| blob | b5c4d0b2e93bcb0dc19d8d83d47c996e751d13bb |
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
5 Copyright (C) 2002 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2004,2008 Guenther Deschner (gd@samba.org)
7 Copyright (C) 2005 Jeremy Allison (jra@samba.org)
8 Copyright (C) 2006 Jelmer Vernooij (jelmer@samba.org)
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>. */
53 /**
54 * @file net_rpc.c
55 *
56 * @brief RPC based subcommands for the 'net' utility.
57 *
58 * This file should contain much of the functionality that used to
59 * be found in rpcclient, execpt that the commands should change
60 * less often, and the fucntionality should be sane (the user is not
61 * expected to know a rid/sid before they conduct an operation etc.)
62 *
63 * @todo Perhaps eventually these should be split out into a number
64 * of files, as this could get quite big.
65 **/
68 /**
69 * Many of the RPC functions need the domain sid. This function gets
70 * it at the start of every run
71 *
72 * @param cli A cli_state already connected to the remote machine
73 *
74 * @return The Domain SID of the remote machine.
75 **/
80 {
92 }
97 SEC_FLAG_MAXIMUM_ALLOWED,
104 }
108 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
116 }
122 }
131 }
133 /**
134 * Run a single RPC command, from start to finish.
135 *
136 * @param pipe_name the pipe to connect to (usually a PIPE_ constant)
137 * @param conn_flag a NET_FLAG_ combination. Passed to
138 * net_make_ipc_connection.
139 * @param argc Standard main() style argc.
140 * @param argv Standard main() style argv. Initial components are already
141 * stripped.
142 * @return A shell status integer (0 for success).
143 */
149 rpc_command_fn fn,
152 {
156 NTSTATUS nt_status;
161 /* make use of cli_state handed over as an argument, if possible */
168 }
171 }
175 }
177 /* Create mem_ctx */
182 }
188 }
194 /* Always try and create an schannel netlogon pipe. */
204 }
211 DCERPC_AUTH_TYPE_NTLMSSP,
212 DCERPC_AUTH_LEVEL_PRIVACY,
220 }
226 }
227 }
228 }
237 }
242 }
243 }
245 fail:
246 /* close the connection only if it was opened here */
249 }
253 }
255 /**
256 * Force a change of the trust acccount password.
257 *
258 * All parameters are provided by the run_rpc_command function, except for
259 * argc, argv which are passed through.
260 *
261 * @param domain_sid The domain sid acquired from the remote server.
262 * @param cli A cli_state connected to the server.
263 * @param mem_ctx Talloc context, destroyed on completion of the function.
264 * @param argc Standard main() style argc.
265 * @param argv Standard main() style argv. Initial components are already
266 * stripped.
267 *
268 * @return Normal NTSTATUS return.
269 **/
279 {
280 NTSTATUS status;
291 }
294 }
296 /**
297 * Force a change of the trust acccount password.
298 *
299 * @param argc Standard main() style argc.
300 * @param argv Standard main() style argv. Initial components are already
301 * stripped.
302 *
303 * @return A shell status integer (0 for success).
304 **/
307 {
315 }
319 rpc_changetrustpw_internals,
321 }
323 /**
324 * Join a domain, the old way. This function exists to allow
325 * the message to be displayed when oldjoin was explicitly
326 * requested, but not when it was implied by "net rpc join".
327 *
328 * This uses 'machinename' as the inital password, and changes it.
329 *
330 * The password should be created with 'server manager' or equiv first.
331 *
332 * @param argc Standard main() style argc.
333 * @param argv Standard main() style argv. Initial components are already
334 * stripped.
335 *
336 * @return A shell status integer (0 for success).
337 **/
340 {
343 WERROR werr;
354 }
359 }
364 }
366 /*
367 check what type of join - if the user want's to join as
368 a BDC, the server must agree that we are a BDC.
369 */
374 }
381 }
387 }
398 }
402 WKSSVC_JOIN_FLAGS_JOIN_UNSECURE |
403 WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED;
408 }
410 /* Check the short name of the domain */
418 }
428 }
434 fail:
437 }
439 /* issue an overall failure message at the end. */
444 cleanup:
448 }
450 /**
451 * check that a join is OK
452 *
453 * @return A shell status integer (0 for success)
454 *
455 **/
457 {
458 NTSTATUS status;
468 }
473 }
483 }
487 domain,
488 NULL,
489 NULL,
490 DS_RETURN_DNS_NAME,
495 }
498 }
500 /* Display success or failure */
503 dc,
510 }
516 }
518 /**
519 * Join a domain using the administrator username and password
520 *
521 * @param argc Standard main() style argc
522 * @param argc Standard main() style argv. Initial components are already
523 * stripped. Currently not used.
524 * @return A shell status integer (0 for success)
525 *
526 **/
529 {
532 WERROR werr;
542 }
547 }
552 }
554 /*
555 check what type of join - if the user want's to join as
556 a BDC, the server must agree that we are a BDC.
557 */
562 }
569 }
581 WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE |
582 WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED;
587 }
589 /* Check the short name of the domain */
597 }
607 }
613 fail:
614 /* issue an overall failure message at the end. */
622 }
624 /**
625 * 'net rpc join' entrypoint.
626 * @param argc Standard main() style argc.
627 * @param argv Standard main() style argv. Initial components are already
628 * stripped
629 *
630 * Main 'net_rpc_join()' (where the admin username/password is used) is
631 * in net_rpc_join.c.
632 * Try to just change the password, but if that doesn't work, use/prompt
633 * for a username/password.
634 **/
637 {
653 }
658 }
665 }
672 }
675 }
677 /**
678 * display info about a rpc domain
679 *
680 * All parameters are provided by the run_rpc_command function, except for
681 * argc, argv which are passed through.
682 *
683 * @param domain_sid The domain sid acquired from the remote server
684 * @param cli A cli_state connected to the server.
685 * @param mem_ctx Talloc context, destroyed on completion of the function.
686 * @param argc Standard main() style argc.
687 * @param argv Standard main() style argv. Initial components are already
688 * stripped.
689 *
690 * @return Normal NTSTATUS return.
691 **/
701 {
705 fstring sid_str;
710 /* Get sam policy handle */
713 MAXIMUM_ALLOWED_ACCESS,
720 }
727 }
729 /* Get domain policy handle */
732 MAXIMUM_ALLOWED_ACCESS,
740 }
746 }
755 }
766 }
768 done:
770 }
772 /**
773 * 'net rpc info' entrypoint.
774 * @param argc Standard main() style argc.
775 * @param argv Standard main() style argv. Initial components are already
776 * stripped.
777 **/
780 {
788 }
793 }
795 /**
796 * Fetch domain SID into the local secrets.tdb.
797 *
798 * All parameters are provided by the run_rpc_command function, except for
799 * argc, argv which are passed through.
800 *
801 * @param domain_sid The domain sid acquired from the remote server.
802 * @param cli A cli_state connected to the server.
803 * @param mem_ctx Talloc context, destroyed on completion of the function.
804 * @param argc Standard main() style argc.
805 * @param argv Standard main() style argv. Initial components are already
806 * stripped.
807 *
808 * @return Normal NTSTATUS return.
809 **/
819 {
820 fstring sid_str;
829 }
832 }
834 /**
835 * 'net rpc getsid' entrypoint.
836 * @param argc Standard main() style argc.
837 * @param argv Standard main() style argv. Initial components are already
838 * stripped.
839 **/
842 {
847 }
856 }
859 conn_flags,
860 rpc_getsid_internals,
862 }
864 /****************************************************************************/
866 /**
867 * Basic usage function for 'net rpc user'.
868 * @param argc Standard main() style argc.
869 * @param argv Standard main() style argv. Initial components are already
870 * stripped.
871 **/
874 {
876 }
878 /**
879 * Add a new user to a remote RPC server.
880 *
881 * @param argc Standard main() style argc.
882 * @param argv Standard main() style argv. Initial components are already
883 * stripped.
884 *
885 * @return A shell status integer (0 for success).
886 **/
889 {
890 NET_API_STATUS status;
897 }
904 }
911 status));
915 }
918 }
920 /**
921 * Rename a user on a remote RPC server.
922 *
923 * @param argc Standard main() style argc.
924 * @param argv Standard main() style argv. Initial components are already
925 * stripped.
926 *
927 * @return A shell status integer (0 for success).
928 **/
931 {
932 NET_API_STATUS status;
939 }
952 }
955 }
957 /**
958 * Set a user's primary group
959 *
960 * @param argc Standard main() style argc.
961 * @param argv Standard main() style argv. Initial components are already
962 * stripped.
963 *
964 * @return A shell status integer (0 for success).
965 **/
969 {
970 NET_API_STATUS status;
979 }
987 }
1004 }
1006 }
1008 /**
1009 * Delete a user from a remote RPC server.
1010 *
1011 * @param argc Standard main() style argc.
1012 * @param argv Standard main() style argv. Initial components are already
1013 * stripped.
1014 *
1015 * @return A shell status integer (0 for success).
1016 **/
1019 {
1020 NET_API_STATUS status;
1025 }
1036 }
1039 }
1041 /**
1042 * Set a user's password on a remote RPC server.
1043 *
1044 * @param argc Standard main() style argc.
1045 * @param argv Standard main() style argv. Initial components are already
1046 * stripped.
1047 *
1048 * @return A shell status integer (0 for success).
1049 **/
1052 {
1053 NET_API_STATUS status;
1062 }
1072 }
1078 }
1083 }
1084 }
1088 /* Display results */
1093 status));
1095 }
1098 }
1100 /**
1101 * List a user's groups from a remote RPC server.
1102 *
1103 * @param argc Standard main() style argc.
1104 * @param argv Standard main() style argv. Initial components are already
1105 * stripped.
1106 *
1107 * @return A shell status integer (0 for success)
1108 **/
1112 {
1113 NET_API_STATUS status;
1123 }
1136 status));
1138 }
1142 u0++;
1143 }
1146 }
1148 /**
1149 * List users on a remote RPC server.
1150 *
1151 * All parameters are provided by the run_rpc_command function, except for
1152 * argc, argv which are passed through.
1153 *
1154 * @param domain_sid The domain sid acquired from the remote server.
1155 * @param cli A cli_state connected to the server.
1156 * @param mem_ctx Talloc context, destroyed on completion of the function.
1157 * @param argc Standard main() style argc.
1158 * @param argv Standard main() style argv. Initial components are already
1159 * stripped.
1160 *
1161 * @return Normal NTSTATUS return.
1162 **/
1165 {
1166 NET_API_STATUS status;
1171 /* Query domain users */
1183 start_idx,
1184 max_entries,
1185 max_size,
1190 }
1199 else
1201 info++;
1202 }
1206 loop_count++;
1212 }
1214 /**
1215 * 'net rpc user' entrypoint.
1216 * @param argc Standard main() style argc.
1217 * @param argv Standard main() style argv. Initial components are already
1218 * stripped.
1219 **/
1222 {
1223 NET_API_STATUS status;
1226 {
1228 rpc_user_add,
1229 NET_TRANSPORT_RPC,
1233 },
1234 {
1236 rpc_user_info,
1237 NET_TRANSPORT_RPC,
1241 },
1242 {
1244 rpc_user_delete,
1245 NET_TRANSPORT_RPC,
1249 },
1250 {
1252 rpc_user_password,
1253 NET_TRANSPORT_RPC,
1257 },
1258 {
1260 rpc_user_rename,
1261 NET_TRANSPORT_RPC,
1265 },
1266 {
1268 rpc_user_setprimarygroup,
1269 NET_TRANSPORT_RPC,
1272 " Set a user's primary group"
1273 },
1275 };
1280 }
1285 }
1296 }
1299 }
1302 }
1309 {
1311 }
1318 {
1320 }
1334 {
1338 uint32 rid;
1346 }
1358 }
1365 }
1371 }
1375 MAXIMUM_ALLOWED_ACCESS,
1380 }
1384 }
1388 MAXIMUM_ALLOWED_ACCESS,
1394 }
1398 }
1402 MAXIMUM_ALLOWED_ACCESS,
1403 rid,
1408 }
1412 }
1416 done:
1419 }
1422 }
1425 }
1427 }
1435 {
1444 }
1447 user_hnd,
1453 }
1456 }
1463 }
1470 {
1472 rpc_sh_user_show_internals);
1473 }
1475 #define FETCHSTR(name, rec) \
1476 do { if (strequal(ctx->thiscmd, name)) { \
1477 oldval = talloc_strdup(mem_ctx, info->info21.rec.string); } \
1478 } while (0);
1480 #define SETSTR(name, rec, flag) \
1481 do { if (strequal(ctx->thiscmd, name)) { \
1482 init_lsa_String(&(info->info21.rec), argv[0]); \
1483 info->info21.fields_present |= SAMR_FIELD_##flag; } \
1484 } while (0);
1492 {
1503 }
1506 user_hnd,
1512 }
1515 }
1529 }
1533 }
1545 user_hnd,
1547 info,
1551 }
1558 done:
1561 }
1563 #define HANDLEFLG(name, rec) \
1564 do { if (strequal(ctx->thiscmd, name)) { \
1566 if (newval) { \
1567 newflags = oldflags | ACB_##rec; \
1568 } else { \
1569 newflags = oldflags & ~ACB_##rec; \
1570 } } } while (0);
1577 {
1579 rpc_sh_user_str_edit_internals);
1580 }
1588 {
1600 /* TRANSATORS: The yes|no here are program keywords. Please do
1601 not translate. */
1605 }
1610 user_hnd,
1616 }
1619 }
1632 oldval);
1634 }
1642 user_hnd,
1644 info,
1648 }
1653 }
1655 done:
1658 }
1665 {
1667 rpc_sh_user_flag_edit_internals);
1668 }
1673 {
1707 };
1710 }
1715 {
1731 };
1734 }
1736 /****************************************************************************/
1738 /**
1739 * Basic usage function for 'net rpc group'.
1740 * @param argc Standard main() style argc.
1741 * @param argv Standard main() style argv. Initial components are already
1742 * stripped.
1743 **/
1746 {
1748 }
1750 /**
1751 * Delete group on a remote RPC server.
1752 *
1753 * All parameters are provided by the run_rpc_command function, except for
1754 * argc, argv which are passed through.
1755 *
1756 * @param domain_sid The domain sid acquired from the remote server.
1757 * @param cli A cli_state connected to the server.
1758 * @param mem_ctx Talloc context, destroyed on completion of the function.
1759 * @param argc Standard main() style argc.
1760 * @param argv Standard main() style argv. Initial components are already
1761 * stripped.
1762 *
1763 * @return Normal NTSTATUS return.
1764 **/
1774 {
1780 /* char **names; */
1782 /* struct samr_RidWithAttribute *user_gids; */
1792 }
1796 MAXIMUM_ALLOWED_ACCESS,
1802 }
1808 }
1812 MAXIMUM_ALLOWED_ACCESS,
1819 }
1825 }
1839 }
1845 }
1849 }
1853 }
1856 {
1860 MAXIMUM_ALLOWED_ACCESS,
1867 }
1873 }
1886 }
1894 }
1900 }
1902 /* Check if group is anyone's primary group */
1904 {
1907 MAXIMUM_ALLOWED_ACCESS,
1916 }
1924 }
1937 }
1946 }
1953 }
1955 }
1958 }
1962 "some of it's members have it as primary "
1966 }
1968 /* remove all group members */
1970 {
1980 }
1989 }
1990 }
1997 }
2002 /* removing a local group is easier... */
2006 MAXIMUM_ALLOWED_ACCESS,
2013 }
2018 }
2025 }
2036 }
2045 }
2047 done:
2050 }
2053 {
2056 }
2059 {
2060 NET_API_STATUS status;
2067 }
2074 }
2082 status));
2086 }
2089 }
2092 {
2093 NET_API_STATUS status;
2100 }
2107 }
2115 status));
2119 }
2122 }
2125 {
2130 }
2137 {
2149 }
2158 }
2166 }
2170 done:
2173 }
2177 /* Try as S-1-5-whatever */
2185 }
2186 }
2189 }
2195 {
2198 uint32 group_rid;
2211 }
2213 /* Get sam policy handle */
2216 MAXIMUM_ALLOWED_ACCESS,
2221 }
2224 }
2226 /* Get domain policy handle */
2229 MAXIMUM_ALLOWED_ACCESS,
2235 }
2238 }
2251 member);
2253 }
2258 member);
2260 }
2264 }
2268 }
2272 MAXIMUM_ALLOWED_ACCESS,
2273 group_rid,
2278 }
2283 }
2292 }
2296 done:
2299 }
2306 {
2309 uint32 alias_rid;
2322 }
2329 member);
2331 }
2333 /* Get sam policy handle */
2336 MAXIMUM_ALLOWED_ACCESS,
2341 }
2345 }
2347 /* Get domain policy handle */
2350 MAXIMUM_ALLOWED_ACCESS,
2356 }
2360 }
2364 MAXIMUM_ALLOWED_ACCESS,
2365 alias_rid,
2370 }
2373 }
2381 }
2385 done:
2388 }
2398 {
2410 }
2417 }
2426 }
2428 }
2437 }
2439 }
2445 }
2448 {
2450 rpc_group_addmem_internals,
2452 }
2459 {
2462 uint32 group_rid;
2476 /* Get sam policy handle */
2479 MAXIMUM_ALLOWED_ACCESS,
2484 }
2487 }
2490 /* Get domain policy handle */
2493 MAXIMUM_ALLOWED_ACCESS,
2499 }
2502 }
2515 member);
2517 }
2522 member);
2524 }
2528 }
2532 }
2536 MAXIMUM_ALLOWED_ACCESS,
2537 group_rid,
2542 }
2546 }
2554 }
2557 done:
2560 }
2567 {
2570 uint32 alias_rid;
2589 member);
2591 }
2593 /* Get sam policy handle */
2596 MAXIMUM_ALLOWED_ACCESS,
2601 }
2605 }
2607 /* Get domain policy handle */
2610 MAXIMUM_ALLOWED_ACCESS,
2616 }
2620 }
2624 MAXIMUM_ALLOWED_ACCESS,
2625 alias_rid,
2630 }
2634 }
2643 }
2647 done:
2650 }
2660 {
2672 }
2679 }
2688 }
2690 }
2699 }
2701 }
2707 }
2710 {
2712 rpc_group_delmem_internals,
2714 }
2716 /**
2717 * List groups on a remote RPC server.
2718 *
2719 * All parameters are provided by the run_rpc_command function, except for
2720 * argc, argv which are passes through.
2721 *
2722 * @param domain_sid The domain sid acquired from the remote server.
2723 * @param cli A cli_state connected to the server.
2724 * @param mem_ctx Talloc context, destroyed on completion of the function.
2725 * @param argc Standard main() style argc.
2726 * @param argv Standard main() style argv. Initial components are already
2727 * stripped.
2728 *
2729 * @return Normal NTSTATUS return.
2730 **/
2740 {
2758 " If none of global, local or builtin is "
2759 "specified, all three options are considered "
2762 }
2768 }
2779 }
2781 /* Get sam policy handle */
2785 MAXIMUM_ALLOWED_ACCESS,
2790 }
2794 }
2796 /* Get domain policy handle */
2800 MAXIMUM_ALLOWED_ACCESS,
2806 }
2810 }
2812 /* Query domain groups */
2828 start_idx,
2829 max_entries,
2830 max_size,
2837 }
2856 else
2858 }
2860 /* query domain aliases */
2874 }
2887 NTSTATUS _result;
2907 }
2908 }
2909 }
2910 }
2915 description);
2918 }
2919 }
2922 /* Get builtin policy handle */
2926 MAXIMUM_ALLOWED_ACCESS,
2932 }
2936 }
2938 /* query builtin aliases */
2947 max_entries,
2952 }
2957 }
2967 NTSTATUS _result;
2987 }
2988 }
2989 }
2990 }
2995 description);
2998 }
2999 }
3004 done:
3006 }
3009 {
3011 rpc_group_list_internals,
3013 }
3021 uint32 rid)
3022 {
3032 fstring sid_str;
3036 domain_pol,
3037 MAXIMUM_ALLOWED_ACCESS,
3038 rid,
3043 }
3046 }
3054 }
3057 }
3069 domain_pol,
3070 this_time,
3071 group_rids,
3077 }
3080 }
3083 }
3086 }
3087 /* We only have users as members, but make the output
3088 the same as the output of alias members */
3096 SID_NAME_USER);
3100 }
3101 }
3105 }
3108 }
3115 uint32 rid)
3116 {
3120 uint32 num_members;
3130 domain_pol,
3131 MAXIMUM_ALLOWED_ACCESS,
3132 rid,
3137 }
3140 }
3149 }
3153 }
3159 }
3168 }
3177 }
3184 }
3188 }
3199 }
3202 fstring sid_str;
3212 else
3214 }
3215 }
3219 }
3229 {
3236 /* Get sam policy handle */
3240 MAXIMUM_ALLOWED_ACCESS,
3245 }
3248 }
3250 /* Get domain policy handle */
3254 MAXIMUM_ALLOWED_ACCESS,
3260 }
3263 }
3276 }
3280 /* Ok, did not find it in the global sam, try with builtin */
3290 MAXIMUM_ALLOWED_ACCESS,
3296 }
3301 }
3312 }
3317 }
3318 }
3324 }
3329 }
3336 }
3341 }
3344 }
3347 {
3350 }
3353 rpc_group_members_internals,
3355 }
3358 {
3359 NET_API_STATUS status;
3367 }
3380 status));
3382 }
3385 }
3388 {
3391 }
3394 }
3396 /**
3397 * 'net rpc group' entrypoint.
3398 * @param argc Standard main() style argc.
3399 * @param argv Standard main() style argv. Initial components are already
3400 * stripped.
3401 **/
3404 {
3405 NET_API_STATUS status;
3408 {
3410 rpc_group_add,
3411 NET_TRANSPORT_RPC,
3415 },
3416 {
3418 rpc_group_delete,
3419 NET_TRANSPORT_RPC,
3423 },
3424 {
3426 rpc_group_addmem,
3427 NET_TRANSPORT_RPC,
3431 },
3432 {
3434 rpc_group_delmem,
3435 NET_TRANSPORT_RPC,
3439 },
3440 {
3442 rpc_group_list,
3443 NET_TRANSPORT_RPC,
3447 },
3448 {
3450 rpc_group_members,
3451 NET_TRANSPORT_RPC,
3455 },
3456 {
3458 rpc_group_rename,
3459 NET_TRANSPORT_RPC,
3463 },
3465 };
3470 }
3475 }
3481 " Alias for net rpc group list global "
3485 }
3488 rpc_group_list_internals,
3490 }
3493 }
3495 /****************************************************************************/
3498 {
3500 }
3502 /**
3503 * Add a share on a remote RPC server.
3504 *
3505 * @param argc Standard main() style argc.
3506 * @param argv Standard main() style argv. Initial components are already
3507 * stripped.
3508 *
3509 * @return A shell status integer (0 for success).
3510 **/
3513 {
3514 NET_API_STATUS status;
3525 }
3529 }
3534 }
3554 }
3557 }
3559 /**
3560 * Delete a share on a remote RPC server.
3561 *
3562 * @param domain_sid The domain sid acquired from the remote server.
3563 * @param argc Standard main() style argc.
3564 * @param argv Standard main() style argv. Initial components are already
3565 * stripped.
3566 *
3567 * @return A shell status integer (0 for success).
3568 **/
3570 {
3573 }
3576 }
3578 /**
3579 * Formatted print of share info
3580 *
3581 * @param r pointer to SHARE_INFO_1 to format
3582 **/
3586 {
3594 }
3595 }
3600 uint32 level,
3604 {
3605 WERROR result;
3606 NTSTATUS status;
3610 /* no specific share requested, enumerate all */
3621 info_ctr,
3622 preferred_len,
3628 }
3630 }
3632 /* request just one share */
3636 level,
3643 }
3647 }
3649 /* construct ctr */
3656 {
3668 }
3670 {
3682 }
3684 {
3696 }
3698 done:
3700 }
3702 /***
3703 * 'net rpc share list' entrypoint.
3704 * @param argc Standard main() style argc.
3705 * @param argv Standard main() style argv. Initial components are already
3706 * stripped.
3707 **/
3709 {
3710 NET_API_STATUS status;
3724 }
3727 level,
3735 }
3737 /* Display results */
3744 }
3747 done:
3749 }
3752 {
3753 NTSTATUS status;
3759 }
3765 }
3768 }
3772 {
3773 /* only support disk shares */
3776 type);
3778 }
3780 /* skip builtin shares */
3781 /* FIXME: should print$ be added too ? */
3789 }
3792 }
3794 /**
3795 * Migrate shares from a remote RPC server to the local RPC server.
3796 *
3797 * All parameters are provided by the run_rpc_command function, except for
3798 * argc, argv which are passed through.
3799 *
3800 * @param domain_sid The domain sid acquired from the remote server.
3801 * @param cli A cli_state connected to the server.
3802 * @param mem_ctx Talloc context, destroyed on completion of the function.
3803 * @param argc Standard main() style argc.
3804 * @param argv Standard main() style argv. Initial components are already
3805 * stripped.
3806 *
3807 * @return Normal NTSTATUS return.
3808 **/
3818 {
3819 WERROR result;
3822 uint32 i;
3834 /* connect destination PI_SRVSVC */
3848 /* reset error-code */
3854 /* finally add the share on the dst server */
3872 }
3877 }
3884 }
3886 }
3890 done:
3893 }
3897 }
3899 /**
3900 * Migrate shares from a RPC server to another.
3901 *
3902 * @param argc Standard main() style argc.
3903 * @param argv Standard main() style argv. Initial components are already
3904 * stripped.
3905 *
3906 * @return A shell status integer (0 for success).
3907 **/
3910 {
3918 }
3923 }
3926 rpc_share_migrate_shares_internals,
3928 }
3930 /**
3931 * Copy a file/dir
3932 *
3933 * @param f file_info
3934 * @param mask current search mask
3935 * @param state arg-pointer
3936 *
3937 **/
3940 {
3944 fstring dir;
3958 /* DIRECTORY */
3968 {
3970 /* create that directory */
3983 }
3989 }
3991 /* search below that directory */
3994 }
3997 }
4004 }
4008 }
4011 /* FILE */
4019 {
4032 net_mode_share);
4034 }
4040 }
4042 /**
4043 * sync files, can be called recursivly to list files
4044 * and then call copy_fn for each file
4045 *
4046 * @param cp_clistate pointer to the copy_clistate we work with
4047 * @param mask the current search mask
4048 *
4049 * @return Boolean result
4050 **/
4052 {
4055 NTSTATUS status;
4067 }
4074 }
4077 }
4080 /**
4081 * Set the top level directory permissions before we do any further copies.
4082 * Should set up ACL inheritance.
4083 **/
4088 {
4107 }
4114 }
4117 }
4119 /**
4120 * Sync all files inside a remote share to another share (over smb).
4121 *
4122 * All parameters are provided by the run_rpc_command function, except for
4123 * argc, argv which are passed through.
4124 *
4125 * @param domain_sid The domain sid acquired from the remote server.
4126 * @param cli A cli_state connected to the server.
4127 * @param mem_ctx Talloc context, destroyed on completion of the function.
4128 * @param argc Standard main() style argc.
4129 * @param argv Standard main() style argv. Initial components are already
4130 * stripped.
4131 *
4132 * @return Normal NTSTATUS return.
4133 **/
4143 {
4144 WERROR result;
4147 uint32 i;
4159 }
4175 /* one might not want to mirror whole discs :) */
4180 }
4183 {
4189 net_mode_share);
4191 }
4203 cp_clistate.attribute = FILE_ATTRIBUTE_SYSTEM | FILE_ATTRIBUTE_HIDDEN | FILE_ATTRIBUTE_DIRECTORY;
4206 /* open share source */
4217 /* open share destination */
4224 }
4228 "directory permissions for the "
4232 }
4239 }
4240 }
4244 done:
4255 }
4258 {
4266 }
4271 }
4274 rpc_share_migrate_files_internals,
4276 }
4278 /**
4279 * Migrate share-ACLs from a remote RPC server to the local RPC server.
4280 *
4281 * All parameters are provided by the run_rpc_command function, except for
4282 * argc, argv which are passed through.
4283 *
4284 * @param domain_sid The domain sid acquired from the remote server.
4285 * @param cli A cli_state connected to the server.
4286 * @param mem_ctx Talloc context, destroyed on completion of the function.
4287 * @param argc Standard main() style argc.
4288 * @param argv Standard main() style argv. Initial components are already
4289 * stripped.
4290 *
4291 * @return Normal NTSTATUS return.
4292 **/
4302 {
4303 WERROR result;
4307 uint32 i;
4320 /* connect destination PI_SRVSVC */
4333 /* reset error-code */
4346 /* FIXME: shouldn't we be able to just set the security descriptor ? */
4349 /* finally modify the share on the dst server */
4353 level,
4361 }
4367 }
4369 }
4373 done:
4376 }
4380 }
4382 /**
4383 * Migrate share-acls from a RPC server to another.
4384 *
4385 * @param argc Standard main() style argc.
4386 * @param argv Standard main() style argv. Initial components are already
4387 * stripped.
4388 *
4389 * @return A shell status integer (0 for success).
4390 **/
4393 {
4401 }
4406 }
4409 rpc_share_migrate_security_internals,
4411 }
4413 /**
4414 * Migrate shares (including share-definitions, share-acls and files with acls/attrs)
4415 * from one server to another.
4416 *
4417 * @param argc Standard main() style argc.
4418 * @param argv Standard main() style argv. Initial components are already
4419 * stripped.
4420 *
4421 * @return A shell status integer (0 for success).
4422 *
4423 **/
4426 {
4436 }
4441 }
4443 /* order is important. we don't want to be locked out by the share-acl
4444 * before copying files - gd */
4458 argv);
4459 }
4462 /**
4463 * 'net rpc share migrate' entrypoint.
4464 * @param argc Standard main() style argc.
4465 * @param argv Standard main() style argv. Initial components are already
4466 * stripped.
4467 **/
4469 {
4472 {
4474 rpc_share_migrate_all,
4475 NET_TRANSPORT_RPC,
4479 },
4480 {
4482 rpc_share_migrate_files,
4483 NET_TRANSPORT_RPC,
4487 },
4488 {
4490 rpc_share_migrate_security,
4491 NET_TRANSPORT_RPC,
4495 },
4496 {
4498 rpc_share_migrate_shares,
4499 NET_TRANSPORT_RPC,
4503 },
4505 };
4510 }
4514 uint32 num_members;
4516 };
4521 /*
4522 * Add an alias to the static list.
4523 */
4525 {
4531 }
4533 /*
4534 * For a specific domain on the server, fetch all the aliases
4535 * and their members. Add all of them to the server_aliases.
4536 */
4542 {
4549 /* Get domain policy handle */
4552 connect_pol,
4553 MAXIMUM_ALLOWED_ACCESS,
4559 }
4562 }
4572 max_entries,
4577 }
4584 NTSTATUS _result;
4588 MAXIMUM_ALLOWED_ACCESS,
4594 }
4598 }
4606 }
4610 }
4617 }
4621 }
4631 }
4637 }
4642 done:
4646 }
4648 /*
4649 * Dump server_aliases as names for debugging purposes.
4650 */
4660 {
4662 NTSTATUS result;
4667 SEC_FLAG_MAXIMUM_ALLOWED,
4691 }
4707 }
4712 }
4714 /*
4715 * Fetch a list of all server aliases and their members into
4716 * server_aliases.
4717 */
4727 {
4734 MAXIMUM_ALLOWED_ACCESS,
4739 }
4743 }
4749 }
4752 domain_sid);
4755 done:
4757 }
4760 {
4767 }
4773 }
4776 {
4778 }
4781 {
4788 }
4793 }
4796 fstring name;
4798 };
4801 {
4808 }
4809 }
4812 {
4818 }
4821 }
4824 {
4830 }
4831 }
4833 /*
4834 * We got a user token with all the SIDs we can know about without asking the
4835 * server directly. These are the user and domain group sids. All of these can
4836 * be members of aliases. So scan the list of aliases for each of the SIDs and
4837 * add them to the token.
4838 */
4841 {
4847 }
4848 }
4851 {
4854 fstring full_name;
4865 /* First let's find out the user sid */
4873 }
4880 }
4885 }
4889 /* And now the groups winbind knows about */
4896 }
4909 }
4920 }
4922 }
4926 }
4928 /**
4929 * Get a list of all user tokens we want to look at
4930 **/
4934 {
4946 }
4948 /* Send request to winbind daemon */
4955 }
4963 }
4986 }
4988 }
4991 }
4999 }
5004 {
5008 fstring line;
5012 }
5016 }
5019 /* We have a SID */
5026 }
5031 }
5035 }
5037 /* And a new user... */
5044 }
5050 }
5054 }
5057 }
5060 /*
5061 * Show the list of all users that have access to a share
5062 */
5070 {
5076 WERROR result;
5077 NTSTATUS status;
5078 uint16 cnum;
5083 netname,
5090 netname));
5092 }
5097 netname));
5098 }
5104 }
5110 }
5113 uint32 acc_granted;
5124 }
5125 }
5130 }
5138 }
5140 }
5148 }
5150 /**
5151 * List shares on a remote RPC server, including the security descriptors.
5152 *
5153 * All parameters are provided by the run_rpc_command function, except for
5154 * argc, argv which are passed through.
5155 *
5156 * @param domain_sid The domain sid acquired from the remote server.
5157 * @param cli A cli_state connected to the server.
5158 * @param mem_ctx Talloc context, destroyed on completion of the function.
5159 * @param argc Standard main() style argc.
5160 * @param argv Standard main() style argv. Initial components are already
5161 * stripped.
5162 *
5163 * @return Normal NTSTATUS return.
5164 **/
5174 {
5185 WERROR result;
5194 }
5199 }
5209 }
5222 /* Issue the NetShareEnum RPC call and retrieve the response */
5227 preferred_len,
5232 /* Was it successful? */
5234 /* Nope. Go clean up. */
5236 }
5239 /* Nope. Go clean up. */
5242 }
5246 }
5248 /* For each returned entry... */
5254 }
5260 }
5261 done:
5264 }
5268 }
5272 {
5282 }
5285 rpc_aliaslist_internals,
5291 rpc_aliaslist_dump,
5297 rpc_share_allowedusers_internals,
5299 }
5302 {
5310 }
5315 }
5320 }
5324 }
5327 {
5335 }
5337 /**
5338 * 'net rpc share' entrypoint.
5339 * @param argc Standard main() style argc.
5340 * @param argv Standard main() style argv. Initial components are already
5341 * stripped.
5342 **/
5345 {
5346 NET_API_STATUS status;
5349 {
5351 rpc_share_add,
5352 NET_TRANSPORT_RPC,
5356 },
5357 {
5359 rpc_share_delete,
5360 NET_TRANSPORT_RPC,
5364 },
5365 {
5367 rpc_share_allowedusers,
5368 NET_TRANSPORT_RPC,
5372 },
5373 {
5375 rpc_share_migrate,
5376 NET_TRANSPORT_RPC,
5380 },
5381 {
5383 rpc_share_list,
5384 NET_TRANSPORT_RPC,
5388 },
5390 };
5395 }
5400 }
5411 }
5414 }
5417 }
5424 {
5427 }
5434 {
5435 NET_API_STATUS status;
5443 }
5460 }
5467 {
5471 }
5474 }
5481 {
5483 WERROR result;
5484 NTSTATUS status;
5490 }
5501 }
5504 }
5511 done:
5513 }
5517 {
5533 };
5536 }
5538 /****************************************************************************/
5541 {
5543 }
5545 /**
5546 * Close a file on a remote RPC server.
5547 *
5548 * @param argc Standard main() style argc.
5549 * @param argv Standard main() style argv. Initial components are already
5550 * stripped.
5551 *
5552 * @return A shell status integer (0 for success).
5553 **/
5555 {
5558 }
5561 }
5563 /**
5564 * Formatted print of open file info
5565 *
5566 * @param r struct FILE_INFO_3 contents
5567 **/
5570 {
5574 }
5576 /**
5577 * List files for a user on a remote RPC server.
5578 *
5579 * @param argc Standard main() style argc.
5580 * @param argv Standard main() style argv. Initial components are already
5581 * stripped.
5582 *
5583 * @return A shell status integer (0 for success)..
5584 **/
5587 {
5588 NET_API_STATUS status;
5598 }
5600 /* if argc > 0, must be user command */
5603 }
5606 NULL,
5607 username,
5610 preferred_len,
5617 }
5619 /* Display results */
5627 }
5628 done:
5631 }
5633 /**
5634 * 'net rpc file' entrypoint.
5635 * @param argc Standard main() style argc.
5636 * @param argv Standard main() style argv. Initial components are already
5637 * stripped.
5638 **/
5641 {
5642 NET_API_STATUS status;
5645 {
5647 rpc_file_close,
5648 NET_TRANSPORT_RPC,
5652 },
5653 {
5655 rpc_file_user,
5656 NET_TRANSPORT_RPC,
5660 },
5661 #if 0
5662 {
5664 rpc_file_info,
5665 NET_TRANSPORT_RPC,
5669 },
5670 #endif
5672 };
5677 }
5682 }
5691 }
5694 }
5697 }
5699 /**
5700 * ABORT the shutdown of a remote RPC Server, over initshutdown pipe.
5701 *
5702 * All parameters are provided by the run_rpc_command function, except for
5703 * argc, argv which are passed through.
5704 *
5705 * @param c A net_context structure.
5706 * @param domain_sid The domain sid acquired from the remote server.
5707 * @param cli A cli_state connected to the server.
5708 * @param mem_ctx Talloc context, destroyed on completion of the function.
5709 * @param argc Standard main() style argc.
5710 * @param argv Standard main() style argv. Initial components are already
5711 * stripped.
5712 *
5713 * @return Normal NTSTATUS return.
5714 **/
5724 {
5726 WERROR result;
5732 }
5740 }
5742 /**
5743 * ABORT the shutdown of a remote RPC Server, over winreg pipe.
5744 *
5745 * All parameters are provided by the run_rpc_command function, except for
5746 * argc, argv which are passed through.
5747 *
5748 * @param c A net_context structure.
5749 * @param domain_sid The domain sid acquired from the remote server.
5750 * @param cli A cli_state connected to the server.
5751 * @param mem_ctx Talloc context, destroyed on completion of the function.
5752 * @param argc Standard main() style argc.
5753 * @param argv Standard main() style argv. Initial components are already
5754 * stripped.
5755 *
5756 * @return Normal NTSTATUS return.
5757 **/
5767 {
5769 WERROR werr;
5777 }
5785 }
5787 /**
5788 * ABORT the shutdown of a remote RPC server.
5789 *
5790 * @param argc Standard main() style argc.
5791 * @param argv Standard main() style argv. Initial components are already
5792 * stripped.
5793 *
5794 * @return A shell status integer (0 for success).
5795 **/
5799 {
5809 }
5820 rpc_reg_shutdown_abort_internals,
5822 }
5824 /**
5825 * Shut down a remote RPC Server via initshutdown pipe.
5826 *
5827 * All parameters are provided by the run_rpc_command function, except for
5828 * argc, argv which are passed through.
5829 *
5830 * @param c A net_context structure.
5831 * @param domain_sid The domain sid acquired from the remote server.
5832 * @param cli A cli_state connected to the server.
5833 * @param mem_ctx Talloc context, destroyed on completion of the function.
5834 * @param argc Standard main() style argc.
5835 * @param argv Standard main() style argv. Initial components are already
5836 * stripped.
5837 *
5838 * @return Normal NTSTATUS return.
5839 **/
5849 {
5851 WERROR result;
5859 }
5862 }
5866 /* create an entry */
5872 }
5878 }
5880 }
5882 /**
5883 * Shut down a remote RPC Server via winreg pipe.
5884 *
5885 * All parameters are provided by the run_rpc_command function, except for
5886 * argc, argv which are passed through.
5887 *
5888 * @param c A net_context structure.
5889 * @param domain_sid The domain sid acquired from the remote server.
5890 * @param cli A cli_state connected to the server.
5891 * @param mem_ctx Talloc context, destroyed on completion of the function.
5892 * @param argc Standard main() style argc.
5893 * @param argv Standard main() style argv. Initial components are already
5894 * stripped.
5895 *
5896 * @return Normal NTSTATUS return.
5897 **/
5907 {
5911 NTSTATUS result;
5912 WERROR werr;
5917 }
5922 }
5924 /* create an entry */
5931 }
5939 else
5941 }
5944 }
5946 /**
5947 * Shut down a remote RPC server.
5948 *
5949 * @param argc Standard main() style argc.
5950 * @param argv Standard main() style argv. Initial components are already
5951 * stripped.
5952 *
5953 * @return A shell status integer (0 for success).
5954 **/
5957 {
5967 }
5976 }
5979 }
5981 /***************************************************************************
5982 NT Domain trusts code (i.e. 'net rpc trustdom' functionality)
5983 ***************************************************************************/
5985 /**
5986 * Add interdomain trust account to the RPC server.
5987 * All parameters (except for argc and argv) are passed by run_rpc_command
5988 * function.
5989 *
5990 * @param c A net_context structure.
5991 * @param domain_sid The domain sid acquired from the server.
5992 * @param cli A cli_state connected to the server.
5993 * @param mem_ctx Talloc context, destroyed on completion of the function.
5994 * @param argc Standard main() style argc.
5995 * @param argv Standard main() style argv. Initial components are already
5996 * stripped.
5997 *
5998 * @return normal NTSTATUS return code.
5999 */
6009 {
6014 uint32 acb_info;
6016 uint32 user_rid;
6029 }
6031 /*
6032 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6033 */
6037 }
6042 }
6051 }
6053 /* Get samr policy handle */
6056 MAXIMUM_ALLOWED_ACCESS,
6061 }
6065 }
6067 /* Get domain policy handle */
6070 MAXIMUM_ALLOWED_ACCESS,
6076 }
6080 }
6082 /* This call can take a long time - allow the server to time out.
6083 * 35 seconds should do it. */
6087 /* Create trusting domain's account */
6091 SAMR_USER_ACCESS_SET_PASSWORD |
6092 SAMR_USER_ACCESS_GET_ATTRIBUTES |
6093 SAMR_USER_ACCESS_SET_ATTRIBUTES;
6098 acb_info,
6099 acct_flags,
6106 }
6107 /* And restore our original timeout. */
6115 }
6117 {
6127 SAMR_FIELD_NT_PASSWORD_PRESENT;
6138 }
6145 }
6146 }
6148 done:
6152 }
6154 /**
6155 * Create interdomain trust account for a remote domain.
6156 *
6157 * @param argc Standard argc.
6158 * @param argv Standard argv without initial components.
6159 *
6160 * @return Integer status (0 means success).
6161 **/
6164 {
6174 }
6175 }
6178 /**
6179 * Remove interdomain trust account from the RPC server.
6180 * All parameters (except for argc and argv) are passed by run_rpc_command
6181 * function.
6182 *
6183 * @param c A net_context structure.
6184 * @param domain_sid The domain sid acquired from the server.
6185 * @param cli A cli_state connected to the server.
6186 * @param mem_ctx Talloc context, destroyed on completion of the function.
6187 * @param argc Standard main() style argc.
6188 * @param argv Standard main() style argv. Initial components are already
6189 * stripped.
6190 *
6191 * @return normal NTSTATUS return code.
6192 */
6202 {
6216 }
6218 /*
6219 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6220 */
6229 }
6231 /* Get samr policy handle */
6234 MAXIMUM_ALLOWED_ACCESS,
6239 }
6243 }
6245 /* Get domain policy handle */
6248 MAXIMUM_ALLOWED_ACCESS,
6254 }
6258 }
6274 }
6281 }
6285 }
6289 }
6293 MAXIMUM_ALLOWED_ACCESS,
6302 }
6310 }
6312 /* append the rid to the domain sid */
6315 }
6317 /* remove the sid */
6328 }
6335 }
6338 /* Delete user */
6348 }
6356 }
6362 }
6364 done:
6366 }
6368 /**
6369 * Delete interdomain trust account for a remote domain.
6370 *
6371 * @param argc Standard argc.
6372 * @param argv Standard argv without initial components.
6373 *
6374 * @return Integer status (0 means success).
6375 **/
6378 {
6387 }
6388 }
6394 {
6398 NTSTATUS status;
6399 WERROR result;
6402 /* Use NetServerEnum2 */
6407 }
6412 /* Try netr_GetDcName */
6418 }
6424 domain_name,
6431 }
6438 }
6441 }
6443 /**
6444 * Establish trust relationship to a trusting domain.
6445 * Interdomain account must already be created on remote PDC.
6446 *
6447 * @param c A net_context structure.
6448 * @param argc Standard argc.
6449 * @param argv Standard argv without initial components.
6450 *
6451 * @return Integer status (0 means success).
6452 **/
6456 {
6467 fstring pdc_name;
6471 /*
6472 * Connect to \\server\ipc$ as 'our domain' account with password
6473 */
6480 }
6486 }
6488 /* account name used at first is our domain's name with '$' */
6491 }
6496 }
6498 /*
6499 * opt_workgroup will be used by connection functions further,
6500 * hence it should be set to remote domain name instead of ours
6501 */
6504 };
6508 /* find the domain controller */
6512 }
6514 /* connect to ipc$ as username/password */
6518 /* Is it trusting domain account for sure ? */
6522 }
6524 /* store who we connected to */
6528 /*
6529 * Connect to \\server\ipc$ again (this time anonymously)
6530 */
6539 }
6546 }
6548 /* Make sure we're talking to a proper server */
6555 }
6557 /*
6558 * Call LsaOpenPolicy and LsaQueryInfo
6559 */
6568 }
6580 }
6582 /* Querying info level 5 */
6586 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6595 }
6602 }
6606 /* There should be actually query info level 3 (following nt serv behaviour),
6607 but I still don't know if it's _really_ necessary */
6609 /*
6610 * Store the password in secrets db
6611 */
6618 }
6620 /*
6621 * Close the pipes and clean up
6622 */
6631 }
6639 }
6641 /**
6642 * Revoke trust relationship to the remote domain.
6643 *
6644 * @param c A net_context structure.
6645 * @param argc Standard argc.
6646 * @param argv Standard argv without initial components.
6647 *
6648 * @return Integer status (0 means success).
6649 **/
6653 {
6664 }
6666 /* generate upper cased domain name */
6671 }
6673 /* delete password of the trust */
6676 domain_name));
6678 };
6681 done:
6684 }
6694 {
6695 fstring str_sid;
6698 }
6701 }
6704 {
6705 fstring ascii_sid;
6707 /* convert sid into ascii string */
6711 }
6718 {
6722 DATA_BLOB session_key;
6727 pol,
6729 LSA_TRUSTED_DOMAIN_INFO_PASSWORD,
6736 }
6742 }
6751 }
6760 }
6766 }
6768 #ifdef DEBUG_PASSWORD
6772 #endif
6774 done:
6779 }
6783 {
6784 /* common variables */
6793 /* trusted domains listing variables */
6797 fstring pdc_name;
6807 }
6809 /*
6810 * Listing trusted domains (stored in secrets.tdb, if local)
6811 */
6815 /*
6816 * set domain and pdc name to local samba server (default)
6817 * or to remote one given in command line
6818 */
6827 };
6829 /* open \PIPE\lsarpc and open policy handle */
6836 };
6846 };
6858 };
6860 /* query info level 5 to obtain sid of a domain being queried */
6863 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6873 }
6880 }
6882 /*
6883 * Keep calling LsaEnumTrustdom over opened pipe until
6884 * the end of enumeration is reached
6885 */
6902 };
6910 };
6925 }
6926 };
6928 /*
6929 * in case of no trusted domains say something rather
6930 * than just display blank line
6931 */
6936 /* close this connection before doing next one */
6944 };
6946 /* close lsarpc pipe and connection to IPC$ */
6951 }
6954 {
6955 /* common variables */
6967 /* trusted domains listing variables */
6971 fstring pdc_name;
6974 /* trusting domains listing variables */
6985 }
6987 /*
6988 * Listing trusted domains (stored in secrets.tdb, if local)
6989 */
6993 /*
6994 * set domain and pdc name to local samba server (default)
6995 * or to remote one given in command line
6996 */
7005 };
7007 /* open \PIPE\lsarpc and open policy handle */
7014 };
7024 };
7036 };
7038 /* query info level 5 to obtain sid of a domain being queried */
7041 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
7051 }
7058 }
7062 /*
7063 * Keep calling LsaEnumTrustdom over opened pipe until
7064 * the end of enumeration is reached
7065 */
7084 };
7091 };
7098 };
7103 /*
7104 * in case of no trusted domains say something rather
7105 * than just display blank line
7106 */
7109 }
7111 /* close this connection before doing next one */
7119 };
7123 /*
7124 * Listing trusting domains (stored in passdb backend, if local)
7125 */
7129 /*
7130 * Open \PIPE\samr and get needed policy handles
7131 */
7139 };
7143 /* SamrConnect2 */
7146 SAMR_ACCESS_LOOKUP_DOMAIN,
7155 };
7163 };
7165 /* SamrOpenDomain - we have to open domain policy handle in order to be
7166 able to enumerate accounts*/
7169 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS,
7170 queried_dom_sid,
7179 };
7187 };
7189 /*
7190 * perform actual enumeration
7191 */
7201 ACB_DOMTRUST,
7212 };
7220 };
7228 /*
7229 * get each single domain's sid (do we _really_ need this ?):
7230 * 1) connect to domain's pdc
7231 * 2) query the pdc for domain's sid
7232 */
7234 /* get rid of '$' tail */
7239 /* set opt_* variables to remote domain */
7244 }
7250 /* connect to remote domain controller */
7255 /* query for domain's sid */
7260 argv))
7270 }
7271 }
7277 }
7279 /* close opened samr and domain policy handles */
7283 };
7288 };
7290 /* close samr pipe and connection to IPC$ */
7295 }
7297 /**
7298 * Entrypoint for 'net rpc trustdom' code.
7299 *
7300 * @param argc Standard argc.
7301 * @param argv Standard argv without initial components.
7302 *
7303 * @return Integer status (0 means success).
7304 */
7307 {
7309 {
7311 rpc_trustdom_add,
7312 NET_TRANSPORT_RPC,
7316 },
7317 {
7319 rpc_trustdom_del,
7320 NET_TRANSPORT_RPC,
7324 },
7325 {
7327 rpc_trustdom_establish,
7328 NET_TRANSPORT_RPC,
7332 },
7333 {
7335 rpc_trustdom_revoke,
7336 NET_TRANSPORT_RPC,
7340 },
7341 {
7343 rpc_trustdom_list,
7344 NET_TRANSPORT_RPC,
7348 },
7349 {
7351 rpc_trustdom_vampire,
7352 NET_TRANSPORT_RPC,
7356 },
7358 };
7361 }
7363 /**
7364 * Check if a server will take rpc commands
7365 * @param flags Type of server to connect to (PDC, DMB, localhost)
7366 * if the host is not explicitly specified
7367 * @return bool (true means rpc supported)
7368 */
7370 {
7375 NTSTATUS status;
7377 /* flags (i.e. server type) may depend on command */
7386 }
7388 PROTOCOL_NT1);
7395 done:
7398 }
7400 /* dump sam database via samsync rpc calls */
7409 }
7412 NET_FLAGS_ANONYMOUS,
7414 }
7416 /* syncronise sam database via samsync rpc calls */
7418 {
7420 {
7422 rpc_vampire_ldif,
7423 NET_TRANSPORT_RPC,
7426 " Dump remote SAM database to LDIF file or "
7428 },
7429 {
7431 rpc_vampire_keytab,
7432 NET_TRANSPORT_RPC,
7435 " Dump remote SAM database to Kerberos keytab "
7437 },
7438 {
7440 rpc_vampire_passdb,
7441 NET_TRANSPORT_RPC,
7445 },
7448 };
7458 }
7461 }
7464 }
7466 /**
7467 * Migrate everything from a print server.
7468 *
7469 * @param c A net_context structure.
7470 * @param argc Standard main() style argc.
7471 * @param argv Standard main() style argv. Initial components are already
7472 * stripped.
7473 *
7474 * @return A shell status integer (0 for success).
7475 *
7476 * The order is important !
7477 * To successfully add drivers the print queues have to exist !
7478 * Applying ACLs should be the last step, because you're easily locked out.
7479 *
7480 **/
7483 {
7493 }
7498 }
7502 argv);
7508 argv);
7519 argv);
7525 argv);
7527 }
7529 /**
7530 * Migrate print drivers from a print server.
7531 *
7532 * @param c A net_context structure.
7533 * @param argc Standard main() style argc.
7534 * @param argv Standard main() style argv. Initial components are already
7535 * stripped.
7536 *
7537 * @return A shell status integer (0 for success).
7538 **/
7541 {
7549 }
7554 }
7557 rpc_printer_migrate_drivers_internals,
7559 }
7561 /**
7562 * Migrate print-forms from a print-server.
7563 *
7564 * @param c A net_context structure.
7565 * @param argc Standard main() style argc.
7566 * @param argv Standard main() style argv. Initial components are already
7567 * stripped.
7568 *
7569 * @return A shell status integer (0 for success).
7570 **/
7573 {
7581 }
7586 }
7589 rpc_printer_migrate_forms_internals,
7591 }
7593 /**
7594 * Migrate printers from a print-server.
7595 *
7596 * @param c A net_context structure.
7597 * @param argc Standard main() style argc.
7598 * @param argv Standard main() style argv. Initial components are already
7599 * stripped.
7600 *
7601 * @return A shell status integer (0 for success).
7602 **/
7605 {
7613 }
7618 }
7621 rpc_printer_migrate_printers_internals,
7623 }
7625 /**
7626 * Migrate printer-ACLs from a print-server
7627 *
7628 * @param c A net_context structure.
7629 * @param argc Standard main() style argc.
7630 * @param argv Standard main() style argv. Initial components are already
7631 * stripped.
7632 *
7633 * @return A shell status integer (0 for success).
7634 **/
7637 {
7645 }
7650 }
7653 rpc_printer_migrate_security_internals,
7655 }
7657 /**
7658 * Migrate printer-settings from a print-server.
7659 *
7660 * @param c A net_context structure.
7661 * @param argc Standard main() style argc.
7662 * @param argv Standard main() style argv. Initial components are already
7663 * stripped.
7664 *
7665 * @return A shell status integer (0 for success).
7666 **/
7669 {
7678 }
7683 }
7686 rpc_printer_migrate_settings_internals,
7688 }
7690 /**
7691 * 'net rpc printer' entrypoint.
7692 *
7693 * @param c A net_context structure.
7694 * @param argc Standard main() style argc.
7695 * @param argv Standard main() style argv. Initial components are already
7696 * stripped.
7697 **/
7700 {
7702 /* ouch: when addriver and setdriver are called from within
7703 rpc_printer_migrate_drivers_internals, the printer-queue already
7704 *has* to exist */
7707 {
7709 rpc_printer_migrate_all,
7710 NET_TRANSPORT_RPC,
7714 },
7715 {
7717 rpc_printer_migrate_drivers,
7718 NET_TRANSPORT_RPC,
7722 },
7723 {
7725 rpc_printer_migrate_forms,
7726 NET_TRANSPORT_RPC,
7730 },
7731 {
7733 rpc_printer_migrate_printers,
7734 NET_TRANSPORT_RPC,
7738 },
7739 {
7741 rpc_printer_migrate_security,
7742 NET_TRANSPORT_RPC,
7746 },
7747 {
7749 rpc_printer_migrate_settings,
7750 NET_TRANSPORT_RPC,
7754 },
7756 };
7759 }
7762 /**
7763 * List printers on a remote RPC server.
7764 *
7765 * @param c A net_context structure.
7766 * @param argc Standard main() style argc.
7767 * @param argv Standard main() style argv. Initial components are already
7768 * stripped.
7769 *
7770 * @return A shell status integer (0 for success).
7771 **/
7773 {
7781 }
7784 rpc_printer_list_internals,
7786 }
7788 /**
7789 * List printer-drivers on a remote RPC server.
7790 *
7791 * @param c A net_context structure.
7792 * @param argc Standard main() style argc.
7793 * @param argv Standard main() style argv. Initial components are already
7794 * stripped.
7795 *
7796 * @return A shell status integer (0 for success).
7797 **/
7800 {
7808 }
7811 rpc_printer_driver_list_internals,
7813 }
7815 /**
7816 * Publish printer in ADS via MSRPC.
7817 *
7818 * @param c A net_context structure.
7819 * @param argc Standard main() style argc.
7820 * @param argv Standard main() style argv. Initial components are already
7821 * stripped.
7822 *
7823 * @return A shell status integer (0 for success).
7824 **/
7827 {
7835 }
7838 rpc_printer_publish_publish_internals,
7840 }
7842 /**
7843 * Update printer in ADS via MSRPC.
7844 *
7845 * @param c A net_context structure.
7846 * @param argc Standard main() style argc.
7847 * @param argv Standard main() style argv. Initial components are already
7848 * stripped.
7849 *
7850 * @return A shell status integer (0 for success).
7851 **/
7853 {
7861 }
7864 rpc_printer_publish_update_internals,
7866 }
7868 /**
7869 * UnPublish printer in ADS via MSRPC.
7870 *
7871 * @param c A net_context structure.
7872 * @param argc Standard main() style argc.
7873 * @param argv Standard main() style argv. Initial components are already
7874 * stripped.
7875 *
7876 * @return A shell status integer (0 for success).
7877 **/
7880 {
7888 }
7891 rpc_printer_publish_unpublish_internals,
7893 }
7895 /**
7896 * List published printers via MSRPC.
7897 *
7898 * @param c A net_context structure.
7899 * @param argc Standard main() style argc.
7900 * @param argv Standard main() style argv. Initial components are already
7901 * stripped.
7902 *
7903 * @return A shell status integer (0 for success).
7904 **/
7907 {
7915 }
7918 rpc_printer_publish_list_internals,
7920 }
7923 /**
7924 * Publish printer in ADS.
7925 *
7926 * @param c A net_context structure.
7927 * @param argc Standard main() style argc.
7928 * @param argv Standard main() style argv. Initial components are already
7929 * stripped.
7930 *
7931 * @return A shell status integer (0 for success).
7932 **/
7935 {
7938 {
7940 rpc_printer_publish_publish,
7941 NET_TRANSPORT_RPC,
7945 },
7946 {
7948 rpc_printer_publish_update,
7949 NET_TRANSPORT_RPC,
7953 },
7954 {
7956 rpc_printer_publish_unpublish,
7957 NET_TRANSPORT_RPC,
7961 },
7962 {
7964 rpc_printer_publish_list,
7965 NET_TRANSPORT_RPC,
7969 },
7971 };
7978 " Alias of net rpc printer publish "
7982 }
7984 rpc_printer_publish_list_internals,
7986 }
7990 }
7993 /**
7994 * Display rpc printer help page.
7995 *
7996 * @param c A net_context structure.
7997 * @param argc Standard main() style argc.
7998 * @param argv Standard main() style argv. Initial components are already
7999 * stripped.
8000 **/
8002 {
8030 }
8032 /**
8033 * 'net rpc printer' entrypoint.
8034 *
8035 * @param c A net_context structure.
8036 * @param argc Standard main() style argc.
8037 * @param argv Standard main() style argv. Initial components are already
8038 * stripped.
8039 **/
8041 {
8043 {
8045 rpc_printer_list,
8046 NET_TRANSPORT_RPC,
8050 },
8051 {
8053 rpc_printer_migrate,
8054 NET_TRANSPORT_RPC,
8058 },
8059 {
8061 rpc_printer_driver_list,
8062 NET_TRANSPORT_RPC,
8066 },
8067 {
8069 rpc_printer_publish,
8070 NET_TRANSPORT_RPC,
8074 },
8076 };
8085 }
8087 rpc_printer_list_internals,
8089 }
8092 }
8094 /**
8095 * 'net rpc' entrypoint.
8096 *
8097 * @param c A net_context structure.
8098 * @param argc Standard main() style argc.
8099 * @param argv Standard main() style argv. Initial components are already
8100 * stripped.
8101 **/
8104 {
8105 NET_API_STATUS status;
8108 {
8110 net_rpc_audit,
8111 NET_TRANSPORT_RPC,
8115 },
8116 {
8118 net_rpc_info,
8119 NET_TRANSPORT_RPC,
8123 },
8124 {
8126 net_rpc_join,
8127 NET_TRANSPORT_RPC,
8131 },
8132 {
8134 net_rpc_oldjoin,
8135 NET_TRANSPORT_RPC,
8139 },
8140 {
8142 net_rpc_testjoin,
8143 NET_TRANSPORT_RPC,
8147 },
8148 {
8150 net_rpc_user,
8151 NET_TRANSPORT_RPC,
8155 },
8156 {
8158 rpc_user_password,
8159 NET_TRANSPORT_RPC,
8164 },
8165 {
8167 net_rpc_group,
8168 NET_TRANSPORT_RPC,
8172 },
8173 {
8175 net_rpc_share,
8176 NET_TRANSPORT_RPC,
8180 },
8181 {
8183 net_rpc_file,
8184 NET_TRANSPORT_RPC,
8188 },
8189 {
8191 net_rpc_printer,
8192 NET_TRANSPORT_RPC,
8196 },
8197 {
8199 net_rpc_changetrustpw,
8200 NET_TRANSPORT_RPC,
8204 },
8205 {
8207 rpc_trustdom,
8208 NET_TRANSPORT_RPC,
8212 },
8213 {
8215 rpc_shutdown_abort,
8216 NET_TRANSPORT_RPC,
8220 },
8221 {
8223 rpc_shutdown,
8224 NET_TRANSPORT_RPC,
8228 },
8229 {
8231 rpc_samdump,
8232 NET_TRANSPORT_RPC,
8236 },
8237 {
8239 rpc_vampire,
8240 NET_TRANSPORT_RPC,
8244 },
8245 {
8247 net_rpc_getsid,
8248 NET_TRANSPORT_RPC,
8252 },
8253 {
8255 net_rpc_rights,
8256 NET_TRANSPORT_RPC,
8260 },
8261 {
8263 net_rpc_service,
8264 NET_TRANSPORT_RPC,
8268 },
8269 {
8271 net_rpc_registry,
8272 NET_TRANSPORT_RPC,
8276 },
8277 {
8279 net_rpc_shell,
8280 NET_TRANSPORT_RPC,
8284 },
8285 {
8287 net_rpc_trust,
8288 NET_TRANSPORT_RPC,
8292 },
8293 {
8295 net_rpc_conf,
8296 NET_TRANSPORT_RPC,
8300 },
8302 };
8307 }
8312 }
8315 }
8318 }