File: //lib/python3/dist-packages/samba/__pycache__/remove_dc.cpython-310.pyc
o
�/a�H � @ s� d dl Z d dlZd dlmZ d dlmZ d dlmZ d dlmZm Z d dl
m Z m Z m
Z
mZmZmZ G dd� de�Zd d
� Zdd d
�Zdd� Z ddd�Z ddd�Zdd� Zdd� ZdS )� N)�LdbError)�werror)�
ndr_unpack)�misc�dnsp)� DNS_TYPE_NS�
DNS_TYPE_A�
DNS_TYPE_AAAA�DNS_TYPE_CNAME� DNS_TYPE_SRV� DNS_TYPE_PTRc @ s e Zd ZdZdd� Zdd� ZdS )�DemoteExceptionz Base element for demote errorsc C s
|| _ d S �N��value)�selfr � r �1/usr/lib/python3/dist-packages/samba/remove_dc.py�__init__ �
zDemoteException.__init__c C s
d| j S )NzDemoteException: r )r r r r �__str__# r zDemoteException.__str__N)�__name__�
__module__� __qualname__�__doc__r r r r r r r
s r
c
C s� | � � }dd| fD ]\}t�| |�}|�| �� �dkr%td|| �� f ��|�d�dkr2td| ��|�dd|� z|�d | � | � |� W q
tj
yf } z|j \}}|tj kr[n� W Y d }~q
d }~ww d
D ]^}t�| |�}|�| �
� �dkr�td|| �
� f ��|�d�dkr�td ||f ��|�dd|� z|�d | � | � |� W qi tj
y� } z| j \}}|tj kr�n� W Y d } ~ qid } ~ ww d S ) Nz3CN=Enterprise,CN=Microsoft System Volumes,CN=Systemz+CN=%s,CN=Microsoft System Volumes,CN=SystemFz+Failed constructing DN %s by adding base %szCN=Xz.Failed constructing DN %s by adding child CN=Xr �CNz Removing Sysvol reference: %s)zMCN=Domain System Volumes (SYSVOL share),CN=File Replication Service,CN=SystemzDCN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=SystemzAFailed constructing DN %s by adding child CN=X (soon to be CN=%s))�domain_dns_name�ldb�Dn�add_base�get_config_basednr
� add_child�
set_component�info�deleter �args�ERR_NO_SUCH_OBJECT�get_default_basedn)
�samdb�logger�dc_name�realm�s�dn�e�enum�estr�e1r r r �remove_sysvol_references' s` �
��
���
��
����r2 Fc s� �j dtjdg dgd�}t|�dkrd S |�� }z ��|�\}�W n3 tyT } z'|j\}} |tj ks8|tj
krH|rAt �|||� W Y d }~d S t d|| f ��d }~ww ��
|g � �j dtjdgd�}
t|
�d ksmJ �|
d d } �fd
d ��t�fd d
�| D ��} �fdd�� | D ]b}
z|�d|
� ��|
�\}}W n& ty� } z|j\}} |tj kr�W Y d }~ d S t d|
| f ��d }~ww t|�}� fdd�|D �}t|�|kr�|�d|
t|�|t|� f � ��
|
|� q�t �|||� d S )N� z.(&(objectClass=dnsZone)(!(dc=RootDNSServers)))�search_options:0:2)�base�scope�
expression�attrs�controlsr zlookup of %s failed: %s�namingContexts�r6 r8 � c s t �� | ��� �dd�d S )N�/r< r )r r �
canonical_str�split)r- )r( r r �dns_name_from_dn� s z/remove_dns_references.<locals>.dns_name_from_dnc 3 s � | ] }� t |��V qd S r )�str)�.0r- )r@ r r � <genexpr>� s � z(remove_dns_references.<locals>.<genexpr>c s@ | j tks
| j tkr � D ]}|j | j kr |j| jkr dS q dS �NTF)�wTyper r �data)� dnsRecord�rec)� primary_recsr r �a_rec_to_remove� s �z.remove_dns_references.<locals>.a_rec_to_removez(checking for DNS records to remove on %sc s g | ]}� |�s|�qS r r )rB �r)rJ r r �
<listcomp>� s z)remove_dns_references.<locals>.<listcomp>�1updating %s keeping %d values, removing %s values)�searchr �
SCOPE_SUBTREE�len�upper�
dns_lookup� RuntimeErrorr% r �"WERR_DNS_ERROR_NAME_DOES_NOT_EXIST� WERR_DNS_ERROR_RCODE_NAME_ERROR� remove_hanging_dns_referencesr
� dns_replace�
SCOPE_BASE�set�debugr# )r( r) � dnsHostName�ignore_no_name�zones�dnsHostNameUpperr- �e4r/ r0 �res�ncs�a_names_to_remove_from�a_name�a_rec_dn�a_recs�e2�
orig_num_recsr )rJ r@ rI r( r �remove_dns_referencesZ sj
�
���
�
�
�� � �rh c
s� � fdd��|D ]V}|� d|j � | j|jtjddgd�}|D ]=}z|d }W n ty1 Y q w �fdd�|D �}t|�t|�kr]|�d |jt|�t|�t|� f � | �|j|� q qd S )
Nc sb t tj| �}|jtks|jtks|jtkr |j�� � kr dS dS |jt kr/|jj
�� � kr/dS dS rD ) r r �DnssrvRpcRecordrE r r
r rF rQ r �
nameTarget)r rG )r^ r r � to_remove� s
�z0remove_hanging_dns_references.<locals>.to_removez checking %sz/(&(objectClass=dnsNode)(!(dNSTombstoned=TRUE)))rG )r5 r6 r7 r8 c s g | ] }� |�st tj|��qS r )r r ri )rB �v)rk r r rL � s �z1remove_hanging_dns_references.<locals>.<listcomp>rM ) rZ r- rN r rO �KeyErrorrP r# �dns_replace_by_dn) r( r) r^ r] �zone�records�record� orig_values�valuesr )r^ rk r rV � s4 � �
�
�����rV c C s0 | j dtjdgd�}t|�dksJ �|d d d } | j |g d�tjdd�}
|
d } t| d d �} zt�| | d
d �d ��}
W n tyL d }
Y nw z
t| d d �}W n tyb d }Y nw |rl| �|d
g� |
d ur�| j |
dg d�tjd�}d|d v r�t|d d d �}|� d| � | �|� d|d v r�t|d d d �}|� d| � | �|� |r�|� d|
� | �|
d
g� d | v r�t| d d �}|r�| j dt�
| �|f g tj | � � d�}t|�dkr�|� d|d j
� | �|d j
� |d u�r |�r t| ||� |�rt| || � d S d S )Nr3 �
dsServiceNamer; r< r )�serverReference�cnr[ z(objectClass=server)�r5 r8 r6 r7 rv ru �utf8r[ �
tree_delete:0zobjectclass=computer)�msDS-KrbTgtLink�rIDSetReferencesrv �r5 r7 r8 r6 r{ zRemoving RID Set: %srz z Removing RODC KDC account: %sz5Removing computer account: %s (and any child objects)z=(&(objectclass=user)(cn=dns-%s)(servicePrincipalName=DNS/%s)))r7 r8 r6 r5 z/Removing Samba-specific DNS service account: %s)rN r rX rP rA r �decoderm r$ r# �
binary_encoderO r' r- rh r2 )r( r) � server_dn�remove_computer_obj�remove_server_obj�remove_sysvol_obj�remove_dns_names�remove_dns_accountr` �my_serviceName�msgs�msgr* � computer_dnr[ �
computer_msgs�
rid_set_dn�krbtgt_link_dnr r r �offline_remove_server� st �� � ��
�� �r� c
C s8 | j dtjdgd�}
t|
�dksJ �t�| |
d d d �d��} |�� } | |kr/td| ��z
| j |dd gtjd
�}
W n tyY } z|j \}}|tj
krTtd | ��� d }~ww t|
�dkrjtd || � � f ��|
d }|j �
� d
ks||j �� dkr�td| ��ttj|d d �}|r�| j | �� d| d�}|D ]}|�d|j � | �|j � q�|r�| j dtjd| dgd�}|D ]'}t| �}t�� }|j |_ t�|tjd�|d< |�d|j | f � | �|� q�z|�d| � | �|dg� W n t�y
} z |j \}}td| ��d }~ww t | || ||||| d � d S ) Nr3 rt r; r< r rx z#Refusing to demote our own DSA: %s zobjectClass=ntdsDSA�
objectGUIDr| zGiven DN %s doesn't existz%s is not an ntdsda in %sr z
NTDS Settingsz)Given DN (%s) wasn't the NTDS Settings DNz5(&(objectclass=nTDSConnection)(fromServer=<GUID=%s>)))r5 r7 zRemoving nTDSConnection: %sz(fsmoRoleOwner=<GUID=%s>))r4 )r5 r6 r7 r9 �
fsmoRoleOwnerr z*Seizing FSMO role on: %s (now owned by %s)z'Removing nTDSDSA: %s (and any children)ry z,Failed to remove the DCs NTDS DSA object: %s�r� r� r� r� r� ) rN r rX rP r r} �parentr
r r% r& r r- � get_rdn_name�
get_rdn_valuer r �GUIDr r# r$ rO rA �Message�MessageElement�FLAG_MOD_REPLACE�warning�modifyr� )r( r) �ntds_dnr� r� �remove_connection_obj�seize_stale_fsmor� r� r� r` r� r r� �e5r/ r0 r� � ntds_guid�stale_connections�conn�stale_fsmo_roles�role�val�m�e6r r r �offline_remove_ntds_dc! s�
�
�
��
��
��
��
��
���
�r� c
C s� | � � d }z tj|d�}d| }W n[ tym z| j| �� g dt�|� d�}W n tyF } z|j \}} t
d|| � � | f ��d }~ww t |�dkr[| �
� t
d|| � � f ��|d j}t�| d�}|�|� Y nw z | j|g tjd d
�}
W n. ty� } z"| j \}} |tjkr�g }
n| �
� t
d || � � | f ��W Y d } ~ nd } ~ ww t |
�dkr�|d u r�| �
� t
d|| � � f ��t| ||d d d d d d
� nt| ||
d jd d d d d d d d�
| �� d S )N)�hexz <GUID=%s>z (&(objectClass=server)(cn=%s)))r5 r8 r7 z4Failure checking if %s is an server object in %s: %sr z%s is not an AD DC in %szCN=NTDS Settingsz(objectClass=ntdsdsa)rw z/Failure checking if %s is an NTDS DSA in %s: %sTr� )r� r� r� r� r� r� r� )�transaction_start�uuid�UUID�
ValueErrorrN r r r~ r r% r
r rP �transaction_cancelr- r r rX r& r� r� �transaction_commit) r( r) r* r r� r� � server_msgs�e3r/ r0 � ntds_msgs�e7r r r � remove_dcv s�
�
�
���
�
�
�
�� ���
���
r� c C s | � � t| |d � | �� d S r )�start_transactionr� �commit_transaction)r( r� r r r � offline_remove_dc_RemoveDsServer� s r� )F)FFFFF)FFFFFFF)r� r r �sambar � samba.ndrr � samba.dcerpcr r �samba.dcerpc.dnspr r r r
r r � Exceptionr
r2 rh rV r� r� r� r� r r r r �<module> s6
3P-
�O
�U P