2 Unix SMB/CIFS implementation.
5 Copyright (C) Tim Potter 2000
6 Copyright (C) Guenther Deschner 2008
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "rpcclient.h"
24 #include "rpc_client/cli_pipe.h"
25 #include "../libcli/auth/libcli_auth.h"
26 #include "../librpc/gen_ndr/ndr_netlogon.h"
27 #include "../librpc/gen_ndr/ndr_netlogon_c.h"
28 #include "rpc_client/cli_netlogon.h"
31 static WERROR
cmd_netlogon_logon_ctrl2(struct rpc_pipe_client
*cli
,
32 TALLOC_CTX
*mem_ctx
, int argc
,
35 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
37 const char *logon_server
= cli
->desthost
;
38 enum netr_LogonControlCode function_code
= NETLOGON_CONTROL_REDISCOVER
;
40 union netr_CONTROL_DATA_INFORMATION data
;
41 union netr_CONTROL_QUERY_INFORMATION query
;
42 const char *domain
= lp_workgroup();
43 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
46 fprintf(stderr
, "Usage: %s <logon_server> <function_code> "
47 "<level> <domain>\n", argv
[0]);
52 logon_server
= argv
[1];
56 function_code
= atoi(argv
[2]);
60 level
= atoi(argv
[3]);
67 switch (function_code
) {
68 case NETLOGON_CONTROL_REDISCOVER
:
69 case NETLOGON_CONTROL_TC_QUERY
:
76 status
= dcerpc_netr_LogonControl2(b
, mem_ctx
,
83 if (!NT_STATUS_IS_OK(status
)) {
84 return ntstatus_to_werror(status
);
87 if (!W_ERROR_IS_OK(werr
)) {
96 static WERROR
cmd_netlogon_getanydcname(struct rpc_pipe_client
*cli
,
97 TALLOC_CTX
*mem_ctx
, int argc
,
100 const char *dcname
= NULL
;
104 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
107 fprintf(stderr
, "Usage: %s domainname\n", argv
[0]);
111 /* Make sure to wait for our DC's reply */
112 old_timeout
= rpccli_set_timeout(cli
, 30000); /* 30 seconds. */
113 rpccli_set_timeout(cli
, MAX(old_timeout
, 30000)); /* At least 30 sec */
115 status
= dcerpc_netr_GetAnyDCName(b
, mem_ctx
,
120 rpccli_set_timeout(cli
, old_timeout
);
122 if (!NT_STATUS_IS_OK(status
)) {
123 return ntstatus_to_werror(status
);
126 if (!W_ERROR_IS_OK(werr
)) {
130 /* Display results */
132 printf("%s\n", dcname
);
137 static WERROR
cmd_netlogon_getdcname(struct rpc_pipe_client
*cli
,
138 TALLOC_CTX
*mem_ctx
, int argc
,
141 const char *dcname
= NULL
;
145 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
148 fprintf(stderr
, "Usage: %s domainname\n", argv
[0]);
152 /* Make sure to wait for our DC's reply */
153 old_timeout
= rpccli_set_timeout(cli
, 30000); /* 30 seconds. */
154 rpccli_set_timeout(cli
, MAX(30000, old_timeout
)); /* At least 30 sec */
156 status
= dcerpc_netr_GetDcName(b
, mem_ctx
,
161 rpccli_set_timeout(cli
, old_timeout
);
163 if (!NT_STATUS_IS_OK(status
)) {
164 return ntstatus_to_werror(status
);
167 if (!W_ERROR_IS_OK(werr
)) {
171 /* Display results */
173 printf("%s\n", dcname
);
178 static WERROR
cmd_netlogon_dsr_getdcname(struct rpc_pipe_client
*cli
,
179 TALLOC_CTX
*mem_ctx
, int argc
,
183 WERROR werr
= WERR_OK
;
184 uint32 flags
= DS_RETURN_DNS_NAME
;
185 const char *server_name
= cli
->desthost
;
186 const char *domain_name
;
187 struct GUID domain_guid
= GUID_zero();
188 struct GUID site_guid
= GUID_zero();
189 struct netr_DsRGetDCNameInfo
*info
= NULL
;
190 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
193 fprintf(stderr
, "Usage: %s [domain_name] [domain_guid] "
194 "[site_guid] [flags]\n", argv
[0]);
199 domain_name
= argv
[1];
202 if (!NT_STATUS_IS_OK(GUID_from_string(argv
[2], &domain_guid
))) {
208 if (!NT_STATUS_IS_OK(GUID_from_string(argv
[3], &site_guid
))) {
214 sscanf(argv
[4], "%x", &flags
);
216 debug_dsdcinfo_flags(1,flags
);
218 result
= dcerpc_netr_DsRGetDCName(b
, mem_ctx
,
226 if (!NT_STATUS_IS_OK(result
)) {
227 return ntstatus_to_werror(result
);
230 if (W_ERROR_IS_OK(werr
)) {
231 d_printf("DsGetDcName gave: %s\n",
232 NDR_PRINT_STRUCT_STRING(mem_ctx
, netr_DsRGetDCNameInfo
, info
));
236 printf("rpccli_netlogon_dsr_getdcname returned %s\n",
242 static WERROR
cmd_netlogon_dsr_getdcnameex(struct rpc_pipe_client
*cli
,
243 TALLOC_CTX
*mem_ctx
, int argc
,
248 uint32_t flags
= DS_RETURN_DNS_NAME
;
249 const char *server_name
= cli
->desthost
;
250 const char *domain_name
;
251 const char *site_name
= NULL
;
252 struct GUID domain_guid
= GUID_zero();
253 struct netr_DsRGetDCNameInfo
*info
= NULL
;
254 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
257 fprintf(stderr
, "Usage: %s [domain_name] [domain_guid] "
258 "[site_name] [flags]\n", argv
[0]);
262 domain_name
= argv
[1];
265 if (!NT_STATUS_IS_OK(GUID_from_string(argv
[2], &domain_guid
))) {
275 sscanf(argv
[4], "%x", &flags
);
278 debug_dsdcinfo_flags(1,flags
);
280 status
= dcerpc_netr_DsRGetDCNameEx(b
, mem_ctx
,
288 if (!NT_STATUS_IS_OK(status
)) {
289 return ntstatus_to_werror(status
);
292 if (!W_ERROR_IS_OK(result
)) {
296 d_printf("DsRGetDCNameEx gave %s\n",
297 NDR_PRINT_STRUCT_STRING(mem_ctx
, netr_DsRGetDCNameInfo
, info
));
302 static WERROR
cmd_netlogon_dsr_getdcnameex2(struct rpc_pipe_client
*cli
,
303 TALLOC_CTX
*mem_ctx
, int argc
,
308 uint32_t flags
= DS_RETURN_DNS_NAME
;
309 const char *server_name
= cli
->desthost
;
310 const char *domain_name
= NULL
;
311 const char *client_account
= NULL
;
313 const char *site_name
= NULL
;
314 struct GUID domain_guid
= GUID_zero();
315 struct netr_DsRGetDCNameInfo
*info
= NULL
;
316 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
319 fprintf(stderr
, "Usage: %s [client_account] [acb_mask] "
320 "[domain_name] [domain_guid] [site_name] "
321 "[flags]\n", argv
[0]);
326 client_account
= argv
[1];
330 mask
= atoi(argv
[2]);
334 domain_name
= argv
[3];
338 if (!NT_STATUS_IS_OK(GUID_from_string(argv
[4], &domain_guid
))) {
348 sscanf(argv
[6], "%x", &flags
);
351 debug_dsdcinfo_flags(1,flags
);
353 status
= dcerpc_netr_DsRGetDCNameEx2(b
, mem_ctx
,
363 if (!NT_STATUS_IS_OK(status
)) {
364 return ntstatus_to_werror(status
);
367 if (!W_ERROR_IS_OK(result
)) {
371 d_printf("DsRGetDCNameEx2 gave %s\n",
372 NDR_PRINT_STRUCT_STRING(mem_ctx
, netr_DsRGetDCNameInfo
, info
));
378 static WERROR
cmd_netlogon_dsr_getsitename(struct rpc_pipe_client
*cli
,
379 TALLOC_CTX
*mem_ctx
, int argc
,
384 const char *sitename
= NULL
;
385 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
388 fprintf(stderr
, "Usage: %s computername\n", argv
[0]);
392 status
= dcerpc_netr_DsRGetSiteName(b
, mem_ctx
,
396 if (!NT_STATUS_IS_OK(status
)) {
397 return ntstatus_to_werror(status
);
400 if (!W_ERROR_IS_OK(werr
)) {
401 printf("rpccli_netlogon_dsr_gesitename returned %s\n",
402 nt_errstr(werror_to_ntstatus(werr
)));
406 printf("Computer %s is on Site: %s\n", argv
[1], sitename
);
411 static WERROR
cmd_netlogon_logon_ctrl(struct rpc_pipe_client
*cli
,
412 TALLOC_CTX
*mem_ctx
, int argc
,
415 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
417 const char *logon_server
= cli
->desthost
;
418 enum netr_LogonControlCode function_code
= 1;
420 union netr_CONTROL_QUERY_INFORMATION info
;
421 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
424 fprintf(stderr
, "Usage: %s <logon_server> <function_code> "
425 "<level>\n", argv
[0]);
430 logon_server
= argv
[1];
434 function_code
= atoi(argv
[2]);
438 level
= atoi(argv
[3]);
441 status
= dcerpc_netr_LogonControl(b
, mem_ctx
,
447 if (!NT_STATUS_IS_OK(status
)) {
448 return ntstatus_to_werror(status
);
451 if (!W_ERROR_IS_OK(werr
)) {
455 /* Display results */
460 /* Display sam synchronisation information */
462 static void display_sam_sync(struct netr_DELTA_ENUM_ARRAY
*r
)
466 for (i
=0; i
< r
->num_deltas
; i
++) {
468 union netr_DELTA_UNION u
= r
->delta_enum
[i
].delta_union
;
469 union netr_DELTA_ID_UNION id
= r
->delta_enum
[i
].delta_id_union
;
471 switch (r
->delta_enum
[i
].delta_type
) {
472 case NETR_DELTA_DOMAIN
:
473 printf("Domain: %s\n",
474 u
.domain
->domain_name
.string
);
476 case NETR_DELTA_GROUP
:
477 printf("Group: %s\n",
478 u
.group
->group_name
.string
);
480 case NETR_DELTA_DELETE_GROUP
:
481 printf("Delete Group: %d\n",
484 case NETR_DELTA_RENAME_GROUP
:
485 printf("Rename Group: %s -> %s\n",
486 u
.rename_group
->OldName
.string
,
487 u
.rename_group
->NewName
.string
);
489 case NETR_DELTA_USER
:
490 printf("Account: %s\n",
491 u
.user
->account_name
.string
);
493 case NETR_DELTA_DELETE_USER
:
494 printf("Delete User: %d\n",
497 case NETR_DELTA_RENAME_USER
:
498 printf("Rename user: %s -> %s\n",
499 u
.rename_user
->OldName
.string
,
500 u
.rename_user
->NewName
.string
);
502 case NETR_DELTA_GROUP_MEMBER
:
503 for (j
=0; j
< u
.group_member
->num_rids
; j
++) {
504 printf("rid 0x%x, attrib 0x%08x\n",
505 u
.group_member
->rids
[j
],
506 u
.group_member
->attribs
[j
]);
509 case NETR_DELTA_ALIAS
:
510 printf("Alias: %s\n",
511 u
.alias
->alias_name
.string
);
513 case NETR_DELTA_DELETE_ALIAS
:
514 printf("Delete Alias: %d\n",
517 case NETR_DELTA_RENAME_ALIAS
:
518 printf("Rename alias: %s -> %s\n",
519 u
.rename_alias
->OldName
.string
,
520 u
.rename_alias
->NewName
.string
);
522 case NETR_DELTA_ALIAS_MEMBER
:
523 for (j
=0; j
< u
.alias_member
->sids
.num_sids
; j
++) {
525 sid_to_fstring(sid_str
,
526 u
.alias_member
->sids
.sids
[j
].sid
);
527 printf("%s\n", sid_str
);
530 case NETR_DELTA_POLICY
:
531 printf("Policy: %s\n",
532 sid_string_dbg(id
.sid
));
534 case NETR_DELTA_TRUSTED_DOMAIN
:
535 printf("Trusted Domain: %s\n",
536 u
.trusted_domain
->domain_name
.string
);
538 case NETR_DELTA_DELETE_TRUST
:
539 printf("Delete Trust: %s\n",
540 sid_string_dbg(id
.sid
));
542 case NETR_DELTA_ACCOUNT
:
543 printf("Account: %s\n",
544 sid_string_dbg(id
.sid
));
546 case NETR_DELTA_DELETE_ACCOUNT
:
547 printf("Delete Account: %s\n",
548 sid_string_dbg(id
.sid
));
550 case NETR_DELTA_SECRET
:
551 printf("Secret: %s\n",
554 case NETR_DELTA_DELETE_SECRET
:
555 printf("Delete Secret: %s\n",
558 case NETR_DELTA_DELETE_GROUP2
:
559 printf("Delete Group2: %s\n",
560 u
.delete_group
->account_name
);
562 case NETR_DELTA_DELETE_USER2
:
563 printf("Delete User2: %s\n",
564 u
.delete_user
->account_name
);
566 case NETR_DELTA_MODIFY_COUNT
:
567 printf("sam sequence update: 0x%016llx\n",
568 (unsigned long long) *u
.modified_count
);
571 printf("unknown delta type 0x%02x\n",
572 r
->delta_enum
[i
].delta_type
);
578 /* Perform sam synchronisation */
580 static NTSTATUS
cmd_netlogon_sam_sync(struct rpc_pipe_client
*cli
,
581 TALLOC_CTX
*mem_ctx
, int argc
,
584 NTSTATUS result
= NT_STATUS_UNSUCCESSFUL
;
586 const char *logon_server
= cli
->desthost
;
587 const char *computername
= global_myname();
588 struct netr_Authenticator credential
;
589 struct netr_Authenticator return_authenticator
;
590 enum netr_SamDatabaseID database_id
= SAM_DATABASE_DOMAIN
;
591 uint16_t restart_state
= 0;
592 uint32_t sync_context
= 0;
593 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
596 fprintf(stderr
, "Usage: %s [database_id]\n", argv
[0]);
601 database_id
= atoi(argv
[1]);
604 /* Synchronise sam database */
607 struct netr_DELTA_ENUM_ARRAY
*delta_enum_array
= NULL
;
609 netlogon_creds_client_authenticator(cli
->dc
, &credential
);
611 status
= dcerpc_netr_DatabaseSync2(b
, mem_ctx
,
615 &return_authenticator
,
622 if (!NT_STATUS_IS_OK(status
)) {
626 /* Check returned credentials. */
627 if (!netlogon_creds_client_check(cli
->dc
,
628 &return_authenticator
.cred
)) {
629 DEBUG(0,("credentials chain check failed\n"));
630 return NT_STATUS_ACCESS_DENIED
;
633 if (NT_STATUS_IS_ERR(result
)) {
637 /* Display results */
639 display_sam_sync(delta_enum_array
);
641 TALLOC_FREE(delta_enum_array
);
643 } while (NT_STATUS_EQUAL(result
, STATUS_MORE_ENTRIES
));
648 /* Perform sam delta synchronisation */
650 static NTSTATUS
cmd_netlogon_sam_deltas(struct rpc_pipe_client
*cli
,
651 TALLOC_CTX
*mem_ctx
, int argc
,
654 NTSTATUS result
= NT_STATUS_UNSUCCESSFUL
;
657 const char *logon_server
= cli
->desthost
;
658 const char *computername
= global_myname();
659 struct netr_Authenticator credential
;
660 struct netr_Authenticator return_authenticator
;
661 enum netr_SamDatabaseID database_id
= SAM_DATABASE_DOMAIN
;
662 uint64_t sequence_num
;
663 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
666 fprintf(stderr
, "Usage: %s database_id seqnum\n", argv
[0]);
670 database_id
= atoi(argv
[1]);
673 sequence_num
= tmp
& 0xffff;
676 struct netr_DELTA_ENUM_ARRAY
*delta_enum_array
= NULL
;
678 netlogon_creds_client_authenticator(cli
->dc
, &credential
);
680 status
= dcerpc_netr_DatabaseDeltas(b
, mem_ctx
,
684 &return_authenticator
,
690 if (!NT_STATUS_IS_OK(status
)) {
694 /* Check returned credentials. */
695 if (!netlogon_creds_client_check(cli
->dc
,
696 &return_authenticator
.cred
)) {
697 DEBUG(0,("credentials chain check failed\n"));
698 return NT_STATUS_ACCESS_DENIED
;
701 if (NT_STATUS_IS_ERR(result
)) {
705 /* Display results */
707 display_sam_sync(delta_enum_array
);
709 TALLOC_FREE(delta_enum_array
);
711 } while (NT_STATUS_EQUAL(result
, STATUS_MORE_ENTRIES
));
716 /* Log on a domain user */
718 static NTSTATUS
cmd_netlogon_sam_logon(struct rpc_pipe_client
*cli
,
719 TALLOC_CTX
*mem_ctx
, int argc
,
722 NTSTATUS result
= NT_STATUS_UNSUCCESSFUL
;
723 int logon_type
= NetlogonNetworkInformation
;
724 const char *username
, *password
;
725 uint16_t validation_level
= 3;
726 uint32 logon_param
= 0;
727 const char *workstation
= NULL
;
729 /* Check arguments */
731 if (argc
< 3 || argc
> 7) {
732 fprintf(stderr
, "Usage: samlogon <username> <password> [workstation]"
733 "[logon_type (1 or 2)] [auth level (2 or 3)] [logon_parameter]\n");
741 workstation
= argv
[3];
744 sscanf(argv
[4], "%i", &logon_type
);
747 validation_level
= atoi(argv
[5]);
750 sscanf(argv
[6], "%x", &logon_param
);
752 /* Perform the sam logon */
754 result
= rpccli_netlogon_sam_logon(cli
, mem_ctx
, logon_param
, lp_workgroup(), username
, password
, workstation
, validation_level
, logon_type
);
756 if (!NT_STATUS_IS_OK(result
))
763 /* Change the trust account password */
765 static NTSTATUS
cmd_netlogon_change_trust_pw(struct rpc_pipe_client
*cli
,
766 TALLOC_CTX
*mem_ctx
, int argc
,
769 NTSTATUS result
= NT_STATUS_UNSUCCESSFUL
;
771 /* Check arguments */
774 fprintf(stderr
, "Usage: change_trust_pw");
778 /* Perform the sam logon */
780 result
= trust_pw_find_change_and_store_it(cli
, mem_ctx
,
783 if (!NT_STATUS_IS_OK(result
))
790 static WERROR
cmd_netlogon_gettrustrid(struct rpc_pipe_client
*cli
,
791 TALLOC_CTX
*mem_ctx
, int argc
,
794 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
795 WERROR werr
= WERR_GENERAL_FAILURE
;
796 const char *server_name
= cli
->desthost
;
797 const char *domain_name
= lp_workgroup();
799 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
801 if (argc
< 1 || argc
> 3) {
802 fprintf(stderr
, "Usage: %s <server_name> <domain_name>\n",
808 server_name
= argv
[1];
812 domain_name
= argv
[2];
815 status
= dcerpc_netr_LogonGetTrustRid(b
, mem_ctx
,
820 if (!NT_STATUS_IS_OK(status
)) {
821 werr
= ntstatus_to_werror(status
);
825 if (W_ERROR_IS_OK(werr
)) {
826 printf("Rid: %d\n", rid
);
832 static WERROR
cmd_netlogon_dsr_enumtrustdom(struct rpc_pipe_client
*cli
,
833 TALLOC_CTX
*mem_ctx
, int argc
,
836 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
837 WERROR werr
= WERR_GENERAL_FAILURE
;
838 const char *server_name
= cli
->desthost
;
839 uint32_t trust_flags
= NETR_TRUST_FLAG_IN_FOREST
;
840 struct netr_DomainTrustList trusts
;
841 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
843 if (argc
< 1 || argc
> 3) {
844 fprintf(stderr
, "Usage: %s <server_name> <trust_flags>\n",
850 server_name
= argv
[1];
854 sscanf(argv
[2], "%x", &trust_flags
);
857 status
= dcerpc_netr_DsrEnumerateDomainTrusts(b
, mem_ctx
,
862 if (!NT_STATUS_IS_OK(status
)) {
863 werr
= ntstatus_to_werror(status
);
867 if (W_ERROR_IS_OK(werr
)) {
870 printf("%d domains returned\n", trusts
.count
);
872 for (i
=0; i
<trusts
.count
; i
++ ) {
874 trusts
.array
[i
].dns_name
,
875 trusts
.array
[i
].netbios_name
);
882 static WERROR
cmd_netlogon_deregisterdnsrecords(struct rpc_pipe_client
*cli
,
883 TALLOC_CTX
*mem_ctx
, int argc
,
886 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
887 WERROR werr
= WERR_GENERAL_FAILURE
;
888 const char *server_name
= cli
->desthost
;
889 const char *domain
= lp_workgroup();
890 const char *dns_host
= NULL
;
891 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
893 if (argc
< 1 || argc
> 4) {
894 fprintf(stderr
, "Usage: %s <server_name> <domain_name> "
895 "<dns_host>\n", argv
[0]);
900 server_name
= argv
[1];
911 status
= dcerpc_netr_DsrDeregisterDNSHostRecords(b
, mem_ctx
,
918 if (!NT_STATUS_IS_OK(status
)) {
919 werr
= ntstatus_to_werror(status
);
923 if (W_ERROR_IS_OK(werr
)) {
930 static WERROR
cmd_netlogon_dsr_getforesttrustinfo(struct rpc_pipe_client
*cli
,
931 TALLOC_CTX
*mem_ctx
, int argc
,
934 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
935 WERROR werr
= WERR_GENERAL_FAILURE
;
936 const char *server_name
= cli
->desthost
;
937 const char *trusted_domain_name
= NULL
;
938 struct lsa_ForestTrustInformation
*info
= NULL
;
940 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
942 if (argc
< 1 || argc
> 4) {
943 fprintf(stderr
, "Usage: %s <server_name> <trusted_domain_name> "
944 "<flags>\n", argv
[0]);
949 server_name
= argv
[1];
953 trusted_domain_name
= argv
[2];
957 sscanf(argv
[3], "%x", &flags
);
960 status
= dcerpc_netr_DsRGetForestTrustInformation(b
, mem_ctx
,
966 if (!NT_STATUS_IS_OK(status
)) {
967 werr
= ntstatus_to_werror(status
);
971 if (W_ERROR_IS_OK(werr
)) {
978 static NTSTATUS
cmd_netlogon_enumtrusteddomains(struct rpc_pipe_client
*cli
,
979 TALLOC_CTX
*mem_ctx
, int argc
,
982 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
984 const char *server_name
= cli
->desthost
;
985 struct netr_Blob blob
;
986 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
989 if (argc
< 1 || argc
> 3) {
990 fprintf(stderr
, "Usage: %s <server_name>\n", argv
[0]);
995 server_name
= argv
[1];
998 status
= dcerpc_netr_NetrEnumerateTrustedDomains(b
, mem_ctx
,
1002 if (!NT_STATUS_IS_OK(status
)) {
1006 if (!NT_STATUS_IS_OK(result
)) {
1011 printf("success\n");
1012 dump_data(1, blob
.data
, blob
.length
);
1017 static WERROR
cmd_netlogon_enumtrusteddomainsex(struct rpc_pipe_client
*cli
,
1018 TALLOC_CTX
*mem_ctx
, int argc
,
1021 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
1022 WERROR werr
= WERR_GENERAL_FAILURE
;
1023 const char *server_name
= cli
->desthost
;
1024 struct netr_DomainTrustList list
;
1025 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
1027 if (argc
< 1 || argc
> 3) {
1028 fprintf(stderr
, "Usage: %s <server_name>\n", argv
[0]);
1033 server_name
= argv
[1];
1036 status
= dcerpc_netr_NetrEnumerateTrustedDomainsEx(b
, mem_ctx
,
1040 if (!NT_STATUS_IS_OK(status
)) {
1041 werr
= ntstatus_to_werror(status
);
1045 if (W_ERROR_IS_OK(werr
)) {
1046 printf("success\n");
1052 static WERROR
cmd_netlogon_getdcsitecoverage(struct rpc_pipe_client
*cli
,
1053 TALLOC_CTX
*mem_ctx
, int argc
,
1056 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
1057 WERROR werr
= WERR_GENERAL_FAILURE
;
1058 const char *server_name
= cli
->desthost
;
1059 struct DcSitesCtr
*ctr
= NULL
;
1060 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
1062 if (argc
< 1 || argc
> 3) {
1063 fprintf(stderr
, "Usage: %s <server_name>\n", argv
[0]);
1068 server_name
= argv
[1];
1071 status
= dcerpc_netr_DsrGetDcSiteCoverageW(b
, mem_ctx
,
1075 if (!NT_STATUS_IS_OK(status
)) {
1076 werr
= ntstatus_to_werror(status
);
1080 if (W_ERROR_IS_OK(werr
) && ctr
->num_sites
) {
1082 printf("sites covered by this DC: %d\n", ctr
->num_sites
);
1083 for (i
=0; i
<ctr
->num_sites
; i
++) {
1084 printf("%s\n", ctr
->sites
[i
].string
);
1091 static NTSTATUS
cmd_netlogon_database_redo(struct rpc_pipe_client
*cli
,
1092 TALLOC_CTX
*mem_ctx
, int argc
,
1095 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
1097 const char *server_name
= cli
->desthost
;
1098 uint32_t neg_flags
= NETLOGON_NEG_AUTH2_ADS_FLAGS
;
1099 struct netr_Authenticator clnt_creds
, srv_cred
;
1100 struct netr_DELTA_ENUM_ARRAY
*delta_enum_array
= NULL
;
1101 unsigned char trust_passwd_hash
[16];
1102 enum netr_SchannelType sec_channel_type
= 0;
1103 struct netr_ChangeLogEntry e
;
1105 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
1108 fprintf(stderr
, "Usage: %s <user rid>\n", argv
[0]);
1109 return NT_STATUS_OK
;
1113 sscanf(argv
[1], "%d", &rid
);
1116 if (!secrets_fetch_trust_account_password(lp_workgroup(),
1118 NULL
, &sec_channel_type
)) {
1119 return NT_STATUS_UNSUCCESSFUL
;
1122 status
= rpccli_netlogon_setup_creds(cli
,
1123 server_name
, /* server name */
1124 lp_workgroup(), /* domain */
1125 global_myname(), /* client name */
1126 global_myname(), /* machine account name */
1131 if (!NT_STATUS_IS_OK(status
)) {
1135 netlogon_creds_client_authenticator(cli
->dc
, &clnt_creds
);
1140 e
.db_index
= SAM_DATABASE_DOMAIN
;
1141 e
.delta_type
= NETR_DELTA_USER
;
1143 status
= dcerpc_netr_DatabaseRedo(b
, mem_ctx
,
1149 0, /* is calculated automatically */
1152 if (!NT_STATUS_IS_OK(status
)) {
1156 if (!netlogon_creds_client_check(cli
->dc
, &srv_cred
.cred
)) {
1157 DEBUG(0,("credentials chain check failed\n"));
1158 return NT_STATUS_ACCESS_DENIED
;
1164 static NTSTATUS
cmd_netlogon_capabilities(struct rpc_pipe_client
*cli
,
1165 TALLOC_CTX
*mem_ctx
, int argc
,
1168 NTSTATUS status
= NT_STATUS_UNSUCCESSFUL
;
1170 struct netr_Authenticator credential
;
1171 struct netr_Authenticator return_authenticator
;
1172 union netr_Capabilities capabilities
;
1174 struct dcerpc_binding_handle
*b
= cli
->binding_handle
;
1177 fprintf(stderr
, "Usage: %s <level>\n", argv
[0]);
1178 return NT_STATUS_OK
;
1182 level
= atoi(argv
[1]);
1185 ZERO_STRUCT(return_authenticator
);
1187 netlogon_creds_client_authenticator(cli
->dc
, &credential
);
1189 status
= dcerpc_netr_LogonGetCapabilities(b
, mem_ctx
,
1193 &return_authenticator
,
1197 if (!NT_STATUS_IS_OK(status
)) {
1201 if (!netlogon_creds_client_check(cli
->dc
,
1202 &return_authenticator
.cred
)) {
1203 DEBUG(0,("credentials chain check failed\n"));
1204 return NT_STATUS_ACCESS_DENIED
;
1207 printf("capabilities: 0x%08x\n", capabilities
.server_capabilities
);
1212 /* List of commands exported by this module */
1214 struct cmd_set netlogon_commands
[] = {
1218 { "logonctrl2", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_logon_ctrl2
, &ndr_table_netlogon
.syntax_id
, NULL
, "Logon Control 2", "" },
1219 { "getanydcname", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_getanydcname
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get trusted DC name", "" },
1220 { "getdcname", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_getdcname
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get trusted PDC name", "" },
1221 { "dsr_getdcname", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_dsr_getdcname
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get trusted DC name", "" },
1222 { "dsr_getdcnameex", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_dsr_getdcnameex
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get trusted DC name", "" },
1223 { "dsr_getdcnameex2", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_dsr_getdcnameex2
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get trusted DC name", "" },
1224 { "dsr_getsitename", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_dsr_getsitename
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get sitename", "" },
1225 { "dsr_getforesttrustinfo", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_dsr_getforesttrustinfo
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get Forest Trust Info", "" },
1226 { "logonctrl", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_logon_ctrl
, &ndr_table_netlogon
.syntax_id
, NULL
, "Logon Control", "" },
1227 { "samsync", RPC_RTYPE_NTSTATUS
, cmd_netlogon_sam_sync
, NULL
, &ndr_table_netlogon
.syntax_id
, NULL
, "Sam Synchronisation", "" },
1228 { "samdeltas", RPC_RTYPE_NTSTATUS
, cmd_netlogon_sam_deltas
, NULL
, &ndr_table_netlogon
.syntax_id
, NULL
, "Query Sam Deltas", "" },
1229 { "samlogon", RPC_RTYPE_NTSTATUS
, cmd_netlogon_sam_logon
, NULL
, &ndr_table_netlogon
.syntax_id
, NULL
, "Sam Logon", "" },
1230 { "change_trust_pw", RPC_RTYPE_NTSTATUS
, cmd_netlogon_change_trust_pw
, NULL
, &ndr_table_netlogon
.syntax_id
, NULL
, "Change Trust Account Password", "" },
1231 { "gettrustrid", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_gettrustrid
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get trust rid", "" },
1232 { "dsr_enumtrustdom", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_dsr_enumtrustdom
, &ndr_table_netlogon
.syntax_id
, NULL
, "Enumerate trusted domains", "" },
1233 { "dsenumdomtrusts", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_dsr_enumtrustdom
, &ndr_table_netlogon
.syntax_id
, NULL
, "Enumerate all trusted domains in an AD forest", "" },
1234 { "deregisterdnsrecords", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_deregisterdnsrecords
, &ndr_table_netlogon
.syntax_id
, NULL
, "Deregister DNS records", "" },
1235 { "netrenumtrusteddomains", RPC_RTYPE_NTSTATUS
, cmd_netlogon_enumtrusteddomains
, NULL
, &ndr_table_netlogon
.syntax_id
, NULL
, "Enumerate trusted domains", "" },
1236 { "netrenumtrusteddomainsex", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_enumtrusteddomainsex
, &ndr_table_netlogon
.syntax_id
, NULL
, "Enumerate trusted domains", "" },
1237 { "getdcsitecoverage", RPC_RTYPE_WERROR
, NULL
, cmd_netlogon_getdcsitecoverage
, &ndr_table_netlogon
.syntax_id
, NULL
, "Get the Site-Coverage from a DC", "" },
1238 { "database_redo", RPC_RTYPE_NTSTATUS
, cmd_netlogon_database_redo
, NULL
, &ndr_table_netlogon
.syntax_id
, NULL
, "Replicate single object from a DC", "" },
1239 { "capabilities", RPC_RTYPE_NTSTATUS
, cmd_netlogon_capabilities
, NULL
, &ndr_table_netlogon
.syntax_id
, NULL
, "Return Capabilities", "" },