B %Q[3@sdZddlmZmZmZddlmZddlmZdZ dZ dZ ddZ d$d d Z d d Zd%ddZddZd&ddZddZddZddZd'ddZd(ddZd)dd Zd!d"Zd#S)* ) hexdigits ascii_lettersdigits)SEQUENCE_TYPES)LDAPInvalidDnErrorc Cs|sdS|rdnd}|d\}}}|rH|r>||f}q~||f}n6|rj||d||}n||d||}|S)N =) partitionstrip) ava decompose remove_spacespace_around_equalspace attr_name_value componentrQC:\Users\HIRONO~1\AppData\Local\Temp\pip-install-6i93dh7p\ldap3\ldap3\utils\dn.py_add_ava%s  rFc Csg}d}d}x|D]~}|dkr$d}nd|r6|dkr6d}nR|dkr^|r^|t||||d}qn*|dkrd|kr|t||||d}q||7}qW|t|||||S) ac Convert an iterator to a list of dn parts if decompose=True return a list of tuple (one for each dn component) else return a list of strings if remove_space=True removes unneeded spaces if space_around_equal=True add spaces around equal in returned strings if separate_rdn=True consider multiple RDNs as different component of DN r F\Tr +,r )appendr) iteratorrrrZ separate_rdndnrZescape_sequencecrrrto_dn9s(    r"cCsBx<|||}|dkrP|dkr2||ddkr2P|d7}qW|S)Nrr r)find)r charposrrr_find_first_unescapedYs  r'cCsJxD||||}|dkrP|dkr4||ddkr4P||krd}PqW|S)Nr#rr r)rfind)r r%startstoprrr_find_last_unescapedfsr+cCst|dd}t|dd}|dkrj||ks0|dkrjt|d|d}||dkrjt|d||}|d|dfS|dkrt|d|d}||dkrt|d||}|d|dfS|dfS)Nrrrr#r r r )r'r+)r commaplusequalrrr _get_next_avaus    r/TcCs|d}x|dkr||ddkr|rj|d|}|rTt||ddn||dd}n4|d|}|rt||ddn||dd}||fS|d|d}q Wd|r|jn|fS)Nr rr rr )r$r_escape_attribute_value)rescaperr.attribute_typeattribute_valuerrr _split_avas  2 (r4cCs~|s td|dkrdSx4|D],}|tks|tks|dkstd|dqW|dtksf|ddkrztd|dddS) Nzattribute type not presentz pairsr z7SPACE not allowed as first character of attribute valuer#z6SPACE not allowed as last character of attribute valuerz "#+,;<=>zspecial characters z must be escapedz "#+,;<=>\zinvalid escaped character zinvalid final characterT)rrlen STATE_ANY STATE_ESCAPESTATE_ESCAPE_HEX)r3r!staterrr_validate_attribute_values@       r=cCs|sdS|ddkrTd}t|ddkr,d}|rLx|D]}|tkr6d}Pq6W|rT|St}d}d}x|D]}|tkr|dkrt}n|dkr|d|7}n||7}qf|tkr|tkr|}t}n&|d kr|d|7}t}n |d |7}qf|tkrf|tkr|d||7}n|d ||7}d}t}qfW|tkr6|d 7}n|tkrL|d |7}|dd krbd|}|d d krt|d kr|ddkr|dd d}|S)Nr rr7TrFrz "#+,;<=>z "#+,;<=>\z\\r r#r z\ )r8rr9r:r;)r3Z valid_hexr!r<escapedZ tmp_bufferrrrr0s\          *r0c Csg}g}x|rt|\}}|t|dd}t|dddksJt|dkrZ|||fq |t|dd|t|dd||f|t|d<q Wxl|D]d\}}t|||\}}t|std|t|std|||||f|t|dd}qW|std|S)Nr r rz%unable to validate attribute type in z&unable to validate attribute value in zempty dn)r/r8r'rr4r6rr=) r r1rZrdnsZavasr separatorr2r3rrrparse_dns& @  rAcCs.t|tr6dd|D}|r,dt|}n d|}|r@g}nd}|dr^|dr^|}nd|krd|krxt|d d D]F}|r||d |d |d fq|||d d|d |d 7}q|Wnbd|krd|krt| dd krt dn6d|kr&d|kr&t| dd kr&t dn|}|S)z normalize and escape a dn, if dn is a sequence it is joined. the reverse parameter changes the join direction of the sequence cSsg|]}|qSrr).0rdnrrr 6szsafe_dn..rr z@rT)r1rr rr z@Active Directory User Principal Name must consist of name@domainzDActive Directory Domain Level Logon Name must consist of name\domain) isinstancerjoinreversed startswithendswithrArr8splitr)r rreverse componentsZ escaped_dnrrrrsafe_dn0s*  &" ( rOcCsg}d}xrt|ddD]b}|ddks*|r|rF||d|dfn||dd|d|ddkrrd}qd}PqW|rtd t||S) ztReturns a list of rdn for the dn, usually there is only one rdn, but it can be more than one when the + sign is usedT)r1rrrr r Fzbad dn )rArrstr)r rZ escaped_rdnZone_morerrrrsafe_rdnRs rQcCsjxdD]}||d|}qW|ddks6|ddkrDdd|f}|ddkrfd|ddd f}|S) zK Escape rdn characters to prevent injection according to RFC 4514. ) rrr"s&     *=  "