File: //lib/python3/dist-packages/samba/netcmd/__pycache__/dsacl.cpython-310.pyc
o
�/a�% � @ s� d dl mZ d dlmZ d dlmZ d dlmZm Z d dl
m Z m Z m
Z
mZmZmZmZmZmZmZmZmZmZ d dlZd dlmZ d dlZd dlm Z d dl m Z m Z m Z m!Z! G d d
� d
e �Z"G d d � d e �Z#G d
d� de �Z$dS )� N)�security)�SamDB)�
ndr_unpack�ndr_pack)
�GUID_DRS_ALLOCATE_RIDS� GUID_DRS_CHANGE_DOMAIN_MASTER�GUID_DRS_CHANGE_INFR_MASTER�GUID_DRS_CHANGE_PDC�GUID_DRS_CHANGE_RID_MASTER� GUID_DRS_CHANGE_SCHEMA_MASTER�GUID_DRS_GET_CHANGES�GUID_DRS_GET_ALL_CHANGES� GUID_DRS_GET_FILTERED_ATTRIBUTES�GUID_DRS_MANAGE_TOPOLOGY�GUID_DRS_MONITOR_TOPOLOGY�GUID_DRS_REPL_SYNCRONIZE� GUID_DRS_RO_REPL_SECRET_SYNC)�
SCOPE_BASE)�system_session)�Command� CommandError� SuperCommand�Optionc
@ s� e Zd ZdZdZdZejejej d�Z
e ddde dd d
�e d d g d
�ed�e dd ddgdd�e dddd�e dddd�e dddd�gZ
dd � Zd+d d �Zd d!� Zd"d#� Zd$d%� Zd,d'd(�Z d-d)d*�Zd S ).�
cmd_dsacl_setz)Modify access list on a directory object.�%prog [options]z+ The access control right to allow or deny �� sambaopts�credopts� versionopts�-H�--URL�%LDB URL for database or target server�URL�H��help�type�metavar�destz--car�choice�
z
change-ridz
change-pdczchange-infrastructurez
change-schemaz
change-naming�
allocate_ridsz get-changeszget-changes-allzget-changes-filteredztopology-manageztopology-monitorz repl-synczro-repl-secret-sync)r& �choicesr% z--action�allow�denyzDeny or allow access�
--objectdn�#DN of the object whose SD to modify�string�r% r& z --trusteednz!DN of the entity that gets accessz--sddlz1An ACE or group of ACEs to be added on the objectc C s8 |j |dtd�}t|�dksJ �ttj|d d d �S )N�(objectClass=*)��base�
expression�scope� r � objectSid)�searchr �lenr r �dom_sid)�self�samdb� trusteedn�res� rA �4/usr/lib/python3/dist-packages/samba/netcmd/dsacl.py�find_trustee_sidU s
�z cmd_dsacl_set.find_trustee_sidNc C sL t |tj�sJ �t�� }t�||�|_t�t|�tj d�|d< |�
|� d S )N�nTSecurityDescriptor) �
isinstancer �
descriptor�ldb�Message�Dn�dn�MessageElementr �FLAG_MOD_REPLACE�modify)r= r> � object_dn�desc�controls�mrA rA rB �modify_descriptor[ s
�z cmd_dsacl_set.modify_descriptorc C �> |j |tdgd�}t|�dksJ �|d d d }ttj|�S �NrD )r5 r7 �attrsr8 r �r: r r; r r rF �r= r> rN r@ rO rA rA rB �read_descriptord � � z cmd_dsacl_set.read_descriptorc C �, |j |�� dtd�}ttj|d d d �S �Nr3 r4 r r9 �r: � domain_dnr r r r< �r= r> r@ rA rA rB �get_domain_sidl �
�z cmd_dsacl_set.get_domain_sidc C s� | � ||�}tj�d| | �|��}t�d|�� �}|D ]U}|�| �|��}t�d|�}|D ] }d|v r:|�|d�}q.||v r@q |� d�dkr\|d|�
d�� | ||�
d�d� }n|| }tj�|| �|��}| � |||� q dS )zAdd new ace explicitly.zD:z\(.*?\)�ID� �(r N) rX r rF � from_sddlr_ �re�findall�as_sddl�replace�find�indexrR ) r= r> rN �new_acerO � new_ace_list� desc_sddl� desc_aces�acerA rA rB �add_aceq s$ �*�zcmd_dsacl_set.add_aceFc C sV | � ||�}|�| �|��}|r| j�d| � n| j�d| � | j�|d � d S )Nznew descriptor for %s:
zold descriptor for %s:
�
�rX rg r_ �outf�write)r= r> rN �newrO rm rA rA rB � print_acl� s zcmd_dsacl_set.print_aclc
C s |� � }
|�|
�} |d u r!|d u s |d u s |d u s |d u r!| �� S t|t� | |
d�} ttttt t
t t t
ttttd�
}
| �| |�}|rE|}n$|dkrTd|
| t|�f }n|dkrcd|
| t|�f }ntd| ��| �| |� | �| ||� | j| |dd � d S )
N��url� session_info� credentials�lpr* r- z(OA;;CR;%s;;%s)r. z(OD;;CR;%s;;%s)zWrong argument '%s'!T)ru )� get_loadparm�get_credentials�usager r r
r r r r r r r
r r r r r rC �strr rv rp )r= �car�action�objectdnr? �sddlr# r r r r{ �credsr> �cars�sidrk rA rA rB �run� sB
�� zcmd_dsacl_set.run)N)F�NNNN)�__name__�
__module__� __qualname__�__doc__�synopsis�car_help�options� SambaOptions�CredentialsOptions�VersionOptions�takes_optiongroupsr r �
takes_optionsrC rR rX r_ rp rv r� rA rA rA rB r . sF ��
� �����
�r c @ sl e Zd ZdZdZejejejd�Z e
ddde ddd �e
d
d d d
�gZ dd� Z
dd� Zdd� Z ddd�ZdS )�
cmd_dsacl_getz(Print access list on a directory object.r r r r r! r" r# r$ r/ r0 r1 r2 c C rS rT rV rW rA rA rB rX � rY z cmd_dsacl_get.read_descriptorc C rZ r[ r\ r^ rA rA rB r_ � r` z cmd_dsacl_get.get_domain_sidc C s@ | � ||�}|�| �|��}| j�d| � | j�|d � d S )Nzdescriptor for %s:
rq rr )r= r> rN rO rm rA rA rB rv � s zcmd_dsacl_get.print_aclNc C s4 |� � }|�|�}t|t� ||d�}| �||� d S )Nrw )r| r} r r rv ) r= r� r# r r r r{ r� r> rA rA rB r� � s
�zcmd_dsacl_get.runr� )r� r� r� r� r� r� r� r� r� r� r r r� rX r_ rv r� rA rA rA rB r� � s& �����r� c @ s( e Zd ZdZi Ze� ed< e� ed< dS )� cmd_dsaclzDS ACLs manipulation.�set�getN)r� r� r� r� � subcommandsr r� rA rA rA rB r� � s
r� )%� samba.getopt�getoptr� � samba.dcerpcr � samba.samdbr � samba.ndrr r �samba.dcerpc.securityr r r r r
r r r
r r r r r rG r re �
samba.authr � samba.netcmdr r r r r r� r� rA rA rA rB �<module> s <
/