One Hat Cyber Team
Your IP :
10.30.1.1
Server IP :
103.148.201.5
Server :
Linux web-olt 5.15.0-161-generic #171-Ubuntu SMP Sat Oct 11 08:17:01 UTC 2025 x86_64
Server Software :
Apache/2.4.52 (Ubuntu)
PHP Version :
8.1.29
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
samba
/
kcc
/
__pycache__
/
Edit File:
kcc_utils.cpython-310.pyc
o �/a�W � @ sd d dl Z d dlZd dlZd dlmZ d dlmZmZmZ d dl m Z d dl m Z m Z d dlmZ G dd� de�ZG d d � d e�Zed d � ej�� D ��ZG d d� de�ZG dd� de�ZG dd� de�ZG dd� de�ZG dd� de�Z G dd� de�Z G dd� de�Z G dd � d e�Z G d d � d e�Z G d d � d e�Z!G d!d"� d"e�Z"d#d$� Z#d%d&� Z$d'd(� Z%dS ))� N)�dsdb)�drsblobs�drsuapi�misc)�dsdb_Dn)� ndr_unpack�ndr_pack)�Counterc @ s e Zd ZdS )�KCCErrorN)�__name__� __module__� __qualname__� r r �5/usr/lib/python3/dist-packages/samba/kcc/kcc_utils.pyr % s r c @ s e Zd Zedd�\ZZZZZdS )�NCTyper � N) r r r �range�unknown�schema�domain�config� applicationr r r r r ) s r c c s, � | ]\}}|d d� dkr||fV qd S )N� �__r )�.0�k�vr r r � <genexpr>. s �* r c @ �@ e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dS )� NamingContextz�Base class for a naming context. Holds the DN, GUID, SID (if available) and type of the DN. Subclasses may inherit from this and specialize c C s || _ d| _d| _tj| _dS )zKInstantiate a NamingContext :param nc_dnstr: NC dn string N)�nc_dnstr�nc_guid�nc_sidr r �nc_type��selfr r r r �__init__8 s zNamingContext.__init__c C s^ d| j jf d| j dt| j� }| jdu r |d }n|d }|dt| j | jf }|S )�!Debug dump string output of class�%s:z nc_dnstr=%sz nc_guid=%sNz nc_sid=<absent>z nc_sid=<present>z nc_type=%s (%s))� __class__r r �strr! r" � nctype_lutr# �r% �textr r r �__str__B s � � �zNamingContext.__str__c C s� ddg}z |j | jtj|d�}W n tjy+ } z|j\}}td| j|f ��d }~ww |d }d|v rBt�|� d|d d ��| _ d|v rM|d d | _ | j d usTJ �d S )N� objectGUID� objectSid��base�scope�attrsz)Unable to find naming context (%s) - (%s)r ) �searchr �ldb� SCOPE_BASE�LdbError�argsr r �GUID�schema_format_valuer! r" )r% �samdbr4 �res�e�enum�estr�msgr r r �load_ncQ s, � � ��� �zNamingContext.load_ncc C s | j tjksJ �| j tjkS )zReturn True if NC is config)r# r r r �r% r r r � is_confige s zNamingContext.is_configc C sr | j du r | �|� | jt|�� �krtj| _dS | jt|�� �kr(tj | _dS | j dur3tj | _dS tj | _dS )zoGiven an NC object, identify what type is is thru the samdb basedn strings and NC sid value N) r! rB r r* �get_schema_basednr r r# �get_config_basednr r" r r )r% r< r r r �identify_by_basednj s z NamingContext.identify_by_basednc C sT |dkr t j| _n|dkrt j| _n |dkr| �|� | jt jkr(| �|� dS dS )a> Given an NC which has been discovered thru the nTDSDSA database object, determine what type of NC it is (i.e. schema, config, domain, application) via the use of the schema attribute under which the NC was found. :param attr: attr of nTDSDSA object where NC DN appears �msDS-HasDomainNCs�hasPartialReplicaNCs� hasMasterNCsN)r r r# rG r �r% r< �attrr r r �identify_by_dsa_attr� s �z"NamingContext.identify_by_dsa_attrN) r r r �__doc__r& r. rB rD rG rM r r r r r 1 s r c @ s� e Zd ZdZdd� Zdd� Zd'dd�Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z d(dd�Z dd� Zdd� Zd d � Zd d � Zd d!� Zd"d#� Zd(d$d%�Zd&S ))� NCReplicaz�Naming context replica that is relative to a specific DSA. This is a more specific form of NamingContext class (inheriting from that class) and it identifies unique attributes of the DSA's replica for a NC. c C sP |j | _|j| _d| _d| _d| _d| _d| _g | _ g | _ d| _ t � | |� dS )z�Instantiate a Naming Context Replica :param dsa_guid: GUID of DSA where replica appears :param nc_dnstr: NC dn string Fr N)� dsa_dnstr� rep_dsa_dnstr�dsa_guid� rep_dsa_guid� rep_default� rep_partial�rep_ro�rep_instantiated_flags�rep_fsmo_role_owner� rep_repsFrom� rep_repsTo�rep_present_criteria_oner r& )r% �dsar r r r r& � s zNCReplica.__init__c C s� d| j j d| j d| j d| j d| j d| j d| �� d| j d � d d � | j D �� d � d d � | j D �� }d t � | �|f S )r' r( � dsa_dnstr=%s� dsa_guid=%sz default=%s� ro=%sz partial=%sz present=%sz fsmo_role_owner=%s� c s � � | ]}d | V qdS �� %sNr �r �repr r r r � � � z$NCReplica.__str__.<locals>.<genexpr>c s ra rb r rd r r r r � rf z%s %s)r) r rQ rS rT rV rU � is_presentrX �joinrY rZ r r. r, r r r r. � s( ����� ��� � zNCReplica.__str__r c C s || _ dS )z*Set or clear NC replica instantiated flagsN)rW )r% �flagsr r r �set_instantiated_flags� s z NCReplica.set_instantiated_flagsc C s� |dkr d| _ d| _n:|dkrd| _n2|dkr0d| _| jt|�� �kr/| jt|�� �kr/d| _n|dkr;d| _d| _n |dkrEd| _d| _t� | ||� dS ) z�Given an NC which has been discovered thru the nTDSDSA database object, determine what type of NC replica it is (i.e. partial, read only, default) :param attr: attr of nTDSDSA object where NC DN appears rI TrH rJ �msDS-hasFullReplicaNCs�msDS-hasMasterNCsFN) rU r[ rT r r* rE rF rV r rM rK r r r rM � s$ �z NCReplica.identify_by_dsa_attrc C � | j S )zMWhether this is a default domain for the dsa that this NC appears on )rT rC r r r � is_default � zNCReplica.is_defaultc C rm )z&Return True if NC replica is read only)rV rC r r r �is_ro � zNCReplica.is_roc C rm )z$Return True if NC replica is partial)rU rC r r r � is_partial rq zNCReplica.is_partialc C s | j r | jtj@ dkr dS dS )a7 Given an NC replica which has been discovered thru the nTDSDSA database object and populated with replica flags from the msDS-HasInstantiatedNCs; return whether the NC replica is present (true) or if the IT_NC_GOING flag is set then the NC replica is not present (false) r TF)r[ rW r �INSTANCE_TYPE_NC_GOINGrC r r r rg s zNCReplica.is_presentc C �� z |j | jtjdgd�}W n tjy( } z|j\}}td| j|f ��d}~ww |d }d|v rh|d D ]4}zttj |�}W n t yZ } zt d| t j d� W Y d} ~ q5d} ~ ww t| j|�} | j�| � q5dS dS )a* Given an NC replica which has been discovered thru the nTDSDSA database object, load the repsFrom attribute for the local replica. held by my dsa. The repsFrom attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on �repsFromr1 �!Unable to find NC for (%s) - (%s)Nr zbad repsFrom NDR: %r��file)r5 r r6 r7 r8 r9 r r r �repsFromToBlob� RuntimeError�print�sys�stderr� RepsFromTorY �append) r% r< r= �e1r? r@ rA �value�unpackedr> re r r r � load_repsFrom% s6 � ��� � �� �zNCReplica.load_repsFromFc C �� d}g }g }| j D ] }|jr|�|� d}q |�� r |�� d}|�t|j�� q |D ]}| j �|� q+g }|r:|r<dS t� � }t� || j �|_ t� |tjd�|d< z|�|� W dS tjyp } z td| j |f ��d}~ww )z Commit repsFrom to the databaseFTNru z&Could not set repsFrom for (%s) - (%s))rY � to_be_deletedr � is_modified�set_unmodifiedr �ndr_blob�remover6 �Message�Dnr �dn�MessageElement�FLAG_MOD_REPLACE�modifyr8 r ) r% r< �ror� �newreps�delrepsru �mr@ r r r �commit_repsFromB �: ����zNCReplica.commit_repsFromc C s� z |j | jtjdgd�}W n tjy( } z|j\}}td| j|f ��d}~ww |d }d|v rP|d d }ttj |�}|j dkrIt d|j ��|j j | _dS g | _dS )aF Given an NC replica which has been discovered thru the nTDSDSA database object, load the replUpToDateVector attribute for the local replica. held by my dsa. The replUpToDateVector attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on �replUpToDateVectorr1 rv Nr r z(Unexpected replUpToDateVector version %d)r5 r r6 r7 r8 r9 r r r �replUpToDateVectorBlob�version�AttributeError�ctr�cursors� rep_replUpToDateVector_cursors) r% r< r= �e2r? r@ rA r� �blobr r r �load_replUpToDateVector� s. � ��� � � z!NCReplica.load_replUpToDateVectorc C � d� dd� | jD ��S )N� c s s � | ] }|j rt|�V qd S �N)r� r* �r �xr r r r � s � z2NCReplica.dumpstr_to_be_deleted.<locals>.<genexpr>�rh rY rC r r r �dumpstr_to_be_deleted� � z NCReplica.dumpstr_to_be_deletedc C r� )Nr� c s s � | ] }|� � rt|�V qd S r� )r� r* r� r r r r � s � z3NCReplica.dumpstr_to_be_modified.<locals>.<genexpr>r� rC r r r �dumpstr_to_be_modified� r� z NCReplica.dumpstr_to_be_modifiedc C st z |j | jtjdgd�}W n tjy( } z|j\}}td| j|f ��d}~ww |d }d|v r8|d | _dS dS )z�Given an NC replica which has been discovered thru the nTDSDSA database object, load the fSMORoleOwner attribute. � fSMORoleOwnerr1 rv Nr )r5 r r6 r7 r8 r9 r rX )r% r< r= �e3r? r@ rA r r r �load_fsmo_roles� s � ����zNCReplica.load_fsmo_rolesc C s | j d ur | j |kr dS dS )NTF)rX �r% rP r r r �is_fsmo_role_owner� s z NCReplica.is_fsmo_role_ownerc C rt )a� Given an NC replica which has been discovered thru the nTDSDSA database object, load the repsTo attribute for the local replica. held by my dsa. The repsTo attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on This is responsible for push replication, not scheduled pull replication. Not to be confused for repsFrom. �repsTor1 rv Nr zbad repsTo NDR: %rrw )r5 r r6 r7 r8 r9 r r r ry rz r{ r| r} r~ rZ r ) r% r< r= �e4r? r@ rA r� r� r> re r r r � load_repsTo� s6 � ��� � �� �zNCReplica.load_repsToc C r� )z Commit repsTo to the databaseFTNr� z$Could not set repsTo for (%s) - (%s))rZ r� r r� r� r r� r� r6 r� r� r r� r� r� r� r8 r ) r% r< r� r� r� r� r� r� r@ r r r � commit_repsTo� r� zNCReplica.commit_repsToN)r �F)r r r rN r& r. rj rM rn rp rr rg r� r� r� r� r� r� r� r� r� r r r r rO � s& 1 ?! rO c @ s� e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd-d d �Zd d!� Zd"d#� Zd$d%� Zd&d'� Zd(d)� Zd*d+� Zd,S ).�DirectoryServiceAgentc C sF || _ d| _d| _d| _d| _d| _d| _d| _i | _i | _ i | _ dS )z�Initialize DSA class. Class is subsequently fully populated by calling the load_dsa() method :param dsa_dnstr: DN of the nTDSDSA NFr ) rP rR �dsa_ivid� dsa_is_ro� dsa_is_istg�options� dsa_behavior� default_dnstr�current_rep_table�needed_rep_table� connect_tabler� r r r r& # s z DirectoryServiceAgent.__init__c C s� d| j j }| jdur|d| j }| jdur |dt| j� }| jdur.|dt| j� }|d| �� d| �� d| �� d d | � � d d | � � d d | � � 7 }|S ) r' r( Nr] r^ z dsa_ivid=%sr_ z gc=%sz istg=%sz current_replica_table:rc z needed_replica_table:z connect_table:) r) r rP rR r* r� rp �is_gc�is_istg� dumpstr_current_replica_table� dumpstr_needed_replica_table�dumpstr_connect_tabler, r r r r. @ s2 � �� �� �� � z DirectoryServiceAgent.__str__c C � | j �|�S r� )r� �getr$ r r r �get_current_replicaW s z)DirectoryServiceAgent.get_current_replicac C s | j p| jS )zAReturns True if dsa is intersite topology generator for it's site)r� r� rC r r r r� Z � z DirectoryServiceAgent.is_istgc C rm )z1Returns True if dsa a read only domain controller)r� rC r r r rp _ rq zDirectoryServiceAgent.is_roc C � | j tj@ dkr dS dS )z*Returns True if dsa hosts a global catalogr TF)r� r �DS_NTDSDSA_OPT_IS_GCrC r r r r� c � zDirectoryServiceAgent.is_gcc C s | j |krdS dS )z�Is dsa at minimum windows level greater than or equal to (version) :param version: Windows version to test against (e.g. DS_DOMAIN_FUNCTION_2008) TF)r� )r% r� r r r �is_minimum_behaviori s z)DirectoryServiceAgent.is_minimum_behaviorc C r� )z>Whether this allows NTDSConnection translation in its options.r TF)r� r �%DS_NTDSDSA_OPT_DISABLE_NTDSCONN_XLATErC r r r � is_translate_ntdsconn_disableds r� z4DirectoryServiceAgent.is_translate_ntdsconn_disabledc C s | j | jfS )z5Return DSA current and needed replica tables )r� r� rC r r r �get_rep_tablesy r� z$DirectoryServiceAgent.get_rep_tablesc C s | j �d�\}}}|S )z(Get the parent DN string of this object.�,)rP � partition)r% �head�sep�tailr r r �get_parent_dnstr~ s z&DirectoryServiceAgent.get_parent_dnstrc C s g d�}z |j | jtj|d�}W n tjy+ } z|j\}}td| j|f ��d}~ww |d }t�|� d|d d ��| _ d|v rPt�|� d|d d ��| _ d|v r]t |d d �| _ d |v rot|d d �d krod | _nd | _d |v rt |d d �| _| �|� | �|� dS )z�Load a DSA from the samdb. Prior initialization has given us the DN of the DSA that we are to load. This method initializes all other attributes, including loading the NC replica table for this DSA. )r/ � invocationIDr� � msDS-isRODC�msDS-Behavior-Versionr1 z&Unable to find nTDSDSA for (%s) - (%s)Nr r/ � invocationIdr� r� �TRUETFr� )r5 rP r6 r7 r8 r9 r r r: r; rR r� �intr� r* r� r� �load_current_replica_table�load_connection_table)r% r< r4 r= �e5r? r@ rA r r r �load_dsa� s: � ��� � � z DirectoryServiceAgent.load_dsac C s( g d�}z |j | jtj|d�}W n tjy+ } z|j\}}td| j|f ��d}~ww i }t|d �dkr�|d �� D ]J}|dkrCq<|d | D ]<} t || � d��} | � � } t | j �} | |vrjt| | �} | || < n|| } |dkrx| �| � qI| �||� | �� r�| | _qIq<ntd | j ��|| _dS ) a# Method to load the NC replica's listed for DSA object. This method queries the samdb for (hasMasterNCs, msDS-hasMasterNCs, hasPartialReplicaNCs, msDS-HasDomainNCs, msDS-hasFullReplicaNCs, and msDS-HasInstantiatedNCs) to determine complete list of NC replicas that are enumerated for the DSA. Once a NC replica is loaded it is identified (schema, config, etc) and the other replica attributes (partial, ro, etc) are determined. :param samdb: database to query for DSA replica list )rJ rl rI rH rk �msDS-HasInstantiatedNCsr1 z*Unable to find nTDSDSA NCs for (%s) - (%s)Nr r� �utf8r� zNo nTDSDSA NCs for (%s))r5 rP r6 r7 r8 r9 r �len�keysr �decode�get_binary_integerr* r� rO rj rM rn r� r� )r% r< �ncattrsr= �e6r? r@ � tmp_tabler r� �dsdnri �dnstrre r r r r� � sH � ��� ��� z0DirectoryServiceAgent.load_current_replica_tablec C s || j |j< dS )z]Method to add a NC replica that "should be present" to the needed_rep_table. N)r� r )r% re r r r �add_needed_replica s z(DirectoryServiceAgent.add_needed_replicac C s� z |j | jtjdd�}W n tjy' } z|j\}}td| j|f ��d}~ww |D ]}t|j�}|| j v r7q*t |�}|� |� || j |< q*dS )z�Method to load the nTDSConnections listed for DSA object. :param samdb: database to query for DSA connection list z (objectClass=nTDSConnection)�r2 r3 � expression�-Unable to find nTDSConnection for (%s) - (%s)N) r5 rP r6 � SCOPE_SUBTREEr8 r9 r r* r� r� �NTDSConnection�load_connection) r% r< r= �e7r? r@ rA r� �connectr r r r� s( � ��� �z+DirectoryServiceAgent.load_connection_tableFc C sn g }| j �� D ]$\}}|jr|�||� |jr |�||� |jr+|�||� |�|� q|D ]}| j |= q.dS )az Method to commit any uncommitted nTDSConnections modifications that are in our table. These would be identified connections that are marked to be added or deleted :param samdb: database to commit DSA connection list to :param ro: if (true) then peform internal operations but do not write to the database (readonly) N) r� �items� to_be_added� commit_added�to_be_modified�commit_modifiedr� �commit_deletedr )r% r< r� �delconnr� r� r r r �commit_connections' s � �z(DirectoryServiceAgent.commit_connectionsc C s || j vsJ �|| j |< d S r� )r� )r% r� r� r r r �add_connectionB s z$DirectoryServiceAgent.add_connectionc C s. g }| j �� D ] }|�� |kr|�|� q|S )z�Scan DSA nTDSConnection table and return connection with a "fromServer" dn string equivalent to method input parameter. :param from_dnstr: search for this from server entry )r� �values�get_from_dnstrr )r% � from_dnstr�answerr� r r r � get_connection_by_from_dnstrF s �z2DirectoryServiceAgent.get_connection_by_from_dnstrc C r� )z1Debug dump string output of current replica tabler� c s � � | ]}t |�V qd S r� �r* r� r r r r V rf zFDirectoryServiceAgent.dumpstr_current_replica_table.<locals>.<genexpr>)rh r� rC r r r r� T � z3DirectoryServiceAgent.dumpstr_current_replica_tablec C r� )z0Debug dump string output of needed replica tabler� c s r� r� r r� r r r r Z rf zEDirectoryServiceAgent.dumpstr_needed_replica_table.<locals>.<genexpr>)rh r� rC r r r r� X r z2DirectoryServiceAgent.dumpstr_needed_replica_tablec C r� )z)Debug dump string output of connect tabler� c s r� r� r r� r r r r ^ rf z>DirectoryServiceAgent.dumpstr_connect_table.<locals>.<genexpr>)rh r� rC r r r r� \ r z+DirectoryServiceAgent.dumpstr_connect_tablec C s| dt t�� � | j }t|�}d|_d|_||_||_||_ |dur*|j |_ |j |_ |dur2||_nt� |_| �||� |S )z�Set up a new connection for the DSA based on input parameters. Connection will be added to the DSA connect_table and will be marked as "to be added" pending a call to commit_connections() zCN=%s,TN)r* �uuid�uuid4rP r� r� �enabledr� r� � system_flagsr� �transport_dnstr�guid�transport_guid�schedule�new_connection_scheduler� )r% r� r � transportr� �schedr� r� r r r �new_connection` s z$DirectoryServiceAgent.new_connectionNr� )r r r r& r. r� r� rp r� r� r� r� r� r� r� r� r� r� r� r� r� r� r� r r r r r r� ! s, 0S r� c @ s� e Zd ZdZdd� Zdd� Zdd� Zdd � Zd*d d �Zd*d d�Z d*dd�Z dd� Z dd� Z dd� Z dd� Zdd� Zdd � Zd d � Zd d � Zd!d"� Zd#d$� Zd%d&� Zd'd(� Zd)S )+r� z5Class defines a nTDSConnection found under a DSA c C sR || _ d | _d| _d| _d| _d| _d| _d| _d| _d | _ d | _ d | _ d | _ d S )NFr ) r� r r � whenCreatedr� r� r� r� r r r r� r �r% r� r r r r& � s zNTDSConnection.__init__c C s> d| j j| jf d| j d| j d| j d| j d| j d| j d| j d | j }| j d ur?|d t | j � 7 }| j d urM|d t | j � 7 }|d | j }| jd ur�|d| jj d| jj d| jj 7 }t| jj�D ])\}}|d||jf d||jf d| d�dd� | jj| jD �� d 7 }qs|S )z1Debug dump string output of NTDSConnection object� %s: dn=%sz enabled=%sz to_be_added=%sz to_be_deleted=%sz to_be_modified=%sz options=0x%08Xz system_flags=0x%08Xz whenCreated=%dz transport_dn=%sN� guid=%s� transport_guid=%sz from_dn=%s� schedule.size=%s� schedule.bandwidth=%s� schedule.numberOfSchedules=%s�" schedule.headerArray[%d].type=%d�$ schedule.headerArray[%d].offset=%d� schedule.dataArray[%d].slots[ r` c s ra �z0x%X Nr �r �slotr r r r � rf z)NTDSConnection.__str__.<locals>.<genexpr>�])r) r r� r r� r� r� r� r r r r r* r r� r �size� bandwidth�numberOfSchedules� enumerate� headerArray�type�offsetrh � dataArray�slots)r% r- �i�headerr r r r. � sZ �������� ������� ��zNTDSConnection.__str__c C s� g d�}z |j | jtj|d�}W n tjy+ } z|j\}}td| j|f ��d}~ww |d }d|v r=t|d d �| _d|v rTt |d d �� � � � � � dkrTd | _ d |v rat|d d �| _zt�|�d |d d ��| _W n ty td | j ��w d |v r�t||d d �d��}| �|t |j�� d|v r�ttj|d d �| _d|v r�t�t |d d ��| _ d|v r�t||d d �d��}t |j�| _ | j dus�J �dS dS )z�Given a NTDSConnection object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )r� �enabledConnectionr r r/ � transportType� fromServer� systemFlagsr1 r� Nr r� r( r� Tr+ r/ z4Unable to find objectGUID in nTDSConnection for (%s)r) r� r r r* ) r5 r� r6 r7 r8 r9 r r� r� r* �upper�lstrip�rstripr r r r: r; r �KeyErrorr r� �load_connection_transportr� r r r �string_to_timer r� ) r% r< r4 r= �e8r? r@ rA r� r r r r� � sV � ��� �� �� �z NTDSConnection.load_connectionc C s� dg}z |j |tj|d�}W n tjy( } z |j\}}td||f ��d}~ww d|d v rD|d }|| _t�|� d|d d ��| _ | jdusKJ �| j dusRJ �dS )z�Given a NTDSConnection object which enumerates a transport DN, load the transport information for the connection object :param tdnstr: transport DN to load r/ r1 z$Unable to find transport (%s) - (%s)Nr ) r5 r6 r7 r8 r9 r r r r: r; r ) r% r< �tdnstrr4 r= �e9r? r@ rA r r r r0 � s* � ��� ��z(NTDSConnection.load_connection_transportFc C sb | j sJ �d| _ |r dS z |�| j� W dS tjy0 } z|j\}}td| j|f ��d}~ww )z�Local helper routine for commit_connections() which handles committed connections that are to be deleted from the database database FNz/Could not delete nTDSConnection for (%s) - (%s))r� �deleter� r6 r8 r9 r )r% r< r� �e10r? r@ r r r r� s ���z NTDSConnection.commit_deletedc C s� | j sJ �d| _ |r dS d}z|j| jtjd�}t|�dkr d}W n& tjyG } z|j\}}|tjkr=t d| j|f ��W Y d}~nd}~ww |rQt d| j ��| j rWd}nd }t� � } t� || j�| _ t�d tjd �| d < t�dtjd �| d < t�|tjd �| d < t�| jtjd�| d< t�t| j�tjd�| d< t�t| j�tjd�| d< | jdur�t�t| j�tjd�| d< | jdur�t�t| j�tjd�| d< z|�| � W dS tjy� } z| j\}}t d| j|f ��d} ~ ww )z�Local helper routine for commit_connections() which handles committed connections that are to be added to the database FN�r2 r3 r T� Unable to search for (%s) - (%s)z'nTDSConnection for (%s) already exists!r� �FALSE�nTDSConnection� objectClass�showInAdvancedViewOnlyr( r* r� r+ r) r z,Could not add nTDSConnection for (%s) - (%s))r� r5 r� r6 r7 r� r8 r9 �ERR_NO_SUCH_OBJECTr r r� r� r� r� � FLAG_MOD_ADDr� r* r� r r r r �add) r% r< r� �foundrA �e11r? r@ � enablestrr� �e12r r r r� s� � � ���� �� �� ������ �� �� ���zNTDSConnection.commit_addedc C s� | j sJ �d| _ |r dS z |j| jtjd� W n' tjy> } z|j\}}|tjkr1td| j ��td| j|f ��d}~ww | j rEd}nd}t� � }t� || j�|_ t� |tjd�|d< t� | jtjd �|d < t� t| j�tjd �|d < t� t| j�tjd �|d < | jdur�t� t| j�tjd �|d < n t� g tjd �|d < | jdur�t� t| j�tjd �|d < n t� g tjd �|d < z|�|� W dS tjy� } z|j\}}td| j|f ��d}~ww )z�Local helper routine for commit_connections() which handles committed connections that are to be modified to the database FNr7 z&nTDSConnection for (%s) doesn't exist!r8 r� r9 r( r* r� r+ r) r z/Could not modify nTDSConnection for (%s) - (%s))r� r5 r� r6 r7 r8 r9 r= r r r� r� r� r� r� r� r* r� r r �FLAG_MOD_DELETEr r r� ) r% r< r� �e13r? r@ rB r� �e14r r r r� c sz ���� �� ������ ��� ��� ���z NTDSConnection.commit_modifiedc C s || _ d S r� )r� )r% � truefalser r r � set_modified� � zNTDSConnection.set_modifiedc C sH | j du s | j jd du rdS | j jd jD ] }|d@ dkr! dS qdS )zzReturns True if our schedule includes at least one replication interval within the week. False otherwise Nr F� T)r r$ r% )r% r r r r �!is_schedule_minimum_once_per_week� s �z0NTDSConnection.is_schedule_minimum_once_per_weekc C s� | j du r |du S |du rdS | j j|jks$| j j|jks$| j j|jkr&dS t| j j�D ]?\}}| j j| j|j| jkr@ dS | j j| j|j| jkrP dS t| j j | j |j | j �D ] \}}||krj dS q^q,dS )z�Returns True if our schedule is equivalent to the input comparison schedule. :param shed: schedule to compare to NFT) r r r r r r! r" r# �zipr$ r% )r% r r& r' �a�br r r �is_equivalent_schedule� s. � ���z%NTDSConnection.is_equivalent_schedulec C � | j tj@ dkr dS dS )zMReturns True if NTDS Connection specifies RODC topology only r FT)r� r �NTDSCONN_OPT_RODC_TOPOLOGYrC r r r �is_rodc_topology� � z NTDSConnection.is_rodc_topologyc C rP )z�Returns True if NTDS Connection was generated by the KCC topology algorithm as opposed to set by the administrator r FT)r� r �NTDSCONN_OPT_IS_GENERATEDrC r r r � is_generated� rS zNTDSConnection.is_generatedc C rP )zGReturns True if NTDS Connection should override notify default r FT)r� r �$NTDSCONN_OPT_OVERRIDE_NOTIFY_DEFAULTrC r r r �is_override_notify_default� � z)NTDSConnection.is_override_notify_defaultc C rP )z:Returns True if NTDS Connection should use notify r FT)r� r �NTDSCONN_OPT_USE_NOTIFYrC r r r � is_use_notify� rX z NTDSConnection.is_use_notifyc C rP )z?Returns True if NTDS Connection should use twoway sync r FT)r� r �NTDSCONN_OPT_TWOWAY_SYNCrC r r r �is_twoway_sync rX z NTDSConnection.is_twoway_syncc C rP )zRReturns True if NTDS Connection intersite compression is disabled r FT)r� r �*NTDSCONN_OPT_DISABLE_INTERSITE_COMPRESSIONrC r r r �!is_intersite_compression_disabled rS z0NTDSConnection.is_intersite_compression_disabledc C rP )zBReturns True if NTDS Connection has a user owned schedule r FT)r� r � NTDSCONN_OPT_USER_OWNED_SCHEDULErC r r r �is_user_owned_schedule rX z%NTDSConnection.is_user_owned_schedulec C rm )z3Returns True if NTDS Connection is enabled )r rC r r r � is_enabled ro zNTDSConnection.is_enabledc C rm )z%Return fromServer dn string attribute)r� rC r r r r� rq z NTDSConnection.get_from_dnstrNr� )r r r rN r& r. r� r0 r� r� r� rH rK rO rR rU rW rZ r\ r^ r` ra r� r r r r r� s* &9 GG( r� c @ r )� Partitiona! A naming context discovered thru Partitions DN of the config schema. This is a more specific form of NamingContext class (inheriting from that class) and it identifies unique attributes enumerated in the Partitions such as which nTDSDSAs are cross referenced for replicas c C s. || _ d| _d| _g | _g | _t�| d � d S )NTr )�partstrr r �rw_location_list�ro_location_listr r& )r% rc r r r r& ( s zPartition.__init__c C s> g d�}z |j | jtj|d�}W n tjy+ } z|j\}}td| j|f ��d}~ww |d }|�� D ]c}|dkr;q4|dkrWt|| d �� � � � � � dkrSd | _ nd | _ q4|d kret || d �| _q4|| D ]-} t|| �d ��} t| j�} |d kr�| | _qi|dkr�| j�| � qi|dkr�| j�| � qiqiq4| �|� dS )a� Given a Partition class object that has been initialized with its partition dn string, load the partition from the sam database, identify the type of the partition (schema, domain, etc) and record the list of nTDSDSAs that appear in the cross reference attributes msDS-NC-Replica-Locations and msDS-NC-RO-Replica-Locations. :param samdb: sam database to load partition from )�nCName�Enabledr+ �msDS-NC-Replica-Locations� msDS-NC-RO-Replica-Locationsr1 z(Unable to find partition for (%s) - (%s)Nr r� rg r� TFr+ r� rf rh ri )r5 rc r6 r7 r8 r9 r r� r* r, r- r. r r� r r r� r� r rd r re rG ) r% r< r4 r= �e15r? r@ rA r r� r� r� r r r �load_partition4 sN � ��� ��zPartition.load_partitionc C rm )z-Returns True if partition is enabled )ra rC r r r ra n ro zPartition.is_enabledc C rP )z�Returns True if this is not an Active Directory NC in our forest but is instead something else (e.g. a foreign NC) r TF)r r �SYSTEM_FLAG_CR_NTDS_NCrC r r r � is_foreigns s zPartition.is_foreignc C s� d}d}| j tjkp| j tjkp| j tjko| j|jk}| j tjkr7|�� r/|j | j v r.d}n|j | j v r7d}|� � rW| j tjkrW| j|jkrW|j | j v sS|j | j v rWd}d}|ra|�� s_|rad}|||fS )z�Tests whether this partition should have an NC replica on the target dsa. This method returns a tuple of needed=True/False, ro=True/False, partial=True/False :param target_dsa: should NC be present on target dsa FT) r# r r r r r r� r rp rP re rd r� )r% � target_dsar� �partial�neededr r r �should_be_present| s2 � � � zPartition.should_be_presentc C sH dt �| � d| j d�dd� | jD �� d�dd� | jD �� }|S )r' z%sz partdn=%sr` c s ra )z msDS-NC-Replica-Locations=%sNr �r r r r r r � rf z$Partition.__str__.<locals>.<genexpr>c s ra )z! msDS-NC-RO-Replica-Locations=%sNr rr r r r r � rf )r r. rc rh rd re r, r r r r. � s ���zPartition.__str__N) r r r rN r& rk ra rm rq r. r r r r rb ! s : 0rb c @ sx e Zd ZdZdd� Zdd� Zdd� Zdd � Zd d � Zd d � Z dd� Z dd� Z dd� Z dd� Z dd� Zdd� Zdd� Zd S ) �Sitez�An individual site object discovered thru the configuration naming context. Contains all DSAs that exist within the site c C s4 || _ d | _d| _d | _d| _i | _i | _|| _d S �Nr )� site_dnstr� site_guid� site_options�site_topo_generator�site_topo_failover� dsa_table� rw_dsa_table�nt_now)r% ru r| r r r r& � s z Site.__init__c C s d| j }g d�}z|j|tj|d�}|j| j tjdgd�}W n tjy9 } z |j\}}td||f ��d}~ww |d } d| v rKt| d d �| _d | v rXt | d d �| _ d | v ret| d d �| _ |d } d| v r{t � |�d| d d ��| _| �|� dS ) z�Loads the NTDS Site Settings options attribute for the site as well as querying and loading all DSAs that appear within the site. �CN=NTDS Site Settings,%s)r� �interSiteTopologyFailover�interSiteTopologyGeneratorr1 r/ z,Unable to find site settings for (%s) - (%s)Nr r� r r~ )ru r5 r6 r7 r8 r9 r r� rw r* rx ry r r: r; rv � load_all_dsa) r% r< �ssdnr4 r= �self_res�e16r? r@ rA r r r � load_site� s< � � ���� �zSite.load_sitec C s� z |j | jtjdd�}W n tjy$ } z |j\}}td| ��d}~ww |D ]$}t|j�}|| j v r4q't |�}|� |� || j |< |� � sK|| j |< q'dS )z�Discover all nTDSDSA thru the sites entry and instantiate and load the DSAs. Each dsa is inserted into the dsa_table by dn string. z(objectClass=nTDSDSA))r3 r� z Unable to find nTDSDSAs - (%s)N)r5 ru r6 r� r8 r9 r r* r� rz r� r� rp r{ ) r% r< r= �e17r? r@ rA r� r\ r r r r� � s* � �� ��zSite.load_all_dsac C r� )z�Return a previously loaded DSA object by consulting the sites dsa_table for the provided DSA dn string :return: None if DSA doesn't exist )rz r� r r r r �get_dsa s z Site.get_dsac C s� |j r d|_|j| _dS t|�}|�|� |�|� t| j� � dd� d�}| j dkr-d}n| j d d }| j � | j�}|d urt||urt|� |�}d } |jD ] } |j| jkrYd} nqM| sa|} d} n| j| j |krnd} d} n|} | j} n|� |�} | j} | | j| | t|� } || }d|_||ur�d S | j|jkr�dS |j| _|r�dS d | j }t�� }t�||�|_t�|jtjd �|d < z|�|� W dS tj y� } zt d ||f ��d }~ww )al Determine if my DC should be an intersite topology generator. If my DC is the istg and is both a writeable DC and the database is opened in write mode then we perform an originating update to set the interSiteTopologyGenerator attribute in the NTDS Site Settings object. An RODC always acts as an ISTG for itself. Tc S s t | j�S r� )r rR )r\ r r r �<lambda>5 s z"Site.select_istg.<locals>.<lambda>)�keyr l PC �< i��� NFr} r z8Could not set interSiteTopologyGenerator for (%s) - (%s)) r� r� rP rx �get_dsa_config_repr� r� �sortedr{ r� ry rz r� �indexr� r� �source_dsa_invocation_idr| �last_sync_successr� ru r6 r� r� r� r� r� r� r8 r )r% r< �mydsar� �c_rep�D_sort�f�d_dsa�j_idxr@ �cursor�i_idx�t_time�k_idxr� r� r@ r r r � select_istg sz � � �� �����zSite.select_istgc C � | j tj@ dkS )z8Returns True if intra-site topology is disabled for siter )rw r �-DS_NTDSSETTINGS_OPT_IS_AUTO_TOPOLOGY_DISABLEDrC r r r � is_intrasite_topology_disabled� � ��z#Site.is_intrasite_topology_disabledc C r� )z8Returns True if inter-site topology is disabled for siter )rw r �8DS_NTDSSETTINGS_OPT_IS_INTER_SITE_AUTO_TOPOLOGY_DISABLEDrC r r r � is_intersite_topology_disabled� s ��z#Site.is_intersite_topology_disabledc C r� )z:Returns True if selection of random bridgehead is disabledr )rw r �1DS_NTDSSETTINGS_OPT_IS_RAND_BH_SELECTION_DISABLEDrC r r r � is_random_bridgehead_disabled� r� z"Site.is_random_bridgehead_disabledc C r� )z1Returns True if detect stale is disabled for siter )rw r �1DS_NTDSSETTINGS_OPT_IS_TOPL_DETECT_STALE_DISABLEDrC r r r �is_detect_stale_disabled� r� z Site.is_detect_stale_disabledc C r� )z<Returns True if NTDS Connection cleanup is disabled for siter )rw r �,DS_NTDSSETTINGS_OPT_IS_TOPL_CLEANUP_DISABLEDrC r r r � is_cleanup_ntdsconn_disabled� r� z!Site.is_cleanup_ntdsconn_disabledc C s | � |j�rdS dS )z"Return True if dsa is in this siteTF)r� rP )r% r\ r r r � same_site� s zSite.same_sitec C s$ t | j�dkrt | j�dkrdS dS )Nr TF)r� rz r{ rC r r r � is_rodc_site� s zSite.is_rodc_sitec C sX d| j j d| j d| j d| j d| j }| j�� D ] \}}|d| }q |S )r' r( z dn=%sz options=0x%Xz topo_generator=%sz topo_failover=%drc )r) r ru rw rx ry rz r� )r% r- r� r\ r r r r. � s ����z Site.__str__N)r r r rN r& r� r� r� r� r� r� r� r� r� r� r� r. r r r r rs � s % * rs c @ r )� GraphNodez�A graph node describing a set of edges that should be directed to it. Each edge is a connection for a particular naming context replica directed from another node in the forest to this node. c C s || _ || _g | _dS )z�Instantiate the graph node according to a DSA dn string :param max_node_edges: maximum number of edges that should ever be directed to the node N)� max_edgesrP � edge_from)r% rP �max_node_edgesr r r r& � s zGraphNode.__init__c C sR d| j j d| j d| j }t| j�D ]\}}t|t�r&|d||f 7 }q|S )Nr( r] z max_edges=%dz edge_from[%d]=%s)r) r rP r� r r� � isinstancer* )r% r- r& �edger r r r. � s �� �zGraphNode.__str__c C sN t |t�sJ �|| jkrdS || jv rdS t| j�| jkr dS | j�|� dS )z�Add an edge from the dsa to our graph nodes edge from list :param from_dsa_dnstr: the dsa that the edge emanates from FT)r� r* rP r� r� r� r )r% �from_dsa_dnstrr r r � add_edge_from s zGraphNode.add_edge_fromc C s |j �� D ]}| �|j� qdS )ae For each nTDSConnection object associated with a particular DSA, we test if it implies an edge to this graph node (i.e. the "fromServer" attribute). If it does then we add an edge from the server unless we are over the max edges for this graph node :param dsa: dsa with a dnstr equivalent to his graph node N)r� r� r� r� )r% r\ r� r r r �add_edges_from_connections s �z$GraphNode.add_edges_from_connectionsc C s` | j D ]*}|�|�}d}|D ] }|�� rqd}q|rqtj}tjtjB }|�||||d� qdS )z�For each edge directed to this graph node, ensure there is a corresponding nTDSConnection object in the dsa. FTN)r� r� rR r rT � SYSTEM_FLAG_CONFIG_ALLOW_RENAME� SYSTEM_FLAG_CONFIG_ALLOW_MOVEr ) r% r\ r � edge_dnstr� connections� found_validr� �optri r r r �add_connections_from_edges# s ��z$GraphNode.add_connections_from_edgesc C s t | j�| jkr dS dS )z<Return True if we have met the maximum "from edges" criteriaTF)r� r� r� rC r r r �has_sufficient_edgesJ r� z GraphNode.has_sufficient_edgesN) r r r rN r& r. r� r� r� r� r r r r r� � s 'r� c @ �( e Zd ZdZdd� Zdd� Zdd� ZdS ) � Transportz;Class defines a Inter-site transport found under Sites c C s( || _ d| _d | _d | _d | _g | _d S rt )r� r� r �name� address_attr�bridgehead_listr r r r r& U s zTransport.__init__c C sX d| j j| jf dt| j� d| j d| j d| j d�dd� | j D �� }|S ) �,Debug dump string output of Transport objectr r � options=%dz address_attr=%sz name=%sr` c s ra )z bridgehead_list=%sNr )r r� r r r r e rf z$Transport.__str__.<locals>.<genexpr>) r) r r� r* r r� r� r� rh r� r, r r r r. ] s �����zTransport.__str__c C s g d�}z |j | jtj|d�}W n tjy+ } z|j\}}td| j|f ��d}~ww |d }t�|� d|d d ��| _ d|v rKt |d d �| _ d|v rXt |d d �| _d |v ret |d d �| _d |v r�|d D ] }t||�d ��} t | j�} | | jvr�| j�| � qmdS dS ) z�Given a Transport object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )r/ r� r� �bridgeheadServerListBL�transportAddressAttributer1 z(Unable to find Transport for (%s) - (%s)Nr r/ r� r� r� r� r� )r5 r� r6 r7 r8 r9 r r r: r; r r� r� r* r� r� r r� r� r� r ) r% r< r4 r= �e18r? r@ rA r� r� r� r r r �load_transporti s> � ��� � ��zTransport.load_transportN)r r r rN r& r. r� r r r r r� Q s r� c @ sB e Zd ZdZddd�Zdd� Zdd� Zd d � Zd d � Zd d� Z dS )r~ z�Class encapsulation of the NDR repsFromToBlob. Removes the necessity of external code having to understand about other_info or manipulation of update flags. Nc C s� d| j d< || j d< d| j d< |d u r:t�� | j d< d| j d _d | j d< d | j d < t�� | j d j_| j d < d S || j d< |jj| j d < |jdkrZ|jjj| j d< d | j d < d S |jjj| j d< |jjj | j d < d S ) NFr� r r � update_flagsr� � � dns_name1� dns_name2� other_info) �__dict__r ry r� �repsFromTo1OtherInfor� r� �dns_namer� r� )r% r r� r r r r& � s$ � zRepsFromTo.__init__c C s� d| j j d| j d| j d| j d| j d| j d| j d| j d | j d | j d | j d | j d | j d d�dd� | jD �� d }|S )r' r( z dnstr=%sz update_flags=0x%Xz version=%dz source_dsa_obj_guid=%sz source_dsa_invocation_id=%sr z replica_flags=0x%Xz consecutive_sync_failures=%dz last_success=%sz last_attempt=%sz dns_name1=%sz dns_name2=%sz schedule[ r` c s ra r r r r r r r � rf z%RepsFromTo.__str__.<locals>.<genexpr>r )r) r r r� r� �source_dsa_obj_guidr� r � replica_flags�consecutive_sync_failures� last_success� last_attemptr� r� rh r r, r r r r. � sH �������� �� � � �����zRepsFromTo.__str__c C sL |dv r,|dv r| j d tjO < n|dv r!| j d tjO < t| j d j||� nn|dv rU|| j d< | j d jdkrI| j d | j d jj_nQ| j d | j d jj_ nE|d v rv|| j d < | j d jdkrjt |��| j d | j d jj_ n$|d v r�|| j d < n|d v r�|| j d< n|dv r�t d| ��t d| ��| j d tj O < dS )z�Set an attribute and chyange update flag. Be aware that setting any RepsFromTo attribute will set the drsuapi.DRSUAPI_DRS_UPDATE_ADDRESS update flag. �r r� r r� r� r� r� r� )r� r� )r r� �r� r� r� �r� r� �r r �r� r� �r� z$Attempt to set readonly attribute %s�Unknown attribute %sN) r� r �DRSUAPI_DRS_UPDATE_FLAGS�DRSUAPI_DRS_UPDATE_SCHEDULE�setattrr� r� r� r� r� r� r� �DRSUAPI_DRS_UPDATE_ADDRESS)r% �itemr� r r r � __setattr__� s6 �� � zRepsFromTo.__setattr__c C s� |dv r t | jd j|�S |dv r| jd jS |dv r3| jd jdkr+| jd jjjS | jd jjjS |dv rK| jd jdkrCt|��| jd jjjS |dv rT| jd S |d v r]| jd S |d v rf| jd S td | ��)zzOverload of RepsFromTo attribute retrieval. Allows external code to ignore substructures within the blob r� r� r� r� r� r� r� r� r� r �r� r� r� ) �getattrr� r� r� r� r� r� r� r� )r% r� r r r � __getattr__ s& zRepsFromTo.__getattr__c C s | j dkS rt r� rC r r r r� ; rI zRepsFromTo.is_modifiedc C s d| j d< d S )Nr r� )r� rC r r r r� > s zRepsFromTo.set_unmodified)NN) r r r rN r& r. r� r� r� r� r r r r r~ � s 42% r~ c @ r� ) �SiteLinkz0Class defines a site link found under sites c C s. || _ d| _d| _d| _d | _d | _g | _d S rt )r� r� r �costr �interval� site_listr r r r r& F s zSiteLink.__init__c C s� d| j j| jf d| j d| j d| j d| j }| jdurf|d| jj d| jj d | jj 7 }t | jj �D ])\}}|d ||j f d ||jf d | d �dd� | jj| jD �� d 7 }q<| jD ] \}}|d||f }qi|S )r� r r� z system_flags=%dz cost=%dz interval=%sNr r r r r r r` c s ra r r r r r r r d rf z#SiteLink.__str__.<locals>.<genexpr>r z site_list=%s (%s))r) r r� r� r r� r� r r r r r r! r" r# rh r$ r% r� )r% r- r& r' r r� r r r r. O sD ���� ������� ��zSiteLink.__str__c C sR g d�}z|j | jtj|dgd�}W n tjy- } z|j\}}td| j|f ��d}~ww |d }d|v r?t|d d �| _d|v rLt|d d �| _ d |v rYt|d d �| _ d |v rft|d d �| _ d |v r�|d D ]'}t ||� d ��} t�| j�d ��} t| j�} | | f| jvr�| j�| | f� qnd|v r�ttj|�| _dS t� | _dS )z�Given a siteLink object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )r� r+ r� r � replInterval�siteListz extended_dn:0)r2 r3 r4 �controlsz'Unable to find SiteLink for (%s) - (%s)Nr r� r+ r� r� r� r� r: r )r5 r� r6 r7 r8 r9 r r� r� r r� r� r r� r r: r� �get_extended_componentr* r� r r r r r ) r% r< r4 r= �e19r? r@ rA r� r� r r� r r r � load_sitelinkk s@ � ��� � zSiteLink.load_sitelinkN)r r r rN r& r. r� r r r r r� B s r� c @ s e Zd Zdd� ZdS )�KCCFailedObjectc C s" || _ || _|| _|| _|| _d S r� )r � failure_count�time_first_failure� last_resultr� )r% r r� r� r� r� r r r r& � s zKCCFailedObject.__init__N)r r r r& r r r r r� � s r� c C s. | j �� D ] }|�� r| S qtd| j ��)Nz)Unable to find config NC replica for (%s))r� r� rD r rP )r\ r� r r r r� � s ��r� c C sV t �� } d| _d| _d| _t �� }d|_d|_|g| _t � � }dgd |_ |g| _ | S )z�Create a default schedule for an NTDSConnection or Sitelink. This is packed differently from the repltimes schedule used elsewhere in KCC (where the 168 nibbles are packed into 84 bytes). � r r� � � ) r r r r r �scheduleHeaderr" r# r! � scheduleSlotsr% r$ )r r' �datar r r r � s r c C s g }| j | �� tjdd�}| j | �� tjdd�}t� }d}|D ]!}|j�� �� }||�� d7 < |�� � � |� � kr@|d7 }q t |�t |�k�r g } |D ]}|j�� |vr\| � |� qNd� t� |�t� t| �� ���} | D ]�} t� t| j��} | j | �� tjdgd� | �d gd �} | j | �� tjdd gd � | | �d gd �}t | �dk�r t |�dk�r t| d d d �}t|d d d �}||kr�qod }|d d D ].}t�| t|��}|�� }|�� � � }|| |kr�d} n|| |kr�||� � k r�d} nq�|�r | j�� }|� |� � � qo|S )a Discover which sites have no DCs and whose lowest single-hop cost distance for any link attached to that site is linked to the site supplied. We compare the lowest cost of your single-hop link to this site to all of those available (if it exists). This means that a lower ranked siteLink with only the uncovered site can trump any available links (but this can only be done with specific, poorly enacted user configuration). If the site is connected to more than one other site with the same siteLink, only the largest site (failing that sorted alphabetically) creates the DNS records. :param samdb database :param site_name origin site (with a DC) :return a list of sites this site should be covering (for DNS) z*(&(objectClass=server)(serverReference=*))r� z(objectClass=site)r r� zCN={},CN=Sites,{}r� z&(&(objectClass=siteLink)(siteList={}))zserver_sort:1:0:cost)r2 r3 r4 r� r� r� z3(&(objectClass=siteLink)(siteList={})(siteList={}))TF)r5 rF r6 r� r r� �parent� canonical_str� get_rdn_value�lowerr� r �format� binary_encoder* r� r� )r< � site_name�sites_to_cover� server_res�site_res� sites_in_use�dc_countrA �site_dn�sites_uncovered� own_site_dn�site� encoded_dn� link_res1� link_res2�cost1�cost2�to_cover�site_val� site_dn_str�site_rdn�site_cover_rdnr r r �uncovered_sites_to_cover� s� � �� �� � �� � �r )&r| r6 r �sambar � samba.dcerpcr r r � samba.samdbr � samba.ndrr r � collectionsr � Exceptionr �objectr �dictr� r� r+ r rO r� r� rb rs r� r� r~ r� r� r� r r r r r r �<module> sJ q ` % 5i@ 2Y !
Simpan