Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/netcmd/__pycache__/ntacl.cpython-36.opt-1.pyc
Ðазад
3 �I�d�I � @ s2 d dl mZ d dljZd dlmZmZ d dlm Z m Z m Z d dl m Z d dlmZmZ d dlmZ d dlmZmZ d d l mZ d d lmZ d dlZd d lm Z d d l m Z m Z m Z m!Z! d d� Z"G dd� de �Z#G dd� de �Z$G dd� de �Z%G dd� de �Z&G dd� de �Z'G dd� de �Z(G dd � d e �Z)dS ) � )�DONT_USE_KERBEROSN)�security�idmap)�setntacl�getntacl� getdosinfo)�Ldb)� ndr_unpack� ndr_print)�SamDB)�param�passdb)� provision)�system_session_unix)�system_session)�Command� CommandError� SuperCommand�Optionc C s� d}| j � }|dkrd}tj� }|j| j� |r�ytt� | d�}W n, tk rn } ztd|��W Y d d }~X nX |j dd|j � y |r�t j |j �}ntj� }W n td��Y nX |S ) NFZROLE_ACTIVE_DIRECTORY_DCT)� session_info�lpzUnable to open samdb:zpassdb backendz samba_dsdb:%sz2Unable to read domain SID from configuration files)� server_role�s3param� get_context�load� configfiler r � Exceptionr �set�urlr �dom_sid� domain_sidr Zget_domain_sid)r Zis_ad_dcr �s3conf�samdb�er � r$ � /usr/lib64/python3.6/ntacl.py�get_local_domain_sid( s( r& c @ s� e Zd ZdZdZejejejd�Z e dde j dd�e dd d dd�e d d d ddgd�e dddd�e dddd�e dddd�e dddd�e dd dd�e d d dd�g Z d d gZ d%d#d$�Zd"S )&� cmd_ntacl_setzSet ACLs on a file.z %prog <acl> <path> [options])� sambaopts�credopts� versionoptsz-qz--quiet� store_true)�help�actionz-vz --verbosez Be verbosez--xattr-backend�choicez%xattr backend type (native fs or tdb)�native�tdb)�typer, �choicesz --eadb-filez0Name of the tdb file where attributes are stored�string)r, r1 z --use-ntvfszLSet the ACLs directly to the TDB or xattr for use with the ntvfs file serverz --use-s3fszHSet the ACLs for use with the default s3fs file server via the VFS layerz --recursivez;Set the ACLs for directories and their contents recursivelyz--follow-symlinkszFollow symlinksz --servicez:Name of the smb.conf service to use when applying the ACLs�acl�pathFNc s� �j � }| j� �t���� r4| r4d�jd�k�n|r<d�� ��������� � f dd�}||� �r�tjj|�r�x\tj|�d�D ]J\}}}x |D ]}|tjj||�� q�W x |D ]}|tjj||�� q�W q�W �r�|j d� d S )N�smbzserver servicesFc s� � r6t jj| �r6�r*�jjd| � d S td| ��� r�t jj| �rX�jjd| � n.t jj| �rv�jjd| � n�jjd| � y t�| � t��t � � ���d� S t k r� } ztd| |f ��W Y d d }~X nX d S )Nzignored symlink: %s z'symlink: %s: requires --follow-symlinksz symlink: %s zdir: %s z file: %s )� use_ntvfs�servicez Could not set acl for %s: %s) �osr5 �islink�outf�writer �isdirr �strr r )�_pathr# ) r4 r � eadb_file�follow_symlinksr � recursive�selfr8 r7 �verbose� xattr_backendr$ r% �_setntacl_pathn s. z)cmd_ntacl_set.run.<locals>._setntacl_path)� followlinkszPPlease note that POSIX permissions have NOT been changed, only the stored NT ACL) � get_logger� get_loadparmr& �getr9 r5 r= �walk�join�warning)rC r4 r5 r7 �use_s3fs�quietrD rE r@ r) r( r* rB rA r8 �loggerrF �root�dirs�files�namer$ ) r4 r r@ rA r rB rC r8 r7 rD rE r% �runa s" zcmd_ntacl_set.run) FFFFNNNNNFFN)�__name__� __module__� __qualname__�__doc__�synopsis�options� SambaOptions�CredentialsOptions�VersionOptions�takes_optiongroupsr Z SUPPRESS_HELP� takes_options� takes_argsrU r$ r$ r$ r% r' F s( r' c @ s6 e Zd ZdZdZejejejd�Z dgZ ddd�Z dS ) �cmd_dosinfo_getz"Get DOS info of a file from xattr.z%prog <file> [options])r( r) r* �fileNc C s> |j � }tj� }|j|j� t||�}|r:| jjt|�� d S )N) rI r r r r r r; r< r )rC rc r) r( r* r r! Zdosinfor$ r$ r% rU � s zcmd_dosinfo_get.run)NNN) rV rW rX rY rZ r[ r\ r] r^ r_ ra rU r$ r$ r$ r% rb � s rb c @ s� e Zd ZdZdZejejejd�Z e dddd�e dd d d d gd �e dddd�e dddd�e dddd�e dddd�gZ dgZ d dd �Z dS ) � cmd_ntacl_getzGet ACLs of a file.z%prog <file> [options])r( r) r* z --as-sddlz Output ACL in the SDDL formatr+ )r, r- z--xattr-backendr. z%xattr backend type (native fs or tdb)r/ r0 )r1 r, r2 z --eadb-filez0Name of the tdb file where attributes are storedr3 )r, r1 z --use-ntvfszKGet the ACLs directly from the TDB or xattr used with the ntvfs file serverz --use-s3fszKGet the ACLs for use via the VFS layer used by the default s3fs file serverz --servicez9Name of the smb.conf service to use when getting the ACLsrc FNc C s| |j � } t| �} | r,| r,d| jd�k}n|r4d}t| |t� |||| d�} |rh| jj| j| �d � n| jjt| �� d S )Nr6 zserver servicesF)�direct_db_accessr8 � ) rI r& rJ r r r; r< �as_sddlr )rC rc r7 rN rg rE r@ r) r( r* r8 r r r4 r$ r$ r% rU � s zcmd_ntacl_get.run) FFFNNNNNN)rV rW rX rY rZ r[ r\ r] r^ r_ r r` ra rU r$ r$ r$ r% rd � s" rd c @ s� e Zd ZdZdZdejiZedddd�edd d d �ed d d d �edddd�edddddgd�edddd d �eddd d �edd d d d �gZ d d d gZ d%d#d$�Z d"S )&�cmd_ntacl_changedomsidz Change the domain SID for ACLsz9%prog <Orig-Domain-SID> <New-Domain-SID> <file> [options]r( z --servicez#Name of the smb.conf service to user3 )r, r1 z --use-ntvfszLSet the ACLs directly to the TDB or xattr for use with the ntvfs file serverr+ )r, r- z --use-s3fszHSet the ACLs for use with the default s3fs file server via the VFS layerz --eadb-filez0Name of the tdb file where attributes are storedz--xattr-backendr. z%xattr backend type (native fs or tdb)r/ r0 )r1 r, r2 z-rz --recursivez;Set the ACLs for directories and their contents recursivelyz--follow-symlinkszFollow symlinksz-vz --verbosez Be verbose�old_domain_sid�new_domain_sidr5 FNc ( s< �j � } | j� �t���� r4| r4d�jd�k� n|r<d� � rP� rPtd��ytj|��W n2 tk r� } ztd||f ��W Y d d }~X nX ytj|��W n2 tk r� } ztd||f ��W Y d d }~X nX ��������� � � � f dd�� � �fdd �}� |� ��r(tj j |��r(||� � �r8| j d � d S ) Nr6 zserver servicesFz0Must provide a share name with --service=<share>z Could not parse old sid %s: %sc s � r6t jj| �r6�r*�jjd| � d S td| ��� r�t jj| �rX�jjd| � n.t jj| �rv�jjd| � n�jjd| � y t�| t� � �� �d�}W n2 t k r� } ztd| |f ��W Y d d }~X nX |j � �}� r�jjd| � ��fd d �}||j �|_ ||j �|_ |j �rBx |j jD ]}||j�|_�q,W |j�rjx |jjD ]}||j�|_�qTW |j � �}� �r��jjd | � ||k�r�� �r��jjd � d S y t�| |�t� � �� �d� W n4 t k �r� } ztd| |f ��W Y d d }~X nX d S )Nzignored symlink: %s z'symlink: %s: requires --follow-symlinksz symlink: %s zdir: %s z file: %s )re r8 z Could not get acl for %s: %sz before: %s c s* | j � \}}|�kr&tjd� |f �S | S )Nz%s-%i)�splitr r )ZsidZdomZrid)rj ri r$ r% �replace_domain_sidQ s zNcmd_ntacl_changedomsid.run.<locals>.changedom_sids.<locals>.replace_domain_sidz after: %s znothing to do T)r7 r8 z Could not set acl for %s: %s)r9 r5 r: r; r< r r= r r r rg Z owner_sidZ group_sidZsaclZacesZtrusteeZdaclr )r? r4 r# Z orig_sddlrl ZaceZnew_sddl) r r@ rA r rj ri rB rC r8 r7 rD rE r$ r% �changedom_sids3 sh " z2cmd_ntacl_changedomsid.run.<locals>.changedom_sidsc sb x\t j| �d�D ]J\}}}x |D ]}� t jj||�� q W x |D ]}� t jj||�� q@W qW d S )N)rG )r9 rK r5 rL )r? rQ rR rS �f�d)rm rA r$ r% �recursive_changedom_sidsw s z<cmd_ntacl_changedomsid.run.<locals>.recursive_changedom_sidszQPlease note that POSIX permissions have NOT been changed, only the stored NT ACL.) rH rI r& rJ r r r r r9 r5 r= rM )rC Zold_domain_sid_strZnew_domain_sid_strr5 r7 rN r8 rE r@ r( rB rA rD rP r# rp r$ ) rm r r@ rA r rj ri rB rC r8 r7 rD rE r% rU s6 "Dzcmd_ntacl_changedomsid.run) FFNNNNFFF) rV rW rX rY rZ r[ r\ r_ r r` ra rU r$ r$ r$ r% rh � s` rh c @ sL e Zd ZdZdZejejejd�Z e dddd�e dd dd�gZ dd d �Z d S )�cmd_ntacl_sysvolresetz?Reset sysvol ACLs to defaults (including correct ACLs on GPOs).z%prog <file> [options])r( r) r* z --use-ntvfsz/Set the ACLs for use with the ntvfs file serverr+ )r, r- z --use-s3fsz6Set the ACLs for use with the default s3fs file serverFNc C s� |j � }|j|�}|jt� | j� }|jdd�} |jdd�} ytt� |d�} W n, tk rz } zt d| ��W Y d d } ~ X nX | r�| r�d|jd�k}n|r�d}t j | j �} t j� }|j|j� |jd d | j � t j t| �d tt j� �}t j t j�}tj|jd ��}|j|�\}}|tjk�r<|tjk�r<t d | ��|j|�\}}|tj k�rn|tjk�rnt d | ��|�r~|j d� y0t j | | | ||| |jd�j � | j!� ||d� W nH t"k �r� } z*| j#�ŝ t d| j#� d| j$� �| ��W Y d d } ~ X nX d S )Nr5 �netlogon�sysvol)r r zUnable to open samdb:r6 zserver servicesFzpassdb backendz samba_dsdb:%s�-z SID %s is not mapped to a UIDz SID %s is not mapped to a GIDzPPlease note that POSIX permissions have NOT been changed, only the stored NT ACL�realm)r7 zCould not access z: )%rI �get_credentials�set_kerberos_stater rH rJ r r r r r r r r r r r r r r> ZDOMAIN_RID_ADMINISTRATORZSID_BUILTIN_ADMINISTRATORSr ZPDBZ sid_to_idr Z ID_TYPE_UIDZ ID_TYPE_BOTHZ ID_TYPE_GIDrM r Z setsysvolacl�lower� domain_dn�OSError�filename�strerror)rC r7 rN r) r( r* r �credsrP rr rs r" r# r r! ZLA_sidZBA_sidZ s4_passdbZLA_uidZLA_typeZBA_gidZBA_typer$ r$ r% rU � sP zcmd_ntacl_sysvolreset.run)FFNNN) rV rW rX rY rZ r[ r\ r] r^ r_ r r` rU r$ r$ r$ r% rq � s rq c @ s0 e Zd ZdZdZejejejd�Z ddd�Z dS )�cmd_ntacl_sysvolcheckzBCheck sysvol ACLs match defaults (including correct ACLs on GPOs).z%prog <file> [options])r( r) r* Nc C s� |j � }|j|�}|jt� | j� }|jdd�}|jdd�}ytt� |d�} W n, tk rz } zt d| ��W Y d d } ~ X nX t j | j �} y(t j| ||| |jd�j� | j� |� W nD tk r� } z(| jsʂ t d| j� d| j� �| ��W Y d d } ~ X nX d S ) Nr5 rr rs )r r zUnable to open samdb:ru zCould not access z: )rI rv rw r rH rJ r r r r r r r r Zchecksysvolaclrx ry rz r{ r| ) rC r) r( r* r r} rP rr rs r" r# r r$ r$ r% rU � s( zcmd_ntacl_sysvolcheck.run)NNN) rV rW rX rY rZ r[ r\ r] r^ r_ rU r$ r$ r$ r% r~ � s r~ c @ sP e Zd ZdZi Ze� ed< e� ed< e� ed< e� ed< e � ed< e � ed< dS ) � cmd_ntaclzNT ACLs manipulation.r rJ Z changedomsidZ sysvolresetZ sysvolcheckr N) rV rW rX rY Z subcommandsr' rd rh rq r~ rb r$ r$ r$ r% r � s r )*Zsamba.credentialsr Z samba.getoptZgetoptr[ Z samba.dcerpcr r Z samba.ntaclsr r r Zsambar Z samba.ndrr r Z samba.samdbr Z samba.samba3r r r r Zsamba.auth_utilr r9 Z samba.authr Z samba.netcmdr r r r r& r' rb rd rh rq r~ r r$ r$ r$ r% �<module> s* P/ .H$
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка