+
    4Ssisi  ã                   ó:  € ^ RI Ht ^ RIt^ RIHt ^ RIHt ^ RIHt ^ RI	H
t
 ^ RIHt ^ RIHtHt ^ RIHt ^ R	IHtHtHtHt  ! R
 R]4      t ! R R]4      t ! R R]4      t ! R R]4      t ! R R]4      t ! R R]4      t ! R R]4      t ! R R]4      tR# )é    N)Ú	provision)Údsdb)ÚSamDB)Úsystem_session)Úsecurity)Úndr_packÚ
ndr_unpack)Ú_get_user_realm_domain)ÚCommandÚCommandErrorÚSuperCommandÚOptionc            	       ó¨   a € ] tR t^&t o RtRtR]P                  R]P                  R]P                  /t
]! RRR]R	R
R7      .tR.tR tRR ltRtV tR# )Úcmd_delegation_showz*Show the delegation setting of an account.z%prog <accountname> [options]Ú	sambaoptsÚcredoptsÚversionoptsú-Hú--URLú%LDB URL for database or target serverÚURLÚH©ÚhelpÚtypeÚmetavarÚdestÚaccountnamec                óž  € VP                   pVP                  pR pVe   V\        P                  ,          '       g"   V P                  P                  RV R24       R# V\        P                  ,          '       g"   V P                  P                  RV R24       R# RpVP                   EFX  pVP                  p VP                  RV R2\        P                  R	7      p	\        V	4      ^8X  d   V	^ ,          P                  pR
pTP                  \        P"                  8X  g    TP                  \        P$                  8X  d&   T P                  P                  RT RT R24       RpM@TP                  \        P&                  8w  d"   TP                  \        P(                  8w  d   RpTP*                  \        P,                  ,          pTP*                  \        P.                  ,          pTP*                  \        P0                  ,          pTP*                  \        P2                  ,          pT'       d   T'       g   T'       g   RpMXT'       d%   T P                  P                  RT RT R24       RpT'       d%   T P                  P                  RT RT R24       RpTP4                  '       g   RpT'       d   EK  T'       d   T P6                  P                  R4       R
pT P6                  P                  RT R24       EK[  	  R#   \        P                   d0   p
T
P                  w  r¼T\        P                   8w  d   h  Rp
?
ELERp
?
ii ; i)zISecurity Descriptor of attribute msDS-AllowedToActOnBehalfOfOtherIdentityNzWarning: DACL not present in z!
zWarning: DACL in z lacks SELF_RELATIVE flag!
Tz<SID=Ú>)ÚscopeFzWarning: ACE in z denies access for trustee zWarning: ACE for trustee z. has unexpected CONTAINER_INHERIT flag set in z* has unexpected INHERITED_ACE flag set in z0  Principals that may delegate to this account:
z*msDS-AllowedToActOnBehalfOfOtherIdentity: Ú
)Údaclr   r   ÚSEC_DESC_DACL_PRESENTÚerrfÚwriteÚSEC_DESC_SELF_RELATIVEÚacesÚtrusteeÚsearchÚldbÚ
SCOPE_BASEÚlenÚdnÚLdbErrorÚargsÚERR_NO_SUCH_OBJECTÚSEC_ACE_TYPE_ACCESS_DENIEDÚ!SEC_ACE_TYPE_ACCESS_DENIED_OBJECTÚSEC_ACE_TYPE_ACCESS_ALLOWEDÚ"SEC_ACE_TYPE_ACCESS_ALLOWED_OBJECTÚflagsÚSEC_ACE_FLAG_INHERIT_ONLYÚSEC_ACE_FLAG_OBJECT_INHERITÚSEC_ACE_FLAG_CONTAINER_INHERITÚSEC_ACE_FLAG_INHERITED_ACEÚaccess_maskÚoutf)ÚselfÚsamÚsecurity_descriptorr#   Ú	desc_typeÚwarning_infoÚfirstÚacer)   ÚresÚerrÚnumÚ_ÚignoreÚinherit_onlyÚobject_inheritÚcontainer_inheritÚinherited_aces   &&&               Ú9/usr/lib/python3/dist-packages/samba/netcmd/delegation.pyÚshow_security_descriptorÚ,cmd_delegation_show.show_security_descriptor8   s¾  € Ø"×'Ñ'ˆØ'×,Ñ,ˆ	ðCˆð Š<˜y¬8×+IÑ+I×IÔIØ�I‰I�O‰OÐ;¸L¸>ÈÐMÔNÙàœ8×:Ñ:×:Ô:Ø�I‰I�O‰OÐ/°¨~ð >4ð 5ô 6áàˆà—9•9ˆCØ—k‘kˆGð	(Ø—j‘j 5¨¨	°Ð!3Ü'*§~¡~ð !ó 7�ô �s“8˜q”=Ø! !�fŸi™i�GàˆFà—‘œH×?Ñ?Ô?Ø—x‘x¤8×#MÑ#MÔMØ—	‘	—‘Ð"2°<°.ð A6Ø6=°Y¸cð!Cô Dð ‘Ø—(‘(œh×BÑBÔBØŸ™¤H×$OÑ$OÔOà�àŸ9™9¤x×'IÑ'IÕIˆLØ ŸY™Y¬×)MÑ)MÕMˆNà—	‘	œH×CÑCÕCð àŸI™I¬×(KÑ(KÕKˆMç§N×;Lð ‘ç$Ø—I‘I—O‘OÐ&?À¸yð IPà'3 n°Cð%9ô :ð "�Fç Ø—I‘I—O‘OÐ&?À¸yð ILà'3 n°Cð%9ô :ð "�Fà—?—?�?à�ç’6ßØ—I‘I—O‘Oð %1ô 2à!�Eà—	‘	—‘Ð"LØ#* )¨2ð!/÷ 0ó{ øô —<‘<ô ØŸ™‘�Øœ#×0Ñ0Ô0Øõ 1ûðús   Â:%LÌMÌ$MÍMNc                ó‚  € VP                  4       pVP                  V4      pVf3   \        P                  ! WfP	                  R4      4      pVP
                  p	MTp	\        V	\        4       WvR7      p
\        VV
4      w  r¼pV
P                  R\        P                  ! V4      ,          \        P                  . ROR7      p\        V4      ^ 8X  d   \        RV,          4      h\        V4      ^8w  d   \        R	4      h\        V^ ,          P	                  R4      ^ ,          4      pV^ ,          P	                  R4      pV^ ,          P	                  R^ R
7      pV P                   P#                  R\%        V^ ,          P&                  4      ,          4       V P                   P#                  R\)        V\*        P,                  ,          4      ,          4       V P                   P#                  R\)        V\*        P.                  ,          4      ,          4       V'       dG   V P                   P#                  R4       V F%  pV P                   P#                  RV,          4       K'  	  Ve0    \1        \2        P4                  V4      pV P7                  V
V4       R # R #   \8         d     T P:                  P#                  R4        R # i ; i)NÚrealm©Úsession_infoÚcredentialsÚlpúsAMAccountName=%sÚuserAccountControlúmsDS-AllowedToDelegateToú(msDS-AllowedToActOnBehalfOfOtherIdentity©Ú
expressionr!   Úattrsú Unable to find account name '%s'úFound multiple accounts.©ÚidxzAccount-DN: %s
zUF_TRUSTED_FOR_DELEGATION: %s
z.UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION: %s
z)  Services this account may delegate to:
zmsDS-AllowedToDelegateTo: %s
znWarning: Security Descriptor of attribute msDS-AllowedToActOnBehalfOfOtherIdentity could not be unmarshalled!
)rW   rX   rY   )Úget_loadparmÚget_credentialsr   Úprovision_paths_from_lpÚgetÚsamdbr   r   r
   r*   r+   Úbinary_encodeÚSCOPE_SUBTREEr-   r   Úintr<   r&   Ústrr.   Úboolr   ÚUF_TRUSTED_FOR_DELEGATIONÚ)UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATIONr	   r   Ú
descriptorrN   ÚRuntimeErrorr%   )r=   r   r   r   r   r   rU   ÚcredsÚpathsÚpathr>   ÚcleanedaccountrQ   ÚdomainrD   ÚuacÚallowedÚallowed_fromÚar?   s   &&&&&&              rM   ÚrunÚcmd_delegation_show.runŠ   sA  € Ø×#Ñ#Ó%ˆØ×(Ñ(¨Ó,ˆàŠ9Ü×5Ò5°b¿&¹&À»/ÓJˆEØ—;‘;‰DàˆDä�D¤~Ó'7Ø %ô.ˆô +AÀØADó+FÑ'ˆ ð �j‰jÐ$7Ü×*Ò*¨>Ó:õ%;ä"×0Ñ0ò Lð ó Mˆô
 ˆs‹8�qŒ=ÜÐAÀKÕOÓPÐPÜ�‹X˜Œ]ÜÐ9Ó:Ð:ä�#�a•&—*‘*Ð1Ó2°1Õ5Ó6ˆØ�a•&—*‘*Ð7Ó8ˆØ˜1•v—z‘zÐ"LÐRS�zÓTˆà�	‰	�‰Ð*¬S°°Qµ·±«^Õ;Ô<Ø�	‰	�‰Ð9Ü˜s¤T×%CÑ%CÕCÓDõEô 	Fà�	‰	�‰ÐIÜ˜S¤4×#QÑ#QÕQÓRõSô 	T÷ Ø�I‰I�O‰OÐHÔIÛ�Ø—	‘	—‘Ð @À1Õ DÖEñ àÒ#ðHÜ&0´×1DÑ1DÀlÓ&SÐ#ð ×-Ñ-¨cÐ3FÖGñ $øô  ô @Ø—	‘	—‘ð !?÷ @ð@ús   É$J Ê&J>Ê=J>© ©NNNN)Ú__name__Ú
__module__Ú__qualname__Ú__firstlineno__Ú__doc__ÚsynopsisÚoptionsÚSambaOptionsÚCredentialsOptionsÚVersionOptionsÚtakes_optiongroupsr   ri   Útakes_optionsÚ
takes_argsrN   rx   Ú__static_attributes__Ú__classdictcell__©Ú__classdict__s   @rM   r   r   &   st   ø‡ € Ù4à.€Hð 	�W×)Ñ)Ø�G×.Ñ.Ø�w×-Ñ-ðÐñ 	ˆt�WÐ#JÐQTØ 3ô	(ð€Mð
  �€JòP0÷d1Hò 1Hó    r   c            	       ó¤   a € ] tR t^¾t o RtRtR]P                  R]P                  R]P                  /t
]! RRR]R	R
R7      .tRR.tRR ltRtV tR# )Úcmd_delegation_for_any_servicez3Set/unset UF_TRUSTED_FOR_DELEGATION for an account.ú(%prog <accountname> [(on|off)] [options]r   r   r   r   r   r   r   r   r   r   ÚonoffNc                ó  € VR 8X  d   RpMVR8X  d   RpM\        RV,          4      hVP                  4       pVP                  V4      p	\        P                  ! WˆP                  R4      4      p
Vf   V
P                  pMTp\        V\        4       W˜R7      p\        VV4      w  rÞpR\        P                  ! V4      ,          p\        P                  p VP                  VVR	VRR
7       R#   \         d   p\        T4      hRp?ii ; i)ÚonTÚoffFú0invalid argument: '%s' (choose from 'on', 'off')rQ   NrR   rV   zTrusted-for-Delegation©Ú	flags_strr“   Ústrict)r   ra   rb   r   rc   rd   re   r   r   r
   r+   rf   r   rk   Útoggle_userAccountFlagsÚ	Exception©r=   r   r‘   r   r   r   r   r“   rU   ro   rp   rq   r>   rr   rQ   rs   Úsearch_filterÚflagrE   s   &&&&&&&            rM   rx   Ú"cmd_delegation_for_any_service.runÐ   s  € ð �DŒ=Ø‰BØ�eŒ^Ø‰BäÐQÐTYÕYÓZÐZà×#Ñ#Ó%ˆØ×(Ñ(¨Ó,ˆÜ×1Ò1°"·f±f¸W³oÓFˆØŠ9Ø—;‘;‰DàˆDä�D¤~Ó'7Ø %ô.ˆô +AÀØADó+FÑ'ˆ ð ,¬c×.?Ò.?ÀÓ.OÕOˆÜ×-Ñ-ˆð	$Ø×'Ñ'¨°tØ2JØ+-°dð (ö <øô ô 	$Ü˜sÓ#Ð#ûð	$ús   ÃC+ Ã+DÃ6DÄDrz   r{   ©r|   r}   r~   r   r€   r�   r‚   rƒ   r„   r…   r†   r   ri   r‡   rˆ   rx   r‰   rŠ   r‹   s   @rM   r�   r�   ¾   sn   ø‡ € Ù=à9€Hð 	�W×)Ñ)Ø�G×.Ñ.Ø�w×-Ñ-ðÐñ 	ˆt�WÐ#JÐQTØ 3ô	(ð€Mð
   Ð)€J÷ $ò  $r�   r�   c            	       ó¤   a € ] tR t^ót o RtRtR]P                  R]P                  R]P                  /t
]! RRR]R	R
R7      .tRR.tRR ltRtV tR# )Úcmd_delegation_for_any_protocolzOSet/unset UF_TRUSTED_TO_AUTHENTICATE_FOR_DELEGATION (S4U2Proxy) for an account.r�   r   r   r   r   r   r   r   r   r   r   r‘   Nc                ó  € R pVR8X  d   RpMVR8X  d   R pM\        RV,          4      hVP                  4       pVP                  VRR7      p	\        P                  ! WˆP                  R4      4      p
Vf   V
P                  pMTp\        V\        4       W˜R7      p\        VV4      w  rÞpR	\        P                  ! V4      ,          p\        P                  p VP                  VVR
VRR7       R#   \         d   p\        T4      hRp?ii ; i)Fr“   Tr”   r•   )Úfallback_machinerQ   NrR   rV   z&Trusted-to-Authenticate-for-Delegationr–   )r   ra   rb   r   rc   rd   re   r   r   r
   r+   rf   r   rl   r™   rš   r›   s   &&&&&&&            rM   rx   Ú#cmd_delegation_for_any_protocol.run  s  € ð ˆØ�DŒ=Ø‰BØ�eŒ^Ø‰BäÐQÐTYÕYÓZÐZà×#Ñ#Ó%ˆØ×(Ñ(¨¸dÐ(ÓCˆÜ×1Ò1°"·f±f¸W³oÓFˆØŠ9Ø—;‘;‰DàˆDä�D¤~Ó'7Ø %ô.ˆô +AÀØADó+FÑ'ˆ ð ,¬c×.?Ò.?ÀÓ.OÕOˆÜ×=Ñ=ˆð	$Ø×'Ñ'¨°tØ2ZØ+-°dð (ö <øô ô 	$Ü˜sÓ#Ð#ûð	$ús   ÃC/ Ã/D
Ã:DÄD
rz   r{   rŸ   r‹   s   @rM   r¡   r¡   ó   sn   ø‡ € ÙYà9€Hð 	�W×)Ñ)Ø�G×.Ñ.Ø�w×-Ñ-ðÐñ 	ˆt�WÐ#JÐQTØ 3ô	(ð€Mð
   Ð)€J÷!$ò !$r�   r¡   c            	       ó¤   a € ] tR tRt o RtRtR]P                  R]P                  R]P                  /t
]! RRR	]R
RR7      .tRR.tRR ltRtV tR# )Úcmd_delegation_add_servicei)  zZAdd a service principal to msDS-AllowedToDelegateTo so that an account may delegate to it.ú)%prog <accountname> <principal> [options]r   r   r   r   r   r   r   r   r   r   Ú	principalNc                ó  € VP                  4       pVP                  V4      p\        P                  ! WwP	                  R 4      4      p	Vf   V	P
                  p
MTp
\        V
\        4       W‡R7      p\        VV4      w  rÍpVP                  R\        P                  ! V4      ,          \        P                  R.R7      p\        V4      ^ 8X  d   \        RV,          4      h\        V4      ^8w  d   \        R4      h\        P                  ! 4       pV^ ,          P                   Vn        \        P"                  ! V.\        P$                  R4      VR&    VP'                  V4       R#   \(         d   p\        T4      hRp?ii ; i©rQ   NrR   rV   rX   rZ   r]   r^   )ra   rb   r   rc   rd   re   r   r   r
   r*   r+   rf   rg   r-   r   ÚMessager.   ÚMessageElementÚFLAG_MOD_ADDÚmodifyrš   ©r=   r   r¨   r   r   r   r   rU   ro   rp   rq   r>   rr   rQ   rs   rD   ÚmsgrE   s   &&&&&&&           rM   rx   Úcmd_delegation_add_service.run;  sT  € ð ×#Ñ#Ó%ˆØ×(Ñ(¨Ó,ˆÜ×1Ò1°"·f±f¸W³oÓFˆØŠ9Ø—;‘;‰DàˆDä�D¤~Ó'7Ø %ô.ˆô +AÀØADó+FÑ'ˆ ð �j‰jÐ$7Ü×*Ò*¨>Ó:õ%;ä"×0Ñ0Ø :Ð;ð ó =ˆô ˆs‹8�qŒ=ÜÐAÀKÕOÓPÐPÜ�‹X˜Œ]ÜÐ9Ó:Ð:ä�kŠk‹mˆØ�Q•—‘ˆŒÜ*-×*<Ò*<¸i¸[Ü=@×=MÑ=MØ=Wó+YˆÐ&Ñ'ð	$Ø�J‰J�sŽOøÜô 	$Ü˜sÓ#Ð#ûð	$úó   ÅE% Å%F Å0E;Å;F rz   r{   rŸ   r‹   s   @rM   r¦   r¦   )  sn   ø‡ € Ùdà:€Hð 	�W×)Ñ)Ø�G×.Ñ.Ø�w×-Ñ-ðÐñ 	ˆt�WÐ#JÐQTØ 3ô	(ð€Mð
   Ð-€J÷#$ò #$r�   r¦   c            	       ó¤   a € ] tR tRt o RtRtR]P                  R]P                  R]P                  /t
]! RRR	]R
RR7      .tRR.tRR ltRtV tR# )Úcmd_delegation_del_serviceia  ziDelete a service principal from msDS-AllowedToDelegateTo so that an account may no longer delegate to it.r§   r   r   r   r   r   r   r   r   r   r   r¨   Nc                ó  € VP                  4       pVP                  V4      p\        P                  ! WwP	                  R 4      4      p	Vf   V	P
                  p
MTp
\        V
\        4       W‡R7      p\        VV4      w  rÍpVP                  R\        P                  ! V4      ,          \        P                  R.R7      p\        V4      ^ 8X  d   \        RV,          4      h\        V4      ^8w  d   \        R4      h\        P                  ! 4       pV^ ,          P                   Vn        \        P"                  ! V.\        P$                  R4      VR&    VP'                  V4       R#   \(         d   p\        T4      hRp?ii ; irª   )ra   rb   r   rc   rd   re   r   r   r
   r*   r+   rf   rg   r-   r   r«   r.   r¬   ÚFLAG_MOD_DELETEr®   rš   r¯   s   &&&&&&&           rM   rx   Úcmd_delegation_del_service.runs  sT  € ð ×#Ñ#Ó%ˆØ×(Ñ(¨Ó,ˆÜ×1Ò1°"·f±f¸W³oÓFˆØŠ9Ø—;‘;‰DàˆDä�D¤~Ó'7Ø %ô.ˆô +AÀØADó+FÑ'ˆ ð �j‰jÐ$7Ü×*Ò*¨>Ó:õ%;ä"×0Ñ0Ø :Ð;ð ó =ˆô ˆs‹8�qŒ=ÜÐAÀKÕOÓPÐPÜ�‹X˜Œ]ÜÐ9Ó:Ð:ä�kŠk‹mˆØ�Q•—‘ˆŒÜ*-×*<Ò*<¸i¸[Ü=@×=PÑ=PØ=Wó+YˆÐ&Ñ'ð	$Ø�J‰J�sŽOøÜô 	$Ü˜sÓ#Ð#ûð	$úr²   rz   r{   rŸ   r‹   s   @rM   r´   r´   a  sn   ø‡ € Ùsà:€Hð 	�W×)Ñ)Ø�G×.Ñ.Ø�w×-Ñ-ðÐñ 	ˆt�WÐ#JÐQTØ 3ô	(ð€Mð
   Ð-€J÷#$ò #$r�   r´   c            	       ó¤   a € ] tR tRt o RtRtR]P                  R]P                  R]P                  /t
]! RRR	]R
RR7      .tRR.tRR ltRtV tR# )Úcmd_delegation_add_principali™  z\Add a principal to msDS-AllowedToActOnBehalfOfOtherIdentity that may delegate to an account.r§   r   r   r   r   r   r   r   r   r   r   r¨   Nc           
     óŒ	  a€ VP                  4       pVP                  V4      p\        P                  ! WwP	                  R 4      4      p	Vf   V	P
                  p
MTp
\        V
\        4       W‡R7      p\        W4      w  p pVP                  R\        P                  ! V4      ,          \        P                  R.R7      p\        V4      ^ 8X  d   \        RV R24      h\        V4      ^8w  d   \        R4      hV^ ,          P	                  R^ R	7      pVfƒ   \        P                   ! \        P"                  4      p\        P$                  ! 4       p\        P&                  Vn        \        P*                  \        P,                  ,          Vn        VVn        RpM' \3        \        P$                  V4      pTP6                  pVf2   \        P8                  ! 4       p\        P:                  Vn        ^ Vn        \        W+4      w  p pVP                  R\        P                  ! V4      ,          \        P                  R.R7      p\        V4      ^ 8X  d   \        RV R24      h\        V4      ^8w  d   \        R4      h\        P                   ! VP?                  RV^ ,          P	                  R^ R	7      4      PA                  R4      4      oVPB                  p\D        ;QJ d    V3R lV 4       F  '       g   K   RM	  RM! V3R lV 4       4      '       d   \        RV RV R24      h\        PF                  ! 4       p\        PH                  Vn        ^ Vn%        \        PL                  Vn'        SVn(        VPS                  V4       VVn!        V;P<                  ^,          un        VVn        \U        V4      p\        PV                  ! 4       pV^ ,          PX                  Vn,        Ve*   \        PZ                  ! V\        P\                  R4      VR&   \        PZ                  ! V\        P^                  R4      VR&    VPa                  V4       R#   \4         d    \        R
T R24      hi ; i  \        Pb                   dD   pTPd                  w  ppT\        Pf                  8X  d   \        RT R24      h\        T4      hRp?ii ; i)rQ   NrR   rV   rY   rZ   zUnable to find account name 'Ú'r^   r_   úWSecurity Descriptor of attribute msDS-AllowedToActOnBehalfOfOtherIdentity for account 'ú' could not be unmarshalled!Ú	objectSidúUnable to find principal name 'Ú	objectSIDúutf-8c              3   ó@   <"  € T F  qP                   S8H  x € K  	  R # 5i)N)r)   )Ú.0rC   Ú	princ_sids   & €rM   Ú	<genexpr>Ú3cmd_delegation_add_principal.run.<locals>.<genexpr>ù  s   øé € Ð8±4¨C�{‰{˜iÖ'³4ùs   ƒTFzACE for principal 'zl' already present in Security Descriptor of attribute msDS-AllowedToActOnBehalfOfOtherIdentity for account 'ú'.Ú0Ú1úRRefused to update attribute msDS-AllowedToActOnBehalfOfOtherIdentity for account 'ú:': a conflicting attribute update occurred simultaneously.)4ra   rb   r   rc   rd   re   r   r   r
   r*   r+   rf   rg   r-   r   r   Údom_sidÚSID_BUILTIN_ADMINISTRATORSrm   ÚSD_REVISIONÚrevisionr$   r'   r   Ú	owner_sidr	   rn   r#   ÚaclÚSECURITY_ACL_REVISION_ADSÚnum_acesÚschema_format_valueÚdecoder(   ÚanyrC   r4   r6   ÚSEC_ADS_GENERIC_ALLr;   r)   Úappendr   r«   r.   r¬   r¶   r­   r®   r/   r0   ÚERR_NO_SUCH_ATTRIBUTE)r=   r   r¨   r   r   r   r   rU   ro   rp   rq   r>   rr   rG   Úaccount_resÚdatarÐ   Úsecurity_descr#   ÚcleanedprincÚ	princ_resr(   rC   Únew_datar°   rE   rF   rÄ   s   &&&&&&&                    @rM   rx   Ú cmd_delegation_add_principal.run«  sC  ø€ ð ×#Ñ#Ó%ˆØ×(Ñ(¨Ó,ˆÜ×1Ò1°"·f±f¸W³oÓFˆØŠ9Ø—;‘;‰DàˆDä�D¤~Ó'7Ø %ô.ˆô  6°kÓGÑˆ˜˜1à—j‘jØ*Ü×Ò˜nÓ-õ.ä×#Ñ#Ø=Ð>ð	 !ó @ˆô
 ˆ{Ó˜qÔ ÜÐ!>¸{¸mÈ1ÐMÓNÐNÜ�Ó Ô"ÜÐ9Ó:Ð:à˜1�~×!Ñ!Ø6¸Að "ó ?ˆàŠ<ä ×(Ò(¬×)LÑ)LÓMˆIä$×/Ò/Ó1ˆMÜ%-×%9Ñ%9ˆMÔ"Ü"*×"@Ñ"@Ü"*×"AÑ"Aõ#BˆMÔà&/ˆMÔ#à‰Dð5Ü *¬8×+>Ñ+>ÀÓ E�ð !×%Ñ%ˆDàŠ<ä—<’<“>ˆDÜ$×>Ñ>ˆDŒMØˆDŒMô 4°IÓCÑˆ�a˜à—J‘JÐ*=Ü"×0Ò0°Ó>õ+?ä%(×%6Ñ%6Ø&1 ]ð ó 4ˆ	ô ˆy‹>˜QÔÜÐ!@ÀÀÈ1ÐMÓNÐNÜ�‹^˜qÔ ÜÐ9Ó:Ð:ä×$Ò$Ø×#Ñ#ØØ˜!•× Ñ  °!Ð Ó4ó6ç6<±f¸W³oóGˆ	ð
 �y‰yˆ÷ ‹3Ô8±4Ó8�3�3Š3Ô8±4Ó8×8Ò8ÜØ% i [ð 1ð  �= ð$ó%ð %ô �lŠl‹nˆÜ×7Ñ7ˆŒØˆŒ	Ü"×6Ñ6ˆŒØˆŒà�‰�CÔàˆŒ	Ø�Š˜Õ�à!ˆÔä˜MÓ*ˆô
 �kŠk‹mˆØ˜Q•×"Ñ"ˆŒØÒÜ×)Ò)Ø”c×)Ñ)Ø:ó<ˆC�‰Hô ×%Ò%Ø”c×&Ñ&Ø6ó8ˆˆC‰ð	(Ø�J‰J�sŽOøôO  ô 5Ü"ð &3à3>°-ð @3ð$4ó 5ð 5ð5ûôP �|‰|ô 		(Ø—X‘X‰FˆC�Ø”c×/Ñ/Ô/Ü"ðà#�}ð %/ð0ó1ð 1ô # 3Ó'Ð'ûð		(ús$   ÆQ Ð:Q+ ÑQ(Ñ+SÒ >R>Ò>Srz   r{   rŸ   r‹   s   @rM   r¹   r¹   ™  so   ø‡ € Ùfà:€Hð 	�W×)Ñ)Ø�G×.Ñ.Ø�w×-Ñ-ðÐñ 	ˆt�WÐ#JØ ¨Sô	2ð€Mð
   Ð-€J÷|(ò |(r�   r¹   c            	       ó¤   a € ] tR tRt o RtRtR]P                  R]P                  R]P                  /t
]! RRR	]R
RR7      .tRR.tRR ltRtV tR# )Úcmd_delegation_del_principali*  zkDelete a principal from msDS-AllowedToActOnBehalfOfOtherIdentity that may no longer delegate to an account.r§   r   r   r   r   r   r   r   r   r   r   r¨   Nc           
     ó”  € VP                  4       pVP                  V4      p\        P                  ! WwP	                  R 4      4      p	Vf   V	P
                  p
MTp
\        V
\        4       W‡R7      p\        W4      w  p pVP                  R\        P                  ! V4      ,          \        P                  R.R7      p\        V4      ^ 8X  d   \        RV,          4      h\        V4      ^8w  d   \        R4      hV^ ,          P	                  R^ R7      pVf   \        R	V R
24      h \        \         P"                  V4      pTP&                  pTf   \        RT R24      h\        Y+4      w  p pTP                  R\        P                  ! T4      ,          \        P                  R.R7      p\        T4      ^ 8X  d   \        RT R24      h\        T4      ^8w  d   \        R4      h\         P(                  ! TP+                  RT^ ,          P	                  R^ R7      4      P-                  R4      4      pTP.                  pT Uu. uF  pTP0                  T8w  g   K  TNK  	  pp\        T4      \        T4      8X  d   \        RT RT R24      h\        T4      Tn        TTn        TTn        \5        T4      p\        P6                  ! 4       pT^ ,          P8                  Tn        \        P:                  ! T\        P<                  R4      TR&   \        P:                  ! T\        P>                  R4      TR&    TPA                  T4       R#   \$         d    \        RT R24      hi ; iu upi   \        PB                   dD   pTPD                  w  ppT\        PF                  8X  d   \        RT R24      h\        T4      hRp?ii ; i)rQ   NrR   rV   rY   rZ   r]   r^   r_   z@Attribute msDS-AllowedToActOnBehalfOfOtherIdentity for account 'z' not present!r¼   r½   zkDACL not present on Security Descriptor of attribute msDS-AllowedToActOnBehalfOfOtherIdentity for account 'z'!r¾   r¿   r»   rÀ   rÁ   z"Unable to find ACE for principal 'z\' in Security Descriptor of attribute msDS-AllowedToActOnBehalfOfOtherIdentity for account 'rÇ   rÈ   rÉ   rÊ   rË   )$ra   rb   r   rc   rd   re   r   r   r
   r*   r+   rf   rg   r-   r   r	   r   rm   rn   r#   rÌ   rÔ   rÕ   r(   r)   rÓ   r   r«   r.   r¬   r¶   r­   r®   r/   r0   rÙ   )r=   r   r¨   r   r   r   r   rU   ro   rp   rq   r>   rr   rG   rÚ   rÛ   rÜ   r#   rÝ   rÞ   rÄ   Úold_acesrC   r(   rß   r°   rE   rF   s   &&&&&&&                     rM   rx   Ú cmd_delegation_del_principal.run<  sÖ  € ð ×#Ñ#Ó%ˆØ×(Ñ(¨Ó,ˆÜ×1Ò1°"·f±f¸W³oÓFˆØŠ9Ø—;‘;‰DàˆDä�D¤~Ó'7Ø %ô.ˆô  6°kÓGÑˆ˜˜1à—j‘jØ*Ü×Ò˜nÓ-õ.ä×#Ñ#Ø=Ð>ð	 !ó @ˆô
 ˆ{Ó˜qÔ ÜÐAÀKÕOÓPÐPÜ�Ó Ô"ÜÐ9Ó:Ð:à˜1�~×!Ñ!Ø6¸Að "ó ?ˆàŠ<Üð "+à+6¨-°~ð Gó Hð Hð	1Ü&¤x×':Ñ':¸DÓAˆMð ×!Ñ!ˆØŠ<Üð "+ð ,7¨-°rð ;ó <ð <ô 4°IÓCÑˆ�a˜à—J‘JÐ*=Ü"×0Ò0°Ó>õ+?ä%(×%6Ñ%6Ø&1 ]ð ó 4ˆ	ô ˆy‹>˜QÔÜÐ!@ÀÀÈ1ÐMÓNÐNÜ�‹^˜qÔ ÜÐ9Ó:Ð:ä×$Ò$Ø×#Ñ#ØØ˜!•× Ñ  °!Ð Ó4ó6ç6<±f¸W³oóGˆ	ð
 —9‘9ˆñ  (ÓD™x˜¨3¯;©;¸)Ñ+C—�™xˆÐDô ˆt‹9œ˜H›Ô%Üð "#Ø#, +ð .+ð ,7¨-°rð	 ;ó <ð <ô ˜D›	ˆŒØˆŒ	à!ˆÔä˜MÓ*ˆô
 �kŠk‹mˆØ˜Q•×"Ñ"ˆŒÜ×%Ò%Ø”#×%Ñ%Ø6ó8ˆˆC‰ô ×%Ò%Ø”c×&Ñ&Ø6ó8ˆˆC‰ð	(Ø�J‰J�sŽOøô ô 	1Üð "+à+6¨-ð 8/ð 0ó 1ð 1ð	1üòD Eøô< �|‰|ô 		(Ø—X‘X‰FˆC�Ø”c×/Ñ/Ô/Ü"ðà#�}ð %/ð0ó1ð 1ô # 3Ó'Ð'ûð		(ús0   Ä(M ÉM*ÉM*Ì9M/ ÍM'Í/OÎ>OÏOrz   r{   rŸ   r‹   s   @rM   râ   râ   *  so   ø‡ € Ùuà:€Hð 	�W×)Ñ)Ø�G×.Ñ.Ø�w×-Ñ-ðÐñ 	ˆt�WÐ#JØ ¨Sô	2ð€Mð
   Ð-€J÷m(ò m(r�   râ   c                   óª   € ] tR tRtRt/ t]! 4       ]R&   ]! 4       ]R&   ]! 4       ]R&   ]	! 4       ]R&   ]
! 4       ]R&   ]! 4       ]R&   ]! 4       ]R	&   R
tR# )Úcmd_delegationi¬  zDelegation management.Úshowzfor-any-servicezfor-any-protocolzadd-servicezdel-servicezadd-principalzdel-principalrz   N)r|   r}   r~   r   r€   Úsubcommandsr   r�   r¡   r¦   r´   r¹   râ   r‰   rz   r�   rM   rç   rç   ¬  sg   † Ù à€KÙ-Ó/€K�ÑÙ%CÓ%E€KÐ!Ñ"Ù&EÓ&G€KÐ"Ñ#Ù!;Ó!=€K�ÑÙ!;Ó!=€K�ÑÙ#?Ó#A€K�Ñ Ù#?Ó#A€K�Õ r�   rç   )Úsamba.getoptÚgetoptr‚   r+   Úsambar   r   Úsamba.samdbr   Ú
samba.authr   Úsamba.dcerpcr   Ú	samba.ndrr   r	   Úsamba.netcmd.commonr
   Úsamba.netcmdr   r   r   r   r   r�   r¡   r¦   r´   r¹   râ   rç   rz   r�   rM   Ú<module>ró      s�   ðõ* Û 
Ý Ý Ý Ý %Ý !ß *Ý 6÷ó ôUH˜'ô UHôp2$ Wô 2$ôj3$ gô 3$ôl5$ ô 5$ôp5$ ô 5$ôpN( 7ô N(ôb( 7ô (ôD
B�\ö 
Br�   