+ cj ^RIt^RIt^RIHt^RIt^RIt^RIHuH t ^RI H t ^RI t ^RIt^RIHt^RIHtHtHtHt^RIHt^RIHt^RIHt^RIHtHt^R IHt^RI t^RIt^R IH!t!H"t"H#t#^R I$H%t%^R IH&t&^R I'H(t)^RIH*t*^RI+t+^RI,H-t-^RIH.t.^RI/H0t0^RI1H2t2H3t3H4t4^RI5H6t6^RI7H8t8H9t9H:t:H;t;^RIH?t?^RI@HAtA^RIHBtB^RI$HCtC^RIDHEtEHFtF^RIGHHtH^RIIHJtJHKtK^RILHMtMHNtN^RIOtO^RIPtP^RIQHRtR^RISHTtTHUtUHVtVHWtWHXtX^R IYHZtZH[t[H\t\^R!I]H^t^^R"I_H`t`^R#IaHbtbHctcHdtdR$teR%tfR&tgR'thRR(ltiRRR]P]P,]P,]P,3R)ltnR*toR+tpR,tq]P3R-ltsR.tt])P])P,])P,])P,tyR/tzRR0lt{!R1R2]4t|!R3R4]|4t}!R5R6]|4t~!R7R8]|4t!R9R:]|4t!R;R<]|4t!R=R>]|4t!R?R@]|4t!RARB]|4t!RCRD]|4t!RERF]|4t!RGRH]|4t!RIRJ]|4t!RKRL]|4t!RMRN]|4t!RORP]4t!RQRR]|4t!RSRT]|4t!RURV]4t!RWRX]|4t!RYRZ]4t!R[R\]|4t!R]R^]4t!R_R`]|4t!RaRb]4t!RcRd]4t!ReRf]4t!RgRh]|4t!RiRj]4t!RkRl]4t!RmRn]|4t!RoRp]|4t!RqRr]4t!RsRt]4t!RuRv]|4t!RwRx]|4t!RyRz]4t!R{R|]4t!R}R~]|4t!RR]4t!RR]4t!RR]|4t!RR]|4t!RR]4t!RR]4t!RR]4t!RR]|4t!RR]4t!RR]4t!RR]|4t!RR]4t!RR]4t!RR]|4t!RR]|4t!RR]4t!RR]4t!RR]4t!RR]4t!RR]4t!RR]4t!RR]4tR#)N)expat)system_session)Command CommandErrorOption SuperCommand)SamDB)dsdb)security) ndr_unpackndr_pack)preg) AUTH_SESSION_INFO_DEFAULT_GROUPSAUTH_SESSION_INFO_AUTHENTICATED#AUTH_SESSION_INFO_SIMPLE_PRIVILEGES) netcmd_finddc)policy)libsmb_samba_internal) NTSTATUSError) dsacl2fsacl)nbt)Net)GPParserGPNoParserExceptionGPGeneralizeException) GPPolParser) GPIniParser GPTIniParserGPFDeploy1IniParserGPScriptsIniParser)GPAuditCsvParser)GptTmplInfParser) GPAasParser)param) attr_default) get_bytes get_string) ConfigParser)StringIOBytesIO) calc_modestat_from_mode) str_regtype)NT_STATUS_OBJECT_NAME_INVALIDNT_STATUS_OBJECT_NAME_NOT_FOUNDNT_STATUS_OBJECT_PATH_NOT_FOUNDNT_STATUS_OBJECT_NAME_COLLISIONNT_STATUS_ACCESS_DENIED)create_directory_hiersmb_connection get_gpo_dn)RegistryGroupPolicies) REG_MULTI_SZ)register_gp_extensionlist_gp_extensionsunregister_gp_extensioncl\P!V4pV'gRpV#RPV4pV#)zreturn gpo flags stringNONE )r get_gpo_flagsjoin)valueflagsrets& 2/usr/lib/python3/dist-packages/samba/netcmd/gpo.pygpo_flags_stringrD\s5   'E  Jhhuo Jcl\P!V4pV'gRpV#RPV4pV#)zreturn gplink options stringr<r=)rget_gplink_optionsr?)r@optionsrBs& rCgplink_options_stringrIfs6''.G  Jhhw JrEc .pVP4R8XdV#VPR4pVFpV'gK VPR4p\V4^8wgV^,PR4'g\ RV,4hVP RV^,R,R\ V^,4/4K V#) z.parse a gPLink into an array of dn and options];z[LDAP://zBadly formed gPLink '%s'dn:NNrH)stripsplitlen startswith RuntimeErrorappendint)gplinkrBagds& rC parse_gplinkr[ps C ||~  SA   GGCL q6Q;adooj999A=> > D!A$r(Is1Q4y9:  JrEc6RPRV44pV#)z4Encode an array of dn and options into gPLink stringrKc3T"TFpRVR,VR,3,xK R#5i)z[LDAP://%s;%d]rNrHN).0rYs& rC encode_gplink..s&Mf"agq|%<<BBCs/+E=*F#= F FF # F?. F::F?c.pVPR4'dVR,PR^4pM0VPR4'dVR,PR^4p\V4^8wd\RV,4hV#)z;Parse UNC string into a hostname, a service, and a filepath\\:NN\z///zInvalid UNC string: %s)rSrQrR ValueError)unctmps& rC parse_uncrsn C ~~f"gmmD!$   "gmmC# 3x1}1C788 JrEc6\P!RWR7'd \4#\P!RWR7'd \4#\P!RWR7'd \ 4#\P!RWR7'd \ 4#\P!RWR7'd \ 4#\P!RWR7'd \ 4#\P!RWR7'd \4#\P!RWR7'd \4#\P!R WR7'd \4#\P!R WR7'd \4#\4#) zfdeploy1\.ini$)rAz audit\.csv$z GptTmpl\.inf$z GPT\.INI$z scripts\.ini$zpsscripts\.ini$z GPE\.INI$z.*\.ini$z.*\.pol$z.*\.aas$) rematchrr!r"rr rrrr#)rvrAs&&rC find_parserrs xx!455"$$ xx22!! xx $44!! xx d00~ xx $44!## xx"D66!## xx d00 z xx T//} xx T//} xx T//} :rEcRp\PPV4'g\P!V4V.pV.pV'EdtVP 4pVP 4pVP V\ R7pVPRR7VEFp VR,V R,,p \PPWyR,4p V R,\P,'d;VPV 4VPV 4\P!V 4KVPV 4p \W,R4;_uu_4p V PV 4RRR4\V R,4pVP!V 4VP#V R ,4EK" EK|R# +'giLU;i) .SAMBABACKUPattribscVR,#rvr^xs&rC2backup_directory_remote_to_local..,AfIrEkeyrrvattribwbN.xml)ospathisdirmkdirpoplist attr_flagssortr?libsmbFILE_ATTRIBUTE_DIRECTORYrUloadfileopenwriterparse write_xml)conn remotedirlocaldirSUFFIXr_dirsl_dirsr_dirl_dirdirlistrkr_namel_namedatafparsers&&& rC backup_directory_remote_to_localr!sF F 77== " " ]F\F &  ))E:)6 - .AT\AfI-FWW\\%63F{V<<<< f% f% }}V,&/400AGGDM1%QvY/ T"  &1  10s #G G c"\PPV4'g\P!V4V.pV.pV'Ed1VP 4pVP 4pVP V\ R7pVPRR7VFpVR,VR,,p \PPWhR,4p VR,\P,'d;VPV 4VPV 4\P!V 4KVPV 4p \V R4;_uu_4p V PV 4RRR4K EK9R# +'giK;i)rcVR,#rr^rs&rCr0copy_directory_remote_to_local..OrrErrrvrrN)rrrrrrrrr?rrrUrrr) rrrrrrrrrkrrrrs &&& rCcopy_directory_remote_to_localrEs 77== " " [FZF &  ))E:)6 - .AT\AfI-FWW\\%63F{V<<<< f% f% }}V,&$''1GGDM('  (''s E== F c`VPV4'gVPV4V.pV.pV'Ed5VP4pVP4p\P!V4p V P 4V Fp \P PWz4p VR,V ,p \P PV 4'd7VPV 4VPV 4VPV 4KV'dVPV 4K\V R4;_uu_4p VPWP44RRR4K EK=R# \dT'ghEKi;i \dLni;i +'giEK-;i)rrbN)chkpathrrrlistdirrrr?rrUrrrsavefileread)rrrignore_existing_dirkeep_existing_filesrrrrrrkrrrs&&&&& rCcopy_directory_local_to_remoter^sI << " " 9ZF[F &  **U# AWW\\%+FT\A%Fww}}V$$ f% f%JJv& ' f- &$''1MM&&&(3(') %./)(''s6:E.F = F.FFF FF F- c,a]tRtRtoRtRtRtVtR#) GPOCommandic Vf4\P!4p\RV,VPR7\P P V4'g\RV,4h\P PVR4p\P P V4'g\P!V4\P PW24p\P P V4'd\RV,4h\P!V4W3# \\3dp\RT4hRp?ii;i)aEnsure that the temporary directory structure used in fetch, backup, create, and restore is consistent. If --tmpdir is used the named directory must be present, which may contain a 'policy' subdirectory, but 'policy' must not itself have a subdirectory with the gpo name. The policy and gpo directories will be created. If --tmpdir is not used, a temporary directory is securely created. Nz5Using temporary directory %s (use --tmpdir to change))filez'Temporary directory '%s' does not existrz8GPO directory '%s' already exists, refusing to overwritez%Error creating teporary GPO directory) tempfilemkdtempprintoutfrrrrr?rIOErrorOSError)selftmpdirrrgpodirrks&&& rCconstruct_tmpdirGPOCommand.construct_tmpdirs >%%'F IFRyy "ww}}V$$H6QR R77<<1ww}}X&& HHX h, 77== JVSU U K HHV ~! KFJ J Ks!D::E EEc \VP\4VPVPR7VnR# \ d#p\RTP,T4hRp?ii;i)z$make a ldap connection to the serverri session_info credentialsrgzLDAP connection to %s failed N)r rirrhrgrrfr)rrks& rC samdb_connectGPOCommand.samdb_connectsY N488,:,<+/::$''CDJ N>I1M M Ns:> A+ A&&A+)rN)__name__ __module__ __qualname____firstlineno__rr__static_attributes____classdictcell__ __classdict__s@rCrrs!FNNrErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t RRltRtVtR #) cmd_listallizList all GPOs.%prog [options] sambaopts versionoptscredopts-H--URL%LDB URL for database or target serverURLHhelptypemetavardestNc VP4VnVPVPRR7Vn\ VPVPV4VnVP 4\VPR4pVEFGpVPPRVR,^,,4VPPRVR,^,,4VPPRVR,^,,4VPPR VP,4VPPR \VR R 4,4VPPR \\\VR^444,4VPPR4EKJ R#)Tfallback_machineNGPO : %s rvdisplay name : %s rwpath : %s rxdn : %s version : %s ru0flags : %s rA ) get_loadparmrgget_credentialsrhrlrirrrrrrNr%rDrV)rrr rrrrs&&&&& rCruncmd_listall.runsA((*--dgg-M $''4::q1 4::t,A IIOO1AfIaL@ A IIOO1Am4DQ4GG H IIOO1A6F4G4JJ K IIOO1ADD8 9 IIOO1LOUX4YY Z IIOO14DSVWY`bcIdEe4ff g IIOOD !rErhrgriNNNNrrrr__doc__synopsisrH SambaOptionsVersionOptionsCredentialsOptionstakes_optiongroupsrr takes_optionsr'rrrs@rCr r sb H W))w--G.. tW#JQT3 (M ""rEr c a]tRtRtoRtRtR.tR]PR]PR]P/t ] !RR R ] R R R 7.tRRltRtVtR#)cmd_listizList GPOs for an account.z&%prog [options] accountnamer rrrrrrrrNc VP4VnVPVPRR7Vn\ VPVPV4VnVP 4VPPR\P!V4: R\P!V4: R2R7pV^,PpTPPT\PR.R7^,pR TR,9p\\ ,p TP e/TP P#R 4'dT \$,p \&P(P+TPTPTT R 7p T P,p .p Rp \P.!TP\1T44P34pTPPT\PRR.R7^,pRT9Ed0\5\1TR,^,44pTEFpT 'g'TR,\6P8,'gK2TR,\6P:,'dKX\<P>\<P@,\<PB,pTPPTR,\P.R ORT,.R7pT^,R,^,p\E\<PFT4p\&P<PMTT \<PN\<PP,\<PR,4\W\YT^,R^44pT'd!T\6PZ,'dEKT'g!T\6P\,'dEKT P_T^,R,^,T^,R,^,34EK \W\YTR^44pT\6P`,'dRp YPPc48XdMTP34pEKT'dR pMRpTPHPKRT: RT: R24T F5pTPHPKRT^,: RT^,: R24K7 R # \d\RT,4hi;i \d\R T,4hi;i \d/TPHPKRTR,,4EKZi;i \Td2TPHPKRTP,4EKi;i)!Trz(&(|(samAccountName=z)(samAccountName=z$))(objectClass=User)))rqzFailed to find account %s objectClass)rorprrcomputerz!Failed to find objectClass for %sNldap)lp_ctxrNsession_info_flagsr gPOptionsrHrNrvrwrArtrn)rorprrrsz8Failed to fetch gpo object with nTSecurityDescriptor %s zFailed access check on %s Fuserz GPOs for r=r$z )rvrwrArt)2r%rgr&rhrlrirrrr}rrNrfrrrrrSrsambaauth user_sessionsecurity_tokenr~rparentr[r GPLINK_OPT_ENFORCEGPLINK_OPT_DISABLEr SECINFO_OWNER SECINFO_GROUP SECINFO_DACLr descriptorrr access_checkSEC_STD_READ_CONTROL SEC_ADS_LISTSEC_ADS_READ_PROPrTrVr%GPO_FLAG_MACHINE_DISABLEGPO_FLAG_USER_DISABLErUGPO_BLOCK_INHERITANCEr{)rr5rr rrruser_dn is_computerr;sessiontokengposinheritrNglistrYrgmsg secdesc_ndrsecdescrA gpoptionsmsg_strs&&&&&& rCr' cmd_list.runs((*--dgg-M $''4::q1  J**##%(%6%6{%CSEVEVWbEc0e#fC!fiiG  R**##}o#^_`aC$M(::K?=> 88 DHH$7$7$?$? "E E **))$**TWW=O*Q&& VVDJJG - 4 4 6**##3>>(T_I`#abcdC3$SXq)9%:;A"AiL4;R;R,R,R |d&=&===  !$,$:$:$,$:$:%;$,$9$9%: $zz00agS^^8P;JX;U:V 1 X'+1g.D&Ea&H ",X-@-@+"N !33GU4<4Q4Q4<4I4I5J4<4N4N5OP T!Wgq ABE"0M0M(M(M &ED4N4N,N,N KKa!7!:DGFOAI45555ZZ2244B  GG g{CDA IIOOQqTT1Q448 9g J:[HI I J RB[PQ Q RN%! (c()$)01 !(! (E(NO !s@/A TAT?B)U AVT<?U 4VV7WWr)r*)rrrrr,r- takes_argsrHr.r/r0r1rrr2r'rrrs@rCr4r4sh#7HJW))w--G.. tW#JS 2M a:a:rEr4ca]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7.tRR ltR tVtR #)cmd_showiKzShow information for a GPO.%prog [options]r rrrrrrrNc  VP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7VnVP4\VPV4^,pTR,^,p\\PT4p T P!4p TP"P%RTR ,^,,4TP"P%R TR ,^,,4TP"P%R TR ,^,,4RT9d1TP"P%RTR,^,,4RT9d1TP"P%RTR,^,,4TP"P%RTP&,4TP"P%R\)TRR4,4TP"P%R\+\-\)TR^444,4TP"P%RT ,4\/TRTPTPR7p TPP1R4p RP3T P54RTR.4p .pR,EF8p\\6P8T P;Y,44pTPHFpTPJR!8XdK/pTPLTR"&TPJTR#&TTR$&\OTPP4TR%&TPRTR&&\QTR&,4\T8XdgTPP\V8Xd=TR&,PYR'4pTP[R(4P]R(4TR&&M\_TR&,4TR&&TPaT4K EK; TP"P%R)4\bPd!YP"^R*7TP"P%R+4R# \d\RT,4hi;i \dRp ELi;i \<d\pTP>^,\@\B\D39dRp?EKTP>^,\F8Xd \R 4hhRp?ii;i)-TrreNNrjGPO '%s' does not existrtzrrvrrwrrxryzMachine Exts : %s rzzUser Exts : %s r r!rur"r#rAzACL : %s sysvolrgrhrealmrPoliciesz%s\Registry.polN:The authenticated user does not have sufficient privilegesz **delvals.keyname valuenameclassrrz utf-16-lezPolicies : )indentr$)MACHINEUSER)3r%rgr&rhrSrirrlrrrrfrr r rHas_sddlrrrNr%rDrVr4getr?rrrrrargsr.r/r0r2entriesrmrlr-rrbytesr7decoderstriprQrrUjsondump)rrrr rr dc_hostnamerrXrY secdesc_sddlrripol_file policy_defs policy_classpol_datarkentrydefsrs&&&&&& rCr' cmd_show.run\s4((*--dgg-M  i((B%KH'? -M0B10EEF -4D0Ea0HHI % , IIOO1C8R4STU4VV W "c ) IIOO1C8O4PQR4SS T -67 - S/SV0WWX -0@\RUW^`aEbAc0dde - <=k&!%$(JJ0  G$99ekkmZ 245 /L %dii&*mmH4K&LN"))??l2"'--Y$)OO[! ,W *5::6V $zzV V %.zz\1#F|22;?'+{{6':'@'@'HV '+DL'9V ""4(!*0> *+ +yy3 C @83>? ? @ &%L &:! 66!9!>!@!@!BB66!9 77&(HII s<?S :S,9/T S), S=<S= U& 'U!9(U!!U&r)r*rrrrr,r-rHr.r/r0r1r]rrr2r'rrrs@rCr_r_Ksc%&H W))w--G.. J tALMRRrEr_c a]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7] !R R ] R 7] !R RRR.RR7] !RRRR.RR7] !RRRRR7.tRRltRtVtR#)cmd_loadiaLoad policies onto a GPO. Reads json from standard input until EOF, unless a json formatted file is provided via --content. Example json_input: [ { "keyname": "Software\Policies\Mozilla\Firefox\Homepage", "valuename": "StartPage", "class": "USER", "type": "REG_SZ", "data": "homepage" }, { "keyname": "Software\Policies\Mozilla\Firefox\Homepage", "valuename": "URL", "class": "USER", "type": "REG_SZ", "data": "google.com" }, { "keyname": "Software\Microsoft\Internet Explorer\Toolbar", "valuename": "IEToolbar", "class": "USER", "type": "REG_BINARY", "data": [0] }, { "keyname": "Software\Policies\Microsoft\InputPersonalization", "valuename": "RestrictImplicitTextCollection", "class": "USER", "type": "REG_DWORD", "data": 1 } ] Valid class attributes: MACHINE|USER|BOTH Data arrays are interpreted as bytes. The --machine-ext-name and --user-ext-name options are multi-value inputs which respectively set the gPCMachineExtensionNames and gPCUserExtensionNames ldap attributes on the GPO. These attributes must be set to the correct GUID names for Windows Group Policy to work correctly. These GUIDs represent the client side extensions to apply on the machine. Linux Group Policy does not enforce this constraint. {35378EAC-683F-11D2-A89A-00C04FBBCFA2} is provided by default, which enables most Registry policies. r`r rrrrrra --contentJSON file of policy inputs--machine-ext-namerU machine_exts&{35378EAC-683F-11D2-A89A-00C04FBBCFA2}z;A machine extension name to add to gPCMachineExtensionNames)actionrdefaultr--user-ext-name user_extsz5A user extension name to add to gPCUserExtensionNamesz --replace store_trueFz8Replace the existing Group Policies, rather than mergingrrrNc VfR.pVfR.pVf4\P!\PP 44p Md\ P PV4'd5\VR4;_uu_4p \P!V 4p RRR4M \R4hVP4Vn VPVPRR7Vn\VPVPV4VnVP#4\%WPVPVP&V4p VFp V P)V R4K VFp V P)V R4K V'dV P+X 4R#V P-X 4R# +'giEL;i \.d.pTP0^,\28Xd \R4hhRp?ii;i) Nrr$The JSON content file does not existTrryrzrk)rzloadssysstdinrrrexistsrloadrr%rgr&rhrlrirr6rregister_extension_name replace_smerge_srrur2)rrrcontentrrreplacer rrrrregext_namerks&&&&&&&&&& rCr' cmd_load.runs  DEL  ABI ?**SYY^^%56K WW^^G $ $gt$$"iil %$EF F((*--dgg-M $''4::q1 #C$**djj!L$H  ' '2L M%!H  ' '2I J"  k* K(%%$$& vvay33"$DEE  s0?F(:F<F<F<( F9 < G4(G//G4r))NNNNFNNNrrs@rCrrs0d'H W))w--G.. J tAL{!=CH#.=>N P  +=>H J {<N P M##rErc a]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7] !R R ] R 7] !R R.RRR7] !RR.RRR7.tRRltRtVtR#) cmd_removei#aRemove policies from a GPO. Reads json from standard input until EOF, unless a json formatted file is provided via --content. Example json_input: [ { "keyname": "Software\Policies\Mozilla\Firefox\Homepage", "valuename": "StartPage", "class": "USER", }, { "keyname": "Software\Policies\Mozilla\Firefox\Homepage", "valuename": "URL", "class": "USER", }, { "keyname": "Software\Microsoft\Internet Explorer\Toolbar", "valuename": "IEToolbar", "class": "USER" }, { "keyname": "Software\Policies\Microsoft\InputPersonalization", "valuename": "RestrictImplicitTextCollection", "class": "USER" } ] Valid class attributes: MACHINE|USER|BOTH r`r rrrrrrarrrrUrz@A machine extension name to remove from gPCMachineExtensionNames)rrrrrrz:A user extension name to remove from gPCUserExtensionNamesNc Vf.pVf.pVf4\P!\PP 44p Md\ P PV4'd5\VR4;_uu_4p \P!V 4p RRR4M \R4hVP4Vn VPVPRR7Vn\VPVPV4VnVP#4\%WPVPVP&V4p VFp V P)V R4K VFp V P)V R4K V P+X 4R# +'giL;i \,d.p T P.^,\08Xd \R4hhRp ? ii;i)NrrTrryrzrk)rzrrrrrrrrrrr%rgr&rhrlrirr6runregister_extension_nameremove_srrur2)rrrrrrr rrrrrrrks&&&&&&&&& rCr'cmd_remove.runYsr  L  I ?**SYY^^%56K WW^^G $ $gt$$"iil %$EF F((*--dgg-M $''4::q1 #C$**djj!L$H  ) )(4N O%!H  ) )(4K L"  LL %%$  vvay33"$DEE  s$=F 8F F  G)(GGr)NNNNNNNrrs@rCrr#s@'H W))w--G.. J tAL{!=CH#RnS U  RkM O MrErca]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7.tRR ltR tVtR #) cmd_getlinkizzList GPO Links for a container.%prog [options]r rrrrrraNcRVP4VnVPVPRR7Vn\ VPVPV4VnVP 4VPPV\PRR.R7^,pRT9Ed9TR,'Ed)TPPRT,4\\!TR,^,44pTFp\#TPTR,R7pTPPR T^,R ,^,,4TPPR T^,R ,^,,4TPPR \%TR,4,4TPPR4K R#TPPRT,4R# \d\RT,4hi;i)TrrrrrzGPO(s) linked to DN %s rN)rNz GPO : %s rvz Name : %s rwz Options : %s rHr$zNo GPO(s) linked to DN=%s N)r%rgr&rhrlrirrrr}rrfrrrr[rrrI) rrrr rrrrbrYs &&&&&& rCr'cmd_getlink.runs((*--dgg-M $''4::q1  O**##S^^/@+3*$6679C s?s8}} IIOO6E F!#c(mA&6"78F"4::!D':  4s1vf~a7H HI  4s1vm7LQ7O OP  47LQy\7Z Z[ %  IIOO9LH I O>MN N Os /5HH&r)r*rrs@rCrrzsd)/H W))w--G.. !!J tALMJJrErc a]tRtRtoRtRtR]PR]PR]P/t RR.t ] !R R ] R 7] !R R RRRR7] !RRRRRR7.tRRltRtVtR#) cmd_setlinkiz(Add or update a GPO link to a container.$%prog [options]r rrrrrrraz --disabledisabledFrzDisable policyrrrrz --enforceenforcedzEnforce policyNc TVP4VnVPVPRR7Vn\ VPVPV4VnVP 4^p V'dV \P,p V'dV \P,p \VPVR7^,\\TPT44p TPP!T\"P$RR.R7^,p Rp RT 9d\'\T R,^,44p Rp RpT F5pTR ,P)4T P)48XgK/YR &RpM T'd\R T,4hT P+^R T R T /4M.p T P-R T R T /4\/T 4p\"P0!4p\"P2!TPT4TnT 'd+\"P6!T\"P8R4TR &M)\"P6!T\"P:R4TR &TPP=T4TP>PAR4\C4PEYYgT4R# \d\RT,4hi;i \d\RT,4hi;i \dp\R T4hRp?ii;i)TrrrfrrrrFrNrHz)GPO '%s' already linked to this container new_valuezError adding GPO LinkNzAdded/Updated GPO link )#r%rgr&rhrlrirr rDrCrrrfrrr5rr}rr[rinsertrUrcrr~rNrr FLAG_MOD_ADDrrrrr')rrrrrrr rrgplink_optionsrrexisting_gplinkrbrrYrrrks&&&&&&&&& rCr'cmd_setlink.runs((*--dgg-M $''4::q1   d55 5N  d55 5N @  -a 0Z C01 O**##S^^/@+3*$6679C  s?!#c(mA&6"78F"OET7==?flln4#1iL E  "#NQT#TUU a$ >!JKF MM4NC D"6* KKMvvdjj,/  // C? ? @ O>MN N OD ;6: : ;s0/K -5K*6L K'*L L' L""L'r))NFFNNNrrs@rCrrs25H W))w--G.. !%(J tAL{U<$ &{U<$ & MBMBMrErca]tRtRtoRtRtR]PR]PR]P/t RR.t ] !R R ] R 7.tRR ltRtVtR #) cmd_dellinkiz!Delete GPO link from a container.rr rr containerrrrraNc:VP4VnVPVPRR7Vn\ VPVPV4VnVP 4\VPVR7^,\P!TPT4p\TPYr4TPPR4\!4P#YsYET4R# \d\RT,4hi;i)TrrrfzDeleted GPO link. N)r%rgr&rhrlrirrrrfrr}r~rrrrr')rrrrr rrrs&&&&&&& rCr'cmd_dellink.runs((*--dgg-M $''4::q1  @  -a 0vvdjj)4 TZZ3 -. ,9 L  @83>? ? @s /C<<Dr)r*rrs@rCrrsf+5H W))w--G.. u%J tALMMMrErca]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7.tRR ltR tVtR #)cmd_listcontainersi*z%List all linked containers for a GPO.r`r rrrrrraNcVP4VnVPVPRR7Vn\ VPVPV4VnVP 4\VPV4p\V4'dWVPPRV,4VF,pVPPRVR,,4K. R#VPPRV,4R#)TrzContainer(s) using GPO %s z DN: %s rNzNo Containers using GPO %s N) r%rgr&rhrlrirrrrRrr)rrrr rrrrs&&&&&& rCr'cmd_listcontainers.run;s((*--dgg-M $''4::q1  S1 s88 IIOO9C? @ 4 89 IIOO:S@ ArEr)r*rrs@rCrr*sc/&H W))w--G.. J tALMBBrErca]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7.tRR ltR tVtR #)cmd_getinheritanceiNz%Get inheritance flag for a container.rr rrrrrraNclVP4VnVPVPRR7Vn\ VPVPV4VnVP 4VPPV\PRR.R7^,p^pRT9d\TR,^,4pT\P8XdTP P#R4R#TP P#R4R# \d\RT,4hi;i) Trrr<rrz$Container has GPO_BLOCK_INHERITANCE zContainer has GPO_INHERIT N)r%rgr&rhrlrirrrr}rrfrrVr rOrr)rrrr rrr inheritances&&&&&& rCr'cmd_getinheritance.run_s((*--dgg-M $''4::q1  O**##S^^/@+6-$99:MN N Os /5DD3r)r*rrs@rCrrNsb//H W))w--G.. !!J tALM;;rErca]tRtRtoRtRtR]PR]PR]P/t RR.t ] !R R ] R 7.tRR ltRtVtR #)cmd_setinheritanceizz$Set inheritance flag on a container.z.%prog [options]r rrr inherit_staterrraNcVP4R8Xd\PpM8VP4R8Xd\PpM\ RV,4hVP 4VnVPVP RR7Vn\VP VPV4Vn VP4VPPV\PRR.R7^,p\P"!4p \P$!TPT4T nRT9d4\P(!\+T4\P,R4T R &M2\P(!\+T4\P.R4T R &TPP1T 4R # \ d\ RT,4hi;i \ dp \ R T,T 4hR p ? ii;i) blockrUzUnknown inheritance state (%s)Trrr<rrrz"Error setting inheritance state %sN)rr rO GPO_INHERITrr%rgr&rhrlrirrrr}rrfrr~rNrrrrr) rrrrr rrrrrrks &&&&&&& rCr'cmd_setinheritance.runs    G +44K  "i /**K?-OP P((*--dgg-M $''4::q1  O**##S^^/@+6-$99:MN N O XCmSUVW W Xs$ 5G*G(G%( H 3HH r)r*rrs@rCrrzsf.?H W))w--G.. !/2J tALM"X"XrErca]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7] !R R ] R 7.tRRltRtVtR #) cmd_fetchizDownload a GPO.r`r rrrrrra--tmpdir,Temporary directory for copying policy filesNcVP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7VnVP4\VPV4^,p\TR,^,4p \T 4wrp \!Y{TPTPR7p TP#Y14wr>\%YT4TP&P)R T,4R # \d\RT,4hi;i \d\RT ,4hi;i \dp\R T4hR p?ii;i) TrrercrerfrxInvalid GPO path (%s)rhError copying GPO from DCNGPO copied to %s )r%rgr&rhrSrirrlrrrrfrrrrr4rrrr)rrrrr rrr|rrdom_nameservice sharepathrrrks&&&&&&& rCr' cmd_fetch.runs((*--dgg-M  i((B%KH'-6s^ *X ktww$(JJ0..v; ? *4F C ,v56- @83>? ? @ >6<= = > ?:A> > ?s0?E*6F : F,*F F), G7 GGr)NNNNNrrs@rCrrso&H W))w--G.. J tALz NUXYM &7&7rErc a]tRtRtoRtRtR]PR]PR]P/t R.t ] !RR ] R 7] !R R ] R 7] !R RRRR7] !RRR] R7.tRRlt]R4tRtVtR#) cmd_backupiz Backup a GPO.r`r rrrrrrarrz --generalizez"Generalize XML entities to restoreFrrrr --entitiesz4File to export defining XML entities for the restoreent_file)rrrNc  VP4VnVPVPRR7VnV'd(VP R4'dVR,p W nMG\ VPVP4p \VPVPV R7VnVP4\VPV4^,p \T R,^,4p \T 4wrp\!YTPTPR7pTP#Y14wpp\%YT4TP&P)R T,4T'EdTP&P)R 4\*P-TP&TT4pTP/4UUu.uF wppTT3NK pppTP14R P3RT44pT'dR\5TR4;_uu_4pTP)T4R R R 4TP&P)RT,4M6TP&P)R4TP&P)T4RFmpTT 9gK \5\6P8P3TTR,4R4;_uu_4pTP)T T,^,4R R R 4Ko R # \d\RT,4hi;i \d\RT ,4hi;i \dp\R T4hR p?ii;iuuppi +'giELF;i +'giEK;i)TrrercrerfrxrrhrNrz( Attempting to generalize XML entities: rKc3V"TFwrRVPR4 RV R2xK! R#5i)z N)rP)r_entvals& rCr`!cmd_backup.run..2s15+3xs'syy&7r#dC+3s')wz$Entities successfully written to %s z Entities: .SAMBAEXTrryrz)r%rgr&rhrSrirrlrrrrfrrrrr4rrrrrgeneralize_xml_entitiesitemsrr?rrr)rrrr generalizer rrrr|rrrrrrrrkentitieskvent_listentsrexts&&&&&&&&& rCr'cmd_backup.runs((*--dgg-M  i((B%KH'-6s^ *X ktww$(JJ0..v; ? ,Tf E ,v56 : IIOOH I!99$))V:@BH,4>>+;<+;41aA+;H< MMO775+355D(C((AGGDM)  G (!)* 0 %ICcz"'',,vs[/@A4HHAGGCHQK(IHI[ @83>? ? @ >6<= = > ?:A> > ?= )((IHHsN?L6L!; MM!M' M;L!L? M MM' M8 ; N c/p\PPV4'g\P!V4V.pV.pV'EdVP 4pVP 4p\P !V4pVP 4VEFp \PPWi4p \PPWy4p \PPV 4'dbVPV 4VPV 4\PPV 4'g\P!V 4KKV PR4'd\PPV 4RRp \V 4p \V R4;_uu_4pVP4pRRR4\P !X4pV P#VW4pEKe\PP)W4'dEK\*P,!W4EK EKV# +'giL;i \$dTP'RT ,4EKi;i)rNrz%SKIPPING: Generalizing failed for %s )rrrrrrrr?rrUendswithbasenamerrrET fromstringgeneralize_xmlrrsamefileshutilcopy2)r sourcedir targetdirrrrrrrrkrrto_parserltempr concrete_xmlfound_entitiess&&& rCr"cmd_backup.generalize_xml_entitiesDsww~~i(( HHY fJJLEJJLEjj'G LLNe/e/77==((MM&)MM&)77>>&11(2v..$&77#3#3F#;CR#@!,X!6\!%fc!2!2e',zz|"3,.==+>L-3-B-B [options]r rrrrrrarrNcVP4VnVPVPRR7Vn\ VPVPR7pV'dtVP R4'd]VR,pW n\P\P,\P,p VPWR7p M\P\P,\P,p VPVPPR4V R7p V Pp\VPVPVR7VnVP4\!VP"VR 7p V P$^8d\'R V,4h\)\*P,!44p R V P/4,p WnV P2pR V: R V: RV : 2pVP5W=4wVnpVVn\:P<!\:P>PAVR44\:P<!\:P>PAVR44Rp\C\:P>PAVR4R4;_uu_4pVPEV4RRR4\IT4wpppTTn%\MTTTPTPR7pTTn'TP"PQ4\STP"T 4p\TPV!4pTTn,\TPZ!R\TP\R4TR&TP"P_T4\TPV!4p\TP`!TP"R\)T4,4Tn,\TPZ!R\TP\R4TR&TP"P_T4\TPV!4p\TP`!TP"R\)T4,4Tn,\TPZ!R\TP\R4TR&TP"P_T4\bPd\bPf,\bPh,p\!TP"T TR7^,p T R,^,p\k\bPlT4Po4p\bPp!TP"Ps44p\uTTRR 7p\wTT4\bPd\bPf,\bPh,\bPx,pTP{TTT4\}TTT4\TPV!4pTTn,\TPZ!T\TP~R!4TR"&\TPZ!T\TP~R#4TR$&\TPZ!R%\TP~R&4TR'&\TPZ!R(\TP~R)4TR*&\TPZ!R%\TP~R+4TR,&R-.p TP"PTT R.7TP"P4Tf!\P!TP64TPPER/T: R0T : R124R# +'giEL;i \Fdp\'RT4hRp?ii;i \FdTP"P4hi;i)2Tr)rhrgrerc)addressrAri)domainrAre)rz%A GPO already existing with name '%s'{%s}rz\sysvol\z \Policies\MachineUserz[General] Version=0 zGPT.INIrNzError Creating GPO filesrhgroupPolicyContainerr7a01 CN=User,%sr CN=Machine,%s)rrrtF)rsrwa02rxa03r"rua052gpcFunctionalityVersiona07rAa04zpermissive_modify:0)rszGPO 'z ' created as r$)Fr%rgr&rhrrSrirNBT_SERVER_LDAP NBT_SERVER_DSNBT_SERVER_WRITABLEfinddcrt pdc_dns_namerlrrrcountrruuiduuid4uppergpo_name dns_domainrrrrrrr?rrrfrrr4rtransaction_startr5r}rrNrraddr~r rErFrGr rHrsdom_sidget_domain_sidrr3SECINFO_PROTECTED_DACLset_aclrrrtransaction_committransaction_cancelrrmtreer)!rrrrr rrnetr|rA cldap_retrguidrriunc_pathr gpt_contentsrrkrrrrrr ds_sd_flags ds_sd_ndrds_sd domain_sidfs_sdsiorss!&&&&&&& rCr'cmd_create.runs((*--dgg-M  tww/ i((B%KH((&&',,-E ; DI((&&',,-E $''++g*>e LI#00KdggtzzkBDH 4::;? 99q=FTU UDJJL!tzz|# $$9>sK#33F@ V  > HHRWW\\&)4 5 HHRWW\\&&1 27Lbggll695s;;q %< *38)<&7I"k7tww$(JJ0  $$&; , C0F AAD))*@#BRBRTabAeH JJNN1  A66$**lS[&@AAD))+s7G7GWAeH JJNN1  A66$**oF &CDAD))+s7G7GWAeH JJNN1 $11#112#001Ktzzs[I!LC23A6Ix22I>FFHE"))$***C*C*EFJz5AE "$ 2))))*(()223C LLE3 / +4 C AAD))+s7K7K][AeH))(C4H4HJZ[AeH))#s/C/C_UAeH))#s/C/CE^_AeH))#s/C/CWMAeH-.H JJ  a(  3 JJ ) ) + > MM$++ & k3GH_<;; >91= = >F  JJ ) ) +  sD-B^ ^^>O%^: ^ ^^ ^7& ^22^7:'_!)rrhr$rrgrrrirrrs@rCr r yss.H W))w--G..  J tALz NUXYM ~I~IrEr c aa]tRtRtoRtRtR]PR]PR]P/t RR.t ] !R R ] R 7] !R R ] R 7] !RR] R 7] !RRRRR7.tRRlt]R4tRV3RlltRtVtV;t#) cmd_restorei z!Restore a GPO to a new container.z/%prog [options]r rrrbackuprrrarrrz8File defining XML entities to insert into DOCTYPE headerz--restore-metadataz7Keep the old GPT.INI file and associated version numberFrrc Rp\PPV4'g\P!V4V.pV.pV'Ed(VP 4pVP 4p\P !V4p V P 4V EFp \PPWz4p \PPW4p \PPV 4'dbVPV 4VPV 4\PPV 4'g\P!V 4KKV PR4'gK\PPV 4RRp \V 4p\V R4;_uu_4pVP4pRpVPV4'dCV\!V4RpVP#\$P&!VV,V,44M,VP#\$P&!VV,44VP)V RR4RRR4EK EK0R# +'giEK;i \*diT RRT,p\,P.!TT RR4TP0P3RT ,4TP0P3R4EKh^RIpTP74T RRT,p\,P.!TT RR4TP0P3RT ,4TP0P3R4EK;i) rrNrz&zWARNING: No such parser for %s z.WARNING: Falling back to simple copy-restore. z%WARNING: Error during parsing for %s r)rrrrrrrr?rrUrrrrrrSrRload_xmlrr write_binaryrrrrr traceback print_exc)rrr dtd_headerrrrrrrrkrrrrrrxml_head original_filerAs&&&& rC restore_from_backup_to_local_dir,cmd_restore.restore_from_backup_to_local_dir!sww~~i(( HHY fJJLEJJLEjj'G LLNe/e/77==((MM&)MM&)77>>&11(2v..$&77#3#3F#;CR#@!,X!6#_!%fc!2!2e',zz|+S#'??8#<#<,0H +?D%+OOBMM(ZBWZ^B^4_$`$*OOBMM*tBS4T$U!' 3 3F3BK @!"3!2% 0"3!2!2$ 3_,23BK&,@M"LLs D IIOO,NQY,YZ IIOO,]^^ _,%//1-33BK&,@M"LLs D IIOO,TW],]^ IIOO,]^^s3$J 8B,I6$J 6 J J J  A.M9=A8M9cVfR#\V4;_uu_4pVP4P4pRRR4RX R2p\P !4pTP TR,R4T# +'giLG;i \RT R24h;i \Pdp\RT 24hRp?ii;i) NrKzCould not open entities file: ''z zTzfEntities file does not appear to conform to format e.g. Expat error message: )rrrPrr ParserCreateParse ExpatError)rrcontentsrCprks& rCgenerate_dtd_headercmd_restore.generate_dtd_headeres   Nh1668>>+ ,H:V<     < GGJ+T 2!  N!@ !LM M < 789c ;< < PA\CT4R,4TP>PAR4\E4pTP TPY6Yx4\RT,4hRp?ii;i) z"Backup directory does not exist %sNT)rrrrr$z%Failed to restore GPO -- deleting... zFailed to restore: %sr)#rrrrrOsuperr'rr$rrrFrrrr5rr?rrr}rrNrrrrr.rfrArBrrrcmd_del)rrr=rrrr rrrestore_metadatarCrkeep_new_filesrrext_filerrrrkrAcmd __class__s&&&&&&&&&& rCr'cmd_restore.runs ww~~f%%CfLM M--h7   KFxM/ <~&*&;&;FMM&R# V$   1 1&++2< >"21N +499dkk+/>>?C?M O   DMM:FM77<<k0AB77>>(++h-- vvx. A!AD //c6J6J035AcFJJ%%a(M~ dkk*.- <     ! IIOOCFTM * IIOOD E)C GGDMM1 G6:; ; 9<9? ? @8  JJ ) ) +  s?7K2E3L2L'L:r)r*rrs@rCrSrSsa&H W))w--G.. J tALM6363rErSc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t RRltRtVtR #) cmd_aclchecki z.Check all GPOs have matching LDAP and DS ACLs.r r rrrrrrrrNc VP4VnVPVPRR7Vn\ VPVPV4VnV'd(VP R4'dVR,pWnMG\VPVP4p\ VPVPVR7VnVP4\VPR4pVEFgp\VR,^,4p\V4wrp \YZTPTPR7p T P!T \"P$\"P&,\"P(,\"P*4p R T9d \R 4hTR ,^,p\-\"P.T4P14p\"P2!TPP544p\7TT4pT P1T4T8wgEKD\R T P1T4: R T : R T: 24h R# \d\RT,4hi;i)TrrercreNrxrrhrtzKCould not read nTSecurityDescriptor. This requires an Administrator accountzInvalid GPO ACL z on path (z ), should be )r%rgr&rhrlrirSrrrrrrrrr4get_aclr rErFrGSEC_FLAG_MAXIMUM_ALLOWEDr rHrsr(r)r)rrr rrr|rrrrrrrr8r5r6r7expected_fs_sddls&&&&& rCr'cmd_aclcheck.runs((*--dgg-M $''4::q1 i((B%KH'FFHE"))$***C*C*EFJ*5*=  j)-=="V[VcVcdnVoqz}M$NOO5  B"#:S#@AA Bs I**Jr)r*r+rs@rCrara sd8 H W))w--G.. tW#JQT3 (M -O-OrErac a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7] !R R] ] PP]P"!4R4R7.tRRltRtVtR#) cmd_admxloadiJz Loads samba admx files to sysvolr r rrrrrrrrz --admx-dirz)Directory where admx templates are storedz samba/admx)rrrNc HVP4VnVPVPRR7VnV'd(VP R4'dVR,pWnMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pRPVPPR4P4R R .4pVPV4\$P&!T4Fwrp T Fp T P)TR 4p\$P*PY4pRPY.4P)RR4pRPTT .4p\-TT4\/TR4;_uu_4pTP1TTP344R R R 4K K TP4P7R4R # \dPp T P^,\8Xd \!R 4hT P^,\"8wdhR p ? ELLR p ? ii;i \dPp T P^,\8Xd \!R 4hT P^,\"8wdhR p ? ELR p ? ii;i \d3p T P^,\8Xd \!R 4hR p ? ELR p ? ii;i +'giEK;i)TrrercrergrhrrirjPolicyDefinitionsrkNrKrraInstalling ADMX templates to the Central Store prevents Windows from displaying its own templates in the Group Policy Management Console. You will need to install these templates from https://www.microsoft.com/en-us/download/102157 to continue using Windows Administrative Templates. )r%rgr&rhrSrirrlr4r?rtrrrrur2rr1rwalkrrr3rrrrr)rrr rradmx_dirr|rsmb_dirrkdirnamedirsfilesfname path_in_admx full_pathsub_dirsmb_pathrs&&&&&& rCr'cmd_admxload.run\s((*--dgg-M  i((B%KH'?  JJw %'GGH$5 G5&x< GGLL8 ))W$;<DDS$O99gu%56)$8)T**aQ h9+*%6* P Q9 vvay33"$DEE==>  %vvay$;;*,LMM&EEF )Q66!9(??".0P#QQ@Q+**sb H& I2L  K I/ AI**I/2 K =AKK  L 'L L L L  L! r)r)rrrrr,r-rHr.r/r0r1rrrrr?r$data_dirr2r'rrrs@rCrhrhJs* H W))w--G.. tW#JQTC )|"M"'',,u~~/?"N PM8Q8QrErhc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7] !R RRRR7.t .ROtRRltRtVtR#)cmd_add_sudoersiaAdds a Samba Sudoers Group Policy to the sysvol This command adds a sudo rule to the sysvol for applying to winbind clients. The command argument indicates the final field in the sudo rule. The user argument indicates the user specified in the parentheses. The users and groups arguments are comma separated lists, which are combined to form the first field in the sudo rule. The --passwd argument specifies whether the sudo entry will require a password be specified. The default is False, meaning the NOPASSWD field will be specified in the sudo entry. Example: samba-tool gpo manage sudoers add {31B2F340-016D-11D2-945F-00C04FB984F9} ALL ALL fakeu fakeg The example command will generate the following sudoers entry: fakeu,fakeg% ALL=(ALL) NOPASSWD: ALL z7%prog [groups] [options]r rrrrrrrrz--passwdrFz;Specify to indicate that sudo entry must provide a passwordrNc  VP4VnV PVPRR7VnV'd(VP R4'dVR,p WpnMG\ VPVP4p \VPVPV R7Vn\V RVPVPR7p VP4\WPVPVPV4p VPPR4pRPVP4R VR R .4pRPVR .4p\P !\P"!V P%V444pVP'4P)R 4pVP)R4p\P6!TR4pT'd\P6!TR4\P6!TR4pTTn\P6!TR4pTTn\P6!TR 4pTP?R!4F0p\P6!TR"4pTTnRTP@R#&K2 TeETP?4F0p \P6!TR"4pT TnR$TP@R#&K2 \C4p!TPET!R%RR&7T!PG^4\IY4T PKTT!PM44T PORR'7R# \*EdXpTP,^,\.\0\239Ed\P !\P4!R44p\P6!TP'4R 4p\P6!TR4pRTn\P6!TR4pRTn\P6!TR4pRTn\P6!TR4pRTn\P6!TR4p\P6!TR4pRTnRp?ELTP,^,\:8Xd \=R4hhRp?ii;i \*d.pTP,^,\:8Xd \=R4hhRp?ii;i)(TrrercrergrhrirrjMACHINE\VGP\VTLA\SudoSudoersConfiguration manifest.xml policysettingr vgppolicyversion1rvz Sudo Policy descriptionz!Sudoers File Configuration Policy apply_modemerge load_plugintruerkN sudoers_entrypasswordcommandr= listelement, principalrgroupUTF-8encodingxml_declarationmachine_changed)(r%rgr&rhrSrirrlr4rr6rrtr?rr ElementTreerrgetrootfindrrur.r/r0Element SubElementtextr2rrQrr*rseekr3rrincrement_gpt_ini)"rrrr=usersgroupspasswdrr rrr|rrrivgp_dirvgp_xmlxml_datar~rrkpvrvrrrr command_elmuser_elmrurrYouts"&&&&&&&&&&& rCr'cmd_add_sudoers.runs((*--dgg-M  i((B%KH'>>>"**[*AB " h.>.>.@.=!? ]]=)<}}]F;)  mmM=I #F  ]]=,G ") }}]F; mmD-@ #)   55"$DEE/ d vvay33"$DEE   s8 A)M=R4 R1D$R,(R,,R14 S,?(S''S,r))rrr=rzgroups?)NNNNNNrrrrr,r-rHr.r/r0r1rrr2r]r'rrrs@rCryrys&IH W))w--G.. tW#JQTC )z,Q SM@JUUrEryc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R .tRRltRtVtR#)cmd_list_sudoersizList Samba Sudoers Group Policy from the sysvol This command lists sudo rules from the sysvol that will be applied to winbind clients. Example: samba-tool gpo manage sudoers list {31B2F340-016D-11D2-945F-00C04FB984F9} r`r rrrrrrrrrNcVP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVPPR4pRPVP4R VR R .4p \P!VPV 44p T EekT P-R4p T P,!R4p T P/R4EF1pTP-R4P0pTP-R4P0pTP/R4p.pTF#pTP3TP/R44K% \5T4^8dXRPTUu.uF:pTP6R,R8Xd TP0MRTP0,NK< up4pMRpTP-R4R JpT'dRMRpT: RT: RT: RT: 2pTP8P;RT,4EK4 RPTP4R TR .4p\=\>P@TPT44pR!pTPBFvp\ETPF4T8XgK\ITPJ4PM4'gKJTP8P;RTPJ,4Kx R # \d]p T P ^,\"\$\&39d R p R p ? ELT P ^,\(8Xd \+R 4hhR p ? ii;iuupi \d[p T P ^,\"\$\&39dR p ? R #T P ^,\(8Xd \+R 4hhR p ? ii;i)"Trrercrergrhrirrjr{z!SudoersConfiguration\manifest.xmlNrkr~rrrr=rrrr%s%%ALLr NOPASSWD:rK ALL=()r=%s MACHINE\Registry.pols1Software\Policies\Samba\Unix Settings\Sudo Rights)'r%rgr&rhrSrirrlr4rtr?rrrrrrur.r/r0r2rrfindallrextendrRrrrr rrrvr&rlr'rrP)rrrr rrr|rrirrrkrrrrr= listelements principalsrruname nopasswordnp_entryrNr~rrls&&&&&& rCr'cmd_list_sudoers.run*s((*--dgg-M  i((B%KH'> 55"$DEE .&B vvay:<<>>vvay33"$DEE  sC%M<AO& )O+< O#)O6(OO#+ Q6'Q #(Q  Qr)r*rrs@rCrrsq'H W))w--G.. tW#JQTC )M JK5K5rErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R R.tRRltRtVtR#)cmd_remove_sudoersiwaRemoves a Samba Sudoers Group Policy from the sysvol This command removes a sudo rule from the sysvol from applying to winbind clients. Example: samba-tool gpo manage sudoers remove {31B2F340-016D-11D2-945F-00C04FB984F9} 'fakeu ALL=(ALL) NOPASSWD: ALL' %prog [options]r rrrrrrrrrrNc VP4VnVPVPRR7VnV'd(VP R4'dVR,pW0nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVP4\WPVPVPV4p VPPR4p RPV P4R VR R .4p RPV R .4p \P !\P"!VP%V 444p V P'4P)R 4pVP)R4pRPT P4R TR.4p\9\:P<TP%T44p/pT'dTP?R4M.EFpTP)R4P@pTP)R4P@pTP?R4p.pTF#pTPCTP?R44K% \ET4^8dXRPTUu.uF:pTPFR,R8Xd TP@MRTP@,NK< up4pMRpTP)R4RJpT'dRMRpT: RT: RT: R T: 2pTTT&EK TTPI49dTPKTT,4\M4pX POTR!RR"7TPQ^4\SY4TPUT TPW44T PYRR#7R#TT'd'TPZUu.uFpTP\NK upM.9dvTPZUu.uFpTP\T8wgKTNK pp\ET4Tn/TTn-TPUT\aT44T PYRR#7R#\7R$T,4h \*d]pTP,^,\.\0\239d RpRp?ELTP,^,\48Xd \7R4hhRp?ii;i \*d]pTP,^,\.\0\239d RpRp?EL2TP,^,\48Xd \7R4hhRp?ii;iuupi \*d.pTP,^,\48Xd \7R4hhRp?ii;iuupiuupi \*d.pTP,^,\48Xd \7R4hhRp?ii;i)%Trrercrergrhrirrjr{r|r}r~rNrkrrrr=rrrrrrrrrKrrr=rrr,Cannot remove '%s' because it does not exist)1r%rgr&rhrSrirrlr4rr6rrtr?rrrrrrrrrur.r/r0r2rr rrrrrrRrkeysrr*rrr3rrrrvr num_entriesr )rrrrr rrr|rrrirrrr~rrkr~rrvrr=rrrrrrrrNrs&&&&&&& rCr'cmd_remove_sudoers.runs((*--dgg-M  i((B%KH'AffY',,G66&>&&D99]3LJ+ !!+"5"5k"BC ,:"2<">2? +t3J'1|rH&+T8WEAGAJ?" GLLN " KK ')C NN3$N G HHQK %d4 gsxxz2%%d%; X(8(89(81(892 N"*"2"2F"2Qaffoqq"2GF#&w>55"$DEE  vvay:<<>> 55"$DEE (">&! 66!9 77&(HII   :F! 66!9 77&(HII  s A)R$-)TAU8 )=U=?V8+V=V=#-W$ T /)T(TT  U5)U0(U00U5= V5(V00V5 W: (W55W:r)r*rrs@rCrrwst/H W))w--G.. tW#JQTC )M !Jh&h&rErcZ]tRtRtRt/t]!4]R&]!4]R&]!4]R&Rt R#) cmd_sudoersiz#Manage Sudoers Group Policy Objectsr'rrr^N) rrrrr, subcommandsryrrrr^rErCrrs1-K(*K*,K.0KrErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t .ROtRRltRtVtR #)cmd_set_securityi a Set Samba Security Group Policy to the sysvol This command sets a security setting to the sysvol for applying to winbind clients. Not providing a value will unset the policy. These settings only apply to the ADDC. Example: samba-tool gpo manage security set {31B2F340-016D-11D2-945F-00C04FB984F9} MaxTicketAge 10 Possible policies: MaxTicketAge Maximum lifetime for user ticket Defined in hours MaxServiceAge Maximum lifetime for service ticket Defined in minutes MaxRenewAge Maximum lifetime for user ticket renewal Defined in minutes MinimumPasswordAge Minimum password age Defined in days MaximumPasswordAge Maximum password age Defined in days MinimumPasswordLength Minimum password length Defined in characters PasswordComplexity Password must meet complexity requirements 1 is Enabled, 0 is Disabled r`r rrrrrrrrNcVP4VnVPVPRR7VnV'd(VP R4'dVR,pW@nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7p VP4\WPVPVPV4p VPPR4p RPV P4R VR .4p RPV R .4p \R R 7p\ VnV P%V 4pVP'\)VP+444RRRRRRRRRRRRRR/pTT,pXP=T4'gTP?T4TeTPATY#4MBTPCTT4\ETPGT44^8XdTPIT4\)4pTPKT4\MY4T POT \QTPS444T PURR7R # \,d.TP'\)TP+R444EL5i;i \.d[pTP0^,\28Xd \5R4hTP0^,\6\8\:39dhR p?ELR p?ii;i \.d.pTP0^,\28Xd \5R4hhR p?ii;i)Trrercrergrhrirrjz$MACHINE\Microsoft\Windows NT\SecEditz GptTmpl.infN interpolationutf-16rk MaxTicketAgeKerberos Policy MaxServiceAge MaxRenewAgeMinimumPasswordAge System AccessMaximumPasswordAgeMinimumPasswordLengthPasswordComplexityr)+r%rgr&rhrSrirrlr4rr6rrtr?rr(r optionxformr read_filer)rxUnicodeDecodeErrorrrur2rr.r/r0 has_section add_sectionset remove_optionrRrHremove_sectionrr3rr&getvaluer)rrrr@rr rrr|rrriinf_dirinf_fileinf_datarawrk section_mapsectionrs&&&&&&&& rCr'cmd_set_security.run0 s ((*--dgg-M  i((B%KH'  ! !$ ! 7G& C""8CJJx,@#AB C vvay33"$DEEvvay!>!@!@!BBB  D vvay33"$DEE  sP(K)(J.&AM.4K&"K)%K&&K)) M4AM  M N (NN r))rrvalue?rrrs@rCrr sp@'H W))w--G.. tW#JQTC )M -JIIrErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R .tRRltRtVtR#)cmd_list_securityi{ aList Samba Security Group Policy from the sysvol This command lists security settings from the sysvol that will be applied to winbind clients. These settings only apply to the ADDC. Example: samba-tool gpo manage security list {31B2F340-016D-11D2-945F-00C04FB984F9} r`r rrrrrrrrrNcVP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVPPR4pRPVP4R VR .4p \R R 7p \V nVPV 4p V P!\#V P%444T P74FIp T R9dK T P9T 4F(wrTP:P=T: RT: R24K* KK R # \&d-T P!\#T P%R 444Li;i \(d[p T P*^,\,\.\039dR p ? R #T P*^,\28Xd \5R4hhR p ? ii;i)Trrercrergrhrirrjz0MACHINE\Microsoft\Windows NT\SecEdit\GptTmpl.infNrrrk = r$)rr)r%rgr&rhrSrirrlr4rtr?rr(rrrrr)rxrrrur.r/r0r2rsectionsrrr)rrrr rrr|rrirrrrkrrr@s&&&&&& rCr'cmd_list_security.run s((*--dgg-M  i((B%KH'>vvay33"$DEE  s<(G:9(G4G74G:6G77G:: I'I2(IIr)r*rrs@rCrr{ so'H W))w--G.. tW#JQTC )M J+<+44T PTP:4pTP@PCTP:: RT: R24K R # \ d[p T P"^,\$\&\(39dR p ? R #T P"^,\*8Xd \-R 4hhR p ? ii;i)TrrercrergrhrirrjrNrk Software\Policies\Samba\smb_confrr$)"r%rgr&rhrSrirrlr4rtr?rr rrrrrur.r/r0r2rr$LoadParmrvr&rlrrmrrrr)rrrr rrr|rrir~rrkrlrgrrs&&&&&& rCr'cmd_list_smb_conf.run s((*--dgg-M  i((B%KH'>vvay33"$DEE  s)G88 I'I0(IIr)r*rrs@rCrr sq'H W))w--G.. tW#JQTC )M J'F'FrErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t .ROtRRltRtVtR #)cmd_set_smb_confi a%Sets a Samba smb.conf Group Policy to the sysvol This command sets an smb.conf setting to the sysvol for applying to winbind clients. Not providing a value will unset the policy. Example: samba-tool gpo manage smb_conf set {31B2F340-016D-11D2-945F-00C04FB984F9} 'apply gpo policies' yes rr rrrrrrrrNcVP4VnVPVPRR7VnV'd(VP R4'dVR,pW@nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7p VP4\WPVPVPV4p VPPR4p RPV P4R VR .4p RPV R .4p \\ P"V P%V 44pTfY.P4Uu.uFqP6NK up9d\3RT,4hTP4Uu.uFpTP6T8wgKTNK ppTTn\9T4TnEM\=T4P4R9d^p^pMf\=T4P4R9d^p^pMC\=T4P?4'd^p\A\=T44pM ^p\CT4p\ PD!4pRTn#\CT4TnTTn$TTn%\MTP44pTPOT4TTn\9T4Tn\QY4T PST \UT44T PWRR7R # \&dppTP(^,\*\,\.39d\ P"!4pR p?ELTP(^,\08Xd \3R 4hhR p?ii;iuupiuupi \&d.pTP(^,\08Xd \3R 4hhR p?ii;i)Trrercrergrhrirrjrqz Registry.polrkNrrr)yesrr)nofalser"),r%rgr&rhrSrirrlr4rr6rrtr?rr rrrrrur.r/r0r2rrvrmrRrr' isnumericrVr&rrlrrrrUr3rr r)rrsettingr@rr rrr|rrripol_dirr~rrkrvetypers&&&&&&&& rCr'cmd_set_smb_conf.run! s\((*--dgg-M  i((B%KH'AI#G,AKAFAF8++,G NN1 &H #&w> 99;55"$DEE F+> vvay33"$DEE   sH)M OO -O 8O O(N>>O P(PPr)rrrrrrs@rCrr so/H W))w--G.. tW#JQTC )M .JMMrErcF]tRtRtRt/t]!4]R&]!4]R&RtR#) cmd_smb_confip z$Manage smb.conf Group Policy Objectsrrr^N) rrrrr,rrrrr^rErCrrp s$.K+-K)+KrErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R .tRRltRtVtR#)cmd_list_symlinkiv zList VGP Symbolic Link Group Policy from the sysvol This command lists symlink settings from the sysvol that will be applied to winbind clients. Example: samba-tool gpo manage symlink list {31B2F340-016D-11D2-945F-00C04FB984F9} r`r rrrrrrrrrNcjVP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVPPR4pRPVP4R VR R .4p \P!VPV 44p T P-R4p T P,!R4p T P/R4F]pTP-R4pTP-R4pTP0P3RTP4: RTP4: R24K_ R # \d[p T P ^,\"\$\&39dR p ? R #T P ^,\(8Xd \+R 4hhR p ? ii;i)TrrercrergrhrirrjMACHINE\VGP\VTLA\UnixzSymlink\manifest.xmlNrkr~rfile_propertiessourcetargetzln -s r=r$r%rgr&rhrSrirrlr4rtr?rrrrrrur.r/r0r2rrrrrr)rrrr rrr|rrirrrkrrrrrs&&&&&& rCr'cmd_list_symlink.run s((*--dgg-M  i((B%KH'O$))(3F$))(3F IIOOv{{FKKH I ? vvay:<<>>vvay33"$DEE  s%G H2'H-(H--H2r)r*rrs@rCrrv sq'H W))w--G.. tW#JQTC )M J'J'JrErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t .ROtRRltRtVtR #)cmd_add_symlinki zAdds a VGP Symbolic Link Group Policy to the sysvol This command adds a symlink setting to the sysvol that will be applied to winbind clients. Example: samba-tool gpo manage symlink add {31B2F340-016D-11D2-945F-00C04FB984F9} /tmp/source /tmp/target '%prog [options]r rrrrrrrrNcVP4VnVPVPRR7VnV'd(VP R4'dVR,pW@nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7p VP4\WPVPVPV4p VPPR4p RPV P4R VR .4p RPV R .4p \P !\P"!V P%V 444pVP'4P)R 4pVP(!R 4p\P6!TR4p\P6!TR4pTTn\P6!TR4pTTn\?4pTPATRRR7TPC^4\EY4T PGT TPI44T PKRR7R# \*EdpTP,^,\.\0\239d\P !\P4!R44p\P6!TP'4R 4p\P6!TR4pRTn\P6!TR4pRTn\P6!TR4pRTn\P6!TR 4pRp?ELTP,^,\:8Xd \=R4hhRp?ii;i \*d.pTP,^,\:8Xd \=R4hhRp?ii;i)TrrercrergrhrirrjMACHINE\VGP\VTLA\Unix\Symlinkr}r~rrrrrvzSymlink PolicyrzSpecifies symbolic link datarkNrrrrrr)&r%rgr&rhrSrirrlr4rr6rrtr?rrrrrrrrrur.r/r0rrrr2rr*rrr3rrr)rrrrrr rrr|rrrirrrrrrkr~rrvrr source_elm target_elmrs&&&&&&&& rCr'cmd_add_symlink.run s((*--dgg-M  i((B%KH'>>>"**[*AB " h.>.>.@.=!? ]]=)<}}]F;,  mmM=I #A  }}]F;55"$DEE' D vvay33"$DEE   s8A*J =N4 N1C'N,(N,,N14 O,?(O''O,r)rrrr*rrs@rCr r  so9H W))w--G.. tW#JQTC )M -JDDrEr c a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t .ROtRRltRtVtR #)cmd_remove_symlinki aRemoves a VGP Symbolic Link Group Policy from the sysvol This command removes a symlink setting from the sysvol from applying to winbind clients. Example: samba-tool gpo manage symlink remove {31B2F340-016D-11D2-945F-00C04FB984F9} /tmp/source /tmp/target r r rrrrrrrrNcVP4VnVPVPRR7VnV'd(VP R4'dVR,pW@nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7p VP4\WPVPVPV4p VPPR4p RPV P4R VR .4p RPV R .4p \P !\P"!V P%V 444pVP'4P)R 4pVP(!R 4pTP9R4F\pTP)R4pTP)R4pTP:T8XgK8TP:T8XgKKTP=T4M \5RT,T4h\?4pTPATRRR7TPC^4\EY4T PGT TPI44T PKRR7R# \*dhpTP,^,\.\0\239d\5RT,T4hTP,^,\68Xd \5R4hhRp?ii;i \*d.pTP,^,\68Xd \5R4hhRp?ii;i)Trrercrergrhrirrjrr}r~rz>Cannot remove link from '%s' to '%s' because it does not existrkNrrrrrr)&r%rgr&rhrSrirrlr4rr6rrtr?rrrrrrrrrur.r/r0rr2rrrr*rrr3rrr)rrrrrr rrr|rrrirrrrrrkrrrrs&&&&&&&& rCr'cmd_remove_symlink.run. s((*--dgg-M  i((B%KH'O(--h7J(--h7J&(Z__-F O, ? ;=C DEKM MisWdC    !$ 0 MM'388: .  ! !$ ! 7; vvay:<<>>#$028$9:@BB55"$DEE < vvay33"$DEE   s2A*J<==L1< L.A"L))L.1 M)<(M$$M)r)rr*rrs@rCrr so9H W))w--G.. tW#JQTC )M -J@@rErcZ]tRtRtRt/t]!4]R&]!4]R&]!4]R&Rt R#) cmd_symlinkip z#Manage symlink Group Policy Objectsrr'rr^N) rrrrr,rrr rrr^rErCrrp s1-K*,K(*K.0KrErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R .tRRltRtVtR#)cmd_list_filesiw zList VGP Files Group Policy from the sysvol This command lists files which will be copied from the sysvol and applied to winbind clients. Example: samba-tool gpo manage files list {31B2F340-016D-11D2-945F-00C04FB984F9} r`r rrrrrrrrrNc $VP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVPPR4pRPVP4R VR R .4p \P!VPV 44p T P-R4p T P,!R4p T P/R4FpTP-R4P0pTP-R4P0pTP-R4P0pTP-R4P0p\3T4p\5T4: RT: RT: RT: RT: 2 pTP6P9RT,4K R # \d[p T P ^,\"\$\&39dR p ? R #T P ^,\(8Xd \+R 4hhR p ? ii;i)TrrercrergrhrirrjrzFiles\manifest.xmlNrkr~rrrrr=r z -> r)r%rgr&rhrSrirrlr4rtr?rrrrrrur.r/r0r2rrrrr+r,rr)rrrr rrr|rrirrrkrrrrrr=rmoderNs&&&&&& rCr'cmd_list_files.run s((*--dgg-M  i((B%KH'>vvay33"$DEE  s%H** J5'J "(J  Jr)r*rrs@rCrrw so'H W))w--G.. tW#JQTC )M J,(,(rErc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t .ROtRRltRtVtR #) cmd_add_filesi aAdd VGP Files Group Policy to the sysvol This command adds files which will be copied from the sysvol and applied to winbind clients. Example: samba-tool gpo manage files add {31B2F340-016D-11D2-945F-00C04FB984F9} ./source.txt /usr/share/doc/target.txt root root 600 z=%prog [options]r rrrrrrrrNc  VP4VnV PVPRR7Vn\P P V4'g\RV,4hV'd(VPR4'dVR,p Wpn MG\VPVP4p \VPVPV R7Vn \V RVPVPR7p VP4\WPVPVPV4p VPP!R4pR P#VP%4R VR .4pR P#VR .4p\&P(!\&P*!V P-V444pVP/4P1R 4pVP0!R4p\&P>!TR4p\&P>!TR4p\P PET4Tn \&P>!TR4pTTn \&P>!TR4pTTn \&P>!TR4pTTn R&Fwpp\&P>!TR4p T PGRT4\IT^4^T,,'d\&P>!T R4\IT^4^T,,'d\&P>!T R 4\IT^4^T,,'gK\&P>!T R!4K \K4p!TPMT!R"RR#7T!PO^4\QTR$4;_uu_4p"T"PS4p#RRR4R P#T\P PET4.4p$\UY4T PWTT!PS44T PWT$X#4T PYRR%7R# \2EdpTP4^,\6\8\:39d\&P(!\&P<!R44p\&P>!TP/4R 4p\&P>!TR4pRTn \&P>!TR4pRTn \&P>!TR4pRTn \&P>!TR4pRp?EL_TP4^,\B8Xd \R4hhRp?ii;i +'giEL;i \2d.pTP4^,\B8Xd \R4hhRp?ii;i)'TrzSource '%s' does not existrercrergrhrirrjMACHINE\VGP\VTLA\Unix\Filesr}r~rrrrrvFilesrz+Represents file data to set/copy on clientsrkNrrrr=r permissionsrrrexecuterrrr))r=)r)otherr)-r%rgr&rhrrrrrSrirrlr4rr6rrtr?rrrrrrrrrur.r/r0rrrr2rrrVr*rrrrr3rr)%rrrrr=rrrr rrr|rrrirrrrrrkr~rrvrrrrr group_elmptypeshiftr%rr source_data sysvol_sources%&&&&&&&&&&& rCr'cmd_add_files.run se((*--dgg-M ww~~f%%;fDE E i((B%KH'@A))Wn56 ~~bmmDMM'4J&KLH%%',,_=F;;v&D,--.?@]]?H= ''**62 ]]?H=  ==&9 MM/7;  ELE5--GK OOFE *4|se|,, k624|se|,, k734|se|,, k95FisWdC  &$  1&&(K  7BGG,<,>>>"**[*AB " h.>.>.@.=!? ]]=)<}}]F;#  mmM=I #P  }}]F;55"$DEE' V   vvay33"$DEE   sEA*Q& VAV#& V 2C'V(VV  V # W.(WWr))rrrr=rrr*rrs@rCr!r! sqOH W))w--G.. tW#JQTC )M FJXXrEr!c a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R R.tRRltRtVtR#)cmd_remove_filesi/ aRemove VGP Files Group Policy from the sysvol This command removes files which would be copied from the sysvol and applied to winbind clients. Example: samba-tool gpo manage files remove {31B2F340-016D-11D2-945F-00C04FB984F9} /usr/share/doc/target.txt z%prog [options]r rrrrrrrrrrNc VP4VnVPVPRR7VnV'd(VP R4'dVR,pW0nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVP4\WPVPVPV4p VPPR4p RPV P4R VR .4p RPV R .4p \P !\P"!VP%V 444p V P'4P)R 4pVP(!R 4pTP9R4FwpTP)R4pTP)R4pTP:T8XgK8RPT TP:.4pTP=T4TP?T4M \5RT,4h\A4pT PCTRRR7TPE^4\GY4TPIT TPK44T PMRR7R# \*dgpTP,^,\.\0\239d\5RT,4hTP,^,\68Xd \5R4hhRp?ii;i \*d.pTP,^,\68Xd \5R4hhRp?ii;i)Trrercrergrhrirrjr#r}r~rz1Cannot remove file '%s' because it does not existrkNrrrrrr)'r%rgr&rhrSrirrlr4rr6rrtr?rrrrrrrrrur.r/r0rr2rrunlinkrr*rrr3rrr)rrrrr rrr|rrrirrrrrrkrrrrrs&&&&&&& rCr'cmd_remove_files.runG s((*--dgg-M  i((B%KH'@A))Wn56 ~~bmmDMM'4J&KLH%%',,_=F;;v&D $||,=>O(--h7J(--h7J&(GZ__#=> F# O, ? ;=C DE EisWdC    !$ 0 MM'388: .  ! !$ ! 7? vvay:<<>>#$028$9::55"$DEE @ vvay33"$DEE   s2A*K=M  M!A!MM N(M==Nr)r*rrs@rCr1r1/ st0H W))w--G.. tW#JQTC )M "JBBrEr1cZ]tRtRtRt/t]!4]R&]!4]R&]!4]R&Rt R#) cmd_filesi z!Manage Files Group Policy Objectsrr'rr^N) rrrrr,rrr!r1rr^rErCr6r6 s0+K(*K&K,.KrEr6c a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R .tRRltRtVtR#)cmd_list_opensshi zList VGP OpenSSH Group Policy from the sysvol This command lists openssh options from the sysvol that will be applied to winbind clients. Example: samba-tool gpo manage openssh list {31B2F340-016D-11D2-945F-00C04FB984F9} r`r rrrrrrrrrNc VP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVPPR4pRPVP4R VR R .4p \P!VPV 44p T P-R4p T P,!R4p T P-R4pTP/R4FpTP-R4P0'dK&TP/R4FXpTP2P5TP-R4P0: RTP-R4P0: R24KZ K R # \d[p T P ^,\"\$\&39dR p ? R #T P ^,\(8Xd \+R 4hhR p ? ii;i)TrrercrergrhrirrjzMACHINE\VGP\VTLA\SshCfgzSshD\manifest.xmlNrkr~r configfile configsection sectionname keyvaluepairrr=r@r$r%rgr&rhrSrirrlr4rtr?rrrrrrur.r/r0r2rrrrrr)rrrr rrr|rrirrrkrrr:r;kvs&&&&&& rCr'cmd_list_openssh.run s((*--dgg-M  i((B%KH'>vvay33"$DEE  s%H I9'I4 (I44I9r)r*rrs@rCr8r8 sq'H W))w--G.. tW#JQTC )M J*E*ErEr8c a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t .ROtRRltRtVtR #)cmd_set_opensshi a"Sets a VGP OpenSSH Group Policy to the sysvol This command sets an openssh setting to the sysvol for applying to winbind clients. Not providing a value will unset the policy. Example: samba-tool gpo manage openssh set {31B2F340-016D-11D2-945F-00C04FB984F9} KerberosAuthentication Yes z'%prog [value] [options]r rrrrrrrrNcR VP4VnVPVPRR7VnV'd(VP R4'dVR,pW@nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7p VP4\WPVPVPV4p VPPR4p RPV P4R VR .4p RPV R .4p \P !\P"!V P%V 444pVP'4P)R 4pVP(!R 4pVP)R4pTeTP?R4FpTP)R4P8'dK&/pTP?R4FpTTTP)R4&K TTPA49dTTT,nKy\P6!TR4p\P6!TR4pTTn\P6!TR4pTTnK MTP?R4FpTP)R4P8'dK&/pTP?R4F!pTTTP)R4P8&K# TTPA49dTPCTT,4K\=RT,4h \E4pTPGTR RR!7TPI^4\KY4T PMT TPO44T PQRR"7R# \*EdpTP,^,\.\0\239Ed*\P !\P4!R44p\P6!TP'4R 4p\P6!TR4pRTn\P6!TR4pRTn\P6!TR4pRTn\P6!TR4pRTn\P6!TR 4p\P6!TR4p\P6!TR4p\P6!TR4Rp?ELdTP,^,\:8Xd \=R4hhRp?ii;i \*d.pTP,^,\:8Xd \=R4hhRp?ii;i)#TrrercrergrhrirrjzMACHINE\VGP\VTLA\SshCfg\SshDr}r~rr:rrrrvzConfiguration Filerz+Represents Unix configuration file settingsrrr;r<rkNr=rr@rrrr))r%rgr&rhrSrirrlr4rr6rrtr?rrrrrrrrrur.r/r0rrrr2rrrrr*rrr3rrr)rrrr@rr rrr|rrrirrrrrr:rkr~rrvrrr;settingsr?r=rdvaluers&&&&&&&& rCr'cmd_set_openssh.run s((*--dgg-M  i((B%KH'>"EisWdC    !$ 0 MM'388: .  ! !$ ! 7y vvay:<<>>>>"**[*AB " h.>.>.@.=!? ]]=)<}}]F;0  mmM=I #P  ]]=,G ") }}]F;]]4> " j/ J  m];;55"$DEE1 z vvay33"$DEE   s8A;O!"=U.! U+-E U&>(U&&U+. V&9(V!!V&r)rrrrs@rCrBrB so9H W))w--G.. tW#JQTC )M .J``rErBcF]tRtRtRt/t]!4]R&]!4]R&RtR#) cmd_opensshiQ z#Manage OpenSSH Group Policy Objectsrrr^N) rrrrr,rr8rBrr^rErCrHrHQ s$-K*,K(*KrErHc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7.t R .tRRltRtVtR#)cmd_list_startupiW zList VGP Startup Script Group Policy from the sysvol This command lists the startup script policies currently set on the sysvol. Example: samba-tool gpo manage scripts startup list {31B2F340-016D-11D2-945F-00C04FB984F9} r`r rrrrrrrrrNc VP4VnVPVPRR7VnV'd(VP R4'dVR,pW nMG\ VPVP4p\VPVPVR7Vn\VRVPVPR7pVPPR4pRPVP4R VR R .4p \P!VPV 44p T P-R4p T P,!R4p T P/R4FpTP-R4pRPRTP4R TRRTP0.4pTP-R4pTP-R4pTeTP0pMRpTeTP0pMRpTP2P5RT: RT: RT: R24K R # \d[p T P ^,\"\$\&39dR p ? R #T P ^,\(8Xd \+R 4hhR p ? ii;i)TrrercrergrhrirrjrzScripts\Startup\manifest.xmlNrkr~rrscriptzMACHINE\VGP\VTLA\Unix\ScriptsStartup parametersrun_asrootrKz@reboot r=r$r>)rrrr rrr|rrirrrkrrrrL script_pathrNrOs&&&&&& rCr'cmd_list_startup.runo s"((*--dgg-M  i((B%KH'K%)),7J %%h/F!%'__  IIOOFK2<> ?7 vvay:<<>>vvay33"$DEE  s%H$$ J /'J(JJ r)r*rrs@rCrJrJW so'H W))w--G.. tW#JQTC )M J4?4?rErJc a]tRtRtoRtRtR]PR]PR]P/t ] !RRR ] R R R 7] !R RRRRR7.t .ROtRRltRtVtR#)cmd_add_startupi zAdds VGP Startup Script Group Policy to the sysvol This command adds a startup script policy to the sysvol. Example: samba-tool gpo manage scripts startup add {31B2F340-016D-11D2-945F-00C04FB984F9} test_script.sh '\-n \-p all' z.%prog