?DeHdZddlmZddlmZmZmZmZmZddl m Z m Z ddl m Z mZmZddlmZmZmZdgZGdd ejZGd d ejZGd d ejZGddejZGddeZGddejZGddejZGddeZeeej <GddejZ!GddeZ"e"ee"j <GddejZ#GddejZ$Gd d!ej%Z&Gd"d#ejZ'Gd$d%ej(Z)Gd&d'Z*Gd(dZ+d)S)*zz ldap.syncrepl - for implementing syncrepl consumer (see RFC 4533) See https://www.python-ldap.org/ for project details. )UUID)tag namedtypenamedvaluniv constraint)encoderdecoder) __version__ __author__ __license__)RequestControlResponseControlKNOWN_RESPONSE_CONTROLSSyncreplConsumerc4eZdZdZejddZdS)SyncUUIDz. syncUUID ::= OCTET STRING (SIZE(16)) N)__name__ __module__ __qualname____doc__rValueSizeConstraint subtypeSpec/./ldap/syncrepl.pyrrs.1*0R88KKKrrceZdZdZdS) SyncCookiez% syncCookie ::= OCTET STRING N)rrrrrrrrrsrrcpeZdZdZejddZejj e j ddzZ dS)SyncRequestModez mode ENUMERATED { -- 0 unused refreshOnly (1), -- 2 reserved refreshAndPersist (3) }, ) refreshOnly)refreshAndPersistr#r%N rrrrr NamedValues namedValuesr EnumeratedrrSingleValueConstraintrrrr!r!"sW'(& K/-0P 0PQRTU0V0VVKKKrr!c eZdZdZejejdeejde ej de j dZ dS)SyncRequestValuea: syncRequestValue ::= SEQUENCE { mode ENUMERATED { -- 0 unused refreshOnly (1), -- 2 reserved refreshAndPersist (3) }, cookie syncCookie OPTIONAL, reloadHint BOOLEAN DEFAULT FALSE } modecookie reloadHintFN)rrrrr NamedTypes NamedTyper!OptionalNamedTyperDefaultedNamedTyperBoolean componentTyperrrr,r,2s~  )I( FOO$5$566# #Hjjll;;$ $\<4<3F3FGGMMMrr,c$eZdZdZdZd dZdZdS) SyncRequestControlan The Sync Request Control is an LDAP Control [RFC4511] where the controlType is the object identifier 1.3.6.1.4.1.4203.1.9.1.1 and the controlValue, an OCTET STRING, contains a BER-encoded syncRequestValue. The criticality field is either TRUE or FALSE. [..] The Sync Request Control is only applicable to the SearchRequest Message. z1.3.6.1.4.1.4203.1.9.1.1r#Nr"Fc>||_||_||_||_dS)N) criticalityr.r-r/)selfr9r.r-r/s r__init__zSyncRequestControl.__init__Rs#&  $rc\t}|dt|j|j(|dt |j|jr-|dtj|jtj |S)Nr-r.r/) r,setComponentByNamer!r-r.rr/rr4r encode)r:rcvs rencodeControlValuez%SyncRequestControl.encodeControlValueXs   vty'A'ABBB ; "  " "8Z -D-D E E E ? P  " "<do1N1N O O O~c"""r)r#Nr"F)rrrr controlTyper;r@rrrr7r7FsH-K%%%% #####rr7cxeZdZdZejddddZejj e j dddd zZ d S) SyncStateOpz state ENUMERATED { present (0), add (1), modify (2), delete (3) }, )presentr)addr#)modify)deleter%rr#rGr%Nr&rrrrCrCbsc'(& K /-0P 0PQRTUWXZ[0\0\\KKKrrCc eZdZdZejejdeejdeej de Z dS)SyncStateValuea syncStateValue ::= SEQUENCE { state ENUMERATED { present (0), add (1), modify (2), delete (3) }, entryUUID syncUUID, cookie syncCookie OPTIONAL } state entryUUIDr.N) rrrrrr0r1rCrr2rr5rrrrJrJtsv  )I( G[[]]33 K44# #Hjjll;;MMMrrJc eZdZdZdZdZdZdS)SyncStateControlam The Sync State Control is an LDAP Control [RFC4511] where the controlType is the object identifier 1.3.6.1.4.1.4203.1.9.1.2 and the controlValue, an OCTET STRING, contains a BER-encoded SyncStateValue. The criticality is FALSE. [..] The Sync State Control is only applicable to SearchResultEntry and SearchResultReference Messages. z1.3.6.1.4.1.4203.1.9.1.2)rDrErFrHctj|t}|dd}t t |dd}|dd}|)|rt||_nd|_|j j t||_ t||_ dS)Nasn1SpecrrKrLbytesr.)r decoderJgetComponentByNamerrShasValuestrr. __class__opnamesintrKrL)r:encodedControlValuedrKuuidr.s rdecodeControlValuez#SyncStateControl.decodeControlValues N.9I9I J J J!''00%! 7 7 D DEEFFF1((22  &//"3"3 f++DKKDK^+CJJ7 TrN)rrrrrArYr^rrrrNrNs9-K4G # # # # #rrNc eZdZdZejejdeejde j dZ dS) SyncDoneValuez syncDoneValue ::= SEQUENCE { cookie syncCookie OPTIONAL, refreshDeletes BOOLEAN DEFAULT FALSE } r.refreshDeletesFN rrrrrr0r2rr3rr4r5rrrr`r`se )I(# #Hjjll;;$ $%5|t|E7J7JKKMMMrr`ceZdZdZdZdZdS)SyncDoneControlaT The Sync Done Control is an LDAP Control [RFC4511] where the controlType is the object identifier 1.3.6.1.4.1.4203.1.9.1.3 and the controlValue contains a BER-encoded syncDoneValue. The criticality is FALSE (and hence absent). [..] The Sync Done Control is only applicable to the SearchResultDone Message. z1.3.6.1.4.1.4203.1.9.1.3cxtj|t}|dd}|rt ||_nd|_|dd}|rt||_dSd|_dS)NrPrr.ra) r rTr`rUrVrWr.boolra)r:r[r\r.refresh_deletess rr^z"SyncDoneControl.decodeControlValues N. I I I1((22 ??   f++DKKDKA$112BCC  # # % % '"&"7"7D   "&D   rN)rrrrrAr^rrrrdrds4-K ' ' ' ' 'rrdc eZdZdZejejdeejde j dZ dS) RefreshDeletez refreshDelete [1] SEQUENCE { cookie syncCookie OPTIONAL, refreshDone BOOLEAN DEFAULT TRUE }, r. refreshDoneTNrbrrrririd )I(# #Hjjll;;$ $]LDL4F4FGGMMMrric eZdZdZejejdeejde j dZ dS)RefreshPresentz refreshPresent [2] SEQUENCE { cookie syncCookie OPTIONAL, refreshDone BOOLEAN DEFAULT TRUE }, r.rjTNrbrrrrmrmrkrrmc&eZdZdZeZdS) SyncUUIDsz( syncUUIDs SET OF syncUUID N)rrrrrr5rrrroros%HJJMMMrroc eZdZdZejejdeejde j dej de Z dS) SyncIdSetz syncIdSet [3] SEQUENCE { cookie syncCookie OPTIONAL, refreshDeletes BOOLEAN DEFAULT FALSE, syncUUIDs SET OF syncUUID } r.raF syncUUIDsN)rrrrrr0r2rr3rr4r1ror5rrrrqrqs})I(# #Hjjll;;$ $%5|t|E7J7JKK K55MMMrrqc`eZdZdZejejdee j e j e j dejde e j e j e j dejdee j e j e j dejd ee j e j e j d Zd S) SyncInfoValuea` syncInfoValue ::= CHOICE { newcookie [0] syncCookie, refreshDelete [1] SEQUENCE { cookie syncCookie OPTIONAL, refreshDone BOOLEAN DEFAULT TRUE }, refreshPresent [2] SEQUENCE { cookie syncCookie OPTIONAL, refreshDone BOOLEAN DEFAULT TRUE }, syncIdSet [3] SEQUENCE { cookie syncCookie OPTIONAL, refreshDeletes BOOLEAN DEFAULT FALSE, syncUUIDs SET OF syncUUID } } newcookier) implicitTag refreshDeleter#refreshPresentrG syncIdSetr%N)rrrrrr0r1rsubtyperTagtagClassContexttagFormatSimplerirmrqr5rrrrtrtsf$)I(   JLL #CGC$79LaPP !       MOO # ##CGC$79LaPP $       N   $ $#CGC$79LaPP %       IKK  #CGC$79LaPP     'MMMrrtceZdZdZdZdZdS)SyncInfoMessagea  The Sync Info Message is an LDAP Intermediate Response Message [RFC4511] where responseName is the object identifier 1.3.6.1.4.1.4203.1.9.1.4 and responseValue contains a BER-encoded syncInfoValue. The criticality is FALSE (and hence absent). z1.3.6.1.4.1.4203.1.9.1.4ctj|t}d|_d|_d|_d|_|d}|d}|t| ra|dkrt||_dSi}| d}| rt||d<| dr&t| d|d<n|dkrg}| d}tt|D]T} t!t#||  } |t| U||d<t| d |d <t)|||dSdSdS) NrPrrur.refreshrjryrrrRra)r rTrtrurwrxrygetName getComponentrVrWrU startswithrfrangelenrrSgetComponentByPositionappendsetattr) r:encodedMessager\attrcompvalr.uuidsidsir]s rr;zSyncInfoMessage.__init__5s N>MOO D D D!" t||~~t  ""    {""!$TC,,X66F   , #F H y)) X%)$*A*A-*P*P%Q%QM""$$--k::s3xx,,AeC,F,Fq,I,I&J&JKKKDLLT++++#(K (,T-D-DEU-V-V(W(W$% D$ $ $ $ $ $-    rN)rrrr responseNamer;rrrrr,s4 .L#%#%#%#%#%rrcHeZdZdZddZddZdZd Zdd Zd Z d Z dZ dS)rz; SyncreplConsumer - LDAP syncrepl consumer object. r"Nc ||}t||}d|vr|dxx|gz cc<n|g|d<d|_|j||fi|S)a Starts syncrepl search operation. base, scope, and search_args are passed along to self.search_ext unmodified (aside from adding a Sync Request control to any serverctrls provided). mode provides syncrepl mode. Can be 'refreshOnly' to finish after synchronization, or 'refreshAndPersist' to persist (continue to receive updates) after synchronization. cookie: an opaque value representing the replication state of the client. Subclasses should override the syncrepl_set_cookie() and syncrepl_get_cookie() methods to store the cookie appropriately, rather than passing it. Only a single syncrepl search may be active on a SyncreplConsumer object. Multiple concurrent syncrepl searches require multiple separate SyncreplConsumer objects and thus multiple connections (LDAPObject instances). N)r.r- serverctrlsF)syncrepl_get_cookier7_SyncreplConsumer__refreshDone search_ext)r:basescoper-r. search_argssyncreqs rsyncrepl_searchz SyncreplConsumer.syncrepl_search`s0 >--//F$F>>> K ' '  & & &7) 3 & & & &*1K &"ttU::k:::rrc. |||ddd\}}}}}} |dkrU|D]P} | jjdkr|d| j| j|| jQd S|d kr|D]} | \} } }|D]} | jjd kr| jd kr|| jgng| jd kr| | jgn@| | | | j|j d ur|| jg| j|| jΐn|dkr|D]} | \}}}|tj krt|}|j||jK|ji|dd d|jvr ||jd|jdrd|_ ||jj|ddd|jvr ||jd|jdrd|_ |,|jy|jddur!| |jdn ||jdd|jvr ||jd|dkrdS)a polls for and processes responses to the syncrepl_search() operation. Returns False when operation finishes, True if it is in progress, or raises an exception on error. If timeout is specified, raises ldap.TIMEOUT in the event of a timeout. If all is set to a nonzero value, poll() will return only when finished or when an exception is raised. Tr#r)msgidtimeoutadd_intermediates add_ctrlsallerdN)raFdrNrDrHyr.rjrarr)result4rXrsyncrepl_presentrar.syncrepl_set_cookierKrLsyncrepl_deletesyncrepl_entryrrrrurxsyncrepl_refreshdonerwry)r:rrrtypemsgmidctrlsnvcmdnattrsrnamerespsims r syncrepl_pollzSyncreplConsumer.syncrepl_pollsI *.,,"# +7++ 'D#sE1as{{;;A{+/@@@ ))$q?O)PPPx+00:::uA'($Bu"  ;/3EEE$7i// 111;-@@@@W00 00!+???? //E1;GGG#1U:: $ 5 5q{m D D D8/ 44QX>>>"NNA)*&E4 <<< )$//C}000????+7--d5-III#s'999 44S5G5QRRR-m<815D. 55777*6--d4-HHH#s'888 44S5Fx5PQQQ,];815D. 557772=)9:dBB 00{1KLLLL 11#- 2LMMM#s}44 44S]85LMMMaxxtSI rcdS)zY Called by syncrepl_poll() to store a new cookie provided by the server. Nr)r:r.s rrz$SyncreplConsumer.syncrepl_set_cookie  rcdS)zd Called by syncrepl_search() to retrieve the cookie stored by syncrepl_set_cookie() Nrr:s rrz$SyncreplConsumer.syncrepl_get_cookierrFcdS)aF Called by syncrepl_poll() whenever entry UUIDs are presented to the client. syncrepl_present() is given a list of entry UUIDs (uuids) and a flag (refreshDeletes) which indicates whether the server explicitly deleted non-present entries during the refresh operation. If called with a list of uuids, the syncrepl_present() implementation should record those uuids as present in the directory. If called with uuids set to None and refreshDeletes set to False, syncrepl_present() should delete all non-present entries from the local mirror, and reset the list of recorded uuids. If called with uuids set to None and refreshDeletes set to True, syncrepl_present() should reset the list of recorded uuids, without deleting any entries. Nr)r:rras rrz!SyncreplConsumer.syncrepl_presents $ rcdS)z Called by syncrepl_poll() to delete entries. A list of UUIDs of the entries to be deleted is given in the uuids parameter. Nr)r:rs rrz SyncreplConsumer.syncrepl_deletes rcdS)z Called by syncrepl_poll() for any added or modified entries. The provided uuid is used to identify the provided entry in any future modification (including dn modification), deletion, and presentation operations. Nr)r:rrr]s rrzSyncreplConsumer.syncrepl_entrys  rcdS)z Called by syncrepl_poll() between refresh and persist phase. It indicates that initial synchronization is done and persist phase follows. Nrrs rrz%SyncreplConsumer.syncrepl_refreshdones  r)r"N)rNr)F) rrrrrrrrrrrrrrrrr[s#;#;#;#;JUUUUt          (           rN),rr]r pyasn1.typerrrrrpyasn1.codec.berr r ldap.pkginfor r r ldap.controlsrrr__all__ OctetStringrrr)r!Sequencer,r7rCrJrNrAr`rdrirmSetOfrorqChoicertrrrrrrs CBBBBBBBBBBBBB--------==========RRRRRRRRRR  99999t999! W W W W Wdo W W W t}(########8]]]]]$/]]]$T](########29I(45     DM   '''''o'''28G34     DM        T]            ,,,,,DK,,,^,%,%,%,%,%,%,%,%^} } } } } } } } } } r