2 Unix SMB/CIFS implementation.
3 Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
4 Copyright (C) Matthias Dieter Wallnöfer 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "ldb_errors.h"
24 #include "param/param.h"
25 #include "auth/credentials/credentials.h"
26 #include "dsdb/samdb/samdb.h"
27 #include "lib/ldb-samba/ldif_handlers.h"
28 #include "librpc/ndr/libndr.h"
31 #include "lib/ldb/pyldb.h"
32 #include "libcli/util/pyerrors.h"
33 #include "libcli/security/security.h"
34 #include "auth/pyauth.h"
35 #include "param/pyparam.h"
36 #include "auth/credentials/pycredentials.h"
38 #ifndef Py_RETURN_NONE
39 #define Py_RETURN_NONE return Py_INCREF(Py_None), Py_None
42 /* FIXME: These should be in a header file somewhere, once we finish moving
43 * away from SWIG .. */
44 #define PyErr_LDB_OR_RAISE(py_ldb, ldb) \
45 /* if (!PyLdb_Check(py_ldb)) { \
46 PyErr_SetString(py_ldb_get_exception(), "Ldb connection object required"); \
49 ldb = PyLdb_AsLdbContext(py_ldb);
51 static void PyErr_SetLdbError(PyObject
*error
, int ret
, struct ldb_context
*ldb_ctx
)
53 if (ret
== LDB_ERR_PYTHON_EXCEPTION
)
54 return; /* Python exception should already be set, just keep that */
56 PyErr_SetObject(error
,
57 Py_BuildValue(discard_const_p(char, "(i,s)"), ret
,
58 ldb_ctx
== NULL
?ldb_strerror(ret
):ldb_errstring(ldb_ctx
)));
61 static PyObject
*py_ldb_get_exception(void)
63 PyObject
*mod
= PyImport_ImportModule("ldb");
67 return PyObject_GetAttrString(mod
, "LdbError");
70 static PyObject
*py_generate_random_str(PyObject
*self
, PyObject
*args
)
75 if (!PyArg_ParseTuple(args
, "i", &len
))
78 retstr
= generate_random_str(NULL
, len
);
79 ret
= PyString_FromString(retstr
);
84 static PyObject
*py_unix2nttime(PyObject
*self
, PyObject
*args
)
88 if (!PyArg_ParseTuple(args
, "I", &t
))
91 unix_to_nt_time(&nt
, t
);
93 return PyInt_FromLong((uint64_t)nt
);
96 static PyObject
*py_set_debug_level(PyObject
*self
, PyObject
*args
)
99 if (!PyArg_ParseTuple(args
, "I", &level
))
101 (DEBUGLEVEL
) = level
;
105 static PyObject
*py_ldb_set_credentials(PyObject
*self
, PyObject
*args
)
107 PyObject
*py_creds
, *py_ldb
;
108 struct cli_credentials
*creds
;
109 struct ldb_context
*ldb
;
110 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_creds
))
113 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
115 creds
= cli_credentials_from_py_object(py_creds
);
117 PyErr_SetString(PyExc_TypeError
, "Expected credentials object");
121 ldb_set_opaque(ldb
, "credentials", creds
);
126 static PyObject
*py_ldb_set_loadparm(PyObject
*self
, PyObject
*args
)
128 PyObject
*py_lp_ctx
, *py_ldb
;
129 struct loadparm_context
*lp_ctx
;
130 struct ldb_context
*ldb
;
131 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_lp_ctx
))
134 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
136 lp_ctx
= lp_from_py_object(py_lp_ctx
);
137 if (lp_ctx
== NULL
) {
138 PyErr_SetString(PyExc_TypeError
, "Expected loadparm object");
142 ldb_set_opaque(ldb
, "loadparm", lp_ctx
);
148 static PyObject
*py_ldb_set_session_info(PyObject
*self
, PyObject
*args
)
150 PyObject
*py_session_info
, *py_ldb
;
151 struct auth_session_info
*info
;
152 struct ldb_context
*ldb
;
153 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_session_info
))
156 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
157 /*if (!PyAuthSession_Check(py_session_info)) {
158 PyErr_SetString(PyExc_TypeError, "Expected session info object");
162 info
= PyAuthSession_AsSession(py_session_info
);
164 ldb_set_opaque(ldb
, "sessionInfo", info
);
169 static PyObject
*py_ldb_set_utf8_casefold(PyObject
*self
, PyObject
*args
)
172 struct ldb_context
*ldb
;
174 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
177 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
179 ldb_set_utf8_fns(ldb
, NULL
, wrap_casefold
);
184 static PyObject
*py_samdb_set_domain_sid(PyLdbObject
*self
, PyObject
*args
)
186 PyObject
*py_ldb
, *py_sid
;
187 struct ldb_context
*ldb
;
191 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_sid
))
194 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
196 sid
= dom_sid_parse_talloc(NULL
, PyString_AsString(py_sid
));
198 ret
= samdb_set_domain_sid(ldb
, sid
);
200 PyErr_SetString(PyExc_RuntimeError
, "set_domain_sid failed");
206 static PyObject
*py_samdb_get_domain_sid(PyLdbObject
*self
, PyObject
*args
)
209 struct ldb_context
*ldb
;
210 const struct dom_sid
*sid
;
214 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
217 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
219 sid
= samdb_domain_sid(ldb
);
221 PyErr_SetString(PyExc_RuntimeError
, "samdb_domain_sid failed");
224 retstr
= dom_sid_string(NULL
, sid
);
225 ret
= PyString_FromString(retstr
);
230 static PyObject
*py_ldb_register_samba_handlers(PyObject
*self
, PyObject
*args
)
233 struct ldb_context
*ldb
;
236 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
239 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
240 ret
= ldb_register_samba_handlers(ldb
);
242 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
246 static PyObject
*py_dsdb_set_ntds_invocation_id(PyObject
*self
, PyObject
*args
)
248 PyObject
*py_ldb
, *py_guid
;
251 struct ldb_context
*ldb
;
252 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_guid
))
255 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
256 GUID_from_string(PyString_AsString(py_guid
), &guid
);
258 ret
= samdb_set_ntds_invocation_id(ldb
, &guid
);
260 PyErr_SetString(PyExc_RuntimeError
, "set_ntds_invocation_id failed");
266 static PyObject
*py_dsdb_set_opaque_integer(PyObject
*self
, PyObject
*args
)
270 int *old_val
, *new_val
;
271 char *py_opaque_name
, *opaque_name_talloc
;
272 struct ldb_context
*ldb
;
275 if (!PyArg_ParseTuple(args
, "Osi", &py_ldb
, &py_opaque_name
, &value
))
278 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
280 /* see if we have a cached copy */
281 old_val
= (int *)ldb_get_opaque(ldb
,
289 tmp_ctx
= talloc_new(ldb
);
290 if (tmp_ctx
== NULL
) {
294 new_val
= talloc(tmp_ctx
, int);
299 opaque_name_talloc
= talloc_strdup(tmp_ctx
, py_opaque_name
);
300 if (!opaque_name_talloc
) {
306 /* cache the domain_sid in the ldb */
307 if (ldb_set_opaque(ldb
, opaque_name_talloc
, new_val
) != LDB_SUCCESS
) {
311 talloc_steal(ldb
, new_val
);
312 talloc_steal(ldb
, opaque_name_talloc
);
313 talloc_free(tmp_ctx
);
318 talloc_free(tmp_ctx
);
319 PyErr_SetString(PyExc_RuntimeError
, "Failed to set opaque integer into the ldb!\n");
323 static PyObject
*py_dsdb_set_global_schema(PyObject
*self
, PyObject
*args
)
326 struct ldb_context
*ldb
;
328 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
331 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
333 ret
= dsdb_set_global_schema(ldb
);
334 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
339 static PyObject
*py_dsdb_set_schema_from_ldif(PyObject
*self
, PyObject
*args
)
344 struct ldb_context
*ldb
;
346 if (!PyArg_ParseTuple(args
, "Oss", &py_ldb
, &pf
, &df
))
349 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
351 result
= dsdb_set_schema_from_ldif(ldb
, pf
, df
);
352 PyErr_WERROR_IS_ERR_RAISE(result
);
357 static PyObject
*py_dsdb_convert_schema_to_openldap(PyObject
*self
, PyObject
*args
)
359 char *target_str
, *mapping
;
361 struct ldb_context
*ldb
;
365 if (!PyArg_ParseTuple(args
, "Oss", &py_ldb
, &target_str
, &mapping
))
368 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
370 retstr
= dsdb_convert_schema_to_openldap(ldb
, target_str
, mapping
);
372 PyErr_SetString(PyExc_RuntimeError
, "dsdb_convert_schema_to_openldap failed");
375 ret
= PyString_FromString(retstr
);
380 static PyObject
*py_dsdb_write_prefixes_from_schema_to_ldb(PyObject
*self
, PyObject
*args
)
383 struct ldb_context
*ldb
;
385 struct dsdb_schema
*schema
;
387 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
390 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
392 schema
= dsdb_get_schema(ldb
);
394 PyErr_SetString(PyExc_RuntimeError
, "Failed to set find a schema on ldb!\n");
398 result
= dsdb_write_prefixes_from_schema_to_ldb(NULL
, ldb
, schema
);
399 PyErr_WERROR_IS_ERR_RAISE(result
);
404 static PyObject
*py_dsdb_set_schema_from_ldb(PyObject
*self
, PyObject
*args
)
407 struct ldb_context
*ldb
;
408 PyObject
*py_from_ldb
;
409 struct ldb_context
*from_ldb
;
410 struct dsdb_schema
*schema
;
412 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_from_ldb
))
415 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
417 PyErr_LDB_OR_RAISE(py_from_ldb
, from_ldb
);
419 schema
= dsdb_get_schema(from_ldb
);
421 PyErr_SetString(PyExc_RuntimeError
, "Failed to set find a schema on 'from' ldb!\n");
425 ret
= dsdb_reference_schema(ldb
, schema
, true);
426 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
431 static PyObject
*py_dom_sid_to_rid(PyLdbObject
*self
, PyObject
*args
)
438 if(!PyArg_ParseTuple(args
, "O", &py_sid
))
441 sid
= dom_sid_parse_talloc(NULL
, PyString_AsString(py_sid
));
443 status
= dom_sid_split_rid(NULL
, sid
, NULL
, &rid
);
444 if (!NT_STATUS_IS_OK(status
)) {
445 PyErr_SetString(PyExc_RuntimeError
, "dom_sid_split_rid failed");
449 return PyInt_FromLong(rid
);
452 static PyMethodDef py_misc_methods
[] = {
453 { "generate_random_str", (PyCFunction
)py_generate_random_str
, METH_VARARGS
,
454 "random_password(len) -> string\n"
455 "Generate random password with specified length." },
456 { "unix2nttime", (PyCFunction
)py_unix2nttime
, METH_VARARGS
,
457 "unix2nttime(timestamp) -> nttime" },
458 { "ldb_set_credentials", (PyCFunction
)py_ldb_set_credentials
, METH_VARARGS
,
459 "ldb_set_credentials(ldb, credentials) -> None\n"
460 "Set credentials to use when connecting." },
461 { "ldb_set_session_info", (PyCFunction
)py_ldb_set_session_info
, METH_VARARGS
,
462 "ldb_set_session_info(ldb, session_info)\n"
463 "Set session info to use when connecting." },
464 { "ldb_set_loadparm", (PyCFunction
)py_ldb_set_loadparm
, METH_VARARGS
,
465 "ldb_set_loadparm(ldb, session_info)\n"
466 "Set loadparm context to use when connecting." },
467 { "samdb_set_domain_sid", (PyCFunction
)py_samdb_set_domain_sid
, METH_VARARGS
,
468 "samdb_set_domain_sid(samdb, sid)\n"
469 "Set SID of domain to use." },
470 { "samdb_get_domain_sid", (PyCFunction
)py_samdb_get_domain_sid
, METH_VARARGS
,
471 "samdb_get_domain_sid(samdb)\n"
472 "Get SID of domain in use." },
473 { "ldb_register_samba_handlers", (PyCFunction
)py_ldb_register_samba_handlers
, METH_VARARGS
,
474 "ldb_register_samba_handlers(ldb)\n"
475 "Register Samba-specific LDB modules and schemas." },
476 { "ldb_set_utf8_casefold", (PyCFunction
)py_ldb_set_utf8_casefold
, METH_VARARGS
,
477 "ldb_set_utf8_casefold(ldb)\n"
478 "Set the right Samba casefolding function for UTF8 charset." },
479 { "dsdb_set_ntds_invocation_id", (PyCFunction
)py_dsdb_set_ntds_invocation_id
, METH_VARARGS
,
481 { "dsdb_set_opaque_integer", (PyCFunction
)py_dsdb_set_opaque_integer
, METH_VARARGS
,
483 { "dsdb_set_global_schema", (PyCFunction
)py_dsdb_set_global_schema
, METH_VARARGS
,
485 { "dsdb_set_schema_from_ldif", (PyCFunction
)py_dsdb_set_schema_from_ldif
, METH_VARARGS
,
487 { "dsdb_write_prefixes_from_schema_to_ldb", (PyCFunction
)py_dsdb_write_prefixes_from_schema_to_ldb
, METH_VARARGS
,
489 { "dsdb_set_schema_from_ldb", (PyCFunction
)py_dsdb_set_schema_from_ldb
, METH_VARARGS
,
491 { "dsdb_convert_schema_to_openldap", (PyCFunction
)py_dsdb_convert_schema_to_openldap
, METH_VARARGS
,
493 { "dom_sid_to_rid", (PyCFunction
)py_dom_sid_to_rid
, METH_VARARGS
,
495 { "set_debug_level", (PyCFunction
)py_set_debug_level
, METH_VARARGS
,
504 m
= Py_InitModule3("glue", py_misc_methods
,
505 "Python bindings for miscellaneous Samba functions.");
509 PyModule_AddObject(m
, "version", PyString_FromString(SAMBA_VERSION_STRING
));
511 /* "userAccountControl" flags */
512 PyModule_AddObject(m
, "UF_NORMAL_ACCOUNT", PyInt_FromLong(UF_NORMAL_ACCOUNT
));
513 PyModule_AddObject(m
, "UF_TEMP_DUPLICATE_ACCOUNT", PyInt_FromLong(UF_TEMP_DUPLICATE_ACCOUNT
));
514 PyModule_AddObject(m
, "UF_SERVER_TRUST_ACCOUNT", PyInt_FromLong(UF_SERVER_TRUST_ACCOUNT
));
515 PyModule_AddObject(m
, "UF_WORKSTATION_TRUST_ACCOUNT", PyInt_FromLong(UF_WORKSTATION_TRUST_ACCOUNT
));
516 PyModule_AddObject(m
, "UF_INTERDOMAIN_TRUST_ACCOUNT", PyInt_FromLong(UF_INTERDOMAIN_TRUST_ACCOUNT
));
517 PyModule_AddObject(m
, "UF_PASSWD_NOTREQD", PyInt_FromLong(UF_PASSWD_NOTREQD
));
518 PyModule_AddObject(m
, "UF_ACCOUNTDISABLE", PyInt_FromLong(UF_ACCOUNTDISABLE
));
520 /* "groupType" flags */
521 PyModule_AddObject(m
, "GTYPE_SECURITY_BUILTIN_LOCAL_GROUP", PyInt_FromLong(GTYPE_SECURITY_BUILTIN_LOCAL_GROUP
));
522 PyModule_AddObject(m
, "GTYPE_SECURITY_GLOBAL_GROUP", PyInt_FromLong(GTYPE_SECURITY_GLOBAL_GROUP
));
523 PyModule_AddObject(m
, "GTYPE_SECURITY_DOMAIN_LOCAL_GROUP", PyInt_FromLong(GTYPE_SECURITY_DOMAIN_LOCAL_GROUP
));
524 PyModule_AddObject(m
, "GTYPE_SECURITY_UNIVERSAL_GROUP", PyInt_FromLong(GTYPE_SECURITY_UNIVERSAL_GROUP
));
525 PyModule_AddObject(m
, "GTYPE_DISTRIBUTION_GLOBAL_GROUP", PyInt_FromLong(GTYPE_DISTRIBUTION_GLOBAL_GROUP
));
526 PyModule_AddObject(m
, "GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP", PyInt_FromLong(GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP
));
527 PyModule_AddObject(m
, "GTYPE_DISTRIBUTION_UNIVERSAL_GROUP", PyInt_FromLong(GTYPE_DISTRIBUTION_UNIVERSAL_GROUP
));
529 /* "sAMAccountType" flags */
530 PyModule_AddObject(m
, "ATYPE_NORMAL_ACCOUNT", PyInt_FromLong(ATYPE_NORMAL_ACCOUNT
));
531 PyModule_AddObject(m
, "ATYPE_WORKSTATION_TRUST", PyInt_FromLong(ATYPE_WORKSTATION_TRUST
));
532 PyModule_AddObject(m
, "ATYPE_INTERDOMAIN_TRUST", PyInt_FromLong(ATYPE_INTERDOMAIN_TRUST
));
533 PyModule_AddObject(m
, "ATYPE_SECURITY_GLOBAL_GROUP", PyInt_FromLong(ATYPE_SECURITY_GLOBAL_GROUP
));
534 PyModule_AddObject(m
, "ATYPE_SECURITY_LOCAL_GROUP", PyInt_FromLong(ATYPE_SECURITY_LOCAL_GROUP
));
535 PyModule_AddObject(m
, "ATYPE_SECURITY_UNIVERSAL_GROUP", PyInt_FromLong(ATYPE_SECURITY_UNIVERSAL_GROUP
));
536 PyModule_AddObject(m
, "ATYPE_DISTRIBUTION_GLOBAL_GROUP", PyInt_FromLong(ATYPE_DISTRIBUTION_GLOBAL_GROUP
));
537 PyModule_AddObject(m
, "ATYPE_DISTRIBUTION_LOCAL_GROUP", PyInt_FromLong(ATYPE_DISTRIBUTION_LOCAL_GROUP
));
538 PyModule_AddObject(m
, "ATYPE_DISTRIBUTION_UNIVERSAL_GROUP", PyInt_FromLong(ATYPE_DISTRIBUTION_UNIVERSAL_GROUP
));
540 /* "domainFunctionality", "forestFunctionality" flags in the rootDSE */
541 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2000", PyInt_FromLong(DS_DOMAIN_FUNCTION_2000
));
542 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2003_MIXED", PyInt_FromLong(DS_DOMAIN_FUNCTION_2003_MIXED
));
543 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2003", PyInt_FromLong(DS_DOMAIN_FUNCTION_2003
));
544 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2008", PyInt_FromLong(DS_DOMAIN_FUNCTION_2008
));
545 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2008_R2", PyInt_FromLong(DS_DOMAIN_FUNCTION_2008_R2
));
547 /* "domainControllerFunctionality" flags in the rootDSE */
548 PyModule_AddObject(m
, "DS_DC_FUNCTION_2000", PyInt_FromLong(DS_DC_FUNCTION_2000
));
549 PyModule_AddObject(m
, "DS_DC_FUNCTION_2003", PyInt_FromLong(DS_DC_FUNCTION_2003
));
550 PyModule_AddObject(m
, "DS_DC_FUNCTION_2008", PyInt_FromLong(DS_DC_FUNCTION_2008
));
551 PyModule_AddObject(m
, "DS_DC_FUNCTION_2008_R2", PyInt_FromLong(DS_DC_FUNCTION_2008_R2
));