g4SSKrSSKJr SSKJr SSKJr SSKJ r J r J r J r "SS\ 5r "SS\ 5r"S S \ 5r"S S \5r"S S\ 5r"SS\ 5rg)N)system_session)SamDB)Command CommandError SuperCommandOptionc \rSrSrSrSr\R\R\RS.r \ "SSS\ SS S 9/r SS jrS rg )cmd_forest_showzDisplay forest settings. These settings control the behaviour of all domain controllers in this forest. This displays those settings from the replicated configuration partition. z%prog [options] sambaopts versionoptscredopts-H--URL%LDB URL for database or target serverURLHhelptypemetavardestNc UR5nURU5n[U[5XeS9nUR 5nUR <SU<3n UR U [RURS9n U Sn URRSU -5 URH,n URRU <SXS<S35 M. g![a" URRSU -5 M\f=f) Nurl session_info credentialslp,)basescopeattrsrzSettings for %s :  z%s: ) get_loadparmget_credentialsrr domain_dnobjectdnsearchldb SCOPE_BASE attributesoutfwriteKeyError) selfrrr rrcredssamdbr( object_dnres res_objectattrs 5/usr/lib/python3/dist-packages/samba/netcmd/forest.pyruncmd_forest_show.run4s  # # %((,!.*:"'0OO% #}}i8 ll !%2 V  +i78OOD ; dJ4DQ4G HI$ ;  2T 9: ;s4(C!!(D  D NNNN)__name__ __module__ __qualname____firstlineno____doc__synopsisoptions SambaOptionsVersionOptionsCredentialsOptionstakes_optiongroupsrstr takes_optionsr9__static_attributes__r;r8r r sW!H))--.. tW#JS 2M ;rKr c \rSrSrSrSrSrSr\R\R\RS.r \ "SSS\S S S 9/rS /rSS jrSrg)cmd_forest_setOzIModify forest settings. This will alter the setting specified to value. Nz%prog value [options]r rrrrrrvaluecUR5nURU5n[U[5XvS9nUR 5n UR <SU <3n [ R"5n [ R"X5U l [ R"U[ RUR5XR'URU 5 URRSUR<SU<S35 g)Nrr zset r$r%)r&r'rrr(r)r+MessageDndnMessageElementFLAG_MOD_REPLACE attributemodifyr.r/) r1rOrrr rrr2r3r(r4ms r8r9cmd_forest_set.rungs  # # %((,!.*:"'0OO% #}}i8  KKMvve'.. 3''9..  Q $..%@ArKr;r<)r=r>r?r@rArVr)rBrCrDrErFrGrrHrI takes_argsr9rJr;rKr8rMrMOsk IH&H))--.. tW#JS 2M JBrKrMc"\rSrSrSrSrS/rSrg)!cmd_forest_show_directory_service}zDisplay Directory Service settings for the forest. These settings control how the Directory Service behaves on all domain controllers in the forest. ?CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration dsheuristicsr;N)r=r>r?r@rAr)r-rJr;rKr8r\r\}s QH !JrKr\c \rSrSrSrSrSrSrg)-cmd_forest_set_directory_service_dsheuristicsaQSet the value of dsheuristics on the Directory Service. This value alters the behaviour of the Directory Service on all domain controllers in the forest. Documentation related to this parameter can be found here: https://msdn.microsoft.com/en-us/library/cc223560.aspx In summary each "character" of the number-string, controls a setting. A common setting is to set the value "2" in the 7th character. This controls anonymous search behaviour. Example: dsheuristics 0000002 This would allow anonymous LDAP searches to the domain (you may still need to alter access controls to allow this). r^r_r;N)r=r>r?r@rAr)rVrJr;rKr8rarasQHIrKracD\rSrSrSr0r\"5\S'\"5\S'Srg)cmd_forest_directory_servicez*Forest configuration partition management.showr_r;N) r=r>r?r@rA subcommandsr\rarJr;rKr8rdrds$4K;=K"O"QKrKrdc0\rSrSrSr0r\"5\S'Srg) cmd_forestzForest management.directory_servicer;N)r=r>r?r@rArgrdrJr;rKr8ririsK'C'EK#$rKri)r+ samba.getoptgetoptrC samba.authr samba.samdbr samba.netcmdrrrrr rMr\rardrir;rKr8rqsm& %-;g-;`)BW)B\""N(R<RFFrK