2 Unix SMB/CIFS implementation.
3 Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007-2010
4 Copyright (C) Matthias Dieter Wallnöfer 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "libcli/util/pyerrors.h"
23 #include "dsdb/samdb/samdb.h"
24 #include "lib/ldb/pyldb.h"
25 #include "libcli/security/security.h"
26 #include "librpc/ndr/libndr.h"
28 /* FIXME: These should be in a header file somewhere, once we finish moving
29 * away from SWIG .. */
30 #define PyErr_LDB_OR_RAISE(py_ldb, ldb) \
31 /* if (!PyLdb_Check(py_ldb)) { \
32 PyErr_SetString(py_ldb_get_exception(), "Ldb connection object required"); \
35 ldb = PyLdb_AsLdbContext(py_ldb);
37 static PyObject *py_ldb_get_exception(void)
39 PyObject *mod = PyImport_ImportModule("ldb");
43 return PyObject_GetAttrString(mod, "LdbError");
46 static void PyErr_SetLdbError(PyObject *error, int ret, struct ldb_context *ldb_ctx)
48 if (ret == LDB_ERR_PYTHON_EXCEPTION)
49 return; /* Python exception should already be set, just keep that */
51 PyErr_SetObject(error,
52 Py_BuildValue(discard_const_p(char, "(i,s)"), ret,
53 ldb_ctx == NULL?ldb_strerror(ret):ldb_errstring(ldb_ctx)));
56 static PyObject *py_samdb_server_site_name(PyObject *self, PyObject *args)
58 PyObject *py_ldb, *result;
59 struct ldb_context *ldb;
63 if (!PyArg_ParseTuple(args, "O", &py_ldb))
66 PyErr_LDB_OR_RAISE(py_ldb, ldb);
68 mem_ctx = talloc_new(NULL);
70 site = samdb_server_site_name(ldb, mem_ctx);
72 PyErr_SetString(PyExc_RuntimeError, "Failed to find server site");
77 result = PyString_FromString(site);
82 static PyObject *py_dsdb_convert_schema_to_openldap(PyObject *self,
85 char *target_str, *mapping;
87 struct ldb_context *ldb;
91 if (!PyArg_ParseTuple(args, "Oss", &py_ldb, &target_str, &mapping))
94 PyErr_LDB_OR_RAISE(py_ldb, ldb);
96 retstr = dsdb_convert_schema_to_openldap(ldb, target_str, mapping);
98 PyErr_SetString(PyExc_RuntimeError,
99 "dsdb_convert_schema_to_openldap failed");
103 ret = PyString_FromString(retstr);
108 static PyObject *py_samdb_set_domain_sid(PyLdbObject *self, PyObject *args)
110 PyObject *py_ldb, *py_sid;
111 struct ldb_context *ldb;
115 if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_sid))
118 PyErr_LDB_OR_RAISE(py_ldb, ldb);
120 sid = dom_sid_parse_talloc(NULL, PyString_AsString(py_sid));
122 ret = samdb_set_domain_sid(ldb, sid);
124 PyErr_SetString(PyExc_RuntimeError, "set_domain_sid failed");
130 static PyObject *py_samdb_set_ntds_settings_dn(PyLdbObject *self, PyObject *args)
132 PyObject *py_ldb, *py_ntds_settings_dn;
133 struct ldb_context *ldb;
134 struct ldb_dn *ntds_settings_dn;
138 if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_ntds_settings_dn))
141 PyErr_LDB_OR_RAISE(py_ldb, ldb);
143 tmp_ctx = talloc_new(NULL);
144 if (tmp_ctx == NULL) {
149 if (!PyObject_AsDn(tmp_ctx, py_ntds_settings_dn, ldb, &ntds_settings_dn)) {
153 ret = samdb_set_ntds_settings_dn(ldb, ntds_settings_dn);
154 talloc_free(tmp_ctx);
156 PyErr_SetString(PyExc_RuntimeError, "set_ntds_settings_dn failed");
162 static PyObject *py_samdb_get_domain_sid(PyLdbObject *self, PyObject *args)
165 struct ldb_context *ldb;
166 const struct dom_sid *sid;
170 if (!PyArg_ParseTuple(args, "O", &py_ldb))
173 PyErr_LDB_OR_RAISE(py_ldb, ldb);
175 sid = samdb_domain_sid(ldb);
177 PyErr_SetString(PyExc_RuntimeError, "samdb_domain_sid failed");
180 retstr = dom_sid_string(NULL, sid);
181 ret = PyString_FromString(retstr);
186 static PyObject *py_samdb_ntds_invocation_id(PyObject *self, PyObject *args)
188 PyObject *py_ldb, *result;
189 struct ldb_context *ldb;
191 const struct GUID *guid;
193 mem_ctx = talloc_new(NULL);
194 if (mem_ctx == NULL) {
199 if (!PyArg_ParseTuple(args, "O", &py_ldb)) {
200 talloc_free(mem_ctx);
204 PyErr_LDB_OR_RAISE(py_ldb, ldb);
206 guid = samdb_ntds_invocation_id(ldb);
208 PyErr_SetString(PyExc_RuntimeError,
209 "Failed to find NTDS invocation ID");
210 talloc_free(mem_ctx);
214 result = PyString_FromString(GUID_string(mem_ctx, guid));
215 talloc_free(mem_ctx);
219 static PyObject *py_dsdb_get_oid_from_attid(PyObject *self, PyObject *args)
222 struct ldb_context *ldb;
224 struct dsdb_schema *schema;
230 if (!PyArg_ParseTuple(args, "Oi", &py_ldb, &attid))
233 mem_ctx = talloc_new(NULL);
234 if (mem_ctx == NULL) {
239 PyErr_LDB_OR_RAISE(py_ldb, ldb);
241 schema = dsdb_get_schema(ldb, NULL);
244 PyErr_SetString(PyExc_RuntimeError, "Failed to find a schema from ldb \n");
245 talloc_free(mem_ctx);
249 status = dsdb_schema_pfm_oid_from_attid(schema->prefixmap, attid,
251 PyErr_WERROR_IS_ERR_RAISE(status);
253 ret = PyString_FromString(oid);
255 talloc_free(mem_ctx);
260 static PyObject *py_dsdb_set_ntds_invocation_id(PyObject *self, PyObject *args)
262 PyObject *py_ldb, *py_guid;
265 struct ldb_context *ldb;
266 if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_guid))
269 PyErr_LDB_OR_RAISE(py_ldb, ldb);
270 GUID_from_string(PyString_AsString(py_guid), &guid);
272 ret = samdb_set_ntds_invocation_id(ldb, &guid);
274 PyErr_SetString(PyExc_RuntimeError, "set_ntds_invocation_id failed");
280 static PyObject *py_samdb_ntds_objectGUID(PyObject *self, PyObject *args)
282 PyObject *py_ldb, *result;
283 struct ldb_context *ldb;
285 const struct GUID *guid;
287 mem_ctx = talloc_new(NULL);
288 if (mem_ctx == NULL) {
293 if (!PyArg_ParseTuple(args, "O", &py_ldb)) {
294 talloc_free(mem_ctx);
298 PyErr_LDB_OR_RAISE(py_ldb, ldb);
300 guid = samdb_ntds_objectGUID(ldb);
302 PyErr_SetString(PyExc_RuntimeError, "Failed to find NTDS GUID");
303 talloc_free(mem_ctx);
307 result = PyString_FromString(GUID_string(mem_ctx, guid));
308 talloc_free(mem_ctx);
312 static PyObject *py_dsdb_set_global_schema(PyObject *self, PyObject *args)
315 struct ldb_context *ldb;
317 if (!PyArg_ParseTuple(args, "O", &py_ldb))
320 PyErr_LDB_OR_RAISE(py_ldb, ldb);
322 ret = dsdb_set_global_schema(ldb);
323 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret, ldb);
328 static PyObject *py_dsdb_load_partition_usn(PyObject *self, PyObject *args)
330 PyObject *py_dn, *py_ldb, *result;
332 uint64_t highest_uSN, urgent_uSN;
333 struct ldb_context *ldb;
337 mem_ctx = talloc_new(NULL);
338 if (mem_ctx == NULL) {
343 if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_dn)) {
344 talloc_free(mem_ctx);
348 PyErr_LDB_OR_RAISE(py_ldb, ldb);
350 if (!PyObject_AsDn(mem_ctx, py_dn, ldb, &dn)) {
351 talloc_free(mem_ctx);
355 ret = dsdb_load_partition_usn(ldb, dn, &highest_uSN, &urgent_uSN);
356 if (ret != LDB_SUCCESS) {
357 char *errstr = talloc_asprintf(mem_ctx, "Failed to load partition uSN - %s", ldb_errstring(ldb));
358 PyErr_SetString(PyExc_RuntimeError, errstr);
359 talloc_free(mem_ctx);
363 talloc_free(mem_ctx);
365 result = PyDict_New();
367 PyDict_SetItemString(result, "uSNHighest", PyInt_FromLong((uint64_t)highest_uSN));
368 PyDict_SetItemString(result, "uSNUrgent", PyInt_FromLong((uint64_t)urgent_uSN));
374 static PyObject *py_dsdb_set_am_rodc(PyObject *self, PyObject *args)
378 struct ldb_context *ldb;
381 if (!PyArg_ParseTuple(args, "Oi", &py_ldb, &py_val))
384 PyErr_LDB_OR_RAISE(py_ldb, ldb);
385 ret = samdb_set_am_rodc(ldb, (bool)py_val);
387 PyErr_SetString(PyExc_RuntimeError, "set_am_rodc failed");
393 static PyObject *py_dsdb_set_schema_from_ldif(PyObject *self, PyObject *args)
398 struct ldb_context *ldb;
400 if (!PyArg_ParseTuple(args, "Oss", &py_ldb, &pf, &df))
403 PyErr_LDB_OR_RAISE(py_ldb, ldb);
405 result = dsdb_set_schema_from_ldif(ldb, pf, df);
406 PyErr_WERROR_IS_ERR_RAISE(result);
411 static PyObject *py_dsdb_set_schema_from_ldb(PyObject *self, PyObject *args)
414 struct ldb_context *ldb;
415 PyObject *py_from_ldb;
416 struct ldb_context *from_ldb;
417 struct dsdb_schema *schema;
419 if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_from_ldb))
422 PyErr_LDB_OR_RAISE(py_ldb, ldb);
424 PyErr_LDB_OR_RAISE(py_from_ldb, from_ldb);
426 schema = dsdb_get_schema(from_ldb, NULL);
428 PyErr_SetString(PyExc_RuntimeError, "Failed to set find a schema on 'from' ldb!\n");
432 ret = dsdb_reference_schema(ldb, schema, true);
433 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret, ldb);
438 static PyObject *py_dsdb_write_prefixes_from_schema_to_ldb(PyObject *self, PyObject *args)
441 struct ldb_context *ldb;
443 struct dsdb_schema *schema;
445 if (!PyArg_ParseTuple(args, "O", &py_ldb))
448 PyErr_LDB_OR_RAISE(py_ldb, ldb);
450 schema = dsdb_get_schema(ldb, NULL);
452 PyErr_SetString(PyExc_RuntimeError, "Failed to set find a schema on ldb!\n");
456 result = dsdb_write_prefixes_from_schema_to_ldb(NULL, ldb, schema);
457 PyErr_WERROR_IS_ERR_RAISE(result);
464 static PyMethodDef py_dsdb_methods[] = {
465 { "_samdb_server_site_name", (PyCFunction)py_samdb_server_site_name,
466 METH_VARARGS, "Get the server site name as a string"},
467 { "_dsdb_convert_schema_to_openldap",
468 (PyCFunction)py_dsdb_convert_schema_to_openldap, METH_VARARGS,
469 "dsdb_convert_schema_to_openldap(ldb, target_str, mapping) -> str\n"
470 "Create an OpenLDAP schema from a schema." },
471 { "_samdb_set_domain_sid", (PyCFunction)py_samdb_set_domain_sid,
473 "samdb_set_domain_sid(samdb, sid)\n"
474 "Set SID of domain to use." },
475 { "_samdb_get_domain_sid", (PyCFunction)py_samdb_get_domain_sid,
477 "samdb_get_domain_sid(samdb)\n"
478 "Get SID of domain in use." },
479 { "_samdb_ntds_invocation_id", (PyCFunction)py_samdb_ntds_invocation_id,
480 METH_VARARGS, "get the NTDS invocation ID GUID as a string"},
481 { "_samdb_set_ntds_settings_dn", (PyCFunction)py_samdb_set_ntds_settings_dn,
483 "samdb_set_ntds_settings_dn(samdb, ntds_settings_dn)\n"
484 "Set NTDS Settings DN for this LDB (allows it to be set before the DB fully exists)." },
485 { "_dsdb_get_oid_from_attid", (PyCFunction)py_dsdb_get_oid_from_attid,
486 METH_VARARGS, NULL },
487 { "_dsdb_set_ntds_invocation_id",
488 (PyCFunction)py_dsdb_set_ntds_invocation_id, METH_VARARGS,
490 { "_samdb_ntds_objectGUID", (PyCFunction)py_samdb_ntds_objectGUID,
491 METH_VARARGS, "get the NTDS objectGUID as a string"},
492 { "_dsdb_set_global_schema", (PyCFunction)py_dsdb_set_global_schema,
493 METH_VARARGS, NULL },
494 { "_dsdb_load_partition_usn", (PyCFunction)py_dsdb_load_partition_usn,
496 "get uSNHighest and uSNUrgent from the partition @REPLCHANGED"},
497 { "_dsdb_set_am_rodc",
498 (PyCFunction)py_dsdb_set_am_rodc, METH_VARARGS,
500 { "_dsdb_set_schema_from_ldif", (PyCFunction)py_dsdb_set_schema_from_ldif, METH_VARARGS,
502 { "_dsdb_set_schema_from_ldb", (PyCFunction)py_dsdb_set_schema_from_ldb, METH_VARARGS,
504 { "_dsdb_write_prefixes_from_schema_to_ldb", (PyCFunction)py_dsdb_write_prefixes_from_schema_to_ldb, METH_VARARGS,
513 m = Py_InitModule3("dsdb", py_dsdb_methods,
514 "Python bindings for the directory service databases.");
518 /* "userAccountControl" flags */
519 PyModule_AddObject(m, "UF_NORMAL_ACCOUNT",
520 PyInt_FromLong(UF_NORMAL_ACCOUNT));
521 PyModule_AddObject(m, "UF_TEMP_DUPLICATE_ACCOUNT",
522 PyInt_FromLong(UF_TEMP_DUPLICATE_ACCOUNT));
523 PyModule_AddObject(m, "UF_SERVER_TRUST_ACCOUNT",
524 PyInt_FromLong(UF_SERVER_TRUST_ACCOUNT));
525 PyModule_AddObject(m, "UF_WORKSTATION_TRUST_ACCOUNT",
526 PyInt_FromLong(UF_WORKSTATION_TRUST_ACCOUNT));
527 PyModule_AddObject(m, "UF_INTERDOMAIN_TRUST_ACCOUNT",
528 PyInt_FromLong(UF_INTERDOMAIN_TRUST_ACCOUNT));
529 PyModule_AddObject(m, "UF_PASSWD_NOTREQD",
530 PyInt_FromLong(UF_PASSWD_NOTREQD));
531 PyModule_AddObject(m, "UF_ACCOUNTDISABLE",
532 PyInt_FromLong(UF_ACCOUNTDISABLE));
534 /* "groupType" flags */
535 PyModule_AddObject(m, "GTYPE_SECURITY_BUILTIN_LOCAL_GROUP",
536 PyInt_FromLong(GTYPE_SECURITY_BUILTIN_LOCAL_GROUP));
537 PyModule_AddObject(m, "GTYPE_SECURITY_GLOBAL_GROUP",
538 PyInt_FromLong(GTYPE_SECURITY_GLOBAL_GROUP));
539 PyModule_AddObject(m, "GTYPE_SECURITY_DOMAIN_LOCAL_GROUP",
540 PyInt_FromLong(GTYPE_SECURITY_DOMAIN_LOCAL_GROUP));
541 PyModule_AddObject(m, "GTYPE_SECURITY_UNIVERSAL_GROUP",
542 PyInt_FromLong(GTYPE_SECURITY_UNIVERSAL_GROUP));
543 PyModule_AddObject(m, "GTYPE_DISTRIBUTION_GLOBAL_GROUP",
544 PyInt_FromLong(GTYPE_DISTRIBUTION_GLOBAL_GROUP));
545 PyModule_AddObject(m, "GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP",
546 PyInt_FromLong(GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP));
547 PyModule_AddObject(m, "GTYPE_DISTRIBUTION_UNIVERSAL_GROUP",
548 PyInt_FromLong(GTYPE_DISTRIBUTION_UNIVERSAL_GROUP));
550 /* "sAMAccountType" flags */
551 PyModule_AddObject(m, "ATYPE_NORMAL_ACCOUNT",
552 PyInt_FromLong(ATYPE_NORMAL_ACCOUNT));
553 PyModule_AddObject(m, "ATYPE_WORKSTATION_TRUST",
554 PyInt_FromLong(ATYPE_WORKSTATION_TRUST));
555 PyModule_AddObject(m, "ATYPE_INTERDOMAIN_TRUST",
556 PyInt_FromLong(ATYPE_INTERDOMAIN_TRUST));
557 PyModule_AddObject(m, "ATYPE_SECURITY_GLOBAL_GROUP",
558 PyInt_FromLong(ATYPE_SECURITY_GLOBAL_GROUP));
559 PyModule_AddObject(m, "ATYPE_SECURITY_LOCAL_GROUP",
560 PyInt_FromLong(ATYPE_SECURITY_LOCAL_GROUP));
561 PyModule_AddObject(m, "ATYPE_SECURITY_UNIVERSAL_GROUP",
562 PyInt_FromLong(ATYPE_SECURITY_UNIVERSAL_GROUP));
563 PyModule_AddObject(m, "ATYPE_DISTRIBUTION_GLOBAL_GROUP",
564 PyInt_FromLong(ATYPE_DISTRIBUTION_GLOBAL_GROUP));
565 PyModule_AddObject(m, "ATYPE_DISTRIBUTION_LOCAL_GROUP",
566 PyInt_FromLong(ATYPE_DISTRIBUTION_LOCAL_GROUP));
567 PyModule_AddObject(m, "ATYPE_DISTRIBUTION_UNIVERSAL_GROUP",
568 PyInt_FromLong(ATYPE_DISTRIBUTION_UNIVERSAL_GROUP));
570 /* "domainFunctionality", "forestFunctionality" flags in the rootDSE */
571 PyModule_AddObject(m, "DS_DOMAIN_FUNCTION_2000",
572 PyInt_FromLong(DS_DOMAIN_FUNCTION_2000));
573 PyModule_AddObject(m, "DS_DOMAIN_FUNCTION_2003_MIXED",
574 PyInt_FromLong(DS_DOMAIN_FUNCTION_2003_MIXED));
575 PyModule_AddObject(m, "DS_DOMAIN_FUNCTION_2003",
576 PyInt_FromLong(DS_DOMAIN_FUNCTION_2003));
577 PyModule_AddObject(m, "DS_DOMAIN_FUNCTION_2008",
578 PyInt_FromLong(DS_DOMAIN_FUNCTION_2008));
579 PyModule_AddObject(m, "DS_DOMAIN_FUNCTION_2008_R2",
580 PyInt_FromLong(DS_DOMAIN_FUNCTION_2008_R2));
582 /* "domainControllerFunctionality" flags in the rootDSE */
583 PyModule_AddObject(m, "DS_DC_FUNCTION_2000",
584 PyInt_FromLong(DS_DC_FUNCTION_2000));
585 PyModule_AddObject(m, "DS_DC_FUNCTION_2003",
586 PyInt_FromLong(DS_DC_FUNCTION_2003));
587 PyModule_AddObject(m, "DS_DC_FUNCTION_2008",
588 PyInt_FromLong(DS_DC_FUNCTION_2008));
589 PyModule_AddObject(m, "DS_DC_FUNCTION_2008_R2",
590 PyInt_FromLong(DS_DC_FUNCTION_2008_R2));