mirror of
https://github.com/samba-team/samba.git
synced 2024-12-27 03:21:53 +03:00
211c9a5f85
Signed-off-by: Joe Guo <joeg@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org> Reviewed-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
100 lines
3.2 KiB
Python
100 lines
3.2 KiB
Python
# Unix SMB/CIFS implementation.
|
|
# Copyright (C) 2008 Kai Blin <kai@samba.org>
|
|
#
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
"""Convenience functions for using the idmap database."""
|
|
|
|
__docformat__ = "restructuredText"
|
|
|
|
import ldb
|
|
import samba
|
|
|
|
|
|
class IDmapDB(samba.Ldb):
|
|
"""The IDmap database."""
|
|
|
|
# Mappings for ID_TYPE_UID, ID_TYPE_GID and ID_TYPE_BOTH
|
|
TYPE_UID = 1
|
|
TYPE_GID = 2
|
|
TYPE_BOTH = 3
|
|
|
|
def __init__(self, url=None, lp=None, modules_dir=None, session_info=None,
|
|
credentials=None, flags=0, options=None):
|
|
"""Opens the IDMap Database.
|
|
|
|
For parameter meanings see the super class (samba.Ldb)
|
|
"""
|
|
self.lp = lp
|
|
if url is None:
|
|
url = lp.private_path("idmap.ldb")
|
|
|
|
super(IDmapDB, self).__init__(url=url, lp=lp, modules_dir=modules_dir,
|
|
session_info=session_info, credentials=credentials, flags=flags,
|
|
options=options)
|
|
|
|
def connect(self, url=None, flags=0, options=None):
|
|
super(IDmapDB, self).connect(url=self.lp.private_path(url), flags=flags,
|
|
options=options)
|
|
|
|
def increment_xid(self):
|
|
"""Increment xidNumber, if not present it create and assign it to the lowerBound
|
|
|
|
:return xid can that be used for SID/unixid mapping
|
|
"""
|
|
res = self.search(expression="distinguishedName=CN=CONFIG", base="",
|
|
scope=ldb.SCOPE_SUBTREE)
|
|
id = res[0].get("xidNumber")
|
|
flag = ldb.FLAG_MOD_REPLACE
|
|
if id is None:
|
|
id = res[0].get("lowerBound")
|
|
flag = ldb.FLAG_MOD_ADD
|
|
newid = int(str(id)) + 1
|
|
msg = ldb.Message()
|
|
msg.dn = ldb.Dn(self, "CN=CONFIG")
|
|
msg["xidNumber"] = ldb.MessageElement(str(newid), flag, "xidNumber")
|
|
self.modify(msg)
|
|
return id
|
|
|
|
def setup_name_mapping(self, sid, type, unixid=None):
|
|
"""Setup a mapping between a sam name and a unix name.
|
|
|
|
:param sid: SID of the NT-side of the mapping.
|
|
:param unixname: Unix id to map to, if none supplied the next one will be selected
|
|
"""
|
|
if unixid is None:
|
|
unixid = self.increment_xid()
|
|
type_string = ""
|
|
if type == self.TYPE_UID:
|
|
type_string = "ID_TYPE_UID"
|
|
elif type == self.TYPE_GID:
|
|
type_string = "ID_TYPE_GID"
|
|
elif type == self.TYPE_BOTH:
|
|
type_string = "ID_TYPE_BOTH"
|
|
else:
|
|
return
|
|
|
|
mod = """
|
|
dn: CN=%s
|
|
xidNumber: %s
|
|
objectSid: %s
|
|
objectClass: sidMap
|
|
type: %s
|
|
cn: %s
|
|
|
|
""" % (sid, unixid, sid, type_string, sid)
|
|
self.add(next(self.parse_ldif(mod))[1])
|