2010-01-31 22:06:01 +03:00
#!/usr/bin/python
#
# Helpers for provision stuff
# Copyright (C) Matthieu Patou <mat@matws.net> 2009-2010
#
# Based on provision a Samba4 server by
# Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007-2008
# Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008
#
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program. If not, see <http://www.gnu.org/licenses/>.
import os
import string
import re
2010-03-01 05:29:47 +03:00
import shutil
2010-01-31 22:06:01 +03:00
2010-04-04 02:14:23 +04:00
from samba import Ldb
from samba . dsdb import DS_DOMAIN_FUNCTION_2000
2010-03-01 05:25:07 +03:00
from ldb import SCOPE_SUBTREE , SCOPE_ONELEVEL , SCOPE_BASE
2010-01-31 22:06:01 +03:00
import ldb
2010-03-01 05:25:07 +03:00
from samba . provision import ProvisionNames , provision_paths_from_lp , FILL_FULL , provision
2010-01-31 22:06:01 +03:00
from samba . provisionexceptions import ProvisioningError
from samba . dcerpc import misc , security
2010-03-01 05:25:07 +03:00
from samba . ndr import ndr_unpack
2010-01-31 22:06:01 +03:00
2010-03-01 05:25:07 +03:00
def get_paths ( param , targetdir = None , smbconf = None ) :
2010-03-01 05:29:47 +03:00
""" Get paths to important provision objects (smb.conf, ldb files, ...)
2010-02-21 21:29:36 +03:00
2010-03-01 05:29:47 +03:00
: param param : Param object
: param targetdir : Directory where the provision is ( or will be ) stored
: param smbconf : Path to the smb . conf file
: return : A list with the path of important provision objects """
if targetdir is not None :
etcdir = os . path . join ( targetdir , " etc " )
if not os . path . exists ( etcdir ) :
os . makedirs ( etcdir )
smbconf = os . path . join ( etcdir , " smb.conf " )
if smbconf is None :
smbconf = param . default_path ( )
2010-01-31 22:06:01 +03:00
2010-03-01 05:29:47 +03:00
if not os . path . exists ( smbconf ) :
raise ProvisioningError ( " Unable to find smb.conf ... " )
2010-01-31 22:06:01 +03:00
2010-03-01 05:29:47 +03:00
lp = param . LoadParm ( )
lp . load ( smbconf )
paths = provision_paths_from_lp ( lp , lp . get ( " realm " ) )
return paths
2010-01-31 22:06:01 +03:00
2010-03-01 05:25:07 +03:00
def find_provision_key_parameters ( param , credentials , session_info , paths , smbconf ) :
2010-03-01 05:29:47 +03:00
""" Get key provision parameters (realm, domain, ...) from a given provision
: param param : Param object
: param credentials : Credentials for the authentification
: param session_info : Session object
: param paths : A list of path to provision object
: param smbconf : Path to the smb . conf file
: return : A list of key provision parameters """
lp = param . LoadParm ( )
lp . load ( paths . smbconf )
names = ProvisionNames ( )
names . adminpass = None
# NT domain, kerberos realm, root dn, domain dn, domain dns name
names . domain = string . upper ( lp . get ( " workgroup " ) )
names . realm = lp . get ( " realm " )
basedn = " DC= " + names . realm . replace ( " . " , " ,DC= " )
names . dnsdomain = names . realm
names . realm = string . upper ( names . realm )
# netbiosname
secrets_ldb = Ldb ( paths . secrets , session_info = session_info , credentials = credentials , lp = lp , options = [ " modules:samba_secrets " ] )
# Get the netbiosname first (could be obtained from smb.conf in theory)
attrs = [ " sAMAccountName " ]
res = secrets_ldb . search ( expression = " (flatname= %s ) " % names . domain , base = " CN=Primary Domains " , scope = SCOPE_SUBTREE , attrs = attrs )
names . netbiosname = str ( res [ 0 ] [ " sAMAccountName " ] ) . replace ( " $ " , " " )
names . smbconf = smbconf
# It's important here to let ldb load with the old module or it's quite
# certain that the LDB won't load ...
samdb = Ldb ( paths . samdb , session_info = session_info ,
credentials = credentials , lp = lp , options = [ " modules:samba_dsdb " ] )
# That's a bit simplistic but it's ok as long as we have only 3
# partitions
attrs2 = [ " defaultNamingContext " , " schemaNamingContext " , " configurationNamingContext " , " rootDomainNamingContext " ]
current = samdb . search ( expression = " (objectClass=*) " , base = " " , scope = SCOPE_BASE , attrs = attrs2 )
names . configdn = current [ 0 ] [ " configurationNamingContext " ]
configdn = str ( names . configdn )
names . schemadn = current [ 0 ] [ " schemaNamingContext " ]
if not ( ldb . Dn ( samdb , basedn ) == ( ldb . Dn ( samdb , current [ 0 ] [ " defaultNamingContext " ] [ 0 ] ) ) ) :
raise ProvisioningError ( ( " basedn in %s ( %s ) and from %s ( %s ) is not the same ... " % ( paths . samdb , str ( current [ 0 ] [ " defaultNamingContext " ] [ 0 ] ) , paths . smbconf , basedn ) ) )
names . domaindn = current [ 0 ] [ " defaultNamingContext " ]
names . rootdn = current [ 0 ] [ " rootDomainNamingContext " ]
# default site name
attrs3 = [ " cn " ]
res3 = samdb . search ( expression = " (objectClass=*) " , base = " CN=Sites, " + configdn , scope = SCOPE_ONELEVEL , attrs = attrs3 )
names . sitename = str ( res3 [ 0 ] [ " cn " ] )
# dns hostname and server dn
attrs4 = [ " dNSHostName " ]
res4 = samdb . search ( expression = " (CN= %s ) " % names . netbiosname , base = " OU=Domain Controllers, " + basedn , \
scope = SCOPE_ONELEVEL , attrs = attrs4 )
names . hostname = str ( res4 [ 0 ] [ " dNSHostName " ] ) . replace ( " . " + names . dnsdomain , " " )
server_res = samdb . search ( expression = " serverReference= %s " % res4 [ 0 ] . dn , attrs = [ ] , base = configdn )
names . serverdn = server_res [ 0 ] . dn
# invocation id/objectguid
res5 = samdb . search ( expression = " (objectClass=*) " , base = " CN=NTDS Settings, %s " % str ( names . serverdn ) , scope = SCOPE_BASE , attrs = [ " invocationID " , " objectGUID " ] )
names . invocation = str ( ndr_unpack ( misc . GUID , res5 [ 0 ] [ " invocationId " ] [ 0 ] ) )
names . ntdsguid = str ( ndr_unpack ( misc . GUID , res5 [ 0 ] [ " objectGUID " ] [ 0 ] ) )
# domain guid/sid
attrs6 = [ " objectGUID " , " objectSid " , " msDS-Behavior-Version " ]
res6 = samdb . search ( expression = " (objectClass=*) " , base = basedn , scope = SCOPE_BASE , attrs = attrs6 )
names . domainguid = str ( ndr_unpack ( misc . GUID , res6 [ 0 ] [ " objectGUID " ] [ 0 ] ) )
names . domainsid = ndr_unpack ( security . dom_sid , res6 [ 0 ] [ " objectSid " ] [ 0 ] )
if res6 [ 0 ] . get ( " msDS-Behavior-Version " ) == None or int ( res6 [ 0 ] [ " msDS-Behavior-Version " ] [ 0 ] ) < DS_DOMAIN_FUNCTION_2000 :
names . domainlevel = DS_DOMAIN_FUNCTION_2000
else :
names . domainlevel = int ( res6 [ 0 ] [ " msDS-Behavior-Version " ] [ 0 ] )
# policy guid
attrs7 = [ " cn " , " displayName " ]
res7 = samdb . search ( expression = " (displayName=Default Domain Policy) " , base = " CN=Policies,CN=System, " + basedn , \
scope = SCOPE_ONELEVEL , attrs = attrs7 )
names . policyid = str ( res7 [ 0 ] [ " cn " ] ) . replace ( " { " , " " ) . replace ( " } " , " " )
# dc policy guid
attrs8 = [ " cn " , " displayName " ]
res8 = samdb . search ( expression = " (displayName=Default Domain Controllers Policy) " , base = " CN=Policies,CN=System, " + basedn , \
2010-03-01 06:46:40 +03:00
scope = SCOPE_ONELEVEL , attrs = attrs8 )
2010-03-01 05:29:47 +03:00
if len ( res8 ) == 1 :
names . policyid_dc = str ( res8 [ 0 ] [ " cn " ] ) . replace ( " { " , " " ) . replace ( " } " , " " )
else :
names . policyid_dc = None
return names
2010-01-31 22:06:01 +03:00
def newprovision ( names , setup_dir , creds , session , smbconf , provdir , messagefunc ) :
2010-03-01 05:29:47 +03:00
""" Create a new provision.
2010-03-01 05:25:07 +03:00
This provision will be the reference for knowing what has changed in the
since the latest upgrade in the current provision
2010-02-21 21:29:36 +03:00
2010-03-01 05:29:47 +03:00
: param names : List of provision parameters
: param setup_dis : Directory where the setup files are stored
: param creds : Credentials for the authentification
: param session : Session object
: param smbconf : Path to the smb . conf file
: param provdir : Directory where the provision will be stored
: param messagefunc : A function for displaying the message of the provision """
if os . path . isdir ( provdir ) :
shutil . rmtree ( provdir )
os . chdir ( os . path . join ( setup_dir , " .. " ) )
os . mkdir ( provdir )
messagefunc ( " Provision stored in %s " % provdir )
provision ( setup_dir , messagefunc ,
session , creds , smbconf = smbconf , targetdir = provdir ,
samdb_fill = FILL_FULL , realm = names . realm , domain = names . domain ,
domainguid = names . domainguid , domainsid = str ( names . domainsid ) , ntdsguid = names . ntdsguid ,
policyguid = names . policyid , policyguid_dc = names . policyid_dc , hostname = names . netbiosname ,
hostip = None , hostip6 = None ,
invocationid = names . invocation , adminpass = names . adminpass ,
krbtgtpass = None , machinepass = None ,
dnspass = None , root = None , nobody = None ,
wheel = None , users = None ,
serverrole = " domain controller " ,
ldap_backend_extra_port = None ,
backend_type = None ,
ldapadminpass = None ,
ol_mmr_urls = None ,
slapd_path = None ,
setup_ds_path = None ,
nosync = None ,
dom_for_fun_level = names . domainlevel ,
ldap_dryrun_mode = None , useeadb = True )
2010-01-31 22:06:01 +03:00
2010-03-01 05:41:52 +03:00
2010-01-31 22:06:01 +03:00
def dn_sort ( x , y ) :
2010-03-01 05:29:47 +03:00
""" Sorts two DNs in the lexicographical order it and put higher level DN before.
So given the dns cn = bar , cn = foo and cn = foo the later will be return as smaller
: param x : First object to compare
: param y : Second object to compare
"""
p = re . compile ( r ' (?<! \\ ), ' )
tab1 = p . split ( str ( x ) )
tab2 = p . split ( str ( y ) )
2010-03-01 05:41:52 +03:00
minimum = min ( len ( tab1 ) , len ( tab2 ) )
len1 = len ( tab1 ) - 1
len2 = len ( tab2 ) - 1
2010-03-01 05:29:47 +03:00
# Note: python range go up to upper limit but do not include it
2010-03-01 05:41:52 +03:00
for i in range ( 0 , minimum ) :
ret = cmp ( tab1 [ len1 - i ] , tab2 [ len2 - i ] )
if ret != 0 :
2010-03-01 05:29:47 +03:00
return ret
else :
2010-03-01 05:41:52 +03:00
if i == minimum - 1 :
assert len1 != len2 , " PB PB PB " + " " . join ( tab1 ) + " / " + " " . join ( tab2 )
if len1 > len2 :
2010-03-01 05:29:47 +03:00
return 1
else :
return - 1
return ret