File: //lib/python3/dist-packages/samba/__pycache__/drs_utils.cpython-310.pyc
o
eF�c�H � @ s� d dl mZmZmZ d dlmZ d dlmZ d dlm Z d dlm
Z
d dlm Z d dlZd dl Z d dl
mZmZmZ d dlZG d d
� d
e�Zdd d �Zd
d� Zdd� Zdd� Zdd� ZG dd� de�ZG dd� de�ZdS )� )�drsuapi�misc�drsblobs)�Net)�
ndr_unpack)�dsdb)�werror)� WERRORErrorN)�DRSUAPI_ATTID_name�(DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8�)DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V10c @ s e Zd ZdZdd� Zdd� ZdS )� drsExceptionzBase element for drs errorsc C s
|| _ d S �N��value)�selfr � r �1/usr/lib/python3/dist-packages/samba/drs_utils.py�__init__% �
zdrsException.__init__c C s
d| j S )NzdrsException: r )r r r r �__str__( r zdrsException.__str__N)�__name__�
__module__� __qualname__�__doc__r r r r r r r
" s r
c
C s� d}|� � dkr |d7 }|dur!|d| � �7 }d|� d|� d�}nd | |f }zt�|||�}t|�\}}W n tyJ } ztd
| | f ��d} ~ ww |||fS ) a� Make a DRSUAPI connection to the server.
:param server: the name of the server to connect to
:param lp: a samba line parameter object
:param creds: credential used for the connection
:param ip: Forced target server name
:return: A tuple with the drsuapi bind object, the drsuapi handle
and the supported extensions.
:raise drsException: if the connection fails
�seal� z,printNz,target_hostname=z
ncacn_ip_tcp:�[�]zncacn_ip_tcp:%s[%s]z DRS connection to %s failed: %s)� log_levelr �
drs_DsBind� Exceptionr
)
�server�lp�creds�ip�binding_options�binding_string� drsuapiBind�
drsuapiHandle�bindSupportedExtensions�er r r �drsuapi_connect, s ��
r, c
C sh t �� }||_t �� }||_||_t�|�|_z
| � |d|� W dS t
y3 } zt d| ��d}~ww )a� Send DS replica sync request.
:param drsuapiBind: a drsuapi Bind object
:param drsuapi_handle: a drsuapi handle on the drsuapi connection
:param source_dsa_guid: the guid of the source dsa for the replication
:param naming_context: the DN of the naming context to replicate
:param req_options: replication options for the DsReplicaSync call
:raise drsException: if any error occur while sending and receiving the
reply for the dsReplicaSync
� zDsReplicaSync failed %sN) r �DsReplicaObjectIdentifier�dn�DsReplicaSyncRequest1�naming_context�optionsr �GUID�source_dsa_guid�
DsReplicaSyncr! r
)r( �drsuapi_handler4 r1 �
req_option�nc�req1�estrr r r �sendDsReplicaSyncL s
��r; c C s4 t �� }d|_t �� |_|j jt jO _|j jt jO _|j jt jO _|j jt j O _|j jt j
O _|j jt j O _|j jt j O _|j jt j
O _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt jO _|j jt j O _|j jt j O _|j jt j O _|j jt j O _|j jt j O _|j jt j!O _| �"t#�$t j%�|�\}}||jjfS )z0make a DsBind call, returning the binding handle� )&r �
DsBindInfoCtr�length� DsBindInfo28�info�supported_extensions� DRSUAPI_SUPPORTED_EXTENSION_BASE�-DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION�%DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI�&DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2�+DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS�%DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1�4DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION�'DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE�'DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2�4DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION�%DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2�8DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD�'DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND�)DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO�-DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION�&DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01�1DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP�+DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY�&DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3�,DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2�(DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6�)DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCSr �*DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5�*DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6�,DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3�*DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7�)DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT�DsBindr r3 �DRSUAPI_DS_BIND_GUID)�drs� bind_infor@ �handler r r r g sB
r c
C s� t �� }d|_g }| �� }| j|tjdg d�d�}|D ]@}t|d d �}d|v r<|d d }t|�t j
j t j
j B @ r<qd|v rO|d d }t|�t j
j
@ rOq| �|�} |�t| �� q|�� ||_t|�|_|S ) z-get a list of attributes for RODC replicationr- zobjectClass=attributeSchema)�lDAPDisplayName� systemFlags� searchFlags)�base�scope�
expression�attrsrb r rc rd )r �DsPartialAttributeSet�version�get_schema_basedn�search�ldb�
SCOPE_SUBTREE�str�int�sambar �DS_FLAG_ATTR_NOT_REPLICATED�DS_FLAG_ATTR_IS_CONSTRUCTED�SEARCH_FLAG_RODC_ATTRIBUTE� get_attid_from_lDAPDisplayName�append�sort�attids�len�
num_attids)
�samdb�partial_attribute_setrx � schema_dn�res�r�ldap_display_name� system_flags� search_flags�attidr r r �"drs_get_rodc_partial_attribute_set� s4
� �
r� c C s |j | _ |j| _|j| _dS )z�
Copies the highwater mark by value, rather than by object reference. (This
avoids lingering talloc references to old GetNCChanges reply messages).
N)�tmp_highest_usn� reserved_usn� highest_usn)�hwm�new_hwmr r r �drs_copy_highwater_mark� s r� c @ sB e Zd ZdZdd� Zdd� Zdd� Zdejdd d
dd fd d
�Z d S )�
drs_ReplicatezDRS replication callsc C s� t � |||�| _t| j�\| _| _t||d�| _|| _t|t j
�s%t d��|t �
d�kr0t d��| j� | j|| j|�| _
d| _d S )N)r$ r# z"Must supply GUID for invocation_idz$00000000-0000-0000-0000-000000000000zGMust not set GUID 00000000-0000-0000-0000-000000000000 as invocation_idr )r r_ r �
drs_handle� supports_extr �netr{ �
isinstancer r3 � RuntimeError�replicate_init�replication_state�
more_flags)r r' r# r$ r{ �
invocation_idr r r r � s
zdrs_Replicate.__init__c C s& | j }|dko|t@ o|jtj@ dkS )Ni�! r )r� r r� r �DRSUAPI_DRS_GET_TGT)r �
error_code�reqr� r r r �_should_retry_with_get_tgt� s ��z(drs_Replicate._should_retry_with_get_tgtc C s | j j| j|||||d� dS )�5Processes a single chunk of received replication data)�schema� req_levelr� N)r� �replicate_chunkr� �r �level�ctrr� r� r� � first_chunkr r r �
process_chunk� s
�zdrs_Replicate.process_chunkFNTr c
C sl | j t@ rt�� } |
| jB | _d} nd} t�� } || _|| _t�� | _ || j _
d}
t� � }d|_ d|_
d|_|s�| jj|tjdgd�}d|d v rb|d d D ]}ttj|�}|jj|kra|jj}qOt�� }
d|
_d|
_d|
_g }t � | j| j� � �}|D ]}t� � }|j|_|j|_|� |� q}||
_!t"|�|
_#|| _|
| _$|dur�|| _%n,|tj&kr�d| _%n#tj'tj(B tj)B tj*B tj+B | _%|r�| j%tj,O _%n| j%tj-O _%| r�| j%tj.O _%d| _/d | _0|| _1d| _2d| _3d| _4d| j5_6d| j5_7|�s|�rt8| j�| _3| j t9@ �s)d
} t�:� }t;|�D ]}|d d k�r%t<||t=| |�� �q|} d}d}d } | j>�?| j@| | �\}} | jAdu �rN| jBdk�rNtCd
| jB ��z | �D|| || | |� W n. tE�y� } z!| �F| jGd | ��r�tHd� | jtjIO _d }W Y d} ~ �q/| �d} ~ ww d}|| jB7 }z|| jJ7 }W n
tK�y� Y nw | jLdk�r� ||fS tM| j| jN� �q0)zreplicate a single DN�
� Nr �repsFrom)re rf rh r- i� i�" � �_Tz6DsGetNCChanges: NULL first_object with object_count=%uz1Missing target object - retrying with DRS_GET_TGTF)Or� r r �DsGetNCChangesRequest10r� �DsGetNCChangesRequest8�destination_dsa_guid�source_dsa_invocation_idr. r1 r/ �DsReplicaHighWaterMarkr� r� r� r{ rl rm �
SCOPE_BASEr r �repsFromToBlobr� �
highwatermark�DsReplicaCursorCtrExrj � reserved1� reserved2r �_dsdb_load_udv_v2�get_default_basedn�DsReplicaCursorrv �cursorsry �count�uptodateness_vector�
replica_flags�DRSUAPI_EXOP_REPL_SECRET�DRSUAPI_DRS_INIT_SYNC�DRSUAPI_DRS_PER_SYNC�DRSUAPI_DRS_GET_ANC�DRSUAPI_DRS_NEVER_SYNCED�$DRSUAPI_DRS_GET_ALL_GROUP_MEMBERSHIP�%DRSUAPI_DRS_SPECIAL_SECRET_PROCESSING�DRSUAPI_DRS_WRIT_REP�DRSUAPI_DRS_SYNC_FORCED�max_object_count� max_ndr_size� extended_op� fsmo_infor| �partial_attribute_set_ex� mapping_ctr� num_mappings�mappingsr� r �DsGetNCChangesRequest5�dir�setattr�getattrr_ �DsGetNCChangesr� � first_object� object_countr� r� r r� �args�printr� �linked_attributes_count�AttributeError� more_datar� �new_highwatermark) r r/ r� r� r� �exop�rodcr� � full_sync� sync_forcedr� r� r� �udvr� r~ �reps_from_packed�
reps_from_obj�
cursors_v1�
cursors_v2� cursor_v2� cursor_v1�req5�a� num_objects� num_linksr� r� r� r+ r r r � replicate� s�
� ��
����� ���
� ��zdrs_Replicate.replicate)
r r r r r r� r� r �DRSUAPI_EXOP_NONEr� r r r r r� � s �r� c sD e Zd ZdZ� fdd�Zdd� Zdd� Zdd � Z� fd
d �Z� Z S ) �drs_ReplicateRenamerz,Uses DRS replication to rename the entire DBc s0 t t| ��|||||� || _|| _tj| _d S r )�superr� r � old_base_dn� new_base_dnr r� r� )r r' r# r$ r{ r� r� r� �� __class__r r r n s � z drs_ReplicateRenamer.__init__c C s t �d| j | j|�S )z/Uses string substitution to replace the base DNz%s$)�re�subr� r� )r �dn_strr r r � rename_dn{ s z drs_ReplicateRenamer.rename_dnc C sJ |j jD ] }|jtkr"t�| j|jj�}|� � }|�
d�|j j d _
qdS )z3Updates the 'name' attribute for the base DN objectz utf-16-ler N)�
attribute_ctr�
attributesr� r
rm �Dnr{ �
identifierr/ �
get_rdn_value�encode� value_ctr�values�blob)r �base_obj�attr�base_dn�new_namer r r �update_name_attr s
��z%drs_ReplicateRenamer.update_name_attrc C sN |j j}| �|j j�|j _td||j jf � |j j| jkr%| �|� dS dS )z1Renames the first/top-level object in a partitionz Renaming partition %s --> %sN)r� r/ r� r� r� r� )r � first_obj�old_dnr r r �rename_top_level_object� s ��z,drs_ReplicateRenamer.rename_top_level_objectc sR |j r | �|j j�|j _|r|jdkr| �|jj� tt| �� ||||||� dS )r� r N)
r1 r� r/ r� r r� �objectr� r� r� r� r� r r r� � s �z"drs_ReplicateRenamer.process_chunk)
r r r r r r� r� r r� �
__classcell__r r r� r r� k s
r� r ) � samba.dcerpcr r r � samba.netr � samba.ndrr rq r r r rm �samba.dcerpc.drsuapir
r r r� r! r
r, r; r r� r� r r� r� r r r r �<module> s&
&&
/