+ 4Ssi!;^RIt^RIHt^RIHtHtHt^RIH t ^RI H t H t ^RI Ht^RIHtHtHtHtHtHt^RIHt^RIHtHtHt^R IHt!R R ]4tR#) N)dsdb remove_dcwerror)system_session)drsuapimisc)drsuapi_connect)#DS_NTDSDSA_OPT_DISABLE_INBOUND_REPL$DS_NTDSDSA_OPT_DISABLE_OUTBOUND_REPLUF_PARTIAL_SECRETS_ACCOUNTUF_SERVER_TRUST_ACCOUNTUF_TRUSTED_FOR_DELEGATIONUF_WORKSTATION_TRUST_ACCOUNT)Net)Command CommandErrorOption)SamDBc a]tRt^,toRtRt]!RR]R7]!RRR]R R R 7]!R R ]R7]!RRRRR7]!RRRRR7.tR] PR] PR] P/t RRltRtVtR#)cmd_domain_demotez4Demote ourselves from the role of Domain Controller.z%prog [options]z--serverz(writable DC to write demotion changes on)helptypez-Hz--URLz%LDB URL for database or target serverURLH)rrmetavardestz--remove-other-dead-serverzMDead DC (name or NTDS GUID) to remove ALL references to (rather than this DC)z-qz--quietzBe quiet store_true)ractionz-vz --verbosez Be verbose sambaoptscredopts versionoptsNc VP4p VPV 4p VPWxR7p VeSVe\RV,\ 4WR7p M\V\ 4WR7p \ P !WV4R#V PR4p\V\ 4WR7p V'gV PRRR.R 7p\V4^8Xd \R 4h\V4^8Xd \R 4hRpVFAp\VR,4P4VP48wgK8VR,pM V P4pV P\V P44\P R V,R .R7p\V4^8XgR V^,9d\RV,4hV^,P"p\%\V^,R ,44pV PR\V4,R.R7p\V4^8wd\R\V4,4hVP&P)RV,4\+WIV 4wpppVP&P)R4\P,!4pV^,P"VnV\.,'EgEV P14'Eg.V\2,p\P4!\V4\P6R 4VR &V P9V4VP&P)RV,4V P;4V P4V P=43Fp\>P@!4p\V4Vn\>PB!4pVVn"\>PFVn$\JPL!V4Vn'VPQV^V4K \RV,\ 4WR7pVP&P)R4VP\VP[44RVP]4,R.R7pV^,P"p \%\V^,R,44p!\T4^8wdT\.,'gT P14'glTP&P)R4T\2,p\P4!\T4\P6R 4TR &T P9T4\RTP]4,4hT!\`\b,\d,(,p!T!\f,p!\P,!4pT Tn\P4!R T!,\P6R4TR&TP9T4T^,P"Pi4p"R!T",p#^p$\T#4p%TPkTPm4\nPp4p&TPT&T#\PrR"7p\T4^8wEdTPT&R#T#T$3,\PrR"7p\T4^8wd>T$^d8d7T$^,p$TPT&R#T#T$3,\PrR"7pKMT$^d8XEdT\.,'gT P14'glTP&P)R4T\2,p\P4!\T4\P6R 4TR &T P9T4\P,!4pT Tn\P4!R T!,\P6R4TR&TP9T4\R$\T 4T#T#T$^ , 3,4hR#T#T$3,p%\Pt!TT%: R%\T&4: 24p'TPwT T'4T Py4p(TP=4p)\>Pz!4p\T(4Tn>\T)4Tn-^Tn?TPT^T4\ P!TT T"4R,R-T PR.4,R/R03F:p+TP\Pt!TT+: R%\T'4: 244K< \ P!TYP4R1R27TP&P)R34R# \ P dp \RT ,4hRp ? ii;i \RdpTPTwppT\VPX8XdRp?EKTP&P)RT,4T\2,p\P4!\T4\P6R 4TR &T P9T4\R\T4,T4hRp?ii;i \^dpT\.,'gT P14'glTP&P)R4T\2,p\P4!\T4\P6R 4TR &T P9T4\RT4hRp?ii;i \^dpT\.,'gT P14'glTP&P)R4T\2,p\P4!\T4\P6R 4TR &T P9T4\RT4hRp?ii;i \^EdpT\.,'gT P14'glTP&P)R4T\2,p\P4!\T4\P6R 4TR &T P9T4\P,!4pT Tn\P4!R T!,\P6R4TR&TP9T4\R&\T 4: R'\X'4: 2T4hRp?ii;i \REdSp*T*PTwppT\.,'gT P14'glTP&P)R4T\2,p\P4!\T4\P6R 4TR &T P9T4\P,!4pT'Tn\P4!R T!,\P6R4TR&TP9T4TPwT'T 4T\VPX8Xd\R(T(: R)T*: 24h\R*T(: R+T*: 24hRp*?*ii;i \PdEKi;i)4)verbosequietNz ldap://%s)url session_info credentialslpzDemote failed: %sz netbios namez.(&(objectClass=computer)(serverReferenceBL=*)) dnsHostNamename) expressionattrszUnable to search for serversz%You are the last server in the domainz(objectGUID=%s)options)basescoper+r,zFailed to find options on %sz(fSMORoleOwner=%s)zsearch_options:1:2)r+controlszaCurrent DC is still the owner of %d role(s), use the role command to transfer roles to another DCz,Using %s as partner server for the demotion z!Deactivating inbound replication z0Asking partner server %s to synchronize from us zgError while replicating out last local changes from '%s' for demotion, re-enabling inbound replication z6Error while sending a DsReplicaSync for partition '%s'z#Changing userControl and container z)(&(objectClass=user)(sAMAccountName=%s$))userAccountControl)r.r+r,z6Error while demoting, re-enabling inbound replication z$Error while changing account controlz@Unable to find object with samaccountName = %s$ in the remote dcz%dzCN=%s)r.r+r/z%s-%dzOUnable to find a slot for renaming %s, all names from %s-1 to %s-%d seemed used,zError while renaming z to zThe DC z= is not present on (already removed from) the remote server: z(Error while sending a removeDsServer of z: z$CN=Enterprise,CN=NTFRS SubscriptionszCN=%s, CN=NTFRS Subscriptionsrealmz?CN=Domain system Volumes (SYSVOL Share), CN=NTFRS SubscriptionszCN=NTFRS SubscriptionsT)ignore_no_namezDemote successful )F get_loadparmget_credentials get_loggerrrrDemoteExceptionrgetsearchlenstrlower get_ntds_GUIDget_config_basednldb SCOPE_SUBTREEdninterrfwriter Messager am_rodcr MessageElementFLAG_MOD_REPLACEmodifyget_schema_basednget_root_basednrDsReplicaObjectIdentifierDsReplicaSyncRequest1naming_contextDRSUAPI_DRS_WRIT_REPr-rGUIDsource_dsa_guid DsReplicaSync RuntimeErrorargsrWERR_DS_DRA_NO_REPLICA domain_dnupper Exceptionr rr r get_rdn_valueget_wellknown_dnget_default_basednrDS_GUID_COMPUTERS_CONTAINERSCOPE_ONELEVELDnrenameget_serverNameDsRemoveDSServerRequest1 server_dncommitDsRemoveDSServerremove_sysvol_referencesdeleteLdbErrorremove_dns_references host_dns_name),selfrr r!serverremove_other_dead_serverrr#r$r(credsloggersamdberr netbios_namerese ntds_guidmsgntds_dn dsa_options drsuapiBinddrsuapi_handlesupportedExtensionsnmsgpartncreq1e1werrstring remote_samdbdc_dnuacdc_namerdninewrdn computer_dnnewdn server_dsa_dndomaine3ss,&&&&&&&&&  # /!+"6+9+;*/8!.2BPU] >##E3KL vvn- !.*:U,,*Zcprxby,zCCA "#ABBCA "#JKKFqy>'')\-?-?-AA}-F '') llE$;$;$= >!$!2!2?PS\?\"+. s8q=ISV3= IJ Ja&))#c!fY/01 ll&:S\&I%9$:< s8q= , #3x () ) G =LVY^=_:n&9 <={{}a&))BBBEMMOO > >K!00[1A3CWCWYbcDO LL  IIOOO$% &002002..02668D 446&(#&;; '+yy';$ y--naF22 J [6%9.<.>-2;L IIOOB C%%3|/E/E/G+H1\&2&8&8&:2;-A,B&DCFIIEc#a&!5678C HM"FFFPUP]P]P_P_ MOBB "%"4"4S5EsG[G[]f"gY T" 35A5G5G5I JK K (*++,- - ++kkm$'$6$6tcz7:7K7K7K%M ! J    $a&))))+ S"33  + + -  , ,. !!{s#J\J\!] HM%%;7cSTXCU,/,>,>&@Cc(a-AGE")){wRUWXQYGY030B0B*DCx#&JJJTYTaTaTcTcIIOOQS#FFK&)&8&8[9I3K_K_aj&kDOLL&kkm,/,>,>tcz?B?S?S?S-U()##C("$O$'JS!a%#@$ABBQx'F ^FFQ>Q>S7; = -.y,, >"#6#<== >H$ y%'WWNT6v<<< @BFGH$'JJ *-*<*;O;O;O)QC$ %    $#e*cRWjY[\] ]! ^8 8WWNT6"FFFPUP]P]P_P_ MOBB "%"4"4S5EsG[G[]f"gY T"++-CCF(+(:(:4#:;>;O;O;O)QC$ %    $   u -v444"$12$788#$12$788- 8H<<  s1gg0&B.j<m/"9p" H z JQTUtW#JQT3 (+3CIL NtYZ Et[|LIM W))G..w-- N/N/r)r@ samba.getoptgetoptr-sambarrr samba.authr samba.dcerpcrrsamba.drs_utilsr samba.dsdbr r r r rr samba.netr samba.netcmdrrr samba.samdbrrrrrrsB2 ))%&+66c/c/r