?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
s3:utils: add 'net witness client-move' and 'net witness share-move'
[Samba.git] / source3 / utils / net.c
blobeb872fa5d1941f0ee13bfe2d0e61bb3cee190d4d
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Steve French (sfrench@us.ibm.com)
5 Copyright (C) 2001 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
7 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
8 Copyright (C) 2008 Kai Blin (kai@samba.org)
9
10 Originally written by Steve and Jim. Largely rewritten by tridge in
11 November 2001.
12
13 Reworked again by abartlet in December 2001
14
15 Another overhaul, moving functionality into plug-ins loaded on demand by Kai
16 in May 2008.
17
18 This program is free software; you can redistribute it and/or modify
19 it under the terms of the GNU General Public License as published by
20 the Free Software Foundation; either version 3 of the License, or
21 (at your option) any later version.
22
23 This program is distributed in the hope that it will be useful,
24 but WITHOUT ANY WARRANTY; without even the implied warranty of
25 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
26 GNU General Public License for more details.
27
28 You should have received a copy of the GNU General Public License
29 along with this program. If not, see <http://www.gnu.org/licenses/>. */
30
31 /*****************************************************/
32 /* */
33 /* Distributed SMB/CIFS Server Management Utility */
34 /* */
35 /* The intent was to make the syntax similar */
36 /* to the NET utility (first developed in DOS */
37 /* with additional interesting & useful functions */
38 /* added in later SMB server network operating */
39 /* systems). */
40 /* */
41 /*****************************************************/
42
43 #include "includes.h"
44 #include "lib/cmdline/cmdline.h"
45 #include "utils/net.h"
46 #include "secrets.h"
47 #include "lib/netapi/netapi.h"
48 #include "../libcli/security/security.h"
49 #include "passdb.h"
50 #include "messages.h"
51 #include "cmdline_contexts.h"
52 #include "lib/gencache.h"
53 #include "auth/credentials/credentials.h"
54 #include "source3/utils/passwd_proto.h"
55 #include "auth/gensec/gensec.h"
56 #include "lib/param/param.h"
57
58 #ifdef WITH_FAKE_KASERVER
59 #include "utils/net_afs.h"
60 #endif
61
62 /***********************************************************************/
63 /* end of internationalization section */
64 /***********************************************************************/
65
66 enum netr_SchannelType get_sec_channel_type(const char *param)
67 {
68 if (!(param && *param)) {
69 return get_default_sec_channel();
70 } else {
71 if (strequal(param, "PDC")) {
72 return SEC_CHAN_BDC;
73 } else if (strequal(param, "BDC")) {
74 return SEC_CHAN_BDC;
75 } else if (strequal(param, "MEMBER")) {
76 return SEC_CHAN_WKSTA;
77 #if 0
78 } else if (strequal(param, "DOMAIN")) {
79 return SEC_CHAN_DOMAIN;
80 #endif
81 } else {
82 return get_default_sec_channel();
83 }
84 }
85 }
86
87 static int net_changetrustpw(struct net_context *c, int argc, const char **argv)
88 {
89 net_warn_member_options();
90
91 if (net_ads_check_our_domain(c) == 0)
92 return net_ads_changetrustpw(c, argc, argv);
93
94 return net_rpc_changetrustpw(c, argc, argv);
95 }
96
97 static void set_line_buffering(FILE *f)
98 {
99 setvbuf(f, NULL, _IOLBF, 0);
100 }
101
102 static int net_primarytrust_dumpinfo(struct net_context *c, int argc,
103 const char **argv)
104 {
105 int role = lp_server_role();
106 const char *domain = lp_workgroup();
107 struct secrets_domain_info1 *info = NULL;
108 bool include_secrets = c->opt_force;
109 char *str = NULL;
110 NTSTATUS status;
111
112 if (role >= ROLE_ACTIVE_DIRECTORY_DC) {
113 d_printf(_("net primarytrust dumpinfo is only supported "
114 "on a DOMAIN_MEMBER for now.\n"));
115 return 1;
116 }
117
118 net_warn_member_options();
119
120 if (c->opt_stdin) {
121 set_line_buffering(stdin);
122 set_line_buffering(stdout);
123 set_line_buffering(stderr);
124 }
125
126 status = secrets_fetch_or_upgrade_domain_info(domain,
127 talloc_tos(),
128 &info);
129 if (!NT_STATUS_IS_OK(status)) {
130 d_fprintf(stderr,
131 _("Unable to fetch the information for domain[%s] "
132 "in the secrets database.\n"),
133 domain);
134 return 1;
135 }
136
137 str = secrets_domain_info_string(info, info, domain, include_secrets);
138 if (str == NULL) {
139 d_fprintf(stderr, "secrets_domain_info_string() failed.\n");
140 return 1;
141 }
142
143 d_printf("%s", str);
144 if (!c->opt_force) {
145 d_printf(_("The password values are only included using "
146 "-f flag.\n"));
147 }
148
149 TALLOC_FREE(info);
150 return 0;
151 }
152
153 /**
154 * Entrypoint for 'net primarytrust' code.
155 *
156 * @param argc Standard argc.
157 * @param argv Standard argv without initial components.
158 *
159 * @return Integer status (0 means success).
160 */
161
162 static int net_primarytrust(struct net_context *c, int argc, const char **argv)
163 {
164 struct functable func[] = {
165 {
166 .funcname = "dumpinfo",
167 .fn = net_primarytrust_dumpinfo,
168 .valid_transports = NET_TRANSPORT_LOCAL,
169 .description = N_("Dump the details of the "
170 "workstation trust"),
171 .usage = N_(" net [options] primarytrust "
172 "dumpinfo'\n"
173 " Dump the details of the "
174 "workstation trust in "
175 "secrets.tdb.\n"
176 " Requires the -f flag to "
177 "include the password values."),
178 },
179 {
180 .funcname = NULL,
181 },
182 };
183
184 return net_run_function(c, argc, argv, "net primarytrust", func);
185 }
186
187 static int net_changesecretpw(struct net_context *c, int argc,
188 const char **argv)
189 {
190 char *trust_pw;
191 int role = lp_server_role();
192
193 if (role != ROLE_DOMAIN_MEMBER) {
194 d_printf(_("Machine account password change only supported on a DOMAIN_MEMBER.\n"
195 "Do NOT use this function unless you know what it does!\n"
196 "This function will change the ADS Domain member "
197 "machine account password in the secrets.tdb file!\n"));
198 return 1;
199 }
200
201 net_warn_member_options();
202
203 if(c->opt_force) {
204 struct secrets_domain_info1 *info = NULL;
205 struct secrets_domain_info1_change *prev = NULL;
206 NTSTATUS status;
207 struct timeval tv = timeval_current();
208 NTTIME now = timeval_to_nttime(&tv);
209
210 if (c->opt_stdin) {
211 set_line_buffering(stdin);
212 set_line_buffering(stdout);
213 set_line_buffering(stderr);
214 }
215
216 trust_pw = get_pass(_("Enter machine password: "), c->opt_stdin);
217 if (trust_pw == NULL) {
218 d_fprintf(stderr,
219 _("Error in reading machine password\n"));
220 return 1;
221 }
222
223 status = secrets_prepare_password_change(lp_workgroup(),
224 "localhost",
225 trust_pw,
226 talloc_tos(),
227 &info, &prev);
228 if (!NT_STATUS_IS_OK(status)) {
229 d_fprintf(stderr,
230 _("Unable to write the machine account password in the secrets database"));
231 return 1;
232 }
233 if (prev != NULL) {
234 d_fprintf(stderr,
235 _("Pending machine account password change found - aborting."));
236 status = secrets_failed_password_change("localhost",
237 NT_STATUS_REQUEST_NOT_ACCEPTED,
238 NT_STATUS_NOT_COMMITTED,
239 info);
240 if (!NT_STATUS_IS_OK(status)) {
241 d_fprintf(stderr,
242 _("Failed to abort machine account password change"));
243 }
244 return 1;
245 }
246 status = secrets_finish_password_change("localhost", now, info);
247 if (!NT_STATUS_IS_OK(status)) {
248 d_fprintf(stderr,
249 _("Unable to write the machine account password in the secrets database"));
250 return 1;
251 }
252
253 d_printf(_("Modified trust account password in secrets database\n"));
254 }
255 else {
256 d_printf(_("Machine account password change requires the -f flag.\n"
257 "Do NOT use this function unless you know what it does!\n"
258 "This function will change the ADS Domain member "
259 "machine account password in the secrets.tdb file!\n"));
260 }
261
262 return 0;
263 }
264
265 /**
266 * @brief Set the authorised user for winbindd access in secrets.tdb
267 */
268 static int net_setauthuser(struct net_context *c, int argc, const char **argv)
269 {
270 const char *password = NULL;
271 bool ok;
272
273 if (!secrets_init()) {
274 d_fprintf(stderr, _("Failed to open secrets.tdb.\n"));
275 return 1;
276 }
277
278 /* Delete the settings. */
279 if (argc >= 1) {
280 if (strncmp(argv[0], "delete", 6) != 0) {
281 d_fprintf(stderr,_("Usage:\n"));
282 d_fprintf(stderr,
283 _(" net setauthuser -U user[%%password] \n"
284 " Set the auth user account to user"
285 "password. Prompt for password if not "
286 "specified.\n"));
287 d_fprintf(stderr,
288 _(" net setauthuser delete\n"
289 " Delete the auth user setting.\n"));
290 return 1;
291 }
292 secrets_delete_entry(SECRETS_AUTH_USER);
293 secrets_delete_entry(SECRETS_AUTH_DOMAIN);
294 secrets_delete_entry(SECRETS_AUTH_PASSWORD);
295 return 0;
296 }
297
298 if (!c->opt_user_specified) {
299 d_fprintf(stderr, _("Usage:\n"));
300 d_fprintf(stderr,
301 _(" net setauthuser -U user[%%password]\n"
302 " Set the auth user account to user"
303 "password. Prompt for password if not "
304 "specified.\n"));
305 d_fprintf(stderr,
306 _(" net setauthuser delete\n"
307 " Delete the auth user setting.\n"));
308 return 1;
309 }
310
311 password = net_prompt_pass(c, _("the auth user"));
312 if (password == NULL) {
313 d_fprintf(stderr,_("Failed to get the auth users password.\n"));
314 return 1;
315 }
316
317 ok = secrets_store_creds(c->creds);
318 if (!ok) {
319 d_fprintf(stderr, _("Failed storing auth user credentials\n"));
320 return 1;
321 }
322
323 return 0;
324 }
325
326 /**
327 * @brief Get the auth user settings
328 */
329 static int net_getauthuser(struct net_context *c, int argc, const char **argv)
330 {
331 char *user, *domain, *password;
332
333 /* Lift data from secrets file */
334
335 secrets_fetch_ipc_userpass(&user, &domain, &password);
336
337 if ((!user || !*user) && (!domain || !*domain ) &&
338 (!password || !*password)){
339
340 SAFE_FREE(user);
341 SAFE_FREE(domain);
342 BURN_FREE_STR(password);
343 d_printf(_("No authorised user configured\n"));
344 return 0;
345 }
346
347 /* Pretty print authorised user info */
348
349 d_printf("%s%s%s%s%s\n", domain ? domain : "",
350 domain ? lp_winbind_separator(): "", user,
351 password ? "%" : "", password ? password : "");
352
353 SAFE_FREE(user);
354 SAFE_FREE(domain);
355 BURN_FREE_STR(password);
356
357 return 0;
358 }
359 /*
360 Retrieve our local SID or the SID for the specified name
361 */
362 static int net_getlocalsid(struct net_context *c, int argc, const char **argv)
363 {
364 struct dom_sid sid;
365 const char *name;
366 struct dom_sid_buf sid_str;
367
368 if (argc >= 1) {
369 name = argv[0];
370 }
371 else {
372 name = lp_netbios_name();
373 }
374
375 if(!initialize_password_db(false, NULL)) {
376 d_fprintf(stderr, _("WARNING: Could not open passdb\n"));
377 return 1;
378 }
379
380 /* first check to see if we can even access secrets, so we don't
381 panic when we can't. */
382
383 if (!secrets_init()) {
384 d_fprintf(stderr,
385 _("Unable to open secrets.tdb. Can't fetch domain "
386 "SID for name: %s\n"), name);
387 return 1;
388 }
389
390 /* Generate one, if it doesn't exist */
391 get_global_sam_sid();
392
393 if (!secrets_fetch_domain_sid(name, &sid)) {
394 DEBUG(0, ("Can't fetch domain SID for name: %s\n", name));
395 return 1;
396 }
397 d_printf(_("SID for domain %s is: %s\n"),
398 name,
399 dom_sid_str_buf(&sid, &sid_str));
400 return 0;
401 }
402
403 static int net_setlocalsid(struct net_context *c, int argc, const char **argv)
404 {
405 struct dom_sid sid;
406
407 if ( (argc != 1)
408 || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
409 || (!string_to_sid(&sid, argv[0]))
410 || (sid.num_auths != 4)) {
411 d_printf(_("Usage:"));
412 d_printf(" net setlocalsid S-1-5-21-x-y-z\n");
413 return 1;
414 }
415
416 if (!secrets_store_domain_sid(lp_netbios_name(), &sid)) {
417 DEBUG(0,("Can't store domain SID as a pdc/bdc.\n"));
418 return 1;
419 }
420
421 return 0;
422 }
423
424 static int net_setdomainsid(struct net_context *c, int argc, const char **argv)
425 {
426 struct dom_sid sid;
427
428 if ( (argc != 1)
429 || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
430 || (!string_to_sid(&sid, argv[0]))
431 || (sid.num_auths != 4)) {
432 d_printf(_("Usage:"));
433 d_printf(" net setdomainsid S-1-5-21-x-y-z\n");
434 return 1;
435 }
436
437 if (!secrets_store_domain_sid(lp_workgroup(), &sid)) {
438 DEBUG(0,("Can't store domain SID.\n"));
439 return 1;
440 }
441
442 return 0;
443 }
444
445 static int net_getdomainsid(struct net_context *c, int argc, const char **argv)
446 {
447 struct dom_sid domain_sid;
448 struct dom_sid_buf sid_str;
449
450 if (argc > 0) {
451 d_printf(_("Usage:"));
452 d_printf(" net getdomainsid\n");
453 return 1;
454 }
455
456 if(!initialize_password_db(false, NULL)) {
457 d_fprintf(stderr, _("WARNING: Could not open passdb\n"));
458 return 1;
459 }
460
461 /* first check to see if we can even access secrets, so we don't
462 panic when we can't. */
463
464 if (!secrets_init()) {
465 d_fprintf(stderr, _("Unable to open secrets.tdb. Can't fetch "
466 "domain SID for name: %s\n"),
467 get_global_sam_name());
468 return 1;
469 }
470
471 /* Generate one, if it doesn't exist */
472 get_global_sam_sid();
473
474 if (!IS_DC) {
475 if (!secrets_fetch_domain_sid(lp_netbios_name(), &domain_sid)) {
476 d_fprintf(stderr, _("Could not fetch local SID\n"));
477 return 1;
478 }
479 d_printf(_("SID for local machine %s is: %s\n"),
480 lp_netbios_name(),
481 dom_sid_str_buf(&domain_sid, &sid_str));
482 }
483 if (!secrets_fetch_domain_sid(c->opt_workgroup, &domain_sid)) {
484 d_fprintf(stderr, _("Could not fetch domain SID\n"));
485 return 1;
486 }
487
488 d_printf(_("SID for domain %s is: %s\n"),
489 c->opt_workgroup,
490 dom_sid_str_buf(&domain_sid, &sid_str));
491
492 return 0;
493 }
494
495 static bool search_maxrid(struct pdb_search *search, const char *type,
496 uint32_t *max_rid)
497 {
498 struct samr_displayentry *entries;
499 uint32_t i, num_entries;
500
501 if (search == NULL) {
502 d_fprintf(stderr, _("get_maxrid: Could not search %s\n"), type);
503 return false;
504 }
505
506 num_entries = pdb_search_entries(search, 0, 0xffffffff, &entries);
507 for (i=0; i<num_entries; i++)
508 *max_rid = MAX(*max_rid, entries[i].rid);
509 TALLOC_FREE(search);
510 return true;
511 }
512
513 static uint32_t get_maxrid(void)
514 {
515 uint32_t max_rid = 0;
516
517 if (!search_maxrid(pdb_search_users(talloc_tos(), 0), "users", &max_rid))
518 return 0;
519
520 if (!search_maxrid(pdb_search_groups(talloc_tos()), "groups", &max_rid))
521 return 0;
522
523 if (!search_maxrid(pdb_search_aliases(talloc_tos(),
524 get_global_sam_sid()),
525 "aliases", &max_rid))
526 return 0;
527
528 return max_rid;
529 }
530
531 static int net_maxrid(struct net_context *c, int argc, const char **argv)
532 {
533 uint32_t rid;
534
535 if (argc != 0) {
536 d_fprintf(stderr, "%s net maxrid\n", _("Usage:"));
537 return 1;
538 }
539
540 if ((rid = get_maxrid()) == 0) {
541 d_fprintf(stderr, _("can't get current maximum rid\n"));
542 return 1;
543 }
544
545 d_printf(_("Currently used maximum rid: %d\n"), rid);
546
547 return 0;
548 }
549
550 /* main function table */
551 static struct functable net_func[] = {
552 {
553 "rpc",
554 net_rpc,
555 NET_TRANSPORT_RPC,
556 N_("Run functions using RPC transport"),
557 N_(" Use 'net help rpc' to get more extensive information "
558 "about 'net rpc' commands.")
559 },
560 {
561 "rap",
562 net_rap,
563 NET_TRANSPORT_RAP,
564 N_("Run functions using RAP transport"),
565 N_(" Use 'net help rap' to get more extensive information "
566 "about 'net rap' commands.")
567 },
568 {
569 "ads",
570 net_ads,
571 NET_TRANSPORT_ADS,
572 N_("Run functions using ADS transport"),
573 N_(" Use 'net help ads' to get more extensive information "
574 "about 'net ads' commands.")
575 },
576
577 /* eventually these should auto-choose the transport ... */
578 {
579 "file",
580 net_file,
581 NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
582 N_("Functions on remote opened files"),
583 N_(" Use 'net help file' to get more information about 'net "
584 "file' commands.")
585 },
586 {
587 "share",
588 net_share,
589 NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
590 N_("Functions on shares"),
591 N_(" Use 'net help share' to get more information about 'net "
592 "share' commands.")
593 },
594 {
595 "session",
596 net_rap_session,
597 NET_TRANSPORT_RAP,
598 N_("Manage sessions"),
599 N_(" Use 'net help session' to get more information about "
600 "'net session' commands.")
601 },
602 {
603 "server",
604 net_rap_server,
605 NET_TRANSPORT_RAP,
606 N_("List servers in workgroup"),
607 N_(" Use 'net help server' to get more information about 'net "
608 "server' commands.")
609 },
610 {
611 "domain",
612 net_rap_domain,
613 NET_TRANSPORT_RAP,
614 N_("List domains/workgroups on network"),
615 N_(" Use 'net help domain' to get more information about 'net "
616 "domain' commands.")
617 },
618 {
619 "printq",
620 net_rap_printq,
621 NET_TRANSPORT_RAP,
622 N_("Modify printer queue"),
623 N_(" Use 'net help printq' to get more information about 'net "
624 "printq' commands.")
625 },
626 {
627 "user",
628 net_user,
629 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
630 N_("Manage users"),
631 N_(" Use 'net help user' to get more information about 'net "
632 "user' commands.")
633 },
634 {
635 "group",
636 net_group,
637 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
638 N_("Manage groups"),
639 N_(" Use 'net help group' to get more information about 'net "
640 "group' commands.")
641 },
642 {
643 "groupmap",
644 net_groupmap,
645 NET_TRANSPORT_LOCAL,
646 N_("Manage group mappings"),
647 N_(" Use 'net help groupmap' to get more information about "
648 "'net groupmap' commands.")
649 },
650 {
651 "sam",
652 net_sam,
653 NET_TRANSPORT_LOCAL,
654 N_("Functions on the SAM database"),
655 N_(" Use 'net help sam' to get more information about 'net "
656 "sam' commands.")
657 },
658 {
659 "validate",
660 net_rap_validate,
661 NET_TRANSPORT_RAP,
662 N_("Validate username and password"),
663 N_(" Use 'net help validate' to get more information about "
664 "'net validate' commands.")
665 },
666 {
667 "groupmember",
668 net_rap_groupmember,
669 NET_TRANSPORT_RAP,
670 N_("Modify group memberships"),
671 N_(" Use 'net help groupmember' to get more information about "
672 "'net groupmember' commands.")
673 },
674 { "admin",
675 net_rap_admin,
676 NET_TRANSPORT_RAP,
677 N_("Execute remote command on a remote OS/2 server"),
678 N_(" Use 'net help admin' to get more information about 'net "
679 "admin' commands.")
680 },
681 { "service",
682 net_rap_service,
683 NET_TRANSPORT_RAP,
684 N_("List/modify running services"),
685 N_(" Use 'net help service' to get more information about "
686 "'net service' commands.")
687 },
688 {
689 "password",
690 net_rap_password,
691 NET_TRANSPORT_RAP,
692 N_("Change user password on target server"),
693 N_(" Use 'net help password' to get more information about "
694 "'net password' commands.")
695 },
696 {
697 "primarytrust",
698 net_primarytrust,
699 NET_TRANSPORT_RPC,
700 N_("Run functions related to the primary workstation trust."),
701 N_(" Use 'net help primarytrust' to get more extensive information "
702 "about 'net primarytrust' commands.")
703 },
704 { "changetrustpw",
705 net_changetrustpw,
706 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
707 N_("Change the trust password"),
708 N_(" Use 'net help changetrustpw' to get more information "
709 "about 'net changetrustpw'.")
710 },
711 { "changesecretpw",
712 net_changesecretpw,
713 NET_TRANSPORT_LOCAL,
714 N_("Change the secret password"),
715 N_(" net [options] changesecretpw\n"
716 " Change the ADS domain member machine account password "
717 "in secrets.tdb.\n"
718 " Do NOT use this function unless you know what it does.\n"
719 " Requires the -f flag to work.")
720 },
721 {
722 "setauthuser",
723 net_setauthuser,
724 NET_TRANSPORT_LOCAL,
725 N_("Set the winbind auth user"),
726 N_(" net -U user[%%password] [-W domain] setauthuser\n"
727 " Set the auth user, password (and optionally domain\n"
728 " Will prompt for password if not given.\n"
729 " net setauthuser delete\n"
730 " Delete the existing auth user settings.")
731 },
732 {
733 "getauthuser",
734 net_getauthuser,
735 NET_TRANSPORT_LOCAL,
736 N_("Get the winbind auth user settings"),
737 N_(" net getauthuser\n"
738 " Get the current winbind auth user settings.")
739 },
740 { "time",
741 net_time,
742 NET_TRANSPORT_LOCAL,
743 N_("Show/set time"),
744 N_(" Use 'net help time' to get more information about 'net "
745 "time' commands.")
746 },
747 { "lookup",
748 net_lookup,
749 NET_TRANSPORT_LOCAL,
750 N_("Look up host names/IP addresses"),
751 N_(" Use 'net help lookup' to get more information about 'net "
752 "lookup' commands.")
753 },
754 { "g_lock",
755 net_g_lock,
756 NET_TRANSPORT_LOCAL,
757 N_("Manipulate the global lock table"),
758 N_(" Use 'net help g_lock' to get more information about "
759 "'net g_lock' commands.")
760 },
761 { "join",
762 net_join,
763 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
764 N_("Join a domain/AD"),
765 N_(" Use 'net help join' to get more information about 'net "
766 "join'.")
767 },
768 { "offlinejoin",
769 net_offlinejoin,
770 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
771 N_("Perform offline domain join"),
772 N_(" Use 'net help offlinejoin' to get more information about 'net "
773 "offlinejoin'.")
774 },
775 { "dom",
776 net_dom,
777 NET_TRANSPORT_LOCAL,
778 N_("Join/unjoin (remote) machines to/from a domain/AD"),
779 N_(" Use 'net help dom' to get more information about 'net "
780 "dom' commands.")
781 },
782 { "cache",
783 net_cache,
784 NET_TRANSPORT_LOCAL,
785 N_("Operate on the cache tdb file"),
786 N_(" Use 'net help cache' to get more information about 'net "
787 "cache' commands.")
788 },
789 { "getlocalsid",
790 net_getlocalsid,
791 NET_TRANSPORT_LOCAL,
792 N_("Get the SID for the local domain"),
793 N_(" net getlocalsid")
794 },
795 { "setlocalsid",
796 net_setlocalsid,
797 NET_TRANSPORT_LOCAL,
798 N_("Set the SID for the local domain"),
799 N_(" net setlocalsid S-1-5-21-x-y-z")
800 },
801 { "setdomainsid",
802 net_setdomainsid,
803 NET_TRANSPORT_LOCAL,
804 N_("Set domain SID on member servers"),
805 N_(" net setdomainsid S-1-5-21-x-y-z")
806 },
807 { "getdomainsid",
808 net_getdomainsid,
809 NET_TRANSPORT_LOCAL,
810 N_("Get domain SID on member servers"),
811 N_(" net getdomainsid")
812 },
813 { "maxrid",
814 net_maxrid,
815 NET_TRANSPORT_LOCAL,
816 N_("Display the maximum RID currently used"),
817 N_(" net maxrid")
818 },
819 { "idmap",
820 net_idmap,
821 NET_TRANSPORT_LOCAL,
822 N_("IDmap functions"),
823 N_(" Use 'net help idmap to get more information about 'net "
824 "idmap' commands.")
825 },
826 { "status",
827 net_status,
828 NET_TRANSPORT_LOCAL,
829 N_("Display server status"),
830 N_(" Use 'net help status' to get more information about 'net "
831 "status' commands.")
832 },
833 { "usershare",
834 net_usershare,
835 NET_TRANSPORT_LOCAL,
836 N_("Manage user-modifiable shares"),
837 N_(" Use 'net help usershare to get more information about "
838 "'net usershare' commands.")
839 },
840 { "usersidlist",
841 net_usersidlist,
842 NET_TRANSPORT_RPC,
843 N_("Display list of all users with SID"),
844 N_(" Use 'net help usersidlist' to get more information about "
845 "'net usersidlist'.")
846 },
847 { "conf",
848 net_conf,
849 NET_TRANSPORT_LOCAL,
850 N_("Manage Samba registry based configuration"),
851 N_(" Use 'net help conf' to get more information about 'net "
852 "conf' commands.")
853 },
854 { "registry",
855 net_registry,
856 NET_TRANSPORT_LOCAL,
857 N_("Manage the Samba registry"),
858 N_(" Use 'net help registry' to get more information about "
859 "'net registry' commands.")
860 },
861 { "eventlog",
862 net_eventlog,
863 NET_TRANSPORT_LOCAL,
864 N_("Process Win32 *.evt eventlog files"),
865 N_(" Use 'net help eventlog' to get more information about "
866 "'net eventlog' commands.")
867 },
868 { "printing",
869 net_printing,
870 NET_TRANSPORT_LOCAL,
871 N_("Process tdb printer files"),
872 N_(" Use 'net help printing' to get more information about "
873 "'net printing' commands.")
874 },
875
876 { "serverid",
877 net_serverid,
878 NET_TRANSPORT_LOCAL,
879 N_("Manage the serverid tdb"),
880 N_(" Use 'net help serverid' to get more information about "
881 "'net serverid' commands.")
882 },
883
884 { "notify",
885 net_notify,
886 NET_TRANSPORT_LOCAL,
887 N_("notifyd client code"),
888 N_(" Use 'net help notify' to get more information about "
889 "'net notify' commands.")
890 },
891
892 { "tdb",
893 net_tdb,
894 NET_TRANSPORT_LOCAL,
895 N_("Show information from tdb records"),
896 N_(" Use 'net help tdb' to get more information about "
897 "'net tdb' commands.")
898 },
899
900 { "vfs",
901 net_vfs,
902 NET_TRANSPORT_LOCAL,
903 N_("Filesystem operation through the VFS stack"),
904 N_(" Use 'net help vfs' to get more information about "
905 "'net vfs' commands.")
906 },
907
908 { "witness",
909 net_witness,
910 NET_TRANSPORT_LOCAL,
911 N_("Manage witness registrations"),
912 N_(" Use 'net help witness' to get more information about "
913 "'net witness' commands.")
914 },
915
916 #ifdef WITH_FAKE_KASERVER
917 { "afs",
918 net_afs,
919 NET_TRANSPORT_LOCAL,
920 N_("Manage AFS tokens"),
921 N_(" Use 'net help afs' to get more information about 'net "
922 "afs' commands.")
923 },
924 #endif
925
926 { "help",
927 net_help,
928 NET_TRANSPORT_LOCAL,
929 N_("Print usage information"),
930 N_(" Use 'net help help' to list usage information for 'net' "
931 "commands.")
932 },
933 {NULL, NULL, 0, NULL, NULL}
934 };
935
936
937 /****************************************************************************
938 main program
939 ****************************************************************************/
940 int main(int argc, char **argv)
941 {
942 int opt,i;
943 int rc = 0;
944 int argc_new = 0;
945 const char ** argv_new;
946 const char **argv_const = discard_const_p(const char *, argv);
947 poptContext pc;
948 TALLOC_CTX *frame = talloc_stackframe();
949 struct net_context *c = talloc_zero(frame, struct net_context);
950 bool ok;
951
952 struct poptOption long_options[] = {
953 {
954 .longName = "help",
955 .shortName = 'h',
956 .argInfo = POPT_ARG_NONE,
957 .val = 'h',
958 },
959 {
960 .longName = "target-workgroup",
961 .shortName = 'w',
962 .argInfo = POPT_ARG_STRING,
963 .arg = &c->opt_target_workgroup,
964 },
965 {
966 .longName = "ipaddress",
967 .shortName = 'I',
968 .argInfo = POPT_ARG_STRING,
969 .arg = 0,
970 .val = 'I',
971 },
972 {
973 .longName = "port",
974 .shortName = 'p',
975 .argInfo = POPT_ARG_INT,
976 .arg = &c->opt_port,
977 },
978 {
979 .longName = "myname",
980 .shortName = 0,
981 .argInfo = POPT_ARG_STRING,
982 .arg = &c->opt_requester_name,
983 },
984 {
985 .longName = "server",
986 .shortName = 'S',
987 .argInfo = POPT_ARG_STRING,
988 .arg = &c->opt_host,
989 },
990 {
991 .longName = "container",
992 .shortName = 'c',
993 .argInfo = POPT_ARG_STRING,
994 .arg = &c->opt_container,
995 },
996 {
997 .longName = "comment",
998 .shortName = 'C',
999 .argInfo = POPT_ARG_STRING,
1000 .arg = &c->opt_comment,
1001 },
1002 {
1003 .longName = "maxusers",
1004 .shortName = 'M',
1005 .argInfo = POPT_ARG_INT,
1006 .arg = &c->opt_maxusers,
1007 },
1008 {
1009 .longName = "flags",
1010 .shortName = 'F',
1011 .argInfo = POPT_ARG_INT,
1012 .arg = &c->opt_flags,
1013 },
1014 {
1015 .longName = "long",
1016 .argInfo = POPT_ARG_NONE,
1017 .arg = &c->opt_long_list_entries,
1018 },
1019 {
1020 .longName = "reboot",
1021 .shortName = 'r',
1022 .argInfo = POPT_ARG_NONE,
1023 .arg = &c->opt_reboot,
1024 },
1025 {
1026 .longName = "force",
1027 .shortName = 'f',
1028 .argInfo = POPT_ARG_NONE,
1029 .arg = &c->opt_force,
1030 },
1031 {
1032 .longName = "stdin",
1033 .shortName = 'i',
1034 .argInfo = POPT_ARG_NONE,
1035 .arg = &c->opt_stdin,
1036 },
1037 {
1038 .longName = "timeout",
1039 .shortName = 't',
1040 .argInfo = POPT_ARG_INT,
1041 .arg = &c->opt_timeout,
1042 },
1043 {
1044 .longName = "request-timeout",
1045 .shortName = 0,
1046 .argInfo = POPT_ARG_INT,
1047 .arg = &c->opt_request_timeout,
1048 },
1049 {
1050 .longName = "use-ccache",
1051 .shortName = 0,
1052 .argInfo = POPT_ARG_NONE,
1053 .arg = &c->opt_ccache,
1054 },
1055 {
1056 .longName = "verbose",
1057 .shortName = 'v',
1058 .argInfo = POPT_ARG_NONE,
1059 .arg = &c->opt_verbose,
1060 },
1061 {
1062 .longName = "test",
1063 .shortName = 'T',
1064 .argInfo = POPT_ARG_NONE,
1065 .arg = &c->opt_testmode,
1066 },
1067 /* Options for 'net groupmap set' */
1068 {
1069 .longName = "local",
1070 .shortName = 'L',
1071 .argInfo = POPT_ARG_NONE,
1072 .arg = &c->opt_localgroup,
1073 },
1074 {
1075 .longName = "domain",
1076 .shortName = 'D',
1077 .argInfo = POPT_ARG_NONE,
1078 .arg = &c->opt_domaingroup,
1079 },
1080 {
1081 .longName = "ntname",
1082 .shortName = 0,
1083 .argInfo = POPT_ARG_STRING,
1084 .arg = &c->opt_newntname,
1085 },
1086 {
1087 .longName = "rid",
1088 .shortName = 0,
1089 .argInfo = POPT_ARG_INT,
1090 .arg = &c->opt_rid,
1091 },
1092 /* Options for 'net rpc share migrate' */
1093 {
1094 .longName = "acls",
1095 .shortName = 0,
1096 .argInfo = POPT_ARG_NONE,
1097 .arg = &c->opt_acls,
1098 },
1099 {
1100 .longName = "attrs",
1101 .shortName = 0,
1102 .argInfo = POPT_ARG_NONE,
1103 .arg = &c->opt_attrs,
1104 },
1105 {
1106 .longName = "timestamps",
1107 .shortName = 0,
1108 .argInfo = POPT_ARG_NONE,
1109 .arg = &c->opt_timestamps,
1110 },
1111 {
1112 .longName = "exclude",
1113 .shortName = 'X',
1114 .argInfo = POPT_ARG_STRING,
1115 .arg = &c->opt_exclude,
1116 },
1117 {
1118 .longName = "destination",
1119 .shortName = 0,
1120 .argInfo = POPT_ARG_STRING,
1121 .arg = &c->opt_destination,
1122 },
1123 {
1124 .longName = "tallocreport",
1125 .shortName = 0,
1126 .argInfo = POPT_ARG_NONE,
1127 .arg = &c->do_talloc_report,
1128 },
1129 /* Options for 'net rpc vampire (keytab)' */
1130 {
1131 .longName = "force-full-repl",
1132 .shortName = 0,
1133 .argInfo = POPT_ARG_NONE,
1134 .arg = &c->opt_force_full_repl,
1135 },
1136 {
1137 .longName = "single-obj-repl",
1138 .shortName = 0,
1139 .argInfo = POPT_ARG_NONE,
1140 .arg = &c->opt_single_obj_repl,
1141 },
1142 {
1143 .longName = "clean-old-entries",
1144 .shortName = 0,
1145 .argInfo = POPT_ARG_NONE,
1146 .arg = &c->opt_clean_old_entries,
1147 },
1148 /* Options for 'net idmap'*/
1149 {
1150 .longName = "db",
1151 .shortName = 0,
1152 .argInfo = POPT_ARG_STRING,
1153 .arg = &c->opt_db,
1154 },
1155 {
1156 .longName = "lock",
1157 .shortName = 0,
1158 .argInfo = POPT_ARG_NONE,
1159 .arg = &c->opt_lock,
1160 },
1161 {
1162 .longName = "auto",
1163 .shortName = 'a',
1164 .argInfo = POPT_ARG_NONE,
1165 .arg = &c->opt_auto,
1166 },
1167 {
1168 .longName = "repair",
1169 .shortName = 0,
1170 .argInfo = POPT_ARG_NONE,
1171 .arg = &c->opt_repair,
1172 },
1173 /* Options for 'net registry check'*/
1174 {
1175 .longName = "reg-version",
1176 .shortName = 0,
1177 .argInfo = POPT_ARG_INT,
1178 .arg = &c->opt_reg_version,
1179 },
1180 {
1181 .longName = "output",
1182 .shortName = 'o',
1183 .argInfo = POPT_ARG_STRING,
1184 .arg = &c->opt_output,
1185 },
1186 {
1187 .longName = "wipe",
1188 .shortName = 0,
1189 .argInfo = POPT_ARG_NONE,
1190 .arg = &c->opt_wipe,
1191 },
1192 /* Options for 'net registry import' */
1193 {
1194 .longName = "precheck",
1195 .shortName = 0,
1196 .argInfo = POPT_ARG_STRING,
1197 .arg = &c->opt_precheck,
1198 },
1199 /* Options for 'net ads join or leave' */
1200 {
1201 .longName = "no-dns-updates",
1202 .shortName = 0,
1203 .argInfo = POPT_ARG_NONE,
1204 .arg = &c->opt_no_dns_updates,
1205 },
1206 {
1207 .longName = "keep-account",
1208 .shortName = 0,
1209 .argInfo = POPT_ARG_NONE,
1210 .arg = &c->opt_keep_account,
1211 },
1212 {
1213 .longName = "json",
1214 .shortName = 0,
1215 .argInfo = POPT_ARG_NONE,
1216 .arg = &c->opt_json,
1217 },
1218 /* Options for 'net vfs' */
1219 {
1220 .longName = "continue",
1221 .argInfo = POPT_ARG_NONE,
1222 .arg = &c->opt_continue_on_error,
1223 .descrip = "Continue on errors",
1224 },
1225 {
1226 .longName = "recursive",
1227 .argInfo = POPT_ARG_NONE,
1228 .arg = &c->opt_recursive,
1229 .descrip = "Traverse directory hierarchy",
1230 },
1231 {
1232 .longName = "follow-symlinks",
1233 .argInfo = POPT_ARG_NONE,
1234 .arg = &c->opt_follow_symlink,
1235 .descrip = "follow symlinks",
1236 },
1237 /* Options for 'net ads dns register' */
1238 {
1239 .longName = "dns-ttl",
1240 .argInfo = POPT_ARG_INT,
1241 .arg = &c->opt_dns_ttl,
1242 .descrip = "TTL in seconds of DNS records",
1243 },
1244 /* Options for 'net witness {list,...}' */
1245 {
1246 .longName = "witness-registration",
1247 .shortName = 0,
1248 .argInfo = POPT_ARG_STRING,
1249 .arg = &c->opt_witness_registration,
1250 },
1251 {
1252 .longName = "witness-net-name",
1253 .shortName = 0,
1254 .argInfo = POPT_ARG_STRING,
1255 .arg = &c->opt_witness_net_name,
1256 },
1257 {
1258 .longName = "witness-share-name",
1259 .shortName = 0,
1260 .argInfo = POPT_ARG_STRING,
1261 .arg = &c->opt_witness_share_name,
1262 },
1263 {
1264 .longName = "witness-ip-address",
1265 .shortName = 0,
1266 .argInfo = POPT_ARG_STRING,
1267 .arg = &c->opt_witness_ip_address,
1268 },
1269 {
1270 .longName = "witness-client-computer-name",
1271 .shortName = 0,
1272 .argInfo = POPT_ARG_STRING,
1273 .arg = &c->opt_witness_client_computer_name,
1274 },
1275 {
1276 .longName = "witness-apply-to-all",
1277 .shortName = 0,
1278 .argInfo = POPT_ARG_NONE,
1279 .arg = &c->opt_witness_apply_to_all,
1280 },
1281 {
1282 .longName = "witness-new-ip",
1283 .shortName = 0,
1284 .argInfo = POPT_ARG_STRING,
1285 .arg = &c->opt_witness_new_ip,
1286 },
1287 {
1288 .longName = "witness-new-node",
1289 .shortName = 0,
1290 .argInfo = POPT_ARG_INT,
1291 .arg = &c->opt_witness_new_node,
1292 },
1293 POPT_COMMON_SAMBA
1294 POPT_COMMON_CONNECTION
1295 POPT_COMMON_CREDENTIALS
1296 POPT_COMMON_VERSION
1297 POPT_LEGACY_S3
1298 POPT_TABLEEND
1299 };
1300
1301 /* Ignore possible SIGPIPE upon ldap_unbind when over TLS */
1302 BlockSignals(True, SIGPIPE);
1303
1304 zero_sockaddr(&c->opt_dest_ip);
1305 c->opt_witness_new_node = -2;
1306
1307 smb_init_locale();
1308
1309 setlocale(LC_ALL, "");
1310 #if defined(HAVE_BINDTEXTDOMAIN)
1311 bindtextdomain(MODULE_NAME, get_dyn_LOCALEDIR());
1312 #endif
1313 #if defined(HAVE_TEXTDOMAIN)
1314 textdomain(MODULE_NAME);
1315 #endif
1316
1317 ok = samba_cmdline_init(frame,
1318 SAMBA_CMDLINE_CONFIG_CLIENT,
1319 false /* require_smbconf */);
1320 if (!ok) {
1321 DBG_ERR("Failed to init cmdline parser!\n");
1322 TALLOC_FREE(frame);
1323 exit(1);
1324 }
1325 c->lp_ctx = samba_cmdline_get_lp_ctx();
1326 /* set default debug level to 0 regardless of what smb.conf sets */
1327 lpcfg_set_cmdline(c->lp_ctx, "log level", "0");
1328 c->private_data = net_func;
1329
1330 pc = samba_popt_get_context(getprogname(),
1331 argc,
1332 argv_const,
1333 long_options,
1334 POPT_CONTEXT_KEEP_FIRST);
1335 if (pc == NULL) {
1336 DBG_ERR("Failed to setup popt context!\n");
1337 TALLOC_FREE(frame);
1338 exit(1);
1339 }
1340
1341 while((opt = poptGetNextOpt(pc)) != -1) {
1342 switch (opt) {
1343 case 'h':
1344 c->display_usage = true;
1345 break;
1346 case 'I':
1347 if (!interpret_string_addr(&c->opt_dest_ip,
1348 poptGetOptArg(pc), 0)) {
1349 d_fprintf(stderr, _("\nInvalid ip address specified\n"));
1350 } else {
1351 c->opt_have_ip = true;
1352 }
1353 break;
1354 default:
1355 d_fprintf(stderr, _("\nInvalid option %s: %s\n"),
1356 poptBadOption(pc, 0), poptStrerror(opt));
1357 net_help(c, argc, argv_const);
1358 exit(1);
1359 }
1360 }
1361
1362 c->creds = samba_cmdline_get_creds();
1363
1364 {
1365 enum credentials_obtained username_obtained =
1366 CRED_UNINITIALISED;
1367 enum smb_encryption_setting encrypt_state =
1368 cli_credentials_get_smb_encryption(c->creds);
1369 enum credentials_use_kerberos krb5_state =
1370 cli_credentials_get_kerberos_state(c->creds);
1371 uint32_t gensec_features;
1372
1373 c->opt_user_name = cli_credentials_get_username_and_obtained(
1374 c->creds,
1375 &username_obtained);
1376 c->opt_user_specified = (username_obtained == CRED_SPECIFIED);
1377
1378 c->opt_workgroup = cli_credentials_get_domain(c->creds);
1379
1380 c->smb_encrypt = (encrypt_state == SMB_ENCRYPTION_REQUIRED);
1381
1382 c->opt_kerberos = (krb5_state > CRED_USE_KERBEROS_DESIRED);
1383
1384 gensec_features = cli_credentials_get_gensec_features(c->creds);
1385 c->opt_ccache = (gensec_features & GENSEC_FEATURE_NTLM_CCACHE);
1386 }
1387
1388 c->msg_ctx = cmdline_messaging_context(get_dyn_CONFIGFILE());
1389
1390 #if defined(HAVE_BIND_TEXTDOMAIN_CODESET)
1391 /* Bind our gettext results to 'unix charset'
1392
1393 This ensures that the translations and any embedded strings are in the
1394 same charset. It won't be the one from the user's locale (we no
1395 longer auto-detect that), but it will be self-consistent.
1396 */
1397 bind_textdomain_codeset(MODULE_NAME, lp_unix_charset());
1398 #endif
1399
1400 argv_new = (const char **)poptGetArgs(pc);
1401
1402 argc_new = argc;
1403 for (i=0; i<argc; i++) {
1404 if (argv_new[i] == NULL) {
1405 argc_new = i;
1406 break;
1407 }
1408 }
1409
1410 if (c->do_talloc_report) {
1411 talloc_enable_leak_report();
1412 }
1413
1414 if (c->opt_requester_name) {
1415 lpcfg_set_cmdline(c->lp_ctx, "netbios name", c->opt_requester_name);
1416 }
1417
1418 if (!c->opt_target_workgroup) {
1419 c->opt_target_workgroup = talloc_strdup(c, lp_workgroup());
1420 }
1421
1422 load_interfaces();
1423
1424 /* this makes sure that when we do things like call scripts,
1425 that it won't assert because we are not root */
1426 sec_init();
1427
1428 samba_cmdline_burn(argc, argv);
1429
1430 rc = net_run_function(c, argc_new-1, argv_new+1, "net", net_func);
1431
1432 DEBUG(2,("return code = %d\n", rc));
1433
1434 libnetapi_free(c->netapi_ctx);
1435
1436 poptFreeContext(pc);
1437
1438 cmdline_messaging_context_free();
1439
1440 gfree_all();
1441
1442 TALLOC_FREE(frame);
1443 return rc;
1444 }
Samba GIT mirror