| 1 | #!/usr/bin/env python
|
|---|
| 2 | #
|
|---|
| 3 | # Works out the full schema
|
|---|
| 4 | #
|
|---|
| 5 |
|
|---|
| 6 | import base64
|
|---|
| 7 | import optparse
|
|---|
| 8 | import sys
|
|---|
| 9 |
|
|---|
| 10 | # Find right directory when running from source tree
|
|---|
| 11 | sys.path.insert(0, "bin/python")
|
|---|
| 12 |
|
|---|
| 13 | import samba
|
|---|
| 14 | from samba import getopt as options, Ldb
|
|---|
| 15 | from ldb import SCOPE_SUBTREE, SCOPE_BASE
|
|---|
| 16 | import sys
|
|---|
| 17 |
|
|---|
| 18 | parser = optparse.OptionParser("fullschema <URL>")
|
|---|
| 19 | sambaopts = options.SambaOptions(parser)
|
|---|
| 20 | parser.add_option_group(sambaopts)
|
|---|
| 21 | credopts = options.CredentialsOptions(parser)
|
|---|
| 22 | parser.add_option_group(credopts)
|
|---|
| 23 | parser.add_option_group(options.VersionOptions(parser))
|
|---|
| 24 | parser.add_option("--dump-classes", action="store_true")
|
|---|
| 25 | parser.add_option("--dump-attributes", action="store_true")
|
|---|
| 26 |
|
|---|
| 27 | opts, args = parser.parse_args()
|
|---|
| 28 | opts.dump_all = True
|
|---|
| 29 |
|
|---|
| 30 | if opts.dump_classes:
|
|---|
| 31 | opts.dump_all = False
|
|---|
| 32 | if opts.dump_attributes:
|
|---|
| 33 | opts.dump_all = False
|
|---|
| 34 | if opts.dump_all:
|
|---|
| 35 | opts.dump_classes = True
|
|---|
| 36 | opts.dump_attributes = True
|
|---|
| 37 |
|
|---|
| 38 | if len(args) != 1:
|
|---|
| 39 | parser.print_usage()
|
|---|
| 40 | sys.exit(1)
|
|---|
| 41 |
|
|---|
| 42 | url = args[0]
|
|---|
| 43 |
|
|---|
| 44 | lp_ctx = sambaopts.get_loadparm()
|
|---|
| 45 |
|
|---|
| 46 | creds = credopts.get_credentials(lp_ctx)
|
|---|
| 47 | ldb = Ldb(url, credentials=creds, lp=lp_ctx, options=["modules:paged_searches"])
|
|---|
| 48 |
|
|---|
| 49 | # the attributes we need for objectclasses
|
|---|
| 50 | class_attrs = ["objectClass",
|
|---|
| 51 | "cn",
|
|---|
| 52 | "subClassOf",
|
|---|
| 53 | "governsID",
|
|---|
| 54 | "possSuperiors",
|
|---|
| 55 | "possibleInferiors",
|
|---|
| 56 | "mayContain",
|
|---|
| 57 | "mustContain",
|
|---|
| 58 | "auxiliaryClass",
|
|---|
| 59 | "rDNAttID",
|
|---|
| 60 | "adminDisplayName",
|
|---|
| 61 | "adminDescription",
|
|---|
| 62 | "objectClassCategory",
|
|---|
| 63 | "lDAPDisplayName",
|
|---|
| 64 | "schemaIDGUID",
|
|---|
| 65 | "systemOnly",
|
|---|
| 66 | "systemPossSuperiors",
|
|---|
| 67 | "systemMayContain",
|
|---|
| 68 | "systemMustContain",
|
|---|
| 69 | "systemAuxiliaryClass",
|
|---|
| 70 | "defaultSecurityDescriptor",
|
|---|
| 71 | "systemFlags",
|
|---|
| 72 | "defaultHidingValue",
|
|---|
| 73 | "defaultObjectCategory",
|
|---|
| 74 |
|
|---|
| 75 | # this attributes are not used by w2k3
|
|---|
| 76 | "schemaFlagsEx",
|
|---|
| 77 | "msDs-IntId",
|
|---|
| 78 | "msDs-Schema-Extensions",
|
|---|
| 79 | "classDisplayName",
|
|---|
| 80 | "isDefunct"]
|
|---|
| 81 |
|
|---|
| 82 | attrib_attrs = ["objectClass",
|
|---|
| 83 | "cn",
|
|---|
| 84 | "attributeID",
|
|---|
| 85 | "attributeSyntax",
|
|---|
| 86 | "isSingleValued",
|
|---|
| 87 | "rangeLower",
|
|---|
| 88 | "rangeUpper",
|
|---|
| 89 | "mAPIID",
|
|---|
| 90 | "linkID",
|
|---|
| 91 | "adminDisplayName",
|
|---|
| 92 | "oMObjectClass",
|
|---|
| 93 | "adminDescription",
|
|---|
| 94 | "oMSyntax",
|
|---|
| 95 | "searchFlags",
|
|---|
| 96 | "extendedCharsAllowed",
|
|---|
| 97 | "lDAPDisplayName",
|
|---|
| 98 | "schemaIDGUID",
|
|---|
| 99 | "attributeSecurityGUID",
|
|---|
| 100 | "systemOnly",
|
|---|
| 101 | "systemFlags",
|
|---|
| 102 | "isMemberOfPartialAttributeSet",
|
|---|
| 103 |
|
|---|
| 104 | # this attributes are not used by w2k3
|
|---|
| 105 | "schemaFlagsEx",
|
|---|
| 106 | "msDs-IntId",
|
|---|
| 107 | "msDs-Schema-Extensions",
|
|---|
| 108 | "classDisplayName",
|
|---|
| 109 | "isEphemeral",
|
|---|
| 110 | "isDefunct"]
|
|---|
| 111 |
|
|---|
| 112 | class Objectclass(dict):
|
|---|
| 113 |
|
|---|
| 114 | def __init__(self, ldb, name):
|
|---|
| 115 | """create an objectclass object"""
|
|---|
| 116 | self.name = name
|
|---|
| 117 |
|
|---|
| 118 |
|
|---|
| 119 | class Attribute(dict):
|
|---|
| 120 |
|
|---|
| 121 | def __init__(self, ldb, name):
|
|---|
| 122 | """create an attribute object"""
|
|---|
| 123 | self.name = name
|
|---|
| 124 | self["cn"] = get_object_cn(ldb, name)
|
|---|
| 125 |
|
|---|
| 126 |
|
|---|
| 127 |
|
|---|
| 128 | def fix_dn(dn):
|
|---|
| 129 | """fix a string DN to use ${SCHEMADN}"""
|
|---|
| 130 | return dn.replace(rootDse["schemaNamingContext"][0], "${SCHEMADN}")
|
|---|
| 131 |
|
|---|
| 132 |
|
|---|
| 133 | def write_ldif_one(o, attrs):
|
|---|
| 134 | """dump an object as ldif"""
|
|---|
| 135 | print "dn: CN=%s,${SCHEMADN}" % o["cn"]
|
|---|
| 136 | for a in attrs:
|
|---|
| 137 | if not o.has_key(a):
|
|---|
| 138 | continue
|
|---|
| 139 | # special case for oMObjectClass, which is a binary object
|
|---|
| 140 | v = o[a]
|
|---|
| 141 | list = []
|
|---|
| 142 | for j in v:
|
|---|
| 143 | value = fix_dn(j)
|
|---|
| 144 | list.append(value)
|
|---|
| 145 | list.sort()
|
|---|
| 146 | for j in list:
|
|---|
| 147 | value = fix_dn(j)
|
|---|
| 148 | if a != "cn":
|
|---|
| 149 | if a == "oMObjectClass":
|
|---|
| 150 | print "%s:: %s" % (a, base64.b64encode(value))
|
|---|
| 151 | elif a.endswith("GUID"):
|
|---|
| 152 | print "%s: %s" % (a, ldb.schema_format_value(a, value))
|
|---|
| 153 | else:
|
|---|
| 154 | print "%s: %s" % (a, value)
|
|---|
| 155 | print ""
|
|---|
| 156 |
|
|---|
| 157 |
|
|---|
| 158 | # get the rootDSE
|
|---|
| 159 | res = ldb.search(base="", expression="", scope=SCOPE_BASE, attrs=["schemaNamingContext"])
|
|---|
| 160 | rootDse = res[0]
|
|---|
| 161 |
|
|---|
| 162 | if opts.dump_attributes:
|
|---|
| 163 | res = ldb.search(expression="objectClass=attributeSchema",
|
|---|
| 164 | base=rootDse["schemaNamingContext"][0], scope=SCOPE_SUBTREE,attrs=attrib_attrs,
|
|---|
| 165 | controls=["server_sort:1:0:cn"])
|
|---|
| 166 |
|
|---|
| 167 | for msg in res:
|
|---|
| 168 | o = Objectclass(ldb, msg["ldapDisplayName"])
|
|---|
| 169 | for a in msg:
|
|---|
| 170 | o[a] = msg[a]
|
|---|
| 171 | write_ldif_one(o, attrib_attrs)
|
|---|
| 172 |
|
|---|
| 173 | if opts.dump_classes:
|
|---|
| 174 | res = ldb.search(expression="objectClass=classSchema",
|
|---|
| 175 | base=rootDse["schemaNamingContext"][0], scope=SCOPE_SUBTREE,attrs=class_attrs,
|
|---|
| 176 | controls=["server_sort:1:0:cn"])
|
|---|
| 177 |
|
|---|
| 178 | for msg in res:
|
|---|
| 179 | o = Objectclass(ldb, msg["ldapDisplayName"])
|
|---|
| 180 | for a in msg:
|
|---|
| 181 | o[a] = msg[a]
|
|---|
| 182 | write_ldif_one(o, class_attrs)
|
|---|
| 183 |
|
|---|