stlastKnownParents:Failed to set lastKnownParent on lostAndFound object at %ss0Set lastKnownParent on lostAndFound object at %s(RgRcR{RsRttransaction_startRRWRtDS_GUID_LOSTANDFOUND_CONTAINERR;R<ROtremove_base_componentsRhRRRtparentRRttransaction_cancelttransaction_commit(R\Rtkeep_transactiontnc_roottlost_and_foundtnew_dnR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_missing_parents6   +  c Cs!tj|jt|}|jt|d|j}d}||krg|d||f7}n|d|7}|jd|j||f|j d|j|fds|jd|j|fd S|j |j||d d gd |j|fr|jd |j|fnd S(shandle a wrong dniRs%s=%r sname=%rs!ERROR: wrong dn[%s] %s new_dn[%s]sRename %s to %s?R4sNot renaming %s to %sNsshow_recycled:1srelax:0s"Failed to rename object %s into %ssRenamed %s into %s( R;R<RRORRhRRgRcR{R( R\RRtrdn_attrtrdn_valtname_valtnew_rdnt new_parentt attributes((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt err_wrong_dns  cCs|jd|d|j|f|jd|d||jfdsl|jd|d||jfdStj}|j|_tjt|tjd|d<|j|dt j gd |j|fr|jd |j|fndS( shandle a wrong instanceTypes0ERROR: wrong instanceType %s on %s, should be %dt instanceTypes(Change instanceType from %s to %d on %s?R0s-Not changing instanceType from %s to %d on %sNRslocal_oid:%s:0sGFailed to correct missing instanceType on %s by setting instanceType=%ds7Corrected instancetype on %s by setting instanceType=%d( RgRcR{R;RRRORRRt&DSDB_CONTROL_DBCHECK_MODIFY_RO_REPLICA(R\Rtcalculated_instancetypeR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_wrong_instancetypes!&!  "cCs-|jd|j|jj|jfdS(NsERROR: incorrect userParameters value on object %s. If you have another working DC that does not give this warning, please run 'samba-tool drs replicate --full-sync --local %s'(RgRcRR(R\RRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_short_userParametersscCs|jd||jf|jd|jdsK|jd|jdStj}|j|_tjt||dtjd|d<|j|gd |jr|jd |jndS( shandle a wrong userParameterssNERROR: wrongly formatted userParameters %s on %s, should not be base64-encodeds2Convert userParameters from base64 encoding on %s?R5s6Not changing userParameters from base64 encoding on %sNituserParametersRsOFailed to correct base64-encoded userParameters on %s by converting from base64sGCorrected base64-encoded userParameters on %s by converting from base64( RgRcR{R;RRRRR(R\RRRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_base64_userParameterss  * cCs|jd|j|jd|jdsE|jd|jdStj}|j|_tj||djdjdtjd |d <|j |gd |jr|jd |jndS( shandle a wrong userParameterssOERROR: wrongly formatted userParameters on %s, should not be psudo-UTF8 encodeds0Convert userParameters from UTF8 encoding on %s?R6s4Not changing userParameters from UTF8 encoding on %sNitutf8s utf-16-leRRsQFailed to correct psudo-UTF8 encoded userParameters on %s by converting from UTF8sICorrected psudo-UTF8 encoded userParameters on %s by converting from UTF8( RgRcR{R;RRtdecodetencodeRR(R\RRRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_utf8_userParameters's  # cCs|jd|j|jd|jdsE|jd|jdStj}|j|_tj||djdjdjdtjd|d <|j |gd |jr|jd |jndS( shandle a wrong userParameterssQERROR: wrongly formatted userParameters on %s, should not be double UTF16 encodeds:Convert userParameters from doubled UTF-16 encoding on %s?R7s>Not changing userParameters from doubled UTF-16 encoding on %sNis utf-16-leRRsJFailed to correct doubled-UTF16 encoded userParameters on %s by convertingsBCorrected doubled-UTF16 encoded userParameters on %s by converting( RgRcR{R;RRRRRR(R\RRRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_doubled_userParameters6s  , cCs-|jd|j|jj|jfdS(NsERROR: incorrect userParameters value on object %s (odd length). If you have another working DC that does not give this warning, please run 'samba-tool drs replicate --full-sync --local %s'(RgRcRR(R\RR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_odd_userParametersEsc Cs|jjd|dtjd|gddddg}|jj|}xM|d|D]=}t|j||}|jjd }||krW|SqWWd S( s#return a revealed link in an objectRRRRfsshow_deleted:0s extended_dn:0sreveal_internals:0itGUIDN( RRLR;RMRt#get_syntax_oid_from_lDAPDisplayNameRRcRR( R\RcRtguidR]t syntax_oidRRtguid2((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytfind_revealed_linkIs$ cCshd}x[||D]O}t|j||}|jjd}|dkrv|d7}|j|j|||dqnttj|}dg} t|j dkr|j|j krt } | j dnt } |jj|} |jj|} | dk r| j | ny8|jjdd |d tjd | d d dg} WnEtjk r\}}|d7}|j|j|||dqnX| rdt| ddd|_dt| ddd|_t||kr|d7}|j|j|||dqqnd|koB|ddjdk}d| dkop| dddjdk}|r| r|j| r|d7}|j|j|||| djqn| djj|jjkr|d7}|j|j|||| djdqn|r| r| dk r|j|j||}|jjd}|dk rt|d@dkr|j|||qqn| dk rd}| | dkrx;| d| D](}||jjkr|d7}qqWn|dkr`|d7}| d@r;|j |||| |jq|j!|||| |jqq`qqW|S(s$check a DN attribute for correctnessiRis missing GUIDt isDeletedsmsds-hasinstantiatedncsRRs RRRfsextended_dn:1:1sshow_recycled:1sincorrect GUIDs B:8:%08X:s%08Xs(incorrect instanceType part of Binary DNtTRUEsincorrect string version of DNRN("RRRcRRRRORRtlowerRERsRYRRRt!get_backlink_from_lDAPDisplayNameRLR;RMRPRRtbinaryRtupperRRRRRRRR(R\RRRRmRRRtguidstrRtfixing_msDS_HasInstantiatedNCsRtreverse_link_nameR]R_R`t is_deletedttarget_is_deletedRRt match_counttv((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytcheck_dnUs~   *    &. #" "      cCsRttjt|}|j}x*|jjD]}|j|kr.|jSq.WdS(sRead metadata properties and return the originating time for a given attributeId. :return: the originating time or 0 if not found i(RRtreplPropertyMetaDataBlobROtctrtarraytattidtoriginating_change_time(R\RRtreplRto((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytget_originating_times   cCst}g}ttjt|}|j}xL|jjD]>}|jj|j }|j |j |j |j q=W||fS(sgRead metadata properties and list attributes in it. raises KeyError if the attid is unknown.( RIRRRRORRRtget_lDAPDisplayName_by_attidRRiRRY(R\Rtset_attt list_attidRRRtatt((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytprocess_metadatas  c Cs|jjd|dtjd|gdddg}|d}tj}||_tj||tj|||<|j|dd dgd |r|j d |nd S( sre-write replPropertyMetaData elements for a single attribute for a object. This is used to fix missing replPropertyMetaData elementsRRRRfssearch_options:1:2sshow_recycled:1isrelax:0s provision:0s'Failed to fix metadata for attribute %ssFixed metadata for attribute %sN( RRLR;RMRRcRRRRg(R\RctattrR]Rptnmsg((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt fix_metadatas$     cCs|jtj@rdSt}|jtjkr5t}nQ|jtjkrPt}n6|jtj krkt}n|jtj krt}n|sdS|j jtj @sdSt |j jS(N(tflagsR tSEC_ACE_FLAG_INHERIT_ONLYRRttypet"SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECTRst!SEC_ACE_TYPE_ACCESS_DENIED_OBJECTt SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECTt SEC_ACE_TYPE_SYSTEM_ALARM_OBJECTRnt%SEC_ACE_INHERITED_OBJECT_TYPE_PRESENTROtinherited_type(R\tacetcheck((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt ace_get_effective_inherited_types     cCs||jkr|j|Sd|}|jjd|jd|ddg}tttj|ddd}||j|<|S(Ns0(&(ldapDisplayName=%s)(objectClass=classSchema))Rt expressionRt schemaIDGUIDi(RFRRLRBRORRR(R\tclstfltR]tt((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytlookup_class_schemaIDGUIDs   $ c Cs7d}||}ttjt|}d|koK|ddjdk}|r^|dfStj}|j|_|j|_|j|_|j |_ t }d} g} |j dk r|j j } nxt dt| D]} | | } | jtj@s|j| qn|j| } | dkr4qn| dk r[| | krt}qqn| } qWg} |jdk r|jj } nxt dt| D]} | | } | jtj@s|j| qn|j| } | dkrqn| dk r| | krt}qqn| } qW|r4||fS| dkrJ|dfSd}y|dd}Wntk rw}nX|dkr|jjd|dtjd ddgd d g}|d}d|ko|ddjdk}|r|dfS|dd}n|j|} | | kr-||fS|dfS( NtnTSecurityDescriptorRiRt objectClassiRRRRfsshow_recycled:1(RR t descriptorRORRt owner_sidt group_sidR trevisionRtsacltacesRRhRtSEC_ACE_FLAG_INHERITED_ACEtsacl_addRRstdacltdacl_addRZRRLR;RMR(R\RcRtsd_attrtsd_valtsdRtsd_cleantbrokentlast_inherited_typeR!RRRRteR]R((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt process_sds &                           &   cCsd}t|}tjtjB}|jd||fdsY|jd||fdStj}||_tj |tj |||<|j |d|gd|r|jd||fndS( s/re-write the SD due to incorrect inherited ACEsRs Fix %s on %s?R,sNot fixing %s on %s Ns sd_flags:1:%dsFailed to fix attribute %ssFixed attribute '%s' of '%s' ( RR t SECINFO_DACLt SECINFO_SACLR{RgR;RRcRRR(R\RcR(t sd_brokenR&R'tsd_flagsR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt err_wrong_sdks    c Csd}t|}t|}tjtjB}|jdk rM|tjO}n|jdk rl|tjO}n|j d|||fds|j d||fdSt j } || _ t j|t j|| |<|j| d|gd|r|j d||fndS( sare-write the SD due to not matching the default (optional mode for fixing an incorrect provision)Rs,Reset %s on %s back to provision default? %sR9sNot resetting %s on %s Ns sd_flags:1:%dsFailed to reset attribute %ssFixed attribute '%s' of '%s' (RR R.R/RRt SECINFO_OWNERRt SECINFO_GROUPR{RgR;RRcRRR( R\RcR(tsd_oldtdiffR&R't sd_old_valR1R((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_wrong_default_sd|s"     cCsd}t|}tjtjB}|jd||fdsY|jd||fdStj}||_tj |tj |||<|j j |j |j|d|gd|r|jd||fn|j j |jdS( s/re-write the SD due to a missing owner or groupRs'Fix missing owner or group in %s on %s?R-s+Not fixing missing owner or group %s on %s Ns sd_flags:1:%ds'Failed to fix metadata for attribute %ssFixed attribute '%s' of '%s' (RR R3R4R{RgR;RRcRRRtset_session_infoRTRRR(R\RcR(R&R'R1R((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_missing_sd_owners     c Csttjt|}|j}t}xy|jD]n}|jtj dkrUq1nt }|j d||j |j tjtj|j|jjfq1W|S(Ns$00000000-0000-0000-0000-000000000000s ERROR: on replPropertyMetaData of %s, the instanceType on attribute 0x%08x, version %d changed at %s is 00000000-0000-0000-0000-000000000000, but should be non-zero. Proposed fix is to set to our invocationID (%s).(RRRRORRRtoriginating_invocation_idRRRsRgRtversionttimetctimetsambat nttime2unixRRtget_invocation_id(R\Rctrepl_meta_dataRRtfoundR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt"has_replmetadata_zero_invocationids  c Csttjt|}|j}tjttj}t }x|j D]}|j t j dkrpqLnt}|jjtj} |jd|_||_t j |jj|_ | |_| |_qLW|rt|} tj} || _|jd|||jjfds?|jd||fdStj} || _tj| tj|| |<|j| dt j!dgd|r|jd ||fqndS( Ns$00000000-0000-0000-0000-000000000000isZFix %s on %s by setting originating_invocation_id on some elements to our invocationID %s?R1sNot fixing %s on %s slocal_oid:%s:0s#local_oid:1.3.6.1.4.1.7165.4.3.14:0sFailed to fix attribute %ssFixed attribute '%s' of '%s' ("RRRRORR?t unix2nttimeRR=RRR;RRRsRtsequence_numberR;tSEQ_NEXTR<RRAtoriginating_usnt local_usnRRRcR{RgRRRRR( R\RcRRBRRtnowRCRtseqtreplBlobRpR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt"err_replmetadata_zero_invocationids<            cCsttjt|}|j}x\|jD]Q}y|jj|j}Wq+t k r{|j d|j||fdSXq+WdS(NsIERROR: attributeID 0X%0X is not known in our schema, not fixing %s on %s ( RRRRORRRRRRZRg(R\RcRRBRRRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_replmetadata_unknown_attids   c Csttjt|}|j}t}|jd||f|jd||fdsu|jd||fdSt|j d dd|j d*t |}t j }||_ t j|t j|||<|j|dtjd d gd |r|jd ||fndS( Ns/ERROR: unsorted attributeID values in %s on %s s+Fix %s on %s by sorting the attribute list?R2sNot fixing %s on %s itkeycSs|jS(N(R(R((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytsslocal_oid:%s:0s#local_oid:1.3.6.1.4.1.7165.4.3.14:0s#local_oid:1.3.6.1.4.1.7165.4.3.25:0sFailed to fix attribute %ssFixed attribute '%s' of '%s' (RRRRORRRgR{tsortedRRR;RRcRRRRR( R\RcRRBRRRCRLR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyterr_replmetadata_unsorted_attids&   #    cCst}d|kr/|jd|jt}nd|krX|jd|jt}nd|kr|jd|jt}nd|kr|jd|jt}nd |kr|jd |jt}n|S( Nt descriptions>ERROR: description not present on Deleted Objects container %stshowInAdvancedViewOnlysIERROR: showInAdvancedViewOnly not present on Deleted Objects container %stobjectCategorysAERROR: objectCategory not present on Deleted Objects container %stisCriticalSystemObjectsIERROR: isCriticalSystemObject not present on Deleted Objects container %st isRecycleds9ERROR: isRecycled present on Deleted Objects container %s(RRgRcRs(R\Rtfaulty((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytis_deleted_deleted_objectss"          cCsYtj}|j|_}d|krGtjdtjd|dR@RBRCR(R\Rc((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyt is_fsmo_roleBsc Csd}|jj|}||kr|tjO}y5|jjd|jdtjdgddgWn1tjk r\}}|tj krqqX|tj O}n|j dk rt ||j kr|tjO}n|S(NiRRRRfsshow_recycled:1(RRRtINSTANCE_TYPE_IS_NC_HEADRLRR;RMRPRQtINSTANCE_TYPE_NC_ABOVERURROtINSTANCE_TYPE_WRITE(R\Rct instancetypeRR_R`((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytcalculate_instancetypePs  5 $cCsgxZ|jD]O\}}||kr tj|jj}ttj||d|jSq WtdS(NRK( RGR RNRRSRRRKRZ(R\Rctsd_dnt descriptor_fnt domain_sid((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pytget_wellknown_sdbs   c+Cs|jr|jd|ndttj|krE|jdndttj|krm|jdnt|jjttj|kr|jdndttj|kr|j|j|jd|jdnd|kr |jdnyxd }|tjO}|tj O}|tj O}|tj O}|j j d |d tjd d ddd|gd|}WnPtjk r\}}|tjkr|jr|jd|dSd SnXt|dkr|jd|dS|d }d }t} t} t} t} |j j|j} y|j j| tjj}Wn,tk r}tj|j d| }nXdB}dB}dB}t}d }xm |D]e }|dkrqnt|jdkrt} nt|jdkret||dkrT|d7}|jdt|||t|jfqe||d }nt|jt|jjjkr|}t||dkr|d7}|jdt|||t|jfq||d }nt|jdkr1||d dkr1t}q1nt|jdkr`t ||d }nt|jdkr|j!|||r|d7}|j"||||ny|j#||\} }Wn5tk r|d7}|j$||||qnXt%|d |d krE|d7}|j&||||n|j'j(|j}|d|kr|d7}|jd|t||jfn|d d kr|d7}|jd|t|fnt} qnt|jdkr5|j)||\}}|dBk rE|j*||||d7}qn|j+dBksc|j,dBkr|j-|||d7}qn|j.ry|j/|}Wntk rqnXt0tj1t||d }t2||tj3|j j4}|d kr/|j5|||||d7}qq/qqnt|jdkr|j j6|j'|||}|||kr|j7||t8|||d7}qqnt|jd!kr t||d dkr||d d d"kr|d7}|j9||||qq ||d d# d$kr;qq ||d d% d&krz|d7}|j:||||qq ||d dd'kr ||d d(d'kr ||d d)d'kr ||d d*d'kr ||d d+d'kr |d7}|j;||||qq t||d d,d kr^ |d7}|j<||||qq ||d dd'kr ||d d,d'kr ||d d(d'kr ||d d-d'kr ||d d)d'kr |d7}|j=||||qq nx>||D]2}|d kr |j>|||d7}q q q Wy|j'j?|}Wn0t@k r } |jA|||d7}qnX|j'jB|}!|!tjC@ r |!tjD@ r |j'jE| r | jFt|jn|tjGtjHtjItjJgkr' ||jK|||7}nxw||D]k}|j j6|j'||g}t|dksx |d |kr2 |jL|||||d7}Pq2 q2 Wt|jd.kr|jM|}"t|d/dks |d/d t|"kr |d7}|jN||"q qqW| ra d|ksG dttj|kra |d7}|jO|nd|ks dttj|kr |dBkr |d7}|jd0t|jn|dBkr |d7}|jd1|jjt|jfq n|dBk rdB}#|r1 |tjjP@s1 |}#q1 n|#dBkrO |jjQ}#ntj|j d2|#}$|$jRd |jj||j|kr |j}$n|$|jkr |d7}|jS||$|||q|jjT|kr|d7}|jd3||t|jfqnt}%| r|j|krd4}&d5}'|jU|d|&}(|(|'kr|jVd6t|d7rtjW})||)_tjXd8tjYd|)d<|d7}|j jZ|)d d9gq|jd:t|qnx| j[| D]~}*|%r+|jd;|t}%n|d7}|jd<|*|jVd=|*d>ss|jd?|*qn|j\||*qWn|j]|rd@|krd|ksdAttj|kr|j^||d7}qnyg||j j_krLt|jQ|j`krL|j j d |jQd tjd ddg}nWnHtjk r\}}|tjkr|ja||d7}qnX||jbkrd|kr|jc|r|jd||d7}qn|S(Cscheck one objectsChecking object %sRctnametdistinguishednameRt systemFlagsRetreplPropertyMetaDataiRRRfsextended_dn:1:1sshow_recycled:1sshow_deleted:1s sd_flags:1:%dRs)ERROR: Object %s disappeared during checkis,ERROR: Object %s failed to load during checksCN=Deleted Objects,%st objectclasss1ERROR: Not fixing num_values(%d) for '%s' on '%s't isdeletedtFALSEt systemflagstreplpropertymetadataisYERROR: Not fixing incorrect final attributeID in '%s' on '%s', it should match the RDN %ssXERROR: Not fixing incorrect inital attributeID in '%s' on '%s', it should be objectClasstntsecuritydescriptorRtuserparameterss is itIAAgACAAIAAgACAAIAAgtiiii iiR_Rs(ERROR: Not fixing missing 'name' on '%s's&ERROR: Not fixing missing '%s' on '%s's RDN=RDN,%ssERROR: Not fixing %s=%r on '%s'i0l)x1cB&s-Fix isDeleted originating_change_time on '%s'R(Rs provision:0s4Not fixing isDeleted originating_change_time on '%s's On object %ss7ERROR: Attribute %s not present in replication metadatas-Fix missing replPropertyMetaData element '%s'R's4Not fixing missing replPropertyMetaData element '%s'Rt fsmoroleownerN(eRRgtmapRORRYt get_rdn_nameR R3R4R.R/RRLR;RMRPRQR:RhRIRRRcRWR?RRXRZR<RRsRRDRMRRNRQRRRtget_attid_from_lDAPDisplayNameR-R2RRR:R8RdRRR RNRSR8RRRRRRRRRRR~Rt$get_systemFlags_from_lDAPDisplayNametDS_FLAG_ATTR_NOT_REPLICATEDtDS_FLAG_ATTR_IS_CONSTRUCTEDRRitDSDB_SYNTAX_BINARY_DNtDSDB_SYNTAX_OR_NAMEtDSDB_SYNTAX_STRING_DNt SYNTAX_DNRRR`RRt#SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETERt set_componentRt get_rdn_valueRR{RRRRt differenceRR[Rtget_root_basednRJRRVRYRZ(+R\RcRR1R]R_R`RRmtset_attrs_from_mdtset_attrs_seentgot_repl_property_meta_datatgot_objectclasstnc_dntdeleted_objects_dnR,tobject_rdn_attrtobject_rdn_valRRRgRtlist_attid_from_mdt rdn_attidR(R0t well_known_sdt current_sdR6RRRRptflagRt parent_dnt expected_dntshow_dntisDeletedAttIdtexpectedTimeDot originatingRR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyRjls *                  '-  '                $    2  x  x      " 0 + $    /      )      0 0!   cCstj|jd}|jr2|jd|n|jjd|dtj}t|dkrw|jd|dS|d}d}d|kr|jd |dS|ddjd s|jd |d7}|j d s|S|jjdtj|j|dddtjd dg}t t t j |ddd}tj}||_tjd|tjd|d<|j|gddtr|jdqn|S(s!check the @ROOTDSE special objects@ROOTDSEsChecking object %sRRis"Object %s disappeared during checkiRs(ERROR: dsServiceName missing in @ROOTDSEss+Failed to change dsServiceName to GUID formRs"Changed dsServiceName to GUID form(R;R<RRRgRLRMRht startswithRtRORRRRRcRRRR(R\RcR]RRmtguid_strR((s3/usr/lib/python2.7/dist-packages/samba/dbchecker.pyRks6      )$   cCsutj}tj|jd|_tjdtjd|ds