Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/netcmd/domain/__pycache__/passwordsettings.cpython-36.pyc
Ðазад
3 �I�d�9 � @ s� d dl Z d dljZd dlmZ d dlmZmZ d dl m Z mZmZm Z d dlmZmZmZ d dlmZ d dlmZ G dd � d e �ZG d d� de �ZG dd � d e �ZdS )� N)�system_session)�DOMAIN_PASSWORD_COMPLEX�DOMAIN_PASSWORD_STORE_CLEARTEXT)�Command�CommandError�Option�SuperCommand)�NEVER_TIMESTAMP�timestamp_to_days�timestamp_to_mins)�cmd_domain_passwordsettings_pso)�SamDBc @ sF e Zd ZdZdZejejejd�Z e dddeddd �gZd dd�Z d S )� cmd_domain_passwordsettings_showz1Display current password settings for the domain.z%prog [options])� sambaopts�versionopts�credoptsz-Hz--URLz%LDB URL for database or target server�URL�H)�help�type�metavar�destNc C s� |j � }|j|�}t|t� ||d�}|j� }|j|tjdddddddd gd �} t| �dks^t �y�t | d d d �} t | d d d �}t | d d d �}t| d d d �} t| d d d �}t | d d d �}t| d d d �}t| d d d �}W n. t k �r0 } ztd |��W Y d d }~X nX | jd| � | jd� | t@ dk�rd| jd� n | jd� | t@ dk�r�| jd� n | jd� | jd| � | jd| � | jd| � | jd| � | jd| � | jd| � | jd| � d S )N)�url�session_info�credentials�lp� pwdProperties�pwdHistoryLength�minPwdLength� minPwdAge� maxPwdAge�lockoutDuration�lockoutThreshold�lockOutObservationWindow)ZscopeZattrs� r z'Could not retrieve password properties!z$Password information for domain '%s'� zPassword complexity: onzPassword complexity: offzStore plaintext passwords: onzStore plaintext passwords: offzPassword history length: %dzMinimum password length: %dzMinimum password age (days): %dzMaximum password age (days): %dz#Account lockout duration (mins): %dz(Account lockout threshold (attempts): %dz&Reset account lockout after (mins): %d)�get_loadparm�get_credentialsr r � domain_dn�search�ldbZ SCOPE_BASE�len�AssertionError�intr r � Exceptionr �messager r )�selfr r r r r �creds�samdbr( �res� pwd_props�pwd_hist_lenZcur_min_pwd_lenZcur_min_pwd_ageZcur_max_pwd_ageZcur_account_lockout_thresholdZcur_account_lockout_durationZcur_reset_account_lockout_after�e� r7 �(/usr/lib64/python3.6/passwordsettings.py�run5 sH z$cmd_domain_passwordsettings_show.run)NNNN)�__name__� __module__�__qualname__�__doc__�synopsis�options�SambaOptions�VersionOptions�CredentialsOptions�takes_optiongroupsr �str� takes_optionsr9 r7 r7 r7 r8 r % s r c @ s� e Zd ZdZdZejejejd�Z e dddeddd �e d ddd d�e dddddgdd�e dddddgdd�e dded�e dded�e dded�e dd ed�e d!d"ed�e d#d$ed�e d%d&ed�gZd+d)d*�Z d'S ),�cmd_domain_passwordsettings_seta Set password settings. Password complexity, password lockout policy, history length, minimum password length, the minimum and maximum password age) on a Samba AD DC server. Use against a Windows DC is possible, but group policy will override it. z%prog <options> [options])r r r z-Hz--URLz%LDB URL for database or target serverr r )r r r r z-qz--quietzBe quiet� store_true)r �actionz--complexityZchoice�on�off�defaultz=The password complexity (on | off | default). Default is 'on')r �choicesr z--store-plaintextz�Store plaintext passwords where account have 'store passwords with reversible encryption' set (on | off | default). Default is 'off'z--history-lengthzBThe password history length (<integer> | default). Default is 24.)r r z--min-pwd-lengthzAThe minimum password length (<integer> | default). Default is 7.z --min-pwd-agezFThe minimum password age (<integer in days> | default). Default is 1.z --max-pwd-agezGThe maximum password age (<integer in days> | default). Default is 43.z--account-lockout-durationz�The length of time an account is locked out after exceeding the limit on bad password attempts (<integer in mins> | default). Default is 30 mins.z--account-lockout-thresholdz�The number of bad password attempts allowed before locking out the account (<integer> | default). Default is 0 (never lock out).z--reset-account-lockout-afterzuAfter this time is elapsed, the recorded number of attempts restarts from zero (<integer> | default). Default is 30.NFc C s� | j � }|j|�}t|t� ||d�}|j� }g }tj� }tj||�|_t |j � �}|j� }|j� }|d k r�|dksz|dkr�|t B }|jd� n|dkr�|t @ }|jd� |d k r�|dks�|dkr�|tB }|jd� n|dkr�|t @ }|jd� |d k �s|d k �rtjt|�tjd �|d <