Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/netcmd/domain/__pycache__/backup.cpython-36.pyc
Ðазад
3 �I�dl� � @ s� d dl Z d dlZd dlZd dlZd dlZd dlZd dlZd dlZd dlj Z d dl m Z m Z d dlZd dlmZ d dlmZ d dlmZ d dlmZmZmZ d dlmZ d dlm Z m Z m Z d d l m Z d d l!m"Z"m#Z# d d l$m%Z%m&Z&m'Z' d d lm(Z( d d l)m*Z* d dl+m,Z,m-Z- d dl.m/Z/ d dl0m1Z1 d dl+m2Z2 d dl3m4Z4 d dl5Z5d dl+m6Z6m7Z7m8Z8 d dl9m:Z:m;Z;m<Z< d dl=m>Z> d dl?m@Z@ d dlAZAd dlBmCZC d dlmDZD d dlEmFZF d dlGmHZH d dlImJZJ d d lmKZL d d � ZMd d � ZNd!d"� ZOd#d$� ZPd%d&� ZQd9d'd(�ZRd)d*� ZSd+d,� ZTd-d.� ZUG d/d0� d0ejVjW�ZXG d1d2� d2e*�ZYG d3d4� d4ejVjW�ZZG d5d6� d6ejVjW�Z[G d7d8� d8ejVj\�Z]dS ):� N)�SamDB�get_default_backend_store)�LdbError)�libsmb_samba_internal)�param)� backup_online�backup_restore�backup_offline)�system_session)� DCJoinContext� join_clone�DCCloneAndRenameContext)�dom_sid)�Option� CommandError)�misc�security�drsblobs)�Ldb)�cmd_fsmo_seize)� make_smbconf� DEFAULTSITE)� update_krbtgt_account_password)� remove_dc)�secretsdb_self_join)�dbcheck)� guess_names�determine_host_ip�determine_host_ip6)�fill_dns_data_partitions�get_dnsadmins_sid�get_domainguid)�tdb_copy)�mdb_copy)�CalledProcessError)�sites)�_dsdb_load_udv_v2)�ndr_pack)�SMB_SIGNING_REQUIRED)� safe_tarfilec C s y | j � }W n@ tk rL } z$|jd� |jd� td|��W Y d d }~X nX t| j� �}t|�d t|� }yN| jtj d| g ddgd�}t |�d kr�td | ��td ||d j f ��W n: tjk r� } z |j \}} |tj kr� W Y d d }~X nX t|�d t|� S ) Nz}A SID could not be allocated for restoring the domain. Either no RID Set was found on this DC, or the RID Set was not usable.z�To initialise this DC's RID pools, obtain a RID Set from this domain's RID master, or run samba-tool dbcheck to fix the existing RID Set.zCannot create backup�-z<SID=%s>zshow_deleted:1zshow_recycled:1)�scope�base�attrs�controls� z]Cannot create backup - this DC's RID pool is corrupt, the next SID (%s) appears to be in use.z�Cannot create backup - this DC's RID pool is corrupt, the next SID %s points to existing object %s. Please run samba-tool dbcheck on the source DC.r )Z next_free_ridr �infor r �get_domain_sid�str�search�ldb� SCOPE_BASE�len�dn�args�ERR_NO_SUCH_OBJECT) �samdb�logger�rid�err�sidZsid_for_restore�res�e�enum�emsg� rC � /usr/lib64/python3.6/backup.py�get_sid_for_restore@ s0 rE c C sF t j� }|j|j� |j� }|jt� tj| d||d�}|j|� |S )z7Returns an SMB connection to the sysvol share on the DC�sysvol)�lp�creds) �s3paramZ get_context�loadZ configfileZget_smb_signingZset_smb_signingr( �libsmbZConn)�serverrG rH Zs3_lpZsaved_signing_stateZconnrC rC rD �smb_sysvol_connp s rM c C s t j j� j� jdd�S )N�:r* )�datetime�nowZ isoformat�replacerC rC rC rD � get_timestamp s rR c C s d||f }t jj| |�S )Nzsamba-backup-%s-%s.tar.bz2)�os�path�join)� targetdir�name�time_str�filenamerC rC rD �backup_filepath� s rZ c C s4 | j d| � tj|d�}|j|dd� |j� d S )NzCreating backup file %s...zw:bz2z./)�arcname)r0 �tarfile�open�add�close)r; �tmpdirrZ �tfrC rC rD �create_backup_tar� s rb c C s� t tjj| d�d�}z�tjj� jd�}|jd| � |jd|jd� � |jd||f � |jd|jd �|jd �j � f � |jd t |� � |r�|jd | � W d |j � X d S ) Nz backup.txt�wz%Y-%b-%d %H:%M:%SzBackup created %s z Using samba-tool version: %s z server stringz Domain %s backup, using DC '%s' z/Backup for domain %s (NetBIOS), %s (DNS realm) Z workgroup�realmz#Backup contains domain secrets: %s z%s ) r] rS rT rU rO rP Zstrftime�write�get�lowerr2 r_ )rV rG � backup_typerL �include_secretsZ extra_info�frX rC rC rD �create_log_file� s rk c C s8 t j� }t j| d�|_t j|t j|�||< | j|� d S )Nz @SAMBA_DSDB)r4 �Message�Dnr7 �MessageElement� FLAG_MOD_ADD�modify)r: Zmarker�value�mrC rC rD �add_backup_marker� s rs c C sR |d krt d��tjj|�s6| jd| � tj|� ntjj|�sNt d| ��d S )NzTarget directory requiredzCreating targetdir %s...z%s is not a directory)r rS rT �existsr0 �makedirs�isdir)r; rV rC rC rD �check_targetdir� s rw c C s� |j � }d|tjf }d|f }|j|j� tj|d�}t|d d �}tj dd�}| j d||f � | j d | � |j ||d |d � d S ) zASets a randomly generated password for the backup DB's admin userz(objectsid=%s-%s)z(&(objectClass=user)%s))r, r+ � expressionr Zsamaccountname� � z$Setting %s password in backup to: %sz7Run 'samba-tool user setpassword %s' after restoring DBF)Zforce_change_at_next_login�usernameN) r1 r ZDOMAIN_RID_ADMINISTRATORr3 � domain_dnr4 � SCOPE_SUBTREEr2 �sambaZgenerate_random_passwordr0 Z setpassword)r; r: � domainsidZ match_admin� search_exprr? r{ Z adminpassrC rC rD �set_admin_password� s r� c @ sp e Zd ZdZdZejejd�Ze dde d�e de dd �e d d d d d�e dddddgde � d�gZ ddd�Z dS )�cmd_domain_backup_onlinea� Copy a running DC's current DB into a backup tar file. Takes a backup copy of the current domain from a running DC. If the domain were to undergo a catastrophic failure, then the backup file can be used to recover the domain. The backup created is similar to the DB that a new DC would receive when it joins the domain. Note that: - it's recommended to run 'samba-tool dbcheck' before taking a backup-file and fix any errors it reports. - all the domain's secrets are included in the backup file. - although the DB contents can be untarred and examined manually, you need to run 'samba-tool domain backup restore' before you can start a Samba DC from the backup file.z6%prog --server=<DC-to-backup> --targetdir=<output-dir>)� sambaopts�credoptsz--serverzThe DC to backup)�help�typez --targetdirz%Directory to write the backup file to)r� r� z --no-secrets� store_trueFz-Exclude secret values from the backup created)�action�defaultr� z--backend-store�choice� BACKENDSTORE�tdb�mdbz7Specify the database backend to be used (default is %s))r� �metavar�choicesr� Nc C sj | j � }|jtj� |j� }|j|�} |d kr6td��t||� tj |d�} | } �zt || || |d| |d�} | j } ~ t d| | t � |d�}t||�}|j� }|jd� tjj| d�}t||| �}t|||j� � tj| j� t | jt � |tj d �}t � }t |d |� t |d |� t |d d � |�r.t ||� t |||�}t!| |d || � t"|| |� W d tj| � X d S )NzServer required)�dir�SAMBA_INTERNAL)r; rH rG ri rL � dns_backendrV � backend_storezldap://)�url� credentials� session_inforG z$Backing up sysvol files (via SMB)...z sysvol.tar.gz)r� r� rG �flags� backupDate� sidForRestore� backupType�online)#� get_logger�setLevel�logging�DEBUG� get_loadparm�get_credentialsr rw �tempfile�mkdtempr �pathsr r rE �domain_dns_namer0 rS rT rU rM r r1 �shutil�rmtreerF r: r4 �FLG_DONT_CREATE_DBrR rs r� rZ rk rb )�selfr� r� rL rV � no_secretsr� r; rG rH r` ri �ctxr� � remote_sam�new_sidrd � sysvol_tar�smb_connr: rX � backup_filerC rC rD �run� sJ z cmd_domain_backup_online.run)NNNNFN)�__name__� __module__� __qualname__�__doc__�synopsis�options� SambaOptions�CredentialsOptions�takes_optiongroupsr r2 r � takes_optionsr� rC rC rC rD r� � s r� c @ s� e Zd ZdZdZedded�edded�edd ed�ed d d d d�edd ddd�edded�gZej ej d�Z dd� Z dd� Z dd� Zdd � Zd d � Zd d � Zd$d"d#�Zd!S )%�cmd_domain_backup_restorea� Restore the domain's DB from a backup-file. This restores a previously backed up copy of the domain's DB on a new DC. Note that the restored DB will not contain the original DC that the backup was taken from (or any other DCs in the original domain). Only the new DC (specified by --newservername) will be present in the restored DB. Samba can then be started against the restored DB. Any existing DCs for the domain should be shutdown before the new DC is started. Other DCs can then be joined to the new DC to recover the network. Note that this command should be run as the root user - it will fail otherwise.zQ%prog --backup-file=<tar-file> --targetdir=<output-dir> --newservername=<DC-name>z --backup-filezPath to backup file)r� r� z --targetdirzPath to write toz--newservernamezName for new serverz --host-ip�stringZ IPADDRESSzset IPv4 ipaddress)r� r� r� z --host-ip6Z IP6ADDRESSzset IPv6 ipaddressz--sitez Site to add the new server in)r� r� c C s� t |�}|j} |j� j� } |jj� } | } |jj� } t|j� �}t || �}t || �}t |||�}t |||�}|dkr�|dkr�t d��|jd| � |jd� t|||| | | | | |||||dd� dS )zi Registers the new realm's DNS objects when a renamed domain backup is restored. Nz+Please specify a host-ip for the new serverzDNS realm was renamed to %sz*Populating DNS partitions for new realm...F)Zadd_root)r �domaindn�get_root_basedn�get_linearized� dnsdomainrg � netbiosnamer r1 r r! r r r r0 r )r� r; r: rG Zntdsguid�host_ip�host_ip6�site�namesr� �forestdnr� Z dnsforestZhostnamer Z dnsadmins_sidZ domainguidrC rC rD �register_dns_zoneT s& z+cmd_domain_backup_restore.register_dns_zonec C sj |j � t|ddddd�}t|dd� ddg}t|dd� |d g7 }d }d |g}|j||d � |j� d S )z3Fixes attributes that reference the old/removed DCsTF)�quiet�fix�yes�in_transaction�(fix_all_old_dn_string_component_mismatch�ALLZlastKnownParentZinterSiteTopologyGeneratorZ!remove_plausible_deleted_DN_linkszmsDS-NC-Replica-Locationszsearch_options:1:2zshow_deleted:1)r. r- N)�transaction_startr �setattr�check_database�transaction_commit)r� r: �chkr- �cross_ncs_ctrlr. rC rC rD �fix_old_dc_referencesu s z/cmd_domain_backup_restore.fix_old_dc_referencesc C sV t }dj|�}|j|j� tj|d�}t|�dkrR|jdj|�� tj ||j� |� |S )z5Creates the default site, if it doesn't already existz (&(cn={0})(objectclass=site)))r+ rx r zCreating default site '{0}') r �formatr3 �get_config_basednr4 r} r6 r0 r% Z create_site)r� r: r; Zsitenamer� r? rC rC rD �create_default_site� s z-cmd_domain_backup_restore.create_default_sitec C sx ddddg}|j tj|d�tj|d�}tj� }tj|d�|_x,|D ]$}||d krBtjg tj|�||< qBW |j|� dS ) z-Remove DB markers added by the backup processr� � backupRenamer� r� z @SAMBA_DSDB)r, r+ r- r N) r3 r4 rm r5 rl r7 rn �FLAG_MOD_DELETErp )r� r: Zmarkersr? rr �attrrC rC rD �remove_backup_markers� s z/cmd_domain_backup_restore.remove_backup_markersc C sV |j tj|d�tjddgd�}d|d kr<t|d d �}nd|d krNd}nd}|S )Nz @SAMBA_DSDBr� r� )r, r+ r- r �renamer� )r3 r4 rm r5 r2 )r� r: r? rh rC rC rD �get_backup_type� s z)cmd_domain_backup_restore.get_backup_typec C sz xt|D ]l}t ||�}tj� }d|_||j_t|�|j_t|�}t j � }t j ||�|_ t j |t jd�|d< |j|� qW dS )z?Ensures the UTDV used by DRS is correct after an offline backup� ZreplUpToDateVectorN)r& r ZreplUpToDateVectorBlob�versionZctrZcursorsr6 �countr' r4 rl rm r7 rn �FLAG_MOD_REPLACErp )r� r: Z partitions�ncZutdvZ utdv_blobZ new_valuerr rC rC rD �save_uptodate_vectors� s z/cmd_domain_backup_restore.save_uptodate_vectorsNc . % C s� |ot jj|�std��|d kr(td��t jj|�rVt j|�rVt jjd�dkrVtd��|sbtd��tj� } | j tj � | j tj t j�� |j� }t jj|�}tj|�} | j|� | j� t jj|dd�} tj| | d � |j� } | �r | jd | � tj| | � tjj � } | j | � t jj|d �}t jj|d �}t |t � | t j!d �}| j"|�}|d k�rt| j#|| �}| jdj$|�� |j%dt j&dgd�}dd� |d jd�D �}|dk�r�| j'||� |j(| �}t)| || |||d�}||_*||_+tj,j-tj,j.B |_/| jd� t0| ||j1|j2|| dd� |j%t j3|d�t j&dgd�}|d jd�d }| jd t4|� � y|j5t6t4|��d � W �n$ t7k �r� } �z|j8\}}|t j9k�r�� g }y*|j%t j3|d | �t j&d gd d!gd"�}W n< t7k �r } z |j8\} } | t j:k�r�� W Y d d }~X nX t;|�d#k�r� |j<d |d d d �} | j=d$�} | j>d%| � | j>d&� | j>d'� | j>d(| � td)|d j?|| f ��W Y d d }~X nX t j@� } t j3|d*�| _?t4|jA�} t jBd+| t jCd,�| d,< |jD| � |d-k�r�| jE| || |jA|||� t jj|d.�}!tF|!t � | t j!d/�}"tG|"|j1|j2|jH|jI|jJ|jK|jLtMjNd0� |jO� }#tjP|jQ� �}$d1|#fd2|$fg}%x2|%D ]*\}&}'|'|k�rr| jR|&|d d d d3d4� �qrW x dED ]}&| jS|&|d3d4� �q�W d:}(|j%|jT� t jU|(d;�}x6|D ].} t4| jd<�d �})|)|k�r�tV|| |)� �q�W xV|D ]N}*t j@� }+t j3||*�|+_?t jBg t jCd=�|+d=< t jBg t jCd>�|+d>< |jD|+� �qW tW|� tW|� t jj|d?�},| jd@dA�}-t jj|-��s�t jX|-� tY|,|-|| � t jZ|,� | jdB� | j[|� | j\|� | jdC| � | jdD� d S )FNzBackup file not found.z!Please specify a target directoryZSAMBA_SELFTEST�1z Target directory is not emptyzServer name required�etczsmb.confz.origz&Using %s as restored domain's smb.conf�privatezsam.ldb)r� r� rG r� zAdding new DC to site '{0}'� ZnamingContexts)r, r+ r- c S s g | ] }t |��qS rC )r2 )�.0�rrC rC rD � <listcomp> s z1cmd_domain_backup_restore.run.<locals>.<listcomp>r �offline)rH rG r� Zforced_local_samdbZ netbios_namez#Updating basic smb.conf settings...z"active directory domain controller)rG Z serverrolez @SAMBA_DSDBr� zCreating account with SID: )Z specified_sidz<SID=%s>Z objectGUIDzshow_deleted:0zshow_recycled:0)r, r+ r- r. r/ zutf-8z|The RID Pool on the source DC for the backup in %s may be corrupt or in conflict with SIDs already allocated in the domain. zaRunning 'samba-tool dbcheck' on the source DC (and obtaining a new backup) may correct the issue.z@Alternatively please obtain a new backup against a different DC.zVThe SID we wish to use (%s) is recorded in @SAMBA_DSDB as the sidForRestore attribute.z�Domain restore failed because there is already an existing object (%s) with SID %s and objectGUID %s. This conflicts with the new DC account we want to add for the restored domain. z@ROOTDSEz <GUID=%s>Z dsServiceNamer� z secrets.ldb)r� rG r� )Zdomainrd r� r� r Z machinepass�key_version_numberZsecure_channel_typeZ domaindnsZ forestdnsT)�forcer< �pdc�naming�infrastructure�schemaz*(&(objectClass=Server)(serverReference=*)))r+ rx �cnZrepsFromZrepsToz sysvol.tar.gzrT rF z4Fixing up any remaining references to the old DCs...z'Backup file successfully restored to %szEPlease check the smb.conf settings are correct before starting samba.)r< r� r� r� r� )]rS rT rt r �listdir�environrf r� � getLoggerr� r� � addHandler� StreamHandler�sys�stdout�upper�abspathr\ r] Z extractallr_ rU r� �copyfileZget_loadparm_pathr0 r~ r ZLoadParmrJ r r r4 r� r� r� r� r3 r5 r� r� r Znc_listZ full_nc_listZdsdbZUF_SERVER_TRUST_ACCOUNTZUF_TRUSTED_FOR_DELEGATIONZuserAccountControlr � domain_namerd rm r2 Zjoin_add_objectsr r r8 ZERR_CONSTRAINT_VIOLATIONr9 r6 Zschema_format_value�decode�errorr7 rl � ntds_guidrn r� rp r� r r r� ZmynameZdomsidZ acct_passr� r Z SEC_CHAN_BDCr| �dn_from_dns_nameZforest_dns_nameZseize_dns_roleZ seize_roler� r} r r ru r �remover� r� ).r� r� r� r� rV Z newservernamer� r� r� r; ra �smbconfZ cli_smbconfrG � private_dirZ samdb_pathr: rh r? ZncsrH r� r> r@ rA rB Zdup_resZdup_eZdup_enum�_Z objectguidrr r � secrets_pathZ secrets_ldbr| Z forest_dnZ dns_rolesZroler7 r� r� r� �msgr� Zdest_sysvol_dirrC rC rD r� � s & z cmd_domain_backup_restore.run)NNNNNNNN)r� r� r� r� r� r r2 r� r� r� r� r� r� r� r� r� r� r� r� rC rC rC rD r� 2 s* ! r� c @ s� e Zd ZdZdZejejd�Ze dde d�e dde d�e d d d d d �e dd d dd �e dddddgde � d�gZ ddgZ dd� Zdd � Zd d � Zd d � Zd$d"d#�Zd!S )%�cmd_domain_backup_renamea� Copy a running DC's DB to backup file, renaming the domain in the process. Where <new-domain> is the new domain's NetBIOS name, and <new-dnsrealm> is the new domain's realm in DNS form. This is similar to 'samba-tool backup online' in that it clones the DB of a running DC. However, this option also renames all the domain entries in the DB. Renaming the domain makes it possible to restore and start a new Samba DC without it interfering with the existing Samba domain. In other words, you could use this option to clone your production samba domain and restore it to a separate pre-production environment that won't overlap or interfere with the existing production Samba domain. Note that: - it's recommended to run 'samba-tool dbcheck' before taking a backup-file and fix any errors it reports. - all the domain's secrets are included in the backup file. - although the DB contents can be untarred and examined manually, you need to run 'samba-tool domain backup restore' before you can start a Samba DC from the backup file. - GPO and sysvol information will still refer to the old realm and will need to be updated manually. - if you specify 'keep-dns-realm', then the DNS records will need updating in order to work (they will still refer to the old DC's IP instead of the new DC's address). - we recommend that you only use this option if you know what you're doing. zR%prog <new-domain> <new-dnsrealm> --server=<DC-to-backup> --targetdir=<output-dir>)r� r� z--serverzThe DC to backup)r� r� z --targetdirz"Directory to write the backup filez--keep-dns-realmr� Fz6Retain the DNS entries for the old realm in the backup)r� r� r� z --no-secretsz-Exclude secret values from the backup createdz--backend-storer� r� r� r� z7Specify the database backend to be used (default is %s))r� r� r� r� �new_domain_name� new_dns_realmc C s� |j � }|j|tjdgdd�}|j� }x�|D ]�}x�|d D ]�} t| �} |j} || kr:tjd| || �} |j d| | f � tj � } | | _tj | tj d�| d< |j | � |r:|j d| | f � tj | tjd�| d< |j | � q:W q,W dS )z?Updates dnsRoot for the partition objects to reflect the renameZdnsRootz$(&(objectClass=crossRef)(dnsRoot=*)))r, r+ r- rx z%s$zAdding %s dnsRoot to %szRemoving %s dnsRoot from %sN)�get_partitions_dnr3 r4 �SCOPE_ONELEVELr� r2 r7 �re�subr0 rl rn ro rp r� ) r� r; r: � old_realm�delete_old_dns� partitions_dnr? Z new_realmZres_msgZdns_rootr7 Z new_dns_rootrr rC rC rD �update_dns_root� s4 z(cmd_domain_backup_rename.update_dns_rootc C s� |j � }tjt|��}|j� }|j|tjdgd| d�}|jd| � tj� }|d j |_ tj |tj d�|d< |j |� d||f } |jd|d j | f � |j |d j | dgd � d S ) z?Renames the domain partition object and updates its nETBIOSNameZ nETBIOSNamez ncName=%s)r, r+ r- rx z+Changing backup domain's NetBIOS name to %sr zCN=%s,%szRenaming %s --> %szrelax:0)r. N)�get_default_basednr4 Z binary_encoder2 r r3 r r0 rl r7 rn r� rp r� ) r� r; r: Znew_netbios_nameZbase_dnZnc_namer r? rr Znew_dnrC rC rD �rename_domain_partition s" z0cmd_domain_backup_rename.rename_domain_partitionc C sh |j � }d||f }|jd| � |j|dg� |j� j� }d||f }|jd| � |j|dg� d S )Nz*DC=%s,CN=MicrosoftDNS,DC=DomainDnsZones,%szDeleting old DNS zone %sz tree_delete:1z1DC=_msdcs.%s,CN=MicrosoftDNS,DC=ForestDnsZones,%s)r r0 �deleter� r� )r� r; r: r Zbasednr7 r� rC rC rD �delete_old_dns_zones+ s z-cmd_domain_backup_rename.delete_old_dns_zonesc C sJ |j � t|ddddd�}t|dd� d}d|g}|j|d� |j� d S ) z@Fixes attributes (i.e. objectCategory) that still use the old DNTF)r� r� r� r� r� r� zsearch_options:1:2zshow_deleted:1)r. N)r� r r� r� r� )r� r: r� r� r. rC rC rD �fix_old_dn_attributes8 s z.cmd_domain_backup_rename.fix_old_dn_attributesNc C sD | j � } | jtj� |j� } |j| �} |d kr6td��t| |� | } |j� }|j � }t j |�}| j d| � | j d| � | j d| � t j|d�}| }t|||| | | |d||| d� }|j}||kr�tj|� td��|j}||kr�tj|� td ��|j� |`|j}td | | t� | d �}t|| �}tjj |d �}t || | �}t |||j � � | j |j!� t|j"t� | t#j$d �}t%� }t&|d|� t&|d|� t&|d|� t&|dd� | j'| ||| � | j(| ||� | �r�| j)| ||� | j d� | j*|� |�rt+| |� t,|||�}t-|| d||d||f � t.| ||� tj|� d S )NzServer requiredz"New realm for backed up domain: %sz$New base DN for backed up domain: %szNew domain NetBIOS name: %s)r� r� )r; rH rG ri r� rL rV r� z+Cannot use the current domain NetBIOS name.z(Cannot use the current domain DNS realm.zldap://)r� r� r� rG z sysvol.tar.gz)r� r� rG r� r� r� r� r� r� z$Fixing DN attributes after rename...z,Original domain %s (NetBIOS), %s (DNS realm))/r� r� r� �INFOr� r� r rw rg r� r~ r r0 r� r� r r� r� r� rd Zdo_joinZ local_samdbr� r r rE rS rT rU rM r r1 rJ r r: r4 r� rR rs r r r r r� rZ rk rb ) r� r r r� r� rL rV Zkeep_dns_realmr� r� r; rG rH r Z new_base_dnr` ri r� Z old_domainr r� r� r� r� r� r: rX r� rC rC rD r� F s| z cmd_domain_backup_rename.run)NNNNFFN)r� r� r� r� r� r� r� r� r� r r2 r r� Z takes_argsr r r r r� rC rC rC rD r � s. ' r c @ sd e Zd ZdZdZdejiZedde d�gZ dZ dd � Z d d � Z d d � Zdd� Zdd� Zddd�ZdS )�cmd_domain_backup_offlinea� Backup the local domain directories safely into a tar file. Takes a backup copy of the current domain from the local files on disk, with proper locking of the DB to ensure consistency. If the domain were to undergo a catastrophic failure, then the backup file can be used to recover the domain. An offline backup differs to an online backup in the following ways: - a backup can be created even if the DC isn't currently running. - includes non-replicated attributes that an online backup wouldn't store. - takes a copy of the raw database files, which has the risk that any hidden problems in the DB are preserved in the backup.z%prog [options]r� z --targetdirzOutput directory (required))r� r� z .bak-offlinec C s� || j }yt||dd� W n� tk r� } zZytj|� W n@ tk r| } z$t|d�rh|jtjkrhd S |�W Y d d }~X nX |�W Y d d }~X n. t k r� } zt |j |��W Y d d }~X nX t j j|�s�d}t |j|���d S )NT)�readonly�errnoz1tdbbackup said backup succeeded but {0} not found)� backup_extr" r$ r� r] � Exception�hasattrr ZEINVAL�FileNotFoundErrorr �strerrorrS rT rt r� )r� rT Z backup_pathZcopy_errr@ �srC rC rD �offline_tdb_copy� s z*cmd_domain_backup_offline.offline_tdb_copyc C s t ||| j � d S )N)r# r )r� rT rC rC rD �offline_mdb_copy� s z*cmd_domain_backup_offline.offline_mdb_copyc C s` t jj|d�}t|d |tjd�}|jd| � |j� | j|d � | j|d � |j � d S )NZsecretsz.ldb)rG r� zStarting transaction on z.tdb) rS rT rU r r4 r� r0 r� r# �transaction_cancel)r� r rG r; r Z secrets_objrC rC rD �backup_secrets� s z(cmd_domain_backup_offline.backup_secretsc C sV t jj|d�}d}|jdtj|gd�}||d koHt|d | d �dk}d } d } |rp|jd� | j} |j � } n |jd| � | j } |j � |jd | � | j |� |d } x�t j | �D ]z} t jj| | �} | j d �r�|jd | � | | � q�| j d ��r|jd| � | j | � q�|jd| � tj| | | j � q�W t||�} |�rJ~ n|j� | S )Nzsam.ldbZ backendStorez @PARTITION)r, r+ r- r r� z1MDB backend detected. Using mdb backup function.zStarting transaction on z backing up z.dz.ldbz" backing up locked/related file z.tdbz$ tdbbackup of locked/related file z copying locked/related file )rS rT rU r3 r4 r5 r2 r0 r$ Zsearch_iteratorr# r� r� �endswithr� r� r rE r% )r� r r: rG r; Z sam_ldb_pathZ store_labelr? Z mdb_backendZ res_iteratorZ copy_functionZ sam_ldb_dZsam_filer> rC rC rD �backup_smb_dbs� s@ $ z(cmd_domain_backup_offline.backup_smb_dbsc st |j |jtjj|j�d�}� fdd�|j� D �}|d \}}t|�dkr\t|dd� d�\}}|� t|�d � 7 }|S ) N)r� �stater� c s" g | ]\}}� j |�r||f�qS rC )� startswith)r� r �p)rT rC rD r� 7 s z:cmd_domain_backup_offline.get_arc_path.<locals>.<listcomp>r r/ c S s t | d �S )Nr/ )r6 )r+ rC rC rD �<lambda>> s z8cmd_domain_backup_offline.get_arc_path.<locals>.<lambda>)�key) r � state_dirrS rT �dirnamer �itemsr6 �max)r� rT Z conf_paths� backup_dirsZ matching_dirs�arc_pathZfs_pathrC )rT rD � get_arc_path3 s z&cmd_domain_backup_offline.get_arc_pathNc C s� t j� }|jt j� |jt jtj�� |j� }t j j ||j d��}|j oTtjj|j �sp|jdj|j �� td+��t||� |j|jtjj|j�g}|jdjdj|��� g }t� }�x$|D �]} �xtj | �D �]\} } } | j |j �r�q�| j d�p�d| k� r�q�| j tjj|j d ���rq�x�| D ]�} tjj| | �}ytj!|d d �}W n* t"k �rl |j#|� d �� �w Y nX |j$|j%f|k�r��q | j | j&��r�tj'|� �q | j d��r��q |j(|� |j)|j$|j%f� �q W q�W q�W t*|j t+� |t,j-d �}| j.|j||� | j/|j|||�}|j0� }t1j2|�}d }t3|j | j& t+� |dgt,j-d�}t4� }t5|d|� t5|d|� t5|dd� d }x�|D ]�}tjj|| j& ��s||j d��r�|jd| � t3||t,j-d�}|j6� |jd� | j7|� |j8� n$|j d��r||jd| � | j7|� �q|W t9j:|dd�}tjj|d �}t;j<|d �}|jd � d }tjj||�}t=|j ||j|� |j)||� tj'|� t>||dd d!� tjj|d"�} |j)| tjj?| �� tj'| � |jd#� x�|D ]�}| j@||�} tjj|| j& ��r(|jd$| | j& d% � |j)|| j& | d&� tj'|| j& � nD|j d��s@|j d��rP|jd'| � n |jd(| � |j)|| d&� �q�W |jA� tjB|tjj|d)j|��� tjC|� |jd*� d S ),Nrd zNo database found at {0}z Please check you are root, and z$are running this command on an AD DCzrunning backup on dirs: {0}� z.sockz.sock/ZdnsF)�follow_symlinksz does not exist!)r� r� rG r� zmodules:)r� r� rG r� r� r� r� r� r� z.ldbz!Starting transaction on solo db: )rG r� z% running tdbbackup on the same filez.tdbz#running tdbbackup on lone tdb file ZINCOMPLETEsambabackupfile)r� �prefixzsamba-backup.tar.bz2zw:bz2z&running offline ntacl backup of sysvolz sysvol.tar.gzZ localhostTz backup.txtzbuilding backup tarz adding backup z to tar and deleting file)r[ z skipping z adding misc file zsamba-backup-{0}.tar.bz2zBackup succeeded.zCPlease check you are root, and are running this command on an AD DC)Dr� r� r� r� r� r� r� r� r� r~ Z provisionZprovision_paths_from_lprf r: rS rT rt r r� r rw r r. r/ r r0 rU �set�walkr* rF r' Z binddns_dir�statr Zwarning�st_ino�st_devr r �appendr^ r r r4 r� r& r( r1 r r r rR rs r� r# r% r� r� r\ r] r rk �basenamer4 r_ r� �rmdir) r� r� rV r; rG r� r2 Z all_filesZ all_statsZ backup_dirZ working_dirr � filenamesrY � full_pathr" r: r> Z dom_sid_strr rX rT Zldb_objZ temp_tar_dirZ temp_tar_nameZtarZ sysvol_tar_fnr� Z backup_fnr3 rC rC rD r� C s� z cmd_domain_backup_offline.run)NN)r� r� r� r� r� r� r� r� r r2 r� r r# r$ r& r( r4 r� rC rC rC rD r � s ;r c @ s& e Zd ZdZe� e� e� e� d�ZdS )�cmd_domain_backupz)Create or restore a backup of the domain.)r� r� r� ZrestoreN) r� r� r� r� r r� r r� Z subcommandsrC rC rC rD rB � s rB )N)^rO rS r� r� r� r� r~ r� Z samba.getoptZgetoptr� Z samba.samdbr r r4 r Z samba.samba3r rK r rI Z samba.ntaclsr r r Z samba.authr Z samba.joinr r r Zsamba.dcerpc.securityr Z samba.netcmdr r Z samba.dcerpcr r r r Zsamba.netcmd.fsmor Zsamba.provisionr r Zsamba.upgradehelpersr Zsamba.remove_dcr r Zsamba.dbcheckerr r r r r Zsamba.provision.sambadnsr r r! Zsamba.tdb_utilr" Zsamba.mdb_utilr# r � subprocessr$ r% Z samba.dsdbr& Z samba.ndrr' Zsamba.credentialsr( r) r\ rE rM rR rZ rb rk rs rw r� ZnetcmdZCommandr� r� r r Z SuperCommandrB rC rC rC rD �<module> st 0 b { 5
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка