source3/utils/net_lookup.c

   1 /*
   2    Samba Unix/Linux SMB client library
   3    net lookup command
   4    Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.  */
  18
  19 #include "includes.h"
  20 #include "utils/net.h"
  21
  22 int net_lookup_usage(struct net_context *c, int argc, const char **argv)
  23 {
  24         d_printf(_(
  25 "  net lookup [host] HOSTNAME[#<type>]\n\tgives IP for a hostname\n\n"
  26 "  net lookup ldap [domain]\n\tgives IP of domain's ldap server\n\n"
  27 "  net lookup kdc [realm]\n\tgives IP of realm's kerberos KDC\n\n"
  28 "  net lookup pdc [domain|realm]\n\tgives IP of realm's kerberos KDC\n\n"
  29 "  net lookup dc [domain]\n\tgives IP of domains Domain Controllers\n\n"
  30 "  net lookup master [domain|wg]\n\tgive IP of master browser\n\n"
  31 "  net lookup name [name]\n\tLookup name's sid and type\n\n"
  32 "  net lookup sid [sid]\n\tGive sid's name and type\n\n"
  33 "  net lookup dsgetdcname [name] [flags] [sitename]\n\n"
  34 ));
  35         return -1;
  36 }
  37
  38 /* lookup a hostname giving an IP */
  39 static int net_lookup_host(struct net_context *c, int argc, const char **argv)
  40 {
  41         struct sockaddr_storage ss;
  42         int name_type = 0x20;
  43         char addr[INET6_ADDRSTRLEN];
  44         const char *name = argv[0];
  45         char *p;
  46
  47         if (argc == 0)
  48                 return net_lookup_usage(c, argc, argv);
  49
  50         p = strchr_m(name,'#');
  51         if (p) {
  52                 *p = '\0';
  53                 sscanf(++p,"%x",&name_type);
  54         }
  55
  56         if (!resolve_name(name, &ss, name_type, false)) {
  57                 /* we deliberately use DEBUG() here to send it to stderr
  58                    so scripts aren't mucked up */
  59                 DEBUG(0,("Didn't find %s#%02x\n", name, name_type));
  60                 return -1;
  61         }
  62
  63         print_sockaddr(addr, sizeof(addr), &ss);
  64         d_printf("%s\n", addr);
  65         return 0;
  66 }
  67
  68 #ifdef HAVE_ADS
  69 static void print_ldap_srvlist(struct dns_rr_srv *dclist, int numdcs )
  70 {
  71         struct sockaddr_storage ss;
  72         int i;
  73
  74         for ( i=0; i<numdcs; i++ ) {
  75                 if (resolve_name(dclist[i].hostname, &ss, 0x20, true) ) {
  76                         char addr[INET6_ADDRSTRLEN];
  77                         print_sockaddr(addr, sizeof(addr), &ss);
  78 #ifdef HAVE_IPV6
  79                         if (ss.ss_family == AF_INET6) {
  80                                 d_printf("[%s]:%d\n", addr, dclist[i].port);
  81                         }
  82 #endif
  83                         if (ss.ss_family == AF_INET) {
  84                                 d_printf("%s:%d\n", addr, dclist[i].port);
  85                         }
  86                 }
  87         }
  88 }
  89 #endif
  90
  91 static int net_lookup_ldap(struct net_context *c, int argc, const char **argv)
  92 {
  93 #ifdef HAVE_ADS
  94         const char *domain;
  95         struct sockaddr_storage ss;
  96         struct dns_rr_srv *dcs = NULL;
  97         int numdcs = 0;
  98         char *sitename;
  99         TALLOC_CTX *ctx;
 100         NTSTATUS status;
 101         int ret;
 102         char h_name[MAX_DNS_NAME_LENGTH];
 103
 104         if (argc > 0)
 105                 domain = argv[0];
 106         else
 107                 domain = c->opt_target_workgroup;
 108
 109         sitename = sitename_fetch(domain);
 110
 111         if ( (ctx = talloc_init("net_lookup_ldap")) == NULL ) {
 112                 d_fprintf(stderr,"net_lookup_ldap: talloc_init() %s!\n",
 113                           _("failed"));
 114                 SAFE_FREE(sitename);
 115                 return -1;
 116         }
 117
 118         DEBUG(9, ("Lookup up ldap for domain %s\n", domain));
 119
 120         status = ads_dns_query_dcs( ctx, domain, sitename, &dcs, &numdcs );
 121         if ( NT_STATUS_IS_OK(status) && numdcs ) {
 122                 print_ldap_srvlist(dcs, numdcs);
 123                 TALLOC_FREE( ctx );
 124                 SAFE_FREE(sitename);
 125                 return 0;
 126         }
 127
 128         DEBUG(9, ("Looking up PDC for domain %s\n", domain));
 129         if (!get_pdc_ip(domain, &ss)) {
 130                 TALLOC_FREE( ctx );
 131                 SAFE_FREE(sitename);
 132                 return -1;
 133         }
 134
 135         ret = sys_getnameinfo((struct sockaddr *)&ss,
 136                         sizeof(struct sockaddr_storage),
 137                         h_name, sizeof(h_name),
 138                         NULL, 0,
 139                         NI_NAMEREQD);
 140
 141         if (ret) {
 142                 TALLOC_FREE( ctx );
 143                 SAFE_FREE(sitename);
 144                 return -1;
 145         }
 146
 147         DEBUG(9, ("Found PDC with DNS name %s\n", h_name));
 148         domain = strchr(h_name, '.');
 149         if (!domain) {
 150                 TALLOC_FREE( ctx );
 151                 SAFE_FREE(sitename);
 152                 return -1;
 153         }
 154         domain++;
 155
 156         DEBUG(9, ("Looking up ldap for domain %s\n", domain));
 157
 158         status = ads_dns_query_dcs( ctx, domain, sitename, &dcs, &numdcs );
 159         if ( NT_STATUS_IS_OK(status) && numdcs ) {
 160                 print_ldap_srvlist(dcs, numdcs);
 161                 TALLOC_FREE( ctx );
 162                 SAFE_FREE(sitename);
 163                 return 0;
 164         }
 165
 166         TALLOC_FREE( ctx );
 167         SAFE_FREE(sitename);
 168
 169         return -1;
 170 #endif
 171         DEBUG(1,("No ADS support\n"));
 172         return -1;
 173 }
 174
 175 static int net_lookup_dc(struct net_context *c, int argc, const char **argv)
 176 {
 177         struct ip_service *ip_list;
 178         struct sockaddr_storage ss;
 179         char *pdc_str = NULL;
 180         const char *domain = NULL;
 181         char *sitename = NULL;
 182         int count, i;
 183         char addr[INET6_ADDRSTRLEN];
 184         bool sec_ads = (lp_security() == SEC_ADS);
 185
 186         if (sec_ads) {
 187                 domain = lp_realm();
 188         } else {
 189                 domain = c->opt_target_workgroup;
 190         }
 191
 192         if (argc > 0)
 193                 domain=argv[0];
 194
 195         /* first get PDC */
 196         if (!get_pdc_ip(domain, &ss))
 197                 return -1;
 198
 199         print_sockaddr(addr, sizeof(addr), &ss);
 200         if (asprintf(&pdc_str, "%s", addr) == -1) {
 201                 return -1;
 202         }
 203         d_printf("%s\n", pdc_str);
 204
 205         sitename = sitename_fetch(domain);
 206         if (!NT_STATUS_IS_OK(get_sorted_dc_list(domain, sitename,
 207                                         &ip_list, &count, sec_ads))) {
 208                 SAFE_FREE(pdc_str);
 209                 SAFE_FREE(sitename);
 210                 return 0;
 211         }
 212         SAFE_FREE(sitename);
 213         for (i=0;i<count;i++) {
 214                 print_sockaddr(addr, sizeof(addr), &ip_list[i].ss);
 215                 if (!strequal(pdc_str, addr))
 216                         d_printf("%s\n", addr);
 217         }
 218         SAFE_FREE(pdc_str);
 219         return 0;
 220 }
 221
 222 static int net_lookup_pdc(struct net_context *c, int argc, const char **argv)
 223 {
 224         struct sockaddr_storage ss;
 225         char *pdc_str = NULL;
 226         const char *domain;
 227         char addr[INET6_ADDRSTRLEN];
 228
 229         if (lp_security() == SEC_ADS) {
 230                 domain = lp_realm();
 231         } else {
 232                 domain = c->opt_target_workgroup;
 233         }
 234
 235         if (argc > 0)
 236                 domain=argv[0];
 237
 238         /* first get PDC */
 239         if (!get_pdc_ip(domain, &ss))
 240                 return -1;
 241
 242         print_sockaddr(addr, sizeof(addr), &ss);
 243         if (asprintf(&pdc_str, "%s", addr) == -1) {
 244                 return -1;
 245         }
 246         d_printf("%s\n", pdc_str);
 247         SAFE_FREE(pdc_str);
 248         return 0;
 249 }
 250
 251
 252 static int net_lookup_master(struct net_context *c, int argc, const char **argv)
 253 {
 254         struct sockaddr_storage master_ss;
 255         const char *domain = c->opt_target_workgroup;
 256         char addr[INET6_ADDRSTRLEN];
 257
 258         if (argc > 0)
 259                 domain=argv[0];
 260
 261         if (!find_master_ip(domain, &master_ss))
 262                 return -1;
 263         print_sockaddr(addr, sizeof(addr), &master_ss);
 264         d_printf("%s\n", addr);
 265         return 0;
 266 }
 267
 268 static int net_lookup_kdc(struct net_context *c, int argc, const char **argv)
 269 {
 270 #ifdef HAVE_KRB5
 271         krb5_error_code rc;
 272         krb5_context ctx;
 273         struct sockaddr_in *addrs;
 274         int num_kdcs,i;
 275         krb5_data realm;
 276         char **realms;
 277
 278         initialize_krb5_error_table();
 279         rc = krb5_init_context(&ctx);
 280         if (rc) {
 281                 DEBUG(1,("krb5_init_context failed (%s)\n",
 282                          error_message(rc)));
 283                 return -1;
 284         }
 285
 286         if (argc>0) {
 287                 realm.data = CONST_DISCARD(char *, argv[0]);
 288                 realm.length = strlen(argv[0]);
 289         } else if (lp_realm() && *lp_realm()) {
 290                 realm.data = lp_realm();
 291                 realm.length = strlen((const char *)realm.data);
 292         } else {
 293                 rc = krb5_get_host_realm(ctx, NULL, &realms);
 294                 if (rc) {
 295                         DEBUG(1,("krb5_gethost_realm failed (%s)\n",
 296                                  error_message(rc)));
 297                         return -1;
 298                 }
 299                 realm.data = (char *) *realms;
 300                 realm.length = strlen((const char *)realm.data);
 301         }
 302
 303         rc = smb_krb5_locate_kdc(ctx, &realm, (struct sockaddr **)(void *)&addrs, &num_kdcs, 0);
 304         if (rc) {
 305                 DEBUG(1, ("smb_krb5_locate_kdc failed (%s)\n", error_message(rc)));
 306                 return -1;
 307         }
 308         for (i=0;i<num_kdcs;i++)
 309                 if (addrs[i].sin_family == AF_INET)
 310                         d_printf("%s:%hd\n", inet_ntoa(addrs[i].sin_addr),
 311                                  ntohs(addrs[i].sin_port));
 312         return 0;
 313
 314 #endif
 315         DEBUG(1, ("No kerberos support\n"));
 316         return -1;
 317 }
 318
 319 static int net_lookup_name(struct net_context *c, int argc, const char **argv)
 320 {
 321         const char *dom, *name;
 322         DOM_SID sid;
 323         enum lsa_SidType type;
 324
 325         if (argc != 1) {
 326                 d_printf("%s\n%s",
 327                          _("Usage:"),
 328                          _(" net lookup name <name>\n"));
 329                 return -1;
 330         }
 331
 332         if (!lookup_name(talloc_tos(), argv[0], LOOKUP_NAME_ALL,
 333                          &dom, &name, &sid, &type)) {
 334                 d_printf(_("Could not lookup name %s\n"), argv[0]);
 335                 return -1;
 336         }
 337
 338         d_printf("%s %d (%s) %s\\%s\n", sid_string_tos(&sid),
 339                  type, sid_type_lookup(type), dom, name);
 340         return 0;
 341 }
 342
 343 static int net_lookup_sid(struct net_context *c, int argc, const char **argv)
 344 {
 345         const char *dom, *name;
 346         DOM_SID sid;
 347         enum lsa_SidType type;
 348
 349         if (argc != 1) {
 350                 d_printf("%s\n%s",
 351                          _("Usage:"),
 352                          _(" net lookup sid <sid>\n"));
 353                 return -1;
 354         }
 355
 356         if (!string_to_sid(&sid, argv[0])) {
 357                 d_printf(_("Could not convert %s to SID\n"), argv[0]);
 358                 return -1;
 359         }
 360
 361         if (!lookup_sid(talloc_tos(), &sid,
 362                         &dom, &name, &type)) {
 363                 d_printf(_("Could not lookup name %s\n"), argv[0]);
 364                 return -1;
 365         }
 366
 367         d_printf("%s %d (%s) %s\\%s\n", sid_string_tos(&sid),
 368                  type, sid_type_lookup(type), dom, name);
 369         return 0;
 370 }
 371
 372 static int net_lookup_dsgetdcname(struct net_context *c, int argc, const char **argv)
 373 {
 374         NTSTATUS status;
 375         const char *domain_name = NULL;
 376         const char *site_name = NULL;
 377         uint32_t flags = 0;
 378         struct netr_DsRGetDCNameInfo *info = NULL;
 379         TALLOC_CTX *mem_ctx;
 380         char *s = NULL;
 381
 382         if (argc < 1 || argc > 3) {
 383                 d_printf("%s\n%s",
 384                          _("Usage:"),
 385                          _(" net lookup dsgetdcname "
 386                            "<name> <flags> <sitename>\n"));
 387                 return -1;
 388         }
 389
 390         mem_ctx = talloc_init("net_lookup_dsgetdcname");
 391         if (!mem_ctx) {
 392                 return -1;
 393         }
 394
 395         domain_name = argv[0];
 396
 397         if (argc >= 2)
 398                 sscanf(argv[1], "%x", &flags);
 399
 400         if (!flags) {
 401                 flags |= DS_DIRECTORY_SERVICE_REQUIRED;
 402         }
 403
 404         if (argc == 3) {
 405                 site_name = argv[2];
 406         }
 407
 408         status = dsgetdcname(mem_ctx, NULL, domain_name, NULL, site_name,
 409                              flags, &info);
 410         if (!NT_STATUS_IS_OK(status)) {
 411                 d_printf(_("failed with: %s\n"), nt_errstr(status));
 412                 TALLOC_FREE(mem_ctx);
 413                 return -1;
 414         }
 415
 416         s = NDR_PRINT_STRUCT_STRING(mem_ctx, netr_DsRGetDCNameInfo, info);
 417         printf("%s\n", s);
 418         TALLOC_FREE(s);
 419
 420         TALLOC_FREE(mem_ctx);
 421         return 0;
 422 }
 423
 424
 425 /* lookup hosts or IP addresses using internal samba lookup fns */
 426 int net_lookup(struct net_context *c, int argc, const char **argv)
 427 {
 428         int i;
 429
 430         struct functable table[] = {
 431                 {"HOST", net_lookup_host},
 432                 {"LDAP", net_lookup_ldap},
 433                 {"DC", net_lookup_dc},
 434                 {"PDC", net_lookup_pdc},
 435                 {"MASTER", net_lookup_master},
 436                 {"KDC", net_lookup_kdc},
 437                 {"NAME", net_lookup_name},
 438                 {"SID", net_lookup_sid},
 439                 {"DSGETDCNAME", net_lookup_dsgetdcname},
 440                 {NULL, NULL}
 441         };
 442
 443         if (argc < 1) {
 444                 d_printf(_("\nUsage: \n"));
 445                 return net_lookup_usage(c, argc, argv);
 446         }
 447         for (i=0; table[i].funcname; i++) {
 448                 if (StrCaseCmp(argv[0], table[i].funcname) == 0)
 449                         return table[i].fn(c, argc-1, argv+1);
 450         }
 451
 452         /* Default to lookup a hostname so 'net lookup foo#1b' can be
 453            used instead of 'net lookup host foo#1b'.  The host syntax
 454            is a bit confusing as non #00 names can't really be
 455            considered hosts as such. */
 456
 457         return net_lookup_host(c, argc, argv);
 458 }