o jAM@sdZddlmZmZddlmZddlmZddlmZddl m Z ddl m Z m Z mZmZd d lmZmZdd lmZmZmZmZd d ZddZddZddZddZddZddZddZddZ ddZ!d d!Z"d"d#Z#d$d%Z$d&d'Z%d(d)Z&d*d+Z'd,S)- )a2b_hexhexlify)datetime)timegm)UUID)pack)SEQUENCE_TYPES STRING_TYPES NUMERIC_TYPES INTEGER_TYPES) format_timeformat_ad_timestamp)to_raw to_unicodeldap_escape_to_bytes escape_bytescCsHt|ttfrd|vr|dd}|St|tr"d|vr"|dd}|S)N\s\5C\z\5C) isinstance bytearraybytesreplacer )valuer/root/aizidognhua/tmp/workspace/projects/ec89d86c-575f-41c9-af57-ac45cbdbf775/venv/lib/python3.10/site-packages/ldap3/protocol/formatters/validators.pycheck_backslash(s   rcCs:t||rdSt|tr|D] }t||sdSqdSdS)NTF)rr ) input_value value_typerrrr check_type2s   r!cCsdS)NTrrrrr always_valid@sr#cCs<t|tsdSz t|dkrWdSWdStyYdSw)NTrF)rr len Exceptionr"rrrvalidate_generic_single_valueDs   r&cCszt|tst|tst|trt|dkrdSdSdSt|dkr;t|dts/t|dtr;t|ddkr9dSdSdS)z4Accept -1 and 0 only (used by pwdLastSet in AD) TFrr)rr r r intr$r"rrr,validate_zero_and_minus_one_and_positive_intQs (r)c Cst|ttfr dSt|trdSt|tsd}|g}nd}g}ddlm}m}|D]3}z#t|t r5t |n|}||}t |}||krI| |nWdSWq)t t|fy\YdSw|ra|S|dS)NFTr)DecimalInvalidOperation)r!floatboolr rr decimalr*r+rrr(append ValueError TypeError) rsequence valid_valuesr*r+elementr decimal_value int_valuerrrvalidate_integer_s2   r7cCs t|tS)N)r!rr"rrrvalidate_bytess r8cCsxt|r:t|tr |d}t|tr|rdSdSttur%t|tr%t|}t|tr:|dkr2dS|dkr:dSdS)NrTRUEFALSEtruefalseF) r&rr r-strrrr lowerr"rrrvalidate_booleans     r?cCst|ts d}|g}nd}g}d}|D]S}ttur"t|tr"t|}t|tr>|ds5ttt|t r;| |qdSt|t rdd}|j rQ| | dqt t }| || dqdS|rq|rm|S|dSdS)NFT0000%Y%m%d%H%M%S%z %Y%m%d%H%M%SZr)rr r=rrr startswithrrrr/tzinfostrftimenowutcnowrr2r3changedr4offsetrrrvalidate_time_with_0_years2    rKcCst|ts d}|g}nd}g}d}|D]N}ttur"t|tr"t|}t|tr9ttt|tr6| |qdSt|tr_d}|j rL| | dqt t }| || dqdS|rl|rh|S|dSdS)NFTrArBr)rr r=rrr rrrr/rDrErFrGrHrrr validate_times2    rLcCs8t|ts d}|g}nd}g}d}|D]|}ttur"t|tr"t|}t|tr>d|kr1dkr;ndS||qdSt|trUttt |t rR||qdSt|t rd}|j rq|t t | ddddqt t }|t t ||ddddqdS|r|r|S|dSdS) a Active Directory stores date/time values as the number of 100-nanosecond intervals that have elapsed since the 0 hour on January 1, 1601 till the date/time that is being stored. The time is always stored in Greenwich Mean Time (GMT) in the Active Directory. FTrll!l iascii)encoding)rr r=rrr r/r rrrrDr utctimetuplerFrG timetuplerHrrrvalidate_ad_timestamps<      $(rQcCs"t|tr |dkr dSt|dS)z Should be validated like an AD timestamp except that since it is a time delta, it is stored as a negative number. rFr')rr rQr"rrrvalidate_ad_timedeltas rRc Cst|ts d}|g}nd}g}d}|D]V}t|trZz |t|jd}WqtyYzt|}|t|djd}WYqtyXtturKn||YYqYYdSwwt|tt frg||qdS|rt|rp|S|dSdS)z8 object guid in uuid format (Novell eDirectory) FT)rr) rr r r/rrr0rr=r)rr2r3rIr4xrrr validate_guidsD      rTc Cst|ts d}|g}nd}g}d}|D]W}t|tr[z |tt|d}WqtyZz|tt|ddd}WYqtyYtturLn||YYqYYdSwwt|tt frh||qdS|ru|rq|S|dSdS)z) object entryUUID in uuid format FTrr) rr r r/r=rr0rrr)rr2r3rIr4rrr validate_uuidGsB      rVc Cst|ts d}|g}nd}g}d}|D]}d}t|tr|ddkrA|ddkrAz |t|djd}Wnfty@d}Yn\wd|vr^z |t|djd}WnIty]d}Yn?wd |vr}z|tt|d jd}Wn*ty|d}Yn wd|vrz|tt|d jd}Wn tyd}Ynw|rt t ur||qt|t t fr||qdS|r|r|S|dSdS) a Active Directory stores objectGUID in uuid_le format, follows RFC4122 and MS-DTYP: "{07039e68-4373-264d-a0a7-07039e684373}": string representation big endian, converted to little endian (with or without brace curles) "689e030773434d26a7a007039e684373": packet representation, already in little endian "\68\9e\03\07\73\43\4d\26\a7\a0\07\03\9e\68\43\73": bytes representation, already in little endian byte sequence: already in little endian FTr{r'})hex-r)bytes_le) rr r r/rr[r0rrr=rr)rr2r3rIr4errorrrrvalidate_uuid_less`         r]cCs(t|ts d}|g}nd}g}d}|D]t}t|tr|dr|d}tdt|ddd}|tdt|dd dd7}t|d d krZ|td t|d d d 7}n|td t|d d d d 7}|dd D]}|tdt|dd7}qp||d}q|r|r|S|dSdS)a* SID= "S-1-" IdentifierAuthority 1*SubAuthority IdentifierAuthority= IdentifierAuthorityDec / IdentifierAuthorityHex ; If the identifier authority is < 2^32, the ; identifier authority is represented as a decimal ; number ; If the identifier authority is >= 2^32, ; the identifier authority is represented in ; hexadecimal IdentifierAuthorityDec = 1*10DIGIT ; IdentifierAuthorityDec, top level authority of a ; security identifier is represented as a decimal number IdentifierAuthorityHex = "0x" 12HEXDIG ; IdentifierAuthorityHex, the top-level authority of a ; security identifier is represented as a hexadecimal number SubAuthority= "-" 1*10DIGIT ; Sub-Authority is always represented as a decimal number ; No leading "0" characters are allowed when IdentifierAuthority ; or SubAuthority is represented as a decimal number ; All hexadecimal digits must be output in string format, ; pre-pended by "0x" Revision (1 byte): An 8-bit unsigned integer that specifies the revision level of the SID. This value MUST be set to 0x01. SubAuthorityCount (1 byte): An 8-bit unsigned integer that specifies the number of elements in the SubAuthority array. The maximum number of elements allowed is 15. IdentifierAuthority (6 bytes): A SID_IDENTIFIER_AUTHORITY structure that indicates the authority under which the SID was created. It describes the entity that created the SID. The Identifier Authority value {0,0,0,0,0,5} denotes SIDs created by the NT SID authority. SubAuthority (variable): A variable length array of unsigned 32-bit integers that uniquely identifies a principal relative to the IdentifierAuthority. Its length is determined by SubAuthorityCount. If you have a SID like S-a-b-c-d-e-f-g-... Then the bytes are a (revision) N (number of dashes minus two) bbbbbb (six bytes of "b" treated as a 48-bit number in big-endian format) cccc (four bytes of "c" treated as a 32-bit number in little-endian format) dddd (four bytes of "d" treated as a 32-bit number in little-endian format) eeee (four bytes of "e" treated as a 32-bit number in little-endian format) ffff (four bytes of "f" treated as a 32-bit number in little-endian format) FTzS-rZzq) rr r rCsplitrr(r$r/)rr2r3rIr4parts sid_bytessub_authrrr validate_sids2 (   "   rfN)(__doc__binasciirrrcalendarruuidrstructrrUr r r r formattersrr utils.convrrrrrr!r#r&r)r7r8r?rKrLrQrRrTrVr]rfrrrrs2       &%. -, =