Файловый менеджер - Редактировать - /usr/lib64/python3.6/site-packages/samba/__pycache__/upgrade.cpython-36.pyc
Ðазад
3 �I�d� � @ s: d Z dZddlZddlZddlZddlmZmZ ddlm Z ddl m Z m Z m Z ddlmZ ddlmZ dd lmZ dd lmZmZmZ dd lmZ dd lmZ dd lm Z ddl m Z ddlm Z ddlm Z dd� Z!d)dd�Z"dd� Z#dd� Z$dd� Z%dd � Z&d d � Z'd d � Z(d!ej)iZ*d"d#� Z+d$d%� Z,d*d'd(�Z-dS )+z3Support code for upgrading from Samba 3 to Samba 4.ZrestructuredText� N)�Ldb�registry)�LoadParm)� provision�ProvisioningError� setsysvolacl)� FILL_FULL)�passdb)�param)�lsa�samr�security)�dom_sid)� Credentials)�dsdb)�ndr_pack)� unix2nttime)�generate_random_passwordc C sd t j� }| j� |_d|kr6t jt|d �t jd�|d< d|krZt jt|d �t jd�|d< d|kr�|d }t| d �}t jt|�t jd �|d < d |kr�|d }|dks�|d ks�|dkr�d}nt| d �}t jt|�t jd�|d< d|k�r|d }t|d �} t jt| �t jd�|d< y| j |� W n6 t j k �r^ } z|j dt| �� W Y dd} ~ X nX dS )z�Import a Samba 3 policy. :param samdb: Samba4 SAM database :param policy: Samba3 account policy :param logger: Logger object zmin password lengthZ minPwdLength�a01zpassword historyZpwdHistoryLengthZa02zminimum password ageg �cAZ minPwdAgeZa03zmaximum password age� r l �� l Z maxPwdAgeZa04zlockout duration�< ZlockoutDurationZa05z"Could not set account policy, (%s)N���l���� ) �ldb�Message�get_default_basedn�dn�MessageElement�str�FLAG_MOD_REPLACE�intr �modify�LdbError�warn) �samdb�policy�logger�mZmin_pw_age_unixZ min_pw_age_ntZmax_pw_age_unixZ max_pw_age_ntZlockout_duration_minsZlockout_duration_nt�e� r( � /usr/lib64/python3.6/upgrade.py�import_sam_policy* s: r* c C s� y�t j� } t j|dt|� �| _|dkrpt jt|�t jd�| d< t jt|�t jd�| d< t jt|�t jd�| d< t jt|�t jd�| d< |j| � W n: t jk r� } z | j dt|�t| �� W Y dd} ~ X nX dS ) aw Add posix attributes for the user/group :param samdb: Samba4 sam.ldb database :param sid: user/group sid :param sid: user/group name :param nisdomain: name of the (fake) NIS domain :param xid_type: type of id (ID_TYPE_UID/ID_TYPE_GID) :param home: user homedir (Unix homepath) :param shell: user shell :param pgid: users primary group id z<SID=%s>� ID_TYPE_UIDZunixHomeDirectory� loginShell� gidNumberZmsSFU30NisDomainz7Could not add posix attrs for AD entry for sid=%s, (%s)N) r r �Dnr r r r r r! r" ) r% r# �sid�name� nisdomain�xid_type�home�shell�pgidr& r' r( r( r) �add_posix_attrsb s" r6 c C s� y�t j� }t j| dt|� �|_|dkrVt jt|�t jd�|d< t jdt jd�|d< n4|dkr�t jt|�t jd�|d< t jdt jd�|d< | j|� W nB t j k r� } z$|j d t|�t|�|t|�� W Y d d }~X nX d S ) z�Create idmap entry :param samdb: Samba4 sam.ldb database :param sid: user/group sid :param xid: user/group id :param xid_type: type of id (ID_TYPE_UID/ID_TYPE_GID) :param logger: Logger object z<SID=%s>r+ Z uidNumberZ posixAccount� objectClass� ID_TYPE_GIDr- Z posixGroupz?Could not modify AD idmap entry for sid=%s, id=%s, type=%s (%s)N) r r r. r r r r � FLAG_MOD_ADDr r! r" )r# r/ �xidr2 r% r& r' r( r( r) �add_ad_posix_idmap_entry� s$ r; c C s: d}| j dt|� d�}|jdkr&d}|r�yPtj� }|d d |_tjt|�tjd�|d< tj|tjd �|d < | j|� W nB tj k r� } z$|j d t|�t|�|t|�� W Y d d }~X nX nvy0| j d t|� t|�d t |�|t|�d�� W nD tj k �r4 } z$|j dt|�t|�|t|�� W Y d d }~X nX d S )z�Create idmap entry :param idmapdb: Samba4 IDMAP database :param sid: user/group sid :param xid: user/group id :param xid_type: type of id (ID_TYPE_UID/ID_TYPE_GID) :param logger: Logger object Fz objectSid=%s)� expressionr Tr r � xidNumber�typez<Could not modify idmap entry for sid=%s, id=%s, type=%s (%s)NzCN=%sZsidMap)r �cnr7 � objectSidr> r= z9Could not add idmap entry for sid=%s, id=%s, type=%s (%s)) �searchr �countr r r r r r r! r" �addr ) �idmapdbr/ r: r2 r% �found�msgr& r' r( r( r) �add_idmap_entry� s8 ,rG c C s y |j � }W n0 tk r< } z|jdt|�� dS d}~X nX t|j� |j� �}|}tj� }tj | d�|_ tj t|�tj d�|d< tj t|�tj d�|d< | j |� x^|j� D ]R\}} |dkr�d} n |d kr�d } n|jd |� q�|j| |�} t| t| �| | |� q�W dS ) z�Import idmap data. :param idmapdb: Samba4 IDMAP database :param samba3_idmap: Samba3 IDMAP database to import from :param logger: Logger object z(Cannot open idmap database, Ignoring: %sNz CN=CONFIGZ lowerBound� lowerboundr= ZUIDr+ ZGIDr8 z+Wrong type of entry in idmap (%s), Ignoring)Z get_idmap_db�IOErrorr" r �maxZ get_user_hwmZ get_group_hwmr r r. r r r r ZidsZget_sidrG r ) rD �samba3r% Z samba3_idmapr' Z currentxidrH r& Zid_typer: r2 r/ r( r( r) � import_idmap� s. rL c C s� y"| j dt|j� tjd�}d}W nJ tjk rl } z,|j\}}|tjkrPd}n tj||��W Y dd}~X nX |r�|jdt|j�|j |d d d � �nN|j t j kr�|jj � \}} |tjtj�kr�dS tj� } tj| d �| _| jjdd |j � | jj| j� � tjd tjd �| d < tjt|j�tjd �| d < tj|j tjd�| d< |j�rbtj|jtjd�| d< |j t jk�s~|j t j k�r�tjtt j �tjd�| d< y| j | dgd� W n: tjk �r� } z|jd|j t| �� W Y dd} ~ X nX dS )z�Add or modify group from group mapping entry param samdb: Samba4 SAM database param groupmap: Groupmap entry param logger: Logger object z<SID=%s>)�base�scopeTFNzJGroup already exists sid=%s, groupname=%s existing_groupname=%s, Ignoring.r ZsAMAccountNamez CN=X,CN=UsersZCN�groupr7 r@ � descriptionZ groupTypezrelax:0)Zcontrolsz Could not add group name=%s (%s)) rA r r/ r Z SCOPE_BASEr! �args�ERR_NO_SUCH_OBJECTr" �nt_name� sid_name_user �SID_NAME_WKN_GRP�splitr r � SID_BUILTINr r. r Z set_componentZadd_baser r r9 r Zcomment�SID_NAME_ALIASr Z!GTYPE_SECURITY_DOMAIN_LOCAL_GROUPrC ) r# Zgroupmapr% rF rE Ze1�ecode�emsg� group_dom_sid�ridr& r' r( r( r) � add_group_from_mapping_entry� sF " r] c C s� x�|D ]�}t j� }t j| dt|j� �|_t jdt|� t jd�|d< y| j|� W q t j k r� } zb|j \}}|t j kr�|j d||j|� n4|t j kr�td||j|f ��ntd||j|f ��W Y dd}~X qX qW dS )z�Add user/member to group/alias param samdb: Samba4 SAM database param group: Groupmap object param members: List of member SIDs param logger: Logger object z<SID=%s>�memberr z/skipped re-adding member '%s' to group '%s': %szXCould not add member '%s' to group '%s' as either group or user record doesn't exist: %sz+Could not add member '%s' to group '%s': %sN)r r r. r r/ r r r9 r r! rQ ZERR_ENTRY_ALREADY_EXISTS�debugrR r ) r# rO �membersr% Z member_sidr& r' rY rZ r( r( r) �add_users_to_group. s ra c C s d}x�|j � D ]�\}\}}}|d7 }t|jdd�d d�}|dkrHd}n6|d@ rht|�dkrbd}q~d}nt|�dkrzd}nd}|tj� kr�d} nd} |d @ d ? } | jd t|jd�� |jd�d |jd�d d t|�t| �t| �tj |�d t|�|d� � qW | jdddt|�d�� dS )z�Import settings from a Samba3 WINS database. :param samba4_winsdb: WINS database to import to :param samba3_winsdb: WINS database to import from r r �#� � � � � �` � zname=%s,type=0x%sZ winsRecord�0) r r> r0 r7 Z recordTypeZ recordStateZnodeTypeZ expireTimeZisStaticZ versionIDZaddressz cn=VERSION�VERSIONZwinsMaxVersion)r r? r7 Z maxVersionN) �itemsr rV �len�timerC �tupler r Z timestring) Z samba4_winsdb� samba3_winsdbZ version_idr0 ZttlZipsZnb_flagsr> ZrTypeZrStateZnTyper( r( r) � import_winsG s@ rq ZHKLMc st � fdd�}xb|j � D ]V}||�}x|j|�D ] }||� q.W x,|j|�j� D ]\}\}}|j|||� qNW qW dS )z�Import a Samba 3 registry database into the Samba 4 registry. :param samba4_registry: Samba 4 registry handle. :param samba3_regdb: Samba 3 registry database handle. c s0 | j dd�\}} t| }| jdd�} � j|| �S )N�/r �\)rV �SAMBA3_PREDEF_NAMES�replaceZ create_key)ZkeypathZ predef_nameZ predef_id)�samba4_registryr( r) �ensure_key_exists� s z*import_registry.<locals>.ensure_key_existsN)�keysZsubkeys�valuesrl Z set_value) rv Z samba3_regdbrw �keyZ key_handleZsubkeyZ value_nameZ value_typeZ value_datar( )rv r) �import_registry� s r{ c C s� y |j |tjd| |gd�}W n6 tjk rT } ztd|||f ��W Y dd}~X n.X |jdkrp|d | d S | jd||� t�dS )z�Get posix attributes from a samba3 ldap backend :param ldbs: a list of ldb connection objects :param base_dn: the base_dn of the connection :param user: the user to get the attribute for :param attr: the attribute to be retrieved z%(&(objectClass=posixAccount)(uid=%s)))rN r< Zattrsz=Failed to retrieve attribute %s for user %s, the error is: %sNr r z0LDAP entry for user %s contains more than one %s)rA r Z SCOPE_SUBTREEr! r rB �warning�KeyError)r% � ldb_object�base_dn�user�attrrF r' r( r( r) � get_posix_attr_from_ldap_backend� s $ r� Fc = K sf | j j� }| j jd�}| j jd�} | j jd�} | j jd�dkrL| j jdd� y | j� } W n< tk r� } z td| jd�t| �f ��W Y dd} ~ X nX |s�| j � d }|j d |� | s�|d ks�|d kr�td ��n|j � } |j d| � d} y| j | �}W n t k �r d}Y nX | j jd�jd�d j� dk�r|| j jd�}| j jd�}| j|�}|dk�rftd��|jd�jd�}d}n d}d}d}| j� tj| j jd�� | j� }y tj� � W n$ tjk �r� td| ��Y nX y|jd | �}W n tjk �r d}d}Y nX |jj� \}}|jd � |j � }|jd � |j � }i }�x�|D �]�}|j j� \}} |� k�r~| | k�r~| d } |j t j!k�r�y |j"|j �} | |t|j �< W n> tjk �r� } z |j#d |j$|j | � �wNW Y dd} ~ X nX �qN|j t j%k�r\y |j&|j �} | |t|j �< W n> tjk �rX } z |j#d |j$|j | � �wNW Y dd} ~ X nX n�|j t j'k�r�|j j� \} } | t(j)t(j*�k�r�|j#d!|j$� �qNy |j"|j �} | |t|j �< W n> tjk �r� } z |j#d |j$|j | � �wNW Y dd} ~ X nX n|j#d"|j$|j |j � �qN�qNW |jd#� |j+d �} i } i }!d}"�x@| D �]6}#|�rb||#d$ k�rb�qD|#d% }$|#d$ dk �r�|jd&|#d$ |$� �qD|#d$ | k�r�|#d$ d } |j|$�}%|%j,t-j.t-j/B t-j0B t-j1B @ }&|&t-j0k�r |j#d'|$ddc� � |%j,t-j0 @ t-j/B |%_,�n<|&t-j1k�r6|j#d(|$ddd� � �qD�n|&t-j/k�rd|$de d)k�rd|j#d*|$ � �qDn�|&t-j.t-j/B k�r�|$df d)k�r�|j#d+|$ � |%j,t-j. @ |%_,n�|&t-j.t-j0B k�r�|$dg d)k�r�|j#d,|$ � |%j,t-j. @ |%_,nd|&d k�r |$dh d)k�r |%j,t-j.B |%_,n<|&t-j.k�sH|&t-j/k�r&n"td-|$|%j,t-j.t-j/t-j0t-j1f ��|%| |$< y|j2|%j�d |!|$< W nD tjk �r� yt3j4|$�j5|!|$< W n t k �r� Y nX Y nX |" �r�|$j6� d.k�r�|$}"|$j6� d/k�r�|$}"yf|j7|%�}'xV|'D ]N}t|�|k�r(|%j|t|� k�r8|t|� j8|%j� n|%jg|t|�< �q�W W n8 tjk �rx } z|j#d0|$|%j| � W Y dd} ~ X nX �qDW |jd1| � td2d3� |D ��}(td4d3� | D ��})|(j9|)�}*|*�r�|jd5� x |*D ]}+|jd6|+ � �q�W td7��td8d3� |D ��},t:|�t:|,�k�r td9��t� fd:d3�| D ��}-t:| �t:|-�k�rLtd;��|,j9|-�}.|.�r�|jd<� x |.D ]}|jd6t|� � �qlW td=��i }/i }0i }1|� rDt;� }2|2j<| j � |2j=|� |2j>|� | j jd�jdd �d jd>�}3x\|3j� D ]P}4yt?|4|2d?�}5W n6 t@jAk � r: } ztd@|4| f ��W Y dd} ~ X nX P �q�W |jdA� |j+d �} �x:| D �]0}#|#d% }$|$|!jB� k� r`y0|� r�tC||5||$dB�|/|$< nt3j4|$�jD|/|$< W n* t k � r� Y n tEk � r� Y nX y0|� r�tC||5||$dC�|0|$< nt3j4|$�jF|0|$< W n* t k � r Y n tEk � r2 Y nX y0|� rRtC||5||$dD�|1|$< nt3j4|$�jG|1|$< W n* t k � rz Y n tEk � r� Y nX � q`W |jdE� d}6y | jH� }6W n4 tk � r� } z|j#dFt| �� W Y dd} ~ X nX |d k� p�|d k� s�dG}|"� rtIdHdI�}7nd}7tJ|||| |� | ||7tKjL| j6� ||tM||d|ddJ�}8|8jN|� |jdK� |6� rttOt?|8jPjQ�|6� |jdL� tR|8jS||� |jdM� tT|8jU| |� tVjW� }9|9jX|8j jY� |9jd|8j jd�� |9jdN|8j jdN�� |9jdO|8j jdO�� tjZ|9jd��}:|8jSj[� |jdP� yl|jdQ� x\|D ]T};|;j\dik� r,t]|8jS|;|� t^|8jS|;j |;j\dR|� t_|8jS|;j |;j$|j6� dR|dS� � q,W W n |8jSj`� � Y nX |jdT� |8jSja� |jdU� |jdV� �xT| D �]J}$|$j6� d/k� r,| |$ jt)t� �dW �k� r,|jdX| |$ jt)t� �dW �f � tdY��|$j6� d.k� rl| |$ jt)t� �dW �k� rb|j#dZ� n |j#d[� |:jb| |$ � |$|!k� r�t^|8jS| |$ j|!|$ d\|� |$|/k� r�|/|$ dk � r�|$|0k� r�|0|$ dk � r�|$|1k� r�|1|$ dk � r�t_|8jS| |$ j|$|j6� d\|/|$ |0|$ |1|$ |d]� � q�W |jd^� |8jSj[� y>x8|D ]0};t|;j �|k�r<tc|8jS|;|t|;j � |� �q<W W n |8jSj`� � Y nX |jd_� |8jSja� |"�r|jd`� |:jd/�}<| |" jd|<_d| |" je�r�| |" je|<_e| |" jf|<_f| |" jg�r| |" jg|<_g|:jh|<� |jda|"� |8jdbk�rbti|8jS|8jPjj|8jPjk|8jPjl|8jPjmt(j)|8jn�|8jojp|8jojq|8j |� dS )jz�Upgrade from samba3 database to samba4 AD database :param samba3: samba3 object :param logger: Logger object :param targetdir: samba4 database directory :param session_info: Session information Z workgroup�realmz netbios namezldapsam:trustedN�yesz�Could not open '%s', the Samba3 secrets database: %s. Perhaps you specified the incorrect smb.conf, --testparm or --dbdir option?z secrets.tdbr z6No workgroup specified in smb.conf file, assuming '%s'ZROLE_DOMAIN_BDCZROLE_DOMAIN_PDCz�No realm specified in smb.conf file and being a DC. That upgrade path doesn't work! Please add a 'realm' directive to your old smb.conf to let us know which one you want to use (it is the DNS name of the AD domain you wish to create.z2No realm specified in smb.conf file, assuming '%s'i� zpassdb backend�:Zldapsamz ldap suffixz ldap admin dnz�ldapsam passdb backend detected but no LDAP Bind PW found in secrets.tdb for user %s. Please point this tool at the secrets.tdb that was used by the previous installation.zutf-8� TFz private dirz(Can't find domain sid for '%s', Exiting.z%s$zExporting account policyzExporting groupsr z4Ignoring group '%s' %s listed but then not found: %szOIgnoring 'well known' group '%s' (should already be in AD, and have no members)z+Ignoring group '%s' %s with sid_name_use=%dzExporting usersr\ � account_namez- Skipping wellknown rid=%d (for username=%s)zk Demoting BDC account trust for %s, this DC must be elevated to an AD DC using 'samba-tool domain dcpromo'zZ Skipping inter-domain trust from domain %s, this trust must be re-created as an AD trust�$z� Skipping account %s that has ACB_WSTRUST (W) set but does not end in $. This account can not have worked, and is probably left over from a misconfiguration.z� Fixing account %s which had both ACB_NORMAL (U) and ACB_WSTRUST (W) set. Account will be marked as ACB_WSTRUST (W), i.e. as a domain memberz� Fixing account %s which had both ACB_NORMAL (U) and ACB_SVRTRUST (S) set. Account will be marked as ACB_WSTRUST (S), i.e. as a domain membera Failed to upgrade due to invalid account %s, account control flags 0x%08X must have exactly one of ACB_NORMAL (N, 0x%08X), ACB_WSTRUST (W 0x%08X), ACB_SVRTRUST (S 0x%08X) or ACB_DOMTRUST (D 0x%08X). Please fix this account before attempting to upgrade again �rootZ administratorz)Ignoring group memberships of '%s' %s: %sz Next rid = %dc S s g | ] }|j �qS r( )rS )�.0�gr( r( r) � <listcomp>� s z'upgrade_from_samba3.<locals>.<listcomp>c S s g | ] }|d �qS )r� r( )r� �ur( r( r) r� � s z4Following names are both user names and group names:z %sz5Please remove common user/group names before upgrade.c S s g | ]}t |j��qS r( )r r/ )r� r� r( r( r) r� � s z9Please remove duplicate group sid entries before upgrade.c s g | ]}d � |d f �qS )z%s-%ur\ r( )r� r� )� domainsidr( r) r� � s z8Please remove duplicate user sid entries before upgrade.z,Following sids are both user and group sids:z3Please remove duplicate sid entries before upgrade.�")Z credentialsz=Could not open ldb connection to %s, the error message is: %szExporting posix attributesZ homeDirectoryr, r- zReading WINS databasez'Cannot open wins database, Ignoring: %sZNONE� � )� targetdirr� Zdomainr� �next_ridZdc_rid� adminpassZdom_for_fun_levelZhostname� machinepass� serverroleZ samdb_fill�useeadb� dns_backendZ use_rfc2307� use_ntvfsZskip_sysvolaclzImporting WINS databasezImporting Account policyzImporting idmap databasezstate directoryzlock directoryz Adding groupszImporting groupsr8 )r# r/ r0 r1 r2 r% z+Committing 'add groups' transaction to diskz Adding userszImporting usersz-500zPUser 'Administrator' in your existing directory has SID %s, expected it to be %szPUser 'Administrator' in your existing directory does not have SID ending in -500z,User root has been replaced by AdministratorzbUser root has been kept in the directory, it should be removed in favour of the Administrator userr+ ) r# r/ r0 r1 r2 r3 r4 r5 r% zAdding users to groupsz4Committing 'add users to groups' transaction to diskz"Setting password for administratorz<Administrator password has been set to password of user '%s'z"active directory domain controllerr r r r r r r )rZlpZ server_role�get�setZget_secrets_dbrI r Zprivatedir_pathr Zdomainsr| �upperZget_machine_passwordr} rV �stripZget_ldap_bind_pw�decode�closer Zset_secrets_dirZ get_sam_dbZget_global_sam_sid�error� ExceptionZ getsampwnamZuser_sid�infoZget_account_policyZenum_group_mappingr/ rT r rX Z enum_aliasmemr" rS ZSID_NAME_DOM_GRPZenum_group_membersrU r r rW Z search_usersZ acct_ctrlr Z ACB_NORMALZ ACB_WSTRUSTZ ACB_SVRTRUSTZ ACB_DOMTRUSTZ sid_to_id�pwd�getpwnamZpw_uid�lowerZenum_group_memberships�append� intersectionrm r ZguessZ set_bind_dnZ set_passwordr r r! rx r� �pw_dir� IndexErrorZpw_shellZpw_gidZ get_wins_dbr r r ZDS_DOMAIN_FUNCTION_2003r Z report_loggerrq �pathsZwinsdbr* r# rL Zidmap�s3paramZ get_context�loadZ configfileZPDBZtransaction_start�gidr] r; r6 Ztransaction_cancelZtransaction_commitZadd_sam_accountra Z nt_passwdZ lanman_passwdZpass_last_set_timeZ pw_historyZupdate_sam_accountr ZnetlogonZsysvolZroot_uidZroot_gidr� �namesZ dnsdomainZdomaindn)=rK r% r� Z session_infor� r� r� r� Z domainnamer� Z netbiosnameZ secrets_dbr' r� r� r ZldapuserZldappassZldapZs3dbZ machineacctZ machineridZ machinesidr$ Z grouplistZ groupmembersrO r/ r\ r` r[ ZuserlistZuserdataZuidsZ admin_user�entryZusernamer� Z acct_typeZgroup_membershipsZ group_namesZ user_namesZ common_namesr0 Z group_sidsZ user_sidsZ common_sidsZhomesZshellsZpgidsZcredsZurlsZurlr~ rp r� �resultZ new_lp_ctxZ s4_passdbr� Zadmin_userdatar( )r� r) �upgrade_from_samba3� sp , $ " " ( $ 8 $ r� )NNN)NFNF).�__doc__Z __docformat__r rn r� Zsambar r Z samba.paramr Zsamba.provisionr r r Zsamba.provision.commonr Z samba.samba3r r r� Z samba.dcerpcr r r Zsamba.dcerpc.securityr Zsamba.credentialsr r Z samba.ndrr r r r* r6 r; rG rL r] ra rq �HKEY_LOCAL_MACHINErt r{ r� r� r( r( r( r) �<module> s> 8 " +'85
| ver. 1.1 | |
.
| PHP 8.3.30 | Ð“ÐµÐ½ÐµÑ€Ð°Ñ†Ð¸Ñ Ñтраницы: 0 |
proxy
|
phpinfo
|
ÐаÑтройка