Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/netcmd/domain/__pycache__/trust.cpython-36.pyc
Ðазад
3 �I�d� � @ sP d dl Z d dlmZ d dlZd dljZd dlZd dlmZm Z m Z m Z d dl m Z d dlmZmZmZmZmZ d dlmZ d dlmZmZmZmZ d dlm Z d d l m Z G d d � d ej �Z G d d � d e�Z!G dd� de!�Z"G dd� de!�Z#G dd� de!�Z$G dd� de!�Z%G dd� de!�Z&G dd� de!�Z'G dd� de!�Z(G d d � d e�Z)dS ) � N)�getpass)� NTSTATUSError�ntstatus�string_to_byte_array�werror)�system_session)�drsblobs�lsa�nbt�netlogon�security)�Net)�Command� CommandError�Option� SuperCommand)�SamDB)�CreateTrustedDomainRelaxc @ s e Zd Zdd� ZdS )�LocalDCCredentialsOptionsc C s t jj| |dd� d S )Nzlocal-dc)Z special_name)�options�CredentialsOptions�__init__)�self�parser� r � /usr/lib64/python3.6/trust.pyr ) s z"LocalDCCredentialsOptions.__init__N)�__name__� __module__� __qualname__r r r r r r ( s r c @ s e Zd ZdZdd� Zdd� Zdd� ZG dd � d e�ZG d d � d e�Z G d d � d e�Z dd� Z dd� Z dd� Z dd� Zd?dd�Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)d*� Zd@d,d-�ZdAd.d/�Zd0d1� Zd2d3� Z d4d5� Z d6d7� Z d8d9� Z d:d;� Z dBd=d>�Z!d<S )C�DomainTrustCommandzList domain trusts.c C s8 t j| � d | _d | _d | _d | _d | _d | _d | _d S )N) r r �local_lp� local_server�local_binding_string� local_creds� remote_server�remote_binding_string� remote_creds)r r r r r 0 s zDomainTrustCommand.__init__c C s t j|�jS )N)�ctypes�c_uint32�value)r �vr r r �_uint32< s zDomainTrustCommand._uint32c C s, |d kr dS | j |jd �}||kr(dS dS )NFr T)r+ �args)r �runtime�val�err32r r r �check_runtime_error? s z&DomainTrustCommand.check_runtime_errorc @ s e Zd Zdd� ZdS )z$DomainTrustCommand.LocalRuntimeErrorc C s< |j |jd �}|jd }d|j|||f }tj| |� d S )Nr � z%LOCAL_DC[%s]: %s - ERROR(0x%08X) - %s)r+ r, r! r r )�exception_selfr r- �messager/ �errstr�msgr r r r J s z-DomainTrustCommand.LocalRuntimeError.__init__N)r r r r r r r r �LocalRuntimeErrorI s r6 c @ s e Zd Zdd� ZdS )z%DomainTrustCommand.RemoteRuntimeErrorc C s< |j |jd �}|jd }d|j|||f }tj| |� d S )Nr r1 z&REMOTE_DC[%s]: %s - ERROR(0x%08X) - %s)r+ r, r$ r r )r2 r r- r3 r/ r4 r5 r r r r R s z.DomainTrustCommand.RemoteRuntimeError.__init__N)r r r r r r r r �RemoteRuntimeErrorQ s r7 c @ s e Zd Zdd� ZdS )z DomainTrustCommand.LocalLdbErrorc C s6 |j d }|j d }d|j|||f }tj| |� d S )Nr r1 z!LOCAL_DC[%s]: %s - ERROR(%d) - %s)r, r! r r )r2 r Z ldb_errorr3 Zerrvalr4 r5 r r r r Z s z)DomainTrustCommand.LocalLdbError.__init__N)r r r r r r r r � LocalLdbErrorY s r8 c C s� | j d k r| j S |j� }|j}|d krf|j� }|dkrBtd| ��|jd�}d}d}|d7 }d }d } nd}d}d| }|j|�} || _|| _ d |||f | _|| _ | | _ | j S ) NZROLE_ACTIVE_DIRECTORY_DCzInvalid server_role %sz netbios nameZncalrpc� z ,auth_type=ncalrpc_as_systemZncacn_npz ldap://%sz %s:%s[%s]) r! Z get_loadparm� ipaddress� server_roler �get�get_credentialsr r" �local_ldap_urlr# ) r � sambaopts� localdcopts�lpr! r; Zlocal_transportZlocal_binding_optionsr> r# r r r �setup_local_servera s0 z%DomainTrustCommand.setup_local_serverc C s t j| j| j| j�S )N)r �lsarpcr" r r# )r r r r �new_local_lsa_connection� s z+DomainTrustCommand.new_local_lsa_connectionc C s t j | j| j| j�S )N)r r" r r# )r r r r � new_local_netlogon_connection� s z0DomainTrustCommand.new_local_netlogon_connectionc C s t | jt� | j| jd�S )N)ZurlZ session_infoZ credentialsrA )r r> r r# r )r r r r �new_local_ldap_connection� s z,DomainTrustCommand.new_local_ldap_connectionTc 4 C s� |r |s t �| jd k r | jS d| | _| jd k s4t �|j| j�}|j}d}yLt|| j|d�}tjtj B } |rv| tj O } |r�| tj O } |j | ||d�} W nV t k r� } z td|| jd f ��W Y d d } ~ X n tk r� td| ��Y nX tj dtjd tjd tj d tjd tjd tjdtj dtjdtjdtjdtjdtjdtjdtjdtj dtj dtj dtj di} | j | | j!dd �} | j"j#d | j$| j%| f � | j%| _d | j|f | _&|| _'| jS ) Nz __unknown__remote_server__.%sr9 )�server)�flags�domainZaddressz1Failed to find a writeable DC for domain '%s': %sr1 z-Failed to find a writeable DC for domain '%s'ZPDCZGCZLDAPZDSZKDCZTIMESERVZCLOSESTZWRITABLEZ GOOD_TIMESERVZNDNCZSELECT_SECRET_DOMAIN_6ZFULL_SECRET_DOMAIN_6ZADS_WEB_SERVICEZDS_8ZDS_9ZDS_10Z HAS_DNS_NAMEZ IS_DEFAULT_NCZ FOREST_ROOTT)� names_onlyz,RemoteDC Netbios[%s] DNS[%s] ServerType[%s] zncacn_np:%s[%s])(�AssertionErrorr$ r! r= r r: r r ZNBT_SERVER_LDAPZ NBT_SERVER_DSZNBT_SERVER_WRITABLEZNBT_SERVER_PDCZfinddcr r r, � ExceptionZ NBT_SERVER_GCZNBT_SERVER_KDCZNBT_SERVER_TIMESERVZNBT_SERVER_CLOSESTZNBT_SERVER_GOOD_TIMESERVZNBT_SERVER_NDNCZ!NBT_SERVER_SELECT_SECRET_DOMAIN_6Z NBT_SERVER_FULL_SECRET_DOMAIN_6ZNBT_SERVER_ADS_WEB_SERVICEZNBT_SERVER_DS_8ZNBT_SERVER_DS_9ZNBT_SERVER_DS_10ZNBT_SERVER_HAS_DNS_NAMEZNBT_SERVER_IS_DEFAULT_NCZNBT_SERVER_FOREST_ROOT�generic_bitmap_to_stringZ server_type�outf�writeZpdc_nameZ pdc_dns_namer% r& )r �credoptsrI � require_pdcZrequire_writabler& r$ Zremote_binding_optionsZ remote_netZ remote_flagsZ remote_info�errorZflag_mapZserver_type_stringr r r �setup_remote_server� sf " z&DomainTrustCommand.setup_remote_serverc C s t j| j| j| j�S )N)r rC r% r r& )r r r r �new_remote_lsa_connection� s z,DomainTrustCommand.new_remote_lsa_connectionc C s t j | j| j| j�S )N)r r% r r& )r r r r � new_remote_netlogon_connection� s z1DomainTrustCommand.new_remote_netlogon_connectionc C s< t j� }t j� |_|jdjd�||�}|j|t j�}||fS )N� zutf-8)r ZObjectAttributeZQosInfoZsec_qosZ OpenPolicy2�decodeZQueryInfoPolicy2ZLSA_POLICY_INFO_DNS)r �connZ policy_accessZ objectAttrZpolicy�infor r r � get_lsa_info� s z DomainTrustCommand.get_lsa_infoc C s@ y |j |d dd d d tj�}|jS tk r: |j||�S X d S )Nr )�netr_DsRGetDCNameEx2r �DS_RETURN_DNS_NAME�dc_unc� RuntimeErrorZnetr_GetDcName)r rX rG rI rY r r r �get_netlogon_dc_unc� s z&DomainTrustCommand.get_netlogon_dc_uncc C s |j |d dd d d tj�}|S )Nr )r[ r r\ )r rX rG rY r r r �get_netlogon_dc_info� s z'DomainTrustCommand.get_netlogon_dc_infoc C s |j tjkr|jS |jS )N)� trust_typer �LSA_TRUST_TYPE_DOWNLEVEL� netbios_nameZdns_name)r �tr r r �netr_DomainTrust_to_name� s z+DomainTrustCommand.netr_DomainTrust_to_namec C s� d }d }x4|D ],}|j tj@ r|}|j tj@ s8||j }P qW |j tj@ r�||krVdS |j tj@ rfdS ||j }||kr|dS dS |jtj@ r�dS dS )NZParentZTreeRootZChildZShortcutZForestZExternal) � trust_flagsr �NETR_TRUST_FLAG_PRIMARYZNETR_TRUST_FLAG_TREEROOTZ parent_index�NETR_TRUST_FLAG_IN_FOREST�trust_attributesr �%LSA_TRUST_ATTRIBUTE_FOREST_TRANSITIVE)r �ard ZprimaryZprimary_parentZ_t�parentr r r �netr_DomainTrust_to_type� s( z+DomainTrustCommand.netr_DomainTrust_to_typec C s4 |j tj@ rdS |jtj@ r dS |jtj@ r0dS dS )NZYesZNo)rf r rh ri r �"LSA_TRUST_ATTRIBUTE_NON_TRANSITIVErj )r rd r r r � netr_DomainTrust_to_transitive s z1DomainTrustCommand.netr_DomainTrust_to_transitivec C s@ |j tj@ r |j tj@ r dS |j tj@ r,dS |j tj@ r<dS dS )N�BOTHZINCOMINGZOUTGOINGZINVALID)rf r �NETR_TRUST_FLAG_INBOUND�NETR_TRUST_FLAG_OUTBOUND)r rd r r r � netr_DomainTrust_to_direction s z0DomainTrustCommand.netr_DomainTrust_to_directionFc C sD y || }W n& t k r2 | j|�}d| }Y nX d||f }|S )Nz__unknown__%08X__z 0x%x (%s))�KeyErrorr+ )r Ze_dictr* rJ �wZv32�rr r r �generic_enum_to_string) s z)DomainTrustCommand.generic_enum_to_stringc C s� g }|}x6t |j� �D ]&}||@ s$q|| M }||| g7 }qW |dkr`| j|�}|d| g7 }dj|�}|rr|S d||f } | S )Nr z__unknown_%08X__�,z 0x%x (%s))�sorted�keysr+ �join) r Zb_dictr* rJ �s�c�bZc32ru rv r r r rM 3 s z+DomainTrustCommand.generic_bitmap_to_stringc C s( t jdt jdt jdt jdi}| j||�S )NZ DOWNLEVELZUPLEVELZMITZDCE)r rb �LSA_TRUST_TYPE_UPLEVELZLSA_TRUST_TYPE_MITZLSA_TRUST_TYPE_DCErw )r r* �typesr r r �trustType_stringH s z#DomainTrustCommand.trustType_stringc C s( t jt jB dt jdt jdi}| j||�S )Nrp ZINBOUNDZOUTBOUND)r �LSA_TRUST_DIRECTION_INBOUND� LSA_TRUST_DIRECTION_OUTBOUNDrw )r r* Z directionsr r r �trustDirection_stringQ s z(DomainTrustCommand.trustDirection_stringc C s@ t jdt jdt jdt jdt jdt jdt jdt jdi}| j ||�S ) NZNON_TRANSITIVEZ UPLEVEL_ONLYZQUARANTINED_DOMAINZFOREST_TRANSITIVEZCROSS_ORGANIZATIONZ WITHIN_FORESTZTREAT_AS_EXTERNALZUSES_RC4_ENCRYPTION) r rn Z LSA_TRUST_ATTRIBUTE_UPLEVEL_ONLY�&LSA_TRUST_ATTRIBUTE_QUARANTINED_DOMAINrj �&LSA_TRUST_ATTRIBUTE_CROSS_ORGANIZATIONZ!LSA_TRUST_ATTRIBUTE_WITHIN_FOREST�%LSA_TRUST_ATTRIBUTE_TREAT_AS_EXTERNALZ'LSA_TRUST_ATTRIBUTE_USES_RC4_ENCRYPTIONrM )r r* Z attributesr r r �trustAttributes_stringZ s z)DomainTrustCommand.trustAttributes_stringc C sL t jdt jdt jdt jdt jdt jdt jdt jdt j d t j d i }| j ||�S ) NZ DES_CBC_CRCZ DES_CBC_MD5Z RC4_HMAC_MD5ZAES128_CTS_HMAC_SHA1_96ZAES256_CTS_HMAC_SHA1_96zAES256_CTS_HMAC_SHA1_96-SKZFAST_SUPPORTEDZCOMPOUND_IDENTITY_SUPPORTEDZCLAIMS_SUPPORTEDZ!RESOURCE_SID_COMPRESSION_DISABLED) r ZKERB_ENCTYPE_DES_CBC_CRCZKERB_ENCTYPE_DES_CBC_MD5�KERB_ENCTYPE_RC4_HMAC_MD5�$KERB_ENCTYPE_AES128_CTS_HMAC_SHA1_96�$KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96Z'KERB_ENCTYPE_AES256_CTS_HMAC_SHA1_96_SKZKERB_ENCTYPE_FAST_SUPPORTEDZ(KERB_ENCTYPE_COMPOUND_IDENTITY_SUPPORTEDZ KERB_ENCTYPE_CLAIMS_SUPPORTEDZ.KERB_ENCTYPE_RESOURCE_SID_COMPRESSION_DISABLEDrM )r r* Zenctypesr r r �kerb_EncTypes_stringg s z'DomainTrustCommand.kerb_EncTypes_stringc C s6 |dkr dS t jdt jdt jdi}d| j||dd� S ) Nr zStatus[Enabled]z Disabled-NewZDisabledzDisabled-Conflictingz Status[%s]T)rJ )r ZLSA_TLN_DISABLED_NEW�LSA_TLN_DISABLED_ADMINZLSA_TLN_DISABLED_CONFLICTrM )r �e_flagsrH r r r �entry_tln_statusv s z#DomainTrustCommand.entry_tln_statusc C s< |dkr dS t jdt jdt jdt jdi}d| j||dd � S ) Nr zStatus[Enabled]z Disabled-SIDzDisabled-SID-Conflictingz Disabled-NBzDisabled-NB-Conflictingz Status[%s]T)rJ )r �LSA_SID_DISABLED_ADMINZLSA_SID_DISABLED_CONFLICT�LSA_NB_DISABLED_ADMINZLSA_NB_DISABLED_CONFLICTrM )r r� rH r r r �entry_dom_status� s z#DomainTrustCommand.entry_dom_statusNc C s |d k rd| }nd}| j jdt|j�|f � x�t|j�D ]�\}}|j}d}|d k r�x,|jD ]"} | j|krnq^| j}d| jj }q^W |j } |j t j kr�| j jd| j |�| j|f � q<|j t jkr�| j jdd| jf � q<|j t jkr<| j jd| j|�| jj| jj| j|f � q<W d S )Nz TDO[%s]r9 zNamespaces[%d]%s: z Collision[%s]zTLN: %-32s DNS[*.%s]%s zTLN_EX: %-29s DNS[*.%s] z)DOM: %-32s DNS[%s] Netbios[%s] SID[%s]%s )rN rO �len�entries� enumeraterH �index�name�string�forest_trust_data�typer � LSA_FOREST_TRUST_TOP_LEVEL_NAMEr� �"LSA_FOREST_TRUST_TOP_LEVEL_NAME_EX� LSA_FOREST_TRUST_DOMAIN_INFOr� Zdns_domain_name�netbios_domain_name� domain_sid) r Zfti�tln� collisionsZ tln_string�i�erH Zcollision_stringr} �dr r r �write_forest_trust_info� s: z*DomainTrustCommand.write_forest_trust_info)TT)F)F)NN)"r r r �__doc__r r+ r0 r r6 r7 r8 rB rD rE rF rS rT rU rZ r_ r` re rm ro rs rw rM r� r� r� r� r� r� r� r r r r r - s> @ r c @ s2 e Zd ZdZdZejejed�Z g Z ddd�Z dS )�cmd_domain_trust_listzList domain trusts.z%prog [options])r? � versionoptsr@ Nc % C s | j ||�}y | j� }W n0 tk rH } z| j| |d��W Y d d }~X nX y |j|tjtjB tjB �}W nJ tk r� } z.| j |t j �r�t d| ��| j| |d��W Y d d }~X nX |j }x\|D ]T} | jtj@ r�q�| jjdd| j|| � d| j| � d| j| � d| j| � f � q�W d S ) Nz!failed to connect netlogon serverz:LOCAL_DC[%s]: netr_DsrEnumerateDomainTrusts not supported.z$netr_DsrEnumerateDomainTrusts failedz%-14s %-15s %-19s %s zType[%s]zTransitive[%s]z Direction[%s]zName[%s])rB rE r^ r6 Z netr_DsrEnumerateDomainTrustsr rh rr rq r0 r � WERR_RPC_S_PROCNUM_OUT_OF_RANGEr �arrayrf rg rN rO rm ro rs re ) r r? r� r@ r! �local_netlogonrR Zlocal_netlogon_trustsrk rd r r r �run� s0 zcmd_domain_trust_list.run)NNN) r r r r� �synopsisr � SambaOptions�VersionOptionsr �takes_optiongroups� takes_optionsr� r r r r r� � s r� c @ s8 e Zd ZdZdZejejed�Z g Z dgZ ddd�Z dS ) �cmd_domain_trust_showz Show trusted domain details.z%prog NAME [options])r? r� r@ rI Nc J C sh | j ||� y | j� }W n0 tk rH } z| j| |d��W Y d d }~X nX ytj}| j||�\}} W n0 tk r� } z| j| |d��W Y d d }~X nX | jjd| j j | j j | j f � tj � } || _ y |j|| tj�} | j} | j} W nN tk �r2 } z0| j|tj��rtd| ��| j| |d��W Y d d }~X nX y|j|| tj�}W nr tk �r� } zT| j|tj��rpd }| j|tj��r�d }|d k �r�| j| |d��tj� }d|_W Y d d }~X nX y&d }| j tj @ �r�|j || tj �}W nx tk �rZ } zZ| j|tj ��r d }| j|tj!��r d }|d k �r6| j| |d��tj"� }d|_#g |_$W Y d d }~X nX | jjd � | jjd | j%j � | j%j | j&j k�r�| jjd | j&j � | jjd | j � | jjd | j'| j(� � | jjd| j)| j*� � | jjd| j+| j � � t,j-| j�j.}t,j/| j�j.}| jjd||f � | jjd| j0|j� � | j tj @ �rd| j1|| j&j d� d S )Nz failed to connect lsa serverz#failed to query LSA_POLICY_INFO_DNSz(LocalDomain Netbios[%s] DNS[%s] SID[%s] z4trusted domain object does not exist for domain [%s]z.QueryTrustedDomainInfoByName(FULL_INFO) failedz?QueryTrustedDomainInfoByName(SUPPORTED_ENCRYPTION_TYPES) failedr z&lsaRQueryForestTrustInformation failedzTrustedDomain: zNetbiosName: %s zDnsName: %s zSID: %s zType: %s zDirection: %s zAttributes: %s z PosixOffset: 0x%08X (%d) zkerb_EncTypes: %s )r� )2rB rD r^ r6 r �!LSA_POLICY_VIEW_LOCAL_INFORMATIONrZ rN rO r� r� � dns_domain�sid�String� QueryTrustedDomainInfoByName�!LSA_TRUSTED_DOMAIN_INFO_FULL_INFOZinfo_exZ posix_offsetr r0 r � NT_STATUS_OBJECT_NAME_NOT_FOUNDr �-LSA_TRUSTED_DOMAIN_SUPPORTED_ENCRYPTION_TYPES�NT_STATUS_INVALID_PARAMETER� NT_STATUS_INVALID_INFO_CLASS� TrustDomainInfoSupportedEncTypes� enc_typesri rj � lsaRQueryForestTrustInformationr� Z"NT_STATUS_RPC_PROCNUM_OUT_OF_RANGEZNT_STATUS_NOT_FOUND�ForestTrustInformation�countr� rc � domain_namer� ra r� �trust_directionr� r' r( r) Zc_int32r� r� )r rI r? r� r@ � local_lsarR �local_policy_access� local_policy�local_lsa_info� lsaStringZlocal_tdo_full�local_tdo_infoZlocal_tdo_posix�local_tdo_enctypesZlocal_tdo_forestZposix_offset_u32Zposix_offset_i32r r r r� � s� zcmd_domain_trust_show.run)NNN) r r r r� r� r r� r� r r� r� � takes_argsr� r r r r r� � s r� c @ sh e Zd ZdZdZejejed�Z e dddddd �e d dd d dd �e d ddddd �gZ dgZ ddd�Z dS )�cmd_domain_trust_modifyz Show trusted domain details.z%prog NAME [options])r? r� r@ z--use-aes-keys� store_truez!The trust uses AES kerberos keys.� use_aes_keysN)�action�help�dest�defaultz --no-aes-keysz:The trust does not have any support for AES kerberos keys.�disable_aes_keysz--raw-kerb-enctypes�storez The raw kerberos enctype bits� kerb_enctypesrI c : C s� d}d} |d k r| d7 } |d k r(| d7 } |d k r8| d7 } | dkrHt d��| dkrX|d7 }|dkrht d��| j||� y | j� } W n0 tk r� } z| j| | d��W Y d d } ~ X nX y$tj} | tjO } | j| | �\} }W n2 tk �r } z| j| | d��W Y d d } ~ X nX | j j d|j j |j j |jf � | dk�r�tj� }||_ y| j| |tj�}W nr tk �r� } zT| j| tj��r~d } | j| tj��r�d } | d k �r�| j| | d��tj� }d|_W Y d d } ~ X nX | j j d | j|j� � tj� }|d k �rt|dd �|_n@|d k �r(tj |_| jtj O _n |d k �r<tj |_nt d ��|j|jk�r�y.| j | |tj|�}| j j d | j|j� � W n< tk �r� } z | d k �r�| j| | d ��W Y d d } ~ X nX n | j j d� d S )Nr r1 zL--no-aes-keys, --use-aes-keys and --raw-kerb-enctypes are mutually exclusivez/modification arguments are required, try --helpz failed to connect to lsa serverz#failed to query LSA_POLICY_INFO_DNSz(LocalDomain Netbios[%s] DNS[%s] SID[%s] z?QueryTrustedDomainInfoByName(SUPPORTED_ENCRYPTION_TYPES) failedzOld kerb_EncTypes: %s )�basez&Internal error should be checked abovezNew kerb_EncTypes: %s z=SetTrustedDomainInfoByName(SUPPORTED_ENCRYPTION_TYPES) failedz No kerb_EncTypes update needed ) r rB rD r^ r6 r r� �LSA_POLICY_TRUST_ADMINrZ rN rO r� r� r� r� r� r� r� r r0 r r� r� r� r� r� �intr r� r� r� ZSetTrustedDomainInfoByName)r rI r? r� r@ r� r� r� Znum_modificationsZ enctype_argsr� rR r� r� r� r� r� r� r r r r� h s� zcmd_domain_trust_modify.run)NNNNNN)r r r r� r� r r� r� r r� r r� r� r� r r r r r� L s( r� c @ s� e Zd ZdZdZejejeje d�Z e dddddgd d dd �e d dd dddgdddd �e dddddgdddd �e ddddd d �e d dd d d!d"gd#d$d"d �e d%dd&d'd d �e d(dd)d*d d �e d+d,d-d.d/d �e d0d,d1d2d/d �g Z d3gZ d6d4d5�Zd"S )7�cmd_domain_trust_createz Create a domain or forest trust.z%prog DOMAIN [options])r? r� rP r@ z--type�choiceZTYPE�external�forestz.The type of the trust: 'external' or 'forest'.ra )r� �metavar�choicesr� r� r� z --directionZ DIRECTION�incoming�outgoing�bothz6The trust direction: 'incoming', 'outgoing' or 'both'.r� z--create-location�LOCATION�localz=Where to create the trusted domain object: 'local' or 'both'.�create_locationz--cross-organisationr� z=The related domains does not belong to the same organisation.�cross_organisationF)r� r� r� r� z --quarantinedzyes|no�yes�noNz�Special SID filtering rules are applied to the trust. With --type=external the default is yes. With --type=forest the default is no.�quarantined_argz--not-transitivez#The forest trust is not transitive.�not_transitivez--treat-as-externalz'The treat the forest trust as external.�treat_as_externalz --no-aes-keysZ store_falsez)The trust does not use AES kerberos keys.r� Tz--skip-validationz Skip validation of the trust.�validaterI c < + s� t j� }d}| d kr"|dkr.d}n | dkr.d}|dkrN| rBtd��| rNtd��t j� }| rttj|_| jtjO _ntj|_t j }|t j O }|t j O }t j � }t j |_d|_|d kr�| jt jO _| jt jO _n4|d kr�| jt jO _n|d k�r | jt jO _d|_| �r&| jt jO _|�r<| jt jO _|dk�rV| jt jO _| �rl| jt jO _| �r�| jt jO _� fd d �}d }d }t j }|dk�r�|jt j@ �r�|d�}t|jd��}|jt j@ �r�|d�}t|jd��}d }�n8dd� }|jt j@ �r|d�}|jt j@ �r*|d�}|t j O }|t j O }t j � }t j |_d|_|d k�r�| jt jO _| jt jO _n6|d k�r�| jt jO _n|d k�r�| jt jO _d|_| �r�| jt jO _|�r�| jt jO _|dk�r| jt jO _| �r| jt jO _| �r.| jt jO _� j||�} y � j� } W n2 t k �rx } z� j � | d��W Y d d } ~ X nX y� j | |�\} } W n2 t k �r� } z� j � | d��W Y d d } ~ X nX � j j d| j!j"| j#j"| j$f � y� j%||�}!W n2 t k �r$ } z� j&� | d��W Y d d } ~ X nX y � j'� }"W n2 t k �rd } z� j&� | d��W Y d d } ~ X nX y� j |"|�\}#}$W n2 t k �r� } z� j&� | d��W Y d d } ~ X nX � j j d|$j!j"|$j#j"|$j$f � |$j#j"|j(_"|$j!j"|j)_"|$j$|_$|�r| j#j"|j(_"| j!j"|j)_"| j$|_$y,|j(j"|_"| j*| |t j+� td|j" ��W nH t,k �r� } z*� j-| t.j/��sx� j � | d|j" ��W Y d d } ~ X nX y,|j)j"|_"| j*| |t j+� td|j" ��W nH t,k �r� } z*� j-| t.j/��s� j � | d|j" ��W Y d d } ~ X nX |�r�y,|j(j"|_"|"j*|#|t j+� td|j" ��W nH t,k �rz } z*� j-| t.j/��sj� j&� | d|j" ��W Y d d } ~ X nX y,|j)j"|_"|"j*|#|t j+� td|j" ��W nH t,k �r� } z*� j-| t.j/��s� j&� | d|j" ��W Y d d } ~ X nX y � j0� }%W n2 t k �r0 } z� j � | d ��W Y d d } ~ X nX y� j1|%| �}&W n2 t k �rt } z� j � | d ��W Y d d } ~ X nX |�ry � j2� }'W n2 t k �r� } z� j&� | d ��W Y d d } ~ X nX y� j3|'|!|�}(W n2 t k �r } z� j&� | d ��W Y d d } ~ X nX d d � })t4j5� }*|)||*�}+|)||*�},d }-d }.y�|�r�� j j d � d!d"d#�}/t6|"|#|t j7|,|+�}.� j j d$� |�r�� j j d%� d!d&d#�}/|"j8|.t j9|� � j j d'� dd"d#�}/t6| | |t j7|+|,�}-� j j d(� |�r�� j j d)� dd&d#�}/| j8|-t j9|� W n� t k � r� } z�� j j d*|/d+ |/d, f � |.� rL� j j d-� |"j:|.� d }.|-� rl� j j d.� | j:|-� d }-|/d, d!k� r�� j&� | d/|/d+ ��� j � | d/|/d+ ��W Y d d } ~ X nX |� rT|jt j@ � rH� j j d0� y|%j;|&j<|$j#j"t=j>�}0W n2 t k � r$ } z� j � | d1��W Y d d } ~ X nX y| j?| |$j#t j@|0d�}1W n2 t k � rr } z� j � | d2��W Y d d } ~ X nX � jA|0|$j#j"|1d3� |� rH� j j d4� y|'j;|(| j#j"t=j>�}2W n2 t k � r� } z� j&� | d1��W Y d d } ~ X nX y|"j?|#| j#t j@|2d�}3W n2 t k � r2 } z� j&� | d2��W Y d d } ~ X nX � jA|2| j#j"|3d3� |jt j@ � rL� j j d5� y |%jB|&j<t=jCd6|$j#j"�}4W n2 t k � r� } z� j � | d7��W Y d d } ~ X nX � jD|4jEd �}5� jD|4jFd �}6|4jGt=jH@ � r�d8|4jI|4jFd9 |4jEd9 f }7n d:|4jI|4jFd9 |4jEd9 f }7|5tJjKk� s2|6tJjKk� r<t|7��n� j j d;|7 � |� rT|jt j@ � rT� j j d<� y|'jB|(t=jCd6| j#j"�}8W n2 t k � r� } z� j&� | d7��W Y d d } ~ X nX � jD|8jEd �}9� jD|8jFd �}:|8jGt=jH@ � rd=|8jI|8jFd9 |8jEd9 f };n d>|8jI|8jFd9 |8jEd9 f };|9tJjKk� s:|:tJjKk� rDt|;��n� j j d;|; � |.d k � r�y|"jL|.� W n t k � r� Y nX d }.|-d k � r�y| jL|-� W n t k � r� Y nX d }-� j j d?� d S )@NFr� Tr� r� z'--not-transitive requires --type=forestz*--treat-as-external requires --type=forestr r� r� r� c sR d }xH|d k r|dkr|S t d| �}t d| �}||ksd }� jjd� qW d S )Nr9 zNew %s Password: zRetype %s Password: z Sorry, passwords do not match. )r rN rO )r� �passwordZpasswordverify)r r r � get_password7 s z1cmd_domain_trust_create.run.<locals>.get_passwordr� zIncoming Trustz utf-16-lezOutgoing Trustc S s" t j| d | d �}t|jd��S )N� z utf-16-le)�sambaZ generate_random_machine_passwordr �encode)ZlengthZpwr r r �random_trust_secretY s z8cmd_domain_trust_create.run.<locals>.random_trust_secret�� z failed to connect lsa serverz#failed to query LSA_POLICY_INFO_DNSz(LocalDomain Netbios[%s] DNS[%s] SID[%s] z failed to locate remote serverz)RemoteDomain Netbios[%s] DNS[%s] SID[%s] z TrustedDomain %s already exist'z2QueryTrustedDomainInfoByName(%s, FULL_INFO) failedz!failed to connect netlogon serverz failed to get netlogon dc infoc S s� | d krt j� }d|_|S t j� }t| �|_| |_t j� }tj |�|_ t j |_ ||_t j� }d|_|g|_t j� }d|_||_|S )Nr r1 )r ZtrustAuthInOutBlobr� Z AuthInfoClearr� �sizer� ZAuthenticationInformationr� Z unix2nttimeZLastUpdateTimer ZTRUST_AUTH_TYPE_CLEARZAuthTypeZAuthInfoZ AuthenticationInformationArrayr� Zcurrent)Zsecret� update_timeZblob�clearrY r� r r r �generate_AuthInOutBlob� s$ z;cmd_domain_trust_create.run.<locals>.generate_AuthInOutBlobzCreating remote TDO. ZremoteZCreateTrustedDomainEx2)�locationr� zRemote TDO created. z2Setting supported encryption types on remote TDO. �SetInformationTrustedDomainzCreating local TDO. zLocal TDO created z1Setting supported encryption types on local TDO. z$Error: %s failed %sly - cleaning up r� r� zDeleting remote TDO. zDeleting local TDO. z%sz(Setup local forest trust information... z*netr_DsRGetForestTrustInformation() failedz&lsaRSetForestTrustInformation() failed)r� r� z)Setup remote forest trust information... z Validating outgoing trust... r� z!NETLOGON_CONTROL_TC_VERIFY failedzGLocalValidation: DC[%s] CONNECTION[%s] TRUST[%s] VERIFY_STATUS_RETURNEDr1 z0LocalValidation: DC[%s] CONNECTION[%s] TRUST[%s]zOK: %s z Validating incoming trust... zHRemoteValidation: DC[%s] CONNECTION[%s] TRUST[%s] VERIFY_STATUS_RETURNEDz1RemoteValidation: DC[%s] CONNECTION[%s] TRUST[%s]z Success. )Mr r� r r� r r� r� r� r� r� r� �LSA_POLICY_CREATE_SECRETZTrustDomainInfoInfoExr ra r� r� r� ri r� r� rj rn r� r r� rB rD r^ r6 rZ rN rO r� r� r� r� rS r7 rT r� rc r� r� r r0 r r� rE r` rU r_ r� Zcurrent_unix_timer Z LSA_TRUSTED_DOMAIN_ALL_ACCESSr� r� � DeleteObject�!netr_DsRGetForestTrustInformationr] r �DS_GFTI_UPDATE_TDO� lsaRSetForestTrustInformationr� r� �netr_LogonControl2Ex�NETLOGON_CONTROL_TC_VERIFYr+ �pdc_connection_status�tc_connection_statusrH � NETLOGON_VERIFY_STATUS_RETURNED�trusted_dc_namer � WERR_SUCCESSZClose)<r rI r? r@ rP r� ra r� r� r� r� r� r� r� r� r� Z quarantinedr� r� Zlocal_trust_infor� Zincoming_secretZoutgoing_secret�remote_policy_accessZincoming_passwordZoutgoing_passwordZremote_trust_infor� r! r� rR r� r� r$ � remote_lsa� remote_policy�remote_lsa_infor� �local_netlogon_info�remote_netlogonZremote_netlogon_dc_uncr� r� Z incoming_blobZ outgoing_blob�local_tdo_handle�remote_tdo_handleZcurrent_request�local_forest_infoZlocal_forest_collisionZremote_forest_infoZremote_forest_collision�local_trust_verify�local_trust_status�local_conn_status�local_validation�remote_trust_verify�remote_trust_status�remote_conn_status�remote_validationr )r r r� � s� zcmd_domain_trust_create.run) NNNNNNNFNFFFT)r r r r� r� r r� r� r r r� r r� r� r� r r r r r� � sh r� c @ sT e Zd ZdZdZejejeje d�Z e dddddgd d dd �gZ d gZ ddd�Zd S )�cmd_domain_trust_deletezDelete a domain trust.z%prog DOMAIN [options])r? r� rP r@ z--delete-locationr� r� r� r� z=Where to delete the trusted domain object: 'local' or 'both'.�delete_location)r� r� r� r� r� r� rI Nc � C s� t j}|t jO }|t jO }|dkr(d }nt j}|t jO }|t jO }| j||� y | j� } W n0 tk r� } z| j| | d��W Y d d } ~ X nX y| j| |�\} } W n0 tk r� } z| j| | d��W Y d d } ~ X nX | j j d| j j | j j | jf � d } d }d }d }t j� }y||_ | j| |t j�} W nN tk �rr } z0| j| tj��rTtd| ��| j| | d��W Y d d } ~ X nX |d k �rxy| j||� W n2 tk �r� } z| j| | d��W Y d d } ~ X nX y | j� }W n2 tk �r } z| j| | d��W Y d d } ~ X nX y| j||�\}}W n2 tk �rH } z| j| | d��W Y d d } ~ X nX | j j d|j j |j j |jf � |j| jk�s�|j j | jj k�s�|j j | jj k�r�td| jj | jj | jf ��y | j j |_ |j||t j�}W nH tk �r } z*| j| tj��s| j| | d |j ��W Y d d } ~ X nX |d k �rx| j|jk�s\| j j |jj k�s\| j j |jj k�rxtd |jj |jj |jf ��| d k �r�y | jj |_ | j | |t j �}W n8 tk �r� } z| j| | d |j ��W Y d d } ~ X nX | j |� d }|d k �rJy |jj |_ |j ||t j �}W n8 tk �rH } z| j| | d |j ��W Y d d } ~ X nX |d k �r�y |j |� d }| j j d � W n> tk �r� } z | j j d | j| | d� � W Y d d } ~ X nX d S )Nr� z failed to connect lsa serverz#failed to query LSA_POLICY_INFO_DNSz(LocalDomain Netbios[%s] DNS[%s] SID[%s] z$Failed to find trust for domain '%s'z failed to locate remote serverz)RemoteDomain Netbios[%s] DNS[%s] SID[%s] z2LocalTDO inconsistent: Netbios[%s] DNS[%s] SID[%s]z QueryTrustedDomainInfoByName(%s)z3RemoteTDO inconsistent: Netbios[%s] DNS[%s] SID[%s]zOpenTrustedDomainByName(%s)zRemoteTDO deleted. z%s zDeleteObject() failed) r r� r� r� rB rD r^ r6 rZ rN rO r� r� r� r� r� r� � LSA_TRUSTED_DOMAIN_INFO_INFO_EXr r0 r r� r r7 rS rT rc r� ZOpenTrustedDomainByNamer ZSEC_STD_DELETEr� )r rI r? r@ rP r� r r� r r� rR r� r� r� r Zremote_tdo_infor r� r r r r r r r� � s� ,zcmd_domain_trust_delete.run)NNNNN)r r r r� r� r r� r� r r r� r r� r� r� r r r r r � s r c @ sT e Zd ZdZdZejejeje d�Z e dddddgd d dd �gZ d gZ ddd�Zd S )�cmd_domain_trust_validatezValidate a domain trust.z%prog DOMAIN [options])r? r� rP r@ z--validate-locationr� r� r� r� z?Where to validate the trusted domain object: 'local' or 'both'.�validate_location)r� r� r� r� r� r� rI Nc � C sR t j}| j||�}y | j� } W n0 tk rN } z| j| | d��W Y d d } ~ X nX y| j| |�\} } W n0 tk r� } z| j| | d��W Y d d } ~ X nX | jjd| j j | j j | j f � y"t j � } || _ | j| | t j�}W nN tk �r& } z0| j| tj��rtd| ��| j| | d��W Y d d } ~ X nX | jjd|jj |jj |j f � y | j� }W n2 tk �r� } z| j| | d��W Y d d } ~ X nX y|j|tjd|jj �}W n2 tk �r� } z| j| | d ��W Y d d } ~ X nX | j|j d �}| j|j d �}|j tj @ �r"d |j |j d |j d f }n d |j |j d |j d f }|t!j"k�sV|t!j"k�r`t|��n| jjd| � y4|j j#dd�}d|jj |f }|j|tj$d|�}W n2 tk �r� } z| j| | d��W Y d d } ~ X nX | j|j d �}d|j |j d f }|t!j"k�rt|��n| jjd| � |dk�rNy| j%||dd�}W n2 tk �rr } z| j&| | d��W Y d d } ~ X nX y | j'� }W n2 tk �r� } z| j&| | d��W Y d d } ~ X nX y|j|tjd| j j �}W n2 tk �r } z| j&| | d ��W Y d d } ~ X nX | j|j d �}| j|j d �} |j tj @ �rNd|j |j d |j d f } n d|j |j d |j d f } |t!j"k�s�| t!j"k�r�t| ��n| jjd| � y4|j j#dd�}d| j j |f }|j|tj$d|�} W n2 tk �r } z| j&| | d��W Y d d } ~ X nX | j| j d �} d| j | j d f } | t!j"k�r>t| ��n| jjd| � d S )Nz failed to connect lsa serverz#failed to query LSA_POLICY_INFO_DNSz(LocalDomain Netbios[%s] DNS[%s] SID[%s] z4trusted domain object does not exist for domain [%s]z,QueryTrustedDomainInfoByName(INFO_EX) failedz%LocalTDO Netbios[%s] DNS[%s] SID[%s] z!failed to connect netlogon serverr� z!NETLOGON_CONTROL_TC_VERIFY failedr zGLocalValidation: DC[%s] CONNECTION[%s] TRUST[%s] VERIFY_STATUS_RETURNEDr1 z0LocalValidation: DC[%s] CONNECTION[%s] TRUST[%s]zOK: %s �\r9 z%s\%sz"NETLOGON_CONTROL_REDISCOVER failedz&LocalRediscover: DC[%s] CONNECTION[%s]r� F)rQ z failed to locate remote serverzHRemoteValidation: DC[%s] CONNECTION[%s] TRUST[%s] VERIFY_STATUS_RETURNEDz1RemoteValidation: DC[%s] CONNECTION[%s] TRUST[%s]z'RemoteRediscover: DC[%s] CONNECTION[%s])(r r� rB rD r^ r6 rZ rN rO r� r� r� r� r� r� r r r0 r r� r rc r� rE r� r r� r+ r r rH r r r r �replaceZNETLOGON_CONTROL_REDISCOVERrS r7 rU ) r rI r? r� rP r@ r r� r! r� rR r� r� r� r� r� r r r r rG Zdomain_and_serverZlocal_trust_rediscoverZlocal_rediscoverr$ r r r r r Zremote_trust_rediscoverZremote_rediscoverr r r r� x s� z cmd_domain_trust_validate.run)NNNNN)r r r r� r� r r� r� r r r� r r� r� r� r r r r r b s r c @ s: e Zd ZdZdZejejed�Z e dddddd gd d d d �e d ddddd�e dddddg d�e dddddg d�e d ddd d g d�e d ddd d!g d�e d"dd#d$d%g d�e d&dd#d'd(g d�e d)dd*d+d,g d�e d-dd*d.d/g d�e d0ddd1d2g d�e d3ddd4d5g d�e d6ddd7d8g d�e d9ddd:d;g d�gZ d<gZ d?d=d>�Z d S )@�cmd_domain_trust_namespacesz Manage forest trust namespaces.z%prog [DOMAIN] [options])r? r� r@ z --refreshr� z check|storeZcheckr� NzLList and maybe store refreshed forest trust information: 'check' or 'store'.�refresh)r� r� r� r� r� r� z --enable-allr� zATry to update disabled entries, not allowed with --refresh=check.� enable_allF)r� r� r� r� z --enable-tln�appendZ DNSDOMAINz?Enable a top level name entry. Can be specified multiple times.� enable_tln)r� r� r� r� r� z --disable-tlnz@Disable a top level name entry. Can be specified multiple times.� disable_tlnz --add-tln-exzAAdd a top level exclusion entry. Can be specified multiple times.� add_tln_exz--delete-tln-exzDDelete a top level exclusion entry. Can be specified multiple times.� delete_tln_exz --enable-nbZ NETBIOSDOMAINzIEnable a netbios name in a domain entry. Can be specified multiple times.� enable_nbz --disable-nbzJDisable a netbios name in a domain entry. Can be specified multiple times.� disable_nbz --enable-sidZ DOMAINSIDz@Enable a SID in a domain entry. Can be specified multiple times.�enable_sid_strz --disable-sidzADisable a SID in a domain entry. Can be specified multiple times.�disable_sid_strz--add-upn-suffixzVAdd a new uPNSuffixes attribute for the local forest. Can be specified multiple times.�add_upnz--delete-upn-suffixz^Delete an existing uPNSuffixes attribute of the local forest. Can be specified multiple times.� delete_upnz--add-spn-suffixz[Add a new msDS-SPNSuffixes attribute for the local forest. Can be specified multiple times.�add_spnz--delete-spn-suffixzcDelete an existing msDS-SPNSuffixes attribute of the local forest. Can be specified multiple times.� delete_spnzdomain?c G C s |d kr g }|d krg }| d kr$g } | d kr0g } | d kr<g } | d krHg } | d krTg } |d kr`g }|d krlg }|d krxg }|d kr�g }|d kr�g }d}|d k�r�|dkr�t d| ��|r�t d��t|�dkr�t d��t|�dkr�t d��t| �dkr�t d��t| �dk�rt d ��t| �dk�r&t d ��t|�dk�r<t d ��t| �dk�rRt d ��t| �dk�rht d ��t|�dk�r�x*|D ]"}|jd��s��q|t d| ���q|W d}t|�dk�r�x*|D ]"}|jd��sΐq�t d| ���q�W d}x@|D ]8}x0|D ](}|j� |j� k�r�q�t d| ���q�W �q�W t|�dk�rdx*|D ]"}|jd��sN�q:t d| ���q:W d}t|�dk�r�x*|D ]"}|jd��s��qxt d| ���qxW d}x�|D ]8}x0|D ](}|j� |j� k�r̐q�t d| ���q�W �q�W nXt|�dk�r�t d��t|�dk�rt d��t|�dk�r(t d��t|�dk�r>t d��|d k �r&|dk�rVd}|�rr|dk�rrt d| ��t|�dk�r�t d��t|�dk�r�t d ��t| �dk�r�t d ��t| �dk�r�t d ��t| �dk�r�t d ��t|�dk�r�t d ��t| �dk�r t d!��t| �dk�rt d"���n�|�rrd}t|�dk�rFt d#��t| �dk�r\t d$��t| �dk�rrt d%��t|�dk�r�d}t|�dk�r�d}x@|D ]8}x0|D ](}|j� |j� k�r��q�t d&| ���q�W �q�W t| �dk�rx*| D ]"}|jd��s �q�t d'| ���q�W d}t| �dk�rTx*| D ]"}|jd��s>�q*t d(| ���q*W d}x@| D ]8}x0| D ](}|j� |j� k�r~�qdt d)| ���qdW �qZW t| �dk�r�d}t|�dk�r�d}x@| D ]8}x0|D ](}|j� |j� k�r�q�t d*| ���q�W �q�W g }xN| D ]F}ytj|�}W n& ttfk �r> t d+| ��Y nX |j |� �qW g }xN| D ]F}ytj|�}W n& ttfk �r� t d,| ��Y nX |j |� �qZW t|�dk�r�d}t|�dk�r�d}x8|D ]0}x(|D ] }||k�r�q�t d-| ���q�W �q�W t j } |�r| t j O } | j ||�} y | j� } W n2 tk �rb } z| j| | d.��W Y d d } ~ X nX y| j| | �\} }!W n2 tk �r� } z| j| | d/��W Y d d } ~ X nX | jjd0|!jj|!jj|!jf � |d k� r�y | j� }"W n2 tk �r } z| j| | d1��W Y d d } ~ X nX y| j|"| �}#W n2 tk �rX } z| j| | d2��W Y d d } ~ X nX |#j|#jk�r|t d3|#j|#jf ��y|"j |#j d d�}$W n� tk � r } zh| j | t j ��r�t d4| ��| j | t j!��r�t d4| ��| j | t j"��r�t d4| ��| j| | d5��W Y d d } ~ X nX | jjd6� | j#|$|!jjd7� y | j$� }%W n2 tk � rt } z| j| | d8��W Y d d } ~ X nX d9t%|%j&� � }&d:d;g}'y |%j'|&t(j)d<|'d=�}(|(d })W n4 t(j*k � r� } z| j+| | d>��W Y d d } ~ X nX g }*d:|)k� r |*j,|)d: � g }+d;|)k� r |+j,|)d; � | jjd?t|*� � x"|*D ]},| jjd@dA|,f � � q6W | jjdBt|+� � x"|+D ]},| jjd@dA|,f � � qnW |� s�d S d}-g }.|.j,|*� d}/g }0|0j,|+� xN|D ]F}1x0|.D ](},t%|,�j� |1j� k� r�t dC|1 ��� q�W |.j |1� d}-� q�W xn|D ]f}1d }2x6t-|.�D ]*\}3},t%|,�j� |1j� k� rD� q"|3}2P � q"W |2d k� rft dD|1 ��|.j.|2� d}-� qW xN|D ]F}4x0|0D ](},t%|,�j� |4j� k� r�t dE|4 ��� q�W |0j |4� d}/� q�W xn|D ]f}4d }2x6t-|0�D ]*\}3},t%|,�j� |4j� k� r� q�|3}2P � q�W |2d k� r&t dF|4 ��|0j.|2� d}/� q�W | jjdGt|.� � x"|.D ]},| jjd@dA|,f � � qTW | jjdHt|0� � x"|0D ]},| jjd@dA|,f � � q�W t(j/� }5|)j0|5_0|-� r�t(j1|.t(j2d:�|5d:< |/� r�t(j1|0t(j2d;�|5d;< y|%j3|5� W n4 t(j*k � r0 } z| j+| | dI��W Y d d } ~ X nX y|"j |#j d d�}6W n2 tk � rx } z| j| | d5��W Y d d } ~ X nX | jjdJ� | j#|6|!jjd7� d S y"t j4� }7||7_| j5| |7t j6�}8W nN t7k �r } z0| j | t8j9�� r�t dK| ��| j| | dL��W Y d d } ~ X nX | jjdM|8j:j|8jj|8jf � |8j;t j<@ �sHt dN| ��|d k �r:y | j� }"W n2 tk �r� } z| j| | d1��W Y d d } ~ X nX y| j|"| �}#W n2 tk �r� } z| j| | d2��W Y d d } ~ X nX dO}9|dk�r�t=j>}:|�r�d}9nd}:y|"j |#j |8jj|:�};W n2 tk �rD } z| j| | d5��W Y d d } ~ X nX y| j?| |8jt j@|;|9�}<W n2 tk �r� } z| j| | dP��W Y d d } ~ X nX | jjdQ� | j#|;|8jj|<dR� |dk�r6y&t j4� }7|8jj|7_| jA| |7t j@�}6W n2 tk �r } z| j| | dS��W Y d d } ~ X nX | jjdJ� | j#|6|8jjd7� d S y&t j4� }7|8jj|7_| jA| |7t j@�}=W n2 tk �r� } z| j| | dS��W Y d d } ~ X nX | jjdT� | j#|=|8jjd7� |�s�d S g }>|>j,|=jB� t jC� }?t|>�|?_D|>|?_B|�r�xJ|?jBD ]@}@|@jEt jFk�r�q�|@jGdk�r�q�d|@_H|@ jGt jI M _G�q�W x\|?jBD ]R}@|@jEt j@k�rT�q>|@jGdk�rd�q>d|@_H|@ jGt jJ M _G|@ jGt jK M _G�q>W x�|D ]�}Ad }2xJt-|?jB�D ]<\}3}@|@jEt jFk�rȐq�|@jLjj� |Aj� k�r�q�|3}2P �q�W |2d k�rt dU|A ��|?jB|2 jGt jI@ �s$t dV|A ��d|?jB|2 _H|?jB|2 jGt jI M _G�q�W x�|D ]�}Ad }2xJt-|?jB�D ]<\}3}@|@jEt jFk�r��qh|@jLjj� |Aj� k�r��qh|3}2P �qhW |2d k�r�t dW|A ��|?jB|2 jGt jM@ �r�t dX|A ��d|?jB|2 _H|?jB|2 jGt jI M _G|?jB|2 jGt jMO _G�qTW �xX| D �]N}Bd }2xJt-|?jB�D ]<\}3}@|@jEt jNk�rV�q<|@jLjj� |Bj� k�rp�q<|3}2P �q<W |2d k �r�t dY|B ��dZ|Bj� }Cd }2xft-|?jB�D ]X\}3}@|@jEt jFk�rȐq�dZ|@jLjj� }D|C|Dk�r�t d[|B ��|CjO|D��s��q�|3}2P �q�W |2d k�r t d\|B ��t jP� }@t jN|@_Ed|@_Gd|@_H|B|@jL_g }>|>j,|?jB� |>jQ|2dO |@� t|>�|?_D|>|?_B�q&W x�| D ]�}Bd }2xJt-|?jB�D ]<\}3}@|@jEt jNk�r��q�|@jLjj� |Bj� k�rȐq�|3}2P �q�W |2d k�r�t d]|B ��g }>|>j,|?jB� |>j.|2� t|>�|?_D|>|?_B�q�W x�| D ]�}Ed }2xLt-|?jB�D ]>\}3}@|@jEt j@k�rN�q4|@jLjRjj� |Ej� k�rj�q4|3}2P �q4W |2d k�r�t d^|E ��|?jB|2 jGt jJ@ �s�t d_|E ��d|?jB|2 _H|?jB|2 jGt jJ M _G�q W x�|D ]�}Ed }2xLt-|?jB�D ]>\}3}@|@jEt j@k�r �q�|@jLjRjj� |Ej� k�r&�q�|3}2P �q�W |2d k�rHt d`|E ��|?jB|2 jGt jS@ �rht da|E ��d|?jB|2 _H|?jB|2 jGt jJ M _G|?jB|2 jGt jSO _G�q�W x�|D ]�}d }2xBt-|?jB�D ]4\}3}@|@jEt j@k�rܐq�|@jLjT|k�r�q�|3}2P �q�W |2d k�rt db| ��|?jB|2 jGt jK@ �s0t dc|E ��d|?jB|2 _H|?jB|2 jGt jK M _G�q�W x�|D ]�}d }2xBt-|?jB�D ]4\}3}@|@jEt j@k�r��qt|@jLjT|k�r��qt|3}2P �qtW |2d k�r�t dd| ��|?jB|2 jGt jU@ �r�t de|E ��d|?jB|2 _H|?jB|2 jGt jK M _G|?jB|2 jGt jUO _G�q`W y| j?| |8jt j@|?d�}FW n2 tk �rn } z| j| | dP��W Y d d } ~ X nX | jjdf� | j#|?|8jj|FdR� y&t j4� }7|8jj|7_| jA| |7t j@�}6W n2 tk �r� } z| j| | dS��W Y d d } ~ X nX | jjdJ� | j#|6|8jjd7� d S )gNFr� z'--refresh=%s not allowed without DOMAINz'--enable-all not allowed without DOMAINr z'--enable-tln not allowed without DOMAINz(--disable-tln not allowed without DOMAINz'--add-tln-ex not allowed without DOMAINz*--delete-tln-ex not allowed without DOMAINz&--enable-nb not allowed without DOMAINz'--disable-nb not allowed without DOMAINz'--enable-sid not allowed without DOMAINz(--disable-sid not allowed without DOMAINz*.zEvalue[%s] specified for --add-upn-suffix should not include with '*.'TzHvalue[%s] specified for --delete-upn-suffix should not include with '*.'z@value[%s] specified for --add-upn-suffix and --delete-upn-suffixzEvalue[%s] specified for --add-spn-suffix should not include with '*.'zHvalue[%s] specified for --delete-spn-suffix should not include with '*.'z@value[%s] specified for --add-spn-suffix and --delete-spn-suffixz1--add-upn-suffix not allowed together with DOMAINz4--delete-upn-suffix not allowed together with DOMAINz1--add-spn-suffix not allowed together with DOMAINz4--delete-spn-suffix not allowed together with DOMAINz3--enable-all not allowed together with --refresh=%sz0--enable-tln not allowed together with --refreshz1--disable-tln not allowed together with --refreshz0--add-tln-ex not allowed together with --refreshz3--delete-tln-ex not allowed together with --refreshz/--enable-nb not allowed together with --refreshz0--disable-nb not allowed together with --refreshz0--enable-sid not allowed together with --refreshz1--disable-sid not allowed together with --refreshz3--enable-tln not allowed together with --enable-allz2--enable-nb not allowed together with --enable-allz3--enable-sid not allowed together with --enable-allz6value[%s] specified for --enable-tln and --disable-tlnzAvalue[%s] specified for --add-tln-ex should not include with '*.'zDvalue[%s] specified for --delete-tln-ex should not include with '*.'z8value[%s] specified for --add-tln-ex and --delete-tln-exz4value[%s] specified for --enable-nb and --disable-nbz7value[%s] specified for --enable-sid is not a valid SIDz8value[%s] specified for --disable-sid is not a valid SIDz6value[%s] specified for --enable-sid and --disable-sidz failed to connect lsa serverz#failed to query LSA_POLICY_INFO_DNSz(LocalDomain Netbios[%s] DNS[%s] SID[%s] z!failed to connect netlogon serverz failed to get netlogon dc infoz1The local domain [%s] is not the forest root [%s]z@LOCAL_DC[%s]: netr_DsRGetForestTrustInformation() not supported.z*netr_DsRGetForestTrustInformation() failedz Own forest trust information... )r� zfailed to connect to SamDBzCN=Partitions,%sZ uPNSuffixeszmsDS-SPNSuffixesz (objectClass=crossRefContainer))r� ZscopeZ expression�attrsz failed to search partition dnz#Stored uPNSuffixes attributes[%d]: zTLN: %-32s DNS[*.%s] r9 z(Stored msDS-SPNSuffixes attributes[%d]: zBEntry already present for value[%s] specified for --add-upn-suffixz?Entry not found for value[%s] specified for --delete-upn-suffixzBEntry already present for value[%s] specified for --add-spn-suffixz?Entry not found for value[%s] specified for --delete-spn-suffixz#Update uPNSuffixes attributes[%d]: z(Update msDS-SPNSuffixes attributes[%d]: z failed to update partition dnz#Stored forest trust information... z4trusted domain object does not exist for domain [%s]z,QueryTrustedDomainInfoByName(INFO_EX) failedz%LocalTDO Netbios[%s] DNS[%s] SID[%s] zItrusted domain object for domain [%s] is not marked as FOREST_TRANSITIVE.r1 z&lsaRSetForestTrustInformation() failedz"Fresh forest trust information... )r� r� z(lsaRQueryForestTrustInformation() failedz"Local forest trust information... z8Entry not found for value[%s] specified for --enable-tlnzGEntry found for value[%s] specified for --enable-tln is already enabledz9Entry not found for value[%s] specified for --disable-tlnzIEntry found for value[%s] specified for --disable-tln is already disabledz>Entry already present for value[%s] specified for --add-tln-exz.%sz:TLN entry present for value[%s] specified for --add-tln-exz>No TLN parent present for value[%s] specified for --add-tln-exz;Entry not found for value[%s] specified for --delete-tln-exz7Entry not found for value[%s] specified for --enable-nbzFEntry found for value[%s] specified for --enable-nb is already enabledz7Entry not found for value[%s] specified for --delete-nbzHEntry found for value[%s] specified for --disable-nb is already disabledz8Entry not found for value[%s] specified for --enable-sidzGEntry found for value[%s] specified for --enable-sid is already enabledz8Entry not found for value[%s] specified for --delete-sidzIEntry found for value[%s] specified for --disable-sid is already disabledz$Updated forest trust information... )Vr r� � startswith�lower�upperr Zdom_sid� ValueError� TypeErrorr r r� r� rB rD r^ r6 rZ rN rO r� r� r� r� rE r` r� Z forest_namer� r] r0 r r� ZWERR_INVALID_FUNCTIONZWERR_NERR_ACFNOTLOADEDr� rF �strZget_config_basedn�search�ldbZ SCOPE_BASEZLdbErrorr8 �extendr� �popZMessageZdnZMessageElementZFLAG_MOD_REPLACE�modifyr� r� r r r r� rc ri rj r r� r� r� r� r� r� r� r� r� rH ZtimeZLSA_TLN_DISABLED_MASKZLSA_NB_DISABLED_MASKZLSA_SID_DISABLED_MASKr� r� r� �endswithZForestTrustRecord�insertr� r� r� r� )Gr rI r? r@ r� r r r! r" r# r$ r' r( r% r& r) r* r+ r, Zrequire_update�nrk r� r� Z enable_sidr| r� Z disable_sidr� r! r� rR r� r� r� r Zown_forest_infoZ local_samdbZlocal_partitions_dnr- ZmsgsZ stored_msgZstored_upn_valsZstored_spn_valsr* Z replace_upnZupdate_upn_valsZ replace_spnZupdate_spn_valsZupn�idxr� ZspnZ update_msgZstored_forest_infor� r� Zlsa_update_checkZnetlogon_update_tdoZfresh_forest_infoZfresh_forest_collisionr r� Zupdate_forest_inforv r� Ztln_exZtln_dotZr_dotZnbZupdate_forest_collisionr r r r� ^ s� z cmd_domain_trust_namespaces.run)NNNNNFNNNNNNNNNNNN)r r r r� r� r r� r� r r� r r� r� r� r r r r r s� r c @ sZ e Zd ZdZi Ze� ed< e� ed< e� ed< e� ed< e � ed< e � ed< e � ed< d S ) �cmd_domain_trustz#Domain and forest trust management.�listZshowZcreater8 �deleter� Z namespacesN) r r r r� Z subcommandsr� r� r� r� r r r r r r r r= s r= )*r' r r5 Z samba.getoptZgetoptr Z samba.ntaclsr� r r r r Z samba.authr Z samba.dcerpcr r r r r Z samba.netr Z samba.netcmdr r r r Z samba.samdbr Zsamba.trust_utilsr r r r r� r� r� r� r r r r= r r r r �<module> sH /jx 4
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка