| blob | 7c5e1e115adf9dc492e5eb90109f294d62132d74 |
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
5 Copyright (C) 2002 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2004,2008 Guenther Deschner (gd@samba.org)
7 Copyright (C) 2005 Jeremy Allison (jra@samba.org)
8 Copyright (C) 2006 Jelmer Vernooij (jelmer@samba.org)
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>. */
53 /**
54 * @file net_rpc.c
55 *
56 * @brief RPC based subcommands for the 'net' utility.
57 *
58 * This file should contain much of the functionality that used to
59 * be found in rpcclient, execpt that the commands should change
60 * less often, and the fucntionality should be sane (the user is not
61 * expected to know a rid/sid before they conduct an operation etc.)
62 *
63 * @todo Perhaps eventually these should be split out into a number
64 * of files, as this could get quite big.
65 **/
68 /**
69 * Many of the RPC functions need the domain sid. This function gets
70 * it at the start of every run
71 *
72 * @param cli A cli_state already connected to the remote machine
73 *
74 * @return The Domain SID of the remote machine.
75 **/
80 {
92 }
97 SEC_FLAG_MAXIMUM_ALLOWED,
104 }
108 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
116 }
122 }
131 }
133 /**
134 * Run a single RPC command, from start to finish.
135 *
136 * @param pipe_name the pipe to connect to (usually a PIPE_ constant)
137 * @param conn_flag a NET_FLAG_ combination. Passed to
138 * net_make_ipc_connection.
139 * @param argc Standard main() style argc.
140 * @param argv Standard main() style argv. Initial components are already
141 * stripped.
142 * @return A shell status integer (0 for success).
143 */
149 rpc_command_fn fn,
152 {
156 NTSTATUS nt_status;
161 /* make use of cli_state handed over as an argument, if possible */
168 }
171 }
175 }
177 /* Create mem_ctx */
182 }
188 }
194 /* Always try and create an schannel netlogon pipe. */
203 }
210 DCERPC_AUTH_TYPE_NTLMSSP,
211 DCERPC_AUTH_LEVEL_PRIVACY,
219 }
225 }
226 }
227 }
236 }
241 }
242 }
244 fail:
245 /* close the connection only if it was opened here */
248 }
252 }
254 /**
255 * Force a change of the trust acccount password.
256 *
257 * All parameters are provided by the run_rpc_command function, except for
258 * argc, argv which are passed through.
259 *
260 * @param domain_sid The domain sid acquired from the remote server.
261 * @param cli A cli_state connected to the server.
262 * @param mem_ctx Talloc context, destroyed on completion of the function.
263 * @param argc Standard main() style argc.
264 * @param argv Standard main() style argv. Initial components are already
265 * stripped.
266 *
267 * @return Normal NTSTATUS return.
268 **/
278 {
279 NTSTATUS status;
286 }
289 }
291 /**
292 * Force a change of the trust acccount password.
293 *
294 * @param argc Standard main() style argc.
295 * @param argv Standard main() style argv. Initial components are already
296 * stripped.
297 *
298 * @return A shell status integer (0 for success).
299 **/
302 {
310 }
314 rpc_changetrustpw_internals,
316 }
318 /**
319 * Join a domain, the old way. This function exists to allow
320 * the message to be displayed when oldjoin was explicitly
321 * requested, but not when it was implied by "net rpc join".
322 *
323 * This uses 'machinename' as the inital password, and changes it.
324 *
325 * The password should be created with 'server manager' or equiv first.
326 *
327 * @param argc Standard main() style argc.
328 * @param argv Standard main() style argv. Initial components are already
329 * stripped.
330 *
331 * @return A shell status integer (0 for success).
332 **/
335 {
338 WERROR werr;
349 }
354 }
359 }
361 /*
362 check what type of join - if the user want's to join as
363 a BDC, the server must agree that we are a BDC.
364 */
369 }
376 }
382 }
393 }
397 WKSSVC_JOIN_FLAGS_JOIN_UNSECURE |
398 WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED;
403 }
405 /* Check the short name of the domain */
413 }
423 }
429 fail:
432 }
434 /* issue an overall failure message at the end. */
439 cleanup:
443 }
445 /**
446 * check that a join is OK
447 *
448 * @return A shell status integer (0 for success)
449 *
450 **/
452 {
453 NTSTATUS status;
463 }
468 }
478 }
482 domain,
483 NULL,
484 NULL,
485 DS_RETURN_DNS_NAME,
490 }
493 }
495 /* Display success or failure */
503 }
509 }
511 /**
512 * Join a domain using the administrator username and password
513 *
514 * @param argc Standard main() style argc
515 * @param argc Standard main() style argv. Initial components are already
516 * stripped. Currently not used.
517 * @return A shell status integer (0 for success)
518 *
519 **/
522 {
525 WERROR werr;
535 }
540 }
545 }
547 /*
548 check what type of join - if the user want's to join as
549 a BDC, the server must agree that we are a BDC.
550 */
555 }
562 }
574 WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE |
575 WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED;
580 }
582 /* Check the short name of the domain */
590 }
600 }
606 fail:
607 /* issue an overall failure message at the end. */
615 }
617 /**
618 * 'net rpc join' entrypoint.
619 * @param argc Standard main() style argc.
620 * @param argv Standard main() style argv. Initial components are already
621 * stripped
622 *
623 * Main 'net_rpc_join()' (where the admin username/password is used) is
624 * in net_rpc_join.c.
625 * Try to just change the password, but if that doesn't work, use/prompt
626 * for a username/password.
627 **/
630 {
646 }
651 }
658 }
665 }
668 }
670 /**
671 * display info about a rpc domain
672 *
673 * All parameters are provided by the run_rpc_command function, except for
674 * argc, argv which are passed through.
675 *
676 * @param domain_sid The domain sid acquired from the remote server
677 * @param cli A cli_state connected to the server.
678 * @param mem_ctx Talloc context, destroyed on completion of the function.
679 * @param argc Standard main() style argc.
680 * @param argv Standard main() style argv. Initial components are already
681 * stripped.
682 *
683 * @return Normal NTSTATUS return.
684 **/
694 {
698 fstring sid_str;
703 /* Get sam policy handle */
706 MAXIMUM_ALLOWED_ACCESS,
713 }
720 }
722 /* Get domain policy handle */
725 MAXIMUM_ALLOWED_ACCESS,
733 }
739 }
748 }
759 }
761 done:
763 }
765 /**
766 * 'net rpc info' entrypoint.
767 * @param argc Standard main() style argc.
768 * @param argv Standard main() style argv. Initial components are already
769 * stripped.
770 **/
773 {
781 }
786 }
788 /**
789 * Fetch domain SID into the local secrets.tdb.
790 *
791 * All parameters are provided by the run_rpc_command function, except for
792 * argc, argv which are passed through.
793 *
794 * @param domain_sid The domain sid acquired from the remote server.
795 * @param cli A cli_state connected to the server.
796 * @param mem_ctx Talloc context, destroyed on completion of the function.
797 * @param argc Standard main() style argc.
798 * @param argv Standard main() style argv. Initial components are already
799 * stripped.
800 *
801 * @return Normal NTSTATUS return.
802 **/
812 {
813 fstring sid_str;
822 }
825 }
827 /**
828 * 'net rpc getsid' entrypoint.
829 * @param argc Standard main() style argc.
830 * @param argv Standard main() style argv. Initial components are already
831 * stripped.
832 **/
835 {
840 }
849 }
852 conn_flags,
853 rpc_getsid_internals,
855 }
857 /****************************************************************************/
859 /**
860 * Basic usage function for 'net rpc user'.
861 * @param argc Standard main() style argc.
862 * @param argv Standard main() style argv. Initial components are already
863 * stripped.
864 **/
867 {
869 }
871 /**
872 * Add a new user to a remote RPC server.
873 *
874 * @param argc Standard main() style argc.
875 * @param argv Standard main() style argv. Initial components are already
876 * stripped.
877 *
878 * @return A shell status integer (0 for success).
879 **/
882 {
883 NET_API_STATUS status;
890 }
897 }
904 status));
908 }
911 }
913 /**
914 * Rename a user on a remote RPC server.
915 *
916 * @param argc Standard main() style argc.
917 * @param argv Standard main() style argv. Initial components are already
918 * stripped.
919 *
920 * @return A shell status integer (0 for success).
921 **/
924 {
925 NET_API_STATUS status;
932 }
945 }
948 }
950 /**
951 * Set a user's primary group
952 *
953 * @param argc Standard main() style argc.
954 * @param argv Standard main() style argv. Initial components are already
955 * stripped.
956 *
957 * @return A shell status integer (0 for success).
958 **/
962 {
963 NET_API_STATUS status;
972 }
980 }
997 }
999 }
1001 /**
1002 * Delete a user from a remote RPC server.
1003 *
1004 * @param argc Standard main() style argc.
1005 * @param argv Standard main() style argv. Initial components are already
1006 * stripped.
1007 *
1008 * @return A shell status integer (0 for success).
1009 **/
1012 {
1013 NET_API_STATUS status;
1018 }
1029 }
1032 }
1034 /**
1035 * Set a user's password on a remote RPC server.
1036 *
1037 * @param argc Standard main() style argc.
1038 * @param argv Standard main() style argv. Initial components are already
1039 * stripped.
1040 *
1041 * @return A shell status integer (0 for success).
1042 **/
1045 {
1046 NET_API_STATUS status;
1055 }
1065 }
1071 }
1076 }
1077 }
1081 /* Display results */
1086 status));
1088 }
1091 }
1093 /**
1094 * List a user's groups from a remote RPC server.
1095 *
1096 * @param argc Standard main() style argc.
1097 * @param argv Standard main() style argv. Initial components are already
1098 * stripped.
1099 *
1100 * @return A shell status integer (0 for success)
1101 **/
1105 {
1106 NET_API_STATUS status;
1116 }
1129 status));
1131 }
1135 u0++;
1136 }
1139 }
1141 /**
1142 * List users on a remote RPC server.
1143 *
1144 * All parameters are provided by the run_rpc_command function, except for
1145 * argc, argv which are passed through.
1146 *
1147 * @param domain_sid The domain sid acquired from the remote server.
1148 * @param cli A cli_state connected to the server.
1149 * @param mem_ctx Talloc context, destroyed on completion of the function.
1150 * @param argc Standard main() style argc.
1151 * @param argv Standard main() style argv. Initial components are already
1152 * stripped.
1153 *
1154 * @return Normal NTSTATUS return.
1155 **/
1158 {
1159 NET_API_STATUS status;
1164 /* Query domain users */
1176 start_idx,
1177 max_entries,
1178 max_size,
1183 }
1192 else
1194 info++;
1195 }
1199 loop_count++;
1205 }
1207 /**
1208 * 'net rpc user' entrypoint.
1209 * @param argc Standard main() style argc.
1210 * @param argv Standard main() style argv. Initial components are already
1211 * stripped.
1212 **/
1215 {
1216 NET_API_STATUS status;
1219 {
1221 rpc_user_add,
1222 NET_TRANSPORT_RPC,
1226 },
1227 {
1229 rpc_user_info,
1230 NET_TRANSPORT_RPC,
1234 },
1235 {
1237 rpc_user_delete,
1238 NET_TRANSPORT_RPC,
1242 },
1243 {
1245 rpc_user_password,
1246 NET_TRANSPORT_RPC,
1250 },
1251 {
1253 rpc_user_rename,
1254 NET_TRANSPORT_RPC,
1258 },
1259 {
1261 rpc_user_setprimarygroup,
1262 NET_TRANSPORT_RPC,
1265 " Set a user's primary group"
1266 },
1268 };
1273 }
1278 }
1289 }
1292 }
1295 }
1302 {
1304 }
1311 {
1313 }
1327 {
1331 uint32 rid;
1339 }
1351 }
1358 }
1364 }
1368 MAXIMUM_ALLOWED_ACCESS,
1373 }
1377 }
1381 MAXIMUM_ALLOWED_ACCESS,
1387 }
1391 }
1395 MAXIMUM_ALLOWED_ACCESS,
1396 rid,
1401 }
1405 }
1409 done:
1412 }
1415 }
1418 }
1420 }
1428 {
1437 }
1440 user_hnd,
1446 }
1449 }
1456 }
1463 {
1465 rpc_sh_user_show_internals);
1466 }
1468 #define FETCHSTR(name, rec) \
1469 do { if (strequal(ctx->thiscmd, name)) { \
1470 oldval = talloc_strdup(mem_ctx, info->info21.rec.string); } \
1471 } while (0);
1473 #define SETSTR(name, rec, flag) \
1474 do { if (strequal(ctx->thiscmd, name)) { \
1475 init_lsa_String(&(info->info21.rec), argv[0]); \
1476 info->info21.fields_present |= SAMR_FIELD_##flag; } \
1477 } while (0);
1485 {
1496 }
1499 user_hnd,
1505 }
1508 }
1522 }
1526 }
1538 user_hnd,
1540 info,
1544 }
1551 done:
1554 }
1556 #define HANDLEFLG(name, rec) \
1557 do { if (strequal(ctx->thiscmd, name)) { \
1559 if (newval) { \
1560 newflags = oldflags | ACB_##rec; \
1561 } else { \
1562 newflags = oldflags & ~ACB_##rec; \
1563 } } } while (0);
1570 {
1572 rpc_sh_user_str_edit_internals);
1573 }
1581 {
1593 /* TRANSATORS: The yes|no here are program keywords. Please do
1594 not translate. */
1598 }
1603 user_hnd,
1609 }
1612 }
1625 oldval);
1627 }
1635 user_hnd,
1637 info,
1641 }
1646 }
1648 done:
1651 }
1658 {
1660 rpc_sh_user_flag_edit_internals);
1661 }
1666 {
1700 };
1703 }
1708 {
1724 };
1727 }
1729 /****************************************************************************/
1731 /**
1732 * Basic usage function for 'net rpc group'.
1733 * @param argc Standard main() style argc.
1734 * @param argv Standard main() style argv. Initial components are already
1735 * stripped.
1736 **/
1739 {
1741 }
1743 /**
1744 * Delete group on a remote RPC server.
1745 *
1746 * All parameters are provided by the run_rpc_command function, except for
1747 * argc, argv which are passed through.
1748 *
1749 * @param domain_sid The domain sid acquired from the remote server.
1750 * @param cli A cli_state connected to the server.
1751 * @param mem_ctx Talloc context, destroyed on completion of the function.
1752 * @param argc Standard main() style argc.
1753 * @param argv Standard main() style argv. Initial components are already
1754 * stripped.
1755 *
1756 * @return Normal NTSTATUS return.
1757 **/
1767 {
1773 /* char **names; */
1775 /* struct samr_RidWithAttribute *user_gids; */
1785 }
1789 MAXIMUM_ALLOWED_ACCESS,
1795 }
1801 }
1805 MAXIMUM_ALLOWED_ACCESS,
1812 }
1818 }
1832 }
1838 }
1841 {
1845 MAXIMUM_ALLOWED_ACCESS,
1852 }
1858 }
1871 }
1879 }
1885 }
1887 /* Check if group is anyone's primary group */
1889 {
1892 MAXIMUM_ALLOWED_ACCESS,
1901 }
1909 }
1922 }
1931 }
1938 }
1940 }
1943 }
1947 "some of it's members have it as primary "
1951 }
1953 /* remove all group members */
1955 {
1965 }
1974 }
1975 }
1982 }
1987 /* removing a local group is easier... */
1991 MAXIMUM_ALLOWED_ACCESS,
1998 }
2003 }
2010 }
2021 }
2030 }
2032 done:
2035 }
2038 {
2041 }
2044 {
2045 NET_API_STATUS status;
2052 }
2059 }
2067 status));
2071 }
2074 }
2077 {
2078 NET_API_STATUS status;
2085 }
2092 }
2100 status));
2104 }
2107 }
2110 {
2115 }
2122 {
2134 }
2143 }
2151 }
2155 done:
2158 }
2162 /* Try as S-1-5-whatever */
2170 }
2171 }
2174 }
2180 {
2183 uint32 group_rid;
2196 }
2198 /* Get sam policy handle */
2201 MAXIMUM_ALLOWED_ACCESS,
2206 }
2209 }
2211 /* Get domain policy handle */
2214 MAXIMUM_ALLOWED_ACCESS,
2220 }
2223 }
2236 member);
2238 }
2243 member);
2245 }
2249 MAXIMUM_ALLOWED_ACCESS,
2250 group_rid,
2255 }
2260 }
2269 }
2273 done:
2276 }
2283 {
2286 uint32 alias_rid;
2299 }
2306 member);
2308 }
2310 /* Get sam policy handle */
2313 MAXIMUM_ALLOWED_ACCESS,
2318 }
2322 }
2324 /* Get domain policy handle */
2327 MAXIMUM_ALLOWED_ACCESS,
2333 }
2337 }
2341 MAXIMUM_ALLOWED_ACCESS,
2342 alias_rid,
2347 }
2350 }
2358 }
2362 done:
2365 }
2375 {
2387 }
2394 }
2403 }
2405 }
2414 }
2416 }
2422 }
2425 {
2427 rpc_group_addmem_internals,
2429 }
2436 {
2439 uint32 group_rid;
2453 /* Get sam policy handle */
2456 MAXIMUM_ALLOWED_ACCESS,
2461 }
2464 }
2467 /* Get domain policy handle */
2470 MAXIMUM_ALLOWED_ACCESS,
2476 }
2479 }
2492 member);
2494 }
2499 member);
2501 }
2505 MAXIMUM_ALLOWED_ACCESS,
2506 group_rid,
2511 }
2515 }
2523 }
2526 done:
2529 }
2536 {
2539 uint32 alias_rid;
2558 member);
2560 }
2562 /* Get sam policy handle */
2565 MAXIMUM_ALLOWED_ACCESS,
2570 }
2574 }
2576 /* Get domain policy handle */
2579 MAXIMUM_ALLOWED_ACCESS,
2585 }
2589 }
2593 MAXIMUM_ALLOWED_ACCESS,
2594 alias_rid,
2599 }
2603 }
2612 }
2616 done:
2619 }
2629 {
2641 }
2648 }
2657 }
2659 }
2668 }
2670 }
2676 }
2679 {
2681 rpc_group_delmem_internals,
2683 }
2685 /**
2686 * List groups on a remote RPC server.
2687 *
2688 * All parameters are provided by the run_rpc_command function, except for
2689 * argc, argv which are passes through.
2690 *
2691 * @param domain_sid The domain sid acquired from the remote server.
2692 * @param cli A cli_state connected to the server.
2693 * @param mem_ctx Talloc context, destroyed on completion of the function.
2694 * @param argc Standard main() style argc.
2695 * @param argv Standard main() style argv. Initial components are already
2696 * stripped.
2697 *
2698 * @return Normal NTSTATUS return.
2699 **/
2709 {
2727 " If none of global, local or builtin is "
2728 "specified, all three options are considered "
2731 }
2737 }
2748 }
2750 /* Get sam policy handle */
2754 MAXIMUM_ALLOWED_ACCESS,
2759 }
2763 }
2765 /* Get domain policy handle */
2769 MAXIMUM_ALLOWED_ACCESS,
2775 }
2779 }
2781 /* Query domain groups */
2797 start_idx,
2798 max_entries,
2799 max_size,
2806 }
2825 else
2827 }
2829 /* query domain aliases */
2843 }
2856 NTSTATUS _result;
2876 }
2877 }
2878 }
2879 }
2884 description);
2887 }
2888 }
2891 /* Get builtin policy handle */
2895 MAXIMUM_ALLOWED_ACCESS,
2901 }
2905 }
2907 /* query builtin aliases */
2916 max_entries,
2921 }
2926 }
2936 NTSTATUS _result;
2956 }
2957 }
2958 }
2959 }
2964 description);
2967 }
2968 }
2973 done:
2975 }
2978 {
2980 rpc_group_list_internals,
2982 }
2990 uint32 rid)
2991 {
3001 fstring sid_str;
3005 domain_pol,
3006 MAXIMUM_ALLOWED_ACCESS,
3007 rid,
3012 }
3015 }
3023 }
3026 }
3038 domain_pol,
3039 this_time,
3040 group_rids,
3046 }
3049 }
3051 /* We only have users as members, but make the output
3052 the same as the output of alias members */
3060 SID_NAME_USER);
3064 }
3065 }
3069 }
3072 }
3079 uint32 rid)
3080 {
3084 uint32 num_members;
3094 domain_pol,
3095 MAXIMUM_ALLOWED_ACCESS,
3096 rid,
3101 }
3104 }
3113 }
3117 }
3123 }
3132 }
3141 }
3148 }
3152 }
3163 }
3166 fstring sid_str;
3176 else
3178 }
3179 }
3183 }
3193 {
3200 /* Get sam policy handle */
3204 MAXIMUM_ALLOWED_ACCESS,
3209 }
3212 }
3214 /* Get domain policy handle */
3218 MAXIMUM_ALLOWED_ACCESS,
3224 }
3227 }
3240 }
3244 /* Ok, did not find it in the global sam, try with builtin */
3254 MAXIMUM_ALLOWED_ACCESS,
3260 }
3265 }
3276 }
3281 }
3282 }
3288 }
3294 }
3299 }
3302 }
3305 {
3308 }
3311 rpc_group_members_internals,
3313 }
3316 {
3317 NET_API_STATUS status;
3325 }
3338 status));
3340 }
3343 }
3346 {
3349 }
3352 }
3354 /**
3355 * 'net rpc group' entrypoint.
3356 * @param argc Standard main() style argc.
3357 * @param argv Standard main() style argv. Initial components are already
3358 * stripped.
3359 **/
3362 {
3363 NET_API_STATUS status;
3366 {
3368 rpc_group_add,
3369 NET_TRANSPORT_RPC,
3373 },
3374 {
3376 rpc_group_delete,
3377 NET_TRANSPORT_RPC,
3381 },
3382 {
3384 rpc_group_addmem,
3385 NET_TRANSPORT_RPC,
3389 },
3390 {
3392 rpc_group_delmem,
3393 NET_TRANSPORT_RPC,
3397 },
3398 {
3400 rpc_group_list,
3401 NET_TRANSPORT_RPC,
3405 },
3406 {
3408 rpc_group_members,
3409 NET_TRANSPORT_RPC,
3413 },
3414 {
3416 rpc_group_rename,
3417 NET_TRANSPORT_RPC,
3421 },
3423 };
3428 }
3433 }
3439 " Alias for net rpc group list global "
3443 }
3446 rpc_group_list_internals,
3448 }
3451 }
3453 /****************************************************************************/
3456 {
3458 }
3460 /**
3461 * Add a share on a remote RPC server.
3462 *
3463 * @param argc Standard main() style argc.
3464 * @param argv Standard main() style argv. Initial components are already
3465 * stripped.
3466 *
3467 * @return A shell status integer (0 for success).
3468 **/
3471 {
3472 NET_API_STATUS status;
3483 }
3487 }
3492 }
3512 }
3515 }
3517 /**
3518 * Delete a share on a remote RPC server.
3519 *
3520 * @param domain_sid The domain sid acquired from the remote server.
3521 * @param argc Standard main() style argc.
3522 * @param argv Standard main() style argv. Initial components are already
3523 * stripped.
3524 *
3525 * @return A shell status integer (0 for success).
3526 **/
3528 {
3531 }
3534 }
3536 /**
3537 * Formatted print of share info
3538 *
3539 * @param r pointer to SHARE_INFO_1 to format
3540 **/
3544 {
3552 }
3553 }
3558 uint32 level,
3562 {
3563 WERROR result;
3564 NTSTATUS status;
3568 /* no specific share requested, enumerate all */
3579 info_ctr,
3580 preferred_len,
3586 }
3588 }
3590 /* request just one share */
3594 level,
3601 }
3605 }
3607 /* construct ctr */
3614 {
3626 }
3628 {
3640 }
3642 {
3654 }
3656 done:
3658 }
3660 /***
3661 * 'net rpc share list' entrypoint.
3662 * @param argc Standard main() style argc.
3663 * @param argv Standard main() style argv. Initial components are already
3664 * stripped.
3665 **/
3667 {
3668 NET_API_STATUS status;
3682 }
3685 level,
3693 }
3695 /* Display results */
3702 }
3705 done:
3707 }
3710 {
3711 NTSTATUS status;
3717 }
3723 }
3726 }
3730 {
3731 /* only support disk shares */
3734 type);
3736 }
3738 /* skip builtin shares */
3739 /* FIXME: should print$ be added too ? */
3747 }
3750 }
3752 /**
3753 * Migrate shares from a remote RPC server to the local RPC server.
3754 *
3755 * All parameters are provided by the run_rpc_command function, except for
3756 * argc, argv which are passed through.
3757 *
3758 * @param domain_sid The domain sid acquired from the remote server.
3759 * @param cli A cli_state connected to the server.
3760 * @param mem_ctx Talloc context, destroyed on completion of the function.
3761 * @param argc Standard main() style argc.
3762 * @param argv Standard main() style argv. Initial components are already
3763 * stripped.
3764 *
3765 * @return Normal NTSTATUS return.
3766 **/
3776 {
3777 WERROR result;
3780 uint32 i;
3792 /* connect destination PI_SRVSVC */
3806 /* reset error-code */
3812 /* finally add the share on the dst server */
3830 }
3835 }
3842 }
3844 }
3848 done:
3851 }
3855 }
3857 /**
3858 * Migrate shares from a RPC server to another.
3859 *
3860 * @param argc Standard main() style argc.
3861 * @param argv Standard main() style argv. Initial components are already
3862 * stripped.
3863 *
3864 * @return A shell status integer (0 for success).
3865 **/
3868 {
3876 }
3881 }
3884 rpc_share_migrate_shares_internals,
3886 }
3888 /**
3889 * Copy a file/dir
3890 *
3891 * @param f file_info
3892 * @param mask current search mask
3893 * @param state arg-pointer
3894 *
3895 **/
3898 {
3902 fstring dir;
3916 /* DIRECTORY */
3926 {
3928 /* create that directory */
3941 }
3947 }
3949 /* search below that directory */
3952 }
3955 }
3962 }
3966 }
3969 /* FILE */
3977 {
3990 net_mode_share);
3992 }
3998 }
4000 /**
4001 * sync files, can be called recursivly to list files
4002 * and then call copy_fn for each file
4003 *
4004 * @param cp_clistate pointer to the copy_clistate we work with
4005 * @param mask the current search mask
4006 *
4007 * @return Boolean result
4008 **/
4010 {
4013 NTSTATUS status;
4025 }
4032 }
4035 }
4038 /**
4039 * Set the top level directory permissions before we do any further copies.
4040 * Should set up ACL inheritance.
4041 **/
4046 {
4065 }
4072 }
4075 }
4077 /**
4078 * Sync all files inside a remote share to another share (over smb).
4079 *
4080 * All parameters are provided by the run_rpc_command function, except for
4081 * argc, argv which are passed through.
4082 *
4083 * @param domain_sid The domain sid acquired from the remote server.
4084 * @param cli A cli_state connected to the server.
4085 * @param mem_ctx Talloc context, destroyed on completion of the function.
4086 * @param argc Standard main() style argc.
4087 * @param argv Standard main() style argv. Initial components are already
4088 * stripped.
4089 *
4090 * @return Normal NTSTATUS return.
4091 **/
4101 {
4102 WERROR result;
4105 uint32 i;
4117 }
4133 /* one might not want to mirror whole discs :) */
4138 }
4141 {
4147 net_mode_share);
4149 }
4161 cp_clistate.attribute = FILE_ATTRIBUTE_SYSTEM | FILE_ATTRIBUTE_HIDDEN | FILE_ATTRIBUTE_DIRECTORY;
4164 /* open share source */
4175 /* open share destination */
4182 }
4186 "directory permissions for the "
4190 }
4197 }
4198 }
4202 done:
4213 }
4216 {
4224 }
4229 }
4232 rpc_share_migrate_files_internals,
4234 }
4236 /**
4237 * Migrate share-ACLs from a remote RPC server to the local RPC server.
4238 *
4239 * All parameters are provided by the run_rpc_command function, except for
4240 * argc, argv which are passed through.
4241 *
4242 * @param domain_sid The domain sid acquired from the remote server.
4243 * @param cli A cli_state connected to the server.
4244 * @param mem_ctx Talloc context, destroyed on completion of the function.
4245 * @param argc Standard main() style argc.
4246 * @param argv Standard main() style argv. Initial components are already
4247 * stripped.
4248 *
4249 * @return Normal NTSTATUS return.
4250 **/
4260 {
4261 WERROR result;
4265 uint32 i;
4278 /* connect destination PI_SRVSVC */
4291 /* reset error-code */
4304 /* FIXME: shouldn't we be able to just set the security descriptor ? */
4307 /* finally modify the share on the dst server */
4311 level,
4319 }
4325 }
4327 }
4331 done:
4334 }
4338 }
4340 /**
4341 * Migrate share-acls from a RPC server to another.
4342 *
4343 * @param argc Standard main() style argc.
4344 * @param argv Standard main() style argv. Initial components are already
4345 * stripped.
4346 *
4347 * @return A shell status integer (0 for success).
4348 **/
4351 {
4359 }
4364 }
4367 rpc_share_migrate_security_internals,
4369 }
4371 /**
4372 * Migrate shares (including share-definitions, share-acls and files with acls/attrs)
4373 * from one server to another.
4374 *
4375 * @param argc Standard main() style argc.
4376 * @param argv Standard main() style argv. Initial components are already
4377 * stripped.
4378 *
4379 * @return A shell status integer (0 for success).
4380 *
4381 **/
4384 {
4394 }
4399 }
4401 /* order is important. we don't want to be locked out by the share-acl
4402 * before copying files - gd */
4416 argv);
4417 }
4420 /**
4421 * 'net rpc share migrate' entrypoint.
4422 * @param argc Standard main() style argc.
4423 * @param argv Standard main() style argv. Initial components are already
4424 * stripped.
4425 **/
4427 {
4430 {
4432 rpc_share_migrate_all,
4433 NET_TRANSPORT_RPC,
4437 },
4438 {
4440 rpc_share_migrate_files,
4441 NET_TRANSPORT_RPC,
4445 },
4446 {
4448 rpc_share_migrate_security,
4449 NET_TRANSPORT_RPC,
4453 },
4454 {
4456 rpc_share_migrate_shares,
4457 NET_TRANSPORT_RPC,
4461 },
4463 };
4468 }
4472 uint32 num_members;
4474 };
4479 /*
4480 * Add an alias to the static list.
4481 */
4483 {
4489 }
4491 /*
4492 * For a specific domain on the server, fetch all the aliases
4493 * and their members. Add all of them to the server_aliases.
4494 */
4500 {
4507 /* Get domain policy handle */
4510 connect_pol,
4511 MAXIMUM_ALLOWED_ACCESS,
4517 }
4520 }
4530 max_entries,
4535 }
4542 NTSTATUS _result;
4546 MAXIMUM_ALLOWED_ACCESS,
4552 }
4556 }
4564 }
4568 }
4575 }
4579 }
4589 }
4595 }
4600 done:
4604 }
4606 /*
4607 * Dump server_aliases as names for debugging purposes.
4608 */
4618 {
4620 NTSTATUS result;
4625 SEC_FLAG_MAXIMUM_ALLOWED,
4649 }
4665 }
4670 }
4672 /*
4673 * Fetch a list of all server aliases and their members into
4674 * server_aliases.
4675 */
4685 {
4692 MAXIMUM_ALLOWED_ACCESS,
4697 }
4701 }
4707 }
4710 domain_sid);
4713 done:
4715 }
4718 {
4725 }
4731 }
4734 {
4736 }
4739 {
4746 }
4751 }
4754 fstring name;
4756 };
4759 {
4766 }
4767 }
4770 {
4776 }
4779 }
4782 {
4788 }
4789 }
4791 /*
4792 * We got a user token with all the SIDs we can know about without asking the
4793 * server directly. These are the user and domain group sids. All of these can
4794 * be members of aliases. So scan the list of aliases for each of the SIDs and
4795 * add them to the token.
4796 */
4799 {
4805 }
4806 }
4809 {
4812 fstring full_name;
4823 /* First let's find out the user sid */
4831 }
4838 }
4843 }
4847 /* And now the groups winbind knows about */
4854 }
4867 }
4878 }
4880 }
4884 }
4886 /**
4887 * Get a list of all user tokens we want to look at
4888 **/
4892 {
4904 }
4906 /* Send request to winbind daemon */
4913 }
4921 }
4944 }
4946 }
4949 }
4957 }
4962 {
4966 fstring line;
4970 }
4974 }
4977 /* We have a SID */
4984 }
4989 }
4993 }
4995 /* And a new user... */
5002 }
5008 }
5012 }
5015 }
5018 /*
5019 * Show the list of all users that have access to a share
5020 */
5028 {
5034 WERROR result;
5035 NTSTATUS status;
5036 uint16 cnum;
5041 netname,
5048 netname));
5050 }
5055 netname));
5056 }
5062 }
5067 }
5070 uint32 acc_granted;
5081 }
5082 }
5087 }
5095 }
5097 }
5105 }
5107 /**
5108 * List shares on a remote RPC server, including the security descriptors.
5109 *
5110 * All parameters are provided by the run_rpc_command function, except for
5111 * argc, argv which are passed through.
5112 *
5113 * @param domain_sid The domain sid acquired from the remote server.
5114 * @param cli A cli_state connected to the server.
5115 * @param mem_ctx Talloc context, destroyed on completion of the function.
5116 * @param argc Standard main() style argc.
5117 * @param argv Standard main() style argv. Initial components are already
5118 * stripped.
5119 *
5120 * @return Normal NTSTATUS return.
5121 **/
5131 {
5142 WERROR result;
5151 }
5156 }
5166 }
5179 /* Issue the NetShareEnum RPC call and retrieve the response */
5184 preferred_len,
5189 /* Was it successful? */
5191 /* Nope. Go clean up. */
5193 }
5196 /* Nope. Go clean up. */
5199 }
5203 }
5205 /* For each returned entry... */
5211 }
5217 }
5218 done:
5221 }
5225 }
5229 {
5239 }
5242 rpc_aliaslist_internals,
5248 rpc_aliaslist_dump,
5254 rpc_share_allowedusers_internals,
5256 }
5259 {
5267 }
5272 }
5277 }
5281 }
5284 {
5292 }
5294 /**
5295 * 'net rpc share' entrypoint.
5296 * @param argc Standard main() style argc.
5297 * @param argv Standard main() style argv. Initial components are already
5298 * stripped.
5299 **/
5302 {
5303 NET_API_STATUS status;
5306 {
5308 rpc_share_add,
5309 NET_TRANSPORT_RPC,
5313 },
5314 {
5316 rpc_share_delete,
5317 NET_TRANSPORT_RPC,
5321 },
5322 {
5324 rpc_share_allowedusers,
5325 NET_TRANSPORT_RPC,
5329 },
5330 {
5332 rpc_share_migrate,
5333 NET_TRANSPORT_RPC,
5337 },
5338 {
5340 rpc_share_list,
5341 NET_TRANSPORT_RPC,
5345 },
5347 };
5352 }
5357 }
5368 }
5371 }
5374 }
5381 {
5384 }
5391 {
5392 NET_API_STATUS status;
5400 }
5417 }
5424 {
5428 }
5431 }
5438 {
5440 WERROR result;
5441 NTSTATUS status;
5447 }
5458 }
5461 }
5468 done:
5470 }
5474 {
5490 };
5493 }
5495 /****************************************************************************/
5498 {
5500 }
5502 /**
5503 * Close a file on a remote RPC server.
5504 *
5505 * @param argc Standard main() style argc.
5506 * @param argv Standard main() style argv. Initial components are already
5507 * stripped.
5508 *
5509 * @return A shell status integer (0 for success).
5510 **/
5512 {
5515 }
5518 }
5520 /**
5521 * Formatted print of open file info
5522 *
5523 * @param r struct FILE_INFO_3 contents
5524 **/
5527 {
5531 }
5533 /**
5534 * List files for a user on a remote RPC server.
5535 *
5536 * @param argc Standard main() style argc.
5537 * @param argv Standard main() style argv. Initial components are already
5538 * stripped.
5539 *
5540 * @return A shell status integer (0 for success)..
5541 **/
5544 {
5545 NET_API_STATUS status;
5555 }
5557 /* if argc > 0, must be user command */
5560 }
5563 NULL,
5564 username,
5567 preferred_len,
5574 }
5576 /* Display results */
5584 }
5585 done:
5588 }
5590 /**
5591 * 'net rpc file' entrypoint.
5592 * @param argc Standard main() style argc.
5593 * @param argv Standard main() style argv. Initial components are already
5594 * stripped.
5595 **/
5598 {
5599 NET_API_STATUS status;
5602 {
5604 rpc_file_close,
5605 NET_TRANSPORT_RPC,
5609 },
5610 {
5612 rpc_file_user,
5613 NET_TRANSPORT_RPC,
5617 },
5618 #if 0
5619 {
5621 rpc_file_info,
5622 NET_TRANSPORT_RPC,
5626 },
5627 #endif
5629 };
5634 }
5639 }
5648 }
5651 }
5654 }
5656 /**
5657 * ABORT the shutdown of a remote RPC Server, over initshutdown pipe.
5658 *
5659 * All parameters are provided by the run_rpc_command function, except for
5660 * argc, argv which are passed through.
5661 *
5662 * @param c A net_context structure.
5663 * @param domain_sid The domain sid acquired from the remote server.
5664 * @param cli A cli_state connected to the server.
5665 * @param mem_ctx Talloc context, destroyed on completion of the function.
5666 * @param argc Standard main() style argc.
5667 * @param argv Standard main() style argv. Initial components are already
5668 * stripped.
5669 *
5670 * @return Normal NTSTATUS return.
5671 **/
5681 {
5683 WERROR result;
5689 }
5697 }
5699 /**
5700 * ABORT the shutdown of a remote RPC Server, over winreg pipe.
5701 *
5702 * All parameters are provided by the run_rpc_command function, except for
5703 * argc, argv which are passed through.
5704 *
5705 * @param c A net_context structure.
5706 * @param domain_sid The domain sid acquired from the remote server.
5707 * @param cli A cli_state connected to the server.
5708 * @param mem_ctx Talloc context, destroyed on completion of the function.
5709 * @param argc Standard main() style argc.
5710 * @param argv Standard main() style argv. Initial components are already
5711 * stripped.
5712 *
5713 * @return Normal NTSTATUS return.
5714 **/
5724 {
5726 WERROR werr;
5734 }
5742 }
5744 /**
5745 * ABORT the shutdown of a remote RPC server.
5746 *
5747 * @param argc Standard main() style argc.
5748 * @param argv Standard main() style argv. Initial components are already
5749 * stripped.
5750 *
5751 * @return A shell status integer (0 for success).
5752 **/
5756 {
5766 }
5777 rpc_reg_shutdown_abort_internals,
5779 }
5781 /**
5782 * Shut down a remote RPC Server via initshutdown pipe.
5783 *
5784 * All parameters are provided by the run_rpc_command function, except for
5785 * argc, argv which are passed through.
5786 *
5787 * @param c A net_context structure.
5788 * @param domain_sid The domain sid acquired from the remote server.
5789 * @param cli A cli_state connected to the server.
5790 * @param mem_ctx Talloc context, destroyed on completion of the function.
5791 * @param argc Standard main() style argc.
5792 * @param argv Standard main() style argv. Initial components are already
5793 * stripped.
5794 *
5795 * @return Normal NTSTATUS return.
5796 **/
5806 {
5808 WERROR result;
5816 }
5819 }
5823 /* create an entry */
5829 }
5835 }
5837 }
5839 /**
5840 * Shut down a remote RPC Server via winreg pipe.
5841 *
5842 * All parameters are provided by the run_rpc_command function, except for
5843 * argc, argv which are passed through.
5844 *
5845 * @param c A net_context structure.
5846 * @param domain_sid The domain sid acquired from the remote server.
5847 * @param cli A cli_state connected to the server.
5848 * @param mem_ctx Talloc context, destroyed on completion of the function.
5849 * @param argc Standard main() style argc.
5850 * @param argv Standard main() style argv. Initial components are already
5851 * stripped.
5852 *
5853 * @return Normal NTSTATUS return.
5854 **/
5864 {
5868 NTSTATUS result;
5869 WERROR werr;
5874 }
5879 }
5881 /* create an entry */
5888 }
5896 else
5898 }
5901 }
5903 /**
5904 * Shut down a remote RPC server.
5905 *
5906 * @param argc Standard main() style argc.
5907 * @param argv Standard main() style argv. Initial components are already
5908 * stripped.
5909 *
5910 * @return A shell status integer (0 for success).
5911 **/
5914 {
5924 }
5933 }
5936 }
5938 /***************************************************************************
5939 NT Domain trusts code (i.e. 'net rpc trustdom' functionality)
5940 ***************************************************************************/
5942 /**
5943 * Add interdomain trust account to the RPC server.
5944 * All parameters (except for argc and argv) are passed by run_rpc_command
5945 * function.
5946 *
5947 * @param c A net_context structure.
5948 * @param domain_sid The domain sid acquired from the server.
5949 * @param cli A cli_state connected to the server.
5950 * @param mem_ctx Talloc context, destroyed on completion of the function.
5951 * @param argc Standard main() style argc.
5952 * @param argv Standard main() style argv. Initial components are already
5953 * stripped.
5954 *
5955 * @return normal NTSTATUS return code.
5956 */
5966 {
5971 uint32 acb_info;
5973 uint32 user_rid;
5986 }
5988 /*
5989 * Make valid trusting domain account (ie. uppercased and with '$' appended)
5990 */
5994 }
5999 }
6008 }
6010 /* Get samr policy handle */
6013 MAXIMUM_ALLOWED_ACCESS,
6018 }
6022 }
6024 /* Get domain policy handle */
6027 MAXIMUM_ALLOWED_ACCESS,
6033 }
6037 }
6039 /* This call can take a long time - allow the server to time out.
6040 * 35 seconds should do it. */
6044 /* Create trusting domain's account */
6048 SAMR_USER_ACCESS_SET_PASSWORD |
6049 SAMR_USER_ACCESS_GET_ATTRIBUTES |
6050 SAMR_USER_ACCESS_SET_ATTRIBUTES;
6055 acb_info,
6056 acct_flags,
6063 }
6064 /* And restore our original timeout. */
6072 }
6074 {
6084 SAMR_FIELD_NT_PASSWORD_PRESENT;
6095 }
6102 }
6103 }
6105 done:
6109 }
6111 /**
6112 * Create interdomain trust account for a remote domain.
6113 *
6114 * @param argc Standard argc.
6115 * @param argv Standard argv without initial components.
6116 *
6117 * @return Integer status (0 means success).
6118 **/
6121 {
6131 }
6132 }
6135 /**
6136 * Remove interdomain trust account from the RPC server.
6137 * All parameters (except for argc and argv) are passed by run_rpc_command
6138 * function.
6139 *
6140 * @param c A net_context structure.
6141 * @param domain_sid The domain sid acquired from the server.
6142 * @param cli A cli_state connected to the server.
6143 * @param mem_ctx Talloc context, destroyed on completion of the function.
6144 * @param argc Standard main() style argc.
6145 * @param argv Standard main() style argv. Initial components are already
6146 * stripped.
6147 *
6148 * @return normal NTSTATUS return code.
6149 */
6159 {
6173 }
6175 /*
6176 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6177 */
6186 }
6188 /* Get samr policy handle */
6191 MAXIMUM_ALLOWED_ACCESS,
6196 }
6200 }
6202 /* Get domain policy handle */
6205 MAXIMUM_ALLOWED_ACCESS,
6211 }
6215 }
6231 }
6238 }
6242 MAXIMUM_ALLOWED_ACCESS,
6251 }
6259 }
6261 /* append the rid to the domain sid */
6264 }
6266 /* remove the sid */
6277 }
6284 }
6287 /* Delete user */
6297 }
6305 }
6311 }
6313 done:
6315 }
6317 /**
6318 * Delete interdomain trust account for a remote domain.
6319 *
6320 * @param argc Standard argc.
6321 * @param argv Standard argv without initial components.
6322 *
6323 * @return Integer status (0 means success).
6324 **/
6327 {
6336 }
6337 }
6343 {
6347 NTSTATUS status;
6348 WERROR result;
6351 /* Use NetServerEnum2 */
6356 }
6361 /* Try netr_GetDcName */
6367 }
6373 domain_name,
6380 }
6387 }
6390 }
6392 /**
6393 * Establish trust relationship to a trusting domain.
6394 * Interdomain account must already be created on remote PDC.
6395 *
6396 * @param c A net_context structure.
6397 * @param argc Standard argc.
6398 * @param argv Standard argv without initial components.
6399 *
6400 * @return Integer status (0 means success).
6401 **/
6405 {
6416 fstring pdc_name;
6420 /*
6421 * Connect to \\server\ipc$ as 'our domain' account with password
6422 */
6429 }
6435 }
6437 /* account name used at first is our domain's name with '$' */
6440 }
6445 }
6447 /*
6448 * opt_workgroup will be used by connection functions further,
6449 * hence it should be set to remote domain name instead of ours
6450 */
6453 };
6457 /* find the domain controller */
6461 }
6463 /* connect to ipc$ as username/password */
6467 /* Is it trusting domain account for sure ? */
6471 }
6473 /* store who we connected to */
6477 /*
6478 * Connect to \\server\ipc$ again (this time anonymously)
6479 */
6488 }
6495 }
6497 /* Make sure we're talking to a proper server */
6504 }
6506 /*
6507 * Call LsaOpenPolicy and LsaQueryInfo
6508 */
6517 }
6529 }
6531 /* Querying info level 5 */
6535 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6544 }
6551 }
6555 /* There should be actually query info level 3 (following nt serv behaviour),
6556 but I still don't know if it's _really_ necessary */
6558 /*
6559 * Store the password in secrets db
6560 */
6567 }
6569 /*
6570 * Close the pipes and clean up
6571 */
6580 }
6588 }
6590 /**
6591 * Revoke trust relationship to the remote domain.
6592 *
6593 * @param c A net_context structure.
6594 * @param argc Standard argc.
6595 * @param argv Standard argv without initial components.
6596 *
6597 * @return Integer status (0 means success).
6598 **/
6602 {
6613 }
6615 /* generate upper cased domain name */
6620 }
6622 /* delete password of the trust */
6625 domain_name));
6627 };
6630 done:
6633 }
6643 {
6644 fstring str_sid;
6647 }
6650 }
6653 {
6654 fstring ascii_sid;
6656 /* convert sid into ascii string */
6660 }
6667 {
6671 DATA_BLOB session_key;
6676 pol,
6678 LSA_TRUSTED_DOMAIN_INFO_PASSWORD,
6685 }
6691 }
6700 }
6709 }
6715 }
6717 #ifdef DEBUG_PASSWORD
6721 #endif
6723 done:
6728 }
6732 {
6733 /* common variables */
6742 /* trusted domains listing variables */
6746 fstring pdc_name;
6756 }
6758 /*
6759 * Listing trusted domains (stored in secrets.tdb, if local)
6760 */
6764 /*
6765 * set domain and pdc name to local samba server (default)
6766 * or to remote one given in command line
6767 */
6776 };
6778 /* open \PIPE\lsarpc and open policy handle */
6785 };
6795 };
6807 };
6809 /* query info level 5 to obtain sid of a domain being queried */
6812 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6822 }
6829 }
6831 /*
6832 * Keep calling LsaEnumTrustdom over opened pipe until
6833 * the end of enumeration is reached
6834 */
6851 };
6859 };
6874 }
6875 };
6877 /*
6878 * in case of no trusted domains say something rather
6879 * than just display blank line
6880 */
6885 /* close this connection before doing next one */
6893 };
6895 /* close lsarpc pipe and connection to IPC$ */
6900 }
6903 {
6904 /* common variables */
6916 /* trusted domains listing variables */
6920 fstring pdc_name;
6923 /* trusting domains listing variables */
6934 }
6936 /*
6937 * Listing trusted domains (stored in secrets.tdb, if local)
6938 */
6942 /*
6943 * set domain and pdc name to local samba server (default)
6944 * or to remote one given in command line
6945 */
6954 };
6956 /* open \PIPE\lsarpc and open policy handle */
6963 };
6973 };
6985 };
6987 /* query info level 5 to obtain sid of a domain being queried */
6990 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
7000 }
7007 }
7011 /*
7012 * Keep calling LsaEnumTrustdom over opened pipe until
7013 * the end of enumeration is reached
7014 */
7033 };
7040 };
7047 };
7052 /*
7053 * in case of no trusted domains say something rather
7054 * than just display blank line
7055 */
7058 }
7060 /* close this connection before doing next one */
7068 };
7072 /*
7073 * Listing trusting domains (stored in passdb backend, if local)
7074 */
7078 /*
7079 * Open \PIPE\samr and get needed policy handles
7080 */
7088 };
7092 /* SamrConnect2 */
7095 SAMR_ACCESS_LOOKUP_DOMAIN,
7104 };
7112 };
7114 /* SamrOpenDomain - we have to open domain policy handle in order to be
7115 able to enumerate accounts*/
7118 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS,
7119 queried_dom_sid,
7128 };
7136 };
7138 /*
7139 * perform actual enumeration
7140 */
7150 ACB_DOMTRUST,
7161 };
7169 };
7177 /*
7178 * get each single domain's sid (do we _really_ need this ?):
7179 * 1) connect to domain's pdc
7180 * 2) query the pdc for domain's sid
7181 */
7183 /* get rid of '$' tail */
7188 /* set opt_* variables to remote domain */
7193 }
7199 /* connect to remote domain controller */
7204 /* query for domain's sid */
7209 argv))
7219 }
7220 }
7226 }
7228 /* close opened samr and domain policy handles */
7232 };
7237 };
7239 /* close samr pipe and connection to IPC$ */
7244 }
7246 /**
7247 * Entrypoint for 'net rpc trustdom' code.
7248 *
7249 * @param argc Standard argc.
7250 * @param argv Standard argv without initial components.
7251 *
7252 * @return Integer status (0 means success).
7253 */
7256 {
7258 {
7260 rpc_trustdom_add,
7261 NET_TRANSPORT_RPC,
7265 },
7266 {
7268 rpc_trustdom_del,
7269 NET_TRANSPORT_RPC,
7273 },
7274 {
7276 rpc_trustdom_establish,
7277 NET_TRANSPORT_RPC,
7281 },
7282 {
7284 rpc_trustdom_revoke,
7285 NET_TRANSPORT_RPC,
7289 },
7290 {
7292 rpc_trustdom_list,
7293 NET_TRANSPORT_RPC,
7297 },
7298 {
7300 rpc_trustdom_vampire,
7301 NET_TRANSPORT_RPC,
7305 },
7307 };
7310 }
7312 /**
7313 * Check if a server will take rpc commands
7314 * @param flags Type of server to connect to (PDC, DMB, localhost)
7315 * if the host is not explicitly specified
7316 * @return bool (true means rpc supported)
7317 */
7319 {
7324 NTSTATUS status;
7326 /* flags (i.e. server type) may depend on command */
7335 }
7337 PROTOCOL_NT1);
7344 done:
7347 }
7349 /* dump sam database via samsync rpc calls */
7358 }
7361 NET_FLAGS_ANONYMOUS,
7363 }
7365 /* syncronise sam database via samsync rpc calls */
7367 {
7369 {
7371 rpc_vampire_ldif,
7372 NET_TRANSPORT_RPC,
7375 " Dump remote SAM database to LDIF file or "
7377 },
7378 {
7380 rpc_vampire_keytab,
7381 NET_TRANSPORT_RPC,
7384 " Dump remote SAM database to Kerberos keytab "
7386 },
7387 {
7389 rpc_vampire_passdb,
7390 NET_TRANSPORT_RPC,
7394 },
7397 };
7407 }
7410 }
7413 }
7415 /**
7416 * Migrate everything from a print server.
7417 *
7418 * @param c A net_context structure.
7419 * @param argc Standard main() style argc.
7420 * @param argv Standard main() style argv. Initial components are already
7421 * stripped.
7422 *
7423 * @return A shell status integer (0 for success).
7424 *
7425 * The order is important !
7426 * To successfully add drivers the print queues have to exist !
7427 * Applying ACLs should be the last step, because you're easily locked out.
7428 *
7429 **/
7432 {
7442 }
7447 }
7451 argv);
7457 argv);
7468 argv);
7474 argv);
7476 }
7478 /**
7479 * Migrate print drivers from a print server.
7480 *
7481 * @param c A net_context structure.
7482 * @param argc Standard main() style argc.
7483 * @param argv Standard main() style argv. Initial components are already
7484 * stripped.
7485 *
7486 * @return A shell status integer (0 for success).
7487 **/
7490 {
7498 }
7503 }
7506 rpc_printer_migrate_drivers_internals,
7508 }
7510 /**
7511 * Migrate print-forms from a print-server.
7512 *
7513 * @param c A net_context structure.
7514 * @param argc Standard main() style argc.
7515 * @param argv Standard main() style argv. Initial components are already
7516 * stripped.
7517 *
7518 * @return A shell status integer (0 for success).
7519 **/
7522 {
7530 }
7535 }
7538 rpc_printer_migrate_forms_internals,
7540 }
7542 /**
7543 * Migrate printers from a print-server.
7544 *
7545 * @param c A net_context structure.
7546 * @param argc Standard main() style argc.
7547 * @param argv Standard main() style argv. Initial components are already
7548 * stripped.
7549 *
7550 * @return A shell status integer (0 for success).
7551 **/
7554 {
7562 }
7567 }
7570 rpc_printer_migrate_printers_internals,
7572 }
7574 /**
7575 * Migrate printer-ACLs from a print-server
7576 *
7577 * @param c A net_context structure.
7578 * @param argc Standard main() style argc.
7579 * @param argv Standard main() style argv. Initial components are already
7580 * stripped.
7581 *
7582 * @return A shell status integer (0 for success).
7583 **/
7586 {
7594 }
7599 }
7602 rpc_printer_migrate_security_internals,
7604 }
7606 /**
7607 * Migrate printer-settings from a print-server.
7608 *
7609 * @param c A net_context structure.
7610 * @param argc Standard main() style argc.
7611 * @param argv Standard main() style argv. Initial components are already
7612 * stripped.
7613 *
7614 * @return A shell status integer (0 for success).
7615 **/
7618 {
7627 }
7632 }
7635 rpc_printer_migrate_settings_internals,
7637 }
7639 /**
7640 * 'net rpc printer' entrypoint.
7641 *
7642 * @param c A net_context structure.
7643 * @param argc Standard main() style argc.
7644 * @param argv Standard main() style argv. Initial components are already
7645 * stripped.
7646 **/
7649 {
7651 /* ouch: when addriver and setdriver are called from within
7652 rpc_printer_migrate_drivers_internals, the printer-queue already
7653 *has* to exist */
7656 {
7658 rpc_printer_migrate_all,
7659 NET_TRANSPORT_RPC,
7663 },
7664 {
7666 rpc_printer_migrate_drivers,
7667 NET_TRANSPORT_RPC,
7671 },
7672 {
7674 rpc_printer_migrate_forms,
7675 NET_TRANSPORT_RPC,
7679 },
7680 {
7682 rpc_printer_migrate_printers,
7683 NET_TRANSPORT_RPC,
7687 },
7688 {
7690 rpc_printer_migrate_security,
7691 NET_TRANSPORT_RPC,
7695 },
7696 {
7698 rpc_printer_migrate_settings,
7699 NET_TRANSPORT_RPC,
7703 },
7705 };
7708 }
7711 /**
7712 * List printers on a remote RPC server.
7713 *
7714 * @param c A net_context structure.
7715 * @param argc Standard main() style argc.
7716 * @param argv Standard main() style argv. Initial components are already
7717 * stripped.
7718 *
7719 * @return A shell status integer (0 for success).
7720 **/
7722 {
7730 }
7733 rpc_printer_list_internals,
7735 }
7737 /**
7738 * List printer-drivers on a remote RPC server.
7739 *
7740 * @param c A net_context structure.
7741 * @param argc Standard main() style argc.
7742 * @param argv Standard main() style argv. Initial components are already
7743 * stripped.
7744 *
7745 * @return A shell status integer (0 for success).
7746 **/
7749 {
7757 }
7760 rpc_printer_driver_list_internals,
7762 }
7764 /**
7765 * Publish printer in ADS via MSRPC.
7766 *
7767 * @param c A net_context structure.
7768 * @param argc Standard main() style argc.
7769 * @param argv Standard main() style argv. Initial components are already
7770 * stripped.
7771 *
7772 * @return A shell status integer (0 for success).
7773 **/
7776 {
7784 }
7787 rpc_printer_publish_publish_internals,
7789 }
7791 /**
7792 * Update printer in ADS via MSRPC.
7793 *
7794 * @param c A net_context structure.
7795 * @param argc Standard main() style argc.
7796 * @param argv Standard main() style argv. Initial components are already
7797 * stripped.
7798 *
7799 * @return A shell status integer (0 for success).
7800 **/
7802 {
7810 }
7813 rpc_printer_publish_update_internals,
7815 }
7817 /**
7818 * UnPublish printer in ADS via MSRPC.
7819 *
7820 * @param c A net_context structure.
7821 * @param argc Standard main() style argc.
7822 * @param argv Standard main() style argv. Initial components are already
7823 * stripped.
7824 *
7825 * @return A shell status integer (0 for success).
7826 **/
7829 {
7837 }
7840 rpc_printer_publish_unpublish_internals,
7842 }
7844 /**
7845 * List published printers via MSRPC.
7846 *
7847 * @param c A net_context structure.
7848 * @param argc Standard main() style argc.
7849 * @param argv Standard main() style argv. Initial components are already
7850 * stripped.
7851 *
7852 * @return A shell status integer (0 for success).
7853 **/
7856 {
7864 }
7867 rpc_printer_publish_list_internals,
7869 }
7872 /**
7873 * Publish printer in ADS.
7874 *
7875 * @param c A net_context structure.
7876 * @param argc Standard main() style argc.
7877 * @param argv Standard main() style argv. Initial components are already
7878 * stripped.
7879 *
7880 * @return A shell status integer (0 for success).
7881 **/
7884 {
7887 {
7889 rpc_printer_publish_publish,
7890 NET_TRANSPORT_RPC,
7894 },
7895 {
7897 rpc_printer_publish_update,
7898 NET_TRANSPORT_RPC,
7902 },
7903 {
7905 rpc_printer_publish_unpublish,
7906 NET_TRANSPORT_RPC,
7910 },
7911 {
7913 rpc_printer_publish_list,
7914 NET_TRANSPORT_RPC,
7918 },
7920 };
7927 " Alias of net rpc printer publish "
7931 }
7933 rpc_printer_publish_list_internals,
7935 }
7939 }
7942 /**
7943 * Display rpc printer help page.
7944 *
7945 * @param c A net_context structure.
7946 * @param argc Standard main() style argc.
7947 * @param argv Standard main() style argv. Initial components are already
7948 * stripped.
7949 **/
7951 {
7979 }
7981 /**
7982 * 'net rpc printer' entrypoint.
7983 *
7984 * @param c A net_context structure.
7985 * @param argc Standard main() style argc.
7986 * @param argv Standard main() style argv. Initial components are already
7987 * stripped.
7988 **/
7990 {
7992 {
7994 rpc_printer_list,
7995 NET_TRANSPORT_RPC,
7999 },
8000 {
8002 rpc_printer_migrate,
8003 NET_TRANSPORT_RPC,
8007 },
8008 {
8010 rpc_printer_driver_list,
8011 NET_TRANSPORT_RPC,
8015 },
8016 {
8018 rpc_printer_publish,
8019 NET_TRANSPORT_RPC,
8023 },
8025 };
8034 }
8036 rpc_printer_list_internals,
8038 }
8041 }
8043 /**
8044 * 'net rpc' entrypoint.
8045 *
8046 * @param c A net_context structure.
8047 * @param argc Standard main() style argc.
8048 * @param argv Standard main() style argv. Initial components are already
8049 * stripped.
8050 **/
8053 {
8054 NET_API_STATUS status;
8057 {
8059 net_rpc_audit,
8060 NET_TRANSPORT_RPC,
8064 },
8065 {
8067 net_rpc_info,
8068 NET_TRANSPORT_RPC,
8072 },
8073 {
8075 net_rpc_join,
8076 NET_TRANSPORT_RPC,
8080 },
8081 {
8083 net_rpc_oldjoin,
8084 NET_TRANSPORT_RPC,
8088 },
8089 {
8091 net_rpc_testjoin,
8092 NET_TRANSPORT_RPC,
8096 },
8097 {
8099 net_rpc_user,
8100 NET_TRANSPORT_RPC,
8104 },
8105 {
8107 rpc_user_password,
8108 NET_TRANSPORT_RPC,
8113 },
8114 {
8116 net_rpc_group,
8117 NET_TRANSPORT_RPC,
8121 },
8122 {
8124 net_rpc_share,
8125 NET_TRANSPORT_RPC,
8129 },
8130 {
8132 net_rpc_file,
8133 NET_TRANSPORT_RPC,
8137 },
8138 {
8140 net_rpc_printer,
8141 NET_TRANSPORT_RPC,
8145 },
8146 {
8148 net_rpc_changetrustpw,
8149 NET_TRANSPORT_RPC,
8153 },
8154 {
8156 rpc_trustdom,
8157 NET_TRANSPORT_RPC,
8161 },
8162 {
8164 rpc_shutdown_abort,
8165 NET_TRANSPORT_RPC,
8169 },
8170 {
8172 rpc_shutdown,
8173 NET_TRANSPORT_RPC,
8177 },
8178 {
8180 rpc_samdump,
8181 NET_TRANSPORT_RPC,
8185 },
8186 {
8188 rpc_vampire,
8189 NET_TRANSPORT_RPC,
8193 },
8194 {
8196 net_rpc_getsid,
8197 NET_TRANSPORT_RPC,
8201 },
8202 {
8204 net_rpc_rights,
8205 NET_TRANSPORT_RPC,
8209 },
8210 {
8212 net_rpc_service,
8213 NET_TRANSPORT_RPC,
8217 },
8218 {
8220 net_rpc_registry,
8221 NET_TRANSPORT_RPC,
8225 },
8226 {
8228 net_rpc_shell,
8229 NET_TRANSPORT_RPC,
8233 },
8234 {
8236 net_rpc_trust,
8237 NET_TRANSPORT_RPC,
8241 },
8242 {
8244 net_rpc_conf,
8245 NET_TRANSPORT_RPC,
8249 },
8251 };
8256 }
8261 }
8264 }
8267 }