| blob | 6eb27c94feeecc06ef18f68fedbe4a094e6893c0 |
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
5 Copyright (C) 2002 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2004,2008 Guenther Deschner (gd@samba.org)
7 Copyright (C) 2005 Jeremy Allison (jra@samba.org)
8 Copyright (C) 2006 Jelmer Vernooij (jelmer@samba.org)
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>. */
53 /**
54 * @file net_rpc.c
55 *
56 * @brief RPC based subcommands for the 'net' utility.
57 *
58 * This file should contain much of the functionality that used to
59 * be found in rpcclient, execpt that the commands should change
60 * less often, and the fucntionality should be sane (the user is not
61 * expected to know a rid/sid before they conduct an operation etc.)
62 *
63 * @todo Perhaps eventually these should be split out into a number
64 * of files, as this could get quite big.
65 **/
68 /**
69 * Many of the RPC functions need the domain sid. This function gets
70 * it at the start of every run
71 *
72 * @param cli A cli_state already connected to the remote machine
73 *
74 * @return The Domain SID of the remote machine.
75 **/
80 {
92 }
97 SEC_FLAG_MAXIMUM_ALLOWED,
104 }
108 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
116 }
122 }
131 }
133 /**
134 * Run a single RPC command, from start to finish.
135 *
136 * @param pipe_name the pipe to connect to (usually a PIPE_ constant)
137 * @param conn_flag a NET_FLAG_ combination. Passed to
138 * net_make_ipc_connection.
139 * @param argc Standard main() style argc.
140 * @param argv Standard main() style argv. Initial components are already
141 * stripped.
142 * @return A shell status integer (0 for success).
143 */
149 rpc_command_fn fn,
152 {
156 NTSTATUS nt_status;
161 /* make use of cli_state handed over as an argument, if possible */
168 }
171 }
175 }
177 /* Create mem_ctx */
182 }
188 }
194 /* Always try and create an schannel netlogon pipe. */
198 domain_name,
204 }
211 CRED_DONT_USE_KERBEROS,
212 DCERPC_AUTH_TYPE_NTLMSSP,
213 DCERPC_AUTH_LEVEL_PRIVACY,
221 }
227 }
228 }
229 }
238 }
243 }
244 }
246 fail:
247 /* close the connection only if it was opened here */
250 }
254 }
256 /**
257 * Force a change of the trust acccount password.
258 *
259 * All parameters are provided by the run_rpc_command function, except for
260 * argc, argv which are passed through.
261 *
262 * @param domain_sid The domain sid acquired from the remote server.
263 * @param cli A cli_state connected to the server.
264 * @param mem_ctx Talloc context, destroyed on completion of the function.
265 * @param argc Standard main() style argc.
266 * @param argv Standard main() style argv. Initial components are already
267 * stripped.
268 *
269 * @return Normal NTSTATUS return.
270 **/
280 {
281 NTSTATUS status;
292 }
295 }
297 /**
298 * Force a change of the trust acccount password.
299 *
300 * @param argc Standard main() style argc.
301 * @param argv Standard main() style argv. Initial components are already
302 * stripped.
303 *
304 * @return A shell status integer (0 for success).
305 **/
308 {
316 }
320 rpc_changetrustpw_internals,
322 }
324 /**
325 * Join a domain, the old way. This function exists to allow
326 * the message to be displayed when oldjoin was explicitly
327 * requested, but not when it was implied by "net rpc join".
328 *
329 * This uses 'machinename' as the inital password, and changes it.
330 *
331 * The password should be created with 'server manager' or equiv first.
332 *
333 * @param argc Standard main() style argc.
334 * @param argv Standard main() style argv. Initial components are already
335 * stripped.
336 *
337 * @return A shell status integer (0 for success).
338 **/
341 {
344 WERROR werr;
355 }
360 }
365 }
367 /*
368 check what type of join - if the user want's to join as
369 a BDC, the server must agree that we are a BDC.
370 */
375 }
382 }
388 }
399 }
403 WKSSVC_JOIN_FLAGS_JOIN_UNSECURE |
404 WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED;
409 }
411 /* Check the short name of the domain */
419 }
429 }
435 fail:
438 }
440 /* issue an overall failure message at the end. */
445 cleanup:
449 }
451 /**
452 * check that a join is OK
453 *
454 * @return A shell status integer (0 for success)
455 *
456 **/
458 {
459 NTSTATUS status;
469 }
474 }
484 }
488 domain,
489 NULL,
490 NULL,
491 DS_RETURN_DNS_NAME,
496 }
499 }
501 /* Display success or failure */
504 dc,
511 }
517 }
519 /**
520 * Join a domain using the administrator username and password
521 *
522 * @param argc Standard main() style argc
523 * @param argc Standard main() style argv. Initial components are already
524 * stripped. Currently not used.
525 * @return A shell status integer (0 for success)
526 *
527 **/
530 {
533 WERROR werr;
543 }
548 }
553 }
555 /*
556 check what type of join - if the user want's to join as
557 a BDC, the server must agree that we are a BDC.
558 */
563 }
570 }
582 WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE |
583 WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED;
588 }
590 /* Check the short name of the domain */
598 }
608 }
614 fail:
615 /* issue an overall failure message at the end. */
623 }
625 /**
626 * 'net rpc join' entrypoint.
627 * @param argc Standard main() style argc.
628 * @param argv Standard main() style argv. Initial components are already
629 * stripped
630 *
631 * Main 'net_rpc_join()' (where the admin username/password is used) is
632 * in net_rpc_join.c.
633 * Try to just change the password, but if that doesn't work, use/prompt
634 * for a username/password.
635 **/
638 {
654 }
659 }
666 }
673 }
676 }
678 /**
679 * display info about a rpc domain
680 *
681 * All parameters are provided by the run_rpc_command function, except for
682 * argc, argv which are passed through.
683 *
684 * @param domain_sid The domain sid acquired from the remote server
685 * @param cli A cli_state connected to the server.
686 * @param mem_ctx Talloc context, destroyed on completion of the function.
687 * @param argc Standard main() style argc.
688 * @param argv Standard main() style argv. Initial components are already
689 * stripped.
690 *
691 * @return Normal NTSTATUS return.
692 **/
702 {
706 fstring sid_str;
711 /* Get sam policy handle */
714 MAXIMUM_ALLOWED_ACCESS,
721 }
728 }
730 /* Get domain policy handle */
733 MAXIMUM_ALLOWED_ACCESS,
741 }
747 }
756 }
767 }
769 done:
771 }
773 /**
774 * 'net rpc info' entrypoint.
775 * @param argc Standard main() style argc.
776 * @param argv Standard main() style argv. Initial components are already
777 * stripped.
778 **/
781 {
789 }
794 }
796 /**
797 * Fetch domain SID into the local secrets.tdb.
798 *
799 * All parameters are provided by the run_rpc_command function, except for
800 * argc, argv which are passed through.
801 *
802 * @param domain_sid The domain sid acquired from the remote server.
803 * @param cli A cli_state connected to the server.
804 * @param mem_ctx Talloc context, destroyed on completion of the function.
805 * @param argc Standard main() style argc.
806 * @param argv Standard main() style argv. Initial components are already
807 * stripped.
808 *
809 * @return Normal NTSTATUS return.
810 **/
820 {
821 fstring sid_str;
830 }
833 }
835 /**
836 * 'net rpc getsid' entrypoint.
837 * @param argc Standard main() style argc.
838 * @param argv Standard main() style argv. Initial components are already
839 * stripped.
840 **/
843 {
848 }
857 }
860 conn_flags,
861 rpc_getsid_internals,
863 }
865 /****************************************************************************/
867 /**
868 * Basic usage function for 'net rpc user'.
869 * @param argc Standard main() style argc.
870 * @param argv Standard main() style argv. Initial components are already
871 * stripped.
872 **/
875 {
877 }
879 /**
880 * Add a new user to a remote RPC server.
881 *
882 * @param argc Standard main() style argc.
883 * @param argv Standard main() style argv. Initial components are already
884 * stripped.
885 *
886 * @return A shell status integer (0 for success).
887 **/
890 {
891 NET_API_STATUS status;
898 }
905 }
912 status));
916 }
919 }
921 /**
922 * Rename a user on a remote RPC server.
923 *
924 * @param argc Standard main() style argc.
925 * @param argv Standard main() style argv. Initial components are already
926 * stripped.
927 *
928 * @return A shell status integer (0 for success).
929 **/
932 {
933 NET_API_STATUS status;
940 }
953 }
956 }
958 /**
959 * Set a user's primary group
960 *
961 * @param argc Standard main() style argc.
962 * @param argv Standard main() style argv. Initial components are already
963 * stripped.
964 *
965 * @return A shell status integer (0 for success).
966 **/
970 {
971 NET_API_STATUS status;
980 }
988 }
1005 }
1007 }
1009 /**
1010 * Delete a user from a remote RPC server.
1011 *
1012 * @param argc Standard main() style argc.
1013 * @param argv Standard main() style argv. Initial components are already
1014 * stripped.
1015 *
1016 * @return A shell status integer (0 for success).
1017 **/
1020 {
1021 NET_API_STATUS status;
1026 }
1037 }
1040 }
1042 /**
1043 * Set a user's password on a remote RPC server.
1044 *
1045 * @param argc Standard main() style argc.
1046 * @param argv Standard main() style argv. Initial components are already
1047 * stripped.
1048 *
1049 * @return A shell status integer (0 for success).
1050 **/
1053 {
1054 NET_API_STATUS status;
1063 }
1073 }
1079 }
1084 }
1085 }
1089 /* Display results */
1094 status));
1096 }
1099 }
1101 /**
1102 * List a user's groups from a remote RPC server.
1103 *
1104 * @param argc Standard main() style argc.
1105 * @param argv Standard main() style argv. Initial components are already
1106 * stripped.
1107 *
1108 * @return A shell status integer (0 for success)
1109 **/
1113 {
1114 NET_API_STATUS status;
1124 }
1137 status));
1139 }
1143 u0++;
1144 }
1147 }
1149 /**
1150 * List users on a remote RPC server.
1151 *
1152 * All parameters are provided by the run_rpc_command function, except for
1153 * argc, argv which are passed through.
1154 *
1155 * @param domain_sid The domain sid acquired from the remote server.
1156 * @param cli A cli_state connected to the server.
1157 * @param mem_ctx Talloc context, destroyed on completion of the function.
1158 * @param argc Standard main() style argc.
1159 * @param argv Standard main() style argv. Initial components are already
1160 * stripped.
1161 *
1162 * @return Normal NTSTATUS return.
1163 **/
1166 {
1167 NET_API_STATUS status;
1172 /* Query domain users */
1184 start_idx,
1185 max_entries,
1186 max_size,
1191 }
1200 else
1202 info++;
1203 }
1207 loop_count++;
1213 }
1215 /**
1216 * 'net rpc user' entrypoint.
1217 * @param argc Standard main() style argc.
1218 * @param argv Standard main() style argv. Initial components are already
1219 * stripped.
1220 **/
1223 {
1224 NET_API_STATUS status;
1227 {
1229 rpc_user_add,
1230 NET_TRANSPORT_RPC,
1234 },
1235 {
1237 rpc_user_info,
1238 NET_TRANSPORT_RPC,
1242 },
1243 {
1245 rpc_user_delete,
1246 NET_TRANSPORT_RPC,
1250 },
1251 {
1253 rpc_user_password,
1254 NET_TRANSPORT_RPC,
1258 },
1259 {
1261 rpc_user_rename,
1262 NET_TRANSPORT_RPC,
1266 },
1267 {
1269 rpc_user_setprimarygroup,
1270 NET_TRANSPORT_RPC,
1273 " Set a user's primary group"
1274 },
1276 };
1281 }
1286 }
1297 }
1300 }
1303 }
1310 {
1312 }
1319 {
1321 }
1335 {
1347 }
1359 }
1366 }
1372 }
1376 MAXIMUM_ALLOWED_ACCESS,
1381 }
1385 }
1389 MAXIMUM_ALLOWED_ACCESS,
1395 }
1399 }
1403 MAXIMUM_ALLOWED_ACCESS,
1404 rid,
1409 }
1413 }
1417 done:
1420 }
1423 }
1426 }
1428 }
1436 {
1445 }
1448 user_hnd,
1454 }
1457 }
1464 }
1471 {
1473 rpc_sh_user_show_internals);
1474 }
1476 #define FETCHSTR(name, rec) \
1477 do { if (strequal(ctx->thiscmd, name)) { \
1478 oldval = talloc_strdup(mem_ctx, info->info21.rec.string); } \
1479 } while (0);
1481 #define SETSTR(name, rec, flag) \
1482 do { if (strequal(ctx->thiscmd, name)) { \
1483 init_lsa_String(&(info->info21.rec), argv[0]); \
1484 info->info21.fields_present |= SAMR_FIELD_##flag; } \
1485 } while (0);
1493 {
1504 }
1507 user_hnd,
1513 }
1516 }
1530 }
1534 }
1546 user_hnd,
1548 info,
1552 }
1559 done:
1562 }
1564 #define HANDLEFLG(name, rec) \
1565 do { if (strequal(ctx->thiscmd, name)) { \
1567 if (newval) { \
1568 newflags = oldflags | ACB_##rec; \
1569 } else { \
1570 newflags = oldflags & ~ACB_##rec; \
1571 } } } while (0);
1578 {
1580 rpc_sh_user_str_edit_internals);
1581 }
1589 {
1601 /* TRANSATORS: The yes|no here are program keywords. Please do
1602 not translate. */
1606 }
1611 user_hnd,
1617 }
1620 }
1633 oldval);
1635 }
1643 user_hnd,
1645 info,
1649 }
1654 }
1656 done:
1659 }
1666 {
1668 rpc_sh_user_flag_edit_internals);
1669 }
1674 {
1708 };
1711 }
1716 {
1732 };
1735 }
1737 /****************************************************************************/
1739 /**
1740 * Basic usage function for 'net rpc group'.
1741 * @param argc Standard main() style argc.
1742 * @param argv Standard main() style argv. Initial components are already
1743 * stripped.
1744 **/
1747 {
1749 }
1751 /**
1752 * Delete group on a remote RPC server.
1753 *
1754 * All parameters are provided by the run_rpc_command function, except for
1755 * argc, argv which are passed through.
1756 *
1757 * @param domain_sid The domain sid acquired from the remote server.
1758 * @param cli A cli_state connected to the server.
1759 * @param mem_ctx Talloc context, destroyed on completion of the function.
1760 * @param argc Standard main() style argc.
1761 * @param argv Standard main() style argv. Initial components are already
1762 * stripped.
1763 *
1764 * @return Normal NTSTATUS return.
1765 **/
1775 {
1781 /* char **names; */
1783 /* struct samr_RidWithAttribute *user_gids; */
1793 }
1797 MAXIMUM_ALLOWED_ACCESS,
1803 }
1809 }
1813 MAXIMUM_ALLOWED_ACCESS,
1820 }
1826 }
1840 }
1846 }
1850 }
1854 }
1857 {
1861 MAXIMUM_ALLOWED_ACCESS,
1868 }
1874 }
1887 }
1895 }
1901 }
1903 /* Check if group is anyone's primary group */
1905 {
1908 MAXIMUM_ALLOWED_ACCESS,
1917 }
1925 }
1938 }
1947 }
1954 }
1956 }
1959 }
1963 "some of it's members have it as primary "
1967 }
1969 /* remove all group members */
1971 {
1981 }
1990 }
1991 }
1998 }
2003 /* removing a local group is easier... */
2007 MAXIMUM_ALLOWED_ACCESS,
2014 }
2019 }
2026 }
2037 }
2046 }
2048 done:
2051 }
2054 {
2057 }
2060 {
2061 NET_API_STATUS status;
2068 }
2075 }
2083 status));
2087 }
2090 }
2093 {
2094 NET_API_STATUS status;
2101 }
2108 }
2116 status));
2120 }
2123 }
2126 {
2131 }
2138 {
2150 }
2159 }
2167 }
2171 done:
2174 }
2178 /* Try as S-1-5-whatever */
2186 }
2187 }
2190 }
2196 {
2212 }
2214 /* Get sam policy handle */
2217 MAXIMUM_ALLOWED_ACCESS,
2222 }
2225 }
2227 /* Get domain policy handle */
2230 MAXIMUM_ALLOWED_ACCESS,
2236 }
2239 }
2252 member);
2254 }
2259 member);
2261 }
2265 }
2269 }
2273 MAXIMUM_ALLOWED_ACCESS,
2274 group_rid,
2279 }
2284 }
2293 }
2297 done:
2300 }
2307 {
2323 }
2330 member);
2332 }
2334 /* Get sam policy handle */
2337 MAXIMUM_ALLOWED_ACCESS,
2342 }
2346 }
2348 /* Get domain policy handle */
2351 MAXIMUM_ALLOWED_ACCESS,
2357 }
2361 }
2365 MAXIMUM_ALLOWED_ACCESS,
2366 alias_rid,
2371 }
2374 }
2382 }
2386 done:
2389 }
2399 {
2411 }
2418 }
2427 }
2429 }
2438 }
2440 }
2446 }
2449 {
2451 rpc_group_addmem_internals,
2453 }
2460 {
2477 /* Get sam policy handle */
2480 MAXIMUM_ALLOWED_ACCESS,
2485 }
2488 }
2491 /* Get domain policy handle */
2494 MAXIMUM_ALLOWED_ACCESS,
2500 }
2503 }
2516 member);
2518 }
2523 member);
2525 }
2529 }
2533 }
2537 MAXIMUM_ALLOWED_ACCESS,
2538 group_rid,
2543 }
2547 }
2555 }
2558 done:
2561 }
2568 {
2590 member);
2592 }
2594 /* Get sam policy handle */
2597 MAXIMUM_ALLOWED_ACCESS,
2602 }
2606 }
2608 /* Get domain policy handle */
2611 MAXIMUM_ALLOWED_ACCESS,
2617 }
2621 }
2625 MAXIMUM_ALLOWED_ACCESS,
2626 alias_rid,
2631 }
2635 }
2644 }
2648 done:
2651 }
2661 {
2673 }
2680 }
2689 }
2691 }
2700 }
2702 }
2708 }
2711 {
2713 rpc_group_delmem_internals,
2715 }
2717 /**
2718 * List groups on a remote RPC server.
2719 *
2720 * All parameters are provided by the run_rpc_command function, except for
2721 * argc, argv which are passes through.
2722 *
2723 * @param domain_sid The domain sid acquired from the remote server.
2724 * @param cli A cli_state connected to the server.
2725 * @param mem_ctx Talloc context, destroyed on completion of the function.
2726 * @param argc Standard main() style argc.
2727 * @param argv Standard main() style argv. Initial components are already
2728 * stripped.
2729 *
2730 * @return Normal NTSTATUS return.
2731 **/
2741 {
2759 " If none of global, local or builtin is "
2760 "specified, all three options are considered "
2763 }
2769 }
2780 }
2782 /* Get sam policy handle */
2786 MAXIMUM_ALLOWED_ACCESS,
2791 }
2795 }
2797 /* Get domain policy handle */
2801 MAXIMUM_ALLOWED_ACCESS,
2807 }
2811 }
2813 /* Query domain groups */
2829 start_idx,
2830 max_entries,
2831 max_size,
2838 }
2857 else
2859 }
2861 /* query domain aliases */
2875 }
2888 NTSTATUS _result;
2908 }
2909 }
2910 }
2911 }
2916 description);
2919 }
2920 }
2923 /* Get builtin policy handle */
2927 MAXIMUM_ALLOWED_ACCESS,
2933 }
2937 }
2939 /* query builtin aliases */
2948 max_entries,
2953 }
2958 }
2968 NTSTATUS _result;
2988 }
2989 }
2990 }
2991 }
2996 description);
2999 }
3000 }
3005 done:
3007 }
3010 {
3012 rpc_group_list_internals,
3014 }
3023 {
3033 fstring sid_str;
3037 domain_pol,
3038 MAXIMUM_ALLOWED_ACCESS,
3039 rid,
3044 }
3047 }
3055 }
3058 }
3070 domain_pol,
3071 this_time,
3072 group_rids,
3078 }
3081 }
3084 }
3087 }
3088 /* We only have users as members, but make the output
3089 the same as the output of alias members */
3097 SID_NAME_USER);
3101 }
3102 }
3106 }
3109 }
3117 {
3131 domain_pol,
3132 MAXIMUM_ALLOWED_ACCESS,
3133 rid,
3138 }
3141 }
3150 }
3154 }
3160 }
3169 }
3178 }
3185 }
3189 }
3200 }
3203 fstring sid_str;
3213 else
3215 }
3216 }
3220 }
3230 {
3237 /* Get sam policy handle */
3241 MAXIMUM_ALLOWED_ACCESS,
3246 }
3249 }
3251 /* Get domain policy handle */
3255 MAXIMUM_ALLOWED_ACCESS,
3261 }
3264 }
3277 }
3281 /* Ok, did not find it in the global sam, try with builtin */
3291 MAXIMUM_ALLOWED_ACCESS,
3297 }
3302 }
3313 }
3318 }
3319 }
3325 }
3330 }
3337 }
3342 }
3345 }
3348 {
3351 }
3354 rpc_group_members_internals,
3356 }
3359 {
3360 NET_API_STATUS status;
3368 }
3381 status));
3383 }
3386 }
3389 {
3392 }
3395 }
3397 /**
3398 * 'net rpc group' entrypoint.
3399 * @param argc Standard main() style argc.
3400 * @param argv Standard main() style argv. Initial components are already
3401 * stripped.
3402 **/
3405 {
3406 NET_API_STATUS status;
3409 {
3411 rpc_group_add,
3412 NET_TRANSPORT_RPC,
3416 },
3417 {
3419 rpc_group_delete,
3420 NET_TRANSPORT_RPC,
3424 },
3425 {
3427 rpc_group_addmem,
3428 NET_TRANSPORT_RPC,
3432 },
3433 {
3435 rpc_group_delmem,
3436 NET_TRANSPORT_RPC,
3440 },
3441 {
3443 rpc_group_list,
3444 NET_TRANSPORT_RPC,
3448 },
3449 {
3451 rpc_group_members,
3452 NET_TRANSPORT_RPC,
3456 },
3457 {
3459 rpc_group_rename,
3460 NET_TRANSPORT_RPC,
3464 },
3466 };
3471 }
3476 }
3482 " Alias for net rpc group list global "
3486 }
3489 rpc_group_list_internals,
3491 }
3494 }
3496 /****************************************************************************/
3499 {
3501 }
3503 /**
3504 * Add a share on a remote RPC server.
3505 *
3506 * @param argc Standard main() style argc.
3507 * @param argv Standard main() style argv. Initial components are already
3508 * stripped.
3509 *
3510 * @return A shell status integer (0 for success).
3511 **/
3514 {
3515 NET_API_STATUS status;
3526 }
3530 }
3535 }
3555 }
3558 }
3560 /**
3561 * Delete a share on a remote RPC server.
3562 *
3563 * @param domain_sid The domain sid acquired from the remote server.
3564 * @param argc Standard main() style argc.
3565 * @param argv Standard main() style argv. Initial components are already
3566 * stripped.
3567 *
3568 * @return A shell status integer (0 for success).
3569 **/
3571 {
3574 }
3577 }
3579 /**
3580 * Formatted print of share info
3581 *
3582 * @param r pointer to SHARE_INFO_1 to format
3583 **/
3587 {
3595 }
3596 }
3605 {
3606 WERROR result;
3607 NTSTATUS status;
3611 /* no specific share requested, enumerate all */
3622 info_ctr,
3623 preferred_len,
3629 }
3631 }
3633 /* request just one share */
3637 level,
3644 }
3648 }
3650 /* construct ctr */
3657 {
3669 }
3671 {
3683 }
3685 {
3697 }
3699 done:
3701 }
3703 /***
3704 * 'net rpc share list' entrypoint.
3705 * @param argc Standard main() style argc.
3706 * @param argv Standard main() style argv. Initial components are already
3707 * stripped.
3708 **/
3710 {
3711 NET_API_STATUS status;
3725 }
3728 level,
3736 }
3738 /* Display results */
3745 }
3748 done:
3750 }
3753 {
3754 NTSTATUS status;
3760 }
3766 }
3769 }
3773 {
3774 /* only support disk shares */
3777 type);
3779 }
3781 /* skip builtin shares */
3782 /* FIXME: should print$ be added too ? */
3790 }
3793 }
3795 /**
3796 * Migrate shares from a remote RPC server to the local RPC server.
3797 *
3798 * All parameters are provided by the run_rpc_command function, except for
3799 * argc, argv which are passed through.
3800 *
3801 * @param domain_sid The domain sid acquired from the remote server.
3802 * @param cli A cli_state connected to the server.
3803 * @param mem_ctx Talloc context, destroyed on completion of the function.
3804 * @param argc Standard main() style argc.
3805 * @param argv Standard main() style argv. Initial components are already
3806 * stripped.
3807 *
3808 * @return Normal NTSTATUS return.
3809 **/
3819 {
3820 WERROR result;
3835 /* connect destination PI_SRVSVC */
3849 /* reset error-code */
3855 /* finally add the share on the dst server */
3873 }
3878 }
3885 }
3887 }
3891 done:
3894 }
3898 }
3900 /**
3901 * Migrate shares from a RPC server to another.
3902 *
3903 * @param argc Standard main() style argc.
3904 * @param argv Standard main() style argv. Initial components are already
3905 * stripped.
3906 *
3907 * @return A shell status integer (0 for success).
3908 **/
3911 {
3919 }
3924 }
3927 rpc_share_migrate_shares_internals,
3929 }
3931 /**
3932 * Copy a file/dir
3933 *
3934 * @param f file_info
3935 * @param mask current search mask
3936 * @param state arg-pointer
3937 *
3938 **/
3941 {
3945 fstring dir;
3959 /* DIRECTORY */
3969 {
3971 /* create that directory */
3984 }
3990 }
3992 /* search below that directory */
3995 }
3998 }
4005 }
4009 }
4012 /* FILE */
4020 {
4033 net_mode_share);
4035 }
4041 }
4043 /**
4044 * sync files, can be called recursivly to list files
4045 * and then call copy_fn for each file
4046 *
4047 * @param cp_clistate pointer to the copy_clistate we work with
4048 * @param mask the current search mask
4049 *
4050 * @return Boolean result
4051 **/
4053 {
4056 NTSTATUS status;
4068 }
4075 }
4078 }
4081 /**
4082 * Set the top level directory permissions before we do any further copies.
4083 * Should set up ACL inheritance.
4084 **/
4089 {
4108 }
4115 }
4118 }
4120 /**
4121 * Sync all files inside a remote share to another share (over smb).
4122 *
4123 * All parameters are provided by the run_rpc_command function, except for
4124 * argc, argv which are passed through.
4125 *
4126 * @param domain_sid The domain sid acquired from the remote server.
4127 * @param cli A cli_state connected to the server.
4128 * @param mem_ctx Talloc context, destroyed on completion of the function.
4129 * @param argc Standard main() style argc.
4130 * @param argv Standard main() style argv. Initial components are already
4131 * stripped.
4132 *
4133 * @return Normal NTSTATUS return.
4134 **/
4144 {
4145 WERROR result;
4160 }
4176 /* one might not want to mirror whole discs :) */
4181 }
4184 {
4190 net_mode_share);
4192 }
4204 cp_clistate.attribute = FILE_ATTRIBUTE_SYSTEM | FILE_ATTRIBUTE_HIDDEN | FILE_ATTRIBUTE_DIRECTORY;
4207 /* open share source */
4218 /* open share destination */
4225 }
4229 "directory permissions for the "
4233 }
4240 }
4241 }
4245 done:
4256 }
4259 {
4267 }
4272 }
4275 rpc_share_migrate_files_internals,
4277 }
4279 /**
4280 * Migrate share-ACLs from a remote RPC server to the local RPC server.
4281 *
4282 * All parameters are provided by the run_rpc_command function, except for
4283 * argc, argv which are passed through.
4284 *
4285 * @param domain_sid The domain sid acquired from the remote server.
4286 * @param cli A cli_state connected to the server.
4287 * @param mem_ctx Talloc context, destroyed on completion of the function.
4288 * @param argc Standard main() style argc.
4289 * @param argv Standard main() style argv. Initial components are already
4290 * stripped.
4291 *
4292 * @return Normal NTSTATUS return.
4293 **/
4303 {
4304 WERROR result;
4321 /* connect destination PI_SRVSVC */
4334 /* reset error-code */
4347 /* FIXME: shouldn't we be able to just set the security descriptor ? */
4350 /* finally modify the share on the dst server */
4354 level,
4362 }
4368 }
4370 }
4374 done:
4377 }
4381 }
4383 /**
4384 * Migrate share-acls from a RPC server to another.
4385 *
4386 * @param argc Standard main() style argc.
4387 * @param argv Standard main() style argv. Initial components are already
4388 * stripped.
4389 *
4390 * @return A shell status integer (0 for success).
4391 **/
4394 {
4402 }
4407 }
4410 rpc_share_migrate_security_internals,
4412 }
4414 /**
4415 * Migrate shares (including share-definitions, share-acls and files with acls/attrs)
4416 * from one server to another.
4417 *
4418 * @param argc Standard main() style argc.
4419 * @param argv Standard main() style argv. Initial components are already
4420 * stripped.
4421 *
4422 * @return A shell status integer (0 for success).
4423 *
4424 **/
4427 {
4437 }
4442 }
4444 /* order is important. we don't want to be locked out by the share-acl
4445 * before copying files - gd */
4459 argv);
4460 }
4463 /**
4464 * 'net rpc share migrate' entrypoint.
4465 * @param argc Standard main() style argc.
4466 * @param argv Standard main() style argv. Initial components are already
4467 * stripped.
4468 **/
4470 {
4473 {
4475 rpc_share_migrate_all,
4476 NET_TRANSPORT_RPC,
4480 },
4481 {
4483 rpc_share_migrate_files,
4484 NET_TRANSPORT_RPC,
4488 },
4489 {
4491 rpc_share_migrate_security,
4492 NET_TRANSPORT_RPC,
4496 },
4497 {
4499 rpc_share_migrate_shares,
4500 NET_TRANSPORT_RPC,
4504 },
4506 };
4511 }
4517 };
4522 /*
4523 * Add an alias to the static list.
4524 */
4526 {
4532 }
4534 /*
4535 * For a specific domain on the server, fetch all the aliases
4536 * and their members. Add all of them to the server_aliases.
4537 */
4543 {
4550 /* Get domain policy handle */
4553 connect_pol,
4554 MAXIMUM_ALLOWED_ACCESS,
4560 }
4563 }
4573 max_entries,
4578 }
4585 NTSTATUS _result;
4589 MAXIMUM_ALLOWED_ACCESS,
4595 }
4599 }
4607 }
4611 }
4618 }
4622 }
4632 }
4638 }
4643 done:
4647 }
4649 /*
4650 * Dump server_aliases as names for debugging purposes.
4651 */
4661 {
4663 NTSTATUS result;
4668 SEC_FLAG_MAXIMUM_ALLOWED,
4692 }
4708 }
4713 }
4715 /*
4716 * Fetch a list of all server aliases and their members into
4717 * server_aliases.
4718 */
4728 {
4735 MAXIMUM_ALLOWED_ACCESS,
4740 }
4744 }
4750 }
4753 domain_sid);
4756 done:
4758 }
4761 {
4768 }
4774 }
4777 {
4779 }
4782 {
4789 }
4794 }
4797 fstring name;
4799 };
4802 {
4809 }
4810 }
4813 {
4819 }
4822 }
4825 {
4831 }
4832 }
4834 /*
4835 * We got a user token with all the SIDs we can know about without asking the
4836 * server directly. These are the user and domain group sids. All of these can
4837 * be members of aliases. So scan the list of aliases for each of the SIDs and
4838 * add them to the token.
4839 */
4842 {
4848 }
4849 }
4852 {
4855 fstring full_name;
4866 /* First let's find out the user sid */
4874 }
4881 }
4886 }
4890 /* And now the groups winbind knows about */
4897 }
4910 }
4921 }
4923 }
4927 }
4929 /**
4930 * Get a list of all user tokens we want to look at
4931 **/
4935 {
4947 }
4949 /* Send request to winbind daemon */
4956 }
4964 }
4987 }
4989 }
4992 }
5000 }
5005 {
5009 fstring line;
5013 }
5017 }
5020 /* We have a SID */
5027 }
5032 }
5036 }
5038 /* And a new user... */
5045 }
5051 }
5055 }
5058 }
5061 /*
5062 * Show the list of all users that have access to a share
5063 */
5071 {
5077 WERROR result;
5078 NTSTATUS status;
5084 netname,
5091 netname));
5093 }
5098 netname));
5099 }
5105 }
5111 }
5125 }
5126 }
5131 }
5139 }
5141 }
5149 }
5151 /**
5152 * List shares on a remote RPC server, including the security descriptors.
5153 *
5154 * All parameters are provided by the run_rpc_command function, except for
5155 * argc, argv which are passed through.
5156 *
5157 * @param domain_sid The domain sid acquired from the remote server.
5158 * @param cli A cli_state connected to the server.
5159 * @param mem_ctx Talloc context, destroyed on completion of the function.
5160 * @param argc Standard main() style argc.
5161 * @param argv Standard main() style argv. Initial components are already
5162 * stripped.
5163 *
5164 * @return Normal NTSTATUS return.
5165 **/
5175 {
5186 WERROR result;
5195 }
5200 }
5210 }
5223 /* Issue the NetShareEnum RPC call and retrieve the response */
5228 preferred_len,
5233 /* Was it successful? */
5235 /* Nope. Go clean up. */
5237 }
5240 /* Nope. Go clean up. */
5243 }
5247 }
5249 /* For each returned entry... */
5255 }
5261 }
5262 done:
5265 }
5269 }
5273 {
5283 }
5286 rpc_aliaslist_internals,
5292 rpc_aliaslist_dump,
5298 rpc_share_allowedusers_internals,
5300 }
5303 {
5311 }
5316 }
5321 }
5325 }
5328 {
5336 }
5338 /**
5339 * 'net rpc share' entrypoint.
5340 * @param argc Standard main() style argc.
5341 * @param argv Standard main() style argv. Initial components are already
5342 * stripped.
5343 **/
5346 {
5347 NET_API_STATUS status;
5350 {
5352 rpc_share_add,
5353 NET_TRANSPORT_RPC,
5357 },
5358 {
5360 rpc_share_delete,
5361 NET_TRANSPORT_RPC,
5365 },
5366 {
5368 rpc_share_allowedusers,
5369 NET_TRANSPORT_RPC,
5373 },
5374 {
5376 rpc_share_migrate,
5377 NET_TRANSPORT_RPC,
5381 },
5382 {
5384 rpc_share_list,
5385 NET_TRANSPORT_RPC,
5389 },
5391 };
5396 }
5401 }
5412 }
5415 }
5418 }
5425 {
5428 }
5435 {
5436 NET_API_STATUS status;
5444 }
5461 }
5468 {
5472 }
5475 }
5482 {
5484 WERROR result;
5485 NTSTATUS status;
5491 }
5502 }
5505 }
5512 done:
5514 }
5518 {
5534 };
5537 }
5539 /****************************************************************************/
5542 {
5544 }
5546 /**
5547 * Close a file on a remote RPC server.
5548 *
5549 * @param argc Standard main() style argc.
5550 * @param argv Standard main() style argv. Initial components are already
5551 * stripped.
5552 *
5553 * @return A shell status integer (0 for success).
5554 **/
5556 {
5559 }
5562 }
5564 /**
5565 * Formatted print of open file info
5566 *
5567 * @param r struct FILE_INFO_3 contents
5568 **/
5571 {
5575 }
5577 /**
5578 * List files for a user on a remote RPC server.
5579 *
5580 * @param argc Standard main() style argc.
5581 * @param argv Standard main() style argv. Initial components are already
5582 * stripped.
5583 *
5584 * @return A shell status integer (0 for success)..
5585 **/
5588 {
5589 NET_API_STATUS status;
5599 }
5601 /* if argc > 0, must be user command */
5604 }
5607 NULL,
5608 username,
5611 preferred_len,
5618 }
5620 /* Display results */
5628 }
5629 done:
5632 }
5634 /**
5635 * 'net rpc file' entrypoint.
5636 * @param argc Standard main() style argc.
5637 * @param argv Standard main() style argv. Initial components are already
5638 * stripped.
5639 **/
5642 {
5643 NET_API_STATUS status;
5646 {
5648 rpc_file_close,
5649 NET_TRANSPORT_RPC,
5653 },
5654 {
5656 rpc_file_user,
5657 NET_TRANSPORT_RPC,
5661 },
5662 #if 0
5663 {
5665 rpc_file_info,
5666 NET_TRANSPORT_RPC,
5670 },
5671 #endif
5673 };
5678 }
5683 }
5692 }
5695 }
5698 }
5700 /**
5701 * ABORT the shutdown of a remote RPC Server, over initshutdown pipe.
5702 *
5703 * All parameters are provided by the run_rpc_command function, except for
5704 * argc, argv which are passed through.
5705 *
5706 * @param c A net_context structure.
5707 * @param domain_sid The domain sid acquired from the remote server.
5708 * @param cli A cli_state connected to the server.
5709 * @param mem_ctx Talloc context, destroyed on completion of the function.
5710 * @param argc Standard main() style argc.
5711 * @param argv Standard main() style argv. Initial components are already
5712 * stripped.
5713 *
5714 * @return Normal NTSTATUS return.
5715 **/
5725 {
5727 WERROR result;
5733 }
5741 }
5743 /**
5744 * ABORT the shutdown of a remote RPC Server, over winreg pipe.
5745 *
5746 * All parameters are provided by the run_rpc_command function, except for
5747 * argc, argv which are passed through.
5748 *
5749 * @param c A net_context structure.
5750 * @param domain_sid The domain sid acquired from the remote server.
5751 * @param cli A cli_state connected to the server.
5752 * @param mem_ctx Talloc context, destroyed on completion of the function.
5753 * @param argc Standard main() style argc.
5754 * @param argv Standard main() style argv. Initial components are already
5755 * stripped.
5756 *
5757 * @return Normal NTSTATUS return.
5758 **/
5768 {
5770 WERROR werr;
5778 }
5786 }
5788 /**
5789 * ABORT the shutdown of a remote RPC server.
5790 *
5791 * @param argc Standard main() style argc.
5792 * @param argv Standard main() style argv. Initial components are already
5793 * stripped.
5794 *
5795 * @return A shell status integer (0 for success).
5796 **/
5800 {
5810 }
5821 rpc_reg_shutdown_abort_internals,
5823 }
5825 /**
5826 * Shut down a remote RPC Server via initshutdown pipe.
5827 *
5828 * All parameters are provided by the run_rpc_command function, except for
5829 * argc, argv which are passed through.
5830 *
5831 * @param c A net_context structure.
5832 * @param domain_sid The domain sid acquired from the remote server.
5833 * @param cli A cli_state connected to the server.
5834 * @param mem_ctx Talloc context, destroyed on completion of the function.
5835 * @param argc Standard main() style argc.
5836 * @param argv Standard main() style argv. Initial components are already
5837 * stripped.
5838 *
5839 * @return Normal NTSTATUS return.
5840 **/
5850 {
5852 WERROR result;
5860 }
5863 }
5867 /* create an entry */
5873 }
5879 }
5881 }
5883 /**
5884 * Shut down a remote RPC Server via winreg pipe.
5885 *
5886 * All parameters are provided by the run_rpc_command function, except for
5887 * argc, argv which are passed through.
5888 *
5889 * @param c A net_context structure.
5890 * @param domain_sid The domain sid acquired from the remote server.
5891 * @param cli A cli_state connected to the server.
5892 * @param mem_ctx Talloc context, destroyed on completion of the function.
5893 * @param argc Standard main() style argc.
5894 * @param argv Standard main() style argv. Initial components are already
5895 * stripped.
5896 *
5897 * @return Normal NTSTATUS return.
5898 **/
5908 {
5912 NTSTATUS result;
5913 WERROR werr;
5918 }
5923 }
5925 /* create an entry */
5932 }
5940 else
5942 }
5945 }
5947 /**
5948 * Shut down a remote RPC server.
5949 *
5950 * @param argc Standard main() style argc.
5951 * @param argv Standard main() style argv. Initial components are already
5952 * stripped.
5953 *
5954 * @return A shell status integer (0 for success).
5955 **/
5958 {
5968 }
5977 }
5980 }
5982 /***************************************************************************
5983 NT Domain trusts code (i.e. 'net rpc trustdom' functionality)
5984 ***************************************************************************/
5986 /**
5987 * Add interdomain trust account to the RPC server.
5988 * All parameters (except for argc and argv) are passed by run_rpc_command
5989 * function.
5990 *
5991 * @param c A net_context structure.
5992 * @param domain_sid The domain sid acquired from the server.
5993 * @param cli A cli_state connected to the server.
5994 * @param mem_ctx Talloc context, destroyed on completion of the function.
5995 * @param argc Standard main() style argc.
5996 * @param argv Standard main() style argv. Initial components are already
5997 * stripped.
5998 *
5999 * @return normal NTSTATUS return code.
6000 */
6010 {
6030 }
6032 /*
6033 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6034 */
6038 }
6043 }
6052 }
6054 /* Get samr policy handle */
6057 MAXIMUM_ALLOWED_ACCESS,
6062 }
6066 }
6068 /* Get domain policy handle */
6071 MAXIMUM_ALLOWED_ACCESS,
6077 }
6081 }
6083 /* This call can take a long time - allow the server to time out.
6084 * 35 seconds should do it. */
6088 /* Create trusting domain's account */
6092 SAMR_USER_ACCESS_SET_PASSWORD |
6093 SAMR_USER_ACCESS_GET_ATTRIBUTES |
6094 SAMR_USER_ACCESS_SET_ATTRIBUTES;
6099 acb_info,
6100 acct_flags,
6107 }
6108 /* And restore our original timeout. */
6116 }
6118 {
6128 SAMR_FIELD_NT_PASSWORD_PRESENT;
6139 }
6146 }
6147 }
6149 done:
6153 }
6155 /**
6156 * Create interdomain trust account for a remote domain.
6157 *
6158 * @param argc Standard argc.
6159 * @param argv Standard argv without initial components.
6160 *
6161 * @return Integer status (0 means success).
6162 **/
6165 {
6175 }
6176 }
6179 /**
6180 * Remove interdomain trust account from the RPC server.
6181 * All parameters (except for argc and argv) are passed by run_rpc_command
6182 * function.
6183 *
6184 * @param c A net_context structure.
6185 * @param domain_sid The domain sid acquired from the server.
6186 * @param cli A cli_state connected to the server.
6187 * @param mem_ctx Talloc context, destroyed on completion of the function.
6188 * @param argc Standard main() style argc.
6189 * @param argv Standard main() style argv. Initial components are already
6190 * stripped.
6191 *
6192 * @return normal NTSTATUS return code.
6193 */
6203 {
6217 }
6219 /*
6220 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6221 */
6230 }
6232 /* Get samr policy handle */
6235 MAXIMUM_ALLOWED_ACCESS,
6240 }
6244 }
6246 /* Get domain policy handle */
6249 MAXIMUM_ALLOWED_ACCESS,
6255 }
6259 }
6275 }
6282 }
6286 }
6290 }
6294 MAXIMUM_ALLOWED_ACCESS,
6303 }
6311 }
6313 /* append the rid to the domain sid */
6316 }
6318 /* remove the sid */
6329 }
6336 }
6339 /* Delete user */
6349 }
6357 }
6363 }
6365 done:
6367 }
6369 /**
6370 * Delete interdomain trust account for a remote domain.
6371 *
6372 * @param argc Standard argc.
6373 * @param argv Standard argv without initial components.
6374 *
6375 * @return Integer status (0 means success).
6376 **/
6379 {
6388 }
6389 }
6395 {
6399 NTSTATUS status;
6400 WERROR result;
6403 /* Use NetServerEnum2 */
6408 }
6413 /* Try netr_GetDcName */
6419 }
6425 domain_name,
6432 }
6439 }
6442 }
6444 /**
6445 * Establish trust relationship to a trusting domain.
6446 * Interdomain account must already be created on remote PDC.
6447 *
6448 * @param c A net_context structure.
6449 * @param argc Standard argc.
6450 * @param argv Standard argv without initial components.
6451 *
6452 * @return Integer status (0 means success).
6453 **/
6457 {
6468 fstring pdc_name;
6472 /*
6473 * Connect to \\server\ipc$ as 'our domain' account with password
6474 */
6481 }
6487 }
6489 /* account name used at first is our domain's name with '$' */
6492 }
6497 }
6499 /*
6500 * opt_workgroup will be used by connection functions further,
6501 * hence it should be set to remote domain name instead of ours
6502 */
6505 };
6509 /* find the domain controller */
6513 }
6515 /* connect to ipc$ as username/password */
6519 /* Is it trusting domain account for sure ? */
6523 }
6525 /* store who we connected to */
6529 /*
6530 * Connect to \\server\ipc$ again (this time anonymously)
6531 */
6540 }
6547 }
6549 /* Make sure we're talking to a proper server */
6556 }
6558 /*
6559 * Call LsaOpenPolicy and LsaQueryInfo
6560 */
6569 }
6581 }
6583 /* Querying info level 5 */
6587 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6596 }
6603 }
6607 /* There should be actually query info level 3 (following nt serv behaviour),
6608 but I still don't know if it's _really_ necessary */
6610 /*
6611 * Store the password in secrets db
6612 */
6619 }
6621 /*
6622 * Close the pipes and clean up
6623 */
6632 }
6640 }
6642 /**
6643 * Revoke trust relationship to the remote domain.
6644 *
6645 * @param c A net_context structure.
6646 * @param argc Standard argc.
6647 * @param argv Standard argv without initial components.
6648 *
6649 * @return Integer status (0 means success).
6650 **/
6654 {
6665 }
6667 /* generate upper cased domain name */
6672 }
6674 /* delete password of the trust */
6677 domain_name));
6679 };
6682 done:
6685 }
6695 {
6696 fstring str_sid;
6699 }
6702 }
6705 {
6706 fstring ascii_sid;
6708 /* convert sid into ascii string */
6712 }
6719 {
6723 DATA_BLOB session_key;
6728 pol,
6730 LSA_TRUSTED_DOMAIN_INFO_PASSWORD,
6737 }
6743 }
6752 }
6761 }
6767 }
6769 #ifdef DEBUG_PASSWORD
6773 #endif
6775 done:
6780 }
6784 {
6785 /* common variables */
6794 /* trusted domains listing variables */
6798 fstring pdc_name;
6808 }
6810 /*
6811 * Listing trusted domains (stored in secrets.tdb, if local)
6812 */
6816 /*
6817 * set domain and pdc name to local samba server (default)
6818 * or to remote one given in command line
6819 */
6828 };
6830 /* open \PIPE\lsarpc and open policy handle */
6837 };
6847 };
6859 };
6861 /* query info level 5 to obtain sid of a domain being queried */
6864 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6874 }
6881 }
6883 /*
6884 * Keep calling LsaEnumTrustdom over opened pipe until
6885 * the end of enumeration is reached
6886 */
6903 };
6911 };
6926 }
6927 };
6929 /*
6930 * in case of no trusted domains say something rather
6931 * than just display blank line
6932 */
6937 /* close this connection before doing next one */
6945 };
6947 /* close lsarpc pipe and connection to IPC$ */
6952 }
6955 {
6956 /* common variables */
6968 /* trusted domains listing variables */
6972 fstring pdc_name;
6975 /* trusting domains listing variables */
6986 }
6988 /*
6989 * Listing trusted domains (stored in secrets.tdb, if local)
6990 */
6994 /*
6995 * set domain and pdc name to local samba server (default)
6996 * or to remote one given in command line
6997 */
7006 };
7008 /* open \PIPE\lsarpc and open policy handle */
7015 };
7025 };
7037 };
7039 /* query info level 5 to obtain sid of a domain being queried */
7042 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
7052 }
7059 }
7063 /*
7064 * Keep calling LsaEnumTrustdom over opened pipe until
7065 * the end of enumeration is reached
7066 */
7085 };
7092 };
7099 };
7104 /*
7105 * in case of no trusted domains say something rather
7106 * than just display blank line
7107 */
7110 }
7112 /* close this connection before doing next one */
7120 };
7124 /*
7125 * Listing trusting domains (stored in passdb backend, if local)
7126 */
7130 /*
7131 * Open \PIPE\samr and get needed policy handles
7132 */
7140 };
7144 /* SamrConnect2 */
7147 SAMR_ACCESS_LOOKUP_DOMAIN,
7156 };
7164 };
7166 /* SamrOpenDomain - we have to open domain policy handle in order to be
7167 able to enumerate accounts*/
7170 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS,
7171 queried_dom_sid,
7180 };
7188 };
7190 /*
7191 * perform actual enumeration
7192 */
7202 ACB_DOMTRUST,
7213 };
7221 };
7229 /*
7230 * get each single domain's sid (do we _really_ need this ?):
7231 * 1) connect to domain's pdc
7232 * 2) query the pdc for domain's sid
7233 */
7235 /* get rid of '$' tail */
7240 /* set opt_* variables to remote domain */
7245 }
7251 /* connect to remote domain controller */
7256 /* query for domain's sid */
7261 argv))
7271 }
7272 }
7278 }
7280 /* close opened samr and domain policy handles */
7284 };
7289 };
7291 /* close samr pipe and connection to IPC$ */
7296 }
7298 /**
7299 * Entrypoint for 'net rpc trustdom' code.
7300 *
7301 * @param argc Standard argc.
7302 * @param argv Standard argv without initial components.
7303 *
7304 * @return Integer status (0 means success).
7305 */
7308 {
7310 {
7312 rpc_trustdom_add,
7313 NET_TRANSPORT_RPC,
7317 },
7318 {
7320 rpc_trustdom_del,
7321 NET_TRANSPORT_RPC,
7325 },
7326 {
7328 rpc_trustdom_establish,
7329 NET_TRANSPORT_RPC,
7333 },
7334 {
7336 rpc_trustdom_revoke,
7337 NET_TRANSPORT_RPC,
7341 },
7342 {
7344 rpc_trustdom_list,
7345 NET_TRANSPORT_RPC,
7349 },
7350 {
7352 rpc_trustdom_vampire,
7353 NET_TRANSPORT_RPC,
7357 },
7359 };
7362 }
7364 /**
7365 * Check if a server will take rpc commands
7366 * @param flags Type of server to connect to (PDC, DMB, localhost)
7367 * if the host is not explicitly specified
7368 * @return bool (true means rpc supported)
7369 */
7371 {
7376 NTSTATUS status;
7378 /* flags (i.e. server type) may depend on command */
7387 }
7389 PROTOCOL_NT1);
7396 done:
7399 }
7401 /* dump sam database via samsync rpc calls */
7410 }
7413 NET_FLAGS_ANONYMOUS,
7415 }
7417 /* syncronise sam database via samsync rpc calls */
7419 {
7421 {
7423 rpc_vampire_ldif,
7424 NET_TRANSPORT_RPC,
7427 " Dump remote SAM database to LDIF file or "
7429 },
7430 {
7432 rpc_vampire_keytab,
7433 NET_TRANSPORT_RPC,
7436 " Dump remote SAM database to Kerberos keytab "
7438 },
7439 {
7441 rpc_vampire_passdb,
7442 NET_TRANSPORT_RPC,
7446 },
7449 };
7459 }
7462 }
7465 }
7467 /**
7468 * Migrate everything from a print server.
7469 *
7470 * @param c A net_context structure.
7471 * @param argc Standard main() style argc.
7472 * @param argv Standard main() style argv. Initial components are already
7473 * stripped.
7474 *
7475 * @return A shell status integer (0 for success).
7476 *
7477 * The order is important !
7478 * To successfully add drivers the print queues have to exist !
7479 * Applying ACLs should be the last step, because you're easily locked out.
7480 *
7481 **/
7484 {
7494 }
7499 }
7503 argv);
7509 argv);
7520 argv);
7526 argv);
7528 }
7530 /**
7531 * Migrate print drivers from a print server.
7532 *
7533 * @param c A net_context structure.
7534 * @param argc Standard main() style argc.
7535 * @param argv Standard main() style argv. Initial components are already
7536 * stripped.
7537 *
7538 * @return A shell status integer (0 for success).
7539 **/
7542 {
7550 }
7555 }
7558 rpc_printer_migrate_drivers_internals,
7560 }
7562 /**
7563 * Migrate print-forms from a print-server.
7564 *
7565 * @param c A net_context structure.
7566 * @param argc Standard main() style argc.
7567 * @param argv Standard main() style argv. Initial components are already
7568 * stripped.
7569 *
7570 * @return A shell status integer (0 for success).
7571 **/
7574 {
7582 }
7587 }
7590 rpc_printer_migrate_forms_internals,
7592 }
7594 /**
7595 * Migrate printers from a print-server.
7596 *
7597 * @param c A net_context structure.
7598 * @param argc Standard main() style argc.
7599 * @param argv Standard main() style argv. Initial components are already
7600 * stripped.
7601 *
7602 * @return A shell status integer (0 for success).
7603 **/
7606 {
7614 }
7619 }
7622 rpc_printer_migrate_printers_internals,
7624 }
7626 /**
7627 * Migrate printer-ACLs from a print-server
7628 *
7629 * @param c A net_context structure.
7630 * @param argc Standard main() style argc.
7631 * @param argv Standard main() style argv. Initial components are already
7632 * stripped.
7633 *
7634 * @return A shell status integer (0 for success).
7635 **/
7638 {
7646 }
7651 }
7654 rpc_printer_migrate_security_internals,
7656 }
7658 /**
7659 * Migrate printer-settings from a print-server.
7660 *
7661 * @param c A net_context structure.
7662 * @param argc Standard main() style argc.
7663 * @param argv Standard main() style argv. Initial components are already
7664 * stripped.
7665 *
7666 * @return A shell status integer (0 for success).
7667 **/
7670 {
7679 }
7684 }
7687 rpc_printer_migrate_settings_internals,
7689 }
7691 /**
7692 * 'net rpc printer' entrypoint.
7693 *
7694 * @param c A net_context structure.
7695 * @param argc Standard main() style argc.
7696 * @param argv Standard main() style argv. Initial components are already
7697 * stripped.
7698 **/
7701 {
7703 /* ouch: when addriver and setdriver are called from within
7704 rpc_printer_migrate_drivers_internals, the printer-queue already
7705 *has* to exist */
7708 {
7710 rpc_printer_migrate_all,
7711 NET_TRANSPORT_RPC,
7715 },
7716 {
7718 rpc_printer_migrate_drivers,
7719 NET_TRANSPORT_RPC,
7723 },
7724 {
7726 rpc_printer_migrate_forms,
7727 NET_TRANSPORT_RPC,
7731 },
7732 {
7734 rpc_printer_migrate_printers,
7735 NET_TRANSPORT_RPC,
7739 },
7740 {
7742 rpc_printer_migrate_security,
7743 NET_TRANSPORT_RPC,
7747 },
7748 {
7750 rpc_printer_migrate_settings,
7751 NET_TRANSPORT_RPC,
7755 },
7757 };
7760 }
7763 /**
7764 * List printers on a remote RPC server.
7765 *
7766 * @param c A net_context structure.
7767 * @param argc Standard main() style argc.
7768 * @param argv Standard main() style argv. Initial components are already
7769 * stripped.
7770 *
7771 * @return A shell status integer (0 for success).
7772 **/
7774 {
7782 }
7785 rpc_printer_list_internals,
7787 }
7789 /**
7790 * List printer-drivers on a remote RPC server.
7791 *
7792 * @param c A net_context structure.
7793 * @param argc Standard main() style argc.
7794 * @param argv Standard main() style argv. Initial components are already
7795 * stripped.
7796 *
7797 * @return A shell status integer (0 for success).
7798 **/
7801 {
7809 }
7812 rpc_printer_driver_list_internals,
7814 }
7816 /**
7817 * Publish printer in ADS via MSRPC.
7818 *
7819 * @param c A net_context structure.
7820 * @param argc Standard main() style argc.
7821 * @param argv Standard main() style argv. Initial components are already
7822 * stripped.
7823 *
7824 * @return A shell status integer (0 for success).
7825 **/
7828 {
7836 }
7839 rpc_printer_publish_publish_internals,
7841 }
7843 /**
7844 * Update printer in ADS via MSRPC.
7845 *
7846 * @param c A net_context structure.
7847 * @param argc Standard main() style argc.
7848 * @param argv Standard main() style argv. Initial components are already
7849 * stripped.
7850 *
7851 * @return A shell status integer (0 for success).
7852 **/
7854 {
7862 }
7865 rpc_printer_publish_update_internals,
7867 }
7869 /**
7870 * UnPublish printer in ADS via MSRPC.
7871 *
7872 * @param c A net_context structure.
7873 * @param argc Standard main() style argc.
7874 * @param argv Standard main() style argv. Initial components are already
7875 * stripped.
7876 *
7877 * @return A shell status integer (0 for success).
7878 **/
7881 {
7889 }
7892 rpc_printer_publish_unpublish_internals,
7894 }
7896 /**
7897 * List published printers via MSRPC.
7898 *
7899 * @param c A net_context structure.
7900 * @param argc Standard main() style argc.
7901 * @param argv Standard main() style argv. Initial components are already
7902 * stripped.
7903 *
7904 * @return A shell status integer (0 for success).
7905 **/
7908 {
7916 }
7919 rpc_printer_publish_list_internals,
7921 }
7924 /**
7925 * Publish printer in ADS.
7926 *
7927 * @param c A net_context structure.
7928 * @param argc Standard main() style argc.
7929 * @param argv Standard main() style argv. Initial components are already
7930 * stripped.
7931 *
7932 * @return A shell status integer (0 for success).
7933 **/
7936 {
7939 {
7941 rpc_printer_publish_publish,
7942 NET_TRANSPORT_RPC,
7946 },
7947 {
7949 rpc_printer_publish_update,
7950 NET_TRANSPORT_RPC,
7954 },
7955 {
7957 rpc_printer_publish_unpublish,
7958 NET_TRANSPORT_RPC,
7962 },
7963 {
7965 rpc_printer_publish_list,
7966 NET_TRANSPORT_RPC,
7970 },
7972 };
7979 " Alias of net rpc printer publish "
7983 }
7985 rpc_printer_publish_list_internals,
7987 }
7991 }
7994 /**
7995 * Display rpc printer help page.
7996 *
7997 * @param c A net_context structure.
7998 * @param argc Standard main() style argc.
7999 * @param argv Standard main() style argv. Initial components are already
8000 * stripped.
8001 **/
8003 {
8031 }
8033 /**
8034 * 'net rpc printer' entrypoint.
8035 *
8036 * @param c A net_context structure.
8037 * @param argc Standard main() style argc.
8038 * @param argv Standard main() style argv. Initial components are already
8039 * stripped.
8040 **/
8042 {
8044 {
8046 rpc_printer_list,
8047 NET_TRANSPORT_RPC,
8051 },
8052 {
8054 rpc_printer_migrate,
8055 NET_TRANSPORT_RPC,
8059 },
8060 {
8062 rpc_printer_driver_list,
8063 NET_TRANSPORT_RPC,
8067 },
8068 {
8070 rpc_printer_publish,
8071 NET_TRANSPORT_RPC,
8075 },
8077 };
8086 }
8088 rpc_printer_list_internals,
8090 }
8093 }
8095 /**
8096 * 'net rpc' entrypoint.
8097 *
8098 * @param c A net_context structure.
8099 * @param argc Standard main() style argc.
8100 * @param argv Standard main() style argv. Initial components are already
8101 * stripped.
8102 **/
8105 {
8106 NET_API_STATUS status;
8109 {
8111 net_rpc_audit,
8112 NET_TRANSPORT_RPC,
8116 },
8117 {
8119 net_rpc_info,
8120 NET_TRANSPORT_RPC,
8124 },
8125 {
8127 net_rpc_join,
8128 NET_TRANSPORT_RPC,
8132 },
8133 {
8135 net_rpc_oldjoin,
8136 NET_TRANSPORT_RPC,
8140 },
8141 {
8143 net_rpc_testjoin,
8144 NET_TRANSPORT_RPC,
8148 },
8149 {
8151 net_rpc_user,
8152 NET_TRANSPORT_RPC,
8156 },
8157 {
8159 rpc_user_password,
8160 NET_TRANSPORT_RPC,
8165 },
8166 {
8168 net_rpc_group,
8169 NET_TRANSPORT_RPC,
8173 },
8174 {
8176 net_rpc_share,
8177 NET_TRANSPORT_RPC,
8181 },
8182 {
8184 net_rpc_file,
8185 NET_TRANSPORT_RPC,
8189 },
8190 {
8192 net_rpc_printer,
8193 NET_TRANSPORT_RPC,
8197 },
8198 {
8200 net_rpc_changetrustpw,
8201 NET_TRANSPORT_RPC,
8205 },
8206 {
8208 rpc_trustdom,
8209 NET_TRANSPORT_RPC,
8213 },
8214 {
8216 rpc_shutdown_abort,
8217 NET_TRANSPORT_RPC,
8221 },
8222 {
8224 rpc_shutdown,
8225 NET_TRANSPORT_RPC,
8229 },
8230 {
8232 rpc_samdump,
8233 NET_TRANSPORT_RPC,
8237 },
8238 {
8240 rpc_vampire,
8241 NET_TRANSPORT_RPC,
8245 },
8246 {
8248 net_rpc_getsid,
8249 NET_TRANSPORT_RPC,
8253 },
8254 {
8256 net_rpc_rights,
8257 NET_TRANSPORT_RPC,
8261 },
8262 {
8264 net_rpc_service,
8265 NET_TRANSPORT_RPC,
8269 },
8270 {
8272 net_rpc_registry,
8273 NET_TRANSPORT_RPC,
8277 },
8278 {
8280 net_rpc_shell,
8281 NET_TRANSPORT_RPC,
8285 },
8286 {
8288 net_rpc_trust,
8289 NET_TRANSPORT_RPC,
8293 },
8294 {
8296 net_rpc_conf,
8297 NET_TRANSPORT_RPC,
8301 },
8303 };
8308 }
8313 }
8316 }
8319 }