cۖiSSKJr SSKrSSKrSSKJr SSKrSSKJ r SSK J r J r J r Jr SSKJr SSKJr SSKJrJrJr SS KJrJr SS KJr SS KJr SS KJrJrJ r J!r!J"r" SS K#J$r$ SSKJ%r% Sr&Sr'Sr(Sr)Sr*"SS\ 5r+"SS\ 5r,"SS\ 5r-"SS\ 5r."SS\ 5r/"SS\ 5r0"S S!\ 5r1"S"S#\5r2g)$N)common)system_session)Command CommandErrorOption SuperCommand) attr_default)SamDB) drs_utils nttime2stringdsdb)drsuapimisc) join_clone)colour)get_partition_mapsget_utdv_edgesget_utdv_distancesget_utdv_summaryget_kcc_and_dsas) get_string)get_default_backend_storec[R"URURUR5uUlUlUlg![an[SUR-U5eSnAff=f)z'make a DRSUAPI connection to the serverzDRS connection to %s failedN) r drsuapi_connectserverlpcredsrdrsuapi_handlebind_supported_extensions Exceptionrctxes 2/usr/lib/python3/dist-packages/samba/netcmd/drs.pyrr4suJKTKdKdeheoeoqtqwqwy|zCzCLDHc(#*G J83::EqIIJsA A A4A//A4c[SUR-[5URURS9Ulg![ an[SUR-U5eSnAff=f)z$make a ldap connection to the server ldap://%surl session_info credentialsrzLDAP connection to %s failedN)r rrrrsamdbr!rr"s r% samdb_connectr-<s]KkCJJ6'5'7&)iiCFF<  K9CJJFJJKs:= A%A  A%c$UupUS:XagSX4-$)z*return "was successful" or an error stringrzwas successfulzfailed, result %u (%s))werrecodeestrings r% drs_errmsgr3Fs"U z #u&6 66cURS5nUSS:wdUSS:wd USS:wa[SU-5eUS RS 5S nUS RS 5S nX24$) z+parse a NTDS DN returning a site and server,rzCN=NTDS Settingsz CN=ServerszCN=Siteszbad NTDS DN %sr=)split RuntimeError)ntds_dnarsites r%drs_parse_ntds_dnr@Nsx cAt!!QqT\%9QqTZ=O+g566 qTZZ_Q F qTZZ_Q D >r4classicc ,\rSrSrSrSr\R\R\RS.r \ "SSSSS S 9\ "S S SSS S 9\ "SSSSSS 9\ "SSSSSS9\ "SSSSS\ S9\ "SSSSS9/r S/rSrS rS!rS"S"S"S"\ S#4S$jrS%rS&rS'rS(rS)rS*rS+rS,rg")-cmd_drs_showrepl[zShow replication status.%prog [] [options] sambaopts versionoptscredopts--jsonz"replication details in JSON formatformat store_constjson)helpdestactionconstz --summaryz5summarize overall DRS health as seen from this serversummaryz--pull-summaryz:Have we successfully replicated from all relevant servers? pull_summaryz--notify-summarynotify_summaryzsHave we successfully notified all relevant servers of local changes, and did they say they successfully replicated?)rPrQrOrNz --classiczprint local replication detailsrA)rNrOrPrQdefaultz-vz --verbosez Be verbose store_truerNrPDC?c \[UR5nURU[UR5[ UR 5UR[UR5[UR5SS.nURRSU-[R/S9 [#UR5upxU<SU<3US 'U$![Ra2nURupVU[R :Xa SUS'SnANfeSnAff=f![$a U$f=f) z8Convert an ldb neighbour object into a python dictionaryF)NC dnDSA objectGUIDlast attempt timelast attempt messageconsecutive failures last successNTDS DN is deletedz basescopeattrsTraN\DSA)strsource_dsa_obj_guidnaming_context_dnr last_attemptr3result_last_attemptconsecutive_sync_failures last_successsource_dsa_obj_dnr,searchldb SCOPE_BASELdbErrorargsERR_NO_SUCH_OBJECTr@r<) selfndsa_objectguiddr$errno_r?rs r%parse_neighbour cmd_drs_showrepl.parse_neighbour|sQ223((,!.q~~!>$.q/D/D$E$%$?$?)!..91../   JJ  ;#?$'NN$&  ( .q/B/BCNT#'0AeH|| JU..."&,     s0,C/#DD('DDD D+*D+cURSUS-5 SU;aURSUS-5 OURSUS-5 URSUS-5 URS US <S US <35 URS US-5 URSUS-5 URS5 g)z&print one set of neighbour informationz%srZrgz %s via RPCz NTDS DN: %sr`z DSA object GUID: %sr[z Last attempt @ r\ r]z %u consecutive failure(s).r^z Last success @ %sr_N)message)rvrys r%print_neighbour cmd_drs_showrepl.print_neighbours TAgJ&' A: LL!E(2 3 LL1Y<7 8 .3C1DDE 15H3I345K3LN O 5-./ 0 ,q/@@A Rr4c0[R"5nXlURRURSU5upURVs/sHoPRU5PM nnU$![ an[ SU-U5eSnAff=fs snf)Nrz"DsReplicaGetInfo of type %u failed) rDsReplicaGetInfoRequest1 info_typeDsReplicaGetInforr!rarrayr|)rvrreq1infor$rwrepss r%get_neighbourscmd_drs_showrepl.get_neighbourss//1" T $ = =##Q!. Y 26<A$$Q'<  TCiOQRS S T=s)A2B2 B<B  BNFcUR5UlUc [R"UR5nXlUR URSS9UlX`lURURURURURS.RU5nUc[SU-5eU"5$)NTfallback_machine)rRrTrSrMrAzunknown showrepl format %s) get_loadparmrrnetcmd_dnsnamerget_credentialsrverbosesummary_outputnotify_summary_outputpull_summary_output json_outputclassic_outputgetr)rvDCrGrIrHrKroutput_functions r%runcmd_drs_showrepl.runs((* :&&tww/B --dgg-M  **"88 44$$**  #f+   ";fDE E  r4cnUR5nUS US [R"XRSS9 g)Nr?rr7indent)get_local_repl_datarMdumpoutf)rvdatas r%rcmd_drs_showrepl.json_outputs0'') L N $ !,r4c/n/nUR5nUS:wa=USH4nUS(aMUSS:wd USS:XdM#URU5 M6 US:wa=USH4nUS(aMUSS:wd USS:XdM#URU5 M6 U(dU(aUR[R"S 55 U(a?UR[R"S 55 UHnUR U5 M U(a?UR[R"S 55 UHnUR U5 M g UR[R "S 55 g)z[Print a short message if every seems fine, but print details of any links that seem broken.rSrepsTorar^rr_rTrepsFromzThere are failing connectionszFailing outbound connections:zFailing inbound connection:rz [ALL GOOD]N)rappendrrc_REDrc_GREEN)rv typeof_outputfailing_repstofailing_repsfrom local_datareps r%summary_output_handler'cmd_drs_showrepl.summary_output_handlersN--/ N *!(+|$-.!3s>7Ja7O"))#. , , ,!*-|$-.!3s>7Ja7O$++C0 . - LL&EF G V\\*IJK)C((-* V\\*GHI+C((-, V^^L12r4c$URS5$)NrRrrvs r%rcmd_drs_showrepl.summary_outputs**955r4c$URS5$)NrTrrs r%r&cmd_drs_showrepl.notify_summary_outputs**+;<::r4c [U5 [U5 URR5n[ U5up#URR U[ R/SQS9n[[USSS55[URRSUSSS55[URRSUSSS55S.nURR USS 9nUR[R 5nUR[R"5n /n UGH2n [%U S S5R'S 5upn[%U S 5[%U S S5[[U SS55[[U S S55R)5S:HS.nU R+U5 URR U[ RS/S9n[%USSS5US'/US'U R7S/5HBn[%U5R9S5nUSR+US[US545 MD GM5 UUU U UUS.$![an[SU-5eSnAff=f![ R,a2nUR.unnU[ R0:XaSUS'SnANSnAf[2[44a Nf=f)N)options objectGUID invocationIdrbzFailed to search NTDS DN %srrrrz(objectClass=nTDSConnection))rc expression fromServerr6nameenabledConnectionTRUE)r remote DNrenabled dnsHostNamedns nameTra replicates NCzmS-DS-ReplicatesNCReason:r:r7)dsarrNTDSConnectionsr?r)rr-r,get_dsServiceNamer@rprqrrr!rintr rschema_format_valuerr!DRSUAPI_DS_REPLICA_INFO_NEIGHBORSDRSUAPI_DS_REPLICA_INFO_REPSTOrh partitionupperrrsrtruKeyError IndexErrorrr;)rvr=r?rntdsr$ dsa_detailsconnrepsfromrepsto conn_detailscc_rdnsep c_server_dnry c_server_resrzr{rr>s r%r$cmd_drs_showrepl.get_local_repl_datasd**..0*73 H::$$'Ox$yD <QA>?$TZZ%C%Cd1gl3A6&89&tzz'E'Ed1gn5a8(:;  zz  g:X Y&&w'P'PQ$$W%K%KL A&)!L/!*<&=&G&G&L #E AfI <!34|Ay!<=&|A7J)/(1227%'VD A    " #zz00k7:~~8E 1 H !$LOM$B1$E F* "$Ao UU5r:FLL%/"))1Q4QqT*;<;1: +   Y H!"#O"4JBLL!7"!<=LL!5!>?$"4A.77 LLa8%#5 HI)r4)rrrr)__name__ __module__ __qualname____firstlineno____doc__synopsisr SambaOptionsVersionOptionsCredentialsOptionstakes_optiongroupsrDEFAULT_SHOWREPL_FORMAT takes_options takes_argsr|rrrrrrrrrr__static_attributes__r/r4r%rCrC[s"'H))--.. xB]& B{#5]) E (D]. J !-%H# % {!B]). 0 t[|LI#M(J>  Tt*!.- #3J6=;= ~6Jr4rCcx\rSrSrSrSr\R\R\RS.r S/r S Sjr Sr g) cmd_drs_kcciyz)Trigger knowledge consistency center run.rErFrXNcUR5UlUc [R"UR5nXlUR URSS9Ul[U5 [R"5nURRURSU5 URSU-5 g![an[SU5eSnAff=f)NTrrzDsExecuteKCC failedz#Consistency check on %s successful.)rrrrrrrrr DsExecuteKCC1 DsExecuteKCCrr!rr)rvrrGrIrHrr$s r%rcmd_drs_kcc.runs((* :&&tww/B --dgg-M $$& 9 LL % %d&9&91d C :R?@ 94a8 8 9s?'B;; C CCrrrNNNNrrrrrrrrrrrrrrr/r4r%rrysD3'H))--.. J%)'+Ar4rc \rSrSrSrSr\R\R\RS.r /SQr \ "SSSS 9\ "S S SS 9\ "S S SS 9\ "SSSS 9\ "SSSS 9\ "SSSS 9\ "SSSS 9\ "SSSS 9/r SSjrSSjrSrg)cmd_drs_replicateiz+Replicate a naming context between two DCs.z/%prog [options]rF)DEST_DC SOURCE_DCNCz --add-refz&use ADD_REF to add to repsTo on sourcerVrWz --sync-forcedz,use SYNC_FORCED to force inbound replicationz --sync-allz&use SYNC_ALL to replicate from all DCsz --full-synczresync all objectsz--localzIpull changes directly into the local database (destination DC is ignored)z--local-onlinez_pull changes into the local database (destination DC is ignored) as a normal online replicationz --async-opz use ASYNC_OP for the replicationz--single-objectz\Replicate only the object specified, instead of the whole Naming Context (only with --local)c Xl[U5 [[5SURUR SS9Ul[SUR-[5URUR S9UlUR RS[RS/S9nUSSSUl UR RUR[RS /S9n[R"URRS USS S55Ul[R"URR!55n[R"UR R!55nURn ["R$n U(a["R&n S nURR)5 [*R,"S UR-UR URUR U5n UR R/5n U R1UUU U UU US 9upURR75 U(a,UR9SXUUR R:4-5 gUR9SXUUR R:4-5 g![2an[5S U-U5eSnAff=f)z+replicate from a source DC to the local SAMNr)r*r)r+rflagsr'r(r dsServiceNamerbrTzncacn_ip_tcp:%s[seal])rodc full_syncexop sync_forcedzError replicating DN %szMFull Replication of all %d objects and %d links from %s to %s was successful.zPIncremental replication of %d objects and %d links from %s to %s was successful.)rrr rrr local_samdbr,rprqrrr=rGUIDr ntds_guidget_invocation_idrDRSUAPI_EXOP_NONEDRSUAPI_EXOP_REPL_OBJtransaction_startr drs_Replicateam_rodc replicater!rtransaction_commitrr))rvrrr single_objectrressource_dsa_invocation_iddest_dsa_invocation_iddestination_dsa_guidrreplr num_objects num_linksr$s r%drs_local_replicate%cmd_drs_replicate.drs_local_replicates  !n.>D-1ZZDGG'(*{T[[8(6(8'+zzdgg? %%2S^^-<,=&?1vo.q1 %%4<'L'+ww'+zz43C3C'=?'') B'+~~b6N6J;?@I;?BM (6(O $[ %%'  LL9%)**..00 1 LL9%)**..00 1 B82=qA A Bs1K K KKNc XlU R5UlU RURSS9UlU(aUR X#UU US9 gU (a5[ R "SURS9n[R"5nO#[U5 UR nURnU (dSUl [U5 URRURR5S[ R""U5<S[ R""U5<S 3/S 9n[%U5S :Xa['S U-5eUS S nURRU[ R(SSS/S9n[%U5S :Xa['SU-5eUS SS n[+[-USS 55nS nU[.R0-(dU[ R2-nU(aU[ R4-nU(aU[ R6-nU(aU[ R8-nU(aU[ R:-nU (aU[ R<-n[>R@"UUUUU5 U (aURESU<SU<S35 gURESU<SU<S35 g![>RBan['SU5eSnAff=f)NTr)rr"rz irpc:dreplsrv)lp_ctxi,z!(&(objectCategory=server)(|(name=z)(dNSHostName=z))))rcrrerzFailed to find source DC %sdnz5(|(objectCategory=nTDSDSA)(objectCategory=nTDSDSARO))rr)rcrdrrez Failed to find source NTDS DN %szDsReplicaSync failedzReplicate from z to z was started.z was successful.)#rrrrrr*rr policy_handlerrrequest_timeoutr-r,rpget_config_basednrq binary_encodelenrSCOPE_ONELEVELrr r$DS_NTDSDSA_OPT_DISABLE_OUTBOUND_REPLDRSUAPI_DRS_WRIT_REPDRSUAPI_DRS_ADD_REFDRSUAPI_DRS_SYNC_FORCEDDRSUAPI_DRS_SYNC_ALLDRSUAPI_DRS_FULL_SYNC_NOWDRSUAPI_DRS_ASYNC_OPr sendDsReplicaSync drsExceptionr)rvr rradd_refrsync_allrlocal local_onlineasync_opr"rGrIrH server_bindserver_bind_handlemsg server_dnsource_dsa_guid dsa_options req_optionsestrs r%rcmd_drs_replicate.runs  ((*--dgg-M   $ $Yi3@1< % >  !///$''JK!%!3!3!5  D !,,K!%!4!4 *0K 'djjTZZ%A%A%C   i (   i (,*')  * s8q=!E!E 3sCD ) &)<)<<= % (<(<<= dii!5!5 6 6 LL*TYY-E-EE F 7r4rr r r/r4r%rMrM@sE,'H))--.. J%)'+QGr4rMc\rSrSrSrSr\R\R\RS.r S/r \ "SSSS S 9/r S S S SS.rSSjrSrg)cmd_drs_optionsizJQuery or change 'options' for NTDS Settings object of a Domain Controller.rErFrXz --dsa-optionzDSA option to enable/disablerhza{+|-}IS_GC | {+|-}DISABLE_INBOUND_REPL | {+|-}DISABLE_OUTBOUND_REPL | {+|-}DISABLE_NTDSCONN_XLATE)rNtypemetavarrr7r8)IS_GCDISABLE_INBOUND_REPLDISABLE_OUTBOUND_REPLDISABLE_NTDSCONN_XLATENcUR5UlUc [R"UR5nXlUR URSS9Ul[U5 URR5nURRU[RS/S9n[USSS5nURV s/sHoRU U-(dMU PM n n URSSR!U 5-5 U(GaTUSSS ;a[#S U-5eUSSn XRR%5;a[#S U-5eUSSS :XaXRU -nOXRU )-n[R&"5n [R("URU5U l[R,"[/U5[R0S5U S'URR3U 5 URV s/sHoRU U-(dMU PM n n URS SR!U 5-5 ggs sn fs sn f) NTrrrbrzCurrent DSA options: z, r)+-zUnknown option %srzNew DSA options: )rrrrrrrr-r,rrprqrrr option_maprjoinrkeysMessageDnr.MessageElementrhFLAG_MOD_REPLACEmodify) rvr dsa_optionrGrIrHr=r#dsa_optsxcur_optsflagms r%rcmd_drs_options.runs((* :&&tww/B --dgg-M d**..0jjWCNN9+Vs1vi(+, $P!//!2Dx2OAP ,tyy/BBC "1~Z/"#6#CDDab>D??//11"#6#CDD"1~$OOD11__T222 A66$**g.AD--c(mS=Q=QS\]AiL JJ  a #'??T?aooa6H86S?HT LL,tyy/BB C#  Q(UsI5-I5*I:I:r)NNNNN)rrrrrrrrrrrrrrrrrr/r4r%rrswT'H))--.. J ~$Bz |M &*4+5,68J '+7;%Dr4rc \rSrSrSrSr\R\R\RS.r \ "SS\ S9\ "SS \ S9\ "S S S S S9\ "SSS S9\ "SSSSS/S\ "5-S9\ "SSSSS9/rS/rS!SjrS rg)"cmd_drs_clone_dc_databaseiz9Replicate an initial clone of domain, but DO NOT JOIN it.z%prog [options]rFz--serverz DC to join)rNrz --targetdirz#where to store provision (required)z-qz--quietzBe quietrVrWz--include-secretszAlso replicate secret valuesz--backend-storechoice BACKENDSTOREtdbmdbz7Specify the database backend to be used (default is %s))rrchoicesrNz--backend-store-sizebytesSIZEzeSpecify the size of the backend database, currentlyonly supported by lmdb backends (default is 8 Gb).)rrrNdomainNc UR5n URU 5n URXS9nUc [S5e[ XXUSXiU U S9 g)N)rquietz$--targetdir option must be specifiedSAMBA_INTERNAL) loggerrrrr dns_backend targetdirinclude_secrets backend_storebackend_store_size)rr get_loggerrr)rvrrGrIrHrrrrrrrrrrs r%rcmd_drs_clone_dc_database.runs_ # # %((,>  EF F&u .>&!.&8  :r4r/) NNNNNFFFNN)rrrrrrrrrrrrrhrrrrrr/r4r%rrsC,H))--.. z 37}#HsStYZ E")GP\] xu~&(A(CD E %GVI J MJ37598=37:r4rc \rSrSrSrSr\R\R\RS.r \ "SSSSS S 9\ "S S S S9\ "SSSS9\ "SSSS9\ "SSSS9\ "SSSS9/r Sr SrSSjrSrg)cmd_drs_uptodatenessizShow uptodateness statusz%prog [options]rFz-Hz--URLURLHz%LDB URL for database or target server)rrOrNz-pz --partitionzrestrict to this partition)rNrJrVzPrint data in json format)rPrNz --maximumz#Print maximum out-of-date-ness onlyz--medianz"Print median out-of-date-ness onlyz--fullz Print full out-of-date-ness datac,[R"USS9$)Nr7r)rMdumps)rvpartitions_summariess r%format_as_json#cmd_drs_uptodateness.format_as_json(szz.q99r4c/nUR5HZup4UR5VVs/sHupVU<SU<3PM nnnU<SSSRU5<3nURU5 M\ SRU5$s snnf)Nr15rr )itemsrr) rvrlines part_namerRkvrlines r%format_as_text#cmd_drs_uptodateness.format_as_text+st"6"<"<"> I3:==?C?41A&?EC!*DIIe,<=D LL #?yyDsBNc UR5n URU SS9n [XU 5upURn[ U5unnU(aUU;a UUnUU0nO[ SU-5e/nU(aUR S5 U(aUR S5 0n0nUR5H3unn[XUX5n[UU5n[UUS9nUUU'UUU'M5 U(aURU5nO*U(aURU5nOURU5n[UURS9 g)NTrzunknown partition %smaximummedian)filters)file)rrrr,rrrrrrrrrprintr)rvrrrMrrfullrGrIrHrrrr local_kccdsasr,short_partitionsr{part_dnrpartitions_distancesrr utdv_edges distancesrRoutputs r%rcmd_drs_uptodateness.run3sL  # # %((d(C*1%8 07! ,,*95$-w#7 "#9I#EFF  NN9 %  NN8 $!!"2"8"8": Iw' "LJ*:tF,,-AB,,-AB f499%r4r/) NNFFFFNNNFF)rrrrrrrrrrrrrrrrrr/r4r%rrs" H))--.. tWe#; =t]0 2x / 1{<9 ;z,8 :x 6 8 M: %):?7;!&*&r4rc\rSrSrSr0r\"5\S'\"5\S'\"5\S'\ "5\S'\ "5\S'\ "5\S'\ "5\S 'S r g ) cmd_drsi`z0Directory Replication Services (DRS) management.bindkccr showreplrzclone-dc-database uptodatenessr/N)rrrrr subcommandsrMrr rCrrrrr/r4r%rr`sd:K&.K$K02K .0K ,.K '@'BK#$"6"8Kr4r)3 samba.getoptgetoptrrqloggingrrrM samba.authr samba.netcmdrrrr samba.netcmd.commonr samba.samdbr sambar r r samba.dcerpcrr samba.joinrrsamba.uptodatenessrrrrr samba.commonrrrr-r3r@rrCrr rMrrrrr/r4r%rs,  % -00&!$1JK7$[Jw[J|A'ABc[c[L^G7^GB<Dg<D~+:+:\O&7O&d 9l 9r4