Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/__pycache__/join.cpython-36.opt-1.pyc
Ðазад
3 �I�d�@ � @ s d Z ddlmZ ddlmZ ddlmZmZmZm Z m Z ddl Z ddlZddl Z ddl mZmZ ddlmZmZmZmZmZmZmZmZ ddlmZ dd lm Z m Z dd l m Z m Z m!Z!m"Z"m#Z#m$Z$ dd l%m&Z& dd l'm(Z( dd lm)Z) ddl*m+Z+ ddl,m-Z- ddlm.Z. ddlm/Z/ ddl0m1Z1 ddlm2Z2m3Z3 ddlm4Z4 ddl5m6Z6m7Z7m8Z8 ddl9Z9ddl:Z:ddl;Z;ddl<Z<ddl=Z=ddl>Z>ddl?m@Z@ ddlAmBZB ddlCmDZD ddlmEZEmFZF G dd� deG�ZHG d d � d eI�ZJd*d d �ZKd+d!d"�ZLd,d$d%�ZMG d&d'� d'eJ�ZNG d(d)� d)eN�ZOdS )-zJoining a domain.� )�system_session)�SamDB)�gensec�Ldb� drs_utils�arcfour_encrypt�string_to_byte_arrayN)�ndr_pack� ndr_unpack)�security�drsuapi�misc�nbt�lsa�drsblobs� dnsserver�dnsp)�DS_DOMAIN_FUNCTION_2003)� Credentials�DONT_USE_KERBEROS)�secretsdb_self_join� provision�provision_fill�FILL_DRS�FILL_SUBDOMAIN� DEFAULTSITE)� setup_path)�Schema)� descriptor)�Net)�setup_bind9_dns)�read_and_sub_file)�werror)� b64encode)� WERRORError� NTSTATUSError)�sd_utils)�ARecord� AAAARecord� CNAMERecord)� OrderedDict)� get_string)� CommandError)�dsdb�functional_levelc s e Zd Z� fdd�Z� ZS )�DCJoinExceptionc s t t| �jd| � d S )NzCan't join, error: %s)�superr/ �__init__)�self�msg)� __class__� � /usr/lib64/python3.6/join.pyr1 : s zDCJoinException.__init__)�__name__� __module__� __qualname__r1 � __classcell__r5 r5 )r4 r6 r/ 8 s r/ c @ s2 e Zd ZdZdJdd�ZdKdd�ZdLdd �ZdMd d �Zd d � Zdd� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,d-� ZdNd.d/�Zd0d1� Zd2d3� Zd4d5� Z d6d7� Z d8d9� Z d:d;� Z d<d=� Z d>d?� Z!d@dA� Z"dBdC� Z#dDdE� Z$dFdG� Z%dHdI� Z&dS )O� DCJoinContextzPerform a DC join.NFc C s || _ || _|| _|| _|| _| | _| | _|| _|| _| | _ d | _ g | _ g | _ | jj |j� tjB � t| j| jd�| _|| _|| _|r�|| _| jj| _nj| jr�|d kr�| j| j�| _n.| j jd| � | j|�| _| j jd| j � td| j t� | j| jd�| _| jd k�rt | _y| jj t j g d� W n8 t j k �rb } z|j!\}}t"|��W Y d d }~X nX t#| jj$� �| _%t#| jj&� �| _'t#| jj(� �| _)t#| jj*� �| _+t,j-| jj.� �| _/| j/| _0| j1� | _2| j3� | _4t5j6t#t7j8� ��| _9| jj:� | _;| j<� | _=| j>� | _?| d k �r| | _@ntAjBdd�| _@| jjC� | _D|�r || _Ed| jE | _Fd | jE| j| j+f | _Gd | jG | _Hd | jE| j%f | _Id | jEjJ� | jDf | _K| jjL� | _Md | j% }| jN|��r�d| jE|f | _Ond | _Od| jE d| jK d| jK| jMf g| _P| jj t j dg| j%d�}|d d d | _Qd| j% | _Rd| j' | _Sdt jT| jR� }| jj t jUg | jjV� |d�}| d k�rrd| _Wn$tX|�dk�r�d| _WtYd� n| | _W| jD| _Zd | _[t\j]t\j^B t\j_B t\j`B t\jaB | _bd | _cd | _dd | _ed| _fd | _gd | _\d | _hd| _id | _jd | _kd | _ld | _md| _nd S )N)�creds�lpz&Finding a writeable DC for domain '%s'z Found DC %sz ldap://%s)�url� session_info� credentialsr= )�scope�attrs�x z%s$z"CN=%s,CN=Servers,CN=%s,CN=Sites,%szCN=NTDS Settings,%sz CN=%s,OU=Domain Controllers,%sz%s.%szGCN=Topology,CN=Domain System Volume,CN=DFSR-GlobalSettings,CN=System,%szCN=%s,%szHOST/%szGC/%s/%sZrIDManagerReference)rA rB �baser zDC=DomainDnsZones,%szDC=ForestDnsZones,%sz$(&(objectClass=crossRef)(ncName=%s)))rA rB rD � expression�NONEzCNO DNS zone information found in source domain, not replicating DNSF)o�loggerr< r= �site� targetdir� use_ntvfs�plaintext_secrets� backend_store�backend_store_size�promote_existing�promote_from_dn�nc_list� full_nc_listZset_gensec_featuresZget_gensec_featuresr Z FEATURE_SEALr �net�server�forced_local_samdb�samdbr> � find_dc_site�info�find_dcr r r �search�ldb� SCOPE_BASE�LdbError�argsr/ �str�get_default_basedn�base_dn�get_root_basedn�root_dnZget_schema_basedn� schema_dnZget_config_basedn� config_dnr �dom_sidZget_domain_sid�domsid� forestsid�get_domain_name� domain_name�get_forest_domain_name�forest_domain_namer �GUID�uuidZuuid4� invocation_idZget_dsServiceName� dc_ntds_dn�get_dnsHostNameZdc_dnsHostName�get_behavior_version�behavior_version� acct_pass�sambaZ generate_random_machine_passwordZdomain_dns_name� dnsdomain�myname�samname� server_dn�ntds_dn�acct_dn�lower� dnshostnameZforest_dns_name� dnsforest� dn_exists� topology_dn�SPNs�rid_manager_dn�domaindns_zone�forestdns_zone� binary_encode�SCOPE_ONELEVEL�get_partitions_dn� dns_backend�len�print�realm� tmp_samdbr ZDRSUAPI_DRS_INIT_SYNCZDRSUAPI_DRS_PER_SYNCZDRSUAPI_DRS_GET_ANCZDRSUAPI_DRS_GET_NC_SIZEZDRSUAPI_DRS_NEVER_SYNCED� replica_flags�never_reveal_sid� reveal_sid� connection_dn�RODC� krbtgt_dn� managedby� subdomain� adminpass� partition_dn�dns_a_dn� dns_cname_dn� force_all_ips)�ctxrG rS r< r= rH � netbios_namerI �domain� machinepassrJ r� rN rK rL rM rT �e�enum�estrZ topology_baseZres_rid_manager�exprZ res_domaindnsr5 r5 r6 r1 A s� zDCJoinContext.__init__c C s� |rRy| j j|tjdgd�}W n tk r2 d S X x |D ]}| j|jdd� q:W y | j j|� td| � W n tk r� Y nX d S )N�dn)rD rA rB T)� recursivez Deleted %s) rU rY rZ r� � Exception� del_noerrorr� �deleter� )r� r� r� �res�rr5 r5 r6 r� � s zDCJoinContext.del_noerrorc C s� | j j| j j� dtj| j� ddgd�}t|�dkr8d S |s�t� }|j| j � y:|j | j � |j | j j � � td| j t� || j d�}W n Y nDX |jtjdd gd �}|d d d |d d d kr�td | j ��| j|d jd d � |d jddd�}|d k �r|| _| j| j� | j j| j j� dtjd| j �tjd| j �f g d�}|�rl| j|d jd d � | j j| j j� dtjd| j � g d�}|�r�tdtjd| j �tjd| j �f ��d S )NzsAMAccountName=%szmsDS-krbTgtLink� objectSID)rD rE rB r z ldap://%s)r> r? r@ r= � � tokenGroups)rA rD rB z�Not removing account %s which looks like a Samba DC account matching the password we already have. To override, remove secrets.ldb and secrets.tdbT)r� zmsDS-KrbTgtLink)�idxz/(&(sAMAccountName=%s)(servicePrincipalName=%s))zdns-%szdns/%sz(sAMAccountName=%s)znNot removing account %s which looks like a Samba DNS service account but does not have servicePrincipalName=%s)rU rY r_ rZ r� rw r� r �guessr= Zset_machine_account�set_kerberos_stater< Zget_kerberos_stater rS r r[ r/ r� r� �get� new_krbtgt_dnrv r| )r� �forcer� r< Z machine_samdbZ token_resr� r5 r5 r6 �cleanup_old_accounts� sP z"DCJoinContext.cleanup_old_accountsc C sT | j s| j|d� | jdk r(| j| j� | jdk r>| j| j� | j| j� | j| jdd� | jrl| j| j� | jr~| j| j� | j �r(d}t j d| j |f | j | j �}t j� }t j� |_|jd|tj�}t j� }| j|_|j||t j�}|j||jj� t j� }| j |_|j||t j�}|j||jj� | j �r<| j| j � | j �rP| j| j � dS )z$Remove any DNs from a previous join.)r� NT)r� �signzncacn_ip_tcp:%s[%s]r� ) r� r� r� r� r� ry rx r r� r �lsarpcrS r= r< �ObjectAttribute�QosInfo�sec_qos� OpenPolicy2r �SEC_FLAG_MAXIMUM_ALLOWED�Stringr� �string� QueryTrustedDomainInfoByName�!LSA_TRUSTED_DOMAIN_INFO_FULL_INFO�DeleteTrustedDomain�info_ex�sidrk r� r� )r� r� �binding_options�lsaconn� objectAttr� pol_handle�namerW r5 r5 r6 �cleanup_old_join sB z DCJoinContext.cleanup_old_joinc C s� | j rtd��| jj| jj� dtj| j� ddddgd�}t|�dkrTtd | j ��d |d ksxd|d ksxd|d kr�td | j ��t |d d d �t j j t j j B @ dkr�td | j ��|d j| _d S )z]confirm that the account is just a bare NT4 BDC or a member server, so can be safely promotedz Can not promote into a subdomainzsAMAccountName=%szmsDS-krbTgtLink�userAccountControlZserverReferenceBLZrIDSetReferences)rD rE rB r zcCould not find domain member account '%s' to promote to a DC, use 'samba-tool domain join' instead'zmsDS-KrbTgtLinkzhAccount '%s' appears to be an active DC, use 'samba-tool domain join' if you must re-create this accountzZAccount %s is not a domain member or a bare NT4 BDC, use 'samba-tool domain join' instead'N)r� r� rU rY r_ rZ r� rw r� �intrt r- � UF_WORKSTATION_TRUST_ACCOUNT�UF_SERVER_TRUST_ACCOUNTr� rO )r� r� r5 r5 r6 �promote_possibleJ s $z DCJoinContext.promote_possiblec C s� y$| j j|tjtjB tjB d�| _W nV tk r\ } z td||j d f ��W Y dd}~X n t k rz td| ��Y nX | jj dk r�| jj dkr�| jj | _ | jj S )z(find a writeable DC for the given domain)r� �flagsz1Failed to find a writeable DC for domain '%s': %s� Nz-Failed to find a writeable DC for domain '%s'r� )rR �finddcr �NBT_SERVER_LDAP� NBT_SERVER_DSZNBT_SERVER_WRITABLE� cldap_retr% r, r] r� � client_siterH Z pdc_dns_name)r� r� �errorr5 r5 r6 rX ] s $" zDCJoinContext.find_dcc C s: d }| j j|tjtjB d�}|jd k r6|jdkr6|j}|S )N)Zaddressr� r� )rR r� r r� r� r� )r� rS rH r� r5 r5 r6 rV j s zDCJoinContext.find_dc_sitec C sD | j j| jtjdgd�}d|d kr8t|d d d �S tjjS d S )NzmsDS-Behavior-Version)rD rA rB r ) rU rY r` rZ r[ r� rt r- ZDS_DOMAIN_FUNCTION_2000)r� r� r5 r5 r6 rq r s z"DCJoinContext.get_behavior_versionc C s* | j jdtjdgd�}t|d d d �S )Nr� � dnsHostName)rD rA rB r )rU rY rZ r[ r^ )r� r� r5 r5 r6 rp y s z DCJoinContext.get_dnsHostNamec C sJ | j j� }| j j|tjdgdtjt| j j� �� d�}t|d d d �S )z9get netbios name of the domain from the partitions record� nETBIOSNamez ncName=%s)rD rA rB rE r )rU r� rY rZ r� r� r^ r_ )r� � partitions_dnr� r5 r5 r6 rh } s z DCJoinContext.get_domain_namec C sJ | j j� }| j j|tjdgdtjt| j j� �� d�}t|d d d �S )z9get netbios name of the domain from the partitions recordr� z ncName=%s)rD rA rB rE r )rU r� rY rZ r� r� r^ ra )r� r� r� r5 r5 r6 rj � s z$DCJoinContext.get_forest_domain_namec C s: | j j| jg dtj| j�tjtjj f d�}t |d j �S )z7get the parent domain partition DN from parent DNS namez9(&(objectclass=crossRef)(dnsRoot=%s)(systemFlags:%s:=%u)))rD rB rE r ) rU rY rd rZ r� Zparent_dnsdomainZOID_COMPARATOR_ANDrt r- �SYSTEM_FLAG_CR_NTDS_DOMAINr^ r� )r� r� r5 r5 r6 �get_parent_partition_dn� s z%DCJoinContext.get_parent_partition_dnc C s8 | j jdtjdgd�}|d d d }t| j jd|��S )zhget the SID of the connected user. Only works with w2k8 and later, so only used for RODC joinr� r� )rD rA rB r r� )rU rY rZ r[ r+ �schema_format_value)r� r� Zbinsidr5 r5 r6 � get_mysid� s zDCJoinContext.get_mysidc C s\ y| j j|tjg d�}W n> tjk rV } z |j\}}|tjkrDdS � W Y dd}~X nX dS )zcheck if a DN exists)rD rA rB FNT)rU rY rZ r[ r\ r] ZERR_NO_SUCH_OBJECT)r� r� r� Ze5r� r� r5 r5 r6 r~ � s zDCJoinContext.dn_existsc C s� t d| j � | jdttjjtjjB �dd| j d�}| jj |dg� | jj | jt j dgd�}|d d d | _ t d | j � t j� }t j| j| j�|_t j| jt jd �|d < | jj|� d | j | jf | _t d | j| jf � | jj| j| j� dS )z#RODCs need a special krbtgt accountz Adding %s�user�TRUEz krbtgt for %s)r� � objectclassZuseraccountcontrolZshowinadvancedviewonly� descriptionz rodc_join:1:1�samAccountName)rD rA rB r zGot krbtgt_name=%szmsDS-krbTgtLinkzCN=%s,CN=Users,%szRenaming %s to %sN)r� r� r^ rt r- �UF_NORMAL_ACCOUNT�UF_ACCOUNTDISABLErw rU �addrY rZ r[ Z krbtgt_name�Message�Dnrz r� �MessageElement�FLAG_MOD_REPLACE�modifyr` r� �rename)r� �recr� �mr5 r5 r6 �add_krbtgt_account� s& z DCJoinContext.add_krbtgt_accountc C sT d}| j j� dkr|d7 }d| j|f }tj|| j | j�| _tj| j�\| _| _dS )z.make a DRSUAPI connection to the naming master�seal� z,printzncacn_ip_tcp:%s[%s]N) r= � log_levelrS r r< r Z drs_DsBind�drsuapi_handleZbind_supported_extensions)r� r� Zbinding_stringr5 r5 r6 �drsuapi_connect� s z DCJoinContext.drsuapi_connectc C sB t | j| jd�| _tt� dd| j| jddd�| _| jj | j� dS )z2create a temporary samdb object for schema queries)�schemadnNF)r? r> Z auto_connectr@ r= � global_schemaZam_rodc) r rf rc Z tmp_schemar r r< r= r� Z set_schema)r� r5 r5 r6 �create_tmp_samdb� s z DCJoinContext.create_tmp_samdbc C s t j� }| jj|�|_d|_dS )z$build a DsReplicaAttributeCtr objectr� N)r ZDsReplicaAttributer� Z get_attid_from_lDAPDisplayNameZattidZ value_ctr)r� ZattrnameZ attrvaluer� r5 r5 r6 �build_DsReplicaAttribute� s z&DCJoinContext.build_DsReplicaAttributec C sJ | j dkr| j� | jdkr$| j� g }x�|D ]�}t j� }|d |_g }xb|D ]Z}|dkr\qNt|| t�sv|| g}n|| }dd� |D �}| jj| j||�}|j |� qNW t j � } t |�| _ || _ t j� } || _| | _t j� } | | _|j | � q.W t j� } |d | _| j} x |dd� D ]}|| _|} �qW | j j| jd| �\}}|dk�r�|jt jk�rrtd|j � td ��|j d t j k�r�td |j � td ��|d k�rD|j dk�r�td |j ��|j j!d t j k�r |j j"dk�r�td |j j!d � n td |j j!d |j j"j f � td ��|j jt jk�rDtd|j j � td ��|j#S )z,add a record via the DRSUAPI DsAddEntry callNr� c S s$ g | ] }t |t�r |jd �n|�qS )�utf8)� isinstancer^ �encode)�.0�xr5 r5 r6 � <listcomp>� s z,DCJoinContext.DsAddEntry.<locals>.<listcomp>r r� � z!DsAddEntry failed with dir_err %uzDsAddEntry failedz(DsAddEntry failed with status %s info %s� zexpected err_ver 1, got %uz.DsAddEntry failed with status %s, info omitted)$r r� r� r� �DsReplicaObjectIdentifierr� r� �listZdsdb_DsReplicaAttribute�appendZDsReplicaAttributeCtrr� Znum_attributesZ attributesZDsReplicaObjectZ identifier� attribute_ctrZDsReplicaObjectListItem�objectZDsAddEntryRequest2Z first_objectZ next_object� DsAddEntryr� Zdir_errZDRSUAPI_DIRERR_OKr� � RuntimeErrorZ extended_errr" Z WERR_SUCCESSZerr_verZerr_dataZstatusrW �objects)r� �recsr r� �idrB �a�vZrattrr� r Z list_objectZreq2�prev�o�levelZctrr5 r5 r6 r � sl zDCJoinContext.DsAddEntryc C s t d| j � td| jfddttjj�fd| jfg�}| j| j | jg}| j tjj krlt j | j�}t|�|d< | j tjj kr�| j|d< | jr�d | j |d < | j|d < d |d < njd| j |d < | j tjj kr�| j|d< g |d< x$|D ] }|| jkr�|d j|� q�W d|d < t| j�|d< |S )z return the ntdsdsa object to addz Adding %sr� r� �nTDSDSA� systemFlagsZ dMDLocationzmsDS-Behavior-VersionzmsDS-HasDomainNCszCN=NTDS-DSA-RO,%s�objectCategoryzmsDS-HasFullReplicaNCsZ37�optionszCN=NTDS-DSA,%szmsDS-HasMasterNCsZ HasMasterNCs�1� invocationId)r� r )r� ry r* r^ rt r- �#SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETErc r` rd rr r r. Zdc_level_from_lpr= r� rQ r� r rn )r� r� rP Z domainControllerFunctionality�ncr5 r5 r6 �join_ntdsdsa_obj s4 z DCJoinContext.join_ntdsdsa_objc C s� | j � }| jr"| jj|dgd� n$| jr:| jj|dg� n | j|g� | jj| jtj dgd�}t j | jj d|d d d ��| _ dS )zadd the ntdsdsa objectzrelax:0)�controlsz rodc_join:1:1Z objectGUID)rD rA rB r N)r rT rU r� r� r rY ry rZ r[ r rl r� � ntds_guid)r� r� r� r5 r5 r6 �join_add_ntdsdsaM s z DCJoinContext.join_add_ntdsdsac ! C s� | j �rFtd| j � | j d| j| jt| jtjjB �| jd�}| j tjj kr^ttjj �|d< n| j rlg |d< | j r~| j |d< n| j r�g |d< | jr�| j|d< n| j r�g |d< | jr�| j|d< n| j r�g |d< |r�t|�|d< | j �r"| j| j k�r| jj| j| j � | jjtjj| j|tj�� n$d }|d k �r6d g}| jj||d � | j�rV| j� | j �r�td| j � | j d ttjj tjj B tjj B �| jd �}| j �r�| j |d< | jj|� | j �r�d | _!d S | j"�r�| j#� dtj$| j%� }| jj&tj'g | jj(� |d�| j%f}dtj$| j)� }| jj&tj'g | jj(� |d�| j)f}xz||fD ]n\}}|| j*k�r\�qDt+|�dk�rDtj� } |d j,| _,d} | j-�r�d} tj.| j"tj/| �| | < | jj| � �qDW | j0d k �r�td| j0 � | j0ddd| j1d�}| jj|� | j �r�td| j � tj� } tj2| j| j �| _,x6t3t+| j4��D ]$} | j4| j5dt| j!��| j4| < �q0W tj.| j4tjd�| d< | jj| � td | j � y(| jj6d tj$| j� | j7d | jd � W nV tj8k �r } z6| j9\} }| tj:k�rނ | j;j<| j| j=| j7d � W Y d d } ~ X nX | jj&| j tj>d!d"gd#�}d!|d k�rHt?|d d! d �| _@nd | _@tAtBjC|d d d �| _Dtd$� tj� } tj2| j| j �| _,tj.t| j�tjd%�| d%< | jj| � | jEjFd&��r|tjGd'd(�| _H| jjItJtKd)�| jL| jM| jNtO| jHjPd*��jQd+�| jd,���}x�|D ]�\}}|d- }td.|d- � |d/= |d0= ttjjRtjjB �|d%< y| jj|� W n> tj8k �r� } z |j9\} }| tjSk�r�� W Y d d }~X nX �qW td1| jN � y(| jj6d2tj$| jN� | jHd | jd � W nZ tj8k �r8 } z:|j9\} }| tj:k�r � | j;j<d3| jN | j=| jHd � W Y d d }~X nX | jj&|tj>d!gd#�}d!|d k�rvt?|d d! d �| _Tnd | _Td S )4z+add the various objects needed for the joinz Adding %sZcomputer)r� Z objectClassZ displaynameZsamaccountnamer� r| z msDS-SupportedEncryptionTypesr� zmsDS-NeverRevealGroupzmsDS-RevealOnDemandGroupZ objectSidNzrelax:0)r rS )r� r� r r� ZserverReferencez$(&(objectClass=crossRef)(ncName=%s)))rA rB rD rE r� r zmsDS-NC-Replica-Locationsz msDS-NC-RO-Replica-LocationsZnTDSConnectionr� Z65)r� r� Zenabledconnectionr Z fromServerzAdding SPNs to %sz $NTDSGUIDZservicePrincipalNamez Setting account password for %sz((&(objectClass=user)(sAMAccountName=%s))F)Zforce_change_at_next_loginZusername)Z account_nameri Z newpasswordzmsDS-KeyVersionNumberr� )rD rA rB zEnabling accountr� �BIND9_� � z provision_dns_add_samba.ldifz utf-16-ler� )Z DNSDOMAINZDOMAINDNZHOSTNAMEZ DNSPASS_B64ZDNSNAMEr� z#Adding DNS account %s with dns/ SPN�clearTextPasswordZisCriticalSystemObjectz#Setting account password for dns-%sz,(&(objectClass=user)(samAccountName=dns-%s))zdns-%s)Urz r� rw r^ r� rt r- r� r| rr �DS_DOMAIN_FUNCTION_2008Z ENC_ALL_TYPESrN r� r� r� r rO rU r� r� rZ r� Z from_dictr� r� r� r� rx Z SYSTEM_FLAG_CONFIG_ALLOW_RENAMEZ%SYSTEM_FLAG_CONFIG_ALLOW_LIMITED_MOVEr r� r ry r r� r� rY r� r� r� rP r� r� r� r� Z FLAG_MOD_ADDr� ro r� �ranger� �replaceZ setpasswordrs r\ r] ZERR_UNWILLING_TO_PERFORMrR � set_passwordri r[ r� �key_version_numberr r re �new_dc_account_sidr� � startswithZgenerate_random_password�dnspassZ parse_ldifr! r ru r` rv r# r� �decoder� ZERR_ENTRY_ALREADY_EXISTS�dns_key_version_number)r� Z specified_sidr� r r� r� Zforest�part�zoner� �attr�iZe2Znum�_r� r Z changetyper3 Z dns_acct_dnr� Ze3r5 r5 r6 �join_add_objects\ sB $ z DCJoinContext.join_add_objectsc C s t d| j � ddt| j�tjf i}tj| j|d�}| jdd| j | j | j | j | j ttjjtjjB �|d� }| jtjjkr�t| j�|d< | j� }| j||g�}t|�d kr�td ��|d j| _t d � | jj| jt j d �| jt j t j d� t d� | jj| j!t j d �| jt j t j d� dS )zLadd the various objects needed for the join, for subdomains post replicationz Adding %sZSubdomainAdminsz%s-%s)�name_mapZcrossRefzCN=Cross-Ref,%s) r� r� r �nCNamer� ZdnsRootZ trustParentr ZntSecurityDescriptorzmsDS-Behavior-Versionr� z"Expected 2 objects from DsAddEntryr� zReplicating partition DNz$00000000-0000-0000-0000-000000000000)�exopr� zReplicating NTDS DNN)"r� r� r^ rf r ZDOMAIN_RID_ADMINSr Z+get_paritions_crossref_subdomain_descriptorrg rc r` ri ru Zparent_partition_dnrt r- ZSYSTEM_FLAG_CR_NTDS_NCr� rr r r r r� r/ �guidr �repl� replicater rl r ZDRSUAPI_EXOP_REPL_OBJ�DRSUAPI_DRS_WRIT_REPry )r� r+ Z sd_binaryr� Zrec2r r5 r5 r6 �join_add_objects23 s> z DCJoinContext.join_add_objects2c C s� t d� | jj}t| jt� || jt| j| j | j | j | j | j | j| j| j| jd| j| j| j| j| j| j| j| jdd�}t d|j � |j| _|j| _|j | _ |j | _ | j | j _ dS )zProvision the local SAM.zCalling bare provisionz"active directory domain controllerT)�smbconfrI � samdb_fillr� �rootdn�domaindnr� �configdnZserverdnr� Zhostname� domainsidr� � serverroleZsitenamer= ZntdsguidrJ r� rK rL rM Z batch_modez Provision OK for domain DN %sN) r� r= Z configfiler rG r rI r r� rb r` rc rd rx ri rv rf rs rH r rJ r� rK rL rM r6 rU � local_samdb�paths�namesrg )r� r3 �presultr5 r5 r6 �join_provision^ s* z DCJoinContext.join_provisionc C sP t d� t| jjdgt� | jjdd�| _| jjt| j �� | j| _| j j d� | jj | j tjdgddgd �}d |d kr�td | j | jjf ��y8ttjtj| j|d d d jd ��jd���| j_W n, tk r� td|d d d ��Y nX | j j d| jj � | j j d� t| jjt� | jd�}t | j|| j | j| j| j | j t | j d| j| jj!| jj"| j#| j$d� | j t%j&j'k�r<| j }d}tj(d�dk�r�tj)dd� t d� d}tj*� y:d dl+m,} || jdd�}|j-|t%j&j.dd � tj/� W n8 t0k �r( } ztj1� td | ��W Y dd}~X nX |�r<tj)dd � t d | jj2 � dS ) zProvision the local SAM.zReconnecting to local samdbz#transaction_index_cache_size:200000F)r> r r? r= r� z Finding domain GUID from ncNameZncNamezextended_dn:1:1zreveal_internals:0)rD rA rB r r, r z2Can't find naming context on partition DN %s in %sr� rl z3Can't find GUID in naming master on partition DN %szGot domain GUID %sz Calling own domain provision)r? r= z"active directory domain controller) Zdom_for_fun_levelrI r4 r� r9 r= �hostip�hostip6r� r� zdsdb:schema update allowedN�yesz;Temporarily overriding 'dsdb:schema update allowed' settingT)� DomainUpdate)Zfix)Zupdate_revisionzDomainUpdate() failed: %s�nozProvision OK for domain %s)3r� r r: r> r r= rU �set_invocation_idr^ rn rG rW rY r� rZ r[ r/ r rl r� r# Zget_extended_componentr< Z domainguid�KeyErrorr r; �secretsr rr rI r rs r? r@ r� r� rt r- ZDS_DOMAIN_FUNCTION_2012r� �set�transaction_startZsamba.domain_updaterB Z check_updates_functional_levelr �transaction_commitr� �transaction_cancelru )r� r� � secrets_ldbZ adprep_levelZupdates_allowed_overriddenrB r� r� r5 r5 r6 �join_provision_own_domain{ s` 8 z'DCJoinContext.join_provision_own_domainc C s" t jd| j|f | j|| j| j�S )z2Creates a new DRS object for managing replicationszncacn_ip_tcp:%s[%s])r Z drs_ReplicaterS r= r: rn )r� � repl_credsr� r5 r5 r6 �create_replicator� s z DCJoinContext.create_replicatorc 3 C s� | j jd� | jj� �y�tj| jj� �}| jdkrJt d� tjt j �}n| j}| j r�t � }|j| j� |jt� |j| j� |j| j� n| j}d}| jj� dkr�|d7 }| j||�}|j| j||d| j | jd� |j| j ||| j | jd � | j �s�t d � y$|j| j ||| j | j t j B d � W nF t!k �rh } z(|j"d t#j$k�rV| j j%d � n� W Y dd}~X nX | j t j @ �s�y |j| j ||| j | j d � W nR t!k �r� } z4|j"d t#j$k�r�| j t j @ �r�| j j%d � � W Y dd}~X nX t d� xJ| j&| j'fD ]:}|| j(k�r t dt)|� � |j|||| j | jd � �q W | j �rx|j| j*||t j+dd� |j| j,||t j+dd� n~| j-dk �r�y|j| j-||t j.d� W nV t/j0k �r� } z6|j"\} } | t j1k�r�t d| j2 � t d� n� W Y dd}~X nX || _3|| _4|| _5| j jd� W n | jj6� � Y nFX | j t j @ �sN| jj7t8j9d� | jj:� | jj7t8j9d � | j jd� | j;� dS )zReplicate the SAM.zStarting replicationNzUsing DS_BIND_GUID_W2K3r� r� z,printT)Zschema�rodcr� )rO r� z;Replicating critical objects from the base DN of the domainr z�First pass of replication with DRSUAPI_DRS_CRITICAL_ONLY not possible due to a missing parent object. This is typical of a Samba 4.5 or earlier server. We will replicate all the objects instead.z�Replication with DRSUAPI_DRS_CRITICAL_ONLY failed due to a missing parent object. This may be a Samba 4.5 or earlier server and is not compatible with --critical-onlyz5Done with always replicated NC (base, config, schema)zReplicating %s)r- rO )r- zdWARNING: Unable to replicate own RID Set, as server %s (the server we joined) is not the RID Master.zxNOTE: This is normal and expected, Samba will be able to create users after it contacts the RID Master at first startup.z1Committing SAM database - this may take some timer� zCommitted SAM database)<rG rW r: rH r rl rU Zget_invocation_idr r� r ZDRSUAPI_DS_BIND_GUID_W2K3r� r r� r= r� r Z set_usernamerw r rs r< r� rN r0 rc r� rd r� r` �domain_replica_flags�DRSUAPI_DRS_CRITICAL_ONLYr$ r] r" ZWERR_DS_DRA_MISSING_PARENT�warningr� r� rP r^ rz ZDRSUAPI_EXOP_REPL_SECRETr� r� ZDRSUAPI_EXOP_FSMO_RID_ALLOCrt ZDsExtendedErrorZ DRSUAPI_EXOP_ERR_FSMO_NOT_OWNERrS r/ �source_dsa_invocation_id�destination_dsa_guidrJ �set_opaque_integerr- Z0DSDB_FULL_JOIN_REPLICATION_COMPLETED_OPAQUE_NAMErI �refresh_ldb_connection) r� rS rT rM r� r/ r� r Ze1r� r� r5 r5 r6 �join_replicate� s� z DCJoinContext.join_replicatec C s� y| j jtjg d� W n| tjk r� } z^|j\}}|tjkrzd|ksNd|krz| jjd� t d| j t � | j | j d�| _ nt|��W Y d d }~X nX d S )N)rA rB Z!NT_STATUS_CONNECTION_DISCONNECTEDZNT_STATUS_CONNECTION_RESETz)LDB connection disconnected. Reconnectingz ldap://%s)r> r? r@ r= )rU rY rZ r[ r\ r] ZERR_OPERATIONS_ERRORrG rR r rS r r< r= r/ )r� r� r� r� r5 r5 r6 rV ^ s z$DCJoinContext.refresh_ldb_connectionc C s� t j� }t j� |_t|�|j_tjd�|j_t j d�|j_ | j |_ dt| j �| jf |_t jt jB |_| js|| jt jO _| j d kr�| j� | j j| jd|� d S )Nz$00000000-0000-0000-0000-000000000000zS-0-0z %s._msdcs.%sr� )r ZDsReplicaUpdateRefsRequest1r� Znaming_contextr^ r� r rl r. r re r� r Z dest_dsa_guidr} Zdest_dsa_dns_nameZDRSUAPI_DRS_ADD_REFZDRSUAPI_DRS_DEL_REFr r� r1 r� ZDsReplicaUpdateRefsr� )r� r� r� r5 r5 r6 �send_DsReplicaUpdateRefsp s z&DCJoinContext.send_DsReplicaUpdateRefsc C sV t j}t jt jB }| j}d| j }| j}t| j�}d||f }t j | j | j �}| j jdt|�||f � d} t j d| j| f | j | j�} d} tj| j�} tj� } | j| _tjdt| j�tjf �| _ y(| j |d| j||d t j |d d � \}}W n: t k �r& } z |j!d t"j#k�rd } W Y d d }~X nX | �r�x�|j$D ]�}x�|j%D ]�}|j&t j'k�sb|j&t j(k�rBt j)� }||_$y | j*|d| j||d |� W n: t k �r� } z |j!d t"j#k�r�n� W Y d d }~X nX �qBW �q6W x�|D ]z}|j+d �dk�r| j jd |||f � t,|�}n | j jd|||f � t-|�}t j)� }||_$| j*|d| j|||d � �q�W t|�dk�rFt.j/| j| j0�}| jj1d||f |d�\| _2}| j3| j2| dtj4tj5B gd� | j jd|||f � t j)� }t6|�}||_$| j*|d| j|||d � t.j/| j| j7�}| jj1d||f |d�\| _8}| j3| j8| dtj4tj5B gd� | j jd� d S )a� Remotely Add a DNS record to the target DC. We assume that if we replicate DNS that the server holds the DNS roles and can accept updates. This avoids issues getting replication going after the DC first starts as the rest of the domain does not have to wait for samba_dnsupdate to run successfully. Specifically, we add the records implied by the DsReplicaUpdateRefs call above. We do not just run samba_dnsupdate as we want to strictly operate against the DC we just joined: - We do not want to query another DNS server - We do not want to obtain a Kerberos ticket (as the KDC we select may not be the DC we just joined, and so may not be in sync with the password we just set) - We do not wish to set the _ldap records until we have started - We do not wish to use NTLM (the --use-samba-tool mode forces NTLM) z _msdcs.%sz%s.%sz&Adding %d remote DNS records for %s.%sr� zncacn_ip_tcp:%s[%s]Tz%s-%dr NF�:r� z,Adding DNS AAAA record %s.%s for IPv6 IP: %sz)Adding DNS A record %s.%s for IPv4 IP: %s)Z dns_partitionz sd_flags:1:%d)r z$Adding DNS CNAME record %s.%s for %sz/All other DNS records (like _ldap SRV records) z0will be created samba_dnsupdate on first startup���z_All other DNS records (like _ldap SRV records) will be created samba_dnsupdate on first startup)9r ZDNS_CLIENT_VERSION_LONGHORNZDNS_RPC_VIEW_AUTHORITY_DATAZDNS_RPC_VIEW_NO_CHILDRENru r} rv r^ r rt Z interface_ipsr= r� rG rW r� rS r< r& ZSDUtilsrU r r r Z owner_sidre rf ZDOMAIN_RID_DCSZ group_sidZDnssrvEnumRecords2r Z DNS_TYPE_ALLr$ r] r" Z"WERR_DNS_ERROR_NAME_DOES_NOT_EXISTr� ZrecordsZwTypeZ DNS_TYPE_AZ DNS_TYPE_AAAAZDNS_RPC_RECORD_BUFZDnssrvUpdateRecord2�findr( r' rZ r� r� Z dns_lookupr� Zmodify_sd_on_dnZ SECINFO_OWNERZ SECINFO_GROUPr) r� r� )r� Zclient_versionZ select_flagsr& Z msdcs_zoner� Z msdcs_cnameZ cname_targetZIPsr� Zdns_connZ name_foundZ sd_helperZchange_owner_sdZbuflenr� r� r� �recordZ del_rec_bufZIPZ add_rec_bufZdomaindns_zone_dnZ ldap_recordZforestdns_zone_dnr5 r5 r6 �join_add_dns_records� s� z"DCJoinContext.join_add_dns_recordsc C sX xR| j | jfD ]B}|| jkr| jjdt|� � | jj|| j| j | j | j dd� qW d S )Nz!Replicating new DNS records in %sF)rO r� Z full_sync) r� r� rP rG rW r^ r/ r0 rS r r� r� )r� r r5 r5 r6 � join_replicate_new_dns_records s z,DCJoinContext.join_replicate_new_dns_recordsc C s� | j jd� x| jD ]}| j|� qW | jr�td� | jjt| j �� | jj d| j � t j � }t j| jd| j �|_t jt| j �t jd�|d< | jj|� | jj|jdd� | j jd� t j � }t j| jd�|_t jd t jd �|d < | j}t jd t|� t jd �|d < | jj|� | j�r d S t| jjt� | j d�}| j jd� t || j | j | j | j!| j"| j#| j$| j%d� | j&j'd��r�t(| j|| j)| j| j | j | j&| j*| j | j+| j,d� d S )z=Finalise the join, mark us synchronised and setup secrets db.z=Sending DsReplicaUpdateRefs for all the replicated partitionszSetting RODC invocationIdZdomainFunctionalityz%sr r z(Setting isSynchronized and dsServiceNamez@ROOTDSEr� �isSynchronizedz <GUID=%s>� dsServiceNameN)r? r= zSetting up secrets database)r� r� ru Z netbiosnamer8 r� �secure_channel_typer r )r� r" Zos_levelrI r )-rG rW rP rX r� r� r: rD r^ rn rU rr rZ r� r� ry r� r� r r� r� Z"set_attribute_replmetadata_versionr r� r r; rF r r= r ri r� ru rv rf rs ra r r� r! r r< r" rI r$ )r� r r� r. rK r5 r5 r6 � join_finalise# sX zDCJoinContext.join_finalisec C s� t d| j � d}tjd| j|f | j| j�}tj� }tj� |_|j dj d�|t j �}tj � }| j|j_| j|j_| j|_tjtjB |_tj|_tj|_yJtj� }| j|_|j ||tj �}t d| j|j jf � |j ||j j� W n t k r� Y nX t!| j"j#d��}t$j%� } t&|�| _'|| _(t$j)� } t*j+t,t-j-� ��| _.tj/| _0| | _1t$j2� } d| _3| g| _4t$j5� } d| _3| | _6t$j7� } dgd }x"t8d �D ]}t9j:d d �||< �q�W || _;| | _<| | _=t>| �}t?|j@|�}tjA� }t&|�|_'t!|�|_BtjC� }||_D|jE|||t jF�}d | jG| jHf d tI|j�tI|j�tI|j�| jJ| jGt>| �t>| �t>| jK�d� }| jLjM|� d| jJ| jHf dtIt*jNjO�| j"j#d�d| jJ d�}| jLjM|� dS )zprovision the local SAM.z"Setup domain trusts with server %sr� zncacn_np:%s[%s]zutf-8z)Removing old trust record for %s (SID %s)z utf-16-ler� r� i r r zcn=%s,cn=system,%sZ trustedDomain) r� r� Z trustTypeZtrustAttributesZtrustDirectionZflatnameZ trustPartnerZtrustAuthIncomingZtrustAuthOutgoingZsecurityIdentifierzcn=%s$,cn=users,%sr� z%s$)r� r� r� r r� N)Pr� rS r r� r= r< r� r� r� r� r# r r� ZTrustDomainInfoInfoExru ri r� r� rf r� ZLSA_TRUST_DIRECTION_INBOUNDZ LSA_TRUST_DIRECTION_OUTBOUNDZtrust_directionZLSA_TRUST_TYPE_UPLEVELZ trust_typeZ!LSA_TRUST_ATTRIBUTE_WITHIN_FORESTZtrust_attributesr� r� r� r� r� r r Z trustdom_passr� r Z AuthInfoClearr� �sizeZpasswordZAuthenticationInformationrt Z unix2nttimer� �timeZLastUpdateTimeZTRUST_AUTH_TYPE_CLEARZAuthTypeZAuthInfoZ AuthenticationInformationArray�countZarrayZtrustAuthInOutBlobZcurrentZtrustDomainPasswordsr �randomZrandint� confounder�outgoingZincomingr r Z session_keyZ DATA_BUF2�dataZ TrustDomainInfoAuthInfoInternal� auth_blobZCreateTrustedDomainEx2ZSEC_STD_DELETEr} r` r^ rk rg r: r� r- Z UF_INTERDOMAIN_TRUST_ACCOUNT)r� r� r� r� r� rW ZoldnameZoldinfoZ password_blobZ clear_valueZ clear_authentication_informationZ authentication_information_arrayrh Z trustpassrg r( Ztrustpass_blobZencrypted_trustpassrj Z auth_infoZtrustdom_handler� r5 r5 r6 �join_setup_trustsk s� z DCJoinContext.join_setup_trustsc C s� | j | jg| _| j| j | jg| _| jrD| jdkrD| j| jg7 _nj| js�| j| jg7 _| jdkr�| j| jg7 _| j| jg7 _| j| jg7 _| j| jg7 _d S )NrF ) rd rc rP r` rQ r� r� r� r� )r� r5 r5 r6 �build_nc_lists� s z DCJoinContext.build_nc_listsc C s� | j � | jr| j� n| j� y\| j� | j� | j� | jrX| j� | j � | j � | j dkrr| j � | j � | j� W n@ y td� W n tk r� Y nX | j� | j� � Y nX d S )NrF zJoin failed - cleaning up)rl rN r� r� r* r> rW r� r2 rL rk r� r] r^ rb r� �IOErrorrV )r� r5 r5 r6 �do_join� s0 zDCJoinContext.do_join)NNNNNNNNNFNFFNNN)F)F)F)N)'r7 r8 r9 �__doc__r1 r� r� r� r� rX rV rq rp rh rj r� r� r~ r� r� r� r� r r r r* r2 r> rL rN rW rV rX r] r^ rb rk rl rn r5 r5 r5 r6 r; > s\ 5 / C0 X+ H Her; Fc C sv t | |||||||| | | | | ||d�}|jd|j� | jd|j � |jd|j� | jd|j � d|j|jf |_d|jt j f dt j dt j dt j dt j g|_d|jt jf |_|j� }d| }||_tjjtjjB tjjB |_|jjd |j d |j g� d |j |_ t j |_!d |_"| j#t$j%t$j&B O _#|j#|_'|�rT| j't$j(O _'|j)� | jd |j|jf � d S )zJoin as a RODC.)rL rM � workgroupzworkgroup is %sr� z realm is %szCN=krbtgt_%s,CN=Users,%sz <SID=%s-%s>z<SID=%s>zRestrictedKrbHost/%szCN=RODC Connection (FRS),%sTz$Joined domain %s (SID %s) as an RODCN)*r; rG ri rW r� rv r` r� rf r ZDOMAIN_RID_RODC_DENYZSID_BUILTIN_ADMINISTRATORSZ SID_BUILTIN_SERVER_OPERATORSZ SID_BUILTIN_BACKUP_OPERATORSZ SID_BUILTIN_ACCOUNT_OPERATORSr� ZDOMAIN_RID_RODC_ALLOWr� r� r� rt r- r� Z)UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATIONZUF_PARTIAL_SECRETS_ACCOUNTr� r� �extendr| ry r� r Z SEC_CHAN_RODCra r� r� r �%DRSUAPI_DRS_SPECIAL_SECRET_PROCESSINGZ$DRSUAPI_DRS_GET_ALL_GROUP_MEMBERSHIPrP rQ rn )rG rS r< r= rH r� rI r� �domain_critical_onlyr� rJ r� rN rK rL rM r� ZmysidZadmin_dnr5 r5 r6 � join_RODC sB rt c C s� t | |||||||| | | | | ||d�}|jd|j� | jd|j � |jd|j� | jd|j � tjjtjjB |_ |j j d|j � t j|_| jtjtjB O _|j|_|r�| jtjO _|j� | jd|j|jf � dS ) z Join as a DC.)rL rM rp zworkgroup is %sr� z realm is %sz1E3514235-4B06-11D1-AB04-00C04FC2DCD2/$NTDSGUID/%sz!Joined domain %s (SID %s) as a DCN)r; rG ri rW r� rt r- r� ZUF_TRUSTED_FOR_DELEGATIONr� r� r� ru r Z SEC_CHAN_BDCra r� r r1 �!DRSUAPI_DRS_FULL_SYNC_IN_PROGRESSrP rQ rn rf )rG rS r< r= rH r� rI r� rs r� rJ r� rN rK rL rM r� r5 r5 r6 �join_DC@ s& rv rF c C sz t | ||||||||| d� } |jd| j� | jd| j � |jd| j� | jd| j � | j� | jd| j| jf � | S )z%Creates a local clone of a remote DC.)rI r� r� �include_secretsrL rM rp zworkgroup is %sr� z realm is %szCloned domain %s (SID %s))�DCCloneContextrG ri rW r� rn rf ) rG rS r< r= rI r� rw r� rL rM r� r5 r5 r6 � join_cloneb s ry c s2 e Zd ZdZd � fdd� Zdd� Zdd � Z� ZS ) rx zClones a remote DC.NFc s� t t| �j|||||||| | d� d | _d | _d | _| jjd�d | _d | _ d | _ | j j � | _ | jtjtjB O _|s�| jtjO _| j| _d S )N)rI r� r� rL rM �.r )r0 rx r1 rx ry rz rS �splitrv r r� rU Z get_ntds_GUID�remote_dc_ntds_guidr� r r1 ru rr rP ) r� rG rS r< r= rI r� r� rw rL rM )r4 r5 r6 r1 { s" zDCCloneContext.__init__c C sj | j jd� tj� }tj| jd�|_tjdtjd�|d< | j }tjdt |� tjd�|d< | jj |� d S )Nz(Setting isSynchronized and dsServiceNamez@ROOTDSEr� r_ z <GUID=%s>r` ) rG rW rZ r� r� r: r� r� r� r| r^ r� )r� r� r. r5 r5 r6 rb � s z DCCloneContext.join_finalisec C s$ | j � | j� | j� | j� d S )N)rl r> rW rb )r� r5 r5 r6 rn � s zDCCloneContext.do_join) NNNNNNNFNN)r7 r8 r9 ro r1 rb rn r: r5 r5 )r4 r6 rx x s rx c sB e Zd ZdZd� fdd� Zdd� Zdd � Zd d � Zd d � Z� Z S )�DCCloneAndRenameContextz6Clones a remote DC, renaming the domain along the way.NTc s8 t t| �j|||||| | | | d� || _|| _|| _d S )N)rI r� r� rw rL )r0 r} r1 � new_base_dn�new_domain_name� new_realm) r� r~ r r� rG rS r< r= rI r� r� rw rL )r4 r5 r6 r1 � s z DCCloneAndRenameContext.__init__c C s. d| j |f }tj|| j|| j| j| j| j�S )z2Creates a new DRS object for managing replicationszncacn_ip_tcp:%s[%s])rS r Zdrs_ReplicateRenamerr= r: rn r` r~ )r� rM r� Z binding_strr5 r5 r6 rN � s z)DCCloneAndRenameContext.create_replicatorc C s4 t j� \}}|jd|� tjj|d�}tj|� |S )z?Creates a non-global LoadParm based on the global LP's settingsF)Zfilename_for_non_global_lp)�tempfileZmkstemp�dumprt ZparamZLoadParm�os�remove)r� Z global_lp�fdZtmp_fileZlocal_lpr5 r5 r6 �create_non_global_lp� s z,DCCloneAndRenameContext.create_non_global_lpc C s | j }tjd| | j|�S )z/Uses string substitution to replace the base DNz%s$)r` �re�subr~ )r� Zdn_strZ old_base_dnr5 r5 r6 � rename_dn� s z!DCCloneAndRenameContext.rename_dnc C s� t d� | j| j�}t| jt� | jt| j|| j | j �| j | j | j �| j | j �| j| jd| j| jd�}t d|j � |j| _|j| _dS )z"Provision the local (renamed) SAM.z(Provisioning the new (renamed) domain...z"active directory domain controller) rI r4 r� r= r5 r6 r� r7 r� r8 r9 r� rL z%Provision OK for renamed domain DN %sN)r� r� r= r rG r rI r r� r� rb r~ rc rd r rf r� rL r6 rU r: r; )r� Z non_global_lpr= r5 r5 r6 r> � s z&DCCloneAndRenameContext.join_provision) NNNNNNNTN) r7 r8 r9 ro r1 rN r� r� r> r: r5 r5 )r4 r6 r} � s r} )NNNNNNNNFNFNFFNN)NNNNNNNNFNFNFFNN) NNNNNNFrF NN)Pro Z samba.authr Z samba.samdbr rt r r r r r rZ rm Z samba.ndrr r Z samba.dcerpcr r r r r r r r Z samba.dsdbr Zsamba.credentialsr r Zsamba.provisionr r r r r r Zsamba.provision.commonr Z samba.schemar r Z samba.netr Zsamba.provision.sambadnsr r! r" �base64r# r$ r% r& Zsamba.dnsserverr' r( r) Zloggingrf rd r� r� r� � collectionsr* Z samba.commonr+ Z samba.netcmdr, r- r. r� r/ r r; rt rv ry rx r} r5 r5 r5 r6 �<module> s~ ( U 3 8
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка