2 # Unix SMB/CIFS implementation.
3 # backend code for provisioning a Samba4 server
5 # Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007-2008
6 # Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008-2009
7 # Copyright (C) Oliver Liebel <oliver@itc.li> 2008-2009
9 # Based on the original in EJS:
10 # Copyright (C) Andrew Tridgell <tridge@samba.org> 2005
12 # This program is free software; you can redistribute it and/or modify
13 # it under the terms of the GNU General Public License as published by
14 # the Free Software Foundation; either version 3 of the License, or
15 # (at your option) any later version.
17 # This program is distributed in the hope that it will be useful,
18 # but WITHOUT ANY WARRANTY; without even the implied warranty of
19 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 # GNU General Public License for more details.
22 # You should have received a copy of the GNU General Public License
23 # along with this program. If not, see <http://www.gnu.org/licenses/>.
26 """Functions for setting up a Samba Schema."""
28 from base64
import b64encode
29 from ms_schema
import read_ms_schema
30 from samba
.dcerpc
import security
31 from samba
import read_and_sub_file
, substitute_var
, check_all_substituted
33 from samba
.ndr
import ndr_pack
34 from ldb
import SCOPE_SUBTREE
, SCOPE_ONELEVEL
, SCOPE_BASE
36 def get_schema_descriptor(domain_sid
):
37 sddl
= "O:SAG:SAD:(A;CI;RPLCLORC;;;AU)(A;CI;RPWPCRCCLCLORCWOWDSW;;;SA)" \
38 "(A;CI;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)" \
39 "(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED)" \
40 "(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;ED)" \
41 "(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)" \
42 "(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;BA)" \
43 "S:(AU;SA;WPCCDCWOWDSDDTSW;;;WD)" \
44 "(AU;CISA;WP;;;WD)(AU;SA;CR;;;BA)" \
45 "(AU;SA;CR;;;DU)(OU;SA;CR;e12b56b6-0a95-11d1-adbb-00c04fd8d5cd;;WD)" \
46 "(OU;SA;CR;45ec5156-db7e-47bb-b53f-dbeb2d03c40f;;WD)"
47 sec
= security
.descriptor
.from_sddl(sddl
, domain_sid
)
48 return b64encode(ndr_pack(sec
))
52 def __init__(self
, setup_path
, domain_sid
, schemadn
=None,
54 """Load schema for the SamDB from the AD schema files and samba4_schema.ldif
56 :param samdb: Load a schema into a SamDB.
57 :param setup_path: Setup path function.
58 :param schemadn: DN of the schema
59 :param serverdn: DN of the server
61 Returns the schema data loaded, to avoid double-parsing when then needing to add it to the db
64 self
.schemadn
= schemadn
66 self
.schema_data
= read_ms_schema(setup_path('ad-schema/MS-AD_Schema_2K8_Attributes.txt'),
67 setup_path('ad-schema/MS-AD_Schema_2K8_Classes.txt'))
68 self
.schema_data
+= open(setup_path("schema_samba4.ldif"), 'r').read()
69 self
.schema_data
= substitute_var(self
.schema_data
, {"SCHEMADN": schemadn
})
70 check_all_substituted(self
.schema_data
)
72 self
.schema_dn_modify
= read_and_sub_file(setup_path("provision_schema_basedn_modify.ldif"),
73 {"SCHEMADN": schemadn
,
77 descr
= get_schema_descriptor(domain_sid
)
78 self
.schema_dn_add
= read_and_sub_file(setup_path("provision_schema_basedn.ldif"),
79 {"SCHEMADN": schemadn
,
83 prefixmap
= open(setup_path("prefixMap.txt"), 'r').read()
84 prefixmap
= b64encode(prefixmap
)
88 # We don't actually add this ldif, just parse it
89 prefixmap_ldif
= "dn: cn=schema\nprefixMap:: %s\n\n" % prefixmap
90 self
.ldb
.set_schema_from_ldif(prefixmap_ldif
, self
.schema_data
)
92 def write_to_tmp_ldb(self
, schemadb_path
):
93 self
.ldb
.connect(schemadb_path
)
94 self
.ldb
.transaction_start()
96 self
.ldb
.add_ldif("""dn: @ATTRIBUTES
101 @IDXATTR: attributeSyntax
103 # These bits of LDIF are supplied when the Schema object is created
104 self
.ldb
.add_ldif(self
.schema_dn_add
)
105 self
.ldb
.modify_ldif(self
.schema_dn_modify
)
106 self
.ldb
.add_ldif(self
.schema_data
)
107 self
.ldb
.transaction_commit()
109 # Return a hash with the forward attribute as a key and the back as the value
110 def linked_attributes(self
):
111 return get_linked_attributes(self
.schemadn
, self
.ldb
)
113 def dnsyntax_attributes(self
):
114 return get_dnsyntax_attributes(self
.schemadn
, self
.ldb
)
116 # Return a hash with the forward attribute as a key and the back as the value
117 def get_linked_attributes(schemadn
,schemaldb
):
118 attrs
= ["linkID", "lDAPDisplayName"]
119 res
= schemaldb
.search(expression
="(&(linkID=*)(!(linkID:1.2.840.113556.1.4.803:=1))(objectclass=attributeSchema)(attributeSyntax=2.5.5.1))", base
=schemadn
, scope
=SCOPE_ONELEVEL
, attrs
=attrs
)
121 for i
in range (0, len(res
)):
122 expression
= "(&(objectclass=attributeSchema)(linkID=%d)(attributeSyntax=2.5.5.1))" % (int(res
[i
]["linkID"][0])+1)
123 target
= schemaldb
.searchone(basedn
=schemadn
,
124 expression
=expression
,
125 attribute
="lDAPDisplayName",
127 if target
is not None:
128 attributes
[str(res
[i
]["lDAPDisplayName"])]=str(target
)
132 def get_dnsyntax_attributes(schemadn
,schemaldb
):
133 attrs
= ["linkID", "lDAPDisplayName"]
134 res
= schemaldb
.search(expression
="(&(!(linkID=*))(objectclass=attributeSchema)(attributeSyntax=2.5.5.1))", base
=schemadn
, scope
=SCOPE_ONELEVEL
, attrs
=attrs
)
136 for i
in range (0, len(res
)):
137 attributes
.append(str(res
[i
]["lDAPDisplayName"]))