+ 4Ssi8^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIt^RIH t ^RI H t H t ^RIt^RIHt^RIHt^RIHt^RIHtHtHt^RIHt^RIHtHtHt^R IH t ^R I!H"t"H#t#^R I$H%t%H&t&H't'^R IH(t(^R I)H*t*^RI+H,t,H-t-^RI.H/t/^RI0H1t1^RI+H2t2^RI3H4t4^RI5t5^RI+H6t6H7t7H8t8^RI9H:t:H;t;Ht>^RI?H@t@^RIAtA^RIBHCtC^RIHDtD^RIEHFtF^RIGHHtH^RIIHJtJ^RIHKtL^RIMtMRtNRtORtPR tQR!tRR"tSR1R#ltTR$tUR%tVR&tW!R'R(]PP4tZ!R)R*]*4t[!R+R,]PP4t\!R-R.]PP4t]!R/R0]PP4t_R#)2N)SamDBget_default_backend_store)LdbError)libsmb_samba_internal)param) backup_onlinebackup_restorebackup_offline)system_session) DCJoinContext join_cloneDCCloneAndRenameContext)dom_sid)Option CommandError)miscsecuritydrsblobs)Ldb)cmd_fsmo_seize) make_smbconf DEFAULTSITE)update_krbtgt_account_password) remove_dc)secretsdb_self_join)dbcheck) guess_namesdetermine_host_ipdetermine_host_ip6)fill_dns_data_partitionsget_dnsadmins_sidget_domainguid)tdb_copy)mdb_copy)CalledProcessError)sites)_dsdb_load_udv_v2)ndr_pack)SMB_SIGNING_REQUIRED) safe_tarfilecVP4p\ TP 44p\ T4R,\ T4,pTP\PRT,.RR.R7p\T4^8wd\R T,4h\R T: R T^,P: R 24h \d4pTPR4TPR4\RT4hRp?ii;i \Pd/pTPwrT\P8wdhRp?MRp?ii;i\ T4R,\ T4,#) z}A SID could not be allocated for restoring the domain. Either no RID Set was found on this DC, or the RID Set was not usable.zTo initialise this DC's RID pools, obtain a RID Set from this domain's RID master, or run samba-tool dbcheck to fix the existing RID Set.zCannot create backupN-show_deleted:1zshow_recycled:1)scopebaseattrscontrolsz]Cannot create backup - this DC's RID pool is corrupt, the next SID (%s) appears to be in use.zCCannot create backup - this DC's RID pool is corrupt, the next SID z points to existing object z1. Please run samba-tool dbcheck on the source DC.) next_free_ridrinforrget_domain_sidstrsearchldb SCOPE_BASElendnargsERR_NO_SUCH_OBJECT) samdbloggerriderrsidsid_for_restorereseenumemsgs && <<vv  3)) )  * s8c>CH $$s0CA3D C? .C::C?E$EEc\P!4pVPVP4VP 4pVP \ 4\P!VRW2R7pVP V4V#)z7Returns an SMB connection to the sysvol share on the DCsysvol)lpcreds) s3param get_contextload configfileget_smb_signingset_smb_signingr)libsmbConn)serverrLrMs3_lpsaved_signing_stateconns&&& rHsmb_sysvol_connrZqsh    !E JJr}} //1 ./ ;;vxE ?D -. Kcz\PP4P4PRR4#):r,)datetimenow isoformatreplacer[rH get_timestamprcs-    " , , . 6 6sC @@r[cVRV: RV: R2p\PPW4#)z samba-backup-r,z.tar.bz2)ospathjoin) targetdirnametime_strfilenames&&& rHbackup_filepathrls/3X>H 77<< ,,r[ca\P!R4p\VR4;_uu_4o\V3RlR4FpVP V4K RRR4VP 4# +'giTP 4#;i)sha256rbc&<SPR4#)i)read)fsrH"create_sha256sum..s !&&-r[r[N)hashlibnewopeniterupdate hexdigest)rkhashchunkrrs& @rHcreate_sha256sumr}sj ;;x D h  /5E KK 6  >>    >> s )A-- B cVPRV,4\P!VR4pVPVRR7VP 4R#)zCreating backup file %s...w:bz2z./arcnameN)r4tarfilerwaddclose)r?tmpdirrltfs&&& rHcreate_backup_tarrs= KK,>? ow /BFF64F HHJr[c\\PPVR4R4p\PP 4P R4pVPRV,4VPRVPR4,4VPRV: RV: R24VPR VPR 4: R VPR 4P4: R 24VPR\V4,4V'dVPRV,4VP4R# TP4i;i) backup.txtwz%Y-%b-%d %H:%M:%SzBackup created %s zUsing samba-tool version: %s z server stringzDomain z backup, using DC 'z' zBackup for domain workgroup (NetBIOS), realmz (DNS realm) z#Backup contains domain secrets: %s z%s N) rwrerfrgr^r_strftimewritegetlowerr6r)rhrL backup_typerVinclude_secrets extra_inforrrjs&&&&&& rHcreate_log_filers RWW\\)\ 2C8A $$((*334GH %01 0266/3JJK {FKL  $bffWo&;&;&=? @ 6_9MMN  GGFZ' (   s D E Ec\P!4p\P!VR4Vn\P!V\P V4W1&VP V4R#) @SAMBA_DSDBN)r8MessageDnr;MessageElement FLAG_MOD_ADDmodify)r>markervaluems&&& rHadd_backup_markerrsF A 66% 'AD""5#*:*:FCAI LLOr[c<Vf \R4h\PPV4'g1VP RV,4\P !V4R#\PP V4'g\RV,4hR#)NzTarget directory requiredzCreating targetdir %s...z%s is not a directory)rrerfexistsr4makedirsisdir)r?rhs&&rHcheck_targetdirrsn677 77>>) $ $ .:; I WW]]9 % %2Y>??&r[cVP4pRV: R\P: R2pRV: R2pVPVP 4\ P VR7p\V^,R,4p\P!^ ^ 4pVPRV: RV: 24VPR V,4VPWGR VR 7R #) zASets a randomly generated password for the backup DB's admin userz (objectsid=r,)z(&(objectClass=user))r0r/ expressionsamaccountnamezSetting z password in backup to: z7Run 'samba-tool user setpassword %s' after restoring DBF)force_change_at_next_loginusernameN) r5rDOMAIN_RID_ADMINISTRATORr7 domain_dnr8 SCOPE_SUBTREEr6sambagenerate_random_passwordr4 setpassword)r?r> domainsid match_admin search_exprrDr adminpasss&& rHset_admin_passwordrs$$&I)2)1)J)JLK/: --targetdir= sambaoptscredopts--serverThe DC to backuphelptype --targetdirz%Directory to write the backup file to)rr --no-secrets store_trueF-Exclude secret values from the backup createdactiondefaultr--backend-storechoice BACKENDSTOREtdbmdb7Specify the database backend to be used (default is %s)rmetavarchoicesrz --no-sysvolz&Exclude sysvol from the backup createdNc \VP4pVP\P4VP 4p VP V 4p Vf \ R4h\W4\P!VR7p V'*p \WV WRV VR7p V Pp? \RV,V \4V R7p\W4pVP4pV'gyVP!R4\"P$P'V R4p\)W9V 4p\+VVVP-44\.P0!VP24\VP4\4V \6P8R 7p\;4p\=VR V4\=VR V4\=VR R 4V'd \?VV4\AVVV4p\CWR W<4\EWV4\.P0!V 4R# \.P0!T 4i;i)NServer requireddirSAMBA_INTERNAL)r?rMrLrrV dns_backendrh backend_storeldap://url credentials session_inforLz$Backing up sysvol files (via SMB)... sysvol.tar.gzrrrLflags backupDate sidForRestore backupTypeonline)# get_loggersetLevelloggingDEBUG get_loadparmget_credentialsrrtempfilemkdtempr pathsrr rIdomain_dns_namer4rerfrgrZrr5shutilrmtreerKr>r8FLG_DONT_CREATE_DBrcrrrlrr)selfrrrVrh no_secretsr no_sysvolr?rLrMrrctxr remote_samnew_sidr sysvol_tarsmb_connr>rj backup_files&&&&&&&& rHruncmd_domain_backup_online.runs" &  # # %((, >01 1*!!i0)., "FB-<)9V+8:C IIE9v#55,:,<EJ)*=G..0E BCWW\\&/B *6u=h J4M4M4OP ell+ekk8HR # 6 68E$H e\8 < e_g > e\8 <"651*)UHEK F& J fk : MM& !FMM& !s E1HH+rb)NNNNFNF)__name__ __module__ __qualname____firstlineno____doc__synopsisoptions SambaOptionsCredentialsOptionstakes_optiongroupsrr6r takes_optionsr__static_attributes____classdictcell__ __classdict__s@rHrrs HHW))G.. z 2=}3; =~lEC E xu~!#<#>? @ }\5; = M>">"r[rc a]tRtRtoRtRt]!RR]R7]!RR]R7]!R R ]R7]!R R R RR7]!RR RRR7]!RR]R7.tR] PR] P/t Rt RtRtRtRtRtR RltRtVtR#)!cmd_domain_backup_restorei?ahRestore the domain's DB from a backup-file. This restores a previously backed up copy of the domain's DB on a new DC. Note that the restored DB will not contain the original DC that the backup was taken from (or any other DCs in the original domain). Only the new DC (specified by --newservername) will be present in the restored DB. Samba can then be started against the restored DB. Any existing DCs for the domain should be shutdown before the new DC is started. Other DCs can then be joined to the new DC to recover the network. Note that this command should be run as the root user - it will fail otherwise.zQ%prog --backup-file= --targetdir= --newservername=z --backup-filezPath to backup filerrzPath to write toz--newservernamezName for new serverz --host-ipstring IPADDRESSzset IPv4 ipaddress)rrrz --host-ip6 IP6ADDRESSzset IPv6 ipaddressz--sitezSite to add the new server inrrc \V4pVPp VP4P4p VPP 4p T p VP P 4p \VP44p\W)4p\W)4p\WV4p\WV4pVfVf \R4hVPRV ,4VPR4\W.WyWWWVVVVRR7R#)zQ Registers the new realm's DNS objects when a renamed domain backup is restored. Nz+Please specify a host-ip for the new serverzDNS realm was renamed to %sz*Populating DNS partitions for new realm...F)add_root)rdomaindnget_root_basednget_linearized dnsdomainr netbiosnamerr5r!r"rrrr4r )rr?r>rLntdsguidhost_iphost_ip6sitenamesrforestdnr dnsforesthostnamer dnsadmins_sid domainguids&&&&&&&& rHregister_dns_zone+cmd_domain_backup_restore.register_dns_zoneas B>>((*99;OO))+  $$**,E0023 )%: #E4 $F8%f(; ?x/LM M 1I=> @A !4!)i!(J!. @r[c VP4\VRRRRR7p\VRR4RR.p\VRR4VR ., pR pR V.pVPWSR 7VP 4R #)z3Fixes attributes that reference the old/removed DCsTFquietfixyesin_transaction(fix_all_old_dn_string_component_mismatchALLlastKnownParentinterSiteTopologyGenerator!remove_plausible_deleted_DN_linkszmsDS-NC-Replica-Locationssearch_options:1:2r.)r2r1Ntransaction_startrsetattrcheck_databasetransaction_commit)rr>chkr1cross_ncs_ctrlr2s&& rHfix_old_dc_references/cmd_domain_backup_restore.fix_old_dc_referencess !e4Tu%)+ ?G"$@A 8%@ -..-$n5 H:   "r[c >\pRPV4pVPVP4\P VR7p\ V4^8XdFVPRPV44\P!WP4V4V#)z5Creates the default site, if it doesn't already existz(&(cn={0})(objectclass=site))r/rzCreating default site '{0}') rformatr7get_config_basednr8rr:r4r& create_site)rr>r?sitenamerrDs&&& rHcreate_default_site-cmd_domain_backup_restore.create_default_sites5< Ir[c .ROpVP\P!VR4\PVR7p\P!4p\P!VR4VnVF:pWS^,9gK\P !.\PV4WE&K< VPV4R#)z-Remove DB markers added by the backup processrr0r/r1N)r backupRenamerr) r7r8rr9rr;rFLAG_MOD_DELETEr)rr>markersrDrattrs&& rHremove_backup_markers/cmd_domain_backup_restore.remove_backup_markerssPllum rDrs&& rHget_backup_type)cmd_domain_backup_restore.get_backup_typesllum partitionsncutdv utdv_blob new_valuers&&& rHsave_uptodate_vectors/cmd_domain_backup_restore.save_uptodate_vectorssB$U/D!779I !I $(MM !"%d)IMM  +I A66%$AD&)&8&89<9M9M9M'OA" # LLO!r[Nc V'd&\PPV4'g \R4hVf \R4h\PPV4'dL\P!V4'd0\P P R4R8wd \R4hV'g \R4h\P!4p V P\P4V P\P!\P44VP4p\PP!V4p\"P$!V4p V P'V4V P)4\P*!VRR7\PP-VR R 4p \.P0!WR ,4VP34p V 'd/V P5R V ,4\.P0!W4\6P8P;4p V P=V 4\PP-VR 4p\PP-VR4p\?V\A4V \BPDR7pVPGV4pVf3VPIVV 4pV P5RPKV44VPMR\BPNR.R7pV^,P R4Uu.uFp\QV4NK ppVR8XdVPSVV4VPUV 4p\WV VWVVR7pVVn,VVn-\6P\P^\6P\P`,Vn1V P5R4\eWVPfVPhWMRR7VPM\BPj!VR4\BPNR.R7pV^,P R4^,pV P5R\QV4,4VPm\o\QV44R7\BP!4p \BPj!TR+4T n@\QTP4p!\BP!R,T!,\BPR-4T R-&TPT 4TR.8Xd!TPT TT TPYgT4\PP-TR/4p"\T"\A4T \BPDR07p#\T#TPfTPhTPTPTPTPTP\PR17 TP4p$\6P!TP44p%R2T$3R3T%3.p&T&F&wp'p(T(T9gKTPT'TRRRR4R57K( RBFp'TPT'TR4R57K R6p)TPMTP4\BPT)R77pTF:p \QT P R84^,4p*T*T8wgK-\TT T*4K< TFp+\BP!4p,\BPj!TT+4T,n@\BP!.\BPR94T,R9&\BP!.\BPR:4T,R:&TPT,4K \T4\T4\PP-TR;4p-T P R4T P5R?4TPT4TPT4T P5R@T,4T P5RA4R#uupi \pEdrpTPrwppT\BPt8wdh.pTPM\BPj!TRT,4\BPNR.RR .R!7pM= \pd0pTPrwppT\BPv8wdhRp?MRp?ii;i\yT4^8wdhTP{RT^,R,^,4pTP}R"4pT PR#T,4T PR$4T PR%4T PR&T,4\R'T^,P: R(T: R)T: R*24hRp?ii;i)CzBackup file not found.Nz!Please specify a target directorySAMBA_SELFTEST1zTarget directory is not emptyzServer name requiredi)modeetczsmb.confz.origz&Using %s as restored domain's smb.confprivatesam.ldbrzAdding new DC to site '{0}'namingContextsr@offline)rMrLrforced_local_samdb netbios_namez#Updating basic smb.conf settings...z"active directory domain controller)rL serverrolerrzCreating account with SID: ) specified_sidr- objectGUIDzshow_deleted:0zshow_recycled:0)r0r/r1r2zutf-8z|The RID Pool on the source DC for the backup in %s may be corrupt or in conflict with SIDs already allocated in the domain. zaRunning 'samba-tool dbcheck' on the source DC (and obtaining a new backup) may correct the issue.z@Alternatively please obtain a new backup against a different DC.zVThe SID we wish to use (%s) is recorded in @SAMBA_DSDB as the sidForRestore attribute.zCDomain restore failed because there is already an existing object (z ) with SID z and objectGUID zT. This conflicts with the new DC account we want to add for the restored domain. z@ROOTDSEz dsServiceNamerHz secrets.ldb)rrLr)domainrrrr machinepasskey_version_numbersecure_channel_type domaindns forestdnsT)forcez*(&(objectClass=Server)(serverReference=*))r8cnrepsFromrepsTorrfrKzback-up has no sysvol dataz4Fixing up any remaining references to the old DCs...z'Backup file successfully restored to %szEPlease check the smb.conf settings are correct before starting samba.)r@pdcnaminginfrastructureschema)`rerfrrlistdirenvironrr getLoggerrr addHandler StreamHandlersysstdoutupperabspathrrw extractallrchmodrgrcopyfileget_loadparm_pathr4rrLoadParmrPrr r8rrIr=r9r7r9r6rXrr nc_list full_nc_listdsdbUF_SERVER_TRUST_ACCOUNTUF_TRUSTED_FOR_DELEGATIONuserAccountControlr domain_namerrjoin_add_objectsrrr<ERR_CONSTRAINT_VIOLATIONr=r:schema_format_valuedecodeerrorr;r ntds_guidrrRrr rrrmynamedomsid acct_passrlr SEC_CHAN_BDCrdn_from_dns_nameforest_dns_nameseize_dns_role seize_roler:rrrrisfiler removewarningr5rE)/rrrrrh newservernamerrrr?rsmbconf cli_smbconfrL private_dir samdb_pathr>rrDrncsrMrrBrErFrGdup_resdup_edup_enum_ objectguidrr secrets_path secrets_ldbr forest_dn dns_rolesroler;rrqrTmsgrdest_sysvol_dirs/&&&&&&&&& rHrcmd_domain_backup_restore.runsY{ ; ;78 8  BC C GGNN9 % %"**Y*?*? JJNN+ , 3>? ?56 6""$ &'// ;<&++- GGOOI. \\+ & i    ''',,y%<7!23 113  KK@;N O OOK 1 [[ ! ! # ggll9i8 WW\\+y9 *>3C224**51 <++E6:D KK5<>* % % :w G IIj ! NN7 8  JK ""5) ""5) = IJ & 'O=J) A66LT4s333G ,,CFF5*s:J,K-0^^.:^1A1B1D'E   % 1s5556  G !22<7>qz,7OPQ7RTJ#**73J LL+.99 : LLR S LL3 4 LLG  !( sJ  @A AG) AsJ c%$c** i'6'i"Ae! i"! f,%fi"fCi""i'rb)NNNNNNNN)rrrrrrrr6rrrrrr r5r=rErIrXrrrrs@rHr r ?s ,H %:E}#5C@ '<3G{;( *|(L( *x=CH M W))G.. @B#2 &"(d'd'r[r c a]tRtRtoRtRtR]PR]P/t ] !RR] R7] !R R ] R7] !R R R RR7] !RR R RR7] !RRRRR.R] !4,R7.t RR.tRtRtRtRtR"R ltR!tVtR#)#cmd_domain_backup_renameianCopy a running DC's DB to backup file, renaming the domain in the process. Where is the new domain's NetBIOS name, and is the new domain's realm in DNS form. This is similar to 'samba-tool backup online' in that it clones the DB of a running DC. However, this option also renames all the domain entries in the DB. Renaming the domain makes it possible to restore and start a new Samba DC without it interfering with the existing Samba domain. In other words, you could use this option to clone your production samba domain and restore it to a separate pre-production environment that won't overlap or interfere with the existing production Samba domain. Note that: - it's recommended to run 'samba-tool dbcheck' before taking a backup-file and fix any errors it reports. - all the domain's secrets are included in the backup file. - although the DB contents can be untarred and examined manually, you need to run 'samba-tool domain backup restore' before you can start a Samba DC from the backup file. - GPO and sysvol information will still refer to the old realm and will need to be updated manually. - if you specify 'keep-dns-realm', then the DNS records will need updating in order to work (they will still refer to the old DC's IP instead of the new DC's address). - we recommend that you only use this option if you know what you're doing. zR%prog --server= --targetdir=rrrrrrz"Directory to write the backup filez--keep-dns-realmrFz6Retain the DNS entries for the old realm in the backuprrrrrrrrrrnew_domain_name new_dns_realmc VP4pVPV\PR.RR7pVP 4pVEFpVR,EF p \ V 4p VP p W99gK#\P!RV,VV 4p VPRV : RV : 24\P!4p Wn\P!V \PR4V R&VPV 4V'gKVPRV : RV : 24\P!V \PR4V R&VPV 4EK EK" R #) z?Updates dnsRoot for the partition objects to reflect the renamednsRootz$(&(objectClass=crossRef)(dnsRoot=*))r0r/r1rz%s$zAdding z dnsRoot to z Removing z dnsRoot from N)get_partitions_dnr7r8SCOPE_ONELEVELrr6r;resubr4rrrrrB) rr?r> old_realmdelete_old_dns partitions_dnrD new_realmres_msgdns_rootr; new_dns_rootrs &&&&& rHupdate_dns_root(cmd_domain_backup_rename.update_dns_roots8//1 ll S5G5G"+&LN))+ G#I..x=ZZ(#%66%)*;Y*2$4LKK\2 NO AD##5l696F6F6?$AAiLLLO&~ XEG%IJ'*'9'9(:=:M:M:C(E)  Q-/r[c VP4p\P!\V44pVP 4pVP V\P R.RV,R7pVPRV,4\P!4pV^,PVn \P!V\PR4VR&VPV4RV: RV: 2p VPRV^,P: RV : 24VPV^,PV R .R 7R #) z?Renames the domain partition object and updates its nETBIOSName nETBIOSNamez ncName=%srz+Changing backup domain's NetBIOS name to %szCN=,z Renaming z --> zrelax:0r2N)get_default_basednr8 binary_encoder6rr7rr4rr;rrRrrH) rr?r>new_netbios_namebase_dnnc_namerrDrnew_dns &&&& rHrename_domain_partition0cmd_domain_backup_rename.rename_domain_partition#s **,##CL1//1 ll S5G5G"/&1G&;=  A$% & KKM1vyy--.>.1.B.B.;=-  Q 0? CFIIv>? SVYY) =r[c6VP4pRV: RV: 2pVPRV,4VPVR.4VP4P 4pRV: RV: 2pVPRV,4VPVR.4R#)zDC=z#,CN=MicrosoftDNS,DC=DomainDnsZones,zDeleting old DNS zone %sz tree_delete:1z DC=_msdcs.z#,CN=MicrosoftDNS,DC=ForestDnsZones,N)rr4deleterr)rr?r>rbasednr;rs&&&& rHdelete_old_dns_zones-cmd_domain_backup_rename.delete_old_dns_zones=s))+=F O .34 R/*+((*99;DMDLN .34 R/*+r[c VP4\VRRRRR7p\VRR4RpRV.pVPVR7VP 4R #) z@Fixes attributes (i.e. objectCategory) that still use the old DNTFr#r(r)r-r.rNr.)rr>r3r4r2s&& rHfix_old_dn_attributes.cmd_domain_backup_rename.fix_old_dn_attributesJs` !e4Tu%)+ ?G-$n5 H-   "r[Nc VP4p V P\P4VP 4p VP V 4p Vf \ R4h\W4V'*p VP4pVP4p\P!V4pV PRV,4V PRV,4V PRV,4\P!VR7pV'*p\WW*WVRW_V R7 pVP pVV8Xd"\"P$!V4\ R4hVP&pVV8Xd"\"P$!V4\ R 4hVP)4V=VP,p\/R V,V \14V R 7p\3VV 4p\4P6P9VR 4p\;W[V 4p\=VVVP?44V PAVPB4\/VPD\14V \FPHR 7p\K4p\MVRV4\MVRV4\MVRV4\MVRR4VPOV VVV 4VPQV VV4V 'dVPSV VV4V PR4VPUV4V'd \WV V4\YWbV4p\[WRVVRV: RV: R24\]WV4\"P$!V4R#)Nrz"New realm for backed up domain: %sz$New base DN for backed up domain: %szNew domain NetBIOS name: %srr)r?rMrLrrrVrhrz+Cannot use the current domain NetBIOS name.z(Cannot use the current domain DNS realm.rrrrrrrArrHz$Fixing DN attributes after rename...zOriginal domain rz (DNS realm))/rrrINFOrrrrrrrrr4rrrrrrrdo_join local_samdbrrr rIrerfrgrZrr5rPrr>r8rrcrrrrrrrlrr)rrrrrrVrhkeep_dns_realmrrr?rLrMr new_base_dnrrr old_domainrrrrrrr>rjrs&&&&&&&&&& rHrcmd_domain_backup_rename.runXs" %  # # %((, >01 1*++%++- )//1,,];  8=HI :[HI 1OCD!!i0).%k&3,16E2B-34A C__  ( MM& !LM MII  % MM& !IJ J  O y61u(6(8RA %j&9 WW\\&/: "6u5h J,E,E,GH  %++N4D224!?%x8%':%;%x8 VUI~F $$VUOD   % %feY ? :; ""5)  vu -&iI Hfo#Y0 1 &+6 fr[rb)NNNNFFN)rrrrrrrrrrrr6rr takes_argsrrrrrrrrs@rHrrs8+H W))G.. z 2=}#G !,L N~lEC E xu~!#<#>? @ M$_5J#(N>4 , #ggr[rca]tRtRtoRtRtR]P/t] !RR] R7.t Rt R t R tR tR tR tRRltRtVtR#)cmd_domain_backup_offlineiayBackup the local domain directories safely into a tar file. Takes a backup copy of the current domain from the local files on disk, with proper locking of the DB to ensure consistency. If the domain were to undergo a catastrophic failure, then the backup file can be used to recover the domain. An offline backup differs to an online backup in the following ways: - a backup can be created even if the DC isn't currently running. - includes non-replicated attributes that an online backup wouldn't store. - takes a copy of the raw database files, which has the risk that any hidden problems in the DB are preserved in the backup.z%prog [options]rrzOutput directory (required)rz .bak-offlinecWP,p\WRR7\PPT4'gRp\TPT44hR# \dop\P!T4Th \ dCp\ TR4'd*TP\P8Xd Rp?Rp?R#ThRp?ii;iRp?i\dp\TPT4hRp?ii;i)T)readonlyerrnoNz1tdbbackup said backup succeeded but {0} not found) backup_extr#r%rrw ExceptionhasattrrEINVALFileNotFoundErrorrstrerrorrerfrr9)rrf backup_pathcopy_errrEss&& rHoffline_tdb_copy*cmd_domain_backup_offline.offline_tdb_copys__,  . T 6"ww~~k**CAqxx 45 5+!"   N  1g&&177ell+BF  ! .qzz1- - .sS A$$ D0BC C1CCCCC D%D&C<<Dc>\WVP,4R#N)r$r)rrfs&&rHoffline_mdb_copy*cmd_domain_backup_offline.offline_mdb_copysdoo-.r[c\\PPVR4p\VR,V\P R7pVP RV,4VP4VPVR,4VPVR,4VP4R#)secrets.ldbrLrStarting transaction on .tdbN) rerfrgrr8rr4r/rtransaction_cancel)rrrLr?r secrets_objs&&&& rHbackup_secrets(cmd_domain_backup_offline.backup_secretssww||K; ,/B # 6 68  .=>%%' lV34 lV34&&(r[ct\PPVR4pRpVPR\P V.R7pWg^,9;'d$\ V^,V,^,4R8HpRp Rp V'd/VPR4VPp VP4p M4VPRV,4VPp VP4VPRV,4VPV4VR ,p \P!V 4Fp \PPW4p V PR 4'd#VPR V ,4V !V 4K[V PR 4'd,VPR V ,4VPV 4KVPRV ,4\P!WVP ,4K \#W$4p V'd? V #VP%4V #)r` backendStorez @PARTITIONr@rNz1MDB backend detected. Using mdb backup function.rz backing up z.drz" backing up locked/related file rz$ tdbbackup of locked/related file z copying locked/related file )rerfrgr7r8r9r6r4rsearch_iteratorrr/rxendswithrrrrIr)rrr>rLr? sam_ldb_path store_labelrD mdb_backend res_iterator copy_function sam_ldb_dsam_filerBs&&&&& rHbackup_smb_dbs(cmd_domain_backup_offline.backup_smb_dbs sww||K; % ll CNN"-0!V+TTCF;4G4J0Ku0T    KKK L 11M!002L KK2\A B 11M  # # % $|34 l+ 4'  9-Hww||I8H  (( @8KLh'""6** BXMN%%h/ =HIT__*DE."%0    $ $ & r[cRVPRVPR\PP VP 4/pVP 4UUu.uF!wrEVPV4'gKWE3NK# pppV^,wrx\V4^8d\VRR7wrxWq\V4R, pV#uuppi)r_stater^c&\V^,4#))r:)ps&rHrs8cmd_domain_backup_offline.get_arc_path..Ps QqTr[)keyN) r state_dirrerfdirnameritems startswithr:max) rrf conf_paths backup_dirsrr matching_dirsarc_pathfs_paths &&& rH get_arc_path&cmd_domain_backup_offline.get_arc_pathEs *"8"8 4 4bggooj.@.@AC /:.?.?.A-.AFQ+ !.A -)!, }  ! #M7J K HW''-s C7CNc \P!4pVP\P4VP \P !\ P44VP4p\PPWDPR44pVP'd0\PP!VP4'g6VP#RP%VP44\'R-4h\)W24VP*VP,\PP/VP04.pVP3RP%RP5V444.p\74pVEFp \P8!V 4EFuwrp V P;VP<4'dK*V P?R4'gRV 9dKJV P;\PP5VP@R44'dKV Fp \PP5W4p\PB!VRR7pTPHTPJ3T9dKZT P?TPL4'd\PN!T4KT P?R4'dKTPQT4TPSTPHTPJ34K EKx EK \UVP\W4V\XPZR 7pVP]VP*WC4VP_VP*VWC4pVPa4p\bPd!V4pVPg4?\iVPVPL,\W4VR .\XPZR 7p\k4p\mVR V4\mVRV4\mVRR4VPg4?VEF p\PP!VVPL,4'dK<VP?R4'dyVP3RV,4\iVV\XPZR7pVPo4VP3R4VPqV4VPs4KVP?R4'gKVP3RV,4VPqV4EK \tPv!VRR7p\PP5VR4p\xPz!VR4pVP3R4Rp\PP5VV4p\}VP<VVP0V4VPSVV4\PN!V4\VVRRR4\PP5VR4pVPSV\PPV44\PN!V4VP3R 4.pVEFpVPVV4p\PP!VVPL,4'dVP3R!V,VPL,R",4VPQ\VVPL,4: R#V: 24VPSVVPL,VR$7\PN!VVPL,4KVP?R4'gVP?R4'dVP3R%V,4EKD\PPV4'gEKlVP3R&V,4VPQ\V4: R#V: 24VPSVVR$7EK \PP5VR'4p\{VR(4;_uu_4p VFp!V PV!R),4K R*R*R*4VPSV\PPV44\PN!V4VP4\P!V\PP5VR+P%V444\P!V4VP3R,4R*# \DdTPGT R 24EK~i;i +'giL;i).rzNo database found at {0}zrunning backup on dirs: {0} z.sockz.sock/dnsF)follow_symlinksz does not exist!rzmodules:)rrrLrrrrrrcrz!Starting transaction on solo db: rz% running tdbbackup on the same filerz#running tdbbackup on lone tdb file INCOMPLETEsambabackupfile)rprefixzsamba-backup.tar.bz2rz&running offline ntacl backup of sysvolr localhostTrzbuilding backup tarz adding backup z to tar and deleting filez rz skipping z adding misc file SHA256SUMr Nzsamba-backup-{0}.tar.bz2zBackup succeeded.zCPlease check you are root, and are running this command on an AD DC)Hrrzrrr{r|r}r~rr provisionprovision_paths_from_lprr>rerfrrr9rrrrrrr4rgsetwalkrrKr binddns_dirstatrrst_inost_devrrappendrrr r8rrr r5rr disconnectrrcrr/rrrrrrwr rbasenamerr}rrrrHrmdir)"rrrhr?rLrr all_files all_stats backup_dir working_dirr filenamesrk full_pathrr>rB dom_sid_strrrjrfldb_obj temp_tar_dir temp_tar_nametar sysvol_tar_fnr backup_fn chksum_listrchksum_filepathrrcs"&&& rHrcmd_domain_backup_offline.runUs ""$ &'// ;< # # %77FF7OL u{{ ; ; LL3::5;;G H FG G * ((%//wwu}}57  188+9NOP E %J/1wwz/B+))%,,77''00H 4K))"'',,u7H7H%*PQQ )H " [ CI !GGIuE !((+y8  ((99 ),  ((11 $$Y/MM188QXX"675!*0C&T%++N4D224 E--r:!!%"3"3UBG**, "";/   doo5#1#3)l#2H2HJ!?%x8%#6%y9  D77>>$"899==((KK Cd JK!$2S5K5KLG--/KK GH))$/..0]]6**KK E LM))$/ ''I/JL  \3IJ ll='2 <=' WW\\, > u||ZH  M* * b)[$GGGLL|<   277++I67 ) )* D((u5Hww~~dT__455 /(:T__L789"" 01G H (*+t.A $01v&&$--*?*? NX56%% 2X=>""$4T$:$,$./h/%('',,|[A /3 ' '1 D!!( !1!1/!BC /"  -'',,y9@@JL M  '(A-!)4D'EF !j( 's.f&:"g &g g g rb)NN)rrrrrrrrrrr6rrrrrr rrrrrs@rHrrsk @!HW)) }1 M  J62/ )8v o)o)r[rc V]tRtRtRtR]!4R]!4R]!4R]!4/t Rt R#) cmd_domain_backupiz)Create or restore a backup of the domain.rcrrHrestorerbN) rrrrrrrrr  subcommandsrrbr[rHrHrHs0379575779;Kr[rHr)`r^rer}rrrrr samba.getoptgetoptr samba.samdbrrr8r samba.samba3rrTrrN samba.ntaclsrr r samba.authr samba.joinr r rsamba.dcerpc.securityr samba.netcmdrr samba.dcerpcrrrrsamba.netcmd.fsmorsamba.provisionrrsamba.upgradehelpersrsamba.remove_dcrrsamba.dbcheckerrrrrrsamba.provision.sambadnsr r!r"samba.tdb_utilr#samba.mdb_utilr$r subprocessr%r& samba.dsdbr' samba.ndrr(samba.credentialsr)r*rrurIrZrcrlr}rrrrrnetcmdCommandrr rr SuperCommandrHrbr[rHrds9$   8 8)FF%II)-11,5?%/# NN66$# )(2) -%` A- ,@),c"u||33c"LF'F'R wu||33wtB) 4 4B)J ; 11;r[