File: //usr/lib/python3/dist-packages/samba/netcmd/__pycache__/visualize.cpython-310.pyc
o
�/a�l � @ s@ d dl Z d dlZd dlmZ d dlZd dlZd dlmZ d dl m
Z
d dl m Z d dl m
Z
mZmZmZ d dlmZ d dlmZ d dlmZmZ d d lmZ d d
lmZmZmZ d dl Z d dl Z d d l m Z m Z d d l!m"Z" d d
l#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+ eddde,ddd�eddde,ddd�edddd d d �ed d d!d"�ed#d$g d%�d&�ed'd(e-e�.� �d&�ed)d*d+d!d,d-�ed.d/d0d!d,d-�ed1d2d3d4d5d6�g Z/ed7d8dd9d d �ed:d;dd<d d �gZ0d=Z1G d>d?� d?e
�Z2d@dA� Z3dBdC� Z4dDdE� Z5G dFdG� dGe2�Z6G dHdI� dIe7�Z8G dJdK� dKe2�Z9G dLdM� dMe2�Z:G dNdO� dOe�Z;dS )P� N)� defaultdict)�dsdb)� nttime2unix)�Command� SuperCommand� CommandError�Option)�SamDB)� dot_graph)�distance_matrix� COLOUR_SETS)� full_matrix)�
SCOPE_BASE�
SCOPE_SUBTREE�LdbError)�KCC�ldif_import_export)�KCCError)�get_partition_maps�
get_partition�get_own_cursor�get_utdv�get_utdv_edges�get_utdv_distances�get_utdv_max_distance�get_kcc_and_dsasz-Hz--URLz%LDB URL for database or target server�URL�H)�help�type�metavar�destz-oz--outputzwrite here (default stdout)�FILE)r r r �defaultz
--distancez&Distance matrix graph output (default)�format�distance� store_const)r r! �const�actionz--utf8z Use utf-8 Unicode characters�
store_true)r r( z--colorzuse color (yes, no, auto))�yes�no�auto)r �choicesz--color-schemez,use this colour scheme (implies --color=yes)z-Sz--shorten-namesz don't print long common suffixesF)r r( r# z-rz--talk-to-remotezquery other DCs' databasesz--no-keyzomit the explanatory key� store_falseT�key)r r( r# r! z--dotzGraphviz dot output�dotz--xdotz attempt to call Graphviz xdot�xdot�__temp__c @ s\ e Zd ZdZdZejejejd�Z e
e Z dZ
dd� Zdd d
�Zd d � Zd
d� Zdd� ZdS )� GraphCommandz Base class for graphing commandsz%prog [options])� sambaopts� versionopts�credopts� c C s( |� � }|j|dd�}t|||d�}|S )NT��fallback_machine)�url� credentials�lp)� get_loadparm�get_credentialsr )�selfr r4 r6 r< �creds�samdbr7 r7 �8/usr/lib/python3/dist-packages/samba/netcmd/visualize.py�get_db_ s zGraphCommand.get_dbN�.dotc C sr |du s|dkrt || jd� dS |tu r)tjd|d�\}}t|d�}t�|� nt|d�}|�|� |�� |S )a� Decide whether we're dealing with a filename, a tempfile, or
stdout, and write accordingly.
:param s: the string to write
:param fn: a destination
:param suffix: suffix, if destination is a tempfile
If fn is None or "-", write to stdout.
If fn is visualize.TEMP_FILE, write to a temporary file
Otherwise fn should be a filename to write to.
N�-��file�samba-tool-visualise)�prefix�suffix�w) �print�outf� TEMP_FILE�tempfile�mkstemp�open�os�close�write)r? �s�fnrJ �fd�fr7 r7 rB rT e s
�
zGraphCommand.writec C s. |s|r
|� � �d�r
dS dS |dkrdS |S )z5Heuristics to work out what output format was wanted.rD r0 r% r1 )�lower�endswith)r? r$ �outputr7 r7 rB �calc_output_format� s z GraphCommand.calc_output_formatc C sL |d u r | � |t�}n| � ||�}tj�dd�}t�||g� t�|� d S )N�SAMBA_TOOL_XDOT_PATHz
/usr/bin/xdot)rT rN rR �environ�get�
subprocess�call�remove)r? rU r[ rV r1 r7 r7 rB � call_xdot� s zGraphCommand.call_xdotc C sn |dkrdS |dkr$t |t�r|dkrdS t| jd�s dS | j�� s$dS |du r5dtj�dd�v r3d S d
S |S ) z�Heuristics to work out the colour scheme for distance matrices.
Returning None means no colour, otherwise it sould be a colour
from graph.COLOUR_SETSr+ Nr, rE �isatty�256color�TERM� zxterm-256color-heatmap�ansi)�
isinstance�str�hasattrrM rd rR r^ r_ )r? �color� color_schemer[ r7 r7 rB �calc_distance_color_scheme� s
z'GraphCommand.calc_distance_color_scheme)NrD )�__name__�
__module__� __qualname__�__doc__�synopsis�options� SambaOptions�VersionOptions�CredentialsOptions�takes_optiongroups�COMMON_OPTIONS� DOT_OPTIONS�
takes_options�
takes_argsrC rT r\ rc rn r7 r7 r7 rB r3 S s �
r3 c C s t �d| �}|r
|�d�S | S )zFHelper function for sorting and grouping DNs by site, if
possible.z$CN=Servers,CN=\s*([^,]+)\s*,CN=Sites� )�re�search�group)�dn�mr7 r7 rB �get_dnstr_site� s
r� c C s t | d �S )z\Helper function for sorting and grouping lists of (DN, ...) tuples
by site, if possible.r )r� )�tr7 r7 rB �get_dnstrlist_site� s r� c C sP ddl m} t| �}t|t�r|�d�}t||��� dd� dd�d@ }d | S )
zQGenerate a randomish but consistent darkish colour based on the
given object.r )�md5�utf8N� � )�basei z#%06x)�hashlibr� rj ri �encode�int� hexdigest)�xr� �tmp_str�cr7 r7 rB � colour_hash� s
r� c @ s> e Zd ZdZee eddddd�g Z d d
d �ZdS )
�cmd_repsz repsFrom/repsTo from every DSA�-p� --partition�restrict to this partitionN�r r# FTr? c @ C s� |� � }|j|dd�}t|||�\}}|j}t|j|
�}
tdd� �}i }|D �]}t|dd�}|r�|jj|t dgd�}t
|d d d �}t d ||f t j
d
� z |�d | ||� W n tyx } zt d ||f t j
d
� W Y d }~q&d }~ww |�|||� n|�|||� |j||||d
� t|�� �} || kr�t dt j
d
� | | D ] } t d| t j
d
� q�t d| t j
d
� || D ] } t d| t j
d
� q�| D ]j} | dkr�| |kr�q�| dkr�| |kr�q�|�d| �} |�| � | |t
| j�< | �� \} }!| �� D ]\}"}#|
d u �s |"|
k�r||" d �||#f� q�|!�� D ]\}"}#|
d u �s*|"|
k�r5||" d �||#f� �q q�q&g g d�g g d�d�}$t|j�\}%}&|�� D ]K\}'}"|$�� D ]A\}(})|"|( D ]7\}}#|&�|'|'�}*|#jD ]}+|)d �||t
|+j � |*f� �ql|#j D ]}+|)d �|t
|+j � ||*f� �q��q_�qW�qO| � ||�dk�r| � | | |�} dd d �},|$�� D ]J\}(})|)�� D ]@\}-}.tt �}/|.D ]\}0}1}"|/|" �|0|1f� �q�|/�� D ] \}"}2t!d |2|
| ||t"d �}3d |,|- |" |3f }3| �#|3|� �qڐq��q�d S g }4g }5g }6t� }7i }8t� }9|$�� D ]b\}(}:|:�� D ]X\}-}.|.D ]P\}0}1}"|8�$|"t%|"|-f��};|(dk�r7d nd!}<|-dk�r@d"nd#}=|7�&|0� |7�&|1� |6�|0|1f� |4�|;� d$|<|=f }>|5�|>� |9�&|"d%|-�'� |;|>f� �q!�q�qg }?|�r�t(|9�D ]\}"}-};}<|?�d&d'|;|<f d(|"|-f f� �q|?�d)� |?�d*� t)|7|6d|4|5||?d+�}3|d,k�r�| �*|3|� d S | �#|3|� d S )-NTr8 c S s t t�S )N)r �listr7 r7 r7 rB �<lambda>� s z cmd_reps.run.<locals>.<lambda>)�readonly� dNSHostName��scope�attrsr z$Attempting to contact ldap://%s (%s)rF � ldap://%s� Could not contact ldap://%s (%s))�forced_local_dsazfound extra DSAs:z %sz(missing DSAs (known locally, not by %s):�othersr? �CN=NTDS Settings,�current�needed)�to�from)r� r� r� r� r% zRepsFrom objects for %szRepsTo objects for %s)r� r� )r� �colour�
shorten_names� generate_key�grouping_functionz
%s
%s�dotted�solidrQ �emptyzstyle="%s"; arrowhead=%s�repsFzcolor="%s"; %sz%s %s)Fz style="dotted"; arrowhead="open"zrepsFromTo is needed)Fz style="solid"; arrowhead="open"zrepsFromTo currently exists)�directed� edge_colors� edge_stylesr� � key_itemsr1 )+r= r> r �unix_nowr rA r r r r rj rL �sys�stderr�
load_samdbr �run�set� list_dsas�get_dsa�translate_ntdsconn�dsa_guid�get_rep_tables�items�appendr r_ � rep_repsFrom�source_dsa_obj_guid�
rep_repsTor\ rn r� r r� rT �
setdefaultr� �add�title�sortedr
rc )@r? r r[ r� r/ �talk_to_remoter4 r6 r5 �mode� partitionrl rm r� r$ r1 r< r@ � local_kcc�dsasr� �nc_reps�
guid_to_dnstr�dsa_dn�kcc�res�dns_name�e�dsas_from_here�dsa� remote_dn�
remote_dsar� �n�part�rep� all_edges�short_partitions�long_partitions�partname�state� edgelists�
short_name�r�header_strings� directionr� �
part_edges�srcr! �edgesrU � edge_coloursr� � dot_edges� dot_vertices� used_colours�key_set�edgelistr� � linestyle�arrow�styler� r7 r7 rB r� � s<
��� � �� �
�����
��
������������
���
�
�
z cmd_reps.run)NNFTFNNNr? NNNNNF) ro rp rq rr ry rz r r{ r� r7 r7 r7 rB r� � s ���r� c @ s e Zd ZdZdd� Zdd� ZdS )�NTDSConnzXCollects observation counts for NTDS connections, so we know
whether all DSAs agree.c C s" d| _ d| _d| _|| _|| _d S )Nr F)� observations� src_attests� dest_attestsr� r! )r? r� r! r7 r7 rB �__init__� s
zNTDSConn.__init__c C s6 | j d7 _ || jkrd| _|| jkrd| _d S d S )Nr} T)r� r� r� r! r� )r? �attesterr7 r7 rB �attest� s
�zNTDSConn.attestN)ro rp rq rr r� r� r7 r7 r7 rB r� � s r� c @ sF e Zd ZdZee edddd�g Zdd� Z d d
d �Z dS )
� cmd_ntdsconnz Draw the NTDSConnection graphz --importldifz#graph from samba_kcc generated ldifNr� c C s2 t jdd�}tj�|d�}|| _t�|||�}|S )NrH )rI z imported.ldb)rO �mkdtemprR �path�join�_tmp_fn_to_deleter �
ldif_to_samdb)r? �ldifr< �drV rA r7 r7 rB �import_ldif_db� s
zcmd_ntdsconn.import_ldif_dbFTc ; C sp |� � }|
d u r|j|dd�}nd }| �|
|�}t|||�\}}|j�dd�d }t� }g }|D ]�}|rx|jj|t dgd�}|d d d }z | �
d| ||�}W n t yn } zt d ||f t
jd
� W Y d }~q0d }~ww |�� }|�� } n
| �
|||�}d | }|} |j|t d gd�}|d d d d
k} |�|| r�dndf� |j| tddgdgd�}|D ] } t| j�} | | �d�d d � } |�t| d d �| |f� q�q0|
r�|| jkr�t�|� t�tj� |�� i }!|D ] \}"}#}$|"|#f}%|%|!v r�|!|% }nt |%� }||!|%< |� |$� q�t t |�� \}}&| �!| |�dk�r�| �"| |
|�}
t#|
}'|'�$dd�}(|'�$dd�})g }*d|&v �r@|*�d� |�sL|!�%� }+d| },nwg }+g }-g }.g }/|!�&� D ])\}}0|0j'�rp|+�|� |0j(�sn|-�|� �qX|0j(�r{|.�|� �qX|/�|� �qXd},|/�r�|*�d� |/D ]
}|*�d| � �q�|.�r�|*�d � |.D ]
}|*�d| � �q�|-�r�|*�d � |-D ]
}|*�d| � �q�t)||+| |
||t*|&d �}1d�+|*�}*|*�r�d |(|)|*f }*| �,d |,|1|*f |� d S g }2g }3g }4g }5t-|�}6t |!�&� �D ]T\}%}|2�|%� |j.|6k�s|�s|3�d!� |4�d� �q�|j'�r6|4�d� |j(�r/|3�d"� �q�|3�d#� �q�|j(�rF|3�d$� |4�d%� �q�|3�d$� |4�d&� �q�g }7|�r�|7�d'� d(D ]\}8}9|8|3v �rq|7�d)d*|8 |9f� �q^d+D ]\}:}9|:|4v �r�|7�d)d,|: |9f� �qu|�r�d-},nd| },t/t |�|2d|,|3|5|4||7d.� }1| d/k�r�| �0|1|� d S | �,|1|� d S )0NTr8 �,r} r� r� r r� r� rF r� z msDS-isRODC�TRUE�RODCrg z (objectClass=nTDSConnection)�
fromServerzsearch_options:0:2)r� �
expressionr� �controlsr% �header�resetz/No outbound connections are expected from RODCsz NTDS Connections known to %sz-NTDS Connections known to each destination DCzTThe following connections are alleged by DCs other than the source and destination:
z %s -> %s
zbThe following connections are alleged by DCs other than the destination but including the source:
zRThe following connections (included in the chart) are not known to the source DC:
)r� r� r� r� r� � row_commentsz
%sNOTES%s
%sz
%s
%s
%sz#000000�#0000ff�#cc00ffz#ff0000� style=dashed� style=dotted)Fzcolor="#000000"zNTDS Connection))r
zmissing from some DCs)r zmissing from source DCFz
color="%s"))r zunknown to destination)r
z!unknown to source and destinationzcolor="#ff0000; %s"zNTDS Connections)r� r� r� � edge_labelsr� r� r� r1 )1r= r> r r � my_dsa_dnstr�splitr� rA r r rC r rL r� r� �get_dsServiceName� domain_dnr� r rj r� �indexr� r� rR rb �rmdirr� �dirnamer� r� �zipr� r\ rn r r_ �keysr� r� r� r r� r� rT �lenr� r
rc );r? r r[ r� r/ r� r4 r6 r5 rl rm r� r$ �
importldifr1 r< r@ r� r� � local_dsa_dn�vertices�attested_edgesr� r� r� rA r� �ntds_dnr� �is_rodc�msg�msgdn�dest_dnr� r� r! r� �k� rodc_status�colours�c_header�c_reset�epilog� graph_edgesr� �
source_denies� dest_denies� both_deny�connrU r� r� r� r � n_serversr� r� �descr� r7 r7 rB r� � sZ � � � ��
��
��
�
�
�
���
�
��
�
zcmd_ntdsconn.run)NNFTFNNNNNNNNF)
ro rp rq rr ry rz r r{ r r� r7 r7 r7 rB r� � s ���r� c @ sJ e Zd ZdZeeddddd�edded d
�g Z dd
d�ZdS )�cmd_uptodatenessz visualize uptodateness vectorsr� r� r� Nr� z --max-digits� z,display this many digits of out-of-date-ness)r# r r FTc
C s |s t d| jd� d S |�� }|j|dd�}t|||�\}}|j| _t| j|�}t| j�\}}| �| |
|�}
|� � D ]G\}}||d fvrEq:t
|||||�}t ||�}t |�}t
|tt|���} | dk red} d| } t|| |
||t| | ddd �
} | �d
|| f |� q:d S ) Nz>this won't work without talking to the remote servers (use -r)rF Tr8 r} �
�DCzout-of-date-ness) r� r� r� r� r� � colour_scale�digits�ylabel�xlabelz
%s
%s)rL rM r= r> r rA r r rn r� r r r �minr rj r
r� rT ) r? r r[ r� r/ r� r4 r6 r5 rl rm r� r$ r r1 r� �
max_digitsr< r@ r� r� r� r� � part_name�part_dn�
utdv_edges� distances� max_distancer4 �c_scalerU r7 r7 rB r� � sL � �
� �zcmd_uptodateness.run)NNFTFNNNNNFNNFNr0 ) ro rp rq rr ry r r� r{ r� r7 r7 r7 rB r/ � s" ����r/ c @ sD e Zd ZdZi Ze� �� D ]\ZZe� d�r e� eedd� < q
dS )�
cmd_visualizez:Produces graphical representations of Samba network state.�cmd_� N)
ro rp rq rr � subcommands�globalsr� r" �v�
startswithr7 r7 r7 rB r? � s
��r? )<rR r� � collectionsr r` rO � samba.getopt�getoptrt �sambar r � samba.netcmdr r r r � samba.samdbr � samba.graphr
r r r
�ldbr r r �timer~ � samba.kccr r �samba.kcc.kcc_utilsr �samba.uptodatenessr r r r r r r r rj r� r ry rz rN r3 r� r� r� r� �objectr� r� r/ r? r7 r7 r7 rB �<module> s� ( �����
��������^
5 p?