Linux websever 5.15.0-153-generic #163-Ubuntu SMP Thu Aug 7 16:37:18 UTC 2025 x86_64
Apache/2.4.52 (Ubuntu)
: 192.168.3.70 | : 192.168.1.99
Cant Read [ /etc/named.conf ]
8.1.2-1ubuntu2.23
urlab
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
usr /
lib /
python3 /
dist-packages /
samba /
__pycache__ /
[ HOME SHELL ]
Name
Size
Permission
Action
__init__.cpython-310.pyc
10.15
KB
-rw-r--r--
auth_util.cpython-310.pyc
514
B
-rw-r--r--
colour.cpython-310.pyc
1.48
KB
-rw-r--r--
common.cpython-310.pyc
1.69
KB
-rw-r--r--
dbchecker.cpython-310.pyc
70.14
KB
-rw-r--r--
descriptor.cpython-310.pyc
20.59
KB
-rw-r--r--
dnsresolver.cpython-310.pyc
1.99
KB
-rw-r--r--
dnsserver.cpython-310.pyc
9.95
KB
-rw-r--r--
domain_update.cpython-310.pyc
10.32
KB
-rw-r--r--
drs_utils.cpython-310.pyc
12.01
KB
-rw-r--r--
forest_update.cpython-310.pyc
14.32
KB
-rw-r--r--
getopt.cpython-310.pyc
12.52
KB
-rw-r--r--
gp_ext_loader.cpython-310.pyc
1.43
KB
-rw-r--r--
gp_gnome_settings_ext.cpython-...
14.34
KB
-rw-r--r--
gp_msgs_ext.cpython-310.pyc
1.96
KB
-rw-r--r--
gp_scripts_ext.cpython-310.pyc
2.58
KB
-rw-r--r--
gp_sec_ext.cpython-310.pyc
6.69
KB
-rw-r--r--
gp_smb_conf_ext.cpython-310.py...
2.61
KB
-rw-r--r--
gp_sudoers_ext.cpython-310.pyc
3.03
KB
-rw-r--r--
gpclass.cpython-310.pyc
20.25
KB
-rw-r--r--
graph.cpython-310.pyc
17.79
KB
-rw-r--r--
hostconfig.cpython-310.pyc
2.67
KB
-rw-r--r--
idmap.cpython-310.pyc
2.56
KB
-rw-r--r--
join.cpython-310.pyc
42.24
KB
-rw-r--r--
logger.cpython-310.pyc
1.5
KB
-rw-r--r--
mdb_util.cpython-310.pyc
806
B
-rw-r--r--
ms_display_specifiers.cpython-...
2.81
KB
-rw-r--r--
ms_forest_updates_markdown.cpy...
7.4
KB
-rw-r--r--
ms_schema.cpython-310.pyc
6.62
KB
-rw-r--r--
ms_schema_markdown.cpython-310...
1.56
KB
-rw-r--r--
ndr.cpython-310.pyc
3.83
KB
-rw-r--r--
ntacls.cpython-310.pyc
15.12
KB
-rw-r--r--
remove_dc.cpython-310.pyc
10.13
KB
-rw-r--r--
samdb.cpython-310.pyc
42.52
KB
-rw-r--r--
schema.cpython-310.pyc
7.24
KB
-rw-r--r--
sd_utils.cpython-310.pyc
5.24
KB
-rw-r--r--
sites.cpython-310.pyc
3.46
KB
-rw-r--r--
subnets.cpython-310.pyc
5.68
KB
-rw-r--r--
tdb_util.cpython-310.pyc
750
B
-rw-r--r--
trust_utils.cpython-310.pyc
1.32
KB
-rw-r--r--
upgrade.cpython-310.pyc
21.33
KB
-rw-r--r--
upgradehelpers.cpython-310.pyc
22.05
KB
-rw-r--r--
uptodateness.cpython-310.pyc
4.62
KB
-rw-r--r--
vgp_access_ext.cpython-310.pyc
3.74
KB
-rw-r--r--
vgp_files_ext.cpython-310.pyc
3.6
KB
-rw-r--r--
vgp_issue_ext.cpython-310.pyc
1.83
KB
-rw-r--r--
vgp_motd_ext.cpython-310.pyc
1.83
KB
-rw-r--r--
vgp_openssh_ext.cpython-310.py...
2.71
KB
-rw-r--r--
vgp_startup_scripts_ext.cpytho...
3.17
KB
-rw-r--r--
vgp_sudoers_ext.cpython-310.py...
3.44
KB
-rw-r--r--
vgp_symlink_ext.cpython-310.py...
2.05
KB
-rw-r--r--
xattr.cpython-310.pyc
1.26
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : join.cpython-310.pyc
o �Kya�. � @ s* d Z ddlmZ ddlmZ ddlmZmZmZm Z m Z ddl Z ddlZddl Z ddl mZmZ ddlmZmZmZmZmZmZmZmZ ddlmZ dd lm Z m Z dd l m Z m Z m!Z!m"Z"m#Z#m$Z$ dd l%m&Z& dd l'm(Z( dd lm)Z) ddl*m+Z+ ddl,m-Z- ddlm.Z. ddlm/Z/ ddl0m1Z1 ddlm2Z2m3Z3 ddlm4Z4 ddl5m6Z6m7Z7m8Z8 ddl9Z9ddl:Z:ddl;Z;ddl<Z<ddl=Z=ddl>Z>ddl?m@Z@ ddlAmBZB ddlCmDZD G dd� deE�ZFG dd � d eG�ZH d)d d �ZI d)d d!�ZJ d*d#d$�ZKG d%d&� d&eH�ZLG d'd(� d(eL�ZMdS )+zJoining a domain.� )�system_session)�SamDB)�gensec�Ldb� drs_utils�arcfour_encrypt�string_to_byte_arrayN)�ndr_pack� ndr_unpack)�security�drsuapi�misc�nbt�lsa�drsblobs� dnsserver�dnsp)�DS_DOMAIN_FUNCTION_2003)� Credentials�DONT_USE_KERBEROS)�secretsdb_self_join� provision�provision_fill�FILL_DRS�FILL_SUBDOMAIN� DEFAULTSITE)� setup_path)�Schema)� descriptor)�Net)�setup_bind9_dns)�read_and_sub_file)�werror)� b64encode)� WERRORError� NTSTATUSError)�sd_utils)�ARecord� AAAARecord� CNAMERecord)� OrderedDict)� get_string)� CommandErrorc s e Zd Z� fdd�Z� ZS )�DCJoinExceptionc s t t| ��d| � d S )NzCan't join, error: %s)�superr- �__init__)�self�msg�� __class__� �,/usr/lib/python3/dist-packages/samba/join.pyr/ 9 s zDCJoinException.__init__)�__name__� __module__� __qualname__r/ � __classcell__r4 r4 r2 r5 r- 7 s r- c @ s@ e Zd ZdZ dJdd�ZdKdd�ZdKdd �ZdKd d �Zd d � Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� ZdLd.d/�Zd0d1� Zd2d3� Zd4d5� Z d6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z!d@dA� Z"dBdC� Z#dDdE� Z$dFdG� Z%dHdI� Z&dS )M� DCJoinContextzPerform a DC join.NFc C s || _ || _|| _|| _|| _| | _| | _|| _|| _| | _ d | _ g | _ g | _ | j� |�� tjB � t| j| jd�| _|| _|| _|rL|| _| jj| _n5| jr[|d u rZ| �| j�| _n| j �d| � | �|�| _| j �d| j � td| j t� | j| jd�| _| jd u r�t | _z | jj t j g d� W n t j y� } z |j!\}}t"|��d }~ww t#| j�$� �| _%t#| j�&� �| _'t#| j�(� �| _)t#| j�*� �| _+t,�-| j�.� �| _/| j/| _0| �1� | _2| �3� | _4t5�6t#t7�8� ��| _9| j�:� | _;| �<� | _=| �>� | _?| d u�r| | _@ntA�Bdd�| _@| j�C� | _D|�r�|| _Ed| jE | _Fd | jE| j| j+f | _Gd | jG | _Hd | jE| j%f | _Id | jE�J� | jDf | _K| j�L� | _Md | j% }| �N|��r]d| jE|f | _Ond | _Od| jE d| jK d| jK| jMf g| _P| jj t j dg| j%d�}|d d d | _Qd| j% | _Rd| j' | _Sdt �T| jR� }| jj t jUg | j�V� |d�}| d u �r�d| _WntX|�dk�r�d| _WtYd� n| | _W| jD| _Zd | _[t\j]t\j^B t\j_B t\j`B t\jaB | _bd | _cd | _dd | _ed| _fd | _gd | _\d | _hd| _id | _jd | _kd | _ld | _md| _nd S )N)�creds�lpz&Finding a writeable DC for domain '%s'z Found DC %s� ldap://%s��url� session_info� credentialsr< ��scope�attrs�x �%s$z"CN=%s,CN=Servers,CN=%s,CN=Sites,%szCN=NTDS Settings,%sz CN=%s,OU=Domain Controllers,%s�%s.%szGCN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,%szCN=%s,%szHOST/%szGC/%s/%s�rIDManagerReference)rC rD �baser zDC=DomainDnsZones,%szDC=ForestDnsZones,%s�$(&(objectClass=crossRef)(ncName=%s))�rC rD rI � expression�NONEzCNO DNS zone information found in source domain, not replicating DNSF)o�loggerr; r< �site� targetdir� use_ntvfs�plaintext_secrets� backend_store�backend_store_size�promote_existing�promote_from_dn�nc_list� full_nc_list�set_gensec_features�get_gensec_featuresr � FEATURE_SEALr �net�server�forced_local_samdb�samdbr? � find_dc_site�info�find_dcr r r �search�ldb� SCOPE_BASE�LdbError�argsr- �str�get_default_basedn�base_dn�get_root_basedn�root_dn�get_schema_basedn� schema_dn�get_config_basedn� config_dnr �dom_sid�get_domain_sid�domsid� forestsid�get_domain_name� domain_name�get_forest_domain_name�forest_domain_namer �GUID�uuid�uuid4� invocation_id�get_dsServiceName� dc_ntds_dn�get_dnsHostName�dc_dnsHostName�get_behavior_version�behavior_version� acct_pass�samba� generate_random_machine_password�domain_dns_name� dnsdomain�myname�samname� server_dn�ntds_dn�acct_dn�lower� dnshostname�forest_dns_name� dnsforest� dn_exists� topology_dn�SPNs�rid_manager_dn�domaindns_zone�forestdns_zone� binary_encode�SCOPE_ONELEVEL�get_partitions_dn� dns_backend�len�print�realm� tmp_samdbr �DRSUAPI_DRS_INIT_SYNC�DRSUAPI_DRS_PER_SYNC�DRSUAPI_DRS_GET_ANC�DRSUAPI_DRS_GET_NC_SIZE�DRSUAPI_DRS_NEVER_SYNCED� replica_flags�never_reveal_sid� reveal_sid� connection_dn�RODC� krbtgt_dn� managedby� subdomain� adminpass� partition_dn�dns_a_dn� dns_cname_dn� force_all_ips)�ctxrN r] r; r< rO � netbios_namerP �domain� machinepassrQ r� rU rR rS rT r^ �e�enum�estr� topology_base�res_rid_manager�expr� res_domaindnsr4 r4 r5 r/ @ s� � � �� � � � ���� zDCJoinContext.__init__c C s� |r'z | j j|tjdgd�}W n ty Y d S w |D ] }| j|jdd� q z| j �|� td| � W d S ty@ Y d S w )N�dn�rI rC rD T�� recursivez Deleted %s) r_ rc rd r� � Exception� del_noerrorr� �deleter� )r� r� r� �res�rr4 r4 r5 r� � s � �zDCJoinContext.del_noerrorc C s� | j j| j �� dt�| j� ddgd�}t|�dkr d S |skt� }|�| j � z |� | j � |� | j � � � td| j t� || j d�}W n Y n!|jtjdd gd �}|d d d |d d d krktd | j ��| j|d jd d � |d jddd�}|d ur�|| _| �| j� | j j| j �� dt�d| j �t�d| j �f g d�}|r�| j|d jd d � | j j| j �� dt�d| j � g d�}|r�tdt�d| j �t�d| j �f ��d S )N�sAMAccountName=%s�msDS-krbTgtLink� objectSID�rI rL rD r r= r> � � tokenGroups)rC rI rD z�Not removing account %s which looks like a Samba DC account matching the password we already have. To override, remove secrets.ldb and secrets.tdbTr� �msDS-KrbTgtLink)�idxz/(&(sAMAccountName=%s)(servicePrincipalName=%s))�dns-%szdns/%sz(sAMAccountName=%s)znNot removing account %s which looks like a Samba DNS service account but does not have servicePrincipalName=%s)r_ rc ri rd r� r� r� r �guessr< �set_machine_account�set_kerberos_stater; �get_kerberos_stater r] r re r- r� r� �get� new_krbtgt_dnr� r� )r� �forcer� r; � machine_samdb� token_resr� r4 r4 r5 �cleanup_old_accounts� sf � ��� �������z"DCJoinContext.cleanup_old_accountsc C sR | j s | j|d� | jdur| �| j� | jdur | �| j� | �| j� | j| jdd� | jr6| �| j� | jr?| �| j� | j r�d}t � d| j |f | j | j �}t �� }t �� |_|�d|tj�}t �� }| j|_|�||t j�}|�||jj� t �� }| j |_|�||t j�}|�||jj� | j r�| �| j � | j r�| �| j � dS dS )z$Remove any DNs from a previous join.)r� NTr� �sign�ncacn_ip_tcp:%s[%s]r� ) r� r� r� r� r� r� r� r� r� r �lsarpcr] r< r; �ObjectAttribute�QosInfo�sec_qos� OpenPolicy2r �SEC_FLAG_MAXIMUM_ALLOWED�Stringr� �string� QueryTrustedDomainInfoByName�!LSA_TRUSTED_DOMAIN_INFO_FULL_INFO�DeleteTrustedDomain�info_ex�sidrx r� r� )r� r� �binding_options�lsaconn� objectAttr� pol_handle�namera r4 r4 r5 �cleanup_old_join sH � � �z DCJoinContext.cleanup_old_joinc C s� | j rtd��| jj| j�� dt�| j� g d�d�}t|�dkr(td| j ��d|d v s:d|d v s:d |d v rAtd | j ��t |d d d �t j j t j j B @ dkr\td | j ��|d j| _d S )z]confirm that the account is just a bare NT4 BDC or a member server, so can be safely promotedz Can not promote into a subdomainr� )r� �userAccountControl�serverReferenceBL�rIDSetReferencesr� r zcCould not find domain member account '%s' to promote to a DC, use 'samba-tool domain join' instead'r� r� r� zhAccount '%s' appears to be an active DC, use 'samba-tool domain join' if you must re-create this accountr� zZAccount %s is not a domain member or a bare NT4 BDC, use 'samba-tool domain join' instead'N)r� r� r_ rc ri rd r� r� r� �intr� �dsdb� UF_WORKSTATION_TRUST_ACCOUNT�UF_SERVER_TRUST_ACCOUNTr� rV �r� r� r4 r4 r5 �promote_possibleI s" � $��z DCJoinContext.promote_possiblec C s� z| j j|tjtjB tjB d�| _W n# ty) } z td||j d f ��d}~w t y5 td| ��w | jj durG| jj dkrG| jj | _ | jj S )z(find a writeable DC for the given domain)r� �flagsz1Failed to find a writeable DC for domain '%s': %s� Nz-Failed to find a writeable DC for domain '%s'r� )r\ �finddcr �NBT_SERVER_LDAP� NBT_SERVER_DS�NBT_SERVER_WRITABLE� cldap_retr% r, rg r� � client_siterO � pdc_dns_name)r� r� �errorr4 r4 r5 rb \ s $ �� � zDCJoinContext.find_dcc C s: d }| j j|tjtjB d�}|jd ur|jdkr|j}|S )N)�addressr� r� )r\ r� r r� r� r� )r� r] rO r� r4 r4 r5 r` i s �zDCJoinContext.find_dc_sitec C s@ | j j| jtjdgd�}d|d v r t|d d d �S tjjS )N�msDS-Behavior-Versionr� r ) r_ rc rj rd re r� r� r� �DS_DOMAIN_FUNCTION_2000r� r4 r4 r5 r� q s z"DCJoinContext.get_behavior_versionc C s* | j jdtjdgd�}t|d d d �S )Nr� � dnsHostNamer� r )r_ rc rd re rh r� r4 r4 r5 r x s z DCJoinContext.get_dnsHostNamec C �J | j �� }| j j|tjdgdt�t| j �� �� d�}t|d d d �S �z9get netbios name of the domain from the partitions record� nETBIOSNamez ncName=%s)rI rC rD rL r )r_ r� rc rd r� r� rh ri �r� � partitions_dnr� r4 r4 r5 ru | � �z DCJoinContext.get_domain_namec C r r )r_ r� rc rd r� r� rh rk r r4 r4 r5 rw � r z$DCJoinContext.get_forest_domain_namec C s: | j j| jg dt�| j�tjtjj f d�}t |d j �S )z7get the parent domain partition DN from parent DNS namez9(&(objectclass=crossRef)(dnsRoot=%s)(systemFlags:%s:=%u)))rI rD rL r ) r_ rc rp rd r� �parent_dnsdomain�OID_COMPARATOR_ANDr� r� �SYSTEM_FLAG_CR_NTDS_DOMAINrh r� r� r4 r4 r5 �get_parent_partition_dn� s ���z%DCJoinContext.get_parent_partition_dnc C s8 | j jdtjdgd�}|d d d }t| j �d|��S )zhget the SID of the connected user. Only works with w2k8 and later, so only used for RODC joinr� r� r� r r� )r_ rc rd re r+ �schema_format_value)r� r� �binsidr4 r4 r5 � get_mysid� s zDCJoinContext.get_mysidc C sZ z | j j|tjg d�}W dS tjy, } z|j\}}|tjkr'W Y d}~dS � d}~ww )zcheck if a DN existsr� NFT)r_ rc rd re rf rg �ERR_NO_SUCH_OBJECT)r� r� r� �e5r� r� r4 r4 r5 r� � s � ��zDCJoinContext.dn_existsc C s� t d| j � | jdttjjtjjB �dd| j d�}| j� |dg� | jj | jt j dgd�}|d d d | _ t d | j � t �� }t �| j| j�|_t �| jt jd �|d < | j�|� d | j | jf | _t d | j| jf � | j�| j| j� dS )z#RODCs need a special krbtgt account� Adding %s�user�TRUEz krbtgt for %s)r� � objectclass�useraccountcontrol�showinadvancedviewonly� description� rodc_join:1:1�samAccountNamer� r zGot krbtgt_name=%sr� zCN=%s,CN=Users,%szRenaming %s to %sN)r� r� rh r� r� �UF_NORMAL_ACCOUNT�UF_ACCOUNTDISABLEr� r_ �addrc rd re � krbtgt_name�Message�Dnr� r� �MessageElement�FLAG_MOD_REPLACE�modifyrj r� �rename)r� �recr� �mr4 r4 r5 �add_krbtgt_account� s, ��� z DCJoinContext.add_krbtgt_accountc C sT d}| j �� dkr |d7 }d| j|f }t�|| j | j�| _t�| j�\| _| _dS )z.make a DRSUAPI connection to the naming master�seal� �,printr� N) r< � log_levelr] r r; r � drs_DsBind�drsuapi_handle�bind_supported_extensions)r� r� �binding_stringr4 r4 r5 �drsuapi_connect� s z DCJoinContext.drsuapi_connectc C sB t | j| jd�| _tt� dd| j| jddd�| _| j� | j� dS )z2create a temporary samdb object for schema queries)�schemadnNF)r@ r? � auto_connectrA r< � global_schema�am_rodc) r rs rn � tmp_schemar r r; r< r� � set_schema�r� r4 r4 r5 �create_tmp_samdb� s � �z DCJoinContext.create_tmp_samdbc C s t �� }| j�|�|_d|_dS )z$build a DsReplicaAttributeCtr objectr� N)r �DsReplicaAttributer� � get_attid_from_lDAPDisplayName�attid� value_ctr)r� �attrname� attrvaluer� r4 r4 r5 �build_DsReplicaAttribute� s z&DCJoinContext.build_DsReplicaAttributec C s8 | j du r | �� | jdu r| �� g }|D ]_}t �� }|d |_g }|D ]-}|dkr,q%t|| t�s9|| g}n|| }dd� |D �}| j�| j||�}|� |� q%t � � } t |�| _ || _ t �� } || _| | _t �� } | | _|� | � qt �� } |d | _| j} |dd� D ]}|| _|} q�| j �| jd| �\}}|dkr�|jt jkr�td|j � td ��|j d t j kr�td |j � td ��|d k�r|j dkr�td |j ��|j j!d t j k�r|j j"du r�td |j j!d � td ��td |j j!d |j j"j f � td ��|j jt jk�rtd|j j � td ��|j#S )z,add a record via the DRSUAPI DsAddEntry callNr� c S s$ g | ]}t |t�r|�d �n|�qS )�utf8)� isinstancerh �encode)�.0�xr4 r4 r5 � <listcomp>� s $ z,DCJoinContext.DsAddEntry.<locals>.<listcomp>r r� � z!DsAddEntry failed with dir_err %uzDsAddEntry failedz(DsAddEntry failed with status %s info %s� zexpected err_ver 1, got %uz.DsAddEntry failed with status %s, info omitted)$r r1 r� r9 �DsReplicaObjectIdentifierr� rB �list�dsdb_DsReplicaAttribute�append�DsReplicaAttributeCtrr� �num_attributes� attributes�DsReplicaObject� identifier� attribute_ctr�DsReplicaObjectListItem�object�DsAddEntryRequest2� first_object� next_object� DsAddEntryr. �dir_err�DRSUAPI_DIRERR_OKr� � RuntimeError� extended_errr" � WERR_SUCCESS�err_ver�err_data�statusra �objects)r� �recsra r& �idrD �a�v�rattrrR rT � list_object�req2�prev�o�level�ctrr4 r4 r5 rX � sp ��zDCJoinContext.DsAddEntryc C s t d| j � td| jfddttjj�fd| jfg�}| j| j | jg}| j tjj kr2ttjj �|d< | j tjj kr>| j|d< | j rSd| j |d < | j|d < d |d < |S d | j |d < | j tjj krf| j|d< g |d< |D ]}|| jv rz|d �|� qld|d < t| j�|d< |S )z return the ntdsdsa object to addr r� )r �nTDSDSA� systemFlags� dMDLocationr zmsDS-HasDomainNCszCN=NTDS-DSA-RO,%s�objectCategoryzmsDS-HasFullReplicaNCs�37�optionszCN=NTDS-DSA,%szmsDS-HasMasterNCs� HasMasterNCs�1� invocationId)r� r� r* rh r� r� �#SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETErn rj rp r� r �DS_DOMAIN_FUNCTION_2008_R2r� rX rL r r| )r� r& rW �ncr4 r4 r5 �join_ntdsdsa_obj s8 � � �z DCJoinContext.join_ntdsdsa_objc C s� | � � }| jr| jj|dgd� n| jr | j�|dg� n| �|g� | jj| jtj dgd�}t � | j� d|d d d ��| _ dS )zadd the ntdsdsa object�relax:0��controlsr � objectGUIDr� r N)ry r^ r_ r r� rX rc r� rd re r ry r � ntds_guid)r� r& r� r4 r4 r5 �join_add_ntdsdsaG s &z DCJoinContext.join_add_ntdsdsac C s� | j r�td| j � | j d| j| jt| jtjjB �| jd�}| j tjj kr.ttjj �|d< n| j r5g |d< | j r>| j |d< n| j rEg |d< | jrN| j|d< n| j rUg |d< | jr^| j|d< n| j reg |d< |rmt|�|d< | j r�| j| j kr| j�| j| j � | j�tj�| j|tj�� nd }|d ur�d g}| jj||d � | jr�| �� | j r�td| j � | j d ttjj tjj B tjj B �| jd �}| j r�| j |d< | j�|� | j r�d | _!d S | j"�rQ| �#� dt�$| j%� }| jj&tj'g | j�(� |d�| j%f}dt�$| j)� }| jj&tj'g | j�(� |d�| j)f}||fD ]7\}}|| j*v�r%�qt+|�dk�rOt�� } |d j,| _,d} | j-�r>d} t�.| j"tj/| �| | < | j�| � �q| j0d u�rntd| j0 � | j0ddd| j1d�}| j�|� | j �rMtd| j � t�� } t�2| j| j �| _,t3t+| j4��D ]} | j4| �5dt| j!��| j4| < �q�t�.| j4tjd�| d< | j�| � td | j � z| jj6d t�$| j� | j7d | jd � W n, tj8�y� } z | j9\} }| tj:k�r� | j;j<| j| j=| j7d � W Y d } ~ nd } ~ ww | jj&| j tj>d!d"gd#�}d!|d v �rt?|d d! d �| _@nd | _@tAtBjC|d d d �| _Dtd$� t�� } t�2| j| j �| _,t�.t| j�tjd%�| d%< | j�| � | jE�Fd&��r>t�Gd'd(�| _H| j�ItJtKd)�| jL| jM| jNtO| jH�Pd*���Qd+�| jd,���}|D ]T\}}|tjRk�s�J �|d- }td.|d- � |d/= |d0= ttjjStjjB �|d%< z | j�|� W �q{ tj8�y� } z|j9\} }| tjTk�rà W Y d }~�q{d }~ww td1| jN � z| jj6d2t�$| jN� | jHd | jd � W n. tj8�y } z |j9\} }| tj:k�r� | j;j<d3| jN | j=| jHd � W Y d }~nd }~ww | jj&|tj>d!gd#�}d!|d v �r9t?|d d! d �| _Ud S d | _Ud S d S )4z+add the various objects needed for the joinr �computer)r� � objectClass� displayname�samaccountnamer� r� z msDS-SupportedEncryptionTypesr� zmsDS-NeverRevealGroupzmsDS-RevealOnDemandGroup� objectSidNrz r{ r] )r� r rn r �serverReferencerJ rK r� r zmsDS-NC-Replica-Locationsz msDS-NC-RO-Replica-Locations�nTDSConnectionr �65)r� r �enabledconnectionrr � fromServerzAdding SPNs to %sz $NTDSGUID�servicePrincipalNamez Setting account password for %sz((&(objectClass=user)(sAMAccountName=%s))F)�force_change_at_next_login�username)� account_namerv � newpasswordzmsDS-KeyVersionNumberr� r� zEnabling accountr� �BIND9_� � z provision_dns_add_samba.ldif� utf-16-lerA )� DNSDOMAIN�DOMAINDN�HOSTNAME� DNSPASS_B64�DNSNAMEr� z#Adding DNS account %s with dns/ SPN�clearTextPassword�isCriticalSystemObjectz#Setting account password for dns-%sz,(&(objectClass=user)(samAccountName=dns-%s))r� )Vr� r� r� rh r� r� r� r r� r� �DS_DOMAIN_FUNCTION_2008� ENC_ALL_TYPESrU r� r� r� r rV r_ r% r$ rd r � from_dictr# r r� r( r� � SYSTEM_FLAG_CONFIG_ALLOW_RENAME�%SYSTEM_FLAG_CONFIG_ALLOW_LIMITED_MOVErv r� r~ r� r r� r� rc r� r� r� rW r� r� r� r" � FLAG_MOD_ADDr� r~ r! �ranger� �replace� setpasswordr� rf rg �ERR_UNWILLING_TO_PERFORMr\ � set_passwordrv re r� �key_version_numberr r rq �new_dc_account_sidr� � startswith�generate_random_password�dnspass� parse_ldifr! r r� rj r� r# rC �decode�CHANGETYPE_NONEr �ERR_ENTRY_ALREADY_EXISTS�dns_key_version_number)r� � specified_sidr& r| r� r� �forest�part�zoner' �attr�i�e2�num�_r� rb � changetyper1 � dns_acct_dnr� �e3r4 r4 r5 �join_add_objectsV s� � ��� �� �� � � � "� � � ������ � �� � ��� � � ��� � �z DCJoinContext.join_add_objectsc C s t d| j � ddt| j�tjf i}tj| j|d�}| jdd| j | j | j | j | j ttjjtjjB �|d� }| jtjjkrEt| j�|d< | �� }| �||g�}t|�d krZtd ��|d j| _t d � | jj| jt � d �| jt j t j d� t d� | jj| j!t � d �| jt j t j d� dS )zLadd the various objects needed for the join, for subdomains post replicationr �SubdomainAdminsz%s-%s)�name_map�crossRefzCN=Cross-Ref,%s) r� r rp �nCNamer �dnsRoot� trustParentrn �ntSecurityDescriptorr rG z"Expected 2 objects from DsAddEntryr� zReplicating partition DN�$00000000-0000-0000-0000-000000000000)�exopr� zReplicating NTDS DNN)"r� r� rh rs r �DOMAIN_RID_ADMINSr �+get_paritions_crossref_subdomain_descriptorrt rn rj rv r� �parent_partition_dnr� r� �SYSTEM_FLAG_CR_NTDS_NCr r� r ry rX r� r- �guidr~ �repl� replicater ry r �DRSUAPI_EXOP_REPL_OBJ�DRSUAPI_DRS_WRIT_REPr� )r� r� � sd_binaryr& �rec2ra r4 r4 r5 �join_add_objects2- sD � � �z DCJoinContext.join_add_objects2c C s t d� | jj}t| jt� fi d|�d| j�dt�d| j�d| j �d| j �d| j �d | j �d | j �d | j�d | j�d | j�d| j�dd�d| j�d| j�d| j�d| j�d| j�d| j�d| j�d| j�dd��}t d|j � |j| _|j| _|j | _ |j | _ | j | j _ d S ) �Provision the local SAM.zCalling bare provision�smbconfrP � samdb_fillr� �rootdn�domaindnr2 �configdn�serverdnr� �hostname� domainsidr� � serverrole�"active directory domain controller�sitenamer< �ntdsguidrQ r� rR rS rT � batch_modeTz Provision OK for domain DN %sN) r� r< � configfiler rN r rP r r� rl rj rn rp r� rv r� rs r� rO r~ rQ r� rR rS rT r� r_ � local_samdb�paths�namesrt )r� r� �presultr4 r4 r5 �join_provisionX sj ������������������ � � � � z DCJoinContext.join_provisionc C sx t d� t| jjdgt� | jjdd�| _| j�t| j �� | j| _| j � d� | jj | j tjdgddgd �}d |d vrGtd | j | jjf ��z tt�t�| j|d d d �d ���d���| j_W n tyv td|d d d ��w | j � d| jj � | j � d� t| jjt� | jd�}t | j|| j | j| jt | j t | j d| j| jj!| jj"| j#| j$d� t d| jj% � dS )r� zReconnecting to local samdbz#transaction_index_cache_size:200000F)r? rr r@ r< r4 z Finding domain GUID from ncName�ncNamezextended_dn:1:1zreveal_internals:0)rI rC rD r| r� r z2Can't find naming context on partition DN %s in %srA ry z3Can't find GUID in naming master on partition DN %szGot domain GUID %sz Calling own domain provision�r@ r< r� ) �dom_for_fun_levelrP r� r� r� r< �hostip�hostip6r� r� zProvision OK for domain %sN)&r� r r� r? r r< r_ �set_invocation_idrh r| rN ra rc r� rd re r- r ry r! r� �get_extended_componentr� � domainguid�KeyErrorr r� �secretsr r rP r r� r� r� r� r� r� )r� r� � secrets_ldbr4 r4 r5 �join_provision_own_domainu sB �� � 8 � �z'DCJoinContext.join_provision_own_domainc C s" t �d| j|f | j|| j| j�S �z2Creates a new DRS object for managing replicationsr� )r � drs_Replicater] r< r� r| )r� � repl_credsr� r4 r4 r5 �create_replicator� s �z DCJoinContext.create_replicatorc C s� t d� | j�� �z2t�| j�� �}| jdu r#t d� t�tj �}n| j}| j rDt � }|� | j � |�t� |�| j� |�| j� n| j}d}| j �� dkrT|d7 }| �||�}|j| j||d| j | jd� |j| j||| j | jd � | js�| j tj @ s�t d � | j tj O _ |j| j ||| j | j d � | j tj N _ |j| j ||| j | j d � t d � | j | j fD ]}|| j!v r�t d t"|� � |j|||| j | jd � q�| j r�|j| j#||tj$dd � |j| j%||tj$dd � n@| j&du�r.z |j| j&||tj'd� W n, t(j)�y- } z |j*\}} |tj+k�r"t d| j, � t d� n� W Y d}~nd}~ww || _-|| _.|| _/t d� W n | j�0� � | j�1� | �2� dS )zReplicate the SAM.zStarting replicationNzUsing DS_BIND_GUID_W2K3r) r* r+ T)�schema�rodcr� )r� r� z;Replicating critical objects from the base DN of the domainz5Done with always replicated NC (base, config, schema)zReplicating %s)r� r� )r� zdWARNING: Unable to replicate own RID Set, as server %s (the server we joined) is not the RID Master.zxNOTE: This is normal and expected, Samba will be able to create users after it contacts the RID Master at first startup.zCommitting SAM database)3r� r� �transaction_startr ry r_ �get_invocation_idr~ r �DRSUAPI_DS_BIND_GUID_W2K3r� r r� r< r� r � set_usernamer� r� r� r; r, r� r� rn r� rp r� �domain_replica_flags�DRSUAPI_DRS_CRITICAL_ONLYrj r� r� rW rh r� �DRSUAPI_EXOP_REPL_SECRETr� r� �DRSUAPI_EXOP_FSMO_RID_ALLOCr� �DsExtendedErrorrg � DRSUAPI_EXOP_ERR_FSMO_NOT_OWNERr] r� �source_dsa_invocation_id�destination_dsa_guid�transaction_cancel�transaction_commit�refresh_ldb_connection) r� r r r� r� r� rx �e1r� r� r4 r4 r5 �join_replicate� s� � � � � �� � � � ��� z DCJoinContext.join_replicatec C s� z | j jtjg d� W d S tjyL } z3|j\}}|tjkr=d|v s'd|v r=| j�d� t d| j t � | j | j d�| _ nt|��W Y d }~d S d }~ww )NrB �!NT_STATUS_CONNECTION_DISCONNECTED�NT_STATUS_CONNECTION_RESETz)LDB connection disconnected. Reconnectingr= r> )r_ rc rd re rf rg �ERR_OPERATIONS_ERRORrN �warningr r] r r; r< r- )r� r� r� r� r4 r4 r5 r s ����z$DCJoinContext.refresh_ldb_connectionc C s� t �� }t �� |_t|�|j_t�d�|j_t � d�|j_ | j |_ dt| j �| jf |_t jt jB |_| js>| jt jO _| j d u rG| �� | j �| jd|� d S )Nr� zS-0-0z %s._msdcs.%sr� )r �DsReplicaUpdateRefsRequest1rI �naming_contextrh r� r ry r� r rq r� r~ � dest_dsa_guidr� �dest_dsa_dns_name�DRSUAPI_DRS_ADD_REF�DRSUAPI_DRS_DEL_REFrr r� r� r1 �DsReplicaUpdateRefsr. )r� r� r� r4 r4 r5 �send_DsReplicaUpdateRefs s z&DCJoinContext.send_DsReplicaUpdateRefsc C s: t j}t jt jB }| j}d| j }| j}t| j�}d||f }t � | j | j �}| j �dt|�||f � d} t � d| j| f | j | j�} d} t�| j�} t�� } | j| _t�dt| j�tjf �| _ z| � |d| j||d t j |d d � \}}W n t y� } z|j!d t"j#kr�d } W Y d }~nd }~ww | r�|j$D ]F}|j%D ]@}|j&t j'ks�|j&t j(kr�t �)� }||_$z| �*|d| j||d |� W q� t y� } z|j!d t"j#kr�n� W Y d }~q�d }~ww q�q�|D ];}|�+d �d kr�| j �d |||f � t,|�}n| j �d|||f � t-|�}t �)� }||_$| �*|d| j|||d � q�t|�dk�r�t.�/| j| j0�}| jj1d||f |d�\| _2}| j3| j2| dtj4tj5B gd� | j �d|||f � t �)� }t6|�}||_$| �*|d| j|||d � t.�/| j| j7�}| jj1d||f |d�\| _8}| j3| j8| dtj4tj5B gd� | j �d� d S )a� Remotely Add a DNS record to the target DC. We assume that if we replicate DNS that the server holds the DNS roles and can accept updates. This avoids issues getting replication going after the DC first starts as the rest of the domain does not have to wait for samba_dnsupdate to run successfully. Specifically, we add the records implied by the DsReplicaUpdateRefs call above. We do not just run samba_dnsupdate as we want to strictly operate against the DC we just joined: - We do not want to query another DNS server - We do not want to obtain a Kerberos ticket (as the KDC we select may not be the DC we just joined, and so may not be in sync with the password we just set) - We do not wish to set the _ldap records until we have started - We do not wish to use NTLM (the --use-samba-tool mode forces NTLM) z _msdcs.%srG z&Adding %d remote DNS records for %s.%sr� r� Tz%s-%dr NF�:���z,Adding DNS AAAA record %s.%s for IPv6 IP: %sz)Adding DNS A record %s.%s for IPv4 IP: %s)� dns_partitionz sd_flags:1:%dr{ z$Adding DNS CNAME record %s.%s for %sz_All other DNS records (like _ldap SRV records) will be created samba_dnsupdate on first startup)9r �DNS_CLIENT_VERSION_LONGHORN�DNS_RPC_VIEW_AUTHORITY_DATA�DNS_RPC_VIEW_NO_CHILDRENr� r� r� rh r~ r� � interface_ipsr< r� rN ra r� r] r; r& �SDUtilsr_ r r r� � owner_sidrq rs �DOMAIN_RID_DCS� group_sid�DnssrvEnumRecords2r � DNS_TYPE_ALLr$ rg r" �"WERR_DNS_ERROR_NAME_DOES_NOT_EXISTr& �records�wType� DNS_TYPE_A� DNS_TYPE_AAAA�DNS_RPC_RECORD_BUF�DnssrvUpdateRecord2�findr( r' rd r! r� � dns_lookupr� �modify_sd_on_dn� SECINFO_OWNER� SECINFO_GROUPr) r� r� )r� �client_version� select_flagsr� � msdcs_zoner� � msdcs_cname� cname_target�IPsr� �dns_conn� name_found� sd_helper�change_owner_sd�buflenr� r� r& �record� del_rec_buf�IP� add_rec_buf�domaindns_zone_dn� ldap_record�forestdns_zone_dnr4 r4 r5 �join_add_dns_records) s � �� ��� � �� � ������ ���� ������� ���z"DCJoinContext.join_add_dns_recordsc C sT | j | jfD ]!}|| jv r'| j�dt|� � | jj|| j| j | j | j dd� qd S )Nz!Replicating new DNS records in %sF)r� r� � full_sync) r� r� rW rN ra rh r� r� r r~ r� r� )r� rx r4 r4 r5 � join_replicate_new_dns_records� s ���z,DCJoinContext.join_replicate_new_dns_recordsc C s� | j �d� | jD ]}| �|� q | jrTtd� | j�t| j �� | j� d| j � t � � }t �| jd| j �|_t �t| j �t jd�|d< | j�|� | j�|jdd� | j �d� t � � }t �| jd�|_t �d t jd �|d < | j}t �d t|� t jd �|d < | j�|� | jr�d S t| jjt� | j d�}| j �d� t || j | j | j | j!| j"| j#| j$| j%d� | j&�'d�r�t(| j|| j)| j| j | j | j&| j*| j | j+| j,d� d S d S )z=Finalise the join, mark us synchronised and setup secrets db.z=Sending DsReplicaUpdateRefs for all the replicated partitionszSetting RODC invocationId�domainFunctionalityz%sru r �(Setting isSynchronized and dsServiceName�@ROOTDSEr �isSynchronized� <GUID=%s>� dsServiceNameNr� zSetting up secrets database)r� r� r� � netbiosnamer� r� �secure_channel_typer� r� )r� r� �os_levelrP r� )-rN ra rW r r� r� r� r� rh r| �set_opaque_integerr� rd r r! r� r� r" r r# r$ �"set_attribute_replmetadata_versionr~ r� r r� r� r r< r rv r� r� r� rs r� rI r� r� r� r r� r� rP r� )r� rx r' r� r� r4 r4 r5 � join_finalise� sf � � � � � ��zDCJoinContext.join_finalisec C s� t d| j � d}t�d| j|f | j| j�}t�� }t�� |_|� d� d�|t j �}t� � }| j|j_| j|j_| j|_tjtjB |_tj|_tj|_z%t�� }| j|_|� ||tj �}t d| j|j jf � |� ||j j� W n t yz Y nw t!| j"�#d��}t$�%� } t&|�| _'|| _(t$�)� } t*�+t,t-�-� ��| _.tj/| _0| | _1t$�2� } d| _3| g| _4t$�5� } d| _3| | _6t$�7� } dgd }t8d �D ] }t9�:d d �||< q�|| _;| | _<| | _=t>| �}t?|j@|�}t�A� }t&|�|_'t!|�|_Bt�C� }||_D|�E|||t jF�}d | jG| jHf d tI|j�tI|j�tI|j�| jJ| jGt>| �t>| �t>| jK�d� }| jL�M|� d| jJ| jHf dtIt*jNjO�| j"�#d�d| jJ d�}| jL�M|� dS )zprovision the local SAM.z"Setup domain trusts with server %sr� zncacn_np:%s[%s]zutf-8z)Removing old trust record for %s (SID %s)r� r� rH i r r� zcn=%s,cn=system,%s� trustedDomain) r� r � trustType�trustAttributes�trustDirection�flatname� trustPartner�trustAuthIncoming�trustAuthOutgoing�securityIdentifierzcn=%s$,cn=users,%sr rF )r� r r� r� r N)Pr� r] r r� r< r; r� r� r� r� r� r r� �TrustDomainInfoInfoExr� rv r� r� rs r� �LSA_TRUST_DIRECTION_INBOUND� LSA_TRUST_DIRECTION_OUTBOUND�trust_direction�LSA_TRUST_TYPE_UPLEVEL� trust_type�!LSA_TRUST_ATTRIBUTE_WITHIN_FOREST�trust_attributesr� r� r� r� r� r[ r � trustdom_passrC r � AuthInfoClearr� �size�password�AuthenticationInformationr� � unix2nttimer� �time�LastUpdateTime�TRUST_AUTH_TYPE_CLEAR�AuthType�AuthInfo� AuthenticationInformationArray�count�array�trustAuthInOutBlob�current�trustDomainPasswordsr� �random�randint� confounder�outgoing�incomingr r � session_key� DATA_BUF2�data� TrustDomainInfoAuthInfoInternal� auth_blob�CreateTrustedDomainEx2�SEC_STD_DELETEr� rj rh rx rt r� r r� � UF_INTERDOMAIN_TRUST_ACCOUNT)r� r� r� r� r� ra �oldname�oldinfo� password_blob� clear_value� clear_authentication_information� authentication_information_arrayrs � trustpassrr r� �trustpass_blob�encrypted_trustpassry � auth_info�trustdom_handler& r4 r4 r5 �join_setup_trusts s� � � � � �� �z DCJoinContext.join_setup_trustsc C s� | j | jg| _| j| j | jg| _| jr#| jdkr#| j| jg7 _d S | jsZ| j| jg7 _| jdkr\| j| jg7 _| j| jg7 _| j| jg7 _| j| jg7 _d S d S d S )NrM ) rp rn rW rj rX r� r� r� r� r8 r4 r4 r5 �build_nc_listsy s �z DCJoinContext.build_nc_listsc C s� | � � | jr | �� n| �� z/| �� | �� | �� | jr,| �� | � � | � � | j dkr9| � � | � � | �� W d S ztd� W n tyR Y nw | �� | �� � )NrM zJoin failed - cleaning up)r� rU r� r� r� r� r r� r� r� r� r� r? rA rM r� �IOErrorr r8 r4 r4 r5 �do_join� s2 �zDCJoinContext.do_join)NNNNNNNNNFNFFNNN)F�N)'r6 r7 r8 �__doc__r/ r� r� r� r� rb r` r� r ru rw r r r� r( r1 r9 r@ rX ry r r� r� r� r� r� r r r r? rA rM r� r� r� r4 r4 r4 r5 r: = s^ � 5/ C+ X+ -^ He r: Fc C st t | |||||||| | | | | ||d�}|�d|j� | �d|j � |�d|j� | �d|j � d|j|jf |_d|jt j f dt j dt j dt j dt j g|_d|jt jf |_|�� }d| }||_tjjtjjB tjjB |_|j�d |j d |j g� d |j |_ t j |_!d |_"| j#t$j%t$j&B O _#|j#|_'|r�| j't$j(O _'|�)� | �d |j|jf � d S )zJoin as a RODC.�rS rT � workgroup�workgroup is %sr� � realm is %szCN=krbtgt_%s,CN=Users,%sz <SID=%s-%s>z<SID=%s>zRestrictedKrbHost/%szCN=RODC Connection (FRS),%sTz$Joined domain %s (SID %s) as an RODCN)*r: �setrv ra r� r� rj r� rs r �DOMAIN_RID_RODC_DENY�SID_BUILTIN_ADMINISTRATORS� SID_BUILTIN_SERVER_OPERATORS� SID_BUILTIN_BACKUP_OPERATORS� SID_BUILTIN_ACCOUNT_OPERATORSr� �DOMAIN_RID_RODC_ALLOWr� r r� r� r� r� �)UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION�UF_PARTIAL_SECRETS_ACCOUNTr� r� �extendr� r� r� r � SEC_CHAN_RODCrI r� r� r �%DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING�$DRSUAPI_DRS_GET_ALL_GROUP_MEMBERSHIPr� r� r� )rN r] r; r< rO r� rP r� �domain_critical_onlyr� rQ r� rU rR rS rT r� �mysid�admin_dnr4 r4 r5 � join_RODC� sP ����� �r� c C s� t | |||||||| | | | | ||d�}|�d|j� | �d|j � |�d|j� | �d|j � tjjtjjB |_ |j � d|j � t j|_| jtjtjB O _|j|_|r`| jtjO _|�� | �d|j|jf � dS ) z Join as a DC.r� r� r� r� r� z1E3514235-4B06-11D1-AB04-00C04FC2DCD2/$NTDSGUID/%sz!Joined domain %s (SID %s) as a DCN)r: r� rv ra r� r� r� r� �UF_TRUSTED_FOR_DELEGATIONr� r� rL r� r � SEC_CHAN_BDCrI r� r r� �!DRSUAPI_DRS_FULL_SYNC_IN_PROGRESSr� r� r� rs )rN r] r; r< rO r� rP r� r� r� rQ r� rU rR rS rT r� r4 r4 r5 �join_DC� s* � �r� rM c C sz t | ||||||||| d� } |�d| j� | �d| j � |�d| j� | �d| j � | �� | �d| j| jf � | S )z%Creates a local clone of a remote DC.)rP r� r� �include_secretsrS rT r� r� r� r� zCloned domain %s (SID %s))�DCCloneContextr� rv ra r� r� rs ) rN r] r; r< rP r� r� r� rS rT r� r4 r4 r5 � join_clone s �r� c s: e Zd ZdZ d � fdd� Zdd� Zdd � Z� ZS ) r� zClones a remote DC.NFc s� t t| �j|||||||| | d� d | _d | _d | _| j�d�d | _d | _ d | _ | j � � | _ | jtjtjB O _|sD| jtjO _| j| _d S )N)rP r� r� rS rT �.r )r. r� r/ r� r� r� r] �splitr� r~ r� r_ � get_ntds_GUID�remote_dc_ntds_guidr� r r� r� r� r� ) r� rN r] r; r< rP r� r� r� rS rT r2 r4 r5 r/ $ s& � � zDCCloneContext.__init__c C sj | j �d� t�� }t�| jd�|_t�dtjd�|d< | j }t�dt |� tjd�|d< | j� |� d S )NrC rD r rE rF rG ) rN ra rd r r! r� r� r" r# r� rh r$ )r� r' r� r4 r4 r5 rM ? s ��z DCCloneContext.join_finalisec C s$ | � � | �� | �� | �� d S r� )r� r� r rM r8 r4 r4 r5 r� M s zDCCloneContext.do_join) NNNNNNNFNN)r6 r7 r8 r� r/ rM r� r9 r4 r4 r2 r5 r� ! s �r� c sH e Zd ZdZ d� fdd� Zdd� Zdd � Zd d � Zd d � Z� Z S )�DCCloneAndRenameContextz6Clones a remote DC, renaming the domain along the way.NTc s8 t t| �j|||||| | | | d� || _|| _|| _d S )N)rP r� r� r� rS )r. r� r/ � new_base_dn�new_domain_name� new_realm) r� r� r� r� rN r] r; r< rP r� r� r� rS r2 r4 r5 r/ \ s � z DCCloneAndRenameContext.__init__c C s. d| j |f }t�|| j|| j| j| j| j�S r� )r] r �drs_ReplicateRenamerr< r� r| rj r� )r� r� r� � binding_strr4 r4 r5 r� j s �z)DCCloneAndRenameContext.create_replicatorc C s4 t �� \}}|�d|� tjj|d�}t�|� |S )z?Creates a non-global LoadParm based on the global LP's settingsF)�filename_for_non_global_lp)�tempfile�mkstemp�dumpr� �param�LoadParm�os�remove)r� � global_lp�fd�tmp_file�local_lpr4 r4 r5 �create_non_global_lpv s z,DCCloneAndRenameContext.create_non_global_lpc C s | j }t�d| | j|�S )z/Uses string substitution to replace the base DNrF )rj �re�subr� )r� �dn_str� old_base_dnr4 r4 r5 � rename_dn� s z!DCCloneAndRenameContext.rename_dnc C s� t d� | �| j�}t| jt� | jt| j|| � | j �| j | � | j �| � | j �| j| jd| j| jd�}t d|j � |j| _|j| _dS )z"Provision the local (renamed) SAM.z(Provisioning the new (renamed) domain...r� ) rP r� r� r< r� r� r2 r� r� r� r� r� rS z%Provision OK for renamed domain DN %sN)r� r� r< r rN r rP r r� r� rl r� rn rp r� rs r� rS r� r_ r� r� )r� � non_global_lpr� r4 r4 r5 r� � s � z&DCCloneAndRenameContext.join_provision) NNNNNNNTN) r6 r7 r8 r� r/ r� r� r� r� r9 r4 r4 r2 r5 r� Y s � r� )NNNNNNNNFNFNFFNN) NNNNNNFrM NN)Nr� � samba.authr � samba.samdbr r� r r r r r rd rz � samba.ndrr r � samba.dcerpcr r r r r r r r � samba.dsdbr �samba.credentialsr r �samba.provisionr r r r r r �samba.provision.commonr � samba.schemar r � samba.netr �samba.provision.sambadnsr r! r" �base64r# r$ r% r& �samba.dnsserverr' r( r) �loggingrp re r� r� r� � collectionsr* � samba.commonr+ � samba.netcmdr, r� r- rT r: r� r� r� r� r� r4 r4 r4 r5 �<module> s� ( ~ �8 �" �8
Close
