You can not select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
140 lines
4.6 KiB
140 lines
4.6 KiB
#!/usr/bin/python2
|
|
# coding=utf-8
|
|
|
|
|
|
import ldb
|
|
from samba.samdb import SamDB
|
|
from samba.auth import system_session
|
|
# from samba.ndr import ndr_pack, ndr_unpack
|
|
# from samba.dcerpc import security
|
|
import samba.param
|
|
# import base64
|
|
# import binascii
|
|
|
|
base = "CN=Users,DC=techgrow,DC=local" # можно не заморачиваться с ОУ и тогда base = "CN=Users,DC=myDom,DC=lan"
|
|
domainName = 'techgrow.local'
|
|
|
|
|
|
class UserAd:
|
|
def __init__(self, sam, base, domainName, usrName, usrPass=''):
|
|
self.sam = sam
|
|
self.base = base
|
|
self.domainName = domainName
|
|
self.usrName = usrName
|
|
self.usrPass = usrPass
|
|
self.exists = self.chek_if_exists()
|
|
if not self.exists:
|
|
self.add()
|
|
self.memberOf = self.check_memberof()
|
|
|
|
def chek_if_exists(self):
|
|
expression = "(&(objectCategory=person)(objectClass=user)(sAMAccountName=%s))" % self.usrName
|
|
if len(self.sam.search(base=base, expression=expression, attrs=['sAMAccountName'])) > 0:
|
|
return True
|
|
else:
|
|
return False
|
|
|
|
def check_memberof(self):
|
|
expression = "(&(objectCategory=person)(objectClass=user)(sAMAccountName=%s))" % self.usrName
|
|
res = self.sam.search(base=base, expression=expression, attrs=['memberOf'])
|
|
groups = []
|
|
for k in res[0]['memberOf']:
|
|
groups.append(str(k).split(',')[0].split('=')[1])
|
|
return groups
|
|
|
|
def add(self):
|
|
ld = {'dn': 'CN=%s,%s' % (self.usrName, base),
|
|
"sAMAccountName": self.usrName,
|
|
"userPrincipalName": "%s@%s" % (self.usrName, self.domainName),
|
|
"objectClass": "user",
|
|
"displayName": self.usrName,
|
|
"description": self.usrName,
|
|
"homeDirectory": r"\\%s\users\%s" % ("dc01", self.usrName),
|
|
'scriptPath': "loginScr.cmd",
|
|
}
|
|
self.sam.transaction_start()
|
|
try:
|
|
self.sam.add(ld)
|
|
self.sam.setpassword("(samAccountName=%s)" % ldb.binary_encode(self.usrName), self.usrPass, False)
|
|
except Exception as exc:
|
|
self.sam.transaction_cancel()
|
|
return exc
|
|
else:
|
|
self.sam.transaction_commit()
|
|
self.chek_if_exists()
|
|
return False
|
|
|
|
def set_passwd(self):
|
|
self.sam.transaction_start()
|
|
try:
|
|
self.sam.setpassword("(samAccountName=%s)" % ldb.binary_encode(self.usrName), self.usrPass, False)
|
|
except Exception as exc:
|
|
self.sam.transaction_cancel()
|
|
return exc
|
|
else:
|
|
self.sam.transaction_commit()
|
|
return False
|
|
|
|
def add_in_group(self, grpName):
|
|
self.sam.transaction_start()
|
|
try:
|
|
self.sam.add_remove_group_members(grpName, [self.usrName], add_members_operation=True)
|
|
except Exception as exc:
|
|
self.sam.transaction_cancel()
|
|
return exc
|
|
else:
|
|
self.sam.transaction_commit()
|
|
self.memberOf = self.check_memberof()
|
|
return False
|
|
|
|
def remove_from_group(self, grpName):
|
|
self.sam.transaction_start()
|
|
try:
|
|
self.sam.add_remove_group_members(grpName, [self.usrName], add_members_operation=True)
|
|
except Exception as exc:
|
|
self.sam.transaction_cancel()
|
|
return exc
|
|
else:
|
|
self.sam.transaction_commit()
|
|
return False
|
|
|
|
def delete(self):
|
|
return False
|
|
|
|
def disable(self):
|
|
return False
|
|
|
|
|
|
def users_make_ad(sam, base):
|
|
expression = "(&(objectCategory=person)(objectClass=user))"
|
|
users = {}
|
|
res = sam.search(base=base, expression=expression, attrs=['*', 'userAccountControl'])
|
|
for i in res:
|
|
enabled = 0
|
|
if int(str(i['userAccountControl'])) & 2 == 0:
|
|
enabled = 1
|
|
memberOf = []
|
|
for k in i['memberOf']:
|
|
memberOf.append(str(k).split(',')[0].split('=')[1])
|
|
users[str(i['samAccountName'])] = {'samAccountName': str(i['samAccountName']),
|
|
'memberOf': memberOf,
|
|
'userAccountControl': int(str(i['userAccountControl'])),
|
|
'enabled': enabled}
|
|
return users
|
|
|
|
|
|
def main():
|
|
lp = samba.param.LoadParm()
|
|
lp.load(samba.param.default_path()) # или lp.load("/etc/samba/smb.conf")
|
|
sam = SamDB(lp=lp, session_info=system_session())
|
|
print(users_make_ad(sam, base))
|
|
test_usr = UserAd(sam, base, domainName, 'tst', "secret34daD")
|
|
print test_usr.memberOf
|
|
err = test_usr.set_passwd()
|
|
if err:
|
|
print err
|
|
|
|
|
|
if __name__ == '__main__':
|
|
main()
|
|
|