source3/utils/net_lookup.c

   1 /*
   2    Samba Unix/Linux SMB client library
   3    net lookup command
   4    Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.  */
  18
  19 #include "includes.h"
  20 #include "utils/net.h"
  21 #include "libsmb/namequery.h"
  22 #include "libads/sitename_cache.h"
  23 #include "lib/addns/dnsquery_srv.h"
  24 #include "../librpc/gen_ndr/ndr_netlogon.h"
  25 #include "smb_krb5.h"
  26 #include "../libcli/security/security.h"
  27 #include "passdb/lookup_sid.h"
  28 #include "libsmb/dsgetdcname.h"
  29
  30 int net_lookup_usage(struct net_context *c, int argc, const char **argv)
  31 {
  32         d_printf(_(
  33 "  net lookup [host] HOSTNAME[#<type>]\n\tgives IP for a hostname\n\n"
  34 "  net lookup ldap [domain] [sitename]\n\tgives IP of domain's ldap server\n\n"
  35 "  net lookup kdc [realm]\n\tgives IP of realm's kerberos KDC\n\n"
  36 "  net lookup pdc [domain|realm]\n\tgives IP of realm's kerberos KDC\n\n"
  37 "  net lookup dc [domain]\n\tgives IP of domains Domain Controllers\n\n"
  38 "  net lookup master [domain|wg]\n\tgive IP of master browser\n\n"
  39 "  net lookup name [name]\n\tLookup name's sid and type\n\n"
  40 "  net lookup sid [sid]\n\tGive sid's name and type\n\n"
  41 "  net lookup dsgetdcname [name] [flags] [sitename]\n\n"
  42 ));
  43         return -1;
  44 }
  45
  46 /* lookup a hostname giving an IP */
  47 static int net_lookup_host(struct net_context *c, int argc, const char **argv)
  48 {
  49         struct sockaddr_storage ss;
  50         int name_type = 0x20;
  51         char addr[INET6_ADDRSTRLEN];
  52         const char *name = argv[0];
  53         char *p;
  54
  55         if (argc == 0)
  56                 return net_lookup_usage(c, argc, argv);
  57
  58         p = strchr_m(name,'#');
  59         if (p) {
  60                 *p = '\0';
  61                 sscanf(++p,"%x",&name_type);
  62         }
  63
  64         if (!resolve_name(name, &ss, name_type, false)) {
  65                 /* we deliberately use DEBUG() here to send it to stderr
  66                    so scripts aren't mucked up */
  67                 DEBUG(0,("Didn't find %s#%02x\n", name, name_type));
  68                 return -1;
  69         }
  70
  71         print_sockaddr(addr, sizeof(addr), &ss);
  72         d_printf("%s\n", addr);
  73         return 0;
  74 }
  75
  76 #ifdef HAVE_ADS
  77 static void print_ldap_srvlist(struct dns_rr_srv *dclist, size_t numdcs)
  78 {
  79         size_t i;
  80
  81         for ( i=0; i<numdcs; i++ ) {
  82                 struct dns_rr_srv *dc = &dclist[i];
  83                 size_t j;
  84
  85                 for (j=0; j<dc->num_ips; j++) {
  86                         struct sockaddr_storage *ss = &dc->ss_s[j];
  87                         char addr[INET6_ADDRSTRLEN];
  88
  89                         print_sockaddr(addr, sizeof(addr), ss);
  90 #ifdef HAVE_IPV6
  91                         if (ss->ss_family == AF_INET6) {
  92                                 d_printf("[%s]:%"PRIu16"\n", addr, dc->port);
  93                         }
  94 #endif
  95                         if (ss->ss_family == AF_INET) {
  96                                 d_printf("%s:%"PRIu16"\n", addr, dc->port);
  97                         }
  98                 }
  99         }
 100 }
 101 #endif
 102
 103 static int net_lookup_ldap(struct net_context *c, int argc, const char **argv)
 104 {
 105 #ifdef HAVE_ADS
 106         const char *domain;
 107         struct sockaddr_storage ss;
 108         struct dns_rr_srv *dcs = NULL;
 109         size_t numdcs = 0;
 110         const char *sitename = NULL;
 111         TALLOC_CTX *ctx;
 112         NTSTATUS status;
 113         int ret;
 114         char h_name[MAX_DNS_NAME_LENGTH];
 115         char *query = NULL;
 116
 117         if (argc > 0)
 118                 domain = argv[0];
 119         else
 120                 domain = c->opt_target_workgroup;
 121
 122         if (argc > 1) {
 123                 sitename = argv[1];
 124         }
 125
 126         if ( (ctx = talloc_init("net_lookup_ldap")) == NULL ) {
 127                 d_fprintf(stderr,"net_lookup_ldap: talloc_init() %s!\n",
 128                           _("failed"));
 129                 return -1;
 130         }
 131
 132         if (sitename == NULL) {
 133                 sitename = sitename_fetch(ctx, domain);
 134         }
 135         query = ads_dns_query_string_dcs(ctx, domain);
 136
 137         DEBUG(9, ("Lookup up ldap for domain %s\n", domain));
 138
 139         status = ads_dns_query_srv(
 140                 ctx,
 141                 lp_get_async_dns_timeout(),
 142                 sitename,
 143                 query,
 144                 &dcs,
 145                 &numdcs);
 146         if ( NT_STATUS_IS_OK(status) && numdcs ) {
 147                 print_ldap_srvlist(dcs, numdcs);
 148                 TALLOC_FREE( ctx );
 149                 return 0;
 150         }
 151
 152         DEBUG(9, ("Looking up PDC for domain %s\n", domain));
 153         if (!get_pdc_ip(domain, &ss)) {
 154                 TALLOC_FREE( ctx );
 155                 return -1;
 156         }
 157
 158         ret = sys_getnameinfo((struct sockaddr *)&ss,
 159                         sizeof(struct sockaddr_storage),
 160                         h_name, sizeof(h_name),
 161                         NULL, 0,
 162                         NI_NAMEREQD);
 163
 164         if (ret) {
 165                 TALLOC_FREE( ctx );
 166                 return -1;
 167         }
 168
 169         DEBUG(9, ("Found PDC with DNS name %s\n", h_name));
 170         domain = strchr(h_name, '.');
 171         if (!domain) {
 172                 TALLOC_FREE( ctx );
 173                 return -1;
 174         }
 175         domain++;
 176
 177         DEBUG(9, ("Looking up ldap for domain %s\n", domain));
 178
 179         status = ads_dns_query_srv(
 180                 ctx,
 181                 lp_get_async_dns_timeout(),
 182                 sitename,
 183                 query,
 184                 &dcs,
 185                 &numdcs);
 186         if ( NT_STATUS_IS_OK(status) && numdcs ) {
 187                 print_ldap_srvlist(dcs, numdcs);
 188                 TALLOC_FREE( ctx );
 189                 return 0;
 190         }
 191
 192         TALLOC_FREE( ctx );
 193
 194         return -1;
 195 #endif
 196         DEBUG(1,("No ADS support\n"));
 197         return -1;
 198 }
 199
 200 static int net_lookup_dc(struct net_context *c, int argc, const char **argv)
 201 {
 202         struct samba_sockaddr *sa_list = NULL;
 203         struct sockaddr_storage ss;
 204         char *pdc_str = NULL;
 205         const char *domain = NULL;
 206         char *sitename = NULL;
 207         size_t count = 0;
 208         size_t i;
 209         char addr[INET6_ADDRSTRLEN];
 210         bool sec_ads = (lp_security() == SEC_ADS);
 211         NTSTATUS status;
 212
 213         if (sec_ads) {
 214                 domain = lp_realm();
 215         } else {
 216                 domain = c->opt_target_workgroup;
 217         }
 218
 219         if (argc > 0)
 220                 domain=argv[0];
 221
 222         /* first get PDC */
 223         if (!get_pdc_ip(domain, &ss))
 224                 return -1;
 225
 226         print_sockaddr(addr, sizeof(addr), &ss);
 227         if (asprintf(&pdc_str, "%s", addr) == -1) {
 228                 return -1;
 229         }
 230         d_printf("%s\n", pdc_str);
 231
 232         sitename = sitename_fetch(talloc_tos(), domain);
 233         status = get_sorted_dc_list(talloc_tos(),
 234                                 domain,
 235                                 sitename,
 236                                 &sa_list,
 237                                 &count,
 238                                 sec_ads);
 239         if (!NT_STATUS_IS_OK(status)) {
 240                 SAFE_FREE(pdc_str);
 241                 TALLOC_FREE(sitename);
 242                 return 0;
 243         }
 244         TALLOC_FREE(sitename);
 245         for (i=0;i<count;i++) {
 246                 print_sockaddr(addr, sizeof(addr), &sa_list[i].u.ss);
 247                 if (!strequal(pdc_str, addr))
 248                         d_printf("%s\n", addr);
 249         }
 250         TALLOC_FREE(sa_list);
 251         SAFE_FREE(pdc_str);
 252         return 0;
 253 }
 254
 255 static int net_lookup_pdc(struct net_context *c, int argc, const char **argv)
 256 {
 257         struct sockaddr_storage ss;
 258         char *pdc_str = NULL;
 259         const char *domain;
 260         char addr[INET6_ADDRSTRLEN];
 261
 262         if (lp_security() == SEC_ADS) {
 263                 domain = lp_realm();
 264         } else {
 265                 domain = c->opt_target_workgroup;
 266         }
 267
 268         if (argc > 0)
 269                 domain=argv[0];
 270
 271         /* first get PDC */
 272         if (!get_pdc_ip(domain, &ss))
 273                 return -1;
 274
 275         print_sockaddr(addr, sizeof(addr), &ss);
 276         if (asprintf(&pdc_str, "%s", addr) == -1) {
 277                 return -1;
 278         }
 279         d_printf("%s\n", pdc_str);
 280         SAFE_FREE(pdc_str);
 281         return 0;
 282 }
 283
 284
 285 static int net_lookup_master(struct net_context *c, int argc, const char **argv)
 286 {
 287         struct sockaddr_storage master_ss;
 288         const char *domain = c->opt_target_workgroup;
 289         char addr[INET6_ADDRSTRLEN];
 290
 291         if (argc > 0)
 292                 domain=argv[0];
 293
 294         if (!find_master_ip(domain, &master_ss))
 295                 return -1;
 296         print_sockaddr(addr, sizeof(addr), &master_ss);
 297         d_printf("%s\n", addr);
 298         return 0;
 299 }
 300
 301 static int net_lookup_kdc(struct net_context *c, int argc, const char **argv)
 302 {
 303 #ifdef HAVE_KRB5
 304         krb5_error_code rc;
 305         krb5_context ctx;
 306         struct samba_sockaddr *kdcs = NULL;
 307         const char *realm;
 308         char **get_host_realms = NULL;
 309         size_t num_kdcs = 0;
 310         size_t i;
 311         NTSTATUS status;
 312
 313         rc = smb_krb5_init_context_common(&ctx);
 314         if (rc) {
 315                 DBG_ERR("kerberos init context failed (%s)\n",
 316                         error_message(rc));
 317                 return -1;
 318         }
 319
 320         if (argc > 0) {
 321                 realm = argv[0];
 322         } else if (lp_realm() && *lp_realm()) {
 323                 realm = lp_realm();
 324         } else {
 325                 rc = krb5_get_host_realm(ctx, NULL, &get_host_realms);
 326                 if (rc) {
 327                         DEBUG(1,("krb5_gethost_realm failed (%s)\n",
 328                                  error_message(rc)));
 329                         krb5_free_context(ctx);
 330                         return -1;
 331                 }
 332                 realm = (const char *) *get_host_realms;
 333         }
 334
 335         status = get_kdc_list(talloc_tos(),
 336                                 realm,
 337                                 NULL,
 338                                 &kdcs,
 339                                 &num_kdcs);
 340         if (!NT_STATUS_IS_OK(status)) {
 341                 DBG_WARNING("get_kdc_list failed (%s)\n",
 342                         nt_errstr(status));
 343                 krb5_free_host_realm(ctx, get_host_realms);
 344                 krb5_free_context(ctx);
 345                 return -1;
 346         }
 347
 348         for (i = 0; i < num_kdcs; i++) {
 349                 char addr[INET6_ADDRSTRLEN];
 350
 351                 print_sockaddr(addr, sizeof(addr), &kdcs[i].u.ss);
 352
 353                 d_printf("%s:88\n", addr);
 354         }
 355
 356         krb5_free_host_realm(ctx, get_host_realms);
 357         krb5_free_context(ctx);
 358         TALLOC_FREE(kdcs);
 359         return 0;
 360 #endif
 361         DEBUG(1, ("No kerberos support\n"));
 362         return -1;
 363 }
 364
 365 static int net_lookup_name(struct net_context *c, int argc, const char **argv)
 366 {
 367         const char *dom, *name;
 368         struct dom_sid sid;
 369         struct dom_sid_buf buf;
 370         enum lsa_SidType type;
 371
 372         if (argc != 1) {
 373                 d_printf("%s\n%s",
 374                          _("Usage:"),
 375                          _(" net lookup name <name>\n"));
 376                 return -1;
 377         }
 378
 379         if (!lookup_name(talloc_tos(), argv[0], LOOKUP_NAME_ALL,
 380                          &dom, &name, &sid, &type)) {
 381                 d_printf(_("Could not lookup name %s\n"), argv[0]);
 382                 return -1;
 383         }
 384
 385         d_printf("%s %d (%s) %s\\%s\n", dom_sid_str_buf(&sid, &buf),
 386                  type, sid_type_lookup(type), dom, name);
 387         return 0;
 388 }
 389
 390 static int net_lookup_sid(struct net_context *c, int argc, const char **argv)
 391 {
 392         const char *dom, *name;
 393         struct dom_sid sid;
 394         struct dom_sid_buf buf;
 395         enum lsa_SidType type;
 396
 397         if (argc != 1) {
 398                 d_printf("%s\n%s",
 399                          _("Usage:"),
 400                          _(" net lookup sid <sid>\n"));
 401                 return -1;
 402         }
 403
 404         if (!string_to_sid(&sid, argv[0])) {
 405                 d_printf(_("Could not convert %s to SID\n"), argv[0]);
 406                 return -1;
 407         }
 408
 409         if (!lookup_sid(talloc_tos(), &sid,
 410                         &dom, &name, &type)) {
 411                 d_printf(_("Could not lookup name %s\n"), argv[0]);
 412                 return -1;
 413         }
 414
 415         d_printf("%s %d (%s) %s\\%s\n", dom_sid_str_buf(&sid, &buf),
 416                  type, sid_type_lookup(type), dom, name);
 417         return 0;
 418 }
 419
 420 static int net_lookup_dsgetdcname(struct net_context *c, int argc, const char **argv)
 421 {
 422         NTSTATUS status;
 423         const char *domain_name = NULL;
 424         const char *site_name = NULL;
 425         uint32_t flags = 0;
 426         struct netr_DsRGetDCNameInfo *info = NULL;
 427         TALLOC_CTX *mem_ctx;
 428         char *s = NULL;
 429
 430         if (argc < 1 || argc > 3) {
 431                 d_printf("%s\n%s",
 432                          _("Usage:"),
 433                          _(" net lookup dsgetdcname "
 434                            "<name> <flags> <sitename>\n"));
 435                 return -1;
 436         }
 437
 438         mem_ctx = talloc_init("net_lookup_dsgetdcname");
 439         if (!mem_ctx) {
 440                 return -1;
 441         }
 442
 443         domain_name = argv[0];
 444
 445         if (argc >= 2) {
 446                 sscanf(argv[1], "%x", &flags);
 447         }
 448
 449         if (flags == 0) {
 450                 flags = DS_DIRECTORY_SERVICE_REQUIRED;
 451         }
 452
 453         if (argc == 3) {
 454                 site_name = argv[2];
 455         }
 456
 457         if (!c->msg_ctx) {
 458                 d_fprintf(stderr, _("Could not initialise message context. "
 459                         "Try running as root\n"));
 460                 return -1;
 461         }
 462
 463         status = dsgetdcname(mem_ctx, c->msg_ctx, domain_name, NULL, site_name,
 464                              flags, &info);
 465         if (!NT_STATUS_IS_OK(status)) {
 466                 d_printf(_("failed with: %s\n"), nt_errstr(status));
 467                 TALLOC_FREE(mem_ctx);
 468                 return -1;
 469         }
 470
 471         s = NDR_PRINT_STRUCT_STRING(mem_ctx, netr_DsRGetDCNameInfo, info);
 472         printf("%s\n", s);
 473         TALLOC_FREE(s);
 474
 475         TALLOC_FREE(mem_ctx);
 476         return 0;
 477 }
 478
 479
 480 /* lookup hosts or IP addresses using internal samba lookup fns */
 481 int net_lookup(struct net_context *c, int argc, const char **argv)
 482 {
 483         int i;
 484
 485         struct functable table[] = {
 486                 {
 487                         .funcname = "HOST",
 488                         .fn       = net_lookup_host,
 489                 },
 490                 {
 491                         .funcname = "LDAP",
 492                         .fn       = net_lookup_ldap,
 493                 },
 494                 {
 495                         .funcname = "DC",
 496                         .fn       = net_lookup_dc,
 497                 },
 498                 {
 499                         .funcname = "PDC",
 500                         .fn       = net_lookup_pdc,
 501                 },
 502                 {
 503                         .funcname = "MASTER",
 504                         .fn       = net_lookup_master,
 505                 },
 506                 {
 507                         .funcname = "KDC",
 508                         .fn       = net_lookup_kdc,
 509                 },
 510                 {
 511                         .funcname = "NAME",
 512                         .fn       = net_lookup_name,
 513                 },
 514                 {
 515                         .funcname = "SID",
 516                         .fn       = net_lookup_sid,
 517                 },
 518                 {
 519                         .funcname = "DSGETDCNAME",
 520                         .fn       = net_lookup_dsgetdcname,
 521                 },
 522                 {
 523                         .funcname = NULL,
 524                 },
 525         };
 526
 527         if (argc < 1) {
 528                 d_printf(_("\nUsage: \n"));
 529                 return net_lookup_usage(c, argc, argv);
 530         }
 531         for (i=0; table[i].funcname; i++) {
 532                 if (strcasecmp_m(argv[0], table[i].funcname) == 0)
 533                         return table[i].fn(c, argc-1, argv+1);
 534         }
 535
 536         /* Default to lookup a hostname so 'net lookup foo#1b' can be
 537            used instead of 'net lookup host foo#1b'.  The host syntax
 538            is a bit confusing as non #00 names can't really be
 539            considered hosts as such. */
 540
 541         return net_lookup_host(c, argc, argv);
 542 }