mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
4cb423f527
Using "#!/usr/bin/env python" is more portable. It still isn't ideal though, as we should really use the python path found at configure time. We do that in many places already, but some don't. Signed-off-by: Andrew Bartlett <abartlet@samba.org>
104 lines
3.2 KiB
Python
104 lines
3.2 KiB
Python
#!/usr/bin/env python
|
|
|
|
# Unix SMB/CIFS implementation.
|
|
# Copyright (C) 2008 Kai Blin <kai@samba.org>
|
|
#
|
|
#
|
|
# This program is free software; you can redistribute it and/or modify
|
|
# it under the terms of the GNU General Public License as published by
|
|
# the Free Software Foundation; either version 3 of the License, or
|
|
# (at your option) any later version.
|
|
#
|
|
# This program is distributed in the hope that it will be useful,
|
|
# but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
# GNU General Public License for more details.
|
|
#
|
|
# You should have received a copy of the GNU General Public License
|
|
# along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
#
|
|
|
|
"""Convenience functions for using the idmap database."""
|
|
|
|
__docformat__ = "restructuredText"
|
|
|
|
import ldb
|
|
import samba
|
|
|
|
class IDmapDB(samba.Ldb):
|
|
"""The IDmap database."""
|
|
|
|
# Mappings for ID_TYPE_UID, ID_TYPE_GID and ID_TYPE_BOTH
|
|
TYPE_UID = 1
|
|
TYPE_GID = 2
|
|
TYPE_BOTH = 3
|
|
|
|
def __init__(self, url=None, lp=None, modules_dir=None, session_info=None,
|
|
credentials=None, flags=0, options=None):
|
|
"""Opens the IDMap Database
|
|
For parameter meanings see the super class (samba.Ldb)
|
|
"""
|
|
|
|
self.lp = lp
|
|
if url is None:
|
|
url = lp.get("idmap database")
|
|
|
|
super(IDmapDB, self).__init__(url=url, lp=lp, modules_dir=modules_dir,
|
|
session_info=session_info, credentials=credentials, flags=flags,
|
|
options=options)
|
|
|
|
def connect(self, url=None, flags=0, options=None):
|
|
super(IDmapDB, self).connect(url=self.lp.private_path(url), flags=flags,
|
|
options=options)
|
|
|
|
|
|
def increment_xid(self):
|
|
"""Increment xidNumber, if not present it create and assign it to the lowerBound
|
|
|
|
:return xid can that be used for SID/unixid mapping
|
|
"""
|
|
res = self.search(expression="dn=CN=CONFIG", base="",
|
|
scope=ldb.SCOPE_SUBTREE)
|
|
id = res[0].get("xidNumber")
|
|
flag = ldb.FLAG_MOD_REPLACE
|
|
if id is None:
|
|
id = res[0].get("lowerBound")
|
|
flag = ldb.FLAG_MOD_ADD
|
|
newid = int(str(id)) + 1
|
|
msg = ldb.Message()
|
|
msg.dn = ldb.Dn(self, "CN=CONFIG")
|
|
msg["xidNumber"] = ldb.MessageElement(str(newid), flag, "xidNumber")
|
|
self.modify(msg)
|
|
return id
|
|
|
|
def setup_name_mapping(self, sid, type, unixid=None):
|
|
"""Setup a mapping between a sam name and a unix name.
|
|
|
|
:param sid: SID of the NT-side of the mapping.
|
|
:param unixname: Unix id to map to, if none supplied the next one will be selected
|
|
"""
|
|
if unixid is None:
|
|
unixid = self.increment_xid()
|
|
type_string = ""
|
|
if type == self.TYPE_UID:
|
|
type_string = "ID_TYPE_UID"
|
|
elif type == self.TYPE_GID:
|
|
type_string = "ID_TYPE_GID"
|
|
elif type == self.TYPE_BOTH:
|
|
type_string = "ID_TYPE_BOTH"
|
|
else:
|
|
return
|
|
|
|
mod = """
|
|
dn: CN=%s
|
|
xidNumber: %s
|
|
objectSid: %s
|
|
objectClass: sidMap
|
|
type: %s
|
|
cn: %s
|
|
|
|
""" % (sid, unixid, sid, type_string, sid)
|
|
self.add(self.parse_ldif(mod).next()[1])
|
|
|
|
|