HEX
Server: Apache/2.4.52 (Ubuntu)
System: Linux spn-python 5.15.0-89-generic #99-Ubuntu SMP Mon Oct 30 20:42:41 UTC 2023 x86_64
User: arjun (1000)
PHP: 8.1.2-1ubuntu2.20
Disabled: NONE
$ pwd: /lib/python3/dist-packages/samba/netcmd/__pycache__/
Upload Files
File: //lib/python3/dist-packages/samba/netcmd/__pycache__/domain_backup.cpython-310.pyc
o

��9a���@s�ddlZddlZddlZddlZddlZddlZddlZddlZddlZddl	m
Zddlm
Z
mZddlZddlmZddlmZddlmZddlmZmZmZddlmZddlmZmZmZdd	l m!Z!dd
l"m#Z#m$Z$ddl%m&Z&m'Z'm(Z(ddlm)Z)d
dl*m+Z+ddl,m-Z-m.Z.ddl/m0Z0ddl1m2Z2ddl,m3Z3ddl4m5Z5ddl6Z6ddl,m7Z7m8Z8m9Z9ddl:m;Z;m<Z<m=Z=ddl>m?Z?ddl@mAZAddlBZBddlCmDZDddlmEZEddlFmGZGddlHmIZIddlJmKZKdd�ZLdd �ZMd!d"�ZNd#d$�ZOd%d&�ZP	d9d'd(�ZQd)d*�ZRd+d,�ZSd-d.�ZTGd/d0�d0ejUjV�ZWGd1d2�d2e+�ZXGd3d4�d4ejUjV�ZYGd5d6�d6ejUjV�ZZGd7d8�d8ejUj[�Z\dS):�N)�SamDB�get_default_backend_store)�LdbError)�libsmb_samba_internal)�param)�
backup_online�backup_restore�backup_offline)�system_session)�
DCJoinContext�
join_clone�DCCloneAndRenameContext)�dom_sid)�Option�CommandError)�misc�security�drsblobs)�Ldb�)�cmd_fsmo_seize)�make_smbconf�DEFAULTSITE)�update_krbtgt_account_password)�	remove_dc)�secretsdb_self_join)�dbcheck)�guess_names�determine_host_ip�determine_host_ip6)�fill_dns_data_partitions�get_dnsadmins_sid�get_domainguid)�tdb_copy)�mdb_copy)�CalledProcessError)�sites)�_dsdb_load_udv_v2)�ndr_pack)�SMB_SIGNING_REQUIREDc

Csz|��}Wnty!}z|�d�|�d�td|��d}~wwt|���}t|�dt|�}z%|jtj	d|gddgd�}t
|�d	krMtd
|��td||djf��tjyu}z|j\}}	|tj
krk�WYd}~nd}~wwt|�dt|�S)
Nz}A SID could not be allocated for restoring the domain. Either no RID Set was found on this DC, or the RID Set was not usable.z�To initialise this DC's RID pools, obtain a RID Set from this domain's RID master, or run samba-tool dbcheck to fix the existing RID Set.zCannot create backup�-�<SID=%s>�show_deleted:1zshow_recycled:1)�scope�base�attrs�controlsrz]Cannot create backup - this DC's RID pool is corrupt, the next SID (%s) appears to be in use.z�Cannot create backup - this DC's RID pool is corrupt, the next SID %s points to existing object %s. Please run samba-tool dbcheck on the source DC.r)�
next_free_ridr�inforr�get_domain_sid�str�search�ldb�
SCOPE_BASE�len�dn�args�ERR_NO_SUCH_OBJECT)
�samdb�logger�rid�err�sid�sid_for_restore�res�e�enum�emsg�rF�</usr/lib/python3/dist-packages/samba/netcmd/domain_backup.py�get_sid_for_restore@sB


��
����

���rHcCsFt��}|�|j�|��}|�t�tj|d||d�}|�|�|S)z7Returns an SMB connection to the sysvol share on the DC�sysvol)�lp�creds)	�s3param�get_context�load�
configfile�get_smb_signing�set_smb_signingr)�libsmb�Conn)�serverrJrK�s3_lp�saved_signing_state�connrFrFrG�smb_sysvol_connps

rXcCstj�����dd�S)N�:r*)�datetime�now�	isoformat�replacerFrFrFrG�
get_timestampsr^cCsd||f}tj�||�S)Nzsamba-backup-%s-%s.tar.bz2)�os�path�join)�	targetdir�name�time_str�filenamerFrFrG�backup_filepath�srfcCs4|�d|�t�|d�}|j|dd�|��dS)NzCreating backup file %s...�w:bz2z./��arcname)r2�tarfile�open�add�close)r=�tmpdirrf�tfrFrFrG�create_backup_tar�srpcCs�ttj�|d�d�}zStj���d�}|�d|�|�d|�d��|�d||f�|�d|�d	�|�d
��	�f�|�dt
|��|rW|�d|�W|��dSW|��dS|��w)
N�
backup.txt�wz%Y-%b-%d %H:%M:%SzBackup created %s
zUsing samba-tool version: %s
z
server stringz Domain %s backup, using DC '%s'
z/Backup for domain %s (NetBIOS), %s (DNS realm)
�	workgroup�realmz#Backup contains domain secrets: %s
z%s
)rkr_r`rarZr[�strftime�write�get�lowerr4rm)rbrJ�backup_typerT�include_secrets�
extra_info�frdrFrFrG�create_log_file�s��r}cCs8t��}t�|d�|_t�|tj|�||<|�|�dS)N�@SAMBA_DSDB)r6�Message�Dnr9�MessageElement�FLAG_MOD_ADD�modify)r<�marker�value�mrFrFrG�add_backup_marker�sr�cCsT|durtd��tj�|�s|�d|�t�|�dStj�|�s(td|��dS)NzTarget directory requiredzCreating targetdir %s...z%s is not a directory)rr_r`�existsr2�makedirs�isdir)r=rbrFrFrG�check_targetdir�s�r�cCs�|��}d|tjf}d|f}|j|��tj|d�}t|dd�}t�	dd�}|�
d||f�|�
d	|�|j||d
|d�dS)
zASets a randomly generated password for the backup DB's admin userz(objectsid=%s-%s)z(&(objectClass=user)%s))r.r-�
expressionr�samaccountname�� z$Setting %s password in backup to: %sz7Run 'samba-tool user setpassword %s' after restoring DBF)�force_change_at_next_login�usernameN)r3r�DOMAIN_RID_ADMINISTRATORr5�	domain_dnr6�
SCOPE_SUBTREEr4�samba�generate_random_passwordr2�setpassword)r=r<�	domainsid�match_admin�search_exprrBr��	adminpassrFrFrG�set_admin_password�s"�
��

�r�c
@steZdZdZdZejejd�Ze	dde
d�e	de
dd	�e	d
ddd
d�e	dddddgde�d�gZ		ddd�Z
dS)�cmd_domain_backup_onlinea�Copy a running DC's current DB into a backup tar file.

    Takes a backup copy of the current domain from a running DC. If the domain
    were to undergo a catastrophic failure, then the backup file can be used to
    recover the domain. The backup created is similar to the DB that a new DC
    would receive when it joins the domain.

    Note that:
    - it's recommended to run 'samba-tool dbcheck' before taking a backup-file
      and fix any errors it reports.
    - all the domain's secrets are included in the backup file.
    - although the DB contents can be untarred and examined manually, you need
      to run 'samba-tool domain backup restore' before you can start a Samba DC
      from the backup file.z6%prog --server=<DC-to-backup> --targetdir=<output-dir>��	sambaopts�credopts�--server�The DC to backup��help�type�--targetdirz%Directory to write the backup file to)r�r��--no-secrets�
store_trueF�-Exclude secret values from the backup created��action�defaultr��--backend-store�choice�BACKENDSTORE�tdb�mdb�7Specify the database backend to be used (default is %s)�r��metavar�choicesr�Nc
Csn|��}|�tj�|��}|�|�}	|durtd��t||�tj	|d�}
|}z�t
||	|||d|
|d�}|j}
~td||	t
�|d�}t||�}|��}|�d�tj�|
d�}t|||	�}t|||���t�|
j�t|
jt
�|tjd	�}t�}t|d
|�t|d|�t|dd
�|r�t||�t |||�}t!|
|d
||�t"||
|�Wt�|
�dSt�|
�w)N�Server required��dir�SAMBA_INTERNAL)r=rKrJrzrT�dns_backendrb�
backend_store�ldap://��url�credentials�session_inforJz$Backing up sysvol files (via SMB)...�
sysvol.tar.gz�r�r�rJ�flags�
backupDate�
sidForRestore�
backupType�online)#�
get_logger�setLevel�logging�DEBUG�get_loadparm�get_credentialsrr��tempfile�mkdtempr�pathsrr
rH�domain_dns_namer2r_r`rarXrr3�shutil�rmtreerIr<r6�FLG_DONT_CREATE_DBr^r�r�rfr}rp)�selfr�r�rTrb�
no_secretsr�r=rJrKrnrz�ctxr��
remote_sam�new_sidrt�
sysvol_tar�smb_connr<rd�backup_filerFrFrG�run�sP

�
�

�
zcmd_domain_backup_online.run)NNNNFN)�__name__�
__module__�__qualname__�__doc__�synopsis�options�SambaOptions�CredentialsOptions�takes_optiongroupsrr4r�
takes_optionsr�rFrFrFrGr��s.�������r�c
@s�eZdZdZdZedded�edded�edd	ed�ed
ddd
d�eddddd�edded�gZej	ej
d�Zdd�Zdd�Z
dd�Zdd�Zdd�Zdd �Z	!	!	!d$d"d#�Zd!S)%�cmd_domain_backup_restorea�Restore the domain's DB from a backup-file.

    This restores a previously backed up copy of the domain's DB on a new DC.

    Note that the restored DB will not contain the original DC that the backup
    was taken from (or any other DCs in the original domain). Only the new DC
    (specified by --newservername) will be present in the restored DB.

    Samba can then be started against the restored DB. Any existing DCs for the
    domain should be shutdown before the new DC is started. Other DCs can then
    be joined to the new DC to recover the network.

    Note that this command should be run as the root user - it will fail
    otherwise.zQ%prog --backup-file=<tar-file> --targetdir=<output-dir> --newservername=<DC-name>z
--backup-filezPath to backup filer�r�zPath to write toz--newservernamezName for new serverz	--host-ip�string�	IPADDRESSzset IPv4 ipaddress)r�r�r�z
--host-ip6�
IP6ADDRESSzset IPv6 ipaddressz--sitezSite to add the new server inr�cCs�t|�}|j}	|����}
|j��}|}|j��}
t|���}t	||	�}t
||	�}t|||�}t|||�}|durA|durAt
d��|�d|�|�d�t||||	|
|||
|||||dd�dS)zi
        Registers the new realm's DNS objects when a renamed domain backup
        is restored.
        Nz+Please specify a host-ip for the new serverzDNS realm was renamed to %sz*Populating DNS partitions for new realm...F)�add_root)r�domaindn�get_root_basedn�get_linearized�	dnsdomainrx�netbiosnamerr3r!r"rrrr2r )r�r=r<rJ�ntdsguid�host_ip�host_ip6�site�namesr��forestdnr��	dnsforest�hostnamer��
dnsadmins_sid�
domainguidrFrFrG�register_dns_zoneTs(






�z+cmd_domain_backup_restore.register_dns_zonecCsj|��t|ddddd�}t|dd�ddg}t|dd�|d	g7}d
}d|g}|j||d�|��d
S)z3Fixes attributes that reference the old/removed DCsTF��quiet�fix�yes�in_transaction�(fix_all_old_dn_string_component_mismatch�ALL�lastKnownParent�interSiteTopologyGenerator�!remove_plausible_deleted_DN_linkszmsDS-NC-Replica-Locations�search_options:1:2r,)r0r/N��transaction_startr�setattr�check_database�transaction_commit)r�r<�chkr/�cross_ncs_ctrlr0rFrFrG�fix_old_dc_referencesus
�
z/cmd_domain_backup_restore.fix_old_dc_referencescCsVt}d�|�}|j|��tj|d�}t|�dkr)|�d�|��t�	||��|�|S)z5Creates the default site, if it doesn't already existz(&(cn={0})(objectclass=site))�r-r�rzCreating default site '{0}')
r�formatr5�get_config_basednr6r�r8r2r&�create_site)r�r<r=�sitenamer�rBrFrFrG�create_default_site�s
�z-cmd_domain_backup_restore.create_default_sitecCspgd�}|jt�|d�tj|d�}t��}t�|d�|_|D]}||dvr0t�gtj|�||<q|�|�dS)z-Remove DB markers added by the backup process)r��backupRenamer�r�r~�r.r-r/rN)	r5r6r�r7rr9r��FLAG_MOD_DELETEr�)r�r<�markersrBr��attrrFrFrG�remove_backup_markers�s��z/cmd_domain_backup_restore.remove_backup_markerscCsZ|jt�|d�tjddgd�}d|dvrt|dd�}|Sd|dvr)d}|Sd}|S)Nr~rr�rr�renamer�)r5r6r�r7r4)r�r<rBryrFrFrG�get_backup_type�s���z)cmd_domain_backup_restore.get_backup_typecCsv|D]6}t||�}t��}d|_||j_t|�|j_t|�}t	�
�}t	�||�|_t	�
|t	jd�|d<|�|�qdS)z?Ensures the UTDV used by DRS is correct after an offline backup��replUpToDateVectorN)r'r�replUpToDateVectorBlob�version�ctr�cursorsr8�countr(r6rr�r9r��FLAG_MOD_REPLACEr�)r�r<�
partitions�nc�utdv�	utdv_blob�	new_valuer�rFrFrG�save_uptodate_vectors�s
��z/cmd_domain_backup_restore.save_uptodate_vectorsNc	.
Cs�|rtj�|�std��|durtd��tj�|�r+t�|�r+tj�d�dkr+td��|s1td��t��}	|	�	tj
�|	�t�t
j��|��}tj�|�}t�|�}
|
�|�|
��tj�|dd�}t�||d	�|��}|r|	�d
|�t�||�tj��}
|
�|�tj�|d�}tj�|d�}t|t�|
t j!d
�}|�"|�}|dur�|�#||	�}|	�d�$|��|j%dt j&dgd�}dd�|d�d�D�}|dkr�|�'||�|�(|
�}t)|	||
|||d�}||_*||_+tj,j-tj,j.B|_/|	�d�t0|||j1|j2||
dd�|j%t �3|d�t j&dgd�}|d�d�d}|	�dt4|��z|j5t6t4|��d�Wn�t7�y�}z�|j8\}}|t j9k�rI�g}z|j%t �3|d|�t j&dgd d!gd"�}Wnt7�y}z|j8\}}|t j:k�ru�WYd}~nd}~wwt;|�d#k�r��|�<d|ddd�}|�=d$�}|	�>d%|�|	�>d&�|	�>d'�|	�>d(|�td)|dj?||f��d}~wwt �@�}t �3|d*�|_?t4|jA�} t �Bd+| t jCd,�|d,<|�D|�|d-k�r�|�E|	||
|jA|||�tj�|d.�}!tF|!t�|
t j!d/�}"tG|"|j1|j2|jH|jI|jJ|jK|jLtMjNd0�	|�O�}#t�P|�Q��}$d1|#fd2|$fg}%|%D]\}&}'|'|v�rC|jR|&|dddd3d4��q/d5D]}&|jS|&|d3d4��qGd6}(|j%|�T�t jU|(d7�}|D]}t4|�d8�d�})|)|k�rxtV||	|)��qb|D]'}*t �@�}+t �3||*�|+_?t �Bgt jCd9�|+d9<t �Bgt jCd:�|+d:<|�D|+��q|tW|�tW|�tj�|d;�},|
�d<d=�}-tj�|-��s�t�X|-�tY|,|-||�t�Z|,�|	�d>�|�[|�|�\|�|	�d?|�|	�d@�dS)ANzBackup file not found.z!Please specify a target directory�SAMBA_SELFTEST�1zTarget directory is not emptyzServer name required�etczsmb.confz.origz&Using %s as restored domain's smb.conf�private�sam.ldbr�zAdding new DC to site '{0}'��namingContextsrcSsg|]}t|��qSrF)r4)�.0�rrFrFrG�
<listcomp>sz1cmd_domain_backup_restore.run.<locals>.<listcomp>r�offline)rKrJr��forced_local_samdb�netbios_namez#Updating basic smb.conf settings...z"active directory domain controller)rJ�
serverroler~r�zCreating account with SID: )�
specified_sidr+�
objectGUIDzshow_deleted:0zshow_recycled:0)r.r-r/r0rzutf-8z|The RID Pool on the source DC for the backup in %s may be corrupt or in conflict with SIDs already allocated in the domain. zaRunning 'samba-tool dbcheck' on the source DC (and obtaining a new backup) may correct the issue.z@Alternatively please obtain a new backup against a different DC.zVThe SID we wish to use (%s) is recorded in @SAMBA_DSDB as the sidForRestore attribute.z�Domain restore failed because there is already an existing object (%s) with SID %s and objectGUID %s.  This conflicts with the new DC account we want to add for the restored domain.   z@ROOTDSEz	<GUID=%s>�
dsServiceNamerzsecrets.ldb)r�rJr�)�domainrtr�r�r��machinepass�key_version_number�secure_channel_type�	domaindns�	forestdnsT)�force)r>�pdc�naming�infrastructure�schemaz*(&(objectClass=Server)(serverReference=*))r�cn�repsFrom�repsTor�r`rIz4Fixing up any remaining references to the old DCs...z'Backup file successfully restored to %szEPlease check the smb.conf settings are correct before starting samba.)]r_r`r�r�listdir�environrwr��	getLoggerr�r��
addHandler�
StreamHandler�sys�stdout�upper�abspathrjrk�
extractallrmrar��copyfile�get_loadparm_pathr2r�r�LoadParmrNrr
r6r�rrrr5r7r+r�r�nc_list�full_nc_list�dsdb�UF_SERVER_TRUST_ACCOUNT�UF_TRUSTED_FOR_DELEGATION�userAccountControlr�domain_namertr�r4�join_add_objectsrrr:�ERR_CONSTRAINT_VIOLATIONr;r8�schema_format_value�decode�errorr9r�	ntds_guidr�r%r�r�rrr��myname�domsid�	acct_passr?r�SEC_CHAN_BDCr��dn_from_dns_name�forest_dns_name�seize_dns_role�
seize_rolerr�rrr�r�removerr).r�r�r�r�rb�
newservernamer�r�r�r=ro�smbconf�cli_smbconfrJ�private_dir�
samdb_pathr<ryrB�ncsrKr�r@rCrDrE�dup_res�dup_e�dup_enum�_�
objectguidr�rd�secrets_path�secrets_ldbr��	forest_dn�	dns_roles�roler9r�rHr'�msgr��dest_sysvol_dirrFrFrGr��sV




�

�

��

��
�
�
����
�

�����+

�

�
���
��
���




zcmd_domain_backup_restore.run)NNNNNNNN)r�r�r�r�r�rr4r�r�r�r�r�r�rrrrr+r�rFrFrFrGr�2s6����!�r�c@s�eZdZdZdZejejd�Ze	dde
d�e	dde
d�e	d	d
ddd
�e	dd
ddd
�e	dddddgde�d�gZddgZ
dd�Zdd�Zdd�Zdd �Z	!		!d$d"d#�Zd!S)%�cmd_domain_backup_renamea�Copy a running DC's DB to backup file, renaming the domain in the process.

    Where <new-domain> is the new domain's NetBIOS name, and <new-dnsrealm> is
    the new domain's realm in DNS form.

    This is similar to 'samba-tool backup online' in that it clones the DB of a
    running DC. However, this option also renames all the domain entries in the
    DB. Renaming the domain makes it possible to restore and start a new Samba
    DC without it interfering with the existing Samba domain. In other words,
    you could use this option to clone your production samba domain and restore
    it to a separate pre-production environment that won't overlap or interfere
    with the existing production Samba domain.

    Note that:
    - it's recommended to run 'samba-tool dbcheck' before taking a backup-file
      and fix any errors it reports.
    - all the domain's secrets are included in the backup file.
    - although the DB contents can be untarred and examined manually, you need
      to run 'samba-tool domain backup restore' before you can start a Samba DC
      from the backup file.
    - GPO and sysvol information will still refer to the old realm and will
      need to be updated manually.
    - if you specify 'keep-dns-realm', then the DNS records will need updating
      in order to work (they will still refer to the old DC's IP instead of the
      new DC's address).
    - we recommend that you only use this option if you know what you're doing.
    zR%prog <new-domain> <new-dnsrealm> --server=<DC-to-backup> --targetdir=<output-dir>r�r�r�r�r�z"Directory to write the backup filez--keep-dns-realmr�Fz6Retain the DNS entries for the old realm in the backupr�r�r�r�r�r�r�r�r�r��new_domain_name�
new_dns_realmc
Cs�|��}|j|tjdgdd�}|��}|D]V}|dD]O}	t|	�}	|j}
||	vrjt�d|||	�}|�	d||
f�t�
�}|
|_t�|tjd�|d<|�
|�|rj|�	d|	|
f�t�|	tjd�|d<|�
|�qqdS)z?Updates dnsRoot for the partition objects to reflect the rename�dnsRootz$(&(objectClass=crossRef)(dnsRoot=*))�r.r-r/r�z%s$zAdding %s dnsRoot to %szRemoving %s dnsRoot from %sN)�get_partitions_dnr5r6�SCOPE_ONELEVELr�r4r9�re�subr2rr�r�r�r)
r�r=r<�	old_realm�delete_old_dns�
partitions_dnrB�	new_realm�res_msg�dns_rootr9�new_dns_rootr�rFrFrG�update_dns_root�sD
���
��
���z(cmd_domain_backup_rename.update_dns_rootc
Cs�|��}t�t|��}|��}|j|tjdgd|d�}|�d|�t��}|dj	|_	t�
|tjd�|d<|�|�d||f}	|�d|dj	|	f�|j
|dj	|	dgd	�d
S)z>Renames the domain parition object and updates its nETBIOSName�nETBIOSNamez	ncName=%sr�z+Changing backup domain's NetBIOS name to %srzCN=%s,%szRenaming %s --> %szrelax:0�r0N)�get_default_basednr6�
binary_encoder4r�r5r�r2rr9r�r%r�r)
r�r=r<�new_netbios_name�base_dn�nc_namer�rBr��new_dnrFrFrG�rename_domain_partitions(
���
z0cmd_domain_backup_rename.rename_domain_partitioncCsh|��}d||f}|�d|�|�|dg�|����}d||f}|�d|�|�|dg�dS)Nz*DC=%s,CN=MicrosoftDNS,DC=DomainDnsZones,%szDeleting old DNS zone %sz
tree_delete:1z1DC=_msdcs.%s,CN=MicrosoftDNS,DC=ForestDnsZones,%s)r�r2�deleter�r�)r�r=r<r��basednr9r�rFrFrG�delete_old_dns_zones+s�z-cmd_domain_backup_rename.delete_old_dns_zonescCsJ|��t|ddddd�}t|dd�d}d|g}|j|d�|��d	S)
z@Fixes attributes (i.e. objectCategory) that still use the old DNTFr�rrrr,r�Nr)r�r<r
rr0rFrFrG�fix_old_dn_attributes8s
�z.cmd_domain_backup_rename.fix_old_dn_attributesNc

CsB|��}
|
�tj�|��}|�|�}|durtd��t|
|�|}
|��}|�	�}t
�|�}|
�d|�|
�d|�|
�d|�t
j|d�}|}t||||
|||d|||	d�}|j}||krmt�|�td��|j}||kr}t�|�td	��|��|`|j}td
||t�|d�}t||
�}tj�|d�}t|||�}t|||���|� |j!�t|j"t�|t#j$d
�}t%�}t&|d|�t&|d|�t&|d|�t&|dd�|�'|
|||
�|�(|
||�|
r�|�)|
||�|
�d�|�*|�|�rt+|
|�t,|||�}t-||d||d||f�t.|
||�t�|�dS)Nr�z"New realm for backed up domain: %sz$New base DN for backed up domain: %szNew domain NetBIOS name: %sr�r�)r=rKrJrzr�rTrbr�z+Cannot use the current domain NetBIOS name.z(Cannot use the current domain DNS realm.r�r�r�r�r�r�rr�rz$Fixing DN attributes after rename...z,Original domain %s (NetBIOS), %s (DNS realm))/r�r�r��INFOr�r�rr�rxrRr�rir2r�r�r
r^r�r�rt�do_join�local_samdbr�rr
rHr_r`rarXrr3rNror<r6r�r^r�r�r�r�r�r�rfr}rp)r�r�r�r�r�rTrb�keep_dns_realmr�r�r=rJrKr��new_base_dnrnrzr��
old_domainr�r�r�r�r�r�r<rdr�rFrFrGr�Fs�


�	


�
�


��zcmd_domain_backup_rename.run)NNNNFFN)r�r�r�r�r�r�r�r�r�rr4rr��
takes_argsr�r�r�r�r�rFrFrFrGr��s@�������'
�r�c@sdeZdZdZdZdejiZedde	d�gZ
dZdd	�Zd
d�Z
dd
�Zdd�Zdd�Zddd�ZdS)�cmd_domain_backup_offlinea�Backup the local domain directories safely into a tar file.

    Takes a backup copy of the current domain from the local files on disk,
    with proper locking of the DB to ensure consistency. If the domain were to
    undergo a catastrophic failure, then the backup file can be used to recover
    the domain.

    An offline backup differs to an online backup in the following ways:
    - a backup can be created even if the DC isn't currently running.
    - includes non-replicated attributes that an online backup wouldn't store.
    - takes a copy of the raw database files, which has the risk that any
      hidden problems in the DB are preserved in the backup.z%prog [options]r�r�zOutput directory (required)r�z.bak-offlinec
Cs�||j}z	t||dd�Wn:tyH}z.zt�|�W|�tyC}zt|d�r=|jtjkr=WYd}~WYd}~dS|�d}~wwd}~wwt	j
�|�sXd}t|�
|���dS)NT)�readonly�errnoz1tdbbackup said backup succeeded but {0} not found)�
backup_extr#r%r�rk�	Exception�hasattrr��EINVALr_r`r�rr)r�r`�backup_path�copy_errrC�srFrFrG�offline_tdb_copy�s&
������z*cmd_domain_backup_offline.offline_tdb_copycCst|||j�dS�N)r$r�)r�r`rFrFrG�offline_mdb_copy�sz*cmd_domain_backup_offline.offline_mdb_copycCs`tj�|d�}t|d|tjd�}|�d|�|��|�|d�|�|d�|�	�dS)N�secrets�.ldb�rJr��Starting transaction on �.tdb)
r_r`rarr6r�r2r	r��transaction_cancel)r�rqrJr=ry�secrets_objrFrFrG�backup_secrets�s
�z(cmd_domain_backup_offline.backup_secretscCsPtj�|d�}d}|jdtj|gd�}||dvo$t|d|d�dk}d}	d}
|r8|�d�|j}
|�	�}	n|�d|�|j
}
|��|�d	|�|�
|�|d
}t�|�D]<}tj�||�}|�
d�ru|�d|�|
|�q[|�
d
�r�|�d|�|�
|�q[|�d|�t�|||j�q[t||�}
|r�~	|
S|��|
S)Nr0�backendStorez
@PARTITIONrrr�z1MDB backend detected.  Using mdb backup function.r�z   backing up z.dr�z"   backing up locked/related file r�z$   tdbbackup of locked/related file z   copying locked/related file )r_r`rar5r6r7r4r2r��search_iteratorr�r	rK�endswithr�rUr�rHr�)r�rqr<rJr=�sam_ldb_path�store_labelrB�mdb_backend�res_iterator�
copy_function�	sam_ldb_d�sam_filer@rFrFrG�backup_smb_dbs�sD
�$







�z(cmd_domain_backup_offline.backup_smb_dbscst|j|jtj�|j�d�}�fdd�|��D�}|d\}}t|�dkr.t|dd�d�\}}|�t|�d�7}|S)	N)r/�stater.cs"g|]
\}}��|�r||f�qSrF)�
startswith)r3rw�p�r`rFrGr51s�z:cmd_domain_backup_offline.get_arc_path.<locals>.<listcomp>rrcSst|d�S)Nr)r8)r�rFrFrG�<lambda>8sz8cmd_domain_backup_offline.get_arc_path.<locals>.<lambda>)�key)	rq�	state_dirr_r`�dirnamero�itemsr8�max)r�r`�
conf_paths�backup_dirs�
matching_dirs�arc_path�fs_pathrFr�rG�get_arc_path-s�z&cmd_domain_backup_offline.get_arc_pathNc	s6t��}|�tj�|�t�tj��|��}t	j
�||�d��}|j
r+tj�|j
�s8|�d�|j
��td��t||�|j|jtj�|j�g}|�d�d�|���g}|D]Y}t�|�D]Q\}	}
}|	�|j�rkq_|	�d�std|	vruq_|	�tj�|jd��r�q_|D],}tj�|	|��t �fd	d
�|D��r�q�|�|j!�r�t�"��q�|�d�r�q�|�#��q�q_qXt$|j
t%�|t&j'd�}
|�(|j||�|�)|j|
||�}|
�*�}t+�,|�}d}
t-|j
|j!t%�|dgt&j'd
�}
t.�}t/|
d|�t/|
d|�t/|
dd�d}
|D]H}tj�||j!��sI|�d��r7|�d|�t-||t&j'd�}|�0�|�d�|�1|�|�2��q|�d��rI|�d|�|�1|��qt3j4|dd�}tj�|d�}t5�6|d�}|�d�d}tj�||�}t7|j||j|�|�8||�t�"|�t9||ddd�tj�|d �}|�8|tj�:|��t�"|�|�d!�|D]V}|�;||�}tj�||j!��r�|�d"||j!d#�|j8||j!|d$�t�"||j!��q�|�d��s�|�d��r�|�d%|��q�|�d&|�|j8||d$��q�|�<�t�=|tj�|d'�|���t�>|�|�d(�dS))NrtzNo database found at {0}zCPlease check you are root, and are running this command on an AD DCzrunning backup on dirs: {0}� z.sockz.sock/�dnsc3s�|]
}tj��|�VqdSr�)r_r`�samefile)r3�file��	full_pathrFrG�	<genexpr>is�z0cmd_domain_backup_offline.run.<locals>.<genexpr>r�zmodules:)r�r�rJr�r�r�r�r�r6r�z!Starting transaction on solo db: r�z%   running tdbbackup on the same filer�z#running tdbbackup on lone tdb file �INCOMPLETEsambabackupfile)r��prefixzsamba-backup.tar.bz2rgz&running offline ntacl backup of sysvolr��	localhostTrqzbuilding backup tarz   adding backup z to tar and deleting filerhz   skipping z   adding misc file zsamba-backup-{0}.tar.bz2zBackup succeeded.)?r�rMr�r�rNrOrPrQr�r��	provision�provision_paths_from_lprwr<r_r`r�rcrrr�rqr�r�ror2ra�walkr�rIr��binddns_dir�anyr�rm�appendrr
r6r�r�r�r3rrrr^r�r	r�r�r�r�rjrkr	rlr}�basenamer�rmr�rmdir)r�r�rbr=rJr�r��	all_files�
backup_dir�working_dirrw�	filenamesrer<r@�dom_sid_strrrdr`�ldb_obj�temp_tar_dir�
temp_tar_name�tar�
sysvol_tar_fnr��	backup_fnr�rFr�rGr�=s�
�

��"�
�


��



���
zcmd_domain_backup_offline.run)NN)r�r�r�r�r�r�r�r�rr4r�r�r�r�r�r�r�r�rFrFrFrGr��s"
���;r�c@s&eZdZdZe�e�e�e�d�ZdS)�cmd_domain_backupz)Create or restore a backup of the domain.)r6r�r�restoreN)	r�r�r�r�r�r�r�r��subcommandsrFrFrFrGr��s
�r�r�)]rZr_rPrjr�r�r�r�r��samba.getopt�getoptr��samba.samdbrrr6r�samba.samba3rrRrrL�samba.ntaclsrrr	�
samba.authr
�
samba.joinrrr
�samba.dcerpc.securityr�samba.netcmdrr�samba.dcerpcrrrr�fsmor�samba.provisionrr�samba.upgradehelpersr�samba.remove_dcrr�samba.dbcheckerrr�rrr�samba.provision.sambadnsr r!r"�samba.tdb_utilr#�samba.mdb_utilr$r��
subprocessr%r&�
samba.dsdbr'�	samba.ndrr(�samba.credentialsr)rHrXr^rfrpr}r�r�r��netcmd�Commandr�r�r�r��SuperCommandr�rFrFrFrG�<module>sx0	
�
b{'
@ Telegram