Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/netcmd/__pycache__/pso.cpython-36.opt-1.pyc
Ðазад
3 �I�d�� � @ s� d dl jZd dlZd dlmZ d dlmZmZm Z m Z d dl m Z m Z d dlmZ d dlmZmZmZ dd� Zd d � Zd d � ZdHdd�Zdd� Zdd� Zdd� ZdIdd�ZdJdd�Z e ddd d gd d �e d dd d gd!d �e d"d#e d$�e d%d&e d$�e d'd(e d$�e d)d*e d$�e d+e d,d-�e d.e d/d-�e d0d1e d$�g Z d2d3� Z G d4d5� d5e�Z G d6d7� d7e�Z!G d8d9� d9e�Z"d:d;� Z#G d<d=� d=e�Z$G d>d?� d?e�Z%G d@dA� dAe�Z&G dBdC� dCe�Z'G dDdE� dEe�Z(G dFdG� dGe �Z)dS )K� N)�SamDB)�Command� CommandError�Option� SuperCommand)�DOMAIN_PASSWORD_COMPLEX� DOMAIN_PASSWORD_STORE_CLEARTEXT)�system_session)�NEVER_TIMESTAMP�timestamp_to_mins�timestamp_to_daysc C s d| j � S )Nz+CN=Password Settings Container,CN=System,%s)� domain_dn)�samdb� r �/usr/lib64/python3.6/pso.py� pso_container s r c C s t d| � }t|�S )z4Converts a value in minutes to -100 nanosecond unitsg �cA�< g ��A)�int�str)Zmins� timestampr r r �mins_to_timestamp" s r c C s t | d d �}t|�S )z1Converts a value in days to -100 nanosecond unitsr � )r r )Zdaysr r r r �days_to_timestamp( s r Tc C s� ddd�}dddddd d d d d ddg }|j |tj|d�}|d }| jd|d � | jd� | jd|d � t|d �}| jd|| � t|d �}| jd|| � | jd|d � | jd|d � | jdt|d d � � | jdt|d d � � | jdt|d d � � | jd |d � | jd t|d d � � |�r�d|k�r�| jd t|d � � x,|d D ]}| jd | � �qxW n | jd � d!S )"z8Displays the password settings for a PSO specified by DN�on�off)�TRUE�FALSE�namez msDS-PasswordSettingsPrecedencez(msDS-PasswordReversibleEncryptionEnabledzmsDS-PasswordHistoryLengthzmsDS-MinimumPasswordLengthz msDS-PasswordComplexityEnabledzmsDS-MinimumPasswordAgezmsDS-MaximumPasswordAgez msDS-LockoutObservationWindowzmsDS-LockoutThresholdzmsDS-LockoutDurationzmsDS-PSOAppliesTo)�scope�attrsr z"Password information for PSO '%s' � z Precedence (lowest is best): %s zPassword complexity: %s z Store plaintext passwords: %s z Password history length: %s z Minimum password length: %s z Minimum password age (days): %d z Maximum password age (days): %d z$Account lockout duration (mins): %d z)Account lockout threshold (attempts): %s z'Reset account lockout after (mins): %d z* PSO applies directly to %d groups/users: z %s z2 Note: PSO does not apply to any users or groups. N)�search�ldb� SCOPE_BASE�writer r r �len) �outfr �dn�show_applies_toZ on_off_strZ pso_attrs�resZpso_res�bool_strr r r �show_pso_by_dn. sN r+ c C st y| j |tjdgd�}W nB tjk rZ } z$|jd tjkrHtd| ��� W Y dd}~X nX d|d krptd��dS )z=Gracefully bail out if we can't view/modify the PSO specifiedz msDS-PasswordSettingsPrecedence)r r r zUnable to find PSO '%s'Nz/You may not have permission to view/modify PSOs)r! r" r# �LdbError�args�ERR_NO_SUCH_OBJECTr )r �pso_dnr r) �er r r �check_pso_valid` s r1 c C s� d| }|j |j� tj|ddgd�}t|�dkr@| jd| � n�d|d krf| jd| � | jd� ndt||d d d d � | jd | � t| ||d d d d d � d|d kr�| jd � n | jd� dS )z2Displays the password settings for a specific userz((&(sAMAccountName=%s)(objectClass=user))zmsDS-ResultantPSOzmsDS-PSOApplied)r � expressionr r zUser '%s' not found. z@No PSO applies to user '%s'. The default domain settings apply. z4Refer to 'samba-tool domain passwordsettings show'. z???z0The following PSO settings apply to user '%s'. F)r( zD Note: PSO applies directly to user (any group PSOs are overridden) z+ PSO applies to user via group membership. N)r! r r" � SCOPE_SUBTREEr% r$ r1 r+ )r& r �username� search_filterr) r r r �show_pso_for_userq s$ r6 c C s t j|||�| |< d S )N)r" �MessageElement)�msgZ attr_name�value�ldb_operr r r � msg_add_attr� s r; c C s� t j� }t j||�|_|r4t j}t jd|d�|d< nt j}|dk rTt|dt|�|� |dk rz|dkrhdnd}t|d ||� |dk r�|dkr�dnd}t|d ||� |dk r�t|d t|�|� | dk r�t|d t| �|� | dk r�t | �}t|d ||� | dk �r&| dk�rtt �}nt | �}t|d||� | dk �rFt | �}t|d||� |dk �rbt|dt|�|� | dk �r~t|dt | �|� |S )z0Packs the given PSO settings into an LDB messagezmsDS-PasswordSettingsZ objectClasszmsDS-objectClassNz msDS-PasswordSettingsPrecedencer r r z msDS-PasswordComplexityEnabledz(msDS-PasswordReversibleEncryptionEnabledzmsDS-PasswordHistoryLengthzmsDS-MinimumPasswordLengthzmsDS-MinimumPasswordAger zmsDS-MaximumPasswordAgezmsDS-LockoutDurationzmsDS-LockoutThresholdz msDS-LockoutObservationWindow) r" �Message�Dnr' � FLAG_MOD_ADDr7 ZFLAG_MOD_REPLACEr; r r r r )r& r r/ �create�lockout_threshold� complexity� precedence�store_plaintext�history_length�min_pwd_length� min_pwd_age� max_pwd_age�lockout_duration�reset_lockout_after�mr: r* Zmin_pwd_age_ticksZmax_pwd_age_ticksZlockout_duration_ticksr r r �make_pso_ldb_msg� sV rK c C s\ |dk r|dkrt d��| dk r0| dkr0t d��|dk rX|dk rX||krX|dkrXt d��dS )z,Checks PSO settings fall within valid rangesNi z5Bad password history length: valid range is 0 to 1024� z4Bad minimum password length: valid range is 0 to 255r z2Minimum password age must be less than maximum age)r )rE rD rF rG r r r �check_pso_constraints� s rM z --complexityZchoicer r z#The password complexity (on | off).)�type�choices�helpz--store-plaintextziStore plaintext passwords where account have 'store passwords with reversible encryption' set (on | off).z--history-lengthz(The password history length (<integer>).)rP rN z--min-pwd-lengthz(The minimum password length (<integer>).z --min-pwd-agezHThe minimum password age (<integer in days>). Default is domain setting.z --max-pwd-agezHThe maximum password age (<integer in days>). Default is domain setting.z--account-lockout-durationz�The length of time an account is locked out after exceeding the limit on bad password attempts (<integer in mins>). Default is domain setting)rN rP z--account-lockout-thresholdzrThe number of bad password attempts allowed before locking out the account (<integer>). Default is domain setting.z --reset-account-lockout-afterz~After this time is elapsed, the recorded number of attempts restarts from zero (<integer in mins>). Default is domain setting.c C s8 d}x.| D ]&}x |D ]}t |�|kr|d7 }qW q W |S )z� Returns the number of options specified that are present in the args. (There can be other args besides just the ones we're interested in, which is why argc on its own is not enough) r � )r )�optionsr- Znum_opts�opt�argr r r �num_options_in_args s rU c @ sR e Zd ZdZdZejejejd�Z e e ddddde d �g Z d d gZdd d�Zd S )�!cmd_domain_pwdsettings_pso_createa� Creates a new Password Settings Object (PSO). PSOs are a way to tailor different password settings (lockout policy, minimum password length, etc) for specific users or groups. The psoname is a unique name for the new Password Settings Object. When multiple PSOs apply to a user, the precedence determines which PSO will take effect. The PSO with the lowest precedence will take effect. For most arguments, the default value (if unspecified) is the current domain passwordsettings value. To see these values, enter the command 'samba-tool domain passwordsettings show'. To apply the new PSO to user(s) or group(s), enter the command 'samba-tool domain passwordsettings pso apply'. z&%prog <psoname> <precedence> [options])� sambaopts� versionopts�credoptsz-Hz--URLz%LDB URL for database or target server�URL�H)rP �metavar�destrN �psonamerB Nc & C s |j � }| j|�}t|t� ||d�}y t|�}W n tk rL td��Y nX d|t|�f }y|j|t j d�}W n8 t j k r� } z|j d t j kr�n� W Y d d }~X nX td| ��tt| j�}|dkr�td��|tt�k r�| jd� | jd � |j|j� t j d d d d ddddgd�}t|d d d �}|d k�rNt}||@ �rJdnd}|d k�rnt}||@ �rjdnd}|d k�r�t|d d d �}| d k�r�t|d d d �} |d k�r�t|d d d �}|d k�r�t|d d d �}| d k�rt|d d d �} | d k�r"t|d d d �} | d k�r@t|d d d �} t|||| d� t| j||d||||| ||| | | d�}y.|j|� | jd| � t | j||dd� W nV t j k �r� } z6|j \}}|t j k�r�td��ntd ||f ��W Y d d }~X nX d S ) N)�url� session_info� credentials�lpz<The PSO's precedence should be a numerical value. Try --helpzCN=%s,%s)r r zPSO '%s' already existsz?Please specify at least one password policy setting. Try --helpz4Not all password policy options have been specified.zaFor unspecified options, the current domain password settings will be used as the default values.Z pwdPropertiesZpwdHistoryLengthZ minPwdLengthZ minPwdAgeZ maxPwdAgeZlockoutDurationZlockoutThresholdZlockOutObservationWindow)r r r r )rG rF rD rE T) r? rA rB rC rD rE rF rG rH r@ rI z PSO successfully created: %sF)r( z5Administrator permissions are needed to create a PSO.z Failed to create PSO '%s': %s) � get_loadparm�get_credentialsr r r � ValueErrorr r r! r" r# r, r- r. rU �pwd_settings_options�raw_argvr% �messager r r r r rM rK r& �addr+ Z ERR_INSUFFICIENT_ACCESS_RIGHTS) �selfr^ rB r[ rF rG rA rC rD rE �account_lockout_duration�account_lockout_threshold�reset_account_lockout_afterrY rW rX rb �credsr r/ r) r0 � num_pwd_argsZ pwd_propsZ prop_flagrJ �numr8 r r r �run: s� z%cmd_domain_pwdsettings_pso_create.run) NNNNNNNNNNNNN)�__name__� __module__� __qualname__�__doc__�synopsisrR � SambaOptions�VersionOptions�CredentialsOptions�takes_optiongroupsrf r r � takes_options� takes_argsrq r r r r rV s rV c @ s\ e Zd ZdZdZejejejd�Z e e de dd�e ddd e d d d �g Zd gZddd�ZdS )� cmd_domain_pwdsettings_pso_setz*Modifies a Password Settings Object (PSO).z%prog <psoname> [options])rW rX rY z --precedencezUThis PSO's precedence relative to other PSOs. Lower precedence is better (<integer>).)rN rP z-Hz--URLz%LDB URL for database or target serverrZ r[ )rP rN r\ r] r^ Nc C st |j � }| j|�}t|t� ||d�}d|t|�f }t|||� tt| j�}|dkrd|d krdt d��|d k st|d k r�|j |t j ddgd�}|d kr�|d d d }t |�}|d kr�|d d d }t |�}t|||| d� t| j||d ||||| ||| | | d �}y.|j|� | jd | � t| j||d d � W n@ t jk �rn } z |j\}}t d ||f ��W Y d d }~X nX d S )N)r_ r` ra rb zCN=%s,%sr z?Please specify at least one password policy setting. Try --helpzmsDS-MinimumPasswordAgezmsDS-MaximumPasswordAge)r r )rG rF rD rE F) r? rA rB rC rD rE rF rG rH r@ rI z Successfully updated PSO: %s)r( z Failed to update PSO '%s': %s)rc rd r r r r1 rU rf rg r r! r" r# r rM rK r& �modifyrh r+ r, r- ) rj r^ r[ rB rF rG rA rC rD rE rk rl rm rY rW rX rb rn r r/ ro r) Z min_pwd_ticksZ max_pwd_ticksrJ r0 rp r8 r r r rq � sL z"cmd_domain_pwdsettings_pso_set.run)NNNNNNNNNNNNNN)rr rs rt ru rv rR rw rx ry rz rf r r r r{ r| rq r r r r r} � s" r} c @ sL e Zd ZdZdZejejejd�Z e ddddde d �gZ d gZ dd d �Zd S )�!cmd_domain_pwdsettings_pso_deletez)Deletes a Password Settings Object (PSO).z%prog <psoname> [options])rW rX rY z-Hz--URLz%LDB URL for database or target serverrZ r[ )rP r\ r] rN r^ Nc C s\ |j � }|j|�}t|t� ||d�}d|t|�f } t|| |� |j| � | jd| � d S )N)r_ r` ra rb zCN=%s,%szDeleted PSO %s)rc rd r r r r1 �deleterh ) rj r^ r[ rY rW rX rb rn r r/ r r r rq s z%cmd_domain_pwdsettings_pso_delete.run)NNNN)rr rs rt ru rv rR rw rx ry rz r r r{ r| rq r r r r r s r c C s t | d d �}|S )Nz msDS-PasswordSettingsPrecedencer )r )�aZ a_precedencer r r �pso_key# s r� c @ sF e Zd ZdZdZejejejd�Z e ddddde d �gZ d d d �Z d S )� cmd_domain_pwdsettings_pso_listz+Lists all Password Settings Objects (PSOs).z%prog [options])rW rX rY z-Hz--URLz%LDB URL for database or target serverrZ r[ )rP r\ r] rN Nc C s� |j � }|j|�}t|t� ||d�}|jt|�tjddgdd�}t|�dksXd|d krh| j j d� d S t |t d�} | j j d � | j j d � x,| D ]$} | d } | j j d | | d f � q�W d S ) N)r_ r` ra rb r z msDS-PasswordSettingsPrecedencez#(objectClass=msDS-PasswordSettings))r r r2 r z@No PSOs are present, or you don't have permission to view them. )�keyzPrecedence | PSO name z3-------------------------------------------------- z %-10s | %s ) rc rd r r r! r r" r3 r% r& r$ �sortedr� ) rj r[ rY rW rX rb rn r r) Zpso_listZpsorB r r r rq 8 s z#cmd_domain_pwdsettings_pso_list.run)NNNN)rr rs rt ru rv rR rw rx ry rz r r r{ rq r r r r r� ( s r� c @ sL e Zd ZdZdZejejejd�Z e ddddde d �gZ d gZ dd d �Zd S )� cmd_domain_pwdsettings_pso_showz-Display a Password Settings Object's details.z%prog <psoname> [options])rW rX rY z-Hz--URLz%LDB URL for database or target serverrZ r[ )rP r\ r] rN r^ Nc C sR |j � }|j|�}t|t� ||d�}d|t|�f } t|| |� t| j|| � d S )N)r_ r` ra rb zCN=%s,%s)rc rd r r r r1 r+ r& ) rj r^ r[ rY rW rX rb rn r r/ r r r rq f s z#cmd_domain_pwdsettings_pso_show.run)NNNN)rr rs rt ru rv rR rw rx ry rz r r r{ r| rq r r r r r� U s r� c @ sL e Zd ZdZdZejejejd�Z e ddddde d �gZ d gZ dd d �Zd S )�$cmd_domain_pwdsettings_pso_show_userz4Displays the Password Settings that apply to a user.z%prog <username> [options])rW rX rY z-Hz--URLz%LDB URL for database or target serverrZ r[ )rP r\ r] rN r4 Nc C s6 |j � }|j|�}t|t� ||d�}t| j||� d S )N)r_ r` ra rb )rc rd r r r6 r& ) rj r4 r[ rY rW rX rb rn r r r r rq � s z(cmd_domain_pwdsettings_pso_show_user.run)NNNN)rr rs rt ru rv rR rw rx ry rz r r r{ r| rq r r r r r� s s r� c @ sN e Zd ZdZdZejejejd�Z e ddddde d �gZ d d gZ dd d�Zd S )� cmd_domain_pwdsettings_pso_applya� Applies a PSO's password policy to a user or group. When a PSO is applied to a group, it will apply to all users (and groups) that are members of that group. If a PSO applies directly to a user, it will override any group membership PSOs for that user. When multiple PSOs apply to a user, either directly or through group membership, the PSO with the lowest precedence will take effect. z.%prog <psoname> <user-or-group-name> [options])rW rX rY z-Hz--URLz%LDB URL for database or target serverrZ r[ )rP r\ r] rN r^ � user_or_groupNc C s0 |j � }|j|�}t|t� ||d�} d|t| �f } t| | |� d| } | j| j� tj | d�} t | �dkrvt d| ��t | d j �} tj� }tj| | �|_ tj| tjd�|d< y| j|� W n\ tjk �r } z<|j\}}|tjkr�t d||f ��nt d ||f ��W Y d d }~X nX | jd ||f � d S ) N)r_ r` ra rb zCN=%s,%sz(sAMAccountName=%s))r r2 r z.The specified user or group '%s' was not foundzmsDS-PSOAppliesToz PSO '%s' already applies to '%s'z Failed to update PSO '%s': %szPSO '%s' applied to '%s')rc rd r r r r1 r! r r" r3 r% r r r' r< r= r7 r> r~ r, r- Z ERR_ATTRIBUTE_OR_VALUE_EXISTSrh )rj r^ r� r[ rY rW rX rb rn r r/ r5 r) � target_dnrJ r0 rp r8 r r r rq � s8 z$cmd_domain_pwdsettings_pso_apply.run)NNNN)rr rs rt ru rv rR rw rx ry rz r r r{ r| rq r r r r r� � s r� c @ sN e Zd ZdZdZejejejd�Z e ddddde d �gZ d d gZ dd d�Zd S )�"cmd_domain_pwdsettings_pso_unapplyz4Updates a PSO to no longer apply to a user or group.z.%prog <psoname> <user-or-group-name> [options])rW rX rY z-Hz--URLz%LDB URL for database or target serverrZ r[ )rP r\ r] rN r^ r� Nc C s0 |j � }|j|�}t|t� ||d�} d|t| �f } t| | |� d| } | j| j� tj | d�} t | �dkrvt d| ��t | d j �} tj� }tj| | �|_ tj| tjd�|d< y| j|� W n\ tjk �r } z<|j\}}|tjkr�t d||f ��nt d ||f ��W Y d d }~X nX | jd ||f � d S ) N)r_ r` ra rb zCN=%s,%sz(sAMAccountName=%s))r r2 r z.The specified user or group '%s' was not foundzmsDS-PSOAppliesToz PSO '%s' doesn't apply to '%s'z Failed to update PSO '%s': %sz"PSO '%s' no longer applies to '%s')rc rd r r r r1 r! r r" r3 r% r r r' r< r= r7 ZFLAG_MOD_DELETEr~ r, r- ZERR_NO_SUCH_ATTRIBUTErh )rj r^ r� r[ rY rW rX rb rn r r/ r5 r) r� rJ r0 rp r8 r r r rq � s: z&cmd_domain_pwdsettings_pso_unapply.run)NNNN)rr rs rt ru rv rR rw rx ry rz r r r{ r| rq r r r r r� � s r� c @ sd e Zd ZdZi Ze� ed< e� ed< e� ed< e� ed< e � ed< e � ed< e � ed< e � ed < d S ) � cmd_domain_passwordsettings_psoz5Manage fine-grained Password Settings Objects (PSOs).Zapplyr? r� �list�setZshowz show-userZunapplyN) rr rs rt ru Z subcommandsr� rV r r� r} r� r� r� r r r r r� s r� )T) NNNNNNNNNN)NNNN)*Z samba.getoptZgetoptrR r" Z samba.samdbr Z samba.netcmdr r r r Zsamba.dcerpc.samrr r Z samba.authr Zsamba.netcmd.commonr r r r r r r+ r1 r6 r; rK rM r rf rU rV r} r r� r� r� r� r� r� r� r r r r �<module> sj 2 @ S!- D<
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка