o jB @shdZddlmZmZddlmZddlmZddlmZddl Z ddl m Z m Z m Z mZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,m-Z-m.Z.m/Z/m0Z0m1Z1d d l2m3Z3m4Z4m5Z5dd l6m7Z7d d l8m9Z9d d l:m;Z;ddlZ>ddl?m@Z@mAZAddlBmCZCmDZDddlEmFZFmGZGddlHmIZImJZJddlKmLZLmMZMddlNmOZOmPZPddlQmRZRmSZSddlTmUZUmVZVddlWmXZXmYZYddlZm[Z[ddl\m]Z]ddl^m_Z_ddl`maZaddlbmcZcddldmeZeddlfmgZgddlhmiZidd ljmkZkdd!llmmZmdd"lnmoZodd#lpmqZqdd$lrmsZsdd%ltmuZudd&lvmwZwd d'lxmyZyd d(lzm{Z{d d)l|m}Z}m~Z~mZmZmZmZmZmZmZmZmZmZmZmZdd*lmZmZmZmZmZdd+lmZmZmZmZmZmZmZdd,lmZdd-lmZe+e,e-e.gZee"e#eeeee(e)eg Zd.d/Zd0d1ZGd2d3d3eZdS)4 )deepcopycopy)linesep)RLock)reduceN)' ANONYMOUSSIMPLESASL MODIFY_ADD MODIFY_DELETEMODIFY_REPLACEget_config_parameter DEREF_ALWAYSSUBTREEASYNCSYNC NO_ATTRIBUTESALL_ATTRIBUTESALL_OPERATIONAL_ATTRIBUTESMODIFY_INCREMENTLDIF ASYNC_STREAM RESTARTABLE ROUND_ROBINREUSABLEAUTO_BIND_DEFAULTAUTO_BIND_NONEAUTO_BIND_TLS_BEFORE_BIND SAFE_SYNCSAFE_RESTARTABLEAUTO_BIND_TLS_AFTER_BINDAUTO_BIND_NO_TLS STRING_TYPESSEQUENCE_TYPES MOCK_SYNC MOCK_ASYNCNTLMEXTERNAL DIGEST_MD5GSSAPIPLAINDSASCHEMAALL)RESULT_SUCCESSRESULT_COMPARE_TRUERESULT_COMPARE_FALSE)ExtendedOperationsRoot) ServerPool)Server)abandon_operationabandon_request_to_dict) add_operationadd_request_to_dict)bind_operationbind_request_to_dict)compare_operationcompare_request_to_dict)delete_operationdelete_request_to_dict)extended_operationextended_request_to_dict)modify_operationmodify_request_to_dict)modify_dn_operationmodify_dn_request_to_dict)search_operationsearch_request_to_dict)operation_to_ldifadd_ldif_header)sasl_digest_md5) sasl_external) sasl_plain) SyncStrategy)SafeSyncStrategy)SafeRestartableStrategy)MockAsyncStrategy) AsyncStrategy)ReusableStrategy)RestartableStrategy)LdifProducerStrategy)MockSyncStrategy)AsyncStreamStrategy)unbind_operation)paged_search_control)ConnectionUsage)Tls)LDAPUnknownStrategyError LDAPBindError$LDAPUnknownAuthenticationMethodError"LDAPSASLMechanismNotSupportedErrorLDAPObjectClassErrorLDAPConnectionIsReadOnlyErrorLDAPChangeErrorLDAPExceptionErrorLDAPObjectErrorLDAPSocketReceiveErrorLDAPAttributeErrorLDAPInvalidValueErrorLDAPInvalidPortErrorLDAPStartTLSError) escape_bytesprepare_for_streamcheck_json_dict format_json to_unicode)log log_enabledERRORBASICPROTOCOLEXTENDED#get_library_log_hide_sensitive_data)safe_dn)check_port_and_port_listcCs||rt|dkrt|ddt|dS|r.t|dkr.dt|ddt|dSzt|WSty=YdSw) Nrr:r0[z]:?)lenstr Exception)endpointr/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/ldap3/core/connection.py_format_socket_endpoint_s   rcCsl|r4z|}Wn tyd}Ynwz|}Wn ty%d}Ynwdt|dt|dSdS)N)NNNNzz ) getsocknamer~ getpeernamer)socklocalremoterrr_format_socket_endpointsks    rc@seZdZdZddeddedddddddddddddddddddddddfddZdGdd Zd d Zd d Z ddZ ddZ e ddZ e jddZ e ddZddZddZ  dHddZ       dIddZ dJdd Zeedd!d!dddddddf d"d#Z dJd$d%Z   dKd&d'Z dJd(d)Z dJd*d+Z   dLd,d-Z dJd.d/Z   dKd0d1ZdMd2d3Zd4d5Z d6d7Z!d8d9Z"     dNd:d;Z#   <    dOd=d>Z$  < dPd?d@Z%dJdAdBZ&e dCdDZ'dEdFZ(dS)Q Connectiona Main ldap connection class. Controls, if used, must be a list of tuples. Each tuple must have 3 elements, the control OID, a boolean meaning if the control is critical, a value. If the boolean is set to True the server must honor the control or refuse the operation Mixing controls must be defined in controls specification (as per RFC 4511) :param server: the Server object to connect to :type server: Server, str :param user: the user name for simple authentication :type user: str :param password: the password for simple authentication :type password: str :param auto_bind: specify if the bind will be performed automatically when defining the Connection object :type auto_bind: int, can be one of AUTO_BIND_DEFAULT, AUTO_BIND_NONE, AUTO_BIND_NO_TLS, AUTO_BIND_TLS_BEFORE_BIND, AUTO_BIND_TLS_AFTER_BIND as specified in ldap3 :param version: LDAP version, default to 3 :type version: int :param authentication: type of authentication :type authentication: int, can be one of ANONYMOUS, SIMPLE or SASL, as specified in ldap3 :param client_strategy: communication strategy used in the Connection :type client_strategy: can be one of SYNC, ASYNC, LDIF, RESTARTABLE, REUSABLE as specified in ldap3 :param auto_referrals: specify if the connection object must automatically follow referrals :type auto_referrals: bool :param sasl_mechanism: mechanism for SASL authentication, can be one of 'EXTERNAL', 'DIGEST-MD5', 'GSSAPI', 'PLAIN' :type sasl_mechanism: str :param sasl_credentials: credentials for SASL mechanism :type sasl_credentials: tuple :param check_names: if True the library will check names of attributes and object classes against the schema. Also values found in entries will be formatted as indicated by the schema :type check_names: bool :param collect_usage: collect usage metrics in the usage attribute :type collect_usage: bool :param read_only: disable operations that modify data in the LDAP server :type read_only: bool :param lazy: open and bind the connection only when an actual operation is performed :type lazy: bool :param raise_exceptions: raise exceptions when operations are not successful, if False operations return False if not successful but not raise exceptions :type raise_exceptions: bool :param pool_name: pool name for pooled strategies :type pool_name: str :param pool_size: pool size for pooled strategies :type pool_size: int :param pool_lifetime: pool lifetime for pooled strategies :type pool_lifetime: int :param cred_store: credential store for gssapi :type cred_store: dict :param use_referral_cache: keep referral connections open and reuse them :type use_referral_cache: bool :param auto_escape: automatic escaping of filter values :type auto_escape: bool :param auto_encode: automatic encoding of attribute values :type auto_encode: bool :param source_address: the ip address or hostname to use as the source when opening the connection to the server :type source_address: str :param source_port: the source port to use when opening the connection to the server. Cannot be specified with source_port_list :type source_port: int :param source_port_list: a list of source ports to choose from when opening the connection to the server. Cannot be specified with source_port :type source_port_list: list NTFc!Cstd}t|_|jI|tvr%d|_ttr ttd|j|t|j||_ ||_ ||_ |s7|j r7t |_ n&|s=t|_ n |t tttfvrI||_ nd|_ttrXttd|j|t|j||_|rddnd|_d|_d|_d|_d|_d|_d|_d|_|durt|_n |durt|_n||_| |_| |_| rtnd|_ d|_!d|_"d|_#||_$g|_%d|_&d|_'d|_(d|_)d|_*||_+|r|n||_,||_-||_.||_/||_0d|_1| |_2||_3| rdnd|_4t5||_6g|_7||_8||_9||_:||_;||_<||_=d|_>d|_?d|_@tA||} | rttrtt| tB| |dur!|nd|_Cdg|_D|dur2|g|_Dn |dur>|dd|_DtE|tFrHtG|}tE|tHrVtI|tJddd }tE|tIrm||_K|jKL||jKM||_Nnd|_K||_N|j tOkrtP||_Qn|j tRkrtS||_Qnx|j tTkrtU||_Qnl|j tVkrtW||_Qn`|j tXkrtY||_QnT|j tZkrt[||_QnH|j t\krt]||_Qd|_+n9|j t^krt_||_Qn-|j t`krta||_Qn!|j tbkrtc||_Qnd |_ttrttd|j|t|j|jQjd|_d|jQje|_e|jQjf|_f|jQjg|_g|jQjh|_h|jQjis%|jttkrEtlr7ttkd |mnttkd |WddSWddSWddS1sYwYdS) NDEFAULT_THREADED_POOL_NAMEz"unknown client connection strategy %s for <%s>unknown authentication methodTFr)activeexhaustzunknown strategyzinstantiated Connection: <%s>zinstantiated Connection: <%r>)nrrconnection_lockCLIENT_STRATEGIES last_errorrprqror\ strategy_typeuserpasswordr authenticationr r r(r^versionauto_referralsrequestresponseresultbound listeningclosedr auto_bindr#sasl_mechanismsasl_credentialsrZ_usagesocket tls_startedsasl_in_progress read_only_context_state_deferred_open_deferred_bind_deferred_start_tls_bind_controls_executing_deferredlazy pool_name pool_size cred_store pool_lifetimepool_keepalive starting_tls check_namesraise_exceptions auto_ranger4extend_entries fast_decoderreceive_timeoutempty_attributesuse_referral_cache auto_escape auto_encode_digest_md5_kic_digest_md5_kis_digest_md5_sec_numrwrhsource_addresssource_port_list isinstancer$r6r%r5r server_pool initializeget_current_serverserverrrNstrategyr rOr!rPrrRrrUrrTrrSr&rVr'rQrrWsendopen get_responsepost_send_single_responsepost_send_search no_real_dsa _do_auto_bindrrru!repr_with_sensitive_data_stripped)!selfrrrrrrclient_strategyrrrrr collect_usagerrrrrrrrrreturn_empty_attributesrrrrr source_portrconf_default_pool_nameport_errrrr__init__s                                             $zConnection.__init__cCsF|jjr!|j}d|_|j}d|_|t|j|rt|ndt|fS|SN)r thread_saferrrrr)rstatusr temp_response temp_requestrrr_prepare_return_valueus"z Connection._prepare_return_valuecCsd|jr|jttfvrttrttd||jr|jdd|jtkr)|j ddna|jt krZ|j ddr;|j ddnOd|j rDd|j nd}tt rRtt d|||t||jtkr|j dd|j ddsd |j rtd|j nd}tt rtt d|||t||jsd |j rd|j nd}tt rtt d|||t|dSdSdS) Nz"performing automatic bind for <%s>Fread_server_infoTz/automatic start_tls befored bind not successful - rrz-automatic start_tls after bind not successfulzautomatic bind not successful)rrrrprrrorrr#bindr start_tlsrrqunbindrir"rr])rerrorrrrr~s>        zConnection._do_auto_bindc Cs|jrt|jnddt|j|jrdnd|jsdn|jrdnd|jr%dn|jr*d nd t|j |j s4d n|j r9d nd |j r?dndt |drJ|jjjnd|jrPdndg }d|S)NNonezuser: rznot lazyunboundz deferred bindrrz deferred openrztls not startedzdeferred start_tlsz tls startedrz not listeningrz No strategyzinternal decoderzpyasn1 decoderr)rr}rrrrrrrrrrrhasattrr __class____name__rjoin)rsrrr__str__s     zConnection.__str__cCsntd}|jr d|}nd|}||jdurdnd|7}||jdur(dnd|7}||jdur6dnd|7}||jdurDdnd|7}||jdurRdnd |7}||jdur`dnd |7}||j durndnd |7}||j dur|dnd |7}||j durdnd |7}||j durdnd|7}||j durdnd|j rdnd7}||jdurdnd|7}||jdurdnd|7}||jdurdnd|7}||jdus|j|krdnd|7}||jdurdnd|7}||jdurdnd|7}||jdurdnd|7}||jdur"dndt|j7}||jdur3dn d|jr:dnd7}||jdurGdn d|jrNdnd7}||jdur[dnd|7}||jdurjdn d|jrqdnd7}||jdur~dn d|jrdnd7}||jdurdn d|jrdnd7}||jdurdn d |jrdnd7}|d!7}|S)"Nr#Connection(server={0.server_pool!r}Connection(server={0.server!r}r, user={0.user!r}z, password={0.password!r}, auto_bind={0.auto_bind!r}, version={0.version!r}%, authentication={0.authentication!r}%, client_strategy={0.strategy_type!r}%, auto_referrals={0.auto_referrals!r}%, sasl_mechanism={0.sasl_mechanism!r}), sasl_credentials={0.sasl_credentials!r}, check_names={0.check_names!r}z, collect_usage=TrueFalse, read_only={0.read_only!r}, lazy={0.lazy!r}), raise_exceptions={0.raise_exceptions!r}, pool_name={0.pool_name!r}, pool_size={0.pool_size!r}#, pool_lifetime={0.pool_lifetime!r}%, pool_keepalive={0.pool_keepalive!r} , cred_store=z, fast_decoder= , auto_range=', receive_timeout={0.receive_timeout!r}z, return_empty_attributes=, auto_encode=, auto_escape=, use_referral_cache=))rrformatrrrrrrrrrrusagerrrrrrrrreprrrrrrrrrrrrrr__repr__s@  $&"((((((zConnection.__repr__c Cstd}|jr d|}nd|}||jdurdnd|7}||jdur(dn ddt|j7}||jdur;dnd|7}||jdurIdnd |7}||jdurWdnd |7}||j durednd |7}||j dursdnd |7}||j durdnd |7}|j t kr||j durdnd|j d|j ddt|j d|j d7}n||j durdnd|7}||jdurdnd|7}||jdurdn|jrdnd7}||jdurdnd|7}||jdurdnd|7}||jdurdnd|7}||jdus|j|krdnd|7}||jdur"dnd|7}||jdur1dnd|7}||jdur@dnd|7}||jdurOdndt|j7}||jdur`dn|jrfd nd7}||jdurrdn d!|jryd"nd7}||jdurdnd#|7}||jdurdn|jrd$nd7}||jdurdn d%|jrd"nd7}||jdurdn d&|jrd"nd7}||jdurdn d'|jrd"nd7}|d(7}|S))Nrrrrrz, password='{0}'z*rrrrrrz/, sasl_credentials=({0!r}, {1!r}, '{2}', {3!r})rr0*rrrrz, collect_usage=Truerrrrrrrrrz, fast_decoder=Truerrrz, return_empty_attributes=Truerr r r ) rrr rrr|rrrrrrr*rrr rrrrrrrrrrrrrrrrrrrrrsD  & D *"$($(((z,Connection.repr_with_sensitive_data_strippedcCs|jjr |jSdS)zUsed by the LDIFProducer strategy to accumulate the ldif-change operations with a single LDIF header :return: reference to the response stream if defined in the strategy. N)r can_stream get_streamrrrrstreamszConnection.streamcCsP|j|jjr|j|WddSWddS1s!wYdSr)rrr set_stream)rvaluerrrrs "cCsX|jsdS|jjr)|j|jjjD] }|j|jj7_q|j|jjj7_|jS)zKUsage statistics for the connection. :return: Usage object N) rrpooledresetpoolworkers connectionr terminated_usage)rworkerrrrr s zConnection.usagecCs|j3|j|j|jf|jtkr-|jtkrt|_|jr"| |js-| s-t d|WdS1s9wYdS)Nzunable to bind) rrappendrrrrrr#rrr]rrrr __enter__s  $zConnection.__enter__c Cs|jI|j\}}|s|js|jr#z|Wn ty"Ynw|s,|jr,||durDt t r;t t d|| WddSWddS1sOwYdS)NrF) rrpoprrrrcrrrprqro)rexc_typeexc_valexc_tb context_boundcontext_closedrrr__exit__!s"    "zConnection.__exit__cCs\ttr ttd|d|_|j|jr7|js7|jjr"|j |d|_ ||_ d|_ ttr5ttd|nd|_ d|_ |j rF|jdd|jtkrttrUttd||jjs~t|j|j|jd|jd }ttrsttd t||||d ||}n|j |}n|jtkrttrttd ||jjst|j|j|j|j|jd }ttrttd t||||d ||}n|j |}n|jtkr|jtvrttrttd||jjs||}n{|j |}ntd|_ttrttd|j|t |j|jt!krI|jr4|jr4t"|j#ddkr4ttr"ttd||jjs-|$|}n1|j |}n*d|_ttrDttd|j|t%|jd|_ttrYttd|j|t%|j|jj&s|jjs|jtt!fvr|'|\}}ttrttd||n:|jj&r|j(}ttrttd||n%|jjs|jtt!fvr|}nd|_ttrttd|j|t%|j|durd|_ n3|durd|_ n*|durd|_ n!|dt)krdnd|_ |j s|r|dr|js|d|_|r|j r|*g|_+ttrttd|j |,|j |j(WdS1s'wYdS)a%Bind to ldap Server with the authentication method and the user defined in the connection :param read_server_info: reads info from server :param controls: LDAP controls to send along with the bind operation :type controls: list of tuple :return: bool zstart BIND operation via <%s>NTzdeferring bind for <%s>Frz"performing anonymous BIND for <%s>r)rz)anonymous BIND request <%s> sent via <%s> bindRequestzperforming simple BIND for <%s>z&simple BIND request <%s> sent via <%s>zperforming SASL BIND for <%s>z&requested SASL mechanism not supportedr\rzperforming NTLM BIND for <%s>z)NTLM needs domain\username and a passwordrz-async BIND response id <%s> received via <%s>z$BIND response <%s> received via <%s>r descriptionz done BIND operation, result <%s>)-rprrrorrrrrr validate_bindrrrrrrr rsr;rrrr<rrr rr rSASL_AVAILABLE_MECHANISMS do_sasl_bindrqr_r(r|split do_ntlm_bindr^syncrrr1refresh_server_inforr)rrcontrolsrr_rrrrr2s                &        $           &zConnection.bindc Cs<ttr ttd|d|_|j|r||_|dur||_|s$|r$t|_|tt t t fvr0||_n|durHd|_tt rCtt d|j|t |j|rM||_|rR||_|jjsz|||WWdStyd|_tt rztt d|j|t|jw|jj|d|jWdS1swYdS)Nz!start (RE)BIND operation via <%s>rrz[Unable to rebind as a different user, furthermore the server abruptly closed the connectionT)rprrrorrrrr rr r r(rqr^rrrrrrer]r rebind_poolrr)rrrrrrrr3rrrrebindsD       $zConnection.rebindcCsttr ttd||jr|jd|_|jN|jr4|j s4|j s%|j r4|j d|_ d|_ d|_ n|jsPt}ttrDttd||d|||j ttrZttdd|dWdS1siwYdS)zUnbind the connected user. Unbind implies closing session as per RFC4511 (4.3) :param controls: LDAP controls to send along with the bind operation zstart UNBIND operation via <%s>NFzUNBIND request sent via <%s> unbindRequestz"done UNBIND operation, result <%s>T)rprrrorrunbind_referral_cacherrrrrrcloserrrXrsrr)rr3rrrrrs*      $zConnection.unbindrcCs"ddtdD}ttrttd||jr'|r't|}ttr'ttd|||j[||s6t g}n|t kr=t g}t |t rE|g}| rRt |t rR|tn | r^t |tr^|tf7}t | trttrqttd| t| || durxg} nt | } | t| | | |jr|jjr|jr|D]7}d|vr|dd }n|}|jjr||vr||jjjvrd ||_ttrttd |j|t|jqt|||||||||dur|jn||j|jr|jjnd|jj |jd }ttrttd t!|||"|#d|| }g|_$t |tr|}ttrttd||nR|j%ddkr,t&|d kr,dnd}|sD|j%dt'fvrD|jsD|j%d|_ttrm|D]!}|ddkr]ttd||qK|ddkrkttd||qKttrxttd||j(|ddWdS1swYdS)a) Perform an ldap search: - If attributes is empty noRFC2696 with the specified size - If paged is 0 and cookie is present the search is abandoned on server attribute is returned - If attributes is ALL_ATTRIBUTES all attributes are returned - If paged_size is an int greater than 0 a simple paged search is tried as described in - Cookie is an opaque string received in the last paged search and must be used on the next paged search response - If lazy == True open and bind will be deferred until another LDAP operation is performed - If mssing_attributes == True then an attribute not returned by the server is set to None - If auto_escape is set it overrides the Connection auto_escape cSg|]}|qSrlower.0vrrr z%Connection.search..ATTRIBUTES_EXCLUDED_FROM_CHECKzstart SEARCH operation via <%s>z;search base sanitized to <%s> for SEARCH operation via <%s>z>performing paged search for %d items with cookie <%s> for <%s>N;rinvalid attribute type r validatorrz!SEARCH request <%s> sent via <%s> searchRequestz/async SEARCH response id <%s> received via <%s>type searchResDoneTFrr+searchResEntryz,SEARCH response entry <%s> received via <%s> searchResRefz0SEARCH response reference <%s> received via <%s>z"done SEARCH operation, result <%s>r))rrprrrorrvrtr_fire_deferredrrrr$listr rtupleintrsrjrYrschemar/r<attribute_typesrrqrfrGrrcustom_validatorrHrrrrr|r1r)r search_base search_filter search_scopedereference_aliases attributes size_limit time_limit types_onlyget_operational_attributesr3 paged_sizepaged_criticality paged_cookier#conf_attributes_excluded_from_checkattribute_nameattribute_name_to_checkrr return_valueentryrrrsearchs       "     &      &zConnection.searchc CsJddtdD}ttrttd|d|_|jr(t|}ttr(ttd|||jrh|jj rh|jrhd|vr>| dd}n|}|jj j rh| |vrh||jj j vrhd ||_tt rctt d |j|t|jt|trd |_tt r|tt d |j|t|j|j|t||||j|jr|jj nd|jr|jjnd|jd }ttrttd t||||d||}g|_t|tr|} ttrttd| |n2|jddkr|jdtkrdnd} | s|jdttfvr|js|jd|_ttrttd||ttrttd| | | WdS1swYdS)z- Perform a compare operation cSr:rr;r=rrrr@urAz&Connection.compare..rBz start COMPARE operation via <%s>Nz3dn sanitized to <%s> for COMPARE operation via <%s>rCrrDrzvalue cannot be a sequencerEz"COMPARE request <%s> sent via <%s>compareRequestz0async COMPARE response id <%s> received via <%s>rHcompareResponserTFr+z'COMPARE response <%s> received via <%s>z#done COMPARE operation, result <%s>)!rrprrrorrrvrtrrQr/rRr<rqrfrr%rgrrMr=rrSrsr>rrrrPrr2r3r) rdn attributerr3r`rbrrrcrrrcomparemsV $    6 $    &zConnection.comparec CsddtdD}ddtdD}ttrttd|d|_t|}|jr5t|}ttr5ttd|||j | g}|durGg} n t |t rPt |n|g} d } |ry|D]} | d krw| } t || t rpt || n|| g}nqYnt}| sd } d d|D}td d| |g|| <|| sd|_ttrttd|j|t|j|jr|jjr|jr|| D]'} | |vr| |jjjvrdt| |_ttrttd|j|t|jq|D]6} d| vr| dd}n| }||vr||jjjvrd||_ttrttd|j|t|jqt|||j|jr*|jjnd|jr3|jjnd|jd}ttrGttdt|||| d||}g|_!t |t"t#frl|}ttrkttd||n6ttrxttd|||j$ddkr|j$dt%krdnd}|s|j$dt%fvr|js|j$d|_ttrttd ||&|WdS1swYdS)!z Add dn to the DIT, object_class is None, a class name or a list of class names. Attributes is a dictionary in the form 'attr': 'val' or 'attr': ['val1', 'val2', ...] for multivalued attributes cSr:rr;r=rrrr@rAz"Connection.add..rBcSr:rr;r=rrrr@rACLASSES_EXCLUDED_FROM_CHECKzstart ADD operation via <%s>Nz/dn sanitized to <%s> for ADD operation via <%s>r objectclass objectClasscSsg|]}t|qSr)rn)r> object_classrrrr@rAcSs||vr ||gS|Srr)xyrrrsz Connection.add..z"objectClass attribute is mandatoryrzinvalid object class rCrrDrEzADD request <%s> sent via <%s> addRequestz,async ADD response id <%s> received via <%s>z#ADD response <%s> received via <%s>rH addResponserTFr+zdone ADD operation, result <%s>)'rrprrrorrrrvrtrrMrr%rNr<dictrrqr`rrQobject_classesr}r/rRrfr9rrSrsr:rrrr$rPrr1r)rrhrnrXr3r` conf_classes_excluded_from_check _attributesattr_object_classparm_object_classobject_class_attr_nameattrobject_class_namerarbrrrcrrradds    $      8   (    &zConnection.addcCsttr ttd|d|_|jrt|}ttrttd|||j||j r>d|_tt r9tt d|j|t |jt |}tt rOtt dt||||d||}g|_t|ttfrr|}tt rqtt d||n0tt r}tt d |||jd d kr|jd tkrd nd}|s|jd tfvr|js|jd|_ttrttd|||WdS1swYdS)zE Delete the entry identified by the DN from the DIB. zstart DELETE operation via <%s>Nz2dn sanitized to <%s> for DELETE operation via <%s>connection is read-onlyrz!DELETE request <%s> sent via <%s> delRequestz/async DELETE response id <%s> received via <%s>z&DELETE response <%s> received via <%s>rH delResponserTFr+z"done DELETE operation, result <%s>)rprrrorrrvrtrrMrrqrar?rsr@rrrrr$rPrr1r)rrhr3rrrcrrrdeletesB  $  $zConnection.deletec CsddtdD}ttrttd|d|_|jr(t|}ttr(ttd|||j| |j rHd|_tt rCtt d|j|t |jt |tsad |_tt r\tt d|j|t|j|swd |_tt rrtt d|j|t|jt}|D]}|jr|jjr|jrd |vr|d d }n|}|jjjr||vr||jjjvrd ||_tt rtt d|j|t|j||}t |tr|d ttttd dddfvrt|dkrd|_tt rtt d|j|t|j|g||<q||D]-} t| dks| d ttttd dddfvr$d|_tt rtt d|j|t|jq|||<q|t|||j|jr7|jjnd|jr@|jjnd|jd} ttrTttdt | ||!|"d| |} g|_#t | t$t%fry| } ttrxttd| |n6ttrttd| ||j&ddkr|j&dt'krdnd} | s|j&dt'fvr|js|j&d|_ttrttd| |(| WdS1swYdS)a7 Modify attributes of entry - changes is a dictionary in the form {'attribute1': change), 'attribute2': [change, change, ...], ...} - change is (operation, [value1, value2, ...]) - operation is 0 (MODIFY_ADD), 1 (MODIFY_DELETE), 2 (MODIFY_REPLACE), 3 (MODIFY_INCREMENT) cSr:rr;r=rrrr@?rAz%Connection.modify..rBzstart MODIFY operation via <%s>Nz2dn sanitized to <%s> for MODIFY operation via <%s>r~rzchanges must be a dictionaryzno changes in modify requestrCrrDr0rrzmalformed changezinvalid change listrEz!MODIFY request <%s> sent via <%s> modifyRequestz/async MODIFY response id <%s> received via <%s>z&MODIFY response <%s> received via <%s>rHmodifyResponserTFr+z"done MODIFY operation, result <%s>))rrprrrorrrvrtrrMrrqrarrtrbrrQr/rRr<rfr%r r rrr|rCrrSrsrDrrrr$rPrr1r) rrhchangesr3r` changelistrarbchangechange_operationrrrcrrrmodify4s       $  &   ,   8   (    &zConnection.modifyc Csttr ttd|d|_|jr.t|}ttrttd||t|}ttr.ttd|||j||j rMd|_tt rHtt d|j|t |jt ||||}tt ratt dt||||d||}g|_t|ttfr|}tt rtt d ||n0tt rtt d |||jd d kr|jd tkrdnd}|s|jd tfvr|js|jd|_ttrttd|||WdS1swYdS)z\ Modify DN of the entry or performs a move of the entry in the DIT. z"start MODIFY DN operation via <%s>Nz5dn sanitized to <%s> for MODIFY DN operation via <%s>z>relative dn sanitized to <%s> for MODIFY DN operation via <%s>r~rz$MODIFY DN request <%s> sent via <%s> modDNRequestz2async MODIFY DN response id <%s> received via <%s>z)MODIFY DN response <%s> received via <%s>rH modDNResponserTFr+z%done MODIFY DN operation, result <%s>)rprrrorrrvrtrrMrrqrarErsrFrrrrr$rPrr1r) rrh relative_dn delete_old_dn new_superiorr3rrrcrrr modify_dnsH  $  $zConnection.modify_dncCsttr ttd|d|_|jn|d}|jjs|dkrh|jjr3||jjvr3|jj|ddvs7|dkr[t|}tt rHtt dt ||| d||d|_ d|_ g|_d }n ttrhttd t||ttrrttd |||WdS1swYdS) z? Abandon the operation indicated by message_id z start ABANDON operation via <%s>NFrrH)abandonRequestr)r7z#ABANDON request: <%s> sent via <%s>rTz\cannot abandon a Bind, an Unbind or an Abandon operation or message ID %s not found via <%s>z#done ABANDON operation, result <%s>)rprrrorrrMr _outstandingr7rsr8rrrrrqr}r)r message_idr3rcrrrrabandons, 0 $zConnection.abandoncCs6ttr ttd|d|_|j|t|||d}ttr)ttdt||| | d||}g|_ t |t rI|}ttrHttd||n0ttrTttd|||jdd krd|jd tkrdd nd }|sy|jd tfvry|jsy|jd |_ttrttd||j|d dWdS1swYdS)z0 Performs an extended operation z!start EXTENDED operation via <%s>N) no_encodez#EXTENDED request <%s> sent via <%s> extendedReqz1async EXTENDED response id <%s> received via <%s>z(EXTENDED response <%s> received via <%s>rH extendedResprTFr+z$done EXTENDED operation, result <%s>rL)rprrrorrrMrArsrBrrrrrPrr1r)r request_name request_valuer3rrrrcrrrextendeds0  $   $zConnection.extendedcCsttr ttd||jbd}d|_|jjst|j_|jr5|j s5d|_ d|_ d}ttr4ttd|n$d|_ |j r?| |jj|rS|jjrS|rP|d}n|jjsYd}ttrcttd|||WdS1srwYdS)Nz"start START TLS operation via <%s>FTzdeferring START TLS for <%s>z%done START TLS operation, result <%s>)rprrrorrrtlsr[rrrrrrrrr1r2r)rrrcrrrr s6     $zConnection.start_tlsc Csttr ttd|d|_|jWd}|jsTd|_z6|jtkr%t||}n&|jt kr0t ||}n|jt krAddl m }|||}n |jdkrKt||}Wd|_nd|_wttr^ttd||WdS1sjwYdS)Nz"start SASL BIND operation via <%s>Tr) sasl_gssapir,Fz%done SASL BIND operation, result <%s>)rprrrorrrrr)rLr*rKr+protocol.sasl.kerberosrrM)rr3rrrrrr..s.           $zConnection.do_sasl_bindc Cs0ttr ttd|d|_|j|jsd|_zddlm}|j dd\}}||||j d}t |j d|}tt rAtt d |||d ||}|jjsW||\}} n|d } d | vr| d d  d} d| vrt |j d|}tt r~tt d|||d ||}|jjs||\}} ntt rtt d|d ||d } | dtkrt |j d|| d }tt rtt d|||d ||}|jjs||\}} ntt rtt d|d ||d } nd} Wd|_nd|_wttrttd| | WdSWddS1swYdS)Nz"start NTLM BIND operation via <%s>Tr) NtlmClientr*r0) user_namedomainrSICILY_PACKAGE_DISCOVERYz3NTLM SICILY PACKAGE DISCOVERY request sent via <%s>r)r server_credsasciirCr(SICILY_NEGOTIATE_NTLMz+NTLM SICILY NEGOTIATE request sent via <%s>z5NTLM SICILY NEGOTIATE response <%s> received via <%s>rSICILY_RESPONSE_NTLMz/NTLM SICILY RESPONSE NTLM request sent via <%s>z)NTLM BIND response <%s> received via <%s>Fz%done SASL NTLM operation, result <%s>)rprrrorrr utils.ntlmrrr/rr;rrsrrrr1rdecoder1) rr3r domain_namer ntlm_clientrrr4rsicily_packagesrrrr0Jsj         $zConnection.do_ntlm_bindcCs|jjsG|j6|js5ttrttd||j}|j}|j }|j |||_||_||_ WddSWddS1s@wYdSttrQttd||jj dS)Nzrefreshing server info for <%s>z)refreshing server info from pool for <%s>) rrrrrprrrorrrrget_info_from_serverr)rprevious_responseprevious_resultprevious_entriesrrrr2s$  " zConnection.refresh_server_infoc Cs|jd|dur |j}t|tr^td|||d}t|}|pt}||}|rJ|dkr?tdgd}| t |||| t |||t t rUt t d|||WdS WddS1sjwYdS)NsearchResponse) sort_orderr-z"building LDIF output <%s> for <%s>)rrrr%rIrJrrtellwriterkrprrro) r search_result all_base64line_separatorrr ldif_lines ldif_outputheaderrrrresponse_to_ldifs&   $zConnection.response_to_ldifryc sV|j|dur |j}t|trt}g|d<|D]Pddkrit} d| d<|rF|s>tfdddD| d<ntd| d<|rb|sZtfddd D| d <ntd | d <|d| qtturrt|t j |d ||d t d d } t t rtt d| ||r|| | WdSWddS1swYdS)NentriesrHrJrhc3s,|]}d|r|d|fVqdS)rXNrr>keyrLrr *z.Connection.response_to_json..rXc3s,|]}d|r|d|fVqdS)zraw:attributesraw_attributesNrrrLrrrrrrawT),z: ) ensure_ascii sort_keysindentcheck_circulardefault separatorsz"building JSON output <%s> for <%s>)rrrr%rtr r}bytesrljsondumpsrmrprrror) rrrrsortrchecked_attributes include_empty json_dictrd json_outputrrLrresponse_to_jsons>       "zConnection.response_to_jsoncCs|j7|jr2t|trt|d}ttrttd|||j |||d| WddSWddS1s=wYdS)Nzw+z!writing response to file for <%s>)rrr) rrrr$rrprrro writelinesrr9)rtargetrrrrrrresponse_to_files    "zConnection.response_to_filec Cs|j|jr|jsd|_ttrttd|j|j|j|z~z`|jr(|j dd|jrP|j ddsPd|j r:d|j nd}tt rHtt d||| t||jr[|jd|jd |durk|jjsk|jjttfvsy|jjsw|jjttfvsy|r}|Wnty}z tt rtt d||d}~wwWd|_nd|_wWddSWddSWddS1swYdS) NTz?executing deferred (open: %s, start_tls: %s, bind: %s) for <%s>Frz!deferred start_tls not successfulrrr)rr3)rrrrprrrorrrrrrrqrrirrrinfoget_infor-r/rQr.r2rc)r read_inforerrrrMsD   <"zConnection._fire_deferredcCs$|jr|js||j|j|_|jSr)rr _get_entriesrrrrrrszConnection.entriesc Cs|jddlm}m}g}|D]}|ddkr)t|d}||vr)||q|jdddg}|D]} |D]} | | krBnq:|| q6g} |D]/} ||jj d } | t | 7} | | | |j j rq||| |d |d | d n||| d d | d fqMg} |D]@}|ddkrt|d}| D]} || dkr| d |}| |nqdt||_ttrtt|j|t|jqWd| S1swY| S)Nr) ObjectDefReaderrHrJrXcSs t| Sr)r|)rorrrrq%s z)Connection._get_entries..)r)rQbasefilter)rXrrzattribute set not found for )rrrrsetkeysr rrrQrNrr1 _create_entryr}rrprqrord)rsearch_responsesearch_requestrr attr_setsr resp_attr_setunique_attr_setsattr_set unique_set object_defs object_defrrdrrrrs\    2     **zConnection._get_entries)F)TN)NNNNNTNr)NNN)TNN)T)NFNNN)FNryTNTT)FryT))r __module__ __qualname____doc__rrrrrrrrpropertyrsetterr r!r(rr6rrrrerjr}rrrrrrr.r0r2rrrrMrrrrrrrzsA  <  $'     v 2 # y > a / ` ; # "!=  2   r)rrrosr threadingr functoolsrrrr r r r r rrrrrrrrrrrrrrrrrrr r!r"r#r$r%r&r'r(r)r*r+r,r-r.r/resultsr1r2r3rr4poolingr5rr6operation.abandonr7r8 operation.addr9r:operation.bindr;r<operation.comparer=r>operation.deleter?r@operation.extendedrArBoperation.modifyrCrDoperation.modifyDnrErFoperation.searchrGrHprotocol.rfc2849rIrJprotocol.sasl.digestMd5rKprotocol.sasl.externalrLprotocol.sasl.plainrM strategy.syncrNstrategy.safeSyncrOstrategy.safeRestartablerPstrategy.mockAsyncrQstrategy.asynchronousrRstrategy.reusablerSstrategy.restartablerTstrategy.ldifProducerrUstrategy.mockSyncrVstrategy.asyncStreamrWoperation.unbindrXprotocol.rfc2696rYr rZrr[ exceptionsr\r]r^r_r`rarbrcrdrerfrgrhri utils.convrjrkrlrmrn utils.logrorprqrrrsrtruutils.dnrvutils.port_validatorsrwr-rrrobjectrrrrrs|                       @$