| blob | 4859d785be68deb0967505f07b10234d6d0eab51 |
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 * Copyright (C) Gerald Carter 2002-2003.
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 */
38 #define NTDRIVERS_DATABASE_VERSION_1 1
39 #define NTDRIVERS_DATABASE_VERSION_2 2
42 #define NTDRIVERS_DATABASE_VERSION NTDRIVERS_DATABASE_VERSION_3
44 /* Map generic permissions to printer object specific permissions */
46 GENERIC_MAPPING printer_generic_mapping = {
47 PRINTER_READ,
48 PRINTER_WRITE,
49 PRINTER_EXECUTE,
50 PRINTER_ALL_ACCESS
51 };
53 STANDARD_MAPPING printer_std_mapping = {
54 PRINTER_READ,
55 PRINTER_WRITE,
56 PRINTER_EXECUTE,
57 PRINTER_ALL_ACCESS
58 };
60 /* Map generic permissions to print server object specific permissions */
62 GENERIC_MAPPING printserver_generic_mapping = {
63 SERVER_READ,
64 SERVER_WRITE,
65 SERVER_EXECUTE,
66 SERVER_ALL_ACCESS
67 };
69 STANDARD_MAPPING printserver_std_mapping = {
70 SERVER_READ,
71 SERVER_WRITE,
72 SERVER_EXECUTE,
73 SERVER_ALL_ACCESS
74 };
76 /* We need one default form to support our default printer. Msoft adds the
77 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
78 array index). Letter is always first, so (for the current code) additions
79 always put things in the correct order. */
199 };
205 };
221 };
224 {
240 }
243 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
245 }
246 }
252 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
254 }
257 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
259 }
260 }
266 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
268 }
271 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
273 }
274 }
277 }
280 }
282 /****************************************************************************
283 Open the NT printing tdbs. Done once before fork().
284 ****************************************************************************/
287 {
301 }
310 }
319 }
323 /* handle a Samba upgrade */
325 {
326 int32 vers_id;
328 /* Cope with byte-reversed older versions of the db. */
330 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
331 /* Written on a bigendian machine with old fetch_int code. Save as le. */
332 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
335 }
339 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
346 }
347 }
352 /*
353 * register callback to handle updating printers as new
354 * drivers are installed
355 */
359 /*
360 * register callback to handle updating printer data
361 * when a driver is initialized
362 */
368 }
370 /*******************************************************************
371 tdb traversal function for counting printers.
372 ********************************************************************/
376 {
381 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
382 }
385 }
387 /*******************************************************************
388 Update the spooler global c_setprinter. This variable is initialized
389 when the parent smbd starts with the number of existing printers. It
390 is monotonically increased by the current number of printers *after*
391 each add or delete printer RPC. Only Microsoft knows why... JRR020119
392 ********************************************************************/
395 {
396 int32 c_setprinter;
401 /* Traverse the tdb, counting the printers */
404 /* If initializing, set c_setprinter to current printers count
405 * otherwise, bump it by the current printer count
406 */
409 else
418 }
420 /*******************************************************************
421 Get the spooler global c_setprinter, accounting for initialization.
422 ********************************************************************/
425 {
434 }
436 /****************************************************************************
437 Get builtin form struct list.
438 ****************************************************************************/
441 {
444 }
446 /****************************************************************************
447 get a builtin form struct
448 ****************************************************************************/
451 {
453 fstring form_name;
462 }
463 }
466 }
468 /****************************************************************************
469 get a form struct list
470 ****************************************************************************/
472 {
475 nt_forms_struct form;
483 {
503 }
506 n++;
507 }
511 }
513 /****************************************************************************
514 write a form struct list
515 ****************************************************************************/
517 {
524 /* save index, so list is rebuilt in correct order */
536 }
539 }
541 /****************************************************************************
542 add a form struct at the end of the list
543 ****************************************************************************/
545 {
547 BOOL update;
548 fstring form_name;
551 /*
552 * NT tries to add forms even when
553 * they are already in the base
554 * only update the values if already present
555 */
565 }
566 }
572 }
576 }
587 }
589 /****************************************************************************
590 Delete a named form struct.
591 ****************************************************************************/
594 {
595 pstring key;
596 TDB_DATA kbuf;
598 fstring form_name;
608 }
609 }
615 }
623 }
626 }
628 /****************************************************************************
629 Update a form struct.
630 ****************************************************************************/
633 {
635 fstring form_name;
643 }
654 }
656 /****************************************************************************
657 Get the nt drivers list.
658 Traverse the database and look-up the matching names.
659 ****************************************************************************/
661 {
665 pstring key;
681 }
685 total++;
686 }
689 }
691 /****************************************************************************
692 function to do the mapping between the long architecture name and
693 the short one.
694 ****************************************************************************/
696 {
701 i++;
708 }
710 /* this might be client code - but shouldn't this be an fstrcpy etc? */
718 }
720 /****************************************************************************
721 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
722 There are two case to be covered here: PE (Portable Executable) and NE (New
723 Executable) files. Both files support the same INFO structure, but PE files
724 store the signature in unicode, and NE files store it as !unicode.
725 returns -1 on error, 1 on version info found, and 0 on no version info found.
726 ****************************************************************************/
729 {
732 ssize_t byte_count;
738 }
740 /* Note: DOS_HEADER_SIZE < malloc'ed PE_HEADER_SIZE */
745 }
747 /* Is this really a DOS header? */
752 }
754 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
755 if (SMB_VFS_LSEEK(fsp, fsp->fd, SVAL(buf,DOS_HEADER_LFANEW_OFFSET), SEEK_SET) == (SMB_OFF_T)-1) {
758 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
760 }
765 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
767 }
769 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
777 /* At this point, we assume the file is in error. It still could be somthing
778 * else besides a PE file, but it unlikely at this point.
779 */
781 }
783 /* get the section table */
791 }
797 }
799 /* Iterate the section table looking for the resource section ".rsrc" */
812 }
814 /* Seek to the start of the .rsrc section info */
819 }
825 }
828 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
830 /* Align to next long address */
843 }
844 }
845 }
846 }
847 }
849 /* Version info not found, fall back to origin date/time */
858 /* At this point, we assume the file is in error. It still could be somthing
859 * else besides a NE file, but it unlikely at this point. */
861 }
863 /* Allocate a bit more space to speed up things */
869 }
871 /* This is a HACK! I got tired of trying to sort through the messy
872 * 'NE' file format. If anyone wants to clean this up please have at
873 * it, but this works. 'NE' files will eventually fade away. JRR */
875 /* Cover case that should not occur in a well formed 'NE' .dll file */
879 /* Fast skip past data that can't possibly match */
882 /* Potential match data crosses buf boundry, move it to beginning
883 * of buf, and fill the buf with as much as it will hold. */
894 }
900 }
902 /* Check that the full signature string and the magic number that
903 * follows exist (not a perfect solution, but the chances that this
904 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
905 * twice, as it is simpler to read the code. */
907 /* Compute skip alignment to next long address */
920 }
921 }
922 }
924 /* Version info not found, fall back to origin date/time */
930 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
934 no_version_info:
938 error_exit:
941 }
943 /****************************************************************************
944 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
945 share one or more files. During the MS installation process files are checked
946 to insure that only a newer version of a shared file is installed over an
947 older version. There are several possibilities for this comparison. If there
948 is no previous version, the new one is newer (obviously). If either file is
949 missing the version info structure, compare the creation date (on Unix use
950 the modification date). Otherwise chose the numerically larger version number.
951 ****************************************************************************/
954 {
956 pstring filepath;
958 uint32 new_major;
959 uint32 new_minor;
962 uint32 old_major;
963 uint32 old_minor;
969 SMB_STRUCT_STAT st;
970 SMB_STRUCT_STAT stat_buf;
971 BOOL bad_path;
978 /* Get file version info (if available) for previous file (if it exists) */
988 /* Old file not found, so by definition new file is in fact newer */
999 old_file));
1004 }
1005 }
1008 /* Get file version info (if available) for new file */
1017 /* New file not found, this shouldn't occur if the caller did its job */
1028 new_file));
1033 }
1034 }
1038 /* Compare versions and choose the larger version number */
1044 }
1048 }
1051 /* Compare modification time/dates and choose the newest time/date */
1055 }
1059 }
1060 }
1062 error_exit:
1066 }
1068 /****************************************************************************
1069 Determine the correct cVersion associated with an architecture and driver
1070 ****************************************************************************/
1073 {
1077 NTSTATUS nt_status;
1078 pstring driverpath;
1079 DATA_BLOB null_pw;
1080 fstring res_type;
1082 BOOL bad_path;
1083 SMB_STRUCT_STAT st;
1090 /* If architecture is Windows 95/98/ME, the version is always 0. */
1095 }
1097 /*
1098 * Connect to the print$ share under the same account as the user connected
1099 * to the rpc pipe. Note we must still be root to do this.
1100 */
1102 /* Null password is ok - we are already an authenticated user... */
1113 }
1115 /* We are temporarily becoming the connection user. */
1120 }
1122 /* Open the driver file (Portable Executable format) and determine the
1123 * deriver the cversion. */
1137 }
1139 uint32 major;
1140 uint32 minor;
1147 }
1149 /*
1150 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1151 * for more details. Version in this case is not just the version of the
1152 * file, but the version in the sense of kernal mode (2) vs. user mode
1153 * (3) drivers. Other bits of the version fields are the version info.
1154 * JRR 010716
1155 */
1166 }
1170 }
1182 error_exit:
1190 }
1192 /****************************************************************************
1193 ****************************************************************************/
1196 {
1198 fstring new_name;
1201 WERROR err;
1203 /* clean up the driver name.
1204 * we can get .\driver.dll
1205 * or worse c:\windows\system\driver.dll !
1206 */
1207 /* using an intermediate string to not have overlaping memcpy()'s */
1211 }
1216 }
1221 }
1226 }
1233 }
1234 }
1235 }
1239 /* jfm:7/16/2000 the client always sends the cversion=0.
1240 * The server should check which version the driver is by reading
1241 * the PE header of driver->driverpath.
1242 *
1243 * For Windows 95/98 the version is 0 (so the value sent is correct)
1244 * For Windows NT (the architecture doesn't matter)
1245 * NT 3.1: cversion=0
1246 * NT 3.5/3.51: cversion=1
1247 * NT 4: cversion=2
1248 * NT2K: cversion=3
1249 */
1255 }
1257 /****************************************************************************
1258 ****************************************************************************/
1259 static WERROR clean_up_driver_struct_level_6(NT_PRINTER_DRIVER_INFO_LEVEL_6 *driver, struct current_user *user)
1260 {
1262 fstring new_name;
1265 WERROR err;
1267 /* clean up the driver name.
1268 * we can get .\driver.dll
1269 * or worse c:\windows\system\driver.dll !
1270 */
1271 /* using an intermediate string to not have overlaping memcpy()'s */
1275 }
1280 }
1285 }
1290 }
1297 }
1298 }
1299 }
1303 /* jfm:7/16/2000 the client always sends the cversion=0.
1304 * The server should check which version the driver is by reading
1305 * the PE header of driver->driverpath.
1306 *
1307 * For Windows 95/98 the version is 0 (so the value sent is correct)
1308 * For Windows NT (the architecture doesn't matter)
1309 * NT 3.1: cversion=0
1310 * NT 3.5/3.51: cversion=1
1311 * NT 4: cversion=2
1312 * NT2K: cversion=3
1313 */
1314 if ((driver->version = get_correct_cversion(architecture, driver->driverpath, user, &err)) == -1)
1318 }
1320 /****************************************************************************
1321 ****************************************************************************/
1324 {
1327 {
1331 }
1333 {
1337 }
1340 }
1341 }
1343 /****************************************************************************
1344 This function sucks and should be replaced. JRA.
1345 ****************************************************************************/
1347 static void convert_level_6_to_level3(NT_PRINTER_DRIVER_INFO_LEVEL_3 *dst, NT_PRINTER_DRIVER_INFO_LEVEL_6 *src)
1348 {
1360 }
1371 else
1373 }
1376 }
1378 #endif
1380 /****************************************************************************
1381 ****************************************************************************/
1384 {
1386 NT_PRINTER_DRIVER_INFO_LEVEL_3 converted_driver;
1388 pstring new_dir;
1389 pstring old_name;
1390 pstring new_name;
1391 DATA_BLOB null_pw;
1393 NTSTATUS nt_status;
1394 pstring inbuf;
1395 pstring outbuf;
1396 fstring res_type;
1412 }
1416 /*
1417 * Connect to the print$ share under the same account as the user connected to the rpc pipe.
1418 * Note we must be root to do this.
1419 */
1431 }
1433 /*
1434 * Save who we are - we are temporarily becoming the connection user.
1435 */
1440 }
1442 /*
1443 * make the directories version and version\driver_name
1444 * under the architecture directory.
1445 */
1450 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1451 * listed for this driver which has already been moved, skip it (note:
1452 * drivers may list the same file name several times. Then check if the
1453 * file already exists in archi\cversion\, if so, check that the version
1454 * info (or time stamps if version info is unavailable) is newer (or the
1455 * date is later). If it is, move it to archi\cversion\filexxx.yyy.
1456 * Otherwise, delete the file.
1457 *
1458 * If a file is not moved to archi\cversion\ because of an error, all the
1459 * rest of the 'unmoved' driver files are removed from archi\. If one or
1460 * more of the driver's files was already moved to archi\cversion\, it
1461 * potentially leaves the driver in a partially updated state. Version
1462 * trauma will most likely occur if an client attempts to use any printer
1463 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1464 * done is appropriate... later JRR
1465 */
1473 NTSTATUS status;
1481 }
1482 }
1483 else
1485 }
1492 NTSTATUS status;
1500 }
1501 }
1502 else
1504 }
1505 }
1513 NTSTATUS status;
1521 }
1522 }
1523 else
1525 }
1526 }
1535 NTSTATUS status;
1543 }
1544 }
1545 else
1547 }
1548 }
1560 }
1561 }
1566 NTSTATUS status;
1574 }
1575 }
1576 else
1578 }
1579 NextDriver: ;
1580 }
1581 }
1587 }
1589 /****************************************************************************
1590 ****************************************************************************/
1592 {
1595 pstring directory;
1596 fstring temp_name;
1597 pstring key;
1604 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
1605 * \\server is added in the rpc server layer.
1606 * It does make sense to NOT store the server's name in the printer TDB.
1607 */
1609 slprintf(directory, sizeof(directory)-1, "\\print$\\%s\\%d\\", architecture, driver->cversion);
1611 /* .inf files do not always list a file for each of the four standard files.
1612 * Don't prepend a path to a null filename, or client claims:
1613 * "The server on which the printer resides does not have a suitable
1614 * <printer driver name> printer driver installed. Click OK if you
1615 * wish to install the driver on your local machine."
1616 */
1620 }
1625 }
1630 }
1635 }
1640 slprintf(driver->dependentfiles[i], sizeof(driver->dependentfiles[i])-1, "%s%s", directory, temp_name);
1641 }
1642 }
1644 slprintf(key, sizeof(key)-1, "%s%s/%d/%s", DRIVERS_PREFIX, architecture, driver->cversion, driver->name);
1651 again:
1668 }
1669 }
1679 }
1683 }
1693 done:
1699 }
1701 /****************************************************************************
1702 ****************************************************************************/
1704 {
1705 NT_PRINTER_DRIVER_INFO_LEVEL_3 info3;
1720 }
1723 /****************************************************************************
1724 ****************************************************************************/
1725 static WERROR get_a_printer_driver_3_default(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, const char *driver, const char *arch)
1726 {
1727 NT_PRINTER_DRIVER_INFO_LEVEL_3 info;
1748 }
1750 /****************************************************************************
1751 ****************************************************************************/
1752 static WERROR get_a_printer_driver_3(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, fstring drivername, const char *arch, uint32 version)
1753 {
1754 NT_PRINTER_DRIVER_INFO_LEVEL_3 driver;
1759 pstring key;
1765 /* Windows 4.0 (i.e. win9x) should always use a version of 0 */
1770 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, drivername));
1801 }
1806 i++;
1807 }
1818 }
1823 }
1825 /****************************************************************************
1826 Debugging function, dump at level 6 the struct in the logs.
1827 ****************************************************************************/
1830 {
1831 uint32 result;
1838 {
1840 {
1860 }
1862 }
1864 }
1869 }
1872 }
1874 /****************************************************************************
1875 ****************************************************************************/
1877 {
1929 }
1934 }
1936 /****************************************************************************
1937 Pack all values in all printer keys
1938 ***************************************************************************/
1941 {
1946 pstring path;
1952 /* loop over all keys */
1958 /* loop over all values */
1961 /* pathname should be stored as <key>\<value> */
1969 val,
1970 path,
1974 }
1976 }
1978 /* terminator */
1983 }
1986 /****************************************************************************
1987 Delete a printer - this just deletes the printer info file, any open
1988 handles are not affected.
1989 ****************************************************************************/
1992 {
1993 pstring key;
1994 TDB_DATA kbuf;
2003 }
2005 /* FIXME!!! Reorder so this forward declaration is not necessary --jerry */
2008 /****************************************************************************
2009 ****************************************************************************/
2011 {
2012 pstring key;
2015 WERROR ret;
2018 /*
2019 * in addprinter: no servername and the printer is the name
2020 * in setprinter: servername is \\server
2021 * and printer is \\server\\printer
2022 *
2023 * Samba manages only local printers.
2024 * we currently don't support things like path=\\other_server\printer
2025 */
2031 }
2033 /*
2034 * JFM: one day I'll forget.
2035 * below that's info->portname because that's the SAMBA sharename
2036 * and I made NT 'thinks' it's the portname
2037 * the info->sharename is the thing you can name when you add a printer
2038 * that's the short-name when you create shared printer for 95/98
2039 * So I've made a limitation in SAMBA: you can only have 1 printer model
2040 * behind a SAMBA share.
2041 */
2046 again:
2084 }
2088 }
2100 done:
2110 }
2113 /****************************************************************************
2114 Malloc and return an NT devicemode.
2115 ****************************************************************************/
2118 {
2126 }
2160 /* non utilisés par un driver d'imprimante */
2174 }
2176 /****************************************************************************
2177 Deepcopy an NT devicemode.
2178 ****************************************************************************/
2181 {
2187 if ((new_nt_devicemode = (NT_DEVICEMODE *)memdup(nt_devicemode, sizeof(NT_DEVICEMODE))) == NULL) {
2190 }
2194 if ((new_nt_devicemode->private = memdup(nt_devicemode->private, nt_devicemode->driverextra)) == NULL) {
2198 }
2199 }
2202 }
2204 /****************************************************************************
2205 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2206 ****************************************************************************/
2209 {
2219 }
2221 /****************************************************************************
2222 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2223 ****************************************************************************/
2225 {
2237 /* clean up all registry keys */
2243 }
2246 /* finally the top level structure */
2249 }
2252 /****************************************************************************
2253 ****************************************************************************/
2255 {
2258 NT_DEVICEMODE devmode;
2306 /* the len in tdb_unpack is an int value and
2307 * devmode.driverextra is only a short
2308 */
2312 /* check to catch an invalid TDB entry so we don't segfault */
2315 }
2316 }
2325 }
2327 /****************************************************************************
2328 Allocate and initialize a new slot.
2329 ***************************************************************************/
2332 {
2339 /* allocate another slot in the NT_PRINTER_KEY array */
2347 /* initialze new key */
2359 }
2361 /****************************************************************************
2362 search for a registry key name in the existing printer data
2363 ***************************************************************************/
2366 {
2375 /* loop over all existing keys */
2383 }
2384 }
2387 }
2389 /****************************************************************************
2390 ***************************************************************************/
2393 {
2399 fstring subkeyname;
2406 /* match sure it is a subkey and not the key itself */
2412 /* get subkey path */
2416 p++;
2421 /* don't add a key more than once */
2426 }
2431 /* found a match, so allocate space and copy the name */
2438 }
2442 num_subkeys++;
2443 }
2445 }
2447 /* tag of the end */
2455 }
2457 #ifdef HAVE_ADS
2460 {
2469 }
2472 uint32 dword)
2473 {
2477 }
2480 BOOL b)
2481 {
2486 }
2490 {
2494 /* a multi-sz has to have a null string terminator, i.e., the last
2495 string must be followed by two nulls */
2507 }
2509 /****************************************************************************
2510 * Map the NT_PRINTER_INFO_LEVEL_2 data into DsSpooler keys for publishing.
2511 *
2512 * @param info2 NT_PRINTER_INFO_LEVEL_2 describing printer - gets modified
2513 * @return BOOL indicating success or failure
2514 ***************************************************************************/
2517 {
2519 fstring longname;
2550 PRINTER_ATTRIBUTE_KEEPPRINTEDJOBS));
2564 }
2568 }
2571 {
2575 /* find the DsSpooler key */
2583 }
2586 {
2587 ADS_STATUS ads_rc;
2594 GUID guid;
2598 /* set the DsSpooler info and attributes */
2607 }
2609 /* Build the ads mods */
2615 /* initial ads structure */
2621 }
2627 /* ads_connect() will find the DC for us */
2633 }
2635 /* figure out where to publish */
2644 /* publish it */
2649 /* retreive the guid and store it locally */
2656 }
2662 }
2665 {
2666 ADS_STATUS ads_rc;
2670 WERROR win_rc;
2678 }
2684 }
2690 /* ads_connect() will find the DC for us */
2696 }
2698 /* remove the printer from the directory */
2706 }
2710 }
2712 /****************************************************************************
2713 * Publish a printer in the directory
2714 *
2715 * @param snum describing printer service
2716 * @return WERROR indicating status of publishing
2717 ***************************************************************************/
2720 {
2722 WERROR win_rc;
2738 }
2743 }
2746 {
2750 WERROR win_rc;
2767 }
2771 }
2777 }
2779 #else
2781 {
2783 }
2785 {
2787 }
2788 #endif
2789 /****************************************************************************
2790 ***************************************************************************/
2793 {
2805 /* remove all keys */
2814 }
2823 }
2825 /* remove a specific key (and all subkeys) */
2835 /* mark the slot as empty */
2838 }
2839 }
2841 /* find the first empty slot */
2846 removed_keys++;
2848 }
2849 }
2852 /* nothing was removed */
2855 /* move everything down */
2861 empty_slot++;
2862 removed_keys++;
2863 }
2864 }
2866 /* update count */
2870 /* sanity check to see if anything is left */
2877 }
2880 }
2882 /****************************************************************************
2883 ***************************************************************************/
2886 {
2890 /* we must have names on non-zero length */
2895 /* find the printer key first */
2901 /* make sure the value exists so we can return the correct error code */
2912 }
2914 /****************************************************************************
2915 ***************************************************************************/
2919 {
2923 /* we must have names on non-zero length */
2928 /* find the printer key first */
2944 }
2946 /****************************************************************************
2947 ***************************************************************************/
2949 REGISTRY_VALUE* get_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value )
2950 {
2960 }
2962 /****************************************************************************
2963 Unpack a list of registry values frem the TDB
2964 ***************************************************************************/
2967 {
2969 uint32 type;
2977 /* add the "PrinterDriverData" key first for performance reasons */
2981 /* loop and unpack the rest of the registry values */
2985 /* check to see if there are any more registry values */
2991 /* unpack the next regval */
2994 string,
2999 /*
3000 * break of the keyname from the value name.
3001 * Should only be one '\' in the string returned.
3002 */
3006 /* Put in "PrinterDriverData" is no key specified */
3011 }
3016 }
3018 /* see if we need a new key */
3025 keyname));
3027 }
3029 /* add the new value */
3031 regval_ctr_addvalue( &printer_data->keys[key_index].values, valuename, type, (const char *)data_p, size );
3036 }
3039 }
3041 /****************************************************************************
3042 ***************************************************************************/
3045 {
3062 }
3068 }
3074 }
3088 nt_name++;
3093 {
3097 l--;
3098 }
3099 }
3102 os2_name++;
3104 {
3108 l--;
3109 }
3110 }
3119 }
3120 }
3123 }
3125 /****************************************************************************
3126 Get a default printer info 2 struct.
3127 ****************************************************************************/
3128 static WERROR get_a_printer_2_default(NT_PRINTER_INFO_LEVEL_2 **info_ptr, const char *sharename)
3129 {
3131 NT_PRINTER_INFO_LEVEL_2 info;
3143 /* by setting the driver name to an empty string, a local NT admin
3144 can now run the **local** APW to install a local printer driver
3145 for a Samba shared printer in 2.2. Without this, drivers **must** be
3146 installed on the Samba server for NT clients --jerry */
3150 #endif
3167 /*
3168 * I changed this as I think it is better to have a generic
3169 * DEVMODE than to crash Win2k explorer.exe --jerry
3170 * See the HP Deskjet 990c Win2k drivers for an example.
3171 *
3172 * However the default devmode appears to cause problems
3173 * with the HP CLJ 8500 PCL driver. Hence the addition of
3174 * the "default devmode" parameter --jerry 22/01/2002
3175 */
3180 }
3183 }
3185 /* This will get the current RPC talloc context, but we should be
3186 passing this as a parameter... fixme... JRA ! */
3195 }
3199 fail:
3203 }
3205 /****************************************************************************
3206 ****************************************************************************/
3208 {
3209 pstring key;
3210 NT_PRINTER_INFO_LEVEL_2 info;
3213 fstring printername;
3251 /* Samba has to have shared raw drivers. */
3254 /* Restore the stripped strings. */
3262 /*
3263 * Some client drivers freak out if there is a NULL devmode
3264 * (probably the driver is not checking before accessing
3265 * the devmode pointer) --jerry
3266 *
3267 * See comments in get_a_printer_2_default()
3268 */
3272 printername));
3274 }
3282 /* This will get the current RPC talloc context, but we should be
3283 passing this as a parameter... fixme... JRA ! */
3287 /* Fix for OS/2 drivers. */
3299 }
3301 /****************************************************************************
3302 Debugging function, dump at level 6 the struct in the logs.
3303 ****************************************************************************/
3305 {
3306 uint32 result;
3313 {
3316 else
3317 {
3344 }
3346 }
3351 }
3354 }
3356 /****************************************************************************
3357 Update the changeid time.
3358 This is SO NASTY as some drivers need this to change, others need it
3359 static. This value will change every second, and I must hope that this
3360 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
3361 UTAH ! JRA.
3362 ****************************************************************************/
3365 {
3371 /* Return changeid as msec since spooler restart */
3373 #else
3374 /*
3375 * This setting seems to work well but is too untested
3376 * to replace the above calculation. Left in for experiementation
3377 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
3378 */
3380 #endif
3381 }
3383 /*
3384 * The function below are the high level ones.
3385 * only those ones must be called from the spoolss code.
3386 * JFM.
3387 */
3389 /****************************************************************************
3390 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
3391 ****************************************************************************/
3394 {
3395 WERROR result;
3399 /*
3400 * invalidate cache for all open handles to this printer.
3401 * cache for a given handle will be updated on the next
3402 * get_a_printer()
3403 */
3409 {
3410 /*
3411 * Update the changestamp. Emperical tests show that the
3412 * ChangeID is always updated,but c_setprinter is
3413 * global spooler variable (not per printer).
3414 */
3416 /* ChangeID **must** be increasing over the lifetime
3417 of client's spoolss service in order for the
3418 client's cache to show updates */
3422 /*
3423 * Because one day someone will ask:
3424 * NT->NT An admin connection to a remote
3425 * printer show changes imeediately in
3426 * the properities dialog
3427 *
3428 * A non-admin connection will only show the
3429 * changes after viewing the properites page
3430 * 2 times. Seems to be related to a
3431 * race condition in the client between the spooler
3432 * updating the local cache and the Explorer.exe GUI
3433 * actually displaying the properties.
3434 *
3435 * This is fixed in Win2k. admin/non-admin
3436 * connections both display changes immediately.
3437 *
3438 * 14/12/01 --jerry
3439 */
3444 }
3448 }
3451 }
3453 /****************************************************************************
3454 Initialize printer devmode & data with previously saved driver init values.
3455 ****************************************************************************/
3458 {
3460 pstring key;
3462 NT_PRINTER_INFO_LEVEL_2 info;
3467 /*
3468 * Delete any printer data 'values' already set. When called for driver
3469 * replace, there will generally be some, but during an add printer, there
3470 * should not be any (if there are delete them).
3471 */
3482 /*
3483 * When changing to a driver that has no init info in the tdb, remove
3484 * the previous drivers init info and leave the new on blank.
3485 */
3488 }
3490 /*
3491 * Get the saved DEVMODE..
3492 */
3496 /*
3497 * The saved DEVMODE contains the devicename from the printer used during
3498 * the initialization save. Change it to reflect the new printer.
3499 */
3504 }
3506 /*
3507 * NT/2k does not change out the entire DeviceMode of a printer
3508 * when changing the driver. Only the driverextra, private, &
3509 * driverversion fields. --jerry (Thu Mar 14 08:58:43 CST 2002)
3510 *
3511 * Later examination revealed that Windows NT/2k does reset the
3512 * the printer's device mode, bit **only** when you change a
3513 * property of the device mode such as the page orientation.
3514 * --jerry
3515 */
3518 /* Bind the saved DEVMODE to the new the printer */
3526 /* Add the printer data 'values' to the new printer */
3534 }
3536 /****************************************************************************
3537 Initialize printer devmode & data with previously saved driver init values.
3538 When a printer is created using AddPrinter, the drivername bound to the
3539 printer is used to lookup previously saved driver initialization info, which
3540 is bound to the new printer.
3541 ****************************************************************************/
3544 {
3554 level));
3556 }
3559 }
3561 /****************************************************************************
3562 Delete driver init data stored for a specified driver
3563 ****************************************************************************/
3566 {
3567 pstring key;
3568 TDB_DATA kbuf;
3573 }
3583 }
3585 /****************************************************************************
3586 Pack up the DEVMODE and values for a printer into a 'driver init' entry
3587 in the tdb. Note: this is different from the driver entry and the printer
3588 entry. There should be a single driver init entry for each driver regardless
3589 of whether it was installed from NT or 2K. Technically, they should be
3590 different, but they work out to the same struct.
3591 ****************************************************************************/
3594 {
3595 pstring key;
3603 again:
3617 }
3618 else
3622 }
3633 done:
3643 }
3645 /****************************************************************************
3646 Update (i.e. save) the driver init info (DEVMODE and values) for a printer
3647 ****************************************************************************/
3650 {
3651 uint32 result;
3662 }
3665 }
3667 /****************************************************************************
3668 Convert the printer data value, a REG_BINARY array, into an initialization
3669 DEVMODE. Note: the array must be parsed as if it was a DEVMODE in an rpc...
3670 got to keep the endians happy :).
3671 ****************************************************************************/
3673 static BOOL convert_driver_init( TALLOC_CTX *ctx, NT_DEVICEMODE *nt_devmode, uint8 *data, uint32 data_len )
3674 {
3676 prs_struct ps;
3677 DEVICEMODE devmode;
3687 else
3691 }
3693 /****************************************************************************
3694 Set the DRIVER_INIT info in the tdb. Requires Win32 client code that:
3696 1. Use the driver's config DLL to this UNC printername and:
3697 a. Call DrvPrintEvent with PRINTER_EVENT_INITIALIZE
3698 b. Call DrvConvertDevMode with CDM_DRIVER_DEFAULT to get default DEVMODE
3699 2. Call SetPrinterData with the 'magic' key and the DEVMODE as data.
3701 The last step triggers saving the "driver initialization" information for
3702 this printer into the tdb. Later, new printers that use this driver will
3703 have this initialization information bound to them. This simulates the
3704 driver initialization, as if it had run on the Samba server (as it would
3705 have done on NT).
3707 The Win32 client side code requirement sucks! But until we can run arbitrary
3708 Win32 printer driver code on any Unix that Samba runs on, we are stuck with it.
3710 It would have been easier to use SetPrinter because all the UNMARSHALLING of
3711 the DEVMODE is done there, but 2K/XP clients do not set the DEVMODE... think
3712 about it and you will realize why. JRR 010720
3713 ****************************************************************************/
3715 static WERROR save_driver_init_2(NT_PRINTER_INFO_LEVEL *printer, uint8 *data, uint32 data_len )
3716 {
3722 /*
3723 * When the DEVMODE is already set on the printer, don't try to unpack it.
3724 */
3728 /*
3729 * Set devmode on printer info, so entire printer initialization can be
3730 * saved to tdb.
3731 */
3739 }
3743 /*
3744 * The DEVMODE is held in the 'data' component of the param in raw binary.
3745 * Convert it to to a devmode structure
3746 */
3751 }
3754 }
3756 /*
3757 * Pack up and add (or update) the DEVMODE and any current printer data to
3758 * a 'driver init' element in the tdb
3759 *
3760 */
3766 }
3768 /*
3769 * If driver initialization info was successfully saved, set the current
3770 * printer to match it. This allows initialization of the current printer
3771 * as well as the driver.
3772 */
3777 }
3779 done:
3786 }
3788 /****************************************************************************
3789 Update the driver init info (DEVMODE and specifics) for a printer
3790 ****************************************************************************/
3792 WERROR save_driver_init(NT_PRINTER_INFO_LEVEL *printer, uint32 level, uint8 *data, uint32 data_len)
3793 {
3803 }
3806 }
3808 /****************************************************************************
3809 Deep copy a NT_PRINTER_DATA
3810 ****************************************************************************/
3813 {
3822 /* create a new instance of the printerkey in the destination
3823 printer_data object */
3831 /* dup the printer entire printer key */
3835 }
3836 }
3839 }
3841 /****************************************************************************
3842 Deep copy a NT_PRINTER_INFO_LEVEL_2 structure using malloc()'d memeory
3843 Caller must free.
3844 ****************************************************************************/
3847 {
3858 /* malloc()'d members copied here */
3865 /* this is talloc()'d; very ugly that we have a structure that
3866 is half malloc()'d and half talloc()'d but that is the way
3867 that the PRINTER_INFO stuff is written right now. --jerry */
3872 }
3874 /****************************************************************************
3875 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
3876 ****************************************************************************/
3878 WERROR get_a_printer( Printer_entry *print_hnd, NT_PRINTER_INFO_LEVEL **pp_printer, uint32 level,
3880 {
3881 WERROR result;
3893 }
3896 /*
3897 * check for cache first. A Printer handle cannot changed
3898 * to another printer object so we only check that the printer
3899 * is actually for a printer and that the printer_info pointer
3900 * is valid
3901 */
3905 {
3911 }
3919 }
3921 /* no cache for this handle; see if we can match one from another handle */
3926 /* fail to disk if we don't have it with any open handle */
3931 /* we have a new printer now. Save it with this handle */
3936 /* save a copy in cache */
3944 /* don't fail the lookup just because the cache update failed */
3947 }
3948 }
3950 }
3951 else
3959 }
3961 DEBUG(10,("get_a_printer: [%s] level %u returning %s\n", sharename, (unsigned int)level, dos_errstr(result)));
3964 }
3966 /****************************************************************************
3967 Deletes a NT_PRINTER_INFO_LEVEL struct.
3968 ****************************************************************************/
3971 {
3972 uint32 result;
3992 }
3996 }
3998 /****************************************************************************
3999 ****************************************************************************/
4001 {
4002 uint32 result;
4018 }
4021 }
4022 /****************************************************************************
4023 ****************************************************************************/
4027 {
4028 WERROR result;
4032 /* Sometime we just want any version of the driver */
4035 /* look for Win2k first and then for NT4 */
4042 }
4046 }
4052 }
4058 }
4060 /****************************************************************************
4061 ****************************************************************************/
4063 {
4064 uint32 result;
4068 {
4071 {
4079 }
4081 }
4083 {
4094 }
4096 }
4100 }
4102 }
4105 /****************************************************************************
4106 Determine whether or not a particular driver is currently assigned
4107 to a printer
4108 ****************************************************************************/
4111 {
4121 /* loop through the printers.tdb and check for the drivername */
4133 }
4136 }
4140 /* report that the driver is not in use by default */
4143 }
4146 /**********************************************************************
4147 Check to see if a ogiven file is in use by *info
4148 *********************************************************************/
4151 {
4169 /* see of there are any dependent files to examine */
4177 i++;
4178 }
4182 }
4184 /**********************************************************************
4185 Utility function to remove the dependent file pointed to by the
4186 input parameter from the list
4187 *********************************************************************/
4190 {
4192 /* bump everything down a slot */
4196 idx++;
4197 }
4202 }
4204 /**********************************************************************
4205 Check if any of the files used by src are also used by drv
4206 *********************************************************************/
4210 {
4217 /* check each file. Remove it from the src structure if it overlaps */
4223 }
4229 }
4235 }
4241 }
4243 /* are there any dependentfiles to examine? */
4254 i++;
4255 }
4258 }
4260 /****************************************************************************
4261 Determine whether or not a particular driver files are currently being
4262 used by any other driver.
4264 Return value is True if any files were in use by other drivers
4265 and False otherwise.
4267 Upon return, *info has been modified to only contain the driver files
4268 which are not in use
4269 ****************************************************************************/
4272 {
4275 uint32 version;
4277 NT_PRINTER_DRIVER_INFO_LEVEL driver;
4284 /* loop over all driver versions */
4288 /* get the list of drivers */
4296 /* check each driver for overlap in files */
4306 }
4308 /* check if d2 uses any files from d1 */
4309 /* only if this is a different driver than the one being deleted */
4316 }
4317 }
4320 }
4332 }
4334 /****************************************************************************
4335 Actually delete the driver files. Make sure that
4336 printer_driver_files_in_use() return False before calling
4337 this.
4338 ****************************************************************************/
4340 static BOOL delete_driver_files( NT_PRINTER_DRIVER_INFO_LEVEL_3 *info_3, struct current_user *user )
4341 {
4345 DATA_BLOB null_pw;
4346 NTSTATUS nt_status;
4347 fstring res_type;
4352 DEBUG(6,("delete_driver_files: deleting driver [%s] - version [%d]\n", info_3->name, info_3->cversion));
4354 /*
4355 * Connect to the print$ share under the same account as the
4356 * user connected to the rpc pipe. Note we must be root to
4357 * do this.
4358 */
4369 }
4371 /* Save who we are - we are temporarily becoming the connection user. */
4376 }
4378 /* now delete the files; must strip the '\print$' string from
4379 fron of path */
4385 }
4386 }
4392 }
4393 }
4399 }
4400 }
4406 }
4407 }
4409 /* check if we are done removing files */
4415 /* bypass the "\print$" portion of the path */
4420 }
4422 i++;
4423 }
4424 }
4429 }
4431 /****************************************************************************
4432 Remove a printer driver from the TDB. This assumes that the the driver was
4433 previously looked up.
4434 ***************************************************************************/
4436 WERROR delete_printer_driver( NT_PRINTER_DRIVER_INFO_LEVEL_3 *info_3, struct current_user *user,
4438 {
4439 pstring key;
4442 NT_PRINTER_DRIVER_INFO_LEVEL ctr;
4444 /* delete the tdb data first */
4459 /* check if the driver actually exists for this environment */
4465 }
4469 /* ok... the driver exists so the delete should return success */
4474 }
4476 /*
4477 * now delete any associated files if delete_files == True
4478 * even if this part failes, we return succes because the
4479 * driver doesn not exist any more
4480 */
4489 }
4491 /****************************************************************************
4492 Store a security desc for a printer.
4493 ****************************************************************************/
4496 {
4499 prs_struct ps;
4501 fstring key;
4502 WERROR status;
4508 /* The old owner and group sids of the security descriptor are not
4509 present when new ACEs are added or removed by changing printer
4510 permissions through NT. If they are NULL in the new security
4511 descriptor then copy them over from the old one. */
4521 /* Pick out correct owner and group sids */
4539 /* Make a deep copy of the security descriptor */
4543 sacl,
4544 dacl,
4548 }
4552 }
4554 /* Store the security descriptor in a tdb */
4563 }
4572 }
4574 /* Free malloc'ed memory */
4576 out:
4582 }
4584 /****************************************************************************
4585 Construct a default security descriptor buffer for a printer.
4586 ****************************************************************************/
4589 {
4591 SEC_ACCESS sa;
4595 DOM_SID owner_sid;
4598 /* Create an ACE where Everyone is allowed to print */
4604 /* Make the security descriptor owned by the Administrators group
4605 on the PDC of the domain. */
4611 /* Backup plan - make printer owned by admins.
4612 This should emulate a lanman printer as security
4613 settings can't be changed. */
4617 }
4622 SEC_ACE_FLAG_INHERIT_ONLY);
4628 /* The ACL revision number in rpc_secdesc.h differs from the one
4629 created by NT when setting ACE entries in printer
4630 descriptors. NT4 complains about the property being edited by a
4631 NT5 machine. */
4637 }
4642 }
4650 }
4652 /****************************************************************************
4653 Get a security desc for a printer.
4654 ****************************************************************************/
4657 {
4658 prs_struct ps;
4659 fstring key;
4664 }
4666 /* Fetch security descriptor from tdb */
4677 }
4679 /* Save default security descriptor for later */
4690 }
4692 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
4693 this security descriptor has been created when winbindd was
4694 down. Take ownership of security descriptor. */
4697 DOM_SID owner_sid;
4699 /* Change sd owner to workgroup administrator */
4706 /* Create new sd */
4719 /* Swap with other one */
4723 /* Set it */
4726 }
4727 }
4737 fstring sid_str;
4744 }
4745 }
4749 }
4751 /* error code:
4752 0: everything OK
4753 1: level not implemented
4754 2: file doesn't exist
4755 3: can't allocate memory
4756 4: can't free memory
4757 5: non existant struct
4758 */
4760 /*
4761 A printer and a printer driver are 2 different things.
4762 NT manages them separatelly, Samba does the same.
4763 Why ? Simply because it's easier and it makes sense !
4765 Now explanation: You have 3 printers behind your samba server,
4766 2 of them are the same make and model (laser A and B). But laser B
4767 has an 3000 sheet feeder and laser A doesn't such an option.
4768 Your third printer is an old dot-matrix model for the accounting :-).
4770 If the /usr/local/samba/lib directory (default dir), you will have
4771 5 files to describe all of this.
4773 3 files for the printers (1 by printer):
4774 NTprinter_laser A
4775 NTprinter_laser B
4776 NTprinter_accounting
4777 2 files for the drivers (1 for the laser and 1 for the dot matrix)
4778 NTdriver_printer model X
4779 NTdriver_printer model Y
4781 jfm: I should use this comment for the text file to explain
4782 same thing for the forms BTW.
4783 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
4785 */
4787 /* Convert generic access rights to printer object specific access rights.
4788 It turns out that NT4 security descriptors use generic access rights and
4789 NT5 the object specific ones. */
4792 {
4798 }
4799 }
4801 /****************************************************************************
4802 Check a user has permissions to perform the given operation. We use the
4803 permission constants defined in include/rpc_spoolss.h to check the various
4804 actions we perform when checking printer access.
4806 PRINTER_ACCESS_ADMINISTER:
4807 print_queue_pause, print_queue_resume, update_printer_sec,
4808 update_printer, spoolss_addprinterex_level_2,
4809 _spoolss_setprinterdata
4811 PRINTER_ACCESS_USE:
4812 print_job_start
4814 JOB_ACCESS_ADMINISTER:
4815 print_job_delete, print_job_pause, print_job_resume,
4816 print_queue_purge
4818 ****************************************************************************/
4820 {
4822 uint32 access_granted;
4823 NTSTATUS status;
4824 BOOL result;
4829 /* If user is NULL then use the current_user structure */
4834 /* Always allow root or printer admins to do anything */
4839 }
4841 /* Get printer name */
4848 }
4850 /* Get printer security descriptor */
4855 }
4862 /* Create a child security descriptor to check permissions
4863 against. This is because print jobs are child objects
4864 objects of a printer. */
4868 /* Now this is the bit that really confuses me. The access
4869 type needs to be changed from JOB_ACCESS_ADMINISTER to
4870 PRINTER_ACCESS_ADMINISTER for this to work. Something
4871 to do with the child (job) object becoming like a
4872 printer?? -tpot */
4875 }
4877 /* Check access */
4892 }
4894 /****************************************************************************
4895 Check the time parameters allow a print operation.
4896 *****************************************************************************/
4899 {
4904 uint32 mins;
4924 }