mirror of
https://github.com/samba-team/samba.git
synced 2025-04-30 18:53:31 +03:00
At present the command supports only addition of control access rigts, done so DRS access checks can be tested. It will be expanded to deal with most ways to modify and view a DS ACL. Shifted commands a bit. What used to be net acl is now "net acl nt" as apposed to this, which is "net acl ds" ./bin/net acl ds set --help Usage: set --objectdn=objectdn --car=control right --action=[deny|allow] --trusteedn=trustee-dn Options: -h, --help show this help message and exit --host=HOST LDB URL for database or target server --car=CAR The access control right to allow or deny --action=ACTION Deny or allow access --objectdn=OBJECTDN DN of the object whose SD to modify --trusteedn=TRUSTEEDN DN of the entity that gets access Samba Common Options: -s FILE, --configfile=FILE Configuration file Credentials Options: --simple-bind-dn=DN DN to use for a simple bind --password=PASSWORD Password -U USERNAME, --username=USERNAME Username -W WORKGROUP, --workgroup=WORKGROUP Workgroup -N, --no-pass Don't ask for a password -k KERBEROS, --kerberos=KERBEROS Use Kerberos
150 lines
4.6 KiB
Python
150 lines
4.6 KiB
Python
#!/usr/bin/python
|
|
|
|
# Unix SMB/CIFS implementation.
|
|
# Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2009
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
import optparse
|
|
from samba import getopt as options
|
|
import sys
|
|
|
|
|
|
class Option(optparse.Option):
|
|
pass
|
|
|
|
|
|
class Command(object):
|
|
"""A net command."""
|
|
|
|
def _get_description(self):
|
|
return self.__doc__.splitlines()[0].rstrip("\n")
|
|
|
|
def _get_name(self):
|
|
name = self.__class__.__name__
|
|
if name.startswith("cmd_"):
|
|
return name[4:]
|
|
return name
|
|
|
|
name = property(_get_name)
|
|
|
|
def usage(self, *args):
|
|
parser, _ = self._create_parser()
|
|
parser.print_usage()
|
|
|
|
description = property(_get_description)
|
|
|
|
def _get_synopsis(self):
|
|
ret = self.name
|
|
if self.takes_args:
|
|
ret += " " + " ".join([x.upper() for x in self.takes_args])
|
|
return ret
|
|
|
|
synopsis = property(_get_synopsis)
|
|
|
|
takes_args = []
|
|
takes_options = []
|
|
takes_optiongroups = {}
|
|
|
|
def _create_parser(self):
|
|
parser = optparse.OptionParser(self.synopsis)
|
|
parser.prog = "net"
|
|
parser.add_options(self.takes_options)
|
|
optiongroups = {}
|
|
for name, optiongroup in self.takes_optiongroups.iteritems():
|
|
optiongroups[name] = optiongroup(parser)
|
|
parser.add_option_group(optiongroups[name])
|
|
return parser, optiongroups
|
|
|
|
def message(self, text):
|
|
print text
|
|
|
|
def _run(self, *argv):
|
|
parser, optiongroups = self._create_parser()
|
|
opts, args = parser.parse_args(list(argv))
|
|
# Filter out options from option groups
|
|
args = args[1:]
|
|
kwargs = dict(opts.__dict__)
|
|
for option_group in parser.option_groups:
|
|
for option in option_group.option_list:
|
|
del kwargs[option.dest]
|
|
kwargs.update(optiongroups)
|
|
min_args = 0
|
|
max_args = 0
|
|
for i, arg in enumerate(self.takes_args):
|
|
if arg[-1] not in ("?", "*"):
|
|
min_args += 1
|
|
max_args += 1
|
|
if arg[-1] == "*":
|
|
max_args = -1
|
|
if len(args) < min_args or (max_args != -1 and len(args) > max_args):
|
|
self.usage(*args)
|
|
return -1
|
|
try:
|
|
return self.run(*args, **kwargs)
|
|
except CommandError, e:
|
|
print >>sys.stderr, "ERROR: %s" % e
|
|
return -1
|
|
|
|
def run(self):
|
|
"""Run the command. This should be overriden by all subclasses."""
|
|
raise NotImplementedError(self.run)
|
|
|
|
|
|
class SuperCommand(Command):
|
|
"""A command with subcommands."""
|
|
|
|
subcommands = {}
|
|
|
|
def _run(self, myname, subcommand=None, *args):
|
|
if subcommand is None:
|
|
print "Available subcommands:"
|
|
for subcommand in self.subcommands:
|
|
print "\t%s" % subcommand
|
|
return 0
|
|
if not subcommand in self.subcommands:
|
|
raise CommandError("No such subcommand '%s'" % subcommand)
|
|
return self.subcommands[subcommand]._run(subcommand, *args)
|
|
|
|
def usage(self, myname, subcommand=None, *args):
|
|
if subcommand is None or not subcommand in self.subcommands:
|
|
print "Usage: %s (%s) [options]" % (myname,
|
|
" | ".join(self.subcommands.keys()))
|
|
else:
|
|
return self.subcommands[subcommand].usage(*args)
|
|
|
|
|
|
class CommandError(Exception):
|
|
pass
|
|
|
|
|
|
commands = {}
|
|
from samba.netcmd.pwsettings import cmd_pwsettings
|
|
commands["pwsettings"] = cmd_pwsettings()
|
|
from samba.netcmd.domainlevel import cmd_domainlevel
|
|
commands["domainlevel"] = cmd_domainlevel()
|
|
from samba.netcmd.setpassword import cmd_setpassword
|
|
commands["setpassword"] = cmd_setpassword()
|
|
from samba.netcmd.setexpiry import cmd_setexpiry
|
|
commands["setexpiry"] = cmd_setexpiry()
|
|
from samba.netcmd.enableaccount import cmd_enableaccount
|
|
commands["enableaccount"] = cmd_enableaccount()
|
|
from samba.netcmd.newuser import cmd_newuser
|
|
commands["newuser"] = cmd_newuser()
|
|
from samba.netcmd.netacl import cmd_acl
|
|
commands["acl"] = cmd_acl()
|
|
from samba.netcmd.fsmo import cmd_fsmo
|
|
commands["fsmo"] = cmd_fsmo()
|