source4/scripting/python/samba/schema.py

   1 #
   2 # Unix SMB/CIFS implementation.
   3 # backend code for provisioning a Samba4 server
   4 #
   5 # Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007-2008
   6 # Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008-2009
   7 # Copyright (C) Oliver Liebel <oliver@itc.li> 2008-2009
   8 #
   9 # Based on the original in EJS:
  10 # Copyright (C) Andrew Tridgell <tridge@samba.org> 2005
  11 #
  12 # This program is free software; you can redistribute it and/or modify
  13 # it under the terms of the GNU General Public License as published by
  14 # the Free Software Foundation; either version 3 of the License, or
  15 # (at your option) any later version.
  16 #
  17 # This program is distributed in the hope that it will be useful,
  18 # but WITHOUT ANY WARRANTY; without even the implied warranty of
  19 # MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  20 # GNU General Public License for more details.
  21 #
  22 # You should have received a copy of the GNU General Public License
  23 # along with this program.  If not, see <http://www.gnu.org/licenses/>.
  24 #
  25
  26 """Functions for setting up a Samba Schema."""
  27
  28 from base64 import b64encode
  29 from ms_schema import read_ms_schema
  30 from samba.dcerpc import security
  31 from samba import read_and_sub_file, substitute_var, check_all_substituted
  32 from samba import Ldb
  33 from samba.ndr import ndr_pack
  34 from ldb import SCOPE_SUBTREE, SCOPE_ONELEVEL, SCOPE_BASE
  35
  36 def get_schema_descriptor(domain_sid):
  37     sddl = "O:SAG:SAD:(A;CI;RPLCLORC;;;AU)(A;CI;RPWPCRCCLCLORCWOWDSW;;;SA)" \
  38            "(A;CI;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)" \
  39            "(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED)" \
  40            "(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;ED)" \
  41            "(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)" \
  42            "(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;BA)" \
  43            "S:(AU;SA;WPCCDCWOWDSDDTSW;;;WD)" \
  44            "(AU;CISA;WP;;;WD)(AU;SA;CR;;;BA)" \
  45            "(AU;SA;CR;;;DU)(OU;SA;CR;e12b56b6-0a95-11d1-adbb-00c04fd8d5cd;;WD)" \
  46            "(OU;SA;CR;45ec5156-db7e-47bb-b53f-dbeb2d03c40f;;WD)"
  47     sec = security.descriptor.from_sddl(sddl, domain_sid)
  48     return b64encode(ndr_pack(sec))
  49
  50
  51 class Schema(object):
  52     def __init__(self, setup_path, domain_sid, schemadn=None,
  53                  serverdn=None):
  54         """Load schema for the SamDB from the AD schema files and samba4_schema.ldif
  55
  56         :param samdb: Load a schema into a SamDB.
  57         :param setup_path: Setup path function.
  58         :param schemadn: DN of the schema
  59         :param serverdn: DN of the server
  60
  61         Returns the schema data loaded, to avoid double-parsing when then needing to add it to the db
  62         """
  63
  64         self.schemadn = schemadn
  65         self.ldb = Ldb()
  66         self.schema_data = read_ms_schema(setup_path('ad-schema/MS-AD_Schema_2K8_Attributes.txt'),
  67                                           setup_path('ad-schema/MS-AD_Schema_2K8_Classes.txt'))
  68         self.schema_data += open(setup_path("schema_samba4.ldif"), 'r').read()
  69         self.schema_data = substitute_var(self.schema_data, {"SCHEMADN": schemadn})
  70         check_all_substituted(self.schema_data)
  71
  72         self.schema_dn_modify = read_and_sub_file(setup_path("provision_schema_basedn_modify.ldif"),
  73                                                   {"SCHEMADN": schemadn,
  74                                                    "SERVERDN": serverdn,
  75                                                    })
  76
  77         descr = get_schema_descriptor(domain_sid)
  78         self.schema_dn_add = read_and_sub_file(setup_path("provision_schema_basedn.ldif"),
  79                                                {"SCHEMADN": schemadn,
  80                                                 "DESCRIPTOR": descr
  81                                                 })
  82
  83         prefixmap = open(setup_path("prefixMap.txt"), 'r').read()
  84         prefixmap = b64encode(prefixmap)
  85
  86
  87
  88         # We don't actually add this ldif, just parse it
  89         prefixmap_ldif = "dn: cn=schema\nprefixMap:: %s\n\n" % prefixmap
  90         self.ldb.set_schema_from_ldif(prefixmap_ldif, self.schema_data)
  91
  92     def write_to_tmp_ldb(self, schemadb_path):
  93         self.ldb.connect(schemadb_path)
  94         self.ldb.transaction_start()
  95
  96         self.ldb.add_ldif("""dn: @ATTRIBUTES
  97 linkID: INTEGER
  98
  99 dn: @INDEXLIST
 100 @IDXATTR: linkID
 101 @IDXATTR: attributeSyntax
 102 """)
 103         # These bits of LDIF are supplied when the Schema object is created
 104         self.ldb.add_ldif(self.schema_dn_add)
 105         self.ldb.modify_ldif(self.schema_dn_modify)
 106         self.ldb.add_ldif(self.schema_data)
 107         self.ldb.transaction_commit()
 108
 109     # Return a hash with the forward attribute as a key and the back as the value
 110     def linked_attributes(self):
 111         return get_linked_attributes(self.schemadn, self.ldb)
 112
 113     def dnsyntax_attributes(self):
 114         return get_dnsyntax_attributes(self.schemadn, self.ldb)
 115
 116 # Return a hash with the forward attribute as a key and the back as the value
 117 def get_linked_attributes(schemadn,schemaldb):
 118     attrs = ["linkID", "lDAPDisplayName"]
 119     res = schemaldb.search(expression="(&(linkID=*)(!(linkID:1.2.840.113556.1.4.803:=1))(objectclass=attributeSchema)(attributeSyntax=2.5.5.1))", base=schemadn, scope=SCOPE_ONELEVEL, attrs=attrs)
 120     attributes = {}
 121     for i in range (0, len(res)):
 122         expression = "(&(objectclass=attributeSchema)(linkID=%d)(attributeSyntax=2.5.5.1))" % (int(res[i]["linkID"][0])+1)
 123         target = schemaldb.searchone(basedn=schemadn,
 124                                      expression=expression,
 125                                      attribute="lDAPDisplayName",
 126                                      scope=SCOPE_SUBTREE)
 127         if target is not None:
 128             attributes[str(res[i]["lDAPDisplayName"])]=str(target)
 129
 130     return attributes
 131
 132 def get_dnsyntax_attributes(schemadn,schemaldb):
 133     attrs = ["linkID", "lDAPDisplayName"]
 134     res = schemaldb.search(expression="(&(!(linkID=*))(objectclass=attributeSchema)(attributeSyntax=2.5.5.1))", base=schemadn, scope=SCOPE_ONELEVEL, attrs=attrs)
 135     attributes = []
 136     for i in range (0, len(res)):
 137         attributes.append(str(res[i]["lDAPDisplayName"]))
 138
 139     return attributes
 140