sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-03-12 20:58:37 +03:00
Code
samba-mirror/source4/scripting/python/samba/netcmd/fsmo.py

278 lines
9.9 KiB
Python
Raw Normal View History

Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
# Changes a FSMO role owner
#
# Copyright Nadezhda Ivanova 2009
# Copyright Jelmer Vernooij 2009
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
#
import samba.getopt as options
import ldb
from ldb import LdbError
from samba.auth import system_session
from samba.netcmd import (
Command,
CommandError,
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
SuperCommand,
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
Option,
)
from samba.samdb import SamDB
s4-samba-tool: Fix samba-tool fsmo seize This is currently untested, and a restructure broke it. Andrew Bartlett
2012-04-19 13:57:29 +10:00
def transfer_role(outf, role, samdb):
m = ldb.Message()
m.dn = ldb.Dn(samdb, "")
if role == "rid":
m["becomeRidMaster"]= ldb.MessageElement(
"1", ldb.FLAG_MOD_REPLACE,
"becomeRidMaster")
elif role == "pdc":
domain_dn = samdb.domain_dn()
res = samdb.search(domain_dn,
scope=ldb.SCOPE_BASE, attrs=["objectSid"])
assert len(res) == 1
sid = res[0]["objectSid"][0]
m["becomePdc"]= ldb.MessageElement(
sid, ldb.FLAG_MOD_REPLACE,
"becomePdc")
elif role == "naming":
m["becomeDomainMaster"]= ldb.MessageElement(
"1", ldb.FLAG_MOD_REPLACE,
"becomeDomainMaster")
samdb.modify(m)
elif role == "infrastructure":
m["becomeInfrastructureMaster"]= ldb.MessageElement(
"1", ldb.FLAG_MOD_REPLACE,
"becomeInfrastructureMaster")
elif role == "schema":
m["becomeSchemaMaster"]= ldb.MessageElement(
"1", ldb.FLAG_MOD_REPLACE,
"becomeSchemaMaster")
else:
raise CommandError("Invalid FSMO role.")
try:
samdb.modify(m)
except LdbError, (num, msg):
raise CommandError("Failed to initiate transfer of '%s' role: %s" % (role, msg))
outf.write("FSMO transfer of '%s' role successful\n" % role)
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
class cmd_fsmo_seize(Command):
"""Seize the role"""
samba-tool: Don't require full prog line to be in synopsis.
2011-10-13 23:27:22 +02:00
synopsis = "%prog [options]"
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
Revert "samba-tool: moved takes_optiongroups definition to Command base class" This reverts commit f6fa8684896b8f3f9f8b7bd3742c99906973274c. This keeps the main command class fairly slim, and makes it a bit more obvious where the arguments to run() are coming from. Conflicts: source4/scripting/python/samba/netcmd/__init__.py source4/scripting/python/samba/netcmd/domain.py source4/scripting/python/samba/netcmd/gpo.py source4/scripting/python/samba/netcmd/newuser.py source4/scripting/python/samba/netcmd/testparm.py source4/scripting/python/samba/netcmd/user.py source4/scripting/python/samba/tests/samba_tool/__init__.py
2012-02-06 16:33:38 +01:00
takes_optiongroups = {
"sambaopts": options.SambaOptions,
"credopts": options.CredentialsOptions,
"versionopts": options.VersionOptions,
}
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
takes_options = [
samba-tool: add -H or --URL where necessary To improve consistency, I've made sure all the commands take either a -H or --URL when specifying a URL Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-25 11:56:10 -04:00
Option("-H", "--URL", help="LDB URL for database or target server", type=str,
metavar="URL", dest="H"),
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
Option("--force", help="Force seizing of the role without attempting to transfer first.", action="store_true"),
Option("--role", type="choice", choices=["rid", "pdc", "infrastructure","schema","naming","all"],
help="""The FSMO role to seize or transfer.\n
rid=RidAllocationMasterRole\n
schema=SchemaMasterRole\n
pdc=PdcEmulationMasterRole\n
naming=DomainNamingMasterRole\n
infrastructure=InfrastructureMasterRole\n
all=all of the above"""),
]
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
takes_args = []
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
def seize_role(self, role, samdb, force):
res = samdb.search("",
scope=ldb.SCOPE_BASE, attrs=["dsServiceName"])
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
assert len(res) == 1
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
serviceName = res[0]["dsServiceName"][0]
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
domain_dn = samdb.domain_dn()
s4-samba-tool: Fix samba-tool fsmo seize This is currently untested, and a restructure broke it. Andrew Bartlett
2012-04-19 13:57:29 +10:00
self.infrastructure_dn = "CN=Infrastructure," + domain_dn
self.naming_dn = "CN=Partitions,%s" % samdb.get_config_basedn()
self.schema_dn = samdb.get_schema_basedn()
self.rid_dn = "CN=RID Manager$,CN=System," + domain_dn
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
m = ldb.Message()
if role == "rid":
m.dn = ldb.Dn(samdb, self.rid_dn)
elif role == "pdc":
m.dn = ldb.Dn(samdb, domain_dn)
elif role == "naming":
m.dn = ldb.Dn(samdb, self.naming_dn)
elif role == "infrastructure":
Fixed a bug caused by a typo. Infrastructure role didn't work.
2010-01-29 15:42:46 +02:00
m.dn = ldb.Dn(samdb, self.infrastructure_dn)
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
elif role == "schema":
m.dn = ldb.Dn(samdb, self.schema_dn)
else:
raise CommandError("Invalid FSMO role.")
#first try to transfer to avoid problem if the owner is still active
if force is None:
self.message("Attempting transfer...")
try:
s4-samba-tool: Fix samba-tool fsmo seize This is currently untested, and a restructure broke it. Andrew Bartlett
2012-04-19 13:57:29 +10:00
transfer_role(self.outf, role, samdb)
except CommandError:
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
#transfer failed, use the big axe...
s4-fsmo: nicer error messages on failed FSMO transfers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-28 15:32:41 +11:00
self.message("Transfer unsuccessful, seizing...")
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
m["fSMORoleOwner"]= ldb.MessageElement(
serviceName, ldb.FLAG_MOD_REPLACE,
"fSMORoleOwner")
else:
self.message("Will not attempt transfer, seizing...")
m["fSMORoleOwner"]= ldb.MessageElement(
serviceName, ldb.FLAG_MOD_REPLACE,
"fSMORoleOwner")
s4-fsmo: nicer error messages on failed FSMO transfers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-28 15:32:41 +11:00
try:
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
samdb.modify(m)
s4-fsmo: nicer error messages on failed FSMO transfers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-28 15:32:41 +11:00
except LdbError, (num, msg):
s4-fsmo: say which role is being transferred this is particularly useful for "samba-tool fsmo transfer --role=all"
2011-03-28 16:48:46 +11:00
raise CommandError("Failed to initiate role seize of '%s' role: %s" % (role, msg))
samba-tool: Use self.outf in a few more places. Autobuild-User: Jelmer Vernooij <jelmer@samba.org> Autobuild-Date: Thu Oct 13 05:06:52 CEST 2011 on sn-devel-104
2011-10-13 00:36:44 +02:00
self.outf.write("FSMO transfer of '%s' role successful\n" % role)
s4-fsmo: nicer error messages on failed FSMO transfers Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-03-28 15:32:41 +11:00
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
def run(self, force=None, H=None, role=None,
credopts=None, sambaopts=None, versionopts=None):
samba-tool: Don't require full prog line to be in synopsis.
2011-10-13 23:27:22 +02:00
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
lp = sambaopts.get_loadparm()
creds = credopts.get_credentials(lp, fallback_machine=True)
samdb = SamDB(url=H, session_info=system_session(),
credentials=creds, lp=lp)
if role == "all":
self.seize_role("rid", samdb, force)
self.seize_role("pdc", samdb, force)
self.seize_role("naming", samdb, force)
self.seize_role("infrastructure", samdb, force)
self.seize_role("schema", samdb, force)
else:
self.seize_role(role, samdb, force)
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
class cmd_fsmo_show(Command):
"""Show the roles"""
samba-tool: Don't require full prog line to be in synopsis.
2011-10-13 23:27:22 +02:00
synopsis = "%prog [options]"
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
s4:samba-tool fsmo * - fix missing "takes_optiongroups" This has been reported in bug #8755. Reviewed-by: Jelmer
2012-02-17 21:24:48 +01:00
takes_optiongroups = {
"sambaopts": options.SambaOptions,
"credopts": options.CredentialsOptions,
"versionopts": options.VersionOptions,
}
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
takes_options = [
Option("-H", "--URL", help="LDB URL for database or target server", type=str,
metavar="URL", dest="H"),
]
takes_args = []
samba-tool: Don't require full prog line to be in synopsis.
2011-10-13 23:27:22 +02:00
def run(self, H=None, credopts=None, sambaopts=None, versionopts=None):
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
lp = sambaopts.get_loadparm()
samba-tools: more reasonable defaults for samba-tool commands - fallback to machine account where possible - default to local hostname where this is reasonable
2010-12-08 08:20:54 +11:00
creds = credopts.get_credentials(lp, fallback_machine=True)
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
samba-tool: add -H or --URL where necessary To improve consistency, I've made sure all the commands take either a -H or --URL when specifying a URL Signed-off-by: Andrew Tridgell <tridge@samba.org>
2011-07-25 11:56:10 -04:00
samdb = SamDB(url=H, session_info=system_session(),
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
credentials=creds, lp=lp)
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
domain_dn = samdb.domain_dn()
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
self.infrastructure_dn = "CN=Infrastructure," + domain_dn
pyldb: fixed places where we try to concatenate a Dn with a string you need to either use str(dn) or use %s in a format string
2011-09-16 15:15:35 +10:00
self.naming_dn = "CN=Partitions,%s" % samdb.get_config_basedn()
samba-tool: use get_config_basedn() to get configuration NC DN this allows these commands to work for subdomains Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2011-09-16 11:18:05 +10:00
self.schema_dn = samdb.get_schema_basedn()
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
self.rid_dn = "CN=RID Manager$,CN=System," + domain_dn
res = samdb.search(self.infrastructure_dn,
scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
assert len(res) == 1
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
self.infrastructureMaster = res[0]["fSMORoleOwner"][0]
res = samdb.search(domain_dn,
scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
assert len(res) == 1
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
self.pdcEmulator = res[0]["fSMORoleOwner"][0]
res = samdb.search(self.naming_dn,
scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
assert len(res) == 1
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
self.namingMaster = res[0]["fSMORoleOwner"][0]
res = samdb.search(self.schema_dn,
scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
assert len(res) == 1
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
self.schemaMaster = res[0]["fSMORoleOwner"][0]
res = samdb.search(self.rid_dn,
scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
s4-python: Fix formatting, use standard convention to call instance methods.
2010-04-08 23:18:17 +02:00
assert len(res) == 1
Implemented net fsmo command for transferring fsmo roles The command allows the user to transfer a fsmo role to the server to which the connection is established. Roles can be transferred or seized. By default a transfer is attempted even if seize option is chosen, as it is dangerous to seize a role if the current owner is still running. example use: net fsmo show --host=hostnameoraddress --username=username --password=password net fsmo transfer --role=role --host=hostnameoraddress --username=username --password=password net fsmo seize --role=role --host=hostnameoraddress --username=username --password=password [--force] Tested against Win2008. Does not work for samba 4 yet as we are missing the GetNCChanges extensions.
2010-01-27 17:57:37 +02:00
self.ridMaster = res[0]["fSMORoleOwner"][0]
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
self.message("InfrastructureMasterRole owner: " + self.infrastructureMaster)
self.message("RidAllocationMasterRole owner: " + self.ridMaster)
self.message("PdcEmulationMasterRole owner: " + self.pdcEmulator)
self.message("DomainNamingMasterRole owner: " + self.namingMaster)
self.message("SchemaMasterRole owner: " + self.schemaMaster)
class cmd_fsmo_transfer(Command):
"""Transfer the role"""
samba-tool: Don't require full prog line to be in synopsis.
2011-10-13 23:27:22 +02:00
synopsis = "%prog [options]"
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
s4:samba-tool fsmo * - fix missing "takes_optiongroups" This has been reported in bug #8755. Reviewed-by: Jelmer
2012-02-17 21:24:48 +01:00
takes_optiongroups = {
"sambaopts": options.SambaOptions,
"credopts": options.CredentialsOptions,
"versionopts": options.VersionOptions,
}
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
takes_options = [
Option("-H", "--URL", help="LDB URL for database or target server", type=str,
metavar="URL", dest="H"),
Option("--role", type="choice", choices=["rid", "pdc", "infrastructure","schema","naming","all"],
help="""The FSMO role to seize or transfer.\n
rid=RidAllocationMasterRole\n
schema=SchemaMasterRole\n
pdc=PdcEmulationMasterRole\n
naming=DomainNamingMasterRole\n
infrastructure=InfrastructureMasterRole\n
all=all of the above"""),
]
takes_args = []
def run(self, force=None, H=None, role=None,
credopts=None, sambaopts=None, versionopts=None):
lp = sambaopts.get_loadparm()
creds = credopts.get_credentials(lp, fallback_machine=True)
samdb = SamDB(url=H, session_info=system_session(),
s4-python: Various formatting fixes. * Trailing whitespace * use of "==" where "is" should be used * double spaces
2012-09-27 09:30:47 -07:00
credentials=creds, lp=lp)
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
if role == "all":
s4-samba-tool: Fix samba-tool fsmo seize This is currently untested, and a restructure broke it. Andrew Bartlett
2012-04-19 13:57:29 +10:00
transfer_role(self.outf, "rid", samdb)
transfer_role(self.outf, "pdc", samdb)
transfer_role(self.outf, "naming", samdb)
transfer_role(self.outf, "infrastructure", samdb)
transfer_role(self.outf, "schema", samdb)
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
else:
s4-samba-tool: Fix samba-tool fsmo seize This is currently untested, and a restructure broke it. Andrew Bartlett
2012-04-19 13:57:29 +10:00
transfer_role(self.outf, role, samdb)
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
class cmd_fsmo(SuperCommand):
samba-tool: epilog option to OptionParser available in python >= 2.6 Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-09-09 13:27:13 +10:00
"""Flexible Single Master Operations (FSMO) roles management"""
samba-tool: Changed fsmo implementation Changed fsmo code to fit the object <action> model Signed-off-by: Amitay Isaacs <amitay@gmail.com> Signed-off-by: Andrew Bartlett <abartlet@samba.org>
2011-08-02 18:05:54 -04:00
subcommands = {}
subcommands["seize"] = cmd_fsmo_seize()
subcommands["show"] = cmd_fsmo_show()
subcommands["transfer"] = cmd_fsmo_transfer()
Copy Permalink