| blob | 6a49d673ee2bc178ef9cfcfde2e6e5f135632864 |
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
5 Copyright (C) 2002 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2004,2008 Guenther Deschner (gd@samba.org)
7 Copyright (C) 2005 Jeremy Allison (jra@samba.org)
8 Copyright (C) 2006 Jelmer Vernooij (jelmer@samba.org)
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>. */
51 /**
52 * @file net_rpc.c
53 *
54 * @brief RPC based subcommands for the 'net' utility.
55 *
56 * This file should contain much of the functionality that used to
57 * be found in rpcclient, execpt that the commands should change
58 * less often, and the fucntionality should be sane (the user is not
59 * expected to know a rid/sid before they conduct an operation etc.)
60 *
61 * @todo Perhaps eventually these should be split out into a number
62 * of files, as this could get quite big.
63 **/
66 /**
67 * Many of the RPC functions need the domain sid. This function gets
68 * it at the start of every run
69 *
70 * @param cli A cli_state already connected to the remote machine
71 *
72 * @return The Domain SID of the remote machine.
73 **/
78 {
90 }
95 SEC_FLAG_MAXIMUM_ALLOWED,
102 }
106 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
114 }
120 }
129 }
131 /**
132 * Run a single RPC command, from start to finish.
133 *
134 * @param pipe_name the pipe to connect to (usually a PIPE_ constant)
135 * @param conn_flag a NET_FLAG_ combination. Passed to
136 * net_make_ipc_connection.
137 * @param argc Standard main() style argc.
138 * @param argv Standard main() style argv. Initial components are already
139 * stripped.
140 * @return A shell status integer (0 for success).
141 */
147 rpc_command_fn fn,
150 {
154 NTSTATUS nt_status;
159 /* make use of cli_state handed over as an argument, if possible */
166 }
169 }
173 }
175 /* Create mem_ctx */
180 }
186 }
192 /* Always try and create an schannel netlogon pipe. */
201 }
208 DCERPC_AUTH_TYPE_NTLMSSP,
209 DCERPC_AUTH_LEVEL_PRIVACY,
217 }
223 }
224 }
225 }
234 }
239 }
240 }
242 fail:
243 /* close the connection only if it was opened here */
246 }
250 }
252 /**
253 * Force a change of the trust acccount password.
254 *
255 * All parameters are provided by the run_rpc_command function, except for
256 * argc, argv which are passed through.
257 *
258 * @param domain_sid The domain sid acquired from the remote server.
259 * @param cli A cli_state connected to the server.
260 * @param mem_ctx Talloc context, destroyed on completion of the function.
261 * @param argc Standard main() style argc.
262 * @param argv Standard main() style argv. Initial components are already
263 * stripped.
264 *
265 * @return Normal NTSTATUS return.
266 **/
276 {
277 NTSTATUS status;
284 }
287 }
289 /**
290 * Force a change of the trust acccount password.
291 *
292 * @param argc Standard main() style argc.
293 * @param argv Standard main() style argv. Initial components are already
294 * stripped.
295 *
296 * @return A shell status integer (0 for success).
297 **/
300 {
308 }
312 rpc_changetrustpw_internals,
314 }
316 /**
317 * Join a domain, the old way.
318 *
319 * This uses 'machinename' as the inital password, and changes it.
320 *
321 * The password should be created with 'server manager' or equiv first.
322 *
323 * All parameters are provided by the run_rpc_command function, except for
324 * argc, argv which are passed through.
325 *
326 * @param domain_sid The domain sid acquired from the remote server.
327 * @param cli A cli_state connected to the server.
328 * @param mem_ctx Talloc context, destroyed on completion of the function.
329 * @param argc Standard main() style argc.
330 * @param argv Standard main() style argv. Initial components are already
331 * stripped.
332 *
333 * @return Normal NTSTATUS return.
334 **/
344 {
346 fstring trust_passwd;
348 NTSTATUS result;
359 }
361 /*
362 check what type of join - if the user want's to join as
363 a BDC, the server must agree that we are a BDC.
364 */
369 }
374 /*
375 * Machine names can be 15 characters, but the max length on
376 * a password is 14. --jerry
377 */
385 orig_trust_passwd_hash,
386 sec_channel_type);
395 }
398 }
400 /**
401 * Join a domain, the old way.
402 *
403 * @param argc Standard main() style argc.
404 * @param argv Standard main() style argv. Initial components are already
405 * stripped.
406 *
407 * @return A shell status integer (0 for success).
408 **/
411 {
414 rpc_oldjoin_internals,
416 }
418 /**
419 * Join a domain, the old way. This function exists to allow
420 * the message to be displayed when oldjoin was explicitly
421 * requested, but not when it was implied by "net rpc join".
422 *
423 * @param argc Standard main() style argc.
424 * @param argv Standard main() style argv. Initial components are already
425 * stripped.
426 *
427 * @return A shell status integer (0 for success).
428 **/
431 {
441 }
447 }
450 }
452 /**
453 * 'net rpc join' entrypoint.
454 * @param argc Standard main() style argc.
455 * @param argv Standard main() style argv. Initial components are already
456 * stripped
457 *
458 * Main 'net_rpc_join()' (where the admin username/password is used) is
459 * in net_rpc_join.c.
460 * Try to just change the password, but if that doesn't work, use/prompt
461 * for a username/password.
462 **/
465 {
479 }
484 }
491 }
497 }
499 /**
500 * display info about a rpc domain
501 *
502 * All parameters are provided by the run_rpc_command function, except for
503 * argc, argv which are passed through.
504 *
505 * @param domain_sid The domain sid acquired from the remote server
506 * @param cli A cli_state connected to the server.
507 * @param mem_ctx Talloc context, destroyed on completion of the function.
508 * @param argc Standard main() style argc.
509 * @param argv Standard main() style argv. Initial components are already
510 * stripped.
511 *
512 * @return Normal NTSTATUS return.
513 **/
523 {
527 fstring sid_str;
532 /* Get sam policy handle */
535 MAXIMUM_ALLOWED_ACCESS,
542 }
549 }
551 /* Get domain policy handle */
554 MAXIMUM_ALLOWED_ACCESS,
562 }
568 }
577 }
588 }
590 done:
592 }
594 /**
595 * 'net rpc info' entrypoint.
596 * @param argc Standard main() style argc.
597 * @param argv Standard main() style argv. Initial components are already
598 * stripped.
599 **/
602 {
610 }
615 }
617 /**
618 * Fetch domain SID into the local secrets.tdb.
619 *
620 * All parameters are provided by the run_rpc_command function, except for
621 * argc, argv which are passed through.
622 *
623 * @param domain_sid The domain sid acquired from the remote server.
624 * @param cli A cli_state connected to the server.
625 * @param mem_ctx Talloc context, destroyed on completion of the function.
626 * @param argc Standard main() style argc.
627 * @param argv Standard main() style argv. Initial components are already
628 * stripped.
629 *
630 * @return Normal NTSTATUS return.
631 **/
641 {
642 fstring sid_str;
651 }
654 }
656 /**
657 * 'net rpc getsid' entrypoint.
658 * @param argc Standard main() style argc.
659 * @param argv Standard main() style argv. Initial components are already
660 * stripped.
661 **/
664 {
669 }
678 }
681 conn_flags,
682 rpc_getsid_internals,
684 }
686 /****************************************************************************/
688 /**
689 * Basic usage function for 'net rpc user'.
690 * @param argc Standard main() style argc.
691 * @param argv Standard main() style argv. Initial components are already
692 * stripped.
693 **/
696 {
698 }
700 /**
701 * Add a new user to a remote RPC server.
702 *
703 * @param argc Standard main() style argc.
704 * @param argv Standard main() style argv. Initial components are already
705 * stripped.
706 *
707 * @return A shell status integer (0 for success).
708 **/
711 {
712 NET_API_STATUS status;
719 }
726 }
733 status));
737 }
740 }
742 /**
743 * Rename a user on a remote RPC server.
744 *
745 * @param argc Standard main() style argc.
746 * @param argv Standard main() style argv. Initial components are already
747 * stripped.
748 *
749 * @return A shell status integer (0 for success).
750 **/
753 {
754 NET_API_STATUS status;
761 }
774 }
777 }
779 /**
780 * Set a user's primary group
781 *
782 * @param argc Standard main() style argc.
783 * @param argv Standard main() style argv. Initial components are already
784 * stripped.
785 *
786 * @return A shell status integer (0 for success).
787 **/
791 {
792 NET_API_STATUS status;
801 }
809 }
826 }
828 }
830 /**
831 * Delete a user from a remote RPC server.
832 *
833 * @param argc Standard main() style argc.
834 * @param argv Standard main() style argv. Initial components are already
835 * stripped.
836 *
837 * @return A shell status integer (0 for success).
838 **/
841 {
842 NET_API_STATUS status;
847 }
858 }
861 }
863 /**
864 * Set a user's password on a remote RPC server.
865 *
866 * @param argc Standard main() style argc.
867 * @param argv Standard main() style argv. Initial components are already
868 * stripped.
869 *
870 * @return A shell status integer (0 for success).
871 **/
874 {
875 NET_API_STATUS status;
884 }
893 }
898 }
899 }
903 /* Display results */
908 status));
910 }
913 }
915 /**
916 * List a user's groups from a remote RPC server.
917 *
918 * @param argc Standard main() style argc.
919 * @param argv Standard main() style argv. Initial components are already
920 * stripped.
921 *
922 * @return A shell status integer (0 for success)
923 **/
927 {
928 NET_API_STATUS status;
938 }
951 status));
953 }
957 u0++;
958 }
961 }
963 /**
964 * List users on a remote RPC server.
965 *
966 * All parameters are provided by the run_rpc_command function, except for
967 * argc, argv which are passed through.
968 *
969 * @param domain_sid The domain sid acquired from the remote server.
970 * @param cli A cli_state connected to the server.
971 * @param mem_ctx Talloc context, destroyed on completion of the function.
972 * @param argc Standard main() style argc.
973 * @param argv Standard main() style argv. Initial components are already
974 * stripped.
975 *
976 * @return Normal NTSTATUS return.
977 **/
980 {
981 NET_API_STATUS status;
986 /* Query domain users */
998 start_idx,
999 max_entries,
1000 max_size,
1005 }
1014 else
1016 info++;
1017 }
1021 loop_count++;
1027 }
1029 /**
1030 * 'net rpc user' entrypoint.
1031 * @param argc Standard main() style argc.
1032 * @param argv Standard main() style argv. Initial components are already
1033 * stripped.
1034 **/
1037 {
1038 NET_API_STATUS status;
1041 {
1043 rpc_user_add,
1044 NET_TRANSPORT_RPC,
1048 },
1049 {
1051 rpc_user_info,
1052 NET_TRANSPORT_RPC,
1056 },
1057 {
1059 rpc_user_delete,
1060 NET_TRANSPORT_RPC,
1064 },
1065 {
1067 rpc_user_password,
1068 NET_TRANSPORT_RPC,
1072 },
1073 {
1075 rpc_user_rename,
1076 NET_TRANSPORT_RPC,
1080 },
1081 {
1083 rpc_user_setprimarygroup,
1084 NET_TRANSPORT_RPC,
1087 " Set a user's primary group"
1088 },
1090 };
1095 }
1100 }
1111 }
1114 }
1117 }
1124 {
1126 }
1133 {
1135 }
1149 {
1153 uint32 rid;
1161 }
1173 }
1180 }
1186 }
1190 MAXIMUM_ALLOWED_ACCESS,
1195 }
1199 }
1203 MAXIMUM_ALLOWED_ACCESS,
1209 }
1213 }
1217 MAXIMUM_ALLOWED_ACCESS,
1218 rid,
1223 }
1227 }
1231 done:
1234 }
1237 }
1240 }
1242 }
1250 {
1259 }
1262 user_hnd,
1268 }
1271 }
1278 }
1285 {
1287 rpc_sh_user_show_internals);
1288 }
1290 #define FETCHSTR(name, rec) \
1291 do { if (strequal(ctx->thiscmd, name)) { \
1292 oldval = talloc_strdup(mem_ctx, info->info21.rec.string); } \
1293 } while (0);
1295 #define SETSTR(name, rec, flag) \
1296 do { if (strequal(ctx->thiscmd, name)) { \
1297 init_lsa_String(&(info->info21.rec), argv[0]); \
1298 info->info21.fields_present |= SAMR_FIELD_##flag; } \
1299 } while (0);
1307 {
1318 }
1321 user_hnd,
1327 }
1330 }
1344 }
1348 }
1360 user_hnd,
1362 info,
1366 }
1373 done:
1376 }
1378 #define HANDLEFLG(name, rec) \
1379 do { if (strequal(ctx->thiscmd, name)) { \
1381 if (newval) { \
1382 newflags = oldflags | ACB_##rec; \
1383 } else { \
1384 newflags = oldflags & ~ACB_##rec; \
1385 } } } while (0);
1392 {
1394 rpc_sh_user_str_edit_internals);
1395 }
1403 {
1415 /* TRANSATORS: The yes|no here are program keywords. Please do
1416 not translate. */
1420 }
1425 user_hnd,
1431 }
1434 }
1447 oldval);
1449 }
1457 user_hnd,
1459 info,
1463 }
1468 }
1470 done:
1473 }
1480 {
1482 rpc_sh_user_flag_edit_internals);
1483 }
1488 {
1522 };
1525 }
1530 {
1546 };
1549 }
1551 /****************************************************************************/
1553 /**
1554 * Basic usage function for 'net rpc group'.
1555 * @param argc Standard main() style argc.
1556 * @param argv Standard main() style argv. Initial components are already
1557 * stripped.
1558 **/
1561 {
1563 }
1565 /**
1566 * Delete group on a remote RPC server.
1567 *
1568 * All parameters are provided by the run_rpc_command function, except for
1569 * argc, argv which are passed through.
1570 *
1571 * @param domain_sid The domain sid acquired from the remote server.
1572 * @param cli A cli_state connected to the server.
1573 * @param mem_ctx Talloc context, destroyed on completion of the function.
1574 * @param argc Standard main() style argc.
1575 * @param argv Standard main() style argv. Initial components are already
1576 * stripped.
1577 *
1578 * @return Normal NTSTATUS return.
1579 **/
1589 {
1595 /* char **names; */
1597 /* struct samr_RidWithAttribute *user_gids; */
1607 }
1611 MAXIMUM_ALLOWED_ACCESS,
1617 }
1623 }
1627 MAXIMUM_ALLOWED_ACCESS,
1634 }
1640 }
1654 }
1660 }
1664 }
1668 }
1671 {
1675 MAXIMUM_ALLOWED_ACCESS,
1682 }
1688 }
1701 }
1709 }
1715 }
1717 /* Check if group is anyone's primary group */
1719 {
1722 MAXIMUM_ALLOWED_ACCESS,
1731 }
1739 }
1752 }
1761 }
1768 }
1770 }
1773 }
1777 "some of it's members have it as primary "
1781 }
1783 /* remove all group members */
1785 {
1795 }
1804 }
1805 }
1812 }
1817 /* removing a local group is easier... */
1821 MAXIMUM_ALLOWED_ACCESS,
1828 }
1833 }
1840 }
1851 }
1860 }
1862 done:
1865 }
1868 {
1871 }
1874 {
1875 NET_API_STATUS status;
1882 }
1889 }
1897 status));
1901 }
1904 }
1907 {
1908 NET_API_STATUS status;
1915 }
1922 }
1930 status));
1934 }
1937 }
1940 {
1945 }
1952 {
1964 }
1973 }
1981 }
1985 done:
1988 }
1992 /* Try as S-1-5-whatever */
2000 }
2001 }
2004 }
2010 {
2013 uint32 group_rid;
2026 }
2028 /* Get sam policy handle */
2031 MAXIMUM_ALLOWED_ACCESS,
2036 }
2039 }
2041 /* Get domain policy handle */
2044 MAXIMUM_ALLOWED_ACCESS,
2050 }
2053 }
2066 member);
2068 }
2073 member);
2075 }
2079 }
2083 }
2087 MAXIMUM_ALLOWED_ACCESS,
2088 group_rid,
2093 }
2098 }
2107 }
2111 done:
2114 }
2120 {
2123 uint32 alias_rid;
2136 }
2143 member);
2145 }
2147 /* Get sam policy handle */
2150 MAXIMUM_ALLOWED_ACCESS,
2155 }
2159 }
2161 /* Get domain policy handle */
2164 MAXIMUM_ALLOWED_ACCESS,
2170 }
2174 }
2178 MAXIMUM_ALLOWED_ACCESS,
2179 alias_rid,
2184 }
2187 }
2195 }
2199 done:
2202 }
2212 {
2224 }
2231 }
2240 }
2242 }
2251 }
2253 }
2259 }
2262 {
2264 rpc_group_addmem_internals,
2266 }
2273 {
2276 uint32 group_rid;
2290 /* Get sam policy handle */
2293 MAXIMUM_ALLOWED_ACCESS,
2298 }
2301 }
2304 /* Get domain policy handle */
2307 MAXIMUM_ALLOWED_ACCESS,
2313 }
2316 }
2329 member);
2331 }
2336 member);
2338 }
2342 }
2346 }
2350 MAXIMUM_ALLOWED_ACCESS,
2351 group_rid,
2356 }
2360 }
2368 }
2371 done:
2374 }
2380 {
2383 uint32 alias_rid;
2402 member);
2404 }
2406 /* Get sam policy handle */
2409 MAXIMUM_ALLOWED_ACCESS,
2414 }
2418 }
2420 /* Get domain policy handle */
2423 MAXIMUM_ALLOWED_ACCESS,
2429 }
2433 }
2437 MAXIMUM_ALLOWED_ACCESS,
2438 alias_rid,
2443 }
2447 }
2456 }
2460 done:
2463 }
2473 {
2485 }
2492 }
2501 }
2503 }
2512 }
2514 }
2520 }
2523 {
2525 rpc_group_delmem_internals,
2527 }
2529 /**
2530 * List groups on a remote RPC server.
2531 *
2532 * All parameters are provided by the run_rpc_command function, except for
2533 * argc, argv which are passes through.
2534 *
2535 * @param domain_sid The domain sid acquired from the remote server.
2536 * @param cli A cli_state connected to the server.
2537 * @param mem_ctx Talloc context, destroyed on completion of the function.
2538 * @param argc Standard main() style argc.
2539 * @param argv Standard main() style argv. Initial components are already
2540 * stripped.
2541 *
2542 * @return Normal NTSTATUS return.
2543 **/
2553 {
2571 " If none of global, local or builtin is "
2572 "specified, all three options are considered "
2575 }
2581 }
2592 }
2594 /* Get sam policy handle */
2598 MAXIMUM_ALLOWED_ACCESS,
2603 }
2607 }
2609 /* Get domain policy handle */
2613 MAXIMUM_ALLOWED_ACCESS,
2619 }
2623 }
2625 /* Query domain groups */
2641 start_idx,
2642 max_entries,
2643 max_size,
2650 }
2669 else
2671 }
2673 /* query domain aliases */
2687 }
2700 NTSTATUS _result;
2720 }
2721 }
2722 }
2723 }
2728 description);
2731 }
2732 }
2735 /* Get builtin policy handle */
2739 MAXIMUM_ALLOWED_ACCESS,
2745 }
2749 }
2751 /* query builtin aliases */
2760 max_entries,
2765 }
2770 }
2780 NTSTATUS _result;
2800 }
2801 }
2802 }
2803 }
2808 description);
2811 }
2812 }
2817 done:
2819 }
2822 {
2824 rpc_group_list_internals,
2826 }
2834 uint32 rid)
2835 {
2845 fstring sid_str;
2849 domain_pol,
2850 MAXIMUM_ALLOWED_ACCESS,
2851 rid,
2856 }
2859 }
2867 }
2870 }
2882 domain_pol,
2883 this_time,
2884 group_rids,
2890 }
2893 }
2895 /* We only have users as members, but make the output
2896 the same as the output of alias members */
2904 SID_NAME_USER);
2908 }
2909 }
2913 }
2916 }
2922 uint32 rid)
2923 {
2927 uint32 num_members;
2937 domain_pol,
2938 MAXIMUM_ALLOWED_ACCESS,
2939 rid,
2944 }
2947 }
2956 }
2960 }
2966 }
2975 }
2984 }
2991 }
2995 }
3006 }
3009 fstring sid_str;
3019 else
3021 }
3022 }
3026 }
3036 {
3043 /* Get sam policy handle */
3047 MAXIMUM_ALLOWED_ACCESS,
3052 }
3055 }
3057 /* Get domain policy handle */
3061 MAXIMUM_ALLOWED_ACCESS,
3067 }
3070 }
3083 }
3087 /* Ok, did not find it in the global sam, try with builtin */
3097 MAXIMUM_ALLOWED_ACCESS,
3103 }
3108 }
3119 }
3124 }
3125 }
3131 }
3136 }
3143 }
3148 }
3151 }
3154 {
3157 }
3160 rpc_group_members_internals,
3162 }
3165 {
3166 NET_API_STATUS status;
3174 }
3187 status));
3189 }
3192 }
3195 {
3198 }
3201 }
3203 /**
3204 * 'net rpc group' entrypoint.
3205 * @param argc Standard main() style argc.
3206 * @param argv Standard main() style argv. Initial components are already
3207 * stripped.
3208 **/
3211 {
3212 NET_API_STATUS status;
3215 {
3217 rpc_group_add,
3218 NET_TRANSPORT_RPC,
3222 },
3223 {
3225 rpc_group_delete,
3226 NET_TRANSPORT_RPC,
3230 },
3231 {
3233 rpc_group_addmem,
3234 NET_TRANSPORT_RPC,
3238 },
3239 {
3241 rpc_group_delmem,
3242 NET_TRANSPORT_RPC,
3246 },
3247 {
3249 rpc_group_list,
3250 NET_TRANSPORT_RPC,
3254 },
3255 {
3257 rpc_group_members,
3258 NET_TRANSPORT_RPC,
3262 },
3263 {
3265 rpc_group_rename,
3266 NET_TRANSPORT_RPC,
3270 },
3272 };
3277 }
3282 }
3288 " Alias for net rpc group list global "
3292 }
3295 rpc_group_list_internals,
3297 }
3300 }
3302 /****************************************************************************/
3305 {
3307 }
3309 /**
3310 * Add a share on a remote RPC server.
3311 *
3312 * @param argc Standard main() style argc.
3313 * @param argv Standard main() style argv. Initial components are already
3314 * stripped.
3315 *
3316 * @return A shell status integer (0 for success).
3317 **/
3320 {
3321 NET_API_STATUS status;
3332 }
3336 }
3341 }
3361 }
3364 }
3366 /**
3367 * Delete a share on a remote RPC server.
3368 *
3369 * @param domain_sid The domain sid acquired from the remote server.
3370 * @param argc Standard main() style argc.
3371 * @param argv Standard main() style argv. Initial components are already
3372 * stripped.
3373 *
3374 * @return A shell status integer (0 for success).
3375 **/
3377 {
3380 }
3383 }
3385 /**
3386 * Formatted print of share info
3387 *
3388 * @param r pointer to SHARE_INFO_1 to format
3389 **/
3393 {
3401 }
3402 }
3407 uint32 level,
3411 {
3412 WERROR result;
3413 NTSTATUS status;
3417 /* no specific share requested, enumerate all */
3428 info_ctr,
3429 preferred_len,
3435 }
3437 }
3439 /* request just one share */
3443 level,
3450 }
3454 }
3456 /* construct ctr */
3463 {
3475 }
3477 {
3489 }
3491 {
3503 }
3505 done:
3507 }
3509 /***
3510 * 'net rpc share list' entrypoint.
3511 * @param argc Standard main() style argc.
3512 * @param argv Standard main() style argv. Initial components are already
3513 * stripped.
3514 **/
3516 {
3517 NET_API_STATUS status;
3531 }
3534 level,
3542 }
3544 /* Display results */
3551 }
3554 done:
3556 }
3559 {
3560 NTSTATUS status;
3566 }
3572 }
3575 }
3579 {
3580 /* only support disk shares */
3583 type);
3585 }
3587 /* skip builtin shares */
3588 /* FIXME: should print$ be added too ? */
3596 }
3599 }
3601 /**
3602 * Migrate shares from a remote RPC server to the local RPC server.
3603 *
3604 * All parameters are provided by the run_rpc_command function, except for
3605 * argc, argv which are passed through.
3606 *
3607 * @param domain_sid The domain sid acquired from the remote server.
3608 * @param cli A cli_state connected to the server.
3609 * @param mem_ctx Talloc context, destroyed on completion of the function.
3610 * @param argc Standard main() style argc.
3611 * @param argv Standard main() style argv. Initial components are already
3612 * stripped.
3613 *
3614 * @return Normal NTSTATUS return.
3615 **/
3625 {
3626 WERROR result;
3629 uint32 i;
3641 /* connect destination PI_SRVSVC */
3655 /* reset error-code */
3661 /* finally add the share on the dst server */
3679 }
3684 }
3691 }
3693 }
3697 done:
3700 }
3704 }
3706 /**
3707 * Migrate shares from a RPC server to another.
3708 *
3709 * @param argc Standard main() style argc.
3710 * @param argv Standard main() style argv. Initial components are already
3711 * stripped.
3712 *
3713 * @return A shell status integer (0 for success).
3714 **/
3717 {
3725 }
3730 }
3733 rpc_share_migrate_shares_internals,
3735 }
3737 /**
3738 * Copy a file/dir
3739 *
3740 * @param f file_info
3741 * @param mask current search mask
3742 * @param state arg-pointer
3743 *
3744 **/
3747 {
3751 fstring dir;
3765 /* DIRECTORY */
3775 {
3777 /* create that directory */
3790 }
3796 }
3798 /* search below that directory */
3801 }
3804 }
3811 }
3815 }
3818 /* FILE */
3826 {
3839 net_mode_share);
3841 }
3847 }
3849 /**
3850 * sync files, can be called recursivly to list files
3851 * and then call copy_fn for each file
3852 *
3853 * @param cp_clistate pointer to the copy_clistate we work with
3854 * @param mask the current search mask
3855 *
3856 * @return Boolean result
3857 **/
3859 {
3862 NTSTATUS status;
3874 }
3881 }
3884 }
3887 /**
3888 * Set the top level directory permissions before we do any further copies.
3889 * Should set up ACL inheritance.
3890 **/
3895 {
3914 }
3921 }
3924 }
3926 /**
3927 * Sync all files inside a remote share to another share (over smb).
3928 *
3929 * All parameters are provided by the run_rpc_command function, except for
3930 * argc, argv which are passed through.
3931 *
3932 * @param domain_sid The domain sid acquired from the remote server.
3933 * @param cli A cli_state connected to the server.
3934 * @param mem_ctx Talloc context, destroyed on completion of the function.
3935 * @param argc Standard main() style argc.
3936 * @param argv Standard main() style argv. Initial components are already
3937 * stripped.
3938 *
3939 * @return Normal NTSTATUS return.
3940 **/
3950 {
3951 WERROR result;
3954 uint32 i;
3966 }
3982 /* one might not want to mirror whole discs :) */
3987 }
3990 {
3996 net_mode_share);
3998 }
4010 cp_clistate.attribute = FILE_ATTRIBUTE_SYSTEM | FILE_ATTRIBUTE_HIDDEN | FILE_ATTRIBUTE_DIRECTORY;
4013 /* open share source */
4024 /* open share destination */
4031 }
4035 "directory permissions for the "
4039 }
4046 }
4047 }
4051 done:
4062 }
4065 {
4073 }
4078 }
4081 rpc_share_migrate_files_internals,
4083 }
4085 /**
4086 * Migrate share-ACLs from a remote RPC server to the local RPC server.
4087 *
4088 * All parameters are provided by the run_rpc_command function, except for
4089 * argc, argv which are passed through.
4090 *
4091 * @param domain_sid The domain sid acquired from the remote server.
4092 * @param cli A cli_state connected to the server.
4093 * @param mem_ctx Talloc context, destroyed on completion of the function.
4094 * @param argc Standard main() style argc.
4095 * @param argv Standard main() style argv. Initial components are already
4096 * stripped.
4097 *
4098 * @return Normal NTSTATUS return.
4099 **/
4109 {
4110 WERROR result;
4114 uint32 i;
4127 /* connect destination PI_SRVSVC */
4140 /* reset error-code */
4153 /* FIXME: shouldn't we be able to just set the security descriptor ? */
4156 /* finally modify the share on the dst server */
4160 level,
4168 }
4174 }
4176 }
4180 done:
4183 }
4187 }
4189 /**
4190 * Migrate share-acls from a RPC server to another.
4191 *
4192 * @param argc Standard main() style argc.
4193 * @param argv Standard main() style argv. Initial components are already
4194 * stripped.
4195 *
4196 * @return A shell status integer (0 for success).
4197 **/
4200 {
4208 }
4213 }
4216 rpc_share_migrate_security_internals,
4218 }
4220 /**
4221 * Migrate shares (including share-definitions, share-acls and files with acls/attrs)
4222 * from one server to another.
4223 *
4224 * @param argc Standard main() style argc.
4225 * @param argv Standard main() style argv. Initial components are already
4226 * stripped.
4227 *
4228 * @return A shell status integer (0 for success).
4229 *
4230 **/
4233 {
4243 }
4248 }
4250 /* order is important. we don't want to be locked out by the share-acl
4251 * before copying files - gd */
4265 argv);
4266 }
4269 /**
4270 * 'net rpc share migrate' entrypoint.
4271 * @param argc Standard main() style argc.
4272 * @param argv Standard main() style argv. Initial components are already
4273 * stripped.
4274 **/
4276 {
4279 {
4281 rpc_share_migrate_all,
4282 NET_TRANSPORT_RPC,
4286 },
4287 {
4289 rpc_share_migrate_files,
4290 NET_TRANSPORT_RPC,
4294 },
4295 {
4297 rpc_share_migrate_security,
4298 NET_TRANSPORT_RPC,
4302 },
4303 {
4305 rpc_share_migrate_shares,
4306 NET_TRANSPORT_RPC,
4310 },
4312 };
4317 }
4321 uint32 num_members;
4323 };
4328 /*
4329 * Add an alias to the static list.
4330 */
4332 {
4338 }
4340 /*
4341 * For a specific domain on the server, fetch all the aliases
4342 * and their members. Add all of them to the server_aliases.
4343 */
4349 {
4356 /* Get domain policy handle */
4359 connect_pol,
4360 MAXIMUM_ALLOWED_ACCESS,
4366 }
4369 }
4379 max_entries,
4384 }
4391 NTSTATUS _result;
4395 MAXIMUM_ALLOWED_ACCESS,
4401 }
4405 }
4413 }
4417 }
4424 }
4428 }
4438 }
4444 }
4449 done:
4453 }
4455 /*
4456 * Dump server_aliases as names for debugging purposes.
4457 */
4467 {
4469 NTSTATUS result;
4474 SEC_FLAG_MAXIMUM_ALLOWED,
4498 }
4514 }
4519 }
4521 /*
4522 * Fetch a list of all server aliases and their members into
4523 * server_aliases.
4524 */
4534 {
4541 MAXIMUM_ALLOWED_ACCESS,
4546 }
4550 }
4556 }
4559 domain_sid);
4562 done:
4564 }
4567 {
4574 }
4580 }
4583 {
4585 }
4588 {
4595 }
4600 }
4603 fstring name;
4605 };
4608 {
4615 }
4616 }
4619 {
4625 }
4628 }
4631 {
4637 }
4638 }
4640 /*
4641 * We got a user token with all the SIDs we can know about without asking the
4642 * server directly. These are the user and domain group sids. All of these can
4643 * be members of aliases. So scan the list of aliases for each of the SIDs and
4644 * add them to the token.
4645 */
4648 {
4654 }
4655 }
4658 {
4661 fstring full_name;
4672 /* First let's find out the user sid */
4680 }
4687 }
4692 }
4696 /* And now the groups winbind knows about */
4703 }
4715 }
4723 }
4727 }
4729 /**
4730 * Get a list of all user tokens we want to look at
4731 **/
4735 {
4747 }
4749 /* Send request to winbind daemon */
4756 }
4764 }
4787 }
4789 }
4792 }
4800 }
4805 {
4809 fstring line;
4813 }
4817 }
4820 /* We have a SID */
4827 }
4832 }
4836 }
4838 /* And a new user... */
4845 }
4851 }
4855 }
4858 }
4861 /*
4862 * Show the list of all users that have access to a share
4863 */
4870 {
4877 WERROR result;
4878 NTSTATUS status;
4879 uint16 cnum;
4884 netname,
4891 netname));
4893 }
4898 netname));
4899 }
4905 }
4910 }
4913 uint32 acc_granted;
4924 }
4925 }
4930 }
4938 }
4940 }
4948 }
4950 /**
4951 * List shares on a remote RPC server, including the security descriptors.
4952 *
4953 * All parameters are provided by the run_rpc_command function, except for
4954 * argc, argv which are passed through.
4955 *
4956 * @param domain_sid The domain sid acquired from the remote server.
4957 * @param cli A cli_state connected to the server.
4958 * @param mem_ctx Talloc context, destroyed on completion of the function.
4959 * @param argc Standard main() style argc.
4960 * @param argv Standard main() style argv. Initial components are already
4961 * stripped.
4962 *
4963 * @return Normal NTSTATUS return.
4964 **/
4974 {
4985 WERROR result;
4994 }
4999 }
5009 }
5022 /* Issue the NetShareEnum RPC call and retrieve the response */
5027 preferred_len,
5032 /* Was it successful? */
5034 /* Nope. Go clean up. */
5036 }
5039 /* Nope. Go clean up. */
5042 }
5046 }
5048 /* For each returned entry... */
5054 }
5060 }
5061 done:
5064 }
5068 }
5072 {
5082 }
5085 rpc_aliaslist_internals,
5091 rpc_aliaslist_dump,
5097 rpc_share_allowedusers_internals,
5099 }
5102 {
5110 }
5115 }
5120 }
5124 }
5127 {
5135 }
5137 /**
5138 * 'net rpc share' entrypoint.
5139 * @param argc Standard main() style argc.
5140 * @param argv Standard main() style argv. Initial components are already
5141 * stripped.
5142 **/
5145 {
5146 NET_API_STATUS status;
5149 {
5151 rpc_share_add,
5152 NET_TRANSPORT_RPC,
5156 },
5157 {
5159 rpc_share_delete,
5160 NET_TRANSPORT_RPC,
5164 },
5165 {
5167 rpc_share_allowedusers,
5168 NET_TRANSPORT_RPC,
5172 },
5173 {
5175 rpc_share_migrate,
5176 NET_TRANSPORT_RPC,
5180 },
5181 {
5183 rpc_share_list,
5184 NET_TRANSPORT_RPC,
5188 },
5190 };
5195 }
5200 }
5211 }
5214 }
5217 }
5224 {
5227 }
5234 {
5235 NET_API_STATUS status;
5243 }
5260 }
5267 {
5271 }
5274 }
5281 {
5283 WERROR result;
5284 NTSTATUS status;
5290 }
5301 }
5304 }
5311 done:
5313 }
5317 {
5333 };
5336 }
5338 /****************************************************************************/
5341 {
5343 }
5345 /**
5346 * Close a file on a remote RPC server.
5347 *
5348 * @param argc Standard main() style argc.
5349 * @param argv Standard main() style argv. Initial components are already
5350 * stripped.
5351 *
5352 * @return A shell status integer (0 for success).
5353 **/
5355 {
5358 }
5361 }
5363 /**
5364 * Formatted print of open file info
5365 *
5366 * @param r struct FILE_INFO_3 contents
5367 **/
5370 {
5374 }
5376 /**
5377 * List files for a user on a remote RPC server.
5378 *
5379 * @param argc Standard main() style argc.
5380 * @param argv Standard main() style argv. Initial components are already
5381 * stripped.
5382 *
5383 * @return A shell status integer (0 for success)..
5384 **/
5387 {
5388 NET_API_STATUS status;
5398 }
5400 /* if argc > 0, must be user command */
5403 }
5406 NULL,
5407 username,
5410 preferred_len,
5417 }
5419 /* Display results */
5427 }
5428 done:
5430 }
5432 /**
5433 * 'net rpc file' entrypoint.
5434 * @param argc Standard main() style argc.
5435 * @param argv Standard main() style argv. Initial components are already
5436 * stripped.
5437 **/
5440 {
5441 NET_API_STATUS status;
5444 {
5446 rpc_file_close,
5447 NET_TRANSPORT_RPC,
5451 },
5452 {
5454 rpc_file_user,
5455 NET_TRANSPORT_RPC,
5459 },
5460 #if 0
5461 {
5463 rpc_file_info,
5464 NET_TRANSPORT_RPC,
5468 },
5469 #endif
5471 };
5476 }
5481 }
5490 }
5493 }
5496 }
5498 /**
5499 * ABORT the shutdown of a remote RPC Server, over initshutdown pipe.
5500 *
5501 * All parameters are provided by the run_rpc_command function, except for
5502 * argc, argv which are passed through.
5503 *
5504 * @param c A net_context structure.
5505 * @param domain_sid The domain sid acquired from the remote server.
5506 * @param cli A cli_state connected to the server.
5507 * @param mem_ctx Talloc context, destroyed on completion of the function.
5508 * @param argc Standard main() style argc.
5509 * @param argv Standard main() style argv. Initial components are already
5510 * stripped.
5511 *
5512 * @return Normal NTSTATUS return.
5513 **/
5523 {
5525 WERROR result;
5531 }
5539 }
5541 /**
5542 * ABORT the shutdown of a remote RPC Server, over winreg pipe.
5543 *
5544 * All parameters are provided by the run_rpc_command function, except for
5545 * argc, argv which are passed through.
5546 *
5547 * @param c A net_context structure.
5548 * @param domain_sid The domain sid acquired from the remote server.
5549 * @param cli A cli_state connected to the server.
5550 * @param mem_ctx Talloc context, destroyed on completion of the function.
5551 * @param argc Standard main() style argc.
5552 * @param argv Standard main() style argv. Initial components are already
5553 * stripped.
5554 *
5555 * @return Normal NTSTATUS return.
5556 **/
5566 {
5568 WERROR werr;
5576 }
5584 }
5586 /**
5587 * ABORT the shutdown of a remote RPC server.
5588 *
5589 * @param argc Standard main() style argc.
5590 * @param argv Standard main() style argv. Initial components are already
5591 * stripped.
5592 *
5593 * @return A shell status integer (0 for success).
5594 **/
5598 {
5608 }
5619 rpc_reg_shutdown_abort_internals,
5621 }
5623 /**
5624 * Shut down a remote RPC Server via initshutdown pipe.
5625 *
5626 * All parameters are provided by the run_rpc_command function, except for
5627 * argc, argv which are passed through.
5628 *
5629 * @param c A net_context structure.
5630 * @param domain_sid The domain sid acquired from the remote server.
5631 * @param cli A cli_state connected to the server.
5632 * @param mem_ctx Talloc context, destroyed on completion of the function.
5633 * @param argc Standard main() style argc.
5634 * @param argv Standard main() style argv. Initial components are already
5635 * stripped.
5636 *
5637 * @return Normal NTSTATUS return.
5638 **/
5648 {
5650 WERROR result;
5658 }
5661 }
5665 /* create an entry */
5671 }
5677 }
5679 }
5681 /**
5682 * Shut down a remote RPC Server via winreg pipe.
5683 *
5684 * All parameters are provided by the run_rpc_command function, except for
5685 * argc, argv which are passed through.
5686 *
5687 * @param c A net_context structure.
5688 * @param domain_sid The domain sid acquired from the remote server.
5689 * @param cli A cli_state connected to the server.
5690 * @param mem_ctx Talloc context, destroyed on completion of the function.
5691 * @param argc Standard main() style argc.
5692 * @param argv Standard main() style argv. Initial components are already
5693 * stripped.
5694 *
5695 * @return Normal NTSTATUS return.
5696 **/
5706 {
5710 NTSTATUS result;
5711 WERROR werr;
5716 }
5721 }
5723 /* create an entry */
5730 }
5738 else
5740 }
5743 }
5745 /**
5746 * Shut down a remote RPC server.
5747 *
5748 * @param argc Standard main() style argc.
5749 * @param argv Standard main() style argv. Initial components are already
5750 * stripped.
5751 *
5752 * @return A shell status integer (0 for success).
5753 **/
5756 {
5766 }
5775 }
5778 }
5780 /***************************************************************************
5781 NT Domain trusts code (i.e. 'net rpc trustdom' functionality)
5782 ***************************************************************************/
5784 /**
5785 * Add interdomain trust account to the RPC server.
5786 * All parameters (except for argc and argv) are passed by run_rpc_command
5787 * function.
5788 *
5789 * @param c A net_context structure.
5790 * @param domain_sid The domain sid acquired from the server.
5791 * @param cli A cli_state connected to the server.
5792 * @param mem_ctx Talloc context, destroyed on completion of the function.
5793 * @param argc Standard main() style argc.
5794 * @param argv Standard main() style argv. Initial components are already
5795 * stripped.
5796 *
5797 * @return normal NTSTATUS return code.
5798 */
5808 {
5813 uint32 acb_info;
5815 uint32 user_rid;
5828 }
5830 /*
5831 * Make valid trusting domain account (ie. uppercased and with '$' appended)
5832 */
5836 }
5841 }
5850 }
5852 /* Get samr policy handle */
5855 MAXIMUM_ALLOWED_ACCESS,
5860 }
5864 }
5866 /* Get domain policy handle */
5869 MAXIMUM_ALLOWED_ACCESS,
5875 }
5879 }
5881 /* This call can take a long time - allow the server to time out.
5882 * 35 seconds should do it. */
5886 /* Create trusting domain's account */
5890 SAMR_USER_ACCESS_SET_PASSWORD |
5891 SAMR_USER_ACCESS_GET_ATTRIBUTES |
5892 SAMR_USER_ACCESS_SET_ATTRIBUTES;
5897 acb_info,
5898 acct_flags,
5905 }
5906 /* And restore our original timeout. */
5914 }
5916 {
5926 SAMR_FIELD_NT_PASSWORD_PRESENT;
5937 }
5944 }
5945 }
5947 done:
5951 }
5953 /**
5954 * Create interdomain trust account for a remote domain.
5955 *
5956 * @param argc Standard argc.
5957 * @param argv Standard argv without initial components.
5958 *
5959 * @return Integer status (0 means success).
5960 **/
5963 {
5973 }
5974 }
5977 /**
5978 * Remove interdomain trust account from the RPC server.
5979 * All parameters (except for argc and argv) are passed by run_rpc_command
5980 * function.
5981 *
5982 * @param c A net_context structure.
5983 * @param domain_sid The domain sid acquired from the server.
5984 * @param cli A cli_state connected to the server.
5985 * @param mem_ctx Talloc context, destroyed on completion of the function.
5986 * @param argc Standard main() style argc.
5987 * @param argv Standard main() style argv. Initial components are already
5988 * stripped.
5989 *
5990 * @return normal NTSTATUS return code.
5991 */
6001 {
6015 }
6017 /*
6018 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6019 */
6028 }
6030 /* Get samr policy handle */
6033 MAXIMUM_ALLOWED_ACCESS,
6038 }
6042 }
6044 /* Get domain policy handle */
6047 MAXIMUM_ALLOWED_ACCESS,
6053 }
6057 }
6073 }
6080 }
6084 }
6088 }
6092 MAXIMUM_ALLOWED_ACCESS,
6101 }
6109 }
6111 /* append the rid to the domain sid */
6114 }
6116 /* remove the sid */
6127 }
6134 }
6137 /* Delete user */
6147 }
6155 }
6161 }
6163 done:
6165 }
6167 /**
6168 * Delete interdomain trust account for a remote domain.
6169 *
6170 * @param argc Standard argc.
6171 * @param argv Standard argv without initial components.
6172 *
6173 * @return Integer status (0 means success).
6174 **/
6177 {
6186 }
6187 }
6193 {
6197 NTSTATUS status;
6198 WERROR result;
6201 /* Use NetServerEnum2 */
6206 }
6211 /* Try netr_GetDcName */
6217 }
6223 domain_name,
6230 }
6237 }
6240 }
6242 /**
6243 * Establish trust relationship to a trusting domain.
6244 * Interdomain account must already be created on remote PDC.
6245 *
6246 * @param c A net_context structure.
6247 * @param argc Standard argc.
6248 * @param argv Standard argv without initial components.
6249 *
6250 * @return Integer status (0 means success).
6251 **/
6255 {
6266 fstring pdc_name;
6270 /*
6271 * Connect to \\server\ipc$ as 'our domain' account with password
6272 */
6279 }
6285 }
6287 /* account name used at first is our domain's name with '$' */
6290 }
6295 }
6297 /*
6298 * opt_workgroup will be used by connection functions further,
6299 * hence it should be set to remote domain name instead of ours
6300 */
6303 };
6307 /* find the domain controller */
6311 }
6313 /* connect to ipc$ as username/password */
6317 /* Is it trusting domain account for sure ? */
6321 }
6323 /* store who we connected to */
6327 /*
6328 * Connect to \\server\ipc$ again (this time anonymously)
6329 */
6338 }
6345 }
6347 /* Make sure we're talking to a proper server */
6354 }
6356 /*
6357 * Call LsaOpenPolicy and LsaQueryInfo
6358 */
6367 }
6379 }
6381 /* Querying info level 5 */
6385 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6394 }
6401 }
6405 /* There should be actually query info level 3 (following nt serv behaviour),
6406 but I still don't know if it's _really_ necessary */
6408 /*
6409 * Store the password in secrets db
6410 */
6417 }
6419 /*
6420 * Close the pipes and clean up
6421 */
6430 }
6438 }
6440 /**
6441 * Revoke trust relationship to the remote domain.
6442 *
6443 * @param c A net_context structure.
6444 * @param argc Standard argc.
6445 * @param argv Standard argv without initial components.
6446 *
6447 * @return Integer status (0 means success).
6448 **/
6452 {
6463 }
6465 /* generate upper cased domain name */
6470 }
6472 /* delete password of the trust */
6475 domain_name));
6477 };
6480 done:
6483 }
6493 {
6494 fstring str_sid;
6497 }
6500 }
6503 {
6504 fstring ascii_sid;
6506 /* convert sid into ascii string */
6510 }
6517 {
6521 DATA_BLOB session_key;
6526 pol,
6528 LSA_TRUSTED_DOMAIN_INFO_PASSWORD,
6535 }
6541 }
6550 }
6559 }
6565 }
6567 #ifdef DEBUG_PASSWORD
6571 #endif
6573 done:
6578 }
6582 {
6583 /* common variables */
6592 /* trusted domains listing variables */
6596 fstring pdc_name;
6606 }
6608 /*
6609 * Listing trusted domains (stored in secrets.tdb, if local)
6610 */
6614 /*
6615 * set domain and pdc name to local samba server (default)
6616 * or to remote one given in command line
6617 */
6626 };
6628 /* open \PIPE\lsarpc and open policy handle */
6635 };
6645 };
6657 };
6659 /* query info level 5 to obtain sid of a domain being queried */
6662 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6672 }
6679 }
6681 /*
6682 * Keep calling LsaEnumTrustdom over opened pipe until
6683 * the end of enumeration is reached
6684 */
6701 };
6709 };
6724 }
6725 };
6727 /*
6728 * in case of no trusted domains say something rather
6729 * than just display blank line
6730 */
6735 /* close this connection before doing next one */
6743 };
6745 /* close lsarpc pipe and connection to IPC$ */
6750 }
6753 {
6754 /* common variables */
6766 /* trusted domains listing variables */
6770 fstring pdc_name;
6773 /* trusting domains listing variables */
6784 }
6786 /*
6787 * Listing trusted domains (stored in secrets.tdb, if local)
6788 */
6792 /*
6793 * set domain and pdc name to local samba server (default)
6794 * or to remote one given in command line
6795 */
6804 };
6806 /* open \PIPE\lsarpc and open policy handle */
6813 };
6823 };
6835 };
6837 /* query info level 5 to obtain sid of a domain being queried */
6840 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6850 }
6857 }
6861 /*
6862 * Keep calling LsaEnumTrustdom over opened pipe until
6863 * the end of enumeration is reached
6864 */
6883 };
6890 };
6897 };
6902 /*
6903 * in case of no trusted domains say something rather
6904 * than just display blank line
6905 */
6908 }
6910 /* close this connection before doing next one */
6918 };
6922 /*
6923 * Listing trusting domains (stored in passdb backend, if local)
6924 */
6928 /*
6929 * Open \PIPE\samr and get needed policy handles
6930 */
6938 };
6942 /* SamrConnect2 */
6945 SAMR_ACCESS_LOOKUP_DOMAIN,
6954 };
6962 };
6964 /* SamrOpenDomain - we have to open domain policy handle in order to be
6965 able to enumerate accounts*/
6968 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS,
6969 queried_dom_sid,
6978 };
6986 };
6988 /*
6989 * perform actual enumeration
6990 */
7000 ACB_DOMTRUST,
7011 };
7019 };
7027 /*
7028 * get each single domain's sid (do we _really_ need this ?):
7029 * 1) connect to domain's pdc
7030 * 2) query the pdc for domain's sid
7031 */
7033 /* get rid of '$' tail */
7038 /* set opt_* variables to remote domain */
7043 }
7049 /* connect to remote domain controller */
7054 /* query for domain's sid */
7059 argv))
7069 }
7070 }
7076 }
7078 /* close opened samr and domain policy handles */
7082 };
7087 };
7089 /* close samr pipe and connection to IPC$ */
7094 }
7096 /**
7097 * Entrypoint for 'net rpc trustdom' code.
7098 *
7099 * @param argc Standard argc.
7100 * @param argv Standard argv without initial components.
7101 *
7102 * @return Integer status (0 means success).
7103 */
7106 {
7108 {
7110 rpc_trustdom_add,
7111 NET_TRANSPORT_RPC,
7115 },
7116 {
7118 rpc_trustdom_del,
7119 NET_TRANSPORT_RPC,
7123 },
7124 {
7126 rpc_trustdom_establish,
7127 NET_TRANSPORT_RPC,
7131 },
7132 {
7134 rpc_trustdom_revoke,
7135 NET_TRANSPORT_RPC,
7139 },
7140 {
7142 rpc_trustdom_list,
7143 NET_TRANSPORT_RPC,
7147 },
7148 {
7150 rpc_trustdom_vampire,
7151 NET_TRANSPORT_RPC,
7155 },
7157 };
7160 }
7162 /**
7163 * Check if a server will take rpc commands
7164 * @param flags Type of server to connect to (PDC, DMB, localhost)
7165 * if the host is not explicitly specified
7166 * @return bool (true means rpc supported)
7167 */
7169 {
7174 NTSTATUS status;
7176 /* flags (i.e. server type) may depend on command */
7185 }
7187 PROTOCOL_NT1);
7194 done:
7197 }
7199 /* dump sam database via samsync rpc calls */
7208 }
7211 NET_FLAGS_ANONYMOUS,
7213 }
7215 /* syncronise sam database via samsync rpc calls */
7217 {
7219 {
7221 rpc_vampire_ldif,
7222 NET_TRANSPORT_RPC,
7225 " Dump remote SAM database to LDIF file or "
7227 },
7228 {
7230 rpc_vampire_keytab,
7231 NET_TRANSPORT_RPC,
7234 " Dump remote SAM database to Kerberos keytab "
7236 },
7237 {
7239 rpc_vampire_passdb,
7240 NET_TRANSPORT_RPC,
7244 },
7247 };
7257 }
7260 }
7263 }
7265 /**
7266 * Migrate everything from a print server.
7267 *
7268 * @param c A net_context structure.
7269 * @param argc Standard main() style argc.
7270 * @param argv Standard main() style argv. Initial components are already
7271 * stripped.
7272 *
7273 * @return A shell status integer (0 for success).
7274 *
7275 * The order is important !
7276 * To successfully add drivers the print queues have to exist !
7277 * Applying ACLs should be the last step, because you're easily locked out.
7278 *
7279 **/
7282 {
7292 }
7297 }
7301 argv);
7307 argv);
7318 argv);
7324 argv);
7326 }
7328 /**
7329 * Migrate print drivers from a print server.
7330 *
7331 * @param c A net_context structure.
7332 * @param argc Standard main() style argc.
7333 * @param argv Standard main() style argv. Initial components are already
7334 * stripped.
7335 *
7336 * @return A shell status integer (0 for success).
7337 **/
7340 {
7348 }
7353 }
7356 rpc_printer_migrate_drivers_internals,
7358 }
7360 /**
7361 * Migrate print-forms from a print-server.
7362 *
7363 * @param c A net_context structure.
7364 * @param argc Standard main() style argc.
7365 * @param argv Standard main() style argv. Initial components are already
7366 * stripped.
7367 *
7368 * @return A shell status integer (0 for success).
7369 **/
7372 {
7380 }
7385 }
7388 rpc_printer_migrate_forms_internals,
7390 }
7392 /**
7393 * Migrate printers from a print-server.
7394 *
7395 * @param c A net_context structure.
7396 * @param argc Standard main() style argc.
7397 * @param argv Standard main() style argv. Initial components are already
7398 * stripped.
7399 *
7400 * @return A shell status integer (0 for success).
7401 **/
7404 {
7412 }
7417 }
7420 rpc_printer_migrate_printers_internals,
7422 }
7424 /**
7425 * Migrate printer-ACLs from a print-server
7426 *
7427 * @param c A net_context structure.
7428 * @param argc Standard main() style argc.
7429 * @param argv Standard main() style argv. Initial components are already
7430 * stripped.
7431 *
7432 * @return A shell status integer (0 for success).
7433 **/
7436 {
7444 }
7449 }
7452 rpc_printer_migrate_security_internals,
7454 }
7456 /**
7457 * Migrate printer-settings from a print-server.
7458 *
7459 * @param c A net_context structure.
7460 * @param argc Standard main() style argc.
7461 * @param argv Standard main() style argv. Initial components are already
7462 * stripped.
7463 *
7464 * @return A shell status integer (0 for success).
7465 **/
7468 {
7477 }
7482 }
7485 rpc_printer_migrate_settings_internals,
7487 }
7489 /**
7490 * 'net rpc printer' entrypoint.
7491 *
7492 * @param c A net_context structure.
7493 * @param argc Standard main() style argc.
7494 * @param argv Standard main() style argv. Initial components are already
7495 * stripped.
7496 **/
7499 {
7501 /* ouch: when addriver and setdriver are called from within
7502 rpc_printer_migrate_drivers_internals, the printer-queue already
7503 *has* to exist */
7506 {
7508 rpc_printer_migrate_all,
7509 NET_TRANSPORT_RPC,
7513 },
7514 {
7516 rpc_printer_migrate_drivers,
7517 NET_TRANSPORT_RPC,
7521 },
7522 {
7524 rpc_printer_migrate_forms,
7525 NET_TRANSPORT_RPC,
7529 },
7530 {
7532 rpc_printer_migrate_printers,
7533 NET_TRANSPORT_RPC,
7537 },
7538 {
7540 rpc_printer_migrate_security,
7541 NET_TRANSPORT_RPC,
7545 },
7546 {
7548 rpc_printer_migrate_settings,
7549 NET_TRANSPORT_RPC,
7553 },
7555 };
7558 }
7561 /**
7562 * List printers on a remote RPC server.
7563 *
7564 * @param c A net_context structure.
7565 * @param argc Standard main() style argc.
7566 * @param argv Standard main() style argv. Initial components are already
7567 * stripped.
7568 *
7569 * @return A shell status integer (0 for success).
7570 **/
7572 {
7580 }
7583 rpc_printer_list_internals,
7585 }
7587 /**
7588 * List printer-drivers on a remote RPC server.
7589 *
7590 * @param c A net_context structure.
7591 * @param argc Standard main() style argc.
7592 * @param argv Standard main() style argv. Initial components are already
7593 * stripped.
7594 *
7595 * @return A shell status integer (0 for success).
7596 **/
7599 {
7607 }
7610 rpc_printer_driver_list_internals,
7612 }
7614 /**
7615 * Publish printer in ADS via MSRPC.
7616 *
7617 * @param c A net_context structure.
7618 * @param argc Standard main() style argc.
7619 * @param argv Standard main() style argv. Initial components are already
7620 * stripped.
7621 *
7622 * @return A shell status integer (0 for success).
7623 **/
7626 {
7634 }
7637 rpc_printer_publish_publish_internals,
7639 }
7641 /**
7642 * Update printer in ADS via MSRPC.
7643 *
7644 * @param c A net_context structure.
7645 * @param argc Standard main() style argc.
7646 * @param argv Standard main() style argv. Initial components are already
7647 * stripped.
7648 *
7649 * @return A shell status integer (0 for success).
7650 **/
7652 {
7660 }
7663 rpc_printer_publish_update_internals,
7665 }
7667 /**
7668 * UnPublish printer in ADS via MSRPC.
7669 *
7670 * @param c A net_context structure.
7671 * @param argc Standard main() style argc.
7672 * @param argv Standard main() style argv. Initial components are already
7673 * stripped.
7674 *
7675 * @return A shell status integer (0 for success).
7676 **/
7679 {
7687 }
7690 rpc_printer_publish_unpublish_internals,
7692 }
7694 /**
7695 * List published printers via MSRPC.
7696 *
7697 * @param c A net_context structure.
7698 * @param argc Standard main() style argc.
7699 * @param argv Standard main() style argv. Initial components are already
7700 * stripped.
7701 *
7702 * @return A shell status integer (0 for success).
7703 **/
7706 {
7714 }
7717 rpc_printer_publish_list_internals,
7719 }
7722 /**
7723 * Publish printer in ADS.
7724 *
7725 * @param c A net_context structure.
7726 * @param argc Standard main() style argc.
7727 * @param argv Standard main() style argv. Initial components are already
7728 * stripped.
7729 *
7730 * @return A shell status integer (0 for success).
7731 **/
7734 {
7737 {
7739 rpc_printer_publish_publish,
7740 NET_TRANSPORT_RPC,
7744 },
7745 {
7747 rpc_printer_publish_update,
7748 NET_TRANSPORT_RPC,
7752 },
7753 {
7755 rpc_printer_publish_unpublish,
7756 NET_TRANSPORT_RPC,
7760 },
7761 {
7763 rpc_printer_publish_list,
7764 NET_TRANSPORT_RPC,
7768 },
7770 };
7777 " Alias of net rpc printer publish "
7781 }
7783 rpc_printer_publish_list_internals,
7785 }
7789 }
7792 /**
7793 * Display rpc printer help page.
7794 *
7795 * @param c A net_context structure.
7796 * @param argc Standard main() style argc.
7797 * @param argv Standard main() style argv. Initial components are already
7798 * stripped.
7799 **/
7801 {
7829 }
7831 /**
7832 * 'net rpc printer' entrypoint.
7833 *
7834 * @param c A net_context structure.
7835 * @param argc Standard main() style argc.
7836 * @param argv Standard main() style argv. Initial components are already
7837 * stripped.
7838 **/
7840 {
7842 {
7844 rpc_printer_list,
7845 NET_TRANSPORT_RPC,
7849 },
7850 {
7852 rpc_printer_migrate,
7853 NET_TRANSPORT_RPC,
7857 },
7858 {
7860 rpc_printer_driver_list,
7861 NET_TRANSPORT_RPC,
7865 },
7866 {
7868 rpc_printer_publish,
7869 NET_TRANSPORT_RPC,
7873 },
7875 };
7884 }
7886 rpc_printer_list_internals,
7888 }
7891 }
7893 /**
7894 * 'net rpc' entrypoint.
7895 *
7896 * @param c A net_context structure.
7897 * @param argc Standard main() style argc.
7898 * @param argv Standard main() style argv. Initial components are already
7899 * stripped.
7900 **/
7903 {
7904 NET_API_STATUS status;
7907 {
7909 net_rpc_audit,
7910 NET_TRANSPORT_RPC,
7914 },
7915 {
7917 net_rpc_info,
7918 NET_TRANSPORT_RPC,
7922 },
7923 {
7925 net_rpc_join,
7926 NET_TRANSPORT_RPC,
7930 },
7931 {
7933 net_rpc_oldjoin,
7934 NET_TRANSPORT_RPC,
7938 },
7939 {
7941 net_rpc_testjoin,
7942 NET_TRANSPORT_RPC,
7946 },
7947 {
7949 net_rpc_user,
7950 NET_TRANSPORT_RPC,
7954 },
7955 {
7957 rpc_user_password,
7958 NET_TRANSPORT_RPC,
7963 },
7964 {
7966 net_rpc_group,
7967 NET_TRANSPORT_RPC,
7971 },
7972 {
7974 net_rpc_share,
7975 NET_TRANSPORT_RPC,
7979 },
7980 {
7982 net_rpc_file,
7983 NET_TRANSPORT_RPC,
7987 },
7988 {
7990 net_rpc_printer,
7991 NET_TRANSPORT_RPC,
7995 },
7996 {
7998 net_rpc_changetrustpw,
7999 NET_TRANSPORT_RPC,
8003 },
8004 {
8006 rpc_trustdom,
8007 NET_TRANSPORT_RPC,
8011 },
8012 {
8014 rpc_shutdown_abort,
8015 NET_TRANSPORT_RPC,
8019 },
8020 {
8022 rpc_shutdown,
8023 NET_TRANSPORT_RPC,
8027 },
8028 {
8030 rpc_samdump,
8031 NET_TRANSPORT_RPC,
8035 },
8036 {
8038 rpc_vampire,
8039 NET_TRANSPORT_RPC,
8043 },
8044 {
8046 net_rpc_getsid,
8047 NET_TRANSPORT_RPC,
8051 },
8052 {
8054 net_rpc_rights,
8055 NET_TRANSPORT_RPC,
8059 },
8060 {
8062 net_rpc_service,
8063 NET_TRANSPORT_RPC,
8067 },
8068 {
8070 net_rpc_registry,
8071 NET_TRANSPORT_RPC,
8075 },
8076 {
8078 net_rpc_shell,
8079 NET_TRANSPORT_RPC,
8083 },
8084 {
8086 net_rpc_trust,
8087 NET_TRANSPORT_RPC,
8091 },
8092 {
8094 net_rpc_conf,
8095 NET_TRANSPORT_RPC,
8099 },
8101 };
8106 }
8111 }
8114 }
8117 }