Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/netcmd/__pycache__/computer.cpython-36.pyc
Ðазад
3 �I�d�d � @ s� d dl jZd dlZd dlZd dlZd dlZd dlZd dlZd dlm Z d dl m Z m Z m Z d dlmZmZ d dlmZmZmZ d dlmZ d dlmZ d dlmZ d d lm Z d d l m Z m Z d d l m!Z! d d lm"Z"m#Z#m$Z$m%Z%m&Z& d dl'm(Z(m)Z)m*Z*m+Z+ d%dd�Z,dd� Z-dd� Z.dd� Z/G dd� de(�Z0G dd� de(�Z1G dd � d e(�Z2G d d � d e(�Z3G d d � d e(�Z4G d!d"� d"e(�Z5G d#d$� d$e*�Z6dS )&� N)�sd_utils)� dnsserver�dnsp�security)�ARecord� AAAARecord)� ndr_unpack�ndr_pack� ndr_print)�remove_dns_references)�system_session)�SamDB)� get_bytes)� check_call�CalledProcessError� )�common)� credentials�dsdb�Ldb�werror� WERRORError)�Command� CommandError� SuperCommand�Optionc C sL |st jt jg}x6|D ].}yt j|| � dS t jk rB wY qX qW dS )z Check ip string is valid addressTF)�socket�AF_INET�AF_INET6Z inet_pton�error)� ip_string�address_familiesZaddress_family� r" � /usr/lib64/python3.6/computer.py� _is_valid_ip8 s r$ c C s t | tjgd�S )z%Check ip string is valid ipv4 address)r! )r$ r r )r r" r" r# �_is_valid_ipv4G s r% c C s t | tjgd�S )z%Check ip string is valid ipv6 address)r! )r$ r r )r r" r" r# �_is_valid_ipv6L s r& c C s |j d�}tj}tjtjB }| j� } d} tj| �} y&|j|d|| |dt j |dd� \} } W n6 t k r� } z|j d t jkr~d} W Y dd}~X nX | �r0x�| jD ]�}x�|jD ]~}|jt jks�|jt jkr�tj� }||_y|j|d|| |d|� W q� t k �r& } z|j d t jk�r� W Y dd}~X q�X q�W q�W x�|D ]�}t|��rb|jd|| |f � t|�}n6t|��r�|jd|| |f � t|�}ntdj |���tj� }||_|j|d|| ||d� �q6W t |�dk�r t j | d | j � �}| j!d || f |d �\}}| j"||d t#j$t#j%B gd � dS )z3Add DNS A or AAAA records while creating computer. �$Tr NFz,Adding DNS AAAA record %s.%s for IPv6 IP: %sz)Adding DNS A record %s.%s for IPv4 IP: %szInvalid IP: {}zDC=DomainDnsZones,%sz%s.%s)Z dns_partitionz sd_flags:1:%d)Zcontrols)&�rstripr ZDNS_CLIENT_VERSION_LONGHORNZDNS_RPC_VIEW_AUTHORITY_DATAZDNS_RPC_VIEW_NO_CHILDRENZdomain_dns_namer ZSDUtilsZDnssrvEnumRecords2r Z DNS_TYPE_ALLr �argsr Z"WERR_DNS_ERROR_NAME_DOES_NOT_EXIST�recZrecordsZwTypeZ DNS_TYPE_AZ DNS_TYPE_AAAAZDNS_RPC_RECORD_BUFZDnssrvUpdateRecord2r& �infor r% r � ValueError�format�len�ldb�DnZget_default_basednZ dns_lookupZmodify_sd_on_dnr Z SECINFO_OWNERZ SECINFO_GROUP)�samdb�name�dns_conn�change_owner_sdZserver�ip_address_listZloggerZclient_versionZ select_flagsZzoneZ name_foundZ sd_helperZbuflen�res�er* �recordZ del_rec_buf� ip_addressZ add_rec_bufZdomaindns_zone_dnZdns_a_dnZ ldap_recordr" r" r# �add_dns_recordsQ s� r: c @ s� e Zd ZdZdZedddeddd�ed d ed �ed d ed �edddd�eddddd�eddddd�gZdgZe j e j e j d�Z d d d �Zd S )!�cmd_computer_adda+ Add a new computer. This command adds a new computer account to the Active Directory domain. The computername specified on the command is the sAMaccountName without the trailing $ (dollar sign). Computer accounts may represent physical entities, such as workstations. Computer accounts are also referred to as security principals and are assigned a security identifier (SID). Example1: samba-tool computer add Computer1 -H ldap://samba.samdom.example.com \ -Uadministrator%passw1rd Example1 shows how to add a new computer to the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. The -U option is used to pass the userid and password authorized to issue the command remotely. Example2: sudo samba-tool computer add Computer2 Example2 shows how to add a new computer to the domain against the local server. sudo is used so a user may run the command as root. Example3: samba-tool computer add Computer3 --computerou='OU=OrgUnit' Example3 shows how to add a new computer in the OrgUnit organizational unit. z %prog <computername> [options]z-Hz--URLz%LDB URL for database or target server�URL�H)�help�type�metavar�destz --computerouz�DN of alternative location (with or without domainDN counterpart) to default CN=Computers in which new computer object will be created. E.g. 'OU=<OU name>')r> r? z --descriptionzComputers's descriptionz--prepare-oldjoinz5Prepare enabled machine account for oldjoin mechanism� store_true)r> �actionz --ip-addressr5 ziIPv4 address for the computer's A record, or IPv6 address for AAAA record, can be provided multiple times�append)rA r> rC z--service-principal-name�service_principal_name_listzAComputer's Service Principal Name, can be provided multiple times� computername)� sambaopts�credopts� versionoptsNFc C s� | d kr g } | d krg } x"| D ]} t | �s tdj| ���q W |j� } |j| �} �yt|t� | | d�}|j||||| | d� | �rRtj dd|�}|j d�r�td| ��djt j |��}|j |j� t j|d d gd �}|d d d }ttj|d d d �}tjd j|j� �| | �}tj� }||_tjdj|j� |��|_t|||||j� | | j� � W n2 tk �r� } ztd| |��W Y d d }~X nX | j j d| � d S )NzInvalid IP address {})�url� session_infor �lp)� computerou� description�prepare_oldjoinr5 rE z\$$� r' zIllegal computername "%s"z-(&(sAMAccountName={}$)(objectclass=computer))ZprimaryGroupIDZ objectSid)�base�scope� expression�attrsr zncacn_ip_tcp:{}[sign]z{}-{}z Failed to add computer '%s': z!Computer '%s' added successfully ) r$ r r- � get_loadparm�get_credentialsr r Z newcomputer�re�sub�countr/ � binary_encode�search� domain_dn� SCOPE_SUBTREEr r Zdom_sidr Z host_dns_nameZ descriptorZ owner_sidZget_domain_sidZ group_sidr: � get_logger� Exception�outf�write)�selfrF rH rG rI r= rM rN rO r5 rE r9 rL �credsr1 Zhostname�filtersZrecs�group�ownerr3 r4 r7 r" r" r# �run� sZ zcmd_computer_add.run) NNNNNNFNN)�__name__� __module__� __qualname__�__doc__�synopsisr �str� takes_options� takes_args�options� SambaOptions�CredentialsOptions�VersionOptions�takes_optiongroupsrg r" r" r" r# r; � s4 r; c @ sL e Zd ZdZdZedddeddd�gZd gZe j e j e j d �Z dd d �Zd S )�cmd_computer_deleteaf Delete a computer. This command deletes a computer account from the Active Directory domain. The computername specified on the command is the sAMAccountName without the trailing $ (dollar sign). Once the account is deleted, all permissions and memberships associated with that account are deleted. If a new computer account is added with the same name as a previously deleted account name, the new computer does not have the previous permissions. The new account computer will be assigned a new security identifier (SID) and permissions and memberships will have to be added. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool computer delete Computer1 -H ldap://samba.samdom.example.com \ -Uadministrator%passw1rd Example1 shows how to delete a computer in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. The --computername= and --password= options are used to pass the computername and password of a computer that exists on the remote server and is authorized to issue the command on that server. Example2: sudo samba-tool computer delete Computer2 Example2 shows how to delete a computer in the domain against the local server. sudo is used so a computer may run the command as root. z %prog <computername> [options]z-Hz--URLz%LDB URL for database or target serverr< r= )r> r? r@ rA rF )rG rH rI Nc C sb |j � }|j|dd�}t|t� ||d�}|} |jd�s>d| } dtj| �tjf } yd|j |j � tj | ddgd �} | d j } t | d d d �} d| d kr�t| d d d �}nd }W n tk r� td | ��Y nX | tj@ }|s�td | ��y(|j| � |�rt|| j� |dd � W n2 tk �rL } ztd| |��W Y d d }~X nX | jjd| � d S )NT)�fallback_machine)rJ rK r rL r' z%s$z)(&(sAMAccountName=%s)(sAMAccountType=%u))ZuserAccountControlZ dNSHostName)rQ rR rS rT r z Unable to find computer "%s"zNFailed to remove computer "%s": Computer is not a workstation - removal denied)Zignore_no_namez Failed to remove computer "%s"zDeleted computer %s )rU rV r r �endswithr/ rZ r �ATYPE_WORKSTATION_TRUSTr[ r\ r] �dn�intrm � IndexErrorr Z UF_WORKSTATION_TRUST_ACCOUNT�deleter r^ r_ r` ra )rb rF rH rG rI r= rL rc r1 �samaccountname�filterr6 � computer_dnZ computer_acZcomputer_dns_host_nameZcomputer_is_workstationr7 r" r" r# rg g sH zcmd_computer_delete.run)NNNN)rh ri rj rk rl r rm rn ro rp rq rr rs rt rg r" r" r" r# ru 7 s ! ru c @ sX e Zd ZdZdZedddeddd�ed d ed �gZd gZe j e j e j d �Z ddd�ZdS )�cmd_computer_editay Modify Computer AD object. This command will allow editing of a computer account in the Active Directory domain. You will then be able to add or change attributes and their values. The computername specified on the command is the sAMaccountName with or without the trailing $ (dollar sign). The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool computer edit Computer1 -H ldap://samba.samdom.example.com \ -U administrator --password=passw1rd Example1 shows how to edit a computers attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool computer edit Computer2 Example2 shows how to edit a computers attributes in the domain against a local LDAP server. Example3: samba-tool computer edit Computer3 --editor=nano Example3 shows how to edit a computers attributes in the domain against a local LDAP server using the 'nano' editor. z %prog <computername> [options]z-Hz--URLz%LDB URL for database or target serverr< r= )r> r? r@ rA z--editorzQEditor to use instead of the system default, or 'vi' if no system default is set.)r> r? rF )rG rH rI Nc 5 C s |j � }|j|dd�}t|t� ||d�} |} |jd�s>d| } dtjtj| �f } | j � } y | j | | tj d�} | d j }W n t k r� td | ��Y nX t| �d kr�td |t| �f ��| d }tj| |�}|d kr�tjjd �}|d kr�d }tjdd��|}|jt|�� |j� yt||jg� W n. t k �rT } zt d|��W Y d d }~X nX t |j��}|j � }W d Q R X W d Q R X | j |�}t |�d }| j!||�}t|�dk�r�| j"jd� d S y| j#|� W n2 t$k �r� } ztd| |��W Y d d }~X nX | j"jd| � d S )NT)rv )rJ rK r rL r' z%s$z)(&(sAMAccountType=%d)(sAMAccountName=%s)))rQ rS rR r z Unable to find computer "%s"r z'Invalid number of results: for "%s": %dZEDITORZviz.tmp)�suffixzERROR: zNothing to do z Failed to modify computer '%s': z$Modified computer '%s' successfully )%rU rV r r rw r rx r/ rZ r\ r[ r] ry r{ r r. r �get_ldif_for_editor�os�environ�get�tempfileZNamedTemporaryFilera r �flushr r2 r �open�readZ parse_ldif�nextZmsg_diffr` Zmodifyr_ )rb rF rH rG rI r= ZeditorrL rc r1 r} r~ �domaindnr6 r �msgZ result_ldifZt_filer7 Z edited_fileZedited_messageZ msgs_editedZ msg_editedZ res_msg_diffr" r" r# rg � s` zcmd_computer_edit.run)NNNNN)rh ri rj rk rl r rm rn ro rp rq rr rs rt rg r" r" r" r# r� � s # r� c @ sd e Zd ZdZdZedddeddd�ed d d ed �ed ddddd�gZej ej ej d�Z ddd�Z dS )�cmd_computer_listzList all computers.z%prog [options]z-Hz--URLz%LDB URL for database or target serverr< r= )r> r? r@ rA z-bz --base-dnzSpecify base DN to use)r> r? z --full-dn�full_dnFrB z)Display DN instead of the sAMAccountName.)rA �defaultrC r> )rG rH rI Nc C s� |j � }|j|dd�}t|t� ||d�} dtj } | j� } |rH| j|�} | j| t j | dgd�} t | �dkrnd S xB| D ]:} |r�| j j d| jd � � qt| j j d| jddd � � qtW d S ) NT)rv )rJ rK r rL z(sAMAccountType=%u)r} )rR rS rT r z%s ry )�idx)rU rV r r r rx r\ Znormalize_dn_in_domainr[ r/ r] r. r` ra r� )rb rG rH rI r= Zbase_dnr� rL rc r1 r~ Z search_dnr6 r� r" r" r# rg s& zcmd_computer_list.run)NNNNNF)rh ri rj rk rl r rm rn rp rq rr rs rt rg r" r" r" r# r� s( r� c @ sZ e Zd ZdZdZedddeddd�ed d ed d �gZd gZe j e j e j d�Z ddd�ZdS )�cmd_computer_showa� Display a computer AD object. This command displays a computer account and it's attributes in the Active Directory domain. The computername specified on the command is the sAMAccountName. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool computer show Computer1 -H ldap://samba.samdom.example.com \ -U administrator Example1 shows how display a computers attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool computer show Computer2 Example2 shows how to display a computers attributes in the domain against a local LDAP server. Example3: samba-tool computer show Computer2 --attributes=objectSid,operatingSystem Example3 shows how to display a computers objectSid and operatingSystem attribute. z %prog <computername> [options]z-Hz--URLz%LDB URL for database or target serverr< r= )r> r? r@ rA z --attributesz:Comma separated list of attributes, which will be printed.�computer_attrs)r> r? rA rF )rG rH rI Nc C s� |j � }|j|dd�}t|t� ||d�} d } |r:|jd�} |} |jd�sPd| } dtjtj | �f } | j � } y"| j | | tj | d�}|d j }W n tk r� td | ��Y nX x$|D ] }tj| |�}| jj|� q�W d S ) NT)rv )rJ rK r rL �,r' z%s$z)(&(sAMAccountType=%d)(sAMAccountName=%s)))rQ rS rR rT r z Unable to find computer "%s")rU rV r r �splitrw r rx r/ rZ r\ r[ r] ry r{ r r r� r` ra )rb rF rH rG rI r= r� rL rc r1 rT r} r~ r� r6 r r� Z computer_ldifr" r" r# rg v s0 zcmd_computer_show.run)NNNNN)rh ri rj rk rl r rm rn ro rp rq rr rs rt rg r" r" r" r# r� B s ! r� c @ sN e Zd ZdZdZedddeddd�gZd d gZe j e j e j d �Z dd d�Zd S )�cmd_computer_movez4Move a computer to an organizational unit/container.z*%prog <computername> <new_ou_dn> [options]z-Hz--URLz%LDB URL for database or target serverr< r= )r> r? r@ rA rF � new_ou_dn)rG rH rI Nc C sL |j � }|j|dd�}t|t� ||d�} tj| | j� �} |} |jd�sNd| } dtj| �t j f } y | j | | tj d�} | d j }W n tk r� td | ��Y nX tj| |�}|j| �s�|j| � tj| t|��}|jt|�d � |j|� y| j||� W n2 tk �r2 } ztd | |��W Y d d }~X nX | jjd ||f � d S ) NT)rv )rJ rK r rL r' z%s$z)(&(sAMAccountName=%s)(sAMAccountType=%u)))rQ rS rR r z Unable to find computer "%s"r z Failed to move computer "%s"z Moved computer "%s" to "%s" )rU rV r r r/ r0 r\ rw rZ r rx r[ r] ry r{ r Z is_child_ofZadd_baserm Zremove_base_componentsr. �renamer_ r` ra )rb rF r� rH rG rI r= rL rc r1 r\ r} r~ r6 r Zfull_new_ou_dnZnew_computer_dnr7 r" r" r# rg � s< zcmd_computer_move.run)NNNN)rh ri rj rk rl r rm rn ro rp rq rr rs rt rg r" r" r" r# r� � s r� c @ sZ e Zd ZdZi Ze� ed< e� ed< e� ed< e� ed< e� ed< e � ed< e � ed< d S ) � cmd_computerzComputer management.�addZcreater| Zedit�listZshowZmoveN) rh ri rj rk Z subcommandsr; ru r� r� r� r� r" r" r" r# r� � s r� )N)7Z samba.getoptZgetoptrp r/ r ZsambarW r� r� r Z samba.dcerpcr r r Zsamba.dnsserverr r Z samba.ndrr r r Zsamba.remove_dcr Z samba.authr Z samba.samdbr Z samba.commonr � subprocessr r rP r r r r r r Z samba.netcmdr r r r r$ r% r& r: r; ru r� r� r� r� r� r" r" r" r# �<module> s< ^ _s9W6
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка