| blob | 916de2578f2ad4b13cbe130596cda239c84401d0 |
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 * Copyright (C) Gerald Carter 2002-2005.
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 3 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, see <http://www.gnu.org/licenses/>.
20 */
36 #define NTDRIVERS_DATABASE_VERSION_1 1
37 #define NTDRIVERS_DATABASE_VERSION_2 2
42 /* Map generic permissions to printer object specific permissions */
45 PRINTER_READ,
46 PRINTER_WRITE,
47 PRINTER_EXECUTE,
48 PRINTER_ALL_ACCESS
49 };
52 PRINTER_READ,
53 PRINTER_WRITE,
54 PRINTER_EXECUTE,
55 PRINTER_ALL_ACCESS
56 };
58 /* Map generic permissions to print server object specific permissions */
61 SERVER_READ,
62 SERVER_WRITE,
63 SERVER_EXECUTE,
64 SERVER_ALL_ACCESS
65 };
68 SERVER_READ,
69 SERVER_WRITE,
70 SERVER_EXECUTE,
71 SERVER_ALL_ACCESS
72 };
74 /* Map generic permissions to job object specific permissions */
77 JOB_READ,
78 JOB_WRITE,
79 JOB_EXECUTE,
80 JOB_ALL_ACCESS
81 };
83 /* We need one default form to support our default printer. Msoft adds the
84 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
85 array index). Letter is always first, so (for the current code) additions
86 always put things in the correct order. */
206 };
218 };
221 /****************************************************************************
222 generate a new TDB_DATA key for storing a printer
223 ****************************************************************************/
226 {
227 fstring share;
229 TDB_DATA key;
238 }
240 /****************************************************************************
241 generate a new TDB_DATA key for storing a printer security descriptor
242 ****************************************************************************/
246 {
247 fstring share;
249 TDB_DATA key;
258 }
260 /****************************************************************************
261 ****************************************************************************/
264 {
280 }
283 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
285 }
286 }
292 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
294 }
297 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
299 }
300 }
306 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
308 }
311 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
313 }
314 }
317 }
320 }
322 /*******************************************************************
323 Fix an issue with security descriptors. Printer sec_desc must
324 use more than the generic bits that were previously used
325 in <= 3.0.14a. They must also have a owner and group SID assigned.
326 Otherwise, any printers than have been migrated to a Windows
327 host using printmig.exe will not be accessible.
328 *******************************************************************/
332 {
333 NTSTATUS status;
339 uint32 sd_size;
344 }
348 }
350 /* upgrade the security descriptor */
354 /* delete bad entries */
359 }
363 }
366 /* is this even valid? */
370 }
372 /* update access masks */
389 }
390 }
392 /* create a new SEC_DESC with the appropriate owner and group SIDs */
400 }
404 }
409 }
411 /* store it back */
420 }
424 /* 0 to continue and non-zero to stop traversal */
427 }
429 /*******************************************************************
430 *******************************************************************/
433 {
447 }
449 /*******************************************************************
450 Fix an issue with security descriptors. Printer sec_desc must
451 use more than the generic bits that were previously used
452 in <= 3.0.14a. They must also have a owner and group SID assigned.
453 Otherwise, any printers than have been migrated to a Windows
454 host using printmig.exe will not be accessible.
455 *******************************************************************/
459 {
461 TDB_DATA new_key;
466 /* upgrade printer records and security descriptors */
470 }
473 }
475 /* ignore this record */
477 }
479 /* delete the original record and store under the normalized key */
485 }
491 }
494 }
496 /*******************************************************************
497 *******************************************************************/
500 {
514 }
516 /****************************************************************************
517 Open the NT printing tdbs. Done once before fork().
518 ****************************************************************************/
521 {
523 WERROR win_rc;
524 int32 vers_id;
536 }
540 tdb_printers = tdb_open_log(state_path("ntprinters.tdb"), 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
545 }
554 }
556 /* handle a Samba upgrade */
563 }
567 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
572 }
574 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
575 /* Written on a bigendian machine with old fetch_int code. Save as le. */
576 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
579 }
586 }
593 }
599 }
600 }
604 /*
605 * register callback to handle updating printers as new
606 * drivers are installed
607 */
610 do_drv_upgrade_printer);
612 /*
613 * register callback to handle updating printer data
614 * when a driver is initialized
615 */
618 reset_all_printerdata);
620 /* of course, none of the message callbacks matter if you don't
621 tell messages.c that you interested in receiving PRINT_GENERAL
622 msgs. This is done in claim_connection() */
629 }
632 }
634 /*******************************************************************
635 Function to allow filename parsing "the old way".
636 ********************************************************************/
641 {
642 NTSTATUS status;
648 }
653 }
659 }
662 }
664 /*******************************************************************
665 tdb traversal function for counting printers.
666 ********************************************************************/
670 {
675 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
676 }
679 }
681 /*******************************************************************
682 Update the spooler global c_setprinter. This variable is initialized
683 when the parent smbd starts with the number of existing printers. It
684 is monotonically increased by the current number of printers *after*
685 each add or delete printer RPC. Only Microsoft knows why... JRR020119
686 ********************************************************************/
689 {
690 int32 c_setprinter;
695 /* Traverse the tdb, counting the printers */
698 /* If initializing, set c_setprinter to current printers count
699 * otherwise, bump it by the current printer count
700 */
703 else
712 }
714 /*******************************************************************
715 Get the spooler global c_setprinter, accounting for initialization.
716 ********************************************************************/
719 {
728 }
730 /****************************************************************************
731 Get builtin form struct list.
732 ****************************************************************************/
735 {
739 }
741 }
743 /****************************************************************************
744 get a builtin form struct
745 ****************************************************************************/
748 {
756 }
757 }
760 }
762 /****************************************************************************
763 get a form struct list.
764 ****************************************************************************/
767 {
769 nt_forms_struct form;
779 {
799 }
801 n++;
802 }
806 }
808 /****************************************************************************
809 write a form struct list
810 ****************************************************************************/
813 {
818 TDB_DATA dbuf;
822 /* save index, so list is rebuilt in correct order */
829 }
833 }
841 }
848 }
851 }
854 }
856 /****************************************************************************
857 add a form struct at the end of the list
858 ****************************************************************************/
860 {
864 /*
865 * NT tries to add forms even when
866 * they are already in the base
867 * only update the values if already present
868 */
876 }
877 }
883 }
886 }
900 }
902 /****************************************************************************
903 Delete a named form struct.
904 ****************************************************************************/
907 {
917 }
918 }
924 }
929 }
934 }
937 }
939 /****************************************************************************
940 Update a form struct.
941 ****************************************************************************/
944 {
952 }
963 }
965 /****************************************************************************
966 Get the nt drivers list.
967 Traverse the database and look-up the matching names.
968 ****************************************************************************/
970 {
979 }
984 }
990 }
1004 }
1012 }
1013 total++;
1014 }
1015 }
1021 }
1023 /****************************************************************************
1024 Function to do the mapping between the long architecture name and
1025 the short one.
1026 ****************************************************************************/
1029 {
1034 i++;
1041 }
1043 /* this might be client code - but shouldn't this be an fstrcpy etc? */
1050 }
1052 /****************************************************************************
1053 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
1054 There are two case to be covered here: PE (Portable Executable) and NE (New
1055 Executable) files. Both files support the same INFO structure, but PE files
1056 store the signature in unicode, and NE files store it as !unicode.
1057 returns -1 on error, 1 on version info found, and 0 on no version info found.
1058 ****************************************************************************/
1061 {
1064 ssize_t byte_count;
1070 }
1076 }
1078 /* Is this really a DOS header? */
1083 }
1085 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
1089 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1091 }
1093 /* Note: DOS_HEADER_SIZE and NE_HEADER_SIZE are incidentally same */
1097 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1099 }
1101 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
1106 /* Just skip over optional header to get to section table */
1113 }
1115 /* get the section table */
1126 }
1132 }
1134 /* Iterate the section table looking for the resource section ".rsrc" */
1150 }
1152 /* Seek to the start of the .rsrc section info */
1157 }
1163 }
1169 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
1171 /* Align to next long address */
1184 }
1185 }
1186 }
1187 }
1188 }
1190 /* Version info not found, fall back to origin date/time */
1199 /* At this point, we assume the file is in error. It still could be somthing
1200 * else besides a NE file, but it unlikely at this point. */
1202 }
1204 /* Allocate a bit more space to speed up things */
1210 }
1212 /* This is a HACK! I got tired of trying to sort through the messy
1213 * 'NE' file format. If anyone wants to clean this up please have at
1214 * it, but this works. 'NE' files will eventually fade away. JRR */
1216 /* Cover case that should not occur in a well formed 'NE' .dll file */
1220 /* Fast skip past data that can't possibly match */
1223 /* Potential match data crosses buf boundry, move it to beginning
1224 * of buf, and fill the buf with as much as it will hold. */
1235 }
1241 }
1243 /* Check that the full signature string and the magic number that
1244 * follows exist (not a perfect solution, but the chances that this
1245 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
1246 * twice, as it is simpler to read the code. */
1248 /* Compute skip alignment to next long address */
1261 }
1262 }
1263 }
1265 /* Version info not found, fall back to origin date/time */
1271 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1275 no_version_info:
1279 error_exit:
1282 }
1284 /****************************************************************************
1285 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
1286 share one or more files. During the MS installation process files are checked
1287 to insure that only a newer version of a shared file is installed over an
1288 older version. There are several possibilities for this comparison. If there
1289 is no previous version, the new one is newer (obviously). If either file is
1290 missing the version info structure, compare the creation date (on Unix use
1291 the modification date). Otherwise chose the numerically larger version number.
1292 ****************************************************************************/
1295 {
1298 uint32 new_major;
1299 uint32 new_minor;
1302 uint32 old_major;
1303 uint32 old_minor;
1308 SMB_STRUCT_STAT st;
1310 NTSTATUS status;
1317 /* Get file version info (if available) for previous file (if it exists) */
1321 }
1341 /* Old file not found, so by definition new file is in fact newer */
1344 errno));
1352 }
1356 old_file));
1360 }
1364 }
1365 }
1369 /* Get file version info (if available) for new file */
1373 }
1393 /* New file not found, this shouldn't occur if the caller did its job */
1402 }
1406 new_file));
1410 }
1414 }
1415 }
1420 /* Compare versions and choose the larger version number */
1427 }
1432 }
1435 /* Compare modification time/dates and choose the newest time/date */
1440 }
1445 }
1446 }
1448 error_exit:
1452 done:
1455 }
1457 /****************************************************************************
1458 Determine the correct cVersion associated with an architecture and driver
1459 ****************************************************************************/
1464 {
1466 NTSTATUS nt_status;
1471 NTSTATUS status;
1473 fstring printdollar;
1478 /* If architecture is Windows 95/98/ME, the version is always 0. */
1483 }
1485 /* If architecture is Windows x64, the version is always 3. */
1490 }
1498 }
1508 }
1510 /* Open the driver file (Portable Executable format) and determine the
1511 * deriver the cversion. */
1514 architecture,
1515 driverpath_in);
1519 }
1525 }
1531 }
1556 uint32 major;
1557 uint32 minor;
1568 }
1570 /*
1571 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1572 * for more details. Version in this case is not just the version of the
1573 * file, but the version in the sense of kernal mode (2) vs. user mode
1574 * (3) drivers. Other bits of the version fields are the version info.
1575 * JRR 010716
1576 */
1587 cversion));
1589 }
1594 }
1601 error_exit:
1603 done:
1607 }
1611 }
1614 }
1616 }
1618 /****************************************************************************
1619 ****************************************************************************/
1621 #define strip_driver_path(_mem_ctx, _element) do { \
1624 W_ERROR_HAVE_NO_MEMORY((_element)); \
1625 } \
1626 } while (0);
1637 {
1640 WERROR err;
1643 /* clean up the driver name.
1644 * we can get .\driver.dll
1645 * or worse c:\windows\system\driver.dll !
1646 */
1647 /* using an intermediate string to not have overlaping memcpy()'s */
1657 }
1658 }
1663 }
1665 /* jfm:7/16/2000 the client always sends the cversion=0.
1666 * The server should check which version the driver is by reading
1667 * the PE header of driver->driverpath.
1668 *
1669 * For Windows 95/98 the version is 0 (so the value sent is correct)
1670 * For Windows NT (the architecture doesn't matter)
1671 * NT 3.1: cversion=0
1672 * NT 3.5/3.51: cversion=1
1673 * NT 4: cversion=2
1674 * NT2K: cversion=3
1675 */
1681 }
1684 }
1686 /****************************************************************************
1687 ****************************************************************************/
1691 {
1722 }
1723 }
1725 /****************************************************************************
1726 This function sucks and should be replaced. JRA.
1727 ****************************************************************************/
1731 {
1744 }
1746 /****************************************************************************
1747 This function sucks and should be replaced. JRA.
1748 ****************************************************************************/
1752 {
1765 }
1767 /****************************************************************************
1768 ****************************************************************************/
1776 {
1781 NTSTATUS status;
1782 WERROR ret;
1793 }
1801 }
1803 /* Setup a synthetic smb_filename struct */
1808 }
1817 OPENX_FILE_EXISTS_TRUNCATE |
1818 OPENX_FILE_CREATE_IF_NOT_EXIST,
1828 }
1829 }
1832 out:
1836 }
1841 {
1848 NTSTATUS nt_status;
1853 fstring printdollar;
1873 }
1878 }
1886 }
1896 }
1900 short_architecture,
1905 }
1910 }
1916 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1917 * listed for this driver which has already been moved, skip it (note:
1918 * drivers may list the same file name several times. Then check if the
1919 * file already exists in archi\version\, if so, check that the version
1920 * info (or time stamps if version info is unavailable) is newer (or the
1921 * date is later). If it is, move it to archi\version\filexxx.yyy.
1922 * Otherwise, delete the file.
1923 *
1924 * If a file is not moved to archi\version\ because of an error, all the
1925 * rest of the 'unmoved' driver files are removed from archi\. If one or
1926 * more of the driver's files was already moved to archi\version\, it
1927 * potentially leaves the driver in a partially updated state. Version
1928 * trauma will most likely occur if an client attempts to use any printer
1929 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1930 * done is appropriate... later JRR
1931 */
1938 conn,
1940 short_architecture,
1942 ver);
1946 }
1948 }
1949 }
1955 conn,
1957 short_architecture,
1959 ver);
1963 }
1965 }
1966 }
1967 }
1974 conn,
1976 short_architecture,
1978 ver);
1982 }
1984 }
1985 }
1986 }
1994 conn,
1996 short_architecture,
1998 ver);
2002 }
2004 }
2005 }
2006 }
2018 }
2019 }
2022 conn,
2024 short_architecture,
2026 ver);
2030 }
2032 }
2033 }
2034 NextDriver: ;
2035 }
2036 }
2038 err_exit:
2044 }
2048 }
2051 }
2053 }
2055 /****************************************************************************
2056 ****************************************************************************/
2059 {
2065 TDB_DATA dbuf;
2067 DATA_BLOB blob;
2072 }
2074 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
2075 * \\server is added in the rpc server layer.
2076 * It does make sense to NOT store the server's name in the printer TDB.
2077 */
2083 }
2085 #define gen_full_driver_unc_path(ctx, directory, file) \
2086 do { \
2087 if (file && strlen(file)) { \
2089 } else { \
2091 } \
2092 if (!file) { \
2093 return (uint32_t)-1; \
2094 } \
2095 } while (0);
2097 /* .inf files do not always list a file for each of the four standard files.
2098 * Don't prepend a path to a null filename, or client claims:
2099 * "The server on which the printer resides does not have a suitable
2100 * <printer driver name> printer driver installed. Click OK if you
2101 * wish to install the driver on your local machine."
2102 */
2111 }
2117 }
2125 }
2136 }
2139 }
2141 /****************************************************************************
2142 ****************************************************************************/
2147 {
2151 }
2156 }
2164 }
2167 }
2169 /****************************************************************************
2170 ****************************************************************************/
2176 {
2177 TDB_DATA dbuf;
2182 fstring name, driverpath, environment, datafile, configfile, helpfile, monitorname, defaultdatatype;
2187 }
2189 /* Windows 4.0 (i.e. win9x) should always use a version of 0 */
2194 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, drivername));
2199 }
2205 }
2209 name,
2210 environment,
2211 driverpath,
2212 datafile,
2213 configfile,
2214 helpfile,
2215 monitorname,
2216 defaultdatatype);
2231 fstring file;
2237 }
2244 i++;
2245 }
2255 }
2258 }
2260 /****************************************************************************
2261 ****************************************************************************/
2267 {
2268 TDB_DATA dbuf;
2272 DATA_BLOB blob;
2280 }
2282 /* Windows 4.0 (i.e. win9x) should always use a version of 0 */
2286 }
2294 }
2300 }
2307 }
2317 }
2325 }
2327 /****************************************************************************
2328 ****************************************************************************/
2330 {
2381 }
2386 }
2388 /****************************************************************************
2389 Pack all values in all printer keys
2390 ***************************************************************************/
2393 {
2404 /* loop over all keys */
2410 /* pack the keyname followed by a empty value */
2415 REG_NONE,
2417 NULL);
2419 /* now loop over all values */
2422 /* pathname should be stored as <key>\<value> */
2429 }
2432 val,
2433 path,
2440 }
2442 }
2444 /* terminator */
2449 }
2452 /****************************************************************************
2453 Delete a printer - this just deletes the printer info file, any open
2454 handles are not affected.
2455 ****************************************************************************/
2458 {
2459 TDB_DATA kbuf;
2476 }
2479 }
2482 }
2484 /****************************************************************************
2485 ****************************************************************************/
2487 {
2491 WERROR ret;
2494 /*
2495 * in addprinter: no servername and the printer is the name
2496 * in setprinter: servername is \\server
2497 * and printer is \\server\\printer
2498 *
2499 * Samba manages only local printers.
2500 * we currently don't support things like i
2501 * path=\\other_server\printer
2502 *
2503 * We only store the printername, not \\server\printername
2504 */
2510 }
2512 /*
2513 * JFM: one day I'll forget.
2514 * below that's info->portname because that's the SAMBA sharename
2515 * and I made NT 'thinks' it's the portname
2516 * the info->sharename is the thing you can name when you add a printer
2517 * that's the short-name when you create shared printer for 95/98
2518 * So I've made a limitation in SAMBA: you can only have 1 printer model
2519 * behind a SAMBA share.
2520 */
2525 again:
2556 }
2565 }
2568 }
2577 done:
2587 }
2590 /****************************************************************************
2591 Malloc and return an NT devicemode.
2592 ****************************************************************************/
2595 {
2603 }
2617 DEVMODE_TTOPTION |
2618 DEVMODE_PRINTQUALITY |
2619 DEVMODE_DEFAULTSOURCE |
2620 DEVMODE_COPIES |
2621 DEVMODE_SCALE |
2622 DEVMODE_PAPERSIZE |
2623 DEVMODE_ORIENTATION;
2642 /* non utilisés par un driver d'imprimante */
2656 }
2658 /****************************************************************************
2659 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2660 ****************************************************************************/
2663 {
2673 }
2675 /****************************************************************************
2676 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2677 ****************************************************************************/
2680 {
2689 }
2692 /****************************************************************************
2693 ****************************************************************************/
2695 {
2698 NT_DEVICEMODE devmode;
2746 /* the len in tdb_unpack is an int value and
2747 * devmode.driverextra is only a short
2748 */
2752 /* check to catch an invalid TDB entry so we don't segfault */
2755 }
2756 }
2762 }
2769 }
2771 /****************************************************************************
2772 Allocate and initialize a new slot.
2773 ***************************************************************************/
2776 {
2783 /* allocate another slot in the NT_PRINTER_KEY array */
2788 }
2794 /* initialze new key */
2806 }
2808 /****************************************************************************
2809 search for a registry key name in the existing printer data
2810 ***************************************************************************/
2813 {
2819 /* cleanup memory */
2824 /* if not the end of the array, move remaining elements down one slot */
2831 }
2832 }
2836 }
2838 /****************************************************************************
2839 search for a registry key name in the existing printer data
2840 ***************************************************************************/
2843 {
2852 /* loop over all existing keys */
2860 }
2861 }
2864 }
2866 /****************************************************************************
2867 ***************************************************************************/
2870 {
2876 fstring subkeyname;
2886 /* special case of asking for the top level printer data registry key names */
2891 /* found a match, so allocate space and copy the name */
2897 }
2900 num_subkeys++;
2901 }
2904 }
2906 /* asking for the subkeys of some key */
2907 /* subkey paths are stored in the key name using '\' as the delimiter */
2912 /* if we found the exact key, then break */
2917 /* get subkey path */
2921 p++;
2926 /* don't add a key more than once */
2931 }
2936 /* found a match, so allocate space and copy the name */
2942 }
2945 num_subkeys++;
2946 }
2948 }
2950 /* return error if the key was not found */
2955 }
2957 done:
2958 /* tag off the end */
2966 }
2968 #ifdef HAVE_ADS
2971 {
2974 }
2977 uint32 dword)
2978 {
2982 }
2986 {
2991 }
2995 {
3003 }
3005 /****************************************************************************
3006 * Map the NT_PRINTER_INFO_LEVEL_2 data into DsSpooler keys for publishing.
3007 *
3008 * @param info2 NT_PRINTER_INFO_LEVEL_2 describing printer - gets modified
3009 * @return bool indicating success or failure
3010 ***************************************************************************/
3013 {
3015 fstring longname;
3028 /* we make the assumption that the netbios name is the same
3029 as the DNS name sinc ethe former will be what we used to
3030 join the domain */
3037 }
3043 }
3059 PRINTER_ATTRIBUTE_KEEPPRINTEDJOBS));
3073 }
3077 }
3079 /*****************************************************************
3080 ****************************************************************/
3084 {
3088 /* find the DsSpooler key */
3095 /* We used to store this as a REG_BINARY but that causes
3096 Vista to whine */
3100 }
3104 {
3105 ADS_STATUS ads_rc;
3110 ADS_MODLIST mods;
3116 /* build the ads mods */
3120 }
3124 /* figure out where to publish */
3127 /* We use ldap_get_dn here as we need the answer
3128 * in utf8 to call ldap_explode_dn(). JRA. */
3134 }
3141 }
3142 /* Now convert to CH_UNIX. */
3148 }
3155 }
3164 }
3170 }
3183 }
3189 /* publish it */
3194 ;
3197 }
3202 /* retreive the guid and store it locally */
3209 }
3213 }
3217 {
3218 ADS_STATUS ads_rc;
3224 /* remove the printer from the directory */
3233 }
3236 }
3240 }
3242 }
3244 /****************************************************************************
3245 * Publish a printer in the directory
3246 *
3247 * @param snum describing printer service
3248 * @return WERROR indicating status of publishing
3249 ***************************************************************************/
3252 {
3253 ADS_STATUS ads_rc;
3256 WERROR win_rc;
3265 /* set the DsSpooler info and attributes */
3269 }
3279 }
3285 }
3292 }
3298 /* ads_connect() will find the DC for us */
3304 }
3314 }
3316 done:
3320 }
3323 {
3324 ADS_STATUS ads_rc;
3334 }
3340 /* ads_connect() will find the DC for us */
3347 }
3359 }
3364 }
3368 {
3372 WERROR win_rc;
3375 DATA_BLOB blob;
3384 {
3387 }
3389 /* fetching printer guids really ought to be a separate function. */
3394 /* We used to store the guid as REG_BINARY, then swapped
3395 to REG_SZ for Vista compatibility so check for both */
3409 }
3416 }
3417 }
3421 }
3422 #else
3424 {
3426 }
3429 {
3431 }
3435 {
3437 }
3440 /****************************************************************************
3441 ***************************************************************************/
3444 {
3456 /* remove all keys */
3468 }
3470 /* remove a specific key (and all subkeys) */
3480 /* mark the slot as empty */
3483 }
3484 }
3486 /* find the first empty slot */
3491 removed_keys++;
3493 }
3494 }
3497 /* nothing was removed */
3500 /* move everything down */
3506 empty_slot++;
3507 removed_keys++;
3508 }
3509 }
3511 /* update count */
3515 /* sanity check to see if anything is left */
3522 }
3525 }
3527 /****************************************************************************
3528 ***************************************************************************/
3531 {
3535 /* we must have names on non-zero length */
3540 /* find the printer key first */
3546 /* make sure the value exists so we can return the correct error code */
3557 }
3559 /****************************************************************************
3560 ***************************************************************************/
3564 {
3568 /* we must have names on non-zero length */
3573 /* find the printer key first */
3589 }
3591 /****************************************************************************
3592 ***************************************************************************/
3594 struct regval_blob* get_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value )
3595 {
3605 }
3607 /****************************************************************************
3608 Unpack a list of registry values frem the TDB
3609 ***************************************************************************/
3612 {
3614 uint32 type;
3615 fstring string;
3624 /* add the "PrinterDriverData" key first for performance reasons */
3628 /* loop and unpack the rest of the registry values */
3632 /* check to see if there are any more registry values */
3639 /* unpack the next regval */
3642 string,
3647 /* lookup for subkey names which have a type of REG_NONE */
3648 /* there's no data with this entry */
3654 }
3656 /*
3657 * break of the keyname from the value name.
3658 * Valuenames can have embedded '\'s so be careful.
3659 * only support one level of keys. See the
3660 * "Konica Fiery S300 50C-K v1.1. enu" 2k driver.
3661 * -- jerry
3662 */
3666 /* Put in "PrinterDriverData" is no key specified */
3671 }
3676 }
3678 /* see if we need a new key */
3685 keyname));
3687 }
3691 /* Vista doesn't like unknown REG_BINARY values in DsSpooler.
3692 Thanks to Martin Zielinski for the hint. */
3697 {
3700 /* convert the GUID to a UNICODE string */
3705 valuename,
3709 /* add the value */
3713 size );
3714 }
3718 }
3721 }
3723 /****************************************************************************
3724 ***************************************************************************/
3730 {
3733 }
3735 }
3738 {
3741 }
3743 }
3746 {
3760 }
3762 }
3765 {
3782 }
3789 }
3803 nt_name++;
3808 {
3812 l--;
3813 }
3814 }
3817 os2_name++;
3819 {
3823 l--;
3824 }
3825 }
3833 }
3834 }
3837 }
3839 /****************************************************************************
3840 Get a default printer info 2 struct.
3841 ****************************************************************************/
3847 {
3856 /* by setting the driver name to an empty string, a local NT admin
3857 can now run the **local** APW to install a local printer driver
3858 for a Samba shared printer in 2.2. Without this, drivers **must** be
3859 installed on the Samba server for NT clients --jerry */
3863 #endif
3872 #ifdef HAVE_CUPS
3874 /* Pull the location and comment strings from cups if we don't
3875 already have one */
3878 }
3879 #endif
3889 /*
3890 * I changed this as I think it is better to have a generic
3891 * DEVMODE than to crash Win2k explorer.exe --jerry
3892 * See the HP Deskjet 990c Win2k drivers for an example.
3893 *
3894 * However the default devmode appears to cause problems
3895 * with the HP CLJ 8500 PCL driver. Hence the addition of
3896 * the "default devmode" parameter --jerry 22/01/2002
3897 */
3902 }
3905 }
3909 }
3914 }
3920 fail:
3925 }
3927 /****************************************************************************
3928 ****************************************************************************/
3934 {
3938 fstring printername;
3948 }
3977 }
3979 /* Samba has to have shared raw drivers. */
3983 /* Restore the stripped strings. */
3990 }
3994 #ifdef HAVE_CUPS
3996 /* Pull the location and comment strings from cups if we don't
3997 already have one */
4000 }
4001 #endif
4005 /*
4006 * Some client drivers freak out if there is a NULL devmode
4007 * (probably the driver is not checking before accessing
4008 * the devmode pointer) --jerry
4009 *
4010 * See comments in get_a_printer_2_default()
4011 */
4015 printername));
4017 }
4022 }
4028 }
4031 /* This will get the current RPC talloc context, but we should be
4032 passing this as a parameter... fixme... JRA ! */
4037 }
4039 /* Fix for OS/2 drivers. */
4043 }
4051 }
4053 /****************************************************************************
4054 Debugging function, dump at level 6 the struct in the logs.
4055 ****************************************************************************/
4057 {
4058 uint32 result;
4065 {
4068 else
4069 {
4096 }
4098 }
4103 }
4106 }
4108 /****************************************************************************
4109 Update the changeid time.
4110 This is SO NASTY as some drivers need this to change, others need it
4111 static. This value will change every second, and I must hope that this
4112 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
4113 UTAH ! JRA.
4114 ****************************************************************************/
4117 {
4123 /* Return changeid as msec since spooler restart */
4125 #else
4126 /*
4127 * This setting seems to work well but is too untested
4128 * to replace the above calculation. Left in for experiementation
4129 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
4130 */
4132 #endif
4133 }
4136 /*
4137 * The function below are the high level ones.
4138 * only those ones must be called from the spoolss code.
4139 * JFM.
4140 */
4142 /****************************************************************************
4143 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
4144 ****************************************************************************/
4147 {
4148 WERROR result;
4154 {
4155 /*
4156 * Update the changestamp. Emperical tests show that the
4157 * ChangeID is always updated,but c_setprinter is
4158 * global spooler variable (not per printer).
4159 */
4161 /* ChangeID **must** be increasing over the lifetime
4162 of client's spoolss service in order for the
4163 client's cache to show updates */
4167 /*
4168 * Because one day someone will ask:
4169 * NT->NT An admin connection to a remote
4170 * printer show changes imeediately in
4171 * the properities dialog
4172 *
4173 * A non-admin connection will only show the
4174 * changes after viewing the properites page
4175 * 2 times. Seems to be related to a
4176 * race condition in the client between the spooler
4177 * updating the local cache and the Explorer.exe GUI
4178 * actually displaying the properties.
4179 *
4180 * This is fixed in Win2k. admin/non-admin
4181 * connections both display changes immediately.
4182 *
4183 * 14/12/01 --jerry
4184 */
4188 }
4192 }
4195 }
4197 /****************************************************************************
4198 Initialize printer devmode & data with previously saved driver init values.
4199 ****************************************************************************/
4202 {
4205 TDB_DATA dbuf;
4206 NT_PRINTER_INFO_LEVEL_2 info;
4211 /*
4212 * Delete any printer data 'values' already set. When called for driver
4213 * replace, there will generally be some, but during an add printer, there
4214 * should not be any (if there are delete them).
4215 */
4223 }
4227 /*
4228 * When changing to a driver that has no init info in the tdb, remove
4229 * the previous drivers init info and leave the new on blank.
4230 */
4234 }
4237 /*
4238 * Get the saved DEVMODE..
4239 */
4243 /*
4244 * The saved DEVMODE contains the devicename from the printer used during
4245 * the initialization save. Change it to reflect the new printer.
4246 */
4251 }
4253 /*
4254 * NT/2k does not change out the entire DeviceMode of a printer
4255 * when changing the driver. Only the driverextra, private, &
4256 * driverversion fields. --jerry (Thu Mar 14 08:58:43 CST 2002)
4257 *
4258 * Later examination revealed that Windows NT/2k does reset the
4259 * the printer's device mode, bit **only** when you change a
4260 * property of the device mode such as the page orientation.
4261 * --jerry
4262 */
4265 /* Bind the saved DEVMODE to the new the printer */
4273 /* Add the printer data 'values' to the new printer */
4278 }
4285 }
4287 /****************************************************************************
4288 Initialize printer devmode & data with previously saved driver init values.
4289 When a printer is created using AddPrinter, the drivername bound to the
4290 printer is used to lookup previously saved driver initialization info, which
4291 is bound to the new printer.
4292 ****************************************************************************/
4295 {
4305 level));
4307 }
4310 }
4312 /****************************************************************************
4313 Delete driver init data stored for a specified driver
4314 ****************************************************************************/
4317 {
4324 }
4328 }
4331 drivername));
4336 }
4338 /****************************************************************************
4339 Pack up the DEVMODE and values for a printer into a 'driver init' entry
4340 in the tdb. Note: this is different from the driver entry and the printer
4341 entry. There should be a single driver init entry for each driver regardless
4342 of whether it was installed from NT or 2K. Technically, they should be
4343 different, but they work out to the same struct.
4344 ****************************************************************************/
4347 {
4352 TDB_DATA dbuf;
4357 again:
4365 }
4374 }
4377 }
4383 }
4390 done:
4400 }
4402 /****************************************************************************
4403 Update (i.e. save) the driver init info (DEVMODE and values) for a printer
4404 ****************************************************************************/
4407 {
4408 uint32 result;
4419 }
4422 }
4424 /****************************************************************************
4425 Convert the printer data value, a REG_BINARY array, into an initialization
4426 DEVMODE. Note: the array must be parsed as if it was a DEVMODE in an rpc...
4427 got to keep the endians happy :).
4428 ****************************************************************************/
4432 {
4435 DATA_BLOB blob;
4446 }
4449 }
4451 /****************************************************************************
4452 Set the DRIVER_INIT info in the tdb. Requires Win32 client code that:
4454 1. Use the driver's config DLL to this UNC printername and:
4455 a. Call DrvPrintEvent with PRINTER_EVENT_INITIALIZE
4456 b. Call DrvConvertDevMode with CDM_DRIVER_DEFAULT to get default DEVMODE
4457 2. Call SetPrinterData with the 'magic' key and the DEVMODE as data.
4459 The last step triggers saving the "driver initialization" information for
4460 this printer into the tdb. Later, new printers that use this driver will
4461 have this initialization information bound to them. This simulates the
4462 driver initialization, as if it had run on the Samba server (as it would
4463 have done on NT).
4465 The Win32 client side code requirement sucks! But until we can run arbitrary
4466 Win32 printer driver code on any Unix that Samba runs on, we are stuck with it.
4468 It would have been easier to use SetPrinter because all the UNMARSHALLING of
4469 the DEVMODE is done there, but 2K/XP clients do not set the DEVMODE... think
4470 about it and you will realize why. JRR 010720
4471 ****************************************************************************/
4473 static WERROR save_driver_init_2(NT_PRINTER_INFO_LEVEL *printer, uint8 *data, uint32 data_len )
4474 {
4480 /*
4481 * When the DEVMODE is already set on the printer, don't try to unpack it.
4482 */
4486 /*
4487 * Set devmode on printer info, so entire printer initialization can be
4488 * saved to tdb.
4489 */
4497 }
4501 /*
4502 * The DEVMODE is held in the 'data' component of the param in raw binary.
4503 * Convert it to to a devmode structure
4504 */
4509 }
4512 }
4514 /*
4515 * Pack up and add (or update) the DEVMODE and any current printer data to
4516 * a 'driver init' element in the tdb
4517 *
4518 */
4524 }
4526 /*
4527 * If driver initialization info was successfully saved, set the current
4528 * printer to match it. This allows initialization of the current printer
4529 * as well as the driver.
4530 */
4535 }
4537 done:
4544 }
4546 /****************************************************************************
4547 Update the driver init info (DEVMODE and specifics) for a printer
4548 ****************************************************************************/
4550 WERROR save_driver_init(NT_PRINTER_INFO_LEVEL *printer, uint32 level, uint8 *data, uint32 data_len)
4551 {
4561 }
4564 }
4566 /****************************************************************************
4567 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
4569 Previously the code had a memory allocation problem because it always
4570 used the TALLOC_CTX from the Printer_entry*. This context lasts
4571 as a long as the original handle is open. So if the client made a lot
4572 of getprinter[data]() calls, the memory usage would climb. Now we use
4573 a short lived TALLOC_CTX for printer_info_2 objects returned. We
4574 still use the Printer_entry->ctx for maintaining the cache copy though
4575 since that object must live as long as the handle by definition.
4576 --jerry
4578 ****************************************************************************/
4580 static WERROR get_a_printer_internal( Printer_entry *print_hnd, NT_PRINTER_INFO_LEVEL **pp_printer, uint32 level,
4582 {
4583 WERROR result;
4584 fstring servername;
4591 }
4599 }
4607 }
4612 /* we have a new printer now. Save it with this handle */
4619 }
4628 }
4631 }
4635 uint32 level,
4637 {
4640 }
4644 uint32 level,
4646 {
4649 }
4651 /****************************************************************************
4652 Deletes a NT_PRINTER_INFO_LEVEL struct.
4653 ****************************************************************************/
4656 {
4671 }
4676 }
4678 /****************************************************************************
4679 ****************************************************************************/
4685 {
4705 }
4719 }
4739 }
4742 }
4753 }
4756 if (r->info.info8->core_driver_dependencies && r->info.info8->core_driver_dependencies->string) {
4758 }
4764 }
4769 }
4773 }
4775 /****************************************************************************
4776 ****************************************************************************/
4782 {
4783 WERROR result;
4789 /* Sometime we just want any version of the driver */
4792 /* look for Win2k first and then for NT4 */
4794 driver,
4795 drivername,
4799 driver,
4800 drivername,
4802 }
4805 driver,
4806 drivername,
4807 architecture,
4808 version);
4809 }
4813 }
4815 /* falling back to lookup for old level 3 driver - gd */
4817 /* Sometime we just want any version of the driver */
4820 /* look for Win2k first and then for NT4 */
4823 drivername,
4828 drivername,
4830 }
4834 drivername,
4835 architecture,
4836 version);
4837 }
4841 }
4846 }
4862 }
4864 /****************************************************************************
4865 ****************************************************************************/
4868 {
4871 }
4874 /****************************************************************************
4875 Determine whether or not a particular driver is currently assigned
4876 to a printer
4877 ****************************************************************************/
4880 {
4888 }
4892 /* loop through the printers.tdb and check for the drivername */
4905 }
4911 WERROR werr;
4915 /* we can still remove the driver if there is one of
4916 "Windows NT x86" version 2 or 3 left */
4919 werr = get_a_printer_driver(talloc_tos(), &d, r->driver_name, "Windows NT x86", DRIVER_ANY_VERSION);
4920 }
4934 }
4935 }
4937 /* now check the error code */
4940 /* it's ok to remove the driver, we have other architctures left */
4943 }
4944 }
4946 /* report that the driver is not in use by default */
4949 }
4952 /**********************************************************************
4953 Check to see if a ogiven file is in use by *info
4954 *********************************************************************/
4957 {
4963 /* mz: skip files that are in the list but already deleted */
4966 }
4980 /* see of there are any dependent files to examine */
4988 i++;
4989 }
4993 }
4995 /**********************************************************************
4996 Utility function to remove the dependent file pointed to by the
4997 input parameter from the list
4998 *********************************************************************/
5001 {
5003 /* bump everything down a slot */
5007 idx++;
5008 }
5013 }
5015 /**********************************************************************
5016 Check if any of the files used by src are also used by drv
5017 *********************************************************************/
5022 {
5029 /* check each file. Remove it from the src structure if it overlaps */
5036 }
5043 }
5050 }
5057 }
5059 /* are there any dependentfiles to examine? */
5070 i++;
5071 }
5074 }
5076 /****************************************************************************
5077 Determine whether or not a particular driver files are currently being
5078 used by any other driver.
5080 Return value is True if any files were in use by other drivers
5081 and False otherwise.
5083 Upon return, *info has been modified to only contain the driver files
5084 which are not in use
5086 Fix from mz:
5088 This needs to check all drivers to ensure that all files in use
5089 have been removed from *info, not just the ones in the first
5090 match.
5091 ****************************************************************************/
5095 {
5098 uint32 version;
5108 /* loop over all driver versions */
5112 /* get the list of drivers */
5120 /* check each driver for overlap in files */
5127 if (!W_ERROR_IS_OK(get_a_printer_driver(talloc_tos(), &driver, list[i], info->architecture, version))) {
5130 }
5132 /* check if d2 uses any files from d1 */
5133 /* only if this is a different driver than the one being deleted */
5137 /* mz: Do not instantly return -
5138 * we need to ensure this file isn't
5139 * also in use by other drivers. */
5141 }
5142 }
5145 }
5152 }
5156 {
5158 NTSTATUS status;
5164 }
5170 }
5172 /****************************************************************************
5173 Actually delete the driver files. Make sure that
5174 printer_driver_files_in_use() return False before calling
5175 this.
5176 ****************************************************************************/
5180 {
5185 NTSTATUS nt_status;
5187 fstring printdollar;
5193 }
5203 }
5212 }
5217 }
5219 /* now delete the files; must strip the '\print$' string from
5220 fron of path */
5227 }
5228 }
5235 }
5236 }
5243 }
5244 }
5251 }
5252 }
5254 /* check if we are done removing files */
5260 /* bypass the "\print$" portion of the path */
5266 }
5268 i++;
5269 }
5270 }
5273 fail:
5275 done:
5279 }
5281 }
5283 /****************************************************************************
5284 Remove a printer driver from the TDB. This assumes that the the driver was
5285 previously looked up.
5286 ***************************************************************************/
5291 {
5295 TDB_DATA dbuf;
5297 /* delete the tdb data first */
5302 }
5307 }
5312 }
5317 /* check if the driver actually exists for this environment */
5321 /* ok... the driver exists so the delete should return success */
5327 }
5330 }
5334 /* ok... the driver exists so the delete should return success */
5340 }
5343 }
5348 }
5350 driver_deleted:
5351 /*
5352 * now delete any associated files if delete_files == True
5353 * even if this part failes, we return succes because the
5354 * driver doesn not exist any more
5355 */
5363 }
5365 /****************************************************************************
5366 Store a security desc for a printer.
5367 ****************************************************************************/
5370 {
5374 TDB_DATA kbuf;
5375 TDB_DATA dbuf;
5376 DATA_BLOB blob;
5377 WERROR status;
5378 NTSTATUS nt_status;
5384 /* The old owner and group sids of the security descriptor are not
5385 present when new ACEs are added or removed by changing printer
5386 permissions through NT. If they are NULL in the new security
5387 descriptor then copy them over from the old one. */
5398 }
5400 /* Pick out correct owner and group sids */
5418 /* Make a deep copy of the security descriptor */
5422 sacl,
5423 dacl,
5429 }
5432 }
5436 }
5438 /* Store the security descriptor in a tdb */
5445 }
5457 }
5459 /* Free malloc'ed memory */
5462 out:
5467 }
5469 /****************************************************************************
5470 Construct a default security descriptor buffer for a printer.
5471 ****************************************************************************/
5474 {
5481 DOM_SID adm_sid;
5484 /* Create an ACE where Everyone is allowed to print */
5490 /* Add the domain admins group if we are a DC */
5493 DOM_SID domadmins_sid;
5496 DOMAIN_GROUP_RID_ADMINS);
5504 }
5514 }
5516 /* add BUILTIN\Administrators as FULL CONTROL */
5523 SEC_ACE_TYPE_ACCESS_ALLOWED,
5526 /* Make the security descriptor owned by the BUILTIN\Administrators */
5528 /* The ACL revision number in rpc_secdesc.h differs from the one
5529 created by NT when setting ACE entries in printer
5530 descriptors. NT4 complains about the property being edited by a
5531 NT5 machine. */
5538 }
5543 }
5551 }
5553 /****************************************************************************
5554 Get a security desc for a printer.
5555 ****************************************************************************/
5558 {
5559 TDB_DATA kbuf;
5560 TDB_DATA dbuf;
5561 DATA_BLOB blob;
5563 NTSTATUS status;
5567 }
5569 /* Fetch security descriptor from tdb */
5577 secdesc_ctr);
5582 }
5583 }
5588 }
5597 }
5599 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
5600 this security descriptor has been created when winbindd was
5601 down. Take ownership of security descriptor. */
5604 DOM_SID owner_sid;
5606 /* Change sd owner to workgroup administrator */
5613 /* Create new sd */
5626 }
5631 }
5633 /* Swap with other one */
5637 /* Set it */
5640 }
5641 }
5655 }
5656 }
5659 }
5661 /* error code:
5662 0: everything OK
5663 1: level not implemented
5664 2: file doesn't exist
5665 3: can't allocate memory
5666 4: can't free memory
5667 5: non existant struct
5668 */
5670 /*
5671 A printer and a printer driver are 2 different things.
5672 NT manages them separatelly, Samba does the same.
5673 Why ? Simply because it's easier and it makes sense !
5675 Now explanation: You have 3 printers behind your samba server,
5676 2 of them are the same make and model (laser A and B). But laser B
5677 has an 3000 sheet feeder and laser A doesn't such an option.
5678 Your third printer is an old dot-matrix model for the accounting :-).
5680 If the /usr/local/samba/lib directory (default dir), you will have
5681 5 files to describe all of this.
5683 3 files for the printers (1 by printer):
5684 NTprinter_laser A
5685 NTprinter_laser B
5686 NTprinter_accounting
5687 2 files for the drivers (1 for the laser and 1 for the dot matrix)
5688 NTdriver_printer model X
5689 NTdriver_printer model Y
5691 jfm: I should use this comment for the text file to explain
5692 same thing for the forms BTW.
5693 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
5695 */
5697 /* Convert generic access rights to printer object specific access rights.
5698 It turns out that NT4 security descriptors use generic access rights and
5699 NT5 the object specific ones. */
5702 {
5708 }
5709 }
5712 {
5718 }
5719 }
5722 /****************************************************************************
5723 Check a user has permissions to perform the given operation. We use the
5724 permission constants defined in include/rpc_spoolss.h to check the various
5725 actions we perform when checking printer access.
5727 PRINTER_ACCESS_ADMINISTER:
5728 print_queue_pause, print_queue_resume, update_printer_sec,
5729 update_printer, spoolss_addprinterex_level_2,
5730 _spoolss_setprinterdata
5732 PRINTER_ACCESS_USE:
5733 print_job_start
5735 JOB_ACCESS_ADMINISTER:
5736 print_job_delete, print_job_pause, print_job_resume,
5737 print_queue_purge
5739 Try access control in the following order (for performance reasons):
5740 1) root and SE_PRINT_OPERATOR can do anything (easy check)
5741 2) check security descriptor (bit comparisons in memory)
5742 3) "printer admins" (may result in numerous calls to winbind)
5744 ****************************************************************************/
5747 {
5749 uint32 access_granted;
5750 NTSTATUS status;
5755 /* If user is NULL then use the current_user structure */
5757 /* Always allow root or SE_PRINT_OPERATROR to do anything */
5762 }
5764 /* Get printer name */
5771 }
5773 /* Get printer security descriptor */
5778 }
5784 }
5789 /* Create a child security descriptor to check permissions
5790 against. This is because print jobs are child objects
5791 objects of a printer. */
5799 }
5804 }
5806 /* Check access */
5812 /* see if we need to try the printer admin list */
5820 }
5826 }
5829 }
5831 /****************************************************************************
5832 Check the time parameters allow a print operation.
5833 *****************************************************************************/
5836 {
5841 uint32 mins;
5861 }
5863 /****************************************************************************
5864 Fill in the servername sent in the _spoolss_open_printer_ex() call
5865 ****************************************************************************/
5868 {
5870 }