# -*- coding: utf-8 -*-
#
# Copyright 2004-2022 Univention GmbH
#
# https://www.univention.de/
#
# All rights reserved.
#
# The source code of this program is made available
# under the terms of the GNU Affero General Public License version 3
# (GNU AGPL V3) as published by the Free Software Foundation.
#
# Binary versions of this program provided by Univention to you as
# well as other copyrighted, protected or trademarked materials like
# Logos, graphics, fonts, specific documentations and configurations,
# cryptographic keys etc. are subject to a license agreement between
# you and Univention and not subject to the GNU AGPL V3.
#
# In the case you use this program under the terms of the GNU AGPL V3,
# the program is provided in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU Affero General Public License for more details.
#
# You should have received a copy of the GNU Affero General Public
# License with the Debian GNU/Linux or Univention distribution in file
# /usr/share/common-licenses/AGPL-3; if not, see
# <https://www.gnu.org/licenses/>.
"""
|UDM| module for the Domain Component containers
"""
from univention.admin.layout import Tab, Group
from univention.admin import configRegistry
import univention.admin.filter
import univention.admin.handlers
import univention.admin.localization
import univention.admin.handlers.settings.directory
import univention.admin.handlers.users.user
import univention.admin.handlers.groups.group
translation = univention.admin.localization.translation('univention.admin.handlers.container')
_ = translation.translate
# Note: this is not a "objectClass: domain" container but only the ldap base!
module = 'container/dc'
childs = True
operations = ['search', 'edit']
short_description = _('Container: Domain')
object_name = _('Domain Container')
object_name_plural = _('Domain Containers')
long_description = ''
options = {
'default': univention.admin.option(
short_description=short_description,
default=True,
objectClasses=['top', 'univentionBase'],
),
'kerberos': univention.admin.option(
short_description=_('Kerberos realm'),
objectClasses=['krb5Realm', ],
default=True,
),
'samba': univention.admin.option(
short_description=_('Samba'),
objectClasses=['sambaDomain'],
default=True,
),
}
property_descriptions = {
'name': univention.admin.property(
short_description=_('Name'),
long_description='',
syntax=univention.admin.syntax.string,
include_in_default_search=True,
required=True,
may_change=False,
identifies=True
),
'dnsForwardZone': univention.admin.property(
short_description=_('DNS forward lookup zone'),
long_description='',
syntax=univention.admin.syntax.DNS_ForwardZone,
multivalue=True,
may_change=False,
),
'dnsReverseZone': univention.admin.property(
short_description=_('DNS reverse lookup zone'),
long_description='',
syntax=univention.admin.syntax.DNS_ReverseZone,
multivalue=True,
may_change=False,
),
'sambaDomainName': univention.admin.property(
short_description=_('Samba domain name'),
long_description='',
syntax=univention.admin.syntax.string,
multivalue=True,
options=['samba'],
required=True,
default=(configRegistry.get('domainname', '').upper(), []),
),
'sambaSID': univention.admin.property(
short_description=_('Samba SID'),
long_description='',
syntax=univention.admin.syntax.string,
options=['samba'],
required=True,
may_change=False,
),
'sambaNextUserRid': univention.admin.property(
short_description=_('Samba Next User RID'),
long_description='',
syntax=univention.admin.syntax.string,
options=['samba'],
default=('1000', []),
),
'sambaNextGroupRid': univention.admin.property(
short_description=_('Samba Next Group RID'),
long_description='',
syntax=univention.admin.syntax.string,
options=['samba'],
default=('1000', []),
),
'kerberosRealm': univention.admin.property(
short_description=_('Kerberos realm'),
long_description='',
syntax=univention.admin.syntax.string,
options=['kerberos'],
required=True,
may_change=False,
default=(configRegistry.get('domainname', '').upper(), []),
),
}
layout = [
Tab(_('General'), _('Basic settings'), layout=[
Group(_('Domain container description'), layout=[
"name"
]),
]),
Tab(_('DNS'), _('DNS Zones'), advanced=True, layout=[
["dnsForwardZone", "dnsReverseZone"]
]),
Tab(_('Samba'), _('Samba Settings'), advanced=True, layout=[
["sambaDomainName", "sambaSID"],
["sambaNextUserRid", "sambaNextGroupRid"]
]),
Tab(_('Kerberos'), _('Kerberos Settings'), advanced=True, layout=[
'kerberosRealm'
]),
]
mapping = univention.admin.mapping.mapping()
mapping.register('name', 'dc', None, univention.admin.mapping.ListToString)
mapping.register('sambaDomainName', 'sambaDomainName')
mapping.register('sambaSID', 'sambaSID', None, univention.admin.mapping.ListToString, encoding='ASCII')
mapping.register('sambaNextUserRid', 'sambaNextUserRid', None, univention.admin.mapping.ListToString)
mapping.register('sambaNextGroupRid', 'sambaNextGroupRid', None, univention.admin.mapping.ListToString)
mapping.register('kerberosRealm', 'krb5RealmName', None, univention.admin.mapping.ListToString)
[docs]class object(univention.admin.handlers.simpleLdap):
module = module
def __init__(self, co, lo, position, dn='', superordinate=None, attributes=None):
super(object, self).__init__(co, lo, position, dn, superordinate, attributes)
if not self.info.get('name'):
self.info['name'] = self.oldattr.get('l', self.oldattr.get('o', self.oldattr.get('c', self.oldattr.get('ou', self.oldattr.get('dc', [b''])))))[0].decode('UTF-8')
self.save()
[docs] def open(self):
univention.admin.handlers.simpleLdap.open(self)
if self.exists():
self['dnsForwardZone'] = self.lo.searchDn(base=self.dn, scope='domain', filter='(&(objectClass=dNSZone)(relativeDomainName=@)(!(zoneName=*.in-addr.arpa)))')
self['dnsReverseZone'] = self.lo.searchDn(base=self.dn, scope='domain', filter='(&(objectClass=dNSZone)(relativeDomainName=@)(zoneName=*.in-addr.arpa))')
self.save()
[docs] @classmethod
def unmapped_lookup_filter(cls):
return univention.admin.filter.conjunction('&', [
univention.admin.filter.expression('objectClass', 'univentionBase'),
])
lookup = object.lookup
lookup_filter = object.lookup_filter
identify = object.identify
