One Hat Cyber Team
Your IP :
10.30.1.1
Server IP :
103.148.201.5
Server :
Linux web-olt 5.15.0-156-generic #166-Ubuntu SMP Sat Aug 9 00:02:46 UTC 2025 x86_64
Server Software :
Apache/2.4.52 (Ubuntu)
PHP Version :
8.1.29
Buat File
|
Buat Folder
Eksekusi
Dir :
~
/
lib
/
python3
/
dist-packages
/
samba
/
__pycache__
/
View File Name :
upgrade.cpython-310.pyc
o �/a� � @ sB d Z dZddlZddlZddlZddlmZmZ ddlm Z ddl m Z m Z m Z ddlmZ ddlmZ dd lmZ dd lmZmZmZ dd lmZ dd lmZ dd lm Z ddl m Z ddlm Z ddlm Z dd� Z! d)dd�Z"dd� Z#dd� Z$dd� Z%dd � Z&d d � Z'd d � Z(d!ej)iZ*d"d#� Z+d$d%� Z, &d*d'd(�Z-dS )+z3Support code for upgrading from Samba 3 to Samba 4.�restructuredText� N)�Ldb�registry)�LoadParm)� provision�ProvisioningError� setsysvolacl)� FILL_FULL)�passdb)�param)�lsa�samr�security)�dom_sid)� Credentials)�dsdb)�ndr_pack)� unix2nttime)�generate_random_passwordc C sb t �� }| �� |_d|v rt �t|d �t jd�|d< d|v r-t �t|d �t jd�|d< d|v rH|d }t| d �}t �t|�t jd �|d < d |v rr|d }|d ks\|d ks\|dkr_d}nt| d �}t �t|�t jd�|d< d|v r�|d }t|d �} t �t| �t jd�|d< z| � |� W dS t j y� } z|� dt| �� W Y d} ~ dS d} ~ ww )z�Import a Samba 3 policy. :param samdb: Samba4 SAM database :param policy: Samba3 account policy :param logger: Logger object zmin password length� minPwdLength�a01zpassword history�pwdHistoryLength�a02zminimum password ageg �cA� minPwdAge�a03zmaximum password age���r l �� l���� � maxPwdAge�a04zlockout duration�< �lockoutDuration�a05z"Could not set account policy, (%s)N) �ldb�Message�get_default_basedn�dn�MessageElement�str�FLAG_MOD_REPLACE�intr �modify�LdbError�warn) �samdb�policy�logger�m�min_pw_age_unix� min_pw_age_nt�max_pw_age_unix� max_pw_age_nt�lockout_duration_mins�lockout_duration_nt�e� r7 �//usr/lib/python3/dist-packages/samba/upgrade.py�import_sam_policy* sH ���� � ��r9 c C s� zKt �� } t �|dt|� �| _|dkr8t �t|�t jd�| d< t �t|�t jd�| d< t �t|�t jd�| d< t �t|�t jd�| d< |�| � W dS t jyj } z| � dt|�t| �� W Y d} ~ dS d} ~ ww ) aw Add posix attributes for the user/group :param samdb: Samba4 sam.ldb database :param sid: user/group sid :param sid: user/group name :param nisdomain: name of the (fake) NIS domain :param xid_type: type of id (ID_TYPE_UID/ID_TYPE_GID) :param home: user homedir (Unix homepath) :param shell: user shell :param pgid: users primary group id �<SID=%s>� ID_TYPE_UID�unixHomeDirectory� loginShell� gidNumber�msSFU30NisDomainz7Could not add posix attrs for AD entry for sid=%s, (%s)N) r! r" �Dnr& r$ r% r' r) r* r+ ) r. r, �sid�name� nisdomain�xid_type�home�shell�pgidr/ r6 r7 r7 r8 �add_posix_attrsb s0 � � � � ���rH c C s� zLt �� }t �| dt|� �|_|dkr+t �t|�t jd�|d< t �dt jd�|d< n|dkrEt �t|�t jd�|d< t �dt jd�|d< | �|� W d S t j yo } z|� d t|�t|�|t|�� W Y d }~d S d }~ww ) z�Create idmap entry :param samdb: Samba4 sam.ldb database :param sid: user/group sid :param xid: user/group id :param xid_type: type of id (ID_TYPE_UID/ID_TYPE_GID) :param logger: Logger object r: r; � uidNumber� posixAccount� objectClass� ID_TYPE_GIDr> � posixGroupz?Could not modify AD idmap entry for sid=%s, id=%s, type=%s (%s)N) r! r" r@ r& r$ r% r' � FLAG_MOD_ADDr) r* r+ )r, rA �xidrD r. r/ r6 r7 r7 r8 �add_ad_posix_idmap_entry� s2 � � �����rP c C s> d}| j dt|� d�}|jdkrd}|rbz)t�� }|d d |_t�t|�tjd�|d< t�|tjd �|d < | �|� W d S tj ya } z|� d t|�t|�|t|�� W Y d }~d S d }~ww z| � d t|� t|�d t |�|t|�d�� W d S tj y� } z|� dt|�t|�|t|�� W Y d }~d S d }~ww )z�Create idmap entry :param idmapdb: Samba4 IDMAP database :param sid: user/group sid :param xid: user/group id :param xid_type: type of id (ID_TYPE_UID/ID_TYPE_GID) :param logger: Logger object Fz objectSid=%s)� expression� Tr r$ � xidNumber�typez<Could not modify idmap entry for sid=%s, id=%s, type=%s (%s)NzCN=%s�sidMap)r$ �cnrK � objectSidrT rS z9Could not add idmap entry for sid=%s, id=%s, type=%s (%s)) �searchr& �countr! r" r$ r% r' r) r* r+ �addr ) �idmapdbrA rO rD r. �found�msgr/ r6 r7 r7 r8 �add_idmap_entry� sJ ���������r^ c C s z|� � }W n ty! } z|�dt|�� W Y d}~dS d}~ww t|�� |�� �}|}t�� }t� | d�|_ t� t|�tj d�|d< t� t|�tj d�|d< | � |� |�� D ])\}} |dkrdd} n|d krkd } n|�d |� qY|�| |�} t| t| �| | |� qYdS ) z�Import idmap data. :param idmapdb: Samba4 IDMAP database :param samba3_idmap: Samba3 IDMAP database to import from :param logger: Logger object z(Cannot open idmap database, Ignoring: %sNz CN=CONFIG� lowerBound� lowerboundrS �UIDr; �GIDrL z+Wrong type of entry in idmap (%s), Ignoring)� get_idmap_db�IOErrorr+ r& �max� get_user_hwm� get_group_hwmr! r" r@ r$ r% r' r) �ids�get_sidr^ r ) r[ �samba3r. � samba3_idmapr6 � currentxidr` r/ �id_typerO rD rA r7 r7 r8 � import_idmap� s8 �� � � �rn c C s� z| j dt|j� tjd�}d}W n& tjy7 } z|j\}}|tjkr'd}nt�||��W Y d}~nd}~ww |rN|�dt|j�|j |d d d � dS |j t j kre|j� � \}} |t�tj�kredS t�� } t�| d �| _| j�dd |j � | j�| �� � t�d tjd �| d < t�t|j�tjd �| d < t�|j tjd�| d< |jr�t�|jtjd�| d< |j t jks�|j t j kr�t�tt j �tjd�| d< z | j | dgd� W dS tjy� } z|�d|j t| �� W Y d} ~ dS d} ~ ww )z�Add or modify group from group mapping entry param samdb: Samba4 SAM database param groupmap: Groupmap entry param logger: Logger object r: )�base�scopeTFNzJGroup already exists sid=%s, groupname=%s existing_groupname=%s, Ignoring.r �sAMAccountNamez CN=X,CN=Users�CN�grouprK rW � description� groupTypezrelax:0)�controlsz Could not add group name=%s (%s)) rX r& rA r! � SCOPE_BASEr* �args�ERR_NO_SUCH_OBJECTr+ �nt_name� sid_name_user �SID_NAME_WKN_GRP�splitr r � SID_BUILTINr" r@ r$ � set_component�add_baser# r% rN r �comment�SID_NAME_ALIASr �!GTYPE_SECURITY_DOMAIN_LOCAL_GROUPrZ ) r, �groupmapr. r] r\ �e1�ecode�emsg� group_dom_sid�ridr/ r6 r7 r7 r8 � add_group_from_mapping_entry� s\ � ���� � � � �"��r� c C s� |D ]g}t �� }t �| dt|j� �|_t �dt|� t jd�|d< z| �|� W q t j yi } z3|j \}}|t j krF|� d||j|� n|t j krUtd||j|f ��td||j|f ��W Y d}~qd}~ww dS )z�Add user/member to group/alias param samdb: Samba4 SAM database param group: Groupmap object param members: List of member SIDs param logger: Logger object r: �memberr z/skipped re-adding member '%s' to group '%s': %szXCould not add member '%s' to group '%s' as either group or user record doesn't exist: %sz+Could not add member '%s' to group '%s': %sN)r! r" r@ r& rA r$ r% rN r) r* rx �ERR_ENTRY_ALREADY_EXISTS�debugry r ) r, rs �membersr. � member_sidr/ r6 r� r� r7 r7 r8 �add_users_to_group. s" ����r� c C s d}|� � D ]v\}\}}}|d7 }t|�dd�d d�}|dkr#d}n|d@ r3t|�dkr0d}nd}n t|�dkr<d}nd}|t�� krGd} nd} |d @ d ? } | �d t|�d�� |�d�d |�d�d d t|�t| �t| �t� |�d t|�|d� � q| �dddt|�d�� dS )z�Import settings from a Samba3 WINS database. :param samba4_winsdb: WINS database to import to :param samba3_winsdb: WINS database to import from r rR �#� � � � � �` � zname=%s,type=0x%s� winsRecord�0) r$ rT rB rK � recordType� recordState�nodeType� expireTime�isStatic� versionID�addressz cn=VERSION�VERSION�winsMaxVersion)r$ rV rK � maxVersionN) �itemsr( r} �len�timerZ �tupler& r! � timestring) � samba4_winsdb� samba3_winsdb� version_idrB �ttl�ips�nb_flagsrT �rType�rState�nTyper7 r7 r8 � import_winsG sD � �r� �HKLMc sh � fdd�}|� � D ]'}||�}|�|�D ]}||� q|�|��� D ] \}\}}|�|||� q#q dS )z�Import a Samba 3 registry database into the Samba 4 registry. :param samba4_registry: Samba 4 registry handle. :param samba3_regdb: Samba 3 registry database handle. c s0 | � dd�\}} t| }| �dd�} � �|| �S )N�/rR �\)r} �SAMBA3_PREDEF_NAMES�replace� create_key)�keypath� predef_name� predef_id��samba4_registryr7 r8 �ensure_key_exists� s z*import_registry.<locals>.ensure_key_existsN)�keys�subkeys�valuesr� � set_value) r� � samba3_regdbr� �key� key_handle�subkey� value_name� value_type� value_datar7 r� r8 �import_registry� s ��r� c C sx z|j |tjd| |gd�}W n tjy% } z td|||f ��d}~ww |jdkr3|d | d S | �d||� t�)z�Get posix attributes from a samba3 ldap backend :param ldbs: a list of ldb connection objects :param base_dn: the base_dn of the connection :param user: the user to get the attribute for :param attr: the attribute to be retrieved z%(&(objectClass=posixAccount)(uid=%s)))rp rQ �attrsz=Failed to retrieve attribute %s for user %s, the error is: %sNrR r z0LDAP entry for user %s contains more than one %s)rX r! � SCOPE_SUBTREEr* r rY �warning�KeyError)r. � ldb_object�base_dn�user�attrr] r6 r7 r7 r8 � get_posix_attr_from_ldap_backend� s � ��� r� Fc = s, | j �� }| j �d�}| j �d�} | j �d�} | j �d�du r&| j �dd� z| �� } W n tyE } z td| �d�t| �f ��d} ~ ww |sT| � � d }|� d |� | sl|d ks^|d krbtd ��|� � } |� d| � d} z| � | �}W n t y� d}Y nw | j �d��d�d �� dkr�| j �d�}| j �d�}| �|�}|du r�td��|�d��d�}d}nd}d}d}| �� t�| j �d�� | �� }zt�� � W n tjy� td| ��w z |�d | �}W n tjy� d}d}Y nw |j�� \}}|�d � |� � }|�d � |� � }i }|D ]�}|j �� \}} |� k�r,| | k�r,| d } |j t j!k�rcz|�"|j �} | |t|j �< W �q tj�yb } z|�#d |j$|j | � W Y d} ~ �qd} ~ ww |j t j%k�r�z|�&|j �} | |t|j �< W �q tj�y� } z|�#d |j$|j | � W Y d} ~ �qd} ~ ww |j t j'k�r�|j �� \} } | t(�)t(j*�k�r�|�#d!|j$� �qz|�"|j �} | |t|j �< W �q tj�y� } z|�#d |j$|j | � W Y d} ~ �qd} ~ ww |�#d"|j$|j |j � �q|�d#� |�+d �} i } i }!d}"| D �]�}#|�r||#d$ k�r�q |#d% }$|#d$ dk �r.|�d&|#d$ |$� �q |#d$ | k�r;|#d$ d } |�|$�}%|%j,t-j.t-j/B t-j0B t-j1B @ }&|&t-j0k�rl|�#d'|$dd(� � |%j,t-j0 @ t-j/B |%_,n�|&t-j1k�r|�#d)|$dd(� � �q |&t-j/k�r�|$d( d*k�r�|�#d+|$ � �q |&t-j.t-j/B k�r�|$d( d*k�r�|�#d,|$ � |%j,t-j. @ |%_,nR|&t-j.t-j0B k�r�|$d( d*k�r�|�#d-|$ � |%j,t-j. @ |%_,n2|&d k�r�|$d( d*k�r�|%j,t-j.B |%_,n |&t-j.k�s�|&t-j/k�r�ntd.|$|%j,t-j.t-j/t-j0t-j1f ��|%| |$< z |�2|%j�d |!|$< W n tj�y7 z t3�4|$�j5|!|$< W n t �y4 Y nw Y nw |"�sD|$�6� d/k�rD|$}"|$�6� d0k�rM|$}"z3|�7|%�}'|'D ](}t|�|v �rt|%j|t|� v�rr|t|� �8|%j� �qU|%jg|t|�< �qUW �q tj�y� } z|�#d1|$|%j| � W Y d} ~ �q d} ~ ww |�d2| � td3d4� |D ��}(td5d4� | D ��})|(�9|)�}*|*�r�|�d6� |*D ] }+|�d7|+ � �q�td8��td9d4� |D ��},t:|�t:|,�k�r�td:��t� fd;d4�| D ��}-t:| �t:|-�k�rtd<��|,�9|-�}.|.�r#|�d=� |.D ] }|�d7t|� � �qtd>��i }/i }0i }1|�rtt;� }2|2�<| j � |2�=|� |2�>|� | j �d��dd �d �d?�}3|3�� D ]!}4zt?|4|2d@�}5W n t@jA�yr } ztdA|4| f ��d} ~ ww |�dB� |�+d �} | D ]�}#|#d% }$|$|!�B� v �rz|�r�tC||5||$dC�|/|$< nt3�4|$�jD|/|$< W n t �y� Y n tE�y� Y nw z|�r�tC||5||$dD�|0|$< nt3�4|$�jF|0|$< W n t �y� Y n tE�y� Y nw z|�r�tC||5||$dE�|1|$< nt3�4|$�jG|1|$< W �q� t �y Y �q� tE�y Y �q�w �q�|�dF� d}6z| �H� }6W n t�y> } z|�#dGt| �� W Y d} ~ nd} ~ ww |d k�sK|d k�sKdH}|"�rTtIdIdJ�}7nd}7tJ||fi dK|�d| �dL|�dM� �dN| �dO|�dP|7�dQtKjL�dR| �6� �dS|�dT|�dUtM�dV|�dW|�dXd�dY|�dZd��}8|8�N|� |�d[� |6�r�tOt?|8jPjQ�|6� |�d\� tR|8jS||� |�d]� tT|8jU| |� tV�W� }9|9�X|8j jY� |9�d|8j �d�� |9�d^|8j �d^�� |9�d_|8j �d_�� t�Z|9�d��}:|8jS�[� |�d`� z4|�da� |D ]*};|;j\d(k�r-t]|8jS|;|� t^|8jS|;j |;j\db|� t_|8jS|;j |;j$|�6� db|dc� �qW n |8jS�`� � |�dd� |8jS�a� |�de� |�df� | D ]�}$|$�6� d0k�r}| |$ jt)t� �dg �k�r}|�dh| |$ jt)t� �dg �f � tdi��|$�6� d/k�r�| |$ jt)t� �dg �k�r�|�#dj� n|�#dk� |:�b| |$ � |$|!v �r�t^|8jS| |$ j|!|$ dl|� |$|/v �r�|/|$ du�r�|$|0v �r�|0|$ du�r�|$|1v �r�|1|$ du�r�t_|8jS| |$ j|$|�6� dl|/|$ |0|$ |1|$ |dm� �qP|�dn� |8jS�[� z |D ]};t|;j �|v �rtc|8jS|;|t|;j � |� �qW n |8jS�`� � |�do� |8jS�a� |"�rm|�dp� |:�d0�}<| |" jd|<_d| |" je�rP| |" je|<_e| |" jf|<_f| |" jg�rb| |" jg|<_g|:�h|<� |�dq|"� |8jdrk�r�ti|8jS|8jPjj|8jPjk|8jPjl|8jPjmt(�)|8jn�|8jojp|8jojq|8j |� dS dS )sz�Upgrade from samba3 database to samba4 AD database :param samba3: samba3 object :param logger: Logger object :param targetdir: samba4 database directory :param session_info: Session information � workgroup�realmz netbios namezldapsam:trustedN�yesz�Could not open '%s', the Samba3 secrets database: %s. Perhaps you specified the incorrect smb.conf, --testparm or --dbdir option?z secrets.tdbr z6No workgroup specified in smb.conf file, assuming '%s'�ROLE_DOMAIN_BDC�ROLE_DOMAIN_PDCz�No realm specified in smb.conf file and being a DC. That upgrade path doesn't work! Please add a 'realm' directive to your old smb.conf to let us know which one you want to use (it is the DNS name of the AD domain you wish to create.z2No realm specified in smb.conf file, assuming '%s'i� zpassdb backend�:�ldapsamz ldap suffixz ldap admin dnz�ldapsam passdb backend detected but no LDAP Bind PW found in secrets.tdb for user %s. Please point this tool at the secrets.tdb that was used by the previous installation.zutf-8� TFz private dirz(Can't find domain sid for '%s', Exiting.z%s$zExporting account policyzExporting groupsrR z4Ignoring group '%s' %s listed but then not found: %szOIgnoring 'well known' group '%s' (should already be in AD, and have no members)z+Ignoring group '%s' %s with sid_name_use=%dzExporting usersr� � account_namez- Skipping wellknown rid=%d (for username=%s)zk Demoting BDC account trust for %s, this DC must be elevated to an AD DC using 'samba-tool domain dcpromo'r zZ Skipping inter-domain trust from domain %s, this trust must be re-created as an AD trust�$z� Skipping account %s that has ACB_WSTRUST (W) set but does not end in $. This account can not have worked, and is probably left over from a misconfiguration.z� Fixing account %s which had both ACB_NORMAL (U) and ACB_WSTRUST (W) set. Account will be marked as ACB_WSTRUST (W), i.e. as a domain memberz� Fixing account %s which had both ACB_NORMAL (U) and ACB_SVRTRUST (S) set. Account will be marked as ACB_WSTRUST (S), i.e. as a domain membera Failed to upgrade due to invalid account %s, account control flags 0x%08X must have exactly one of ACB_NORMAL (N, 0x%08X), ACB_WSTRUST (W 0x%08X), ACB_SVRTRUST (S 0x%08X) or ACB_DOMTRUST (D 0x%08X). Please fix this account before attempting to upgrade again �root� administratorz)Ignoring group memberships of '%s' %s: %sz Next rid = %dc S s g | ]}|j �qS r7 )rz ��.0�gr7 r7 r8 � <listcomp>� s z'upgrade_from_samba3.<locals>.<listcomp>c S s g | ]}|d �qS )r� r7 �r� �ur7 r7 r8 r� � s z4Following names are both user names and group names:z %sz5Please remove common user/group names before upgrade.c S s g | ]}t |j��qS r7 )r& rA r� r7 r7 r8 r� � s z9Please remove duplicate group sid entries before upgrade.c s g | ] }d � |d f �qS )z%s-%ur� r7 r� �� domainsidr7 r8 r� � s z8Please remove duplicate user sid entries before upgrade.z,Following sids are both user and group sids:z3Please remove duplicate sid entries before upgrade.�")� credentialsz=Could not open ldb connection to %s, the error message is: %szExporting posix attributes� homeDirectoryr= r> zReading WINS databasez'Cannot open wins database, Ignoring: %s�NONE� � � targetdir�domainr� �next_rid�dc_rid� adminpass�dom_for_fun_level�hostname� machinepass� serverrole� samdb_fill�useeadb� dns_backend� use_rfc2307� use_ntvfs�skip_sysvolaclzImporting WINS databasezImporting Account policyzImporting idmap databasezstate directoryzlock directoryz Adding groupszImporting groupsrL )r, rA rB rC rD r. z+Committing 'add groups' transaction to diskz Adding userszImporting usersz-500zPUser 'Administrator' in your existing directory has SID %s, expected it to be %szPUser 'Administrator' in your existing directory does not have SID ending in -500z,User root has been replaced by AdministratorzbUser root has been kept in the directory, it should be removed in favour of the Administrator userr; ) r, rA rB rC rD rE rF rG r. zAdding users to groupsz4Committing 'add users to groups' transaction to diskz"Setting password for administratorz<Administrator password has been set to password of user '%s'z"active directory domain controller)r�lp� server_role�get�set�get_secrets_dbrd r �privatedir_pathr& �domainsr� �upper�get_machine_passwordr� r} �strip�get_ldap_bind_pw�decode�closer �set_secrets_dir� get_sam_db�get_global_sam_sid�error� Exception� getsampwnam�user_sid�info�get_account_policy�enum_group_mappingrA r{ r r� � enum_aliasmemr+ rz �SID_NAME_DOM_GRP�enum_group_membersr| r r r~ � search_users� acct_ctrlr � ACB_NORMAL� ACB_WSTRUST� ACB_SVRTRUST� ACB_DOMTRUST� sid_to_id�pwd�getpwnam�pw_uid�lower�enum_group_memberships�append� intersectionr� r �guess� set_bind_dn� set_passwordr r! r* r� r� �pw_dir� IndexError�pw_shell�pw_gid� get_wins_dbr r r �DS_DOMAIN_FUNCTION_2003r � report_loggerr� �paths�winsdbr9 r, rn �idmap�s3param� get_context�load� configfile�PDB�transaction_start�gidr� rP rH �transaction_cancel�transaction_commit�add_sam_accountr� � nt_passwd� lanman_passwd�pass_last_set_time� pw_history�update_sam_accountr �netlogon�sysvol�root_uid�root_gidr� �names� dnsdomain�domaindn)=rj r. r� � session_infor� r� r� r� � domainnamer� � netbiosname� secrets_dbr6 r� r� r� �ldapuser�ldappass�ldap�s3db� machineacct� machinerid� machinesidr- � grouplist� groupmembersrs rA r� r� r� �userlist�userdata�uids� admin_user�entry�usernamer� � acct_type�group_memberships� group_names� user_names� common_namesrB � group_sids� user_sids� common_sids�homes�shells�pgids�creds�urls�urlr� r� r� �result� new_lp_ctx� s4_passdbr� �admin_userdatar7 r� r8 �upgrade_from_samba3� s �� �� � �� ��� ���� ��� � ��� ����� ����� �� ������� �� ����������������� �� $ 2� �� ��rn )NNN)NFNF).�__doc__� __docformat__r! r� r �sambar r � samba.paramr �samba.provisionr r r �samba.provision.commonr � samba.samba3r r r3 � samba.dcerpcr r r �samba.dcerpc.securityr �samba.credentialsr r � samba.ndrr r r r9 rH rP r^ rn r� r� r� �HKEY_LOCAL_MACHINEr� r� r� rn r7 r7 r7 r8 �<module> sF 8 �# +'85��