File: //usr/lib/python3/dist-packages/samba/netcmd/__pycache__/schema.cpython-310.pyc
o
�/a?/ � @ s� d dl Z d dlmZ d dlmZ d dlmZ d dlm Z d dl
m Z m Z m
Z
mZ G dd� de �ZG dd � d e �ZG d
d � d e �ZG d d
� d
e �ZG dd� de
�ZG dd� de
�ZG dd� de
�ZdS )� N)� bitFields)�system_session)�SamDB)�Command� CommandError� SuperCommand�Optionc @ s\ e Zd ZdZdZejejejd�Z e
dde d�e
ddd e d
d d �gZ d
gZ
ddd�ZdS )�cmd_schema_attribute_modifya� Modify attribute settings in the schema partition.
This commands allows minor modifications to attributes in the schema. Active
Directory does not allow many changes to schema, but important modifications
are related to indexing. This command overwrites the value of searchflags,
so be sure to view the current content before making changes.
Example1:
samba-tool schema attribute modify uid \
--searchflags="fATTINDEX,fPRESERVEONDELETE"
This alters the uid attribute to be indexed and to be preserved when
converted to a tombstone.
Important search flag values are:
fATTINDEX: create an equality index for this attribute.
fPDNTATTINDEX: create a container index for this attribute (ie OU).
fANR: specify that this attribute is a member of the ambiguous name
resolution set.
fPRESERVEONDELETE: indicate that the value of this attribute should be
preserved when the object is converted to a tombstone (deleted).
fCOPY: hint to clients that this attribute should be copied.
fTUPLEINDEX: create a tuple index for this attribute. This is used in
substring queries.
fSUBTREEATTINDEX: create a browsing index for this attribute. VLV searches
require this.
fCONFIDENTIAL: indicate that the attribute is confidental and requires
special access checks.
fNEVERVALUEAUDIT: indicate that changes to this value should NOT be audited.
fRODCFILTEREDATTRIBUTE: indicate that this value should not be replicated to
RODCs.
fEXTENDEDLINKTRACKING: indicate to the DC to perform extra link tracking.
fBASEONLY: indicate that this attribute should only be displayed when the
search scope of the query is SCOPE_BASE or a single object result.
fPARTITIONSECRET: indicate that this attribute is a partition secret and
requires special access checks.
The authoritative source of this information is the MS-ADTS.
�%prog attribute [options]�� sambaopts� versionopts�credoptsz
--searchflagsz Search Flags for the attribute)�help�type�-H�--URL�%LDB URL for database or target server�URL�H�r r �metavar�dest� attributeNc C s |d u rt d��d }|d ur=d}|�d�}dd� |D �}|D ] } | td �� vr.t d| ��dtd | }
|d |
> B }q |�� } |�| �} t|t� | | d
�}
|
�� }d ||f }t �
� }t � |
|�|_ |d urtt �
t|�t jd �|d < |
�|� |
�� | j�d
| � d S )Nz#A value to modify must be provided.r �,c S s g | ]}|� � �� �qS � )�
capitalize�swapcase)�.0�xr r �5/usr/lib/python3/dist-packages/samba/netcmd/schema.py�
<listcomp>g s z3cmd_schema_attribute_modify.run.<locals>.<listcomp>� searchflagsz$Unknown flag '%s', please see --help� � ��url� session_info� credentials�lpzcn=%s,%s� searchFlagsz modified %s)r �splitr �keys� get_loadparm�get_credentialsr r � schema_dn�ldb�Message�Dn�dn�MessageElement�str�FLAG_MOD_REPLACE�modify�set_schema_update_now�outf�write)�selfr r r r r
r" �searchflags_int�flags�flag�bit_locr) �creds�samdbr/ �attr_dn�mr r r �runY s8
� �
z cmd_schema_attribute_modify.run)NNNNN��__name__�
__module__� __qualname__�__doc__�synopsis�options� SambaOptions�VersionOptions�CredentialsOptions�takes_optiongroupsr r5 �
takes_options�
takes_argsrD r r r r r s (� ���r c @ �L e Zd ZdZdZejejejd�Z e
ddde ddd �gZ d
gZ
dd d
�Zd S )�cmd_schema_attribute_showz�Show details about an attribute from the schema.
Schema attribute definitions define and control the behaviour of directory
attributes on objects. This displays the details of a single attribute.
r
r r r r r r r r Nc C sL |� � }|�|�}t|t� ||d�}|�� } d�|�}
|j| tj|
d�} t | �dkr0t
d| ��t | �dkr<t
d| ��d| d � � v r�d } z t t
| d d ��} W n tyc t
d | d d ��w g }
td
� � D ]}| dd td
| > @ dkr�|
�|� qlt |
�dkr�| d �t�|
tjd �� |�| d tj�}| j�|� d S )
Nr% zJ(&(objectClass=attributeSchema)(|(lDAPDisplayName={0})(cn={0})(name={0})))��base�scope�
expressionr z No schema objects matched "%s"r$ zPMultiple schema objects matched "%s": this is a serious issue you should report!r* zJInvalid schemaFlags value "%s": this is a serious issue you should report!r" r# �searchFlagsDecoded)r- r. r r r/ �format�searchr0 �
SCOPE_SUBTREE�lenr r, �intr5 �
ValueErrorr �append�addr4 � FLAG_MOD_ADD�
write_ldif�CHANGETYPE_NONEr9 r: )r; r r r r r
r) r@ rA r/ �filt�res�flags_i�outr> � user_ldifr r r rD � s<
�
� �
� z cmd_schema_attribute_show.run�NNNNrE r r r r rS � � ���rS c @ rR )� cmd_schema_attribute_show_ocz�Show what objectclasses MAY or MUST contain an attribute.
This is useful to determine "if I need uid, what objectclasses could be
applied to achieve this."
r
r r r r r r r r Nc C s� |� � }|�|�}t|t� ||d�}|�� } d�|�}
d�|�} |j| tj|
dgd�} |j| tj| dgd�}
| j �
d� | D ]}| j �
d|d d � q>| j �
d � |
D ]}| j �
d|d d � qUd S )
Nr% zE(&(objectClass=classSchema)(|(mayContain={0})(systemMayContain={0})))zG(&(objectClass=classSchema)(|(mustContain={0})(systemMustContain={0})))�cn)rU rV rW �attrsz--- MAY contain ---
z%s
r z--- MUST contain ---
) r- r. r r r/ rY rZ r0 r[ r9 r: )r; r r r r r
r) r@ rA r/ �may_filt� must_filt�may_res�must_res�msgr r r rD � s2
���
�
� �z cmd_schema_attribute_show_oc.runri rE r r r r rk � rj rk c @ rR )�cmd_schema_objectclass_showz�Show details about an objectClass from the schema.
Schema objectClass definitions define and control the behaviour of directory
objects including what attributes they may contain. This displays the
details of an objectClass.
z%prog objectclass [options]r r r r r r r � objectclassNc C sp |� � }|�|�}t|t� ||d�}|�� } d�|�}
|j| tj|
d�} | D ]} |� | tj
�}
| j � |
� q&d S )Nr% zF(&(objectClass=classSchema)(|(lDAPDisplayName={0})(cn={0})(name={0})))rT )
r- r. r r r/ rY rZ r0 r[ rb rc r9 r: )r; rt r r r r
r) r@ rA r/ rd re rr rh r r r rD s
��
��z cmd_schema_objectclass_show.runri rE r r r r rs s ���rs c @ s2 e Zd ZdZi Ze� ed< e� ed< e� ed< dS )�cmd_schema_attributez4Query and manage attributes in the schema partition.r7 �show�show_ocN)rF rG rH rI � subcommandsr rS rk r r r r ru , s
ru c @ s e Zd ZdZi Ze� ed< dS )�cmd_schema_objectclassz7Query and manage objectclasses in the schema partition.rv N)rF rG rH rI rx rs r r r r ry 4 s ry c @ s( e Zd ZdZi Ze� ed< e� ed< dS )�
cmd_schemaz Schema querying and management.r rt N)rF rG rH rI rx ru ry r r r r rz : s
rz )r0 � samba.getopt�getoptrK �samba.ms_schemar �
samba.authr � samba.samdbr � samba.netcmdr r r r r rS rk rs ru ry rz r r r r �<module> s eL1*