File: //lib/python3/dist-packages/samba/netcmd/__pycache__/fsmo.cpython-310.pyc
o
�/a�Q � @ s� d dl Z d dlmZ d dlZd dlmZ d dlmZmZ d dl m
Z
d dl Z d dl m
Z
mZmZmZ d dlmZ dd� Zd d
� Zd d � ZG d
d� de
�ZG dd� de
�ZG dd� de
�ZG dd� de�ZdS )� N)�LdbError)�drsuapi�misc)�system_session)�Command� CommandError� SuperCommand�Option)�SamDBc
C s� z | j |tjdgd�}W n ty) } z|j\}}|tjkr$td| ��� d}~ww d|d v rAt�| |d d d �d��}|S d}|S )znGets the owner of an FSMO role
:param roledn: The DN of the FSMO role
:param role: The FSMO role
�
fSMORoleOwner��scope�attrsz+The '%s' role is not present in this domainNr �utf8) �search�ldb�
SCOPE_BASEr �args�ERR_NO_SUCH_OBJECTr �Dn�decode)�samdb�roledn�role�res�e7�num�msg� master_owner� r �3/usr/lib/python3/dist-packages/samba/netcmd/fsmo.py�get_fsmo_roleowner$ s
�
�� �r! c
C s� |dkr
|� � }d| }n|dkr t�|�� �}d| }|�� }|j|dgtjdgd�} d| d v r|z*tt �
t� || d d d � d ���
d
���}
tt� || d d d � d ���} W n( ty{ } z| j\}
}td | d d d |f ��d } ~ ww | �d
| � dS |dkr�d|
|�� f }d|�� |�� f }n|dkr�d|
|�� f }d|�� |�� f }|�� }||k�rl|�� }|j|dd�}td| t� ||d�}t�� }t� ||�|_t�| tj d�|d< t�|tj d�|d< z|� |� W n t�y } z
|j\}
}td||f ��d }~ww z
tj � |||�}W n tj j!�y0 } ztd|��d }~ww z |d }|d }t"j#}|dd � }tj �$|||
||� W n tj j!�yb } ztd| ��d } ~ ww | �d| � dS | �d | � dS ) zTransfer dns FSMO role. � domaindns�$CN=Infrastructure,DC=DomainDnsZones,� forestdns�$CN=Infrastructure,DC=ForestDnsZones,r zextended_dn:1:1)r r
�controlsr r �GUIDz+No GUID found in naming master DN %s : %s
Nz0* The '%s' role does not have an FSMO roleowner
Fz %s._msdcs.%sT��fallback_machinez ldap://%s��url� session_info� credentials�lp�fSMORoleOwner_Del�fSMORoleOwner_AddzFailed to add role '%s': %szDrsuapi Connect failed� � zReplication failed�&FSMO transfer of '%s' role successful
�'This DC already has the '%s' FSMO role
)%� domain_dn�samba�dn_from_dns_name�forest_dns_name�
host_dns_namer r r �strr r' r r �get_extended_componentr r r �write�domain_dns_name�
get_ntds_GUID�get_dsServiceName� get_loadparm�get_credentialsr
r �Message�dn�MessageElement�FLAG_MOD_DELETE� FLAG_MOD_ADD�modify� drs_utils�drsuapi_connect� drsExceptionr �DRSUAPI_DRS_WRIT_REP�sendDsReplicaSync) �outf� sambaopts�credoptsr r r5 � role_object� forest_dn�new_host_dns_namer � master_guidr �e3r r �master_dns_name� new_dns_name� new_ownerr. �creds�m�e5�
connection�e�drsuapi_connection�drsuapi_handle� req_options�NC�estrr r r �transfer_dns_role; s�
� ��&
�������
���
���
�� �
��rb c
C s� |� � }d| }d|�� }d| }t|�� �}t�||�� �}t�� } t�|d�| _|dkr@t |||�}
t�
dtj d�| d< nr|dkrot |||�}
|j |tj
d gd
�} t| �d ks\J �| d d d } t�
| tj d
�| d
< nC|dkr�t |||�}
t�
dtj d�| d< n.|dkr�t |||�}
t�
dtj d�| d< n|dkr�t |||�}
t�
dtj d�| d< ntd��|
du r�| �d| � dS |
|kr�z|�| � W n ty� }
z
|
j\}}td||f ��d}
~
ww | �d| � dS | �d| � dS ) z Transfer standard FSMO role. �CN=RID Manager$,CN=System,�CN=Partitions,%s�CN=Infrastructure,� �rid�1�becomeRidMaster�pdc� objectSidr r1 r � becomePdc�naming�becomeDomainMaster�infrastructure�becomeInfrastructureMaster�schema�becomeSchemaMaster�Invalid FSMO role.NzECannot transfer, no DC assigned to the %s role. Try 'seize' instead
Fz Transfer of '%s' role failed: %sr3 Tr4 )r5 �get_config_basednr: �get_schema_basednr r r? rB rC r! rD �FLAG_MOD_REPLACEr r �lenr r< rG r r )rM r r r5 �rid_dn� naming_dn�infrastructure_dn� schema_dnrW rY r r �sid�e6r r r r r �
transfer_role� sz
� �
�
�
�
�
���r~ c @ s| e Zd ZdZdZejejejd�Z e
ddde ddd �e
d
d d d
�e
ddg d�dd�gZ g Z
dd� Zdd� Z ddd�ZdS )�cmd_fsmo_seizezSeize the role.�%prog [options]�rN rO � versionopts�-H�--URL�%LDB URL for database or target server�URL�H��help�type�metavar�destz--forcez5Force seizing of role without attempting to transfer.�
store_true)r� �action�--role�choice�rg rj ro rq rm r" r$ �all�I The FSMO role to seize or transfer.
rid=RidAllocationMasterRole
schema=SchemaMasterRole
pdc=PdcEmulationMasterRole
naming=DomainNamingMasterRole
infrastructure=InfrastructureMasterRole
domaindns=DomainDnsZonesMasterRole
forestdns=ForestDnsZonesMasterRole
all=all of the above
You must provide an Admin user and password.�r� �choicesr� c
C s� |� � }|�� }d| | _d|�� | _t|�� �| _d| | _t �
� }|dkr1t � || j�|_ n7|dkr=t � ||�|_ n+|dkrJt � || j�|_ n |dkrWt � || j�|_ n|dkrdt � || j�|_ nt
d ��d
}t||j |�}|d ur�||kr�|d u r�| �d � z t| j||� W n d
}| �d� Y n| �d� d
S n | j�d| � d
S d
}|d us�|�rC| �d| � t �|t jd�|d< |�� z|�|� |dkr�|�� W n] t�y4 } zP| j\}
} |dk�r |
t jk�r |�� |�� z|�|� W n* t�y } z| j\}
} |�� t
d|| f ��d } ~ ww |�� t
d|| f ��W Y d } ~ nd } ~ ww |� � | j�d| � d
S d S )zSeize standard fsmo role. re rd rc rg rj rm ro rq rs FN�Attempting transfer...T�!Transfer unsuccessful, seizing...z%Transfer successful, not seizing roler4 �Seizing %s FSMO role...r � Failed to seize '%s' role: %s�#FSMO seize of '%s' role successful
) r? r5 rz rt ry r: ru r{ rx r rB r rC r r! �messager~ rM r< rD rv �transaction_startrG �create_own_rid_setr r �ERR_ENTRY_ALREADY_EXISTS�transaction_cancel�transaction_commit)
�selfr r �force� serviceNamer5 rY �seizer �e1r r r\ r r r �
seize_role� s�
� ��
�
���� ����zcmd_fsmo_seize.seize_rolec
C s� |� � }|�� }t�|�� �} d| | _d| | _t�� }
|dkr*t� || j�|
_
n|dkr7t� || j�|
_
nt d��d} t ||
j
|�} | dur| |kru|du rt| �
d� z t| j||||� W n d } | �
d
� Y n| �
d � d S n | j�d | � dS d } |dus�| r�| �
d
| � t�|tjd�|
d< z|�|
� W n ty� }
z
|
j\}}t d||f ��d}
~
ww | j�d| � d S dS )zSeize DNS FSMO role. r# r% r" r$ rs FNr� Tr� z&Transfer successful, not seizing role
r4 r� r r� r� )r? r5 r6 r7 r8 � domaindns_dn� forestdns_dnr rB r rC r r! r� rb rM r< rD rv rG r r )r� r r rO rN r� r� r� r5 rQ rY r� r �e2r r r r r �seize_dns_roleN sd
�
�
� �
����z cmd_fsmo_seize.seize_dns_roleNc
C s� |� � }|j|dd�}t|t� ||d�} |dkrQ| �d| |� | �d| |� | �d| |� | �d| |� | �d | |� | �d
| ||||� | �d | ||||� d S |d
ksY|d kre| �|| ||||� d S | �|| |� d S � NTr( r* r� rg rj rm ro rq r" r$ )r@ rA r
r r� r� �
r� r� r� r rO rN r� r. rX r r r r �run� s, � � � �zcmd_fsmo_seize.run�NNNNNN)�__name__�
__module__� __qualname__�__doc__�synopsis�options� SambaOptions�CredentialsOptions�VersionOptions�takes_optiongroupsr r: �
takes_options�
takes_argsr� r� r� r r r r r � s0 ��� ��Y9�r c @ sJ e Zd ZdZdZejejejd�Z e
ddde ddd �gZ g Z
d
d d �Zd
S )�
cmd_fsmo_showzShow the roles.r� r� r� r� r� r� r� r� Nc C s< |� � }|j|dd�}t|t� ||d�}|�� }t�|�� �} d| }
d|�� } |� � } d| }
d| }d| }| d d
f|
d d f|
d
df|ddf| ddf|ddf|ddfg}|D ]B}|\}}}z t
|||�}|d urw| � d|t |�f � n| � d| � W qY t
y� } z| � d||j f � W Y d }~qYd }~ww d S )NTr( r* re rd rc r# r% rq �SchemaMasterRolero �InfrastructureMasterRolerg �RidAllocationMasterRolerj �PdcEmulationMasterRolerm �DomainNamingMasterRoler" �DomainDnsZonesMasterRoler$ �ForestDnsZonesMasterRolez %s owner: %sz%s has no current ownerz%s: * %s)r@ rA r
r r5 r6 r7 r8 rt ru r! r� r: r )r� r� rO rN r� r. rX r r5 rQ rz ry r{ rx r� r� �masters�masterrC �
short_name� long_namer\ r r r r� � sD � �
� ���zcmd_fsmo_show.run)NNNN�r� r� r� r� r� r� r� r� r� r� r r: r� r� r� r r r r r� � s ���r� c @ s` e Zd ZdZdZejejejd�Z e
ddde ddd �e
d
d g d �d
d�gZ g Z
ddd�ZdS )�cmd_fsmo_transferzTransfer the role.r� r� r� r� r� r� r� r� r� r� r� r� r� Nc
C s� |� � }|j|dd�}t|t� ||d�} |dkrOt| jd| � t| jd| � t| jd| � t| jd| � t| jd | � t| j||d
| � t| j||d | � d S |d
ksW|d krbt| j|||| � d S t| j|| � d S r� )r@ rA r
r r~ rM rb r� r r r r� � s( �
� �zcmd_fsmo_transfer.runr� r� r r r r r� � s$ �� ���r� c @ s2 e Zd ZdZi Ze� ed< e� ed< e� ed< dS )�cmd_fsmoz:Flexible Single Master Operations (FSMO) roles management.r� �show�transferN)r� r� r� r� � subcommandsr r� r� r r r r r� s
r� )r6 � samba.getopt�getoptr� r r � samba.dcerpcr r �
samba.authr �samba.drs_utils� samba.netcmdr r r r � samba.samdbr
r! rb r~ r r� r� r� r r r r �<module> s" Z? O78