3e6233b4c42a683000cb3a813223ac46a88aaefc
[ira/wip.git] / source4 / scripting / python / pyglue.c
1 /* 
2    Unix SMB/CIFS implementation.
3    Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
4    Copyright (C) Matthias Dieter Wallnöfer          2009
5    
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 3 of the License, or
9    (at your option) any later version.
10    
11    This program is distributed in the hope that it will be useful,
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
15    
16    You should have received a copy of the GNU General Public License
17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
18 */
19
20 #include "includes.h"
21 #include "ldb.h"
22 #include "ldb_errors.h"
23 #include "ldb_wrap.h"
24 #include "param/param.h"
25 #include "auth/credentials/credentials.h"
26 #include "dsdb/samdb/samdb.h"
27 #include "lib/ldb-samba/ldif_handlers.h"
28 #include "librpc/ndr/libndr.h"
29 #include "version.h"
30 #include <Python.h>
31 #include "lib/ldb/pyldb.h"
32 #include "libcli/util/pyerrors.h"
33 #include "libcli/security/security.h"
34 #include "auth/pyauth.h"
35 #include "param/pyparam.h"
36 #include "auth/credentials/pycredentials.h"
37
38 #ifndef Py_RETURN_NONE
39 #define Py_RETURN_NONE return Py_INCREF(Py_None), Py_None
40 #endif
41
42 /* FIXME: These should be in a header file somewhere, once we finish moving
43  * away from SWIG .. */
44 #define PyErr_LDB_OR_RAISE(py_ldb, ldb) \
45 /*      if (!PyLdb_Check(py_ldb)) { \
46                 PyErr_SetString(py_ldb_get_exception(), "Ldb connection object required"); \
47                 return NULL; \
48         } */\
49         ldb = PyLdb_AsLdbContext(py_ldb);
50
51 static void PyErr_SetLdbError(PyObject *error, int ret, struct ldb_context *ldb_ctx)
52 {
53         if (ret == LDB_ERR_PYTHON_EXCEPTION)
54                 return; /* Python exception should already be set, just keep that */
55
56         PyErr_SetObject(error, 
57                                         Py_BuildValue(discard_const_p(char, "(i,s)"), ret, 
58                                   ldb_ctx == NULL?ldb_strerror(ret):ldb_errstring(ldb_ctx)));
59 }
60
61 static PyObject *py_ldb_get_exception(void)
62 {
63         PyObject *mod = PyImport_ImportModule("ldb");
64         if (mod == NULL)
65                 return NULL;
66
67         return PyObject_GetAttrString(mod, "LdbError");
68 }
69
70 static PyObject *py_generate_random_str(PyObject *self, PyObject *args)
71 {
72         int len;
73         PyObject *ret;
74         char *retstr;
75         if (!PyArg_ParseTuple(args, "i", &len))
76                 return NULL;
77
78         retstr = generate_random_str(NULL, len);
79         ret = PyString_FromString(retstr);
80         talloc_free(retstr);
81         return ret;
82 }
83
84 static PyObject *py_unix2nttime(PyObject *self, PyObject *args)
85 {
86         time_t t;
87         NTTIME nt;
88         if (!PyArg_ParseTuple(args, "I", &t))
89                 return NULL;
90
91         unix_to_nt_time(&nt, t);
92
93         return PyInt_FromLong((uint64_t)nt);
94 }
95
96 static PyObject *py_set_debug_level(PyObject *self, PyObject *args)
97 {
98         unsigned level;
99         if (!PyArg_ParseTuple(args, "I", &level))
100                 return NULL;
101         (DEBUGLEVEL) = level;
102         Py_RETURN_NONE;
103 }
104
105 static PyObject *py_ldb_set_credentials(PyObject *self, PyObject *args)
106 {
107         PyObject *py_creds, *py_ldb;
108         struct cli_credentials *creds;
109         struct ldb_context *ldb;
110         if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_creds))
111                 return NULL;
112
113         PyErr_LDB_OR_RAISE(py_ldb, ldb);
114         
115         creds = cli_credentials_from_py_object(py_creds);
116         if (creds == NULL) {
117                 PyErr_SetString(PyExc_TypeError, "Expected credentials object");
118                 return NULL;
119         }
120
121         ldb_set_opaque(ldb, "credentials", creds);
122
123         Py_RETURN_NONE;
124 }
125
126 static PyObject *py_ldb_set_loadparm(PyObject *self, PyObject *args)
127 {
128         PyObject *py_lp_ctx, *py_ldb;
129         struct loadparm_context *lp_ctx;
130         struct ldb_context *ldb;
131         if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_lp_ctx))
132                 return NULL;
133
134         PyErr_LDB_OR_RAISE(py_ldb, ldb);
135
136         lp_ctx = lp_from_py_object(py_lp_ctx);
137         if (lp_ctx == NULL) {
138                 PyErr_SetString(PyExc_TypeError, "Expected loadparm object");
139                 return NULL;
140         }
141
142         ldb_set_opaque(ldb, "loadparm", lp_ctx);
143
144         Py_RETURN_NONE;
145 }
146
147
148 static PyObject *py_ldb_set_session_info(PyObject *self, PyObject *args)
149 {
150         PyObject *py_session_info, *py_ldb;
151         struct auth_session_info *info;
152         struct ldb_context *ldb;
153         if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_session_info))
154                 return NULL;
155
156         PyErr_LDB_OR_RAISE(py_ldb, ldb);
157         /*if (!PyAuthSession_Check(py_session_info)) {
158                 PyErr_SetString(PyExc_TypeError, "Expected session info object");
159                 return NULL;
160         }*/
161
162         info = PyAuthSession_AsSession(py_session_info);
163
164         ldb_set_opaque(ldb, "sessionInfo", info);
165
166         Py_RETURN_NONE;
167 }
168
169 static PyObject *py_ldb_set_utf8_casefold(PyObject *self, PyObject *args)
170 {
171         PyObject *py_ldb;
172         struct ldb_context *ldb;
173
174         if (!PyArg_ParseTuple(args, "O", &py_ldb))
175                 return NULL;
176
177         PyErr_LDB_OR_RAISE(py_ldb, ldb);
178
179         ldb_set_utf8_fns(ldb, NULL, wrap_casefold);
180
181         Py_RETURN_NONE;
182 }
183
184 static PyObject *py_samdb_set_domain_sid(PyLdbObject *self, PyObject *args)
185
186         PyObject *py_ldb, *py_sid;
187         struct ldb_context *ldb;
188         struct dom_sid *sid;
189         bool ret;
190
191         if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_sid))
192                 return NULL;
193         
194         PyErr_LDB_OR_RAISE(py_ldb, ldb);
195
196         sid = dom_sid_parse_talloc(NULL, PyString_AsString(py_sid));
197
198         ret = samdb_set_domain_sid(ldb, sid);
199         if (!ret) {
200                 PyErr_SetString(PyExc_RuntimeError, "set_domain_sid failed");
201                 return NULL;
202         } 
203         Py_RETURN_NONE;
204 }
205
206 static PyObject *py_samdb_get_domain_sid(PyLdbObject *self, PyObject *args)
207
208         PyObject *py_ldb;
209         struct ldb_context *ldb;
210         const struct dom_sid *sid;
211         PyObject *ret;
212         char *retstr;
213
214         if (!PyArg_ParseTuple(args, "O", &py_ldb))
215                 return NULL;
216         
217         PyErr_LDB_OR_RAISE(py_ldb, ldb);
218
219         sid = samdb_domain_sid(ldb);
220         if (!sid) {
221                 PyErr_SetString(PyExc_RuntimeError, "samdb_domain_sid failed");
222                 return NULL;
223         }
224
225         retstr = dom_sid_string(NULL, sid);
226         ret = PyString_FromString(retstr);
227         talloc_free(retstr);
228
229         return ret;
230 }
231
232 static PyObject *py_samdb_set_password(PyLdbObject *self, PyObject *args,
233         PyObject *kwargs)
234 {
235         PyObject *py_sam, *py_user_dn, *py_dom_dn, *py_mod, *py_user_change;
236         char *new_password;
237         bool user_change;
238         DATA_BLOB new_pwd_blob;
239         struct ldb_context *sam_ctx;
240         struct ldb_dn *user_dn, *dom_dn;
241         struct ldb_message *mod;
242         TALLOC_CTX *mem_ctx;
243         NTSTATUS status;
244         const char * const kwnames[] = { "samdb", "user_dn", "dom_dn", "mod",
245                 "new_password", "user_change", NULL };
246
247         if (!PyArg_ParseTupleAndKeywords(args, kwargs, "OOOOsO",
248                   discard_const_p(char *, kwnames),
249                   &py_sam, &py_user_dn, &py_dom_dn, &py_mod, &new_password,
250                   &py_user_change))
251                 return NULL;
252
253         sam_ctx = PyLdb_AsLdbContext(py_sam);
254
255         mem_ctx = talloc_new(NULL);
256         if (mem_ctx == NULL) {
257                 PyErr_NoMemory();
258         }
259
260         if (!PyObject_AsDn(mem_ctx, py_user_dn, sam_ctx, &user_dn)) {
261                 PyErr_SetString(PyExc_RuntimeError, "user_dn invalid!");
262                 return NULL;
263         }
264
265         if (!PyObject_AsDn(mem_ctx, py_dom_dn, sam_ctx, &dom_dn)) {
266                 PyErr_SetString(PyExc_RuntimeError, "dom_dn invalid!");
267                 return NULL;
268         }
269
270         mod = PyLdbMessage_AsMessage(py_mod);
271
272         user_change = PyInt_AsLong(py_user_change);
273
274         new_pwd_blob.data = (uint8_t *) new_password;
275         new_pwd_blob.length = strlen((char *) new_pwd_blob.data);
276
277         status = samdb_set_password(sam_ctx, mem_ctx, user_dn, dom_dn, mod,
278                 &new_pwd_blob, NULL, NULL, user_change, NULL, NULL);
279
280         talloc_free(mem_ctx);
281
282         PyErr_NTSTATUS_IS_ERR_RAISE(status);
283         Py_RETURN_NONE;
284 }
285
286 static PyObject *py_ldb_register_samba_handlers(PyObject *self, PyObject *args)
287 {
288         PyObject *py_ldb;
289         struct ldb_context *ldb;
290         int ret;
291
292         if (!PyArg_ParseTuple(args, "O", &py_ldb))
293                 return NULL;
294
295         PyErr_LDB_OR_RAISE(py_ldb, ldb);
296         ret = ldb_register_samba_handlers(ldb);
297
298         PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret, ldb);
299         Py_RETURN_NONE;
300 }
301
302 static PyObject *py_dsdb_set_ntds_invocation_id(PyObject *self, PyObject *args)
303 {
304         PyObject *py_ldb, *py_guid;
305         bool ret;
306         struct GUID guid;
307         struct ldb_context *ldb;
308         if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_guid))
309                 return NULL;
310
311         PyErr_LDB_OR_RAISE(py_ldb, ldb);
312         GUID_from_string(PyString_AsString(py_guid), &guid);
313
314         ret = samdb_set_ntds_invocation_id(ldb, &guid);
315         if (!ret) {
316                 PyErr_SetString(PyExc_RuntimeError, "set_ntds_invocation_id failed");
317                 return NULL;
318         }
319         Py_RETURN_NONE;
320 }
321
322 static PyObject *py_dsdb_set_opaque_integer(PyObject *self, PyObject *args)
323 {
324         PyObject *py_ldb;
325         int value;
326         int *old_val, *new_val;
327         char *py_opaque_name, *opaque_name_talloc;
328         struct ldb_context *ldb;
329         TALLOC_CTX *tmp_ctx;
330
331         if (!PyArg_ParseTuple(args, "Osi", &py_ldb, &py_opaque_name, &value))
332                 return NULL;
333
334         PyErr_LDB_OR_RAISE(py_ldb, ldb);
335
336         /* see if we have a cached copy */
337         old_val = (int *)ldb_get_opaque(ldb, 
338                                         py_opaque_name);
339
340         if (old_val) {
341                 *old_val = value;
342                 Py_RETURN_NONE;
343         } 
344
345         tmp_ctx = talloc_new(ldb);
346         if (tmp_ctx == NULL) {
347                 goto failed;
348         }
349         
350         new_val = talloc(tmp_ctx, int);
351         if (!new_val) {
352                 goto failed;
353         }
354         
355         opaque_name_talloc = talloc_strdup(tmp_ctx, py_opaque_name);
356         if (!opaque_name_talloc) {
357                 goto failed;
358         }
359         
360         *new_val = value;
361
362         /* cache the domain_sid in the ldb */
363         if (ldb_set_opaque(ldb, opaque_name_talloc, new_val) != LDB_SUCCESS) {
364                 goto failed;
365         }
366
367         talloc_steal(ldb, new_val);
368         talloc_steal(ldb, opaque_name_talloc);
369         talloc_free(tmp_ctx);
370
371         Py_RETURN_NONE;
372
373 failed:
374         talloc_free(tmp_ctx);
375         PyErr_SetString(PyExc_RuntimeError, "Failed to set opaque integer into the ldb!\n");
376         return NULL;
377 }
378
379 static PyObject *py_dsdb_set_global_schema(PyObject *self, PyObject *args)
380 {
381         PyObject *py_ldb;
382         struct ldb_context *ldb;
383         int ret;
384         if (!PyArg_ParseTuple(args, "O", &py_ldb))
385                 return NULL;
386
387         PyErr_LDB_OR_RAISE(py_ldb, ldb);
388
389         ret = dsdb_set_global_schema(ldb);
390         PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret, ldb);
391
392         Py_RETURN_NONE;
393 }
394
395 static PyObject *py_dsdb_set_schema_from_ldif(PyObject *self, PyObject *args)
396 {
397         WERROR result;
398         char *pf, *df;
399         PyObject *py_ldb;
400         struct ldb_context *ldb;
401
402         if (!PyArg_ParseTuple(args, "Oss", &py_ldb, &pf, &df))
403                 return NULL;
404
405         PyErr_LDB_OR_RAISE(py_ldb, ldb);
406
407         result = dsdb_set_schema_from_ldif(ldb, pf, df);
408         PyErr_WERROR_IS_ERR_RAISE(result);
409
410         Py_RETURN_NONE;
411 }
412
413 static PyObject *py_dsdb_convert_schema_to_openldap(PyObject *self, PyObject *args)
414 {
415         char *target_str, *mapping;
416         PyObject *py_ldb;
417         struct ldb_context *ldb;
418         PyObject *ret;
419         char *retstr;
420
421         if (!PyArg_ParseTuple(args, "Oss", &py_ldb, &target_str, &mapping))
422                 return NULL;
423
424         PyErr_LDB_OR_RAISE(py_ldb, ldb);
425
426         retstr = dsdb_convert_schema_to_openldap(ldb, target_str, mapping);
427         if (!retstr) {
428                 PyErr_SetString(PyExc_RuntimeError, "dsdb_convert_schema_to_openldap failed");
429                 return NULL;
430         } 
431         ret = PyString_FromString(retstr);
432         talloc_free(retstr);
433         return ret;
434 }
435
436 static PyObject *py_dsdb_write_prefixes_from_schema_to_ldb(PyObject *self, PyObject *args)
437 {
438         PyObject *py_ldb;
439         struct ldb_context *ldb;
440         WERROR result;
441         struct dsdb_schema *schema;
442
443         if (!PyArg_ParseTuple(args, "O", &py_ldb))
444                 return NULL;
445
446         PyErr_LDB_OR_RAISE(py_ldb, ldb);
447
448         schema = dsdb_get_schema(ldb);
449         if (!schema) {
450                 PyErr_SetString(PyExc_RuntimeError, "Failed to set find a schema on ldb!\n");
451                 return NULL;
452         }
453
454         result = dsdb_write_prefixes_from_schema_to_ldb(NULL, ldb, schema);
455         PyErr_WERROR_IS_ERR_RAISE(result);
456
457         Py_RETURN_NONE;
458 }
459
460 static PyObject *py_dsdb_set_schema_from_ldb(PyObject *self, PyObject *args)
461 {
462         PyObject *py_ldb;
463         struct ldb_context *ldb;
464         PyObject *py_from_ldb;
465         struct ldb_context *from_ldb;
466         struct dsdb_schema *schema;
467         int ret;
468         if (!PyArg_ParseTuple(args, "OO", &py_ldb, &py_from_ldb))
469                 return NULL;
470
471         PyErr_LDB_OR_RAISE(py_ldb, ldb);
472
473         PyErr_LDB_OR_RAISE(py_from_ldb, from_ldb);
474
475         schema = dsdb_get_schema(from_ldb);
476         if (!schema) {
477                 PyErr_SetString(PyExc_RuntimeError, "Failed to set find a schema on 'from' ldb!\n");
478                 return NULL;
479         }
480
481         ret = dsdb_reference_schema(ldb, schema, true);
482         PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret, ldb);
483
484         Py_RETURN_NONE;
485 }
486
487 static PyObject *py_dom_sid_to_rid(PyLdbObject *self, PyObject *args)
488 {
489         PyObject *py_sid;
490         struct dom_sid *sid;
491         uint32_t rid;
492         NTSTATUS status;
493         
494         if(!PyArg_ParseTuple(args, "O", &py_sid))
495                 return NULL;
496
497         sid = dom_sid_parse_talloc(NULL, PyString_AsString(py_sid));
498
499         status = dom_sid_split_rid(NULL, (const struct dom_sid *)sid, NULL,
500                 &rid);
501         if (!NT_STATUS_IS_OK(status)) {
502                 PyErr_SetString(PyExc_RuntimeError, "dom_sid_split_rid failed");
503                 return NULL;
504         }
505
506         return PyInt_FromLong(rid);
507 }
508
509 static PyMethodDef py_misc_methods[] = {
510         { "generate_random_str", (PyCFunction)py_generate_random_str, METH_VARARGS,
511                 "random_password(len) -> string\n"
512                 "Generate random password with specified length." },
513         { "unix2nttime", (PyCFunction)py_unix2nttime, METH_VARARGS,
514                 "unix2nttime(timestamp) -> nttime" },
515         { "ldb_set_credentials", (PyCFunction)py_ldb_set_credentials, METH_VARARGS, 
516                 "ldb_set_credentials(ldb, credentials) -> None\n"
517                 "Set credentials to use when connecting." },
518         { "ldb_set_session_info", (PyCFunction)py_ldb_set_session_info, METH_VARARGS,
519                 "ldb_set_session_info(ldb, session_info)\n"
520                 "Set session info to use when connecting." },
521         { "ldb_set_loadparm", (PyCFunction)py_ldb_set_loadparm, METH_VARARGS,
522                 "ldb_set_loadparm(ldb, session_info)\n"
523                 "Set loadparm context to use when connecting." },
524         { "samdb_set_domain_sid", (PyCFunction)py_samdb_set_domain_sid, METH_VARARGS,
525                 "samdb_set_domain_sid(samdb, sid)\n"
526                 "Set SID of domain to use." },
527         { "samdb_get_domain_sid", (PyCFunction)py_samdb_get_domain_sid, METH_VARARGS,
528                 "samdb_get_domain_sid(samdb)\n"
529                 "Get SID of domain in use." },
530         { "samdb_set_password", (PyCFunction)py_samdb_set_password,
531                 METH_VARARGS|METH_KEYWORDS,
532                 "samdb_set_password(samdb, user_dn, dom_dn, mod, new_password, user_change)\n"
533                 "Set the password of a user" },
534         { "ldb_register_samba_handlers", (PyCFunction)py_ldb_register_samba_handlers, METH_VARARGS,
535                 "ldb_register_samba_handlers(ldb)\n"
536                 "Register Samba-specific LDB modules and schemas." },
537         { "ldb_set_utf8_casefold", (PyCFunction)py_ldb_set_utf8_casefold, METH_VARARGS,
538                 "ldb_set_utf8_casefold(ldb)\n"
539                 "Set the right Samba casefolding function for UTF8 charset." },
540         { "dsdb_set_ntds_invocation_id", (PyCFunction)py_dsdb_set_ntds_invocation_id, METH_VARARGS,
541                 NULL },
542         { "dsdb_set_opaque_integer", (PyCFunction)py_dsdb_set_opaque_integer, METH_VARARGS,
543                 NULL },
544         { "dsdb_set_global_schema", (PyCFunction)py_dsdb_set_global_schema, METH_VARARGS,
545                 NULL },
546         { "dsdb_set_schema_from_ldif", (PyCFunction)py_dsdb_set_schema_from_ldif, METH_VARARGS,
547                 NULL },
548         { "dsdb_write_prefixes_from_schema_to_ldb", (PyCFunction)py_dsdb_write_prefixes_from_schema_to_ldb, METH_VARARGS,
549                 NULL },
550         { "dsdb_set_schema_from_ldb", (PyCFunction)py_dsdb_set_schema_from_ldb, METH_VARARGS,
551                 NULL },
552         { "dsdb_convert_schema_to_openldap", (PyCFunction)py_dsdb_convert_schema_to_openldap, METH_VARARGS,
553                 NULL },
554         { "dom_sid_to_rid", (PyCFunction)py_dom_sid_to_rid, METH_VARARGS,
555                 NULL },
556         { "set_debug_level", (PyCFunction)py_set_debug_level, METH_VARARGS,
557                 "set debug level" },
558         { NULL }
559 };
560
561 void initglue(void)
562 {
563         PyObject *m;
564
565         m = Py_InitModule3("glue", py_misc_methods, 
566                            "Python bindings for miscellaneous Samba functions.");
567         if (m == NULL)
568                 return;
569
570         PyModule_AddObject(m, "version", PyString_FromString(SAMBA_VERSION_STRING));
571
572         PyModule_AddObject(m, "DS_BEHAVIOR_WIN2000", PyInt_FromLong(DS_BEHAVIOR_WIN2000));
573         PyModule_AddObject(m, "DS_BEHAVIOR_WIN2003_INTERIM", PyInt_FromLong(DS_BEHAVIOR_WIN2003_INTERIM));
574         PyModule_AddObject(m, "DS_BEHAVIOR_WIN2003", PyInt_FromLong(DS_BEHAVIOR_WIN2003));
575         PyModule_AddObject(m, "DS_BEHAVIOR_WIN2008", PyInt_FromLong(DS_BEHAVIOR_WIN2008));
576
577 }
578