Module: ActiveSambaLdap::SambaAccountEntry

Included in:
Computer, User
Defined in:
lib/active_samba_ldap/samba_account_entry.rb

Defined Under Namespace

Modules: ClassMethods

Constant Summary collapse

DOMAIN_ADMIN_RID =

from source/include/rpc_misc.c in Samba

0x000001F4
DOMAIN_GUEST_RID = 
0x000001F5
DOMAIN_ADMIN_NAME =

from source/rpc_server/srv_util.c in Samba

"Administrator"
DOMAIN_GUEST_NAME = 
"Guest"
WELL_KNOWN_RIDS = 
[]
WELL_KNOWN_NAMES = 
[]
FAR_FUTURE_TIME =

FAR_FUTURE_TIME = Time.parse(“2050/01/01”).to_i.to_s

Time.parse("2038/01/18").to_i.to_s
ACCOUNT_FLAGS_RE = 
/\A\[([NDHTUMWSLXI ]+)\]\z/

Class Method Summary collapse

Instance Method Summary collapse

Class Method Details

.included(base) ⇒ Object 



5
6
7
8
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 5

def self.included(base)
  super
  base.extend(ClassMethods)
end

Instance Method Details

#can_change_password? ⇒ Boolean

Returns:

  • (Boolean) 


171
172
173
174
175
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 171

def can_change_password?
  assert_samba_available
  samba_pwd_can_change.nil? or
    Time.at(samba_pwd_can_change.to_i) <= Time.now
end

#change_samba_password(password) ⇒ Object 



154
155
156
157
158
159
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 154

def change_samba_password(password)
  assert_samba_available
  self.samba_lm_password = Samba::Encrypt.lm_hash(password)
  self.samba_nt_password = Samba::Encrypt.ntlm_hash(password)
  self.samba_pwd_last_set = Time.now.to_i.to_s
end

#change_sid(rid, allow_non_unique = false) ⇒ Object 



142
143
144
145
146
147
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 142

def change_sid(rid, allow_non_unique=false)
  assert_samba_available
  sid = "#{self.class.configuration[:sid]}-#{rid}"
  # check_unique_sid_number(sid) unless allow_non_unique
  self.samba_sid = sid
end

#change_uid_number(uid, allow_non_unique = false) ⇒ Object 



129
130
131
132
133
134
135
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 129

def change_uid_number(uid, allow_non_unique=false)
  result = super
  return result unless samba_available?

  rid = self.class.uid2rid(uid_number.to_s)
  change_sid(rid, allow_non_unique)
end

#change_uid_number_by_rid(rid, allow_non_unique = false) ⇒ Object 



137
138
139
140
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 137

def change_uid_number_by_rid(rid, allow_non_unique=false)
  assert_samba_available
  change_uid_number(self.class.rid2uid(rid), allow_non_unique)
end

#disable ⇒ Object 



212
213
214
215
216
217
218
219
220
221
222
223
224
225
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 212

def disable
  assert_samba_available
  if samba4?
    self. +=
      ActiveDirectory::UserAccountControl::ACCOUNT_DISABLE
  else
    flags = ""
    if ACCOUNT_FLAGS_RE =~ samba_acct_flags.to_s
      flags = $1
      return if /D/ =~ flags
    end
    self.samba_acct_flags = "[D#{flags}]"
  end
end

#disable_forcing_password_change ⇒ Object 



188
189
190
191
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 188

def disable_forcing_password_change
  assert_samba_available
  self.samba_pwd_must_change = FAR_FUTURE_TIME
end

#disable_password_change ⇒ Object 



166
167
168
169
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 166

def disable_password_change
  assert_samba_available
  self.samba_pwd_can_change = FAR_FUTURE_TIME
end

#disabled? ⇒ Boolean

Returns:

  • (Boolean) 


232
233
234
235
236
237
238
239
240
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 232

def disabled?
  assert_samba_available
  if samba4?
    not ( &
         ActiveDirectory::UserAccountControl::ACCOUNT_DISABLE).zero?
  else
    (/D/ =~ samba_acct_flags.to_s) ? true : false
  end
end

#enable ⇒ Object 



200
201
202
203
204
205
206
207
208
209
210
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 200

def enable
  assert_samba_available
  if samba4?
    self. -=
      ActiveDirectory::UserAccountControl::ACCOUNT_DISABLE
  else
    if /D/ =~ samba_acct_flags.to_s
      self.samba_acct_flags = samba_acct_flags.gsub(/D/, '')
    end
  end
end

#enable_forcing_password_change ⇒ Object 



177
178
179
180
181
182
183
184
185
186
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 177

def enable_forcing_password_change
  assert_samba_available
  self.samba_pwd_must_change = "0"
  if /X/ =~ samba_acct_flags.to_s
    self.samba_acct_flags = samba_acct_flags.sub(/X/, '')
  end
  if samba_pwd_last_set.to_i.zero?
    self.samba_pwd_last_set = FAR_FUTURE_TIME
  end
end

#enable_password_change ⇒ Object 



161
162
163
164
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 161

def enable_password_change
  assert_samba_available
  self.samba_pwd_can_change = "0"
end

#enabled? ⇒ Boolean

Returns:

  • (Boolean) 


227
228
229
230
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 227

def enabled?
  assert_samba_available
  !disabled?
end

#fill_default_values(options = {}) ⇒ Object 



88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 88

def fill_default_values(options={})
  result = super
  return result unless samba_available?

  self.samba_logon_time ||= "0"
  self.samba_logoff_time ||= FAR_FUTURE_TIME
  self.samba_kickoff_time ||= nil

  password = options["password"]
  change_samba_password(password) if password
  self.samba_lm_password ||= "XXX"
  self.samba_nt_password ||= "XXX"
  self.samba_pwd_last_set ||= "0"

   = samba_acct_flags.nil?
  self.samba_acct_flags ||= 

  can_change_password = options["can_change_password"]
  if can_change_password
    self.enable_password_change
  elsif  or can_change_password == false
    self.disable_password_change
  end

  must_change_password = options["must_change_password"]
  if must_change_password
    self.enable_forcing_password_change
  elsif  or must_change_password == false
    self.disable_forcing_password_change
  end

   = options["enable"]
  if 
    self.enable
  elsif  or  == false
    self.disable
  end

  self
end

#must_change_password? ⇒ Boolean

Returns:

  • (Boolean) 


193
194
195
196
197
198
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 193

def must_change_password?
  assert_samba_available
  !(/X/ =~ samba_acct_flags.to_s or
    samba_pwd_must_change.nil? or
    Time.at(samba_pwd_must_change.to_i) > Time.now)
end

#rid ⇒ Object 



149
150
151
152
 
# File 'lib/active_samba_ldap/samba_account_entry.rb', line 149

def rid
  assert_samba_available
  Integer(samba_sid.split(/-/).last)
end