2 Unix SMB/CIFS implementation.
3 Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007
4 Copyright (C) Matthias Dieter Wallnöfer 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "ldb_errors.h"
24 #include "param/param.h"
25 #include "auth/credentials/credentials.h"
26 #include "dsdb/samdb/samdb.h"
27 #include "lib/ldb-samba/ldif_handlers.h"
28 #include "librpc/ndr/libndr.h"
31 #include "lib/ldb/pyldb.h"
32 #include "libcli/util/pyerrors.h"
33 #include "libcli/security/security.h"
34 #include "auth/pyauth.h"
35 #include "param/pyparam.h"
36 #include "auth/credentials/pycredentials.h"
38 #ifndef Py_RETURN_NONE
39 #define Py_RETURN_NONE return Py_INCREF(Py_None), Py_None
42 /* FIXME: These should be in a header file somewhere, once we finish moving
43 * away from SWIG .. */
44 #define PyErr_LDB_OR_RAISE(py_ldb, ldb) \
45 /* if (!PyLdb_Check(py_ldb)) { \
46 PyErr_SetString(py_ldb_get_exception(), "Ldb connection object required"); \
49 ldb = PyLdb_AsLdbContext(py_ldb);
51 static void PyErr_SetLdbError(PyObject
*error
, int ret
, struct ldb_context
*ldb_ctx
)
53 if (ret
== LDB_ERR_PYTHON_EXCEPTION
)
54 return; /* Python exception should already be set, just keep that */
56 PyErr_SetObject(error
,
57 Py_BuildValue(discard_const_p(char, "(i,s)"), ret
,
58 ldb_ctx
== NULL
?ldb_strerror(ret
):ldb_errstring(ldb_ctx
)));
61 static PyObject
*py_ldb_get_exception(void)
63 PyObject
*mod
= PyImport_ImportModule("ldb");
67 return PyObject_GetAttrString(mod
, "LdbError");
70 static PyObject
*py_generate_random_str(PyObject
*self
, PyObject
*args
)
75 if (!PyArg_ParseTuple(args
, "i", &len
))
78 retstr
= generate_random_str(NULL
, len
);
79 ret
= PyString_FromString(retstr
);
84 static PyObject
*py_unix2nttime(PyObject
*self
, PyObject
*args
)
88 if (!PyArg_ParseTuple(args
, "I", &t
))
91 unix_to_nt_time(&nt
, t
);
93 return PyInt_FromLong((uint64_t)nt
);
96 static PyObject
*py_set_debug_level(PyObject
*self
, PyObject
*args
)
99 if (!PyArg_ParseTuple(args
, "I", &level
))
101 (DEBUGLEVEL
) = level
;
105 static PyObject
*py_ldb_set_credentials(PyObject
*self
, PyObject
*args
)
107 PyObject
*py_creds
, *py_ldb
;
108 struct cli_credentials
*creds
;
109 struct ldb_context
*ldb
;
110 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_creds
))
113 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
115 creds
= cli_credentials_from_py_object(py_creds
);
117 PyErr_SetString(PyExc_TypeError
, "Expected credentials object");
121 ldb_set_opaque(ldb
, "credentials", creds
);
126 static PyObject
*py_ldb_set_loadparm(PyObject
*self
, PyObject
*args
)
128 PyObject
*py_lp_ctx
, *py_ldb
;
129 struct loadparm_context
*lp_ctx
;
130 struct ldb_context
*ldb
;
131 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_lp_ctx
))
134 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
136 lp_ctx
= lp_from_py_object(py_lp_ctx
);
137 if (lp_ctx
== NULL
) {
138 PyErr_SetString(PyExc_TypeError
, "Expected loadparm object");
142 ldb_set_opaque(ldb
, "loadparm", lp_ctx
);
148 static PyObject
*py_ldb_set_session_info(PyObject
*self
, PyObject
*args
)
150 PyObject
*py_session_info
, *py_ldb
;
151 struct auth_session_info
*info
;
152 struct ldb_context
*ldb
;
153 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_session_info
))
156 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
157 /*if (!PyAuthSession_Check(py_session_info)) {
158 PyErr_SetString(PyExc_TypeError, "Expected session info object");
162 info
= PyAuthSession_AsSession(py_session_info
);
164 ldb_set_opaque(ldb
, "sessionInfo", info
);
169 static PyObject
*py_ldb_set_utf8_casefold(PyObject
*self
, PyObject
*args
)
172 struct ldb_context
*ldb
;
174 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
177 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
179 ldb_set_utf8_fns(ldb
, NULL
, wrap_casefold
);
184 static PyObject
*py_samdb_set_domain_sid(PyLdbObject
*self
, PyObject
*args
)
186 PyObject
*py_ldb
, *py_sid
;
187 struct ldb_context
*ldb
;
191 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_sid
))
194 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
196 sid
= dom_sid_parse_talloc(NULL
, PyString_AsString(py_sid
));
198 ret
= samdb_set_domain_sid(ldb
, sid
);
200 PyErr_SetString(PyExc_RuntimeError
, "set_domain_sid failed");
206 static PyObject
*py_samdb_get_domain_sid(PyLdbObject
*self
, PyObject
*args
)
209 struct ldb_context
*ldb
;
210 const struct dom_sid
*sid
;
214 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
217 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
219 sid
= samdb_domain_sid(ldb
);
221 PyErr_SetString(PyExc_RuntimeError
, "samdb_domain_sid failed");
225 retstr
= dom_sid_string(NULL
, sid
);
226 ret
= PyString_FromString(retstr
);
232 static PyObject
*py_samdb_set_password(PyLdbObject
*self
, PyObject
*args
,
235 PyObject
*py_sam
, *py_user_dn
, *py_dom_dn
, *py_mod
, *py_user_change
;
238 DATA_BLOB new_pwd_blob
;
239 struct ldb_context
*sam_ctx
;
240 struct ldb_dn
*user_dn
, *dom_dn
;
241 struct ldb_message
*mod
;
244 const char * const kwnames
[] = { "samdb", "user_dn", "dom_dn", "mod",
245 "new_password", "user_change", NULL
};
247 if (!PyArg_ParseTupleAndKeywords(args
, kwargs
, "OOOOsO",
248 discard_const_p(char *, kwnames
),
249 &py_sam
, &py_user_dn
, &py_dom_dn
, &py_mod
, &new_password
,
253 sam_ctx
= PyLdb_AsLdbContext(py_sam
);
255 mem_ctx
= talloc_new(NULL
);
256 if (mem_ctx
== NULL
) {
260 if (!PyObject_AsDn(mem_ctx
, py_user_dn
, sam_ctx
, &user_dn
)) {
261 PyErr_SetString(PyExc_RuntimeError
, "user_dn invalid!");
265 if (!PyObject_AsDn(mem_ctx
, py_dom_dn
, sam_ctx
, &dom_dn
)) {
266 PyErr_SetString(PyExc_RuntimeError
, "dom_dn invalid!");
270 mod
= PyLdbMessage_AsMessage(py_mod
);
272 user_change
= PyInt_AsLong(py_user_change
);
274 new_pwd_blob
.data
= (uint8_t *) new_password
;
275 new_pwd_blob
.length
= strlen((char *) new_pwd_blob
.data
);
277 status
= samdb_set_password(sam_ctx
, mem_ctx
, user_dn
, dom_dn
, mod
,
278 &new_pwd_blob
, NULL
, NULL
, user_change
, NULL
, NULL
);
280 talloc_free(mem_ctx
);
282 PyErr_NTSTATUS_IS_ERR_RAISE(status
);
286 static PyObject
*py_ldb_register_samba_handlers(PyObject
*self
, PyObject
*args
)
289 struct ldb_context
*ldb
;
292 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
295 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
296 ret
= ldb_register_samba_handlers(ldb
);
298 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
302 static PyObject
*py_dsdb_set_ntds_invocation_id(PyObject
*self
, PyObject
*args
)
304 PyObject
*py_ldb
, *py_guid
;
307 struct ldb_context
*ldb
;
308 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_guid
))
311 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
312 GUID_from_string(PyString_AsString(py_guid
), &guid
);
314 ret
= samdb_set_ntds_invocation_id(ldb
, &guid
);
316 PyErr_SetString(PyExc_RuntimeError
, "set_ntds_invocation_id failed");
322 static PyObject
*py_dsdb_set_opaque_integer(PyObject
*self
, PyObject
*args
)
326 int *old_val
, *new_val
;
327 char *py_opaque_name
, *opaque_name_talloc
;
328 struct ldb_context
*ldb
;
331 if (!PyArg_ParseTuple(args
, "Osi", &py_ldb
, &py_opaque_name
, &value
))
334 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
336 /* see if we have a cached copy */
337 old_val
= (int *)ldb_get_opaque(ldb
,
345 tmp_ctx
= talloc_new(ldb
);
346 if (tmp_ctx
== NULL
) {
350 new_val
= talloc(tmp_ctx
, int);
355 opaque_name_talloc
= talloc_strdup(tmp_ctx
, py_opaque_name
);
356 if (!opaque_name_talloc
) {
362 /* cache the domain_sid in the ldb */
363 if (ldb_set_opaque(ldb
, opaque_name_talloc
, new_val
) != LDB_SUCCESS
) {
367 talloc_steal(ldb
, new_val
);
368 talloc_steal(ldb
, opaque_name_talloc
);
369 talloc_free(tmp_ctx
);
374 talloc_free(tmp_ctx
);
375 PyErr_SetString(PyExc_RuntimeError
, "Failed to set opaque integer into the ldb!\n");
379 static PyObject
*py_dsdb_set_global_schema(PyObject
*self
, PyObject
*args
)
382 struct ldb_context
*ldb
;
384 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
387 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
389 ret
= dsdb_set_global_schema(ldb
);
390 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
395 static PyObject
*py_dsdb_set_schema_from_ldif(PyObject
*self
, PyObject
*args
)
400 struct ldb_context
*ldb
;
402 if (!PyArg_ParseTuple(args
, "Oss", &py_ldb
, &pf
, &df
))
405 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
407 result
= dsdb_set_schema_from_ldif(ldb
, pf
, df
);
408 PyErr_WERROR_IS_ERR_RAISE(result
);
413 static PyObject
*py_dsdb_convert_schema_to_openldap(PyObject
*self
, PyObject
*args
)
415 char *target_str
, *mapping
;
417 struct ldb_context
*ldb
;
421 if (!PyArg_ParseTuple(args
, "Oss", &py_ldb
, &target_str
, &mapping
))
424 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
426 retstr
= dsdb_convert_schema_to_openldap(ldb
, target_str
, mapping
);
428 PyErr_SetString(PyExc_RuntimeError
, "dsdb_convert_schema_to_openldap failed");
431 ret
= PyString_FromString(retstr
);
436 static PyObject
*py_dsdb_write_prefixes_from_schema_to_ldb(PyObject
*self
, PyObject
*args
)
439 struct ldb_context
*ldb
;
441 struct dsdb_schema
*schema
;
443 if (!PyArg_ParseTuple(args
, "O", &py_ldb
))
446 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
448 schema
= dsdb_get_schema(ldb
);
450 PyErr_SetString(PyExc_RuntimeError
, "Failed to set find a schema on ldb!\n");
454 result
= dsdb_write_prefixes_from_schema_to_ldb(NULL
, ldb
, schema
);
455 PyErr_WERROR_IS_ERR_RAISE(result
);
460 static PyObject
*py_dsdb_set_schema_from_ldb(PyObject
*self
, PyObject
*args
)
463 struct ldb_context
*ldb
;
464 PyObject
*py_from_ldb
;
465 struct ldb_context
*from_ldb
;
466 struct dsdb_schema
*schema
;
468 if (!PyArg_ParseTuple(args
, "OO", &py_ldb
, &py_from_ldb
))
471 PyErr_LDB_OR_RAISE(py_ldb
, ldb
);
473 PyErr_LDB_OR_RAISE(py_from_ldb
, from_ldb
);
475 schema
= dsdb_get_schema(from_ldb
);
477 PyErr_SetString(PyExc_RuntimeError
, "Failed to set find a schema on 'from' ldb!\n");
481 ret
= dsdb_reference_schema(ldb
, schema
, true);
482 PyErr_LDB_ERROR_IS_ERR_RAISE(py_ldb_get_exception(), ret
, ldb
);
487 static PyObject
*py_dom_sid_to_rid(PyLdbObject
*self
, PyObject
*args
)
494 if(!PyArg_ParseTuple(args
, "O", &py_sid
))
497 sid
= dom_sid_parse_talloc(NULL
, PyString_AsString(py_sid
));
499 status
= dom_sid_split_rid(NULL
, (const struct dom_sid
*)sid
, NULL
,
501 if (!NT_STATUS_IS_OK(status
)) {
502 PyErr_SetString(PyExc_RuntimeError
, "dom_sid_split_rid failed");
506 return PyInt_FromLong(rid
);
509 static PyMethodDef py_misc_methods
[] = {
510 { "generate_random_str", (PyCFunction
)py_generate_random_str
, METH_VARARGS
,
511 "random_password(len) -> string\n"
512 "Generate random password with specified length." },
513 { "unix2nttime", (PyCFunction
)py_unix2nttime
, METH_VARARGS
,
514 "unix2nttime(timestamp) -> nttime" },
515 { "ldb_set_credentials", (PyCFunction
)py_ldb_set_credentials
, METH_VARARGS
,
516 "ldb_set_credentials(ldb, credentials) -> None\n"
517 "Set credentials to use when connecting." },
518 { "ldb_set_session_info", (PyCFunction
)py_ldb_set_session_info
, METH_VARARGS
,
519 "ldb_set_session_info(ldb, session_info)\n"
520 "Set session info to use when connecting." },
521 { "ldb_set_loadparm", (PyCFunction
)py_ldb_set_loadparm
, METH_VARARGS
,
522 "ldb_set_loadparm(ldb, session_info)\n"
523 "Set loadparm context to use when connecting." },
524 { "samdb_set_domain_sid", (PyCFunction
)py_samdb_set_domain_sid
, METH_VARARGS
,
525 "samdb_set_domain_sid(samdb, sid)\n"
526 "Set SID of domain to use." },
527 { "samdb_get_domain_sid", (PyCFunction
)py_samdb_get_domain_sid
, METH_VARARGS
,
528 "samdb_get_domain_sid(samdb)\n"
529 "Get SID of domain in use." },
530 { "samdb_set_password", (PyCFunction
)py_samdb_set_password
,
531 METH_VARARGS
|METH_KEYWORDS
,
532 "samdb_set_password(samdb, user_dn, dom_dn, mod, new_password, user_change)\n"
533 "Set the password of a user" },
534 { "ldb_register_samba_handlers", (PyCFunction
)py_ldb_register_samba_handlers
, METH_VARARGS
,
535 "ldb_register_samba_handlers(ldb)\n"
536 "Register Samba-specific LDB modules and schemas." },
537 { "ldb_set_utf8_casefold", (PyCFunction
)py_ldb_set_utf8_casefold
, METH_VARARGS
,
538 "ldb_set_utf8_casefold(ldb)\n"
539 "Set the right Samba casefolding function for UTF8 charset." },
540 { "dsdb_set_ntds_invocation_id", (PyCFunction
)py_dsdb_set_ntds_invocation_id
, METH_VARARGS
,
542 { "dsdb_set_opaque_integer", (PyCFunction
)py_dsdb_set_opaque_integer
, METH_VARARGS
,
544 { "dsdb_set_global_schema", (PyCFunction
)py_dsdb_set_global_schema
, METH_VARARGS
,
546 { "dsdb_set_schema_from_ldif", (PyCFunction
)py_dsdb_set_schema_from_ldif
, METH_VARARGS
,
548 { "dsdb_write_prefixes_from_schema_to_ldb", (PyCFunction
)py_dsdb_write_prefixes_from_schema_to_ldb
, METH_VARARGS
,
550 { "dsdb_set_schema_from_ldb", (PyCFunction
)py_dsdb_set_schema_from_ldb
, METH_VARARGS
,
552 { "dsdb_convert_schema_to_openldap", (PyCFunction
)py_dsdb_convert_schema_to_openldap
, METH_VARARGS
,
554 { "dom_sid_to_rid", (PyCFunction
)py_dom_sid_to_rid
, METH_VARARGS
,
556 { "set_debug_level", (PyCFunction
)py_set_debug_level
, METH_VARARGS
,
565 m
= Py_InitModule3("glue", py_misc_methods
,
566 "Python bindings for miscellaneous Samba functions.");
570 PyModule_AddObject(m
, "version", PyString_FromString(SAMBA_VERSION_STRING
));
572 PyModule_AddObject(m
, "DS_BEHAVIOR_WIN2000", PyInt_FromLong(DS_BEHAVIOR_WIN2000
));
573 PyModule_AddObject(m
, "DS_BEHAVIOR_WIN2003_INTERIM", PyInt_FromLong(DS_BEHAVIOR_WIN2003_INTERIM
));
574 PyModule_AddObject(m
, "DS_BEHAVIOR_WIN2003", PyInt_FromLong(DS_BEHAVIOR_WIN2003
));
575 PyModule_AddObject(m
, "DS_BEHAVIOR_WIN2008", PyInt_FromLong(DS_BEHAVIOR_WIN2008
));