One Hat Cyber Team
Your IP :
10.30.1.1
Server IP :
103.148.201.5
Server :
Linux web-olt 5.15.0-156-generic #166-Ubuntu SMP Sat Aug 9 00:02:46 UTC 2025 x86_64
Server Software :
Apache/2.4.52 (Ubuntu)
PHP Version :
8.1.29
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
samba
/
__pycache__
/
View File Name :
gpclass.cpython-310.pyc
o �/aV � @ sX d dl Z d dlZd dlZd dlZd dlZe j�d d� d dlmZ d dl m Z d dl m Z d dl mZ d dlmZmZ d dlm mZ d dlZd dlmZ d d lmZ d d lmZ d d lm Z d dl m Z d d l!m"Z" d d l#m$Z$ d dl%m&Z& d dlm'Z' d dlm(Z( d dl)m*Z*m+Z+ d dl,m-Z- z d dl.m/Z/ e/dd�Z0W n e1y� G dd� d�Z0Y nw G dd� d�Z2G dd� d�Z3G dd � d e4�Z5G d d � d e5�Z6G d d � d e5�Z7G d!d"� d"e5�Z8 d#d$� Z9 d%d&� Z:d'd(� Z;d)d*� Z<d+d,� Z=d-d.� Z>d/d0� Z?dHd2d3�Z@d4d5� ZAdId7d8�ZBd9d:� ZCd;d<� ZDd=d>� ZEd?d@� ZF AdJdBdC�ZGdKdDdE�ZHdKdFdG�ZIdS )L� Nz bin/python)� NTSTATUSError)� ConfigParser)�StringIO)� get_bytes)�ABCMeta�abstractmethod)�Net)�nbt)�libsmb_samba_internal)�param)�LoadParm)�UUID)�NamedTemporaryFile)�preg)�misc)�ndr_pack� ndr_unpack)�SMB_SIGNING_REQUIRED)�Enum�GPOSTATEzAPPLY ENFORCE UNAPPLYc @ s e Zd ZdZdZdZdS )r � � � N)�__name__� __module__� __qualname__�APPLY�ENFORCE�UNAPPLY� r r �//usr/lib/python3/dist-packages/samba/gpclass.pyr / s c @ sZ e Zd ZdZddd�Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dS )�gp_loga[ Log settings overwritten by gpo apply The gp_log is an xml file that stores a history of gpo changes (and the original setting value). The log is organized like so: <gp> <user name="KDC-1$"> <applylog> <guid count="0" value="{31B2F340-016D-11D2-945F-00C04FB984F9}" /> </applylog> <guid value="{31B2F340-016D-11D2-945F-00C04FB984F9}"> <gp_ext name="System Access"> <attribute name="minPwdAge">-864000000000</attribute> <attribute name="maxPwdAge">-36288000000000</attribute> <attribute name="minPwdLength">7</attribute> <attribute name="pwdProperties">1</attribute> </gp_ext> <gp_ext name="Kerberos Policy"> <attribute name="ticket_lifetime">1d</attribute> <attribute name="renew_lifetime" /> <attribute name="clockskew">300</attribute> </gp_ext> </guid> </user> </gp> Each guid value contains a list of extensions, which contain a list of attributes. The guid value represents a GPO. The attributes are the values of those settings prior to the application of the GPO. The list of guids is enclosed within a user name, which represents the user the settings were applied to. This user may be the samaccountname of the local computer, which implies that these are machine policies. The applylog keeps track of the order in which the GPOs were applied, so that they can be rolled back in reverse, returning the machine to the state prior to policy application. Nc C sp t j| _|| _|| _|rt�|�| _nt�d�| _|| _ | j� d| �}|du r6t� | jd�}||j d< dS dS )ag Initialize the gp_log param user - the username (or machine name) that policies are being applied to param gpostore - the GPOStorage obj which references the tdb which contains gp_logs param db_log - (optional) a string to initialize the gp_log �gp�user[@name="%s"]N�user�name) r r �_state�gpostore�username�etree� fromstring�gpdb�Elementr$ �find� SubElement�attrib)�selfr$ r' �db_log�user_objr r r �__init__[ s �zgp_log.__init__c C sZ |t jkr(| j�d| j �}|�d�}|du s t|�dkr#t j| _dS || _dS || _dS )a( Policy application state param value - APPLY, ENFORCE, or UNAPPLY The behavior of the gp_log depends on whether we are applying policy, enforcing policy, or unapplying policy. During an apply, old settings are recorded in the log. During an enforce, settings are being applied but the gp_log does not change. During an unapply, additions to the log should be ignored (since function calls to apply settings are actually reverting policy), but removals from the log are allowed. r# �applylogNr )r r r+ r- r$ �lenr r& )r0 �valuer2 � apply_logr r r �statep s z gp_log.statec C s� || _ | j�d| j �}|�d| �}|du r"t�|d�}||jd< | jtj krZ|�d�}|du r7t�|d�}|�d| �}|du r\t�|d�}dt |�d |jd < ||jd< dS dS dS ) z� Log to a different GPO guid param guid - guid value of the GPO from which we're applying policy r# �guid[@value="%s"]N�guidr6 r4 z%dr �count) r: r+ r- r$ r) r. r/ r& r r r5 )r0 r: r2 �objr7 �prev�itemr r r �set_guid� s" �zgp_log.set_guidc C s� | j tjks | j tjkrdS | j�d| j �}|�d| j �}|dus'J d��|�d| �}|du r=t� |d�}||j d< |�d| �}|du rXt� |d �}||j d< ||_ dS dS ) a Store an attribute in the gp_log param gp_ext_name - Name of the extension applying policy param attribute - The attribute being modified param old_val - The value of the attribute prior to policy application Nr# r9 �gpo guid was not set�gp_ext[@name="%s"]�gp_extr% �attribute[@name="%s"]� attribute) r& r r r r+ r- r$ r: r) r. r/ �text)r0 � gp_ext_namerD �old_valr2 �guid_obj�ext�attrr r r �store� s �z gp_log.storec C sh | j �d| j �}|�d| j �}|dusJ d��|�d| �}|dur2|�d| �}|dur2|jS dS )a- Retrieve a stored attribute from the gp_log param gp_ext_name - Name of the extension which applied policy param attribute - The attribute being retrieved return - The value of the attribute prior to policy application r# r9 Nr@ rA rC )r+ r- r$ r: rE �r0 rF rD r2 rH rI rJ r r r �retrieve� s zgp_log.retrievec C sl g }| j �d| j �}|dur4|�d�}|dur4|�d�}dd� |D �}|jdd� |�d d � |D �� |S ) z� Return a list of applied ext guids return - List of guids for gpos that have applied settings to the system. r# Nr4 z guid[@count]c S s g | ] }|� d �|� d�f�qS )r; r6 )�get)�.0�gr r r � <listcomp>� s �z,gp_log.get_applied_guids.<locals>.<listcomp>T)�reversec s s � | ]\}}|V qd S �Nr )rO r; r: r r r � <genexpr>� s � z+gp_log.get_applied_guids.<locals>.<genexpr>)r+ r- r$ �findall�sort�extend)r0 �guidsr2 r7 � guid_objs�guids_by_countr r r �get_applied_guids� s � zgp_log.get_applied_guidsc C s� g }| j �d| j �}|D ]7}|�d| �}|�d�}i }|D ] }i } |�d�} | D ] } | j| | jd < q*| ||jd < q |�||f� q |S )ai Return a list of applied ext guids return - List of tuples containing the guid of a gpo, then a dictionary of policies and their values prior policy application. These are sorted so that the most recently applied settings are removed first. r# r9 rB rD r% )r+ r- r$ rU rE r/ �append) r0 rX �retr2 r: � guid_settings�exts�settingsrI � attr_dict�attrsrJ r r r �get_applied_settings� s zgp_log.get_applied_settingsc C s� | j �d| j �}|�d| j �}|dusJ d��|�d| �}|durA|�d| �}|durC|�|� t|�dkrE|�|� dS dS dS dS )z� Remove an attribute from the gp_log param gp_ext_name - name of extension from which to remove the attribute param attribute - attribute to remove r# r9 Nr@ rA rC r )r+ r- r$ r: �remover5 rL r r r �delete� s �z gp_log.deletec C s | j �| jt�| jd�� dS )z Write gp_log changes to disk zutf-8N)r' rK r( r) �tostringr+ �r0 r r r �commit� s z gp_log.commitrS ) r r r �__doc__r3 r8 r? rK rM r[ rc re rh r r r r r! 5 s % r! c @ s\ e Zd Zdd� Zdd� Zdd� Zdd� Zd d � Zd d � Zd d� Z dd� Z dd� Z dd� Z dS )� GPOStoragec C s< t j�|�rt�|�| _d S t�|dtjt jt j B �| _d S )Nr ) �os�path�isfile�tdb�open�log�Tdb�DEFAULT�O_CREAT�O_RDWR)r0 �log_filer r r r3 s zGPOStorage.__init__c C � | j �� d S rS )rp �transaction_startrg r r r �start � zGPOStorage.startc C s, z t | j�t|���W S ty Y d S w rS )�intrp rN r � TypeError�r0 �keyr r r �get_int s �zGPOStorage.get_intc C s | j �t|��S rS )rp rN r r| r r r rN s zGPOStorage.getc C s t || | j�t|���S rS )r! rp rN r )r0 r$ r r r � get_gplog s zGPOStorage.get_gplogc C s | j �t|�t|�� d S rS )rp rK r )r0 r} �valr r r rK s zGPOStorage.storec C rv rS )rp �transaction_cancelrg r r r �cancel ry zGPOStorage.cancelc C s | j �t|�� d S rS )rp re r r| r r r re s zGPOStorage.deletec C rv rS )rp �transaction_commitrg r r r rh ry zGPOStorage.commitc C rv rS )rp �closerg r r r �__del__! ry zGPOStorage.__del__N) r r r r3 rx r~ rN r rK r� re rh r� r r r r rj � s rj c @ sP e Zd ZeZdd� Zedd� �Zedd� �Zdd� Z ed d � �Z ed d � �Z d S )rB c C s& || _ || _|| _|�|�� �| _d S rS )�logger�lp�credsr � get_username�gp_db)r0 r� r� r� rK r r r r3 ( s zgp_ext.__init__c C � d S rS r )r0 �deleted_gpo_list�changed_gpo_listr r r �process_group_policy. � zgp_ext.process_group_policyc C r� rS r )r0 �policyr r r �read2 r� z gp_ext.readc C s< | j �d�}tj�|t|��� �}tj�|�r | �|�S d S )N� gpo_cache) r� � cache_pathrk rl �join�check_safe_path�upper�existsr� )r0 �afile� local_path� data_filer r r �parse6 s z gp_ext.parsec C r� rS r rg r r r �__str__= r� zgp_ext.__str__c C s i S rS r )r0 �gpor r r �rsopA r� z gp_ext.rsopN) r r r r � __metaclass__r3 r r� r� r� r� r� r r r r rB % s rB c @ � e Zd Zdd� ZdS )� gp_inf_extc C s` t |d��� }td d�}t|_z |�t|�� �� W |S ty/ |�t|�d��� Y |S w )N�rb�� interpolation�utf-16) ro r� r �str� optionxform�readfpr �decode�UnicodeDecodeError)r0 r� r� �inf_confr r r r� G s ��zgp_inf_ext.readN�r r r r� r r r r r� F � r� c @ r� )� gp_pol_extc C s t |d��� }ttj|�S )Nr� )ro r� r r �file�r0 r� �rawr r r r� S s zgp_pol_ext.readNr� r r r r r� R r� r� c @ r� )� gp_xml_extc C sB t |d��� }zt�|�� �W S ty t�|�d�� Y S w )Nr� r� )ro r� r) r* r� r� r� r r r r� Y s �zgp_xml_ext.readNr� r r r r r� X r� r� c C s. t | |d�}|j|�d�tjtjB d�}|jS )N)r� r� �realm)�domain�flags)r �finddcrN r �NBT_SERVER_LDAP� NBT_SERVER_DS� pdc_dns_name)r� r� �net� cldap_retr r r �get_dc_hostnamed s �r� c C s, g }t �| ||�}|�� r|�|�� �}|S rS )r� � ADS_STRUCT�connect� get_gpo_listr� )� dc_hostnamer� r� �gpos�adsr r r r� n s r� c C s� |� � }tj�||�}z tj|dd� W n ty- } z |jtjkr#� W Y d }~nd }~ww | �|�D ]H}|d t j @ rJt | |tj�||d �� q3|d � � }t d|d�}tj�||d �� dd�} |�| �| �� |�� t�|jtj�||�� q3d S ) Ni� )�moder/ r% F)re �dir�/�\)r� rk rl r� �makedirs�OSError�errno�EEXIST�list�libsmb�FILE_ATTRIBUTE_DIRECTORY� cache_gpo_dirr �replace�write�loadfiler� �renamer% ) �conn�cache�sub_dir� loc_sub_dir� local_dir�e�fdata� local_name�f�fnamer r r r� v s( ��� �r� c C sZ t �d| �}d| �� v r t �d| �� �}||�d�d d � }d|vr)tjj|� S t| ��)Nz/|\\�sysvolr z..)�re�split�lower�indexrk rl r� r� )rl �dirs�ldirsr r r r� � s r� c C st t �� }|�|j� |�� }|�t� tj| d||d�}|�|� |� d�}|D ]}|j s.q(t ||t |j �� q(d S )Nr� )r� r� r� ) �s3param� get_context�load� configfile�get_smb_signing�set_smb_signingr r� �Connr� � file_sys_pathr� r� ) r� r� r� r� �s3_lp�saved_signing_stater� r� r� r r r �check_refresh_gpo_list� s �r� c s6 | � � }tdd� |D ��� � fdd�|D �}| �|�S )Nc S s g | ]}|j �qS r )r% )rO �pr r r rQ � s z)get_deleted_gpos_list.<locals>.<listcomp>c s g | ]}|� vr|�qS r r )rO r: �� current_guidsr r rQ � s )r[ �setrc )r� r� � applied_gpos� deleted_gposr r� r �get_deleted_gpos_list� s r� c C s& | � tj�d|��}tt�|�d �S )Nr� r )r� rk rl r� rz r� �gpo_get_sysvol_gpt_version)r� rl �gpt_pathr r r � gpo_version� s r� Fc C s� |� |�� �}t|| �}t||| �}t||�} z t|| ||� W n |�d| � Y d S |r9|} |�tj � n3g } |D ](} | j sCq=| j } t | j �� � } t| | �}||�| �kre|�d| � | �| � q=|�tj� |�� |D ]5}z||| ||�}|�| | � W qr ty� } z|�dt|� � |�dt|� � W Y d }~qrd }~ww |D ] } | j s�q�| j } t | j �� � } t| | �}|�| d| � q�|�� d S )Nz0Failed downloading gpt cache from '%s' using SMBzGPO %s has changedz Failed to apply extension %s� Message was: z%i)r r� r� r� r� r� �errorr8 r r r� r% r� r� r� r~ �infor\ r rx r� � Exceptionr� rK rh )r� r� r� rK � gp_extensions�forcer� r� r� �del_gpos� changed_gpos�gpo_objr: rl �versionrI r� r r r �apply_gp� sZ � � �� r c C s� |� |�� �}|�tj� |�|�� �}|�� |D ]5}z||| ||�}|�|g � W q t yO } z|� dt |� � |� dt |� � W Y d }~qd }~ww |� � d S )Nz Failed to unapply extension %sr� ) r r� r8 r r rc r[ rx r� r� r� r� rh ) r� r� r� rK r� r� r� rI r� r r r � unapply_gp� s �� r � c sX t | �tkr� fdd�| �� D �}d�|�S t | �tkr*� fdd�| D �}d�|�S | S )Nc s. g | ]\}}d � d|t |� d �f �qS )� z [ %s ] = %sr �� __rsop_vals)rO �k�v��levelr r rQ � s "�z __rsop_vals.<locals>.<listcomp>� c s& g | ]}d � dt |� d � �qS )r z[ %s ]r r )rO r r r r rQ � s & )�type�dict�itemsr� r� )�valsr r] r r r r � s � r c C s� t || �}t||| �}t|| ||� td� td| � tjdd�d }|D ]�} | j�� dkr0q&td| j � td| � |D ]y} | || ||�} t� d t t | ���} t | �dkrb| d � d �d } n| j� d �d } td | � td dt|d � � | �| ��� D ](\} }td| � tddt|d � � tt|�� tddt|d � � q�td dt|d � � q?tdd| � q&d S )NzResultant Set of Policyz %s Policy )�x �2 )�fallbackr z Local PolicyzGPO: %s�=z '([\w\.]+)'����.z CSE: %sz �-r z Policy Type: %sz z%s )r� r� r� �print�shutil�get_terminal_size� display_name�stripr� rU r� r r5 r� r rz r� r r )r� r� r� rK r� �targetr� r� � term_widthr� rI � cse_name_m�cse_name�sectionr` r r r r� � s6 �r� c C sH t � }| d ur |�| � n|�� |�d�}td d�}|�|� ||fS )N� gpext.confr� )r r� � load_default� state_pathr r� )�smb_confr� �ext_conf�parserr r r �parse_gpext_conf s r) c C s^ | � d�}tddtj�|�d��}|�|� t�|j|� W d � d S 1 s(w Y d S )Nr# zw+F)r� re r� )r% r rk rl �dirnamer� r� r% )r� r( r' r� r r r �atomic_write_conf) s "�r+ c C sP | d dks| d dkst | �dkrdS z t| dd� W d S ty' Y dS w ) Nr �{r �}�& Fr )r T)r5 r � ValueError)r: r r r � check_guid0 s $ ��r0 Tc C s� t j�|�sdS t| �sdS t|�\}}| |�� vr |�| � |�| d|� |�| d|� |�| d|r5dnd� |�| d|r@dnd� t||� dS ) NF�DllName�ProcessGroupPolicy�NoMachinePolicy�0�1� NoUserPolicyT) rk rl r� r0 r) �sections� add_sectionr� r+ )r: r% rl r& �machiner$ r� r( r r r �register_gp_extension; s r: c C s� t | �\}}i }|�� D ]4}i ||< |�|d�|| d< |�|d�|| d< t|�|d�� || d< t|�|d�� || d< q |S )Nr1 r2 r3 � MachinePolicyr6 � UserPolicy)r) r7 rN rz )r& �_r( �resultsr: r r r �list_gp_extensionsP s � � r? c C s< t | �sdS t|�\}}| |�� v r|�| � t||� dS )NFT)r0 r) r7 �remove_sectionr+ )r: r& r� r( r r r �unregister_gp_extension^ s rA )F)r )NTTrS )J�sysrk r r� rn rl �insert�sambar � configparserr �ior � samba.commonr �abcr r �xml.etree.ElementTreer) � ElementTreer� � samba.netr � samba.dcerpcr � samba.samba3r r� r r� � samba.gpor� � samba.paramr �uuidr �tempfiler r r � samba.ndrr r �samba.credentialsr �enumr r � ImportErrorr! rj �objectrB r� r� r� r� r� r� r� r� r� r� r r r r� r) r+ r0 r: r? rA r r r r �<module> sr � K&! / �