File: //proc/1233/root/usr/lib/python3/dist-packages/samba/netcmd/__pycache__/delegation.cpython-310.pyc
o
�/a�+ � @ s� d dl mZ d dlZd dlmZ d dlmZ d dlmZ d dl m
Z
d dl m Z d dl
mZmZmZmZ G dd � d e�ZG d
d � d e�ZG d d
� d
e�ZG dd� de�ZG dd� de�ZG dd� de�ZdS )� N)� provision)�dsdb)�SamDB)�system_session)�_get_user_realm_domain)�Command� CommandError� SuperCommand�Optionc @ sL e Zd ZdZdZejejejd�Z e
ddde ddd �gZ d
gZ
dd d
�Zd S )�cmd_delegation_showz*Show the delegation setting of an account.z %prog <accountname> [options]�� sambaopts�credopts� versionopts�-H�--URL�%LDB URL for database or target server�URL�H��help�type�metavar�dest� accountnameNc C s< |� � }|�|�}t�||�d��}|d u r|j} n|} t| t� ||d�}
t|�\} } }
|
j dt
� | � t
j ddgd�}t
|�dkrHtd| ��t
|�d ksPJ �t|d �d�d �}|d �d�}| j�d
t|d j� � | j�d t|tj@ � � | j�d t|tj@ � � |d ur�|D ] }| j�d
| � q�d S d S )N�realm�� session_info� credentials�lp�sAMAccountName=%s�userAccountControl�msDS-AllowedToDelegateTo��
expression�scope�attrsr � Unable to find account name '%s'� zAccount-DN: %s
z UF_TRUSTED_FOR_DELEGATION: %s
z.UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION: %s
z msDS-AllowedToDelegateTo: %s
)� get_loadparm�get_credentialsr �provision_paths_from_lp�get�samdbr r r �search�ldb�
binary_encode�
SCOPE_SUBTREE�lenr �int�outf�write�str�dn�boolr �UF_TRUSTED_FOR_DELEGATION�)UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION)�selfr r r r
r r �creds�paths�path�sam�cleanedaccountr �domain�res�uac�allowed�a� rF �9/usr/lib/python3/dist-packages/samba/netcmd/delegation.py�run6 sB
��� � ��zcmd_delegation_show.run�NNNN��__name__�
__module__� __qualname__�__doc__�synopsis�options� SambaOptions�CredentialsOptions�VersionOptions�takes_optiongroupsr
r6 �
takes_options�
takes_argsrH rF rF rF rG r $ s �
��r c @ �R e Zd ZdZdZejejejd�Z e
ddde ddd �gZ d
d gZ
dd
d�Zd S )� cmd_delegation_for_any_servicez3Set/unset UF_TRUSTED_FOR_DELEGATION for an account.�(%prog <accountname> [(on|off)] [options]r r r r r r r r �onoffNc
C s� d}|dkr d}n
|dkrd}nt d| ��|�� }|�|�} t�||�d��}
|d u r0|
j} n|} t| t� | |d�} t |�\}
}}dt
� |
� }t j
}z
| j||d |dd
� W d S tyi } zt |��d }~ww ) NF�onT�off�0invalid argument: '%s' (choose from 'on', 'off')r r r zTrusted-for-Delegation�� flags_strr[ �strict)r r) r* r r+ r, r- r r r r/ r0 r r9 �toggle_userAccountFlags� Exception�r; r rZ r r r
r r[ r r< r= r> r? r@ r rA �
search_filter�flag�errrF rF rG rH n s6
� ���z"cmd_delegation_for_any_service.runrI rJ rF rF rF rG rX \ � �
���rX c @ rW )� cmd_delegation_for_any_protocolzOSet/unset UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION (S4U2Proxy) for an account.rY r r r r r r r r rZ Nc
C s� d}|dkr d}n
|dkrd}nt d| ��|�� }|j|dd�} t�||�d��}
|d u r2|
j} n|} t| t� | |d�} t |�\}
}}d t
� |
� }t j
}z
| j||d
|dd � W d S tyk } zt |��d }~ww ) NFr[ Tr\ r] )�fallback_machiner r r z&Trusted-to-Authenticate-for-Delegationr^ )r r) r* r r+ r, r- r r r r/ r0 r r: ra rb rc rF rF rG rH � s6 � ���z#cmd_delegation_for_any_protocol.runrI rJ rF rF rF rG rh � rg rh c @ rW )�cmd_delegation_add_servicez4Add a service principal as msDS-AllowedToDelegateTo.�)%prog <accountname> <principal> [options]r r r r r r r r � principalNc
C � |� � }|�|�}t�||�d��} |d u r| j}
n|}
t|
t� ||d�} t|�\} }
}| j dt
� | � t
j dgd�}t
|�dkrGtd| ��t
|�dksOJ �t
�� }|d j|_t
�|gt
jd�|d< z| �|� W d S ty| } zt|��d }~ww � Nr r r r" r# r r' r( )r) r* r r+ r, r- r r r r. r/ r0 r1 r2 r �Messager7 �MessageElement� FLAG_MOD_ADD�modifyrb �r; r rl r r r
r r r< r= r> r? r@ r rA rB �msgrf rF rF rG rH � �>
��� ���z cmd_delegation_add_service.runrI rJ rF rF rF rG rj � rg rj c @ rW )�cmd_delegation_del_servicez7Delete a service principal as msDS-AllowedToDelegateTo.rk r r r r r r r r rl Nc
C rm rn )r) r* r r+ r, r- r r r r. r/ r0 r1 r2 r ro r7 rp �FLAG_MOD_DELETErr rb rs rF rF rG rH ru z cmd_delegation_del_service.runrI rJ rF rF rF rG rv � rg rv c @ sF e Zd ZdZi Ze� ed< e� ed< e� ed< e� ed< e � ed< dS )�cmd_delegationzDelegation management.�showzfor-any-servicezfor-any-protocolz add-servicez del-serviceN)
rK rL rM rN � subcommandsr rX rh rj rv rF rF rF rG rx 2 s
rx )� samba.getopt�getoptrP r/ �sambar r � samba.samdbr �
samba.authr �samba.netcmd.commonr � samba.netcmdr r r r
r rX rh rj rv rx rF rF rF rG �<module> s 85566