2 Samba Unix/Linux SMB client library
4 Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>. */
20 #include "utils/net.h"
21 #include "libsmb/namequery.h"
22 #include "libads/sitename_cache.h"
23 #include "lib/addns/dnsquery_srv.h"
24 #include "../librpc/gen_ndr/ndr_netlogon.h"
26 #include "../libcli/security/security.h"
27 #include "passdb/lookup_sid.h"
28 #include "libsmb/dsgetdcname.h"
30 int net_lookup_usage(struct net_context
*c
, int argc
, const char **argv
)
33 " net lookup [host] HOSTNAME[#<type>]\n\tgives IP for a hostname\n\n"
34 " net lookup ldap [domain] [sitename]\n\tgives IP of domain's ldap server\n\n"
35 " net lookup kdc [realm]\n\tgives IP of realm's kerberos KDC\n\n"
36 " net lookup pdc [domain|realm]\n\tgives IP of realm's kerberos KDC\n\n"
37 " net lookup dc [domain]\n\tgives IP of domains Domain Controllers\n\n"
38 " net lookup master [domain|wg]\n\tgive IP of master browser\n\n"
39 " net lookup name [name]\n\tLookup name's sid and type\n\n"
40 " net lookup sid [sid]\n\tGive sid's name and type\n\n"
41 " net lookup dsgetdcname [name] [flags] [sitename]\n\n"
46 /* lookup a hostname giving an IP */
47 static int net_lookup_host(struct net_context
*c
, int argc
, const char **argv
)
49 struct sockaddr_storage ss
;
51 char addr
[INET6_ADDRSTRLEN
];
52 const char *name
= argv
[0];
56 return net_lookup_usage(c
, argc
, argv
);
58 p
= strchr_m(name
,'#');
61 sscanf(++p
,"%x",&name_type
);
64 if (!resolve_name(name
, &ss
, name_type
, false)) {
65 /* we deliberately use DEBUG() here to send it to stderr
66 so scripts aren't mucked up */
67 DEBUG(0,("Didn't find %s#%02x\n", name
, name_type
));
71 print_sockaddr(addr
, sizeof(addr
), &ss
);
72 d_printf("%s\n", addr
);
77 static void print_ldap_srvlist(struct dns_rr_srv
*dclist
, size_t numdcs
)
81 for ( i
=0; i
<numdcs
; i
++ ) {
82 struct dns_rr_srv
*dc
= &dclist
[i
];
85 for (j
=0; j
<dc
->num_ips
; j
++) {
86 struct sockaddr_storage
*ss
= &dc
->ss_s
[j
];
87 char addr
[INET6_ADDRSTRLEN
];
89 print_sockaddr(addr
, sizeof(addr
), ss
);
91 if (ss
->ss_family
== AF_INET6
) {
92 d_printf("[%s]:%"PRIu16
"\n", addr
, dc
->port
);
95 if (ss
->ss_family
== AF_INET
) {
96 d_printf("%s:%"PRIu16
"\n", addr
, dc
->port
);
103 static int net_lookup_ldap(struct net_context
*c
, int argc
, const char **argv
)
107 struct sockaddr_storage ss
;
108 struct dns_rr_srv
*dcs
= NULL
;
110 const char *sitename
= NULL
;
114 char h_name
[MAX_DNS_NAME_LENGTH
];
120 domain
= c
->opt_target_workgroup
;
126 if ( (ctx
= talloc_init("net_lookup_ldap")) == NULL
) {
127 d_fprintf(stderr
,"net_lookup_ldap: talloc_init() %s!\n",
132 if (sitename
== NULL
) {
133 sitename
= sitename_fetch(ctx
, domain
);
135 query
= ads_dns_query_string_dcs(ctx
, domain
);
137 DEBUG(9, ("Lookup up ldap for domain %s\n", domain
));
139 status
= ads_dns_query_srv(
141 lp_get_async_dns_timeout(),
146 if ( NT_STATUS_IS_OK(status
) && numdcs
) {
147 print_ldap_srvlist(dcs
, numdcs
);
152 DEBUG(9, ("Looking up PDC for domain %s\n", domain
));
153 if (!get_pdc_ip(domain
, &ss
)) {
158 ret
= sys_getnameinfo((struct sockaddr
*)&ss
,
159 sizeof(struct sockaddr_storage
),
160 h_name
, sizeof(h_name
),
169 DEBUG(9, ("Found PDC with DNS name %s\n", h_name
));
170 domain
= strchr(h_name
, '.');
177 DEBUG(9, ("Looking up ldap for domain %s\n", domain
));
179 status
= ads_dns_query_srv(
181 lp_get_async_dns_timeout(),
186 if ( NT_STATUS_IS_OK(status
) && numdcs
) {
187 print_ldap_srvlist(dcs
, numdcs
);
196 DEBUG(1,("No ADS support\n"));
200 static int net_lookup_dc(struct net_context
*c
, int argc
, const char **argv
)
202 struct samba_sockaddr
*sa_list
= NULL
;
203 struct sockaddr_storage ss
;
204 char *pdc_str
= NULL
;
205 const char *domain
= NULL
;
206 char *sitename
= NULL
;
209 char addr
[INET6_ADDRSTRLEN
];
210 bool sec_ads
= (lp_security() == SEC_ADS
);
216 domain
= c
->opt_target_workgroup
;
223 if (!get_pdc_ip(domain
, &ss
))
226 print_sockaddr(addr
, sizeof(addr
), &ss
);
227 if (asprintf(&pdc_str
, "%s", addr
) == -1) {
230 d_printf("%s\n", pdc_str
);
232 sitename
= sitename_fetch(talloc_tos(), domain
);
233 status
= get_sorted_dc_list(talloc_tos(),
239 if (!NT_STATUS_IS_OK(status
)) {
241 TALLOC_FREE(sitename
);
244 TALLOC_FREE(sitename
);
245 for (i
=0;i
<count
;i
++) {
246 print_sockaddr(addr
, sizeof(addr
), &sa_list
[i
].u
.ss
);
247 if (!strequal(pdc_str
, addr
))
248 d_printf("%s\n", addr
);
250 TALLOC_FREE(sa_list
);
255 static int net_lookup_pdc(struct net_context
*c
, int argc
, const char **argv
)
257 struct sockaddr_storage ss
;
258 char *pdc_str
= NULL
;
260 char addr
[INET6_ADDRSTRLEN
];
262 if (lp_security() == SEC_ADS
) {
265 domain
= c
->opt_target_workgroup
;
272 if (!get_pdc_ip(domain
, &ss
))
275 print_sockaddr(addr
, sizeof(addr
), &ss
);
276 if (asprintf(&pdc_str
, "%s", addr
) == -1) {
279 d_printf("%s\n", pdc_str
);
285 static int net_lookup_master(struct net_context
*c
, int argc
, const char **argv
)
287 struct sockaddr_storage master_ss
;
288 const char *domain
= c
->opt_target_workgroup
;
289 char addr
[INET6_ADDRSTRLEN
];
294 if (!find_master_ip(domain
, &master_ss
))
296 print_sockaddr(addr
, sizeof(addr
), &master_ss
);
297 d_printf("%s\n", addr
);
301 static int net_lookup_kdc(struct net_context
*c
, int argc
, const char **argv
)
306 struct samba_sockaddr
*kdcs
= NULL
;
308 char **get_host_realms
= NULL
;
313 rc
= smb_krb5_init_context_common(&ctx
);
315 DBG_ERR("kerberos init context failed (%s)\n",
322 } else if (lp_realm() && *lp_realm()) {
325 rc
= krb5_get_host_realm(ctx
, NULL
, &get_host_realms
);
327 DEBUG(1,("krb5_gethost_realm failed (%s)\n",
329 krb5_free_context(ctx
);
332 realm
= (const char *) *get_host_realms
;
335 status
= get_kdc_list(talloc_tos(),
340 if (!NT_STATUS_IS_OK(status
)) {
341 DBG_WARNING("get_kdc_list failed (%s)\n",
343 krb5_free_host_realm(ctx
, get_host_realms
);
344 krb5_free_context(ctx
);
348 for (i
= 0; i
< num_kdcs
; i
++) {
349 char addr
[INET6_ADDRSTRLEN
];
351 print_sockaddr(addr
, sizeof(addr
), &kdcs
[i
].u
.ss
);
353 d_printf("%s:88\n", addr
);
356 krb5_free_host_realm(ctx
, get_host_realms
);
357 krb5_free_context(ctx
);
361 DEBUG(1, ("No kerberos support\n"));
365 static int net_lookup_name(struct net_context
*c
, int argc
, const char **argv
)
367 const char *dom
, *name
;
369 struct dom_sid_buf buf
;
370 enum lsa_SidType type
;
375 _(" net lookup name <name>\n"));
379 if (!lookup_name(talloc_tos(), argv
[0], LOOKUP_NAME_ALL
,
380 &dom
, &name
, &sid
, &type
)) {
381 d_printf(_("Could not lookup name %s\n"), argv
[0]);
385 d_printf("%s %d (%s) %s\\%s\n", dom_sid_str_buf(&sid
, &buf
),
386 type
, sid_type_lookup(type
), dom
, name
);
390 static int net_lookup_sid(struct net_context
*c
, int argc
, const char **argv
)
392 const char *dom
, *name
;
394 struct dom_sid_buf buf
;
395 enum lsa_SidType type
;
400 _(" net lookup sid <sid>\n"));
404 if (!string_to_sid(&sid
, argv
[0])) {
405 d_printf(_("Could not convert %s to SID\n"), argv
[0]);
409 if (!lookup_sid(talloc_tos(), &sid
,
410 &dom
, &name
, &type
)) {
411 d_printf(_("Could not lookup name %s\n"), argv
[0]);
415 d_printf("%s %d (%s) %s\\%s\n", dom_sid_str_buf(&sid
, &buf
),
416 type
, sid_type_lookup(type
), dom
, name
);
420 static int net_lookup_dsgetdcname(struct net_context
*c
, int argc
, const char **argv
)
423 const char *domain_name
= NULL
;
424 const char *site_name
= NULL
;
426 struct netr_DsRGetDCNameInfo
*info
= NULL
;
430 if (argc
< 1 || argc
> 3) {
433 _(" net lookup dsgetdcname "
434 "<name> <flags> <sitename>\n"));
438 mem_ctx
= talloc_init("net_lookup_dsgetdcname");
443 domain_name
= argv
[0];
446 sscanf(argv
[1], "%x", &flags
);
450 flags
= DS_DIRECTORY_SERVICE_REQUIRED
;
458 d_fprintf(stderr
, _("Could not initialise message context. "
459 "Try running as root\n"));
463 status
= dsgetdcname(mem_ctx
, c
->msg_ctx
, domain_name
, NULL
, site_name
,
465 if (!NT_STATUS_IS_OK(status
)) {
466 d_printf(_("failed with: %s\n"), nt_errstr(status
));
467 TALLOC_FREE(mem_ctx
);
471 s
= NDR_PRINT_STRUCT_STRING(mem_ctx
, netr_DsRGetDCNameInfo
, info
);
475 TALLOC_FREE(mem_ctx
);
480 /* lookup hosts or IP addresses using internal samba lookup fns */
481 int net_lookup(struct net_context
*c
, int argc
, const char **argv
)
485 struct functable table
[] = {
488 .fn
= net_lookup_host
,
492 .fn
= net_lookup_ldap
,
500 .fn
= net_lookup_pdc
,
503 .funcname
= "MASTER",
504 .fn
= net_lookup_master
,
508 .fn
= net_lookup_kdc
,
512 .fn
= net_lookup_name
,
516 .fn
= net_lookup_sid
,
519 .funcname
= "DSGETDCNAME",
520 .fn
= net_lookup_dsgetdcname
,
528 d_printf(_("\nUsage: \n"));
529 return net_lookup_usage(c
, argc
, argv
);
531 for (i
=0; table
[i
].funcname
; i
++) {
532 if (strcasecmp_m(argv
[0], table
[i
].funcname
) == 0)
533 return table
[i
].fn(c
, argc
-1, argv
+1);
536 /* Default to lookup a hostname so 'net lookup foo#1b' can be
537 used instead of 'net lookup host foo#1b'. The host syntax
538 is a bit confusing as non #00 names can't really be
539 considered hosts as such. */
541 return net_lookup_host(c
, argc
, argv
);