2 Unix SMB/CIFS implementation.
3 Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007-2010
4 Copyright (C) Matthias Dieter Wallnöfer 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "libcli/util/pyerrors.h"
23 #include "dsdb/samdb/samdb.h"
24 #include "lib/ldb/pyldb.h"
25 #include "libcli/security/security.h"
26 #include "librpc/ndr/libndr.h"
27 #include "system/kerberos.h"
28 #include "auth/kerberos/kerberos.h"
29 #include "librpc/rpc/pyrpc_util.h"
31 /* There's no Py_ssize_t in 2.4, apparently */
32 #if PY_MAJOR_VERSION == 2 && PY_MINOR_VERSION < 5
33 typedef int Py_ssize_t
;
34 typedef inquiry lenfunc
;
35 typedef intargfunc ssizeargfunc
;
38 #ifndef Py_RETURN_NONE
39 #define Py_RETURN_NONE return Py_INCREF(Py_None), Py_None
42 /* FIXME: These should be in a header file somewhere, once we finish moving
43 * away from SWIG .. */
44 #define PyErr_LDB_OR_RAISE(py_ldb, ldb) \
45 /* if (!PyLdb_Check(py_ldb)) { \
46 PyErr_SetString(py_ldb_get_exception(), "Ldb connection object required"); \
49 ldb = PyLdb_AsLdbContext(py_ldb);
51 static PyObject
*py_ldb_get_exception(void)
53 PyObject
*mod
= PyImport_ImportModule("ldb");
57 return PyObject_GetAttrString(mod
, "LdbError");
60 static void PyErr_SetLdbError(PyObject
*error
, int ret
, struct ldb_context
*ldb_ctx
)
62 if (ret
== LDB_ERR_PYTHON_EXCEPTION
)
63 return; /* Python exception should already be set, just keep that */
65 PyErr_SetObject(error
,
66 Py_BuildValue(discard_const_p(char, "(i,s)"), ret
,
67 ldb_ctx
== NULL
?ldb_strerror(ret
):ldb_errstring(ldb_ctx
)));
70 static PyObject
*py_samdb_server_site_name(PyObject
*self
, PyObject
*args
)
72 PyObject
*py_ldb
, *result
;
73 struct ldb_context
*ldb
;
77 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
80 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
82 mem_ctx
= talloc_new(NULL
);
84 site
= samdb_server_site_name(ldb
, mem_ctx
);
86 PyErr_SetString(PyExc_RuntimeError
, "Failed to find server site");
91 result
= PyString_FromString(site
);
96 static PyObject
*py_dsdb_convert_schema_to_openldap(PyObject
*self
,
99 char *target_str
, *mapping
;
101 struct ldb_context
*ldb
;
105 if (!PyArg_ParseTuple(args
, "Oss", &py_ldb
, &target_str
, &mapping
))
108 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
110 retstr
= dsdb_convert_schema_to_openldap(ldb
, target_str
, mapping
);
111 if (retstr
== NULL
) {
112 PyErr_SetString(PyExc_RuntimeError
,
113 "dsdb_convert_schema_to_openldap failed");
117 ret
= PyString_FromString(retstr
);
122 static PyObject
*py_samdb_set_domain_sid(PyLdbObject
*self
, PyObject
*args
)
124 PyObject
*py_ldb
, *py_sid
;
125 struct ldb_context
*ldb
;
129 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_sid
))
132 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
134 sid
= dom_sid_parse_talloc(NULL
, PyString_AsString(py_sid
));
136 ret
= samdb_set_domain_sid(ldb
, sid
);
139 PyErr_SetString(PyExc_RuntimeError
, "set_domain_sid failed");
145 static PyObject
*py_samdb_set_ntds_settings_dn(PyLdbObject
*self
, PyObject
*args
)
147 PyObject
*py_ldb
, *py_ntds_settings_dn
;
148 struct ldb_context
*ldb
;
149 struct ldb_dn
*ntds_settings_dn
;
153 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_ntds_settings_dn
))
156 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
158 tmp_ctx
= talloc_new(NULL
);
159 if (tmp_ctx
== NULL
) {
164 if (!PyObject_AsDn(tmp_ctx
, py_ntds_settings_dn
, ldb
, &ntds_settings_dn
)) {
168 ret
= samdb_set_ntds_settings_dn(ldb
, ntds_settings_dn
);
169 talloc_free(tmp_ctx
);
171 PyErr_SetString(PyExc_RuntimeError
, "set_ntds_settings_dn failed");
177 static PyObject
*py_samdb_get_domain_sid(PyLdbObject
*self
, PyObject
*args
)
180 struct ldb_context
*ldb
;
181 const struct dom_sid
*sid
;
185 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
188 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
190 sid
= samdb_domain_sid(ldb
);
192 PyErr_SetString(PyExc_RuntimeError
, "samdb_domain_sid failed");
195 retstr
= dom_sid_string(NULL
, sid
);
196 ret
= PyString_FromString(retstr
);
201 static PyObject
*py_samdb_ntds_invocation_id(PyObject
*self
, PyObject
*args
)
203 PyObject
*py_ldb
, *result
;
204 struct ldb_context
*ldb
;
206 const struct GUID
*guid
;
208 mem_ctx
= talloc_new(NULL
);
209 if (mem_ctx
== NULL
) {
214 if (!PyArg_ParseTuple(args
, "O", &py_ldb
)) {
215 talloc_free(mem_ctx
);
219 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
221 guid
= samdb_ntds_invocation_id(ldb
);
223 PyErr_SetString(PyExc_RuntimeError
,
224 "Failed to find NTDS invocation ID");
225 talloc_free(mem_ctx
);
229 result
= PyString_FromString(GUID_string(mem_ctx
, guid
));
230 talloc_free(mem_ctx
);
234 static PyObject
*py_dsdb_get_oid_from_attid(PyObject
*self
, PyObject
*args
)
237 struct ldb_context
*ldb
;
239 struct dsdb_schema
*schema
;
245 if (!PyArg_ParseTuple(args
, "Oi", &py_ldb
, &attid
))
248 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
250 mem_ctx
= talloc_new(NULL
);
251 if (mem_ctx
== NULL
) {
256 schema
= dsdb_get_schema(ldb
, NULL
);
259 PyErr_SetString(PyExc_RuntimeError
, "Failed to find a schema from ldb \n");
260 talloc_free(mem_ctx
);
264 status
= dsdb_schema_pfm_oid_from_attid(schema
->prefixmap
, attid
,
266 PyErr_WERROR_IS_ERR_RAISE(status
);
268 ret
= PyString_FromString(oid
);
270 talloc_free(mem_ctx
);
276 static PyObject
*py_dsdb_get_attid_from_lDAPDisplayName(PyObject
*self
, PyObject
*args
)
278 PyObject
*py_ldb
, *is_schema_nc
;
279 struct ldb_context
*ldb
;
280 struct dsdb_schema
*schema
;
281 const char *ldap_display_name
;
282 bool schema_nc
= false;
283 const struct dsdb_attribute
*a
;
286 if (!PyArg_ParseTuple(args
, "OsO", &py_ldb
, &ldap_display_name
, &is_schema_nc
))
289 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
292 if (!PyBool_Check(is_schema_nc
)) {
293 PyErr_SetString(PyExc_TypeError
, "Expected boolean is_schema_nc");
296 if (is_schema_nc
== Py_True
) {
301 schema
= dsdb_get_schema(ldb
, NULL
);
304 PyErr_SetString(PyExc_RuntimeError
, "Failed to find a schema from ldb");
308 a
= dsdb_attribute_by_lDAPDisplayName(schema
, ldap_display_name
);
310 PyErr_Format(PyExc_RuntimeError
, "Failed to find attribute '%s'", ldap_display_name
);
314 attid
= dsdb_attribute_get_attid(a
, schema_nc
);
316 return PyLong_FromUnsignedLong(attid
);
320 convert a python string to a DRSUAPI drsuapi_DsReplicaAttribute attribute
322 static PyObject
*py_dsdb_DsReplicaAttribute(PyObject
*self
, PyObject
*args
)
324 PyObject
*py_ldb
, *el_list
, *ret
;
325 struct ldb_context
*ldb
;
326 char *ldap_display_name
;
327 const struct dsdb_attribute
*a
;
328 struct dsdb_schema
*schema
;
329 struct dsdb_syntax_ctx syntax_ctx
;
330 struct ldb_message_element
*el
;
331 struct drsuapi_DsReplicaAttribute
*attr
;
336 if (!PyArg_ParseTuple(args
, "OsO", &py_ldb
, &ldap_display_name
, &el_list
)) {
340 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
342 if (!PyList_Check(el_list
)) {
343 PyErr_Format(PyExc_TypeError
, "ldif_elements must be a list");
347 schema
= dsdb_get_schema(ldb
, NULL
);
349 PyErr_SetString(PyExc_RuntimeError
, "Failed to find a schema from ldb");
353 a
= dsdb_attribute_by_lDAPDisplayName(schema
, ldap_display_name
);
355 PyErr_Format(PyExc_RuntimeError
, "Failed to find attribute '%s'", ldap_display_name
);
359 dsdb_syntax_ctx_init(&syntax_ctx
, ldb
, schema
);
360 syntax_ctx
.is_schema_nc
= false;
362 tmp_ctx
= talloc_new(ldb
);
364 el
= talloc_zero(tmp_ctx
, struct ldb_message_element
);
365 el
->name
= ldap_display_name
;
366 el
->num_values
= PyList_Size(el_list
);
367 el
->values
= talloc_array(el
, struct ldb_val
, el
->num_values
);
368 for (i
= 0; i
< el
->num_values
; i
++) {
369 PyObject
*item
= PyList_GetItem(el_list
, i
);
370 if (!PyString_Check(item
)) {
371 PyErr_Format(PyExc_TypeError
, "ldif_elements should be strings");
374 el
->values
[i
].data
= (uint8_t *)PyString_AsString(item
);
375 el
->values
[i
].length
= PyString_Size(item
);
378 attr
= talloc_zero(tmp_ctx
, struct drsuapi_DsReplicaAttribute
);
380 werr
= a
->syntax
->ldb_to_drsuapi(&syntax_ctx
, a
, el
, attr
, attr
);
381 PyErr_WERROR_IS_ERR_RAISE(werr
);
383 ret
= py_return_ndr_struct("samba.dcerpc.drsuapi", "DsReplicaAttribute", attr
, attr
);
385 talloc_unlink(ldb
, tmp_ctx
);
390 static PyObject
*py_dsdb_set_ntds_invocation_id(PyObject
*self
, PyObject
*args
)
392 PyObject
*py_ldb
, *py_guid
;
395 struct ldb_context
*ldb
;
396 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_guid
))
399 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
400 GUID_from_string(PyString_AsString(py_guid
), &guid
);
402 ret
= samdb_set_ntds_invocation_id(ldb
, &guid
);
404 PyErr_SetString(PyExc_RuntimeError
, "set_ntds_invocation_id failed");
410 static PyObject
*py_samdb_ntds_objectGUID(PyObject
*self
, PyObject
*args
)
412 PyObject
*py_ldb
, *result
;
413 struct ldb_context
*ldb
;
415 const struct GUID
*guid
;
417 if (!PyArg_ParseTuple(args
, "O", &py_ldb
)) {
421 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
423 mem_ctx
= talloc_new(NULL
);
424 if (mem_ctx
== NULL
) {
429 guid
= samdb_ntds_objectGUID(ldb
);
431 PyErr_SetString(PyExc_RuntimeError
, "Failed to find NTDS GUID");
432 talloc_free(mem_ctx
);
436 result
= PyString_FromString(GUID_string(mem_ctx
, guid
));
437 talloc_free(mem_ctx
);
441 static PyObject
*py_dsdb_set_global_schema(PyObject
*self
, PyObject
*args
)
444 struct ldb_context
*ldb
;
446 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
449 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
451 ret
= dsdb_set_global_schema(ldb
);
452 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
457 static PyObject
*py_dsdb_load_partition_usn(PyObject
*self
, PyObject
*args
)
459 PyObject
*py_dn
, *py_ldb
, *result
;
461 uint64_t highest_uSN
, urgent_uSN
;
462 struct ldb_context
*ldb
;
466 mem_ctx
= talloc_new(NULL
);
467 if (mem_ctx
== NULL
) {
472 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_dn
)) {
473 talloc_free(mem_ctx
);
477 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
479 if (!PyObject_AsDn(mem_ctx
, py_dn
, ldb
, &dn
)) {
480 talloc_free(mem_ctx
);
484 ret
= dsdb_load_partition_usn(ldb
, dn
, &highest_uSN
, &urgent_uSN
);
485 if (ret
!= LDB_SUCCESS
) {
486 PyErr_Format(PyExc_RuntimeError
,
487 "Failed to load partition [%s] uSN - %s",
488 ldb_dn_get_linearized(dn
),
490 talloc_free(mem_ctx
);
494 talloc_free(mem_ctx
);
496 result
= PyDict_New();
498 PyDict_SetItemString(result
, "uSNHighest", PyInt_FromLong((uint64_t)highest_uSN
));
499 PyDict_SetItemString(result
, "uSNUrgent", PyInt_FromLong((uint64_t)urgent_uSN
));
505 static PyObject
*py_dsdb_set_am_rodc(PyObject
*self
, PyObject
*args
)
509 struct ldb_context
*ldb
;
512 if (!PyArg_ParseTuple(args
, "Oi", &py_ldb
, &py_val
))
515 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
516 ret
= samdb_set_am_rodc(ldb
, (bool)py_val
);
518 PyErr_SetString(PyExc_RuntimeError
, "set_am_rodc failed");
524 static PyObject
*py_dsdb_set_schema_from_ldif(PyObject
*self
, PyObject
*args
)
529 struct ldb_context
*ldb
;
531 if (!PyArg_ParseTuple(args
, "Oss", &py_ldb
, &pf
, &df
))
534 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
536 result
= dsdb_set_schema_from_ldif(ldb
, pf
, df
);
537 PyErr_WERROR_IS_ERR_RAISE(result
);
542 static PyObject
*py_dsdb_set_schema_from_ldb(PyObject
*self
, PyObject
*args
)
545 struct ldb_context
*ldb
;
546 PyObject
*py_from_ldb
;
547 struct ldb_context
*from_ldb
;
548 struct dsdb_schema
*schema
;
550 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_from_ldb
))
553 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
555 PyErr_LDB_OR_RAISE(py_from_ldb
, from_ldb
);
557 schema
= dsdb_get_schema(from_ldb
, NULL
);
559 PyErr_SetString(PyExc_RuntimeError
, "Failed to set find a schema on 'from' ldb!\n");
563 ret
= dsdb_reference_schema(ldb
, schema
, true);
564 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
569 static PyObject
*py_dsdb_write_prefixes_from_schema_to_ldb(PyObject
*self
, PyObject
*args
)
572 struct ldb_context
*ldb
;
574 struct dsdb_schema
*schema
;
576 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
579 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
581 schema
= dsdb_get_schema(ldb
, NULL
);
583 PyErr_SetString(PyExc_RuntimeError
, "Failed to set find a schema on ldb!\n");
587 result
= dsdb_write_prefixes_from_schema_to_ldb(NULL
, ldb
, schema
);
588 PyErr_WERROR_IS_ERR_RAISE(result
);
594 static PyObject
*py_dsdb_get_partitions_dn(PyObject
*self
, PyObject
*args
)
596 struct ldb_context
*ldb
;
598 PyObject
*py_ldb
, *ret
;
602 mod
= PyImport_ImportModule("ldb");
604 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
607 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
609 tmp_ctx
= talloc_new(NULL
);
611 dn
= samdb_partitions_dn(ldb
, tmp_ctx
);
614 talloc_free(tmp_ctx
);
617 ret
= PyLdbDn_FromDn(dn
);
618 talloc_free(tmp_ctx
);
624 call into samdb_rodc()
626 static PyObject
*py_dsdb_am_rodc(PyObject
*self
, PyObject
*args
)
629 struct ldb_context
*ldb
;
633 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
636 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
638 ret
= samdb_rodc(ldb
, &am_rodc
);
639 if (ret
!= LDB_SUCCESS
) {
640 PyErr_SetString(PyExc_RuntimeError
, ldb_errstring(ldb
));
644 return PyBool_FromLong(am_rodc
);
648 static PyMethodDef py_dsdb_methods
[] = {
649 { "_samdb_server_site_name", (PyCFunction
)py_samdb_server_site_name
,
650 METH_VARARGS
, "Get the server site name as a string"},
651 { "_dsdb_convert_schema_to_openldap",
652 (PyCFunction
)py_dsdb_convert_schema_to_openldap
, METH_VARARGS
,
653 "dsdb_convert_schema_to_openldap(ldb, target_str, mapping) -> str\n"
654 "Create an OpenLDAP schema from a schema." },
655 { "_samdb_set_domain_sid", (PyCFunction
)py_samdb_set_domain_sid
,
657 "samdb_set_domain_sid(samdb, sid)\n"
658 "Set SID of domain to use." },
659 { "_samdb_get_domain_sid", (PyCFunction
)py_samdb_get_domain_sid
,
661 "samdb_get_domain_sid(samdb)\n"
662 "Get SID of domain in use." },
663 { "_samdb_ntds_invocation_id", (PyCFunction
)py_samdb_ntds_invocation_id
,
664 METH_VARARGS
, "get the NTDS invocation ID GUID as a string"},
665 { "_samdb_set_ntds_settings_dn", (PyCFunction
)py_samdb_set_ntds_settings_dn
,
667 "samdb_set_ntds_settings_dn(samdb, ntds_settings_dn)\n"
668 "Set NTDS Settings DN for this LDB (allows it to be set before the DB fully exists)." },
669 { "_dsdb_get_oid_from_attid", (PyCFunction
)py_dsdb_get_oid_from_attid
,
670 METH_VARARGS
, NULL
},
671 { "_dsdb_get_attid_from_lDAPDisplayName", (PyCFunction
)py_dsdb_get_attid_from_lDAPDisplayName
,
672 METH_VARARGS
, NULL
},
673 { "_dsdb_set_ntds_invocation_id",
674 (PyCFunction
)py_dsdb_set_ntds_invocation_id
, METH_VARARGS
,
676 { "_samdb_ntds_objectGUID", (PyCFunction
)py_samdb_ntds_objectGUID
,
677 METH_VARARGS
, "get the NTDS objectGUID as a string"},
678 { "_dsdb_set_global_schema", (PyCFunction
)py_dsdb_set_global_schema
,
679 METH_VARARGS
, NULL
},
680 { "_dsdb_load_partition_usn", (PyCFunction
)py_dsdb_load_partition_usn
,
682 "get uSNHighest and uSNUrgent from the partition @REPLCHANGED"},
683 { "_dsdb_set_am_rodc",
684 (PyCFunction
)py_dsdb_set_am_rodc
, METH_VARARGS
,
687 (PyCFunction
)py_dsdb_am_rodc
, METH_VARARGS
,
689 { "_dsdb_set_schema_from_ldif", (PyCFunction
)py_dsdb_set_schema_from_ldif
, METH_VARARGS
,
691 { "_dsdb_set_schema_from_ldb", (PyCFunction
)py_dsdb_set_schema_from_ldb
, METH_VARARGS
,
693 { "_dsdb_write_prefixes_from_schema_to_ldb", (PyCFunction
)py_dsdb_write_prefixes_from_schema_to_ldb
, METH_VARARGS
,
695 { "_dsdb_get_partitions_dn", (PyCFunction
)py_dsdb_get_partitions_dn
, METH_VARARGS
, NULL
},
696 { "_dsdb_DsReplicaAttribute", (PyCFunction
)py_dsdb_DsReplicaAttribute
, METH_VARARGS
, NULL
},
704 m
= Py_InitModule3("dsdb", py_dsdb_methods
,
705 "Python bindings for the directory service databases.");
709 /* "userAccountControl" flags */
710 PyModule_AddObject(m
, "UF_NORMAL_ACCOUNT",
711 PyInt_FromLong(UF_NORMAL_ACCOUNT
));
712 PyModule_AddObject(m
, "UF_TEMP_DUPLICATE_ACCOUNT",
713 PyInt_FromLong(UF_TEMP_DUPLICATE_ACCOUNT
));
714 PyModule_AddObject(m
, "UF_SERVER_TRUST_ACCOUNT",
715 PyInt_FromLong(UF_SERVER_TRUST_ACCOUNT
));
716 PyModule_AddObject(m
, "UF_WORKSTATION_TRUST_ACCOUNT",
717 PyInt_FromLong(UF_WORKSTATION_TRUST_ACCOUNT
));
718 PyModule_AddObject(m
, "UF_INTERDOMAIN_TRUST_ACCOUNT",
719 PyInt_FromLong(UF_INTERDOMAIN_TRUST_ACCOUNT
));
720 PyModule_AddObject(m
, "UF_PASSWD_NOTREQD",
721 PyInt_FromLong(UF_PASSWD_NOTREQD
));
722 PyModule_AddObject(m
, "UF_ACCOUNTDISABLE",
723 PyInt_FromLong(UF_ACCOUNTDISABLE
));
725 PyModule_AddObject(m
, "UF_SCRIPT", PyInt_FromLong(UF_SCRIPT
));
726 PyModule_AddObject(m
, "UF_ACCOUNTDISABLE", PyInt_FromLong(UF_ACCOUNTDISABLE
));
727 PyModule_AddObject(m
, "UF_00000004", PyInt_FromLong(UF_00000004
));
728 PyModule_AddObject(m
, "UF_HOMEDIR_REQUIRED", PyInt_FromLong(UF_HOMEDIR_REQUIRED
));
729 PyModule_AddObject(m
, "UF_LOCKOUT", PyInt_FromLong(UF_LOCKOUT
));
730 PyModule_AddObject(m
, "UF_PASSWD_NOTREQD", PyInt_FromLong(UF_PASSWD_NOTREQD
));
731 PyModule_AddObject(m
, "UF_PASSWD_CANT_CHANGE", PyInt_FromLong(UF_PASSWD_CANT_CHANGE
));
732 PyModule_AddObject(m
, "UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED", PyInt_FromLong(UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED
));
733 PyModule_AddObject(m
, "UF_TEMP_DUPLICATE_ACCOUNT", PyInt_FromLong(UF_TEMP_DUPLICATE_ACCOUNT
));
734 PyModule_AddObject(m
, "UF_NORMAL_ACCOUNT", PyInt_FromLong(UF_NORMAL_ACCOUNT
));
735 PyModule_AddObject(m
, "UF_00000400", PyInt_FromLong(UF_00000400
));
736 PyModule_AddObject(m
, "UF_INTERDOMAIN_TRUST_ACCOUNT", PyInt_FromLong(UF_INTERDOMAIN_TRUST_ACCOUNT
));
737 PyModule_AddObject(m
, "UF_WORKSTATION_TRUST_ACCOUNT", PyInt_FromLong(UF_WORKSTATION_TRUST_ACCOUNT
));
738 PyModule_AddObject(m
, "UF_SERVER_TRUST_ACCOUNT", PyInt_FromLong(UF_SERVER_TRUST_ACCOUNT
));
739 PyModule_AddObject(m
, "UF_00004000", PyInt_FromLong(UF_00004000
));
740 PyModule_AddObject(m
, "UF_00008000", PyInt_FromLong(UF_00008000
));
741 PyModule_AddObject(m
, "UF_DONT_EXPIRE_PASSWD", PyInt_FromLong(UF_DONT_EXPIRE_PASSWD
));
742 PyModule_AddObject(m
, "UF_MNS_LOGON_ACCOUNT", PyInt_FromLong(UF_MNS_LOGON_ACCOUNT
));
743 PyModule_AddObject(m
, "UF_SMARTCARD_REQUIRED", PyInt_FromLong(UF_SMARTCARD_REQUIRED
));
744 PyModule_AddObject(m
, "UF_TRUSTED_FOR_DELEGATION", PyInt_FromLong(UF_TRUSTED_FOR_DELEGATION
));
745 PyModule_AddObject(m
, "UF_NOT_DELEGATED", PyInt_FromLong(UF_NOT_DELEGATED
));
746 PyModule_AddObject(m
, "UF_USE_DES_KEY_ONLY", PyInt_FromLong(UF_USE_DES_KEY_ONLY
));
747 PyModule_AddObject(m
, "UF_DONT_REQUIRE_PREAUTH", PyInt_FromLong(UF_DONT_REQUIRE_PREAUTH
));
748 PyModule_AddObject(m
, "UF_PASSWORD_EXPIRED", PyInt_FromLong(UF_PASSWORD_EXPIRED
));
749 PyModule_AddObject(m
, "UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION", PyInt_FromLong(UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION
));
750 PyModule_AddObject(m
, "UF_NO_AUTH_DATA_REQUIRED", PyInt_FromLong(UF_NO_AUTH_DATA_REQUIRED
));
751 PyModule_AddObject(m
, "UF_PARTIAL_SECRETS_ACCOUNT", PyInt_FromLong(UF_PARTIAL_SECRETS_ACCOUNT
));
753 /* "groupType" flags */
754 PyModule_AddObject(m
, "GTYPE_SECURITY_BUILTIN_LOCAL_GROUP",
755 PyInt_FromLong(GTYPE_SECURITY_BUILTIN_LOCAL_GROUP
));
756 PyModule_AddObject(m
, "GTYPE_SECURITY_GLOBAL_GROUP",
757 PyInt_FromLong(GTYPE_SECURITY_GLOBAL_GROUP
));
758 PyModule_AddObject(m
, "GTYPE_SECURITY_DOMAIN_LOCAL_GROUP",
759 PyInt_FromLong(GTYPE_SECURITY_DOMAIN_LOCAL_GROUP
));
760 PyModule_AddObject(m
, "GTYPE_SECURITY_UNIVERSAL_GROUP",
761 PyInt_FromLong(GTYPE_SECURITY_UNIVERSAL_GROUP
));
762 PyModule_AddObject(m
, "GTYPE_DISTRIBUTION_GLOBAL_GROUP",
763 PyInt_FromLong(GTYPE_DISTRIBUTION_GLOBAL_GROUP
));
764 PyModule_AddObject(m
, "GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP",
765 PyInt_FromLong(GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP
));
766 PyModule_AddObject(m
, "GTYPE_DISTRIBUTION_UNIVERSAL_GROUP",
767 PyInt_FromLong(GTYPE_DISTRIBUTION_UNIVERSAL_GROUP
));
769 /* "sAMAccountType" flags */
770 PyModule_AddObject(m
, "ATYPE_NORMAL_ACCOUNT",
771 PyInt_FromLong(ATYPE_NORMAL_ACCOUNT
));
772 PyModule_AddObject(m
, "ATYPE_WORKSTATION_TRUST",
773 PyInt_FromLong(ATYPE_WORKSTATION_TRUST
));
774 PyModule_AddObject(m
, "ATYPE_INTERDOMAIN_TRUST",
775 PyInt_FromLong(ATYPE_INTERDOMAIN_TRUST
));
776 PyModule_AddObject(m
, "ATYPE_SECURITY_GLOBAL_GROUP",
777 PyInt_FromLong(ATYPE_SECURITY_GLOBAL_GROUP
));
778 PyModule_AddObject(m
, "ATYPE_SECURITY_LOCAL_GROUP",
779 PyInt_FromLong(ATYPE_SECURITY_LOCAL_GROUP
));
780 PyModule_AddObject(m
, "ATYPE_SECURITY_UNIVERSAL_GROUP",
781 PyInt_FromLong(ATYPE_SECURITY_UNIVERSAL_GROUP
));
782 PyModule_AddObject(m
, "ATYPE_DISTRIBUTION_GLOBAL_GROUP",
783 PyInt_FromLong(ATYPE_DISTRIBUTION_GLOBAL_GROUP
));
784 PyModule_AddObject(m
, "ATYPE_DISTRIBUTION_LOCAL_GROUP",
785 PyInt_FromLong(ATYPE_DISTRIBUTION_LOCAL_GROUP
));
786 PyModule_AddObject(m
, "ATYPE_DISTRIBUTION_UNIVERSAL_GROUP",
787 PyInt_FromLong(ATYPE_DISTRIBUTION_UNIVERSAL_GROUP
));
789 /* "domainFunctionality", "forestFunctionality" flags in the rootDSE */
790 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2000",
791 PyInt_FromLong(DS_DOMAIN_FUNCTION_2000
));
792 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2003_MIXED",
793 PyInt_FromLong(DS_DOMAIN_FUNCTION_2003_MIXED
));
794 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2003",
795 PyInt_FromLong(DS_DOMAIN_FUNCTION_2003
));
796 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2008",
797 PyInt_FromLong(DS_DOMAIN_FUNCTION_2008
));
798 PyModule_AddObject(m
, "DS_DOMAIN_FUNCTION_2008_R2",
799 PyInt_FromLong(DS_DOMAIN_FUNCTION_2008_R2
));
802 PyModule_AddObject(m
, "SYSTEM_FLAG_CR_NTDS_NC",
803 PyInt_FromLong(SYSTEM_FLAG_CR_NTDS_NC
));
804 PyModule_AddObject(m
, "SYSTEM_FLAG_CR_NTDS_DOMAIN",
805 PyInt_FromLong(SYSTEM_FLAG_CR_NTDS_DOMAIN
));
806 PyModule_AddObject(m
, "SYSTEM_FLAG_CR_NTDS_NOT_GC_REPLICATED",
807 PyInt_FromLong(SYSTEM_FLAG_CR_NTDS_NOT_GC_REPLICATED
));
808 PyModule_AddObject(m
, "SYSTEM_FLAG_SCHEMA_BASE_OBJECT",
809 PyInt_FromLong(SYSTEM_FLAG_SCHEMA_BASE_OBJECT
));
810 PyModule_AddObject(m
, "SYSTEM_FLAG_ATTR_IS_RDN",
811 PyInt_FromLong(SYSTEM_FLAG_ATTR_IS_RDN
));
812 PyModule_AddObject(m
, "SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETE",
813 PyInt_FromLong(SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETE
));
814 PyModule_AddObject(m
, "SYSTEM_FLAG_DOMAIN_DISALLOW_MOVE",
815 PyInt_FromLong(SYSTEM_FLAG_DOMAIN_DISALLOW_MOVE
));
816 PyModule_AddObject(m
, "SYSTEM_FLAG_DOMAIN_DISALLOW_RENAME",
817 PyInt_FromLong(SYSTEM_FLAG_DOMAIN_DISALLOW_RENAME
));
818 PyModule_AddObject(m
, "SYSTEM_FLAG_CONFIG_ALLOW_LIMITED_MOVE",
819 PyInt_FromLong(SYSTEM_FLAG_CONFIG_ALLOW_LIMITED_MOVE
));
820 PyModule_AddObject(m
, "SYSTEM_FLAG_CONFIG_ALLOW_MOVE",
821 PyInt_FromLong(SYSTEM_FLAG_CONFIG_ALLOW_MOVE
));
822 PyModule_AddObject(m
, "SYSTEM_FLAG_CONFIG_ALLOW_RENAME",
823 PyInt_FromLong(SYSTEM_FLAG_CONFIG_ALLOW_RENAME
));
824 PyModule_AddObject(m
, "SYSTEM_FLAG_DISALLOW_DELETE",
825 PyInt_FromLong(SYSTEM_FLAG_DISALLOW_DELETE
));
827 /* Kerberos encryption type constants */
828 PyModule_AddObject(m
, "ENC_ALL_TYPES",
829 PyInt_FromLong(ENC_ALL_TYPES
));
830 PyModule_AddObject(m
, "ENC_CRC32",
831 PyInt_FromLong(ENC_CRC32
));
832 PyModule_AddObject(m
, "ENC_RSA_MD5",
833 PyInt_FromLong(ENC_RSA_MD5
));
834 PyModule_AddObject(m
, "ENC_RC4_HMAC_MD5",
835 PyInt_FromLong(ENC_RC4_HMAC_MD5
));
836 PyModule_AddObject(m
, "ENC_HMAC_SHA1_96_AES128",
837 PyInt_FromLong(ENC_HMAC_SHA1_96_AES128
));
838 PyModule_AddObject(m
, "ENC_HMAC_SHA1_96_AES256",
839 PyInt_FromLong(ENC_HMAC_SHA1_96_AES256
));
841 PyModule_AddObject(m
, "SEARCH_FLAG_ATTINDEX", PyInt_FromLong(SEARCH_FLAG_ATTINDEX
));
842 PyModule_AddObject(m
, "SEARCH_FLAG_PDNTATTINDEX", PyInt_FromLong(SEARCH_FLAG_PDNTATTINDEX
));
843 PyModule_AddObject(m
, "SEARCH_FLAG_ANR", PyInt_FromLong(SEARCH_FLAG_ANR
));
844 PyModule_AddObject(m
, "SEARCH_FLAG_PRESERVEONDELETE", PyInt_FromLong(SEARCH_FLAG_PRESERVEONDELETE
));
845 PyModule_AddObject(m
, "SEARCH_FLAG_COPY", PyInt_FromLong(SEARCH_FLAG_COPY
));
846 PyModule_AddObject(m
, "SEARCH_FLAG_TUPLEINDEX", PyInt_FromLong(SEARCH_FLAG_TUPLEINDEX
));
847 PyModule_AddObject(m
, "SEARCH_FLAG_SUBTREEATTRINDEX", PyInt_FromLong(SEARCH_FLAG_SUBTREEATTRINDEX
));
848 PyModule_AddObject(m
, "SEARCH_FLAG_CONFIDENTIAL", PyInt_FromLong(SEARCH_FLAG_CONFIDENTIAL
));
849 PyModule_AddObject(m
, "SEARCH_FLAG_NEVERVALUEAUDIT", PyInt_FromLong(SEARCH_FLAG_NEVERVALUEAUDIT
));
850 PyModule_AddObject(m
, "SEARCH_FLAG_RODC_ATTRIBUTE", PyInt_FromLong(SEARCH_FLAG_RODC_ATTRIBUTE
));
852 PyModule_AddObject(m
, "DS_FLAG_ATTR_NOT_REPLICATED", PyInt_FromLong(DS_FLAG_ATTR_NOT_REPLICATED
));
853 PyModule_AddObject(m
, "DS_FLAG_ATTR_REQ_PARTIAL_SET_MEMBER", PyInt_FromLong(DS_FLAG_ATTR_REQ_PARTIAL_SET_MEMBER
));
854 PyModule_AddObject(m
, "DS_FLAG_ATTR_IS_CONSTRUCTED", PyInt_FromLong(DS_FLAG_ATTR_IS_CONSTRUCTED
));