File: //proc/1233/root/usr/lib/python3/dist-packages/samba/__pycache__/dbchecker.cpython-310.pyc
o
�/a� � @ s� d dl Z d dlZd dlZd dlmZ d dlmZ d dlmZ d dlmZ d dlm Z d dl
m Z m Z d dlm
Z
d d lmZ d d
lmZ d d lmZmZ d d lmZmZ d d
lmZ d dlmZ dd� ZG dd� de �Z dS )� N)� b64decode)�dsdb)�common)�misc)�drsuapi)�
ndr_unpack�ndr_pack)�drsblobs)�dsdb_Dn)�security)�get_wellknown_sds� get_diff_sds)�system_session�
admin_session)� CommandError)�get_fsmo_roleownerc C sL g }| D ] }z
|� |�d�� W q ty |� t|�� Y qw d�|�S )z�Stringify a value list, using utf-8 if possible (which some tests
want), or the python bytes representation otherwise (with leading
'b' and escapes like b' ').
zutf-8�,)�append�decode�UnicodeDecodeError�repr�join)�vals�result�value� r �1/usr/lib/python3/dist-packages/samba/dbchecker.py�dump_attr_values& s �
r c @ st e Zd ZdZ d�dd�Zdejddfdd�Zdd � Zd
d � Z d�d d
�Z
dd� Z dd� Z d�dd�Z
dd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd�d%d&�Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z d�d;d<�Z!d=d>� Z"d?d@� Z#dAdB� Z$dCdD� Z%dEdF� Z&dGdH� Z'dIdJ� Z(dKdL� Z)dMdN� Z*dOdP� Z+dQdR� Z,dSdT� Z-dUdV� Z.dWdX� Z/dYdZ� Z0d[d\� Z1d]d^� Z2d_d`� Z3dadb� Z4dcdd� Z5dedf� Z6dgdh� Z7didj� Z8dkdl� Z9dmdn� Z:dodp� Z;dqdr� Z<dsdt� Z=dudv� Z>dwdx� Z?dydz� Z@d{d|� ZAd}d~� ZBdd�� ZCd�d�� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHd�d�� ZId�d�d��ZJd�d�� ZKd�d�� ZLd�d�� ZMdS )��dbcheckz check a SAM database for errorsNFc C sR || _ d | _|p || _|| _|| _|| _|| _d| _d| _d| _ d| _
d| _ d| _ d| _
d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _t� | _d| _ d| _ d| _ d| _ d| _ d| _!d| _"d| _#d| _$d| _%d| _&d| _'d| _(d| _)d| _*d| _+d| _,|| _-| | _.|
| _/d| _0d| _1|| _2t3�4|d|�5� �| _6t3�4|d|�7� �| _8|�9� | _:t3�4|d|�5� �| _;t3�4||�<� �| _=i | _>t?| j �| _@d| _Ad| _Bd| _Cd| _Dd| _EtF� | _Gi | _Hi | _Iz*d|�J|�K� tLjM� } |jN| t3jOdgd�} tPtQjR| d d d �}
tS|
�| jId < W n t3jT�y4 } z|jU\}}|t3jVk�r*� W Y d }~nd }~ww tW� | _XtYd |�Z� �| _[| j jN| j=t3jOd
d gd�} d
| d v �r]| d d
| _\nd | d v �rl| d d | _\nd | _\| j jNd t3jOd
gd�} g | _]g | _^g | __z | d d
| _`W n ta�y� Y n
tb�y� Y nw | j`D ]4}z| j �Jt3�4| j |�cd��tLjd�}| j]�e|� W �q� ta�y� | j^�et3�4| j |�cd��� Y �q�w d| j �K� }d| j �f� }| j jNt3jgddg| j �h� d| d�}ti|�dk�r| j_�et3�4| j |�|d f� | j jNt3jgddg| j �h� d| d�}ti|�dk�r6| j_�et3�4| j |�|d f� t3�4| j d| j �5� �}tj| j |d�}t3�4| j | j �<� �|k�rZd| _knd| _k| j jNt3�4| j | j �l� �t3jOdgd�} t3�4| j | d d d �cd��| _m| j jN| jmt3jOdgd�} d| d v �r�t3�4| j | d d d �cd��| _nnd | _nd| j �7� �o� }|jN|t3jOdd gd �} d | d v �r�tp| d d d �| _qnd | _qg | _rg | _sz.| j jNt3jOd d d!gd"�} d | d v �r�| d d | _rd!| d v �r| d d! | _sW d S W d S t3jT�y( } z|jU\}}|t3jVk�r � W Y d }~d S d }~ww )#NFr zCN=Infrastructure,zCN=Partitions,%szCN=RID Manager$,CN=System,zCN=DnsAdmins,%s� objectSid��base�scope�attrs� DnsAdminszmsDS-hasMasterNCs� hasMasterNCs� �namingContexts�utf8zDC=DomainDnsZones,%szDC=ForestDnsZones,%s�msDS-NC-Replica-Locations� msDS-NC-RO-Replica-Locationsz$(&(objectClass=crossRef)(ncName=%s)))r" r# r! �
expression� �ridT�serverReference�rIDSetReferencesz1CN=Directory Service,CN=Windows NT,CN=Services,%sz(objectClass=nTDSService)�tombstoneLifetime)r! r" r+ r# � z @SAMBA_DSDB�compatibleFeatures�requiredFeatures)r" r! r# )t�samdb�
dict_oid_name� samdb_schema�verbose�fix�yes�quiet� remove_all_unknown_attributes�remove_all_empty_attributes�fix_all_normalisation�fix_all_duplicates�fix_all_DN_GUIDs�fix_all_binary_dn�#remove_implausible_deleted_DN_links�!remove_plausible_deleted_DN_links�$fix_all_string_dn_component_mismatch�"fix_all_GUID_dn_component_mismatch�!fix_all_SID_dn_component_mismatch� fix_all_SID_dn_component_missing�(fix_all_old_dn_string_component_mismatch�fix_all_metadata�fix_time_metadata� fix_undead_linked_attributes�fix_all_missing_backlinks�fix_all_orphaned_backlinks� fix_all_missing_forward_links�dict�duplicate_link_cache�recover_all_forward_links�
fix_rmd_flags�fix_ntsecuritydescriptor�$fix_ntsecuritydescriptor_owner_group�seize_fsmo_role�move_to_lost_and_found�fix_instancetype�"fix_replmetadata_zero_invocationid� fix_replmetadata_duplicate_attid� fix_replmetadata_wrong_attid� fix_replmetadata_unsorted_attid�fix_deleted_deleted_objects�fix_dn�fix_base64_userparameters�fix_utf8_userparameters�fix_doubled_userparameters�fix_sid_rid_set_conflict�quick_membership_checks�reset_well_known_acls�check_expired_tombstones�expired_tombstones�reset_all_well_known_acls�in_transaction�ldb�Dn� domain_dn�infrastructure_dn�get_config_basedn� naming_dn�get_schema_basedn� schema_dn�rid_dn�get_dsServiceName�ntds_dsa�class_schemaIDGUIDr �
wellknown_sds�fix_all_missing_objectclass�fix_missing_deleted_objects�fix_replica_locations�fix_missing_rid_set_master� fix_changes_after_deletion_bug�set�dn_set�
link_id_cache�name_map�get_wellknown_dn�get_default_basednr �DS_GUID_USERS_CONTAINER�search�
SCOPE_BASEr r �dom_sid�str�LdbError�args�ERR_NO_SUCH_OBJECTr �system_session_infor �get_domain_sid�admin_session_info� write_ncs�deleted_objects_containers� ncs_lacking_deleted_containers�dns_partitions�ncs�KeyError�
IndexErrorr �!DS_GUID_DELETED_OBJECTS_CONTAINERr �get_root_basedn�SCOPE_ONELEVEL�get_partitions_dn�lenr �
is_rid_master�get_serverName�
server_ref_dn�
rid_set_dn�get_linearized�intr0 r2 r3 )�selfr4 r6 r7 r8 r9 r: rf ra rb rc �base_dn�res�
dnsadmins_sid�e5�enum�estr�nc�dn�domaindns_zone�forestdns_zone�domain�forest�fsmo_dn�
rid_master�ntds_service_dn�e6r r r �__init__7 sZ
�
�
���
�"�
�
� �"
�$ ��
���
��zdbcheck.__init__c C s� | j j||dg|d�}| �dt|� � d}|| �� 7 }t� | _|D ]}| j�t |j
�� || j |j
|d�7 }q"|du rB|| � � 7 }| j
dkrO| �d| j
� |dkr[| js[| �d� | �d t|�|f � |S )
z>perform a database check, returning the number of errors foundr� �r! r" r# �controlszChecking %u objectsr )�requested_attrsNz�NOTICE: found %d expired tombstones, 'samba' will remove them daily, 'samba-tool domain tombstones expunge' would do that immediately.z$Please use --fix to fix these errorsz Checked %u objects (%u errors))r4 r� �reportr� � check_deleted_objects_containersry �attribute_or_class_idsrz �addr� r� � check_object�
check_rootdserd r8 )r� �DNr" r� r# r� � error_count�objectr r r �check_database� s$
�
zdbcheck.check_databasec C s� d}| j D �]r}|| jkrq|d7 }| �d| � | �d| d�s"qt�| jd�}|�|� d}z0| jj|tj g g d�d �}t
|�dkr_|d j � d
�}t�| jd t
t�|�� �}|�|� W n- tjy� } z |j\}} |tjkrtn| �d | � W Y d}~ dS W Y d}~nd}~ww |dur�z | j�||g d
�� W n$ tjy� }
z|
j\}} | �d||| f � W Y d}
~
dS d}
~
ww | jj|tj dgg d�d �}t
|�dkr�| �d| � dS |d d } g } d}
| D ]'}t| j|�d�tj�}| �|��r
| �d| � |j � d
�}
| �t
|�� q�|
du�r$dt
t�|
�� }ndtj }| �d||f � d}| jjd||f ddgd� t� � }t�| jt
|d d ��|_ t� | tj d�|d< | j |dgd | d d ��rr| �d | � | j �|� q|S )!z`This function only fixes conflicts on the Deleted Objects
containers, not the attributesr r, z=ERROR: NC %s lacks a reference to a Deleted Objects containerz-Fix missing Deleted Objects container for %s?ru zCN=Deleted ObjectsN)�show_deleted:1�extended_dn:1:1�show_recycled:1�reveal_internals:0r� �GUIDzCN=Deleted Objects\0ACNF:%sz<Couldn't check for conflicting Deleted Objects container: %s)r� �relax:0r� z;Couldn't move old Deleted Objects placeholder: %s to %s: %s�wellKnownObjects)r� �
extended_dn:0r� r� z(wellKnownObjects was not found for NC %sr( z7wellKnownObjects had duplicate Deleted Objects value %sz
objectGUID: %szB:32:%s�%s:%sr& z�dn: %s
objectClass: top
objectClass: container
description: Container for deleted objects
isDeleted: TRUE
isCriticalSystemObject: TRUE
showInAdvancedViewOnly: TRUE
systemFlags: -1946157056%sr� � provision:0�r� r� z"NC %s lacks Deleted Objects WKGUIDF��validatez Added %s well known guid link)!r� rn r� � confirm_allrg rh r4 �add_baser� r� r� r� �get_extended_componentr� r r� r� r� r� �renamer
r r �DSDB_SYNTAX_BINARY_DN�is_deleted_objects_dnr r� �add_ldif�Message�MessageElement�FLAG_MOD_REPLACE� do_modifyr� )r� r� r� r� � conflict_dnr� �guid�e2r� r� �e1�wko�listwko�proposed_objectguid�o�dsdb_dn� guid_suffix�
wko_prefix�deltar r r r� s�
� �
�
���
�� �
��
�
�z(dbcheck.check_deleted_objects_containersc C s | j s t|� dS dS )z#print a message unless quiet is setN)r: �print)r� �msgr r r r� u s �zdbcheck.reportc C s0 | j sdS | jr | jS | jrd}tj|||d�S )zconfirm a changeFT��forced� allow_all)r8 r: r9 r �confirm)r� r� r� r� r r r r� z s zdbcheck.confirmc C s� | j sdS t| |�dkrdS t| |�dkrd}n| j}| jr |S tj||dd�}|dkr4t| |d� dS |dkr@t| |d� dS |S )z(confirm a change with support for "all" F�NONE�ALLTr� )r8 �getattrr9 r: r r� �setattr)r� r� �all_attrr� �cr r r r� � s" zdbcheck.confirm_allc
C s� | j r
| �d| � z|dtj g }| jj||d� W dS tyD } z| jr0td||f ��| �d||f � W Y d}~dS d}~ww )z&delete dn with optional verbose outputz delete DN %s�local_oid:%s:0r� �%s : %sNFT) r7 r� r �DSDB_CONTROL_DBCHECKr4 �delete� Exceptionrf r )r� r� r� r� �errr r r � do_delete� s ���zdbcheck.do_deleteTc
C s� |dt j g }| jr | �| j�|tj�� | �d| � z | jj|||d� W dS t yP } z| j
r<t d||f ��| �d||f � W Y d}~dS d}~ww )z-perform a modify with optional verbose outputr� z controls: %r)r� r� r� NFT) r r� r7 r� r4 �
write_ldifrg �CHANGETYPE_MODIFY�modifyr� rf r )r� �mr� r� r� r� r r r r� � s ���zdbcheck.do_modifyc
C s� | j r| �dt|�t|�t|�f � z|| }|dtj g }| jj|||d� W dS tyR } z| jr>t d||f ��| �d||f � W Y d}~dS d}~ww )z-perform a rename with optional verbose outputzDdn: %s
changeType: modrdn
newrdn: %s
deleteOldRdn: 1
newSuperior: %sr� r� r� NFT)
r7 r� r� r r� r4 r� r� rf r )r� �from_dn�to_rdn�to_baser� r� �to_dnr� r r r � do_rename� s ����zdbcheck.do_renamec C sL || j v r
| j | S | j�|�}|r| j�|�}nd }||f| j |< ||fS �N)r{ r6 � get_linkId_from_lDAPDisplayName�!get_backlink_from_lDAPDisplayName)r� �attrname�linkID�revnamer r r � get_attr_linkID_and_reverse_name� s
z(dbcheck.get_attr_linkID_and_reverse_namec C s� | � d||f � | �d||f d�s | � d| � dS t�� }||_t�dtj|�||< | j|ddgd | d
d �rC| � d | � dS dS )
zfix empty attributesz ERROR: Empty attribute %s in %sz"Remove empty attribute %s from %s?r< z Not fixing empty attribute %sNr& r� r� z#Failed to remove empty attribute %sFr� zRemoved empty attribute %s)r� r� rg r� r� r� �FLAG_MOD_DELETEr� )r� r� r� r� r r r �err_empty_attribute� s ��zdbcheck.err_empty_attributec
C sN | � d||f � g }|D ];}| j�| j||g�}t|�dkr.| � d| � |�|df� q
|d |krH| � d||d f � |�||d f� q
| �d||f d�s\| � d | � d
S t�� }||_ t
dt|��D ]$}|| \}} t� |tj |�|d | < | dkr�t� | tj
|�|d | < qj| j|d
dgd| dd�r�| � d| � d
S d
S )z?fix attribute normalisation errors, without altering sort orderz1ERROR: Normalisation error for attribute %s in %sr, z Unable to normalise value '%s'r& r zvalue '%s' should be '%s'z!Fix normalisation for %s from %s?r= zNot fixing attribute %sNzvalue_%uznormv_%ur� r� � Failed to normalise attribute %sFr� �Normalised attribute %s)r� r4 �dsdb_normalise_attributesr6 r� r r� rg r� r� �ranger� r � FLAG_MOD_ADDr� )
r� r� r� �values�mod_list�val�
normalisedr� �i�nvalr r r �err_normalise_mismatch� s@
� �
�� ��z dbcheck.err_normalise_mismatchc C s� | j �| j||�}t|�|krdS | �d||f � | �d|t|�f � | �d||f d�s8| �d| � dS t�� }||_t� |tj
|�||< | j |ddgd | d
d �r_| �d | � dS dS )
z.fix attribute normalisation and/or sort errorsNz5ERROR: Normalisation error for attribute '%s' in '%s'z0Values/Order of values do/does not match: %s/%s!z%Fix normalisation for '%s' from '%s'?r= �Not fixing attribute '%s'r� r� r Fr� r ) r4 r r6 �listr� r� rg r� r� r� r� r� )r� r� r� r r r� r r r � err_normalise_mismatch_replace s" ��z&dbcheck.err_normalise_mismatch_replacec C s� | � d||f � | � dt|�t|�f � | �d||f d�s)| � d| � dS t�� }||_t�|tj|�||< | j|ddgd | d
d �rP| � d | � dS dS )
z fix duplicate attribute valuesz2ERROR: Duplicate values for attribute '%s' in '%s'z&Values contain a duplicate: [%s]/[%s]!z"Fix duplicates for '%s' from '%s'?r> r Nr� r� z0Failed to remove duplicate value on attribute %sFr� z'Removed duplicate value on attribute %s) r� r r� rg r� r� r� r� r� )r� r� r� �
dup_valuesr r� r r r �err_duplicate_values s � ��z dbcheck.err_duplicate_valuesc C s |j dtj kS )z2see if a dsdb_Dn is the special Deleted Objects DNzB:32:%s:)�prefixr r� )r� r� r r r r� * s z dbcheck.is_deleted_objects_dnc C sf | � d|| j�|�f � | �d| d�s | � d| � dS | �|dgd| �r1| � d| � dS dS ) z!handle object without objectclassz�ERROR: missing objectclass in object %s. If you have another working DC, please run 'samba-tool drs replicate --full-sync --local <destinationDC> <sourceDC> %s'zIIf you cannot re-sync from another DC, do you wish to delete object '%s'?rt z1Not deleting object with missing objectclass '%s'Nr� �Failed to remove DN %s�
Removed DN %s)r� r4 � get_nc_rootr� r� �r� r� r r r �err_missing_objectclass. s
��z dbcheck.err_missing_objectclassc C s� |s#| � d|||f � | � dt|� � | �dd�s"| � d� dS n | � d|||f � | � dt|� � | �dd �sC| � d� dS t�� }||_t�|tj|�|d
< | �|d d t j
gd
| �rk| � d| � dS dS )z(handle a DN pointing to a deleted objectz4ERROR: target DN is deleted for %s in object %s - %sz#Target GUID points at deleted DN %rzRemove DN link?rA z Not removingNz6WARNING: target DN is deleted for %s in object %s - %szRemove stale DN link?rB � old_valuer� r� z(Failed to remove deleted DN attribute %sz"Removed deleted DN on attribute %s) r� r� r� rg r� r� r� r r� r � DSDB_CONTROL_REPLMD_VANISH_LINKS)r� r� r� r r� �
correct_dn�remove_plausibler� r r r �err_deleted_dn8 s,
�
���zdbcheck.err_deleted_dnc
C s� t |��d�dkr| �d|||f � | �d� dS | �|�\}}|d@ dkr�t |��d�dkr�| �|�\}}|durL| �d|||f � | �d � dS | j�|�}z | j�|j�} W n tjy{ }
z|
j \} } | tj
kro� d} W Y d}
~
nd}
~
ww | du r�| �d
||j||f � | �d � dS || kr�| �d |||f � | �d
� dS | �d|||f � | � |||||d� dS | �d|||f � | � |||||d� dS )zxhandle a missing target DN (if specified, GUID form can't be found,
and otherwise DN string form can't be found)z\0ADEL���zTWARNING: no target object found for GUID component link %s in deleted object %s - %sz`Not removing dangling one-way link on deleted object (tombstone garbage collection in progress?)r r, Nz`WARNING: no target object found for GUID component for one-way forward link %s in object %s - %sz"Not removing dangling forward linkzeWARNING: no target object found for GUID component for link %s in object to %s outside our NCs%s - %szhNot removing dangling one-way left-over link outside our NCs (we might be building a renamed/lab domain)z`WARNING: no target object found for GUID component for cross-partition link %s in object %s - %szPNot removing dangling one-way cross-partition link (we might be mid-replication)zTWARNING: no target object found for GUID component for DN value %s in object %s - %sTzNERROR: no target object found for GUID component for link %s in object %s - %sF) r� �findr� r r4 r r� rg r� r� r� r )
r� r� r� r r� r� �_�reverse_link_name�nc_root�target_nc_root�er� r� r r r � err_missing_target_dn_or_GUIDO sd �
��
�� �
�
�
��z%dbcheck.err_missing_target_dn_or_GUIDc
C sp | � d||||f � ddg}z| jjt|j�tjg |d�}W n1 tjyP } z$|j\} }
| � d|j|
f � | tj kr=� | �
||||� W Y d}~dS d}~ww t |�dkri| � d|j � | �
||||� dS |d j|_| � d t|� d
�s�| � d | � dS t�
� } || _t�|tj|�| d < t�t|�tj|�| d
< | �| dgd||f �r�| � d||f � dS dS )z+handle a missing GUID extended DN componentz,ERROR: %s component for %s in object %s - %sr� r� r� z&unable to find object for DN %s - (%s)Nr z unable to find object for DN %s�Change DN to %s?r? �
Not fixing %sr � new_value� Failed to fix %s on attribute %s�Fixed %s on attribute %s)r� r4 r� r� r� rg r� r� r� r� r' r� r� r� r� r r r� ) r� r� r� r r� �errstrr� r� �e7r� r� r� r r r � err_missing_dn_GUID_component� s@
�
��
��z%dbcheck.err_missing_dn_GUID_componentc C s� | � d||||f � | �dt|� d�s | � d| � dS t�� }||_t�|tj|�|d< t�t|�tj|�|d< | � |dgd ||f �rR| � d
||f � dS dS ) z'handle an incorrect binary DN componentz3ERROR: %s binary component for %s in object %s - %sr( r@ r) Nr r* r� r+ r, )
r� r� r� rg r� r� r� r r r� )r� r� r� r r� r- r� r r r �err_incorrect_binary_dn� s
��z dbcheck.err_incorrect_binary_dnc C s� | � d|||f � ||_| �dt|� d�s | � d� dS t�� }||_t�|tj|�|d< t�t|�tj|�|d< | � |dd t
j gd
| �rR| � d | � dS dS ) z<handle a DN string being incorrect due to a rename or deletezPNOTE: old (due to rename or delete) DN string component for %s in object %s - %sr( rG z Not fixing old string componentNr r* r� �local_oid:%s:1z+Failed to fix old DN string on attribute %sz#Fixed old DN string on attribute %s) r� r� r� r� rg r� r� r r r� r �%DSDB_CONTROL_DBCHECK_FIX_LINK_DN_NAME)r� r� r� r r� r r� r r r �err_dn_string_component_old� s$ �
���z#dbcheck.err_dn_string_component_oldc C s� | � d||||f � ||_| �dt|� d| �s#| � d| � dS t�� }||_t�|tj|�|d< t�t|�tj|�|d< | � |dgd ||f �rW| � d
||f � dS dS ) z"handle a DN string being incorrectz9ERROR: incorrect DN %s component for %s in object %s - %sr( z fix_all_%s_dn_component_mismatchz Not fixing %s component mismatchNr r* r� z-Failed to fix incorrect DN %s on attribute %sz%Fixed incorrect DN %s on attribute %s)
r� r� r� r� rg r� r� r r r� )r� r� r� r r� r �
mismatch_typer� r r r � err_dn_component_target_mismatch� s �
��z(dbcheck.err_dn_component_target_mismatchc C s� | � d|||f � t|j�dkr| � d� dS t�| j|j�� �}|�d|� | � d|�� d�s9| � d� dS |�
d �}t�| jd
�}|�d |� |�d|� t� � } || _t� |�� tj
|�| d < d d
tj g}
| �| |
d| �r}| � d| � dS dS )z*fix missing <SID=...> on linked attributesz8ERROR: missing DN SID component for %s in object %s - %sr z3Not fixing missing DN SID on DN+BINARY or DN+STRINGN�SIDr( rF z#Not fixing missing DN SID componentr� r& r* r� r1 z,Failed to ADD missing DN SID on attribute %sz$Fixed missing DN SID on attribute %s)r� r� r rg rh r4 r� � extended_str�set_extended_componentr� r� r� r� r r �$DSDB_CONTROL_DBCHECK_FIX_LINK_DN_SIDr� ) r� r� r� r r� �target_sid_blobr �target_guid_blob� guid_sid_dnr� r� r r r �#err_dn_component_missing_target_sid� s4
�
���z+dbcheck.err_dn_component_missing_target_sidc C s� | � d||jf � | �d| d�s| � d| � dS t�� }|j|_t�g tj|�|d< | �|ddgd | �rA| � d
| � dS dS ) z!handle an unknown attribute errorz#ERROR: unknown attribute '%s' in %szRemove unknown attribute %sr; zNot removing %sNr r� r� z%Failed to remove unknown attribute %sz Removed unknown attribute %s)r� r� r� rg r� r� r r� )r� �objr� r� r r r �err_unknown_attribute s ��z dbcheck.err_unknown_attributec C s� | � d|||jf � | �d| d�s | � d| � dS t�� }|j|_t�|tj|�|d< | �|ddd d
tj gd | �rG| � d | � dS dS )
z:handle a link that should not be there on a deleted objectzDERROR: linked attribute '%s' to '%s' is present on deleted object %szRemove linked attribute %srJ z Not removing linked attribute %sNr r� r� r� r� z Failed to delete forward link %sz Fixed undead forward link %s)
r� r� r� rg r� r� r r� r r )r� r> r� r r� r r r �err_undead_linked_attribute$ s
� ���z#dbcheck.err_undead_linked_attributec C s� | � d||||jf � | �d| d�s | � d| � dS t�� }||_t�|tj|�|d< | �|ddgd | �rB| � d
| � dS dS ) z handle a missing backlink valuez>ERROR: missing backlink attribute '%s' in %s for link %s in %szFix missing backlink %srK z Not fixing missing backlink %sNr* r� r� z!Failed to fix missing backlink %szFixed missing backlink %s)r� r� r� rg r� r� r r� )r� r> r� r �
backlink_name� target_dnr� r r r �err_missing_backlink4 s ��z dbcheck.err_missing_backlinkc C s� t |j�d��}| �d|||j|j�� f � | �d| d�s(| �d| � dS t�� }|j|_t�t |�tj
|�|d< | � |g d�d | �rP| �d
| � dS dS ) z"handle a incorrect RMD_FLAGS value� RMD_FLAGSzHERROR: incorrect RMD_FLAGS value %u for attribute '%s' in %s for link %szFix incorrect RMD_FLAGS %urQ z!Not fixing incorrect RMD_FLAGS %uNr )r� r� �show_deleted:0z$Failed to fix incorrect RMD_FLAGS %uz Fixed incorrect RMD_FLAGS %u) r� r� r� r� r7 r� rg r� r� r� r r� )r� r> r� � revealed_dn� rmd_flagsr� r r r �err_incorrect_rmd_flagsA s ��z dbcheck.err_incorrect_rmd_flagsc C s� |du r| � |||�r| �dd||||f � dS | �d||||f � | �d| d�s6| �d| � dS t�� }||_t�|tj|�|d < | �|d
d gd | �r[| �d
| � dS dS )z handle a orphaned backlink valueTz*WARNING: Keep orphaned backlink attribute z"'%s' in '%s' for link '%s' in '%s'Nz?ERROR: orphaned backlink attribute '%s' in %s for link %s in %szRemove orphaned backlink %srL z!Not removing orphaned backlink %sr r� r� z"Failed to fix orphaned backlink %szFixed orphaned backlink %s) �has_duplicate_linksr� r� rg r� r� r� r r� ) r� �obj_dn�
backlink_attr� backlink_valrB � forward_attr�forward_syntax�check_duplicatesr� r r r �err_orphaned_backlinkO s& �� ��z dbcheck.err_orphaned_backlinkc C s� | � d||jf � | �d| d�s | � d||jf � dS t�� }|j|_t�|tj|�|d< | �|dtj gd| �r[| � d | � d
t
|j�|f }|| j v sTJ �d | j |< dS dS ) z handle a duplicate links valuezPRECHECK: 'Missing/Duplicate/Correct link' lines above for attribute '%s' in '%s'zDCommit fixes for (missing/duplicate) forward links in attribute '%s'rP zPNot fixing corrupted (missing/duplicate) forward links in attribute '%s' of '%s'Nr r1 z/Failed to fix duplicate links in attribute '%s'z'Fixed duplicate links in attribute '%s'r� F) r� r� r� rg r� r� r� r� r �(DSDB_CONTROL_DBCHECK_FIX_DUPLICATE_LINKSr� rO )r� r> rM � forward_valsr� �duplicate_cache_keyr r r �err_recover_forward_linksc s" ���z!dbcheck.err_recover_forward_linksc C s� | � d|j � | jjdtjdgd�}t|�dksJ �t|d d d �}| �d|j|f d�s<| � d |j|f � d
S t� � }|j|_t�
|tj d �|d < | � |g d
|j|f �rf| � d|j|f � d
S d
S )z handle a missing fSMORoleOwnerz*ERROR: fSMORoleOwner not found for role %sr& �
dsServiceName)r" r# r, r z8Seize role %s onto current DC by adding fSMORoleOwner=%srT z>Not Seizing role %s onto current DC by adding fSMORoleOwner=%sN�
fSMORoleOwnerr zBFailed to seize role %s onto current DC by adding fSMORoleOwner=%sz9Seized role %s onto current DC by adding fSMORoleOwner=%s)
r� r� r4 r� rg r� r� r� r� r� r� r r� )r� r> r� � serviceNamer� r r r �err_no_fsmoRoleOwnerv s" � ��z dbcheck.err_no_fsmoRoleOwnerc
C sX | � d|j � | �d|j d�s| � d|j � dS d}| j�� zp| j�|j�}| j�|tj�}t �
| jt |j��}|� t
|�d � | �|j||dd gd
|j|| f �r�| � d |j|| f � t �� }|j|_t �t |j�� �t jd �|d < | �|g d
|| �r�| � d|| � d}W n | j�� � |r�| j�� dS | j�� dS )zhandle a missing parentz%ERROR: parent object not found for %sz!Move object %s into LostAndFound?rU z&Not moving object %s into LostAndFoundNFr, rE r� z2Failed to rename object %s into lostAndFound at %sz)Renamed object %s into lostAndFound at %s�lastKnownParentz:Failed to set lastKnownParent on lostAndFound object at %sz0Set lastKnownParent on lostAndFound object at %sT)r� r� r� r4 �transaction_startr r} r � DS_GUID_LOSTANDFOUND_CONTAINERrg rh r� �remove_base_componentsr� r� r� r� �parentr� r� �transaction_cancel�transaction_commit)r� r> �keep_transactionr$ �lost_and_found�new_dnr� r r r �err_missing_parent� s<
�
��
zdbcheck.err_missing_parentc
C s� t �| jt|��}|�t|�d � |�� }d} ||kr$| d||f 7 } | d| 7 } | �d|j| |f � | � d|j|f d�sL| �d|j|f � d S | �
|j|||d
|j|f �rg| �d |j|f � d S d S ) zhandle a wrong dnr, r& z%s=%r zname=%rz!ERROR: wrong dn[%s] %s new_dn[%s]zRename %s to %s?r\ zNot renaming %s to %sNz"Failed to rename object %s into %szRenamed %s into %s) rg rh r4 r� r\ r� r] r� r� r� r� )
r� r> rb �rdn_attr�rdn_val�name_valr� �new_rdn�
new_parent�
attributesr r r � err_wrong_dn� s ��zdbcheck.err_wrong_dnc C s� | � d|d |j|f � | �d|d ||jf d�s*| � d|d ||jf � dS t�� }|j|_t�t|�tjd�|d< | �|dt j
gd |j|f �rZ| � d
|j|f � dS dS ) zhandle a wrong instanceTypez0ERROR: wrong instanceType %s on %s, should be %d� instanceTypez(Change instanceType from %s to %d on %s?rV z-Not changing instanceType from %s to %d on %sNr r� zGFailed to correct missing instanceType on %s by setting instanceType=%dz7Corrected instancetype on %s by setting instanceType=%d) r� r� r� rg r� r� r� r� r� r �&DSDB_CONTROL_DBCHECK_MODIFY_RO_REPLICA)r� r> �calculated_instancetyper� r r r �err_wrong_instancetype� s ��z dbcheck.err_wrong_instancetypec C s" | � d|j| j�|j�f � d S )Nz�ERROR: incorrect userParameters value on object %s. If you have another working DC that does not give this warning, please run 'samba-tool drs replicate --full-sync --local <destinationDC> <sourceDC> %s'�r� r� r4 r )r� r> r� r r r r �err_short_userParameters� � "z dbcheck.err_short_userParametersc C s� | � d||jf � | �d|j d�s | � d|j � dS t�� }|j|_t�t|| d �tjd�|d< | �|g d |j �rI| � d
|j � dS dS ) z6handle a userParameters that is wrongly base64 encodedzNERROR: wrongly formatted userParameters %s on %s, should not be base64-encodedz2Convert userParameters from base64 encoding on %s?r] z6Not changing userParameters from base64 encoding on %sNr �userParametersr zOFailed to correct base64-encoded userParameters on %s by converting from base64zGCorrected base64-encoded userParameters on %s by converting from base64) r� r� r� rg r� r� r r� r� �r� r> r� r r� r r r �err_base64_userParameters� s ��z!dbcheck.err_base64_userParametersc C � | � d|j � | �d|j d�s| � d|j � dS t�� }|j|_t�|| d �d��d�tjd �|d
< | � |g d |j �rK| � d |j � dS dS )
z5handle a userParameters that is wrongly utf-8 encodedzPERROR: wrongly formatted userParameters on %s, should not be pseudo-UTF8 encodedz0Convert userParameters from UTF8 encoding on %s?r^ z4Not changing userParameters from UTF8 encoding on %sNr r( � utf-16-lerr r zQFailed to correct psudo-UTF8 encoded userParameters on %s by converting from UTF8zICorrected psudo-UTF8 encoded userParameters on %s by converting from UTF8�
r� r� r� rg r� r� r �encoder� r� rs r r r �err_utf8_userParameters� s ����z dbcheck.err_utf8_userParametersc C ru )
z:handle a userParameters that has been utf-16 encoded twicezQERROR: wrongly formatted userParameters on %s, should not be double UTF16 encodedz:Convert userParameters from doubled UTF-16 encoding on %s?r_ z>Not changing userParameters from doubled UTF-16 encoding on %sNr rv r( rr r zJFailed to correct doubled-UTF16 encoded userParameters on %s by convertingzBCorrected doubled-UTF16 encoded userParameters on %s by convertingrw rs r r r �err_doubled_userParameters� s ���z"dbcheck.err_doubled_userParametersc C s" | � d|j| j�|j�f � dS )z?Fix a truncated userParameters due to a pre 4.1 replication bugz�ERROR: incorrect userParameters value on object %s (odd length). If you have another working DC that does not give this warning, please run 'samba-tool drs replicate --full-sync --local <destinationDC> <sourceDC> %s'Nro )r� r> r� r r r �err_odd_userParameters rq z dbcheck.err_odd_userParametersc C sn | j j|tj|gg d�d�}| j�|�}|d | D ]}t| j |�d�|�}|j� d�}||kr4| S qdS )z#return a revealed link in an object)rE r� r� r� r r( r� N)
r4 r� rg r� r6 �#get_syntax_oid_from_lDAPDisplayNamer
r r� r� ) r� r� r� r� r� �
syntax_oidr r� �guid2r r r �find_revealed_link
s � �zdbcheck.find_revealed_linkc C s d}t � }t � }|d@ r|||fS |du r|||fS dt|j�|f } | | jvr-d| j| < || D ]�}
t| j|
�d�|�} | j�d�} | du rHq1tt� | ��}
|
| j
}||vr]| ||< q1|d7 }||vrwt � ||< d|| d< t � || d < t || j�d
��}t | j�d
��}||kr�|| || d< || d �
| � q1||k r�| || d< || d �
|| � | ||< q1t || j�d ��}t | j�d ��}||kr�|| || d< || d �
| � q1| || d< || d �
|| � | ||< q1|dk�rd | j| < |||fS )
�1check a linked values for duplicate forward linksr r, Nr� Fr( r� �keepr� � RMD_VERSION�
RMD_LOCAL_USNT)rN r� r� rO r
r4 r r� r r� r r r� r )r� r> rM rN �forward_linkIDrK r� �duplicate_dict� unique_dictrS r r� r� �guidstr�keystr�v1�v2�u1�u2r r r �check_duplicate_links s`
z dbcheck.check_duplicate_linksc
C s� d}dt |�|f }|| jv r| j| S | �|�\}}|g}ddg} z| jjt |�tj|| d�}
W n tjyP } z| j\} }
| tj krE� W Y d} ~ dS d} ~ ww |
d }| �
|||||�\}}}|| jv rk| j| S dS )r� r r� r� r� r� NF) r� rO r r4 r� rg r� r� r� r� r� )r� r� rM rN r� rS r� rK r# r� r� �e8r� r� r> r� r� r r r rI Z s0
�
���
zdbcheck.has_duplicate_linksc
C s g }d}|du r ||fS |t jkr | �d| � ||fS d| jv r*| �d� ||fS z$|d d }tttj|��} d|| f }
| jj |
t j
dgg d�d �} W n t j ya } z| j \}
}� d} ~ ww | D ]�}t
| j|j�� |�}|j�d
�}tt�|��}||v r�qdttj|d d �}|jjD ]}|j}|j}|jtjkr� nq�t�d �}d
}|}|}d}|} |} |} d} |j�dt|�� |j�dt|�� |j�dt|�� |j�dt| �� |j�dt| �� |j�dt| �� |j�dt| �� |d
7 }|� |� qd||fS )zMFind all backlinks linking to obj_guid_str not already in forward_unique_dictr Nz5Not checking for missing forward links for syntax: %s� sortedLinkszQNot checking for missing forward links because the db has the sortedLinks feature�
objectGUIDz(%s=<GUID=%s>))r� �search_options:1:2zpaged_results:1:1000)r+ r" r# r� r� �replPropertyMetadataz$ffffffff-4700-4700-4700-000000b13228r, � RMD_ADDTIME�RMD_CHANGETIMErD � RMD_INVOCID�RMD_ORIGINATING_USNr� r� ) rg � SYNTAX_DNr� r2 r� r r r� r4 r� �
SCOPE_SUBTREEr� r� r
r� r7 r� r �replPropertyMetaDataBlob�ctr�array� local_usn�originating_change_time�attidr �DRSUAPI_ATTID_objectClassr8 r r ) r� r> rM rN rK �forward_unique_dict�missing_forward_linksr� �obj_guid� obj_guid_str�filterr� �e9r� r� �rrB r� r� �replr� r� �t�originating_invocid�originating_usn� rmd_addtime�rmd_changetimerG � rmd_invocid�rmd_originating_usn�
rmd_local_usn� rmd_versionr r r �)find_missing_forward_links_from_backlinks{ sv
�
�
��
� �
z1dbcheck.find_missing_forward_links_from_backlinksc 5 C s� d}|d d }| � |�\}}|dur| j�|�}nd}|dv } | r(| jr(i }
n | �|||||�\}}
} t|
�dkr�| �||||| �\} }
||
7 }dd� | �� D �}|
dkra| �d||j f � n
| �d||j f � | D ](}| �d | � | �
d
| d �s�| j |j ||j � � |j ||d d
� qm||g7 }qm|
�
� D ] }|
| }|d D ] }| �d| � q�| �d|d � q�dd� t|�D �}| �|||� t�|d|�||< || D �]�}t| j|�d�|�}|j �d�}|du r�|d7 }| �|j |||d� q�tt�|��}ddg}t|��� dk�r |j | jk�r d}|� d� nd }|du�r*|� |� z| jj d | tj |g d �d �}W n+ tj �yf } z |j \} } | tj!k�rQ� || �"|j |||�7 }W Y d}~q�d}~ww |�r�d t#|d d d � |_$d t#|d d d � |_%t|�t|�k�r�|d7 }| �&|j |||d!� q�d|v �o�t|d d ��'� d"k} d|d v �o�t|d d d ��'� d"k} | �r�|j | j(v�r�|�r�| �)|||� |d7 }q�| �rG| �*|��sG|�rG|d7 }|j �d#�} | �r8d|d v �r8t+t,j-|d d$ d �}!d }"|!j.j/D ]}#|#j0t1j2k�r$|#j3}$|$t#| �k�r$d}" n�q
|"�r8| �4|j ||||d j d� q�| �4|j ||||d j d � q�|j �d%�}%d}&|%du�rXt#|%�}&|&d@ �s�|du�r�t|d j �t|j �k�r�|d7 }| �5|j ||||d j d&� q�|d j �d�|j �d�k�r�|d7 }| �5|j ||||d j d� q�|d j �d'�}'|j �d'�}(|(du �r�|'du�r�|d7 }| �6|j ||||'� q�|(|'k�r�|d7 }| �5|j ||||d j d'� q�|du �r|dk�rt|d j �t|j �k�r|j$|j �7� })| �8|j ||)||d j � q�| �r| j�rq�d}*||d v �r[|d | D ]3}+t| j|+�d��},|,j �d�}-|,j �d%�}.d}/|.du�rIt#|.�}/|/d@ �rP�q'|-|k�rY|*d7 }*�q'|*dk�r�|t9j:k�sl|t9j:k�r�|d@ �s�d}0|| D ]}1t| j|1�d��j �d�}2|2|k�r�|0d7 }0�qw|*|0k�r�q�d}3|| D ]3}+t| j|+�d��},|,j �d�}-|,j �d%�}.d}/|.du�r�t#|.�}/|/d@ �rƐq�|-|k�r�|3d7 }3�q�|*|3k�r�q�|3|* }4|d@ �r
|*dk�r�|d7 }| � |j |||j ||� q�| �d(||3t|j �||*t|j �f � q�| �rJ �| �d)||3t|j �||*t|j �f � |4dk�rq|d7 }|4dk�rW|*dk�s:|4dk�rE| �d*t|j � � n,| �;|||j � � ||j � |4d8 }4n| � |d j ||j � � |j ||� |4d7 }4|4dk�s'q�|S )+z$check a DN attribute for correctnessr r� N)�member�memberOfc S s g | ]}|�qS r r ��.0r� r r r �
<listcomp>� s z$dbcheck.check_dn.<locals>.<listcomp>zKERROR: Missing and duplicate forward link values for attribute '%s' in '%s'z?ERROR: Duplicate forward link values for attribute '%s' in '%s'zMissing link '%s'z7Schedule readding missing forward link for attribute %srM F)rO r� zDuplicate link '%s'zCorrect link '%s'r� c S � g | ]}t |��qS r �r� r� r r r r� � r( r� r, z missing GUID� isDeleted�replPropertyMetaDatazmsds-hasinstantiatedncsTrk � <GUID=%s>)r� r� r� r� z B:8:%08X:z%08Xz(incorrect instanceType part of Binary DN�TRUEr� r� rD �stringr6 zHWARNING: Link (back) mismatch for '%s' (%d) on '%s' to '%s' (%d) on '%s'zIERROR: Link (forward) mismatch for '%s' (%d) on '%s' to '%s' (%d) on '%s'z5ERROR: Can't fix missing multi-valued backlinks on %s)<r r6 r| ra r� r� r� r r� r� r� rP r7 �keys�sortedrT rg r� r
r4 r r� r/ r� r r� �lowerrq r r� r� r� r� r� r' r� r �binaryr0 �upperr� r@ r� r r r� r� r� r� r �DRSUAPI_ATTID_isDeletedr� r r5 r= r� r3 r r� rC )5r� r> r� r} r� r� r� r# �reverse_syntax_oid�is_member_linkr� r� r� �missing_error_count�
forward_linksr� r� �d�ddr r r� r� r� r# � fixing_msDS_HasInstantiatedNCsr� �e3r� r� �
is_deleted�target_is_deletedr� r� �
found_datar� � deleted_usn�rmd_blobrG �
target_sid�link_sid�bad_dn� match_count�v�v_dn�v_guid�v_blob� v_rmd_flags�
forward_count�w�w_guid�expected_count�
diff_countr r r �check_dn� s�
�� ��
�
�
� �
�
� �� "* � �
�
�
� �
�
$
�
�
�
�
� �
�
��
�
��zdbcheck.check_dnc C s$ |j jD ] }|j|kr| S qd S r� )r� r� r� )r� r� r� r� r r r �find_repl_attid s
�zdbcheck.find_repl_attidc C s* t tj|�}| �||�}|dur|jS dS )z�Read metadata properties and return the originating time for
a given attributeId.
:return: the originating time or 0 if not found
Nr )r r r� r� r� )r� r r� r� r� r r r �get_originating_time s
z dbcheck.get_originating_timec C s� t � }t � }g }|�| j�}ttj|�}|jjD ])}| j� |j
�} |� | � � � |�
|j
� | jj| |d�}
|
|j
krA|� |j
� q|||fS )zgRead metadata properties and list attributes in it.
raises KeyError if the attid is unknown.�� is_schema_nc)ry � is_child_ofrn r r r� r� r� r6 � get_lDAPDisplayName_by_attidr� r� r� r � get_attid_from_lDAPDisplayName) r� r� r �set_att� wrong_attids�
list_attid� in_schema_ncr� r� �att�
correct_attidr r r �process_metadata s �
�
zdbcheck.process_metadatac C s� t ttj|d d ��}t�| jd| �}| jj|tj|gddgd�}|d }t� � }||_
t� || tj |�||< | �
|g d�d| �rN| �d | � d
S d
S ) z�re-write replPropertyMetaData elements for a single attribute for a
object. This is used to fix missing replPropertyMetaData elementsr� r r� r� r� r� )r� r� r� �'Failed to fix metadata for attribute %sz Fixed metadata for attribute %sN)r� r r r� rg rh r4 r� r� r� r� r� r� r� r� )r� r> �attr�guid_strr� r� r� �nmsgr r r � fix_metadata5 s �� ��zdbcheck.fix_metadatac C s� |j tj@ rd S d}|jtjkrd}n|jtjkr d}n|jtjkr%d}n|jtjkr-d}|s1d S |jj tj @ s:d S t
|jj �S )NFT) �flagsr �SEC_ACE_FLAG_INHERIT_ONLY�type�"SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECT�!SEC_ACE_TYPE_ACCESS_DENIED_OBJECT� SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECT� SEC_ACE_TYPE_SYSTEM_ALARM_OBJECTr� �%SEC_ACE_INHERITED_OBJECT_TYPE_PRESENTr� �inherited_type)r� �ace�checkr r r � ace_get_effective_inherited_typeE s z(dbcheck.ace_get_effective_inherited_typec C s\ || j v r
| j | S d| }| jj| j|dgd�}tttj|d d d ��}|| j |< |S )Nz0(&(ldapDisplayName=%s)(objectClass=classSchema))� schemaIDGUID)r! r+ r# r )rr r4 r� rn r� r r r� )r� �cls�fltr� r� r r r �lookup_class_schemaIDGUID[ s
�
z!dbcheck.lookup_class_schemaIDGUIDc
C sL d}|| }t tj|d �}d|v o t|d d ��� dk}|r$|d fS t�� }|j|_|j|_|j|_|j|_d}d } g }
|j d urG|j j
}
t dt |
��D ])} |
| } | j
tj@ s`|�| � qN| �| �}
|
d u rjqN| d uru|
| krtd}qN|
} qNg }
|jd ur�|jj
}
t dt |
��D ])} |
| } | j
tj@ s�|�| � q�| �| �}
|
d u r�q�| d ur�|
| kr�d}q�|
} q�|r�||fS | d u r�|d fS d }z|d d }W n ty� } zW Y d }~nd }~ww |d u �r| jj|tjddgd gd
�}|d }d|v �ot|d d ��� dk}|�r|d fS |d d }| �|�}
|
| k�r"||fS |d fS ) N�nTSecurityDescriptorr r� r� FT� objectClassr r� r� )r r �
descriptorr� r� � owner_sid� group_sidr� �revision�sacl�acesr r� r� �SEC_ACE_FLAG_INHERITED_ACE�sacl_addr� �dacl�dacl_addr� r4 r� rg r� r )r� r� r> �sd_attr�sd_val�sdr� �sd_clean�broken�last_inherited_typer r
r� r� r r& r� r� r r r �
process_sdh s�
��
�"
zdbcheck.process_sdc C s� d}t |�}tjtjB }| �d||f d�s!| �d||f � dS t�� }||_t� |tj
|�||< | � |d| gd| �rI| �d||f � dS dS ) z/re-write the SD due to incorrect inherited ACEsr z
Fix %s on %s?rR �Not fixing %s on %s
N�
sd_flags:1:%d�Failed to fix attribute %s� Fixed attribute '%s' of '%s'
) r r � SECINFO_DACL� SECINFO_SACLr� r� rg r� r� r� r� r� )r� r� r � sd_brokenr r �sd_flagsr� r r r � err_wrong_sd� s ��zdbcheck.err_wrong_sdc C s� d}t |�}tjtjB }|jdur|tjO }|jdur |tjO }| �d|||f d�s6| � d||f � dS t
� � }||_ t
�
|t
j|�||< | �|d| gd| �r^| � d||f � dS dS ) zare-write the SD due to not matching the default (optional mode for fixing an incorrect provision)r Nz,Reset %s on %s back to provision default?
%sre zNot resetting %s on %s
r z Failed to reset attribute %sr )r r r r r �
SECINFO_OWNERr �
SECINFO_GROUPr� r� rg r� r� r� r� r� )r� r� r �diffr r r r� r r r �err_wrong_default_sd� s$
��z dbcheck.err_wrong_default_sdc C s� d}t |�}tjtjB }| �d||f d�s!| �d||f � dS t�� }||_t� |tj
|�||< | j � | j
� | �|d| gd| �rN| �d||f � | j � | j� dS ) z/re-write the SD due to a missing owner or groupr z'Fix missing owner or group in %s on %s?rS z+Not fixing missing owner or group %s on %s
Nr r� r )r r r r! r� r� rg r� r� r� r� r4 �set_session_infor� r� r� )r� r� r r r r r� r r r �err_missing_sd_owner� s
�z dbcheck.err_missing_sd_ownerc
C s | j rdS || jv r dS ttj|�}| �|tj�}t� |j
�}t � � }| j d }|| }||kr2dS || } |d }
|
dkrT| �
d| � | �
dt �| �|d f � n| �
d| � | �
dt �| �|
f � | �
d |j|j|j|j|jt �t� |j
��f � | jd
7 _d S ) NF�Q � z`SKIPPING additional checks on object %s which very recently became an expired tombstone (normal)zbINFO: it is expected this will be expunged by the next daily task some time after %s, %d hours agoi z+SKIPPING: object %s is an expired tombstonezTINFO: it was expected this object would have been expunged soon after%s, %d days agozHisDeleted: attid=0x%08x version=%d invocation=%s usn=%s (local=%s) at %sr, T)rc r� r r r� r� r r� �samba� nttime2unixr� �timer0 r� �ctimer� �version�originating_invocation_idr� r� rd ) r� r� �repl_valr� r� � delete_time� current_time�tombstone_deltar� � expunge_time�
delta_daysr r r �is_expired_tombstone sF
�� ��z dbcheck.is_expired_tombstonec
C s� t tj|�}| �|tj�}t�|j�}| j d }g }|j
j D ]+}|j tjkr'q |j
|j
kr.q |j|jkr5q t�|j�}|| } | |krDq |�|� q ||fS )Nr& )r r r� r� r r� r( r) r� r0 r� r� r� r� r )
r� r. r� r� r/ r1 �foundr� � change_timer� r r r �find_changes_after_deletionL s$
z#dbcheck.find_changes_after_deletionc sV � � |�\}}t|�dkrdS � fdd�}� �d| � ||� |D ]}||� q"dS )Nr Fc sh z � j �| j�}W n ty d| j }Y nw � �d|| j| j| j| j| jt �
t � | j
��f � d S )N�<unknown:0x%x08x>zA%s: attid=0x%08x version=%d invocation=%s usn=%s (local=%s) at %s)r6 r� r� r� r� r, r- r� r� r* r+ r( r) r� )r� �attname�r� r r � report_attids s �
�z8dbcheck.has_changes_after_deletion.<locals>.report_attidz,ERROR: object %s, has changes after deletionT)r7 r� r� )r� r� r. r5 r� r; r� r r: r �has_changes_after_deletionn s
z"dbcheck.has_changes_after_deletionc C s | � |�\}}|�| j�}|�� }| jj||d�}g }|D ]3} | j|kr%q | jtjkr,q | jtj kr3q z | j�
| j�}
W n t yJ d| j }
Y nw |� |
� q t
|�dkrh| �dd�|� � | �d� d S | �d|| jf d�sz| �d� d S | �|d gd
| �r�| �d | � d S d S ) Nr� r8 r zUnexpeted attributes: %sr z%Not fixing changes after deletion bugz6Delete broken tombstone object %s deleted %s days ago?rx r� r r )r7 r� rn � get_rdn_namer6 r� r� r �DRSUAPI_ATTID_name� DRSUAPI_ATTID_lastKnownParentr� r� r r� r� r r� r0 r� ) r� r� r. r5 r� r� rd � rdn_attid�
unexpectedr� r9 r r r �err_changes_after_deletion� sH �
�
��
��z"dbcheck.err_changes_after_deletionc C sl t tj|�}|j}d}|jD ]%}|jt�d�krqd}| �d||j |j
t � t
�|j��| j�� f � q|S )NF�$00000000-0000-0000-0000-000000000000Ta
ERROR: on replPropertyMetaData of %s, the instanceType on attribute 0x%08x,
version %d changed at %s is 00000000-0000-0000-0000-000000000000,
but should be non-zero. Proposed fix is to set to our invocationID (%s).)r r r� r� r� r- r r� r� r� r, r* r+ r( r) r� r4 �get_invocation_id)r� r� �repl_meta_datar� r� r5 r� r r r �"has_replmetadata_zero_invocationid� s �
��z*dbcheck.has_replmetadata_zero_invocationidc
C s0 t tj|�}|j}t�tt�� ��}d}|jD ],}|j t
� d�kr"qd}| j �
tj�} |jd |_||_t
� | j �� �|_ | |_| |_q|r�t|�}
t�� } || _| �d||| j �� f d�sj| �d||f � d S t�� } || _t�|
tj|�| |< | � | dt j d gd
| �r�| �d ||f � d S d S d S ) NFrC Tr, zZFix %s on %s by setting originating_invocation_id on some elements to our invocationID %s?rW z6Not fixing zero originating_invocation_id in %s on %s
r� �#local_oid:1.3.6.1.4.1.7165.4.3.14:0r r ) r r r� r� r( � unix2nttimer� r* r� r- r r� r4 �sequence_numberrg �SEQ_NEXTr, r� rD r� r� r r� r� r� r� r� r� r� r rl )
r� r� r� rE r� r� �nowr5 r� �seq�replBlobr� r� r r r �"err_replmetadata_zero_invocationid� sL �
�����
z*dbcheck.err_replmetadata_zero_invocationidc
C s` t tj|�}|j}|jD ]!}z | j�|j�}W q ty- | � d|j||f � Y d S w d S )NzIERROR: attributeID 0X%0X is not known in our schema, not fixing %s on %s
)
r r r� r� r� r6 r� r� r� r� )r� r� r� rE r� r� r� r� r r r � err_replmetadata_unknown_attid� s �
��z&dbcheck.err_replmetadata_unknown_attidc
s� t tj|�}d}t� }t� � i }|�| j�} |j}
t|
jd d � dd� d�|
_t |
j�D ]|} t
d|| j f � | j �
| j �} | �� |v r�| �d| ||f � | �d||| j | || j f d�sn| �d | j | ||f � d S d
}� �| j � | j|| jkr�| j|| _| j|| _| j|| _| j|| _| j|| _q,| || < |�| �� � q,� fd d �|
jD �}
t|�d
k�r|
D ]F} | j |v �r| j �
| j �} | j j| | d�}| �d||f � | �d||| j | || j f d�s�| �d| j || ||f � d S d
}|| _ q�|�rt|
d d � dd� d�|
d d �< |�s8| �d||f � | �d||f d��s8| �d||f � d S t|
�|
_|
|
_t|�}t� � }||_ t� |tj |�||< | � |dt!j" ddgd| ��rp| �d ||f � d S d S ) NFc S � | j S r� �r� �r� r r r �<lambda>� � z:dbcheck.err_replmetadata_incorrect_attid.<locals>.<lambda>)�keyz
%s: 0x%08xz7ERROR: duplicate attributeID values for %s in %s on %s
zLFix %s on %s by removing the duplicate value 0x%08x for %s (keeping 0x%08x)?rX z5Not fixing duplicate value 0x%08x for %s in %s on %s
Tc s g | ] }|j � vr|�qS r rQ )r� r� �� remove_attidr r r� % s z<dbcheck.err_replmetadata_incorrect_attid.<locals>.<listcomp>r r� z0ERROR: incorrect attributeID values in %s on %s
zEFix %s on %s by replacing incorrect value 0x%08x for %s (new 0x%08x)?rY zANot fixing incorrect value 0x%08x with 0x%08x for %s in %s on %s
c S rP r� rQ rR r r r rS 6 rT z/ERROR: unsorted attributeID values in %s on %s
z+Fix %s on %s by sorting the attribute list?rZ r r� rG z#local_oid:1.3.6.1.4.1.7165.4.3.25:0r r )#r r r� ry r� rn r� r� r� �reversedr� r� r6 r� r� r� r� r� r� r, r� r- r� r� r� �countr rg r� r� r� r� r� r rl )r� r� r� rE r� r� r8 r� �hash_attr� r� r� r� �new_listr� rM r� r rV r � err_replmetadata_incorrect_attid� s� � �� � ���� ��
���z(dbcheck.err_replmetadata_incorrect_attidc C s| d}d|vr| � d|j � d}d|vs t|d d ��� dkr*| � d|j � d}d |vr8| � d
|j � d}d |vsHt|d d ��� dkrR| � d |j � d}d
|v r`| � d|j � d}d|v rzt|d d ��� dkrz| � d|j � d}d|vs�t|d �dks�t|d d �dks�t|d d �dkr�| � d|j � d}d|vs�t|d d �dkr�| � d|j � d}|S )NF� descriptionz>ERROR: description not present on Deleted Objects container %sT�showInAdvancedViewOnlyr �FALSEzIERROR: showInAdvancedViewOnly not present on Deleted Objects container %s�objectCategoryzAERROR: objectCategory not present on Deleted Objects container %s�isCriticalSystemObjectzIERROR: isCriticalSystemObject not present on Deleted Objects container %s�
isRecycledz9ERROR: isRecycled present on Deleted Objects container %sr� z8ERROR: isDeleted not set on Deleted Objects container %sr r' �topr, � containerzBERROR: objectClass incorrectly set on Deleted Objects container %s� systemFlags� -1946157056zBERROR: systemFlags incorrectly set on Deleted Objects container %s)r� r� r� r� r� )r� r> �faultyr r r �is_deleted_deleted_objectsO s8 z"dbcheck.is_deleted_deleted_objectsc C s2 t �� }|j |_}d|vrt �dt jd�|d< d|vr&t �dt jd�|d< d|vr7t �d| j t jd�|d< d|vrEt �dt jd�|d< d|v rSt �dt jd�|d< t �dt jd �|d < t �d
t jd �|d < t �d d
gt jd�|d< | �d| d�s�| �d| � d S | � |dgd| �r�| �d| � d S d S )Nr] z Container for deleted objectsr^ r� r` zCN=Container,%sra rb r� rf re rc rd r zAFix Deleted Objects container %s by restoring default attributes?r[ �.Not fixing missing/incorrect attributes on %s
r� z+Failed to fix Deleted Objects container %sz%Fixed Deleted Objects container '%s'
)
rg r� r� r� r� rn r r� r� r� )r� r> r� r� r r r �err_deleted_deleted_objectsm s6 ��
��z#dbcheck.err_deleted_deleted_objectsc C s� t �� }||_| j�� }| j�� r | �d||jf � d S | �d|j d�s0| �d|j � d S t �|t j |�||< | �
|g d||jf �rR| �d||jf � d S d S )Nz Not fixing %s %s for the RODCz-Add yourself to the replica locations for %s?rv ri zFailed to add %s for %szFixed %s for %s) rg r� r� r4 rp �am_rodcr� r� r� r r� )r� r> � cross_refr� r� �targetr r r �err_replica_locations� s"
���z dbcheck.err_replica_locationsc C sL || j jkrdS || jkrdS || jkrdS || jkr dS || jkr$dS dS )NTF)r4 ri rj rl rn ro r r r r � is_fsmo_role� s
zdbcheck.is_fsmo_rolec
C s� d}| j �|�}||krE|tjO }z| j j|�� tjg dgd� W n tjy? } z|j \}}|tj
kr5� W Y d }~n
d }~ww |tj O }| j d ur[t
|�dd� | j D �v r[|tjO }|S )Nr r� r� c S r� r r� �r� �xr r r r� � r� z2dbcheck.calculate_instancetype.<locals>.<listcomp>)r4 r r �INSTANCE_TYPE_IS_NC_HEADr� r] rg r� r� r� r� �INSTANCE_TYPE_NC_ABOVEr� r� �INSTANCE_TYPE_WRITE)r� r� � instancetyper$ �e4r� r� r r r �calculate_instancetype� s"
���
"
z dbcheck.calculate_instancetypec C sF | j D ] \}}||kr t�| j�� �}ttj||| jd�� S qt�)N)r| ) rs r r� r4 r� r r r| r� )r� r� �sd_dn�
descriptor_fn�
domain_sidr r r �get_wellknown_sd� s ���zdbcheck.get_wellknown_sdc s� |du rdg� nt |�� tdd� � D ���� �fdd�}d�v s,d�v s,|�� �� �v r6� �d � ��d � d �v rH|�� d
d fD ]}||� qAd }d�v rQd
}n� D ]}| �|�\}}|dkraqS|d@ rfqSd
} |ro|d� |d� � �fS )z�A helper function for check_object() that calculates the list of
attributes that need to be checked, and returns that as a list
in the original case, and a set normalised to lowercase (for
easy existence checks).
N�*c s s � | ]}|� � V qd S r� )r� rp r r r � <genexpr>� s � z/dbcheck.find_checkable_attrs.<locals>.<genexpr>c s, | � � �vr� �| � ��| � � � d S d S r� )r� r r� )�a�r# �lc_attrsr r �add_attr� s
�z.dbcheck.find_checkable_attrs.<locals>.add_attrr� �distinguishedname�namer� re FTr r, r� r� )r ry r= r� r r� r )r� r� r� r� r~ �need_replPropertyMetaDatar� r" r r r �find_checkable_attrs� s>
�
z dbcheck.find_checkable_attrsc B C s� | j r
| �d| � | �||�\}}z*d}|tjO }|tjO }|tjO }|tjO }| jj |t
j dddd| dg|d�}W n0 t
j yl } z#|j
\}} |t
jkrg| jr`| �d | � W Y d
}~d S W Y d
}~dS � d
}~ww t|�d kr|| �d | � d S |d }
d} t� } t� }
d
}| j�|
j�}z | j�|tjj�}W n ty� d
}Y nw d
}d
}d
}d
}d}d
}|
D ].}|�� dkr�t|
| d �dkr�d}|�� dkr�t|
| d �}|�� dkr�|
| d }q�|�r|�r| � ||�r�| d 7 } | � ||� | S | � ||��r| S |
D �]�}|dk�s|dk�r�q|�� dk�r d}|�� dk�rNt|
| �d k�rF| d 7 } | �dt|
| �|t|
j�f � nt|
| d �}|�� t|
j� � ��� k�r�|}t|
| �d k�r}| d 7 } | �dt|
| �|t|
j�f � nt|
| d �}|�� dk�r| � ||
| d ��r�| d 7 } | �!|||
| d � z| �"||
| d �\} }}W n t�y� | d 7 } | �#|||
| � Y �qw t| �t|�k �s�t|�dk�s�t$|�|k�r�| d 7 } | �%|||
| d |� n|d dk�r | d 7 } | �d|t|�f � �q|�� dk�r�| �&||
�\}}|d
u�r/| �'|||� | d 7 } �q|j(d
u �s;|j)d
u �rG| �*||� | d 7 } �q| j+�r�z| �,|�} W n t�y] Y �qw t-tj.|
| d �} t/| | t�0| j�1� ��} | dk�r�| �2|| | � | d 7 } �q�q|�� dk�r�| j�3| j4||
| �} t$| �t$|
| �k�s�| d |
| d k�s�| d |
| d k�r�| �5||t6|
| �� | d 7 } �q|�� d k�r�|
| d } | d k�r�| d 7 } | �7|
||
| � �q| d
d � d k�r��q| d
d � d!k�r| d 7 } | �8|
||
| � �q| d dk�rB| d" dk�rB| d# dk�rB| d$ dk�rB| d% dk�rB| d 7 } | �9|
||
| � �qt| �d& dk�rW| d 7 } | �:|
|� �q| d dk�r�| d& dk�r�| d" dk�r�| d' dk�r�| d# dk�r�| d 7 } | �;|
||
| � �q|�� d(k�s�|�� d)k�r�|
| d | j<v �r�| d 7 } | �d*||
j|
| d f � n
| j<�=|
| d � |
| D ]}!|!d+k�r�| �>||� | d 7 } �qÐq�z| j4�?|�}"W n t@�y� }# z| �A|
|� | d 7 } W Y d
}#~#�qd
}#~#ww | �B|�\}$}%| j4�C|�}&|&tjD@ �s"|&tjE@ �s"|$�s"|
�=|�� � |"tjFtjGtjHt
jIfv �r9| | �J|
||"�7 } nTt� }'|
| D ]/}!|'�=|!� | j�3| j4||!g�} t| �d k�s_| d |!k�rn| �K|||
| � | d 7 } n�q@t|
| �t|'�k�r�| �L|||
| t6|'�� | d 7 } n,|�� d,k�r�| �M|�}(t|
d- �d k�s�t|
d- d �|(k�r�| d 7 } | �N|
|(� �q|�s�d.|v �s�d|v �r�| d 7 } | �O|� d.|v �s�d|v �r|d
u �r�| d 7 } | �d/t|
j� � |d
u �r| d 7 } | �d0|
j� � t|
j�f � |d
u�rwd
})dd1g}*|�r#|tjjP@ �s|})|*d2tjQ g7 }*|)d
u �r-|
j�R� })t
�S| jd3|) �}+|+�Td|
j� � |� |
j|k�rI|
j}+|+|
jk�r^| d 7 } | �U|
|+||||*� n|
j�V� |k�rw| d 7 } | �d4||t|
j�f � d},|�r�|
j|k�r�d5}-d6}.| �W||-�}/|/|.k�r�| �Xd7t|� d8��r�t
�Y� }0||0_t
�Zd9t
j[d:�|0d:< | d 7 } | jj\|0d;gd<� n | �d=t|� � |
�]| �D ]2}1|,�r�| �d>| � d
},| d 7 } | �d?|1 � | �Xd@|1 dA��s�| �dB|1 � �q�| �^|
|1� �q�| �_|��rdC|
v�rd.|v �sdD|v �r| �`|
� | d 7 } z"|| j�a� k�r;t|�R� �| jbv�r;| jj |�R� t
j ddgdE�}W n; t
j �yw }2 z-|2j
\}} |t
jk�rl|�rb| �dF|
j � | �dG� n | �c|
� | d 7 } n� W Y d
}2~2nd
}2~2ww || jdv �r�d.|v �r�| �e|
��r�| �f|
� | d 7 } | jgD ]Q\}3}#||3k�r�dH|
v �r�dI}4| j�h� �r�dJ}4|4|#v�r�| �i|
|#j|4� | d 7 } �q�d
}5|#|4 D ]}6t|6�| j�j� k�r�d}5�q�|5�s�| �i|
|#j|4� | d 7 } �q�|| jkk�r4d.|v �s�dK|v �r4dL|
v�r4| d 7 } | jl�r'| �XdMdN��r&| j�m� z| j�n� W n | j�o� � | j�p� n
| j�h� �s4| �dO| � || jqk�r[dPdQg}7| jj | jqt
j |7dR�}|7D ]7}8|8|d v�rV�qKt|d |8 d �}9|9dS? }:dT|9@ };|9dk�r�|;|:k�r�| �dU|;|:|;|:f � | d 7 } �qKdP|d v�r�| �dV| � | d 7 } z | j�r� \}<}:W n% t
j �y� }= z|=j
\}} | �dW| � | d 7 } W Y d
}=~=| S d
}=~=ww | j�1� }>|<|:k�r[dX|>|<f }?z| jj dY|? t
j g dR�}W n" t
j �y }@ z|@j
\}} |t
jk�r�� d
}W Y d
}@~@nd
}@~@ww |d
u�rR| �dZ|?|d j|f � | d 7 } | �Xd[|?|f d\��rO| j�m� z | j�s� }A|A|<k�r<|Ad }<n�q-W n | j�o� � | j�p� n | S |<d 7 }<|<|:k�s�| S )]zcheck one object�Checking object %sr r� r� r� r r� )r! r" r� r# z)ERROR: Object %s disappeared during checkNr, z,ERROR: Object %s failed to load during checkF� isdeletedr_ T� systemflags�replpropertymetadatar� �distinguishedName� objectclassr� z1ERROR: Not fixing num_values(%d) for '%s' on '%s'zYERROR: Not fixing incorrect initial attributeID in '%s' on '%s', it should be objectClass�ntsecuritydescriptorr& r �userparameters� � s � s IAAgACAAIAAgACAAIAAg� � � � r' � � attributeid� governsidz@Error: %s %s on %s already exists as an attributeId or governsId� ru rk r| z(ERROR: Not fixing missing 'name' on '%s'z&ERROR: Not fixing missing '%s' on '%s'r� r1 z
RDN=RDN,%sz ERROR: Not fixing %s=%r on '%s'i0 l �)�x1cB& z-Fix isDeleted originating_change_time on '%s'rI r� r� r� r� z4Not fixing isDeleted originating_change_time on '%s'z On object %sz7ERROR: Attribute %s not present in replication metadataz-Fix missing replPropertyMetaData element '%s'rH z4Not fixing missing replPropertyMetaData element '%s'rV �
fsmoroleowner)r! r" r� z'WARNING: parent object not found for %szFNot moving to LostAndFound (tombstone garbage collection in progress?)�repsFromr) r* �ridsetreferencesr/ z,Allocate the missing RID set for RID master?rw z^No RID Set found for this server: %s, and we are not the RID Master (so can not self-allocate)�rIDAllocationPool�rIDPreviousAllocationPoolr � l �� z!Invalid RID pool %d-%d, %d >= %d!z No rIDAllocationPool found in %sz Couldn't get available RIDs: %sz%s-%dz<SID=%s>z6SID %s for %s conflicts with our current RID set in %szGFix conflict between SID %s and RID pool in %s by allocating a new RID?r` )tr7 r� r� r r r! r r r4 r� rg r� r� r� r� rf r� ry r r� r} r( r r� r� r� r� r� r< rB r4 r= rF rN r� rO r� r\ r r r r r% rb r{ r r r
r� r� r# r r6 r r rp rt ry r{ rz r� r� r r| r� r? r �$get_systemFlags_from_lDAPDisplayName�DS_FLAG_ATTR_NOT_REPLICATED�DS_FLAG_ATTR_IS_CONSTRUCTEDr� �DSDB_SYNTAX_OR_NAME�DSDB_SYNTAX_STRING_DNr� r� r r rw rn r �#SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETEr2 r] rh �
set_componentrj �
get_rdn_valuer� r� r� r� r� r� �
differencer� ro rX r� rz rc r� rh rj r� rk rn rp r� r� rZ �create_own_rid_setr^ r_ r� �free_rid_bounds� allocate_rid)Br� r� r� � search_attrsr� r r� �e10r� r� r> r� �set_attrs_from_md�set_attrs_seen�got_objectclass�nc_dn�deleted_objects_dn�object_rdn_attr�object_rdn_valrf r� re �repl_meta_data_valr� �list_attid_from_mdr� r r �
well_known_sd�
current_sdr" r �
userparamsr r} r� r� r# �flagr rm � parent_dnr� � expected_dn�show_dn�isDeletedAttId�expectedTimeDo� originatingr� r� �e11�dns_part�locationr5 �loc�
pool_attrs� pool_attr�pool�high�low�
next_free_ridr� rz �sidr& �
allocated_ridr r r r� � s@
�
�
�� � � �
� � ��
�
�
�
�
� �� ��
�
�
( �
�
$��
��
��
�
� � �
��
4��
�
��
���
�
�
�.zdbcheck.check_objectc C s> t �| jd�}| jr| �d| � | jj|t jd�}t|�dkr)| �d| � dS |d }d}d|vr<| �d� |d S t|d d �� d �s�| �d
� |d7 }| �
d �sW|S | jjt �| j|d d � d ��t jd
gd�}tt t
j|d d
d ��}t �� }||_t �d| t jd�|d< | j|g ddd�r�| �d� |S )z!check the @ROOTDSE special objectz@ROOTDSEr� )r! r" r, z"Object %s disappeared during checkr rU z(ERROR: dsServiceName missing in @ROOTDSEz<GUID=z1ERROR: dsServiceName not in GUID form in @ROOTDSEz"Change dsServiceName to GUID form?r( r� r r� z+Failed to change dsServiceName to GUID formFr� z"Changed dsServiceName to GUID form)rg rh r4 r7 r� r� r� r� r� �
startswithr� r r r r� r� r� r� r� r� )r� r� r� r> r� r� r� r r r r� s:
�
�
zdbcheck.check_rootdsec C sR t �� }t �| jd�|_t �dt jd�|d< t �dt jd�|d< | j|g ddd�S ) zre-index the whole databasez @ATTRIBUTESr� �
force_reindexr� r� zre-indexed databaseFr� ) rg r� rh r4 r� r� r r r� �r� r� r r r �reindex_database7 s
zdbcheck.reindex_databasec C s> t �� }t �| jd�|_t �dt jd�|d< | j|g ddd�S )zOreset @MODULES to that needed for current sam.ldb (to read a very old database)z@MODULES�
samba_dsdbz@LISTzreset @MODULES on databaseFr� )rg r� rh r4 r� r� r� r� r� r r r �
reset_modulesA s zdbcheck.reset_modules) NFFFFFFFF)FF)T)Fr� )N�__name__�
__module__� __qualname__�__doc__r� rg r� r� r� r� r� r� r� r� r� r r r r r r� r r r' r/ r0 r3 r5 r= r? r@ rC rH rP rT rX rc rj rn rp rt ry rz r{ r r� rI r� r� r� r� r� r� r� r r r r# r% r4 r7 r< rB rF rN rO r\ rh rj rn ro rw r{ r� r� r� r� r� r r r r r 4 s�
� <
� d
U
�# A!f ,
i 6"$% _
1 !$
r ) rg r( r* �base64r r r � samba.dcerpcr r � samba.ndrr r r � samba.samdbr
r �samba.descriptorr r
�
samba.authr r � samba.netcmdr �samba.netcmd.fsmor r r� r r r r r �<module> s$