B %Q[$.@s$dZddlmZddlmZddlmZmZddlm Z ddl Z ddl m Z m Z mZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZmZm Z m!Z!m"Z"m#Z#m$Z$m%Z%m&Z&m'Z'm(Z(m)Z)m*Z*m+Z+m,Z,d d l-m.Z.m/Z/m0Z0dd l1m2Z2d d l3m4Z4d d l5m6Z6ddl7m8Z8m9Z9ddl:m;Z;mZ>m?Z?ddl@mAZAmBZBddlCmDZDmEZEddlFmGZGmHZHddlImJZJmKZKddlLmMZMmNZNddlOmPZPmQZQddlRmSZSmTZTddlUmVZVddlWmXZXddlYmZZZddl[m\Z\ddl]m^Z^ddl_m`Z`ddlambZbddlcmdZddd lemfZfdd!lgmhZhdd"limjZjdd#lkmlZldd$lmmnZnd d%lompZpd d&lqmrZrd d'lsmtZtmuZumvZvmwZwmxZxmyZymzZzm{Z{m|Z|m}Z}m~Z~mZmZdd(lmZmZmZmZmZdd)lmZmZmZmZmZmZmZdd*lmZe)e*e+e,gZeeeeee&e'egZd+d,Zd-d.ZGd/d0d0eZdS)1 )deepcopy)linesep)RLockLock)reduceN)! ANONYMOUSSIMPLESASL MODIFY_ADD MODIFY_DELETEMODIFY_REPLACEget_config_parameter DEREF_ALWAYSSUBTREEASYNCSYNC NO_ATTRIBUTESALL_ATTRIBUTESALL_OPERATIONAL_ATTRIBUTESMODIFY_INCREMENTLDIF ASYNC_STREAM RESTARTABLE ROUND_ROBINREUSABLEAUTO_BIND_NONEAUTO_BIND_TLS_BEFORE_BINDAUTO_BIND_TLS_AFTER_BINDAUTO_BIND_NO_TLS STRING_TYPESSEQUENCE_TYPES MOCK_SYNC MOCK_ASYNCNTLMEXTERNAL DIGEST_MD5GSSAPIPLAIN)RESULT_SUCCESSRESULT_COMPARE_TRUERESULT_COMPARE_FALSE)ExtendedOperationsRoot) ServerPool)Server)abandon_operationabandon_request_to_dict) add_operationadd_request_to_dict)bind_operationbind_request_to_dict)compare_operationcompare_request_to_dict)delete_operationdelete_request_to_dict)extended_operationextended_request_to_dict)modify_operationmodify_request_to_dict)modify_dn_operationmodify_dn_request_to_dict)search_operationsearch_request_to_dict)operation_to_ldifadd_ldif_header)sasl_digest_md5) sasl_external) sasl_plain) SyncStrategy)MockAsyncStrategy) AsyncStrategy)ReusableStrategy)RestartableStrategy)LdifProducerStrategy)MockSyncStrategy)AsyncStreamStrategy)unbind_operation)paged_search_control)ConnectionUsage)Tls) LDAPUnknownStrategyError LDAPBindError$LDAPUnknownAuthenticationMethodError"LDAPSASLMechanismNotSupportedErrorLDAPObjectClassErrorLDAPConnectionIsReadOnlyErrorLDAPChangeErrorLDAPExceptionErrorLDAPObjectErrorLDAPSocketReceiveErrorLDAPAttributeErrorLDAPInvalidValueErrorLDAPConfigurationError) escape_bytesprepare_for_streamcheck_json_dict format_json to_unicode)log log_enabledERRORBASICPROTOCOLEXTENDED#get_library_log_hide_sensitive_data)safe_dncCs~|r,t|dkr,t|ddt|dS|r\t|dkr\dt|ddt|dSyt|Stk rxdSXdS) Nrr:r*[z]:?)lenstr Exception)ZendpointruXC:\Users\HIRONO~1\AppData\Local\Temp\pip-install-6i93dh7p\ldap3\ldap3\core\connection.py_format_socket_endpointYs rwcCsp|rly |}Wntk r(d}YnXy |}Wntk rNd}YnXdt|dt|dSdS)N)NNNNzz ) getsocknamert getpeernamerw)socklocalremoterururv_format_socket_endpointses    r~c@seZdZdZddeddedddddddddddddddddddfddZdd Zd d Zd d Z ddZ e ddZ e j ddZ e ddZddZddZdEddZdFddZdGddZeeddddddddddf d d!ZdHd"d#ZdId$d%ZdJd&d'ZdKd(d)ZdLd*d+ZdMd,d-ZdNd.d/ZdOd0d1Zd2d3Zd4d5Z d6d7Z!dPd8d9Z"dQd;d<Z#dRd=d>Z$dSd?d@Z%e dAdBZ&dCdDZ'dS)T Connectiona Main ldap connection class. Controls, if used, must be a list of tuples. Each tuple must have 3 elements, the control OID, a boolean meaning if the control is critical, a value. If the boolean is set to True the server must honor the control or refuse the operation Mixing controls must be defined in controls specification (as per RFC 4511) :param server: the Server object to connect to :type server: Server, str :param user: the user name for simple authentication :type user: str :param password: the password for simple authentication :type password: str :param auto_bind: specify if the bind will be performed automatically when defining the Connection object :type auto_bind: int, can be one of AUTO_BIND_NONE, AUTO_BIND_NO_TLS, AUTO_BIND_TLS_BEFORE_BIND, AUTO_BIND_TLS_AFTER_BIND as specified in ldap3 :param version: LDAP version, default to 3 :type version: int :param authentication: type of authentication :type authentication: int, can be one of AUTH_ANONYMOUS, AUTH_SIMPLE or AUTH_SASL, as specified in ldap3 :param client_strategy: communication strategy used in the Connection :type client_strategy: can be one of STRATEGY_SYNC, STRATEGY_ASYNC_THREADED, STRATEGY_LDIF_PRODUCER, STRATEGY_SYNC_RESTARTABLE, STRATEGY_REUSABLE_THREADED as specified in ldap3 :param auto_referrals: specify if the connection object must automatically follow referrals :type auto_referrals: bool :param sasl_mechanism: mechanism for SASL authentication, can be one of 'EXTERNAL', 'DIGEST-MD5', 'GSSAPI', 'PLAIN' :type sasl_mechanism: str :param sasl_credentials: credentials for SASL mechanism :type sasl_credentials: tuple :param check_names: if True the library will check names of attributes and object classes against the schema. Also values found in entries will be formatted as indicated by the schema :type check_names: bool :param collect_usage: collect usage metrics in the usage attribute :type collect_usage: bool :param read_only: disable operations that modify data in the LDAP server :type read_only: bool :param lazy: open and bind the connection only when an actual operation is performed :type lazy: bool :param raise_exceptions: raise exceptions when operations are not successful, if False operations return False if not successful but not raise exceptions :type raise_exceptions: bool :param pool_name: pool name for pooled strategies :type pool_name: str :param pool_size: pool size for pooled strategies :type pool_size: int :param pool_lifetime: pool lifetime for pooled strategies :type pool_lifetime: int :param use_referral_cache: keep referral connections open and reuse them :type use_referral_cache: bool :param auto_escape: automatic escaping of filter values :param auto_encode: automatic encoding of attribute values :type use_referral_cache: bool NTFc Cstd}t|_|j|tkrJd|_ttr@ttd|j|t|j||_ ||_ ||_ |sn|j rnt |_ nL|szt|_ n@|t tttgkr||_ n(d|_ttrttd|j|t|j||_|rdnd|_d|_d|_d|_d|_d|_d|_d|_|dkr t|_n|dkrt|_n||_| |_| |_| r:tnd|_ d|_!d|_"d|_#||_$g|_%d|_&d|_'d|_(d|_)d|_*||_+|r|n||_,||_-||_.||_/d|_0| |_1||_2| rdnd|_3t4||_5g|_6||_7||_8||_9||_:||_;||_rt?|}t=|t@r*tA|tBddd}t=|tArX||_C|jCD||jCE||_Fn d|_C||_F|j tGkr|tH||_In|j tJkrtK||_In|j tLkrtM||_In|j tNkrtO||_In|j tPkrtQ||_Id|_+nr|j tRkrtS||_InZ|j tTkrtU||_InB|j tVkr*tW||_In*d|_ttrJttd|j|t|j|jIjX|_X|jIjY|_Y|jIjZ|_Z|jIj[|_[|jIj\|_\|jIj]s|^tt_rt`rtt_d |an tt_d |WdQRXdS) NDEFAULT_THREADED_POOL_NAMEz"unknown client connection strategyz %s for <%s>zunknown authentication methodTF)activeZexhaustzunknown strategyzinstantiated Connection: <%s>zinstantiated Connection: <%r>)brrconnection_lockCLIENT_STRATEGIES last_errorrgrhrfrT strategy_typeuserpasswordr authenticationr r r%rVversionauto_referralsrequestresponseresultbound listeningclosedr auto_bindr sasl_mechanismsasl_credentialsrR_usagesocket tls_startedsasl_in_progress read_only_context_state_deferred_open_deferred_bind_deferred_start_tls_bind_controls_executing_deferredlazy pool_name pool_size pool_lifetimepool_keepaliveZ starting_tls check_namesraise_exceptions auto_ranger.extend_entries fast_decoderreceive_timeoutempty_attributesuse_referral_cache auto_escape auto_encode isinstancer!r0r"r/r server_pool initializeZget_current_serverserverrrHstrategyrrJrrMrrLrrKr#rNr$rIrrOsendopen get_responsepost_send_single_responsepost_send_searchZ no_real_dsa do_auto_bindrirl!repr_with_sensitive_data_stripped)selfrrrrrrZclient_strategyrrrrrZ collect_usagerrrrrrrrZreturn_empty_attributesrrrrconf_default_pool_namerururv__init__s                                    zConnection.__init__cCs|jr|jtkrttr$ttd||jr6|jdd|jtkrN|jddnF|jt krr|j dd|jddn"|jt kr|jdd|j dd|j sd|j rd|j nd|_ ttrttd|j |t|j dS) Nz"performing automatic bind for <%s>F)read_server_infoTzautomatic bind not successfulz - z %s for <%s>)rrrgrirfrrr bindr start_tlsrrrrhrU)rrururvrKs$        zConnection.do_auto_bindc Cs|jrt|jnddt|j|jr(dnd|js4dn |jr>dnd|jrJdn |jrTd nd t|j |j shd n |j rrd nd |j r~dndt |dr|jjjnd|jrdndg }d|S)NNonezuser: rznot lazyunboundz deferred bindrrz deferred openrztls not startedzdeferred start_tlsz tls startedrz not listeningrz No strategyzinternal decoderzpyasn1 decoderz - )rrsrrrrrrr~rrrrhasattrr __class____name__rjoin)rsrururv__str___s   zConnection.__str__cCs`td}|jrd|}n d|}||jdkr4dnd|7}||jdkrPdnd|7}||jdkrldnd|7}||jdkrdnd|7}||jdkrdnd |7}||jdkrdnd |7}||j dkrdnd |7}||j dkrdnd |7}||j dkrdnd |7}||j dkr4dnd|7}||j dkrRdnd|j r`dnd7}||jdkrzdnd|7}||jdkrdnd|7}||jdkrdnd|7}||jdks|j|krdnd|7}||jdkrdnd|7}||jdkrdnd|7}||jdkr:dnd|7}||jdkrXdnd|jrfdnd7}||jdkrdnd|jrdnd7}||jdkrdnd|7}||jdkrdnd|jrdnd7}||jdkrdnd|jrdnd7}||jdkrdnd|jr$dnd7}||jdkr>dnd|jrLdnd7}|d 7}|S)!Nrz#Connection(server={0.server_pool!r}zConnection(server={0.server!r}rz, user={0.user!r}z, password={0.password!r}z, auto_bind={0.auto_bind!r}z, version={0.version!r}z%, authentication={0.authentication!r}z%, client_strategy={0.strategy_type!r}z%, auto_referrals={0.auto_referrals!r}z%, sasl_mechanism={0.sasl_mechanism!r}z), sasl_credentials={0.sasl_credentials!r}z, check_names={0.check_names!r}z, collect_usage=TrueFalsez, read_only={0.read_only!r}z, lazy={0.lazy!r}z), raise_exceptions={0.raise_exceptions!r}z, pool_name={0.pool_name!r}z, pool_size={0.pool_size!r}z#, pool_lifetime={0.pool_lifetime!r}z%, pool_keepalive={0.pool_keepalive!r}z, fast_decoder=z , auto_range=z', receive_timeout={0.receive_timeout!r}z, return_empty_attributes=z, auto_encode=z, auto_escape=z, use_referral_cache=))rrformatrrrrrrrrrrusagerrrrrrrrrrrrrr)rrrrururv__repr__ns>  (*((((((zConnection.__repr__c Cstd}|jrd|}n d|}||jdkr4dnd|7}||jdkrPdnddt|j7}||jdkrvdnd|7}||jdkrdnd |7}||jdkrdnd |7}||j dkrdnd |7}||j dkrdnd |7}||j dkrdnd |7}|j t krb||j dkr.dn.d|j d|j ddt|j d|j d7}n||j dkrtdnd|7}||jdkrdnd|7}||jdkrdn|jrdnd7}||jdkrdnd|7}||jdkrdnd|7}||jdkrdnd|7}||jdks6|j|kr:dnd|7}||jdkrXdnd|7}||jdkrvdnd|7}||jdkrdnd|7}||jdkrdn|jrdnd7}||jdkrdnd |jrd!nd7}||jdkrdnd"|7}||jdkrdn|jr(d#nd7}||jdkr@dnd$|jrNd!nd7}||jdkrhdnd%|jrvd!nd7}||jdkrdnd&|jrd!nd7}|d'7}|S)(Nrz#Connection(server={0.server_pool!r}zConnection(server={0.server!r}rz, user={0.user!r}z, password='{0}'z*z, auto_bind={0.auto_bind!r}z, version={0.version!r}z%, authentication={0.authentication!r}z%, client_strategy={0.strategy_type!r}z%, auto_referrals={0.auto_referrals!r}z%, sasl_mechanism={0.sasl_mechanism!r}z/, sasl_credentials=({0!r}, {1!r}, '{2}', {3!r})rr**rrz), sasl_credentials={0.sasl_credentials!r}z, check_names={0.check_names!r}z, collect_usage=Truerz, read_only={0.read_only!r}z, lazy={0.lazy!r}z), raise_exceptions={0.raise_exceptions!r}z, pool_name={0.pool_name!r}z, pool_size={0.pool_size!r}z#, pool_lifetime={0.pool_lifetime!r}z%, pool_keepalive={0.pool_keepalive!r}z, fast_decoder=Truez , auto_range=rz', receive_timeout={0.receive_timeout!r}z, return_empty_attributes=Truez, auto_encode=z, auto_escape=z, use_referral_cache=r)rrrrrrrrrrrrrr'rrrrrrrrrrrrrrrrr)rrrrururvrsB  & F$*$($(((z,Connection.repr_with_sensitive_data_strippedcCs|jjr|jSdS)zUsed by the LDIFProducer strategy to accumulate the ldif-change operations with a single LDIF header :return: reference to the response stream if defined in the strategy. N)r can_stream get_stream)rrururvstreamszConnection.streamc Cs*|j|jjr|j|WdQRXdS)N)rrrZ set_stream)rvaluerururvrscCs\|js dS|jjrV|jx$|jjjD]}|j|jj7_q(W|j|jjj7_|jS)zKUsage statistics for the connection. :return: Usage object N) rrpooledresetpoolworkers connectionrZterminated_usage)rZworkerrururvrs zConnection.usagec CsF|j6|j|j|jf|jr*||js8||SQRXdS)N)rrappendrrrr)rrururv __enter__szConnection.__enter__c Cs|jz|j\}}|s |js&|jrHy |Wntk rFYnX|sZ|jrZ||dk r|t t rxt t d||dSWdQRXdS)Nz %s for <%s>F) rrpoprrunbindr[rrrgrhrf)rexc_typeexc_valexc_tbZ context_boundZcontext_closedrururv__exit__s  zConnection.__exit__c CsTttrttd|d|_|j(|jrn|jsn|jjrD|j |d|_ ||_ d|_ ttrjttd|nd|_ d|_ |j r|jdd|jtkrttrttd||jjst|j|j|jd|jd }ttrttd t||||d ||}n |j |}n|jtkrttr0ttd ||jjst|j|j|j|j|jd }ttrrttd t||||d ||}n |j |}n@|jtkr|jtkrttrttd||jjs||}n |j |}n*d|_ttr ttd|j|t |jn|jt!kr|jr|jrt"|j#ddkrttr^ttd||jjst|$|}n |j |}n*d|_ttrttd|j|t%|jn*d|_ttrttd|j|t%|j|jj&s$|jjs$|jtt!fkr$|'|\}}ttrttd||nt|jj&rN|j(}ttrttd||nJ|jjsh|jtt!fkrn|}n*d|_ttrttd|j|t%|j|dkrd|_ nf|dkrd|_ nT|dkrd|_ nB|dt)krdnd|_ |j s|r|dr|js|d|_|r&|j r&|*g|_+ttrDttd|j |j SQRXdS)a%Bind to ldap Server with the authentication method and the user defined in the connection :param read_server_info: reads info from server :param controls: LDAP controls to send along with the bind operation :type controls: list of tuple :return: bool zstart BIND operation via <%s>NTzdeferring bind for <%s>F)rz"performing anonymous BIND for <%s>r)rz)anonymous BIND request <%s> sent via <%s> bindRequestzperforming simple BIND for <%s>z&simple BIND request <%s> sent via <%s>zperforming SASL BIND for <%s>z&requested SASL mechanism not supportedz %s for <%s>\rzperforming NTLM BIND for <%s>z)NTLM needs domain\username and a passwordzunknown authentication methodz-async BIND response id <%s> received via <%s>z$BIND response <%s> received via <%s>r descriptionz done BIND operation, result <%s>),rgrirfrrrrrrZ validate_bindrrrrrrr rjr5rrrr6rrr rr rSASL_AVAILABLE_MECHANISMS do_sasl_bindrhrWr%rrsplit do_ntlm_bindrVsyncrrr+refresh_server_infor)rrcontrolsrr_rrururvrs                      &        $           zConnection.bindc Csttrttd|d|_|j|r,||_|dk r:||_|sH|rHt|_|tt t t gkr`||_n0|dk rd|_tt rtt d|j|t |j|r||_|r||_|jjsy |||Stk rtdYqXn|jjdSWdQRXdS)Nz!start (RE)BIND operation via <%s>zunknown authentication methodz %s for <%s>z[Unable to rebind as a different user, furthermore the server abruptly closed the connectionT)rgrirfrrrrr rr r r%rhrVrrrrrr]rUrZ rebind_pool)rrrrrrrrrururvrebindcs8     zConnection.rebindc Csttrttd||jr$|jd|_|j|jrh|j sh|j sJ|j rh|j d|_ d|_ d|_ n8|jst}ttrttd||d|||j ttrttdddSQRXdS)zUnbind the connected user. Unbind implies closing session as per RFC4511 (4.3) :param controls: LDAP controls to send along with the bind operation zstart UNBIND operation via <%s>NFzUNBIND request sent via <%s> unbindRequestz"done UNBIND operation, result <%s>T)rgrirfrrZunbind_referral_cacherrrrrrcloserrrPrjr)rrrrururvrs(      zConnection.unbindrcCsddtdD}ttr&ttd||jrN|rNt|}ttrNttd|||j||slt g}n|t krzt g}t |t r|g}| rt |t r|tn| rt |tr|tf7}t | tr ttrttd| t| || dkrg} nt | } | t| | | |jr|jjr|jrx`|D]X}d|krJ|dd }n|}|jjr,||kr,||jjjkr,td |q,Wt|||||||||dkr|jn||j|jr|jjnd|jj|jd }ttrttd t||| |!d || }g|_"t |tr2|}ttrttd||n|j#ddkrTt$|d krTdnd}|s|j#dt%gkr|j&s|j#d|_&ttrxH|D]@}|ddkrttd||n|ddkrttd||qWttrttd||SQRXdS)a) Perform an ldap search: - If attributes is empty noRFC2696 with the specified size - If paged is 0 and cookie is present the search is abandoned on server attribute is returned - If attributes is ALL_ATTRIBUTES all attributes are returned - If paged_size is an int greater than 0 a simple paged search is tried as described in - Cookie is an opaque string received in the last paged search and must be used on the next paged search response - If lazy == True open and bind will be deferred until another LDAP operation is performed - If mssing_attributes == True then an attribute not returned by the server is set to None - If auto_escape is set it overrides the Connection auto_escape cSsg|] }|qSru)lower).0vrururv sz%Connection.search..ATTRIBUTES_EXCLUDED_FROM_CHECKzstart SEARCH operation via <%s>z;search base sanitized to <%s> for SEARCH operation via <%s>z>performing paged search for %d items with cookie <%s> for <%s>N;rzinvalid attribute type ) validatorrz!SEARCH request <%s> sent via <%s>Z searchRequestz/async SEARCH response id <%s> received via <%s>typeZ searchResDoneTFrrsearchResEntryz,SEARCH response entry <%s> received via <%s>Z searchResRefz0SEARCH response reference <%s> received via <%s>z"done SEARCH operation, result <%s>)'rrgrirfrrmrkr_fire_deferredrrrr!listrrtupleintrjrarQrschemarrattribute_typesr^rArrcustom_validatorrBrrrrrrr+r)rZ search_baseZ search_filterZ search_scopeZdereference_aliases attributesZ size_limitZ time_limitZ types_onlyZget_operational_attributesrZ paged_sizeZpaged_criticalityZ paged_cookier#conf_attributes_excluded_from_checkattribute_nameattribute_name_to_checkrr return_valueentryrururvsearchs         (    &      zConnection.searchc CsddtdD}ttr&ttd|d|_|jrPt|}ttrPttd|||jr|jj r|jrd|kr|| dd}n|}|jj j r| |kr||jj j krt d |t|trtd |j(|t||||j|jr|jj nd|jr|jjnd|jd }ttr&ttd t||||d ||}g|_t|trj|} ttrttd| |nn|jddkr|jdtkrdnd} | s|jdttgkr|js|jd|_ttrttd||ttrttd| | SQRXdS)z- Perform a compare operation cSsg|] }|qSru)r)rrrururvr+sz&Connection.compare..rz start COMPARE operation via <%s>Nz3dn sanitized to <%s> for COMPARE operation via <%s>rrzinvalid attribute type zvalue cannot be a sequence)rrz"COMPARE request <%s> sent via <%s>ZcompareRequestz0async COMPARE response id <%s> received via <%s>rZcompareResponserTFrz'COMPARE response <%s> received via <%s>z#done COMPARE operation, result <%s>)rrgrirfrrrmrkrrrrrr^rr"r_rrr7rrrjr8rrrrrr,r-) rdn attributerrrrrrrrururvcompare#sF $   6   ("    zConnection.comparec Cs@ddtdD}ddtdD}ttr8ttd|d|_t|}|jrjt|}ttrjttd|||j | g}|dkrg} nt |t rt |n|g} d } |rxJ|D]:} | d kr| } t || t rt || n|| g}PqWnt}| sd } d d|D}td d| |g|| <|| s^d|_ttrTttd|j|t|j|jr|jjr|jrx@|| D]4} | |kr| |jjjkrtdt| qWxV|D]N} d| kr| dd}n| }||kr||jjjkrtd|qWt|||j|jr,|jjnd|jr>|jjnd|jd}ttrfttdt|||| d||}g|_!t |t"t#fr|}ttrttd||nlttrttd|||j$ddkr|j$dt%krdnd}|s|j$dt%gkr|js|j$d|_ttr2ttd ||SQRXdS)!z Add dn to the DIT, object_class is None, a class name or a list of class names. Attributes is a dictionary in the form 'attr': 'val' or 'attr': ['val1', 'val2', ...] for multivalued attributes cSsg|] }|qSru)r)rrrururvresz"Connection.add..rcSsg|] }|qSru)r)rrrururvrfsZCLASSES_EXCLUDED_FROM_CHECKzstart ADD operation via <%s>Nz/dn sanitized to <%s> for ADD operation via <%s>rZ objectclassZ objectClasscSsg|] }t|qSru)re)r object_classrururvrscSs||kr||gS|S)Nru)xyrururvsz Connection.add..z"objectClass attribute is mandatoryz %s for <%s>zinvalid object class rrzinvalid attribute type )rrzADD request <%s> sent via <%s>Z addRequestz,async ADD response id <%s> received via <%s>z#ADD response <%s> received via <%s>rZ addResponserTFrzdone ADD operation, result <%s>)&rrgrirfrrrrmrkrrrr"rrdictrrhrXrrZobject_classesrsrrr^r3rrrjr4rrrr!rrr+)rr r rrrZ conf_classes_excluded_from_check _attributesZattr_object_classZparm_object_classZobject_class_attr_nameattrZobject_class_namerrrrrrururvaddYsx     $     8   (    zConnection.addc Cstttrttd|d|_|jr>t|}ttr>ttd|||j$||j r~d|_tt rttt d|j|t |jt |}tt rtt dt||||d||}g|_t|ttfr|}tt rtt d||njtt rtt d |||jd d kr |jd tkr d nd}|sP|jd tgkrP|jsP|jd|_ttrfttd||SQRXdS)zE Delete the entry identified by the DN from the DIB. zstart DELETE operation via <%s>Nz2dn sanitized to <%s> for DELETE operation via <%s>zconnection is read-onlyz %s for <%s>z!DELETE request <%s> sent via <%s>Z delRequestz/async DELETE response id <%s> received via <%s>z&DELETE response <%s> received via <%s>rZ delResponserTFrz"done DELETE operation, result <%s>)rgrirfrrrmrkrrrrhrYr9rjr:rrrrr!rrr+)rr rrrrrururvdeletes>   (    zConnection.deletec CsxddtdD}ttr&ttd|d|_|jrPt|}ttrPttd|||j| |j rd|_tt rtt d|j|t |jt |tsd |_tt rtt d|j|t|j|sd |_tt rtt d|j|t|jxX|D]N}|jrj|jjrj|jrjd |kr0|d d }n|}|jjjrj||krj||jjjkrjtd |||}t |tr|d ttttd dddgkrt|dkrd|_tt rtt d|j|t|j|g||<qxd|D]\}t|dks|d ttttd dddgkrd|_tt r6tt d|j|t|jqWqWt|||j|jrd|jjnd|jrv|jjnd|jd} ttrttdt | ||!|"d| |} g|_#t | t$t%fr| } ttrTttd| |nlttrttd| ||j&ddkr$|j&dt'kr$dnd} | sT|j&dt'gkrT|jsT|j&d|_ttrjttd| | SQRXdS)a7 Modify attributes of entry - changes is a dictionary in the form {'attribute1': change), 'attribute2': [change, change, ...], ...} - change is (operation, [value1, value2, ...]) - operation is 0 (MODIFY_ADD), 1 (MODIFY_DELETE), 2 (MODIFY_REPLACE), 3 (MODIFY_INCREMENT) cSsg|] }|qSru)r)rrrururvrsz%Connection.modify..rzstart MODIFY operation via <%s>Nz2dn sanitized to <%s> for MODIFY operation via <%s>zconnection is read-onlyz %s for <%s>zchanges must be a dictionaryzno changes in modify requestrrzinvalid attribute type r*rrzmalformed changezinvalid change list)rrz!MODIFY request <%s> sent via <%s>Z modifyRequestz/async MODIFY response id <%s> received via <%s>z&MODIFY response <%s> received via <%s>rZmodifyResponserTFrz"done MODIFY operation, result <%s>)(rrgrirfrrrmrkrrrrhrYrrrZrrrrrr^r"r r rrrrr=rrrjr>rrrr!rrr+) rr ZchangesrrrrZchangeZchange_operationrrrrururvmodifys~        * *    , 8   (    zConnection.modifyc Csttrttd|d|_|jr\t|}ttr>ttd||t|}ttr\ttd|||jf||j rd|_tt rtt d|j|t |j|r| |sd|_tt rtt d|j|t |jt||||}ttrttdt||||d ||}g|_t|ttfrD|}ttrttd ||nlttr\ttd |||jd d kr|jdtkrdnd}|s|jdtgkr|js|jd|_ttrttd||SQRXdS)z\ Modify DN of the entry or performs a move of the entry in the DIT. z"start MODIFY DN operation via <%s>Nz5dn sanitized to <%s> for MODIFY DN operation via <%s>z>relative dn sanitized to <%s> for MODIFY DN operation via <%s>zconnection is read-onlyz %s for <%s>z(DN cannot change while performing movingz$MODIFY DN request <%s> sent via <%s>Z modDNRequestz2async MODIFY DN response id <%s> received via <%s>z)MODIFY DN response <%s> received via <%s>rZ modDNResponserTFrz%done MODIFY DN operation, result <%s>)rgrirfrrrmrkrrrrhrY startswithrZr?rjr@rrrrr!rrr+) rr Z relative_dnZ delete_old_dnZ new_superiorrrrrrururv modify_dn6sN       (    zConnection.modify_dnc Csttrttd|d|_|j|d}|jjs>|dkr|jjrf||jjkrf|jj|ddksn|dkrt|}tt rtt dt ||| d||d|_ d|_ g|_d }nttrttd t||ttrttd ||SQRXdS) z? Abandon the operation indicated by message_id z start ABANDON operation via <%s>NFrr)abandonRequestrrz#ABANDON request: <%s> sent via <%s>rTz\cannot abandon a Bind, an Unbind or an Abandon operation or message ID %s not found via <%s>z#done ABANDON operation, result <%s>)rgrirfrrrrZ _outstandingr1rjr2rrrrrhrs)rZ message_idrrrrururvabandonos* 0 zConnection.abandonc Csttrttd|d|_|j|t|||d}ttrRttdt||| | d||}g|_ t |t r|}ttrttd||n`ttrttd|||jdd kr|jd tkrd nd }|s|jd tgkr|js|jd |_ttrttd||SQRXdS)z0 Performs an extended operation z!start EXTENDED operation via <%s>N) no_encodez#EXTENDED request <%s> sent via <%s>Z extendedReqz1async EXTENDED response id <%s> received via <%s>z(EXTENDED response <%s> received via <%s>rZ extendedResprTFrz$done EXTENDED operation, result <%s>)rgrirfrrrr;rjr<rrrrrrr+)rZ request_nameZ request_valuerrrrrrururvextendeds,  $   zConnection.extendedc Csttrttd||jd}|jjs2t|j_|jrd|jsdd|_ d|_ d}ttrttd|n:d|_ |jj |r|j j r|r|d}n |j j sd}ttrttd||SQRXdS)Nz"start START TLS operation via <%s>FTzdeferring START TLS for <%s>z%done START TLS operation, result <%s>)rgrirfrrtlsrSrrrrrrrr)rrrrururvrs,    zConnection.start_tlsc Csttrttd|d|_|jd}|jsd|_zf|jtkrJt||}nL|jt kr`t ||}n6|jt krddl m }|||}n|jdkrt||}Wdd|_Xttrttd||SQRXdS)Nz"start SASL BIND operation via <%s>Tr) sasl_gssapir)Fz%done SASL BIND operation, result <%s>)rgrirfrrrrr&rFr'rEr(Zprotocol.sasl.kerberosrrG)rrrrrururvrs*          zConnection.do_sasl_bindc Csttrttd|d|_|jd}|jsd|_ddlm}|j dd\}}||||j d}t |j d|}tt rtt d |||d ||}|jjs||\} }n|d }d |kr|d d  d} d| krt |j d|}tt rtt d|||d ||}|jjs4||\} }n$tt rPtt d|d ||d }|dtkrt |j d||d }tt rtt d|||d ||}|jjs||\} }n$tt rtt d|d ||d }nd}d|_ttrttd||SQRXdS)Nz"start NTLM BIND operation via <%s>Tr) NtlmClientrr*) user_namedomainrZSICILY_PACKAGE_DISCOVERYz3NTLM SICILY PACKAGE DISCOVERY request sent via <%s>rrZ server_credsasciirr%ZSICILY_NEGOTIATE_NTLMz+NTLM SICILY NEGOTIATE request sent via <%s>z5NTLM SICILY NEGOTIATE response <%s> received via <%s>rZSICILY_RESPONSE_NTLMz/NTLM SICILY RESPONSE NTLM request sent via <%s>z)NTLM BIND response <%s> received via <%s>Fz%done SASL NTLM operation, result <%s>)rgrirfrrrZ utils.ntlmrrrrr5rrjrrrrrdecoder+) rrrrZ domain_namerZ ntlm_clientrrrZsicily_packagesrururvrsX                 zConnection.do_ntlm_bindc Cs|jjsf|jP|jsZttr*ttd||j}|j}|j }|j |||_||_||_ WdQRXn ttrzttd||jj dS)Nzrefreshing server info for <%s>z)refreshing server info from pool for <%s>) rrrrrgrirfrrrrZget_info_from_serverr)rZprevious_responseZprevious_resultZprevious_entriesrururvr&s   zConnection.refresh_server_infoc Cs|j|dkr|j}t|trtd|||d}t|}|p>t}||}|r|dkr~tdgd}| t |||| t |||t t rt t d|||SdSQRXdS)NZsearchResponse) sort_orderr-z"building LDIF output <%s> for <%s>)rrrr"rCrDrrtellwriterbrgrirf) r search_resultZ all_base64Zline_separatorr#rZ ldif_linesZ ldif_outputheaderrururvresponse_to_ldif;s"   zConnection.response_to_ldifroc s>|j,|dkr|j}t|tr0t}g|d<x|D]ddkr8t} d| d<|r|stfdddD| d<ntd| d<|r|stfddd D| d <ntd | d <|d| q8Wttkrt|t j |d ||d t d d } t t rtt d| ||r,|| | SWdQRXdS)Nentriesrrr c3s*|]"}d|r|d|fVqdS)rNru)rkey)rrurv nsz.Connection.response_to_json..rc3s*|]"}d|r|d|fVqdS)zraw:attributesraw_attributesNru)rr+)rrurvr,tsr-rawT),z: ) ensure_ascii sort_keysindentcheck_circulardefault separatorsz"building JSON output <%s> for <%s>)rrrr"rrrsbytesrcjsondumpsrdrgrirfr&) rr.r'r2sortrZchecked_attributesZ include_emptyZ json_dictrZ json_outputru)rrvresponse_to_jsonUs6         zConnection.response_to_jsonc Csb|jR|jrTt|tr"t|d}ttr6ttd|||j |||d| WdQRXdS)Nzw+z!writing response to file for <%s>)r.r2r9) rrrr!rrgrirf writelinesr:r)rtargetr.r2r9rururvresponse_to_files   zConnection.response_to_filec Cs|j|jr|jsd|_ttr:ttd|j|j|j|zyJ|jrP|j dd|jrb|j dd|jrx|j d|j d|r| Wn:tk r}zttrttd||Wdd}~XYnXWdd|_XWdQRXdS)NTz?executing deferred (open: %s, start_tls: %s, bind: %s) for <%s>F)r)rrz %s for <%s>)rrrrgrirfrrrrrrrrr[rh)rZ read_infoerururvrs&    zConnection._fire_deferredcCs |jr|js||j|_|jS)N)rr _get_entries)rrururvr*szConnection.entriesc Cs|jddlm}m}g}x:|D]2}|ddkr$t|d}||kr$||q$W|jdddg}x.|D]&}x |D]} | |kr~Pq~W||qtWg} xj|D]b}||jj d } | t |7} | || |j j r||| |j d |j d |d n||| d d |d fqWg} x|D]}|ddkrt|d}x^| D].} || dkr@| d|} | | Pq@Wttrttd||tdt|qWWdQRX| S)Nr) ObjectDefReaderrrrcSs t| S)N)rr)r rururvrsz)Connection._get_entries..)r+)rbasefilter)rrrz&attribute set not found for %s in <%s>zattribute set not found for )rrr@rAsetkeysrr9rrrrrrZ _create_entryrgrhrfr\rs)rZsearch_responser@rAZ attr_setsrZ resp_attr_setZunique_attr_setsZattr_setZ unique_setZ object_defsZ object_defr*rrururvr?sF       @     zConnection._get_entries)TN)NNNNNTN)N)N)NNN)N)N)TNN)N)NNN)T)NFNNN)FNroTNTT)FroT)T)(r __module__ __qualname____doc__rrrrrrrpropertyrsetterrrrrrrrrrr rrrrrrrrrrr)r:r=rr*r?rurururvrus6 #&    t ( " h 4 W - X 6 !  :  +  r)rHcopyrosr threadingrr functoolsrr7rr r r r r rrrrrrrrrrrrrrrrrrr r!r"r#r$r%r&r'r(r)resultsr+r,r-rr.Zpoolingr/rr0Zoperation.abandonr1r2Z operation.addr3r4Zoperation.bindr5r6Zoperation.comparer7r8Zoperation.deleter9r:Zoperation.extendedr;r<Zoperation.modifyr=r>Zoperation.modifyDnr?r@Zoperation.searchrArBZprotocol.rfc2849rCrDZprotocol.sasl.digestMd5rEZprotocol.sasl.externalrFZprotocol.sasl.plainrGZ strategy.syncrHZstrategy.mockAsyncrIZstrategy.asynchronousrJZstrategy.reusablerKZstrategy.restartablerLZstrategy.ldifProducerrMZstrategy.mockSyncrNZstrategy.asyncStreamrOZoperation.unbindrPZprotocol.rfc2696rQrrRrrS exceptionsrTrUrVrWrXrYrZr[r\r]r^r_r`Z utils.convrarbrcrdreZ utils.logrfrgrhrirjrkrlZutils.dnrmrrrwr~objectrrurururvsl                     <$