← Back to branch summary

~lefteris-nikoltsios/+junk/samba-lp1016895

« back to all changes in this revision

Viewing changes to source4/scripting/python/samba/netcmd/fsmo.py

  • Committer: Package Import Robot
  • Author(s): Chuck Short
  • Date: 2011-12-21 13:18:04 UTC
  • mfrom: (0.39.21 sid)
  • Revision ID: package-import@ubuntu.com-20111221131804-xtlr39wx6njehxxr
Tags: 2:3.6.1-3ubuntu1
* Merge from Debian testing.  Remaining changes:
  + debian/patches/VERSION.patch:
    - set SAMBA_VERSION_SUFFIX to Ubuntu.
  + debian/patches/error-trans.fix-276472:
    - Add the translation of Unix Error code -ENOTSUP to NT Error Code
    - NT_STATUS_NOT_SUPPORTED to prevent the Permission denied error.
  + debian/smb.conf:
    - add "(Samba, Ubuntu)" to server string.
    - comment out the default [homes] share, and add a comment about
      "valid users = %S" to show users how to restrict access to
      \\server\username to only username.
    - Set 'usershare allow guests', so that usershare admins are 
      allowed to create public shares in addition to authenticated
      ones.
    - add map to guest = Bad user, maps bad username to guest access.
  + debian/samba-common.config:
    - Do not change priority to high if dhclient3 is installed.
    - Use priority medium instead of high for the workgroup question.
  + debian/control:
    - Don't build against or suggest ctdb.
    - Add dependency on samba-common-bin to samba.
  + Add ufw integration:
    - Created debian/samba.ufw.profile
    - debian/rules, debian/samba.dirs, debian/samba.files: install
      profile
    - debian/control: have samba suggest ufw
  + Add apport hook:
    - Created debian/source_samba.py.
    - debian/rules, debian/samba.dirs, debian/samba-common-bin.files: install
  + Switch to upstart:
    - Add debian/samba.{nmbd,smbd}.upstart.
  + debian/samba.logrotate, debian/samba-common.dhcp, debian/samba.if-up:
    - Make them upstart compatible
  + debian/samba.postinst: 
    - Avoid scary pdbedit warnings on first import.
  + debian/samba-common.postinst: Add more informative error message for
    the case where smb.conf was manually deleted
  + debian/patches/fix-debuglevel-name-conflict.patch: don't use 'debug_level'
    as a global variable name in an NSS module 
  + Dropped:
    - debian/patches/error-trans.fix-276472
    - debian/patches/fix-debuglevel-name-conflict.patch

Show diffs side-by-side

added added

removed removed

Lines of Context:
source4/scripting/python/samba/netcmd/fsmo.py
 
1
#!/usr/bin/env python
 
2
#
 
3
# Changes a FSMO role owner
 
4
#
 
5
# Copyright Nadezhda Ivanova 2009
 
6
# Copyright Jelmer Vernooij 2009
 
7
#
 
8
# This program is free software; you can redistribute it and/or modify
 
9
# it under the terms of the GNU General Public License as published by
 
10
# the Free Software Foundation; either version 3 of the License, or
 
11
# (at your option) any later version.
 
12
#
 
13
# This program is distributed in the hope that it will be useful,
 
14
# but WITHOUT ANY WARRANTY; without even the implied warranty of
 
15
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 
16
# GNU General Public License for more details.
 
17
#
 
18
# You should have received a copy of the GNU General Public License
 
19
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
20
#
 
21
 
 
22
import samba.getopt as options
 
23
import ldb
 
24
from ldb import LdbError
 
25
 
 
26
from samba.auth import system_session
 
27
from samba.netcmd import (
 
28
    Command,
 
29
    CommandError,
 
30
    Option,
 
31
    )
 
32
from samba.samdb import SamDB
 
33
 
 
34
class cmd_fsmo(Command):
 
35
    """Makes the targer DC transfer or seize a fsmo role [server connection needed]"""
 
36
 
 
37
    synopsis = "(show | transfer <options> | seize <options>)"
 
38
 
 
39
    takes_optiongroups = {
 
40
        "sambaopts": options.SambaOptions,
 
41
        "credopts": options.CredentialsOptions,
 
42
        "versionopts": options.VersionOptions,
 
43
        }
 
44
 
 
45
    takes_options = [
 
46
        Option("--host", help="LDB URL for database or target server", type=str),
 
47
        Option("--force", help="Force seizing of the role without attempting to transfer first.", action="store_true"),
 
48
        Option("--role", type="choice", choices=["rid", "pdc", "infrastructure","schema","naming","all"],
 
49
               help="""The FSMO role to seize or transfer.\n
 
50
rid=RidAllocationMasterRole\n
 
51
schema=SchemaMasterRole\n
 
52
pdc=PdcEmulationMasterRole\n
 
53
naming=DomainNamingMasterRole\n
 
54
infrastructure=InfrastructureMasterRole\n
 
55
all=all of the above"""),
 
56
        ]
 
57
 
 
58
    takes_args = ["subcommand"]
 
59
 
 
60
    def transfer_role(self, role, samdb):
 
61
        m = ldb.Message()
 
62
        m.dn = ldb.Dn(samdb, "")
 
63
        if role == "rid":
 
64
            m["becomeRidMaster"]= ldb.MessageElement(
 
65
                "1", ldb.FLAG_MOD_REPLACE,
 
66
                "becomeRidMaster")
 
67
        elif role == "pdc":
 
68
            domain_dn = samdb.domain_dn()
 
69
            res = samdb.search(domain_dn,
 
70
                               scope=ldb.SCOPE_BASE, attrs=["objectSid"])
 
71
            assert len(res) == 1
 
72
            sid = res[0]["objectSid"][0]
 
73
            m["becomePdc"]= ldb.MessageElement(
 
74
                sid, ldb.FLAG_MOD_REPLACE,
 
75
                "becomePdc")
 
76
        elif role == "naming":
 
77
            m["becomeDomainMaster"]= ldb.MessageElement(
 
78
                "1", ldb.FLAG_MOD_REPLACE,
 
79
                "becomeDomainMaster")
 
80
            samdb.modify(m)
 
81
        elif role == "infrastructure":
 
82
            m["becomeInfrastructureMaster"]= ldb.MessageElement(
 
83
                "1", ldb.FLAG_MOD_REPLACE,
 
84
                "becomeInfrastructureMaster")
 
85
        elif role == "schema":
 
86
            m["becomeSchemaMaster"]= ldb.MessageElement(
 
87
                "1", ldb.FLAG_MOD_REPLACE,
 
88
                "becomeSchemaMaster")
 
89
        else:
 
90
            raise CommandError("Invalid FSMO role.")
 
91
        samdb.modify(m)
 
92
 
 
93
    def seize_role(self, role, samdb, force):
 
94
        res = samdb.search("",
 
95
                           scope=ldb.SCOPE_BASE, attrs=["dsServiceName"])
 
96
        assert len(res) == 1
 
97
        serviceName = res[0]["dsServiceName"][0]
 
98
        domain_dn = samdb.domain_dn()
 
99
        m = ldb.Message()
 
100
        if role == "rid":
 
101
            m.dn = ldb.Dn(samdb, self.rid_dn)
 
102
        elif role == "pdc":
 
103
            m.dn = ldb.Dn(samdb, domain_dn)
 
104
        elif role == "naming":
 
105
            m.dn = ldb.Dn(samdb, self.naming_dn)
 
106
        elif role == "infrastructure":
 
107
            m.dn = ldb.Dn(samdb, self.infrastructure_dn)
 
108
        elif role == "schema":
 
109
            m.dn = ldb.Dn(samdb, self.schema_dn)
 
110
        else:
 
111
            raise CommandError("Invalid FSMO role.")
 
112
        #first try to transfer to avoid problem if the owner is still active
 
113
        if force is None:
 
114
            self.message("Attempting transfer...")
 
115
            try:
 
116
                self.transfer_role(role, samdb)
 
117
            except LdbError, (num, _):
 
118
            #transfer failed, use the big axe...
 
119
                self.message("Transfer unsuccessfull, seizing...")
 
120
                m["fSMORoleOwner"]= ldb.MessageElement(
 
121
                    serviceName, ldb.FLAG_MOD_REPLACE,
 
122
                    "fSMORoleOwner")
 
123
                samdb.modify(m)
 
124
            else:
 
125
                self.message("Transfer succeeded.")
 
126
        else:
 
127
            self.message("Will not attempt transfer, seizing...")
 
128
            m["fSMORoleOwner"]= ldb.MessageElement(
 
129
                serviceName, ldb.FLAG_MOD_REPLACE,
 
130
                "fSMORoleOwner")
 
131
            samdb.modify(m)
 
132
 
 
133
    def run(self, subcommand, force=None, host=None, role=None,
 
134
            credopts=None, sambaopts=None, versionopts=None):
 
135
        lp = sambaopts.get_loadparm()
 
136
        creds = credopts.get_credentials(lp, fallback_machine=True)
 
137
 
 
138
        samdb = SamDB(url=host, session_info=system_session(),
 
139
            credentials=creds, lp=lp)
 
140
 
 
141
        domain_dn = samdb.domain_dn()
 
142
        self.infrastructure_dn = "CN=Infrastructure," + domain_dn
 
143
        self.naming_dn = "CN=Partitions,CN=Configuration," + domain_dn
 
144
        self.schema_dn = "CN=Schema,CN=Configuration," + domain_dn
 
145
        self.rid_dn = "CN=RID Manager$,CN=System," + domain_dn
 
146
 
 
147
        res = samdb.search(self.infrastructure_dn,
 
148
                           scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
 
149
        assert len(res) == 1
 
150
        self.infrastructureMaster = res[0]["fSMORoleOwner"][0]
 
151
 
 
152
        res = samdb.search(domain_dn,
 
153
                           scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
 
154
        assert len(res) == 1
 
155
        self.pdcEmulator = res[0]["fSMORoleOwner"][0]
 
156
 
 
157
        res = samdb.search(self.naming_dn,
 
158
                           scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
 
159
        assert len(res) == 1
 
160
        self.namingMaster = res[0]["fSMORoleOwner"][0]
 
161
 
 
162
        res = samdb.search(self.schema_dn,
 
163
                           scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
 
164
        assert len(res) == 1
 
165
        self.schemaMaster = res[0]["fSMORoleOwner"][0]
 
166
 
 
167
        res = samdb.search(self.rid_dn,
 
168
                           scope=ldb.SCOPE_BASE, attrs=["fSMORoleOwner"])
 
169
        assert len(res) == 1
 
170
        self.ridMaster = res[0]["fSMORoleOwner"][0]
 
171
 
 
172
        if subcommand == "show":
 
173
            self.message("InfrastructureMasterRole owner: " + self.infrastructureMaster)
 
174
            self.message("RidAllocationMasterRole owner: " + self.ridMaster)
 
175
            self.message("PdcEmulationMasterRole owner: " + self.pdcEmulator)
 
176
            self.message("DomainNamingMasterRole owner: " + self.namingMaster)
 
177
            self.message("SchemaMasterRole owner: " + self.schemaMaster)
 
178
        elif subcommand == "transfer":
 
179
            if role == "all":
 
180
                self.transfer_role("rid", samdb)
 
181
                self.transfer_role("pdc", samdb)
 
182
                self.transfer_role("naming", samdb)
 
183
                self.transfer_role("infrastructure", samdb)
 
184
                self.transfer_role("schema", samdb)
 
185
            else:
 
186
                self.transfer_role(role, samdb)
 
187
        elif subcommand == "seize":
 
188
            if role == "all":
 
189
                self.seize_role("rid", samdb, force)
 
190
                self.seize_role("pdc", samdb, force)
 
191
                self.seize_role("naming", samdb, force)
 
192
                self.seize_role("infrastructure", samdb, force)
 
193
                self.seize_role("schema", samdb, force)
 
194
            else:
 
195
                self.seize_role(role, samdb, force)
 
196
        else:
 
197
            raise CommandError("Wrong argument '%s'!" % subcommand)