#!/usr/bin/python
#
#	Dump Samba3 data
#	Copyright Jelmer Vernooij 2005-2007
#	Released under the GNU GPL v3 or later
#

import optparse
import os, sys
sys.path.append(os.path.join(os.path.dirname(__file__), "../python"))
import samba
import samba.samba3

parser = optparse.OptionParser("provision <libdir> <smb.conf>")
parser.add_option("--format", type="choice", metavar="FORMAT",
		          choices=["full", "summary"])

opts, args = parser.parse_args()

if opts.format is None:
	opts.format = "summary"

def print_header(txt):
	print "\n%s" % txt
	print "=========================================="

def print_samba3_policy(pol):
	print_header("Account Policies")
	print "Min password length: %d" % pol.min_password_length
	print "Password history length: %d" % pol.password_history
	print "User must logon to change password: %d" % pol.user_must_logon_to_change_password
	print "Maximum password age: %d" % pol.maximum_password_age
	print "Minimum password age: %d" % pol.minimum_password_age
	print "Lockout duration: %d" % pol.lockout_duration
	print "Reset Count Minutes: %d" % pol.reset_count_minutes
	print "Bad Lockout Minutes: %d" % pol.bad_lockout_minutes
	print "Disconnect Time: %d" % pol.disconnect_time
	print "Refuse Machine Password Change: %d" % pol.refuse_machine_password_change

def print_samba3_sam(samba3):
	print_header("SAM Database")
	
	for a in samba3.samaccounts:
		print "%d: %s" % a.user_rid, a.username

def print_samba3_shares(samba3):
	print_header("Configured shares")
	for s in samba3.shares:
		print "--- %s ---" % s.name

		for p in s.parameters:
			print "\t%s = %s" % (p.name, p.value)

		print ""

def print_samba3_secrets(secrets):
	print_header("Secrets")

	print "IPC Credentials:"
	if secrets.ipc_cred.username_obtained:
		print "	User: %s\n" % secrets.ipc_cred.get_username
	if secrets.ipc_cred.password_obtained:
		print "	Password: %s\n" % secrets.ipc_cred.get_password

	if secrets.ipc_cred.domain_obtained:
		print "	Domain: %s\n" % secrets.ipc_cred.get_domain

	print "LDAP passwords:"
	for pw in secrets.ldappws:
		print "\t%s -> %s" % (pw.dn, pw.password)
	print ""

	print "Domains:"
	for d in secrets.domains:
		print "\t--- %s ---" % d.name
		print "\tSID: %s" % d.sid
		print "\tGUID: %s" % d.guid
		print "\tPlaintext pwd: %s" % d.plaintext_pw
		print "\tLast Changed: %lu" % d.last_change_time
		print "\tSecure Channel Type: %d\n" % d.sec_channel_type

	print "Trusted domains:"
	for td in secrets.trusted_domains:
		for n in td.uni_name:
			print "\t--- %s ---" % n
		print "\tPassword: %s" % td.password
		print "\tModified: %lu" % td.mod_time
		print "\tSID: %s" % td.domain_sid

def print_samba3_regdb(regdb):
	print_header("Registry")

	for k in regdb.keys:
		print "%s\n" % k.name
		for v in regdb.values(k):
			print "\t%s: type %d, length %d" % (v.name, v.type, v.data.length)

def print_samba3_winsdb(samba3):
	print_header("WINS Database")

	for e in samba3.winsentries:
		print "%s, nb_flags: %x, type: %d, ttl: %lu, %d ips, fst: %s" % (e.name, e.nb_flags, e.type, e.ttl, e.ips.length, e.ips[0])

def print_samba3_groupmappings(groupdb):
	print_header("Group Mappings")
	
	for g in groupdb.groupmappings:
		print "\t--- Group: %s ---" % g.nt_name
		print "\tComment: %s" % g.comment
		print "\tGID: %d" % g.gid
		print "\tSID Name Use: %d" % g.sid_name_use
		print "\tSID: %s\n" % g.sid

def print_samba3_aliases(groupdb):
	for a in groupdb.aliases:
		print "\t--- Alias: %s ---" % a.sid
		for m in a.members:
			print "\t%s" % m

def print_samba3_idmapdb(idmapdb):
	print_header("Winbindd SID<->GID/UID mappings")

	print "User High Water Mark: %d" % idmapdb.user_hwm
	print "Group High Water Mark: %d\n" % idmapdb.group_hwm

	for e in idmapdb.mappings:
		if e.type == e.IDMAP_GROUP:
			print "%s -> GID %d" % (e.sid, e.unix_id)
		else:
			print "%s -> UID %d" % (e.sid, e.unix_id)

def print_samba3(samba3):
	print_samba3_sam(samba3)
	print_samba3_policy(samba3.get_policy_db())
	print_samba3_shares(samba3)
	print_samba3_winsdb(samba3.get_wins_db())
	print_samba3_regdb(samba3.get_registry())
	print_samba3_secrets(samba3.get_secrets_db())
	print_samba3_groupmappings(samba3.get_groupmapping_db())
	print_samba3_aliases(samba3)
	print_samba3_idmapdb(samba3.get_idmap_db())

def print_samba3_summary(samba3):
	print "WINS db entries: %d" % len(samba3.winsentries)
	print "SAM Accounts: %d" % len(samba3.samaccounts)
	print "Registry key count: %d" % len(samba3.registry.keys)
	print "Shares (including [global]): %d" % len(samba3.shares)
	print "Groupmap count: %d" % len(samba3.groupmappings)
	print "Alias count: %d" % len(samba3.aliases)
	print "Idmap count: %d" % len(samba3.idmapdb.mappings)

samba3 = samba.samba3.Samba3(args[0], args[1])

if opts.format == "summary":
	print_samba3_summary(samba3)
elif opts.format == "full":
	print_samba3(samba3)