Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/__pycache__/dbchecker.cpython-36.opt-1.pyc
Ðазад
3 �de\ � @ s� d dl Z d dlZd dlZd dlmZmZ d dlmZ d dlmZ d dlm Z d dlm Z d dl m Z m Z d dlmZ d d lmZ d d lmZ d d lmZmZmZ d d lmZmZ d d lmZ d dlm Z d dl m Z m Z m Z m!Z! dd� Z"G dd� de#�Z$dS )� N)� b64decode� b64encode)�dsdb)�common)�misc)�drsuapi)� ndr_unpack�ndr_pack)�drsblobs)�dsdb_Dn)�security)�get_wellknown_sds� get_deletedobjects_descriptor� get_diff_sds)�system_session� admin_session)� CommandError)�get_fsmo_roleowner)�c_RED� c_DARK_YELLOW� c_DARK_CYAN� c_DARK_GREENc C sT g }xD| D ]<}y|j |jd�� W q tk rD |j t|�� Y q X q W dj|�S )z�Stringify a value list, using utf-8 if possible (which some tests want), or the python bytes representation otherwise (with leading 'b' and escapes like b' '). zutf-8�,)�append�decode�UnicodeDecodeError�repr�join)�vals�result�value� r! �!/usr/lib64/python3.6/dbchecker.py�dump_attr_values* s r# c @ sh e Zd ZdZd�dd�Zdejddfdd�Zdd � Zd d � Z d�d d �Z dd� Z dd� Z d�dd�Z dd� Zdd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd�d%d&�Zd'd(� Zd)d*� Zd+d,� Zd-d.� Zd/d0� Zd1d2� Z d3d4� Z d5d6� Z d7d8� Z d9d:� Z d�d;d<�Z!d=d>� Z"d?d@� Z#dAdB� Z$dCdD� Z%dEdF� Z&dGdH� Z'dIdJ� Z(dKdL� Z)dMdN� Z*dOdP� Z+dQdR� Z,dSdT� Z-dUdV� Z.dWdX� Z/dYdZ� Z0d[d\� Z1d]d^� Z2d_d`� Z3dadb� Z4dcdd� Z5dedf� Z6dgdh� Z7didj� Z8dkdl� Z9dmdn� Z:dodp� Z;dqdr� Z<dsdt� Z=dudv� Z>dwdx� Z?dydz� Z@d{d|� ZAd}d~� ZBdd�� ZCd�d�� ZDd�d�� ZEd�d�� ZFd�d�� ZGd�d�� ZHd�d�� ZId�d�d��ZJd�d�� ZKd�d�� ZLd�d�� ZMdS )��dbcheckz check a SAM database for errorsNFc & C sX || _ d | _|p|| _|| _|| _|| _|| _| | _d| _d| _ d| _ d| _ d| _ d| _ d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _d| _t� | _ d| _ d| _ d| _ d| _ d| _!d| _"d| _#d| _$d| _%d| _&d| _'d| _(d| _)d| _*d| _+d| _,d| _-|| _.| | _/| | _0d| _1d| _2|| _3t4j5|d|j6� �| _7t4j5|d|j8� �| _9|j:� | _;t4j5|d|j6� �| _<t4j5||j=� �| _>i | _?t@| j �| _Ad| _Bd| _Cd| _Dd| _Ed| _FtG� | _Hi | _Ii | _JyTd|jK|jL� tMjN� } |jO| t4jPdgd�} tQtRjS| d d d �}tT|�| jJd < W n> t4jUk �rl } z |jV\}}|t4jWk�r\� W Y d d }~X nX tX� | _YtZd |j[� �| _\| j jO| j>t4jPd d gd�} d | d k�r�| d d | _]n$d | d k�r�| d d | _]nd | _]| j jOd t4jPd gd�} g | _^g | __g | _`y| d d | _aW n* tbk �r2 Y n tck �rF Y nX xt| jaD ]j}y0| j jKt4j5| j |jdd��tMje�}| j^jf|� W n2 tbk �r� | j_jft4j5| j |jdd��� Y nX �qPW d| j jL� }d| j jg� }| j jOt4jhddg| j ji� d| d�}tj|�dk�r*| j`jft4j5| j |�|d f� | j jOt4jhddg| j ji� d| d�}tj|�dk�rz| j`jft4j5| j |�|d f� t4j5| j d| j j6� �}tk| j |d�}t4j5| j | j j=� �|k�r�d| _lnd| _l| j jOt4j5| j | j jm� �t4jPdgd�} t4j5| j | d d d jdd��| _n| j jO| jnt4jPdgd�} d| d k�rZt4j5| j | d d d jdd��| _ond | _od| j j8� jp� }|jO|t4jPdd gd �} d | d k�r�tq| d d d �| _rnd | _rg | _sg | _tyT| j jOt4jPd d d!gd"�} d | d k�r�| d d | _sd!| d k�r| d d! | _tW n> t4jUk �rR } z |jV\}}|t4jWk�rB� W Y d d }~X nX d S )#NFr zCN=Infrastructure,zCN=Partitions,%szCN=RID Manager$,CN=System,zCN=DnsAdmins,%sZ objectSid)�base�scope�attrsZ DnsAdminszmsDS-hasMasterNCsZ hasMasterNCs� ZnamingContexts�utf8zDC=DomainDnsZones,%szDC=ForestDnsZones,%szmsDS-NC-Replica-Locationsz msDS-NC-RO-Replica-Locationsz$(&(objectClass=crossRef)(ncName=%s)))r& r' r% � expression� ZridTZserverReference�rIDSetReferencesz1CN=Directory Service,CN=Windows NT,CN=Services,%sz(objectClass=nTDSService)�tombstoneLifetime)r% r& r* r' � z @SAMBA_DSDB�compatibleFeatures�requiredFeatures)r& r% r' )u�samdbZ dict_oid_name� samdb_schema�verbose�fix�yes�quiet�colour� remove_all_unknown_attributes�remove_all_empty_attributes�fix_all_normalisation�fix_all_duplicates�fix_all_DN_GUIDs�fix_all_binary_dn�#remove_implausible_deleted_DN_links�!remove_plausible_deleted_DN_linksZ$fix_all_string_dn_component_mismatchZ"fix_all_GUID_dn_component_mismatchZ!fix_all_SID_dn_component_mismatch� fix_all_SID_dn_component_missing�(fix_all_old_dn_string_component_mismatch�fix_all_metadata�fix_time_metadata� fix_undead_linked_attributes�fix_all_missing_backlinks�fix_all_orphaned_backlinks� fix_all_missing_forward_links�dict�duplicate_link_cache�recover_all_forward_links� fix_rmd_flags�fix_ntsecuritydescriptor�$fix_ntsecuritydescriptor_owner_group�seize_fsmo_role�move_to_lost_and_found�fix_instancetype�"fix_replmetadata_zero_invocationid� fix_replmetadata_duplicate_attid� fix_replmetadata_wrong_attid� fix_replmetadata_unsorted_attid�fix_deleted_deleted_objects�fix_dn�fix_base64_userparameters�fix_utf8_userparameters�fix_doubled_userparameters�fix_sid_rid_set_conflict�quick_membership_checks�reset_well_known_acls�check_expired_tombstones�expired_tombstones�reset_all_well_known_acls�in_transaction�ldb�Dn� domain_dn�infrastructure_dnZget_config_basedn� naming_dnZget_schema_basedn� schema_dn�rid_dn�get_dsServiceName�ntds_dsa�class_schemaIDGUIDr � wellknown_sds�fix_all_missing_objectclass�fix_missing_deleted_objects�fix_replica_locations�fix_missing_rid_set_master� fix_changes_after_deletion_bug�set�dn_set� link_id_cache�name_map�get_wellknown_dnZget_default_basednr ZDS_GUID_USERS_CONTAINER�search� SCOPE_BASEr r �dom_sid�str�LdbError�args�ERR_NO_SUCH_OBJECTr �system_session_infor �get_domain_sid�admin_session_info� write_ncs�deleted_objects_containers� ncs_lacking_deleted_containers�dns_partitionsZncs�KeyError� IndexErrorr �!DS_GUID_DELETED_OBJECTS_CONTAINERr �get_root_basednZSCOPE_ONELEVELZget_partitions_dn�lenr � is_rid_masterZget_serverName� server_ref_dn� rid_set_dn�get_linearized�intr- r/ r0 ) �selfr1 r2 r3 r4 r5 r6 r` r[ r\ r] r7 Zbase_dn�resZ dnsadmins_sidZe5�enum�estr�nc�dnZdomaindns_zoneZforestdns_zoneZdomainZforestZfsmo_dnZ rid_masterZntds_service_dnZe6r! r! r" �__init__; s4 ( " $ zdbcheck.__init__c C s | j j||dg|d�}| jdt|� � d}d| _|| j� 7 }t� | _x2|D ]*}| jj t |j �� || j |j |d�7 }qLW |dkr�|| j � 7 }| jdkr�| jd| j � | jdt|�|| j f � | jdkr�| jd | j� d �� |dko�| j �r| jd |� d �� |S ) z>perform a database check, returning the number of errors foundr� )r% r& r' �controlszChecking %u objectsr )�requested_attrsNz�NOTICE: found %d expired tombstones, 'samba' will remove them daily, 'samba-tool domain tombstones expunge' would do that immediately.z Checked %u objects (%u errors)z WARNING: z/ of these errors cannot be automatically fixed.z-Please use 'samba-tool dbcheck --fix' to fix z errors)r1 rv �reportr� �unfixable_errors� check_deleted_objects_containersrq �attribute_or_class_idsrr �addry r� � check_object� check_rootdser^ r4 )r� ZDNr& r� r' r� � error_count�objectr! r! r" �check_database� s* zdbcheck.check_databasec % C s* d}�x | j D �]}|| jkr q|d7 }| jd| � | jd| d�sHqtj| jd�}|j|� d}yd| jj|tj g dd d d gd �}t |�dkr�|d j j d �}tj| jdt tj|�� �}|j|� W nN tjk �r } z.|j\}} |tjkr�n| jd| � dS W Y dd}~X nX |dk �r�y| jj||ddd g� W nB tjk �r~ } z"| j\}} | jd||| f � dS d} ~ X nX | jj|tj dgddd d gd �}t |�dk�r�| jd| � dS |d d } g } d} xX| D ]P}t| j|jd�tj�}| j|��r| jd| � |j j d �} | jt |�� �q�W | dk �rLdt tj| �� }n dtj }| jd||f � d}tj | jj � �}t || j d�}t |�jd�}| jj!d |||f dd gd � tj"� }tj| jt |d d ��|_ tj#| tj$d�|d< | j%|dgd | d!d"��r| jd#| � | j&j|� qW |S )$z`This function only fixes conflicts on the Deleted Objects containers, not the attributesr r+ z=ERROR: NC %s lacks a reference to a Deleted Objects containerz-Fix missing Deleted Objects container for %s?rm zCN=Deleted ObjectsNzshow_deleted:1zextended_dn:1:1zshow_recycled:1zreveal_internals:0)r% r& r' r� �GUIDzCN=Deleted Objects\0ACNF:%sz<Couldn't check for conflicting Deleted Objects container: %szrelax:0z;Couldn't move old Deleted Objects placeholder: %s to %s: %sZwellKnownObjectsz extended_dn:0z(wellKnownObjects was not found for NC %sr) z7wellKnownObjects had duplicate Deleted Objects value %sz objectGUID: %szB:32:%sz%s:%sr( )rt z�dn: %s objectClass: top objectClass: container description: Container for deleted objects isDeleted: TRUE isCriticalSystemObject: TRUE showInAdvancedViewOnly: TRUE nTSecurityDescriptor:: %s systemFlags: -1946157056%sz provision:0)r� r� z"NC %s lacks Deleted Objects WKGUIDF)�validatez Added %s well known guid link)'r� rf r� � confirm_allra rb r1 Zadd_baserv rw r� r� �get_extended_componentry r r� rz r{ r| �renamer r r �DSDB_SYNTAX_BINARY_DN�is_deleted_objects_dnr r� r rx r~ r rt r Zadd_ldif�Message�MessageElement�FLAG_MOD_REPLACE� do_modifyr� )r� r� r� r� Z conflict_dnr� �guidZe2r� r� Ze1ZwkoZlistwkoZproposed_objectguid�o�dsdb_dnZ guid_suffixZ wko_prefix� domain_sidZsec_descZ sec_desc_b64�deltar! r! r" r� s� z(dbcheck.check_deleted_objects_containersc C s� | j r dS | jr�|jd�r0td�|dd� }n�|jd�rPtd�|dd� }n~|jd�rptd�|dd� }n^|jd�r�td�|d d� }n>|jd �r�td �|dd� }n |jd �r�td �|d d� }t|� dS ) z#print a message unless quiet is setNZERROR� ZWARNING� �INFO� ZNOTICE� ZNOTEZSKIPPING� )r6 r7 � startswithr r r r �print)r� �msgr! r! r" r� � s zdbcheck.reportc C s0 | j s dS | jr| jS | jr d}tj|||d�S )zconfirm a changeFT)�forced� allow_all)r4 r6 r5 r �confirm)r� r� r� r� r! r! r" r� � s zdbcheck.confirmc C s� | j s dS t| |�dkr dS t| |�dkr0d}n| j}| jr@|S tj||dd�}|dkrht| |d� dS |dkr�t| |d� dS |S )z(confirm a change with support for "all" F�NONEZALLT)r� r� )r4 �getattrr5 r6 r r� �setattr)r� r� Zall_attrr� �cr! r! r" r� � s" zdbcheck.confirm_allc C s� | j r| jd| � y$|dtj g }| jj||d� W nH tk r� } z,| jr`td||f ��| jd||f � dS d}~X nX dS )z&delete dn with optional verbose outputz delete DN %szlocal_oid:%s:0)r� z%s : %sFNT) r3 r� r �DSDB_CONTROL_DBCHECKr1 �delete� Exceptionr` r )r� r� r� r� �errr! r! r" � do_delete� s zdbcheck.do_deleteTc C s� |dt j g }| jr:| j| jj|tj�� | jd| � y| jj|||d� W nH t k r� } z,| j rxt d||f ��| jd||f � dS d}~X nX dS )z-perform a modify with optional verbose outputzlocal_oid:%s:0z controls: %r)r� r� z%s : %sFNT) r r� r3 r� r1 Z write_ldifra ZCHANGETYPE_MODIFY�modifyr� r` r )r� �mr� r� r� r� r! r! r" r� � s zdbcheck.do_modifyc C s� | j r&| jdt|�t|�t|�f � y.|| }|dtj g }| jj|||d� W nH tk r� } z,| jr|t d||f ��| jd||f � dS d}~X nX dS )z-perform a rename with optional verbose outputzDdn: %s changeType: modrdn newrdn: %s deleteOldRdn: 1 newSuperior: %szlocal_oid:%s:0)r� z%s : %sFNT) r3 r� ry r r� r1 r� r� r` r )r� Zfrom_dnZto_rdnZto_baser� r� Zto_dnr� r! r! r" � do_rename� s zdbcheck.do_renamec C sL || j kr| j | S | jj|�}|r2| jj|�}nd }||f| j |< ||fS )N)rs r2 Z get_linkId_from_lDAPDisplayNameZ!get_backlink_from_lDAPDisplayName)r� �attrname�linkIDZrevnamer! r! r" � get_attr_linkID_and_reverse_name� s z(dbcheck.get_attr_linkID_and_reverse_namec C s� | j d||f � | jd||f d�s8| j d| � dS tj� }||_tjdtj|�||< | j|ddgd | d d �r�| j d | � dS ) zfix empty attributesz ERROR: Empty attribute %s in %sz"Remove empty attribute %s from %s?r9 z Not fixing empty attribute %sNr( zrelax:0zshow_recycled:1z#Failed to remove empty attribute %sF)r� zRemoved empty attribute %s)r� r� ra r� r� r� �FLAG_MOD_DELETEr� )r� r� r� r� r! r! r" �err_empty_attribute� s zdbcheck.err_empty_attributec C sT | j d||f � g }x~|D ]v}| jj| j||g�}t|�dkr^| j d| � |j|df� q |d |kr | j d||d f � |j||d f� q W | jd||f d�s�| j d | � d S tj� }||_ xZt dt|��D ]H}|| \}} tj |tj |�|d | < | dkr�tj | tj |�|d | < q�W | j|d dgd| dd��rP| j d| � d S )z?fix attribute normalisation errors, without altering sort orderz1ERROR: Normalisation error for attribute %s in %sr+ z Unable to normalise value '%s'r( r zvalue '%s' should be '%s'z!Fix normalisation for %s from %s?r: zNot fixing attribute %sNzvalue_%uznormv_%uzrelax:0zshow_recycled:1z Failed to normalise attribute %sF)r� zNormalised attribute %s)r� r1 �dsdb_normalise_attributesr2 r� r r� ra r� r� �ranger� r� � FLAG_MOD_ADDr� ) r� r� r� �valuesZmod_list�val� normalisedr� �iZnvalr! r! r" �err_normalise_mismatch s4 z dbcheck.err_normalise_mismatchc C s� | j j| j||�}t|�|kr"dS | jd||f � | jd|t|�f � | jd||f d�sp| jd| � dS tj� }||_tj |tj |�||< | j |ddgd | d d �r�| jd | � dS ) z.fix attribute normalisation and/or sort errorsNz5ERROR: Normalisation error for attribute '%s' in '%s'z0Values/Order of values do/does not match: %s/%s!z%Fix normalisation for '%s' from '%s'?r: zNot fixing attribute '%s'zrelax:0zshow_recycled:1z Failed to normalise attribute %sF)r� zNormalised attribute %s) r1 r� r2 �listr� r� ra r� r� r� r� r� )r� r� r� r� r� r� r! r! r" � err_normalise_mismatch_replace% s z&dbcheck.err_normalise_mismatch_replacec C s� | j d||f � | j dt|�t|�f � | jd||f d�sR| j d| � dS tj� }||_tj|tj|�||< | j|ddgd | d d �r�| j d | � dS ) z fix duplicate attribute valuesz2ERROR: Duplicate values for attribute '%s' in '%s'z&Values contain a duplicate: [%s]/[%s]!z"Fix duplicates for '%s' from '%s'?r; zNot fixing attribute '%s'Nzrelax:0zshow_recycled:1z0Failed to remove duplicate value on attribute %sF)r� z'Removed duplicate value on attribute %s) r� r# r� ra r� r� r� r� r� )r� r� r� Z dup_valuesr� r� r! r! r" �err_duplicate_values: s z dbcheck.err_duplicate_valuesc C s |j dtj kS )z2see if a dsdb_Dn is the special Deleted Objects DNzB:32:%s:)�prefixr r� )r� r� r! r! r" r� L s z dbcheck.is_deleted_objects_dnc C sb | j d|| jj|�f � | jd| d�s<| j d| � dS | j|dgd| �r^| j d| � dS ) z!handle object without objectclassz�ERROR: missing objectclass in object %s. If you have another working DC, please run 'samba-tool drs replicate --full-sync --local <destinationDC> <sourceDC> %s'zIIf you cannot re-sync from another DC, do you wish to delete object '%s'?rl z1Not deleting object with missing objectclass '%s'Nzrelax:0zFailed to remove DN %sz Removed DN %s)r� r1 � get_nc_rootr� r� )r� r� r! r! r" �err_missing_objectclassP s z dbcheck.err_missing_objectclassc C s� |sF| j d|||f � | j dt|� � | jdd�s�| j d� dS n@| j d|||f � | j dt|� � | jdd �s�| j d� dS tj� }||_tj|tj|�|d < | j|d d t j gd | �r�| j d| � dS )z(handle a DN pointing to a deleted objectz4ERROR: target DN is deleted for %s in object %s - %sz#Target GUID points at deleted DN %rzRemove DN link?r> z Not removingNz6WARNING: target DN is deleted for %s in object %s - %szRemove stale DN link?r? � old_valuezshow_recycled:1zlocal_oid:%s:0z(Failed to remove deleted DN attribute %sz"Removed deleted DN on attribute %s) r� ry r� ra r� r� r� r� r� r � DSDB_CONTROL_REPLMD_VANISH_LINKS)r� r� r� r� r� � correct_dnZremove_plausibler� r! r! r" �err_deleted_dnZ s$ zdbcheck.err_deleted_dnc C s� t |�jd�dkr4| jd|||f � | jd� dS | j|�\}}|d@ dko^t |�jd�dk�r�| j|�\}}|dk r�| jd|||f � | jd� dS | jj|�}y| jj|j�} W n> tjk r� } z | j \} } | tj kr� d} W Y dd} ~ X nX | dk�r(| jd ||j||f � | jd � dS || k�rT| jd |||f � | jd � dS | jd |||f � | j |||||d� dS | jd|||f � | j |||||d� dS )zxhandle a missing target DN (if specified, GUID form can't be found, and otherwise DN string form can't be found)z\0ADELr+ zTWARNING: no target object found for GUID component link %s in deleted object %s - %sz`Not removing dangling one-way link on deleted object (tombstone garbage collection in progress?)r Nz`WARNING: no target object found for GUID component for one-way forward link %s in object %s - %sz"Not removing dangling forward linkzeWARNING: no target object found for GUID component for link %s in object to %s outside our NCs%s - %szhNot removing dangling one-way left-over link outside our NCs (we might be building a renamed/lab domain)z`WARNING: no target object found for GUID component for cross-partition link %s in object %s - %szPNot removing dangling one-way cross-partition link (we might be mid-replication)zTWARNING: no target object found for GUID component for DN value %s in object %s - %sTzNERROR: no target object found for GUID component for link %s in object %s - %sF���r� ) ry �findr� r� r1 r� r� ra rz r{ r| r� ) r� r� r� r� r� r� �_�reverse_link_name�nc_rootZtarget_nc_root�er� r� r! r! r" � err_missing_target_dn_or_GUIDq sP z%dbcheck.err_missing_target_dn_or_GUIDc C sj | j d||||f � ddg}y | jjt|j�tjg |d�}W n\ tjk r� } z>|j\} } | j d|j| f � | tj kr|� | j ||||� dS d}~X nX t |�dkr�| j d|j � | j ||||� dS |d j|_| j d t|� d ��s | j d | � dS tj � } || _tj|tj|�| d < tjt|�tj|�| d < | j| dgd||f ��rf| j d||f � dS )z+handle a missing GUID extended DN componentz,ERROR: %s component for %s in object %s - %szextended_dn:1:1zshow_recycled:1)r% r& r' r� z&unable to find object for DN %s - (%s)Nr z unable to find object for DN %szChange DN to %s?r< z Not fixing %sr� � new_valuez Failed to fix %s on attribute %szFixed %s on attribute %s)r� r1 rv ry r� ra rw rz r{ r| r� r� r� r� r� r� r� r� ) r� r� r� r� r� �errstrr� r� Ze7r� r� r� r! r! r" � err_missing_dn_GUID_component� s6 z%dbcheck.err_missing_dn_GUID_componentc C s� | j d||||f � | jdt|� d�s<| j d| � dS tj� }||_tj|tj|�|d< tjt|�tj|�|d< | j |dgd ||f �r�| j d ||f � dS ) z'handle an incorrect binary DN componentz3ERROR: %s binary component for %s in object %s - %szChange DN to %s?r= z Not fixing %sNr� r� zshow_recycled:1z Failed to fix %s on attribute %szFixed %s on attribute %s) r� r� ry ra r� r� r� r� r� r� )r� r� r� r� r� r� r� r! r! r" �err_incorrect_binary_dn� s z dbcheck.err_incorrect_binary_dnc C s� | j d|||f � ||_| jdt|� d�s<| j d� dS tj� }||_tj|tj|�|d< tjt|�tj|�|d< | j |dd t j gd | �r�| j d | � dS ) z<handle a DN string being incorrect due to a rename or deletezPNOTE: old (due to rename or delete) DN string component for %s in object %s - %szChange DN to %s?rA z Not fixing old string componentNr� r� zshow_recycled:1zlocal_oid:%s:1z+Failed to fix old DN string on attribute %sz#Fixed old DN string on attribute %s) r� r� r� ry ra r� r� r� r� r� r �%DSDB_CONTROL_DBCHECK_FIX_LINK_DN_NAME)r� r� r� r� r� r� r� r! r! r" �err_dn_string_component_old� s z#dbcheck.err_dn_string_component_oldc C s� | j d||||f � ||_| jdt|� d| �sF| j d| � dS tj� }||_tj|tj|�|d< tjt|�tj|�|d< | j |dgd ||f �r�| j d ||f � dS ) z"handle a DN string being incorrectz9ERROR: incorrect DN %s component for %s in object %s - %szChange DN to %s?z fix_all_%s_dn_component_mismatchz Not fixing %s component mismatchNr� r� zshow_recycled:1z-Failed to fix incorrect DN %s on attribute %sz%Fixed incorrect DN %s on attribute %s) r� r� r� ry ra r� r� r� r� r� )r� r� r� r� r� r� Z mismatch_typer� r! r! r" � err_dn_component_target_mismatch s z(dbcheck.err_dn_component_target_mismatchc C s� | j d|||f � t|j�dkr0| j d� dS tj| j|jj� �}|jd|� | j d|j� d�sr| j d� dS |j d �}tj| jd �}|jd |� |jd|� tj � } || _tj |j� tj |�| d < d d tj g} | j| | d| �r�| j d| � dS )z*fix missing <SID=...> on linked attributesz8ERROR: missing DN SID component for %s in object %s - %sr z3Not fixing missing DN SID on DN+BINARY or DN+STRINGN�SIDzChange DN to %s?r@ z#Not fixing missing DN SID componentr� r( r� zshow_recycled:1zlocal_oid:%s:1z,Failed to ADD missing DN SID on attribute %sz$Fixed missing DN SID on attribute %s)r� r� r� ra rb r1 r� � extended_str�set_extended_componentr� r� r� r� r� r Z$DSDB_CONTROL_DBCHECK_FIX_LINK_DN_SIDr� ) r� r� r� r� r� Ztarget_sid_blobr� Ztarget_guid_blobZ guid_sid_dnr� r� r! r! r" �#err_dn_component_missing_target_sid s, z+dbcheck.err_dn_component_missing_target_sidc C s� | j d||jf � | jd| d�s6| j d| � dS tj� }|j|_tjg tj|�|d< | j|ddgd | �r~| j d | � dS ) z!handle an unknown attribute errorz#ERROR: unknown attribute '%s' in %szRemove unknown attribute %sr8 zNot removing %sNr� zrelax:0zshow_recycled:1z%Failed to remove unknown attribute %sz Removed unknown attribute %s)r� r� r� ra r� r� r� r� )r� �objr� r� r! r! r" �err_unknown_attribute9 s z dbcheck.err_unknown_attributec C s� | j d|||jf � | jd| d�s8| j d| � dS tj� }|j|_tj|tj|�|d< | j|ddd d tj gd | �r�| j d | � dS ) z:handle a link that should not be there on a deleted objectzDERROR: linked attribute '%s' to '%s' is present on deleted object %szRemove linked attribute %srD z Not removing linked attribute %sNr� zshow_recycled:1zshow_deleted:1zreveal_internals:0zlocal_oid:%s:0z Failed to delete forward link %sz Fixed undead forward link %s) r� r� r� ra r� r� r� r� r r� )r� r� r� r� r� r! r! r" �err_undead_linked_attributeF s z#dbcheck.err_undead_linked_attributec C s� | j d||||jf � | jd| d�s:| j d| � dS tj� }||_tj|tj|�|d< | j|ddgd | �r�| j d | � dS ) z handle a missing backlink valuez>ERROR: missing backlink attribute '%s' in %s for link %s in %szFix missing backlink %srE z Not fixing missing backlink %sNr� zshow_recycled:1zrelax:0z!Failed to fix missing backlink %szFixed missing backlink %s)r� r� r� ra r� r� r� r� )r� r� r� r� Z backlink_name� target_dnr� r! r! r" �err_missing_backlinkV s z dbcheck.err_missing_backlinkc C s� t |jjd��}| jd|||j|jj� f � | jd| d�sP| jd| � dS tj� }|j|_tjt |�tj |�|d< | j |dd d gd | �r�| jd | � dS ) z"handle a incorrect RMD_FLAGS value� RMD_FLAGSzHERROR: incorrect RMD_FLAGS value %u for attribute '%s' in %s for link %szFix incorrect RMD_FLAGS %urK z!Not fixing incorrect RMD_FLAGS %uNr� zshow_recycled:1zreveal_internals:0zshow_deleted:0z$Failed to fix incorrect RMD_FLAGS %uz Fixed incorrect RMD_FLAGS %u) r� r� r� r� r� r� ra r� r� ry r� r� )r� r� r� Z revealed_dn� rmd_flagsr� r! r! r" �err_incorrect_rmd_flagsc s z dbcheck.err_incorrect_rmd_flagsc C s� |dkr4| j |||�r4| jdd||||f � dS | jd||||f � | jd| d�sl| jd| � dS tj� }||_tj|tj|�|d < | j|d d gd | �r�| jd | � dS )z handle a orphaned backlink valueTz*WARNING: Keep orphaned backlink attribute z"'%s' in '%s' for link '%s' in '%s'Nz?ERROR: orphaned backlink attribute '%s' in %s for link %s in %szRemove orphaned backlink %srF z!Not removing orphaned backlink %sr zshow_recycled:1zrelax:0z"Failed to fix orphaned backlink %szFixed orphaned backlink %s) �has_duplicate_linksr� r� ra r� r� r� r� r� ) r� Zobj_dn� backlink_attrZ backlink_valr� � forward_attr�forward_syntax�check_duplicatesr� r! r! r" �err_orphaned_backlinkq s z dbcheck.err_orphaned_backlinkc C s� | j d||jf � | jd| d�s<| j d||jf � dS tj� }|j|_tj|tj|�|d< | j|dtj gd| �r�| j d | � d t |j�|f }d | j |< dS ) z handle a duplicate links valuezPRECHECK: 'Missing/Duplicate/Correct link' lines above for attribute '%s' in '%s'zDCommit fixes for (missing/duplicate) forward links in attribute '%s'rJ zPNot fixing corrupted (missing/duplicate) forward links in attribute '%s' of '%s'Nr zlocal_oid:%s:1z/Failed to fix duplicate links in attribute '%s'z'Fixed duplicate links in attribute '%s'z%s:%sF) r� r� r� ra r� r� r� r� r Z(DSDB_CONTROL_DBCHECK_FIX_DUPLICATE_LINKSry rI )r� r� r� Z forward_valsr� �duplicate_cache_keyr! r! r" �err_recover_forward_links� s z!dbcheck.err_recover_forward_linksc C s� | j d|j � | jjdtjdgd�}t|d d d �}| jd|j|f d�sh| j d|j|f � d S tj� }|j|_tj |tj d �|d < | j |g d |j|f �r�| j d |j|f � d S )z handle a missing fSMORoleOwnerz*ERROR: fSMORoleOwner not found for role %sr( � dsServiceName)r& r' r z8Seize role %s onto current DC by adding fSMORoleOwner=%srN z>Not Seizing role %s onto current DC by adding fSMORoleOwner=%sN� fSMORoleOwnerr zBFailed to seize role %s onto current DC by adding fSMORoleOwner=%sz9Seized role %s onto current DC by adding fSMORoleOwner=%s) r� r� r1 rv ra rw ry r� r� r� r� r� )r� r� r� Z serviceNamer� r! r! r" �err_no_fsmoRoleOwner� s z dbcheck.err_no_fsmoRoleOwnerc C sb | j d|j � | jd|j d�s6| j d|j � dS d}| jj� y�| jj|j�}| jj|tj�}t j | jt |j��}|j t |�d � | j|j||dd gd |j|| f ��r&| j d |j|| f � t j� }|j|_t jt |jj� �t jd �|d < | j|g d || ��r&| j d|| � d}W n | jj� � Y nX |�rT| jj� n | jj� dS )zhandle a missing parentz%ERROR: parent object not found for %sz!Move object %s into LostAndFound?rO z&Not moving object %s into LostAndFoundNFr+ zshow_deleted:0zrelax:0z2Failed to rename object %s into lostAndFound at %sz)Renamed object %s into lostAndFound at %sZlastKnownParentz:Failed to set lastKnownParent on lostAndFound object at %sz0Set lastKnownParent on lostAndFound object at %sT)r� r� r� r1 �transaction_startr� ru r Z DS_GUID_LOSTANDFOUND_CONTAINERra rb ry �remove_base_componentsr� r� r� r� �parentr� r� �transaction_cancel�transaction_commit)r� r� Zkeep_transactionr� Zlost_and_found�new_dnr� r! r! r" �err_missing_parent� s6 zdbcheck.err_missing_parentc C s� t j| jt|��}|jt|�d � |j� }d} ||krH| d||f 7 } | d| 7 } | jd|j| |f � | j d|j|f d�s�| jd|j|f � d S | j |j|||d |j|f �r�| jd |j|f � d S ) zhandle a wrong dnr+ r( z%s=%r zname=%rz!ERROR: wrong dn[%s] %s new_dn[%s]zRename %s to %s?rV zNot renaming %s to %sNz"Failed to rename object %s into %szRenamed %s into %s) ra rb r1 ry r r� r r� r� r� r� ) r� r� r �rdn_attrZrdn_val�name_valr� Znew_rdnZ new_parentZ attributesr! r! r" � err_wrong_dn� s zdbcheck.err_wrong_dnc C s� | j d|d |j|f � | jd|d ||jf d�sT| j d|d ||jf � dS tj� }|j|_tjt|�tjd�|d< | j|dt j gd |j|f �r�| j d |j|f � dS ) zhandle a wrong instanceTypez0ERROR: wrong instanceType %s on %s, should be %d� instanceTypez(Change instanceType from %s to %d on %s?rP z-Not changing instanceType from %s to %d on %sNr zlocal_oid:%s:0zGFailed to correct missing instanceType on %s by setting instanceType=%dz7Corrected instancetype on %s by setting instanceType=%d) r� r� r� ra r� r� ry r� r� r �&DSDB_CONTROL_DBCHECK_MODIFY_RO_REPLICA)r� r� �calculated_instancetyper� r! r! r" �err_wrong_instancetype� s z dbcheck.err_wrong_instancetypec C s" | j d|j| jj|j�f � d S )Nz�ERROR: incorrect userParameters value on object %s. If you have another working DC that does not give this warning, please run 'samba-tool drs replicate --full-sync --local <destinationDC> <sourceDC> %s')r� r� r1 r� )r� r� r� r r! r! r" �err_short_userParameters� s z dbcheck.err_short_userParametersc C s� | j d||jf � | jd|j d�s:| j d|j � dS tj� }|j|_tjt|| d �tjd�|d< | j|g d |j �r�| j d |j � dS ) z6handle a userParameters that is wrongly base64 encodedzNERROR: wrongly formatted userParameters %s on %s, should not be base64-encodedz2Convert userParameters from base64 encoding on %s?rW z6Not changing userParameters from base64 encoding on %sNr �userParametersr zOFailed to correct base64-encoded userParameters on %s by converting from base64zGCorrected base64-encoded userParameters on %s by converting from base64) r� r� r� ra r� r� r r� r� )r� r� r� r r� r! r! r" �err_base64_userParameters� s z!dbcheck.err_base64_userParametersc C s� | j d|j � | jd|j d�s6| j d|j � dS tj� }|j|_tj|| d jd�jd�tjd �|d < | j |g d |j �r�| j d |j � dS ) z5handle a userParameters that is wrongly utf-8 encodedzPERROR: wrongly formatted userParameters on %s, should not be pseudo-UTF8 encodedz0Convert userParameters from UTF8 encoding on %s?rX z4Not changing userParameters from UTF8 encoding on %sNr r) z utf-16-ler r zQFailed to correct psudo-UTF8 encoded userParameters on %s by converting from UTF8zICorrected psudo-UTF8 encoded userParameters on %s by converting from UTF8) r� r� r� ra r� r� r �encoder� r� )r� r� r� r r� r! r! r" �err_utf8_userParameters s z dbcheck.err_utf8_userParametersc C s� | j d|j � | jd|j d�s6| j d|j � dS tj� }|j|_tj|| d jd�jd�tjd �|d < | j |g d |j �r�| j d |j � dS ) z:handle a userParameters that has been utf-16 encoded twicezQERROR: wrongly formatted userParameters on %s, should not be double UTF16 encodedz:Convert userParameters from doubled UTF-16 encoding on %s?rY z>Not changing userParameters from doubled UTF-16 encoding on %sNr z utf-16-ler) r r zJFailed to correct doubled-UTF16 encoded userParameters on %s by convertingzBCorrected doubled-UTF16 encoded userParameters on %s by converting) r� r� r� ra r� r� r r r� r� )r� r� r� r r� r! r! r" �err_doubled_userParameters s z"dbcheck.err_doubled_userParametersc C s" | j d|j| jj|j�f � dS )z?Fix a truncated userParameters due to a pre 4.1 replication bugz�ERROR: incorrect userParameters value on object %s (odd length). If you have another working DC that does not give this warning, please run 'samba-tool drs replicate --full-sync --local <destinationDC> <sourceDC> %s'N)r� r� r1 r� )r� r� r� r! r! r" �err_odd_userParameters+ s z dbcheck.err_odd_userParametersc C sp | j j|tj|gdddgd�}| jj|�}x@|d | D ]0}t| j |jd�|�}|jj d�}||kr8|S q8W dS ) z#return a revealed link in an objectzshow_deleted:0z extended_dn:0zreveal_internals:0)r% r& r' r� r r) r� N) r1 rv ra rw r2 �#get_syntax_oid_from_lDAPDisplayNamer r r� r� ) r� r� r� r� r� � syntax_oidr� r� Zguid2r! r! r" �find_revealed_link/ s zdbcheck.find_revealed_linkc C s d}t � }t � }|d@ r"|||fS |dkr4|||fS dt|j�|f } | | jkrZd| j| < �x�|| D �]�} t| j| jd�|�} | jjd�} | dkr�qfttj | ��} | | j }||kr�| ||< qf|d7 }||kr�t � ||< d|| d< t � || d < t || jjd ��}t | jjd ��}||k�rF|| || d< || d j | � qf||k �r|| || d< || d j || � | ||< qft || jjd ��}t | jjd ��}||k�r�|| || d< || d j | � qf| || d< || d j || � | ||< qfW |dk�rd | j| < |||fS ) z1check a linked values for duplicate forward linksr r+ Nz%s:%sFr) r� �keepr� � RMD_VERSION� RMD_LOCAL_USNT)rH ry r� rI r r1 r r� r r� r� r� r� r )r� r� r� r� �forward_linkIDr� r� �duplicate_dict� unique_dictr r� r� r� �guidstr�keystrZv1Zv2Zu1Zu2r! r! r" �check_duplicate_links; s` z dbcheck.check_duplicate_linksc C s� d}dt |�|f }|| jkr(| j| S | j|�\}}|g}ddg} y | jjt |�tj|| d�} W n8 tjk r� } z| j\} } | tj kr�� dS d} ~ X nX | d }| j |||||�\}}}|| jkr�| j| S dS )z1check a linked values for duplicate forward linksr z%s:%szextended_dn:1:1zreveal_internals:0)r% r& r' r� FN) ry rI r� r1 rv ra rw rz r{ r| r% )r� r� r� r� r� r r r� r' r� r� Ze8r� r� r� r! r" r! r! r" r� | s( zdbcheck.has_duplicate_linksc C s" g }d}|dkr||fS |t jkr8| jd| � ||fS d| jkrT| jd� ||fS yJ|d d }tttj|��} d|| f } | jj | t j dgd d d gd �} W n0 t j k r� } z| j \} }� W Y dd} ~ X nX �xF| D �]<}t | j|jj� |�}|jjd �}ttj|��}||k�rq�ttj|d d �}x.|jjD ]"}|j}|j}|jtjk�r6P �q6W tjd�}d}|}|}d}|} |} |} d} |jjdt|�� |jjdt|�� |jjdt|�� |jjdt| �� |jjdt| �� |jjdt| �� |jjdt| �� |d7 }|j |� q�W ||fS )zMFind all backlinks linking to obj_guid_str not already in forward_unique_dictr Nz5Not checking for missing forward links for syntax: %sZ sortedLinksz6Not checking for missing forward links because the db zhas the sortedLinks feature� objectGUIDz(%s=<GUID=%s>)zextended_dn:1:1zsearch_options:1:2zpaged_results:1:1000)r* r& r' r� r� �replPropertyMetadataz$ffffffff-4700-4700-4700-000000b13228r+ Z RMD_ADDTIMEZRMD_CHANGETIMEr� Z RMD_INVOCIDZRMD_ORIGINATING_USNr r zQNot checking for missing forward links because the db has the sortedLinks feature) ra � SYNTAX_DNr� r/ ry r r r� r1 rv � SCOPE_SUBTREErz r{ r r� r� r� r �replPropertyMetaDataBlob�ctr�array� local_usn�originating_change_time�attidr ZDRSUAPI_ATTID_objectClassr� r r ) r� r� r� r� r� Zforward_unique_dict�missing_forward_linksr� �obj_guidZ obj_guid_str�filterr� Ze9r� r� �rr� r� r# �replr� r- �tZoriginating_invocid�originating_usnZ rmd_addtimeZrmd_changetimer� Z rmd_invocidZrmd_originating_usnZ rmd_local_usnZ rmd_versionr! r! r" �)find_missing_forward_links_from_backlinks� sp z1dbcheck.find_missing_forward_links_from_backlinksc 5 C s0 d}|d d }| j |�\}}|dk r4| jj|�}nd}|d.k} | rP| jrPi } n| j|||||�\}} } t| �dk�r�| j||||| �\} } || 7 }dd� | j� D �}| dkr�| jd||j f � n| jd ||j f � xZ| D ]R}| jd | � | j d | d ��s&| j |j ||j j � |j ||d d� q�||g7 }q�W xN| j � D ]B}| | }x |d D ]}| jd| � �qTW | jd|d � �q>W dd� t|�D �}| j|||� tj|d|�||< �xr|| D �]d}t| j|jd�|�}|j jd�}|dk�r|d7 }| j|j |||d� �q�ttj|��}ddg}t|�j� dk�rX|j | jk�rXd}|j d � nd }|dk �rp|j |� y$| jj d | tj |d d d gd!�}W nX tj k �r� } z8|j \} } | tj!k�r || j"|j |||�7 }�w�W Y dd}~X nX |�rZd"t#|d d d � |_$d#t#|d d d � |_%t|�t|�k�rZ|d7 }| j&|j |||d$� �q�d|k�ozt|d d �j'� d%k} d|d k�o�t|d d d �j'� d%k} | �r�|j | j(k�r�|�r�| j)|||� |d7 }�q�n�| �r�| j*|� �r�|�r�|d7 }|j jd&�} | �r�d|d k�r�t+t,j-|d d' d �}!d }"x:|!j.j/D ].}#|#j0t1j2k�rD|#j3}$|$t#| �k�rDd}"P �qDW |"�r�| j4|j ||||d j d� �q�| j4|j ||||d j d � �q�|j jd(�}%d}&|%dk �r�t#|%�}&|&d@ �r6|dk �r6t|d j �t|j �k�r6|d7 }| j5|j ||||d j d)� �q�|d j jd�|j jd�k�r||d7 }| j5|j ||||d j d� �q�|d j jd*�}'|j jd*�}(|(dk�r�|'dk �r�|d7 }| j6|j ||||'� �q�|(|'k�r�|d7 }| j5|j ||||d j d*� �q�|dk�rZ|dk�r�t|d j �t|j �k�r�|j$|j j7� })| j8|j ||)||d j � �q�| �rl| j�rl�q�d}*||d k�r�xv|d | D ]f}+t| j|+jd��},|,j jd�}-|,j jd(�}.d}/|.dk �r�t#|.�}/|/d@ �rސq�|-|k�r�|*d7 }*�q�W |*dk�rt|t9j:k�s|t9j:k�rt|d@ �std}0x>|| D ]2}1t| j|1jd��j jd�}2|2|k�r0|0d7 }0�q0W |*|0k�rt�q�d}3xr|| D ]f}+t| j|+jd��},|,j jd�}-|,j jd(�}.d}/|.dk �r�t#|.�}/|/d@ �rԐq�|-|k�r�|3d7 }3�q�W |*|3k�r��q�|3|* }4|d@ �rd|*dk�r:|d7 }| j |j |||j ||� �q�| jd+||3t|j �||*t|j �f � �q�| jd,||3t|j �||*t|j �f � x�|4dk� r$|d7 }|4dk�r�|*dk�s�|4dk�r�| jd-t|j � � P | j;|||j j � ||j � |4d8 }4n*| j |d j ||j j � |j ||� |4d7 }4�q�W �q�W |S )/z$check a DN attribute for correctnessr r& N�member�memberOfc S s g | ]}|�qS r! r! )�.0r� r! r! r" � <listcomp> s z$dbcheck.check_dn.<locals>.<listcomp>zKERROR: Missing and duplicate forward link values for attribute '%s' in '%s'z?ERROR: Duplicate forward link values for attribute '%s' in '%s'zMissing link '%s'z8Schedule re-adding missing forward link for attribute %srG F)r� r� zDuplicate link '%s'zCorrect link '%s'r c S s g | ] }t |��qS r! )ry )r: r� r! r! r" r; 9 s r) r� r+ z missing GUID� isDeleted�replPropertyMetaDatazmsds-hasinstantiatedncsTr z <GUID=%s>zextended_dn:1:1zshow_recycled:1zreveal_internals:0)r% r& r' r� z B:8:%08X:z%08Xz(incorrect instanceType part of Binary DN�TRUEr r' r� �stringr� zHWARNING: Link (back) mismatch for '%s' (%d) on '%s' to '%s' (%d) on '%s'zIERROR: Link (forward) mismatch for '%s' (%d) on '%s' to '%s' (%d) on '%s'z5ERROR: Can't fix missing multi-valued backlinks on %s)r8 r9 )<r� r2 r r[ r% r� r7 r� r� r� r� r� r� �keys�sortedr ra r� r r1 r r� r� ry r r� �lowerri r rv rw rz r{ r| r� r� r� Zbinaryr� �upperr� r� r� r r r* r+ r, r/ r �DRSUAPI_ATTID_isDeletedr- r� r� r� r� r� r r� r� )5r� r� r� r r� r1 r� r� Zreverse_syntax_oidZis_member_linkr! r" r0 Zmissing_error_countZ forward_linksr� r$ �dZddr r� r� r� r# r' Z fixing_msDS_HasInstantiatedNCsr� Ze3r� r� � is_deletedZtarget_is_deletedr- r4 Z found_datar� Z deleted_usnZrmd_blobr� Z target_sidZlink_sidZbad_dnZ match_count�vZv_dnZv_guidZv_blobZ v_rmd_flagsZ forward_count�wZw_guidZexpected_countZ diff_countr! r! r" �check_dn s� "* $ zdbcheck.check_dnc C s$ x |j jD ]}|j|kr |S q W d S )N)r+ r, r/ )r� r4 r/ r� r! r! r" �find_repl_attid- s zdbcheck.find_repl_attidc C s* t tj|�}| j||�}|dk r&|jS dS )z�Read metadata properties and return the originating time for a given attributeId. :return: the originating time or 0 if not found Nr )r r r* rJ r. )r� r� r/ r4 r� r! r! r" �get_originating_time4 s z dbcheck.get_originating_timec C s� t � }t � }g }|j| j�}ttj|�}x^|jjD ]R}| jj |j �} |j | j � � |j |j � | jj| |d�} | |j kr2|j |j � q2W |||fS )zgRead metadata properties and list attributes in it. raises KeyError if the attid is unknown.)� is_schema_nc)rq � is_child_ofrf r r r* r+ r, r2 � get_lDAPDisplayName_by_attidr/ r� rB r � get_attid_from_lDAPDisplayName) r� r� r� �set_att� wrong_attidsZ list_attid� in_schema_ncr4 r� �att� correct_attidr! r! r" �process_metadataA s zdbcheck.process_metadatac C s� t ttj|d d ��}tj| jd| �}| jj|tj|gddgd�}|d }tj � }||_ tj || tj |�||< | j |dddgd | �r�| jd | � d S ) z�re-write replPropertyMetaData elements for a single attribute for a object. This is used to fix missing replPropertyMetaData elementsr& r z <GUID=%s>zsearch_options:1:2zshow_recycled:1)r% r& r' r� zrelax:0z provision:0z'Failed to fix metadata for attribute %sz Fixed metadata for attribute %sN)ry r r r� ra rb r1 rv rw r� r� r� r� r� r� )r� r� �attr�guid_strr� r� r� �nmsgr! r! r" � fix_metadataW s zdbcheck.fix_metadatac C s� |j tj@ rd S d}|jtjkr&d}n4|jtjkr8d}n"|jtjkrJd}n|jtjkrZd}|sbd S |jj tj @ std S t |jj �S )NFT) �flagsr ZSEC_ACE_FLAG_INHERIT_ONLY�typeZ"SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECTZ!SEC_ACE_TYPE_ACCESS_DENIED_OBJECTZ SEC_ACE_TYPE_SYSTEM_AUDIT_OBJECTZ SEC_ACE_TYPE_SYSTEM_ALARM_OBJECTr� Z%SEC_ACE_INHERITED_OBJECT_TYPE_PRESENTry Zinherited_type)r� �aceZcheckr! r! r" � ace_get_effective_inherited_typeg s z(dbcheck.ace_get_effective_inherited_typec C s\ || j kr| j | S d| }| jj| j|dgd�}tttj|d d d ��}|| j |< |S )Nz0(&(ldapDisplayName=%s)(objectClass=classSchema))Z schemaIDGUID)r% r* r' r )rj r1 rv rf ry r r r� )r� �clsZfltr� r5 r! r! r" �lookup_class_schemaIDGUID} s z!dbcheck.lookup_class_schemaIDGUIDc C sj d}|| }t tj|d �}d|ko:t|d d �j� dk}|rH|d fS tj� }|j|_|j|_|j|_|j|_d}d } g } |j d k r�|j j } xdt dt | ��D ]R} | | } | j tj@ s�|j| � q�| j| �} | d kr�q�| d k r�| | kr�d}q�| } q�W g } |jd k �r |jj } xtt dt | ��D ]b} | | } | j tj@ �sD|j| � �q | j| �} | d k�r\�q | d k �rx| | k�r d}�q | } �q W |�r�||fS | d k�r�|d fS d }y|d d }W n$ tk �r� } zW Y d d }~X nX |d k�rF| jj|tjddgd gd �}|d }d|k�o*t|d d �j� dk}|�r:|d fS |d d }| j|�} | | k�rb||fS |d fS ) N�nTSecurityDescriptorr r< r> FT� objectClassr+ zshow_recycled:1)r% r& r' r� r� r� )r r � descriptorry rC � owner_sid� group_sidr[ ZrevisionZsacl�acesr� r� rZ ZSEC_ACE_FLAG_INHERITED_ACEZsacl_addr] ZdaclZdacl_addr� r1 rv ra rw r_ )r� r� r� �sd_attr�sd_val�sdrF Zsd_cleanZbrokenZlast_inherited_typere r� r\ r5 r^ r� r� r� r! r! r" � process_sd� s� " zdbcheck.process_sdc C s� d}t |�}tjtjB }| jd||f d�sB| jd||f � dS tj� }||_tj |tj |�||< | j |d| gd| �r�| jd||f � dS ) z/re-write the SD due to incorrect inherited ACEsr` z Fix %s on %s?rL zNot fixing %s on %s Nz sd_flags:1:%dzFailed to fix attribute %sz Fixed attribute '%s' of '%s' ) r r � SECINFO_DACL� SECINFO_SACLr� r� ra r� r� r� r� r� )r� r� rh � sd_brokenrf rg �sd_flagsrX r! r! r" � err_wrong_sd� s zdbcheck.err_wrong_sdc C s� d}t |�}tjtjB }|jdk r,|tjO }|jdk r@|tjO }| jd|||f d�sl| j d||f � dS t j � }||_ t j |t j|�||< | j|d| gd| �r�| j d||f � dS ) zare-write the SD due to not matching the default (optional mode for fixing an incorrect provision)r` Nz,Reset %s on %s back to provision default? %sr_ zNot resetting %s on %s z sd_flags:1:%dz Failed to reset attribute %sz Fixed attribute '%s' of '%s' )r r rj rk rc � SECINFO_OWNERrd � SECINFO_GROUPr� r� ra r� r� r� r� r� )r� r� rh �diffrf rg rm r� r! r! r" �err_wrong_default_sd s z dbcheck.err_wrong_default_sdc C s� d}t |�}tjtjB }| jd||f d�sB| jd||f � dS tj� }||_tj |tj |�||< | j j | j � | j|d| gd| �r�| jd||f � | j j | j� dS ) z/re-write the SD due to a missing owner or groupr` z'Fix missing owner or group in %s on %s?rM z+Not fixing missing owner or group %s on %s Nz sd_flags:1:%dz'Failed to fix metadata for attribute %sz Fixed attribute '%s' of '%s' )r r ro rp r� r� ra r� r� r� r� r1 Zset_session_infor r� r} )r� r� rh rf rg rm rX r! r! r" �err_missing_sd_owner s z dbcheck.err_missing_sd_ownerc C s | j r dS || jkrdS ttj|�}| j|tj�}tj |j �}t j � }| j d }|| }||krddS || } |d } | dkr�| j d| � | j dt j| �|d f � n&| j d| � | j dt j| �| f � | j d |j|j|j|j|jt jtj |j ��f � | jd 7 _d S )NF� �< � z`SKIPPING additional checks on object %s which very recently became an expired tombstone (normal)zbINFO: it is expected this will be expunged by the next daily task some time after %s, %d hours agoz+SKIPPING: object %s is an expired tombstonezTINFO: it was expected this object would have been expunged soon after%s, %d days agozHisDeleted: attid=0x%08x version=%d invocation=%s usn=%s (local=%s) at %sr+ Ti� i�Q i� i�Q i )r] r� r r r* rJ r rD �samba� nttime2unixr. �timer- r� �ctimer/ �version�originating_invocation_idr6 r- r^ ) r� r� �repl_valr4 r< � delete_timeZ current_time�tombstone_deltar� Z expunge_timeZ delta_daysr! r! r" �is_expired_tombstone8 s> z dbcheck.is_expired_tombstonec C s� t tj|�}| j|tj�}tj|j�}| j d }g }xb|j j D ]V}|j tjkrPq>|j |j kr^q>|j|jkrlq>tj|j�}|| } | |kr�q>|j|� q>W ||fS )Nrt ru i� i�Q )r r r* rJ r rD rw rx r. r- r+ r, r/ r- r ) r� r} r4 r< r~ r �foundr� Z change_timer� r! r! r" �find_changes_after_deletionn s$ z#dbcheck.find_changes_after_deletionc sZ � j |�\}}t|�dkr dS � fdd�}� jd| � ||� x|D ] }||� qFW dS )Nr Fc sj y� j j| j�}W n tk r0 d| j }Y nX � jd|| j| j| j| j| jt j t j | j ��f � d S )Nz<unknown:0x%x08x>zA%s: attid=0x%08x version=%d invocation=%s usn=%s (local=%s) at %s)r2 rN r/ r� r� r{ r| r6 r- ry rz rw rx r. )r� �attname)r� r! r" � report_attid� s z8dbcheck.has_changes_after_deletion.<locals>.report_attidz,ERROR: object %s, has changes after deletionT)r� r� r� )r� r� r} r� r< r� r� r! )r� r" �has_changes_after_deletion� s z"dbcheck.has_changes_after_deletionc C s" | j |�\}}|j| j�}|j� }| jj||d�}g }xp|D ]h} | j|krLq<| jtjkrZq<| jtj krhq<y| jj | j�} W n t k r� d| j } Y nX |j | � q<W t |�dkr�| jddj|� � | jd� d S | jd|| jf d�s�| jd� d S | j|d gd | ��r | jd | � d S ) N)rL z<unknown:0x%x08x>r zUnexpeted attributes: %sr z%Not fixing changes after deletion bugz6Delete broken tombstone object %s deleted %s days ago?rp zrelax:0zFailed to remove DN %sz Removed DN %s)r� rM rf � get_rdn_namer2 rO r/ r ZDRSUAPI_ATTID_nameZ DRSUAPI_ATTID_lastKnownParentrN r� r r� r� r r� r- r� ) r� r� r} r� r< rR r Z rdn_attidZ unexpectedr� r� r! r! r" �err_changes_after_deletion� s: z"dbcheck.err_changes_after_deletionc C sp t tj|�}|j}d}xT|jD ]J}|jtjd�kr4q d}| jd||j |j t j t j|j��| jj� f � q W |S )NFz$00000000-0000-0000-0000-000000000000Ta ERROR: on replPropertyMetaData of %s, the instanceType on attribute 0x%08x, version %d changed at %s is 00000000-0000-0000-0000-000000000000, but should be non-zero. Proposed fix is to set to our invocationID (%s).)r r r* r+ r, r| r r� r� r/ r{ ry rz rw rx r. r1 �get_invocation_id)r� r� �repl_meta_datar4 r+ r� r� r! r! r" �"has_replmetadata_zero_invocationid� s z*dbcheck.has_replmetadata_zero_invocationidc C s0 t tj|�}|j}tjttj� ��}d}xb|jD ]X}|j t j d�krFq0d}| j j tj�} |jd |_||_t j | j j� �|_ | |_| |_q0W |�r,t|�} tj� } || _| jd||| j j� f d�s�| jd||f � d S tj� } || _tj| tj|�| |< | j | dt j d gd | ��r,| jd ||f � d S ) NFz$00000000-0000-0000-0000-000000000000Tr+ zZFix %s on %s by setting originating_invocation_id on some elements to our invocationID %s?rQ z6Not fixing zero originating_invocation_id in %s on %s zlocal_oid:%s:0z#local_oid:1.3.6.1.4.1.7165.4.3.14:0zFailed to fix attribute %sz Fixed attribute '%s' of '%s' ) r r r* r+ rw Z unix2nttimer� ry r, r| r r� r1 Zsequence_numberra ZSEQ_NEXTr{ r. r� r6 r- r r� r� r� r� r� r� r� r r ) r� r� rV r� r4 r+ Znowr� r� �seq�replBlobr� rX r! r! r" �"err_replmetadata_zero_invocationid� s< z*dbcheck.err_replmetadata_zero_invocationidc C sd t tj|�}|j}xL|jD ]B}y| jj|j�}W q tk rZ | j d|j||f � d S X qW d S )NzIERROR: attributeID 0X%0X is not known in our schema, not fixing %s on %s ) r r r* r+ r, r2 rN r/ r� r� )r� r� rV r� r4 r+ r� rS r! r! r" � err_replmetadata_unknown_attid s z&dbcheck.err_replmetadata_unknown_attidc s� t tj|�}d}t� }t� � i }|j| j�} |j} t| jd d � dd� d�| _�xt | j�D ]�} t d|| j f � | j j | j �} | j� |k�r>| jd| ||f � | jd||| j | || j f d�s�| jd | j | ||f � d S d }� j| j � | j|| jkr\| j|| _| j|| _| j|| _| j|| _| j|| _q\| || < |j| j� � q\W � fd d �| jD �} t|�d k�r8x�| D ]�} | j |k�r�| j j | j �} | j j| | d�}| jd||f � | jd||| j | || j f d��s| jd| j || ||f � d S d }|| _ �q�W |�r8t| d d � dd� d�| d d �< |�s|| jd||f � | jd||f d��s|| jd||f � d S t| �| _| | _t|�}tj � }||_ tj |tj |�||< | j |dt!j" ddgd| ��r�| jd ||f � d S ) NFc S s | j S )N)r/ )r� r! r! r" �<lambda>! s z:dbcheck.err_replmetadata_incorrect_attid.<locals>.<lambda>)�keyz %s: 0x%08xz7ERROR: duplicate attributeID values for %s in %s on %s zLFix %s on %s by removing the duplicate value 0x%08x for %s (keeping 0x%08x)?rR z5Not fixing duplicate value 0x%08x for %s in %s on %s Tc s g | ]}|j � kr|�qS r! )r/ )r: r� )� remove_attidr! r" r; G s z<dbcheck.err_replmetadata_incorrect_attid.<locals>.<listcomp>r )rL z0ERROR: incorrect attributeID values in %s on %s zEFix %s on %s by replacing incorrect value 0x%08x for %s (new 0x%08x)?rS zANot fixing incorrect value 0x%08x with 0x%08x for %s in %s on %s c S s | j S )N)r/ )r� r! r! r" r� X s z/ERROR: unsorted attributeID values in %s on %s z+Fix %s on %s by sorting the attribute list?rT zNot fixing %s on %s zlocal_oid:%s:0z#local_oid:1.3.6.1.4.1.7165.4.3.14:0z#local_oid:1.3.6.1.4.1.7165.4.3.25:0zFailed to fix attribute %sz Fixed attribute '%s' of '%s' )#r r r* rq rM rf r+ rA r, �reversedr� r/ r2 rN rB r� r� r� r- r{ r. r| r6 r� rO �countr ra r� r� r� r� r� r r )r� r� rV r� rQ r4 r4 rP Zhash_attrR r+ r� rS Znew_listrT r� rX r! )r� r" � err_replmetadata_incorrect_attid s� z(dbcheck.err_replmetadata_incorrect_attidc C s� d}d|kr | j d|j � d}d|ks@t|d d �j� dkrT| j d|j � d}d |krp| j d |j � d}d |ks�t|d d �j� dkr�| j d |j � d}d |kr�| j d|j � d}d|kr�t|d d �j� dkr�| j d|j � d}d|k�s<t|d �dk�s<t|d d �dk�s<t|d d �dk�rP| j d|j � d}d|k�spt|d d �dk�r�| j d|j � d}|S )NF� descriptionz>ERROR: description not present on Deleted Objects container %sT�showInAdvancedViewOnlyr �FALSEzIERROR: showInAdvancedViewOnly not present on Deleted Objects container %s�objectCategoryzAERROR: objectCategory not present on Deleted Objects container %s�isCriticalSystemObjectzIERROR: isCriticalSystemObject not present on Deleted Objects container %s� isRecycledz9ERROR: isRecycled present on Deleted Objects container %sr< z8ERROR: isDeleted not set on Deleted Objects container %sra rv �topr+ � containerzBERROR: objectClass incorrectly set on Deleted Objects container %s� systemFlagsz -1946157056zBERROR: systemFlags incorrectly set on Deleted Objects container %s)r� r� ry rC r� )r� r� Zfaultyr! r! r" �is_deleted_deleted_objectsq s8 z"dbcheck.is_deleted_deleted_objectsc C s2 t j� }|j |_}d|kr0t jdt jd�|d< d|krLt jdt jd�|d< d|krnt jd| j t jd�|d< d|kr�t jdt jd�|d< d|kr�t jdt jd�|d< t jdt jd �|d < t jd t jd �|d < t jd d gt jd�|d< | jd| d��s | jd| � d S | j |dgd| ��r.| jd| � d S )Nr� z Container for deleted objectsr� r> r� zCN=Container,%sr� r� r< z -1946157056r� r� r� ra zAFix Deleted Objects container %s by restoring default attributes?rU z.Not fixing missing/incorrect attributes on %s zrelax:0z+Failed to fix Deleted Objects container %sz%Fixed Deleted Objects container '%s' ) ra r� r� r� r� rf r� r� r� r� )r� r� rX r� r! r! r" �err_deleted_deleted_objects� s, z#dbcheck.err_deleted_deleted_objectsc C s� t j� }||_| jj� }| jj� r:| jd||jf � d S | jd|j d�s`| jd|j � d S t j|t j |�||< | j |g d||jf �r�| jd||jf � d S )Nz Not fixing %s %s for the RODCz-Add yourself to the replica locations for %s?rn z.Not fixing missing/incorrect attributes on %s zFailed to add %s for %szFixed %s for %s) ra r� r� r1 rh �am_rodcr� r� r� r� r� )r� r� Z cross_refrV rX �targetr! r! r" �err_replica_locations� s z dbcheck.err_replica_locationsc C sL || j jkrdS || jkr dS || jkr,dS || jkr:dS || jkrHdS dS )NTF)r1 rc rd re rf rg )r� r� r! r! r" � is_fsmo_role� s zdbcheck.is_fsmo_rolec C s� d}| j j|�}||kr�|tjO }y | j j|j� tjg dgd� W n: tjk r| } z |j \}}|tj krl� W Y d d }~X n X |tj O }| j d k r�t |�dd� | j D �kr�|tjO }|S )Nr zshow_recycled:1)r% r& r' r� c S s g | ] }t |��qS r! )ry )r: �xr! r! r" r; � s z2dbcheck.calculate_instancetype.<locals>.<listcomp>)r1 r� r ZINSTANCE_TYPE_IS_NC_HEADrv r ra rw rz r{ r| ZINSTANCE_TYPE_NC_ABOVEr� ry ZINSTANCE_TYPE_WRITE)r� r� � instancetyper� Ze4r� r� r! r! r" �calculate_instancetype� s " z dbcheck.calculate_instancetypec C sJ x@| j D ]6\}}||krtj| jj� �}ttj||| jd��S qW t�d S )N)rt ) rk r rx r1 r~ r rb rt r� )r� r� Zsd_dnZ descriptor_fnr� r! r! r" �get_wellknown_sd� s zdbcheck.get_wellknown_sdc s� |dkrdg� nt |�� tdd� � D ���� �fdd�}d�ksXd�ksX|j� j� �krl� jd � �jd � d �kr�x |j� d d fD ] }||� q�W d }d�kr�d }n6x4� D ],}| j|�\}}|dkr�q�|d@ r�q�d }P q�W |r�|d� |d� � �fS )z�A helper function for check_object() that calculates the list of attributes that need to be checked, and returns that as a list in the original case, and a set normalised to lowercase (for easy existence checks). N�*c s s | ]}|j � V qd S )N)rB )r: r� r! r! r" � <genexpr>� s z/dbcheck.find_checkable_attrs.<locals>.<genexpr>c s( | j � �kr$� j| � �j| j � � d S )N)rB r r� )�a)r' �lc_attrsr! r" �add_attr� s z.dbcheck.find_checkable_attrs.<locals>.add_attrr� Zdistinguishedname�namer< r� FTr r+ r= r& )r� rq r� rB r r� r� )r� r� r� r� r� Zneed_replPropertyMetaDatar� r� r! )r' r� r" �find_checkable_attrs� s< z dbcheck.find_checkable_attrsc C W C s� | j r| jd| � | j||�\}}yTd}|tjO }|tjO }|tjO }|tjO }| jj |t j dddd| dg|d�}W nV t j k r� } z8|j \}} |t jkr�| jr�| jd | � d S dS � W Y d d }~X nX t|�d kr�| jd | � d S |d } d} t� } t� } d }| jj| j�}y| jj|tjj�}W n tk �rH d }Y nX d }d }d }d }d}d }xn| D ]f}|j� dk�r�t| | d �dk�r�d}|j� dk�r�t| | d �}|j� dk�rh| | d }�qhW |�r|�r| j ||��r| d 7 } | j ||� | S | j ||��r| S �x�| D �]�}|dk�s |dk�r<�q |j� dk�rNd}|j� dk�r�t| | �d k�r�| j d 7 _ | jdt| | �|t| j�f � nt| | d �}|j� t| jj � �j� k�r$|}t| | �d k�r| j d 7 _ | jdt| | �|t| j�f � nt| | d �}|j� dk�r@| j!|| | d ��rf| d 7 } | j"||| | d � y | j#|| | d �\} }}W n4 tk �r� | d 7 } | j$||| | � �w Y nX t| �t|�k �s�t|�dk�s�t%|�|k�r | d 7 } | j&||| | d |� n2|d dk�r | j d 7 _ | jd|t|�f � �q |j� dk�rV| j'|| �\}}|d k �r�| j(|||� | d 7 } �q |j)d k�s�|j*d k�r�| j+||� | d 7 } �q ||k�s�| j,�r y| j-|�} W n tk �r� �w Y nX t.tj/| | d �} d } | j,�sd} t0| | tj1| jj2� �| d�} | dk�r | j3|| | � | d 7 } �q �q |j� dk�r�| jj4| j5|| | �} t%| �t%| | �k�s�| d | | d k�s�| d` | | da k�r | j6||t7| | �� | d 7 } �q |j� d k�rf| | d }!|!d k�r$| d 7 } | j8| || | � �q �nB|!d d � dbk�r>�q �n(|!d d!� d"k�rp| d 7 } | j9| || | � �q n�|!d dk�r�|!d# dk�r�|!d$ dk�r�|!d% dk�r�|!d& dk�r�| d 7 } | j:| || | � �q n�t|!�d' dk�r| d 7 } | j;| |� �q nd|!d dk�rf|!d' dk�rf|!d# dk�rf|!d( dk�rf|!d$ dk�rf| d 7 } | j<| || | � �q |j� d)k�s�|j� d*k�r�| | d | j=k�r�| j d 7 _ | jd+|| j| | d f � n| j=j>| | d � x4| | D ](}"|"d,k�r�| j?||� | d 7 } �q�q�W y| j5j@|�}#W n< tAk �rZ }$ z | jB| |� | d 7 } �w W Y d d }$~$X nX | jC|�\}%}&| j5jD|�}'|'tjE@ �r�|'tjF@ �r�|% �r�| j>|j� � |#tjGtjHtjIt jJgk�r�| | jK| ||#�7 } n�t� }(xh| | D ]\}"|(j>|"� | jj4| j5||"g�} t| �d k� s$| d |"k�r�| jL||| | � | d 7 } P �q�W t| | �t|(�k� r~| jM||| | t7|(�� | d 7 } P |j� d-k�r | jN|�})t| d. �d k� s�t| d. d �|)k�r | d 7 } | jO| |)� �q W | � rd/|k� s�d|k� r| d 7 } | jP|� d/|k� sd|k� r||d k� rF| j d 7 _ | jd0t| j� � |d k� r|| j d 7 _ | jd1| jj � t| j�f � |d k � r�d }*dd2g}+|� r�|tjjQ@ � s�|}*|+d3tjR g7 }+|*d k� r�| jjS� }*yt jT| jd4|* �},W nD tUk � r( }- z&| j d 7 _ | jd5|*� d6�� W Y d d }-~-X n�X |,jVd| jj � |� | j|k� rP| j},|,| jk� rz| d 7 } | jW| |,||||+� n4| jjX� |k� r�| j d 7 _ | jd7||| jf � d}.|� r�| j|k� rHd8}/d9}0| jY||/�}1|1|0k� rH| jZd:t|� d;�� r6t j[� }2||2_t j\d<t j]d=�|2d=< | d 7 } | jj^|2d>gd?� n| jd@t|� � xr| j_| �D ]d}3|.� rp| jdA| � d }.| d 7 } | jdB|3 � | jZdC|3 dD�� s�| jdE|3 � � qT| j`| |3� � qTW | ja|�� r�dF| k� r�d/|k� s�dG|k� r�| jb| � | d 7 } yD|| jjc� k� r:t|jS� �| jdk� r:| jj |jS� t j ddgdH�}W nt t j k � r� }4 zT|4j \}} |t jk� r�|� r�| jdI| j � | jdJ� n| je| � | d 7 } n� W Y d d }4~4X nX || jfk� r�d/|k� r�| jg| �� r�| jh| � | d 7 } x�| jiD ]�\}5}$||5k� r�dK| k� r�dL}6| jjj� �r dM}6|6|$k�rD| jk| |$j|6� | d 7 } � q�d }7x*|$|6 D ] }8t|8�| jjl� k�rRd}7�qRW |7� s�| jk| |$j|6� | d 7 } � q�W || jmk�r8d/|k�s�dN|k�r8dO| k�r8| d 7 } | jn�r | jZdPdQ��r8| jjo� y| jjp� W n | jjq� � Y nX | jjr� n| jjj� �s8| jdR| � || jsk�r�dSdTg}9| jj | jst j |9dU�}x||9D ]t}:|:|d k�r~�qht|d |: d �};|;dV? }<dW|;@ }=|;dk�rh|=|<k�rh| jdX|=|<|=|<f � | j d 7 _ �qhW dS|d k�r | jdY| � | j d 7 _ y| jjt� \}>}<W nN t j k �rj }? z,|?j \}} | jdZ| � | j d 7 _ W Y d d }?~?X �n4X | jj2� }@�x$|>|<k�r�d[|@|>f }Ay | jj d\|A t j g dU�}W nB t j k �r� }- z"|-j \}} |t jk�rڂ d }W Y d d }-~-X nX |d k �r�| jd]|A|d j|f � | d 7 } | jZd^|A|f d_��r�| jjo� y*x$| jju� }B|B|>k�r@|Bd }>P �q@W W n | jjq� � Y nX | jjr� nP n|>d 7 }>�qzW | S )czcheck one objectzChecking object %sr zextended_dn:1:1zshow_recycled:1zshow_deleted:1z sd_flags:1:%dzreveal_internals:0)r% r& r� r' z)ERROR: Object %s disappeared during checkr+ Nz,ERROR: Object %s failed to load during checkFZ isdeletedr� TZ systemflagsZreplpropertymetadatar� ZdistinguishedNameZ objectclassr� z1ERROR: Not fixing num_values(%d) for '%s' on '%s'zYERROR: Not fixing incorrect initial attributeID in '%s' on '%s', it should be objectClassZntsecuritydescriptor)�ignoreAdditionalACEsr( Zuserparameters� � s r� � s IAAgACAAIAAgACAAIAAg� r� r� � rv r� Z attributeidZ governsidz@Error: %s %s on %s already exists as an attributeId or governsId� r� r r� z(ERROR: Not fixing missing 'name' on '%s'z&ERROR: Not fixing missing '%s' on '%s'zrelax:0zlocal_oid:%s:1z RDN=RDN,%sz#ERROR: could not handle parent DN 'z': skipping RDN checksz ERROR: Not fixing %s=%r on '%s'i0 l �)�x1cB& z-Fix isDeleted originating_change_time on '%s'rC r> r< z provision:0)r� z4Not fixing isDeleted originating_change_time on '%s'z On object %sz7ERROR: Attribute %s not present in replication metadataz-Fix missing replPropertyMetaData element '%s'rB z4Not fixing missing replPropertyMetaData element '%s'r Z fsmoroleowner)r% r& r� z'WARNING: parent object not found for %szFNot moving to LostAndFound (tombstone garbage collection in progress?)ZrepsFromzmsDS-NC-Replica-Locationsz msDS-NC-RO-Replica-LocationsZridsetreferencesr, z,Allocate the missing RID set for RID master?ro z^No RID Set found for this server: %s, and we are not the RID Master (so can not self-allocate)ZrIDAllocationPoolZrIDPreviousAllocationPool)r% r& r' � l �� z!Invalid RID pool %d-%d, %d >= %d!z No rIDAllocationPool found in %sz Couldn't get available RIDs: %sz%s-%dz<SID=%s>z6SID %s for %s conflicts with our current RID set in %szGFix conflict between SID %s and RID pool in %s by allocating a new RID?rZ r� r� s )vr3 r� r� r ro rp rj rk r1 rv ra rw rz r{ r| r` r� rq r� r� ru rw r r� r� rB ry r� r� r� r� r� r� r� r� rU r� rA r� ri rn rc rd rs r\ r� r rb r rx r~ rr r� r2 r� r� r r r r r r� r� r� r r� r� r� Z$get_systemFlags_from_lDAPDisplayNameZDS_FLAG_ATTR_NOT_REPLICATEDZDS_FLAG_ATTR_IS_CONSTRUCTEDr� ZDSDB_SYNTAX_OR_NAMEZDSDB_SYNTAX_STRING_DNr( rI r� r� r� r r� Z#SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETEr� r rb � ValueErrorZ set_componentr Z get_rdn_valuerK r� r� r� r� r� � differencerY r� r r� rr r r� r� r� r� r� r� rh r� r� r Zcreate_own_rid_setr r r� Zfree_rid_boundsZ allocate_rid)Cr� r� r� Z search_attrsr� rm r� Ze10r� r� r� r� Zset_attrs_from_mdZset_attrs_seenZgot_objectclassZnc_dnZdeleted_objects_dnZobject_rdn_attrZobject_rdn_valr r< r� Zrepl_meta_data_valr� Zlist_attid_from_mdrQ rh rl Z well_known_sdZ current_sdr� rq r� Z userparamsr� r r� r� r� �flagr� r Z parent_dnr� Z expected_dnr� Zshow_dnZisDeletedAttIdZexpectedTimeDoZ originatingrX rS Ze11Zdns_part�locationr� �locZ pool_attrsZ pool_attrZpoolZhighZlowZ next_free_ridr� r� ZsidZ allocated_ridr! r! r" r� s� ( $ $ " zdbcheck.check_objectc C sB t j| jd�}| jr"| jd| � | jj|t jd�}t|�dkrR| jd| � dS |d }d}d|krx| jd� |d S t|d d �j d ��s>| jd � |d7 }| j d �s�|S | jjt j| j|d d j d ��t jd gd�}tt t j|d d d ��}t j� }||_t jd| t jd�|d< | j|g ddd��r>| jd� |S )z!check the @ROOTDSE special objectz@ROOTDSEzChecking object %s)r% r& r+ z"Object %s disappeared during checkr r z(ERROR: dsServiceName missing in @ROOTDSEz<GUID=z1ERROR: dsServiceName not in GUID form in @ROOTDSEz"Change dsServiceName to GUID form?r) r& )r% r& r' z <GUID=%s>z+Failed to change dsServiceName to GUID formF)r� z"Changed dsServiceName to GUID form)ra rb r1 r3 r� rv rw r� ry r� r� r r r r� r� r� r� r� r� )r� r� r� r� r� rW r� r! r! r" r� D s6 zdbcheck.check_rootdsec C sR t j� }t j| jd�|_t jdt jd�|d< t jdt jd�|d< | j|g ddd�S ) zre-index the whole databasez @ATTRIBUTESr� Z force_reindexr� r� zre-indexed databaseF)r� ) ra r� rb r1 r� r� r� r� r� )r� r� r! r! r" �reindex_databaseh s zdbcheck.reindex_databasec C s> t j� }t j| jd�|_t jdt jd�|d< | j|g ddd�S )zOreset @MODULES to that needed for current sam.ldb (to read a very old database)z@MODULESZ samba_dsdbz@LISTzreset @MODULES on databaseF)r� )ra r� rb r1 r� r� r� r� )r� r� r! r! r" � reset_modulesr s zdbcheck.reset_modules) NFFFFFFFFF)FF)T)F)T)N)N�__name__� __module__� __qualname__�__doc__r� ra r) r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r r r r r r r% r� r7 rI rJ rK rU rY r] r_ ri rn rr rs r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r! r! r! r" r$ 8 s� 7 &k U # A!f , i 6"$% _ 1 0$ r$ )%ra rw ry �base64r r r r Z samba.dcerpcr r Z samba.ndrr r r Z samba.samdbr r Zsamba.descriptorr r r Z samba.authr r Z samba.netcmdr Zsamba.netcmd.fsmor Z samba.colourr r r r r# r� r$ r! r! r! r" �<module> s$
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка