source/nsswitch/wbinfo.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    Winbind status program.
   5
   6    Copyright (C) Tim Potter      2000-2002
   7    Copyright (C) Andrew Bartlett 2002
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 2 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program; if not, write to the Free Software
  21    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  22 */
  23
  24 #include "includes.h"
  25 #include "winbindd.h"
  26 #include "debug.h"
  27
  28 #undef DBGC_CLASS
  29 #define DBGC_CLASS DBGC_WINBIND
  30
  31 /* Prototypes from common.h */
  32
  33 NSS_STATUS winbindd_request(int req_type,
  34                             struct winbindd_request *request,
  35                             struct winbindd_response *response);
  36
  37 static char winbind_separator(void)
  38 {
  39         struct winbindd_response response;
  40         static BOOL got_sep;
  41         static char sep;
  42
  43         if (got_sep)
  44                 return sep;
  45
  46         ZERO_STRUCT(response);
  47
  48         /* Send off request */
  49
  50         if (winbindd_request(WINBINDD_INFO, NULL, &response) !=
  51             NSS_STATUS_SUCCESS) {
  52                 d_printf("could not obtain winbind separator!\n");
  53                 /* HACK: (this module should not call lp_ funtions) */
  54                 return *lp_winbind_separator();
  55         }
  56
  57         sep = response.data.info.winbind_separator;
  58         got_sep = True;
  59
  60         if (!sep) {
  61                 d_printf("winbind separator was NULL!\n");
  62                 /* HACK: (this module should not call lp_ funtions) */
  63                 sep = *lp_winbind_separator();
  64         }
  65
  66         return sep;
  67 }
  68
  69 static char *get_winbind_domain(void)
  70 {
  71         struct winbindd_response response;
  72         static fstring winbind_domain;
  73
  74         ZERO_STRUCT(response);
  75
  76         /* Send off request */
  77
  78         if (winbindd_request(WINBINDD_DOMAIN_NAME, NULL, &response) !=
  79             NSS_STATUS_SUCCESS) {
  80                 d_printf("could not obtain winbind domain name!\n");
  81
  82                 /* HACK: (this module should not call lp_ funtions) */
  83                 return lp_workgroup();
  84         }
  85
  86         fstrcpy(winbind_domain, response.data.domain_name);
  87
  88         return winbind_domain;
  89
  90 }
  91
  92 /* Copy of parse_domain_user from winbindd_util.c.  Parse a string of the
  93    form DOMAIN/user into a domain and a user */
  94
  95 static BOOL parse_wbinfo_domain_user(const char *domuser, fstring domain,
  96                                      fstring user)
  97 {
  98
  99         char *p = strchr(domuser,winbind_separator());
 100
 101         if (!p) {
 102                 fstrcpy(user, domuser);
 103                 fstrcpy(domain, get_winbind_domain());
 104                 return True;
 105         }
 106
 107         fstrcpy(user, p+1);
 108         fstrcpy(domain, domuser);
 109         domain[PTR_DIFF(p, domuser)] = 0;
 110         strupper(domain);
 111
 112         return True;
 113 }
 114
 115 /* List groups a user is a member of */
 116
 117 static BOOL wbinfo_get_usergroups(char *user)
 118 {
 119         struct winbindd_request request;
 120         struct winbindd_response response;
 121         NSS_STATUS result;
 122         int i;
 123
 124         ZERO_STRUCT(response);
 125
 126         /* Send request */
 127
 128         fstrcpy(request.data.username, user);
 129
 130         result = winbindd_request(WINBINDD_GETGROUPS, &request, &response);
 131
 132         if (result != NSS_STATUS_SUCCESS)
 133                 return False;
 134
 135         for (i = 0; i < response.data.num_entries; i++)
 136                 d_printf("%d\n", (int)((gid_t *)response.extra_data)[i]);
 137
 138         SAFE_FREE(response.extra_data);
 139
 140         return True;
 141 }
 142
 143 /* Convert NetBIOS name to IP */
 144
 145 static BOOL wbinfo_wins_byname(char *name)
 146 {
 147         struct winbindd_request request;
 148         struct winbindd_response response;
 149
 150         ZERO_STRUCT(request);
 151         ZERO_STRUCT(response);
 152
 153         /* Send request */
 154
 155         fstrcpy(request.data.winsreq, name);
 156
 157         if (winbindd_request(WINBINDD_WINS_BYNAME, &request, &response) !=
 158             NSS_STATUS_SUCCESS) {
 159                 return False;
 160         }
 161
 162         /* Display response */
 163
 164         printf("%s\n", response.data.winsresp);
 165
 166         return True;
 167 }
 168
 169 /* Convert IP to NetBIOS name */
 170
 171 static BOOL wbinfo_wins_byip(char *ip)
 172 {
 173         struct winbindd_request request;
 174         struct winbindd_response response;
 175
 176         ZERO_STRUCT(request);
 177         ZERO_STRUCT(response);
 178
 179         /* Send request */
 180
 181         fstrcpy(request.data.winsreq, ip);
 182
 183         if (winbindd_request(WINBINDD_WINS_BYIP, &request, &response) !=
 184             NSS_STATUS_SUCCESS) {
 185                 return False;
 186         }
 187
 188         /* Display response */
 189
 190         printf("%s\n", response.data.winsresp);
 191
 192         return True;
 193 }
 194
 195 /* List trusted domains */
 196
 197 static BOOL wbinfo_list_domains(void)
 198 {
 199         struct winbindd_response response;
 200         fstring name;
 201
 202         ZERO_STRUCT(response);
 203
 204         /* Send request */
 205
 206         if (winbindd_request(WINBINDD_LIST_TRUSTDOM, NULL, &response) !=
 207             NSS_STATUS_SUCCESS)
 208                 return False;
 209
 210         /* Display response */
 211
 212         if (response.extra_data) {
 213                 char *extra_data = (char *)response.extra_data;
 214
 215                 while(next_token(&extra_data, name, ",", sizeof(fstring)))
 216                         d_printf("%s\n", name);
 217
 218                 SAFE_FREE(response.extra_data);
 219         }
 220
 221         return True;
 222 }
 223
 224
 225 /* show sequence numbers */
 226 static BOOL wbinfo_show_sequence(void)
 227 {
 228         struct winbindd_response response;
 229
 230         ZERO_STRUCT(response);
 231
 232         /* Send request */
 233
 234         if (winbindd_request(WINBINDD_SHOW_SEQUENCE, NULL, &response) !=
 235             NSS_STATUS_SUCCESS)
 236                 return False;
 237
 238         /* Display response */
 239
 240         if (response.extra_data) {
 241                 char *extra_data = (char *)response.extra_data;
 242                 d_printf("%s", extra_data);
 243                 SAFE_FREE(response.extra_data);
 244         }
 245
 246         return True;
 247 }
 248
 249 /* Check trust account password */
 250
 251 static BOOL wbinfo_check_secret(void)
 252 {
 253         struct winbindd_response response;
 254         NSS_STATUS result;
 255
 256         ZERO_STRUCT(response);
 257
 258         result = winbindd_request(WINBINDD_CHECK_MACHACC, NULL, &response);
 259
 260         d_printf("checking the trust secret via RPC calls %s\n",
 261                  (result == NSS_STATUS_SUCCESS) ? "succeeded" : "failed");
 262
 263         if (result != NSS_STATUS_SUCCESS)
 264                 d_printf("error code was %s (0x%x)\n",
 265                          response.data.auth.nt_status_string,
 266                          response.data.auth.nt_status);
 267
 268         return result == NSS_STATUS_SUCCESS;
 269 }
 270
 271 /* Convert uid to sid */
 272
 273 static BOOL wbinfo_uid_to_sid(uid_t uid)
 274 {
 275         struct winbindd_request request;
 276         struct winbindd_response response;
 277
 278         ZERO_STRUCT(request);
 279         ZERO_STRUCT(response);
 280
 281         /* Send request */
 282
 283         request.data.uid = uid;
 284
 285         if (winbindd_request(WINBINDD_UID_TO_SID, &request, &response) !=
 286             NSS_STATUS_SUCCESS)
 287                 return False;
 288
 289         /* Display response */
 290
 291         d_printf("%s\n", response.data.sid.sid);
 292
 293         return True;
 294 }
 295
 296 /* Convert gid to sid */
 297
 298 static BOOL wbinfo_gid_to_sid(gid_t gid)
 299 {
 300         struct winbindd_request request;
 301         struct winbindd_response response;
 302
 303         ZERO_STRUCT(request);
 304         ZERO_STRUCT(response);
 305
 306         /* Send request */
 307
 308         request.data.gid = gid;
 309
 310         if (winbindd_request(WINBINDD_GID_TO_SID, &request, &response) !=
 311             NSS_STATUS_SUCCESS)
 312                 return False;
 313
 314         /* Display response */
 315
 316         d_printf("%s\n", response.data.sid.sid);
 317
 318         return True;
 319 }
 320
 321 /* Convert sid to uid */
 322
 323 static BOOL wbinfo_sid_to_uid(char *sid)
 324 {
 325         struct winbindd_request request;
 326         struct winbindd_response response;
 327
 328         ZERO_STRUCT(request);
 329         ZERO_STRUCT(response);
 330
 331         /* Send request */
 332
 333         fstrcpy(request.data.sid, sid);
 334
 335         if (winbindd_request(WINBINDD_SID_TO_UID, &request, &response) !=
 336             NSS_STATUS_SUCCESS)
 337                 return False;
 338
 339         /* Display response */
 340
 341         d_printf("%d\n", (int)response.data.uid);
 342
 343         return True;
 344 }
 345
 346 static BOOL wbinfo_sid_to_gid(char *sid)
 347 {
 348         struct winbindd_request request;
 349         struct winbindd_response response;
 350
 351         ZERO_STRUCT(request);
 352         ZERO_STRUCT(response);
 353
 354         /* Send request */
 355
 356         fstrcpy(request.data.sid, sid);
 357
 358         if (winbindd_request(WINBINDD_SID_TO_GID, &request, &response) !=
 359             NSS_STATUS_SUCCESS)
 360                 return False;
 361
 362         /* Display response */
 363
 364         d_printf("%d\n", (int)response.data.gid);
 365
 366         return True;
 367 }
 368
 369 /* Convert sid to string */
 370
 371 static BOOL wbinfo_lookupsid(char *sid)
 372 {
 373         struct winbindd_request request;
 374         struct winbindd_response response;
 375
 376         ZERO_STRUCT(request);
 377         ZERO_STRUCT(response);
 378
 379         /* Send off request */
 380
 381         fstrcpy(request.data.sid, sid);
 382
 383         if (winbindd_request(WINBINDD_LOOKUPSID, &request, &response) !=
 384             NSS_STATUS_SUCCESS)
 385                 return False;
 386
 387         /* Display response */
 388
 389         d_printf("%s%c%s %d\n", response.data.name.dom_name,
 390                  winbind_separator(), response.data.name.name,
 391                  response.data.name.type);
 392
 393         return True;
 394 }
 395
 396 /* Convert string to sid */
 397
 398 static BOOL wbinfo_lookupname(char *name)
 399 {
 400         struct winbindd_request request;
 401         struct winbindd_response response;
 402
 403         /* Send off request */
 404
 405         ZERO_STRUCT(request);
 406         ZERO_STRUCT(response);
 407
 408         parse_wbinfo_domain_user(name, request.data.name.dom_name,
 409                                  request.data.name.name);
 410
 411         if (winbindd_request(WINBINDD_LOOKUPNAME, &request, &response) !=
 412             NSS_STATUS_SUCCESS)
 413                 return False;
 414
 415         /* Display response */
 416
 417         d_printf("%s %d\n", response.data.sid.sid, response.data.sid.type);
 418
 419         return True;
 420 }
 421
 422 /* Authenticate a user with a plaintext password */
 423
 424 static BOOL wbinfo_auth(char *username)
 425 {
 426         struct winbindd_request request;
 427         struct winbindd_response response;
 428         NSS_STATUS result;
 429         char *p;
 430
 431         /* Send off request */
 432
 433         ZERO_STRUCT(request);
 434         ZERO_STRUCT(response);
 435
 436         p = strchr(username, '%');
 437
 438         if (p) {
 439                 *p = 0;
 440                 fstrcpy(request.data.auth.user, username);
 441                 fstrcpy(request.data.auth.pass, p + 1);
 442                 *p = '%';
 443         } else
 444                 fstrcpy(request.data.auth.user, username);
 445
 446         result = winbindd_request(WINBINDD_PAM_AUTH, &request, &response);
 447
 448         /* Display response */
 449
 450         d_printf("plaintext password authentication %s\n",
 451                (result == NSS_STATUS_SUCCESS) ? "succeeded" : "failed");
 452
 453         d_printf("error code was %s (0x%x)\n",
 454                  response.data.auth.nt_status_string,
 455                  response.data.auth.nt_status);
 456
 457         return result == NSS_STATUS_SUCCESS;
 458 }
 459
 460 /* Authenticate a user with a challenge/response */
 461
 462 static BOOL wbinfo_auth_crap(char *username)
 463 {
 464         struct winbindd_request request;
 465         struct winbindd_response response;
 466         NSS_STATUS result;
 467         fstring name_user;
 468         fstring name_domain;
 469         fstring pass;
 470         char *p;
 471
 472         /* Send off request */
 473
 474         ZERO_STRUCT(request);
 475         ZERO_STRUCT(response);
 476
 477         p = strchr(username, '%');
 478
 479         if (p) {
 480                 *p = 0;
 481                 fstrcpy(pass, p + 1);
 482         }
 483
 484         parse_wbinfo_domain_user(username, name_domain, name_user);
 485
 486         fstrcpy(request.data.auth_crap.user, name_user);
 487
 488         fstrcpy(request.data.auth_crap.domain, name_domain);
 489
 490         generate_random_buffer(request.data.auth_crap.chal, 8, False);
 491
 492         SMBencrypt(pass, request.data.auth_crap.chal,
 493                    (uchar *)request.data.auth_crap.lm_resp);
 494         SMBNTencrypt(pass, request.data.auth_crap.chal,
 495                      (uchar *)request.data.auth_crap.nt_resp);
 496
 497         request.data.auth_crap.lm_resp_len = 24;
 498         request.data.auth_crap.nt_resp_len = 24;
 499
 500         result = winbindd_request(WINBINDD_PAM_AUTH_CRAP, &request, &response);
 501
 502         /* Display response */
 503
 504         d_printf("challenge/response password authentication %s\n",
 505                (result == NSS_STATUS_SUCCESS) ? "succeeded" : "failed");
 506
 507         d_printf("error code was %s (0x%x)\n",
 508                response.data.auth.nt_status_string,
 509                response.data.auth.nt_status);
 510
 511         return result == NSS_STATUS_SUCCESS;
 512 }
 513
 514 /* Print domain users */
 515
 516 static BOOL print_domain_users(void)
 517 {
 518         struct winbindd_response response;
 519         char *extra_data;
 520         fstring name;
 521
 522         /* Send request to winbind daemon */
 523
 524         ZERO_STRUCT(response);
 525
 526         if (winbindd_request(WINBINDD_LIST_USERS, NULL, &response) !=
 527             NSS_STATUS_SUCCESS)
 528                 return False;
 529
 530         /* Look through extra data */
 531
 532         if (!response.extra_data)
 533                 return False;
 534
 535         extra_data = (char *)response.extra_data;
 536
 537         while(next_token(&extra_data, name, ",", sizeof(fstring)))
 538                 d_printf("%s\n", name);
 539
 540         SAFE_FREE(response.extra_data);
 541
 542         return True;
 543 }
 544
 545 /* Print domain groups */
 546
 547 static BOOL print_domain_groups(void)
 548 {
 549         struct winbindd_response response;
 550         char *extra_data;
 551         fstring name;
 552
 553         ZERO_STRUCT(response);
 554
 555         if (winbindd_request(WINBINDD_LIST_GROUPS, NULL, &response) !=
 556             NSS_STATUS_SUCCESS)
 557                 return False;
 558
 559         /* Look through extra data */
 560
 561         if (!response.extra_data)
 562                 return False;
 563
 564         extra_data = (char *)response.extra_data;
 565
 566         while(next_token(&extra_data, name, ",", sizeof(fstring)))
 567                 d_printf("%s\n", name);
 568
 569         SAFE_FREE(response.extra_data);
 570
 571         return True;
 572 }
 573
 574 /* Set the authorised user for winbindd access in secrets.tdb */
 575
 576 static BOOL wbinfo_set_auth_user(char *username)
 577 {
 578         char *password;
 579         fstring user, domain;
 580
 581         /* Separate into user and password */
 582
 583         parse_wbinfo_domain_user(username, domain, user);
 584
 585         password = strchr(user, '%');
 586
 587         if (password) {
 588                 *password = 0;
 589                 password++;
 590         } else
 591                 password = "";
 592
 593         /* Store in secrets.tdb */
 594
 595         if (!secrets_store(SECRETS_AUTH_USER, user,
 596                            strlen(user) + 1) ||
 597             !secrets_store(SECRETS_AUTH_DOMAIN, domain,
 598                            strlen(domain) + 1) ||
 599             !secrets_store(SECRETS_AUTH_PASSWORD, password,
 600                            strlen(password) + 1)) {
 601                 d_fprintf(stderr, "error storing authenticated user info\n");
 602                 return False;
 603         }
 604
 605         return True;
 606 }
 607
 608 static BOOL wbinfo_ping(void)
 609 {
 610         NSS_STATUS result;
 611
 612         result = winbindd_request(WINBINDD_PING, NULL, NULL);
 613
 614         /* Display response */
 615
 616         d_printf("'ping' to winbindd %s\n",
 617                (result == NSS_STATUS_SUCCESS) ? "succeeded" : "failed");
 618
 619         return result == NSS_STATUS_SUCCESS;
 620 }
 621
 622 /* Print program usage */
 623
 624 static void usage(void)
 625 {
 626         d_printf("Usage: wbinfo -ug | -n name | -sSY sid | -UG uid/gid | -tm "
 627                "| -[aA] user%%password\n");
 628         d_printf("\t-u\t\t\tlists all domain users\n");
 629         d_printf("\t-g\t\t\tlists all domain groups\n");
 630         d_printf("\t-n name\t\t\tconverts name to sid\n");
 631         d_printf("\t-s sid\t\t\tconverts sid to name\n");
 632         d_printf("\t-N name\t\t\tconverts NetBIOS name to IP (WINS)\n");
 633         d_printf("\t-I name\t\t\tconverts IP address to NetBIOS name (WINS)\n");
 634         d_printf("\t-U uid\t\t\tconverts uid to sid\n");
 635         d_printf("\t-G gid\t\t\tconverts gid to sid\n");
 636         d_printf("\t-S sid\t\t\tconverts sid to uid\n");
 637         d_printf("\t-Y sid\t\t\tconverts sid to gid\n");
 638         d_printf("\t-t\t\t\tcheck shared secret\n");
 639         d_printf("\t-m\t\t\tlist trusted domains\n");
 640         d_printf("\t-r user\t\t\tget user groups\n");
 641         d_printf("\t-a user%%password\tauthenticate user\n");
 642         d_printf("\t-A user%%password\tstore user and password used by winbindd (root only)\n");
 643         d_printf("\t-p\t\t\t'ping' winbindd to see if it is alive\n");
 644         d_printf("\t--sequence\t\tshow sequence numbers of all domains\n");
 645         d_printf("\t--set-auth-user DOMAIN\\user%%password\tset password for restrict anonymous\n");
 646 }
 647
 648 /* Main program */
 649
 650 enum {
 651         OPT_SET_AUTH_USER = 1000,
 652         OPT_SEQUENCE
 653 };
 654
 655 int main(int argc, char **argv)
 656 {
 657         extern pstring global_myname;
 658         int opt;
 659
 660         poptContext pc;
 661         static char *string_arg;
 662         static int int_arg;
 663         BOOL got_command = False;
 664         int result = 1;
 665
 666         struct poptOption long_options[] = {
 667
 668                 /* longName, shortName, argInfo, argPtr, value, descrip,
 669                    argDesc */
 670
 671                 { "help", 'h', POPT_ARG_NONE, 0, 'h' },
 672                 { "domain-users", 'u', POPT_ARG_NONE, 0, 'u' },
 673                 { "domain-groups", 'g', POPT_ARG_NONE, 0, 'g' },
 674                 { "WINS-by-name", 'N', POPT_ARG_STRING, &string_arg, 'N' },
 675                 { "WINS-by-ip", 'I', POPT_ARG_STRING, &string_arg, 'I' },
 676                 { "name-to-sid", 'n', POPT_ARG_STRING, &string_arg, 'n' },
 677                 { "sid-to-name", 's', POPT_ARG_STRING, &string_arg, 's' },
 678                 { "uid-to-sid", 'U', POPT_ARG_INT, &int_arg, 'U' },
 679                 { "gid-to-sid", 'G', POPT_ARG_INT, &int_arg, 'G' },
 680                 { "sid-to-uid", 'S', POPT_ARG_STRING, &string_arg, 'S' },
 681                 { "sid-to-gid", 'Y', POPT_ARG_STRING, &string_arg, 'Y' },
 682                 { "check-secret", 't', POPT_ARG_NONE, 0, 't' },
 683                 { "trusted-domains", 'm', POPT_ARG_NONE, 0, 'm' },
 684                 { "sequence", 0, POPT_ARG_NONE, 0, OPT_SEQUENCE },
 685                 { "user-groups", 'r', POPT_ARG_STRING, &string_arg, 'r' },
 686                 { "authenticate", 'a', POPT_ARG_STRING, &string_arg, 'a' },
 687                 { "set-auth-user", 'A', POPT_ARG_STRING, &string_arg, OPT_SET_AUTH_USER },
 688                 { "ping", 'p', POPT_ARG_NONE, 0, 'p' },
 689                 { 0, 0, 0, 0 }
 690         };
 691
 692         /* Samba client initialisation */
 693
 694         if (!*global_myname) {
 695                 char *p;
 696
 697                 fstrcpy(global_myname, myhostname());
 698                 p = strchr(global_myname, '.');
 699                 if (p)
 700                         *p = 0;
 701         }
 702
 703         if (!lp_load(dyn_CONFIGFILE, True, False, False)) {
 704                 d_fprintf(stderr, "wbinfo: error opening config file %s. Error was %s\n",
 705                         dyn_CONFIGFILE, strerror(errno));
 706                 exit(1);
 707         }
 708
 709         load_interfaces();
 710
 711         /* Parse command line options */
 712
 713         if (argc == 1) {
 714                 usage();
 715                 return 1;
 716         }
 717
 718         /* Parse options */
 719
 720         pc = poptGetContext("wbinfo", argc, (const char **)argv, long_options, 0);
 721
 722         while((opt = poptGetNextOpt(pc)) != -1) {
 723                 if (got_command) {
 724                         d_fprintf(stderr, "No more than one command may be specified at once.\n");
 725                         exit(1);
 726                 }
 727                 got_command = True;
 728         }
 729
 730         poptFreeContext(pc);
 731
 732         pc = poptGetContext(NULL, argc, (const char **)argv, long_options,
 733                             POPT_CONTEXT_KEEP_FIRST);
 734
 735         while((opt = poptGetNextOpt(pc)) != -1) {
 736                 switch (opt) {
 737                 case 'h':
 738                         usage();
 739                         result = 0;
 740                         goto done;
 741                 case 'u':
 742                         if (!print_domain_users()) {
 743                                 d_printf("Error looking up domain users\n");
 744                                 goto done;
 745                         }
 746                         break;
 747                 case 'g':
 748                         if (!print_domain_groups()) {
 749                                 d_printf("Error looking up domain groups\n");
 750                                 goto done;
 751                         }
 752                         break;
 753                 case 's':
 754                         if (!wbinfo_lookupsid(string_arg)) {
 755                                 d_printf("Could not lookup sid %s\n", string_arg);
 756                                 goto done;
 757                         }
 758                         break;
 759                 case 'n':
 760                         if (!wbinfo_lookupname(string_arg)) {
 761                                 d_printf("Could not lookup name %s\n", string_arg);
 762                                 goto done;
 763                         }
 764                         break;
 765                 case 'N':
 766                         if (!wbinfo_wins_byname(string_arg)) {
 767                                 d_printf("Could not lookup WINS by name %s\n", string_arg);
 768                                 goto done;
 769                         }
 770                         break;
 771                 case 'I':
 772                         if (!wbinfo_wins_byip(string_arg)) {
 773                                 d_printf("Could not lookup WINS by IP %s\n", string_arg);
 774                                 goto done;
 775                         }
 776                         break;
 777                 case 'U':
 778                         if (!wbinfo_uid_to_sid(int_arg)) {
 779                                 d_printf("Could not convert uid %d to sid\n", int_arg);
 780                                 goto done;
 781                         }
 782                         break;
 783                 case 'G':
 784                         if (!wbinfo_gid_to_sid(int_arg)) {
 785                                 d_printf("Could not convert gid %d to sid\n",
 786                                        int_arg);
 787                                 goto done;
 788                         }
 789                         break;
 790                 case 'S':
 791                         if (!wbinfo_sid_to_uid(string_arg)) {
 792                                 d_printf("Could not convert sid %s to uid\n",
 793                                        string_arg);
 794                                 goto done;
 795                         }
 796                         break;
 797                 case 'Y':
 798                         if (!wbinfo_sid_to_gid(string_arg)) {
 799                                 d_printf("Could not convert sid %s to gid\n",
 800                                        string_arg);
 801                                 goto done;
 802                         }
 803                         break;
 804                 case 't':
 805                         if (!wbinfo_check_secret()) {
 806                                 d_printf("Could not check secret\n");
 807                                 goto done;
 808                         }
 809                         break;
 810                 case 'm':
 811                         if (!wbinfo_list_domains()) {
 812                                 d_printf("Could not list trusted domains\n");
 813                                 goto done;
 814                         }
 815                         break;
 816                 case OPT_SEQUENCE:
 817                         if (!wbinfo_show_sequence()) {
 818                                 d_printf("Could not show sequence numbers\n");
 819                                 goto done;
 820                         }
 821                         break;
 822                 case 'r':
 823                         if (!wbinfo_get_usergroups(string_arg)) {
 824                                 d_printf("Could not get groups for user %s\n",
 825                                        string_arg);
 826                                 goto done;
 827                         }
 828                         break;
 829                 case 'a': {
 830                         BOOL got_error = False;
 831
 832                         if (!wbinfo_auth(string_arg)) {
 833                                 d_printf("Could not authenticate user %s with "
 834                                        "plaintext password\n", string_arg);
 835                                 got_error = True;
 836                         }
 837
 838                         if (!wbinfo_auth_crap(string_arg)) {
 839                                 d_printf("Could not authenticate user %s with "
 840                                        "challenge/response\n", string_arg);
 841                                 got_error = True;
 842                         }
 843
 844                         if (got_error)
 845                                 goto done;
 846                         break;
 847                 }
 848                 case 'p': {
 849
 850                         if (!wbinfo_ping()) {
 851                                 d_printf("could not ping winbindd!\n");
 852                                 goto done;
 853                         }
 854                         break;
 855                 }
 856                 case OPT_SET_AUTH_USER:
 857                         if (!(wbinfo_set_auth_user(string_arg)))
 858                                 goto done;
 859                         break;
 860                 default:
 861                         d_fprintf(stderr, "Invalid option\n");
 862                         usage();
 863                         goto done;
 864                 }
 865         }
 866
 867         result = 0;
 868
 869         /* Exit code */
 870
 871  done:
 872         poptFreeContext(pc);
 873         return result;
 874 }