| blob | 5491c58138763dbc66b44e5d1817f82e8ac8ae9b |
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
5 Copyright (C) 2002 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2004,2008 Guenther Deschner (gd@samba.org)
7 Copyright (C) 2005 Jeremy Allison (jra@samba.org)
8 Copyright (C) 2006 Jelmer Vernooij (jelmer@samba.org)
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>. */
50 /**
51 * @file net_rpc.c
52 *
53 * @brief RPC based subcommands for the 'net' utility.
54 *
55 * This file should contain much of the functionality that used to
56 * be found in rpcclient, execpt that the commands should change
57 * less often, and the fucntionality should be sane (the user is not
58 * expected to know a rid/sid before they conduct an operation etc.)
59 *
60 * @todo Perhaps eventually these should be split out into a number
61 * of files, as this could get quite big.
62 **/
65 /**
66 * Many of the RPC functions need the domain sid. This function gets
67 * it at the start of every run
68 *
69 * @param cli A cli_state already connected to the remote machine
70 *
71 * @return The Domain SID of the remote machine.
72 **/
77 {
89 }
94 SEC_FLAG_MAXIMUM_ALLOWED,
101 }
105 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
113 }
119 }
128 }
130 /**
131 * Run a single RPC command, from start to finish.
132 *
133 * @param pipe_name the pipe to connect to (usually a PIPE_ constant)
134 * @param conn_flag a NET_FLAG_ combination. Passed to
135 * net_make_ipc_connection.
136 * @param argc Standard main() style argc.
137 * @param argv Standard main() style argv. Initial components are already
138 * stripped.
139 * @return A shell status integer (0 for success).
140 */
146 rpc_command_fn fn,
149 {
153 NTSTATUS nt_status;
158 /* make use of cli_state handed over as an argument, if possible */
165 }
168 }
172 }
174 /* Create mem_ctx */
179 }
185 }
191 /* Always try and create an schannel netlogon pipe. */
200 }
207 DCERPC_AUTH_TYPE_NTLMSSP,
208 DCERPC_AUTH_LEVEL_PRIVACY,
216 }
223 }
224 }
225 }
234 }
239 }
240 }
242 fail:
243 /* close the connection only if it was opened here */
246 }
250 }
252 /**
253 * Force a change of the trust acccount password.
254 *
255 * All parameters are provided by the run_rpc_command function, except for
256 * argc, argv which are passed through.
257 *
258 * @param domain_sid The domain sid acquired from the remote server.
259 * @param cli A cli_state connected to the server.
260 * @param mem_ctx Talloc context, destroyed on completion of the function.
261 * @param argc Standard main() style argc.
262 * @param argv Standard main() style argv. Initial components are already
263 * stripped.
264 *
265 * @return Normal NTSTATUS return.
266 **/
276 {
277 NTSTATUS status;
284 }
287 }
289 /**
290 * Force a change of the trust acccount password.
291 *
292 * @param argc Standard main() style argc.
293 * @param argv Standard main() style argv. Initial components are already
294 * stripped.
295 *
296 * @return A shell status integer (0 for success).
297 **/
300 {
308 }
312 rpc_changetrustpw_internals,
314 }
316 /**
317 * Join a domain, the old way.
318 *
319 * This uses 'machinename' as the inital password, and changes it.
320 *
321 * The password should be created with 'server manager' or equiv first.
322 *
323 * All parameters are provided by the run_rpc_command function, except for
324 * argc, argv which are passed through.
325 *
326 * @param domain_sid The domain sid acquired from the remote server.
327 * @param cli A cli_state connected to the server.
328 * @param mem_ctx Talloc context, destroyed on completion of the function.
329 * @param argc Standard main() style argc.
330 * @param argv Standard main() style argv. Initial components are already
331 * stripped.
332 *
333 * @return Normal NTSTATUS return.
334 **/
344 {
346 fstring trust_passwd;
348 NTSTATUS result;
359 }
361 /*
362 check what type of join - if the user want's to join as
363 a BDC, the server must agree that we are a BDC.
364 */
369 }
374 /*
375 * Machine names can be 15 characters, but the max length on
376 * a password is 14. --jerry
377 */
385 orig_trust_passwd_hash,
386 sec_channel_type);
395 }
398 }
400 /**
401 * Join a domain, the old way.
402 *
403 * @param argc Standard main() style argc.
404 * @param argv Standard main() style argv. Initial components are already
405 * stripped.
406 *
407 * @return A shell status integer (0 for success).
408 **/
411 {
414 rpc_oldjoin_internals,
416 }
418 /**
419 * Join a domain, the old way. This function exists to allow
420 * the message to be displayed when oldjoin was explicitly
421 * requested, but not when it was implied by "net rpc join".
422 *
423 * @param argc Standard main() style argc.
424 * @param argv Standard main() style argv. Initial components are already
425 * stripped.
426 *
427 * @return A shell status integer (0 for success).
428 **/
431 {
441 }
447 }
450 }
452 /**
453 * 'net rpc join' entrypoint.
454 * @param argc Standard main() style argc.
455 * @param argv Standard main() style argv. Initial components are already
456 * stripped
457 *
458 * Main 'net_rpc_join()' (where the admin username/password is used) is
459 * in net_rpc_join.c.
460 * Try to just change the password, but if that doesn't work, use/prompt
461 * for a username/password.
462 **/
465 {
479 }
484 }
491 }
497 }
499 /**
500 * display info about a rpc domain
501 *
502 * All parameters are provided by the run_rpc_command function, except for
503 * argc, argv which are passed through.
504 *
505 * @param domain_sid The domain sid acquired from the remote server
506 * @param cli A cli_state connected to the server.
507 * @param mem_ctx Talloc context, destroyed on completion of the function.
508 * @param argc Standard main() style argc.
509 * @param argv Standard main() style argv. Initial components are already
510 * stripped.
511 *
512 * @return Normal NTSTATUS return.
513 **/
523 {
527 fstring sid_str;
532 /* Get sam policy handle */
535 MAXIMUM_ALLOWED_ACCESS,
542 }
549 }
551 /* Get domain policy handle */
554 MAXIMUM_ALLOWED_ACCESS,
562 }
568 }
577 }
588 }
590 done:
592 }
594 /**
595 * 'net rpc info' entrypoint.
596 * @param argc Standard main() style argc.
597 * @param argv Standard main() style argv. Initial components are already
598 * stripped.
599 **/
602 {
610 }
615 }
617 /**
618 * Fetch domain SID into the local secrets.tdb.
619 *
620 * All parameters are provided by the run_rpc_command function, except for
621 * argc, argv which are passed through.
622 *
623 * @param domain_sid The domain sid acquired from the remote server.
624 * @param cli A cli_state connected to the server.
625 * @param mem_ctx Talloc context, destroyed on completion of the function.
626 * @param argc Standard main() style argc.
627 * @param argv Standard main() style argv. Initial components are already
628 * stripped.
629 *
630 * @return Normal NTSTATUS return.
631 **/
641 {
642 fstring sid_str;
651 }
654 }
656 /**
657 * 'net rpc getsid' entrypoint.
658 * @param argc Standard main() style argc.
659 * @param argv Standard main() style argv. Initial components are already
660 * stripped.
661 **/
664 {
669 }
678 }
681 conn_flags,
682 rpc_getsid_internals,
684 }
686 /****************************************************************************/
688 /**
689 * Basic usage function for 'net rpc user'.
690 * @param argc Standard main() style argc.
691 * @param argv Standard main() style argv. Initial components are already
692 * stripped.
693 **/
696 {
698 }
700 /**
701 * Add a new user to a remote RPC server.
702 *
703 * @param argc Standard main() style argc.
704 * @param argv Standard main() style argv. Initial components are already
705 * stripped.
706 *
707 * @return A shell status integer (0 for success).
708 **/
711 {
712 NET_API_STATUS status;
719 }
726 }
733 status));
737 }
740 }
742 /**
743 * Rename a user on a remote RPC server.
744 *
745 * @param argc Standard main() style argc.
746 * @param argv Standard main() style argv. Initial components are already
747 * stripped.
748 *
749 * @return A shell status integer (0 for success).
750 **/
753 {
754 NET_API_STATUS status;
761 }
774 }
777 }
779 /**
780 * Set a user's primary group
781 *
782 * @param argc Standard main() style argc.
783 * @param argv Standard main() style argv. Initial components are already
784 * stripped.
785 *
786 * @return A shell status integer (0 for success).
787 **/
791 {
792 NET_API_STATUS status;
801 }
809 }
826 }
828 }
830 /**
831 * Delete a user from a remote RPC server.
832 *
833 * @param argc Standard main() style argc.
834 * @param argv Standard main() style argv. Initial components are already
835 * stripped.
836 *
837 * @return A shell status integer (0 for success).
838 **/
841 {
842 NET_API_STATUS status;
847 }
858 }
861 }
863 /**
864 * Set a user's password on a remote RPC server.
865 *
866 * @param argc Standard main() style argc.
867 * @param argv Standard main() style argv. Initial components are already
868 * stripped.
869 *
870 * @return A shell status integer (0 for success).
871 **/
874 {
875 NET_API_STATUS status;
884 }
893 }
898 }
899 }
903 /* Display results */
908 status));
910 }
913 }
915 /**
916 * List a user's groups from a remote RPC server.
917 *
918 * @param argc Standard main() style argc.
919 * @param argv Standard main() style argv. Initial components are already
920 * stripped.
921 *
922 * @return A shell status integer (0 for success)
923 **/
927 {
928 NET_API_STATUS status;
938 }
951 status));
953 }
957 u0++;
958 }
961 }
963 /**
964 * List users on a remote RPC server.
965 *
966 * All parameters are provided by the run_rpc_command function, except for
967 * argc, argv which are passed through.
968 *
969 * @param domain_sid The domain sid acquired from the remote server.
970 * @param cli A cli_state connected to the server.
971 * @param mem_ctx Talloc context, destroyed on completion of the function.
972 * @param argc Standard main() style argc.
973 * @param argv Standard main() style argv. Initial components are already
974 * stripped.
975 *
976 * @return Normal NTSTATUS return.
977 **/
980 {
981 NET_API_STATUS status;
986 /* Query domain users */
998 start_idx,
999 max_entries,
1000 max_size,
1005 }
1014 else
1016 info++;
1017 }
1021 loop_count++;
1027 }
1029 /**
1030 * 'net rpc user' entrypoint.
1031 * @param argc Standard main() style argc.
1032 * @param argv Standard main() style argv. Initial components are already
1033 * stripped.
1034 **/
1037 {
1038 NET_API_STATUS status;
1041 {
1043 rpc_user_add,
1044 NET_TRANSPORT_RPC,
1048 },
1049 {
1051 rpc_user_info,
1052 NET_TRANSPORT_RPC,
1056 },
1057 {
1059 rpc_user_delete,
1060 NET_TRANSPORT_RPC,
1064 },
1065 {
1067 rpc_user_password,
1068 NET_TRANSPORT_RPC,
1072 },
1073 {
1075 rpc_user_rename,
1076 NET_TRANSPORT_RPC,
1080 },
1081 {
1083 rpc_user_setprimarygroup,
1084 NET_TRANSPORT_RPC,
1087 " Set a user's primary group"
1088 },
1090 };
1095 }
1100 }
1111 }
1114 }
1117 }
1124 {
1126 }
1133 {
1135 }
1149 {
1153 uint32 rid;
1161 }
1173 }
1180 }
1186 }
1190 MAXIMUM_ALLOWED_ACCESS,
1195 }
1199 }
1203 MAXIMUM_ALLOWED_ACCESS,
1209 }
1213 }
1217 MAXIMUM_ALLOWED_ACCESS,
1218 rid,
1223 }
1227 }
1231 done:
1234 }
1237 }
1240 }
1242 }
1250 {
1259 }
1262 user_hnd,
1268 }
1271 }
1278 }
1285 {
1287 rpc_sh_user_show_internals);
1288 }
1290 #define FETCHSTR(name, rec) \
1291 do { if (strequal(ctx->thiscmd, name)) { \
1292 oldval = talloc_strdup(mem_ctx, info->info21.rec.string); } \
1293 } while (0);
1295 #define SETSTR(name, rec, flag) \
1296 do { if (strequal(ctx->thiscmd, name)) { \
1297 init_lsa_String(&(info->info21.rec), argv[0]); \
1298 info->info21.fields_present |= SAMR_FIELD_##flag; } \
1299 } while (0);
1307 {
1318 }
1321 user_hnd,
1327 }
1330 }
1344 }
1348 }
1360 user_hnd,
1362 info,
1366 }
1373 done:
1376 }
1378 #define HANDLEFLG(name, rec) \
1379 do { if (strequal(ctx->thiscmd, name)) { \
1381 if (newval) { \
1382 newflags = oldflags | ACB_##rec; \
1383 } else { \
1384 newflags = oldflags & ~ACB_##rec; \
1385 } } } while (0);
1392 {
1394 rpc_sh_user_str_edit_internals);
1395 }
1403 {
1415 /* TRANSATORS: The yes|no here are program keywords. Please do
1416 not translate. */
1420 }
1425 user_hnd,
1431 }
1434 }
1447 oldval);
1449 }
1457 user_hnd,
1459 info,
1463 }
1468 }
1470 done:
1473 }
1480 {
1482 rpc_sh_user_flag_edit_internals);
1483 }
1488 {
1522 };
1525 }
1530 {
1546 };
1549 }
1551 /****************************************************************************/
1553 /**
1554 * Basic usage function for 'net rpc group'.
1555 * @param argc Standard main() style argc.
1556 * @param argv Standard main() style argv. Initial components are already
1557 * stripped.
1558 **/
1561 {
1563 }
1565 /**
1566 * Delete group on a remote RPC server.
1567 *
1568 * All parameters are provided by the run_rpc_command function, except for
1569 * argc, argv which are passed through.
1570 *
1571 * @param domain_sid The domain sid acquired from the remote server.
1572 * @param cli A cli_state connected to the server.
1573 * @param mem_ctx Talloc context, destroyed on completion of the function.
1574 * @param argc Standard main() style argc.
1575 * @param argv Standard main() style argv. Initial components are already
1576 * stripped.
1577 *
1578 * @return Normal NTSTATUS return.
1579 **/
1589 {
1595 /* char **names; */
1597 /* struct samr_RidWithAttribute *user_gids; */
1607 }
1611 MAXIMUM_ALLOWED_ACCESS,
1617 }
1623 }
1627 MAXIMUM_ALLOWED_ACCESS,
1634 }
1640 }
1654 }
1660 }
1663 {
1667 MAXIMUM_ALLOWED_ACCESS,
1674 }
1680 }
1693 }
1701 }
1707 }
1709 /* Check if group is anyone's primary group */
1711 {
1714 MAXIMUM_ALLOWED_ACCESS,
1723 }
1731 }
1744 }
1753 }
1760 }
1762 }
1765 }
1769 "some of it's members have it as primary "
1773 }
1775 /* remove all group members */
1777 {
1787 }
1796 }
1797 }
1804 }
1809 /* removing a local group is easier... */
1813 MAXIMUM_ALLOWED_ACCESS,
1820 }
1825 }
1832 }
1843 }
1852 }
1854 done:
1857 }
1860 {
1863 }
1866 {
1867 NET_API_STATUS status;
1874 }
1881 }
1889 status));
1893 }
1896 }
1899 {
1900 NET_API_STATUS status;
1907 }
1914 }
1922 status));
1926 }
1929 }
1932 {
1937 }
1944 {
1956 }
1965 }
1973 }
1977 done:
1980 }
1984 /* Try as S-1-5-whatever */
1992 }
1993 }
1996 }
2002 {
2005 uint32 group_rid;
2018 }
2020 /* Get sam policy handle */
2023 MAXIMUM_ALLOWED_ACCESS,
2028 }
2031 }
2033 /* Get domain policy handle */
2036 MAXIMUM_ALLOWED_ACCESS,
2042 }
2045 }
2058 member);
2060 }
2065 member);
2067 }
2071 MAXIMUM_ALLOWED_ACCESS,
2072 group_rid,
2077 }
2082 }
2091 }
2095 done:
2098 }
2104 {
2107 uint32 alias_rid;
2120 }
2127 member);
2129 }
2131 /* Get sam policy handle */
2134 MAXIMUM_ALLOWED_ACCESS,
2139 }
2143 }
2145 /* Get domain policy handle */
2148 MAXIMUM_ALLOWED_ACCESS,
2154 }
2158 }
2162 MAXIMUM_ALLOWED_ACCESS,
2163 alias_rid,
2168 }
2171 }
2179 }
2183 done:
2186 }
2196 {
2208 }
2215 }
2224 }
2226 }
2235 }
2237 }
2243 }
2246 {
2248 rpc_group_addmem_internals,
2250 }
2257 {
2260 uint32 group_rid;
2274 /* Get sam policy handle */
2277 MAXIMUM_ALLOWED_ACCESS,
2282 }
2285 }
2288 /* Get domain policy handle */
2291 MAXIMUM_ALLOWED_ACCESS,
2297 }
2300 }
2313 member);
2315 }
2320 member);
2322 }
2326 MAXIMUM_ALLOWED_ACCESS,
2327 group_rid,
2332 }
2336 }
2344 }
2347 done:
2350 }
2356 {
2359 uint32 alias_rid;
2378 member);
2380 }
2382 /* Get sam policy handle */
2385 MAXIMUM_ALLOWED_ACCESS,
2390 }
2394 }
2396 /* Get domain policy handle */
2399 MAXIMUM_ALLOWED_ACCESS,
2405 }
2409 }
2413 MAXIMUM_ALLOWED_ACCESS,
2414 alias_rid,
2419 }
2423 }
2432 }
2436 done:
2439 }
2449 {
2461 }
2468 }
2477 }
2479 }
2488 }
2490 }
2496 }
2499 {
2501 rpc_group_delmem_internals,
2503 }
2505 /**
2506 * List groups on a remote RPC server.
2507 *
2508 * All parameters are provided by the run_rpc_command function, except for
2509 * argc, argv which are passes through.
2510 *
2511 * @param domain_sid The domain sid acquired from the remote server.
2512 * @param cli A cli_state connected to the server.
2513 * @param mem_ctx Talloc context, destroyed on completion of the function.
2514 * @param argc Standard main() style argc.
2515 * @param argv Standard main() style argv. Initial components are already
2516 * stripped.
2517 *
2518 * @return Normal NTSTATUS return.
2519 **/
2529 {
2547 " If none of global, local or builtin is "
2548 "specified, all three options are considered "
2551 }
2557 }
2568 }
2570 /* Get sam policy handle */
2574 MAXIMUM_ALLOWED_ACCESS,
2579 }
2583 }
2585 /* Get domain policy handle */
2589 MAXIMUM_ALLOWED_ACCESS,
2595 }
2599 }
2601 /* Query domain groups */
2617 start_idx,
2618 max_entries,
2619 max_size,
2626 }
2645 else
2647 }
2649 /* query domain aliases */
2663 }
2676 NTSTATUS _result;
2696 }
2697 }
2698 }
2699 }
2704 description);
2707 }
2708 }
2711 /* Get builtin policy handle */
2715 MAXIMUM_ALLOWED_ACCESS,
2721 }
2725 }
2727 /* query builtin aliases */
2736 max_entries,
2741 }
2746 }
2756 NTSTATUS _result;
2776 }
2777 }
2778 }
2779 }
2784 description);
2787 }
2788 }
2793 done:
2795 }
2798 {
2800 rpc_group_list_internals,
2802 }
2810 uint32 rid)
2811 {
2821 fstring sid_str;
2825 domain_pol,
2826 MAXIMUM_ALLOWED_ACCESS,
2827 rid,
2832 }
2835 }
2843 }
2846 }
2858 domain_pol,
2859 this_time,
2860 group_rids,
2866 }
2869 }
2871 /* We only have users as members, but make the output
2872 the same as the output of alias members */
2880 SID_NAME_USER);
2884 }
2885 }
2889 }
2892 }
2898 uint32 rid)
2899 {
2903 uint32 num_members;
2913 domain_pol,
2914 MAXIMUM_ALLOWED_ACCESS,
2915 rid,
2920 }
2923 }
2932 }
2936 }
2942 }
2951 }
2960 }
2967 }
2971 }
2982 }
2985 fstring sid_str;
2995 else
2997 }
2998 }
3002 }
3012 {
3019 /* Get sam policy handle */
3023 MAXIMUM_ALLOWED_ACCESS,
3028 }
3031 }
3033 /* Get domain policy handle */
3037 MAXIMUM_ALLOWED_ACCESS,
3043 }
3046 }
3059 }
3063 /* Ok, did not find it in the global sam, try with builtin */
3073 MAXIMUM_ALLOWED_ACCESS,
3079 }
3084 }
3095 }
3100 }
3101 }
3107 }
3113 }
3118 }
3121 }
3124 {
3127 }
3130 rpc_group_members_internals,
3132 }
3135 {
3136 NET_API_STATUS status;
3144 }
3157 status));
3159 }
3162 }
3165 {
3168 }
3171 }
3173 /**
3174 * 'net rpc group' entrypoint.
3175 * @param argc Standard main() style argc.
3176 * @param argv Standard main() style argv. Initial components are already
3177 * stripped.
3178 **/
3181 {
3182 NET_API_STATUS status;
3185 {
3187 rpc_group_add,
3188 NET_TRANSPORT_RPC,
3192 },
3193 {
3195 rpc_group_delete,
3196 NET_TRANSPORT_RPC,
3200 },
3201 {
3203 rpc_group_addmem,
3204 NET_TRANSPORT_RPC,
3208 },
3209 {
3211 rpc_group_delmem,
3212 NET_TRANSPORT_RPC,
3216 },
3217 {
3219 rpc_group_list,
3220 NET_TRANSPORT_RPC,
3224 },
3225 {
3227 rpc_group_members,
3228 NET_TRANSPORT_RPC,
3232 },
3233 {
3235 rpc_group_rename,
3236 NET_TRANSPORT_RPC,
3240 },
3242 };
3247 }
3252 }
3258 " Alias for net rpc group list global "
3262 }
3265 rpc_group_list_internals,
3267 }
3270 }
3272 /****************************************************************************/
3275 {
3277 }
3279 /**
3280 * Add a share on a remote RPC server.
3281 *
3282 * @param argc Standard main() style argc.
3283 * @param argv Standard main() style argv. Initial components are already
3284 * stripped.
3285 *
3286 * @return A shell status integer (0 for success).
3287 **/
3290 {
3291 NET_API_STATUS status;
3302 }
3306 }
3311 }
3331 }
3334 }
3336 /**
3337 * Delete a share on a remote RPC server.
3338 *
3339 * @param domain_sid The domain sid acquired from the remote server.
3340 * @param argc Standard main() style argc.
3341 * @param argv Standard main() style argv. Initial components are already
3342 * stripped.
3343 *
3344 * @return A shell status integer (0 for success).
3345 **/
3347 {
3350 }
3353 }
3355 /**
3356 * Formatted print of share info
3357 *
3358 * @param r pointer to SHARE_INFO_1 to format
3359 **/
3363 {
3371 }
3372 }
3377 uint32 level,
3381 {
3382 WERROR result;
3383 NTSTATUS status;
3387 /* no specific share requested, enumerate all */
3398 info_ctr,
3399 preferred_len,
3405 }
3407 }
3409 /* request just one share */
3413 level,
3420 }
3424 }
3426 /* construct ctr */
3433 {
3445 }
3447 {
3459 }
3461 {
3473 }
3475 done:
3477 }
3479 /***
3480 * 'net rpc share list' entrypoint.
3481 * @param argc Standard main() style argc.
3482 * @param argv Standard main() style argv. Initial components are already
3483 * stripped.
3484 **/
3486 {
3487 NET_API_STATUS status;
3501 }
3504 level,
3512 }
3514 /* Display results */
3521 }
3524 done:
3526 }
3529 {
3530 NTSTATUS status;
3536 }
3542 }
3545 }
3549 {
3550 /* only support disk shares */
3553 type);
3555 }
3557 /* skip builtin shares */
3558 /* FIXME: should print$ be added too ? */
3566 }
3569 }
3571 /**
3572 * Migrate shares from a remote RPC server to the local RPC server.
3573 *
3574 * All parameters are provided by the run_rpc_command function, except for
3575 * argc, argv which are passed through.
3576 *
3577 * @param domain_sid The domain sid acquired from the remote server.
3578 * @param cli A cli_state connected to the server.
3579 * @param mem_ctx Talloc context, destroyed on completion of the function.
3580 * @param argc Standard main() style argc.
3581 * @param argv Standard main() style argv. Initial components are already
3582 * stripped.
3583 *
3584 * @return Normal NTSTATUS return.
3585 **/
3595 {
3596 WERROR result;
3599 uint32 i;
3611 /* connect destination PI_SRVSVC */
3625 /* reset error-code */
3631 /* finally add the share on the dst server */
3649 }
3654 }
3661 }
3663 }
3667 done:
3670 }
3674 }
3676 /**
3677 * Migrate shares from a RPC server to another.
3678 *
3679 * @param argc Standard main() style argc.
3680 * @param argv Standard main() style argv. Initial components are already
3681 * stripped.
3682 *
3683 * @return A shell status integer (0 for success).
3684 **/
3687 {
3695 }
3700 }
3703 rpc_share_migrate_shares_internals,
3705 }
3707 /**
3708 * Copy a file/dir
3709 *
3710 * @param f file_info
3711 * @param mask current search mask
3712 * @param state arg-pointer
3713 *
3714 **/
3717 {
3721 fstring dir;
3735 /* DIRECTORY */
3745 {
3747 /* create that directory */
3760 }
3766 }
3768 /* search below that directory */
3777 }
3781 }
3784 /* FILE */
3792 {
3805 net_mode_share);
3807 }
3813 }
3815 /**
3816 * sync files, can be called recursivly to list files
3817 * and then call copy_fn for each file
3818 *
3819 * @param cp_clistate pointer to the copy_clistate we work with
3820 * @param mask the current search mask
3821 *
3822 * @return Boolean result
3823 **/
3825 {
3828 NTSTATUS status;
3840 }
3847 }
3850 }
3853 /**
3854 * Set the top level directory permissions before we do any further copies.
3855 * Should set up ACL inheritance.
3856 **/
3861 {
3880 }
3887 }
3890 }
3892 /**
3893 * Sync all files inside a remote share to another share (over smb).
3894 *
3895 * All parameters are provided by the run_rpc_command function, except for
3896 * argc, argv which are passed through.
3897 *
3898 * @param domain_sid The domain sid acquired from the remote server.
3899 * @param cli A cli_state connected to the server.
3900 * @param mem_ctx Talloc context, destroyed on completion of the function.
3901 * @param argc Standard main() style argc.
3902 * @param argv Standard main() style argv. Initial components are already
3903 * stripped.
3904 *
3905 * @return Normal NTSTATUS return.
3906 **/
3916 {
3917 WERROR result;
3920 uint32 i;
3932 }
3948 /* one might not want to mirror whole discs :) */
3953 }
3956 {
3962 net_mode_share);
3964 }
3976 cp_clistate.attribute = FILE_ATTRIBUTE_SYSTEM | FILE_ATTRIBUTE_HIDDEN | FILE_ATTRIBUTE_DIRECTORY;
3979 /* open share source */
3990 /* open share destination */
3997 }
4001 "directory permissions for the "
4005 }
4012 }
4013 }
4017 done:
4028 }
4031 {
4039 }
4044 }
4047 rpc_share_migrate_files_internals,
4049 }
4051 /**
4052 * Migrate share-ACLs from a remote RPC server to the local RPC server.
4053 *
4054 * All parameters are provided by the run_rpc_command function, except for
4055 * argc, argv which are passed through.
4056 *
4057 * @param domain_sid The domain sid acquired from the remote server.
4058 * @param cli A cli_state connected to the server.
4059 * @param mem_ctx Talloc context, destroyed on completion of the function.
4060 * @param argc Standard main() style argc.
4061 * @param argv Standard main() style argv. Initial components are already
4062 * stripped.
4063 *
4064 * @return Normal NTSTATUS return.
4065 **/
4075 {
4076 WERROR result;
4080 uint32 i;
4093 /* connect destination PI_SRVSVC */
4106 /* reset error-code */
4119 /* FIXME: shouldn't we be able to just set the security descriptor ? */
4122 /* finally modify the share on the dst server */
4126 level,
4134 }
4140 }
4142 }
4146 done:
4149 }
4153 }
4155 /**
4156 * Migrate share-acls from a RPC server to another.
4157 *
4158 * @param argc Standard main() style argc.
4159 * @param argv Standard main() style argv. Initial components are already
4160 * stripped.
4161 *
4162 * @return A shell status integer (0 for success).
4163 **/
4166 {
4174 }
4179 }
4182 rpc_share_migrate_security_internals,
4184 }
4186 /**
4187 * Migrate shares (including share-definitions, share-acls and files with acls/attrs)
4188 * from one server to another.
4189 *
4190 * @param argc Standard main() style argc.
4191 * @param argv Standard main() style argv. Initial components are already
4192 * stripped.
4193 *
4194 * @return A shell status integer (0 for success).
4195 *
4196 **/
4199 {
4209 }
4214 }
4216 /* order is important. we don't want to be locked out by the share-acl
4217 * before copying files - gd */
4231 argv);
4232 }
4235 /**
4236 * 'net rpc share migrate' entrypoint.
4237 * @param argc Standard main() style argc.
4238 * @param argv Standard main() style argv. Initial components are already
4239 * stripped.
4240 **/
4242 {
4245 {
4247 rpc_share_migrate_all,
4248 NET_TRANSPORT_RPC,
4252 },
4253 {
4255 rpc_share_migrate_files,
4256 NET_TRANSPORT_RPC,
4260 },
4261 {
4263 rpc_share_migrate_security,
4264 NET_TRANSPORT_RPC,
4268 },
4269 {
4271 rpc_share_migrate_shares,
4272 NET_TRANSPORT_RPC,
4276 },
4278 };
4283 }
4287 uint32 num_members;
4289 };
4294 /*
4295 * Add an alias to the static list.
4296 */
4298 {
4304 }
4306 /*
4307 * For a specific domain on the server, fetch all the aliases
4308 * and their members. Add all of them to the server_aliases.
4309 */
4315 {
4322 /* Get domain policy handle */
4325 connect_pol,
4326 MAXIMUM_ALLOWED_ACCESS,
4332 }
4335 }
4345 max_entries,
4350 }
4357 NTSTATUS _result;
4361 MAXIMUM_ALLOWED_ACCESS,
4367 }
4371 }
4379 }
4383 }
4390 }
4394 }
4404 }
4410 }
4415 done:
4419 }
4421 /*
4422 * Dump server_aliases as names for debugging purposes.
4423 */
4433 {
4435 NTSTATUS result;
4440 SEC_FLAG_MAXIMUM_ALLOWED,
4464 }
4480 }
4485 }
4487 /*
4488 * Fetch a list of all server aliases and their members into
4489 * server_aliases.
4490 */
4500 {
4507 MAXIMUM_ALLOWED_ACCESS,
4512 }
4516 }
4522 }
4525 domain_sid);
4528 done:
4530 }
4533 {
4540 }
4546 }
4549 {
4551 }
4554 {
4561 }
4566 }
4569 fstring name;
4571 };
4574 {
4581 }
4582 }
4585 {
4591 }
4594 }
4597 {
4603 }
4604 }
4606 /*
4607 * We got a user token with all the SIDs we can know about without asking the
4608 * server directly. These are the user and domain group sids. All of these can
4609 * be members of aliases. So scan the list of aliases for each of the SIDs and
4610 * add them to the token.
4611 */
4614 {
4620 }
4621 }
4624 {
4627 fstring full_name;
4638 /* First let's find out the user sid */
4646 }
4653 }
4658 }
4662 /* And now the groups winbind knows about */
4669 }
4681 }
4689 }
4693 }
4695 /**
4696 * Get a list of all user tokens we want to look at
4697 **/
4701 {
4713 }
4715 /* Send request to winbind daemon */
4722 }
4730 }
4751 }
4754 }
4762 }
4767 {
4771 fstring line;
4775 }
4779 }
4782 /* We have a SID */
4789 }
4794 }
4798 }
4800 /* And a new user... */
4807 }
4815 }
4818 }
4821 /*
4822 * Show the list of all users that have access to a share
4823 */
4830 {
4837 WERROR result;
4838 NTSTATUS status;
4839 uint16 cnum;
4844 netname,
4851 netname));
4853 }
4858 netname));
4859 }
4865 }
4870 }
4873 uint32 acc_granted;
4884 }
4885 }
4890 }
4898 }
4900 }
4908 }
4913 };
4917 {
4928 }
4930 }
4932 /**
4933 * List shares on a remote RPC server, including the security descriptors.
4934 *
4935 * All parameters are provided by the run_rpc_command function, except for
4936 * argc, argv which are passed through.
4937 *
4938 * @param domain_sid The domain sid acquired from the remote server.
4939 * @param cli A cli_state connected to the server.
4940 * @param mem_ctx Talloc context, destroyed on completion of the function.
4941 * @param argc Standard main() style argc.
4942 * @param argv Standard main() style argv. Initial components are already
4943 * stripped.
4944 *
4945 * @return Normal NTSTATUS return.
4946 **/
4956 {
4959 uint32 i;
4971 }
4976 }
4986 }
5000 }
5012 }
5013 done:
5016 }
5021 }
5025 {
5035 }
5038 rpc_aliaslist_internals,
5044 rpc_aliaslist_dump,
5050 rpc_share_allowedusers_internals,
5052 }
5055 {
5063 }
5068 }
5073 }
5077 }
5080 {
5088 }
5090 /**
5091 * 'net rpc share' entrypoint.
5092 * @param argc Standard main() style argc.
5093 * @param argv Standard main() style argv. Initial components are already
5094 * stripped.
5095 **/
5098 {
5099 NET_API_STATUS status;
5102 {
5104 rpc_share_add,
5105 NET_TRANSPORT_RPC,
5109 },
5110 {
5112 rpc_share_delete,
5113 NET_TRANSPORT_RPC,
5117 },
5118 {
5120 rpc_share_allowedusers,
5121 NET_TRANSPORT_RPC,
5125 },
5126 {
5128 rpc_share_migrate,
5129 NET_TRANSPORT_RPC,
5133 },
5134 {
5136 rpc_share_list,
5137 NET_TRANSPORT_RPC,
5141 },
5143 };
5148 }
5153 }
5164 }
5167 }
5170 }
5177 {
5180 }
5187 {
5188 NET_API_STATUS status;
5196 }
5213 }
5220 {
5224 }
5227 }
5234 {
5236 WERROR result;
5237 NTSTATUS status;
5243 }
5254 }
5257 }
5264 done:
5266 }
5270 {
5286 };
5289 }
5291 /****************************************************************************/
5294 {
5296 }
5298 /**
5299 * Close a file on a remote RPC server.
5300 *
5301 * @param argc Standard main() style argc.
5302 * @param argv Standard main() style argv. Initial components are already
5303 * stripped.
5304 *
5305 * @return A shell status integer (0 for success).
5306 **/
5308 {
5311 }
5314 }
5316 /**
5317 * Formatted print of open file info
5318 *
5319 * @param r struct FILE_INFO_3 contents
5320 **/
5323 {
5327 }
5329 /**
5330 * List files for a user on a remote RPC server.
5331 *
5332 * @param argc Standard main() style argc.
5333 * @param argv Standard main() style argv. Initial components are already
5334 * stripped.
5335 *
5336 * @return A shell status integer (0 for success)..
5337 **/
5340 {
5341 NET_API_STATUS status;
5351 }
5353 /* if argc > 0, must be user command */
5356 }
5359 NULL,
5360 username,
5363 preferred_len,
5370 }
5372 /* Display results */
5380 }
5381 done:
5383 }
5385 /**
5386 * 'net rpc file' entrypoint.
5387 * @param argc Standard main() style argc.
5388 * @param argv Standard main() style argv. Initial components are already
5389 * stripped.
5390 **/
5393 {
5394 NET_API_STATUS status;
5397 {
5399 rpc_file_close,
5400 NET_TRANSPORT_RPC,
5404 },
5405 {
5407 rpc_file_user,
5408 NET_TRANSPORT_RPC,
5412 },
5413 #if 0
5414 {
5416 rpc_file_info,
5417 NET_TRANSPORT_RPC,
5421 },
5422 #endif
5424 };
5429 }
5434 }
5443 }
5446 }
5449 }
5451 /**
5452 * ABORT the shutdown of a remote RPC Server, over initshutdown pipe.
5453 *
5454 * All parameters are provided by the run_rpc_command function, except for
5455 * argc, argv which are passed through.
5456 *
5457 * @param c A net_context structure.
5458 * @param domain_sid The domain sid acquired from the remote server.
5459 * @param cli A cli_state connected to the server.
5460 * @param mem_ctx Talloc context, destroyed on completion of the function.
5461 * @param argc Standard main() style argc.
5462 * @param argv Standard main() style argv. Initial components are already
5463 * stripped.
5464 *
5465 * @return Normal NTSTATUS return.
5466 **/
5476 {
5478 WERROR result;
5484 }
5492 }
5494 /**
5495 * ABORT the shutdown of a remote RPC Server, over winreg pipe.
5496 *
5497 * All parameters are provided by the run_rpc_command function, except for
5498 * argc, argv which are passed through.
5499 *
5500 * @param c A net_context structure.
5501 * @param domain_sid The domain sid acquired from the remote server.
5502 * @param cli A cli_state connected to the server.
5503 * @param mem_ctx Talloc context, destroyed on completion of the function.
5504 * @param argc Standard main() style argc.
5505 * @param argv Standard main() style argv. Initial components are already
5506 * stripped.
5507 *
5508 * @return Normal NTSTATUS return.
5509 **/
5519 {
5521 WERROR werr;
5529 }
5537 }
5539 /**
5540 * ABORT the shutdown of a remote RPC server.
5541 *
5542 * @param argc Standard main() style argc.
5543 * @param argv Standard main() style argv. Initial components are already
5544 * stripped.
5545 *
5546 * @return A shell status integer (0 for success).
5547 **/
5551 {
5561 }
5572 rpc_reg_shutdown_abort_internals,
5574 }
5576 /**
5577 * Shut down a remote RPC Server via initshutdown pipe.
5578 *
5579 * All parameters are provided by the run_rpc_command function, except for
5580 * argc, argv which are passed through.
5581 *
5582 * @param c A net_context structure.
5583 * @param domain_sid The domain sid acquired from the remote server.
5584 * @param cli A cli_state connected to the server.
5585 * @param mem_ctx Talloc context, destroyed on completion of the function.
5586 * @param argc Standard main() style argc.
5587 * @param argv Standard main() style argv. Initial components are already
5588 * stripped.
5589 *
5590 * @return Normal NTSTATUS return.
5591 **/
5601 {
5603 WERROR result;
5611 }
5614 }
5618 /* create an entry */
5624 }
5630 }
5632 }
5634 /**
5635 * Shut down a remote RPC Server via winreg pipe.
5636 *
5637 * All parameters are provided by the run_rpc_command function, except for
5638 * argc, argv which are passed through.
5639 *
5640 * @param c A net_context structure.
5641 * @param domain_sid The domain sid acquired from the remote server.
5642 * @param cli A cli_state connected to the server.
5643 * @param mem_ctx Talloc context, destroyed on completion of the function.
5644 * @param argc Standard main() style argc.
5645 * @param argv Standard main() style argv. Initial components are already
5646 * stripped.
5647 *
5648 * @return Normal NTSTATUS return.
5649 **/
5659 {
5663 NTSTATUS result;
5664 WERROR werr;
5669 }
5674 }
5676 /* create an entry */
5683 }
5691 else
5693 }
5696 }
5698 /**
5699 * Shut down a remote RPC server.
5700 *
5701 * @param argc Standard main() style argc.
5702 * @param argv Standard main() style argv. Initial components are already
5703 * stripped.
5704 *
5705 * @return A shell status integer (0 for success).
5706 **/
5709 {
5719 }
5728 }
5731 }
5733 /***************************************************************************
5734 NT Domain trusts code (i.e. 'net rpc trustdom' functionality)
5735 ***************************************************************************/
5737 /**
5738 * Add interdomain trust account to the RPC server.
5739 * All parameters (except for argc and argv) are passed by run_rpc_command
5740 * function.
5741 *
5742 * @param c A net_context structure.
5743 * @param domain_sid The domain sid acquired from the server.
5744 * @param cli A cli_state connected to the server.
5745 * @param mem_ctx Talloc context, destroyed on completion of the function.
5746 * @param argc Standard main() style argc.
5747 * @param argv Standard main() style argv. Initial components are already
5748 * stripped.
5749 *
5750 * @return normal NTSTATUS return code.
5751 */
5761 {
5766 uint32 acb_info;
5768 uint32 user_rid;
5780 }
5782 /*
5783 * Make valid trusting domain account (ie. uppercased and with '$' appended)
5784 */
5788 }
5794 /* Get samr policy handle */
5797 MAXIMUM_ALLOWED_ACCESS,
5802 }
5806 }
5808 /* Get domain policy handle */
5811 MAXIMUM_ALLOWED_ACCESS,
5817 }
5821 }
5823 /* This call can take a long time - allow the server to time out.
5824 * 35 seconds should do it. */
5828 /* Create trusting domain's account */
5832 SAMR_USER_ACCESS_SET_PASSWORD |
5833 SAMR_USER_ACCESS_GET_ATTRIBUTES |
5834 SAMR_USER_ACCESS_SET_ATTRIBUTES;
5839 acb_info,
5840 acct_flags,
5847 }
5848 /* And restore our original timeout. */
5856 }
5858 {
5868 SAMR_FIELD_NT_PASSWORD_PRESENT;
5879 }
5886 }
5887 }
5889 done:
5892 }
5894 /**
5895 * Create interdomain trust account for a remote domain.
5896 *
5897 * @param argc Standard argc.
5898 * @param argv Standard argv without initial components.
5899 *
5900 * @return Integer status (0 means success).
5901 **/
5904 {
5914 }
5915 }
5918 /**
5919 * Remove interdomain trust account from the RPC server.
5920 * All parameters (except for argc and argv) are passed by run_rpc_command
5921 * function.
5922 *
5923 * @param c A net_context structure.
5924 * @param domain_sid The domain sid acquired from the server.
5925 * @param cli A cli_state connected to the server.
5926 * @param mem_ctx Talloc context, destroyed on completion of the function.
5927 * @param argc Standard main() style argc.
5928 * @param argv Standard main() style argv. Initial components are already
5929 * stripped.
5930 *
5931 * @return normal NTSTATUS return code.
5932 */
5942 {
5956 }
5958 /*
5959 * Make valid trusting domain account (ie. uppercased and with '$' appended)
5960 */
5968 /* Get samr policy handle */
5971 MAXIMUM_ALLOWED_ACCESS,
5976 }
5980 }
5982 /* Get domain policy handle */
5985 MAXIMUM_ALLOWED_ACCESS,
5991 }
5995 }
6011 }
6018 }
6022 MAXIMUM_ALLOWED_ACCESS,
6031 }
6039 }
6041 /* append the rid to the domain sid */
6044 }
6046 /* remove the sid */
6057 }
6064 }
6067 /* Delete user */
6077 }
6085 }
6091 }
6093 done:
6095 }
6097 /**
6098 * Delete interdomain trust account for a remote domain.
6099 *
6100 * @param argc Standard argc.
6101 * @param argv Standard argv without initial components.
6102 *
6103 * @return Integer status (0 means success).
6104 **/
6107 {
6116 }
6117 }
6123 {
6127 NTSTATUS status;
6128 WERROR result;
6131 /* Use NetServerEnum2 */
6136 }
6141 /* Try netr_GetDcName */
6147 }
6153 domain_name,
6160 }
6167 }
6170 }
6172 /**
6173 * Establish trust relationship to a trusting domain.
6174 * Interdomain account must already be created on remote PDC.
6175 *
6176 * @param c A net_context structure.
6177 * @param argc Standard argc.
6178 * @param argv Standard argv without initial components.
6179 *
6180 * @return Integer status (0 means success).
6181 **/
6185 {
6196 fstring pdc_name;
6200 /*
6201 * Connect to \\server\ipc$ as 'our domain' account with password
6202 */
6209 }
6214 /* account name used at first is our domain's name with '$' */
6217 }
6220 /*
6221 * opt_workgroup will be used by connection functions further,
6222 * hence it should be set to remote domain name instead of ours
6223 */
6226 };
6230 /* find the domain controller */
6234 }
6236 /* connect to ipc$ as username/password */
6240 /* Is it trusting domain account for sure ? */
6244 }
6246 /* store who we connected to */
6250 /*
6251 * Connect to \\server\ipc$ again (this time anonymously)
6252 */
6261 }
6268 }
6270 /* Make sure we're talking to a proper server */
6277 }
6279 /*
6280 * Call LsaOpenPolicy and LsaQueryInfo
6281 */
6290 }
6302 }
6304 /* Querying info level 5 */
6308 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6317 }
6324 }
6328 /* There should be actually query info level 3 (following nt serv behaviour),
6329 but I still don't know if it's _really_ necessary */
6331 /*
6332 * Store the password in secrets db
6333 */
6340 }
6342 /*
6343 * Close the pipes and clean up
6344 */
6353 }
6361 }
6363 /**
6364 * Revoke trust relationship to the remote domain.
6365 *
6366 * @param c A net_context structure.
6367 * @param argc Standard argc.
6368 * @param argv Standard argv without initial components.
6369 *
6370 * @return Integer status (0 means success).
6371 **/
6375 {
6386 }
6388 /* generate upper cased domain name */
6392 /* delete password of the trust */
6395 domain_name));
6397 };
6400 done:
6403 }
6413 {
6414 fstring str_sid;
6417 }
6420 }
6423 {
6424 fstring ascii_sid;
6426 /* convert sid into ascii string */
6430 }
6437 {
6441 DATA_BLOB session_key;
6446 pol,
6448 LSA_TRUSTED_DOMAIN_INFO_PASSWORD,
6455 }
6461 }
6470 }
6479 }
6485 }
6487 #ifdef DEBUG_PASSWORD
6491 #endif
6493 done:
6498 }
6502 {
6503 /* common variables */
6512 /* trusted domains listing variables */
6516 fstring pdc_name;
6526 }
6528 /*
6529 * Listing trusted domains (stored in secrets.tdb, if local)
6530 */
6534 /*
6535 * set domain and pdc name to local samba server (default)
6536 * or to remote one given in command line
6537 */
6546 };
6548 /* open \PIPE\lsarpc and open policy handle */
6555 };
6565 };
6577 };
6579 /* query info level 5 to obtain sid of a domain being queried */
6582 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6592 }
6599 }
6601 /*
6602 * Keep calling LsaEnumTrustdom over opened pipe until
6603 * the end of enumeration is reached
6604 */
6621 };
6629 };
6644 }
6645 };
6647 /*
6648 * in case of no trusted domains say something rather
6649 * than just display blank line
6650 */
6655 /* close this connection before doing next one */
6663 };
6665 /* close lsarpc pipe and connection to IPC$ */
6670 }
6673 {
6674 /* common variables */
6686 /* trusted domains listing variables */
6690 fstring pdc_name;
6693 /* trusting domains listing variables */
6704 }
6706 /*
6707 * Listing trusted domains (stored in secrets.tdb, if local)
6708 */
6712 /*
6713 * set domain and pdc name to local samba server (default)
6714 * or to remote one given in command line
6715 */
6724 };
6726 /* open \PIPE\lsarpc and open policy handle */
6733 };
6743 };
6755 };
6757 /* query info level 5 to obtain sid of a domain being queried */
6760 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6770 }
6777 }
6781 /*
6782 * Keep calling LsaEnumTrustdom over opened pipe until
6783 * the end of enumeration is reached
6784 */
6803 };
6810 };
6817 };
6822 /*
6823 * in case of no trusted domains say something rather
6824 * than just display blank line
6825 */
6828 }
6830 /* close this connection before doing next one */
6838 };
6842 /*
6843 * Listing trusting domains (stored in passdb backend, if local)
6844 */
6848 /*
6849 * Open \PIPE\samr and get needed policy handles
6850 */
6858 };
6862 /* SamrConnect2 */
6865 SAMR_ACCESS_LOOKUP_DOMAIN,
6874 };
6882 };
6884 /* SamrOpenDomain - we have to open domain policy handle in order to be
6885 able to enumerate accounts*/
6888 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS,
6889 queried_dom_sid,
6898 };
6906 };
6908 /*
6909 * perform actual enumeration
6910 */
6920 ACB_DOMTRUST,
6931 };
6939 };
6947 /*
6948 * get each single domain's sid (do we _really_ need this ?):
6949 * 1) connect to domain's pdc
6950 * 2) query the pdc for domain's sid
6951 */
6953 /* get rid of '$' tail */
6958 /* set opt_* variables to remote domain */
6965 /* connect to remote domain controller */
6970 /* query for domain's sid */
6975 argv))
6985 }
6986 }
6992 }
6994 /* close opened samr and domain policy handles */
6998 };
7003 };
7005 /* close samr pipe and connection to IPC$ */
7010 }
7012 /**
7013 * Entrypoint for 'net rpc trustdom' code.
7014 *
7015 * @param argc Standard argc.
7016 * @param argv Standard argv without initial components.
7017 *
7018 * @return Integer status (0 means success).
7019 */
7022 {
7024 {
7026 rpc_trustdom_add,
7027 NET_TRANSPORT_RPC,
7031 },
7032 {
7034 rpc_trustdom_del,
7035 NET_TRANSPORT_RPC,
7039 },
7040 {
7042 rpc_trustdom_establish,
7043 NET_TRANSPORT_RPC,
7047 },
7048 {
7050 rpc_trustdom_revoke,
7051 NET_TRANSPORT_RPC,
7055 },
7056 {
7058 rpc_trustdom_list,
7059 NET_TRANSPORT_RPC,
7063 },
7064 {
7066 rpc_trustdom_vampire,
7067 NET_TRANSPORT_RPC,
7071 },
7073 };
7076 }
7078 /**
7079 * Check if a server will take rpc commands
7080 * @param flags Type of server to connect to (PDC, DMB, localhost)
7081 * if the host is not explicitly specified
7082 * @return bool (true means rpc supported)
7083 */
7085 {
7090 NTSTATUS status;
7092 /* flags (i.e. server type) may depend on command */
7101 }
7109 done:
7112 }
7114 /* dump sam database via samsync rpc calls */
7123 }
7126 NET_FLAGS_ANONYMOUS,
7128 }
7130 /* syncronise sam database via samsync rpc calls */
7132 {
7134 {
7136 rpc_vampire_ldif,
7137 NET_TRANSPORT_RPC,
7140 " Dump remote SAM database to LDIF file or "
7142 },
7143 {
7145 rpc_vampire_keytab,
7146 NET_TRANSPORT_RPC,
7149 " Dump remote SAM database to Kerberos keytab "
7151 },
7152 {
7154 rpc_vampire_passdb,
7155 NET_TRANSPORT_RPC,
7159 },
7162 };
7172 }
7175 }
7178 }
7180 /**
7181 * Migrate everything from a print server.
7182 *
7183 * @param c A net_context structure.
7184 * @param argc Standard main() style argc.
7185 * @param argv Standard main() style argv. Initial components are already
7186 * stripped.
7187 *
7188 * @return A shell status integer (0 for success).
7189 *
7190 * The order is important !
7191 * To successfully add drivers the print queues have to exist !
7192 * Applying ACLs should be the last step, because you're easily locked out.
7193 *
7194 **/
7197 {
7207 }
7212 }
7216 argv);
7222 argv);
7233 argv);
7239 argv);
7241 }
7243 /**
7244 * Migrate print drivers from a print server.
7245 *
7246 * @param c A net_context structure.
7247 * @param argc Standard main() style argc.
7248 * @param argv Standard main() style argv. Initial components are already
7249 * stripped.
7250 *
7251 * @return A shell status integer (0 for success).
7252 **/
7255 {
7263 }
7268 }
7271 rpc_printer_migrate_drivers_internals,
7273 }
7275 /**
7276 * Migrate print-forms from a print-server.
7277 *
7278 * @param c A net_context structure.
7279 * @param argc Standard main() style argc.
7280 * @param argv Standard main() style argv. Initial components are already
7281 * stripped.
7282 *
7283 * @return A shell status integer (0 for success).
7284 **/
7287 {
7295 }
7300 }
7303 rpc_printer_migrate_forms_internals,
7305 }
7307 /**
7308 * Migrate printers from a print-server.
7309 *
7310 * @param c A net_context structure.
7311 * @param argc Standard main() style argc.
7312 * @param argv Standard main() style argv. Initial components are already
7313 * stripped.
7314 *
7315 * @return A shell status integer (0 for success).
7316 **/
7319 {
7327 }
7332 }
7335 rpc_printer_migrate_printers_internals,
7337 }
7339 /**
7340 * Migrate printer-ACLs from a print-server
7341 *
7342 * @param c A net_context structure.
7343 * @param argc Standard main() style argc.
7344 * @param argv Standard main() style argv. Initial components are already
7345 * stripped.
7346 *
7347 * @return A shell status integer (0 for success).
7348 **/
7351 {
7359 }
7364 }
7367 rpc_printer_migrate_security_internals,
7369 }
7371 /**
7372 * Migrate printer-settings from a print-server.
7373 *
7374 * @param c A net_context structure.
7375 * @param argc Standard main() style argc.
7376 * @param argv Standard main() style argv. Initial components are already
7377 * stripped.
7378 *
7379 * @return A shell status integer (0 for success).
7380 **/
7383 {
7392 }
7397 }
7400 rpc_printer_migrate_settings_internals,
7402 }
7404 /**
7405 * 'net rpc printer' entrypoint.
7406 *
7407 * @param c A net_context structure.
7408 * @param argc Standard main() style argc.
7409 * @param argv Standard main() style argv. Initial components are already
7410 * stripped.
7411 **/
7414 {
7416 /* ouch: when addriver and setdriver are called from within
7417 rpc_printer_migrate_drivers_internals, the printer-queue already
7418 *has* to exist */
7421 {
7423 rpc_printer_migrate_all,
7424 NET_TRANSPORT_RPC,
7428 },
7429 {
7431 rpc_printer_migrate_drivers,
7432 NET_TRANSPORT_RPC,
7436 },
7437 {
7439 rpc_printer_migrate_forms,
7440 NET_TRANSPORT_RPC,
7444 },
7445 {
7447 rpc_printer_migrate_printers,
7448 NET_TRANSPORT_RPC,
7452 },
7453 {
7455 rpc_printer_migrate_security,
7456 NET_TRANSPORT_RPC,
7460 },
7461 {
7463 rpc_printer_migrate_settings,
7464 NET_TRANSPORT_RPC,
7468 },
7470 };
7473 }
7476 /**
7477 * List printers on a remote RPC server.
7478 *
7479 * @param c A net_context structure.
7480 * @param argc Standard main() style argc.
7481 * @param argv Standard main() style argv. Initial components are already
7482 * stripped.
7483 *
7484 * @return A shell status integer (0 for success).
7485 **/
7487 {
7495 }
7498 rpc_printer_list_internals,
7500 }
7502 /**
7503 * List printer-drivers on a remote RPC server.
7504 *
7505 * @param c A net_context structure.
7506 * @param argc Standard main() style argc.
7507 * @param argv Standard main() style argv. Initial components are already
7508 * stripped.
7509 *
7510 * @return A shell status integer (0 for success).
7511 **/
7514 {
7522 }
7525 rpc_printer_driver_list_internals,
7527 }
7529 /**
7530 * Publish printer in ADS via MSRPC.
7531 *
7532 * @param c A net_context structure.
7533 * @param argc Standard main() style argc.
7534 * @param argv Standard main() style argv. Initial components are already
7535 * stripped.
7536 *
7537 * @return A shell status integer (0 for success).
7538 **/
7541 {
7549 }
7552 rpc_printer_publish_publish_internals,
7554 }
7556 /**
7557 * Update printer in ADS via MSRPC.
7558 *
7559 * @param c A net_context structure.
7560 * @param argc Standard main() style argc.
7561 * @param argv Standard main() style argv. Initial components are already
7562 * stripped.
7563 *
7564 * @return A shell status integer (0 for success).
7565 **/
7567 {
7575 }
7578 rpc_printer_publish_update_internals,
7580 }
7582 /**
7583 * UnPublish printer in ADS via MSRPC.
7584 *
7585 * @param c A net_context structure.
7586 * @param argc Standard main() style argc.
7587 * @param argv Standard main() style argv. Initial components are already
7588 * stripped.
7589 *
7590 * @return A shell status integer (0 for success).
7591 **/
7594 {
7602 }
7605 rpc_printer_publish_unpublish_internals,
7607 }
7609 /**
7610 * List published printers via MSRPC.
7611 *
7612 * @param c A net_context structure.
7613 * @param argc Standard main() style argc.
7614 * @param argv Standard main() style argv. Initial components are already
7615 * stripped.
7616 *
7617 * @return A shell status integer (0 for success).
7618 **/
7621 {
7629 }
7632 rpc_printer_publish_list_internals,
7634 }
7637 /**
7638 * Publish printer in ADS.
7639 *
7640 * @param c A net_context structure.
7641 * @param argc Standard main() style argc.
7642 * @param argv Standard main() style argv. Initial components are already
7643 * stripped.
7644 *
7645 * @return A shell status integer (0 for success).
7646 **/
7649 {
7652 {
7654 rpc_printer_publish_publish,
7655 NET_TRANSPORT_RPC,
7659 },
7660 {
7662 rpc_printer_publish_update,
7663 NET_TRANSPORT_RPC,
7667 },
7668 {
7670 rpc_printer_publish_unpublish,
7671 NET_TRANSPORT_RPC,
7675 },
7676 {
7678 rpc_printer_publish_list,
7679 NET_TRANSPORT_RPC,
7683 },
7685 };
7692 " Alias of net rpc printer publish "
7696 }
7698 rpc_printer_publish_list_internals,
7700 }
7704 }
7707 /**
7708 * Display rpc printer help page.
7709 *
7710 * @param c A net_context structure.
7711 * @param argc Standard main() style argc.
7712 * @param argv Standard main() style argv. Initial components are already
7713 * stripped.
7714 **/
7716 {
7744 }
7746 /**
7747 * 'net rpc printer' entrypoint.
7748 *
7749 * @param c A net_context structure.
7750 * @param argc Standard main() style argc.
7751 * @param argv Standard main() style argv. Initial components are already
7752 * stripped.
7753 **/
7755 {
7757 {
7759 rpc_printer_list,
7760 NET_TRANSPORT_RPC,
7764 },
7765 {
7767 rpc_printer_migrate,
7768 NET_TRANSPORT_RPC,
7772 },
7773 {
7775 rpc_printer_driver_list,
7776 NET_TRANSPORT_RPC,
7780 },
7781 {
7783 rpc_printer_publish,
7784 NET_TRANSPORT_RPC,
7788 },
7790 };
7799 }
7801 rpc_printer_list_internals,
7803 }
7806 }
7808 /**
7809 * 'net rpc' entrypoint.
7810 *
7811 * @param c A net_context structure.
7812 * @param argc Standard main() style argc.
7813 * @param argv Standard main() style argv. Initial components are already
7814 * stripped.
7815 **/
7818 {
7819 NET_API_STATUS status;
7822 {
7824 net_rpc_audit,
7825 NET_TRANSPORT_RPC,
7829 },
7830 {
7832 net_rpc_info,
7833 NET_TRANSPORT_RPC,
7837 },
7838 {
7840 net_rpc_join,
7841 NET_TRANSPORT_RPC,
7845 },
7846 {
7848 net_rpc_oldjoin,
7849 NET_TRANSPORT_RPC,
7853 },
7854 {
7856 net_rpc_testjoin,
7857 NET_TRANSPORT_RPC,
7861 },
7862 {
7864 net_rpc_user,
7865 NET_TRANSPORT_RPC,
7869 },
7870 {
7872 rpc_user_password,
7873 NET_TRANSPORT_RPC,
7878 },
7879 {
7881 net_rpc_group,
7882 NET_TRANSPORT_RPC,
7886 },
7887 {
7889 net_rpc_share,
7890 NET_TRANSPORT_RPC,
7894 },
7895 {
7897 net_rpc_file,
7898 NET_TRANSPORT_RPC,
7902 },
7903 {
7905 net_rpc_printer,
7906 NET_TRANSPORT_RPC,
7910 },
7911 {
7913 net_rpc_changetrustpw,
7914 NET_TRANSPORT_RPC,
7918 },
7919 {
7921 rpc_trustdom,
7922 NET_TRANSPORT_RPC,
7926 },
7927 {
7929 rpc_shutdown_abort,
7930 NET_TRANSPORT_RPC,
7934 },
7935 {
7937 rpc_shutdown,
7938 NET_TRANSPORT_RPC,
7942 },
7943 {
7945 rpc_samdump,
7946 NET_TRANSPORT_RPC,
7950 },
7951 {
7953 rpc_vampire,
7954 NET_TRANSPORT_RPC,
7958 },
7959 {
7961 net_rpc_getsid,
7962 NET_TRANSPORT_RPC,
7966 },
7967 {
7969 net_rpc_rights,
7970 NET_TRANSPORT_RPC,
7974 },
7975 {
7977 net_rpc_service,
7978 NET_TRANSPORT_RPC,
7982 },
7983 {
7985 net_rpc_registry,
7986 NET_TRANSPORT_RPC,
7990 },
7991 {
7993 net_rpc_shell,
7994 NET_TRANSPORT_RPC,
7998 },
7999 {
8001 net_rpc_trust,
8002 NET_TRANSPORT_RPC,
8006 },
8007 {
8009 net_rpc_conf,
8010 NET_TRANSPORT_RPC,
8014 },
8016 };
8021 }
8026 }
8029 }
8032 }