gWSSKrSSKrSSKrSSKJr SSKJrJrJr SSK J r SSK J r J r SSKJr "SS\5r"S S \5r\"S \R*R-555r"S S \5r"SS\5r"SS\5r"SS\5r"SS\5r"SS\5r"SS\5r"SS\5r"SS\5r "SS\5r!"S S!\5r"S"r#S#r$S$r%g)%N)dsdb)drsblobsdrsuapimisc)dsdb_Dn) ndr_unpackndr_pack)Counterc\rSrSrSrg)KCCError%N)__name__ __module__ __qualname____firstlineno____static_attributes__r5/usr/lib/python3/dist-packages/samba/kcc/kcc_utils.pyr r %srr c2\rSrSr\"SS5urrrrr Sr g)NCType)rrN) rrrrrangeunknownschemadomainconfig applicationrrrrrr)s5:1a[2Wfffkrrc#B# UHupUSSS:wdMX!4v M g7f)N__r).0kvs r r&.s$N%z nc_sid=z nc_type= ()) __class__rr+strr,r- nctype_lutr.r0texts r__str__NamingContext.__str__Bs//1 4==01#dll"334 ;; //D00Dz$,,/G/3||== rcSS/nURUR[RUS9nUSnSU;a1[R"URSUSS55Ul SU;a USSUl URceg![Ra1nUR upV[ SUR<SU<S35eSnAff=f)N objectGUID objectSidbasescopeattrszUnable to find naming context () - (r7r) searchr+ldb SCOPE_BASELdbErrorargsr rGUIDschema_format_valuer,r-)r0samdbrEreseenumestrmsgs rload_ncNamingContext.load_ncQs 2,,DMM%(^^5BC!f 3 99U%>%>|%(%6q%9&;> )  # #E * *r)r+r,r-r.N) rrrr__doc__r1r=rTrXr]rerrrrr(r(1s% & ((- ..+rr(c\rSrSrSrSrSrSSjrSrSr Sr S r S r S r SS jrS rSrSrSrSrSrSSjrSrg) NCReplicazNaming context replica that is relative to a specific DSA. This is a more specific form of NamingContext class (inheriting from that class) and it identifies unique attributes of the DSA's replica for a NC. cURUlURUlSUlSUlSUlSUlSUl/Ul /Ul SUl [RX5 g)zwInstantiate a Naming Context Replica :param dsa_guid: GUID of DSA where replica appears :param nc_dnstr: NC dn string FrN) dsa_dnstr rep_dsa_dnstrdsa_guid rep_dsa_guid rep_default rep_partialrep_rorep_instantiated_flagsrep_fsmo_role_owner rep_repsFrom rep_repsTorep_present_criteria_oner(r1)r0dsar+s rr1NCReplica.__init__sp !]]LL   &'##' ).% t.rcSURR-SUR--SUR--SUR--SUR --SUR --SUR5--SUR--S RS UR55-S RS UR55-n[RU5<S U<3$) r4%s: dsa_dnstr=%s dsa_guid=%sz default=%s ro=%sz partial=%sz present=%sz fsmo_role_owner=%sc3,# UH nSU-v M g7f %sNrr#reps rr&$NCReplica.__str__..sA/@v|/@c3,# UH nSU-v M g7frrrs rr&rs?v|r )r8rrmrorprrrq is_presentrtjoinrurvr(r=r;s rr=NCReplica.__str__st~~...!D$6$667 4#4#445 $"2"223T[[( )  $"2"22 3  $//"33 4($*B*BBCwwAt/@/@AABww?t?? @)006==rcXlg)z*Set or clear NC replica instantiated flagsN)rs)r0flagss rset_instantiated_flags NCReplica.set_instantiated_flagss&+#rcUS:XaSUlSUlOUS:XaSUlOUS:Xa]SUlUR[ UR 55:wa.UR[ UR 55:waSUlO)US:XaSUlSUlOUS:XaSUlSUl[RXU5 g) zGiven an NC which has been discovered thru the nTDSDSA database object, determine what type of NC replica it is (i.e. partial, read only, default) :param attr: attr of nTDSDSA object where NC DN appears raTr`rbmsDS-hasFullReplicaNCsmsDS-hasMasterNCsFN) rqrwrpr+r9r[r\rrr(rercs rreNCReplica.identify_by_dsa_attrs ) )#D ,0D ) ( (#D ^ #,0D )}}E$;$;$= >>}}E$;$;$= >>#' - -,0D )DK( (,0D )DK **4=rcUR$)zMWhether this is a default domain for the dsa that this NC appears on )rprWs r is_defaultNCReplica.is_default srcUR$)z&Return True if NC replica is read only)rrrWs ris_roNCReplica.is_ros {{rcUR$)z$Return True if NC replica is partial)rqrWs r is_partialNCReplica.is_partialsrcjUR(a"UR[R-S:Xagg)aGiven an NC replica which has been discovered thru the nTDSDSA database object and populated with replica flags from the msDS-HasInstantiatedNCs; return whether the NC replica is present (true) or if the IT_NC_GOING flag is set then the NC replica is not present (false) rTF)rwrsrINSTANCE_TYPE_NC_GOINGrWs rrNCReplica.is_presents,  ( (  & &)D)D D IrcURUR[RS/S9nUSnSU;aYUSHOn[[RU5n[URU5n URR!U 5 MQ gg![Ra1nUR upE[ SUR<SU<S35eSnAff=f![a&n [SU-[RS 9 Sn A MSn A ff=f) a Given an NC replica which has been discovered thru the nTDSDSA database object, load the repsFrom attribute for the local replica. held by my dsa. The repsFrom attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on repsFromrBUnable to find NC for (rFr7Nrzbad repsFrom NDR: %rfile)rGr+rHrIrJrKr rrrepsFromToBlob RuntimeErrorprintsysstderr RepsFromToruappend) r0rNrOe1rQrRrSvalueunpackedrPrs r load_repsFromNCReplica.load_repsFrom%s  2,,DMM&0\3C!f  Z)(*A*A5IH !9!!((-) || 277LT MM412 2 2$0E:"zz+/*BCC%,CC D #DD cSn/n/nURHtnUR(aURU5 SnM)UR5(aUR 5 SnUR[ UR 55 Mv UHnURRU5 M /nU(aU(ag[R"5n[R"XR5Ul [R"U[RS5US'URU5 g![R a#n[#SUR<SU<S35eSnAff=f)zCommit repsFrom to the databaseFTNrzCould not set repsFrom for (rFr7)ru to_be_deletedr is_modifiedset_unmodifiedr ndr_blobremoverHMessageDnr+dnMessageElementFLAG_MOD_REPLACEmodifyrJr ) r0rNrornewrepsdelrepsrmrRs rcommit_repsFromNCReplica.commit_repsFromBs+))H %%x(##%%'') NN8H$5$56 7'*, H    $ $X .    KKMvve]]+   w(<(.sN):AooQ):s,,rrurWs rdumpstr_to_be_deletedNCReplica.dumpstr_to_be_deletedyyN):):NNNrcFSRSUR55$)Nrc3d# UH&oR5(dM[U5v M( g7fr)rr9rs rr&3NCReplica.dumpstr_to_be_modified..s N):AmmoQ):s00rrWs rdumpstr_to_be_modified NCReplica.dumpstr_to_be_modifiedrrcURUR[RS/S9nUSnSU;a USUlgg![Ra1nUR upE[ SUR<SU<S35eSnAff=f)zrGiven an NC replica which has been discovered thru the nTDSDSA database object, load the fSMORoleOwner attribute. fSMORoleOwnerrBrrFr7Nr)rGr+rHrIrJrKr rt)r0rNrOe3rQrRrSs rload_fsmo_rolesNCReplica.load_fsmo_roless 2,,DMM&5%68C!f c !'*?';D $ "|| 277LT MM412 2 2s*AB,BBc@URbURU:Xagg)NTF)rtr0rls ris_fsmo_role_ownerNCReplica.is_fsmo_role_owners"  # # /  # #y 0rcURUR[RS/S9nUSnSU;aYUSHOn[[RU5n[URU5n URR!U 5 MQ gg![Ra1nUR upE[ SUR<SU<S35eSnAff=f![a&n [SU-[RS 9 Sn A MSn A ff=f) arGiven an NC replica which has been discovered thru the nTDSDSA database object, load the repsTo attribute for the local replica. held by my dsa. The repsTo attribute is not replicated so this attribute is relative only to the local DSA that the samdb exists on This is responsible for push replication, not scheduled pull replication. Not to be confused for repsFrom. repsTorBrrFr7Nrzbad repsTo NDR: %rr)rGr+rHrIrJrKr rrrrrrrrrvr) r0rNrOe4rQrRrSrrrPrs r load_repsToNCReplica.load_repsTos 2,,DMM&.Z1C!f s?X)(*A*A5IH !9&&s+' || 277LT MM412 2 2$.%8"zz+rcSn/n/nURHtnUR(aURU5 SnM)UR5(aUR 5 SnUR[ UR 55 Mv UHnURRU5 M /nU(aU(ag[R"5n[R"XR5Ul [R"U[RS5US'URU5 g![R a#n[#SUR<SU<S35eSnAff=f)zCommit repsTo to the databaseFTNrzCould not set repsTo for (rFr7)rvrrrrr rrrHrrr+rrrrrJr ) r0rNrrrrrrrRs r commit_repsToNCReplica.commit_repsTos%ooF ##v&!!##%%' NN8FOO4 5'&,F OO " "6 *   KKMvve]]+   w(<( >,/>b   .:=2~5BOO<& ,@=2rric\rSrSrSrSrSrSrSrSr Sr S r S r S r S rS rSrSrSSjrSrSrSrSrSrSrSrg)DirectoryServiceAgenti!cXlSUlSUlSUlSUlSUlSUlSUl0Ul0Ul 0Ul g)zInitialize DSA class. Class is subsequently fully populated by calling the load_dsa() method :param dsa_dnstr: DN of the nTDSDSA NFr) rlrndsa_ivid dsa_is_ro dsa_is_istgoptions dsa_behavior default_dnstrcurrent_rep_tableneeded_rep_table connect_tablers rr1DirectoryServiceAgent.__init__#s[#    !"$!#  rcSURR-nURbUSUR--nURbUS[ UR5--nUR bUS[ UR 5--nUSUR 5-SUR5--SUR5--S-S UR5--S -S UR5--S -S UR5--- nU$) r4r{r|r}z dsa_ivid=%sr~z gc=%sz istg=%sz current_replica_table:rz needed_replica_table:z connect_table:) r8rrlrnr9rris_gcis_istgdumpstr_current_replica_tabledumpstr_needed_replica_tabledumpstr_connect_tabler;s rr=DirectoryServiceAgent.__str__@s&t~~... >> %,t~~==D == $+c$--.@@@D == $+c$--.@@@D djjl*djjl*+ ./++;;== > * * ::<< =##33556 6 rc8URRU5$r)rgetr/s rget_current_replica)DirectoryServiceAgent.get_current_replicaWs%%))(33rc@UR=(d UR$)zAReturns True if dsa is intersite topology generator for it's site)rrrWs rrDirectoryServiceAgent.is_istgZs14>>1rcUR$)z1Returns True if dsa a read only domain controller)rrWs rrDirectoryServiceAgent.is_ro_s ~~rcHUR[R-S:wagg)z*Returns True if dsa hosts a global catalogrTF)rrDS_NTDSDSA_OPT_IS_GCrWs rrDirectoryServiceAgent.is_gccs LL444 4 :rc&URU:agg)zIs dsa at minimum windows level greater than or equal to (version) :param version: Windows version to test against (e.g. DS_DOMAIN_FUNCTION_2008) TF)r)r0rs ris_minimum_behavior)DirectoryServiceAgent.is_minimum_behavioris    'rcHUR[R-S:wagg)z>Whether this allows NTDSConnection translation in its options.rTF)rr%DS_NTDSDSA_OPT_DISABLE_NTDSCONN_XLATErWs ris_translate_ntdsconn_disabled4DirectoryServiceAgent.is_translate_ntdsconn_disabledss LL4EE E! Krc2URUR4$)z5Return DSA current and needed replica tables )rrrWs rget_rep_tables$DirectoryServiceAgent.get_rep_tablesys%%t'<'<<?DM  s9~a01DL C CM(:1(=$>&$H!DN"DN "c ) #C(?$@$C DD  ''. ""5)=|| 377LT NND23 3 3s)D!!E&5,E!!E&c/SQnURUR[RUS9n0n[US5S:aUSR5HnUS:XaM USUHn [XRS 55n U R5n [U R5n X;a[X 5n XU 'OX|n US :XaU RU 5 MtU R!X5 U R#5(dMXlM M O[ S UR-5eXplg![Ra1nUR upV[ SUR<SU<S35eSnAff=f) aMethod to load the NC replica's listed for DSA object. This method queries the samdb for (hasMasterNCs, msDS-hasMasterNCs, hasPartialReplicaNCs, msDS-HasDomainNCs, msDS-hasFullReplicaNCs, and msDS-HasInstantiatedNCs) to determine complete list of NC replicas that are enumerated for the DSA. Once a NC replica is loaded it is identified (schema, config, etc) and the other replica attributes (partial, ro, etc) are determined. :param samdb: database to query for DSA replica list )rbrrar`rmsDS-HasInstantiatedNCsrBz Unable to find nTDSDSA NCs for (rFr7Nrrutf8r0zNo nTDSDSA NCs for (%s))rGrlrHrIrJrKr lenkeysrdecodeget_binary_integerr9rrirrerrr)r0rNncattrsrOe6rQrR tmp_tabler$rdsdnrdnstrrs rr*0DirectoryServiceAgent.load_current_replica_tablese   3,,DNN#..%,.C  s1v;?V[[]9 !VAYE#5,,v*>?D 335ELE-'4+.%('.552259 ,,U6~~''-2*-'#>4t~~EF F"+g|| 377LT NND23 3 3s)D33E8,E33E8c4XRUR'g)zMMethod to add a NC replica that "should be present" to the needed_rep_table. N)rr+)r0rs radd_needed_replica(DirectoryServiceAgent.add_needed_replicas/2cll+rcURUR[RSS9nUHSn[UR5nXpR;aM)[U5nURU5 XRU'MU g![Ra1nUR upE[ SUR<SU<S35eSnAff=f)zsMethod to load the nTDSConnections listed for DSA object. :param samdb: database to query for DSA connection list z(objectClass=nTDSConnection)rCrD expression#Unable to find nTDSConnection for (rFr7N) rGrlrH SCOPE_SUBTREErJrKr r9rrNTDSConnectionload_connection) r0rNrOe7rQrRrSr:connects rr++DirectoryServiceAgent.load_connection_table s  3,,DNN%(%6%6*HJCCKE***$U+G  # #E *(/  u % || 377LT NND23 3 3s)BC ,CC cl/nURR5H~upEUR(aURX5 UR(aUR X5 UR (dM\URX5 URU5 M UHnURU M g)aCMethod to commit any uncommitted nTDSConnections modifications that are in our table. These would be identified connections that are marked to be added or deleted :param samdb: database to commit DSA connection list to :param ro: if (true) then perform internal operations but do not write to the database (readonly) N) ritems to_be_added commit_addedto_be_modifiedcommit_modifiedrcommit_deletedr)r0rNrdelconnr:rGs rcommit_connections(DirectoryServiceAgent.commit_connections's"00668NE""$$U/%%''2$$$&&u1u%9E""5)rcBXR;deX RU'gr)r)r0r:rGs radd_connection$DirectoryServiceAgent.add_connectionBs".....$+5!rc/nURR5H*nUR5U:XdMURU5 M, U$)zScan DSA nTDSConnection table and return connection with a "fromServer" dn string equivalent to method input parameter. :param from_dnstr: search for this from server entry )rvaluesget_from_dnstrr)r0 from_dnstranswerrGs rget_connection_by_from_dnstr2DirectoryServiceAgent.get_connection_by_from_dnstrFsF))002G%%':5 g&3 rcFSRSUR55$)z1Debug dump string output of current replica tablerc38# UHn[U5v M g7frr9rs rr&FDirectoryServiceAgent.dumpstr_current_replica_table..Vs@)?AQ)?)rrrWs rr3DirectoryServiceAgent.dumpstr_current_replica_tableTsyy@)?)?@@@rcFSRSUR55$)z0Debug dump string output of needed replica tablerc38# UHn[U5v M g7frr_rs rr&EDirectoryServiceAgent.dumpstr_needed_replica_table..Zs?)>AQ)>ra)rrrWs rr2DirectoryServiceAgent.dumpstr_needed_replica_tableXsyy?)>)>???rcFSRSUR55$)z)Debug dump string output of connect tablerc38# UHn[U5v M g7frr_rs rr&>DirectoryServiceAgent.dumpstr_connect_table..^s<);AQ);ra)rrrWs rr+DirectoryServiceAgent.dumpstr_connect_table\syy<););<<.\;[4$;[r])r8rr:rnrKrrMrror{rprqr9rrrYrssize bandwidthnumberOfSchedules enumerate headerArraytypeoffsetr dataArrayslots)r0r<iheaders rr=NTDSConnection.__str__s"&!8!8$**E$,,./#d&6&667&(:(::;')<)<< = $dll2 3 )4+<+<< =$d&6&667%t';';;< 99 MC N2 2D    * +c$2E2E.FF FD&88 == $ *T]]-?-??/$--2I2IIJ8]]4456 6D 't}}'@'@A ?KK()A]]+,-=q@ A \4==;R;RST;U;[;[\\ ]  B rc/SQnURUR[RUS9nUSnSU;a[USS5UlS U;aF[US S5R5R5R5S :XaS Ul S U;a[US S5Ul[R "UR#S US S55UlSU;aE[)XSSR+S55nUR-U[UR.55 SU;a%[1[2R4USS5UlSU;a*[R6"[USS55UlSU;aJ[)XSSR+S55n[UR.5UlUR:cegg![Ra1nUR upV[ SUR<SU<S35eSnAff=f![&a [ SUR-5ef=f)zGiven a NTDSConnection object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )renabledConnectionrsr{r@ transportType fromServer systemFlagsrBrBrFr7Nrrrr(Trr@z4Unable to find objectGUID in nTDSConnection for (%s)rr1rsr{r)rGr:rHrIrJrKr r)rr9upperlstriprstriprnrorrLrMrqKeyErrorrr4load_connection_transportrrrrsstring_to_timer{rY) r0rNrErOe8rQrRrSr9s rrENTDSConnection.load_connections5   /,,DJJcnn%*,C!f  s9~a01DL # %3*+A./557>>@GGIVS# C  #C $6q$9 :D  6 %33L47 4Ea4HJK I c !5o"6q"9"@"@"HID  * *5#dgg, ?  &x'8'8#j/!:LMDM C "11#c-6H6K2LMD  3 5l"3A"6"="=f"EFD!$''lDO??. .. G|| /77LT JJ./ / /* 6&)-56 6 6s#)G!91H)!H&5,H!!H&)#I cS/nURU[RUS9nSUS;a<USnX l[R"URSUSS55Ul UR ceURceg![Ra'nURupg[ SU<SU<S35eSnAff=f)zGiven a NTDSConnection object which enumerates a transport DN, load the transport information for the connection object :param tdnstr: transport DN to load r@rBzUnable to find transport (rFr7Nr) rGrHrIrJrKr rprrLrMrr) r0rNtdnstrrErOe9rQrRrSs rr(NTDSConnection.load_connection_transports  +,,F%(^^5BC 3q6 !a&C#)  %33L47 4Ea4HJK  ##///""...|| +77LT"D*+ + +sBC"B>>CcUR(deSUlU(agURUR5 g![Ra1nUR upE[ SUR<SU<S35eSnAff=f)zLocal helper routine for commit_connections() which handles committed connections that are to be deleted from the database database FNz%Could not delete nTDSConnection for (rFr7)rdeleter:rHrJrKr )r0rNre10rQrRs rrONTDSConnection.commit_deleted sr !!!!"   / LL $|| /88LT JJ./ / /sAB,BBcUR(deSUlU(agSnURUR[RS9n[ U5S:waSnU(a[S UR-5eUR(aS nOS n[R"5n [R"XR5U l [R"S [RS 5U S '[R"S [RS5U S'[R"U[RS5U S'[R"UR [RS5U S'[R"[#UR$5[RS5U S'[R"[#UR&5[RS5U S'UR(b<[R"[#UR(5[RS5U S'UR*b<[R"[-UR*5[RS5U S'UR/U 5 g![R aKnURupgU[R:wa[SUR<SU<S35eSnAGNSnAff=f![R a1n U Rupg[SUR<SU<S35eSn A ff=f)zwLocal helper routine for commit_connections() which handles committed connections that are to be added to the database FNrCrDrTUnable to search for (rFr7z'nTDSConnection for (%s) already exists!r(FALSEnTDSConnection objectClassshowInAdvancedViewOnlyrrrrrrsz"Could not add nTDSConnection for ()rKrGr:rHrIr2rJrKERR_NO_SUCH_OBJECTr rnrrrr FLAG_MOD_ADDrYr9rrorprsr add) r0rNrfoundrSe11rQrR enablestrre12s rrLNTDSConnection.commit_addeds     3,,DJJcnn,EC3x1} D::&' ' <<II KKMvveZZ(   /1A1A, . -   vs'7'77 9 "#   y#*:*:2 4    t0@0@, O ,   s4<<0#2B2BI N )    s4#4#45s7G7G, . -    +""3t';';#N>N#24 o  == $""8DMM#:##3ZA jM / IIaL[|| 388LTs--- $ D 233. 3\|| /88LT JJ./ / /s09JK;K8-AK33K8;M,L;;McJUR(deSUlU(agURUR[RS9 UR(aSnOS n[R"5n[R"XR5Ul [R"U[RS 5US '[R"UR[RS 5US '[R"[!UR"5[RS 5US '[R"[!UR$5[RS 5US 'UR&b=[R"[!UR&5[RS5US'O)[R"/[R(S5US'UR*b=[R"[-UR*5[RS5US'O)[R"/[R(S5US'UR/U5 g![R a]nUR upEU[R:Xa[SUR-5e[SUR<SU<S35eSnAff=f![R a1nUR upE[SUR<SU<S35eSnAff=f)zzLocal helper routine for commit_connections() which handles committed connections that are to be modified to the database FNrz&nTDSConnection for (%s) doesn't exist!rrFr7r(rrrrrrrsz%Could not modify nTDSConnection for ()rMrGr:rHrIrJrKrr rnrrrrrrYr9rrorpFLAG_MOD_DELETErsr r) r0rNre13rQrRrre14s rrNNTDSConnection.commit_modifiedcs """"#   / LLdjjL ? <<II KKMvveZZ(   y#*>*>2 4    t0D0D+ - ,   s4<<0#2F2F( * )    s4#4#45s7K7K, . -    +""3t';';#<##7J o  ""2s':':OL o  == $""8DMM#:##7E jM ""2s':':JG jM / LLO]|| /88LTs---G#zz *++ JJ./ /  /^|| /88LT JJ./ / /s0(I)K)K=AKKL"1,LL"cXlgr)rM)r0 truefalses r set_modifiedNTDSConnection.set_modifieds'rcURbURRScgURRSRHnUS-S:wdM g g)zjReturns True if our schedule includes at least one replication interval within the week. False otherwise rFT)rsrr)r0rs r!is_schedule_minimum_once_per_week0NTDSConnection.is_schedule_minimum_once_per_weeksX == DMM$;$;A$>$FMM++A.44Dt #5rcURcUSL$UcgURRUR:wdHURRUR:wd$URRUR:wag[ URR 5Hup#URR UR UR UR :wa gURR URUR UR:wa g[URRURURUR5H upEXE:wdM g M g)zrReturns True if our schedule is equivalent to the input comparison schedule. :param shed: schedule to compare to NFT) rsrrrrrrrziprr)r0rvrrabs ris_equivalent_schedule%NTDSConnection.is_equivalent_schedules. == D= = ]]  5:: - ]] $ $ 7 ]] , ,0G0G G"4==#<#<=IA}}((+00E4E4Ea4H4M4MM}}((+22  #**+DMM33A6<<!OOA.4466 6>rcHUR[R-S:Xagg)z=Returns True if NTDS Connection specifies RODC topology only rFT)rrNTDSCONN_OPT_RODC_TOPOLOGYrWs ris_rodc_topologyNTDSConnection.is_rodc_topologys! <<$99 9Q >rcHUR[R-S:Xagg)zsReturns True if NTDS Connection was generated by the KCC topology algorithm as opposed to set by the administrator rFT)rrNTDSCONN_OPT_IS_GENERATEDrWs r is_generatedNTDSConnection.is_generateds! <<$88 8A =rcHUR[R-S:Xagg)zGReturns True if NTDS Connection should override notify default rFT)rr$NTDSCONN_OPT_OVERRIDE_NOTIFY_DEFAULTrWs ris_override_notify_default)NTDSConnection.is_override_notify_defaults! <<$CC Cq HrcHUR[R-S:Xagg)z:Returns True if NTDS Connection should use notify rFT)rrNTDSCONN_OPT_USE_NOTIFYrWs r is_use_notifyNTDSConnection.is_use_notifys! <<$66 6! ;rcHUR[R-S:Xagg)z?Returns True if NTDS Connection should use twoway sync rFT)rrNTDSCONN_OPT_TWOWAY_SYNCrWs ris_twoway_syncNTDSConnection.is_twoway_syncs! <<$77 71 <rcHUR[R-S:Xagg)zBReturns True if NTDS Connection intersite compression is disabled rFT)rr*NTDSCONN_OPT_DISABLE_INTERSITE_COMPRESSIONrWs r!is_intersite_compression_disabled0NTDSConnection.is_intersite_compression_disableds! <<$II IQ NrcHUR[R-S:Xagg)zBReturns True if NTDS Connection has a user owned schedule rFT)rr NTDSCONN_OPT_USER_OWNED_SCHEDULErWs ris_user_owned_schedule%NTDSConnection.is_user_owned_schedules! <<$?? ?1 DrcUR$)z3Returns True if NTDS Connection is enabled )rnrWs r is_enabledNTDSConnection.is_enableds||rcUR$)z%Return fromServer dn string attribute)rYrWs rrXNTDSConnection.get_from_dnstrs r) r:rnrYrqrrsrorKrrMrprrr{Nr)rrrrrgr1r=rErrOrLrNrrrrrrrrrrrrXrrrrrDrDsm $L7/r/2/&E/NE/N( &P rrDc<\rSrSrSrSrSrSrSrSr Sr S r g ) Partitioni!aA naming context discovered thru Partitions DN of the config schema. This is a more specific form of NamingContext class (inheriting from that class) and it identifies unique attributes enumerated in the Partitions such as which nTDSDSAs are cross referenced for replicas ctXlSUlSUl/Ul/Ul[ R US5 g)NTr)partstrrnrorw_location_listro_location_listr(r1)r0rs rr1Partition.__init__(s8   " " tT*rc^/SQnURUR[RUS9nUSnUR5GH nUS:XaM US :XaO[XxS5R5R5R5S :XaS Ul OS Ul MaUS :Xa[XxS5UlM~XxHn [XR!S55n [U R"5n US:XaXlM@US:XaUR&R)U 5 McUS:XdMkUR*R)U 5 M GM UR-U5 g![Ra1nUR upV[ SUR<SU<S35eSnAff=f)awGiven a Partition class object that has been initialized with its partition dn string, load the partition from the sam database, identify the type of the partition (schema, domain, etc) and record the list of nTDSDSAs that appear in the cross reference attributes msDS-NC-Replica-Locations and msDS-NC-RO-Replica-Locations. :param samdb: sam database to load partition from )nCNameEnabledrmsDS-NC-Replica-LocationsmsDS-NC-RO-Replica-LocationsrBzUnable to find partition for (rFr7Nrrrr(TFrr1rrr)rGrrHrIrJrKr r3r9rrrrnr)rorr4rr+rrrr]) r0rNrErOe15rQrRrSr$rr9r:s rload_partitionPartition.load_partition4s1  1,,DLL%*,C!fADyI~svay>'')00299;vE#'DL#(DLM!$'q N!ull6&:;DGG =$)M33))00766))007 B &M|| 188LT LL$01 1 1s)E''F,;,F''F,cUR$)z-Returns True if partition is enabled )rrWs rrPartition.is_enablednsrcHUR[R-S:Xagg)zsReturns True if this is not an Active Directory NC in our forest but is instead something else (e.g. a foreign NC) rTF)rorSYSTEM_FLAG_CR_NTDS_NCrWs r is_foreignPartition.is_foreignss#    ; ; ; ArcHSnSnUR[R:H=(da UR[R:H=(d= UR[R:H=(a UR UR :HnUR[R:XaNUR5(aURUR;aSnOURUR;aSnUR5(apUR[R:XaRUR UR :wa8URUR;dURUR;aSnSnU(aUR5(dU(aSnXBU4$)zTests whether this partition should have an NC replica on the target dsa. This method returns a tuple of needed=True/False, ro=True/False, partial=True/False :param target_dsa: should NC be present on target dsa FT) r.rrrrr+rrrrlrrr)r0 target_dsarpartialneededs rshould_be_presentPartition.should_be_present|sF ,,&--/>,,&--/><<6==0===J$<$<<  <<6-- -!!''4+@+@@!F''4+@+@@!F      LLFMM ) MMZ55 5  ! !T%:%: :  ! !T%:%: :FG z''))WB7""rcS[RU5-SUR--SRSUR55-SRSUR 55-nU$)r4z%sz partdn=%src3,# UH nSU-v M g7f)z msDS-NC-Replica-Locations=%sNrr#r$s rr&$Partition.__str__..s]G\!9A=G\rc3,# UH nSU-v M g7f)z! msDS-NC-RO-Replica-Locations=%sNrrs rr&rs`J_QDN % +|| )88LT $() ) )sA DE"D;;EcURUR[RSS9nUHxn[UR5nXpR;aM)[U5nURU5 XRU'UR5(aMjXRU'Mz g![Ra!nUR upE[ SU-5eSnAff=f)zDiscover all nTDSDSA thru the sites entry and instantiate and load the DSAs. Each dsa is inserted into the dsa_table by dn string. z(objectClass=nTDSDSA))rDrAzUnable to find nTDSDSAs - (%s)N)rGrrHrCrJrKr r9rrrr-rr) r0rNrOe17rQrRrSr:rxs rr%Site.load_all_dsas  D,,t%(%6%6*ACCCKE&'.C LL %(NN5 !99;;+.!!%( || D88LT;dBC C Ds)B**C>CCc8URRU5$)zReturn a previously loaded DSA object by consulting the sites dsa_table for the provided DSA dn string :return: None if DSA doesn't exist )rrr|s rget_dsa Site.get_dsas ~~!!%((rcUR(aSUlURUlg[ U5nUR U5 UR U5 [URR5SS9nURS:XaSnOURS-S-nURRUR5nUbXrLaURU5nS n URH!n URU R :XdMSn O U (dUn Sn ONUR"W R$- U:aSn Sn O,Un U R$n OURU5n UR"n XR"U - U--['U5-n X]nSUlXrLag URUR:XagURUlU(agS UR(-n[*R,"5n[*R."X5Ul[*R2"UR[*R4S 5US 'UR7U5 g![*R8an[;S U<S U<S35eSnAff=f)a<Determine if my DC should be an intersite topology generator. If my DC is the istg and is both a writeable DC and the database is opened in write mode then we perform an originating update to set the interSiteTopologyGenerator attribute in the NTDS Site Settings object. An RODC always acts as an ISTG for itself. Tc,[UR5$r)r rn)rxs r"Site.select_istg..5s HS\\2r)keyrlPC<iNFr"r$z.Could not set interSiteTopologyGenerator for (rFr7)rrrlrget_dsa_config_reprrsortedrrWrrrindexrrsource_dsa_invocation_idrlast_sync_successr2rrHrrrrrrrJr )r0rNmydsarc_repD_sortfd_dsaj_idxrcursori_idxt_timek_idxr&rrRs r select_istgSite.select_istgsY ?? $E ',D $"5) E" %%e,     $ $ &24$  " "a '&A''",x7A""4#;#;<  !3(LL'EE>>>>V%D%DD E?  v777!;11LL'E[[F;;/A56#f+E       # #u 6#(??  *DOO; KKMvve"   u0D0D; = &'  LLO  || t  sIJ'I;;JcBUR[R-S:g$)z8Returns True if intra-site topology is disabled for siter)rr-DS_NTDSSETTINGS_OPT_IS_AUTO_TOPOLOGY_DISABLEDrWs ris_intrasite_topology_disabled#Site.is_intrasite_topology_disableds)!!BBCGHI IrcBUR[R-S:g$)z8Returns True if inter-site topology is disabled for siter)rr8DS_NTDSSETTINGS_OPT_IS_INTER_SITE_AUTO_TOPOLOGY_DISABLEDrWs ris_intersite_topology_disabled#Site.is_intersite_topology_disableds'""NNO rcBUR[R-S:g$)z:Returns True if selection of random bridgehead is disabledr)rr1DS_NTDSSETTINGS_OPT_IS_RAND_BH_SELECTION_DISABLEDrWs ris_random_bridgehead_disabled"Site.is_random_bridgehead_disabled)!!FFGKLM MrcBUR[R-S:g$)z1Returns True if detect stale is disabled for siter)rr1DS_NTDSSETTINGS_OPT_IS_TOPL_DETECT_STALE_DISABLEDrWs ris_detect_stale_disabledSite.is_detect_stale_disabledrTrcBUR[R-S:g$)z.esZEYE/%7EYr) r8rr:r9rqrrrrrr;s rr=Transport.__str__]s"&!8!8$**Es499~-.$,,./%t'8'889tyy( ) wwZTEYEYZZ [ rc/SQnURUR[RUS9nUSn[R"URSUSS55Ul S U;a[US S5Ul S U;a[US S5UlS U;a[US S5UlS U;ahUS H^n[!XR#S 55n [U R$5n XR&;dMCUR&R)U 5 M` gg![Ra1nUR upV[ SUR<SU<S35eSnAff=f)zGiven a Transport object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )r@rrbridgeheadServerListBLtransportAddressAttributerBzUnable to find Transport for (rFr7Nrr@rrrrr1)rGr:rHrIrJrKr rrLrMrqr)rr9rrrr4rrr) r0rNrErOe18rQrRrSrr9r:s rload_transportTransport.load_transportisZ .  /,,DJJcnn%*,C!fIIe77 !,/245   s9~a01DL &# - #C(C$DQ$G HD  S=CKN+DI #s *56ull6&:;DGG  4 44((//6 7 +%|| /88LT JJ./ / /s)D((E-<,E((E-)rrr:rqrrN) rrrrrgr1r=rrrrrrrQs" %7rrc@\rSrSrSrS SjrSrSrSrSr S r S r g) rizClass encapsulation of the NDR repsFromToBlob. Removes the necessity of external code having to understand about other_info or manipulation of update flags. Nc<SURS'XRS'SURS'Uc[R"5URS'SURSlSURS'SURS '[R"5=URSR lURS 'gX RS'UR R URS 'URS:Xa=UR R RURS'SURS 'gUR R RURS'UR R RURS 'g) NFrr+r update_flagsr dns_name1 dns_name2 other_info) __dict__rrrrepsFromTo1OtherInforrdns_namerr)r0r+rs rr1RepsFromTo.__init__sF). o&$, j!(+ n%8  (0(?(?(ADMM* %03DMM* % -)-DMM+ &)-DMM+ &/7.K.K.M NDMM* % ) ) 4 l+)1MM* %*2,,*A*ADMM, '3&-5\\-D-D-M-M k*-1 k*-5\\-D-D-N-N k*-5\\-D-D-N-N k*rc SURR-SUR--SUR--SUR--SUR --SUR --SUR--SUR--S UR--S UR--S UR--S UR--S UR--S-SRSUR55-S-nU$)r4r{z dnstr=%sz update_flags=0x%Xz version=%dz source_dsa_obj_guid=%sz source_dsa_invocation_id=%srz replica_flags=0x%Xz consecutive_sync_failures=%dz last_success=%sz last_attempt=%sz dns_name1=%sz dns_name2=%sz schedule[ rc3,# UH nSU-v M g7frrrs rr&%RepsFromTo.__str__..s@-$w~-rr)r8rr+rrsource_dsa_obj_guidr:rr replica_flagsconsecutive_sync_failures last_success last_attemptrrrrsr;s rr=RepsFromTo.__str__sHt~~... -.&):)::; $,,./,d.F.FF G 2../ 0')<)<<=($*<*<<=3//0 1%t'8'88 9%t'8'88 9"DNN2 3"DNN23  ww@$--@@!A"#& rcUS;a|US;a&URS==[R-ss'O+US;a%URS==[R-ss'[ URSR X5 GO[US;aX RS'URSR S:Xa6URSURSR RlOURSURSR Rl OUS ;alX RS 'URSR S:Xa [U5eURS URSR Rl OLUS ;aX RS 'O7US ;aX RS'O"US;a[SU-5e[SU-5eURS==[R-ss'g)zSet an attribute and change update flag. Be aware that setting any RepsFromTo attribute will set the drsuapi.DRSUAPI_DRS_UPDATE_ADDRESS update flag. rsrrrrr:rrr)rr)rsrrrrrrr+r+rrrz$Attempt to set readonly attribute %sUnknown attribute %sN) rrDRSUAPI_DRS_UPDATE_FLAGSDRSUAPI_DRS_UPDATE_SCHEDULEsetattrrrrrrrrDRSUAPI_DRS_UPDATE_ADDRESS)r0itemrs r __setattr__RepsFromTo.__setattr__s $ $ (( n-1Q1QQ-% n-1T1TT- DMM*-114 ? ] ").MM+ &}}Z(00C7MM+. j)--88AMM+. j)--88B] ").MM+ &}}Z(00C7$T**MM+. j)--88B\ !(-MM* % & &-2MM/ * [  !G$!NO O !7$!>? ? n%)K)KK%rcUS;a#[URSRU5$US;aURSR$US;awURSRS:Xa-URSRRR $URSRRR $US;aUURSRS:Xa [U5eURSRRR$US;aURS$US ;aURS $US ;aURS $[S U-5e)zjOverload of RepsFromTo attribute retrieval. Allows external code to ignore substructures within the blob rrrrrrrrrr+rrr) getattrrrrrrrrr)r0rs r __getattr__RepsFromTo.__getattr__sP $ $4==488$? ? [ ==,44 4 ] "}}Z(00C7}}Z044??HHH}}Z044??III ] "}}Z(00C7$T**}}Z044??III & &==1 1 \ !==, , % %==0 03d:;;rc URS:g$rrrWs rrRepsFromTo.is_modified;s!!S()rc"SURS'g)Nrr)rrWs rrRepsFromTo.set_unmodified>s(+ n%rr)NN) rrrrrgr1r=rrrrrrrrrrs* 2Oh00Ld#.drrrz site_list=r6r7)r8rr:rrorrrsrrrrrrrrrrr)r0r<rrrqrs rr=SiteLink.__str__Os"&!8!8$**E$,,./$t'8'889tyy()!4==0 1 == $ *T]]-?-??/$--2I2IIJ8]]4456 6D 't}}'@'@A ?[[)*A]]+,-=q@ A \4==;R;RST;U;[;[\\ ]  BHDT2>>D' rc/SQnURUR[RUS/S9nUSnS U;a[US S5UlS U;a[US S5Ul S U;a[US S5Ul S U;a[US S5Ul S U;aUS Hn[XRS55n [R"U R R#S55n [%U R 5n X4UR&;dMtUR&R)X45 M SU;a [+[,R.W5Ulg[15Ulg![Ra1nUR upV[ SUR<SU<S35eSnAff=f)zGiven a siteLink object with an prior initialization for the object's DN, search for the DN and load attributes from the samdb. )rrrrs replIntervalsiteListz extended_dn:0)rCrDrEcontrolszUnable to find SiteLink for (rFr7Nrrrrrrr1rLrs)rGr:rHrIrJrKr r)rrorrrr4rrLrget_extended_componentr9rrrrrsrt) r0rNrErOe19rQrRrSrr9rqr:s r load_sitelinkSiteLink.load_sitelinkks   /,,DJJcnn%*o5FHC!f  s9~a01DL C  #C $6q$9 :D  S=CKN+DI S N 3A 67DM  Zull6&:;yy!?!?!GHDGG =6NN))4-8 )  &x'8'8%@DM35DM=|| /88LT JJ./ / /s+E;;G,F;;G)rr:rrrsrroN) rrrrrgr1r=rrrrrrrBs8-6rrc\rSrSrSrSrg)KCCFailedObjectic@XlX lX0lX@lXPlgr)rl failure_counttime_first_failure last_resultr)r0rlrrrrs rr1KCCFailedObject.__init__s *"4& r)rrrrrlN)rrrrr1rrrrrrs!rrcURR5HnUR5(dMUs $ [SUR-5e)Nz)Unable to find config NC replica for (%s))rrWrXr rl)rxr=s rr7r7sK&&--/ ??  L0 >==! ""rc[R"5nSUlSUlSUl[R "5nSUlSUlU/Ul[R"5nS/S-Ul U/Ul U$)zCreate a default schedule for an NTDSConnection or Sitelink. This is packed differently from the repltimes schedule used elsewhere in KCC (where the 168 nibbles are packed into 84 bytes). rr) rrsrrrscheduleHeaderrrr scheduleSlotsrr)rsrdatas rrtrtsy  "HHMH!"H  $ $ &FFKFM"8H  ! ! #D#DJH Orc /nURUR5[RSS9nURUR5[RSS9n[ 5nSnUH|nUR R 5R 5nXXR5==S- ss'UR5R5UR5:XdMwUS- nM~ [U5[U5:wGah/n UH4nUR R5U;dM#U RU5 M6 SR[R"U5[R"[UR5555n U GHn [R"[U R 55n URUR5[RS/SRU 5S /S 9n URUR5[RSS /S RU U 5S /S 9n[U 5S:dM[U5S:dM[U SSS5n[USSS5nUU:waGMS nUSS Hn[R "U[U55nUR5nUR5R5nUUU:aSn O'UUU:XdMiUUR5:dMSn O U(dGMU R R5nURUR55 GM U$)a Discover which sites have no DCs and whose lowest single-hop cost distance for any link attached to that site is linked to the site supplied. We compare the lowest cost of your single-hop link to this site to all of those available (if it exists). This means that a lower ranked siteLink with only the uncovered site can trump any available links (but this can only be done with specific, poorly enacted user configuration). If the site is connected to more than one other site with the same siteLink, only the largest site (failing that sorted alphabetically) creates the DNS records. :param samdb database :param site_name origin site (with a DC) :return a list of sites this site should be covering (for DNS) z*(&(objectClass=server)(serverReference=*))r@z(objectClass=site)rrzCN={},CN=Sites,{}rz&(&(objectClass=siteLink)(siteList={}))zserver_sort:1:0:cost)rCrDrErArrz3(&(objectClass=siteLink)(siteList={})(siteList={}))TF)rGr\rHrCr rparent canonical_str get_rdn_valuelowerr2rformat binary_encoder9r)r)rN site_namesites_to_cover server_ressite_res sites_in_usedc_countrSsite_dnsites_uncovered own_site_dnsite encoded_dn link_res1 link_res2cost1cost2to_coversite_val site_dn_strsite_rdnsite_cover_rdns runcovered_sites_to_coverrs)&N5#:#:#<$'$5$5*56J ||!8!8!:"%"3"3';=H9LH&&--/((***,-2-  " ( ( *ioo.? ? MH  <CM)Cvv##%\9&&s+*00   i (   c%"9"9";< = $D**3tww<8J %*A*A*C+.+<+   )! Z 8H!ffUCM:G")"7"7"9K&446<<>H#K08;#(&{3x?"Y__%66#(!98%)WW%:%:%*>*@Aa$d r)&rrHrlsambar samba.dcerpcrrr samba.samdbr samba.ndrrr collectionsr Exceptionr objectrdictrrJr:r(rirrDrrrfrrrrr7rtrrrrrs,   * y AVA NV__%:%:%<N N n+Fn+b|2 |2~ [F[| _V_D Q Qhp6pf ffR=7=7@n,n,bV6vV6r!f!"Bhr