File: //proc/1233/root/usr/lib/python3/dist-packages/samba/__pycache__/gp_sec_ext.cpython-310.pyc
o
�/av# � @ s� d dl Zd dlmZ d dlmZ d dlmZ zd dlm Z d dl
m Z W n e y- Y nw dd� Z
d d
� Zd d � ZG d
d� de�ZG dd� de�ZdS )� N)�
gp_inf_ext)�system_session)�
get_string)�LdbError)�SamDBc C s dt | �d S )N�%d�< ��int��val� r
�2/usr/lib/python3/dist-packages/samba/gp_sec_ext.py�
mins_to_hours � r c C s dt | �d S )Nr � r r r
r
r �
days_to_hours r r c C s2 d}d}d}d}t | �} t| | | | | �S )Nr r i��� )r
�str)r �seconds�minutes�hours�sam_addr
r
r �days2rel_nttime" s r c @ s@ e Zd Zdddd�Zdd� Zdd� Zd d
� Zd d � Zd
d� ZdS )�
gp_krb_ext�kdc:user_ticket_lifetime�kdc:service_ticket_lifetime�kdc:renewal_lifetime)� MaxTicketAge�
MaxServiceAge� MaxRenewAgec C s( | j �d�dkr
d S d}|D ]4\}}| j�|� |�� D ]%}|t| �krA|| �� D ]\}}| �||� | j�||� | j� � q*q q|D ]L} | j
r�| j�| j � t j
�| j
|�}
| �|
�} | saqE| �� D ]+}|t| �kr�| �|�D ] \} }tj| }| �� �|�}
| �||
|�� | j� � qrqeqEd S �N� server role�"active directory domain controller�0MACHINE/Microsoft/Windows NT/SecEdit/GptTmpl.inf)�lp�get�gp_db�set_guid�keysr �items� set_kdc_tdb�delete�commit�
file_sys_path�name�os�path�join�parse�sectionsr � apply_map�mapper)�self�deleted_gpo_list�changed_gpo_list�inf_file�guid�settings�section�att�value�gpor0 �inf_conf�key�
value_funcr
r
r �process_group_policy. s: ��
��z gp_krb_ext.process_group_policyc C s� | j j�|�}| j�d|||f � |d ur5| j j�|t|�� | j �t| �||r0t|�� d S d � d S | j j�|� | j �t| �|� d S )Nz %s was changed from %s to %s) r& �gpostorer% �logger�info�storer r r+ �r6 � attributer �old_valr
r
r r* J s
���zgp_krb_ext.set_kdc_tdbc C s dd� t td�S )Nc S � | S �Nr
r r
r
r �<lambda>W � z#gp_krb_ext.mapper.<locals>.<lambda>)r r r )r r �r6 r
r
r r5 V s �zgp_krb_ext.mapperc C � dS )NzKerberos Policyr
rO r
r
r �__str__\ � zgp_krb_ext.__str__c C �x i }| j �d�dkr |S d}|jr:tj�|j|�}| �|�}|s"|S t| �|�� v r:t| �}dd� |� |�D �||< |S )Nr! r" r# c S �" i | ]
\}}t j�|�r||�qS r
)r r4 r% ��.0�k�vr
r
r �
<dictcomp>k �
�z#gp_krb_ext.rsop.<locals>.<dictcomp>�
r$ r% r- r/ r0 r1 r2 r r3 r) �r6 r? �outputr9 r0 r@ r< r
r
r �rsop_ �
zgp_krb_ext.rsopN) �__name__�
__module__� __qualname__r4 rC r* r5 rQ r^ r
r
r
r r * s � r c @ sf e Zd ZdZdd� Zddddd�Zd d
� Zd d � Zd
d� Zdd� Z dd� Z
dd� Z dd� Z dd� Z
dS )�
gp_access_extz�This class takes the .inf file parameter (essentially a GPO file mapped
to a GUID), hashmaps it to the Samba parameter, which then uses an ldb
object to update the parameter to Samba4. Not registry oriented whatsoever.
c C s@ zt | j�� t� | j| jd�| _W d S ttfy td��w )N)� session_info� credentialsr$ z/Failed to load SamDB for assigning Group Policy) r r$ � samdb_urlr �creds�ldb� NameErrorr � ExceptionrO r
r
r �load_ldbv s
��zgp_access_ext.load_ldb� minPwdAge� maxPwdAge� minPwdLength�
pwdProperties)�MinimumPasswordAge�MaximumPasswordAge�MinimumPasswordLength�PasswordComplexityc C sB | j �d�dkr
d S | �� d}|D ]<\}}| j�|� |�� D ]-}|t| �krM|| �� D ] \}}| �� �|�\} }
| ||� | j� ||� | j�
� q.q q|D ]M} | j r�| j�| j � t
j�| j |�} | �| �}
|
smqQ|
�� D ],}|t| �kr�|
�|�D ] \}}tj| }| �� �|�\} }| |||�� | j�
� q~qqqQd S r )r$ r% rk r& r' r( r r) r5 r+ r, r- r. r/ r0 r1 r2 r3 rc r4 )r6 r7 r8 r9 r: r; r< r= r> � update_samba�_r? r0 r@ rA rB r
r
r rC � s>
��
��z"gp_access_ext.process_group_policyc C �F | j �� }| j�d||f � | j�t| �|t|�� | j �|� d S )Nz2KDC Minimum Password age was changed from %s to %s)rh �
get_minPwdAgerE rF r& rG r �
set_minPwdAgerH r
r
r � ch_minPwdAge� �
�zgp_access_ext.ch_minPwdAgec C rv )Nz2KDC Maximum Password age was changed from %s to %s)rh �
get_maxPwdAgerE rF r& rG r �
set_maxPwdAgerH r
r
r � ch_maxPwdAge� rz zgp_access_ext.ch_maxPwdAgec C rv )Nz5KDC Minimum Password length was changed from %s to %s)rh �get_minPwdLengthrE rF r& rG r �set_minPwdLengthrH r
r
r �ch_minPwdLength� s
��z gp_access_ext.ch_minPwdLengthc C rv )Nz2KDC Password Properties were changed from %s to %s)rh �get_pwdPropertiesrE rF r& rG r �set_pwdPropertiesrH r
r
r �ch_pwdProperties� rz z gp_access_ext.ch_pwdPropertiesc C s. | j tf| jtf| jdd� f| jdd� fd�S )zldap value : samba setterc S rK rL r
r r
r
r rM � rN z&gp_access_ext.mapper.<locals>.<lambda>c S rK rL r
r r
r
r rM � rN )rl rm rn ro )ry r r} r� r� rO r
r
r r5 � s
�zgp_access_ext.mapperc C rP )Nz
System Accessr
rO r
r
r rQ � rR zgp_access_ext.__str__c C rS )Nr! r" r# c S rT r
)rc r4 r% rU r
r
r rY � rZ z&gp_access_ext.rsop.<locals>.<dictcomp>r[ r\ r
r
r r^ � r_ zgp_access_ext.rsopN)r` ra rb �__doc__rk r4 rC ry r} r� r� r5 rQ r^ r
r
r
r rc p s � rc )�os.pathr/ �
samba.gpclassr �
samba.authr � samba.commonr rh r � samba.samdbr � ImportErrorr r r r rc r
r
r
r �<module> s �F