2 Samba Unix/Linux SMB client library
4 Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>. */
20 #include "utils/net.h"
21 #include "libads/sitename_cache.h"
22 #include "../lib/addns/dnsquery.h"
23 #include "../librpc/gen_ndr/ndr_netlogon.h"
25 #include "../libcli/security/security.h"
26 #include "passdb/lookup_sid.h"
28 int net_lookup_usage(struct net_context
*c
, int argc
, const char **argv
)
31 " net lookup [host] HOSTNAME[#<type>]\n\tgives IP for a hostname\n\n"
32 " net lookup ldap [domain]\n\tgives IP of domain's ldap server\n\n"
33 " net lookup kdc [realm]\n\tgives IP of realm's kerberos KDC\n\n"
34 " net lookup pdc [domain|realm]\n\tgives IP of realm's kerberos KDC\n\n"
35 " net lookup dc [domain]\n\tgives IP of domains Domain Controllers\n\n"
36 " net lookup master [domain|wg]\n\tgive IP of master browser\n\n"
37 " net lookup name [name]\n\tLookup name's sid and type\n\n"
38 " net lookup sid [sid]\n\tGive sid's name and type\n\n"
39 " net lookup dsgetdcname [name] [flags] [sitename]\n\n"
44 /* lookup a hostname giving an IP */
45 static int net_lookup_host(struct net_context
*c
, int argc
, const char **argv
)
47 struct sockaddr_storage ss
;
49 char addr
[INET6_ADDRSTRLEN
];
50 const char *name
= argv
[0];
54 return net_lookup_usage(c
, argc
, argv
);
56 p
= strchr_m(name
,'#');
59 sscanf(++p
,"%x",&name_type
);
62 if (!resolve_name(name
, &ss
, name_type
, false)) {
63 /* we deliberately use DEBUG() here to send it to stderr
64 so scripts aren't mucked up */
65 DEBUG(0,("Didn't find %s#%02x\n", name
, name_type
));
69 print_sockaddr(addr
, sizeof(addr
), &ss
);
70 d_printf("%s\n", addr
);
75 static void print_ldap_srvlist(struct dns_rr_srv
*dclist
, int numdcs
)
77 struct sockaddr_storage ss
;
80 for ( i
=0; i
<numdcs
; i
++ ) {
81 if (resolve_name(dclist
[i
].hostname
, &ss
, 0x20, true) ) {
82 char addr
[INET6_ADDRSTRLEN
];
83 print_sockaddr(addr
, sizeof(addr
), &ss
);
85 if (ss
.ss_family
== AF_INET6
) {
86 d_printf("[%s]:%d\n", addr
, dclist
[i
].port
);
89 if (ss
.ss_family
== AF_INET
) {
90 d_printf("%s:%d\n", addr
, dclist
[i
].port
);
97 static int net_lookup_ldap(struct net_context
*c
, int argc
, const char **argv
)
101 struct sockaddr_storage ss
;
102 struct dns_rr_srv
*dcs
= NULL
;
108 char h_name
[MAX_DNS_NAME_LENGTH
];
113 domain
= c
->opt_target_workgroup
;
115 if ( (ctx
= talloc_init("net_lookup_ldap")) == NULL
) {
116 d_fprintf(stderr
,"net_lookup_ldap: talloc_init() %s!\n",
121 sitename
= sitename_fetch(ctx
, domain
);
123 DEBUG(9, ("Lookup up ldap for domain %s\n", domain
));
125 status
= ads_dns_query_dcs(ctx
,
130 if ( NT_STATUS_IS_OK(status
) && numdcs
) {
131 print_ldap_srvlist(dcs
, numdcs
);
136 DEBUG(9, ("Looking up PDC for domain %s\n", domain
));
137 if (!get_pdc_ip(domain
, &ss
)) {
142 ret
= sys_getnameinfo((struct sockaddr
*)&ss
,
143 sizeof(struct sockaddr_storage
),
144 h_name
, sizeof(h_name
),
153 DEBUG(9, ("Found PDC with DNS name %s\n", h_name
));
154 domain
= strchr(h_name
, '.');
161 DEBUG(9, ("Looking up ldap for domain %s\n", domain
));
163 status
= ads_dns_query_dcs(ctx
,
168 if ( NT_STATUS_IS_OK(status
) && numdcs
) {
169 print_ldap_srvlist(dcs
, numdcs
);
178 DEBUG(1,("No ADS support\n"));
182 static int net_lookup_dc(struct net_context
*c
, int argc
, const char **argv
)
184 struct ip_service
*ip_list
;
185 struct sockaddr_storage ss
;
186 char *pdc_str
= NULL
;
187 const char *domain
= NULL
;
188 char *sitename
= NULL
;
190 char addr
[INET6_ADDRSTRLEN
];
191 bool sec_ads
= (lp_security() == SEC_ADS
);
196 domain
= c
->opt_target_workgroup
;
203 if (!get_pdc_ip(domain
, &ss
))
206 print_sockaddr(addr
, sizeof(addr
), &ss
);
207 if (asprintf(&pdc_str
, "%s", addr
) == -1) {
210 d_printf("%s\n", pdc_str
);
212 sitename
= sitename_fetch(talloc_tos(), domain
);
213 if (!NT_STATUS_IS_OK(get_sorted_dc_list(domain
, sitename
,
214 &ip_list
, &count
, sec_ads
))) {
216 TALLOC_FREE(sitename
);
219 TALLOC_FREE(sitename
);
220 for (i
=0;i
<count
;i
++) {
221 print_sockaddr(addr
, sizeof(addr
), &ip_list
[i
].ss
);
222 if (!strequal(pdc_str
, addr
))
223 d_printf("%s\n", addr
);
229 static int net_lookup_pdc(struct net_context
*c
, int argc
, const char **argv
)
231 struct sockaddr_storage ss
;
232 char *pdc_str
= NULL
;
234 char addr
[INET6_ADDRSTRLEN
];
236 if (lp_security() == SEC_ADS
) {
239 domain
= c
->opt_target_workgroup
;
246 if (!get_pdc_ip(domain
, &ss
))
249 print_sockaddr(addr
, sizeof(addr
), &ss
);
250 if (asprintf(&pdc_str
, "%s", addr
) == -1) {
253 d_printf("%s\n", pdc_str
);
259 static int net_lookup_master(struct net_context
*c
, int argc
, const char **argv
)
261 struct sockaddr_storage master_ss
;
262 const char *domain
= c
->opt_target_workgroup
;
263 char addr
[INET6_ADDRSTRLEN
];
268 if (!find_master_ip(domain
, &master_ss
))
270 print_sockaddr(addr
, sizeof(addr
), &master_ss
);
271 d_printf("%s\n", addr
);
275 static int net_lookup_kdc(struct net_context
*c
, int argc
, const char **argv
)
280 struct ip_service
*kdcs
;
286 initialize_krb5_error_table();
287 rc
= krb5_init_context(&ctx
);
289 DEBUG(1,("krb5_init_context failed (%s)\n",
296 } else if (lp_realm() && *lp_realm()) {
301 rc
= krb5_get_host_realm(ctx
, NULL
, &realms
);
303 DEBUG(1,("krb5_gethost_realm failed (%s)\n",
307 realm
= (const char *) *realms
;
310 status
= get_kdc_list(realm
, NULL
, &kdcs
, &num_kdcs
);
311 if (!NT_STATUS_IS_OK(status
)) {
312 DEBUG(1,("get_kdc_list failed (%s)\n", nt_errstr(status
)));
316 for (i
= 0; i
< num_kdcs
; i
++) {
317 char addr
[INET6_ADDRSTRLEN
];
319 print_sockaddr(addr
, sizeof(addr
), &kdcs
[i
].ss
);
321 d_printf("%s:%u\n", addr
, kdcs
[i
].port
);
326 DEBUG(1, ("No kerberos support\n"));
330 static int net_lookup_name(struct net_context
*c
, int argc
, const char **argv
)
332 const char *dom
, *name
;
334 enum lsa_SidType type
;
339 _(" net lookup name <name>\n"));
343 if (!lookup_name(talloc_tos(), argv
[0], LOOKUP_NAME_ALL
,
344 &dom
, &name
, &sid
, &type
)) {
345 d_printf(_("Could not lookup name %s\n"), argv
[0]);
349 d_printf("%s %d (%s) %s\\%s\n", sid_string_tos(&sid
),
350 type
, sid_type_lookup(type
), dom
, name
);
354 static int net_lookup_sid(struct net_context
*c
, int argc
, const char **argv
)
356 const char *dom
, *name
;
358 enum lsa_SidType type
;
363 _(" net lookup sid <sid>\n"));
367 if (!string_to_sid(&sid
, argv
[0])) {
368 d_printf(_("Could not convert %s to SID\n"), argv
[0]);
372 if (!lookup_sid(talloc_tos(), &sid
,
373 &dom
, &name
, &type
)) {
374 d_printf(_("Could not lookup name %s\n"), argv
[0]);
378 d_printf("%s %d (%s) %s\\%s\n", sid_string_tos(&sid
),
379 type
, sid_type_lookup(type
), dom
, name
);
383 static int net_lookup_dsgetdcname(struct net_context
*c
, int argc
, const char **argv
)
386 const char *domain_name
= NULL
;
387 const char *site_name
= NULL
;
389 struct netr_DsRGetDCNameInfo
*info
= NULL
;
393 if (argc
< 1 || argc
> 3) {
396 _(" net lookup dsgetdcname "
397 "<name> <flags> <sitename>\n"));
401 mem_ctx
= talloc_init("net_lookup_dsgetdcname");
406 domain_name
= argv
[0];
409 sscanf(argv
[1], "%x", &flags
);
412 flags
|= DS_DIRECTORY_SERVICE_REQUIRED
;
420 d_fprintf(stderr
, _("Could not initialise message context. "
421 "Try running as root\n"));
425 status
= dsgetdcname(mem_ctx
, c
->msg_ctx
, domain_name
, NULL
, site_name
,
427 if (!NT_STATUS_IS_OK(status
)) {
428 d_printf(_("failed with: %s\n"), nt_errstr(status
));
429 TALLOC_FREE(mem_ctx
);
433 s
= NDR_PRINT_STRUCT_STRING(mem_ctx
, netr_DsRGetDCNameInfo
, info
);
437 TALLOC_FREE(mem_ctx
);
442 /* lookup hosts or IP addresses using internal samba lookup fns */
443 int net_lookup(struct net_context
*c
, int argc
, const char **argv
)
447 struct functable table
[] = {
448 {"HOST", net_lookup_host
},
449 {"LDAP", net_lookup_ldap
},
450 {"DC", net_lookup_dc
},
451 {"PDC", net_lookup_pdc
},
452 {"MASTER", net_lookup_master
},
453 {"KDC", net_lookup_kdc
},
454 {"NAME", net_lookup_name
},
455 {"SID", net_lookup_sid
},
456 {"DSGETDCNAME", net_lookup_dsgetdcname
},
461 d_printf(_("\nUsage: \n"));
462 return net_lookup_usage(c
, argc
, argv
);
464 for (i
=0; table
[i
].funcname
; i
++) {
465 if (strcasecmp_m(argv
[0], table
[i
].funcname
) == 0)
466 return table
[i
].fn(c
, argc
-1, argv
+1);
469 /* Default to lookup a hostname so 'net lookup foo#1b' can be
470 used instead of 'net lookup host foo#1b'. The host syntax
471 is a bit confusing as non #00 names can't really be
472 considered hosts as such. */
474 return net_lookup_host(c
, argc
, argv
);