source/rpcclient/cmd_netlogon.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    RPC pipe client
   4
   5    Copyright (C) Tim Potter 2000
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  19 */
  20
  21 #include "includes.h"
  22 #include "rpcclient.h"
  23
  24 static NTSTATUS cmd_netlogon_logon_ctrl2(struct rpc_pipe_client *cli,
  25                                          TALLOC_CTX *mem_ctx, int argc,
  26                                          const char **argv)
  27 {
  28         uint32 query_level = 1;
  29         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
  30
  31         if (argc > 1) {
  32                 fprintf(stderr, "Usage: %s\n", argv[0]);
  33                 return NT_STATUS_OK;
  34         }
  35
  36         result = rpccli_netlogon_logon_ctrl2(cli, mem_ctx, query_level);
  37
  38         if (!NT_STATUS_IS_OK(result))
  39                 goto done;
  40
  41         /* Display results */
  42
  43  done:
  44         return result;
  45 }
  46
  47 static WERROR cmd_netlogon_getanydcname(struct rpc_pipe_client *cli,
  48                                         TALLOC_CTX *mem_ctx, int argc,
  49                                         const char **argv)
  50 {
  51         fstring dcname;
  52         WERROR result = WERR_GENERAL_FAILURE;
  53         int old_timeout;
  54
  55         if (argc != 2) {
  56                 fprintf(stderr, "Usage: %s domainname\n", argv[0]);
  57                 return WERR_OK;
  58         }
  59
  60         /* Make sure to wait for our DC's reply */
  61         old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
  62
  63         result = rpccli_netlogon_getanydcname(cli, mem_ctx, cli->cli->desthost, argv[1], dcname);
  64
  65         cli_set_timeout(cli->cli, old_timeout);
  66
  67         if (!W_ERROR_IS_OK(result))
  68                 goto done;
  69
  70         /* Display results */
  71
  72         printf("%s\n", dcname);
  73
  74  done:
  75         return result;
  76 }
  77
  78 static WERROR cmd_netlogon_getdcname(struct rpc_pipe_client *cli,
  79                                      TALLOC_CTX *mem_ctx, int argc,
  80                                      const char **argv)
  81 {
  82         fstring dcname;
  83         WERROR result = WERR_GENERAL_FAILURE;
  84         int old_timeout;
  85
  86         if (argc != 2) {
  87                 fprintf(stderr, "Usage: %s domainname\n", argv[0]);
  88                 return WERR_OK;
  89         }
  90
  91         /* Make sure to wait for our DC's reply */
  92         old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
  93
  94         result = rpccli_netlogon_getdcname(cli, mem_ctx, cli->cli->desthost, argv[1], dcname);
  95
  96         cli_set_timeout(cli->cli, old_timeout);
  97
  98         if (!W_ERROR_IS_OK(result))
  99                 goto done;
 100
 101         /* Display results */
 102
 103         printf("%s\n", dcname);
 104
 105  done:
 106         return result;
 107 }
 108
 109 static WERROR cmd_netlogon_dsr_getdcname(struct rpc_pipe_client *cli,
 110                                          TALLOC_CTX *mem_ctx, int argc,
 111                                          const char **argv)
 112 {
 113         WERROR result;
 114         uint32 flags = DS_RETURN_DNS_NAME;
 115         const char *server_name = cli->cli->desthost;
 116         const char *domain_name;
 117         struct GUID domain_guid = GUID_zero();
 118         struct GUID site_guid = GUID_zero();
 119         struct DS_DOMAIN_CONTROLLER_INFO *info = NULL;
 120
 121         if (argc < 2) {
 122                 fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
 123                                 "[site_guid] [flags]\n", argv[0]);
 124                 return WERR_OK;
 125         }
 126
 127         if (argc >= 2)
 128                 domain_name = argv[1];
 129
 130         if (argc >= 3) {
 131                 if (!NT_STATUS_IS_OK(GUID_from_string(argv[2], &domain_guid))) {
 132                         return WERR_NOMEM;
 133                 }
 134         }
 135
 136         if (argc >= 4) {
 137                 if (!NT_STATUS_IS_OK(GUID_from_string(argv[3], &site_guid))) {
 138                         return WERR_NOMEM;
 139                 }
 140         }
 141
 142         if (argc >= 5)
 143                 sscanf(argv[4], "%x", &flags);
 144
 145         debug_dsdcinfo_flags(1,flags);
 146
 147         result = rpccli_netlogon_dsr_getdcname(cli, mem_ctx, server_name, domain_name,
 148                                                &domain_guid, &site_guid, flags,
 149                                                &info);
 150
 151         if (W_ERROR_IS_OK(result)) {
 152                 d_printf("DsGetDcName gave\n");
 153                 display_ds_domain_controller_info(mem_ctx, info);
 154                 return WERR_OK;
 155         }
 156
 157         printf("rpccli_netlogon_dsr_getdcname returned %s\n",
 158                dos_errstr(result));
 159
 160         return result;
 161 }
 162
 163 static WERROR cmd_netlogon_dsr_getdcnameex(struct rpc_pipe_client *cli,
 164                                            TALLOC_CTX *mem_ctx, int argc,
 165                                            const char **argv)
 166 {
 167         WERROR result;
 168         uint32 flags = DS_RETURN_DNS_NAME;
 169         const char *server_name = cli->cli->desthost;
 170         const char *domain_name;
 171         const char *site_name = NULL;
 172         struct GUID domain_guid = GUID_zero();
 173         struct DS_DOMAIN_CONTROLLER_INFO *info = NULL;
 174
 175         if (argc < 2) {
 176                 fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
 177                                 "[site_name] [flags]\n", argv[0]);
 178                 return WERR_OK;
 179         }
 180
 181         if (argc >= 2)
 182                 domain_name = argv[1];
 183
 184         if (argc >= 3) {
 185                 if (!NT_STATUS_IS_OK(GUID_from_string(argv[2], &domain_guid))) {
 186                         return WERR_NOMEM;
 187                 }
 188         }
 189
 190         if (argc >= 4)
 191                 site_name = argv[3];
 192
 193         if (argc >= 5)
 194                 sscanf(argv[4], "%x", &flags);
 195
 196         debug_dsdcinfo_flags(1,flags);
 197
 198         result = rpccli_netlogon_dsr_getdcnameex(cli, mem_ctx, server_name, domain_name,
 199                                                  &domain_guid, site_name, flags,
 200                                                  &info);
 201
 202         if (W_ERROR_IS_OK(result)) {
 203                 d_printf("DsGetDcNameEx gave\n");
 204                 display_ds_domain_controller_info(mem_ctx, info);
 205                 return WERR_OK;
 206         }
 207
 208         printf("rpccli_netlogon_dsr_getdcnameex returned %s\n",
 209                dos_errstr(result));
 210
 211         return result;
 212 }
 213
 214 static WERROR cmd_netlogon_dsr_getdcnameex2(struct rpc_pipe_client *cli,
 215                                             TALLOC_CTX *mem_ctx, int argc,
 216                                             const char **argv)
 217 {
 218         WERROR result;
 219         uint32 flags = DS_RETURN_DNS_NAME;
 220         const char *server_name = cli->cli->desthost;
 221         const char *domain_name = NULL;
 222         const char *client_account = NULL;
 223         uint32 mask = 0;
 224         const char *site_name = NULL;
 225         struct GUID domain_guid = GUID_zero();
 226         struct DS_DOMAIN_CONTROLLER_INFO *info = NULL;
 227
 228         if (argc < 2) {
 229                 fprintf(stderr, "Usage: %s [client_account] [acb_mask] "
 230                                 "[domain_name] [domain_guid] [site_name] "
 231                                 "[flags]\n", argv[0]);
 232                 return WERR_OK;
 233         }
 234
 235         if (argc >= 2)
 236                 client_account = argv[1];
 237
 238         if (argc >= 3)
 239                 mask = atoi(argv[2]);
 240
 241         if (argc >= 4)
 242                 domain_name = argv[3];
 243
 244         if (argc >= 5) {
 245                 if (!NT_STATUS_IS_OK(GUID_from_string(argv[4], &domain_guid))) {
 246                         return WERR_NOMEM;
 247                 }
 248         }
 249
 250         if (argc >= 6)
 251                 site_name = argv[5];
 252
 253         if (argc >= 7)
 254                 sscanf(argv[6], "%x", &flags);
 255
 256         debug_dsdcinfo_flags(1,flags);
 257
 258         result = rpccli_netlogon_dsr_getdcnameex2(cli, mem_ctx, server_name,
 259                                                   client_account, mask,
 260                                                   domain_name, &domain_guid,
 261                                                   site_name, flags,
 262                                                   &info);
 263
 264         if (W_ERROR_IS_OK(result)) {
 265                 d_printf("DsGetDcNameEx2 gave\n");
 266                 display_ds_domain_controller_info(mem_ctx, info);
 267                 return WERR_OK;
 268         }
 269
 270         printf("rpccli_netlogon_dsr_getdcnameex2 returned %s\n",
 271                dos_errstr(result));
 272
 273         return result;
 274 }
 275
 276
 277 static WERROR cmd_netlogon_dsr_getsitename(struct rpc_pipe_client *cli,
 278                                            TALLOC_CTX *mem_ctx, int argc,
 279                                            const char **argv)
 280 {
 281         WERROR result;
 282         char *sitename;
 283
 284         if (argc != 2) {
 285                 fprintf(stderr, "Usage: %s computername\n", argv[0]);
 286                 return WERR_OK;
 287         }
 288
 289         result = rpccli_netlogon_dsr_getsitename(cli, mem_ctx, argv[1], &sitename);
 290
 291         if (!W_ERROR_IS_OK(result)) {
 292                 printf("rpccli_netlogon_dsr_gesitename returned %s\n",
 293                        nt_errstr(werror_to_ntstatus(result)));
 294                 return result;
 295         }
 296
 297         printf("Computer %s is on Site: %s\n", argv[1], sitename);
 298
 299         return WERR_OK;
 300 }
 301
 302 static NTSTATUS cmd_netlogon_logon_ctrl(struct rpc_pipe_client *cli,
 303                                         TALLOC_CTX *mem_ctx, int argc,
 304                                         const char **argv)
 305 {
 306 #if 0
 307         uint32 query_level = 1;
 308 #endif
 309         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 310
 311         if (argc > 1) {
 312                 fprintf(stderr, "Usage: %s\n", argv[0]);
 313                 return NT_STATUS_OK;
 314         }
 315
 316 #if 0
 317         result = cli_netlogon_logon_ctrl(cli, mem_ctx, query_level);
 318         if (!NT_STATUS_IS_OK(result)) {
 319                 goto done;
 320         }
 321 #endif
 322
 323         /* Display results */
 324
 325         return result;
 326 }
 327
 328 /* Display sam synchronisation information */
 329
 330 static void display_sam_sync(uint32 num_deltas, SAM_DELTA_HDR *hdr_deltas,
 331                              SAM_DELTA_CTR *deltas)
 332 {
 333         fstring name;
 334         uint32 i, j;
 335
 336         for (i = 0; i < num_deltas; i++) {
 337                 switch (hdr_deltas[i].type) {
 338                 case SAM_DELTA_DOMAIN_INFO:
 339                         unistr2_to_ascii(name,
 340                                          &deltas[i].domain_info.uni_dom_name,
 341                                          sizeof(name));
 342                         printf("Domain: %s\n", name);
 343                         break;
 344                 case SAM_DELTA_GROUP_INFO:
 345                         unistr2_to_ascii(name,
 346                                          &deltas[i].group_info.uni_grp_name,
 347                                          sizeof(name));
 348                         printf("Group: %s\n", name);
 349                         break;
 350                 case SAM_DELTA_ACCOUNT_INFO:
 351                         unistr2_to_ascii(name,
 352                                          &deltas[i].account_info.uni_acct_name,
 353                                          sizeof(name));
 354                         printf("Account: %s\n", name);
 355                         break;
 356                 case SAM_DELTA_ALIAS_INFO:
 357                         unistr2_to_ascii(name,
 358                                          &deltas[i].alias_info.uni_als_name,
 359                                          sizeof(name));
 360                         printf("Alias: %s\n", name);
 361                         break;
 362                 case SAM_DELTA_ALIAS_MEM: {
 363                         SAM_ALIAS_MEM_INFO *alias = &deltas[i].als_mem_info;
 364
 365                         for (j = 0; j < alias->num_members; j++) {
 366                                 fstring sid_str;
 367
 368                                 sid_to_string(sid_str, &alias->sids[j].sid);
 369
 370                                 printf("%s\n", sid_str);
 371                         }
 372                         break;
 373                 }
 374                 case SAM_DELTA_GROUP_MEM: {
 375                         SAM_GROUP_MEM_INFO *group = &deltas[i].grp_mem_info;
 376
 377                         for (j = 0; j < group->num_members; j++)
 378                                 printf("rid 0x%x, attrib 0x%08x\n",
 379                                           group->rids[j], group->attribs[j]);
 380                         break;
 381                 }
 382                 case SAM_DELTA_MODIFIED_COUNT: {
 383                         SAM_DELTA_MOD_COUNT *mc = &deltas[i].mod_count;
 384
 385                         printf("sam sequence update: 0x%04x\n", mc->seqnum);
 386                         break;
 387                 }
 388                 default:
 389                         printf("unknown delta type 0x%02x\n",
 390                                   hdr_deltas[i].type);
 391                         break;
 392                 }
 393         }
 394 }
 395
 396 /* Perform sam synchronisation */
 397
 398 static NTSTATUS cmd_netlogon_sam_sync(struct rpc_pipe_client *cli,
 399                                       TALLOC_CTX *mem_ctx, int argc,
 400                                       const char **argv)
 401 {
 402         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 403         uint32 database_id = 0, num_deltas;
 404         SAM_DELTA_HDR *hdr_deltas;
 405         SAM_DELTA_CTR *deltas;
 406
 407         if (argc > 2) {
 408                 fprintf(stderr, "Usage: %s [database_id]\n", argv[0]);
 409                 return NT_STATUS_OK;
 410         }
 411
 412         if (argc == 2)
 413                 database_id = atoi(argv[1]);
 414
 415         /* Synchronise sam database */
 416
 417         result = rpccli_netlogon_sam_sync(cli, mem_ctx, database_id,
 418                                        0, &num_deltas, &hdr_deltas, &deltas);
 419
 420         if (!NT_STATUS_IS_OK(result))
 421                 goto done;
 422
 423         /* Display results */
 424
 425         display_sam_sync(num_deltas, hdr_deltas, deltas);
 426
 427  done:
 428         return result;
 429 }
 430
 431 /* Perform sam delta synchronisation */
 432
 433 static NTSTATUS cmd_netlogon_sam_deltas(struct rpc_pipe_client *cli,
 434                                         TALLOC_CTX *mem_ctx, int argc,
 435                                         const char **argv)
 436 {
 437         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 438         uint32 database_id, num_deltas, tmp;
 439         SAM_DELTA_HDR *hdr_deltas;
 440         SAM_DELTA_CTR *deltas;
 441         uint64 seqnum;
 442
 443         if (argc != 3) {
 444                 fprintf(stderr, "Usage: %s database_id seqnum\n", argv[0]);
 445                 return NT_STATUS_OK;
 446         }
 447
 448         database_id = atoi(argv[1]);
 449         tmp = atoi(argv[2]);
 450
 451         seqnum = tmp & 0xffff;
 452
 453         result = rpccli_netlogon_sam_deltas(cli, mem_ctx, database_id,
 454                                          seqnum, &num_deltas,
 455                                          &hdr_deltas, &deltas);
 456
 457         if (!NT_STATUS_IS_OK(result))
 458                 goto done;
 459
 460         /* Display results */
 461
 462         display_sam_sync(num_deltas, hdr_deltas, deltas);
 463
 464  done:
 465         return result;
 466 }
 467
 468 /* Log on a domain user */
 469
 470 static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli,
 471                                        TALLOC_CTX *mem_ctx, int argc,
 472                                        const char **argv)
 473 {
 474         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 475         int logon_type = NET_LOGON_TYPE;
 476         const char *username, *password;
 477         int auth_level = 2;
 478         uint32 logon_param = 0;
 479         const char *workstation = NULL;
 480
 481         /* Check arguments */
 482
 483         if (argc < 3 || argc > 7) {
 484                 fprintf(stderr, "Usage: samlogon <username> <password> [workstation]"
 485                         "[logon_type (1 or 2)] [auth level (2 or 3)] [logon_parameter]\n");
 486                 return NT_STATUS_OK;
 487         }
 488
 489         username = argv[1];
 490         password = argv[2];
 491
 492         if (argc >= 4)
 493                 workstation = argv[3];
 494
 495         if (argc >= 5)
 496                 sscanf(argv[4], "%i", &logon_type);
 497
 498         if (argc >= 6)
 499                 sscanf(argv[5], "%i", &auth_level);
 500
 501         if (argc == 7)
 502                 sscanf(argv[6], "%x", &logon_param);
 503
 504         /* Perform the sam logon */
 505
 506         result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, logon_type);
 507
 508         if (!NT_STATUS_IS_OK(result))
 509                 goto done;
 510
 511  done:
 512         return result;
 513 }
 514
 515 /* Change the trust account password */
 516
 517 static NTSTATUS cmd_netlogon_change_trust_pw(struct rpc_pipe_client *cli,
 518                                              TALLOC_CTX *mem_ctx, int argc,
 519                                              const char **argv)
 520 {
 521         NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
 522
 523         /* Check arguments */
 524
 525         if (argc > 1) {
 526                 fprintf(stderr, "Usage: change_trust_pw");
 527                 return NT_STATUS_OK;
 528         }
 529
 530         /* Perform the sam logon */
 531
 532         result = trust_pw_find_change_and_store_it(cli, mem_ctx,
 533                                                    lp_workgroup());
 534
 535         if (!NT_STATUS_IS_OK(result))
 536                 goto done;
 537
 538  done:
 539         return result;
 540 }
 541
 542
 543 /* List of commands exported by this module */
 544
 545 struct cmd_set netlogon_commands[] = {
 546
 547         { "NETLOGON" },
 548
 549         { "logonctrl2", RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl2, NULL, PI_NETLOGON, NULL, "Logon Control 2",     "" },
 550         { "getanydcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getanydcname, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
 551         { "getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getdcname, PI_NETLOGON, NULL, "Get trusted PDC name",     "" },
 552         { "dsr_getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcname, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
 553         { "dsr_getdcnameex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
 554         { "dsr_getdcnameex2", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex2, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
 555         { "dsr_getsitename", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getsitename, PI_NETLOGON, NULL, "Get sitename",     "" },
 556         { "logonctrl",  RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl,  NULL, PI_NETLOGON, NULL, "Logon Control",       "" },
 557         { "samsync",    RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_sync,    NULL, PI_NETLOGON, NULL, "Sam Synchronisation", "" },
 558         { "samdeltas",  RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_deltas,  NULL, PI_NETLOGON, NULL, "Query Sam Deltas",    "" },
 559         { "samlogon",   RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_logon,   NULL, PI_NETLOGON, NULL, "Sam Logon",           "" },
 560         { "change_trust_pw",   RPC_RTYPE_NTSTATUS, cmd_netlogon_change_trust_pw,   NULL, PI_NETLOGON, NULL, "Change Trust Account Password",           "" },
 561
 562         { NULL }
 563 };