+ 4SsiCC^RIt^RIt^RIt^RIt^RIHt^RIHt^RI H t ^RI H t ^RI HtHtHtHtHtHtHt^RIHtHtHt^RIHtHtHt^RIHtHtH t ^R I!H"t"^R IH#t#^R I$H%t%H&t&!R R ]4t'R#)N)system_session)system_session_unix)security)DS_DOMAIN_FUNCTION_2000DS_DOMAIN_FUNCTION_2003DS_DOMAIN_FUNCTION_2008DS_DOMAIN_FUNCTION_2008_R2DS_DOMAIN_FUNCTION_2012DS_DOMAIN_FUNCTION_2012_R2DS_DOMAIN_FUNCTION_2016)Command CommandErrorOption)DEFAULT_MIN_PWD_LENGTHProvisioningError provision)FILL_DRS FILL_FULL FILL_NT4SYNC)get_default_backend_store)functional_level)common_ntvfs_optionscommon_provision_join_optionsc%a]tRt^4toRtRtR]PR]P/t ] !RRRR7] !R R R R R 7] !RR RRR 7] !RR RRR 7] !RR RRR 7] !RR RRR 7] !RR RRR 7] !RR RRR 7] !RR RR R 7] !R!R R"R#R 7] !R$R R%R&R 7] !R'R R%R(R 7] !R)R*R+.R`OR-R,R.7] !R/R R%R0R 7] !R1R R2R3R 7] !R4R R2R5R 7] !R6R R7R8R 7] !R9RR:R;7] !RR.7] !R@R*RA.RbORCRBR.7] !RDR*RE.RcORGRFR.7] !RHR*RI.RdORJRKR.7] !RLRMRNRORPRQ7] !RRRSRR7] !RTRRUR;7.t ] !RVR*.ReORXRYRWRZ7.t ] P]4]P !4'd#] P]4] P] 4.tRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRKRWR[RKRKR[RKRK3%R\ltR]tR^tR_tVtRK#)fcmd_domain_provisionzProvision a domain.z%prog [options] sambaopts versionoptsz --interactivez Ask for names store_true)helpactionz--domainstringDOMAINzNetBIOS domain name to use)typemetavarrz --domain-guidGUIDz!set domainguid (otherwise random)z --domain-sidSIDz set domainsid (otherwise random)z --ntds-guidz'set NTDS object GUID (otherwise random)z--invocationidz#set invocationid (otherwise random)z --host-nameHOSTNAMEz set hostnamez --host-ip IPADDRESSzset IPv4 ipaddressz --host-ip6 IP6ADDRESSzset IPv6 ipaddressz--siteSITENAMEz set site namez --adminpassPASSWORDz(choose admin password (otherwise random)z --krbtgtpassz)choose krbtgt password (otherwise random)z --dns-backendchoicezNAMESERVER-BACKENDSAMBA_INTERNALzThe DNS server backend. SAMBA_INTERNAL is the builtin name server (default), BIND9_FLATFILE uses bind9 text database to store zone information, BIND9_DLZ uses samba4 AD to store zone information, NONE skips the DNS setup entirely (not recommended))r#r$choicesrdefaultz --dnspassz&choose dns password (otherwise random)z--rootUSERNAMEzchoose 'root' unix usernamez--nobodyzchoose 'nobody' userz--users GROUPNAMEzchoose 'users' groupz--blankz.do not add users or groups, just the structure)r rz --server-roleROLEdomain controllerz^The server role (domain controller | dc | member server | member | standalone). Default is dc.z--function-levelz FOR-FUN-LEVEL2008_R2zThe domain and forest function level (2000 | 2003 | 2008 | 2008_R2 - always native | 2016). Default is (Windows) 2008_R2 Native.z --base-schemaz BASE-SCHEMA2019z8The base schema files to use. Default is (Windows) 2019.z--adprep-levelFUNCTION_LEVELzNThe highest functional level to prepare for. Default is based on --base-schemaNz --next-ridintNEXTRIDizGThe initial nextRid value (only needed for upgrades). Default is 1000.)r#r$r/rz--partitions-onlyzEConfigure Samba's partitions, but do not modify them (ie, join a BDC)z --use-rfc2307z/Use AD to store posix attributes (default = no)z --use-xattrsautoz [yes|no|auto]zDefine if we should use the native fs capabilities or a tdb file for storing attributes likes ntacl when --use-ntvfs is set. auto tries to make an intelligent guess based on the user rights and system capabilities)r#r.r$rr/Fc&  VPRVR7VnVP4p&V&Pp'VeTp(MVP 4p(V(fRp(VP 'gRpV'EdT^RIHp)^RIp*RNRlp+V*P4PR^4^,P4p,V+!RV,4p-V-RO9d \R 4hV-PR4^,p,V+!R V,4pVf \R 4hV+!R R 4pV+!RR4pVRO9d \R4hVR8Xd#V+!RV(4pVP4RP9dRp(RpV)!R4p.VPV.4p/V/'d%VPP!RV/,4KFV)!R4p0V.V08XgVPP!R4KrT.p M9VP"P%R4p-V-f \R 4hVf \R 4hV 'd&VPV 4p/V/'d \V/4hMVPP'R4\(P*!V4p1Tf!T"RQ9dRpMT"RR9dRpM T"RS9dRpMRpTR8XdRp2M7TR8Xd\.p2M)TR8Xd\0p2MTR8Xd\2p2M TR8Xd\4p2TR8XdTfT(p\6p3T'd\8p3MT'd\:p3Te<\<P>PAT4'g\<PB!T4Rp4TR8XdR p4EM+TR!8Xd T 'gR p4EMT 'g \R"4hTR!8XdT&P%R#4'gT'd6\DPF!\<P>PIT4R$7p5M`\DPF!\<P>PI\<P>PKT&P%R%444R$7p5\LPNPQT&T5PRR&R'\U4R(4R p4T5PY4T4'dTPP'R*4Te\ZP\!T4p\_4p6T$f \a4p$\cTPT63/R+T'bR,TbR-T3bRT-bR.TbR/TbR0TbR1T bR2T bR3T bR4T bR5TbR6TbR7T bR8TbR9TbR:TbR;TbRTbR?TbR@TbRAT1bRBT4bRCTbRDT&bRET bRFT!bRGR bRHT"bRIX2bRJT#bRKT$bRLT%bp7T7PgTP4R# \dRp,ELi;i \dRp,ELi;i \,d\RT R24hi;i \Vd TPP'R)4ELpi;i T5PY4i;i \ddp8\RMT84hRp8?8ii;i)Tr)namequietNnoneT)getpasscVe\V: RV: R2RR7M\V: R2RR7\PP4\PP 4P R4;'gT#)Nz [z]:  )endz:  )printsysstdoutflushstdinreadlinerstrip)promptr/s&&?/usr/lib/python3/dist-packages/samba/netcmd/domain/provision.pyask%cmd_domain_provision.run..asksZ&9sCF,#6   "yy))+2248CCGC.Realmz No realm set!DomainzNo domain set!z$Server Role (dc, member, standalone)dcz=DNS backend (SAMBA_INTERNAL, BIND9_FLATFILE, BIND9_DLZ, NONE)r-zNo DNS backend set!z=DNS forwarder IP address (write 'none' to disable forwarding)zAdministrator password: z%s. zRetype password: zSorry, passwords do not match. realmz,Administrator password will be set randomly!'z' is not a valid domain levelSKIP20122012_R220162008R2yesFr9zr--use-xattrs=no requires --use-ntvfs (not supported for production use). Please re-run with --use-xattrs omitted.z posix:eadb)dirz private dirzO:S-1-5-32G:S-1-5-32zS-1-5-32nativezZYou are not root or your system does not support xattr, using tdb backend for attributes. znot using extended attributes to store ACLs and other metadata. If you intend to use this provision in production, rerun the script as root on a system supporting xattrs.smbconf targetdir samdb_filldomain domainguid domainsidhostnamehostiphostip6sitenamentdsguid invocationid adminpass krbtgtpass machinepass dns_backend dns_forwarderdnspassrootnobodyusers serverroledom_for_fun_leveluseeadbnext_ridlp use_ntvfs use_rfc2307skip_sysvolacl base_schema adprep_levelplaintext_secrets backend_storebackend_store_sizezProvision failed)N)N)Nr=)r4 2008_R2_old)rV)rW)4 get_loggerlogger get_loadparm configfile_get_nameserver_ipraw_argvr>socketgetfqdnsplitupper IndexErrorrlower_adminpass_issueerrfwrite_lpgetinforstring_to_levelKeyErrorr r r r rrrospathisdirmakedirstempfileNamedTemporaryFileabspathdirnamesambantaclssetntaclr;r Exceptioncloserdom_sidrrrr report_logger)9selfrr interactiver` domain_guid domain_sid ntds_guidrh host_namehost_iphost_ip6risiterjrkrlrmrn ldapadminpassrorprqr<blank server_rolefunction_levelr{rupartitions_onlyr^ use_xattrsrwrxrzr|r}r~rvr]suggested_forwarderr>rrLr/rSadminpassplainissueadminpassverifyrsprovision_adprep_levelr_eadbfilesessionresultes9&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&&& rKruncmd_domain_provision.runsJoo;eoD  # # %--  $"/ "&"9"9"; "*&,#}}}K ; '  D  ..*00a8;AAC)E ""?33 ++c*1-7+F~"#344DdKK]_opKj("#899.. #$cex y  &&(N:*.'$(M!()C!D--n=IIOOGeO4&-.A&BO)_< (JK$2 MM%%g.E}"?33~"#344 )))4E"5)) KK  K L R 0 @ @ P   88 & (%  +( % 6 !%) " X %%? " V #%< " Y &%? " V #%< " * *}/D/M %J !J  77==++ I&  D 6 !)D JK K 6 !"&&*>*>22rwwy7QR22rwwrwwWYW]W]^kWlGm7no CLL))"dii*@*4*=*?*2 4 !D  KK  J K  !!))*5J "  57M 6t{{&F07FCLF*4F"22OPQ Q R@!CKK$$&BCC B! 6115 5 6sm?5UU+U?8VW U('U(+ U<;U<?V&WW WW W W;* W66W;c ^RIHpRpVPV4'g%VPP RV,4R#Rp\ VR4pVFVpVP R4'gKVP4P4R,uVeVP4## VeVP4TPP RT,4R# TeTP4ii;i) z5Grab the nameserver IP address from /etc/resolv.conf.)rz/etc/resolv.confzFailed to locate %sNr nameserverzNo nameserver found in %s) rrisfilerwarningopen startswithstriprr)rr RESOLV_CONFhandlelines& rKr'cmd_domain_provision._get_nameserver_ipqs( {{;'' KK   5 C D +s+F|44zz|))+B//! "  !  7+EF! "sAC'-C''C>c \V\4'dVPR4p\V4\8dR\,#\ P !V4'gR#R#)zLReturns error string for a bad administrator password, or None if acceptableutf8zdAdministrator password does not meet the default minimum password length requirement (%d characters)zBAdministrator password does not meet the default quality standardsN) isinstancebytesdecodelenrrcheck_password_quality)rris&&rKr%cmd_domain_provision._adminpass_issues] i ' '!((0I y>2 2?() )--i88%rN)r)r-BIND9_FLATFILE BIND9_DLZNONE)r3rRz member servermember standalone)200020032008r4rX)r4rrVrWrXr5)rUr4rVrWrX)rZnor9)__name__ __module__ __qualname____firstlineno____doc__synopsisoptions SambaOptionsVersionOptionstakes_optiongroupsr takes_options ntvfs_optionsextendrris_ntvfs_fileserver_builtr takes_argsrrr__static_attributes____classdictcell__) __classdict__s@rKrr4s H W))w-- _\Jz(0 2Xv7 9~He6 8}8V= ?h9 ;}8Z" ${;( *|(L( *xh # %}8Z> @~Hj? AX7KPE(  ) {:< >xh 1 3z** ,yx* ,yD FXv[t* , !/BW  " X}TN  h8HEd  |%D] _"[dp r|:kl{>MB ~H6K&j  M67 &&((12]+J d ##G`*DG.  rNr)(rrDrr samba.getoptgetoptr samba.authrsamba.auth_utilr samba.dcerpcr samba.dsdbrrrr r r r samba.netcmdr rrsamba.provisionrrrsamba.provision.commonrrr samba.samdbrrcommonrrrrNrKrsY2  %/!76PPDD1"Ga7arN