Option("-H", "--URL", help="LDB URL for database or target server", type=str,
metavar="URL", dest="H"),
Option("--remove-other-dead-server", help="Dead DC to remove ALL references to (rather than this DC)", type=str),
+ Option("--quiet", help="Be quiet", action="store_true"),
+ Option("--verbose", help="Be verbose", action="store_true"),
]
takes_optiongroups = {
def run(self, sambaopts=None, credopts=None,
versionopts=None, server=None,
- remove_other_dead_server=None, H=None):
+ remove_other_dead_server=None, H=None,
+ verbose=False, quiet=False):
lp = sambaopts.get_loadparm()
creds = credopts.get_credentials(lp)
net = Net(creds, lp, server=credopts.ipaddress)
+ logger = self.get_logger()
+ if verbose:
+ logger.setLevel(logging.DEBUG)
+ elif quiet:
+ logger.setLevel(logging.WARNING)
+ else:
+ logger.setLevel(logging.INFO)
+
if remove_other_dead_server is not None:
if server is not None:
samdb = SamDB(url="ldap://%s" % server,
else:
samdb = SamDB(url=H, session_info=system_session(), credentials=creds, lp=lp)
try:
- remove_dc.remove_dc(samdb, remove_other_dead_server)
+ remove_dc.remove_dc(samdb, logger, remove_other_dead_server)
except remove_dc.DemoteException as err:
raise CommandError("Demote failed: %s" % err)
return
return "DemoteException: " + self.value
-def remove_sysvol_references(samdb, dc_name):
+def remove_sysvol_references(samdb, logger, dc_name):
# DNs under the Configuration DN:
realm = samdb.domain_dns_name()
for s in ("CN=Enterprise,CN=Microsoft System Volumes,CN=System",
% (dn))
dn.set_component(0, "CN", dc_name)
try:
+ logger.info("Removing Sysvol reference: %s" % dn)
samdb.delete(dn)
except ldb.LdbError as (enum, estr):
if enum == ldb.ERR_NO_SUCH_OBJECT:
raise DemoteException("Failed constructing DN %s by adding child %s"\
% (dn, rdn))
dn.set_component(0, "CN", dc_name)
+
try:
+ logger.info("Removing Sysvol reference: %s" % dn)
samdb.delete(dn)
except ldb.LdbError as (enum, estr):
if enum == ldb.ERR_NO_SUCH_OBJECT:
raise
-def remove_dns_references(samdb, dnsHostName):
+def remove_dns_references(samdb, logger, dnsHostName):
# Check we are using in-database DNS
zones = samdb.search(base="", scope=ldb.SCOPE_SUBTREE,
a_recs = [ r for r in a_recs if not a_rec_to_remove(r) ]
if len(a_recs) != orig_num_recs:
- print "updating %s keeping %d values, removing %s values" % \
- (a_name, len(a_recs), orig_num_recs - len(a_recs))
+ logger.info("updating %s keeping %d values, removing %s values" % \
+ (a_name, len(a_recs), orig_num_recs - len(a_recs)))
samdb.dns_replace(a_name, a_recs)
# Find all the CNAME, NS, PTR and SRV records that point at the
return False
for zone in zones:
- print "checking %s" % zone.dn
+ logger.debug("checking %s" % zone.dn)
records = samdb.search(base=zone.dn, scope=ldb.SCOPE_SUBTREE,
expression="(&(objectClass=dnsNode)"
"(!(dNSTombstoned=TRUE)))",
for v in values if not to_remove(v) ]
if len(values) != orig_num_values:
- print "updating %s keeping %d values, removing %s values" \
- % (record.dn, len(values), orig_num_values - len(values))
+ logger.info("updating %s keeping %d values, removing %s values" \
+ % (record.dn, len(values),
+ orig_num_values - len(values)))
# This requires the values to be unpacked, so this
# has been done in the list comprehension above
samdb.dns_replace_by_dn(record.dn, values)
-def offline_remove_server(samdb, server_dn,
+def offline_remove_server(samdb, logger,
+ server_dn,
remove_computer_obj=False,
remove_server_obj=False,
remove_sysvol_obj=False,
"cn"],
scope=ldb.SCOPE_BASE)
if "rIDSetReferences" in computer_msgs[0]:
- samdb.delete(computer_msgs[0]["rIDSetReferences"][0])
+ rid_set_dn = str(computer_msgs[0]["rIDSetReferences"][0])
+ logger.info("Removing RID Set: %s" % rid_set_dn)
+ samdb.delete(rid_set_dn)
if "msDS-KrbTgtLink" in computer_msgs[0]:
- samdb.delete(computer_msgs[0]["msDS-KrbTgtLink"][0])
+ krbtgt_link_dn = str(computer_msgs[0]["msDS-KrbTgtLink"][0])
+ logger.info("Removing RODC KDC account: %s" % krbtgt_link_dn)
+ samdb.delete(krbtgt_link_dn)
if remove_computer_obj:
# Delete the computer tree
+ logger.info("Removing computer account: %s (and any child objects)" % computer_dn)
samdb.delete(computer_dn, ["tree_delete:0"])
if "dnsHostName" in msgs[0]:
attrs=[], scope=ldb.SCOPE_SUBTREE,
base=samdb.get_default_basedn())
if len(res) == 1:
+ logger.info("Removing Samba-specific DNS service account: %s" % res[0].dn)
samdb.delete(res[0].dn)
if dnsHostName is not None and remove_dns_names:
- remove_dns_references(samdb, dnsHostName)
+ remove_dns_references(samdb, logger, dnsHostName)
if remove_sysvol_obj:
- remove_sysvol_references(samdb, dc_name)
+ remove_sysvol_references(samdb, logger, dc_name)
-def offline_remove_ntds_dc(samdb, ntds_dn,
+def offline_remove_ntds_dc(samdb,
+ logger,
+ ntds_dn,
remove_computer_obj=False,
remove_server_obj=False,
remove_connection_obj=False,
expression="(&(objectclass=nTDSConnection)"
"(fromServer=<GUID=%s>))" % ntds_guid)
for conn in stale_connections:
+ logger.info("Removing nTDSConnection: %s" % conn.dn)
samdb.delete(conn.dn)
if seize_stale_fsmo:
m.dn = role.dn
m['value'] = ldb.MessageElement(val, ldb.FLAG_MOD_REPLACE,
'fsmoRoleOwner')
+ logger.warning("Seizing FSMO role on: %s (now owned by %s)"
+ % (role.dn, my_serviceName))
samdb.modify(m)
# Remove the NTDS setting tree
try:
+ logger.info("Removing nTDSDSA: %s (and any children)" % ntds_dn)
samdb.delete(ntds_dn, ["tree_delete:0"])
except LdbError as (enum, estr):
raise DemoteException("Failed to remove the DCs NTDS DSA object: %s"
% estr)
- offline_remove_server(samdb, server_dn,
+ offline_remove_server(samdb, logger, server_dn,
remove_computer_obj=remove_computer_obj,
remove_server_obj=remove_server_obj,
remove_sysvol_obj=remove_sysvol_obj,
remove_dns_account=remove_dns_account)
-def remove_dc(samdb, dc_name):
+def remove_dc(samdb, logger, dc_name):
# TODO: Check if this is the last server (covered mostly by
# refusing to remove our own name)
expression="(objectClass=ntdsdsa)")
except LdbError as (enum, estr):
if enum == ldb.ERR_NO_SUCH_OBJECT:
- offline_remove_server(samdb, msgs[0].dn,
+ offline_remove_server(samdb, logger,
+ msgs[0].dn,
remove_computer_obj=True,
remove_server_obj=True,
remove_sysvol_obj=True,
else:
pass
- offline_remove_ntds_dc(samdb, msgs[0].dn,
+ offline_remove_ntds_dc(samdb, logger,
+ msgs[0].dn,
remove_computer_obj=True,
remove_server_obj=True,
remove_connection_obj=True,
samdb.start_transaction()
- offline_remove_ntds_dc(samdb, ntds_dn)
+ offline_remove_ntds_dc(samdb, ntds_dn, None)
samdb.commit_transaction()