?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
libnet: Add NULL checks to py_net_finddc
[Samba.git] / source3 / rpcclient / cmd_drsuapi.c
blobb2221a713dd87e86a68ef3a5ccd62c05cf10136c
1 /*
2 Unix SMB/CIFS implementation.
3 RPC pipe client
4
5 Copyright (C) Guenther Deschner 2008
6
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
11
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
16
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
19 */
20
21 #include "includes.h"
22 #include "rpcclient.h"
23 #include "../librpc/gen_ndr/ndr_drsuapi_c.h"
24
25 static WERROR cracknames(struct rpc_pipe_client *cli,
26 TALLOC_CTX *mem_ctx,
27 struct policy_handle *bind_handle,
28 enum drsuapi_DsNameFormat format_offered,
29 enum drsuapi_DsNameFormat format_desired,
30 int argc,
31 const char **argv,
32 union drsuapi_DsNameCtr *ctr)
33 {
34 NTSTATUS status;
35 WERROR werr;
36 int i;
37 uint32_t level = 1;
38 union drsuapi_DsNameRequest req;
39 uint32_t level_out;
40 struct drsuapi_DsNameString *names;
41 struct dcerpc_binding_handle *b = cli->binding_handle;
42
43 names = talloc_zero_array(mem_ctx, struct drsuapi_DsNameString, argc);
44 W_ERROR_HAVE_NO_MEMORY(names);
45
46 for (i=0; i<argc; i++) {
47 names[i].str = argv[i];
48 }
49
50 req.req1.codepage = 1252; /* german */
51 req.req1.language = 0x00000407; /* german */
52 req.req1.count = argc;
53 req.req1.names = names;
54 req.req1.format_flags = DRSUAPI_DS_NAME_FLAG_NO_FLAGS;
55 req.req1.format_offered = format_offered;
56 req.req1.format_desired = format_desired;
57
58 status = dcerpc_drsuapi_DsCrackNames(b, mem_ctx,
59 bind_handle,
60 level,
61 &req,
62 &level_out,
63 ctr,
64 &werr);
65 if (!NT_STATUS_IS_OK(status)) {
66 return ntstatus_to_werror(status);
67 }
68
69 if (!W_ERROR_IS_OK(werr)) {
70 return werr;
71 }
72
73 return WERR_OK;
74 }
75
76 static WERROR cmd_drsuapi_cracknames(struct rpc_pipe_client *cli,
77 TALLOC_CTX *mem_ctx, int argc,
78 const char **argv)
79 {
80 NTSTATUS status;
81 WERROR werr;
82 int i;
83
84 struct GUID bind_guid;
85 struct policy_handle bind_handle;
86 struct dcerpc_binding_handle *b = cli->binding_handle;
87
88 union drsuapi_DsNameCtr ctr;
89
90 if (argc < 2) {
91 printf("usage: %s name\n", argv[0]);
92 return WERR_OK;
93 }
94
95 GUID_from_string(DRSUAPI_DS_BIND_GUID, &bind_guid);
96
97 status = dcerpc_drsuapi_DsBind(b, mem_ctx,
98 &bind_guid,
99 NULL,
100 &bind_handle,
101 &werr);
102
103 if (!NT_STATUS_IS_OK(status)) {
104 return ntstatus_to_werror(status);
105 }
106
107 if (!W_ERROR_IS_OK(werr)) {
108 return werr;
109 }
110
111 werr = cracknames(cli, mem_ctx,
112 &bind_handle,
113 DRSUAPI_DS_NAME_FORMAT_UNKNOWN,
114 DRSUAPI_DS_NAME_FORMAT_FQDN_1779,
115 1,
116 argv+1,
117 &ctr);
118
119 if (!W_ERROR_IS_OK(werr)) {
120 goto out;
121 }
122
123 for (i=0; i < ctr.ctr1->count; i++) {
124 printf("status: %d\n",
125 ctr.ctr1->array[i].status);
126 printf("dns_domain_name: %s\n",
127 ctr.ctr1->array[i].dns_domain_name);
128 printf("result_name: %s\n",
129 ctr.ctr1->array[i].result_name);
130 }
131
132 out:
133 if (is_valid_policy_hnd(&bind_handle)) {
134 WERROR _werr;
135 dcerpc_drsuapi_DsUnbind(b, mem_ctx, &bind_handle, &_werr);
136 }
137
138 return werr;
139 }
140
141 static void display_domain_controller_info_01(struct drsuapi_DsGetDCConnection01 *r)
142 {
143 printf("client_ip_address:\t%s\n", r->client_ip_address);
144 printf("unknown2:\t%d\n", r->unknown2);
145 printf("connection_time:\t%d\n", r->connection_time);
146 printf("unknown4:\t%d\n", r->unknown4);
147 printf("unknown5:\t%d\n", r->unknown5);
148 printf("unknown6:\t%d\n", r->unknown6);
149 printf("client_account:\t%s\n", r->client_account);
150 }
151
152 static void display_domain_controller_info_1(struct drsuapi_DsGetDCInfo1 *r)
153 {
154 printf("netbios_name:\t%s\n", r->netbios_name);
155 printf("dns_name:\t%s\n", r->dns_name);
156 printf("site_name:\t%s\n", r->site_name);
157 printf("computer_dn:\t%s\n", r->computer_dn);
158 printf("server_dn:\t%s\n", r->server_dn);
159 printf("is_pdc:\t\t%s\n", r->is_pdc ? "true" : "false");
160 printf("is_enabled:\t%s\n", r->is_enabled ? "true" : "false");
161 }
162
163 static void display_domain_controller_info_2(struct drsuapi_DsGetDCInfo2 *r)
164 {
165 printf("netbios_name:\t%s\n", r->netbios_name);
166 printf("dns_name:\t%s\n", r->dns_name);
167 printf("site_name:\t%s\n", r->site_name);
168 printf("site_dn:\t%s\n", r->site_dn);
169 printf("computer_dn:\t%s\n", r->computer_dn);
170 printf("server_dn:\t%s\n", r->server_dn);
171 printf("ntds_dn:\t%s\n", r->ntds_dn);
172 printf("is_pdc:\t\t%s\n", r->is_pdc ? "true" : "false");
173 printf("is_enabled:\t%s\n", r->is_enabled ? "true" : "false");
174 printf("is_gc:\t\t%s\n", r->is_gc ? "true" : "false");
175 printf("site_guid:\t%s\n", GUID_string(talloc_tos(), &r->site_guid));
176 printf("computer_guid:\t%s\n", GUID_string(talloc_tos(), &r->computer_guid));
177 printf("server_guid:\t%s\n", GUID_string(talloc_tos(), &r->server_guid));
178 printf("ntds_guid:\t%s\n", GUID_string(talloc_tos(), &r->ntds_guid));
179 }
180
181 static void display_domain_controller_info_3(struct drsuapi_DsGetDCInfo3 *r)
182 {
183 printf("netbios_name:\t%s\n", r->netbios_name);
184 printf("dns_name:\t%s\n", r->dns_name);
185 printf("site_name:\t%s\n", r->site_name);
186 printf("site_dn:\t%s\n", r->site_dn);
187 printf("computer_dn:\t%s\n", r->computer_dn);
188 printf("server_dn:\t%s\n", r->server_dn);
189 printf("ntds_dn:\t%s\n", r->ntds_dn);
190 printf("is_pdc:\t\t%s\n", r->is_pdc ? "true" : "false");
191 printf("is_enabled:\t%s\n", r->is_enabled ? "true" : "false");
192 printf("is_gc:\t\t%s\n", r->is_gc ? "true" : "false");
193 printf("is_rodc:\t%s\n", r->is_rodc ? "true" : "false");
194 printf("site_guid:\t%s\n", GUID_string(talloc_tos(), &r->site_guid));
195 printf("computer_guid:\t%s\n", GUID_string(talloc_tos(), &r->computer_guid));
196 printf("server_guid:\t%s\n", GUID_string(talloc_tos(), &r->server_guid));
197 printf("ntds_guid:\t%s\n", GUID_string(talloc_tos(), &r->ntds_guid));
198 }
199
200 static void display_domain_controller_info(int32_t level,
201 union drsuapi_DsGetDCInfoCtr *ctr)
202 {
203 int i;
204
205 switch (level) {
206 case DRSUAPI_DC_CONNECTION_CTR_01:
207 for (i=0; i<ctr->ctr01.count; i++) {
208 printf("----------\n");
209 display_domain_controller_info_01(&ctr->ctr01.array[i]);
210 }
211 break;
212 case DRSUAPI_DC_INFO_CTR_1:
213 for (i=0; i<ctr->ctr1.count; i++) {
214 printf("----------\n");
215 display_domain_controller_info_1(&ctr->ctr1.array[i]);
216 }
217 break;
218 case DRSUAPI_DC_INFO_CTR_2:
219 for (i=0; i<ctr->ctr2.count; i++) {
220 printf("----------\n");
221 display_domain_controller_info_2(&ctr->ctr2.array[i]);
222 }
223 break;
224 case DRSUAPI_DC_INFO_CTR_3:
225 for (i=0; i<ctr->ctr3.count; i++) {
226 printf("----------\n");
227 display_domain_controller_info_3(&ctr->ctr3.array[i]);
228 }
229 break;
230 default:
231 break;
232 }
233 }
234
235 static WERROR cmd_drsuapi_getdcinfo(struct rpc_pipe_client *cli,
236 TALLOC_CTX *mem_ctx, int argc,
237 const char **argv)
238 {
239 NTSTATUS status;
240 WERROR werr;
241
242 struct GUID bind_guid;
243 struct policy_handle bind_handle;
244 struct dcerpc_binding_handle *b = cli->binding_handle;
245
246 const char *domain = NULL;
247 int32_t level = 1;
248 int32_t level_out;
249 union drsuapi_DsGetDCInfoRequest req;
250 union drsuapi_DsGetDCInfoCtr ctr;
251
252 if (argc < 2) {
253 printf("usage: %s domain [level]\n", argv[0]);
254 return WERR_OK;
255 }
256
257 domain = argv[1];
258 if (argc >= 3) {
259 level = atoi(argv[2]);
260 }
261
262 GUID_from_string(DRSUAPI_DS_BIND_GUID, &bind_guid);
263
264 status = dcerpc_drsuapi_DsBind(b, mem_ctx,
265 &bind_guid,
266 NULL,
267 &bind_handle,
268 &werr);
269
270 if (!NT_STATUS_IS_OK(status)) {
271 return ntstatus_to_werror(status);
272 }
273
274 if (!W_ERROR_IS_OK(werr)) {
275 return werr;
276 }
277
278 req.req1.domain_name = domain;
279 req.req1.level = level;
280
281 status = dcerpc_drsuapi_DsGetDomainControllerInfo(b, mem_ctx,
282 &bind_handle,
283 1,
284 &req,
285 &level_out,
286 &ctr,
287 &werr);
288 if (!NT_STATUS_IS_OK(status)) {
289 werr = ntstatus_to_werror(status);
290 goto out;
291 }
292
293 if (!W_ERROR_IS_OK(werr)) {
294 goto out;
295 }
296
297 display_domain_controller_info(level_out, &ctr);
298 out:
299 if (is_valid_policy_hnd(&bind_handle)) {
300 WERROR _werr;
301 dcerpc_drsuapi_DsUnbind(b, mem_ctx, &bind_handle, &_werr);
302 }
303
304 return werr;
305 }
306
307 static WERROR cmd_drsuapi_getncchanges(struct rpc_pipe_client *cli,
308 TALLOC_CTX *mem_ctx, int argc,
309 const char **argv)
310 {
311 NTSTATUS status;
312 WERROR werr;
313
314 struct policy_handle bind_handle;
315 struct dcerpc_binding_handle *b = cli->binding_handle;
316
317 struct GUID bind_guid;
318 struct drsuapi_DsBindInfoCtr bind_info;
319 struct drsuapi_DsBindInfo28 info28;
320
321 const char *nc_dn = NULL;
322
323 DATA_BLOB session_key;
324
325 uint32_t level = 8;
326 bool single = false;
327 uint32_t level_out = 0;
328 union drsuapi_DsGetNCChangesRequest req;
329 union drsuapi_DsGetNCChangesCtr ctr;
330 struct drsuapi_DsReplicaObjectIdentifier nc;
331
332 struct drsuapi_DsGetNCChangesCtr1 *ctr1 = NULL;
333 struct drsuapi_DsGetNCChangesCtr6 *ctr6 = NULL;
334 uint32_t out_level = 0;
335 int y;
336
337 uint32_t supported_extensions = 0;
338 uint32_t replica_flags = DRSUAPI_DRS_WRIT_REP |
339 DRSUAPI_DRS_INIT_SYNC |
340 DRSUAPI_DRS_PER_SYNC |
341 DRSUAPI_DRS_GET_ANC |
342 DRSUAPI_DRS_NEVER_SYNCED;
343
344 if (argc > 3) {
345 printf("usage: %s [naming_context_or_object_dn [single]]\n", argv[0]);
346 return WERR_OK;
347 }
348
349 if (argc >= 2) {
350 nc_dn = argv[1];
351 }
352
353 if (argc == 3) {
354 if (strequal(argv[2], "single")) {
355 single = true;
356 } else {
357 printf("warning: ignoring unknown argument '%s'\n",
358 argv[2]);
359 }
360 }
361
362 ZERO_STRUCT(info28);
363
364 ZERO_STRUCT(req);
365
366 GUID_from_string(DRSUAPI_DS_BIND_GUID, &bind_guid);
367
368 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_BASE;
369 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION;
370 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI;
371 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2;
372 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS;
373 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1;
374 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION;
375 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE;
376 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2;
377 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION;
378 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2;
379 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD;
380 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND;
381 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO;
382 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION;
383 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01;
384 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP;
385 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY;
386 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3;
387 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2;
388 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6;
389 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS;
390 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8;
391 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5;
392 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6;
393 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3;
394 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7;
395 info28.supported_extensions |= DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT;
396 info28.site_guid = GUID_zero();
397 info28.pid = 0;
398 info28.repl_epoch = 0;
399
400 bind_info.length = 28;
401 bind_info.info.info28 = info28;
402
403 status = dcerpc_drsuapi_DsBind(b, mem_ctx,
404 &bind_guid,
405 &bind_info,
406 &bind_handle,
407 &werr);
408
409 if (!NT_STATUS_IS_OK(status)) {
410 return ntstatus_to_werror(status);
411 }
412
413 if (!W_ERROR_IS_OK(werr)) {
414 return werr;
415 }
416
417 if (bind_info.length == 24) {
418 supported_extensions = bind_info.info.info24.supported_extensions;
419 } else if (bind_info.length == 28) {
420 supported_extensions = bind_info.info.info28.supported_extensions;
421 } else if (bind_info.length == 32) {
422 supported_extensions = bind_info.info.info32.supported_extensions;
423 } else if (bind_info.length == 48) {
424 supported_extensions = bind_info.info.info48.supported_extensions;
425 } else if (bind_info.length == 52) {
426 supported_extensions = bind_info.info.info52.supported_extensions;
427 }
428
429 if (!nc_dn) {
430
431 union drsuapi_DsNameCtr crack_ctr;
432 const char *name;
433
434 name = talloc_asprintf(mem_ctx, "%s\\", lp_workgroup());
435 W_ERROR_HAVE_NO_MEMORY(name);
436
437 werr = cracknames(cli, mem_ctx,
438 &bind_handle,
439 DRSUAPI_DS_NAME_FORMAT_UNKNOWN,
440 DRSUAPI_DS_NAME_FORMAT_FQDN_1779,
441 1,
442 &name,
443 &crack_ctr);
444 if (!W_ERROR_IS_OK(werr)) {
445 return werr;
446 }
447
448 if (crack_ctr.ctr1->count != 1) {
449 return WERR_NO_SUCH_DOMAIN;
450 }
451
452 if (crack_ctr.ctr1->array[0].status != DRSUAPI_DS_NAME_STATUS_OK) {
453 return WERR_NO_SUCH_DOMAIN;
454 }
455
456 nc_dn = talloc_strdup(mem_ctx, crack_ctr.ctr1->array[0].result_name);
457 W_ERROR_HAVE_NO_MEMORY(nc_dn);
458
459 printf("using: %s\n", nc_dn);
460 }
461
462 nc.dn = nc_dn;
463 nc.guid = GUID_zero();
464 nc.sid = (struct dom_sid) {0};
465
466 if (supported_extensions & DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8) {
467 level = 8;
468 req.req8.naming_context = &nc;
469 req.req8.replica_flags = replica_flags;
470 req.req8.max_object_count = 402;
471 req.req8.max_ndr_size = 402116;
472 if (single) {
473 req.req8.extended_op = DRSUAPI_EXOP_REPL_OBJ;
474 }
475 } else {
476 level = 5;
477 req.req5.naming_context = &nc;
478 req.req5.replica_flags = replica_flags;
479 req.req5.max_object_count = 402;
480 req.req5.max_ndr_size = 402116;
481 if (single) {
482 req.req5.extended_op = DRSUAPI_EXOP_REPL_OBJ;
483 }
484 }
485
486 for (y=0; ;y++) {
487
488 if (level == 8) {
489 DEBUG(1,("start[%d] tmp_higest_usn: %llu , highest_usn: %llu\n",y,
490 (long long)req.req8.highwatermark.tmp_highest_usn,
491 (long long)req.req8.highwatermark.highest_usn));
492 }
493
494 status = dcerpc_drsuapi_DsGetNCChanges(b, mem_ctx,
495 &bind_handle,
496 level,
497 &req,
498 &level_out,
499 &ctr,
500 &werr);
501 if (!NT_STATUS_IS_OK(status)) {
502 werr = ntstatus_to_werror(status);
503 printf("Failed to get NC Changes: %s",
504 get_friendly_nt_error_msg(status));
505 goto out;
506 }
507
508 if (!W_ERROR_IS_OK(werr)) {
509 printf("Failed to get NC Changes: %s",
510 get_friendly_werror_msg(werr));
511 goto out;
512 }
513
514 if (level_out == 1) {
515 out_level = 1;
516 ctr1 = &ctr.ctr1;
517 } else if (level_out == 2 && ctr.ctr2.mszip1.ts) {
518 out_level = 1;
519 ctr1 = &ctr.ctr2.mszip1.ts->ctr1;
520 }
521
522 status = cli_get_session_key(mem_ctx, cli, &session_key);
523 if (!NT_STATUS_IS_OK(status)) {
524 printf("Failed to get Session Key: %s",
525 nt_errstr(status));
526 return ntstatus_to_werror(status);
527 }
528
529 if (out_level == 1) {
530 DEBUG(1,("end[%d] tmp_highest_usn: %llu , highest_usn: %llu\n",y,
531 (long long)ctr1->new_highwatermark.tmp_highest_usn,
532 (long long)ctr1->new_highwatermark.highest_usn));
533 #if 0
534 libnet_dssync_decrypt_attributes(mem_ctx,
535 &session_key,
536 ctr1->first_object);
537 #endif
538 if (ctr1->more_data) {
539 req.req5.highwatermark = ctr1->new_highwatermark;
540 continue;
541 }
542 }
543
544 if (level_out == 6) {
545 out_level = 6;
546 ctr6 = &ctr.ctr6;
547 } else if (level_out == 7
548 && ctr.ctr7.level == 6
549 && ctr.ctr7.type == DRSUAPI_COMPRESSION_TYPE_MSZIP
550 && ctr.ctr7.ctr.mszip6.ts) {
551 out_level = 6;
552 ctr6 = &ctr.ctr7.ctr.mszip6.ts->ctr6;
553 } else if (level_out == 7
554 && ctr.ctr7.level == 6
555 && ctr.ctr7.type == DRSUAPI_COMPRESSION_TYPE_XPRESS
556 && ctr.ctr7.ctr.xpress6.ts) {
557 out_level = 6;
558 ctr6 = &ctr.ctr7.ctr.xpress6.ts->ctr6;
559 }
560
561 if (out_level == 6) {
562 DEBUG(1,("end[%d] tmp_highest_usn: %llu , highest_usn: %llu\n",y,
563 (long long)ctr6->new_highwatermark.tmp_highest_usn,
564 (long long)ctr6->new_highwatermark.highest_usn));
565 #if 0
566 libnet_dssync_decrypt_attributes(mem_ctx,
567 &session_key,
568 ctr6->first_object);
569 #endif
570 if (ctr6->more_data) {
571 req.req8.highwatermark = ctr6->new_highwatermark;
572 continue;
573 }
574 }
575
576 break;
577 }
578
579 out:
580 return werr;
581 }
582
583 /* List of commands exported by this module */
584
585 struct cmd_set drsuapi_commands[] = {
586
587 { "DRSUAPI" },
588 { "dscracknames", RPC_RTYPE_WERROR, NULL, cmd_drsuapi_cracknames, &ndr_table_drsuapi, NULL, "Crack Name", "" },
589 { "dsgetdcinfo", RPC_RTYPE_WERROR, NULL, cmd_drsuapi_getdcinfo, &ndr_table_drsuapi, NULL, "Get Domain Controller Info", "" },
590 { "dsgetncchanges", RPC_RTYPE_WERROR, NULL, cmd_drsuapi_getncchanges, &ndr_table_drsuapi, NULL, "Get NC Changes", "" },
591 { NULL }
592 };
Samba GIT mirror