| blob | e9ebb89d6056c91df58c91e82445070669b96911 |
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 * Copyright (C) Gerald Carter 2002.
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 */
38 #define NTDRIVERS_DATABASE_VERSION_1 1
39 #define NTDRIVERS_DATABASE_VERSION_2 2
42 #define NTDRIVERS_DATABASE_VERSION NTDRIVERS_DATABASE_VERSION_3
44 /* Map generic permissions to printer object specific permissions */
46 GENERIC_MAPPING printer_generic_mapping = {
47 PRINTER_READ,
48 PRINTER_WRITE,
49 PRINTER_EXECUTE,
50 PRINTER_ALL_ACCESS
51 };
53 STANDARD_MAPPING printer_std_mapping = {
54 PRINTER_READ,
55 PRINTER_WRITE,
56 PRINTER_EXECUTE,
57 PRINTER_ALL_ACCESS
58 };
60 /* Map generic permissions to print server object specific permissions */
62 GENERIC_MAPPING printserver_generic_mapping = {
63 SERVER_READ,
64 SERVER_WRITE,
65 SERVER_EXECUTE,
66 SERVER_ALL_ACCESS
67 };
69 STANDARD_MAPPING printserver_std_mapping = {
70 SERVER_READ,
71 SERVER_WRITE,
72 SERVER_EXECUTE,
73 SERVER_ALL_ACCESS
74 };
76 /* We need one default form to support our default printer. Msoft adds the
77 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
78 array index). Letter is always first, so (for the current code) additions
79 always put things in the correct order. */
199 };
202 {
217 }
219 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
221 }
222 }
227 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
229 }
231 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
233 }
234 }
239 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
241 }
243 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
245 }
246 }
249 }
252 }
254 /****************************************************************************
255 Open the NT printing tdb.
256 ****************************************************************************/
259 {
271 }
278 }
285 }
289 /* handle a Samba upgrade */
291 {
292 int32 vers_id;
294 /* Cope with byte-reversed older versions of the db. */
296 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
297 /* Written on a bigendian machine with old fetch_int code. Save as le. */
298 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
301 }
305 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
312 }
313 }
318 /*
319 * register callback to handle updating printers as new
320 * drivers are installed
321 */
325 /*
326 * register callback to handle updating printer data
327 * when a driver is initialized
328 */
334 }
336 /*******************************************************************
337 tdb traversal function for counting printers.
338 ********************************************************************/
342 {
347 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
348 }
351 }
353 /*******************************************************************
354 Update the spooler global c_setprinter. This variable is initialized
355 when the parent smbd starts with the number of existing printers. It
356 is monotonically increased by the current number of printers *after*
357 each add or delete printer RPC. Only Microsoft knows why... JRR020119
358 ********************************************************************/
361 {
362 int32 c_setprinter;
367 /* Traverse the tdb, counting the printers */
370 /* If initializing, set c_setprinter to current printers count
371 * otherwise, bump it by the current printer count
372 */
375 else
384 }
386 /*******************************************************************
387 Get the spooler global c_setprinter, accounting for initialization.
388 ********************************************************************/
391 {
400 }
402 /****************************************************************************
403 Get builtin form struct list.
404 ****************************************************************************/
407 {
410 }
412 /****************************************************************************
413 get a builtin form struct
414 ****************************************************************************/
417 {
419 fstring form_name;
428 }
429 }
432 }
434 /****************************************************************************
435 get a form struct list
436 ****************************************************************************/
438 {
441 nt_forms_struct form;
449 {
469 }
472 n++;
473 }
477 }
479 /****************************************************************************
480 write a form struct list
481 ****************************************************************************/
483 {
490 /* save index, so list is rebuilt in correct order */
502 }
505 }
507 /****************************************************************************
508 add a form struct at the end of the list
509 ****************************************************************************/
511 {
513 BOOL update;
514 fstring form_name;
517 /*
518 * NT tries to add forms even when
519 * they are already in the base
520 * only update the values if already present
521 */
531 }
532 }
538 }
542 }
553 }
555 /****************************************************************************
556 delete a named form struct
557 ****************************************************************************/
559 {
560 pstring key;
561 TDB_DATA kbuf;
563 fstring form_name;
573 }
574 }
580 }
588 }
591 }
593 /****************************************************************************
594 update a form struct
595 ****************************************************************************/
597 {
599 fstring form_name;
604 {
608 }
619 }
621 /****************************************************************************
622 get the nt drivers list
624 traverse the database and look-up the matching names
625 ****************************************************************************/
627 {
629 fstring short_archi;
631 pstring key;
645 }
649 total++;
650 }
653 }
655 /****************************************************************************
656 function to do the mapping between the long architecture name and
657 the short one.
658 ****************************************************************************/
660 {
664 };
667 {
674 };
680 i++;
687 }
696 }
698 /****************************************************************************
699 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
700 There are two case to be covered here: PE (Portable Executable) and NE (New
701 Executable) files. Both files support the same INFO structure, but PE files
702 store the signature in unicode, and NE files store it as !unicode.
703 returns -1 on error, 1 on version info found, and 0 on no version info found.
704 ****************************************************************************/
707 {
710 ssize_t byte_count;
716 }
718 /* Note: DOS_HEADER_SIZE < malloc'ed PE_HEADER_SIZE */
723 }
725 /* Is this really a DOS header? */
730 }
732 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
733 if (fsp->conn->vfs_ops.lseek(fsp, fsp->fd, SVAL(buf,DOS_HEADER_LFANEW_OFFSET), SEEK_SET) == (SMB_OFF_T)-1) {
736 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
738 }
743 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
745 }
747 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
755 /* At this point, we assume the file is in error. It still could be somthing
756 * else besides a PE file, but it unlikely at this point.
757 */
759 }
761 /* get the section table */
769 }
775 }
777 /* Iterate the section table looking for the resource section ".rsrc" */
790 }
792 /* Seek to the start of the .rsrc section info */
797 }
803 }
806 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
808 /* Align to next long address */
821 }
822 }
823 }
824 }
825 }
827 /* Version info not found, fall back to origin date/time */
836 /* At this point, we assume the file is in error. It still could be somthing
837 * else besides a NE file, but it unlikely at this point. */
839 }
841 /* Allocate a bit more space to speed up things */
847 }
849 /* This is a HACK! I got tired of trying to sort through the messy
850 * 'NE' file format. If anyone wants to clean this up please have at
851 * it, but this works. 'NE' files will eventually fade away. JRR */
853 /* Cover case that should not occur in a well formed 'NE' .dll file */
857 /* Fast skip past data that can't possibly match */
860 /* Potential match data crosses buf boundry, move it to beginning
861 * of buf, and fill the buf with as much as it will hold. */
872 }
878 }
880 /* Check that the full signature string and the magic number that
881 * follows exist (not a perfect solution, but the chances that this
882 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
883 * twice, as it is simpler to read the code. */
885 /* Compute skip alignment to next long address */
898 }
899 }
900 }
902 /* Version info not found, fall back to origin date/time */
908 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
912 no_version_info:
916 error_exit:
919 }
921 /****************************************************************************
922 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
923 share one or more files. During the MS installation process files are checked
924 to insure that only a newer version of a shared file is installed over an
925 older version. There are several possibilities for this comparison. If there
926 is no previous version, the new one is newer (obviously). If either file is
927 missing the version info structure, compare the creation date (on Unix use
928 the modification date). Otherwise chose the numerically larger version number.
929 ****************************************************************************/
931 fstring old_file)
932 {
934 pstring filepath;
936 uint32 new_major;
937 uint32 new_minor;
940 uint32 old_major;
941 uint32 old_minor;
947 SMB_STRUCT_STAT st;
948 SMB_STRUCT_STAT stat_buf;
949 BOOL bad_path;
956 /* Get file version info (if available) for previous file (if it exists) */
966 /* Old file not found, so by definition new file is in fact newer */
977 old_file));
982 }
983 }
986 /* Get file version info (if available) for new file */
995 /* New file not found, this shouldn't occur if the caller did its job */
1006 new_file));
1011 }
1012 }
1016 /* Compare versions and choose the larger version number */
1022 }
1026 }
1029 /* Compare modification time/dates and choose the newest time/date */
1033 }
1037 }
1038 }
1040 error_exit:
1044 }
1046 /****************************************************************************
1047 Determine the correct cVersion associated with an architecture and driver
1048 ****************************************************************************/
1051 {
1055 NTSTATUS nt_status;
1056 pstring driverpath;
1057 DATA_BLOB null_pw;
1059 BOOL bad_path;
1060 SMB_STRUCT_STAT st;
1067 /* If architecture is Windows 95/98/ME, the version is always 0. */
1072 }
1074 /*
1075 * Connect to the print$ share under the same account as the user connected
1076 * to the rpc pipe. Note we must still be root to do this.
1077 */
1079 /* Null password is ok - we are already an authenticated user... */
1089 }
1091 /* We are temporarily becoming the connection user. */
1096 }
1098 /* Open the driver file (Portable Executable format) and determine the
1099 * deriver the cversion. */
1113 }
1115 uint32 major;
1116 uint32 minor;
1123 }
1125 /*
1126 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1127 * for more details. Version in this case is not just the version of the
1128 * file, but the version in the sense of kernal mode (2) vs. user mode
1129 * (3) drivers. Other bits of the version fields are the version info.
1130 * JRR 010716
1131 */
1142 }
1146 }
1158 error_exit:
1166 }
1168 /****************************************************************************
1169 ****************************************************************************/
1172 {
1173 fstring architecture;
1174 fstring new_name;
1177 WERROR err;
1179 /* clean up the driver name.
1180 * we can get .\driver.dll
1181 * or worse c:\windows\system\driver.dll !
1182 */
1183 /* using an intermediate string to not have overlaping memcpy()'s */
1187 }
1192 }
1197 }
1202 }
1209 }
1210 }
1211 }
1215 /* jfm:7/16/2000 the client always sends the cversion=0.
1216 * The server should check which version the driver is by reading
1217 * the PE header of driver->driverpath.
1218 *
1219 * For Windows 95/98 the version is 0 (so the value sent is correct)
1220 * For Windows NT (the architecture doesn't matter)
1221 * NT 3.1: cversion=0
1222 * NT 3.5/3.51: cversion=1
1223 * NT 4: cversion=2
1224 * NT2K: cversion=3
1225 */
1231 }
1233 /****************************************************************************
1234 ****************************************************************************/
1235 static WERROR clean_up_driver_struct_level_6(NT_PRINTER_DRIVER_INFO_LEVEL_6 *driver, struct current_user *user)
1236 {
1237 fstring architecture;
1238 fstring new_name;
1241 WERROR err;
1243 /* clean up the driver name.
1244 * we can get .\driver.dll
1245 * or worse c:\windows\system\driver.dll !
1246 */
1247 /* using an intermediate string to not have overlaping memcpy()'s */
1251 }
1256 }
1261 }
1266 }
1273 }
1274 }
1275 }
1279 /* jfm:7/16/2000 the client always sends the cversion=0.
1280 * The server should check which version the driver is by reading
1281 * the PE header of driver->driverpath.
1282 *
1283 * For Windows 95/98 the version is 0 (so the value sent is correct)
1284 * For Windows NT (the architecture doesn't matter)
1285 * NT 3.1: cversion=0
1286 * NT 3.5/3.51: cversion=1
1287 * NT 4: cversion=2
1288 * NT2K: cversion=3
1289 */
1290 if ((driver->version = get_correct_cversion(architecture, driver->driverpath, user, &err)) == -1)
1294 }
1296 /****************************************************************************
1297 ****************************************************************************/
1300 {
1303 {
1307 }
1309 {
1313 }
1316 }
1317 }
1319 /****************************************************************************
1320 This function sucks and should be replaced. JRA.
1321 ****************************************************************************/
1323 static void convert_level_6_to_level3(NT_PRINTER_DRIVER_INFO_LEVEL_3 *dst, NT_PRINTER_DRIVER_INFO_LEVEL_6 *src)
1324 {
1336 }
1347 else
1349 }
1352 }
1354 #endif
1356 /****************************************************************************
1357 ****************************************************************************/
1360 {
1362 NT_PRINTER_DRIVER_INFO_LEVEL_3 converted_driver;
1363 fstring architecture;
1364 pstring new_dir;
1365 pstring old_name;
1366 pstring new_name;
1367 DATA_BLOB null_pw;
1369 NTSTATUS nt_status;
1370 pstring inbuf;
1371 pstring outbuf;
1387 }
1391 /*
1392 * Connect to the print$ share under the same account as the user connected to the rpc pipe.
1393 * Note we must be root to do this.
1394 */
1405 }
1407 /*
1408 * Save who we are - we are temporarily becoming the connection user.
1409 */
1414 }
1416 /*
1417 * make the directories version and version\driver_name
1418 * under the architecture directory.
1419 */
1424 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1425 * listed for this driver which has already been moved, skip it (note:
1426 * drivers may list the same file name several times. Then check if the
1427 * file already exists in archi\cversion\, if so, check that the version
1428 * info (or time stamps if version info is unavailable) is newer (or the
1429 * date is later). If it is, move it to archi\cversion\filexxx.yyy.
1430 * Otherwise, delete the file.
1431 *
1432 * If a file is not moved to archi\cversion\ because of an error, all the
1433 * rest of the 'unmoved' driver files are removed from archi\. If one or
1434 * more of the driver's files was already moved to archi\cversion\, it
1435 * potentially leaves the driver in a partially updated state. Version
1436 * trauma will most likely occur if an client attempts to use any printer
1437 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1438 * done is appropriate... later JRR
1439 */
1447 NTSTATUS status;
1455 }
1456 }
1457 else
1459 }
1466 NTSTATUS status;
1474 }
1475 }
1476 else
1478 }
1479 }
1487 NTSTATUS status;
1495 }
1496 }
1497 else
1499 }
1500 }
1509 NTSTATUS status;
1517 }
1518 }
1519 else
1521 }
1522 }
1534 }
1535 }
1540 NTSTATUS status;
1548 }
1549 }
1550 else
1552 }
1553 NextDriver: ;
1554 }
1555 }
1561 }
1563 /****************************************************************************
1564 ****************************************************************************/
1566 {
1568 fstring architecture;
1569 pstring directory;
1570 pstring temp_name;
1571 pstring key;
1578 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
1579 * \\server is added in the rpc server layer.
1580 * It does make sense to NOT store the server's name in the printer TDB.
1581 */
1583 slprintf(directory, sizeof(directory)-1, "\\print$\\%s\\%d\\", architecture, driver->cversion);
1585 /* .inf files do not always list a file for each of the four standard files.
1586 * Don't prepend a path to a null filename, or client claims:
1587 * "The server on which the printer resides does not have a suitable
1588 * <printer driver name> printer driver installed. Click OK if you
1589 * wish to install the driver on your local machine."
1590 */
1594 }
1599 }
1604 }
1609 }
1614 slprintf(driver->dependentfiles[i], sizeof(driver->dependentfiles[i])-1, "%s%s", directory, temp_name);
1615 }
1616 }
1618 slprintf(key, sizeof(key)-1, "%s%s/%d/%s", DRIVERS_PREFIX, architecture, driver->cversion, driver->name);
1625 again:
1642 }
1643 }
1653 }
1657 }
1667 done:
1673 }
1675 /****************************************************************************
1676 ****************************************************************************/
1678 {
1679 NT_PRINTER_DRIVER_INFO_LEVEL_3 info3;
1694 }
1697 /****************************************************************************
1698 ****************************************************************************/
1699 static WERROR get_a_printer_driver_3_default(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, fstring driver, fstring arch)
1700 {
1701 NT_PRINTER_DRIVER_INFO_LEVEL_3 info;
1722 }
1724 /****************************************************************************
1725 ****************************************************************************/
1726 static WERROR get_a_printer_driver_3(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, fstring drivername, fstring arch, uint32 version)
1727 {
1728 NT_PRINTER_DRIVER_INFO_LEVEL_3 driver;
1730 fstring architecture;
1733 pstring key;
1739 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, drivername));
1770 }
1775 i++;
1776 }
1786 }
1791 }
1793 /****************************************************************************
1794 ****************************************************************************/
1796 {
1798 TDB_DATA kbuf;
1799 pstring key;
1821 }
1826 /*pstrcat(line, info3->name); pstrcat(line, ":");*/
1847 }
1852 }
1854 /****************************************************************************
1855 Debugging function, dump at level 6 the struct in the logs.
1856 ****************************************************************************/
1859 {
1860 uint32 result;
1867 {
1869 {
1889 }
1891 }
1893 }
1898 }
1901 }
1903 /****************************************************************************
1904 ****************************************************************************/
1906 {
1957 }
1962 }
1964 /****************************************************************************
1965 ****************************************************************************/
1967 {
1972 param,
1978 }
1983 }
1986 /****************************************************************************
1987 Delete a printer - this just deletes the printer info file, any open
1988 handles are not affected.
1989 ****************************************************************************/
1992 {
1993 pstring key;
1994 TDB_DATA kbuf;
2003 }
2005 /* FIXME!!! Reorder so this forward declaration is not necessary --jerry */
2008 /****************************************************************************
2009 ****************************************************************************/
2011 {
2012 pstring key;
2015 WERROR ret;
2018 /*
2019 * in addprinter: no servername and the printer is the name
2020 * in setprinter: servername is \\server
2021 * and printer is \\server\\printer
2022 *
2023 * Samba manages only local printers.
2024 * we currently don't support things like path=\\other_server\printer
2025 */
2031 }
2033 /*
2034 * JFM: one day I'll forget.
2035 * below that's info->portname because that's the SAMBA sharename
2036 * and I made NT 'thinks' it's the portname
2037 * the info->sharename is the thing you can name when you add a printer
2038 * that's the short-name when you create shared printer for 95/98
2039 * So I've made a limitation in SAMBA: you can only have 1 printer model
2040 * behind a SAMBA share.
2041 */
2046 again:
2084 }
2088 }
2100 done:
2110 }
2113 /****************************************************************************
2114 ****************************************************************************/
2116 {
2124 {
2126 }
2127 else
2128 {
2132 }
2134 }
2137 }
2139 /****************************************************************************
2140 ****************************************************************************/
2142 {
2159 }
2172 }
2176 }
2178 }
2180 /****************************************************************************
2181 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_PARAM.
2182 ****************************************************************************/
2184 {
2194 }
2196 /****************************************************************************
2197 Malloc and return an NT devicemode.
2198 ****************************************************************************/
2201 {
2209 }
2243 /* non utilisés par un driver d'imprimante */
2257 }
2259 /****************************************************************************
2260 Deepcopy an NT devicemode.
2261 ****************************************************************************/
2264 {
2267 if ((new_nt_devicemode = (NT_DEVICEMODE *)memdup(nt_devicemode, sizeof(NT_DEVICEMODE))) == NULL) {
2270 }
2274 if ((new_nt_devicemode->private = memdup(nt_devicemode->private, nt_devicemode->driverextra)) == NULL) {
2278 }
2279 }
2282 }
2284 /****************************************************************************
2285 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2286 ****************************************************************************/
2289 {
2299 }
2301 /****************************************************************************
2302 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2303 ****************************************************************************/
2305 {
2321 }
2324 }
2327 /****************************************************************************
2328 ****************************************************************************/
2330 {
2333 NT_DEVICEMODE devmode;
2381 /* the len in tdb_unpack is an int value and
2382 * devmode.driverextra is only a short
2383 */
2387 /* check to catch an invalid TDB entry so we don't segfault */
2390 }
2391 }
2400 }
2402 /****************************************************************************
2403 ****************************************************************************/
2405 {
2424 }
2427 }
2430 {
2447 }
2453 }
2459 }
2473 nt_name++;
2478 {
2482 l--;
2483 }
2484 }
2487 os2_name++;
2489 {
2493 l--;
2494 }
2495 }
2504 }
2505 }
2508 }
2510 /****************************************************************************
2511 get a default printer info 2 struct
2512 ****************************************************************************/
2514 {
2516 NT_PRINTER_INFO_LEVEL_2 info;
2529 /* by setting the driver name to an empty string, a local NT admin
2530 can now run the **local** APW to install a local printer driver
2531 for a Samba shared printer in 2.2. Without this, drivers **must** be
2532 installed on the Samba server for NT clients --jerry */
2536 #endif
2553 /*
2554 * I changed this as I think it is better to have a generic
2555 * DEVMODE than to crash Win2k explorer.exe --jerry
2556 * See the HP Deskjet 990c Win2k drivers for an example.
2557 *
2558 * However the default devmode appears to cause problems
2559 * with the HP CLJ 8500 PCL driver. Hence the addition of
2560 * the "default devmode" parameter --jerry 22/01/2002
2561 */
2566 }
2569 }
2571 /* This will get the current RPC talloc context, but we should be
2572 passing this as a parameter... fixme... JRA ! */
2581 }
2585 fail:
2589 }
2591 /****************************************************************************
2592 ****************************************************************************/
2594 {
2595 pstring key;
2596 NT_PRINTER_INFO_LEVEL_2 info;
2599 fstring printername;
2636 /* Samba has to have shared raw drivers. */
2639 /* Restore the stripped strings. */
2647 /*
2648 * Some client drivers freak out if there is a NULL devmode
2649 * (probably the driver is not checking before accessing
2650 * the devmode pointer) --jerry
2651 *
2652 * See comments in get_a_printer_2_default()
2653 */
2656 {
2658 printername));
2660 }
2664 /* This will get the current RPC talloc context, but we should be
2665 passing this as a parameter... fixme... JRA ! */
2669 /* Fix for OS/2 drivers. */
2681 }
2683 /****************************************************************************
2684 debugging function, dump at level 6 the struct in the logs
2685 ****************************************************************************/
2687 {
2688 uint32 result;
2694 {
2696 {
2699 else
2700 {
2727 }
2729 }
2734 }
2737 }
2739 /****************************************************************************
2740 Get the parameters we can substitute in an NT print job.
2741 ****************************************************************************/
2743 void get_printer_subst_params(int snum, fstring *printername, fstring *sharename, fstring *portname)
2744 {
2757 }
2759 /****************************************************************************
2760 Update the changeid time.
2761 This is SO NASTY as some drivers need this to change, others need it
2762 static. This value will change every second, and I must hope that this
2763 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
2764 UTAH ! JRA.
2765 ****************************************************************************/
2768 {
2774 /* Return changeid as msec since spooler restart */
2776 #else
2777 /*
2778 * This setting seems to work well but is too untested
2779 * to replace the above calculation. Left in for experiementation
2780 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
2781 */
2783 #endif
2784 }
2786 /*
2787 * The function below are the high level ones.
2788 * only those ones must be called from the spoolss code.
2789 * JFM.
2790 */
2792 /****************************************************************************
2793 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
2794 ****************************************************************************/
2797 {
2798 WERROR result;
2803 {
2805 {
2806 /*
2807 * Update the changestamp. Emperical tests show that the
2808 * ChangeID is always updated,but c_setprinter is
2809 * global spooler variable (not per printer).
2810 */
2812 /* ChangeID **must** be increasing over the lifetime
2813 of client's spoolss service in order for the
2814 client's cache to show updates */
2818 /*
2819 * Because one day someone will ask:
2820 * NT->NT An admin connection to a remote
2821 * printer show changes imeediately in
2822 * the properities dialog
2823 *
2824 * A non-admin connection will only show the
2825 * changes after viewing the properites page
2826 * 2 times. Seems to be related to a
2827 * race condition in the client between the spooler
2828 * updating the local cache and the Explorer.exe GUI
2829 * actually displaying the properties.
2830 *
2831 * This is fixed in Win2k. admin/non-admin
2832 * connections both display changes immediately.
2833 *
2834 * 14/12/01 --jerry
2835 */
2839 }
2843 }
2846 }
2848 /****************************************************************************
2849 Initialize printer devmode & data with previously saved driver init values.
2850 ****************************************************************************/
2853 {
2855 pstring key;
2858 NT_PRINTER_INFO_LEVEL_2 info;
2860 /*
2861 * Delete any printer data 'specifics' already set. When called for driver
2862 * replace, there will generally be some, but during an add printer, there
2863 * should not be any (if there are delete them).
2864 */
2869 }
2880 /*
2881 * When changing to a driver that has no init info in the tdb, remove
2882 * the previous drivers init info and leave the new on blank.
2883 */
2886 }
2888 /*
2889 * Get the saved DEVMODE..
2890 */
2893 /*
2894 * The saved DEVMODE contains the devicename from the printer used during
2895 * the initialization save. Change it to reflect the new printer.
2896 */
2901 /*
2902 * NT/2k does not change out the entire DeviceMode of a printer
2903 * when changing the driver. Only the driverextra, private, &
2904 * driverversion fields. --jerry (Thu Mar 14 08:58:43 CST 2002)
2905 *
2906 * Later e4xamination revealed that Windows NT/2k does reset the
2907 * the printer's device mode, bit **only** when you change a
2908 * property of the device mode such as the page orientation.
2909 * --jerry
2910 */
2914 /*
2915 * Bind the saved DEVMODE to the new the printer.
2916 */
2919 #else
2920 /* copy the entire devmode if we currently don't have one */
2925 }
2927 /* only set the necessary fields */
2941 }
2942 #endif
2947 /*
2948 * Add the printer data 'specifics' to the new printer
2949 */
2955 }
2957 /****************************************************************************
2958 Initialize printer devmode & data with previously saved driver init values.
2959 When a printer is created using AddPrinter, the drivername bound to the
2960 printer is used to lookup previously saved driver initialization info, which
2961 is bound to the new printer.
2962 ****************************************************************************/
2965 {
2969 {
2976 level));
2978 }
2981 }
2983 /****************************************************************************
2984 Delete driver init data stored for a specified driver
2985 ****************************************************************************/
2988 {
2989 pstring key;
2990 TDB_DATA kbuf;
2995 }
3005 }
3007 /****************************************************************************
3008 Pack up the DEVMODE and specifics for a printer into a 'driver init' entry
3009 in the tdb. Note: this is different from the driver entry and the printer
3010 entry. There should be a single driver init entry for each driver regardless
3011 of whether it was installed from NT or 2K. Technically, they should be
3012 different, but they work out to the same struct.
3013 ****************************************************************************/
3016 {
3017 pstring key;
3025 again:
3039 }
3043 }
3054 done:
3060 DEBUG(10,("update_driver_init_2: Saved printer [%s] init DEVMODE & specifics for driver [%s]\n",
3064 }
3066 /****************************************************************************
3067 Update (i.e. save) the driver init info (DEVMODE and specifics) for a printer
3068 ****************************************************************************/
3071 {
3072 uint32 result;
3077 {
3079 {
3082 }
3086 }
3089 }
3091 /****************************************************************************
3092 Convert the printer data value, a REG_BINARY array, into an initialization
3093 DEVMODE. Note: the array must be parsed as if it was a DEVMODE in an rpc...
3094 got to keep the endians happy :).
3095 ****************************************************************************/
3097 static BOOL convert_driver_init(NT_PRINTER_PARAM *param, TALLOC_CTX *ctx, NT_DEVICEMODE *nt_devmode)
3098 {
3100 prs_struct ps;
3101 DEVICEMODE devmode;
3111 else
3115 }
3117 /****************************************************************************
3118 Set the DRIVER_INIT info in the tdb. Requires Win32 client code that:
3120 1. Use the driver's config DLL to this UNC printername and:
3121 a. Call DrvPrintEvent with PRINTER_EVENT_INITIALIZE
3122 b. Call DrvConvertDevMode with CDM_DRIVER_DEFAULT to get default DEVMODE
3123 2. Call SetPrinterData with the 'magic' key and the DEVMODE as data.
3125 The last step triggers saving the "driver initialization" information for
3126 this printer into the tdb. Later, new printers that use this driver will
3127 have this initialization information bound to them. This simulates the
3128 driver initialization, as if it had run on the Samba server (as it would
3129 have done on NT).
3131 The Win32 client side code requirement sucks! But until we can run arbitrary
3132 Win32 printer driver code on any Unix that Samba runs on, we are stuck with it.
3134 It would have been easier to use SetPrinter because all the UNMARSHALLING of
3135 the DEVMODE is done there, but 2K/XP clients do not set the DEVMODE... think
3136 about it and you will realize why. JRR 010720
3137 ****************************************************************************/
3140 {
3146 /*
3147 * When the DEVMODE is already set on the printer, don't try to unpack it.
3148 */
3151 /*
3152 * Set devmode on printer info, so entire printer initialization can be
3153 * saved to tdb.
3154 */
3162 }
3166 /*
3167 * The DEVMODE is held in the 'data' component of the param in raw binary.
3168 * Convert it to to a devmode structure
3169 */
3174 }
3177 }
3179 /*
3180 * Pack up and add (or update) the DEVMODE and any current printer data to
3181 * a 'driver init' element in the tdb
3182 *
3183 */
3189 }
3191 /*
3192 * If driver initialization info was successfully saved, set the current
3193 * printer to match it. This allows initialization of the current printer
3194 * as well as the driver.
3195 */
3200 }
3204 #endif
3206 done:
3214 }
3216 /****************************************************************************
3217 Update the driver init info (DEVMODE and specifics) for a printer
3218 ****************************************************************************/
3221 {
3225 {
3227 {
3230 }
3234 }
3237 }
3239 /****************************************************************************
3240 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
3241 ****************************************************************************/
3244 {
3245 WERROR result;
3253 {
3255 {
3259 }
3267 }
3269 }
3273 }
3275 DEBUG(10,("get_a_printer: [%s] level %u returning %s\n", sharename, (unsigned int)level, dos_errstr(result)));
3278 }
3280 /****************************************************************************
3281 Deletes a NT_PRINTER_INFO_LEVEL struct.
3282 ****************************************************************************/
3285 {
3286 uint32 result;
3295 {
3297 {
3299 {
3302 }
3303 else
3304 {
3306 }
3308 }
3312 }
3316 }
3318 /****************************************************************************
3319 ****************************************************************************/
3321 {
3322 uint32 result;
3327 {
3329 {
3332 }
3335 {
3338 }
3342 }
3345 }
3346 /****************************************************************************
3347 ****************************************************************************/
3350 {
3351 WERROR result;
3354 {
3356 /* Sometime we just want any version of the driver */
3359 /* look for Win2k first and then for NT4 */
3366 }
3367 }
3371 }
3377 }
3383 }
3385 /****************************************************************************
3386 ****************************************************************************/
3388 {
3389 uint32 result;
3392 {
3394 {
3397 {
3403 }
3404 else
3405 {
3407 }
3409 }
3411 {
3414 {
3421 }
3422 else
3423 {
3425 }
3427 }
3431 }
3433 }
3436 /****************************************************************************
3437 Determine whether or not a particular driver is currently assigned
3438 to a printer
3439 ****************************************************************************/
3442 {
3452 /* loop through the printers.tdb and check for the drivername */
3455 {
3465 }
3468 }
3472 /* report that the driver is not in use by default */
3475 }
3478 /**********************************************************************
3479 Check to see if a ogiven file is in use by *info
3480 *********************************************************************/
3483 {
3505 {
3509 }
3510 }
3514 }
3516 /**********************************************************************
3517 Utility function to remove the dependent file pointed to by the
3518 input parameter from the list
3519 *********************************************************************/
3522 {
3525 /* set p to the next character string in the list */
3529 /* check to see that we have another string to copy back */
3532 {
3533 /* loop over s copying characters from p to s */
3536 }
3538 /* add the two trailing NULL's */
3542 }
3544 /**********************************************************************
3545 Check if any of the files used by src are also used by drv
3546 *********************************************************************/
3550 {
3557 /* check each file. Remove it from the src structure if it overlaps */
3562 }
3567 }
3572 }
3578 {
3582 }
3583 else
3585 }
3586 }
3590 }
3592 /****************************************************************************
3593 Determine whether or not a particular driver files are currently being
3594 used by any other driver.
3596 Return value is True if any files were in use by other drivers
3597 and False otherwise.
3599 Upon return, *info has been modified to only contain the driver files
3600 which are not in use
3601 ****************************************************************************/
3604 {
3607 uint32 version;
3609 NT_PRINTER_DRIVER_INFO_LEVEL driver;
3611 /* loop over all driver versions */
3616 {
3617 /* get the list of drivers */
3628 /* check each driver for overlap in files */
3631 {
3638 {
3641 }
3643 /* check if d2 uses any files from d1 */
3644 /* only if this is a different driver than the one being deleted */
3648 {
3653 }
3654 }
3657 }
3660 }
3665 }
3667 /****************************************************************************
3668 Actually delete the driver files. Make sure that
3669 printer_driver_files_in_use() return False before calling
3670 this.
3671 ****************************************************************************/
3673 static BOOL delete_driver_files( NT_PRINTER_DRIVER_INFO_LEVEL_3 *i, struct current_user *user )
3674 {
3677 DATA_BLOB null_pw;
3678 NTSTATUS nt_status;
3685 /*
3686 * Connect to the print$ share under the same account as the
3687 * user connected to the rpc pipe. Note we must be root to
3688 * do this.
3689 */
3699 }
3701 /* Save who we are - we are temporarily becoming the connection user. */
3706 }
3708 /* now delete the files; must strip the '\print$' string from
3709 fron of path */
3715 }
3716 }
3722 }
3723 }
3729 }
3730 }
3736 }
3737 }
3745 {
3749 }
3752 }
3755 }
3757 /****************************************************************************
3758 Remove a printer driver from the TDB. This assumes that the the driver was
3759 previously looked up.
3760 ***************************************************************************/
3762 static WERROR delete_printer_driver_internal( NT_PRINTER_DRIVER_INFO_LEVEL_3 *i, struct current_user *user,
3764 {
3765 pstring key;
3766 fstring arch;
3768 NT_PRINTER_DRIVER_INFO_LEVEL ctr;
3770 /* delete the tdb data first */
3785 /* check if the driver actually exists for this environment */
3791 }
3795 /* ok... the driver exists so the delete should return success */
3800 }
3802 /*
3803 * now delete any associated files if delete_files == True
3804 * even if this part failes, we return succes because the
3805 * driver doesn not exist any more
3806 */
3815 }
3817 /****************************************************************************
3818 Remove a printer driver from the TDB. This assumes that the the driver was
3819 previously looked up.
3820 ***************************************************************************/
3824 {
3825 WERROR err;
3827 /*
3828 * see if we should delete all versions of this driver
3829 * (DRIVER_ANY_VERSION uis only set for "Windows NT x86")
3830 */
3833 {
3834 /* Windows NT 4.0 */
3840 /* Windows 2000/XP */
3847 }
3849 /* just delete what they asked for */
3852 }
3855 /****************************************************************************
3856 ****************************************************************************/
3858 BOOL get_specific_param_by_index(NT_PRINTER_INFO_LEVEL printer, uint32 level, uint32 param_index,
3860 {
3861 /* right now that's enough ! */
3869 i++;
3870 }
3875 /* exited because it exist */
3885 }
3887 /****************************************************************************
3888 ****************************************************************************/
3891 {
3892 /* right now that's enough ! */
3900 {
3903 #else
3905 #endif
3910 }
3913 {
3915 /* exited because it exist */
3926 }
3929 }
3931 /****************************************************************************
3932 Store a security desc for a printer.
3933 ****************************************************************************/
3936 {
3939 prs_struct ps;
3941 fstring key;
3942 WERROR status;
3948 /* The old owner and group sids of the security descriptor are not
3949 present when new ACEs are added or removed by changing printer
3950 permissions through NT. If they are NULL in the new security
3951 descriptor then copy them over from the old one. */
3961 /* Pick out correct owner and group sids */
3979 /* Make a deep copy of the security descriptor */
3983 sacl,
3984 dacl,
3988 }
3992 }
3994 /* Store the security descriptor in a tdb */
4003 }
4012 }
4014 /* Free malloc'ed memory */
4016 out:
4022 }
4024 /****************************************************************************
4025 Construct a default security descriptor buffer for a printer.
4026 ****************************************************************************/
4029 {
4031 SEC_ACCESS sa;
4035 DOM_SID owner_sid;
4038 /* Create an ACE where Everyone is allowed to print */
4044 /* Make the security descriptor owned by the Administrators group
4045 on the PDC of the domain. */
4051 /* Backup plan - make printer owned by admins.
4052 This should emulate a lanman printer as security
4053 settings can't be changed. */
4057 }
4062 SEC_ACE_FLAG_INHERIT_ONLY);
4068 /* The ACL revision number in rpc_secdesc.h differs from the one
4069 created by NT when setting ACE entries in printer
4070 descriptors. NT4 complains about the property being edited by a
4071 NT5 machine. */
4077 }
4082 }
4090 }
4092 /****************************************************************************
4093 Get a security desc for a printer.
4094 ****************************************************************************/
4097 {
4098 prs_struct ps;
4099 fstring key;
4104 }
4106 /* Fetch security descriptor from tdb */
4117 }
4119 /* Save default security descriptor for later */
4130 }
4132 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
4133 this security descriptor has been created when winbindd was
4134 down. Take ownership of security descriptor. */
4137 DOM_SID owner_sid;
4139 /* Change sd owner to workgroup administrator */
4146 /* Create new sd */
4159 /* Swap with other one */
4163 /* Set it */
4166 }
4167 }
4177 fstring sid_str;
4184 }
4185 }
4189 }
4191 /* error code:
4192 0: everything OK
4193 1: level not implemented
4194 2: file doesn't exist
4195 3: can't allocate memory
4196 4: can't free memory
4197 5: non existant struct
4198 */
4200 /*
4201 A printer and a printer driver are 2 different things.
4202 NT manages them separatelly, Samba does the same.
4203 Why ? Simply because it's easier and it makes sense !
4205 Now explanation: You have 3 printers behind your samba server,
4206 2 of them are the same make and model (laser A and B). But laser B
4207 has an 3000 sheet feeder and laser A doesn't such an option.
4208 Your third printer is an old dot-matrix model for the accounting :-).
4210 If the /usr/local/samba/lib directory (default dir), you will have
4211 5 files to describe all of this.
4213 3 files for the printers (1 by printer):
4214 NTprinter_laser A
4215 NTprinter_laser B
4216 NTprinter_accounting
4217 2 files for the drivers (1 for the laser and 1 for the dot matrix)
4218 NTdriver_printer model X
4219 NTdriver_printer model Y
4221 jfm: I should use this comment for the text file to explain
4222 same thing for the forms BTW.
4223 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
4225 */
4227 /* Convert generic access rights to printer object specific access rights.
4228 It turns out that NT4 security descriptors use generic access rights and
4229 NT5 the object specific ones. */
4232 {
4238 }
4239 }
4241 /****************************************************************************
4242 Check a user has permissions to perform the given operation. We use the
4243 permission constants defined in include/rpc_spoolss.h to check the various
4244 actions we perform when checking printer access.
4246 PRINTER_ACCESS_ADMINISTER:
4247 print_queue_pause, print_queue_resume, update_printer_sec,
4248 update_printer, spoolss_addprinterex_level_2,
4249 _spoolss_setprinterdata
4251 PRINTER_ACCESS_USE:
4252 print_job_start
4254 JOB_ACCESS_ADMINISTER:
4255 print_job_delete, print_job_pause, print_job_resume,
4256 print_queue_purge
4258 ****************************************************************************/
4260 {
4262 uint32 access_granted;
4263 NTSTATUS status;
4264 BOOL result;
4269 /* If user is NULL then use the current_user structure */
4274 /* Always allow root or printer admins to do anything */
4279 }
4281 /* Get printer name */
4288 }
4290 /* Get printer security descriptor */
4295 }
4302 /* Create a child security descriptor to check permissions
4303 against. This is because print jobs are child objects
4304 objects of a printer. */
4308 /* Now this is the bit that really confuses me. The access
4309 type needs to be changed from JOB_ACCESS_ADMINISTER to
4310 PRINTER_ACCESS_ADMINISTER for this to work. Something
4311 to do with the child (job) object becoming like a
4312 printer?? -tpot */
4315 }
4317 /* Check access */
4332 }
4334 /****************************************************************************
4335 Check the time parameters allow a print operation.
4336 *****************************************************************************/
4339 {
4344 uint32 mins;
4364 }
4367 /****************************************************************************
4368 Attempt to write a default device.
4369 *****************************************************************************/
4372 {
4374 WERROR result;
4376 /*
4377 * Don't bother if no default devicemode was sent.
4378 */
4386 /*
4387 * Just ignore it if we already have a devmode.
4388 */
4389 #if 0
4392 #endif
4393 /*
4394 * We don't have a devicemode and we're trying to write
4395 * one. Check we have the access needed.
4396 */
4400 PRINTER_ACCESS_ADMINISTER) {
4401 DEBUG(5,("printer_write_default_dev: invalid request access to update: %x\n", printer_default->access_required));
4404 }
4410 /*result = NT_STATUS_NO_PROBLEMO;*/
4412 }
4416 /*
4417 * Convert the on the wire devicemode format to the internal one.
4418 */
4425 }
4427 /*
4428 * Finally write back to the tdb.
4429 */
4433 done:
4437 }