File: //lib/python3/dist-packages/samba/tests/__pycache__/domain_backup.cpython-310.pyc
o
�/ak � @ s� d dl mZmZ d dlZd dlZd dlZd dlmZmZm Z m
Z
m Z d dl Z d dl
mZ d dlmZ d dl mZmZ d dlmZ d dlZd dl mZ d d lmZ d
d � ZG d d
� d
e
�ZG dd� de�ZG dd� de�Z G dd� de�Z dS )� )� provision�paramN)� env_loadparm�create_test_ou�BlackboxProcessError�BlackboxTestCase�
connect_samdb)�SamDB)�system_session)�Ldb�dn_from_dns_name)�get_fsmo_roleowner)�sites)�_dsdb_load_udv_v2c C s( t | t� |d�}|jdg d�tjdd�S )N)� session_info�lpzCN=Primary Domains)� objectClass�samAccountName�secretzmsDS-KeyVersionNumberz (objectClass=kerberosSecret))�base�attrs�scope�
expression)r r
�search�ldb�
SCOPE_SUBTREE)� secrets_pathr � secrets_ldb� r �;/usr/lib/python3/dist-packages/samba/tests/domain_backup.py� get_prim_dom! s �r c s� e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd2d d
�Zdd� Z dd� Z
d3dd�Z dd� Z dd� Z
dd� Zdd � Zd d � Zd d � Zd4d"d#�Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� Zd2d.d/�Zd2d0d1�Z� ZS )5�DomainBackupBasec s� t t| ��� tjd }dtjd tjd f | _td| �| _d| _|� � | _
d | _ ddg| _ tjd | _
tjd
| _d | _d S ) N� DC_SERVERz-U%s%%%s� DC_USERNAME� DC_PASSWORDz ldap://%s�
BACKUPSERV�
sidForRestore�
backupDate�DOMAIN�REALM)�superr! �setUp�os�environ� user_authr r �
new_server�upper�server�base_cmd�backup_markers�restore_domain�
restore_realm�backend)�selfr1 �� __class__r r r+ 2 s
�
zDomainBackupBase.setUpc C s || _ | jd| g7 _dS )z8Explicitly set the DB backend that the backup should usez--backend-store=N)r6 r2 )r7 r6 r r r � use_backendC s z DomainBackupBase.use_backendc C s. t |�� �}d| }||d| d| d| gS )NzCN=Configuration,%sz CN=Schema,%szDC=DomainDnsZones,%szDC=ForestDnsZones,%s)�str�get_default_basedn)r7 �samdb�basedn� config_dnr r r �get_expected_partitionsH s
�z(DomainBackupBase.get_expected_partitionsc C s` |j dtjdgd�}dd� |d �d�D �}| �|�}|D ]}| �||v d|t|�f � q dS ) z?Asserts all expected partitions are present in the backup samdb� �namingContexts�r r r c S � g | ]}t |��qS r �r; )�.0�rr r r �
<listcomp>S � z>DomainBackupBase.assert_partitions_present.<locals>.<listcomp>r z %s not in %sN)r r �
SCOPE_BASE�getr@ �
assertTruer; )r7 r= �res�
actual_ncs� expected_ncs�ncr r r �assert_partitions_presentO s
�
��z*DomainBackupBase.assert_partitions_presentc C sX | j �� }| �|�}|D ] }d}t||�D ]
}|t|j�kr"d} nq| �|d� q dS )z>Asserts an replUpToDateVector entry exists for the original DCFTz"Couldn't find UDTV for original DCN)r �get_invocation_idr@ r r; �source_dsa_invocation_idrL )r7 r= �
orig_invoc_idrO rP �found�cursorr r r �assert_repl_uptodate_vector[ s
��z,DomainBackupBase.assert_repl_uptodate_vectorNc C sh d}|j |�� tj|d�}d}|D ] }|t|j�v r d}q| �|d| � |r2| �t|�|k� dS dS )z=Checks that the expected server is present in the restored DBz*(&(objectClass=Server)(serverReference=*))�r r FTzCould not find %s serverN)r �get_config_basednr r r; �dnrL �len)r7 r= �expected_server�expected_count� search_exprrM � server_found�msgr r r �assert_dcs_presenti s
����z#DomainBackupBase.assert_dcs_presentc C s8 t j�| jd�}t j�|�st �|� | �tj|� |S )N�tree) r, �path�join�tempdir�exists�mkdir�
addCleanup�shutil�rmtree)r7 � extract_dirr r r � restore_dirz s
z DomainBackupBase.restore_dirc C sB | � � }t�|��}|�|� W d � dS 1 sw Y dS )z@Untar the backup file's raw contents (i.e. not a proper restore)N)rl �tarfile�open�
extractall)r7 � backup_filerk �tfr r r � untar_backup� s "�z DomainBackupBase.untar_backupr c
C s� | � � }| �|� tj�| �� d�}tj�|d�}t� }t|t� |d�}|j t
� |d�t
j | j
d�}| �t|�d� | j
D ]}| �|d �|�d| � q=tj�|d �} t| |�}| �t|�|� | �|� d
S ) z@Creates a backup, untars the raw files, and sanity-checks the DB�privatezsam.ldb)�urlr r � @SAMBA_DSDBrC � r z%s backup marker missingz secrets.ldbN)�
create_backuprr r, rc rd rl r r r
r r �DnrJ r3 � assertEqualr[ �assertIsNotNonerK r rQ )
r7 �primary_domain_secretsrp � private_dir�
samdb_pathr r= rM �markerr r r r �_test_backup_untar� s&
�
�
z#DomainBackupBase._test_backup_untarc C s( | � � }| �|� | �� }| �|� dS )z?Does a backup/restore, with specific checks of the resulting DBN�rw �restore_backup�check_restored_smbconf�check_restored_database�r7 rp r r r r �_test_backup_restore� s
z%DomainBackupBase._test_backup_restorec C s2 | j dgd�}| �|� | �� }| j|dd� dS )zADoes a backup/restore with secrets excluded from the resulting DBz --no-secrets)�
extra_argsF��expect_secretsNr� r� r r r � _test_backup_restore_no_secrets� s
z0DomainBackupBase._test_backup_restore_no_secretsc C s� d}t �| j| j�� |� | �t j| j| j�� |� | �� }| �|d| g� | �� }| � |�}d�
||�� �}d�
| j �}|j |tj
|d�}| �t|�dkd� dS ) z2Does a backup and restores into a non-default sitezTest-Site-For-Backupsz--site=zCN={0},CN=Sites,{1}z (&(objectClass=server)(cn={0}))rX rv z Failed to find new DC under siteN)r � create_siter rY rh � delete_siterw r� r� r� �formatr/ r r rL r[ )r7 �sitenamerp r � restored_ldb�site_dn� match_serverrM r r r � _test_backup_restore_into_site� s&
�
�
��z/DomainBackupBase._test_backup_restore_into_sitec C sb t jd }tj|d�}|�� D ]
\}}|�||� qt j�| jd�}|� d|� | �
t j |� |S )z9Creates a very basic smb.conf to pass to the restore tool�
SMB_CONF_PATH��filename_for_non_global_lp�smb.confF) r, r- r �LoadParm�items�setrc rd re �dumprh �remove)r7 �settings� testenv_conf�local_lp�key�val� new_smbconfr r r �create_smbconf� s
z DomainBackupBase.create_smbconfc
C s� | � � }ddddd�}ddd�}|�|� | �|�}| �|d | g� | �� }| �|� |�� D ]\}}| �t|� |��|d
||� |�f � q0d S ) z9Checks smb.conf values passed to the restore are retainedz/var/run�FOOBAR� NOTMYDOMAINz NOT.MY.REALM)�state directory� netbios name� workgroup�realm�275�7)zdrs: max link synczprefork childrenz
--configfile=z'%s' was '%s' in smb.confN)
rw �updater� r� r� r� r� ry r; rK )r7 rp r� �assert_settings�smbconfr r� r� r r r � _test_backup_restore_with_conf� s& ��
��z/DomainBackupBase._test_backup_restore_with_confc C s� t j�| �� dd�}tj|d�}| �|�d�| j� | �|�d�| j � | �|�d�| j
� � � t j�| �� d�}| �|�d�|� t j�| �� d �}| �|�d
�|� |S ) z=Sanity-check important smb.conf values are restored correctly�etcr� r� r� r� r� rs z private dir�stater� ) r, rc rd rl r r� ry rK r/ r4 r5 r0 )r7 r� �bkp_lpr| � state_dirr r r r� � s z'DomainBackupBase.check_restored_smbconfTc
C s t �||�d��}t|j|�}| �t|�d� |d �d�}| �|� | �t|d �| j d � | �|d �d�� t
|j t � || �
� d�}|jt�|d�tj| jd �}| �t|�d� | jD ]}| �|d �|�d
| � q_|j|�� tjd d gd �}| �t|�d� | �|d �d �� | �|d �d �� |j|�� tjd d gd �}| �t|�d� | �|d �d �� | �|d �d �� | jr�|jd
tjdgd �}t|d �d��} | �| | j� | �|� | j|| j dd� | �|| j | j� | j||d� | � |� |S )Nr� rv r r �$r )rt r r � credentialsru rC z %s backup-marker left behind�repsFrom�repsToz
@PARTITION� backendStore)r] r� ) r �provision_paths_from_lprK r �secretsry r[ rz r; r/ r r= r
�get_credentialsr r rx rJ r3 � assertIsNoner< rY r6 rQ ra �assert_fsmo_rolesr1 �assert_secretsrW )
r7 r� r� �paths�bkp_pd�acnr= rM r~ r6 r r r r� sZ
��
�
�
�
�
z(DomainBackupBase.check_restored_databasec C sH t |�� �}d||f }|r| �|�d|�� dS | �t|jd|� dS )z8Asserts that a user has/doesn't have secrets as expectedzCN=%s,CN=users,%s�
unicodePwdN)r; r< rz � searchone� assertRaises�KeyError)r7 r= �usernamer� r> �user_dnr r r �assert_user_secretsF s
z$DomainBackupBase.assert_user_secretsc C s$ g d�}|D ] }| � |||� qdS )z?Check the user secrets in the restored DB match what's expected)�alice�bob�janeN)r� )r7 r= r� �
test_users�userr r r r� R s �z DomainBackupBase.assert_secretsc
C s� |� � }t|�� �}d| d|�� t|�� �d| |d| d| d�}|�� D ]0\}}t|t� ||�|�} | �
d� |�| � � v d||f � | �
d� |�| � � vd ||f � q(d
S ) z2Asserts the expected server is the FSMO role ownerzCN=Infrastructure,zCN=Partitions,%szCN=RID Manager$,CN=System,z$CN=Infrastructure,DC=DomainDnsZones,z$CN=Infrastructure,DC=ForestDnsZones,)�infrastructure�naming�schema�rid�pdc� domaindns� forestdnszCN={0},z Expected %s to own FSMO role %sz %s found as FSMO %s role ownerN)
� domain_dnr �forest_dns_namerY r; �get_schema_basednr� r
r rx rL r� � extended_str)
r7 r= r1 �exclude_serverr� � forest_dn�fsmos�rolerZ �ownerr r r r� Z s*
�
� �
��z"DomainBackupBase.assert_fsmo_rolesc C s0 t �| j�D ]}t j�| j|�}t�|� qd S �N)r, �listdirre rc rd ri rj )r7 �filename�filepathr r r �cleanup_tempdiro s �z DomainBackupBase.cleanup_tempdirc
C sp d� |�}td| � z | �d| �}W n ty1 } z| �� | �d| � W Y d}~nd}~ww t|� dS )z,Executes a samba-tool backup/restore command� zExecuting: samba-tool %sz samba-tool z Error calling samba-tool: %sN)rd �print� check_outputr r� �fail)r7 �args�cmd�out�er r r �run_cmdt s
�� zDomainBackupBase.run_cmdc C s� | j d| j g }|r||7 }| �|� g }t�| j�D ]}|�d�r-|�d�r-|�|� q | �t |�dkdt |� � tj
� | j|d �}| � tj
|� |S )z?Runs the backup cmd to produce a backup file for the testenv DC� --targetdir=z
samba-backup-z.tar.bz2rv z"Domain backup created %u tar filesr )r2 re r� r, r� �
startswith�endswith�appendrL r[ rc rd rh r� )r7 r� r� � tar_files�fnrp r r r rw � s
�
�z DomainBackupBase.create_backupc C sp | � � }dddd| d| d| j g}|r||7 }| �|� | �| j� | �| j| j� | �| j| j| j� dS )z6Restores the samba directory files from a given backup�domain�backup�restorez--backup-file=r� z--newservername=N)rl r/ r� rQ r ra r1 r� )r7 rp r� rk r� r r r r� � s �
z DomainBackupBase.restore_backupr� )r �T)�__name__�
__module__� __qualname__r+ r: r@ rQ rW ra rl rr r r� r� r� r� r� r� r� r� r� r� r� r� rw r� �
__classcell__r r r8 r r! 0 s0
7
r! c sD e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Z� Z S )
�DomainBackupOnlinec s* t t| ��� dddd| j | jg| _d S )Nr� r� �online� --server=)r* r� r+ r1 r. r2 �r7 r8 r r r+ � s
�zDomainBackupOnline.setUpc C � | � � d S r� �r r� r r r �test_backup_untar� � z$DomainBackupOnline.test_backup_untarc C � | � d� | �� d S �N�tdb�r: r� r� r r r �test_backup_restore� �
z&DomainBackupOnline.test_backup_restorec C r �N�mdb�r: r� r� r r r � test_backup_restore_with_conf� r z0DomainBackupOnline.test_backup_restore_with_confc C r r �r: r� r� r r r � test_backup_restore_no_secrets� r z1DomainBackupOnline.test_backup_restore_no_secretsc C r r �r: r� r� r r r � test_backup_restore_into_site� r z0DomainBackupOnline.test_backup_restore_into_site)
r� r� r� r+ r� r r r r
r� r r r8 r r� � s r� c sj e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Zd d � Zd
d� Z dd� Z
dd� Z d� fdd� Z � Z
S )�DomainBackupRenamec sZ t t| ��� d| _d| _d| _d| _ddd| j| jd| j | jg| _ | j
d g7 _
d S )
N�
RENAMESERV� NEWDOMAINzrename.test.netzDC=rename,DC=test,DC=netr� r� �renamer� � backupRename) r* r r+ r/ r4 r5 �
new_basednr1 r. r2 r3 r� r8 r r r+ � s
�zDomainBackupRename.setUpc C r� r� r� r� r r r r� � r� z$DomainBackupRename.test_backup_untarc C r r r r� r r r r � r z&DomainBackupRename.test_backup_restorec C r r r r� r r r r � r z0DomainBackupRename.test_backup_restore_with_confc C r r r
r� r r r r � r z1DomainBackupRename.test_backup_restore_no_secretsc C r r r r� r r r r
� r z0DomainBackupRename.test_backup_restore_into_sitec C sX d}dj || jtjd d�}| �t| j|� dj |tjd | jd�}| �t| j|� dS )z:Checks that rename commands with invalid args are rejectedz samba-tool domain backup rename z{cmd} {domain} {realm}r) )r� r� r� r( N)r� r4 r, r- r� r r� r5 )r7 �
rename_cmd�bad_cmdr r r �test_backup_invalid_args� s ��z+DomainBackupRename.test_backup_invalid_argsc C s< t �� }t �| j |�|_t �|t j|�||< | j �|� d S r� )r �Messagerx rZ �MessageElement� FLAG_MOD_ADD�modify)r7 �attr�source�target�mr r r �add_link� s zDomainBackupRename.add_linkc C s� t | jd�}| �| jj|dg� d| }| j�|dd�� d| }| j�|dd�� d}| �|||� d t| j�� � }| j�|d
d�� | �| jj|� | �|||� | �� }| � |� | �
� }| � |�}t| j� � �} t
�| d | j|�}
t
�| d | j|�} t
�| d | j|�} |j| tj|gd �}
| �t|
�d
d� | �||
d v d� dd� |
d | D �}| �|
|v � | �| |v � dS )z:Sanity-check that a rename handles one-way links correctly� rename_testz
tree_delete:1zCN=link_src,%s� msExchConfigurationContainer)rZ � objectclasszOU=link_tgt,%s�organizationalunit�addressBookRoots2z?CN=testrename,CN=Servers,CN=Default-First-Site-Name,CN=Sites,%sr1 r� rC rv z)Failed to find renamed link source objectr zMissing link attributec S rD r rE )rF �xr r r rH , rI z9DomainBackupRename.test_one_way_links.<locals>.<listcomp>N)r r rh �delete�addr r; rY rw r� r� r� r< �re�subr r rJ ry r[ rL )r7 �test_ou�src_dn� target_dn� link_attr� server_dnrp r r� �
old_basedn�
new_target_dn�
new_src_dn�
new_server_dnrM � link_valuesr r r �test_one_way_links sD � �
� �z%DomainBackupRename.test_one_way_linksTc
s� t t| �}|�||�}t|�� �}| �|| j� |�� }t� t|��}|j
|tj ddgd| d�}| �t |�dd� | �t|d �
d��| j� | �t|d �
d��| j� | j} d| j| jf }
|j
|
tjd gd
�}| �t |�dd � d | j�� | f } | �t|d �
d ��| � d
| |f }
|j
|
tjd�}| �t |�dd� |�� �� } d| | f }
|j
|
tjd�}| �t |�dd� |S )N� nETBIOSName�cnz ncName=%s)r r r r rv z*Looking up partition's NetBIOS name failedr z CN=%s,OU=Domain Controllers,%s� dNSHostNamerC z&Looking up new DC's dnsHostname failedz%s.%sz*DC=%s,CN=MicrosoftDNS,DC=DomainDnsZones,%s)r r z&Lookup of new domain's DNS zone failedz1DC=_msdcs.%s,CN=MicrosoftDNS,DC=ForestDnsZones,%s)r* r r� r; r< ry r �get_partitions_dnr �
binary_encoder �SCOPE_ONELEVELr[ rK r4 r5 r/ rJ �lower�get_root_basedn�get_linearized)
r7 r r� � common_testr= r> �
partitions_dn�nc_namerM r� rZ � expected_val�forestdnr8 r r r� 1 sJ
� � �
� � �z*DomainBackupRename.check_restored_databaser� )r� r� r� r+ r� r r r r
r r r4 r� r� r r r8 r r � s 0r c s< e Zd Z� fdd�Zdd� Zdd� Zdd� Zd d
� Z� ZS ) �DomainBackupOfflinec s t t| ��� g d�| _d S )N)r� r� �offline)r* rC r+ r2 r� r8 r r r+ _ s zDomainBackupOffline.setUpc C s | j dd� d S )Nrv )r{ r� r� r r r r� c s z%DomainBackupOffline.test_backup_untarc C r� r� )r� r� r r r r f r� z1DomainBackupOffline.test_backup_restore_with_confc C r� r� )r� r� r r r r i r� z'DomainBackupOffline.test_backup_restorec C r� r� )r� r� r r r r
l r� z1DomainBackupOffline.test_backup_restore_into_site) r� r� r� r+ r� r r r
r� r r r8 r rC ] s rC ) �sambar r rm r, ri � samba.testsr r r r r r � samba.samdbr �
samba.authr
r r �samba.netcmd.fsmor
r( r �
samba.dsdbr r r! r� r rC r r r r �<module> s*