a Wa[@sddlmZddlZddlZddlZddlmZmZddl m Z ddl m Z ddl mZddlmZmZddlmZddlmZmZmZmZdd lmZd d lmZGd d d eZGdddeZGdddeZGdddeZ GdddeZ!GdddeZ"GdddeZ#dS)N) check_callCalledProcessError) attrgetter)system_session)SamDB) credentialsdsdb)Net)Command CommandError SuperCommandOption) get_bytes)commonc@seZdZdZdZedddeddded d ed ed d ed edded edded edded edded edded edded edded edded edded ed d!ed ed"d#ed ed$d%ed gZd&gZe j e j e j d'Z d+d)d*Zd(S), cmd_createaCreate a new contact. This command creates a new contact in the Active Directory domain. The name of the new contact can be specified by the first argument 'contactname' or the --given-name, --initial and --surname arguments. If no 'contactname' is given, contact's name will be made up of the given arguments by combining the given-name, initials and surname. Each argument is optional. A dot ('.') will be appended to the initials automatically. Example1: samba-tool contact create "James T. Kirk" --job-title=Captain \ -H ldap://samba.samdom.example.com -UAdministrator%Passw1rd The example shows how to create a new contact in the domain against a remote LDAP server. Example2: samba-tool contact create --given-name=James --initials=T --surname=Kirk The example shows how to create a new contact in the domain against a local server. The resulting name is "James T. Kirk". z%prog [contactname] [options]-H--URL%LDB URL for database or target serverURLHhelptypemetavardestz--ouzDN of alternative location (with or without domainDN counterpart) in which the new contact will be created. E.g. 'OU='. Default is the domain base.rrz --surnamezContact's surnamez --given-namezContact's given namez --initialszContact's initialsz--display-namezContact's display namez --job-titlezContact's job titlez --departmentzContact's departmentz --companyzContact's companyz --descriptionzContact's descriptionz--mail-addresszContact's email addressz--internet-addresszContact's home pagez--telephone-numberzContact's phone numberz--mobile-numberzContact's mobile phone numberz--physical-delivery-officezContact's office locationzfullcontactname? sambaoptscredopts versionoptsNcCs|}||}z>t|t||d}|j||||| | | | | ||||||d}Wn.ty~}ztd|WYd}~n d}~00|jd|dS)NZurlZ session_inforlp)fullcontactnameousurnameZ givennameinitialsZ displaynameZjobtitle departmentcompany descriptionZ mailaddressZinternetaddressZtelephonenumberZ mobilenumberZphysicaldeliveryofficezFailed to create contactz"Contact '%s' created successfully ) get_loadparmget_credentialsrrZ newcontact Exceptionr outfwrite)selfr#rrr rr$r%Z given_namer&Z display_nameZ job_titler'r(r)Z mail_addressZinternet_addressZtelephone_numberZ mobile_numberZphysical_delivery_officer"credssamdbZret_nameer36/usr/lib/python3/dist-packages/samba/netcmd/contact.pyrunjs8   zcmd_create.run)NNNNNNNNNNNNNNNNNNN__name__ __module__ __qualname____doc__synopsisr str takes_optionsZ takes_argsoptions SambaOptionsCredentialsOptionsVersionOptionstakes_optiongroupsr5r3r3r3r4r+sl           rc@sLeZdZdZdZedddedddgZd gZe j e j e j d Z dd d Zd S) cmd_deletea4Delete a contact. This command deletes a contact object from the Active Directory domain. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. Example: samba-tool contact delete Contact1 \ -H ldap://samba.samdom.example.com \ --username=Administrator --password=Passw1rd The example shows how to delete a contact in the domain against a remote LDAP server. %prog [options]rrrrrr contactnamerNc Cs~|}|j|dd}t|t||d}|} tj} dt|} | drd} tj } z| |} Wn4t y} zt d|| fWYd} ~ n d} ~ 00z"|j| | | dgd } | d j}Wntyt d |Yn0t| d kr&t| tdd D]}|jd|jqt d|z||Wn4t yh} zt d|| WYd} ~ n d} ~ 00|jd|dS)NTZfallback_machiner!!(&(objectClass=contact)(name=%s))CN=(objectClass=contact)Invalid dn "%s": %sdnbasescope expressionattrsrUnable to find contact "%s"rkey found: %s FMultiple results for contact '%s' Please specify the contact's full DNzFailed to remove contact "%s"zDeleted contact %s )r*r+rr domain_dnldb SCOPE_SUBTREE binary_encodeupper startswith SCOPE_BASEnormalize_dn_in_domainr,r searchrK IndexErrorlensortedrr-r.delete)r/rErrr rr"r0r1base_dnrNfilterr2res contact_dnmsgr3r3r4r5sR $zcmd_delete.run)NNNNr6r3r3r3r4rCs( rCc @sdeZdZdZdZedddeddded d d ed ed dddddgZej ej ej dZ dddZ dS)cmd_listzList all contacts. z%prog [options]rrrrrrz-bz --base-dnzSpecify base DN to use.rz --full-dnfull_dnF store_truez.Display contact's full DN instead of the name.)rdefaultactionrrNcCs|}|j|dd}t|t||d} | } |r>| |} | j| tjddgd} t | dkrddS|rt | t dd D]} |j d | jqxdS| D]"} | jddd } |j d | qdS) NTrFr!rIname)rNrOrPrrKrRz%s )idx)r*r+rrrVr]r^rWrXr`rarr-r.rKget)r/rrr rrcrir"r0r1Z search_dnrergZ contact_namer3r3r4r5s0  z cmd_list.run)NNNNNF)r7r8r9r:r;r r<r=r>r?r@rArBr5r3r3r3r4rhs>rhc@sXeZdZdZdZedddeddded d ed gZd gZe j e j e j d Z dddZdS)cmd_editaHModify a contact. This command will allow editing of a contact object in the Active Directory domain. You will then be able to add or change attributes and their values. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact edit Contact1 -H ldap://samba.samdom.example.com \ -U Administrator --password=Passw1rd Example1 shows how to edit a contact's attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact edit CN=Contact2,OU=people,DC=samdom,DC=example,DC=com Example2 shows how to edit a contact's attributes in the domain against a local server. The contact, which is located in the 'people' OU, is specified by the full distinguished name. Example3: samba-tool contact edit Contact3 --editor=nano Example3 shows how to edit a contact's attributes in the domain against a local server using the 'nano' editor. rDrrrrrrz--editorzQEditor to use instead of the system default, or 'vi' if no system default is set.rrErNc Cs|}|j|dd}t|t||d} | } tj} dt|} | drd} tj } z| |} Wn4t y} zt d|| fWYd} ~ n d} ~ 00z| j| | | d}|d j}Wntyt d |Yn0t|d kr t|td d D]}|jd|jqt d||D]}t| |}|durXtjd}|durXd}tjdd}|t||zt||j gWn0t!y} zt!d| WYd} ~ n d} ~ 00t"|j }|#}Wdn1s0YWdn1s 0Yq$| $|}t%|d }| &||}t|d krX|jddSz| '|Wn4t y} zt d|| WYd} ~ n d} ~ 00|jd|dS)NTrFr!rGrHrIrJ)rMrNrOrrQrrKrRrTrUZEDITORZviz.tmp)suffixzERROR: zNothing to do zFailed to modify contact '%s': z#Modified contact '%s' successfully )(r*r+rrrVrWrXrYrZr[r\r]r,r r^rKr_r`rarr-r.rget_ldif_for_editorosenvironrotempfileZNamedTemporaryFilerflushrrmropenreadZ parse_ldifnextZmsg_diffZmodify)r/rErrr rZeditorr"r0r1rcrNrdr2rerfrgZ result_ldifZt_fileZ edited_fileZedited_messageZ msgs_editedZ msg_editedZ res_msg_diffr3r3r4r5qsz       L    z cmd_edit.run)NNNNNr6r3r3r3r4rp6s2$ rpc@sZeZdZdZdZedddeddded d ed d gZd gZe j e j e j dZ dddZdS)cmd_showaDisplay a contact. This command displays a contact object with it's attributes in the Active Directory domain. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact show Contact1 -H ldap://samba.samdom.example.com \ -U Administrator --password=Passw1rd Example1 shows how to display a contact's attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact show CN=Contact2,OU=people,DC=samdom,DC=example,DC=com Example2 shows how to display a contact's attributes in the domain against a local server. The contact, which is located in the 'people' OU, is specified by the full distinguished name. Example3: samba-tool contact show Contact3 --attributes=mail,mobile Example3 shows how to display a contact's mail and mobile attributes. rDrrrrrrz --attributesz:Comma separated list of attributes, which will be printed. contact_attrs)rrrrErNc Cs^|}|j|dd}t|t||d} | } tj} d} |rH|d} dt|} | drd} tj } z| |} Wn4t y}ztd||fWYd}~n d}~00z | j| | | | d }|d j}Wntytd |Yn0t|d kr6t|td dD]}|jd|jqtd||D]}t| |}|j|q:dS)NTrFr!,rGrHrIrJ)rMrOrNrPrrQrrKrRrTzAMultiple results for contact '%s' Please specify the contact's DN)r*r+rrrVrWrXsplitrYrZr[r\r]r,r r^rKr_r`rarr-r.rrr)r/rErrr rr{r"r0r1rcrNrPrdr2rerfrgZ contact_ldifr3r3r4r5sT   z cmd_show.run)NNNNNr6r3r3r3r4rzs4#rzc@sNeZdZdZdZedddedddgZd d gZe j e j e j d Z dd dZd S)cmd_movea]Move a contact object to an organizational unit or container. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The name of the organizational unit or container can be specified as the distinguished name, with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact move Contact1 'OU=people' \ -H ldap://samba.samdom.example.com -U Administrator Example1 shows how to move a contact Contact1 into the 'people' organizational unit on a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact move Contact1 OU=Contacts,DC=samdom,DC=example,DC=com Example2 shows how to move a contact Contact1 into the OU=Contacts organizational unit on the local server. z-%prog [options]rrrrrrrE new_parent_dnrNc Cs|}|j|dd}t|t||d} | } tj} dt|} | drd} tj } z| |} Wn4t y} zt d|| fWYd} ~ n d} ~ 00z"| j| | | dgd }|d j}Wntyt d |Yn0t|d kr&t|tdd D]}|jd|jqt d|z| |}Wn6t yj} zt d|| fWYd} ~ n d} ~ 00t| t|}|t|d ||z| ||Wn4t y} zt d|| WYd} ~ n d} ~ 00|jd||fdS)NTrFr!rGrHrIrJrKrLrrQrrRrTrUzInvalid new_parent_dn "%s": %szFailed to move contact "%s"zMoved contact "%s" into "%s" )r*r+rrrVrWrXrYrZr[r\r]r,r r^rKr_r`rarr-r.ZDnr<Zremove_base_componentsZadd_baserename)r/rErrrr rr"r0r1rcrNrdr2rerfrgZfull_new_parent_dnZfull_new_contact_dnr3r3r4r5bsh  $z cmd_move.run)NNNNr6r3r3r3r4r~1s(  r~c@sPeZdZdZiZeed<eed<eed<eed<e ed<e ed<dS) cmd_contactzContact management.ZcreaterbZeditlistZmoveZshowN) r7r8r9r:Z subcommandsrrCrprhr~rzr3r3r3r4rs     r)$Z samba.getoptZgetoptr>rWrsru subprocessrroperatorrZ samba.authrZ samba.samdbrZsambarrZ samba.netr Z samba.netcmdr r r r Z samba.compatrrrrCrhrprzr~rr3r3r3r4s(       rWB rp