gyXSSKJr SSKrSSKrSSKrSSKJrJr SSK J r SSK J r SSK Jr SSKJrJr SSKJr SSKJrJrJrJr SS KJr S S KJr "S S \5r"SS\5r"SS\5r"SS\5r "SS\5r!"SS\5r""SS\5r#"SS\5r$g)N) check_callCalledProcessError) attrgetter)system_session)SamDB) credentialsdsdb)Net)Command CommandError SuperCommandOption) get_bytes)commoncv\rSrSrSrSr\"SSS\SSS 9\"S S \S 9\"S S\S 9\"SS\S 9\"SS\S 9\"SS\S 9\"SS\S 9\"SS\S 9\"SS\S 9\"SS\S 9\"SS\S 9\"SS \S 9\"S!S"\S 9\"S#S$\S 9\"S%S&\S 9/rS'/r \ R\ R\ RS(.rS,S*jrS+rg))-cmd_add+afAdd a new contact. This command adds a new contact to the Active Directory domain. The name of the new contact can be specified by the first argument 'contactname' or the --given-name, --initial and --surname arguments. If no 'contactname' is given, contact's name will be made up of the given arguments by combining the given-name, initials and surname. Each argument is optional. A dot ('.') will be appended to the initials automatically. Example1: samba-tool contact add "James T. Kirk" --job-title=Captain \ -H ldap://samba.samdom.example.com -UAdministrator%Passw1rd The example shows how to add a new contact to the domain against a remote LDAP server. Example2: samba-tool contact add --given-name=James --initials=T --surname=Kirk The example shows how to add a new contact to the domain against a local server. The resulting name is "James T. Kirk". z%prog [contactname] [options]-H--URL%LDB URL for database or target serverURLHhelptypemetavardestz--ouzDN of alternative location (with or without domainDN counterpart) in which the new contact will be created. E.g. 'OU='. Default is the domain base.rr --surnamezContact's surname --given-namezContact's given name --initialszContact's initials--display-namezContact's display namez --job-titlezContact's job titlez --departmentzContact's departmentz --companyzContact's companyz --descriptionzContact's description--mail-addresszContact's email addressz--internet-addresszContact's home pagez--telephone-numberzContact's phone numberz--mobile-numberzContact's mobile phone numberz--physical-delivery-officezContact's office locationzfullcontactname? sambaoptscredopts versionoptsNc"UR5nURU5n[U[5UUS9nUR UUUUU U U U U UUUUUUS9nURRSU-5 g![ an[ SU5eSnAff=f)Nurl session_inforlp)fullcontactnameousurname givennameinitials displaynamejobtitle departmentcompany description mailaddressinternetaddresstelephonenumber mobilenumberphysicaldeliveryofficezFailed to add contactz Contact '%s' added successfully ) get_loadparmget_credentialsrr newcontact Exceptionr outfwrite)selfr.r&r'r(rr/r0 given_namer2 display_name job_titler5r6r7 mail_addressinternet_addresstelephone_number mobile_numberphysical_delivery_officer-credssamdbret_namees 6/usr/lib/python3/dist-packages/samba/netcmd/contact.pyrun cmd_add.runjs* # # %((, ;a'5'7&+!E'' /$!("%'( 0 0*'?(AH& ;hFG ;6: : ;s1A33 B= B  B)NNNNNNNNNNNNNNNNNNN__name__ __module__ __qualname____firstlineno____doc__synopsisrstr takes_options takes_argsoptions SambaOptionsCredentialsOptionsVersionOptionstakes_optiongroupsrQ__static_attributes__rSrPrr+sj0/H tW#JS 2v3   {!43?~$:E|"6SA&>SI}#8sC~$:E{!43?%<3G&?cJ#*?cJ#*BM 3  +/ /M8%%J))..--!!!%)'0Hrdrc \rSrSrSrSr\"SSS\SSS 9/rS /r \ R\ R\ RS .rSS jrSrg ) cmd_deleteaDelete a contact. This command deletes a contact object from the Active Directory domain. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. Example: samba-tool contact delete Contact1 \ -H ldap://samba.samdom.example.com \ --username=Administrator --password=Passw1rd The example shows how to delete a contact in the domain against a remote LDAP server. %prog [options]rrrrrr contactnamer%NcUR5nURUSS9n[U[5UUS9nUR 5n [ R n S[ R"U5-n UR5RS5(a$Sn [ Rn URU5n URU U U S /S 9n U S Rn[#U 5S :aP[%U ['S 5S9H+nUR(R+SUR-5 M- [SU-5eUR-U5 UR(R+SU-5 g![an [SU<SU <35eSn A ff=f![ a [S U-5ef=f![an [SU-U 5eSn A ff=f)NTfallback_machiner*!(&(objectClass=contact)(name=%s))CN=(objectClass=contact) Invalid dn "": dnbasescope expressionattrsrUnable to find contact "%s"rkey found: %s FMultiple results for contact '%s' Please specify the contact's full DNzFailed to remove contact "%s"zDeleted contact %s )r=r>rr domain_dnldb SCOPE_SUBTREE binary_encodeupper startswith SCOPE_BASEnormalize_dn_in_domainr@r searchrr IndexErrorlensortedrrArBdelete)rCrir&r'r(rr-rLrMbase_dnrufilterrOres contact_dnmsgs rPrQcmd_delete.runs  # # %((d(C!#1#3"'//#!!5##K01     ) )% 0 0,FNNE 566{C  N,,G%**0&*V-CQJ s8a<cz$'78   679 F* +, , Q LL $ .<=1 5"$/$455 5 N< LM M N Q>LaP P Qs<%E)7"F9F*) F 3FF F'* G4GGrSNNNNrTrSrdrPrfrfsq /H t;  M J))..-- 0>rdrfc \rSrSrSrSr\"SSS\SSS 9\"S S S \S 9\"SSSSSS9/r\ R\ R\ RS.r SSjrSrg)cmd_listzList all contacts. z%prog [options]rrrrrrz-bz --base-dnzSpecify base DN to use.rz --full-dnfull_dnF store_truez.Display contact's full DN instead of the name.)rdefaultactionrr%Nc UR5nURUSS9n[U[5UUS9n U R 5n U(aU R U5n U R U [RSS/S9n [U 5S:XagU(aC[U [S5S 9H+n URRS U R-5 M- gU H1n U RSSS 9n URRS U -5 M3 g) NTrkr*roname)rurvrwrrrryz%s )idx)r=r>rrr}rrr~rrrrrArBrrget)rCr&r'r(rrrr-rLrM search_dnrr contact_names rPrQ cmd_list.runs # # %((d(C!#1#3"' OO% 44W=Ill9!$!2!2&="(+ HM  cz$'78 09 C776q71L IIOOF\1 2rdrS)NNNNNF)rUrVrWrXrYrZrr[r\r^r_r`rarbrQrcrSrdrPrrs!H t;   t[-  {"D  FM$))..-- "3rdrc \rSrSrSrSr\"SSS\SSS 9\"S S \S 9/rS /r \ R\ R\ RS.rSSjrSrg)cmd_editi6aModify a contact. This command will allow editing of a contact object in the Active Directory domain. You will then be able to add or change attributes and their values. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact edit Contact1 -H ldap://samba.samdom.example.com \ -U Administrator --password=Passw1rd Example1 shows how to edit a contact's attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact edit CN=Contact2,OU=people,DC=samdom,DC=example,DC=com Example2 shows how to edit a contact's attributes in the domain against a local server. The contact, which is located in the 'people' OU, is specified by the full distinguished name. Example3: samba-tool contact edit Contact3 --editor=nano Example3 shows how to edit a contact's attributes in the domain against a local server using the 'nano' editor. rhrrrrrrz--editorzQEditor to use instead of the system default, or 'vi' if no system default is set.rrir%NcvUR5nURUSS9n[U[5XS9n U R 5n [ R n S[ R"U5-n UR5RS5(a$Sn [ Rn U RU5n U RU U U S 9nUS Rn[#U5S :aP[%U['S 5S9H+nUR(R+SUR-5 M- [SU-5eUHn[,R."U U5nUc$[0R2R5S5nUcSn[6R8"SS9nUR+[;U55 UR=5 [?UUR@/5 [EUR@5nURG5nSSS5 SSS5 M U RIW5n[KU5S nU RMWU5n[#U5S :XaUR(R+S5 gU ROU5 UR(R+SU-5 g![an [SU<SU <35eSn A ff=f![ a [S U-5ef=f![Ban [CSU 5eSn A ff=f!,(df  GN=f!,(df  GM=f![an [SU-U 5eSn A ff=f)NTrkr*rmrnrorprq)rtrurvrrxrrrryr{r|EDITORviz.tmp)suffixzERROR: zNothing to do zFailed to modify contact '%s': z#Modified contact '%s' successfully )(r=r>rrr}r~rrrrrrr@r rrrrrrrrArBrget_ldif_for_editorosenvironrtempfileNamedTemporaryFilerflushrrropenread parse_ldifnextmsg_diffmodify)rCrir&r'r(reditorr-rLrMrrurrOrrr result_ldift_file edited_fileedited_message msgs_edited msg_edited res_msg_diffs rPrQ cmd_edit.runqs # # %((d(C!.*:"'0//#!!5$$[12     ) )% 0 0,FNNE 566{C  N,,G%**02CQJ s8a<cz$'78   679 F* +, ,C 44UC@K~1>!F,,F;v Y{34 ; 45&++&+%0%5%5%7N'<;&&&~6 +&q) ~~c:6 |  ! IIOO- .  " LL & >LMi 5"$/$455 5 N< LM M N.*;,Y::;&&<;* "@;N " " "s$J6 J; +L8KL$K55L&L J8 J33J8;K K2! K--K22L5 L ?L L  L8$L33L8rSNNNNNrTrSrdrPrr6s#H/H t;   z;  M J))..-- KNrdrc \rSrSrSrSr\"SSS\SSS 9\"S S \S S 9/rS/r \ R\ R\ RS.rSSjrSrg)cmd_showiaDisplay a contact. This command displays a contact object with it's attributes in the Active Directory domain. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact show Contact1 -H ldap://samba.samdom.example.com \ -U Administrator --password=Passw1rd Example1 shows how to display a contact's attributes in the domain against a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact show CN=Contact2,OU=people,DC=samdom,DC=example,DC=com Example2 shows how to display a contact's attributes in the domain against a local server. The contact, which is located in the 'people' OU, is specified by the full distinguished name. Example3: samba-tool contact show Contact3 --attributes=mail,mobile Example3 shows how to display a contact's mail and mobile attributes. rhrrrrrrz --attributesz:Comma separated list of attributes, which will be printed. contact_attrs)rrrrir%NcUR5nURUSS9n[U[5UUS9n U R 5n [ R n Sn U(aURS5n S[ R"U5-n UR5RS5(a$Sn [ Rn U RU5n U RU U U U S 9nUS R n[%U5S :aP['U[)S5S9H+nUR*R-SUR -5 M- [SU-5eUH5n[.R0"U U5nUR*R-U5 M7 g![an[SU<S U<35eSnAff=f!["a [S U-5ef=f)NTrkr*,rmrnrorprq)rtrvrurwrrxrrrryr{zAMultiple results for contact '%s' Please specify the contact's DN)r=r>rrr}r~rsplitrrrrrr@r rrrrrrrrArBrr)rCrir&r'r(rrr-rLrMrrurwrrOrrr contact_ldifs rPrQ cmd_show.runs # # %((d(C!#1#3"'//#!! !'',E5##K01     ) )% 0 0,FNNE 566{C  N,,G*0%*%*,CQJ s8a<cz$'78   679 A* +, ,C!55eSAL IIOOL )) 5"$/$455 5 N< LM M Ns$?F !F2 F/F**F/2G rSrrTrSrdrPrrs"F/H t;   ~.#  % M J))..-- 4*rdrc \rSrSrSrSr\"SSS\SSS 9/rS S /r \ R\ R\ RS .rSSjrSrg )cmd_movei1aMove a contact object to an organizational unit or container. The contactname specified on the command is the common name or the distinguished name of the contact object. The distinguished name of the contact can be specified with or without the domainDN component. The name of the organizational unit or container can be specified as the distinguished name, with or without the domainDN component. The command may be run from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact move Contact1 'OU=people' \ -H ldap://samba.samdom.example.com -U Administrator Example1 shows how to move a contact Contact1 into the 'people' organizational unit on a remote LDAP server. The -H parameter is used to specify the remote target server. Example2: samba-tool contact move Contact1 OU=Contacts,DC=samdom,DC=example,DC=com Example2 shows how to move a contact Contact1 into the OU=Contacts organizational unit on the local server. z-%prog [options]rrrrrrri new_parent_dnr%NcUR5nURUSS9n[U[5UUS9n U R 5n [ R n S[ R"U5-n UR5RS5(a$Sn [ Rn U RU5n U RU U U S /S 9nUS Rn[#U5S :aP[%U['S 5S9H+nUR(R+SUR-5 M- [SU-5eU RU5n[ R,"U [/U55nUR1[#U5S - 5 UR3U5 U R5UU5 UR(R+SU<SU<S35 g![an [SU<SU <35eSn A ff=f![ a [S U-5ef=f![an [SU<SU <35eSn A ff=f![an [SU-U 5eSn A ff=f)NTrkr*rmrnrorprqrrrsrrxrryr{r|zInvalid new_parent_dn "zFailed to move contact "%s"zMoved contact "z" into "z" )r=r>rrr}r~rrrrrrr@r rrrrrrrrArBDnr[remove_base_componentsadd_baserename)rCrirr&r'r(rr-rLrMrrurrOrrrfull_new_parent_dnfull_new_contact_dns rPrQ cmd_move.runbs[ # # %((d(C!#1#3"'//#!!5##K01     ) )% 0 0,FNNE 566{C  N,,G%**0&*V-CQJ s8a<cz$'78   679 F* +, , 3!&!=!=m!L  "ffUC O<223z?Q3FG$$%78 O LL%8 9 $&8: ;E 5"$/$455 5 N< LM M N 3 -q 23 3 3 O<{JAN N OsT%G7"G59HH6 G2G--G25H H3H..H36 IIIrSrrTrSrdrPrr1sr<?H t;  M 1J))..-- <;rdrc \rSrSrSrSr\"SSS\SSS 9\"S S \S 9\"S S\S 9\"SS\S 9\"SS\SS9\"SSSS9\"SS\S 9\"SS\S 9/rS/r \ R\ R\ RS.rS"S jrS!rg)# cmd_renameia5Rename a contact and related attributes. This command allows to set the contact's name related attributes. The contact's new CN will be made up by combining the given-name, initials and surname. A dot ('.') will be appended to the initials automatically, if required. Use the --force-new-cn option to specify the new CN manually and the --reset-cn option to reset this changes. Use an empty attribute value to remove the specified attribute. The contactname specified on the command is the CN. The command may be run locally from the root userid or another authorized userid. The -H or --URL= option can be used to execute the command against a remote server. Example1: samba-tool contact rename "John Doe" --surname=Bloggs \ --force-new-cn=John Example1 shows how to change the surname ('sn' attribute) of a contact 'John Doe' to 'Bloggs' and change the CN to 'John' on the local server. Example2: samba-tool contact rename "J Doe" --given-name=John -H ldap://samba.samdom.example.com -U administrator Example2 shows how to rename the given name of a contact 'J Doe' to 'John'. The contact's cn will be renamed automatically, based on the given name, initials and surname, if the previous CN is the standard combination of the previous name attributes. The -H parameter is used to specify the remote target server. rhrrrrrrr z New surnamerr!zNew given namer"z New initialsz--force-new-cnz^Specify a new CN (RDN) instead of using a combination of the given name, initials and surname.NEW_CN)rrrz --reset-cnzSet the CN (RDN) to the combination of the given name, initials and surname. Use this option to reset the changes made with the --force-new-cn option.r)rrr#zNew display namer$zNew email addressrir%Nc U (aU (a [S5eU S:Xa [S5eUR5n URU SS9n[U[ 5XS9n[ R "XR55nS[ R"U5-nURU[ RU/SQS 9nUS nURnUR5nUS S nU bU nOURUUUUS 9nURUS9n[U5[U5:g=(a2 [U5[U5:H=(d U =(d [!U 5n[ R "USU-5nUR#U5 US:XaU(a[SU-5e[ R$"5nUUl UR'UUSU5 UR'UUSU5 UR'UUSU5 UR'UUSU 5 UR'UUSU 5 [)U5S :nUR+5 US:XaUR-U5 U(aUR/UU5 UR55 U(a(UR6R9SU<SU<SU<S35 U(apUR6R9SU-5 UR;5H=nUS:XaM UR6R9U<SUU(aUUOS<S35 M? gg![a [S U-5ef=f![0a$nUR35 [SU-U5eSnAff=f) NzEIt is not allowed to specify --force-new-cn together with --reset-cn.z:Failed to rename contact - delete protected attribute 'CN'Trkr*rm)rsn givenNamecnr2 displayNamemailrsrrxr) old_attrsrDr2r0)rzCN=%szFailed to rename contact '%s' - can not set an empty CN (please use --force-new-cn to specify a different CN or --given-name, --initials or --surname to set name attributes)rrr2rrzFailed to rename contact "%s"zRenamed CN of contact "z" from "z" to "z" successfully zEFollowing attributes of contact "%s" have been changed successfully: rrz: z [removed] )r r=r>rrr~rr}rrrrrrparentfullname_from_namesr[boolrMessageprepare_attr_replacertransaction_startrrr@transaction_canceltransaction_commitrArBkeys)rCrir'r&r(rr0rDr2 force_new_cnrErGreset_cnr-rLrMr}rr old_contactrcontact_parent_dnold_cnnew_cn excepted_cnmust_change_cnnew_contact_dnrcontact_attributes_changedrOattrs rPrQcmd_rename.runs H ;< < 2  01 1 # # %((d(C!.*:"'0FF5//"34 5##K01 M,,I%(%6%6*0&. Ca&K$J'--/T"1%  #!F..:D8@7>/@F//+/F VF 3:f+[)999"9&*<&8 w'78 12 RLaP P Qs$3L*0M*M M4M//M4rS) NNNNNNNNNNNrTrSrdrPrrs#J/H tW8e# / {!  ~$  |"  ? + |G#  $ &  ' 3 M< J))..--KOOS;?bFrdrc\rSrSrSr0r\"5\S'\"5\S'\"5\S'\"5\S'\ "5\S'\ "5\S'\ "5\S '\ "5\S 'S r g ) cmd_contactiRzContact management.addcreatereditlistmoveshowrrSN)rUrVrWrXrY subcommandsrrfrrrrrrcrSrdrPrrRsjK K#IK&LK"*K"*K"*K"*K&LKrdr)% samba.getoptgetoptr^r~rr subprocessrroperatorr samba.authr samba.samdbrsambarr samba.netr samba.netcmdr r r r samba.commonrrrrrfrrrrrrrSrdrPrs& 5% #oHgoHdT>T>n?3w?3DFNwFNRo*wo*dm;wm;^pFpFd ), )rd