| blob | 52a7386010c76b377bedbd4c5020f9d52769e129 |
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 *
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 2 of the License, or
10 * (at your option) any later version.
11 *
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
16 *
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, write to the Free Software
19 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
20 */
37 #define NTDRIVERS_DATABASE_VERSION_1 1
38 #define NTDRIVERS_DATABASE_VERSION_2 2
41 #define NTDRIVERS_DATABASE_VERSION NTDRIVERS_DATABASE_VERSION_3
43 /* Map generic permissions to printer object specific permissions */
45 GENERIC_MAPPING printer_generic_mapping = {
46 PRINTER_READ,
47 PRINTER_WRITE,
48 PRINTER_EXECUTE,
49 PRINTER_ALL_ACCESS
50 };
52 STANDARD_MAPPING printer_std_mapping = {
53 PRINTER_READ,
54 PRINTER_WRITE,
55 PRINTER_EXECUTE,
56 PRINTER_ALL_ACCESS
57 };
59 /* Map generic permissions to print server object specific permissions */
61 GENERIC_MAPPING printserver_generic_mapping = {
62 SERVER_READ,
63 SERVER_WRITE,
64 SERVER_EXECUTE,
65 SERVER_ALL_ACCESS
66 };
68 STANDARD_MAPPING printserver_std_mapping = {
69 SERVER_READ,
70 SERVER_WRITE,
71 SERVER_EXECUTE,
72 SERVER_ALL_ACCESS
73 };
75 /* We need one default form to support our default printer. Msoft adds the
76 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
77 array index). Letter is always first, so (for the current code) additions
78 always put things in the correct order. */
198 };
201 {
216 }
218 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
220 }
221 }
226 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
228 }
230 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
232 }
233 }
238 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
240 }
242 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
244 }
245 }
248 }
251 }
253 /****************************************************************************
254 Open the NT printing tdb.
255 ****************************************************************************/
258 {
270 }
277 }
284 }
288 /* handle a Samba upgrade */
290 {
291 int32 vers_id;
293 /* Cope with byte-reversed older versions of the db. */
295 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
296 /* Written on a bigendian machine with old fetch_int code. Save as le. */
297 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
300 }
304 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
311 }
312 }
317 /*
318 * register callback to handle updating printers as new
319 * drivers are installed
320 */
324 }
326 /*******************************************************************
327 tdb traversal function for counting printers.
328 ********************************************************************/
332 {
337 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
338 }
341 }
343 /*******************************************************************
344 Update the spooler global c_setprinter. This variable is initialized
345 when the parent smbd starts with the number of existing printers. It
346 is monotonically increased by the current number of printers *after*
347 each add or delete printer RPC. Only Microsoft knows why... JRR020119
348 ********************************************************************/
351 {
352 int32 c_setprinter;
357 /* Traverse the tdb, counting the printers */
360 /* If initializing, set c_setprinter to current printers count
361 * otherwise, bump it by the current printer count
362 */
365 else
374 }
376 /*******************************************************************
377 Get the spooler global c_setprinter, accounting for initialization.
378 ********************************************************************/
381 {
390 }
392 /****************************************************************************
393 Get builtin form struct list.
394 ****************************************************************************/
397 {
400 }
402 /****************************************************************************
403 get a builtin form struct
404 ****************************************************************************/
407 {
409 fstring form_name;
418 }
419 }
422 }
424 /****************************************************************************
425 get a form struct list
426 ****************************************************************************/
428 {
431 nt_forms_struct form;
455 }
458 n++;
459 }
463 }
465 /****************************************************************************
466 write a form struct list
467 ****************************************************************************/
469 {
476 /* save index, so list is rebuilt in correct order */
489 }
492 }
494 /****************************************************************************
495 add a form struct at the end of the list
496 ****************************************************************************/
498 {
500 BOOL update;
501 fstring form_name;
504 /*
505 * NT tries to add forms even when
506 * they are already in the base
507 * only update the values if already present
508 */
518 }
519 }
525 }
529 }
540 }
542 /****************************************************************************
543 delete a named form struct
544 ****************************************************************************/
546 {
547 pstring key;
548 TDB_DATA kbuf;
550 fstring form_name;
560 }
561 }
567 }
576 }
579 }
581 /****************************************************************************
582 update a form struct
583 ****************************************************************************/
585 {
587 fstring form_name;
592 {
596 }
607 }
609 /****************************************************************************
610 get the nt drivers list
612 traverse the database and look-up the matching names
613 ****************************************************************************/
615 {
617 fstring short_archi;
619 pstring key;
633 }
637 total++;
638 }
641 }
643 /****************************************************************************
644 function to do the mapping between the long architecture name and
645 the short one.
646 ****************************************************************************/
649 {
653 };
656 {
663 };
672 }
675 i++;
682 }
691 }
693 /****************************************************************************
694 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
695 There are two case to be covered here: PE (Portable Executable) and NE (New
696 Executable) files. Both files support the same INFO structure, but PE files
697 store the signature in unicode, and NE files store it as !unicode.
698 returns -1 on error, 1 on version info found, and 0 on no version info found.
699 ****************************************************************************/
702 {
705 ssize_t byte_count;
711 }
713 /* Note: DOS_HEADER_SIZE < malloc'ed PE_HEADER_SIZE */
718 }
720 /* Is this really a DOS header? */
725 }
727 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
728 if (fsp->conn->vfs_ops.lseek(fsp, fsp->fd, SVAL(buf,DOS_HEADER_LFANEW_OFFSET), SEEK_SET) == (SMB_OFF_T)-1) {
731 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
733 }
738 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
740 }
742 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
750 /* At this point, we assume the file is in error. It still could be somthing
751 * else besides a PE file, but it unlikely at this point.
752 */
754 }
756 /* get the section table */
764 }
770 }
772 /* Iterate the section table looking for the resource section ".rsrc" */
785 }
787 /* Seek to the start of the .rsrc section info */
792 }
798 }
801 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
803 /* Align to next long address */
816 }
817 }
818 }
819 }
820 }
822 /* Version info not found, fall back to origin date/time */
831 /* At this point, we assume the file is in error. It still could be somthing
832 * else besides a NE file, but it unlikely at this point. */
834 }
836 /* Allocate a bit more space to speed up things */
842 }
844 /* This is a HACK! I got tired of trying to sort through the messy
845 * 'NE' file format. If anyone wants to clean this up please have at
846 * it, but this works. 'NE' files will eventually fade away. JRR */
848 /* Cover case that should not occur in a well formed 'NE' .dll file */
852 /* Fast skip past data that can't possibly match */
855 /* Potential match data crosses buf boundry, move it to beginning
856 * of buf, and fill the buf with as much as it will hold. */
867 }
873 }
875 /* Check that the full signature string and the magic number that
876 * follows exist (not a perfect solution, but the chances that this
877 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
878 * twice, as it is simpler to read the code. */
880 /* Compute skip alignment to next long address */
893 }
894 }
895 }
897 /* Version info not found, fall back to origin date/time */
903 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
907 no_version_info:
911 error_exit:
914 }
916 /****************************************************************************
917 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
918 share one or more files. During the MS installation process files are checked
919 to insure that only a newer version of a shared file is installed over an
920 older version. There are several possibilities for this comparison. If there
921 is no previous version, the new one is newer (obviously). If either file is
922 missing the version info structure, compare the creation date (on Unix use
923 the modification date). Otherwise chose the numerically larger version number.
924 ****************************************************************************/
926 fstring old_file)
927 {
929 pstring filepath;
931 uint32 new_major;
932 uint32 new_minor;
935 uint32 old_major;
936 uint32 old_minor;
942 SMB_STRUCT_STAT st;
943 SMB_STRUCT_STAT stat_buf;
944 BOOL bad_path;
951 /* Get file version info (if available) for previous file (if it exists) */
961 /* Old file not found, so by definition new file is in fact newer */
972 old_file));
974 }
978 }
981 /* Get file version info (if available) for new file */
990 /* New file not found, this shouldn't occur if the caller did its job */
1001 new_file));
1003 }
1007 }
1011 /* Compare versions and choose the larger version number */
1017 }
1021 }
1024 /* Compare modification time/dates and choose the newest time/date */
1028 }
1032 }
1033 }
1035 error_exit:
1039 }
1041 /****************************************************************************
1042 Determine the correct cVersion associated with an architecture and driver
1043 ****************************************************************************/
1046 {
1050 pstring driverpath;
1051 fstring user_name;
1052 fstring null_pw;
1053 fstring dev;
1054 fstring sharename;
1056 BOOL bad_path;
1058 SMB_STRUCT_STAT st;
1066 /* If architecture is Windows 95/98/ME, the version is always 0. */
1071 }
1081 }
1083 /*
1084 * Connect to the print$ share under the same account as the user connected
1085 * to the rpc pipe. Note we must still be root to do this.
1086 */
1091 /* Null password is ok - we are already an authenticated user... */
1102 }
1104 /* We are temporarily becoming the connection user. */
1109 }
1111 /* Open the driver file (Portable Executable format) and determine the
1112 * deriver the cversion. */
1126 }
1128 uint32 major;
1129 uint32 minor;
1136 }
1138 /*
1139 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1140 * for more details. Version in this case is not just the version of the
1141 * file, but the version in the sense of kernal mode (2) vs. user mode
1142 * (3) drivers. Other bits of the version fields are the version info.
1143 * JRR 010716
1144 */
1155 }
1159 }
1171 error_exit:
1179 }
1181 /****************************************************************************
1182 ****************************************************************************/
1185 {
1186 fstring architecture;
1187 fstring new_name;
1190 WERROR err;
1192 /* clean up the driver name.
1193 * we can get .\driver.dll
1194 * or worse c:\windows\system\driver.dll !
1195 */
1196 /* using an intermediate string to not have overlaping memcpy()'s */
1200 }
1205 }
1210 }
1215 }
1222 }
1223 }
1224 }
1228 /* jfm:7/16/2000 the client always sends the cversion=0.
1229 * The server should check which version the driver is by reading
1230 * the PE header of driver->driverpath.
1231 *
1232 * For Windows 95/98 the version is 0 (so the value sent is correct)
1233 * For Windows NT (the architecture doesn't matter)
1234 * NT 3.1: cversion=0
1235 * NT 3.5/3.51: cversion=1
1236 * NT 4: cversion=2
1237 * NT2K: cversion=3
1238 */
1244 }
1246 /****************************************************************************
1247 ****************************************************************************/
1250 {
1251 fstring architecture;
1252 fstring new_name;
1255 WERROR err;
1257 /* clean up the driver name.
1258 * we can get .\driver.dll
1259 * or worse c:\windows\system\driver.dll !
1260 */
1261 /* using an intermediate string to not have overlaping memcpy()'s */
1265 }
1270 }
1275 }
1280 }
1287 }
1288 }
1289 }
1293 /* jfm:7/16/2000 the client always sends the cversion=0.
1294 * The server should check which version the driver is by reading
1295 * the PE header of driver->driverpath.
1296 *
1297 * For Windows 95/98 the version is 0 (so the value sent is correct)
1298 * For Windows NT (the architecture doesn't matter)
1299 * NT 3.1: cversion=0
1300 * NT 3.5/3.51: cversion=1
1301 * NT 4: cversion=2
1302 * NT2K: cversion=3
1303 */
1309 }
1311 /****************************************************************************
1312 ****************************************************************************/
1315 {
1318 {
1322 }
1324 {
1328 }
1331 }
1332 }
1334 /****************************************************************************
1335 This function sucks and should be replaced. JRA.
1336 ****************************************************************************/
1338 static void convert_level_6_to_level3(NT_PRINTER_DRIVER_INFO_LEVEL_3 *dst, NT_PRINTER_DRIVER_INFO_LEVEL_6 *src)
1339 {
1351 }
1362 else
1364 }
1367 }
1369 #endif
1371 /****************************************************************************
1372 ****************************************************************************/
1375 {
1377 NT_PRINTER_DRIVER_INFO_LEVEL_3 converted_driver;
1378 fstring architecture;
1379 pstring new_dir;
1380 pstring old_name;
1381 pstring new_name;
1382 fstring user_name;
1383 fstring null_pw;
1384 fstring dev;
1385 fstring sharename;
1387 pstring inbuf;
1388 pstring outbuf;
1406 }
1417 }
1419 /*
1420 * Connect to the print$ share under the same account as the user connected to the rpc pipe.
1421 * Note we must be root to do this.
1422 */
1427 /* Null password is ok - we are already an authenticated user... */
1438 }
1440 /*
1441 * Save who we are - we are temporarily becoming the connection user.
1442 */
1447 }
1449 /*
1450 * make the directories version and version\driver_name
1451 * under the architecture directory.
1452 */
1457 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1458 * listed for this driver which has already been moved, skip it (note:
1459 * drivers may list the same file name several times. Then check if the
1460 * file already exists in archi\cversion\, if so, check that the version
1461 * info (or time stamps if version info is unavailable) is newer (or the
1462 * date is later). If it is, move it to archi\cversion\filexxx.yyy.
1463 * Otherwise, delete the file.
1464 *
1465 * If a file is not moved to archi\cversion\ because of an error, all the
1466 * rest of the 'unmoved' driver files are removed from archi\. If one or
1467 * more of the driver's files was already moved to archi\cversion\, it
1468 * potentially leaves the driver in a partially updated state. Version
1469 * trauma will most likely occur if an client attempts to use any printer
1470 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1471 * done is appropriate... later JRR
1472 */
1480 NTSTATUS status;
1488 }
1489 }
1490 else
1492 }
1499 NTSTATUS status;
1507 }
1508 }
1509 else
1511 }
1512 }
1520 NTSTATUS status;
1528 }
1529 }
1530 else
1532 }
1533 }
1542 NTSTATUS status;
1550 }
1551 }
1552 else
1554 }
1555 }
1567 }
1568 }
1573 NTSTATUS status;
1581 }
1582 }
1583 else
1585 }
1586 NextDriver: ;
1587 }
1588 }
1594 }
1596 /****************************************************************************
1597 ****************************************************************************/
1599 {
1601 fstring architecture;
1602 pstring directory;
1603 pstring temp_name;
1604 pstring key;
1611 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
1612 * \\server is added in the rpc server layer.
1613 * It does make sense to NOT store the server's name in the printer TDB.
1614 */
1616 slprintf(directory, sizeof(directory)-1, "\\print$\\%s\\%d\\", architecture, driver->cversion);
1618 /* .inf files do not always list a file for each of the four standard files.
1619 * Don't prepend a path to a null filename, or client claims:
1620 * "The server on which the printer resides does not have a suitable
1621 * <printer driver name> printer driver installed. Click OK if you
1622 * wish to install the driver on your local machine."
1623 */
1627 }
1632 }
1637 }
1642 }
1647 slprintf(driver->dependentfiles[i], sizeof(driver->dependentfiles[i])-1, "%s%s", directory, temp_name);
1648 }
1649 }
1651 slprintf(key, sizeof(key)-1, "%s%s/%d/%s", DRIVERS_PREFIX, architecture, driver->cversion, driver->name);
1659 again:
1676 }
1677 }
1687 }
1691 }
1701 done:
1707 }
1709 /****************************************************************************
1710 ****************************************************************************/
1712 {
1713 NT_PRINTER_DRIVER_INFO_LEVEL_3 info3;
1728 }
1731 /****************************************************************************
1732 ****************************************************************************/
1733 static WERROR get_a_printer_driver_3_default(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, const fstring in_prt, const fstring in_arch)
1734 {
1735 NT_PRINTER_DRIVER_INFO_LEVEL_3 info;
1756 }
1758 /****************************************************************************
1759 ****************************************************************************/
1760 static WERROR get_a_printer_driver_3(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, const fstring in_prt, const fstring in_arch, uint32 version)
1761 {
1762 NT_PRINTER_DRIVER_INFO_LEVEL_3 driver;
1764 fstring architecture;
1767 pstring key;
1773 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, in_prt));
1804 }
1809 i++;
1810 }
1820 }
1825 }
1827 /****************************************************************************
1828 ****************************************************************************/
1830 {
1832 TDB_DATA kbuf;
1833 pstring key;
1855 }
1860 /*pstrcat(line, info3->name); pstrcat(line, ":");*/
1881 }
1886 }
1888 /****************************************************************************
1889 Debugging function, dump at level 6 the struct in the logs.
1890 ****************************************************************************/
1893 {
1894 uint32 result;
1901 {
1903 {
1923 }
1925 }
1927 }
1932 }
1935 }
1937 /****************************************************************************
1938 ****************************************************************************/
1940 {
1991 }
1996 }
1998 /****************************************************************************
1999 ****************************************************************************/
2001 {
2006 param,
2012 }
2017 }
2020 /****************************************************************************
2021 Delete a printer - this just deletes the printer info file, any open
2022 handles are not affected.
2023 ****************************************************************************/
2026 {
2027 pstring key;
2028 TDB_DATA kbuf;
2038 }
2040 /* FIXME!!! Reorder so this forward declaration is not necessary --jerry */
2043 /****************************************************************************
2044 ****************************************************************************/
2046 {
2047 pstring key;
2050 WERROR ret;
2053 /*
2054 * in addprinter: no servername and the printer is the name
2055 * in setprinter: servername is \\server
2056 * and printer is \\server\\printer
2057 *
2058 * Samba manages only local printers.
2059 * we currently don't support things like path=\\other_server\printer
2060 */
2066 }
2068 /*
2069 * JFM: one day I'll forget.
2070 * below that's info->portname because that's the SAMBA sharename
2071 * and I made NT 'thinks' it's the portname
2072 * the info->sharename is the thing you can name when you add a printer
2073 * that's the short-name when you create shared printer for 95/98
2074 * So I've made a limitation in SAMBA: you can only have 1 printer model
2075 * behind a SAMBA share.
2076 */
2081 again:
2119 }
2123 }
2136 done:
2146 }
2149 /****************************************************************************
2150 ****************************************************************************/
2152 {
2160 {
2162 }
2163 else
2164 {
2168 }
2170 }
2173 }
2175 /****************************************************************************
2176 ****************************************************************************/
2178 {
2195 }
2208 }
2212 }
2214 }
2216 /****************************************************************************
2217 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_PARAM.
2218 ****************************************************************************/
2220 {
2230 }
2232 /****************************************************************************
2233 Malloc and return an NT devicemode.
2234 ****************************************************************************/
2237 {
2245 }
2279 /* non utilisés par un driver d'imprimante */
2293 }
2295 /****************************************************************************
2296 Deepcopy an NT devicemode.
2297 ****************************************************************************/
2300 {
2303 if ((new_nt_devicemode = (NT_DEVICEMODE *)memdup(nt_devicemode, sizeof(NT_DEVICEMODE))) == NULL) {
2306 }
2310 if ((new_nt_devicemode->private = memdup(nt_devicemode->private, nt_devicemode->driverextra)) == NULL) {
2314 }
2315 }
2318 }
2320 /****************************************************************************
2321 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2322 ****************************************************************************/
2325 {
2335 }
2337 /****************************************************************************
2338 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2339 ****************************************************************************/
2341 {
2357 }
2360 }
2363 /****************************************************************************
2364 ****************************************************************************/
2366 {
2369 NT_DEVICEMODE devmode;
2417 /* the len in tdb_unpack is an int value and
2418 * devmode.driverextra is only a short
2419 */
2423 /* check to catch an invalid TDB entry so we don't segfault */
2426 }
2427 }
2436 }
2438 /****************************************************************************
2439 ****************************************************************************/
2441 {
2460 }
2463 }
2466 {
2483 }
2489 }
2495 }
2509 nt_name++;
2514 {
2518 l--;
2519 }
2520 }
2523 os2_name++;
2525 {
2529 l--;
2530 }
2531 }
2540 }
2541 }
2544 }
2546 /****************************************************************************
2547 get a default printer info 2 struct
2548 ****************************************************************************/
2550 {
2552 NT_PRINTER_INFO_LEVEL_2 info;
2565 /* by setting the driver name to an empty string, a local NT admin
2566 can now run the **local** APW to install a local printer driver
2567 for a Samba shared printer in 2.2. Without this, drivers **must** be
2568 installed on the Samba server for NT clients --jerry */
2572 #endif
2589 /*
2590 * I changed this as I think it is better to have a generic
2591 * DEVMODE than to crash Win2k explorer.exe --jerry
2592 * See the HP Deskjet 990c Win2k drivers for an example.
2593 *
2594 * However the default devmode appears to cause problems
2595 * with the HP CLJ 8500 PCL driver. Hence the addition of
2596 * the "default devmode" parameter --jerry 22/01/2002
2597 */
2602 }
2605 }
2607 /* This will get the current RPC talloc context, but we should be
2608 passing this as a parameter... fixme... JRA ! */
2617 }
2621 fail:
2625 }
2627 /****************************************************************************
2628 ****************************************************************************/
2630 {
2631 pstring key;
2632 NT_PRINTER_INFO_LEVEL_2 info;
2635 fstring printername;
2673 /* Samba has to have shared raw drivers. */
2676 /* Restore the stripped strings. */
2684 /*
2685 * Some client drivers freak out if there is a NULL devmode
2686 * (probably the driver is not checking before accessing
2687 * the devmode pointer) --jerry
2688 *
2689 * See comments in get_a_printer_2_default()
2690 */
2693 {
2695 printername));
2697 }
2701 /* This will get the current RPC talloc context, but we should be
2702 passing this as a parameter... fixme... JRA ! */
2706 /* Fix for OS/2 drivers. */
2718 }
2720 /****************************************************************************
2721 debugging function, dump at level 6 the struct in the logs
2722 ****************************************************************************/
2724 {
2725 uint32 result;
2731 {
2733 {
2736 else
2737 {
2764 }
2766 }
2771 }
2774 }
2776 /****************************************************************************
2777 Get the parameters we can substitute in an NT print job.
2778 ****************************************************************************/
2780 void get_printer_subst_params(int snum, fstring *printername, fstring *sharename, fstring *portname)
2781 {
2794 }
2796 /****************************************************************************
2797 Update the changeid time.
2798 This is SO NASTY as some drivers need this to change, others need it
2799 static. This value will change every second, and I must hope that this
2800 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
2801 UTAH ! JRA.
2802 ****************************************************************************/
2805 {
2811 /* Return changeid as msec since spooler restart */
2813 #else
2814 /*
2815 * This setting seems to work well but is too untested
2816 * to replace the above calculation. Left in for experiementation
2817 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
2818 */
2820 #endif
2821 }
2823 /*
2824 * The function below are the high level ones.
2825 * only those ones must be called from the spoolss code.
2826 * JFM.
2827 */
2829 /****************************************************************************
2830 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
2831 ****************************************************************************/
2834 {
2835 WERROR result;
2840 {
2842 {
2843 /*
2844 * Update the changestamp. Emperical tests show that the
2845 * ChangeID is always updated,but c_setprinter is
2846 * global spooler variable (not per printer).
2847 */
2849 /* ChangeID **must** be increasing over the lifetime
2850 of client's spoolss service in order for the
2851 client's cache to show updates */
2855 /*
2856 * Because one day someone will ask:
2857 * NT->NT An admin connection to a remote
2858 * printer show changes imeediately in
2859 * the properities dialog
2860 *
2861 * A non-admin connection will only show the
2862 * changes after viewing the properites page
2863 * 2 times. Seems to be related to a
2864 * race condition in the client between the spooler
2865 * updating the local cache and the Explorer.exe GUI
2866 * actually displaying the properties.
2867 *
2868 * This is fixed in Win2k. admin/non-admin
2869 * connections both display changes immediately.
2870 *
2871 * 14/12/01 --jerry
2872 */
2876 }
2880 }
2883 }
2885 /****************************************************************************
2886 Initialize printer devmode & data with previously saved driver init values.
2887 ****************************************************************************/
2890 {
2892 pstring key;
2895 NT_PRINTER_INFO_LEVEL_2 info;
2897 /*
2898 * Delete any printer data 'specifics' already set. When called for driver
2899 * replace, there will generally be some, but during an add printer, there
2900 * should not be any (if there are delete them).
2901 */
2906 }
2918 /*
2919 * When changing to a driver that has no init info in the tdb, remove
2920 * the previous drivers init info and leave the new on blank.
2921 */
2924 }
2926 /*
2927 * Get the saved DEVMODE..
2928 */
2931 /*
2932 * The saved DEVMODE contains the devicename from the printer used during
2933 * the initialization save. Change it to reflect the new printer.
2934 */
2939 /*
2940 * NT/2k does not change out the entire DeviceMode of a printer
2941 * when changing the driver. Only the driverextra, private, &
2942 * driverversion fields. --jerry (Thu Mar 14 08:58:43 CST 2002)
2943 *
2944 * Later e4xamination revealed that Windows NT/2k does reset the
2945 * the printer's device mode, bit **only** when you change a
2946 * property of the device mode such as the page orientation.
2947 * --jerry
2948 */
2952 /*
2953 * Bind the saved DEVMODE to the new the printer.
2954 */
2957 #else
2958 /* copy the entire devmode if we currently don't have one */
2963 }
2965 /* only set the necessary fields */
2979 }
2980 #endif
2985 /*
2986 * Add the printer data 'specifics' to the new printer
2987 */
2993 }
2995 /****************************************************************************
2996 Initialize printer devmode & data with previously saved driver init values.
2997 When a printer is created using AddPrinter, the drivername bound to the
2998 printer is used to lookup previously saved driver initialization info, which
2999 is bound to the new printer.
3000 ****************************************************************************/
3003 {
3007 {
3014 level));
3016 }
3019 }
3021 /****************************************************************************
3022 Delete driver init data stored for a specified driver
3023 ****************************************************************************/
3026 {
3027 pstring key;
3028 TDB_DATA kbuf;
3033 }
3044 }
3046 /****************************************************************************
3047 Pack up the DEVMODE and specifics for a printer into a 'driver init' entry
3048 in the tdb. Note: this is different from the driver entry and the printer
3049 entry. There should be a single driver init entry for each driver regardless
3050 of whether it was installed from NT or 2K. Technically, they should be
3051 different, but they work out to the same struct.
3052 ****************************************************************************/
3055 {
3056 pstring key;
3064 again:
3078 }
3082 }
3094 done:
3100 DEBUG(10,("update_driver_init_2: Saved printer [%s] init DEVMODE & specifics for driver [%s]\n",
3104 }
3106 /****************************************************************************
3107 Update (i.e. save) the driver init info (DEVMODE and specifics) for a printer
3108 ****************************************************************************/
3111 {
3112 uint32 result;
3117 {
3119 {
3122 }
3126 }
3129 }
3131 /****************************************************************************
3132 Convert the printer data value, a REG_BINARY array, into an initialization
3133 DEVMODE. Note: the array must be parsed as if it was a DEVMODE in an rpc...
3134 got to keep the endians happy :).
3135 ****************************************************************************/
3137 static BOOL convert_driver_init(NT_PRINTER_PARAM *param, TALLOC_CTX *ctx, NT_DEVICEMODE *nt_devmode)
3138 {
3140 prs_struct ps;
3141 DEVICEMODE devmode;
3151 else
3155 }
3157 /****************************************************************************
3158 Set the DRIVER_INIT info in the tdb. Requires Win32 client code that:
3160 1. Use the driver's config DLL to this UNC printername and:
3161 a. Call DrvPrintEvent with PRINTER_EVENT_INITIALIZE
3162 b. Call DrvConvertDevMode with CDM_DRIVER_DEFAULT to get default DEVMODE
3163 2. Call SetPrinterData with the 'magic' key and the DEVMODE as data.
3165 The last step triggers saving the "driver initialization" information for
3166 this printer into the tdb. Later, new printers that use this driver will
3167 have this initialization information bound to them. This simulates the
3168 driver initialization, as if it had run on the Samba server (as it would
3169 have done on NT).
3171 The Win32 client side code requirement sucks! But until we can run arbitrary
3172 Win32 printer driver code on any Unix that Samba runs on, we are stuck with it.
3174 It would have been easier to use SetPrinter because all the UNMARSHALLING of
3175 the DEVMODE is done there, but 2K/XP clients do not set the DEVMODE... think
3176 about it and you will realize why. JRR 010720
3177 ****************************************************************************/
3180 {
3186 /*
3187 * When the DEVMODE is already set on the printer, don't try to unpack it.
3188 */
3191 /*
3192 * Set devmode on printer info, so entire printer initialization can be
3193 * saved to tdb.
3194 */
3202 }
3206 /*
3207 * The DEVMODE is held in the 'data' component of the param in raw binary.
3208 * Convert it to to a devmode structure
3209 */
3214 }
3217 }
3219 /*
3220 * Pack up and add (or update) the DEVMODE and any current printer data to
3221 * a 'driver init' element in the tdb
3222 *
3223 */
3229 }
3231 /*
3232 * If driver initialization info was successfully saved, set the current
3233 * printer to match it. This allows initialization of the current printer
3234 * as well as the driver.
3235 */
3240 }
3244 #endif
3246 done:
3254 }
3256 /****************************************************************************
3257 Update the driver init info (DEVMODE and specifics) for a printer
3258 ****************************************************************************/
3261 {
3265 {
3267 {
3270 }
3274 }
3277 }
3279 /****************************************************************************
3280 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
3281 ****************************************************************************/
3284 {
3285 WERROR result;
3293 {
3295 {
3299 }
3307 }
3309 }
3313 }
3315 DEBUG(10,("get_a_printer: [%s] level %u returning %s\n", sharename, (unsigned int)level, dos_errstr(result)));
3318 }
3320 /****************************************************************************
3321 Deletes a NT_PRINTER_INFO_LEVEL struct.
3322 ****************************************************************************/
3325 {
3326 uint32 result;
3335 {
3337 {
3339 {
3342 }
3343 else
3344 {
3346 }
3348 }
3352 }
3356 }
3358 /****************************************************************************
3359 ****************************************************************************/
3361 {
3362 uint32 result;
3367 {
3369 {
3372 }
3375 {
3378 }
3382 }
3385 }
3386 /****************************************************************************
3387 ****************************************************************************/
3390 {
3391 WERROR result;
3394 {
3396 /* Sometime we just want any version of the driver */
3399 /* look for Win2k first and then for NT4 */
3406 }
3407 }
3411 }
3417 }
3423 }
3425 /****************************************************************************
3426 ****************************************************************************/
3428 {
3429 uint32 result;
3432 {
3434 {
3437 {
3443 }
3444 else
3445 {
3447 }
3449 }
3451 {
3454 {
3461 }
3462 else
3463 {
3465 }
3467 }
3471 }
3473 }
3476 /****************************************************************************
3477 Determine whether or not a particular driver is currently assigned
3478 to a printer
3479 ****************************************************************************/
3482 {
3492 /* loop through the printers.tdb and check for the drivername */
3495 {
3505 }
3508 }
3512 /* report that the driver is not in use by default */
3515 }
3517 /****************************************************************************
3518 Remove a printer driver from the TDB. This assumes that the the driver was
3519 previously looked up.
3520 ***************************************************************************/
3522 WERROR delete_printer_driver( NT_PRINTER_DRIVER_INFO_LEVEL_3 *info_3, struct current_user *user,
3524 {
3525 pstring key;
3526 fstring arch;
3528 NT_PRINTER_DRIVER_INFO_LEVEL ctr;
3530 /* delete the tdb data first */
3545 /* check if the driver actually exists for this environment */
3551 }
3555 /* ok... the driver exists so the delete should return success */
3560 }
3563 /*
3564 * now delete any associated files if delete_files == True
3565 * even if this part failes, we return succes because the
3566 * driver doesn not exist any more
3567 */
3572 #endif
3577 }
3579 /****************************************************************************
3580 ****************************************************************************/
3581 BOOL get_specific_param_by_index(NT_PRINTER_INFO_LEVEL printer, uint32 level, uint32 param_index,
3583 {
3584 /* right now that's enough ! */
3592 i++;
3593 }
3598 /* exited because it exist */
3608 }
3610 /****************************************************************************
3611 ****************************************************************************/
3614 {
3615 /* right now that's enough ! */
3623 {
3626 #else
3628 #endif
3633 }
3636 {
3638 /* exited because it exist */
3649 }
3652 }
3654 /****************************************************************************
3655 Store a security desc for a printer.
3656 ****************************************************************************/
3659 {
3662 prs_struct ps;
3664 fstring key;
3665 WERROR status;
3671 /* The old owner and group sids of the security descriptor are not
3672 present when new ACEs are added or removed by changing printer
3673 permissions through NT. If they are NULL in the new security
3674 descriptor then copy them over from the old one. */
3684 /* Pick out correct owner and group sids */
3702 /* Make a deep copy of the security descriptor */
3706 sacl,
3707 dacl,
3711 }
3715 }
3717 /* Store the security descriptor in a tdb */
3726 }
3735 }
3737 /* Free malloc'ed memory */
3739 out:
3745 }
3747 /****************************************************************************
3748 Construct a default security descriptor buffer for a printer.
3749 ****************************************************************************/
3752 {
3755 SEC_ACCESS sa;
3759 DOM_SID owner_sid;
3762 fstring dos_domain;
3764 /* Create an ACE where Everyone is allowed to print */
3770 /* Make the security descriptor owned by the Administrators group
3771 on the PDC of the domain. */
3773 /* Note that for hysterical raisins, the argument to
3774 secrets_fetch_domain_sid() must be in dos codepage format.
3775 Aargh! */
3784 /* Backup plan - make printer owned by admins or root.
3785 This should emulate a lanman printer as security
3786 settings can't be changed. */
3791 }
3792 }
3797 SEC_ACE_FLAG_INHERIT_ONLY);
3803 /* The ACL revision number in rpc_secdesc.h differs from the one
3804 created by NT when setting ACE entries in printer
3805 descriptors. NT4 complains about the property being edited by a
3806 NT5 machine. */
3812 }
3817 }
3825 }
3827 /****************************************************************************
3828 Get a security desc for a printer.
3829 ****************************************************************************/
3832 {
3833 prs_struct ps;
3834 fstring key;
3839 }
3841 /* Fetch security descriptor from tdb */
3852 }
3854 /* Save default security descriptor for later */
3865 }
3867 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
3868 this security descriptor has been created when winbindd was
3869 down. Take ownership of security descriptor. */
3872 DOM_SID owner_sid;
3875 /* Change sd owner to workgroup administrator */
3883 /* Create new sd */
3896 /* Swap with other one */
3900 /* Set it */
3903 }
3904 }
3914 fstring sid_str;
3921 }
3922 }
3926 }
3928 /* error code:
3929 0: everything OK
3930 1: level not implemented
3931 2: file doesn't exist
3932 3: can't allocate memory
3933 4: can't free memory
3934 5: non existant struct
3935 */
3937 /*
3938 A printer and a printer driver are 2 different things.
3939 NT manages them separatelly, Samba does the same.
3940 Why ? Simply because it's easier and it makes sense !
3942 Now explanation: You have 3 printers behind your samba server,
3943 2 of them are the same make and model (laser A and B). But laser B
3944 has an 3000 sheet feeder and laser A doesn't such an option.
3945 Your third printer is an old dot-matrix model for the accounting :-).
3947 If the /usr/local/samba/lib directory (default dir), you will have
3948 5 files to describe all of this.
3950 3 files for the printers (1 by printer):
3951 NTprinter_laser A
3952 NTprinter_laser B
3953 NTprinter_accounting
3954 2 files for the drivers (1 for the laser and 1 for the dot matrix)
3955 NTdriver_printer model X
3956 NTdriver_printer model Y
3958 jfm: I should use this comment for the text file to explain
3959 same thing for the forms BTW.
3960 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
3962 */
3964 /* Convert generic access rights to printer object specific access rights.
3965 It turns out that NT4 security descriptors use generic access rights and
3966 NT5 the object specific ones. */
3969 {
3975 }
3976 }
3978 /****************************************************************************
3979 Check a user has permissions to perform the given operation. We use the
3980 permission constants defined in include/rpc_spoolss.h to check the various
3981 actions we perform when checking printer access.
3983 PRINTER_ACCESS_ADMINISTER:
3984 print_queue_pause, print_queue_resume, update_printer_sec,
3985 update_printer, spoolss_addprinterex_level_2,
3986 _spoolss_setprinterdata
3988 PRINTER_ACCESS_USE:
3989 print_job_start
3991 JOB_ACCESS_ADMINISTER:
3992 print_job_delete, print_job_pause, print_job_resume,
3993 print_queue_purge
3995 ****************************************************************************/
3997 {
3999 uint32 access_granted;
4000 NTSTATUS status;
4001 BOOL result;
4006 /* If user is NULL then use the current_user structure */
4011 /* Always allow root or printer admins to do anything */
4016 }
4018 /* Get printer name */
4025 }
4027 /* Get printer security descriptor */
4032 }
4039 /* Create a child security descriptor to check permissions
4040 against. This is because print jobs are child objects
4041 objects of a printer. */
4045 /* Now this is the bit that really confuses me. The access
4046 type needs to be changed from JOB_ACCESS_ADMINISTER to
4047 PRINTER_ACCESS_ADMINISTER for this to work. Something
4048 to do with the child (job) object becoming like a
4049 printer?? -tpot */
4052 }
4054 /* Check access */
4069 }
4071 /****************************************************************************
4072 Check the time parameters allow a print operation.
4073 *****************************************************************************/
4076 {
4081 uint32 mins;
4101 }
4104 /****************************************************************************
4105 Attempt to write a default device.
4106 *****************************************************************************/
4109 {
4111 WERROR result;
4113 /*
4114 * Don't bother if no default devicemode was sent.
4115 */
4123 /*
4124 * Just ignore it if we already have a devmode.
4125 */
4126 #if 0
4129 #endif
4130 /*
4131 * We don't have a devicemode and we're trying to write
4132 * one. Check we have the access needed.
4133 */
4137 PRINTER_ACCESS_ADMINISTER) {
4138 DEBUG(5,("printer_write_default_dev: invalid request access to update: %x\n", printer_default->access_required));
4141 }
4147 /*result = NT_STATUS_NO_PROBLEMO;*/
4149 }
4153 /*
4154 * Convert the on the wire devicemode format to the internal one.
4155 */
4162 }
4164 /*
4165 * Finally write back to the tdb.
4166 */
4170 done:
4174 }