source/utils/net_rpc_registry.c

   1 /*
   2    Samba Unix/Linux SMB client library
   3    Distributed SMB/CIFS Server Management Utility
   4
   5    Copyright (C) Gerald (Jerry) Carter          2005-2006
   6
   7    This program is free software; you can redistribute it and/or modify
   8    it under the terms of the GNU General Public License as published by
   9    the Free Software Foundation; either version 3 of the License, or
  10    (at your option) any later version.
  11
  12    This program is distributed in the hope that it will be useful,
  13    but WITHOUT ANY WARRANTY; without even the implied warranty of
  14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  15    GNU General Public License for more details.
  16
  17    You should have received a copy of the GNU General Public License
  18    along with this program.  If not, see <http://www.gnu.org/licenses/>.  */
  19
  20 #include "includes.h"
  21 #include "utils/net.h"
  22 #include "utils/net_registry_util.h"
  23 #include "regfio.h"
  24 #include "reg_objects.h"
  25
  26 static bool reg_hive_key(TALLOC_CTX *ctx, const char *fullname,
  27                          uint32 *reg_type, const char **key_name)
  28 {
  29         WERROR werr;
  30         char *hivename = NULL;
  31         char *tmp_keyname = NULL;
  32         bool ret = false;
  33         TALLOC_CTX *tmp_ctx = talloc_stackframe();
  34
  35         werr = split_hive_key(tmp_ctx, fullname, &hivename, &tmp_keyname);
  36         if (!W_ERROR_IS_OK(werr)) {
  37                 goto done;
  38         }
  39
  40         *key_name = talloc_strdup(ctx, tmp_keyname);
  41         if (*key_name == NULL) {
  42                 goto done;
  43         }
  44
  45         if (strequal(hivename, "HKLM") ||
  46             strequal(hivename, "HKEY_LOCAL_MACHINE"))
  47         {
  48                 (*reg_type) = HKEY_LOCAL_MACHINE;
  49         } else if (strequal(hivename, "HKCR") ||
  50                    strequal(hivename, "HKEY_CLASSES_ROOT"))
  51         {
  52                 (*reg_type) = HKEY_CLASSES_ROOT;
  53         } else if (strequal(hivename, "HKU") ||
  54                    strequal(hivename, "HKEY_USERS"))
  55         {
  56                 (*reg_type) = HKEY_USERS;
  57         } else if (strequal(hivename, "HKCU") ||
  58                    strequal(hivename, "HKEY_CURRENT_USER"))
  59         {
  60                 (*reg_type) = HKEY_CURRENT_USER;
  61         } else if (strequal(hivename, "HKPD") ||
  62                    strequal(hivename, "HKEY_PERFORMANCE_DATA"))
  63         {
  64                 (*reg_type) = HKEY_PERFORMANCE_DATA;
  65         } else {
  66                 DEBUG(10,("reg_hive_key: unrecognised hive key %s\n",
  67                           fullname));
  68                 goto done;
  69         }
  70
  71         ret = true;
  72
  73 done:
  74         TALLOC_FREE(tmp_ctx);
  75         return ret;
  76 }
  77
  78 static NTSTATUS registry_openkey(TALLOC_CTX *mem_ctx,
  79                                  struct rpc_pipe_client *pipe_hnd,
  80                                  const char *name, uint32 access_mask,
  81                                  struct policy_handle *hive_hnd,
  82                                  struct policy_handle *key_hnd)
  83 {
  84         uint32 hive;
  85         NTSTATUS status;
  86         struct winreg_String key;
  87
  88         ZERO_STRUCT(key);
  89
  90         if (!reg_hive_key(mem_ctx, name, &hive, &key.name)) {
  91                 return NT_STATUS_INVALID_PARAMETER;
  92         }
  93
  94         status = rpccli_winreg_Connect(pipe_hnd, mem_ctx, hive, access_mask,
  95                                        hive_hnd);
  96         if (!(NT_STATUS_IS_OK(status))) {
  97                 return status;
  98         }
  99
 100         status = rpccli_winreg_OpenKey(pipe_hnd, mem_ctx, hive_hnd, key, 0,
 101                                        access_mask, key_hnd, NULL);
 102         if (!(NT_STATUS_IS_OK(status))) {
 103                 rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, hive_hnd, NULL);
 104                 return status;
 105         }
 106
 107         return NT_STATUS_OK;
 108 }
 109
 110 static NTSTATUS registry_enumkeys(TALLOC_CTX *ctx,
 111                                   struct rpc_pipe_client *pipe_hnd,
 112                                   struct policy_handle *key_hnd,
 113                                   uint32 *pnum_keys, char ***pnames,
 114                                   char ***pclasses, NTTIME ***pmodtimes)
 115 {
 116         TALLOC_CTX *mem_ctx;
 117         NTSTATUS status;
 118         uint32 num_subkeys, max_subkeylen, max_classlen;
 119         uint32 num_values, max_valnamelen, max_valbufsize;
 120         uint32 i;
 121         NTTIME last_changed_time;
 122         uint32 secdescsize;
 123         struct winreg_String classname;
 124         char **names, **classes;
 125         NTTIME **modtimes;
 126
 127         if (!(mem_ctx = talloc_new(ctx))) {
 128                 return NT_STATUS_NO_MEMORY;
 129         }
 130
 131         ZERO_STRUCT(classname);
 132         status = rpccli_winreg_QueryInfoKey(
 133                 pipe_hnd, mem_ctx, key_hnd, &classname, &num_subkeys,
 134                 &max_subkeylen, &max_classlen, &num_values, &max_valnamelen,
 135                 &max_valbufsize, &secdescsize, &last_changed_time, NULL );
 136
 137         if (!NT_STATUS_IS_OK(status)) {
 138                 goto error;
 139         }
 140
 141         if (num_subkeys == 0) {
 142                 *pnum_keys = 0;
 143                 TALLOC_FREE(mem_ctx);
 144                 return NT_STATUS_OK;
 145         }
 146
 147         if ((!(names = TALLOC_ZERO_ARRAY(mem_ctx, char *, num_subkeys))) ||
 148             (!(classes = TALLOC_ZERO_ARRAY(mem_ctx, char *, num_subkeys))) ||
 149             (!(modtimes = TALLOC_ZERO_ARRAY(mem_ctx, NTTIME *,
 150                                             num_subkeys)))) {
 151                 status = NT_STATUS_NO_MEMORY;
 152                 goto error;
 153         }
 154
 155         for (i=0; i<num_subkeys; i++) {
 156                 char c, n;
 157                 struct winreg_StringBuf class_buf;
 158                 struct winreg_StringBuf name_buf;
 159                 NTTIME modtime;
 160                 WERROR werr;
 161
 162                 c = '\0';
 163                 class_buf.name = &c;
 164                 class_buf.size = max_classlen+2;
 165
 166                 n = '\0';
 167                 name_buf.name = &n;
 168                 name_buf.size = max_subkeylen+2;
 169
 170                 ZERO_STRUCT(modtime);
 171
 172                 status = rpccli_winreg_EnumKey(pipe_hnd, mem_ctx, key_hnd,
 173                                                i, &name_buf, &class_buf,
 174                                                &modtime, &werr);
 175
 176                 if (W_ERROR_EQUAL(werr,
 177                                   WERR_NO_MORE_ITEMS) ) {
 178                         status = NT_STATUS_OK;
 179                         break;
 180                 }
 181                 if (!NT_STATUS_IS_OK(status)) {
 182                         goto error;
 183                 }
 184
 185                 classes[i] = NULL;
 186
 187                 if (class_buf.name &&
 188                     (!(classes[i] = talloc_strdup(classes, class_buf.name)))) {
 189                         status = NT_STATUS_NO_MEMORY;
 190                         goto error;
 191                 }
 192
 193                 if (!(names[i] = talloc_strdup(names, name_buf.name))) {
 194                         status = NT_STATUS_NO_MEMORY;
 195                         goto error;
 196                 }
 197
 198                 if ((!(modtimes[i] = (NTTIME *)talloc_memdup(
 199                                modtimes, &modtime, sizeof(modtime))))) {
 200                         status = NT_STATUS_NO_MEMORY;
 201                         goto error;
 202                 }
 203         }
 204
 205         *pnum_keys = num_subkeys;
 206
 207         if (pnames) {
 208                 *pnames = talloc_move(ctx, &names);
 209         }
 210         if (pclasses) {
 211                 *pclasses = talloc_move(ctx, &classes);
 212         }
 213         if (pmodtimes) {
 214                 *pmodtimes = talloc_move(ctx, &modtimes);
 215         }
 216
 217         status = NT_STATUS_OK;
 218
 219  error:
 220         TALLOC_FREE(mem_ctx);
 221         return status;
 222 }
 223
 224 static NTSTATUS registry_enumvalues(TALLOC_CTX *ctx,
 225                                     struct rpc_pipe_client *pipe_hnd,
 226                                     struct policy_handle *key_hnd,
 227                                     uint32 *pnum_values, char ***pvalnames,
 228                                     struct registry_value ***pvalues)
 229 {
 230         TALLOC_CTX *mem_ctx;
 231         NTSTATUS status;
 232         uint32 num_subkeys, max_subkeylen, max_classlen;
 233         uint32 num_values, max_valnamelen, max_valbufsize;
 234         uint32 i;
 235         NTTIME last_changed_time;
 236         uint32 secdescsize;
 237         struct winreg_String classname;
 238         struct registry_value **values;
 239         char **names;
 240
 241         if (!(mem_ctx = talloc_new(ctx))) {
 242                 return NT_STATUS_NO_MEMORY;
 243         }
 244
 245         ZERO_STRUCT(classname);
 246         status = rpccli_winreg_QueryInfoKey(
 247                 pipe_hnd, mem_ctx, key_hnd, &classname, &num_subkeys,
 248                 &max_subkeylen, &max_classlen, &num_values, &max_valnamelen,
 249                 &max_valbufsize, &secdescsize, &last_changed_time, NULL );
 250
 251         if (!NT_STATUS_IS_OK(status)) {
 252                 goto error;
 253         }
 254
 255         if (num_values == 0) {
 256                 *pnum_values = 0;
 257                 TALLOC_FREE(mem_ctx);
 258                 return NT_STATUS_OK;
 259         }
 260
 261         if ((!(names = TALLOC_ARRAY(mem_ctx, char *, num_values))) ||
 262             (!(values = TALLOC_ARRAY(mem_ctx, struct registry_value *,
 263                                      num_values)))) {
 264                 status = NT_STATUS_NO_MEMORY;
 265                 goto error;
 266         }
 267
 268         for (i=0; i<num_values; i++) {
 269                 enum winreg_Type type = REG_NONE;
 270                 uint8 *data = NULL;
 271                 uint32 data_size;
 272                 uint32 value_length;
 273
 274                 char n;
 275                 struct winreg_ValNameBuf name_buf;
 276                 WERROR err;
 277
 278                 n = '\0';
 279                 name_buf.name = &n;
 280                 name_buf.size = max_valnamelen + 2;
 281
 282                 data_size = max_valbufsize;
 283                 data = (uint8 *)TALLOC(mem_ctx, data_size);
 284                 value_length = 0;
 285
 286                 status = rpccli_winreg_EnumValue(pipe_hnd, mem_ctx, key_hnd,
 287                                                  i, &name_buf, &type,
 288                                                  data, &data_size,
 289                                                  &value_length, &err);
 290
 291                 if ( W_ERROR_EQUAL(err,
 292                                    WERR_NO_MORE_ITEMS) ) {
 293                         status = NT_STATUS_OK;
 294                         break;
 295                 }
 296
 297                 if (!(NT_STATUS_IS_OK(status))) {
 298                         goto error;
 299                 }
 300
 301                 if (name_buf.name == NULL) {
 302                         status = NT_STATUS_INVALID_PARAMETER;
 303                         goto error;
 304                 }
 305
 306                 if (!(names[i] = talloc_strdup(names, name_buf.name))) {
 307                         status = NT_STATUS_NO_MEMORY;
 308                         goto error;
 309                 }
 310
 311                 err = registry_pull_value(values, &values[i], type, data,
 312                                           data_size, value_length);
 313                 if (!W_ERROR_IS_OK(err)) {
 314                         status = werror_to_ntstatus(err);
 315                         goto error;
 316                 }
 317         }
 318
 319         *pnum_values = num_values;
 320
 321         if (pvalnames) {
 322                 *pvalnames = talloc_move(ctx, &names);
 323         }
 324         if (pvalues) {
 325                 *pvalues = talloc_move(ctx, &values);
 326         }
 327
 328         status = NT_STATUS_OK;
 329
 330  error:
 331         TALLOC_FREE(mem_ctx);
 332         return status;
 333 }
 334
 335 static NTSTATUS registry_getsd(TALLOC_CTX *mem_ctx,
 336                                struct rpc_pipe_client *pipe_hnd,
 337                                struct policy_handle *key_hnd,
 338                                uint32_t sec_info,
 339                                struct KeySecurityData *sd)
 340 {
 341         return rpccli_winreg_GetKeySecurity(pipe_hnd, mem_ctx, key_hnd,
 342                                             sec_info, sd, NULL);
 343 }
 344
 345
 346 static NTSTATUS registry_setvalue(TALLOC_CTX *mem_ctx,
 347                                   struct rpc_pipe_client *pipe_hnd,
 348                                   struct policy_handle *key_hnd,
 349                                   const char *name,
 350                                   const struct registry_value *value)
 351 {
 352         struct winreg_String name_string;
 353         DATA_BLOB blob;
 354         NTSTATUS result;
 355         WERROR err;
 356
 357         err = registry_push_value(mem_ctx, value, &blob);
 358         if (!W_ERROR_IS_OK(err)) {
 359                 return werror_to_ntstatus(err);
 360         }
 361
 362         ZERO_STRUCT(name_string);
 363
 364         name_string.name = name;
 365         result = rpccli_winreg_SetValue(pipe_hnd, blob.data, key_hnd,
 366                                         name_string, value->type,
 367                                         blob.data, blob.length, NULL);
 368         TALLOC_FREE(blob.data);
 369         return result;
 370 }
 371
 372 static NTSTATUS rpc_registry_setvalue_internal(const DOM_SID *domain_sid,
 373                                                const char *domain_name,
 374                                                struct cli_state *cli,
 375                                                struct rpc_pipe_client *pipe_hnd,
 376                                                TALLOC_CTX *mem_ctx,
 377                                                int argc,
 378                                                const char **argv )
 379 {
 380         struct policy_handle hive_hnd, key_hnd;
 381         NTSTATUS status;
 382         struct registry_value value;
 383
 384         status = registry_openkey(mem_ctx, pipe_hnd, argv[0],
 385                                   SEC_RIGHTS_MAXIMUM_ALLOWED,
 386                                   &hive_hnd, &key_hnd);
 387         if (!NT_STATUS_IS_OK(status)) {
 388                 d_fprintf(stderr, "registry_openkey failed: %s\n",
 389                           nt_errstr(status));
 390                 return status;
 391         }
 392
 393         if (!strequal(argv[2], "multi_sz") && (argc != 4)) {
 394                 d_fprintf(stderr, "Too many args for type %s\n", argv[2]);
 395                 return NT_STATUS_NOT_IMPLEMENTED;
 396         }
 397
 398         if (strequal(argv[2], "dword")) {
 399                 value.type = REG_DWORD;
 400                 value.v.dword = strtoul(argv[3], NULL, 10);
 401         }
 402         else if (strequal(argv[2], "sz")) {
 403                 value.type = REG_SZ;
 404                 value.v.sz.len = strlen(argv[3])+1;
 405                 value.v.sz.str = CONST_DISCARD(char *, argv[3]);
 406         }
 407         else {
 408                 d_fprintf(stderr, "type \"%s\" not implemented\n", argv[2]);
 409                 status = NT_STATUS_NOT_IMPLEMENTED;
 410                 goto error;
 411         }
 412
 413         status = registry_setvalue(mem_ctx, pipe_hnd, &key_hnd,
 414                                    argv[1], &value);
 415
 416         if (!NT_STATUS_IS_OK(status)) {
 417                 d_fprintf(stderr, "registry_setvalue failed: %s\n",
 418                           nt_errstr(status));
 419         }
 420
 421  error:
 422         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &key_hnd, NULL);
 423         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &hive_hnd, NULL);
 424
 425         return NT_STATUS_OK;
 426 }
 427
 428 static int rpc_registry_setvalue( int argc, const char **argv )
 429 {
 430         if (argc < 4) {
 431                 d_fprintf(stderr, "usage: net rpc registry setvalue <key> "
 432                           "<valuename> <type> [<val>]+\n");
 433                 return -1;
 434         }
 435
 436         return run_rpc_command( NULL, PI_WINREG, 0,
 437                 rpc_registry_setvalue_internal, argc, argv );
 438 }
 439
 440 static NTSTATUS rpc_registry_deletevalue_internal(const DOM_SID *domain_sid,
 441                                                   const char *domain_name,
 442                                                   struct cli_state *cli,
 443                                                   struct rpc_pipe_client *pipe_hnd,
 444                                                   TALLOC_CTX *mem_ctx,
 445                                                   int argc,
 446                                                   const char **argv )
 447 {
 448         struct policy_handle hive_hnd, key_hnd;
 449         NTSTATUS status;
 450         struct winreg_String valuename;
 451
 452         ZERO_STRUCT(valuename);
 453
 454         status = registry_openkey(mem_ctx, pipe_hnd, argv[0],
 455                                   SEC_RIGHTS_MAXIMUM_ALLOWED,
 456                                   &hive_hnd, &key_hnd);
 457         if (!NT_STATUS_IS_OK(status)) {
 458                 d_fprintf(stderr, "registry_openkey failed: %s\n",
 459                           nt_errstr(status));
 460                 return status;
 461         }
 462
 463         valuename.name = argv[1];
 464
 465         status = rpccli_winreg_DeleteValue(pipe_hnd, mem_ctx, &key_hnd,
 466                                            valuename, NULL);
 467
 468         if (!NT_STATUS_IS_OK(status)) {
 469                 d_fprintf(stderr, "registry_deletevalue failed: %s\n",
 470                           nt_errstr(status));
 471         }
 472
 473         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &key_hnd, NULL);
 474         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &hive_hnd, NULL);
 475
 476         return status;
 477 }
 478
 479 static int rpc_registry_deletevalue( int argc, const char **argv )
 480 {
 481         if (argc != 2) {
 482                 d_fprintf(stderr, "usage: net rpc registry deletevalue <key> "
 483                           "<valuename>\n");
 484                 return -1;
 485         }
 486
 487         return run_rpc_command( NULL, PI_WINREG, 0,
 488                 rpc_registry_deletevalue_internal, argc, argv );
 489 }
 490
 491 static NTSTATUS rpc_registry_getvalue_internal(const DOM_SID *domain_sid,
 492                                                const char *domain_name,
 493                                                struct cli_state *cli,
 494                                                struct rpc_pipe_client *pipe_hnd,
 495                                                TALLOC_CTX *mem_ctx,
 496                                                int argc,
 497                                                const char **argv)
 498 {
 499         struct policy_handle hive_hnd, key_hnd;
 500         NTSTATUS status;
 501         WERROR werr;
 502         struct winreg_String valuename;
 503         struct registry_value *value = NULL;
 504         enum winreg_Type type = REG_NONE;
 505         uint8_t *data = NULL;
 506         uint32_t data_size = 0;
 507         uint32_t value_length = 0;
 508         TALLOC_CTX *tmp_ctx = talloc_stackframe();
 509
 510         ZERO_STRUCT(valuename);
 511
 512         status = registry_openkey(tmp_ctx, pipe_hnd, argv[0],
 513                                   SEC_RIGHTS_MAXIMUM_ALLOWED,
 514                                   &hive_hnd, &key_hnd);
 515         if (!NT_STATUS_IS_OK(status)) {
 516                 d_fprintf(stderr, "registry_openkey failed: %s\n",
 517                           nt_errstr(status));
 518                 return status;
 519         }
 520
 521         valuename.name = argv[1];
 522
 523         /*
 524          * call QueryValue once with data == NULL to get the
 525          * needed memory size to be allocated, then allocate
 526          * data buffer and call again.
 527          */
 528         status = rpccli_winreg_QueryValue(pipe_hnd, tmp_ctx, &key_hnd,
 529                                           &valuename,
 530                                           &type,
 531                                           data,
 532                                           &data_size,
 533                                           &value_length,
 534                                           NULL);
 535
 536         if (!NT_STATUS_IS_OK(status)) {
 537                 d_fprintf(stderr, "registry_queryvalue failed: %s\n",
 538                           nt_errstr(status));
 539                 goto done;
 540         }
 541
 542         data = (uint8 *)TALLOC(tmp_ctx, data_size);
 543         value_length = 0;
 544
 545         status = rpccli_winreg_QueryValue(pipe_hnd, tmp_ctx, &key_hnd,
 546                                           &valuename,
 547                                           &type,
 548                                           data,
 549                                           &data_size,
 550                                           &value_length,
 551                                           NULL);
 552
 553         if (!NT_STATUS_IS_OK(status)) {
 554                 d_fprintf(stderr, "registry_queryvalue failed: %s\n",
 555                           nt_errstr(status));
 556                 goto done;
 557         }
 558
 559         werr = registry_pull_value(tmp_ctx, &value, type, data,
 560                                    data_size, value_length);
 561         if (!W_ERROR_IS_OK(werr)) {
 562                 status = werror_to_ntstatus(werr);
 563                 goto done;
 564         }
 565
 566         print_registry_value(value);
 567
 568 done:
 569         rpccli_winreg_CloseKey(pipe_hnd, tmp_ctx, &key_hnd, NULL);
 570         rpccli_winreg_CloseKey(pipe_hnd, tmp_ctx, &hive_hnd, NULL);
 571
 572         TALLOC_FREE(tmp_ctx);
 573
 574         return status;
 575 }
 576
 577 static int rpc_registry_getvalue(int argc, const char **argv)
 578 {
 579         if (argc != 2) {
 580                 d_fprintf(stderr, "usage: net rpc registry deletevalue <key> "
 581                           "<valuename>\n");
 582                 return -1;
 583         }
 584
 585         return run_rpc_command(NULL, PI_WINREG, 0,
 586                 rpc_registry_getvalue_internal, argc, argv);
 587 }
 588
 589 static NTSTATUS rpc_registry_createkey_internal(const DOM_SID *domain_sid,
 590                                                 const char *domain_name,
 591                                                 struct cli_state *cli,
 592                                                 struct rpc_pipe_client *pipe_hnd,
 593                                                 TALLOC_CTX *mem_ctx,
 594                                                 int argc,
 595                                                 const char **argv )
 596 {
 597         uint32 hive;
 598         struct policy_handle hive_hnd, key_hnd;
 599         struct winreg_String key, keyclass;
 600         enum winreg_CreateAction action;
 601         NTSTATUS status;
 602
 603         ZERO_STRUCT(key);
 604         ZERO_STRUCT(keyclass);
 605
 606         if (!reg_hive_key(mem_ctx, argv[0], &hive, &key.name)) {
 607                 return NT_STATUS_INVALID_PARAMETER;
 608         }
 609
 610         status = rpccli_winreg_Connect(pipe_hnd, mem_ctx, hive,
 611                                        SEC_RIGHTS_MAXIMUM_ALLOWED,
 612                                        &hive_hnd);
 613         if (!(NT_STATUS_IS_OK(status))) {
 614                 return status;
 615         }
 616
 617         action = REG_ACTION_NONE;
 618         keyclass.name = "";
 619
 620         status = rpccli_winreg_CreateKey(pipe_hnd, mem_ctx, &hive_hnd, key,
 621                                          keyclass, 0, REG_KEY_READ, NULL,
 622                                          &key_hnd, &action, NULL);
 623         if (!NT_STATUS_IS_OK(status)) {
 624                 d_fprintf(stderr, "createkey returned %s\n",
 625                           nt_errstr(status));
 626                 rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &hive_hnd, NULL);
 627                 return status;
 628         }
 629
 630         switch (action) {
 631                 case REG_ACTION_NONE:
 632                         d_printf("createkey did nothing -- huh?\n");
 633                         break;
 634                 case REG_CREATED_NEW_KEY:
 635                         d_printf("createkey created %s\n", argv[0]);
 636                         break;
 637                 case REG_OPENED_EXISTING_KEY:
 638                         d_printf("createkey opened existing %s\n", argv[0]);
 639                         break;
 640         }
 641
 642         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &key_hnd, NULL);
 643         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &hive_hnd, NULL);
 644
 645         return status;
 646 }
 647
 648 static int rpc_registry_createkey( int argc, const char **argv )
 649 {
 650         if (argc != 1) {
 651                 d_fprintf(stderr, "usage: net rpc registry createkey <key>\n");
 652                 return -1;
 653         }
 654
 655         return run_rpc_command( NULL, PI_WINREG, 0,
 656                 rpc_registry_createkey_internal, argc, argv );
 657 }
 658
 659 static NTSTATUS rpc_registry_deletekey_internal(const DOM_SID *domain_sid,
 660                                                 const char *domain_name,
 661                                                 struct cli_state *cli,
 662                                                 struct rpc_pipe_client *pipe_hnd,
 663                                                 TALLOC_CTX *mem_ctx,
 664                                                 int argc,
 665                                                 const char **argv )
 666 {
 667         uint32 hive;
 668         struct policy_handle hive_hnd;
 669         struct winreg_String key;
 670         NTSTATUS status;
 671
 672         ZERO_STRUCT(key);
 673
 674         if (!reg_hive_key(mem_ctx, argv[0], &hive, &key.name)) {
 675                 return NT_STATUS_INVALID_PARAMETER;
 676         }
 677
 678         status = rpccli_winreg_Connect(pipe_hnd, mem_ctx, hive,
 679                                        SEC_RIGHTS_MAXIMUM_ALLOWED,
 680                                        &hive_hnd);
 681         if (!(NT_STATUS_IS_OK(status))) {
 682                 return status;
 683         }
 684
 685         status = rpccli_winreg_DeleteKey(pipe_hnd, mem_ctx, &hive_hnd, key, NULL);
 686         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &hive_hnd, NULL);
 687
 688         if (!NT_STATUS_IS_OK(status)) {
 689                 d_fprintf(stderr, "deletekey returned %s\n",
 690                           nt_errstr(status));
 691         }
 692
 693         return status;
 694 }
 695
 696 static int rpc_registry_deletekey( int argc, const char **argv )
 697 {
 698         if (argc != 1) {
 699                 d_fprintf(stderr, "usage: net rpc registry deletekey <key>\n");
 700                 return -1;
 701         }
 702
 703         return run_rpc_command( NULL, PI_WINREG, 0,
 704                 rpc_registry_deletekey_internal, argc, argv );
 705 }
 706
 707 /********************************************************************
 708 ********************************************************************/
 709
 710 static NTSTATUS rpc_registry_enumerate_internal(const DOM_SID *domain_sid,
 711                                                 const char *domain_name,
 712                                                 struct cli_state *cli,
 713                                                 struct rpc_pipe_client *pipe_hnd,
 714                                                 TALLOC_CTX *mem_ctx,
 715                                                 int argc,
 716                                                 const char **argv )
 717 {
 718         POLICY_HND pol_hive, pol_key;
 719         NTSTATUS status;
 720         uint32 num_subkeys = 0;
 721         uint32 num_values = 0;
 722         char **names = NULL, **classes = NULL;
 723         NTTIME **modtimes = NULL;
 724         uint32 i;
 725         struct registry_value **values = NULL;
 726
 727         if (argc != 1 ) {
 728                 d_printf("Usage:    net rpc registry enumerate <path> [recurse]\n");
 729                 d_printf("Example:  net rpc registry enumerate 'HKLM\\Software\\Samba'\n");
 730                 return NT_STATUS_INVALID_PARAMETER;
 731         }
 732
 733         status = registry_openkey(mem_ctx, pipe_hnd, argv[0], REG_KEY_READ,
 734                                   &pol_hive, &pol_key);
 735         if (!NT_STATUS_IS_OK(status)) {
 736                 d_fprintf(stderr, "registry_openkey failed: %s\n",
 737                           nt_errstr(status));
 738                 return status;
 739         }
 740
 741         status = registry_enumkeys(mem_ctx, pipe_hnd, &pol_key, &num_subkeys,
 742                                    &names, &classes, &modtimes);
 743         if (!NT_STATUS_IS_OK(status)) {
 744                 d_fprintf(stderr, "enumerating keys failed: %s\n",
 745                           nt_errstr(status));
 746                 return status;
 747         }
 748
 749         for (i=0; i<num_subkeys; i++) {
 750                 print_registry_key(names[i], modtimes[i]);
 751         }
 752
 753         status = registry_enumvalues(mem_ctx, pipe_hnd, &pol_key, &num_values,
 754                                      &names, &values);
 755         if (!NT_STATUS_IS_OK(status)) {
 756                 d_fprintf(stderr, "enumerating values failed: %s\n",
 757                           nt_errstr(status));
 758                 return status;
 759         }
 760
 761         for (i=0; i<num_values; i++) {
 762                 print_registry_value_with_name(names[i], values[i]);
 763         }
 764
 765         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &pol_key, NULL);
 766         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &pol_hive, NULL);
 767
 768         return status;
 769 }
 770
 771 /********************************************************************
 772 ********************************************************************/
 773
 774 static int rpc_registry_enumerate( int argc, const char **argv )
 775 {
 776         return run_rpc_command( NULL, PI_WINREG, 0,
 777                 rpc_registry_enumerate_internal, argc, argv );
 778 }
 779
 780 /********************************************************************
 781 ********************************************************************/
 782
 783 static NTSTATUS rpc_registry_save_internal(const DOM_SID *domain_sid,
 784                                         const char *domain_name,
 785                                         struct cli_state *cli,
 786                                         struct rpc_pipe_client *pipe_hnd,
 787                                         TALLOC_CTX *mem_ctx,
 788                                         int argc,
 789                                         const char **argv )
 790 {
 791         WERROR result = WERR_GENERAL_FAILURE;
 792         POLICY_HND pol_hive, pol_key;
 793         NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
 794         struct winreg_String filename;
 795
 796         if (argc != 2 ) {
 797                 d_printf("Usage:    net rpc registry backup <path> <file> \n");
 798                 return NT_STATUS_INVALID_PARAMETER;
 799         }
 800
 801         status = registry_openkey(mem_ctx, pipe_hnd, argv[0], REG_KEY_ALL,
 802                                   &pol_hive, &pol_key);
 803         if (!NT_STATUS_IS_OK(status)) {
 804                 d_fprintf(stderr, "registry_openkey failed: %s\n",
 805                           nt_errstr(status));
 806                 return status;
 807         }
 808
 809         filename.name = argv[1];
 810         status = rpccli_winreg_SaveKey( pipe_hnd, mem_ctx, &pol_key, &filename, NULL, NULL);
 811         if ( !W_ERROR_IS_OK(result) ) {
 812                 d_fprintf(stderr, "Unable to save [%s] to %s:%s\n", argv[0], cli->desthost, argv[1]);
 813         }
 814
 815         /* cleanup */
 816
 817         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &pol_key, NULL);
 818         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &pol_hive, NULL);
 819
 820         return status;
 821 }
 822
 823 /********************************************************************
 824 ********************************************************************/
 825
 826 static int rpc_registry_save( int argc, const char **argv )
 827 {
 828         return run_rpc_command( NULL, PI_WINREG, 0,
 829                 rpc_registry_save_internal, argc, argv );
 830 }
 831
 832
 833 /********************************************************************
 834 ********************************************************************/
 835
 836 static void dump_values( REGF_NK_REC *nk )
 837 {
 838         int i, j;
 839         char *data_str = NULL;
 840         uint32 data_size, data;
 841
 842         if ( !nk->values )
 843                 return;
 844
 845         for ( i=0; i<nk->num_values; i++ ) {
 846                 d_printf( "\"%s\" = ", nk->values[i].valuename ? nk->values[i].valuename : "(default)" );
 847                 d_printf( "(%s) ", reg_type_lookup( nk->values[i].type ) );
 848
 849                 data_size = nk->values[i].data_size & ~VK_DATA_IN_OFFSET;
 850                 switch ( nk->values[i].type ) {
 851                         case REG_SZ:
 852                                 rpcstr_pull_talloc(talloc_tos(),
 853                                                 &data_str,
 854                                                 nk->values[i].data,
 855                                                 -1,
 856                                                 STR_TERMINATE);
 857                                 if (!data_str) {
 858                                         break;
 859                                 }
 860                                 d_printf( "%s", data_str );
 861                                 break;
 862                         case REG_MULTI_SZ:
 863                         case REG_EXPAND_SZ:
 864                                 for ( j=0; j<data_size; j++ ) {
 865                                         d_printf( "%c", nk->values[i].data[j] );
 866                                 }
 867                                 break;
 868                         case REG_DWORD:
 869                                 data = IVAL( nk->values[i].data, 0 );
 870                                 d_printf("0x%x", data );
 871                                 break;
 872                         case REG_BINARY:
 873                                 for ( j=0; j<data_size; j++ ) {
 874                                         d_printf( "%x", nk->values[i].data[j] );
 875                                 }
 876                                 break;
 877                         default:
 878                                 d_printf("unknown");
 879                                 break;
 880                 }
 881
 882                 d_printf( "\n" );
 883         }
 884
 885 }
 886
 887 /********************************************************************
 888 ********************************************************************/
 889
 890 static bool dump_registry_tree( REGF_FILE *file, REGF_NK_REC *nk, const char *parent )
 891 {
 892         REGF_NK_REC *key;
 893
 894         /* depth first dump of the registry tree */
 895
 896         while ( (key = regfio_fetch_subkey( file, nk )) ) {
 897                 char *regpath;
 898                 if (asprintf(&regpath, "%s\\%s", parent, key->keyname) < 0) {
 899                         break;
 900                 }
 901                 d_printf("[%s]\n", regpath );
 902                 dump_values( key );
 903                 d_printf("\n");
 904                 dump_registry_tree( file, key, regpath );
 905                 SAFE_FREE(regpath);
 906         }
 907
 908         return True;
 909 }
 910
 911 /********************************************************************
 912 ********************************************************************/
 913
 914 static bool write_registry_tree( REGF_FILE *infile, REGF_NK_REC *nk,
 915                                  REGF_NK_REC *parent, REGF_FILE *outfile,
 916                                  const char *parentpath )
 917 {
 918         REGF_NK_REC *key, *subkey;
 919         REGVAL_CTR *values = NULL;
 920         REGSUBKEY_CTR *subkeys = NULL;
 921         int i;
 922         char *path = NULL;
 923
 924         if ( !( subkeys = TALLOC_ZERO_P( infile->mem_ctx, REGSUBKEY_CTR )) ) {
 925                 DEBUG(0,("write_registry_tree: talloc() failed!\n"));
 926                 return False;
 927         }
 928
 929         if ( !(values = TALLOC_ZERO_P( subkeys, REGVAL_CTR )) ) {
 930                 DEBUG(0,("write_registry_tree: talloc() failed!\n"));
 931                 TALLOC_FREE(subkeys);
 932                 return False;
 933         }
 934
 935         /* copy values into the REGVAL_CTR */
 936
 937         for ( i=0; i<nk->num_values; i++ ) {
 938                 regval_ctr_addvalue( values, nk->values[i].valuename, nk->values[i].type,
 939                         (const char *)nk->values[i].data, (nk->values[i].data_size & ~VK_DATA_IN_OFFSET) );
 940         }
 941
 942         /* copy subkeys into the REGSUBKEY_CTR */
 943
 944         while ( (subkey = regfio_fetch_subkey( infile, nk )) ) {
 945                 regsubkey_ctr_addkey( subkeys, subkey->keyname );
 946         }
 947
 948         key = regfio_write_key( outfile, nk->keyname, values, subkeys, nk->sec_desc->sec_desc, parent );
 949
 950         /* write each one of the subkeys out */
 951
 952         path = talloc_asprintf(subkeys,
 953                         "%s%s%s",
 954                         parentpath,
 955                         parent ? "\\" : "",
 956                         nk->keyname);
 957         if (!path) {
 958                 TALLOC_FREE(subkeys);
 959                 return false;
 960         }
 961
 962         nk->subkey_index = 0;
 963         while ( (subkey = regfio_fetch_subkey( infile, nk )) ) {
 964                 write_registry_tree( infile, subkey, key, outfile, path );
 965         }
 966
 967         d_printf("[%s]\n", path );
 968         TALLOC_FREE(subkeys);
 969
 970         return True;
 971 }
 972
 973 /********************************************************************
 974 ********************************************************************/
 975
 976 static int rpc_registry_dump( int argc, const char **argv )
 977 {
 978         REGF_FILE   *registry;
 979         REGF_NK_REC *nk;
 980
 981         if (argc != 1 ) {
 982                 d_printf("Usage:    net rpc registry dump <file> \n");
 983                 return -1;
 984         }
 985
 986         d_printf("Opening %s....", argv[0]);
 987         if ( !(registry = regfio_open( argv[0], O_RDONLY, 0)) ) {
 988                 d_fprintf(stderr, "Failed to open %s for reading\n", argv[0]);
 989                 return 1;
 990         }
 991         d_printf("ok\n");
 992
 993         /* get the root of the registry file */
 994
 995         if ((nk = regfio_rootkey( registry )) == NULL) {
 996                 d_fprintf(stderr, "Could not get rootkey\n");
 997                 regfio_close( registry );
 998                 return 1;
 999         }
1000         d_printf("[%s]\n", nk->keyname);
1001         dump_values( nk );
1002         d_printf("\n");
1003
1004         dump_registry_tree( registry, nk, nk->keyname );
1005
1006 #if 0
1007         talloc_report_full( registry->mem_ctx, stderr );
1008 #endif
1009         d_printf("Closing registry...");
1010         regfio_close( registry );
1011         d_printf("ok\n");
1012
1013         return 0;
1014 }
1015
1016 /********************************************************************
1017 ********************************************************************/
1018
1019 static int rpc_registry_copy( int argc, const char **argv )
1020 {
1021         REGF_FILE   *infile = NULL, *outfile = NULL;
1022         REGF_NK_REC *nk;
1023         int result = 1;
1024
1025         if (argc != 2 ) {
1026                 d_printf("Usage:    net rpc registry copy <srcfile> <newfile>\n");
1027                 return -1;
1028         }
1029
1030         d_printf("Opening %s....", argv[0]);
1031         if ( !(infile = regfio_open( argv[0], O_RDONLY, 0 )) ) {
1032                 d_fprintf(stderr, "Failed to open %s for reading\n", argv[0]);
1033                 return 1;
1034         }
1035         d_printf("ok\n");
1036
1037         d_printf("Opening %s....", argv[1]);
1038         if ( !(outfile = regfio_open( argv[1], (O_RDWR|O_CREAT|O_TRUNC), (S_IREAD|S_IWRITE) )) ) {
1039                 d_fprintf(stderr, "Failed to open %s for writing\n", argv[1]);
1040                 goto out;
1041         }
1042         d_printf("ok\n");
1043
1044         /* get the root of the registry file */
1045
1046         if ((nk = regfio_rootkey( infile )) == NULL) {
1047                 d_fprintf(stderr, "Could not get rootkey\n");
1048                 goto out;
1049         }
1050         d_printf("RootKey: [%s]\n", nk->keyname);
1051
1052         write_registry_tree( infile, nk, NULL, outfile, "" );
1053
1054         result = 0;
1055
1056 out:
1057
1058         d_printf("Closing %s...", argv[1]);
1059         if (outfile) {
1060                 regfio_close( outfile );
1061         }
1062         d_printf("ok\n");
1063
1064         d_printf("Closing %s...", argv[0]);
1065         if (infile) {
1066                 regfio_close( infile );
1067         }
1068         d_printf("ok\n");
1069
1070         return( result);
1071 }
1072
1073 /********************************************************************
1074 ********************************************************************/
1075
1076 static NTSTATUS rpc_registry_getsd_internal(const DOM_SID *domain_sid,
1077                                             const char *domain_name,
1078                                             struct cli_state *cli,
1079                                             struct rpc_pipe_client *pipe_hnd,
1080                                             TALLOC_CTX *mem_ctx,
1081                                             int argc,
1082                                             const char **argv)
1083 {
1084         POLICY_HND pol_hive, pol_key;
1085         NTSTATUS status;
1086         enum ndr_err_code ndr_err;
1087         struct KeySecurityData *sd = NULL;
1088         uint32_t sec_info;
1089         DATA_BLOB blob;
1090         struct security_descriptor sec_desc;
1091         uint32_t access_mask = REG_KEY_READ |
1092                                SEC_RIGHT_MAXIMUM_ALLOWED |
1093                                SEC_RIGHT_SYSTEM_SECURITY;
1094
1095         if (argc <1 || argc > 2) {
1096                 d_printf("Usage:    net rpc registry getsd <path> <secinfo>\n");
1097                 d_printf("Example:  net rpc registry getsd 'HKLM\\Software\\Samba'\n");
1098                 return NT_STATUS_INVALID_PARAMETER;
1099         }
1100
1101         status = registry_openkey(mem_ctx, pipe_hnd, argv[0],
1102                                   access_mask,
1103                                   &pol_hive, &pol_key);
1104         if (!NT_STATUS_IS_OK(status)) {
1105                 d_fprintf(stderr, "registry_openkey failed: %s\n",
1106                           nt_errstr(status));
1107                 return status;
1108         }
1109
1110         sd = TALLOC_ZERO_P(mem_ctx, struct KeySecurityData);
1111         if (!sd) {
1112                 status = NT_STATUS_NO_MEMORY;
1113                 goto out;
1114         }
1115
1116         sd->size = 0x1000;
1117
1118         if (argc >= 2) {
1119                 sscanf(argv[1], "%x", &sec_info);
1120         } else {
1121                 sec_info = SECINFO_OWNER | SECINFO_GROUP | SECINFO_DACL;
1122         }
1123
1124         status = registry_getsd(mem_ctx, pipe_hnd, &pol_key, sec_info, sd);
1125         if (!NT_STATUS_IS_OK(status)) {
1126                 d_fprintf(stderr, "getting sd failed: %s\n",
1127                           nt_errstr(status));
1128                 goto out;
1129         }
1130
1131         blob.data = sd->data;
1132         blob.length = sd->size;
1133
1134         ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, &sec_desc,
1135                                        (ndr_pull_flags_fn_t)ndr_pull_security_descriptor);
1136         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1137                 status = ndr_map_error2ntstatus(ndr_err);
1138                 goto out;
1139         }
1140         status = NT_STATUS_OK;
1141
1142         display_sec_desc(&sec_desc);
1143
1144  out:
1145         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &pol_key, NULL);
1146         rpccli_winreg_CloseKey(pipe_hnd, mem_ctx, &pol_hive, NULL);
1147
1148         return status;
1149 }
1150
1151
1152 static int rpc_registry_getsd(int argc, const char **argv)
1153 {
1154         return run_rpc_command(NULL, PI_WINREG, 0,
1155                 rpc_registry_getsd_internal, argc, argv);
1156 }
1157
1158 /********************************************************************
1159 ********************************************************************/
1160
1161 int net_rpc_registry(int argc, const char **argv)
1162 {
1163         struct functable2 func[] = {
1164                 { "enumerate", rpc_registry_enumerate,
1165                   "Enumerate registry keys and values" },
1166                 { "createkey",  rpc_registry_createkey,
1167                   "Create a new registry key" },
1168                 { "deletekey",  rpc_registry_deletekey,
1169                   "Delete a registry key" },
1170                 { "getvalue", rpc_registry_getvalue,
1171                   "Print a registry value" },
1172                 { "setvalue",  rpc_registry_setvalue,
1173                   "Set a new registry value" },
1174                 { "deletevalue",  rpc_registry_deletevalue,
1175                   "Delete a registry value" },
1176                 { "save", rpc_registry_save,
1177                   "Save a registry file" },
1178                 { "dump", rpc_registry_dump,
1179                   "Dump a registry file" },
1180                 { "copy", rpc_registry_copy,
1181                   "Copy a registry file" },
1182                 { "getsd", rpc_registry_getsd,
1183                   "Get security descriptor" },
1184                 {NULL, NULL, NULL}
1185         };
1186
1187         return net_run_function2(argc, argv, "net rpc registry", func);
1188 }