OXIESEC PANEL

Name	Size	Modified	Perms
📁 ..	-	07/15/2022 06:13:39 AM	rwxr-xr-x
📄 __init__.py	12.92 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 __init__.pyc	13.1 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 _glue.x86_64-linux-gnu.so	14.3 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 _ldb.x86_64-linux-gnu.so	45.16 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 auth.x86_64-linux-gnu.so	40.55 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 common.py	3.61 KB	02/07/2018 08:37:51 AM	rw-r--r--
📄 common.pyc	3.61 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 compat.py	834 bytes	07/04/2017 10:05:25 AM	rw-r--r--
📄 compat.pyc	284 bytes	02/03/2022 06:37:40 AM	rw-r--r--
📄 credentials.x86_64-linux-gnu.so	32.02 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 crypto.x86_64-linux-gnu.so	45.93 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 dbchecker.py	114.77 KB	02/07/2018 08:37:51 AM	rw-r--r--
📄 dbchecker.pyc	74.47 KB	02/03/2022 06:37:40 AM	rw-r--r--
📁 dcerpc	-	02/03/2022 06:37:40 AM	rwxr-xr-x
📄 descriptor.py	26.63 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 descriptor.pyc	23.43 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 dnsserver.py	5.98 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 dnsserver.pyc	6.65 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 drs_utils.py	13.17 KB	09/17/2017 07:15:34 PM	rw-r--r--
📄 drs_utils.pyc	11.17 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 dsdb.x86_64-linux-gnu.so	42.9 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 dsdb_dns.x86_64-linux-gnu.so	14.02 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 gensec.x86_64-linux-gnu.so	26.99 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 getopt.py	10.87 KB	09/17/2017 07:15:34 PM	rw-r--r--
📄 getopt.pyc	11.77 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 hostconfig.py	2.29 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 hostconfig.pyc	3.26 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 idmap.py	3.18 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 idmap.pyc	3.07 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 join.py	67.78 KB	09/17/2017 07:15:34 PM	rw-r--r--
📄 join.pyc	47 KB	02/03/2022 06:37:40 AM	rw-r--r--
📁 kcc	-	02/03/2022 06:37:40 AM	rwxr-xr-x
📄 messaging.x86_64-linux-gnu.so	18.65 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 ms_display_specifiers.py	4.58 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 ms_display_specifiers.pyc	3.61 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 ms_schema.py	8.1 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 ms_schema.pyc	6.97 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 ndr.py	4.76 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 ndr.pyc	4.65 KB	02/03/2022 06:37:40 AM	rw-r--r--
📄 net.x86_64-linux-gnu.so	26.62 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 netbios.x86_64-linux-gnu.so	14.46 KB	01/25/2022 03:20:03 PM	rw-r--r--
📁 netcmd	-	02/03/2022 06:37:41 AM	rwxr-xr-x
📄 ntacls.py	10.4 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 ntacls.pyc	6.91 KB	02/03/2022 06:37:41 AM	rw-r--r--
📄 ntstatus.x86_64-linux-gnu.so	117.69 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 param.x86_64-linux-gnu.so	23.52 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 policy.x86_64-linux-gnu.so	9.99 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 posix_eadb.x86_64-linux-gnu.so	9.99 KB	01/25/2022 03:20:03 PM	rw-r--r--
📁 provision	-	02/03/2022 06:37:41 AM	rwxr-xr-x
📄 registry.x86_64-linux-gnu.so	19.62 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 remove_dc.py	17.3 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 remove_dc.pyc	11.45 KB	02/03/2022 06:37:41 AM	rw-r--r--
📁 samba3	-	02/03/2022 06:37:41 AM	rwxr-xr-x
📄 samdb.py	36.89 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 samdb.pyc	34.62 KB	02/03/2022 06:37:41 AM	rw-r--r--
📄 schema.py	8.16 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 schema.pyc	6.84 KB	02/03/2022 06:37:41 AM	rw-r--r--
📄 sd_utils.py	3.24 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 sd_utils.pyc	3.12 KB	02/03/2022 06:37:41 AM	rw-r--r--
📄 security.x86_64-linux-gnu.so	9.93 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 sites.py	3.94 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 sites.pyc	4.24 KB	02/03/2022 06:37:41 AM	rw-r--r--
📄 smb.x86_64-linux-gnu.so	22.63 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 subnets.py	6.76 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 subnets.pyc	5.95 KB	02/03/2022 06:37:41 AM	rw-r--r--
📁 subunit	-	02/03/2022 06:37:41 AM	rwxr-xr-x
📄 tdb_util.py	1.46 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 tdb_util.pyc	989 bytes	02/03/2022 06:37:41 AM	rw-r--r--
📁 tests	-	02/03/2022 06:37:41 AM	rwxr-xr-x
📁 third_party	-	02/03/2022 06:37:41 AM	rwxr-xr-x
📄 upgrade.py	33.68 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 upgrade.pyc	24.59 KB	02/03/2022 06:37:41 AM	rw-r--r--
📄 upgradehelpers.py	31.83 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 upgradehelpers.pyc	26.92 KB	02/03/2022 06:37:41 AM	rw-r--r--
📁 web_server	-	02/03/2022 06:37:41 AM	rwxr-xr-x
📄 werror.x86_64-linux-gnu.so	153.69 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 xattr.py	2.22 KB	07/04/2017 10:05:25 AM	rw-r--r--
📄 xattr.pyc	1.57 KB	02/03/2022 06:37:41 AM	rw-r--r--
📄 xattr_native.x86_64-linux-gnu.so	9.99 KB	01/25/2022 03:20:03 PM	rw-r--r--
📄 xattr_tdb.x86_64-linux-gnu.so	9.99 KB	01/25/2022 03:20:03 PM	rw-r--r--

Editing: schema.py

#
# Unix SMB/CIFS implementation.
# backend code for provisioning a Samba4 server
#
# Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2007-2008
# Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008-2009
# Copyright (C) Oliver Liebel <oliver@itc.li> 2008-2009
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 3 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program.  If not, see <http://www.gnu.org/licenses/>.
#

"""Functions for setting up a Samba Schema."""

from base64 import b64encode
from samba import read_and_sub_file, substitute_var, check_all_substituted
from samba.dcerpc import security
from samba.ms_schema import read_ms_schema
from samba.ndr import ndr_pack
from samba.samdb import SamDB
from samba import dsdb
from ldb import SCOPE_SUBTREE, SCOPE_ONELEVEL
import os

def get_schema_descriptor(domain_sid, name_map={}):
    sddl = "O:SAG:SAD:AI(OA;;CR;e12b56b6-0a95-11d1-adbb-00c04fd8d5cd;;SA)" \
           "(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ED)" \
           "(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;ED)" \
           "(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;ED)" \
           "(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;BA)" \
           "(OA;;CR;1131f6ab-9c07-11d1-f79f-00c04fc2dcd2;;BA)" \
           "(OA;;CR;1131f6ac-9c07-11d1-f79f-00c04fc2dcd2;;BA)" \
           "(A;CI;RPLCLORC;;;AU)" \
           "(A;CI;RPWPCRCCLCLORCWOWDSW;;;SA)" \
           "(A;CI;RPWPCRCCDCLCLORCWOWDSDDTSW;;;SY)" \
           "(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ED)" \
           "(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;ED)" \
           "(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;BA)" \
           "(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;BA)" \
           "(OA;;CR;1131f6aa-9c07-11d1-f79f-00c04fc2dcd2;;ER)" \
           "(OA;;CR;1131f6ad-9c07-11d1-f79f-00c04fc2dcd2;;ER)" \
           "(OA;;CR;89e95b76-444d-4c62-991a-0facbeda640c;;ER)" \
           "S:(AU;SA;WPCCDCWOWDSDDTSW;;;WD)" \
           "(AU;CISA;WP;;;WD)" \
           "(AU;SA;CR;;;BA)" \
           "(AU;SA;CR;;;DU)" \
           "(OU;SA;CR;e12b56b6-0a95-11d1-adbb-00c04fd8d5cd;;WD)" \
           "(OU;SA;CR;45ec5156-db7e-47bb-b53f-dbeb2d03c40f;;WD)"
    sec = security.descriptor.from_sddl(sddl, domain_sid)
    return ndr_pack(sec)

class Schema(object):

def __init__(self, domain_sid, invocationid=None, schemadn=None,
                 files=None, override_prefixmap=None, additional_prefixmap=None):
        from samba.provision import setup_path

"""Load schema for the SamDB from the AD schema files and
        samba4_schema.ldif

:param samdb: Load a schema into a SamDB.
        :param schemadn: DN of the schema

Returns the schema data loaded, to avoid double-parsing when then
        needing to add it to the db
        """

self.schemadn = schemadn
        # We need to have the am_rodc=False just to keep some warnings quiet -
        # this isn't a real SAM, so it's meaningless.
        self.ldb = SamDB(global_schema=False, am_rodc=False)
        if invocationid is not None:
            self.ldb.set_invocation_id(invocationid)

self.schema_data = read_ms_schema(
            setup_path('ad-schema/MS-AD_Schema_2K8_R2_Attributes.txt'),
            setup_path('ad-schema/MS-AD_Schema_2K8_R2_Classes.txt'))

if files is not None:
            for file in files:
                self.schema_data += open(file, 'r').read()

self.schema_data = substitute_var(self.schema_data,
            {"SCHEMADN": schemadn})
        check_all_substituted(self.schema_data)

self.schema_dn_modify = read_and_sub_file(
            setup_path("provision_schema_basedn_modify.ldif"),
            {"SCHEMADN": schemadn})

descr = b64encode(get_schema_descriptor(domain_sid))
        self.schema_dn_add = read_and_sub_file(
            setup_path("provision_schema_basedn.ldif"),
            {"SCHEMADN": schemadn, "DESCRIPTOR": descr})

if override_prefixmap is not None:
            self.prefixmap_data = override_prefixmap
        else:
            self.prefixmap_data = open(setup_path("prefixMap.txt"), 'r').read()

if additional_prefixmap is not None:
            for map in additional_prefixmap:
                self.prefixmap_data += "%s\n" % map

self.prefixmap_data = b64encode(self.prefixmap_data)

# We don't actually add this ldif, just parse it
        prefixmap_ldif = "dn: %s\nprefixMap:: %s\n\n" % (self.schemadn, self.prefixmap_data)
        self.set_from_ldif(prefixmap_ldif, self.schema_data, self.schemadn)

def set_from_ldif(self, pf, df, dn):
        dsdb._dsdb_set_schema_from_ldif(self.ldb, pf, df, dn)

def write_to_tmp_ldb(self, schemadb_path):
        self.ldb.connect(url=schemadb_path)
        self.ldb.transaction_start()
        try:
            self.ldb.add_ldif("""dn: @ATTRIBUTES
linkID: INTEGER

dn: @INDEXLIST
@IDXATTR: linkID
@IDXATTR: attributeSyntax
""")
            # These bits of LDIF are supplied when the Schema object is created
            self.ldb.add_ldif(self.schema_dn_add)
            self.ldb.modify_ldif(self.schema_dn_modify)
            self.ldb.add_ldif(self.schema_data)
        except:
            self.ldb.transaction_cancel()
            raise
        else:
            self.ldb.transaction_commit()

# Return a hash with the forward attribute as a key and the back as the
    # value
    def linked_attributes(self):
        return get_linked_attributes(self.schemadn, self.ldb)

def dnsyntax_attributes(self):
        return get_dnsyntax_attributes(self.schemadn, self.ldb)

def convert_to_openldap(self, target, mapping):
        return dsdb._dsdb_convert_schema_to_openldap(self.ldb, target, mapping)

# Return a hash with the forward attribute as a key and the back as the value
def get_linked_attributes(schemadn, schemaldb):
    attrs = ["linkID", "lDAPDisplayName"]
    res = schemaldb.search(
        expression="(&(linkID=*)"
                   "(!(linkID:1.2.840.113556.1.4.803:=1))"
                   "(objectclass=attributeSchema)"
                   "(attributeSyntax=2.5.5.1))",
        base=schemadn, scope=SCOPE_ONELEVEL, attrs=attrs)
    attributes = {}
    for i in range(0, len(res)):
        expression = ("(&(objectclass=attributeSchema)(linkID=%d)"
                      "(attributeSyntax=2.5.5.1))" %
                      (int(res[i]["linkID"][0])+1))
        target = schemaldb.searchone(basedn=schemadn,
                                     expression=expression,
                                     attribute="lDAPDisplayName",
                                     scope=SCOPE_SUBTREE)
        if target is not None:
            attributes[str(res[i]["lDAPDisplayName"])]=str(target)

return attributes

def get_dnsyntax_attributes(schemadn,schemaldb):
    res = schemaldb.search(
        expression="(&(!(linkID=*))(objectclass=attributeSchema)(attributeSyntax=2.5.5.1))",
        base=schemadn, scope=SCOPE_ONELEVEL,
        attrs=["linkID", "lDAPDisplayName"])
    attributes = []
    for i in range(0, len(res)):
        attributes.append(str(res[i]["lDAPDisplayName"]))
    return attributes

def ldb_with_schema(schemadn="cn=schema,cn=configuration,dc=example,dc=com",
                    domainsid=None,
                    override_prefixmap=None):
    """Load schema for the SamDB from the AD schema files and samba4_schema.ldif

:param schemadn: DN of the schema
    :param serverdn: DN of the server

Returns the schema data loaded as an object, with .ldb being a
    new ldb with the schema loaded.  This allows certain tests to
    operate without a remote or local schema.
    """

if domainsid is None:
        domainsid = security.random_sid()
    else:
        domainsid = security.dom_sid(domainsid)
    return Schema(domainsid, schemadn=schemadn,
        override_prefixmap=override_prefixmap)