| blob | 1de08c4fe2bb1354cba2b3a58f2e1e76d74e223c |
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
5 Copyright (C) 2002 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2004,2008 Guenther Deschner (gd@samba.org)
7 Copyright (C) 2005 Jeremy Allison (jra@samba.org)
8 Copyright (C) 2006 Jelmer Vernooij (jelmer@samba.org)
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>. */
53 /**
54 * @file net_rpc.c
55 *
56 * @brief RPC based subcommands for the 'net' utility.
57 *
58 * This file should contain much of the functionality that used to
59 * be found in rpcclient, execpt that the commands should change
60 * less often, and the fucntionality should be sane (the user is not
61 * expected to know a rid/sid before they conduct an operation etc.)
62 *
63 * @todo Perhaps eventually these should be split out into a number
64 * of files, as this could get quite big.
65 **/
68 /**
69 * Many of the RPC functions need the domain sid. This function gets
70 * it at the start of every run
71 *
72 * @param cli A cli_state already connected to the remote machine
73 *
74 * @return The Domain SID of the remote machine.
75 **/
80 {
92 }
97 SEC_FLAG_MAXIMUM_ALLOWED,
104 }
108 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
116 }
122 }
131 }
133 /**
134 * Run a single RPC command, from start to finish.
135 *
136 * @param pipe_name the pipe to connect to (usually a PIPE_ constant)
137 * @param conn_flag a NET_FLAG_ combination. Passed to
138 * net_make_ipc_connection.
139 * @param argc Standard main() style argc.
140 * @param argv Standard main() style argv. Initial components are already
141 * stripped.
142 * @return A shell status integer (0 for success).
143 */
149 rpc_command_fn fn,
152 {
156 NTSTATUS nt_status;
161 /* make use of cli_state handed over as an argument, if possible */
168 }
171 }
175 }
177 /* Create mem_ctx */
182 }
188 }
194 /* Always try and create an schannel netlogon pipe. */
198 domain_name,
204 }
211 CRED_DONT_USE_KERBEROS,
212 DCERPC_AUTH_TYPE_NTLMSSP,
213 DCERPC_AUTH_LEVEL_PRIVACY,
221 }
227 }
228 }
229 }
238 }
243 }
244 }
246 fail:
247 /* close the connection only if it was opened here */
250 }
254 }
256 /**
257 * Force a change of the trust acccount password.
258 *
259 * All parameters are provided by the run_rpc_command function, except for
260 * argc, argv which are passed through.
261 *
262 * @param domain_sid The domain sid acquired from the remote server.
263 * @param cli A cli_state connected to the server.
264 * @param mem_ctx Talloc context, destroyed on completion of the function.
265 * @param argc Standard main() style argc.
266 * @param argv Standard main() style argv. Initial components are already
267 * stripped.
268 *
269 * @return Normal NTSTATUS return.
270 **/
280 {
281 NTSTATUS status;
292 }
295 }
297 /**
298 * Force a change of the trust acccount password.
299 *
300 * @param argc Standard main() style argc.
301 * @param argv Standard main() style argv. Initial components are already
302 * stripped.
303 *
304 * @return A shell status integer (0 for success).
305 **/
308 {
316 }
320 rpc_changetrustpw_internals,
322 }
324 /**
325 * Join a domain, the old way. This function exists to allow
326 * the message to be displayed when oldjoin was explicitly
327 * requested, but not when it was implied by "net rpc join".
328 *
329 * This uses 'machinename' as the inital password, and changes it.
330 *
331 * The password should be created with 'server manager' or equiv first.
332 *
333 * @param argc Standard main() style argc.
334 * @param argv Standard main() style argv. Initial components are already
335 * stripped.
336 *
337 * @return A shell status integer (0 for success).
338 **/
341 {
344 WERROR werr;
355 }
360 }
365 }
367 /*
368 check what type of join - if the user want's to join as
369 a BDC, the server must agree that we are a BDC.
370 */
375 }
382 }
388 }
399 }
403 WKSSVC_JOIN_FLAGS_JOIN_UNSECURE |
404 WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED;
409 }
411 /* Check the short name of the domain */
419 }
429 }
435 fail:
438 }
440 /* issue an overall failure message at the end. */
445 cleanup:
449 }
451 /**
452 * check that a join is OK
453 *
454 * @return A shell status integer (0 for success)
455 *
456 **/
458 {
459 NTSTATUS status;
469 }
474 }
484 }
488 domain,
489 NULL,
490 NULL,
491 DS_RETURN_DNS_NAME,
496 }
499 }
501 /* Display success or failure */
504 dc,
511 }
517 }
519 /**
520 * Join a domain using the administrator username and password
521 *
522 * @param argc Standard main() style argc
523 * @param argc Standard main() style argv. Initial components are already
524 * stripped. Currently not used.
525 * @return A shell status integer (0 for success)
526 *
527 **/
530 {
533 WERROR werr;
543 }
548 }
553 }
555 /*
556 check what type of join - if the user want's to join as
557 a BDC, the server must agree that we are a BDC.
558 */
563 }
570 }
582 WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE |
583 WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED;
588 }
590 /* Check the short name of the domain */
598 }
608 }
614 fail:
615 /* issue an overall failure message at the end. */
623 }
625 /**
626 * 'net rpc join' entrypoint.
627 * @param argc Standard main() style argc.
628 * @param argv Standard main() style argv. Initial components are already
629 * stripped
630 *
631 * Main 'net_rpc_join()' (where the admin username/password is used) is
632 * in net_rpc_join.c.
633 * Try to just change the password, but if that doesn't work, use/prompt
634 * for a username/password.
635 **/
638 {
654 }
659 }
666 }
673 }
676 }
678 /**
679 * display info about a rpc domain
680 *
681 * All parameters are provided by the run_rpc_command function, except for
682 * argc, argv which are passed through.
683 *
684 * @param domain_sid The domain sid acquired from the remote server
685 * @param cli A cli_state connected to the server.
686 * @param mem_ctx Talloc context, destroyed on completion of the function.
687 * @param argc Standard main() style argc.
688 * @param argv Standard main() style argv. Initial components are already
689 * stripped.
690 *
691 * @return Normal NTSTATUS return.
692 **/
702 {
706 fstring sid_str;
711 /* Get sam policy handle */
714 MAXIMUM_ALLOWED_ACCESS,
721 }
728 }
730 /* Get domain policy handle */
733 MAXIMUM_ALLOWED_ACCESS,
741 }
747 }
756 }
767 }
769 done:
771 }
773 /**
774 * 'net rpc info' entrypoint.
775 * @param argc Standard main() style argc.
776 * @param argv Standard main() style argv. Initial components are already
777 * stripped.
778 **/
781 {
789 }
794 }
796 /**
797 * Fetch domain SID into the local secrets.tdb.
798 *
799 * All parameters are provided by the run_rpc_command function, except for
800 * argc, argv which are passed through.
801 *
802 * @param domain_sid The domain sid acquired from the remote server.
803 * @param cli A cli_state connected to the server.
804 * @param mem_ctx Talloc context, destroyed on completion of the function.
805 * @param argc Standard main() style argc.
806 * @param argv Standard main() style argv. Initial components are already
807 * stripped.
808 *
809 * @return Normal NTSTATUS return.
810 **/
820 {
821 fstring sid_str;
830 }
833 }
835 /**
836 * 'net rpc getsid' entrypoint.
837 * @param argc Standard main() style argc.
838 * @param argv Standard main() style argv. Initial components are already
839 * stripped.
840 **/
843 {
848 }
857 }
860 conn_flags,
861 rpc_getsid_internals,
863 }
865 /****************************************************************************/
867 /**
868 * Basic usage function for 'net rpc user'.
869 * @param argc Standard main() style argc.
870 * @param argv Standard main() style argv. Initial components are already
871 * stripped.
872 **/
875 {
877 }
879 /**
880 * Add a new user to a remote RPC server.
881 *
882 * @param argc Standard main() style argc.
883 * @param argv Standard main() style argv. Initial components are already
884 * stripped.
885 *
886 * @return A shell status integer (0 for success).
887 **/
890 {
891 NET_API_STATUS status;
898 }
905 }
912 status));
916 }
919 }
921 /**
922 * Rename a user on a remote RPC server.
923 *
924 * @param argc Standard main() style argc.
925 * @param argv Standard main() style argv. Initial components are already
926 * stripped.
927 *
928 * @return A shell status integer (0 for success).
929 **/
932 {
933 NET_API_STATUS status;
940 }
953 }
956 }
958 /**
959 * Set a user's primary group
960 *
961 * @param argc Standard main() style argc.
962 * @param argv Standard main() style argv. Initial components are already
963 * stripped.
964 *
965 * @return A shell status integer (0 for success).
966 **/
970 {
971 NET_API_STATUS status;
980 }
988 }
1005 }
1007 }
1009 /**
1010 * Delete a user from a remote RPC server.
1011 *
1012 * @param argc Standard main() style argc.
1013 * @param argv Standard main() style argv. Initial components are already
1014 * stripped.
1015 *
1016 * @return A shell status integer (0 for success).
1017 **/
1020 {
1021 NET_API_STATUS status;
1026 }
1037 }
1040 }
1042 /**
1043 * Set a user's password on a remote RPC server.
1044 *
1045 * @param argc Standard main() style argc.
1046 * @param argv Standard main() style argv. Initial components are already
1047 * stripped.
1048 *
1049 * @return A shell status integer (0 for success).
1050 **/
1053 {
1054 NET_API_STATUS status;
1063 }
1073 }
1079 }
1084 }
1085 }
1089 /* Display results */
1094 status));
1096 }
1099 }
1101 /**
1102 * List a user's groups from a remote RPC server.
1103 *
1104 * @param argc Standard main() style argc.
1105 * @param argv Standard main() style argv. Initial components are already
1106 * stripped.
1107 *
1108 * @return A shell status integer (0 for success)
1109 **/
1113 {
1114 NET_API_STATUS status;
1124 }
1137 status));
1139 }
1143 u0++;
1144 }
1147 }
1149 /**
1150 * List users on a remote RPC server.
1151 *
1152 * All parameters are provided by the run_rpc_command function, except for
1153 * argc, argv which are passed through.
1154 *
1155 * @param domain_sid The domain sid acquired from the remote server.
1156 * @param cli A cli_state connected to the server.
1157 * @param mem_ctx Talloc context, destroyed on completion of the function.
1158 * @param argc Standard main() style argc.
1159 * @param argv Standard main() style argv. Initial components are already
1160 * stripped.
1161 *
1162 * @return Normal NTSTATUS return.
1163 **/
1166 {
1167 NET_API_STATUS status;
1172 /* Query domain users */
1184 start_idx,
1185 max_entries,
1186 max_size,
1191 }
1200 else
1202 info++;
1203 }
1207 loop_count++;
1213 }
1215 /**
1216 * 'net rpc user' entrypoint.
1217 * @param argc Standard main() style argc.
1218 * @param argv Standard main() style argv. Initial components are already
1219 * stripped.
1220 **/
1223 {
1224 NET_API_STATUS status;
1227 {
1229 rpc_user_add,
1230 NET_TRANSPORT_RPC,
1234 },
1235 {
1237 rpc_user_info,
1238 NET_TRANSPORT_RPC,
1242 },
1243 {
1245 rpc_user_delete,
1246 NET_TRANSPORT_RPC,
1250 },
1251 {
1253 rpc_user_password,
1254 NET_TRANSPORT_RPC,
1258 },
1259 {
1261 rpc_user_rename,
1262 NET_TRANSPORT_RPC,
1266 },
1267 {
1269 rpc_user_setprimarygroup,
1270 NET_TRANSPORT_RPC,
1273 " Set a user's primary group"
1274 },
1276 };
1281 }
1286 }
1297 }
1300 }
1303 }
1310 {
1312 }
1319 {
1321 }
1335 {
1347 }
1359 }
1366 }
1372 }
1376 MAXIMUM_ALLOWED_ACCESS,
1381 }
1385 }
1389 MAXIMUM_ALLOWED_ACCESS,
1395 }
1399 }
1403 MAXIMUM_ALLOWED_ACCESS,
1404 rid,
1409 }
1413 }
1417 done:
1420 }
1423 }
1426 }
1428 }
1436 {
1445 }
1448 user_hnd,
1454 }
1457 }
1464 }
1471 {
1473 rpc_sh_user_show_internals);
1474 }
1476 #define FETCHSTR(name, rec) \
1477 do { if (strequal(ctx->thiscmd, name)) { \
1478 oldval = talloc_strdup(mem_ctx, info->info21.rec.string); } \
1479 } while (0);
1481 #define SETSTR(name, rec, flag) \
1482 do { if (strequal(ctx->thiscmd, name)) { \
1483 init_lsa_String(&(info->info21.rec), argv[0]); \
1484 info->info21.fields_present |= SAMR_FIELD_##flag; } \
1485 } while (0);
1493 {
1504 }
1507 user_hnd,
1513 }
1516 }
1530 }
1534 }
1546 user_hnd,
1548 info,
1552 }
1559 done:
1562 }
1564 #define HANDLEFLG(name, rec) \
1565 do { if (strequal(ctx->thiscmd, name)) { \
1567 if (newval) { \
1568 newflags = oldflags | ACB_##rec; \
1569 } else { \
1570 newflags = oldflags & ~ACB_##rec; \
1571 } } } while (0);
1578 {
1580 rpc_sh_user_str_edit_internals);
1581 }
1589 {
1601 /* TRANSATORS: The yes|no here are program keywords. Please do
1602 not translate. */
1606 }
1611 user_hnd,
1617 }
1620 }
1633 oldval);
1635 }
1643 user_hnd,
1645 info,
1649 }
1654 }
1656 done:
1659 }
1666 {
1668 rpc_sh_user_flag_edit_internals);
1669 }
1674 {
1708 };
1711 }
1716 {
1732 };
1735 }
1737 /****************************************************************************/
1739 /**
1740 * Basic usage function for 'net rpc group'.
1741 * @param argc Standard main() style argc.
1742 * @param argv Standard main() style argv. Initial components are already
1743 * stripped.
1744 **/
1747 {
1749 }
1751 /**
1752 * Delete group on a remote RPC server.
1753 *
1754 * All parameters are provided by the run_rpc_command function, except for
1755 * argc, argv which are passed through.
1756 *
1757 * @param domain_sid The domain sid acquired from the remote server.
1758 * @param cli A cli_state connected to the server.
1759 * @param mem_ctx Talloc context, destroyed on completion of the function.
1760 * @param argc Standard main() style argc.
1761 * @param argv Standard main() style argv. Initial components are already
1762 * stripped.
1763 *
1764 * @return Normal NTSTATUS return.
1765 **/
1775 {
1781 /* char **names; */
1783 /* struct samr_RidWithAttribute *user_gids; */
1793 }
1797 MAXIMUM_ALLOWED_ACCESS,
1803 }
1809 }
1813 MAXIMUM_ALLOWED_ACCESS,
1820 }
1826 }
1840 }
1846 }
1850 }
1854 }
1857 {
1861 MAXIMUM_ALLOWED_ACCESS,
1868 }
1874 }
1887 }
1895 }
1901 }
1903 /* Check if group is anyone's primary group */
1905 {
1908 MAXIMUM_ALLOWED_ACCESS,
1917 }
1925 }
1938 }
1947 }
1954 }
1956 }
1959 }
1963 "some of it's members have it as primary "
1967 }
1969 /* remove all group members */
1971 {
1981 }
1990 }
1991 }
1998 }
2003 /* removing a local group is easier... */
2007 MAXIMUM_ALLOWED_ACCESS,
2014 }
2019 }
2026 }
2037 }
2046 }
2048 done:
2051 }
2054 {
2057 }
2060 {
2061 NET_API_STATUS status;
2068 }
2075 }
2083 status));
2087 }
2090 }
2093 {
2094 NET_API_STATUS status;
2101 }
2108 }
2116 status));
2120 }
2123 }
2126 {
2131 }
2138 {
2150 }
2159 }
2167 }
2171 done:
2174 }
2178 /* Try as S-1-5-whatever */
2186 }
2187 }
2190 }
2196 {
2212 }
2214 /* Get sam policy handle */
2217 MAXIMUM_ALLOWED_ACCESS,
2222 }
2225 }
2227 /* Get domain policy handle */
2230 MAXIMUM_ALLOWED_ACCESS,
2236 }
2239 }
2252 member);
2254 }
2259 member);
2261 }
2265 }
2269 }
2273 MAXIMUM_ALLOWED_ACCESS,
2274 group_rid,
2279 }
2284 }
2293 }
2297 done:
2300 }
2307 {
2323 }
2330 member);
2332 }
2334 /* Get sam policy handle */
2337 MAXIMUM_ALLOWED_ACCESS,
2342 }
2346 }
2348 /* Get domain policy handle */
2351 MAXIMUM_ALLOWED_ACCESS,
2357 }
2361 }
2365 MAXIMUM_ALLOWED_ACCESS,
2366 alias_rid,
2371 }
2374 }
2382 }
2386 done:
2389 }
2399 {
2411 }
2418 }
2427 }
2429 }
2438 }
2440 }
2446 }
2449 {
2451 rpc_group_addmem_internals,
2453 }
2460 {
2477 /* Get sam policy handle */
2480 MAXIMUM_ALLOWED_ACCESS,
2485 }
2488 }
2491 /* Get domain policy handle */
2494 MAXIMUM_ALLOWED_ACCESS,
2500 }
2503 }
2516 member);
2518 }
2523 member);
2525 }
2529 }
2533 }
2537 MAXIMUM_ALLOWED_ACCESS,
2538 group_rid,
2543 }
2547 }
2555 }
2558 done:
2561 }
2568 {
2590 member);
2592 }
2594 /* Get sam policy handle */
2597 MAXIMUM_ALLOWED_ACCESS,
2602 }
2606 }
2608 /* Get domain policy handle */
2611 MAXIMUM_ALLOWED_ACCESS,
2617 }
2621 }
2625 MAXIMUM_ALLOWED_ACCESS,
2626 alias_rid,
2631 }
2635 }
2644 }
2648 done:
2651 }
2661 {
2673 }
2680 }
2689 }
2691 }
2700 }
2702 }
2708 }
2711 {
2713 rpc_group_delmem_internals,
2715 }
2717 /**
2718 * List groups on a remote RPC server.
2719 *
2720 * All parameters are provided by the run_rpc_command function, except for
2721 * argc, argv which are passes through.
2722 *
2723 * @param domain_sid The domain sid acquired from the remote server.
2724 * @param cli A cli_state connected to the server.
2725 * @param mem_ctx Talloc context, destroyed on completion of the function.
2726 * @param argc Standard main() style argc.
2727 * @param argv Standard main() style argv. Initial components are already
2728 * stripped.
2729 *
2730 * @return Normal NTSTATUS return.
2731 **/
2741 {
2759 " If none of global, local or builtin is "
2760 "specified, all three options are considered "
2763 }
2769 }
2780 }
2782 /* Get sam policy handle */
2786 MAXIMUM_ALLOWED_ACCESS,
2791 }
2795 }
2797 /* Get domain policy handle */
2801 MAXIMUM_ALLOWED_ACCESS,
2807 }
2811 }
2813 /* Query domain groups */
2829 start_idx,
2830 max_entries,
2831 max_size,
2838 }
2857 else
2859 }
2861 /* query domain aliases */
2875 }
2888 NTSTATUS _result;
2908 }
2909 }
2910 }
2911 }
2916 description);
2919 }
2920 }
2923 /* Get builtin policy handle */
2927 MAXIMUM_ALLOWED_ACCESS,
2933 }
2937 }
2939 /* query builtin aliases */
2948 max_entries,
2953 }
2958 }
2968 NTSTATUS _result;
2988 }
2989 }
2990 }
2991 }
2996 description);
2999 }
3000 }
3005 done:
3007 }
3010 {
3012 rpc_group_list_internals,
3014 }
3023 {
3033 fstring sid_str;
3037 domain_pol,
3038 MAXIMUM_ALLOWED_ACCESS,
3039 rid,
3044 }
3047 }
3055 }
3058 }
3070 domain_pol,
3071 this_time,
3072 group_rids,
3078 }
3081 }
3084 }
3087 }
3088 /* We only have users as members, but make the output
3089 the same as the output of alias members */
3097 SID_NAME_USER);
3101 }
3102 }
3106 }
3109 }
3117 {
3131 domain_pol,
3132 MAXIMUM_ALLOWED_ACCESS,
3133 rid,
3138 }
3141 }
3150 }
3154 }
3160 }
3169 }
3178 }
3185 }
3189 }
3200 }
3203 fstring sid_str;
3213 else
3215 }
3216 }
3220 }
3230 {
3237 /* Get sam policy handle */
3241 MAXIMUM_ALLOWED_ACCESS,
3246 }
3249 }
3251 /* Get domain policy handle */
3255 MAXIMUM_ALLOWED_ACCESS,
3261 }
3264 }
3277 }
3281 /* Ok, did not find it in the global sam, try with builtin */
3291 MAXIMUM_ALLOWED_ACCESS,
3297 }
3302 }
3313 }
3318 }
3319 }
3325 }
3330 }
3337 }
3342 }
3345 }
3348 {
3351 }
3354 rpc_group_members_internals,
3356 }
3359 {
3360 NET_API_STATUS status;
3368 }
3381 status));
3383 }
3386 }
3389 {
3392 }
3395 }
3397 /**
3398 * 'net rpc group' entrypoint.
3399 * @param argc Standard main() style argc.
3400 * @param argv Standard main() style argv. Initial components are already
3401 * stripped.
3402 **/
3405 {
3406 NET_API_STATUS status;
3409 {
3411 rpc_group_add,
3412 NET_TRANSPORT_RPC,
3416 },
3417 {
3419 rpc_group_delete,
3420 NET_TRANSPORT_RPC,
3424 },
3425 {
3427 rpc_group_addmem,
3428 NET_TRANSPORT_RPC,
3432 },
3433 {
3435 rpc_group_delmem,
3436 NET_TRANSPORT_RPC,
3440 },
3441 {
3443 rpc_group_list,
3444 NET_TRANSPORT_RPC,
3448 },
3449 {
3451 rpc_group_members,
3452 NET_TRANSPORT_RPC,
3456 },
3457 {
3459 rpc_group_rename,
3460 NET_TRANSPORT_RPC,
3464 },
3466 };
3471 }
3476 }
3482 " Alias for net rpc group list global "
3486 }
3489 rpc_group_list_internals,
3491 }
3494 }
3496 /****************************************************************************/
3499 {
3501 }
3503 /**
3504 * Add a share on a remote RPC server.
3505 *
3506 * @param argc Standard main() style argc.
3507 * @param argv Standard main() style argv. Initial components are already
3508 * stripped.
3509 *
3510 * @return A shell status integer (0 for success).
3511 **/
3514 {
3515 NET_API_STATUS status;
3526 }
3530 }
3535 }
3555 }
3558 }
3560 /**
3561 * Delete a share on a remote RPC server.
3562 *
3563 * @param domain_sid The domain sid acquired from the remote server.
3564 * @param argc Standard main() style argc.
3565 * @param argv Standard main() style argv. Initial components are already
3566 * stripped.
3567 *
3568 * @return A shell status integer (0 for success).
3569 **/
3571 {
3574 }
3577 }
3579 /**
3580 * Formatted print of share info
3581 *
3582 * @param r pointer to SHARE_INFO_1 to format
3583 **/
3587 {
3595 }
3596 }
3605 {
3606 WERROR result;
3607 NTSTATUS status;
3611 /* no specific share requested, enumerate all */
3622 info_ctr,
3623 preferred_len,
3629 }
3631 }
3633 /* request just one share */
3637 level,
3644 }
3648 }
3650 /* construct ctr */
3657 {
3669 }
3671 {
3683 }
3685 {
3697 }
3699 done:
3701 }
3703 /***
3704 * 'net rpc share list' entrypoint.
3705 * @param argc Standard main() style argc.
3706 * @param argv Standard main() style argv. Initial components are already
3707 * stripped.
3708 **/
3710 {
3711 NET_API_STATUS status;
3725 }
3728 level,
3736 }
3738 /* Display results */
3745 }
3748 done:
3750 }
3753 {
3754 NTSTATUS status;
3760 }
3766 }
3769 }
3773 {
3774 /* only support disk shares */
3777 type);
3779 }
3781 /* skip builtin shares */
3782 /* FIXME: should print$ be added too ? */
3790 }
3793 }
3795 /**
3796 * Migrate shares from a remote RPC server to the local RPC server.
3797 *
3798 * All parameters are provided by the run_rpc_command function, except for
3799 * argc, argv which are passed through.
3800 *
3801 * @param domain_sid The domain sid acquired from the remote server.
3802 * @param cli A cli_state connected to the server.
3803 * @param mem_ctx Talloc context, destroyed on completion of the function.
3804 * @param argc Standard main() style argc.
3805 * @param argv Standard main() style argv. Initial components are already
3806 * stripped.
3807 *
3808 * @return Normal NTSTATUS return.
3809 **/
3819 {
3820 WERROR result;
3835 /* connect destination PI_SRVSVC */
3849 /* reset error-code */
3855 /* finally add the share on the dst server */
3873 }
3878 }
3885 }
3887 }
3891 done:
3894 }
3898 }
3900 /**
3901 * Migrate shares from a RPC server to another.
3902 *
3903 * @param argc Standard main() style argc.
3904 * @param argv Standard main() style argv. Initial components are already
3905 * stripped.
3906 *
3907 * @return A shell status integer (0 for success).
3908 **/
3911 {
3919 }
3924 }
3927 rpc_share_migrate_shares_internals,
3929 }
3931 /**
3932 * Copy a file/dir
3933 *
3934 * @param f file_info
3935 * @param mask current search mask
3936 * @param state arg-pointer
3937 *
3938 **/
3941 {
3945 fstring dir;
3959 /* DIRECTORY */
3969 {
3971 /* create that directory */
3984 }
3990 }
3992 /* search below that directory */
3995 }
3998 }
4005 }
4009 }
4012 /* FILE */
4020 {
4033 net_mode_share);
4035 }
4041 }
4043 /**
4044 * sync files, can be called recursivly to list files
4045 * and then call copy_fn for each file
4046 *
4047 * @param cp_clistate pointer to the copy_clistate we work with
4048 * @param mask the current search mask
4049 *
4050 * @return Boolean result
4051 **/
4053 {
4056 NTSTATUS status;
4068 }
4075 }
4078 }
4081 /**
4082 * Set the top level directory permissions before we do any further copies.
4083 * Should set up ACL inheritance.
4084 **/
4089 {
4108 }
4115 }
4118 }
4120 /**
4121 * Sync all files inside a remote share to another share (over smb).
4122 *
4123 * All parameters are provided by the run_rpc_command function, except for
4124 * argc, argv which are passed through.
4125 *
4126 * @param domain_sid The domain sid acquired from the remote server.
4127 * @param cli A cli_state connected to the server.
4128 * @param mem_ctx Talloc context, destroyed on completion of the function.
4129 * @param argc Standard main() style argc.
4130 * @param argv Standard main() style argv. Initial components are already
4131 * stripped.
4132 *
4133 * @return Normal NTSTATUS return.
4134 **/
4144 {
4145 WERROR result;
4160 }
4176 /* one might not want to mirror whole discs :) */
4181 }
4184 {
4190 net_mode_share);
4192 }
4204 cp_clistate.attribute = FILE_ATTRIBUTE_SYSTEM | FILE_ATTRIBUTE_HIDDEN | FILE_ATTRIBUTE_DIRECTORY;
4207 /* open share source */
4218 /* open share destination */
4225 }
4229 "directory permissions for the "
4233 }
4240 }
4241 }
4245 done:
4256 }
4259 {
4267 }
4272 }
4275 rpc_share_migrate_files_internals,
4277 }
4279 /**
4280 * Migrate share-ACLs from a remote RPC server to the local RPC server.
4281 *
4282 * All parameters are provided by the run_rpc_command function, except for
4283 * argc, argv which are passed through.
4284 *
4285 * @param domain_sid The domain sid acquired from the remote server.
4286 * @param cli A cli_state connected to the server.
4287 * @param mem_ctx Talloc context, destroyed on completion of the function.
4288 * @param argc Standard main() style argc.
4289 * @param argv Standard main() style argv. Initial components are already
4290 * stripped.
4291 *
4292 * @return Normal NTSTATUS return.
4293 **/
4303 {
4304 WERROR result;
4321 /* connect destination PI_SRVSVC */
4334 /* reset error-code */
4347 /* FIXME: shouldn't we be able to just set the security descriptor ? */
4350 /* finally modify the share on the dst server */
4354 level,
4362 }
4368 }
4370 }
4374 done:
4377 }
4381 }
4383 /**
4384 * Migrate share-acls from a RPC server to another.
4385 *
4386 * @param argc Standard main() style argc.
4387 * @param argv Standard main() style argv. Initial components are already
4388 * stripped.
4389 *
4390 * @return A shell status integer (0 for success).
4391 **/
4394 {
4402 }
4407 }
4410 rpc_share_migrate_security_internals,
4412 }
4414 /**
4415 * Migrate shares (including share-definitions, share-acls and files with acls/attrs)
4416 * from one server to another.
4417 *
4418 * @param argc Standard main() style argc.
4419 * @param argv Standard main() style argv. Initial components are already
4420 * stripped.
4421 *
4422 * @return A shell status integer (0 for success).
4423 *
4424 **/
4427 {
4437 }
4442 }
4444 /* order is important. we don't want to be locked out by the share-acl
4445 * before copying files - gd */
4459 argv);
4460 }
4463 /**
4464 * 'net rpc share migrate' entrypoint.
4465 * @param argc Standard main() style argc.
4466 * @param argv Standard main() style argv. Initial components are already
4467 * stripped.
4468 **/
4470 {
4473 {
4475 rpc_share_migrate_all,
4476 NET_TRANSPORT_RPC,
4480 },
4481 {
4483 rpc_share_migrate_files,
4484 NET_TRANSPORT_RPC,
4488 },
4489 {
4491 rpc_share_migrate_security,
4492 NET_TRANSPORT_RPC,
4496 },
4497 {
4499 rpc_share_migrate_shares,
4500 NET_TRANSPORT_RPC,
4504 },
4506 };
4511 }
4517 };
4522 /*
4523 * Add an alias to the static list.
4524 */
4526 {
4533 }
4534 }
4542 }
4543 }
4547 }
4549 /*
4550 * For a specific domain on the server, fetch all the aliases
4551 * and their members. Add all of them to the server_aliases.
4552 */
4558 {
4565 /* Get domain policy handle */
4568 connect_pol,
4569 MAXIMUM_ALLOWED_ACCESS,
4575 }
4578 }
4588 max_entries,
4593 }
4600 NTSTATUS _result;
4604 MAXIMUM_ALLOWED_ACCESS,
4610 }
4614 }
4622 }
4626 }
4633 }
4637 }
4647 }
4653 }
4658 done:
4662 }
4664 /*
4665 * Dump server_aliases as names for debugging purposes.
4666 */
4676 {
4678 NTSTATUS result;
4683 SEC_FLAG_MAXIMUM_ALLOWED,
4707 }
4723 }
4728 }
4730 /*
4731 * Fetch a list of all server aliases and their members into
4732 * server_aliases.
4733 */
4743 {
4750 MAXIMUM_ALLOWED_ACCESS,
4755 }
4759 }
4765 }
4768 domain_sid);
4771 done:
4773 }
4776 {
4783 }
4789 }
4792 {
4794 }
4797 {
4804 }
4809 }
4812 fstring name;
4814 };
4817 {
4824 }
4825 }
4828 {
4834 }
4837 }
4840 {
4846 }
4847 }
4849 /*
4850 * We got a user token with all the SIDs we can know about without asking the
4851 * server directly. These are the user and domain group sids. All of these can
4852 * be members of aliases. So scan the list of aliases for each of the SIDs and
4853 * add them to the token.
4854 */
4857 {
4863 }
4864 }
4867 {
4870 fstring full_name;
4881 /* First let's find out the user sid */
4889 }
4896 }
4901 }
4905 /* And now the groups winbind knows about */
4912 }
4925 }
4936 }
4938 }
4942 }
4944 /**
4945 * Get a list of all user tokens we want to look at
4946 **/
4950 {
4962 }
4964 /* Send request to winbind daemon */
4971 }
4979 }
5002 }
5004 }
5007 }
5015 }
5020 {
5024 fstring line;
5028 }
5032 }
5035 /* We have a SID */
5042 }
5047 }
5051 }
5053 /* And a new user... */
5060 }
5066 }
5070 }
5073 }
5076 /*
5077 * Show the list of all users that have access to a share
5078 */
5086 {
5092 WERROR result;
5093 NTSTATUS status;
5099 netname,
5106 netname));
5108 }
5113 netname));
5114 }
5120 }
5126 }
5140 }
5141 }
5146 }
5154 }
5156 }
5164 }
5166 /**
5167 * List shares on a remote RPC server, including the security descriptors.
5168 *
5169 * All parameters are provided by the run_rpc_command function, except for
5170 * argc, argv which are passed through.
5171 *
5172 * @param domain_sid The domain sid acquired from the remote server.
5173 * @param cli A cli_state connected to the server.
5174 * @param mem_ctx Talloc context, destroyed on completion of the function.
5175 * @param argc Standard main() style argc.
5176 * @param argv Standard main() style argv. Initial components are already
5177 * stripped.
5178 *
5179 * @return Normal NTSTATUS return.
5180 **/
5190 {
5201 WERROR result;
5210 }
5215 }
5225 }
5238 /* Issue the NetShareEnum RPC call and retrieve the response */
5243 preferred_len,
5248 /* Was it successful? */
5250 /* Nope. Go clean up. */
5252 }
5255 /* Nope. Go clean up. */
5258 }
5262 }
5264 /* For each returned entry... */
5270 }
5276 }
5277 done:
5280 }
5285 }
5289 {
5299 }
5302 rpc_aliaslist_internals,
5308 rpc_aliaslist_dump,
5314 rpc_share_allowedusers_internals,
5316 }
5319 {
5327 }
5332 }
5337 }
5341 }
5344 {
5352 }
5354 /**
5355 * 'net rpc share' entrypoint.
5356 * @param argc Standard main() style argc.
5357 * @param argv Standard main() style argv. Initial components are already
5358 * stripped.
5359 **/
5362 {
5363 NET_API_STATUS status;
5366 {
5368 rpc_share_add,
5369 NET_TRANSPORT_RPC,
5373 },
5374 {
5376 rpc_share_delete,
5377 NET_TRANSPORT_RPC,
5381 },
5382 {
5384 rpc_share_allowedusers,
5385 NET_TRANSPORT_RPC,
5389 },
5390 {
5392 rpc_share_migrate,
5393 NET_TRANSPORT_RPC,
5397 },
5398 {
5400 rpc_share_list,
5401 NET_TRANSPORT_RPC,
5405 },
5407 };
5412 }
5417 }
5428 }
5431 }
5434 }
5441 {
5444 }
5451 {
5452 NET_API_STATUS status;
5460 }
5477 }
5484 {
5488 }
5491 }
5498 {
5500 WERROR result;
5501 NTSTATUS status;
5507 }
5518 }
5521 }
5528 done:
5530 }
5534 {
5550 };
5553 }
5555 /****************************************************************************/
5558 {
5560 }
5562 /**
5563 * Close a file on a remote RPC server.
5564 *
5565 * @param argc Standard main() style argc.
5566 * @param argv Standard main() style argv. Initial components are already
5567 * stripped.
5568 *
5569 * @return A shell status integer (0 for success).
5570 **/
5572 {
5575 }
5578 }
5580 /**
5581 * Formatted print of open file info
5582 *
5583 * @param r struct FILE_INFO_3 contents
5584 **/
5587 {
5591 }
5593 /**
5594 * List files for a user on a remote RPC server.
5595 *
5596 * @param argc Standard main() style argc.
5597 * @param argv Standard main() style argv. Initial components are already
5598 * stripped.
5599 *
5600 * @return A shell status integer (0 for success)..
5601 **/
5604 {
5605 NET_API_STATUS status;
5615 }
5617 /* if argc > 0, must be user command */
5620 }
5623 NULL,
5624 username,
5627 preferred_len,
5634 }
5636 /* Display results */
5644 }
5645 done:
5648 }
5650 /**
5651 * 'net rpc file' entrypoint.
5652 * @param argc Standard main() style argc.
5653 * @param argv Standard main() style argv. Initial components are already
5654 * stripped.
5655 **/
5658 {
5659 NET_API_STATUS status;
5662 {
5664 rpc_file_close,
5665 NET_TRANSPORT_RPC,
5669 },
5670 {
5672 rpc_file_user,
5673 NET_TRANSPORT_RPC,
5677 },
5678 #if 0
5679 {
5681 rpc_file_info,
5682 NET_TRANSPORT_RPC,
5686 },
5687 #endif
5689 };
5694 }
5699 }
5708 }
5711 }
5714 }
5716 /**
5717 * ABORT the shutdown of a remote RPC Server, over initshutdown pipe.
5718 *
5719 * All parameters are provided by the run_rpc_command function, except for
5720 * argc, argv which are passed through.
5721 *
5722 * @param c A net_context structure.
5723 * @param domain_sid The domain sid acquired from the remote server.
5724 * @param cli A cli_state connected to the server.
5725 * @param mem_ctx Talloc context, destroyed on completion of the function.
5726 * @param argc Standard main() style argc.
5727 * @param argv Standard main() style argv. Initial components are already
5728 * stripped.
5729 *
5730 * @return Normal NTSTATUS return.
5731 **/
5741 {
5743 WERROR result;
5749 }
5757 }
5759 /**
5760 * ABORT the shutdown of a remote RPC Server, over winreg pipe.
5761 *
5762 * All parameters are provided by the run_rpc_command function, except for
5763 * argc, argv which are passed through.
5764 *
5765 * @param c A net_context structure.
5766 * @param domain_sid The domain sid acquired from the remote server.
5767 * @param cli A cli_state connected to the server.
5768 * @param mem_ctx Talloc context, destroyed on completion of the function.
5769 * @param argc Standard main() style argc.
5770 * @param argv Standard main() style argv. Initial components are already
5771 * stripped.
5772 *
5773 * @return Normal NTSTATUS return.
5774 **/
5784 {
5786 WERROR werr;
5794 }
5802 }
5804 /**
5805 * ABORT the shutdown of a remote RPC server.
5806 *
5807 * @param argc Standard main() style argc.
5808 * @param argv Standard main() style argv. Initial components are already
5809 * stripped.
5810 *
5811 * @return A shell status integer (0 for success).
5812 **/
5816 {
5826 }
5837 rpc_reg_shutdown_abort_internals,
5839 }
5841 /**
5842 * Shut down a remote RPC Server via initshutdown pipe.
5843 *
5844 * All parameters are provided by the run_rpc_command function, except for
5845 * argc, argv which are passed through.
5846 *
5847 * @param c A net_context structure.
5848 * @param domain_sid The domain sid acquired from the remote server.
5849 * @param cli A cli_state connected to the server.
5850 * @param mem_ctx Talloc context, destroyed on completion of the function.
5851 * @param argc Standard main() style argc.
5852 * @param argv Standard main() style argv. Initial components are already
5853 * stripped.
5854 *
5855 * @return Normal NTSTATUS return.
5856 **/
5866 {
5868 WERROR result;
5876 }
5879 }
5883 /* create an entry */
5889 }
5895 }
5897 }
5899 /**
5900 * Shut down a remote RPC Server via winreg pipe.
5901 *
5902 * All parameters are provided by the run_rpc_command function, except for
5903 * argc, argv which are passed through.
5904 *
5905 * @param c A net_context structure.
5906 * @param domain_sid The domain sid acquired from the remote server.
5907 * @param cli A cli_state connected to the server.
5908 * @param mem_ctx Talloc context, destroyed on completion of the function.
5909 * @param argc Standard main() style argc.
5910 * @param argv Standard main() style argv. Initial components are already
5911 * stripped.
5912 *
5913 * @return Normal NTSTATUS return.
5914 **/
5924 {
5928 NTSTATUS result;
5929 WERROR werr;
5934 }
5939 }
5941 /* create an entry */
5948 }
5956 else
5958 }
5961 }
5963 /**
5964 * Shut down a remote RPC server.
5965 *
5966 * @param argc Standard main() style argc.
5967 * @param argv Standard main() style argv. Initial components are already
5968 * stripped.
5969 *
5970 * @return A shell status integer (0 for success).
5971 **/
5974 {
5984 }
5993 }
5996 }
5998 /***************************************************************************
5999 NT Domain trusts code (i.e. 'net rpc trustdom' functionality)
6000 ***************************************************************************/
6002 /**
6003 * Add interdomain trust account to the RPC server.
6004 * All parameters (except for argc and argv) are passed by run_rpc_command
6005 * function.
6006 *
6007 * @param c A net_context structure.
6008 * @param domain_sid The domain sid acquired from the server.
6009 * @param cli A cli_state connected to the server.
6010 * @param mem_ctx Talloc context, destroyed on completion of the function.
6011 * @param argc Standard main() style argc.
6012 * @param argv Standard main() style argv. Initial components are already
6013 * stripped.
6014 *
6015 * @return normal NTSTATUS return code.
6016 */
6026 {
6046 }
6048 /*
6049 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6050 */
6054 }
6059 }
6068 }
6070 /* Get samr policy handle */
6073 MAXIMUM_ALLOWED_ACCESS,
6078 }
6082 }
6084 /* Get domain policy handle */
6087 MAXIMUM_ALLOWED_ACCESS,
6093 }
6097 }
6099 /* This call can take a long time - allow the server to time out.
6100 * 35 seconds should do it. */
6104 /* Create trusting domain's account */
6108 SAMR_USER_ACCESS_SET_PASSWORD |
6109 SAMR_USER_ACCESS_GET_ATTRIBUTES |
6110 SAMR_USER_ACCESS_SET_ATTRIBUTES;
6115 acb_info,
6116 acct_flags,
6123 }
6124 /* And restore our original timeout. */
6132 }
6134 {
6144 SAMR_FIELD_NT_PASSWORD_PRESENT;
6155 }
6162 }
6163 }
6165 done:
6169 }
6171 /**
6172 * Create interdomain trust account for a remote domain.
6173 *
6174 * @param argc Standard argc.
6175 * @param argv Standard argv without initial components.
6176 *
6177 * @return Integer status (0 means success).
6178 **/
6181 {
6191 }
6192 }
6195 /**
6196 * Remove interdomain trust account from the RPC server.
6197 * All parameters (except for argc and argv) are passed by run_rpc_command
6198 * function.
6199 *
6200 * @param c A net_context structure.
6201 * @param domain_sid The domain sid acquired from the server.
6202 * @param cli A cli_state connected to the server.
6203 * @param mem_ctx Talloc context, destroyed on completion of the function.
6204 * @param argc Standard main() style argc.
6205 * @param argv Standard main() style argv. Initial components are already
6206 * stripped.
6207 *
6208 * @return normal NTSTATUS return code.
6209 */
6219 {
6233 }
6235 /*
6236 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6237 */
6246 }
6248 /* Get samr policy handle */
6251 MAXIMUM_ALLOWED_ACCESS,
6256 }
6260 }
6262 /* Get domain policy handle */
6265 MAXIMUM_ALLOWED_ACCESS,
6271 }
6275 }
6291 }
6298 }
6302 }
6306 }
6310 MAXIMUM_ALLOWED_ACCESS,
6319 }
6327 }
6329 /* append the rid to the domain sid */
6332 }
6334 /* remove the sid */
6345 }
6352 }
6355 /* Delete user */
6365 }
6373 }
6379 }
6381 done:
6383 }
6385 /**
6386 * Delete interdomain trust account for a remote domain.
6387 *
6388 * @param argc Standard argc.
6389 * @param argv Standard argv without initial components.
6390 *
6391 * @return Integer status (0 means success).
6392 **/
6395 {
6404 }
6405 }
6411 {
6415 NTSTATUS status;
6416 WERROR result;
6419 /* Use NetServerEnum2 */
6424 }
6429 /* Try netr_GetDcName */
6435 }
6441 domain_name,
6448 }
6455 }
6458 }
6460 /**
6461 * Establish trust relationship to a trusting domain.
6462 * Interdomain account must already be created on remote PDC.
6463 *
6464 * @param c A net_context structure.
6465 * @param argc Standard argc.
6466 * @param argv Standard argv without initial components.
6467 *
6468 * @return Integer status (0 means success).
6469 **/
6473 {
6484 fstring pdc_name;
6488 /*
6489 * Connect to \\server\ipc$ as 'our domain' account with password
6490 */
6497 }
6503 }
6505 /* account name used at first is our domain's name with '$' */
6508 }
6513 }
6515 /*
6516 * opt_workgroup will be used by connection functions further,
6517 * hence it should be set to remote domain name instead of ours
6518 */
6521 };
6525 /* find the domain controller */
6529 }
6531 /* connect to ipc$ as username/password */
6535 /* Is it trusting domain account for sure ? */
6539 }
6541 /* store who we connected to */
6545 /*
6546 * Connect to \\server\ipc$ again (this time anonymously)
6547 */
6556 }
6563 }
6565 /* Make sure we're talking to a proper server */
6572 }
6574 /*
6575 * Call LsaOpenPolicy and LsaQueryInfo
6576 */
6585 }
6597 }
6599 /* Querying info level 5 */
6603 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6612 }
6619 }
6623 /* There should be actually query info level 3 (following nt serv behaviour),
6624 but I still don't know if it's _really_ necessary */
6626 /*
6627 * Store the password in secrets db
6628 */
6635 }
6637 /*
6638 * Close the pipes and clean up
6639 */
6648 }
6656 }
6658 /**
6659 * Revoke trust relationship to the remote domain.
6660 *
6661 * @param c A net_context structure.
6662 * @param argc Standard argc.
6663 * @param argv Standard argv without initial components.
6664 *
6665 * @return Integer status (0 means success).
6666 **/
6670 {
6681 }
6683 /* generate upper cased domain name */
6688 }
6690 /* delete password of the trust */
6693 domain_name));
6695 };
6698 done:
6701 }
6711 {
6712 fstring str_sid;
6715 }
6718 }
6721 {
6722 fstring ascii_sid;
6724 /* convert sid into ascii string */
6728 }
6735 {
6739 DATA_BLOB session_key;
6744 pol,
6746 LSA_TRUSTED_DOMAIN_INFO_PASSWORD,
6753 }
6759 }
6768 }
6777 }
6783 }
6785 #ifdef DEBUG_PASSWORD
6789 #endif
6791 done:
6796 }
6800 {
6801 /* common variables */
6810 /* trusted domains listing variables */
6814 fstring pdc_name;
6824 }
6826 /*
6827 * Listing trusted domains (stored in secrets.tdb, if local)
6828 */
6832 /*
6833 * set domain and pdc name to local samba server (default)
6834 * or to remote one given in command line
6835 */
6844 };
6846 /* open \PIPE\lsarpc and open policy handle */
6853 };
6863 };
6875 };
6877 /* query info level 5 to obtain sid of a domain being queried */
6880 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6890 }
6897 }
6899 /*
6900 * Keep calling LsaEnumTrustdom over opened pipe until
6901 * the end of enumeration is reached
6902 */
6919 };
6927 };
6942 }
6943 };
6945 /*
6946 * in case of no trusted domains say something rather
6947 * than just display blank line
6948 */
6953 /* close this connection before doing next one */
6961 };
6963 /* close lsarpc pipe and connection to IPC$ */
6968 }
6971 {
6972 /* common variables */
6984 /* trusted domains listing variables */
6988 fstring pdc_name;
6991 /* trusting domains listing variables */
7002 }
7004 /*
7005 * Listing trusted domains (stored in secrets.tdb, if local)
7006 */
7010 /*
7011 * set domain and pdc name to local samba server (default)
7012 * or to remote one given in command line
7013 */
7022 };
7024 /* open \PIPE\lsarpc and open policy handle */
7031 };
7041 };
7053 };
7055 /* query info level 5 to obtain sid of a domain being queried */
7058 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
7068 }
7075 }
7079 /*
7080 * Keep calling LsaEnumTrustdom over opened pipe until
7081 * the end of enumeration is reached
7082 */
7101 };
7108 };
7115 };
7120 /*
7121 * in case of no trusted domains say something rather
7122 * than just display blank line
7123 */
7126 }
7128 /* close this connection before doing next one */
7136 };
7140 /*
7141 * Listing trusting domains (stored in passdb backend, if local)
7142 */
7146 /*
7147 * Open \PIPE\samr and get needed policy handles
7148 */
7156 };
7160 /* SamrConnect2 */
7163 SAMR_ACCESS_LOOKUP_DOMAIN,
7172 };
7180 };
7182 /* SamrOpenDomain - we have to open domain policy handle in order to be
7183 able to enumerate accounts*/
7186 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS,
7187 queried_dom_sid,
7196 };
7204 };
7206 /*
7207 * perform actual enumeration
7208 */
7218 ACB_DOMTRUST,
7229 };
7237 };
7245 /*
7246 * get each single domain's sid (do we _really_ need this ?):
7247 * 1) connect to domain's pdc
7248 * 2) query the pdc for domain's sid
7249 */
7251 /* get rid of '$' tail */
7256 /* set opt_* variables to remote domain */
7261 }
7267 /* connect to remote domain controller */
7272 /* query for domain's sid */
7277 argv))
7287 }
7288 }
7294 }
7296 /* close opened samr and domain policy handles */
7300 };
7305 };
7307 /* close samr pipe and connection to IPC$ */
7312 }
7314 /**
7315 * Entrypoint for 'net rpc trustdom' code.
7316 *
7317 * @param argc Standard argc.
7318 * @param argv Standard argv without initial components.
7319 *
7320 * @return Integer status (0 means success).
7321 */
7324 {
7326 {
7328 rpc_trustdom_add,
7329 NET_TRANSPORT_RPC,
7333 },
7334 {
7336 rpc_trustdom_del,
7337 NET_TRANSPORT_RPC,
7341 },
7342 {
7344 rpc_trustdom_establish,
7345 NET_TRANSPORT_RPC,
7349 },
7350 {
7352 rpc_trustdom_revoke,
7353 NET_TRANSPORT_RPC,
7357 },
7358 {
7360 rpc_trustdom_list,
7361 NET_TRANSPORT_RPC,
7365 },
7366 {
7368 rpc_trustdom_vampire,
7369 NET_TRANSPORT_RPC,
7373 },
7375 };
7378 }
7380 /**
7381 * Check if a server will take rpc commands
7382 * @param flags Type of server to connect to (PDC, DMB, localhost)
7383 * if the host is not explicitly specified
7384 * @return bool (true means rpc supported)
7385 */
7387 {
7392 NTSTATUS status;
7394 /* flags (i.e. server type) may depend on command */
7403 }
7405 PROTOCOL_NT1);
7412 done:
7415 }
7417 /* dump sam database via samsync rpc calls */
7426 }
7429 NET_FLAGS_ANONYMOUS,
7431 }
7433 /* syncronise sam database via samsync rpc calls */
7435 {
7437 {
7439 rpc_vampire_ldif,
7440 NET_TRANSPORT_RPC,
7443 " Dump remote SAM database to LDIF file or "
7445 },
7446 {
7448 rpc_vampire_keytab,
7449 NET_TRANSPORT_RPC,
7452 " Dump remote SAM database to Kerberos keytab "
7454 },
7455 {
7457 rpc_vampire_passdb,
7458 NET_TRANSPORT_RPC,
7462 },
7465 };
7475 }
7478 }
7481 }
7483 /**
7484 * Migrate everything from a print server.
7485 *
7486 * @param c A net_context structure.
7487 * @param argc Standard main() style argc.
7488 * @param argv Standard main() style argv. Initial components are already
7489 * stripped.
7490 *
7491 * @return A shell status integer (0 for success).
7492 *
7493 * The order is important !
7494 * To successfully add drivers the print queues have to exist !
7495 * Applying ACLs should be the last step, because you're easily locked out.
7496 *
7497 **/
7500 {
7510 }
7515 }
7519 argv);
7525 argv);
7536 argv);
7542 argv);
7544 }
7546 /**
7547 * Migrate print drivers from a print server.
7548 *
7549 * @param c A net_context structure.
7550 * @param argc Standard main() style argc.
7551 * @param argv Standard main() style argv. Initial components are already
7552 * stripped.
7553 *
7554 * @return A shell status integer (0 for success).
7555 **/
7558 {
7566 }
7571 }
7574 rpc_printer_migrate_drivers_internals,
7576 }
7578 /**
7579 * Migrate print-forms from a print-server.
7580 *
7581 * @param c A net_context structure.
7582 * @param argc Standard main() style argc.
7583 * @param argv Standard main() style argv. Initial components are already
7584 * stripped.
7585 *
7586 * @return A shell status integer (0 for success).
7587 **/
7590 {
7598 }
7603 }
7606 rpc_printer_migrate_forms_internals,
7608 }
7610 /**
7611 * Migrate printers from a print-server.
7612 *
7613 * @param c A net_context structure.
7614 * @param argc Standard main() style argc.
7615 * @param argv Standard main() style argv. Initial components are already
7616 * stripped.
7617 *
7618 * @return A shell status integer (0 for success).
7619 **/
7622 {
7630 }
7635 }
7638 rpc_printer_migrate_printers_internals,
7640 }
7642 /**
7643 * Migrate printer-ACLs from a print-server
7644 *
7645 * @param c A net_context structure.
7646 * @param argc Standard main() style argc.
7647 * @param argv Standard main() style argv. Initial components are already
7648 * stripped.
7649 *
7650 * @return A shell status integer (0 for success).
7651 **/
7654 {
7662 }
7667 }
7670 rpc_printer_migrate_security_internals,
7672 }
7674 /**
7675 * Migrate printer-settings from a print-server.
7676 *
7677 * @param c A net_context structure.
7678 * @param argc Standard main() style argc.
7679 * @param argv Standard main() style argv. Initial components are already
7680 * stripped.
7681 *
7682 * @return A shell status integer (0 for success).
7683 **/
7686 {
7695 }
7700 }
7703 rpc_printer_migrate_settings_internals,
7705 }
7707 /**
7708 * 'net rpc printer' entrypoint.
7709 *
7710 * @param c A net_context structure.
7711 * @param argc Standard main() style argc.
7712 * @param argv Standard main() style argv. Initial components are already
7713 * stripped.
7714 **/
7717 {
7719 /* ouch: when addriver and setdriver are called from within
7720 rpc_printer_migrate_drivers_internals, the printer-queue already
7721 *has* to exist */
7724 {
7726 rpc_printer_migrate_all,
7727 NET_TRANSPORT_RPC,
7731 },
7732 {
7734 rpc_printer_migrate_drivers,
7735 NET_TRANSPORT_RPC,
7739 },
7740 {
7742 rpc_printer_migrate_forms,
7743 NET_TRANSPORT_RPC,
7747 },
7748 {
7750 rpc_printer_migrate_printers,
7751 NET_TRANSPORT_RPC,
7755 },
7756 {
7758 rpc_printer_migrate_security,
7759 NET_TRANSPORT_RPC,
7763 },
7764 {
7766 rpc_printer_migrate_settings,
7767 NET_TRANSPORT_RPC,
7771 },
7773 };
7776 }
7779 /**
7780 * List printers on a remote RPC server.
7781 *
7782 * @param c A net_context structure.
7783 * @param argc Standard main() style argc.
7784 * @param argv Standard main() style argv. Initial components are already
7785 * stripped.
7786 *
7787 * @return A shell status integer (0 for success).
7788 **/
7790 {
7798 }
7801 rpc_printer_list_internals,
7803 }
7805 /**
7806 * List printer-drivers on a remote RPC server.
7807 *
7808 * @param c A net_context structure.
7809 * @param argc Standard main() style argc.
7810 * @param argv Standard main() style argv. Initial components are already
7811 * stripped.
7812 *
7813 * @return A shell status integer (0 for success).
7814 **/
7817 {
7825 }
7828 rpc_printer_driver_list_internals,
7830 }
7832 /**
7833 * Publish printer in ADS via MSRPC.
7834 *
7835 * @param c A net_context structure.
7836 * @param argc Standard main() style argc.
7837 * @param argv Standard main() style argv. Initial components are already
7838 * stripped.
7839 *
7840 * @return A shell status integer (0 for success).
7841 **/
7844 {
7852 }
7855 rpc_printer_publish_publish_internals,
7857 }
7859 /**
7860 * Update printer in ADS via MSRPC.
7861 *
7862 * @param c A net_context structure.
7863 * @param argc Standard main() style argc.
7864 * @param argv Standard main() style argv. Initial components are already
7865 * stripped.
7866 *
7867 * @return A shell status integer (0 for success).
7868 **/
7870 {
7878 }
7881 rpc_printer_publish_update_internals,
7883 }
7885 /**
7886 * UnPublish printer in ADS via MSRPC.
7887 *
7888 * @param c A net_context structure.
7889 * @param argc Standard main() style argc.
7890 * @param argv Standard main() style argv. Initial components are already
7891 * stripped.
7892 *
7893 * @return A shell status integer (0 for success).
7894 **/
7897 {
7905 }
7908 rpc_printer_publish_unpublish_internals,
7910 }
7912 /**
7913 * List published printers via MSRPC.
7914 *
7915 * @param c A net_context structure.
7916 * @param argc Standard main() style argc.
7917 * @param argv Standard main() style argv. Initial components are already
7918 * stripped.
7919 *
7920 * @return A shell status integer (0 for success).
7921 **/
7924 {
7932 }
7935 rpc_printer_publish_list_internals,
7937 }
7940 /**
7941 * Publish printer in ADS.
7942 *
7943 * @param c A net_context structure.
7944 * @param argc Standard main() style argc.
7945 * @param argv Standard main() style argv. Initial components are already
7946 * stripped.
7947 *
7948 * @return A shell status integer (0 for success).
7949 **/
7952 {
7955 {
7957 rpc_printer_publish_publish,
7958 NET_TRANSPORT_RPC,
7962 },
7963 {
7965 rpc_printer_publish_update,
7966 NET_TRANSPORT_RPC,
7970 },
7971 {
7973 rpc_printer_publish_unpublish,
7974 NET_TRANSPORT_RPC,
7978 },
7979 {
7981 rpc_printer_publish_list,
7982 NET_TRANSPORT_RPC,
7986 },
7988 };
7995 " Alias of net rpc printer publish "
7999 }
8001 rpc_printer_publish_list_internals,
8003 }
8007 }
8010 /**
8011 * Display rpc printer help page.
8012 *
8013 * @param c A net_context structure.
8014 * @param argc Standard main() style argc.
8015 * @param argv Standard main() style argv. Initial components are already
8016 * stripped.
8017 **/
8019 {
8047 }
8049 /**
8050 * 'net rpc printer' entrypoint.
8051 *
8052 * @param c A net_context structure.
8053 * @param argc Standard main() style argc.
8054 * @param argv Standard main() style argv. Initial components are already
8055 * stripped.
8056 **/
8058 {
8060 {
8062 rpc_printer_list,
8063 NET_TRANSPORT_RPC,
8067 },
8068 {
8070 rpc_printer_migrate,
8071 NET_TRANSPORT_RPC,
8075 },
8076 {
8078 rpc_printer_driver_list,
8079 NET_TRANSPORT_RPC,
8083 },
8084 {
8086 rpc_printer_publish,
8087 NET_TRANSPORT_RPC,
8091 },
8093 };
8102 }
8104 rpc_printer_list_internals,
8106 }
8109 }
8111 /**
8112 * 'net rpc' entrypoint.
8113 *
8114 * @param c A net_context structure.
8115 * @param argc Standard main() style argc.
8116 * @param argv Standard main() style argv. Initial components are already
8117 * stripped.
8118 **/
8121 {
8122 NET_API_STATUS status;
8125 {
8127 net_rpc_audit,
8128 NET_TRANSPORT_RPC,
8132 },
8133 {
8135 net_rpc_info,
8136 NET_TRANSPORT_RPC,
8140 },
8141 {
8143 net_rpc_join,
8144 NET_TRANSPORT_RPC,
8148 },
8149 {
8151 net_rpc_oldjoin,
8152 NET_TRANSPORT_RPC,
8156 },
8157 {
8159 net_rpc_testjoin,
8160 NET_TRANSPORT_RPC,
8164 },
8165 {
8167 net_rpc_user,
8168 NET_TRANSPORT_RPC,
8172 },
8173 {
8175 rpc_user_password,
8176 NET_TRANSPORT_RPC,
8181 },
8182 {
8184 net_rpc_group,
8185 NET_TRANSPORT_RPC,
8189 },
8190 {
8192 net_rpc_share,
8193 NET_TRANSPORT_RPC,
8197 },
8198 {
8200 net_rpc_file,
8201 NET_TRANSPORT_RPC,
8205 },
8206 {
8208 net_rpc_printer,
8209 NET_TRANSPORT_RPC,
8213 },
8214 {
8216 net_rpc_changetrustpw,
8217 NET_TRANSPORT_RPC,
8221 },
8222 {
8224 rpc_trustdom,
8225 NET_TRANSPORT_RPC,
8229 },
8230 {
8232 rpc_shutdown_abort,
8233 NET_TRANSPORT_RPC,
8237 },
8238 {
8240 rpc_shutdown,
8241 NET_TRANSPORT_RPC,
8245 },
8246 {
8248 rpc_samdump,
8249 NET_TRANSPORT_RPC,
8253 },
8254 {
8256 rpc_vampire,
8257 NET_TRANSPORT_RPC,
8261 },
8262 {
8264 net_rpc_getsid,
8265 NET_TRANSPORT_RPC,
8269 },
8270 {
8272 net_rpc_rights,
8273 NET_TRANSPORT_RPC,
8277 },
8278 {
8280 net_rpc_service,
8281 NET_TRANSPORT_RPC,
8285 },
8286 {
8288 net_rpc_registry,
8289 NET_TRANSPORT_RPC,
8293 },
8294 {
8296 net_rpc_shell,
8297 NET_TRANSPORT_RPC,
8301 },
8302 {
8304 net_rpc_trust,
8305 NET_TRANSPORT_RPC,
8309 },
8310 {
8312 net_rpc_conf,
8313 NET_TRANSPORT_RPC,
8317 },
8319 };
8324 }
8329 }
8332 }
8335 }