| blob | 778e888950eaba0dbb1ef1ce8ebad6ff62c41e13 |
1 /*
2 Samba Unix/Linux SMB client library
3 Distributed SMB/CIFS Server Management Utility
4 Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
5 Copyright (C) 2002 Jim McDonough (jmcd@us.ibm.com)
6 Copyright (C) 2004,2008 Guenther Deschner (gd@samba.org)
7 Copyright (C) 2005 Jeremy Allison (jra@samba.org)
8 Copyright (C) 2006 Jelmer Vernooij (jelmer@samba.org)
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>. */
53 /**
54 * @file net_rpc.c
55 *
56 * @brief RPC based subcommands for the 'net' utility.
57 *
58 * This file should contain much of the functionality that used to
59 * be found in rpcclient, execpt that the commands should change
60 * less often, and the fucntionality should be sane (the user is not
61 * expected to know a rid/sid before they conduct an operation etc.)
62 *
63 * @todo Perhaps eventually these should be split out into a number
64 * of files, as this could get quite big.
65 **/
68 /**
69 * Many of the RPC functions need the domain sid. This function gets
70 * it at the start of every run
71 *
72 * @param cli A cli_state already connected to the remote machine
73 *
74 * @return The Domain SID of the remote machine.
75 **/
80 {
92 }
97 SEC_FLAG_MAXIMUM_ALLOWED,
104 }
108 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
116 }
122 }
131 }
133 /**
134 * Run a single RPC command, from start to finish.
135 *
136 * @param pipe_name the pipe to connect to (usually a PIPE_ constant)
137 * @param conn_flag a NET_FLAG_ combination. Passed to
138 * net_make_ipc_connection.
139 * @param argc Standard main() style argc.
140 * @param argv Standard main() style argv. Initial components are already
141 * stripped.
142 * @return A shell status integer (0 for success).
143 */
149 rpc_command_fn fn,
152 {
156 NTSTATUS nt_status;
161 /* make use of cli_state handed over as an argument, if possible */
168 }
171 }
175 }
177 /* Create mem_ctx */
182 }
188 }
194 /* Always try and create an schannel netlogon pipe. */
204 }
211 DCERPC_AUTH_TYPE_NTLMSSP,
212 DCERPC_AUTH_LEVEL_PRIVACY,
220 }
226 }
227 }
228 }
237 }
242 }
243 }
245 fail:
246 /* close the connection only if it was opened here */
249 }
253 }
255 /**
256 * Force a change of the trust acccount password.
257 *
258 * All parameters are provided by the run_rpc_command function, except for
259 * argc, argv which are passed through.
260 *
261 * @param domain_sid The domain sid acquired from the remote server.
262 * @param cli A cli_state connected to the server.
263 * @param mem_ctx Talloc context, destroyed on completion of the function.
264 * @param argc Standard main() style argc.
265 * @param argv Standard main() style argv. Initial components are already
266 * stripped.
267 *
268 * @return Normal NTSTATUS return.
269 **/
279 {
280 NTSTATUS status;
291 }
294 }
296 /**
297 * Force a change of the trust acccount password.
298 *
299 * @param argc Standard main() style argc.
300 * @param argv Standard main() style argv. Initial components are already
301 * stripped.
302 *
303 * @return A shell status integer (0 for success).
304 **/
307 {
315 }
319 rpc_changetrustpw_internals,
321 }
323 /**
324 * Join a domain, the old way. This function exists to allow
325 * the message to be displayed when oldjoin was explicitly
326 * requested, but not when it was implied by "net rpc join".
327 *
328 * This uses 'machinename' as the inital password, and changes it.
329 *
330 * The password should be created with 'server manager' or equiv first.
331 *
332 * @param argc Standard main() style argc.
333 * @param argv Standard main() style argv. Initial components are already
334 * stripped.
335 *
336 * @return A shell status integer (0 for success).
337 **/
340 {
343 WERROR werr;
354 }
359 }
364 }
366 /*
367 check what type of join - if the user want's to join as
368 a BDC, the server must agree that we are a BDC.
369 */
374 }
381 }
387 }
398 }
402 WKSSVC_JOIN_FLAGS_JOIN_UNSECURE |
403 WKSSVC_JOIN_FLAGS_MACHINE_PWD_PASSED;
408 }
410 /* Check the short name of the domain */
418 }
428 }
434 fail:
437 }
439 /* issue an overall failure message at the end. */
444 cleanup:
448 }
450 /**
451 * check that a join is OK
452 *
453 * @return A shell status integer (0 for success)
454 *
455 **/
457 {
458 NTSTATUS status;
468 }
473 }
483 }
487 domain,
488 NULL,
489 NULL,
490 DS_RETURN_DNS_NAME,
495 }
498 }
500 /* Display success or failure */
503 dc,
510 }
516 }
518 /**
519 * Join a domain using the administrator username and password
520 *
521 * @param argc Standard main() style argc
522 * @param argc Standard main() style argv. Initial components are already
523 * stripped. Currently not used.
524 * @return A shell status integer (0 for success)
525 *
526 **/
529 {
532 WERROR werr;
542 }
547 }
552 }
554 /*
555 check what type of join - if the user want's to join as
556 a BDC, the server must agree that we are a BDC.
557 */
562 }
569 }
581 WKSSVC_JOIN_FLAGS_ACCOUNT_CREATE |
582 WKSSVC_JOIN_FLAGS_DOMAIN_JOIN_IF_JOINED;
587 }
589 /* Check the short name of the domain */
597 }
607 }
613 fail:
614 /* issue an overall failure message at the end. */
622 }
624 /**
625 * 'net rpc join' entrypoint.
626 * @param argc Standard main() style argc.
627 * @param argv Standard main() style argv. Initial components are already
628 * stripped
629 *
630 * Main 'net_rpc_join()' (where the admin username/password is used) is
631 * in net_rpc_join.c.
632 * Try to just change the password, but if that doesn't work, use/prompt
633 * for a username/password.
634 **/
637 {
653 }
658 }
665 }
672 }
675 }
677 /**
678 * display info about a rpc domain
679 *
680 * All parameters are provided by the run_rpc_command function, except for
681 * argc, argv which are passed through.
682 *
683 * @param domain_sid The domain sid acquired from the remote server
684 * @param cli A cli_state connected to the server.
685 * @param mem_ctx Talloc context, destroyed on completion of the function.
686 * @param argc Standard main() style argc.
687 * @param argv Standard main() style argv. Initial components are already
688 * stripped.
689 *
690 * @return Normal NTSTATUS return.
691 **/
701 {
705 fstring sid_str;
710 /* Get sam policy handle */
713 MAXIMUM_ALLOWED_ACCESS,
720 }
727 }
729 /* Get domain policy handle */
732 MAXIMUM_ALLOWED_ACCESS,
740 }
746 }
755 }
766 }
768 done:
770 }
772 /**
773 * 'net rpc info' entrypoint.
774 * @param argc Standard main() style argc.
775 * @param argv Standard main() style argv. Initial components are already
776 * stripped.
777 **/
780 {
788 }
793 }
795 /**
796 * Fetch domain SID into the local secrets.tdb.
797 *
798 * All parameters are provided by the run_rpc_command function, except for
799 * argc, argv which are passed through.
800 *
801 * @param domain_sid The domain sid acquired from the remote server.
802 * @param cli A cli_state connected to the server.
803 * @param mem_ctx Talloc context, destroyed on completion of the function.
804 * @param argc Standard main() style argc.
805 * @param argv Standard main() style argv. Initial components are already
806 * stripped.
807 *
808 * @return Normal NTSTATUS return.
809 **/
819 {
820 fstring sid_str;
829 }
832 }
834 /**
835 * 'net rpc getsid' entrypoint.
836 * @param argc Standard main() style argc.
837 * @param argv Standard main() style argv. Initial components are already
838 * stripped.
839 **/
842 {
847 }
856 }
859 conn_flags,
860 rpc_getsid_internals,
862 }
864 /****************************************************************************/
866 /**
867 * Basic usage function for 'net rpc user'.
868 * @param argc Standard main() style argc.
869 * @param argv Standard main() style argv. Initial components are already
870 * stripped.
871 **/
874 {
876 }
878 /**
879 * Add a new user to a remote RPC server.
880 *
881 * @param argc Standard main() style argc.
882 * @param argv Standard main() style argv. Initial components are already
883 * stripped.
884 *
885 * @return A shell status integer (0 for success).
886 **/
889 {
890 NET_API_STATUS status;
897 }
904 }
911 status));
915 }
918 }
920 /**
921 * Rename a user on a remote RPC server.
922 *
923 * @param argc Standard main() style argc.
924 * @param argv Standard main() style argv. Initial components are already
925 * stripped.
926 *
927 * @return A shell status integer (0 for success).
928 **/
931 {
932 NET_API_STATUS status;
939 }
952 }
955 }
957 /**
958 * Set a user's primary group
959 *
960 * @param argc Standard main() style argc.
961 * @param argv Standard main() style argv. Initial components are already
962 * stripped.
963 *
964 * @return A shell status integer (0 for success).
965 **/
969 {
970 NET_API_STATUS status;
979 }
987 }
1004 }
1006 }
1008 /**
1009 * Delete a user from a remote RPC server.
1010 *
1011 * @param argc Standard main() style argc.
1012 * @param argv Standard main() style argv. Initial components are already
1013 * stripped.
1014 *
1015 * @return A shell status integer (0 for success).
1016 **/
1019 {
1020 NET_API_STATUS status;
1025 }
1036 }
1039 }
1041 /**
1042 * Set a user's password on a remote RPC server.
1043 *
1044 * @param argc Standard main() style argc.
1045 * @param argv Standard main() style argv. Initial components are already
1046 * stripped.
1047 *
1048 * @return A shell status integer (0 for success).
1049 **/
1052 {
1053 NET_API_STATUS status;
1062 }
1072 }
1078 }
1083 }
1084 }
1088 /* Display results */
1093 status));
1095 }
1098 }
1100 /**
1101 * List a user's groups from a remote RPC server.
1102 *
1103 * @param argc Standard main() style argc.
1104 * @param argv Standard main() style argv. Initial components are already
1105 * stripped.
1106 *
1107 * @return A shell status integer (0 for success)
1108 **/
1112 {
1113 NET_API_STATUS status;
1123 }
1136 status));
1138 }
1142 u0++;
1143 }
1146 }
1148 /**
1149 * List users on a remote RPC server.
1150 *
1151 * All parameters are provided by the run_rpc_command function, except for
1152 * argc, argv which are passed through.
1153 *
1154 * @param domain_sid The domain sid acquired from the remote server.
1155 * @param cli A cli_state connected to the server.
1156 * @param mem_ctx Talloc context, destroyed on completion of the function.
1157 * @param argc Standard main() style argc.
1158 * @param argv Standard main() style argv. Initial components are already
1159 * stripped.
1160 *
1161 * @return Normal NTSTATUS return.
1162 **/
1165 {
1166 NET_API_STATUS status;
1171 /* Query domain users */
1183 start_idx,
1184 max_entries,
1185 max_size,
1190 }
1199 else
1201 info++;
1202 }
1206 loop_count++;
1212 }
1214 /**
1215 * 'net rpc user' entrypoint.
1216 * @param argc Standard main() style argc.
1217 * @param argv Standard main() style argv. Initial components are already
1218 * stripped.
1219 **/
1222 {
1223 NET_API_STATUS status;
1226 {
1228 rpc_user_add,
1229 NET_TRANSPORT_RPC,
1233 },
1234 {
1236 rpc_user_info,
1237 NET_TRANSPORT_RPC,
1241 },
1242 {
1244 rpc_user_delete,
1245 NET_TRANSPORT_RPC,
1249 },
1250 {
1252 rpc_user_password,
1253 NET_TRANSPORT_RPC,
1257 },
1258 {
1260 rpc_user_rename,
1261 NET_TRANSPORT_RPC,
1265 },
1266 {
1268 rpc_user_setprimarygroup,
1269 NET_TRANSPORT_RPC,
1272 " Set a user's primary group"
1273 },
1275 };
1280 }
1285 }
1296 }
1299 }
1302 }
1309 {
1311 }
1318 {
1320 }
1334 {
1338 uint32 rid;
1346 }
1358 }
1365 }
1371 }
1375 MAXIMUM_ALLOWED_ACCESS,
1380 }
1384 }
1388 MAXIMUM_ALLOWED_ACCESS,
1394 }
1398 }
1402 MAXIMUM_ALLOWED_ACCESS,
1403 rid,
1408 }
1412 }
1416 done:
1419 }
1422 }
1425 }
1427 }
1435 {
1444 }
1447 user_hnd,
1453 }
1456 }
1463 }
1470 {
1472 rpc_sh_user_show_internals);
1473 }
1475 #define FETCHSTR(name, rec) \
1476 do { if (strequal(ctx->thiscmd, name)) { \
1477 oldval = talloc_strdup(mem_ctx, info->info21.rec.string); } \
1478 } while (0);
1480 #define SETSTR(name, rec, flag) \
1481 do { if (strequal(ctx->thiscmd, name)) { \
1482 init_lsa_String(&(info->info21.rec), argv[0]); \
1483 info->info21.fields_present |= SAMR_FIELD_##flag; } \
1484 } while (0);
1492 {
1503 }
1506 user_hnd,
1512 }
1515 }
1529 }
1533 }
1545 user_hnd,
1547 info,
1551 }
1558 done:
1561 }
1563 #define HANDLEFLG(name, rec) \
1564 do { if (strequal(ctx->thiscmd, name)) { \
1566 if (newval) { \
1567 newflags = oldflags | ACB_##rec; \
1568 } else { \
1569 newflags = oldflags & ~ACB_##rec; \
1570 } } } while (0);
1577 {
1579 rpc_sh_user_str_edit_internals);
1580 }
1588 {
1600 /* TRANSATORS: The yes|no here are program keywords. Please do
1601 not translate. */
1605 }
1610 user_hnd,
1616 }
1619 }
1632 oldval);
1634 }
1642 user_hnd,
1644 info,
1648 }
1653 }
1655 done:
1658 }
1665 {
1667 rpc_sh_user_flag_edit_internals);
1668 }
1673 {
1707 };
1710 }
1715 {
1731 };
1734 }
1736 /****************************************************************************/
1738 /**
1739 * Basic usage function for 'net rpc group'.
1740 * @param argc Standard main() style argc.
1741 * @param argv Standard main() style argv. Initial components are already
1742 * stripped.
1743 **/
1746 {
1748 }
1750 /**
1751 * Delete group on a remote RPC server.
1752 *
1753 * All parameters are provided by the run_rpc_command function, except for
1754 * argc, argv which are passed through.
1755 *
1756 * @param domain_sid The domain sid acquired from the remote server.
1757 * @param cli A cli_state connected to the server.
1758 * @param mem_ctx Talloc context, destroyed on completion of the function.
1759 * @param argc Standard main() style argc.
1760 * @param argv Standard main() style argv. Initial components are already
1761 * stripped.
1762 *
1763 * @return Normal NTSTATUS return.
1764 **/
1774 {
1780 /* char **names; */
1782 /* struct samr_RidWithAttribute *user_gids; */
1792 }
1796 MAXIMUM_ALLOWED_ACCESS,
1802 }
1808 }
1812 MAXIMUM_ALLOWED_ACCESS,
1819 }
1825 }
1839 }
1845 }
1849 }
1853 }
1856 {
1860 MAXIMUM_ALLOWED_ACCESS,
1867 }
1873 }
1886 }
1894 }
1900 }
1902 /* Check if group is anyone's primary group */
1904 {
1907 MAXIMUM_ALLOWED_ACCESS,
1916 }
1924 }
1937 }
1946 }
1953 }
1955 }
1958 }
1962 "some of it's members have it as primary "
1966 }
1968 /* remove all group members */
1970 {
1980 }
1989 }
1990 }
1997 }
2002 /* removing a local group is easier... */
2006 MAXIMUM_ALLOWED_ACCESS,
2013 }
2018 }
2025 }
2036 }
2045 }
2047 done:
2050 }
2053 {
2056 }
2059 {
2060 NET_API_STATUS status;
2067 }
2074 }
2082 status));
2086 }
2089 }
2092 {
2093 NET_API_STATUS status;
2100 }
2107 }
2115 status));
2119 }
2122 }
2125 {
2130 }
2137 {
2149 }
2158 }
2166 }
2170 done:
2173 }
2177 /* Try as S-1-5-whatever */
2185 }
2186 }
2189 }
2195 {
2198 uint32 group_rid;
2211 }
2213 /* Get sam policy handle */
2216 MAXIMUM_ALLOWED_ACCESS,
2221 }
2224 }
2226 /* Get domain policy handle */
2229 MAXIMUM_ALLOWED_ACCESS,
2235 }
2238 }
2251 member);
2253 }
2258 member);
2260 }
2264 }
2268 }
2272 MAXIMUM_ALLOWED_ACCESS,
2273 group_rid,
2278 }
2283 }
2292 }
2296 done:
2299 }
2306 {
2309 uint32 alias_rid;
2322 }
2329 member);
2331 }
2333 /* Get sam policy handle */
2336 MAXIMUM_ALLOWED_ACCESS,
2341 }
2345 }
2347 /* Get domain policy handle */
2350 MAXIMUM_ALLOWED_ACCESS,
2356 }
2360 }
2364 MAXIMUM_ALLOWED_ACCESS,
2365 alias_rid,
2370 }
2373 }
2381 }
2385 done:
2388 }
2398 {
2410 }
2417 }
2426 }
2428 }
2437 }
2439 }
2445 }
2448 {
2450 rpc_group_addmem_internals,
2452 }
2459 {
2462 uint32 group_rid;
2476 /* Get sam policy handle */
2479 MAXIMUM_ALLOWED_ACCESS,
2484 }
2487 }
2490 /* Get domain policy handle */
2493 MAXIMUM_ALLOWED_ACCESS,
2499 }
2502 }
2515 member);
2517 }
2522 member);
2524 }
2528 }
2532 }
2536 MAXIMUM_ALLOWED_ACCESS,
2537 group_rid,
2542 }
2546 }
2554 }
2557 done:
2560 }
2567 {
2570 uint32 alias_rid;
2589 member);
2591 }
2593 /* Get sam policy handle */
2596 MAXIMUM_ALLOWED_ACCESS,
2601 }
2605 }
2607 /* Get domain policy handle */
2610 MAXIMUM_ALLOWED_ACCESS,
2616 }
2620 }
2624 MAXIMUM_ALLOWED_ACCESS,
2625 alias_rid,
2630 }
2634 }
2643 }
2647 done:
2650 }
2660 {
2672 }
2679 }
2688 }
2690 }
2699 }
2701 }
2707 }
2710 {
2712 rpc_group_delmem_internals,
2714 }
2716 /**
2717 * List groups on a remote RPC server.
2718 *
2719 * All parameters are provided by the run_rpc_command function, except for
2720 * argc, argv which are passes through.
2721 *
2722 * @param domain_sid The domain sid acquired from the remote server.
2723 * @param cli A cli_state connected to the server.
2724 * @param mem_ctx Talloc context, destroyed on completion of the function.
2725 * @param argc Standard main() style argc.
2726 * @param argv Standard main() style argv. Initial components are already
2727 * stripped.
2728 *
2729 * @return Normal NTSTATUS return.
2730 **/
2740 {
2758 " If none of global, local or builtin is "
2759 "specified, all three options are considered "
2762 }
2768 }
2779 }
2781 /* Get sam policy handle */
2785 MAXIMUM_ALLOWED_ACCESS,
2790 }
2794 }
2796 /* Get domain policy handle */
2800 MAXIMUM_ALLOWED_ACCESS,
2806 }
2810 }
2812 /* Query domain groups */
2828 start_idx,
2829 max_entries,
2830 max_size,
2837 }
2856 else
2858 }
2860 /* query domain aliases */
2874 }
2887 NTSTATUS _result;
2907 }
2908 }
2909 }
2910 }
2915 description);
2918 }
2919 }
2922 /* Get builtin policy handle */
2926 MAXIMUM_ALLOWED_ACCESS,
2932 }
2936 }
2938 /* query builtin aliases */
2947 max_entries,
2952 }
2957 }
2967 NTSTATUS _result;
2987 }
2988 }
2989 }
2990 }
2995 description);
2998 }
2999 }
3004 done:
3006 }
3009 {
3011 rpc_group_list_internals,
3013 }
3021 uint32 rid)
3022 {
3032 fstring sid_str;
3036 domain_pol,
3037 MAXIMUM_ALLOWED_ACCESS,
3038 rid,
3043 }
3046 }
3054 }
3057 }
3069 domain_pol,
3070 this_time,
3071 group_rids,
3077 }
3080 }
3083 }
3086 }
3087 /* We only have users as members, but make the output
3088 the same as the output of alias members */
3096 SID_NAME_USER);
3100 }
3101 }
3105 }
3108 }
3115 uint32 rid)
3116 {
3120 uint32 num_members;
3130 domain_pol,
3131 MAXIMUM_ALLOWED_ACCESS,
3132 rid,
3137 }
3140 }
3149 }
3153 }
3159 }
3168 }
3177 }
3184 }
3188 }
3199 }
3202 fstring sid_str;
3212 else
3214 }
3215 }
3219 }
3229 {
3236 /* Get sam policy handle */
3240 MAXIMUM_ALLOWED_ACCESS,
3245 }
3248 }
3250 /* Get domain policy handle */
3254 MAXIMUM_ALLOWED_ACCESS,
3260 }
3263 }
3276 }
3280 /* Ok, did not find it in the global sam, try with builtin */
3290 MAXIMUM_ALLOWED_ACCESS,
3296 }
3301 }
3312 }
3317 }
3318 }
3324 }
3329 }
3336 }
3341 }
3344 }
3347 {
3350 }
3353 rpc_group_members_internals,
3355 }
3358 {
3359 NET_API_STATUS status;
3367 }
3380 status));
3382 }
3385 }
3388 {
3391 }
3394 }
3396 /**
3397 * 'net rpc group' entrypoint.
3398 * @param argc Standard main() style argc.
3399 * @param argv Standard main() style argv. Initial components are already
3400 * stripped.
3401 **/
3404 {
3405 NET_API_STATUS status;
3408 {
3410 rpc_group_add,
3411 NET_TRANSPORT_RPC,
3415 },
3416 {
3418 rpc_group_delete,
3419 NET_TRANSPORT_RPC,
3423 },
3424 {
3426 rpc_group_addmem,
3427 NET_TRANSPORT_RPC,
3431 },
3432 {
3434 rpc_group_delmem,
3435 NET_TRANSPORT_RPC,
3439 },
3440 {
3442 rpc_group_list,
3443 NET_TRANSPORT_RPC,
3447 },
3448 {
3450 rpc_group_members,
3451 NET_TRANSPORT_RPC,
3455 },
3456 {
3458 rpc_group_rename,
3459 NET_TRANSPORT_RPC,
3463 },
3465 };
3470 }
3475 }
3481 " Alias for net rpc group list global "
3485 }
3488 rpc_group_list_internals,
3490 }
3493 }
3495 /****************************************************************************/
3498 {
3500 }
3502 /**
3503 * Add a share on a remote RPC server.
3504 *
3505 * @param argc Standard main() style argc.
3506 * @param argv Standard main() style argv. Initial components are already
3507 * stripped.
3508 *
3509 * @return A shell status integer (0 for success).
3510 **/
3513 {
3514 NET_API_STATUS status;
3525 }
3529 }
3534 }
3554 }
3557 }
3559 /**
3560 * Delete a share on a remote RPC server.
3561 *
3562 * @param domain_sid The domain sid acquired from the remote server.
3563 * @param argc Standard main() style argc.
3564 * @param argv Standard main() style argv. Initial components are already
3565 * stripped.
3566 *
3567 * @return A shell status integer (0 for success).
3568 **/
3570 {
3573 }
3576 }
3578 /**
3579 * Formatted print of share info
3580 *
3581 * @param r pointer to SHARE_INFO_1 to format
3582 **/
3586 {
3594 }
3595 }
3600 uint32 level,
3604 {
3605 WERROR result;
3606 NTSTATUS status;
3610 /* no specific share requested, enumerate all */
3621 info_ctr,
3622 preferred_len,
3628 }
3630 }
3632 /* request just one share */
3636 level,
3643 }
3647 }
3649 /* construct ctr */
3656 {
3668 }
3670 {
3682 }
3684 {
3696 }
3698 done:
3700 }
3702 /***
3703 * 'net rpc share list' entrypoint.
3704 * @param argc Standard main() style argc.
3705 * @param argv Standard main() style argv. Initial components are already
3706 * stripped.
3707 **/
3709 {
3710 NET_API_STATUS status;
3724 }
3727 level,
3735 }
3737 /* Display results */
3744 }
3747 done:
3749 }
3752 {
3753 NTSTATUS status;
3759 }
3765 }
3768 }
3772 {
3773 /* only support disk shares */
3776 type);
3778 }
3780 /* skip builtin shares */
3781 /* FIXME: should print$ be added too ? */
3789 }
3792 }
3794 /**
3795 * Migrate shares from a remote RPC server to the local RPC server.
3796 *
3797 * All parameters are provided by the run_rpc_command function, except for
3798 * argc, argv which are passed through.
3799 *
3800 * @param domain_sid The domain sid acquired from the remote server.
3801 * @param cli A cli_state connected to the server.
3802 * @param mem_ctx Talloc context, destroyed on completion of the function.
3803 * @param argc Standard main() style argc.
3804 * @param argv Standard main() style argv. Initial components are already
3805 * stripped.
3806 *
3807 * @return Normal NTSTATUS return.
3808 **/
3818 {
3819 WERROR result;
3822 uint32 i;
3834 /* connect destination PI_SRVSVC */
3848 /* reset error-code */
3854 /* finally add the share on the dst server */
3872 }
3877 }
3884 }
3886 }
3890 done:
3893 }
3897 }
3899 /**
3900 * Migrate shares from a RPC server to another.
3901 *
3902 * @param argc Standard main() style argc.
3903 * @param argv Standard main() style argv. Initial components are already
3904 * stripped.
3905 *
3906 * @return A shell status integer (0 for success).
3907 **/
3910 {
3918 }
3923 }
3926 rpc_share_migrate_shares_internals,
3928 }
3930 /**
3931 * Copy a file/dir
3932 *
3933 * @param f file_info
3934 * @param mask current search mask
3935 * @param state arg-pointer
3936 *
3937 **/
3940 {
3944 fstring dir;
3958 /* DIRECTORY */
3968 {
3970 /* create that directory */
3983 }
3989 }
3991 /* search below that directory */
3994 }
3997 }
4004 }
4008 }
4011 /* FILE */
4019 {
4032 net_mode_share);
4034 }
4040 }
4042 /**
4043 * sync files, can be called recursivly to list files
4044 * and then call copy_fn for each file
4045 *
4046 * @param cp_clistate pointer to the copy_clistate we work with
4047 * @param mask the current search mask
4048 *
4049 * @return Boolean result
4050 **/
4052 {
4055 NTSTATUS status;
4067 }
4074 }
4077 }
4080 /**
4081 * Set the top level directory permissions before we do any further copies.
4082 * Should set up ACL inheritance.
4083 **/
4088 {
4107 }
4114 }
4117 }
4119 /**
4120 * Sync all files inside a remote share to another share (over smb).
4121 *
4122 * All parameters are provided by the run_rpc_command function, except for
4123 * argc, argv which are passed through.
4124 *
4125 * @param domain_sid The domain sid acquired from the remote server.
4126 * @param cli A cli_state connected to the server.
4127 * @param mem_ctx Talloc context, destroyed on completion of the function.
4128 * @param argc Standard main() style argc.
4129 * @param argv Standard main() style argv. Initial components are already
4130 * stripped.
4131 *
4132 * @return Normal NTSTATUS return.
4133 **/
4143 {
4144 WERROR result;
4147 uint32 i;
4159 }
4175 /* one might not want to mirror whole discs :) */
4180 }
4183 {
4189 net_mode_share);
4191 }
4203 cp_clistate.attribute = FILE_ATTRIBUTE_SYSTEM | FILE_ATTRIBUTE_HIDDEN | FILE_ATTRIBUTE_DIRECTORY;
4206 /* open share source */
4217 /* open share destination */
4224 }
4228 "directory permissions for the "
4232 }
4239 }
4240 }
4244 done:
4255 }
4258 {
4266 }
4271 }
4274 rpc_share_migrate_files_internals,
4276 }
4278 /**
4279 * Migrate share-ACLs from a remote RPC server to the local RPC server.
4280 *
4281 * All parameters are provided by the run_rpc_command function, except for
4282 * argc, argv which are passed through.
4283 *
4284 * @param domain_sid The domain sid acquired from the remote server.
4285 * @param cli A cli_state connected to the server.
4286 * @param mem_ctx Talloc context, destroyed on completion of the function.
4287 * @param argc Standard main() style argc.
4288 * @param argv Standard main() style argv. Initial components are already
4289 * stripped.
4290 *
4291 * @return Normal NTSTATUS return.
4292 **/
4302 {
4303 WERROR result;
4307 uint32 i;
4320 /* connect destination PI_SRVSVC */
4333 /* reset error-code */
4346 /* FIXME: shouldn't we be able to just set the security descriptor ? */
4349 /* finally modify the share on the dst server */
4353 level,
4361 }
4367 }
4369 }
4373 done:
4376 }
4380 }
4382 /**
4383 * Migrate share-acls from a RPC server to another.
4384 *
4385 * @param argc Standard main() style argc.
4386 * @param argv Standard main() style argv. Initial components are already
4387 * stripped.
4388 *
4389 * @return A shell status integer (0 for success).
4390 **/
4393 {
4401 }
4406 }
4409 rpc_share_migrate_security_internals,
4411 }
4413 /**
4414 * Migrate shares (including share-definitions, share-acls and files with acls/attrs)
4415 * from one server to another.
4416 *
4417 * @param argc Standard main() style argc.
4418 * @param argv Standard main() style argv. Initial components are already
4419 * stripped.
4420 *
4421 * @return A shell status integer (0 for success).
4422 *
4423 **/
4426 {
4436 }
4441 }
4443 /* order is important. we don't want to be locked out by the share-acl
4444 * before copying files - gd */
4458 argv);
4459 }
4462 /**
4463 * 'net rpc share migrate' entrypoint.
4464 * @param argc Standard main() style argc.
4465 * @param argv Standard main() style argv. Initial components are already
4466 * stripped.
4467 **/
4469 {
4472 {
4474 rpc_share_migrate_all,
4475 NET_TRANSPORT_RPC,
4479 },
4480 {
4482 rpc_share_migrate_files,
4483 NET_TRANSPORT_RPC,
4487 },
4488 {
4490 rpc_share_migrate_security,
4491 NET_TRANSPORT_RPC,
4495 },
4496 {
4498 rpc_share_migrate_shares,
4499 NET_TRANSPORT_RPC,
4503 },
4505 };
4510 }
4514 uint32 num_members;
4516 };
4521 /*
4522 * Add an alias to the static list.
4523 */
4525 {
4531 }
4533 /*
4534 * For a specific domain on the server, fetch all the aliases
4535 * and their members. Add all of them to the server_aliases.
4536 */
4542 {
4549 /* Get domain policy handle */
4552 connect_pol,
4553 MAXIMUM_ALLOWED_ACCESS,
4559 }
4562 }
4572 max_entries,
4577 }
4584 NTSTATUS _result;
4588 MAXIMUM_ALLOWED_ACCESS,
4594 }
4598 }
4606 }
4610 }
4617 }
4621 }
4631 }
4637 }
4642 done:
4646 }
4648 /*
4649 * Dump server_aliases as names for debugging purposes.
4650 */
4660 {
4662 NTSTATUS result;
4667 SEC_FLAG_MAXIMUM_ALLOWED,
4691 }
4707 }
4712 }
4714 /*
4715 * Fetch a list of all server aliases and their members into
4716 * server_aliases.
4717 */
4727 {
4734 MAXIMUM_ALLOWED_ACCESS,
4739 }
4743 }
4749 }
4752 domain_sid);
4755 done:
4757 }
4760 {
4767 }
4773 }
4776 {
4778 }
4781 {
4788 }
4793 }
4796 fstring name;
4798 };
4801 {
4808 }
4809 }
4812 {
4818 }
4821 }
4824 {
4830 }
4831 }
4833 /*
4834 * We got a user token with all the SIDs we can know about without asking the
4835 * server directly. These are the user and domain group sids. All of these can
4836 * be members of aliases. So scan the list of aliases for each of the SIDs and
4837 * add them to the token.
4838 */
4841 {
4847 }
4848 }
4851 {
4854 fstring full_name;
4865 /* First let's find out the user sid */
4873 }
4880 }
4885 }
4889 /* And now the groups winbind knows about */
4896 }
4909 }
4920 }
4922 }
4926 }
4928 /**
4929 * Get a list of all user tokens we want to look at
4930 **/
4934 {
4946 }
4948 /* Send request to winbind daemon */
4955 }
4963 }
4986 }
4988 }
4991 }
4999 }
5004 {
5008 fstring line;
5012 }
5016 }
5019 /* We have a SID */
5026 }
5031 }
5035 }
5037 /* And a new user... */
5044 }
5050 }
5054 }
5057 }
5060 /*
5061 * Show the list of all users that have access to a share
5062 */
5070 {
5076 WERROR result;
5077 NTSTATUS status;
5078 uint16 cnum;
5083 netname,
5090 netname));
5092 }
5097 netname));
5098 }
5104 }
5109 }
5112 uint32 acc_granted;
5123 }
5124 }
5129 }
5137 }
5139 }
5147 }
5149 /**
5150 * List shares on a remote RPC server, including the security descriptors.
5151 *
5152 * All parameters are provided by the run_rpc_command function, except for
5153 * argc, argv which are passed through.
5154 *
5155 * @param domain_sid The domain sid acquired from the remote server.
5156 * @param cli A cli_state connected to the server.
5157 * @param mem_ctx Talloc context, destroyed on completion of the function.
5158 * @param argc Standard main() style argc.
5159 * @param argv Standard main() style argv. Initial components are already
5160 * stripped.
5161 *
5162 * @return Normal NTSTATUS return.
5163 **/
5173 {
5184 WERROR result;
5193 }
5198 }
5208 }
5221 /* Issue the NetShareEnum RPC call and retrieve the response */
5226 preferred_len,
5231 /* Was it successful? */
5233 /* Nope. Go clean up. */
5235 }
5238 /* Nope. Go clean up. */
5241 }
5245 }
5247 /* For each returned entry... */
5253 }
5259 }
5260 done:
5263 }
5267 }
5271 {
5281 }
5284 rpc_aliaslist_internals,
5290 rpc_aliaslist_dump,
5296 rpc_share_allowedusers_internals,
5298 }
5301 {
5309 }
5314 }
5319 }
5323 }
5326 {
5334 }
5336 /**
5337 * 'net rpc share' entrypoint.
5338 * @param argc Standard main() style argc.
5339 * @param argv Standard main() style argv. Initial components are already
5340 * stripped.
5341 **/
5344 {
5345 NET_API_STATUS status;
5348 {
5350 rpc_share_add,
5351 NET_TRANSPORT_RPC,
5355 },
5356 {
5358 rpc_share_delete,
5359 NET_TRANSPORT_RPC,
5363 },
5364 {
5366 rpc_share_allowedusers,
5367 NET_TRANSPORT_RPC,
5371 },
5372 {
5374 rpc_share_migrate,
5375 NET_TRANSPORT_RPC,
5379 },
5380 {
5382 rpc_share_list,
5383 NET_TRANSPORT_RPC,
5387 },
5389 };
5394 }
5399 }
5410 }
5413 }
5416 }
5423 {
5426 }
5433 {
5434 NET_API_STATUS status;
5442 }
5459 }
5466 {
5470 }
5473 }
5480 {
5482 WERROR result;
5483 NTSTATUS status;
5489 }
5500 }
5503 }
5510 done:
5512 }
5516 {
5532 };
5535 }
5537 /****************************************************************************/
5540 {
5542 }
5544 /**
5545 * Close a file on a remote RPC server.
5546 *
5547 * @param argc Standard main() style argc.
5548 * @param argv Standard main() style argv. Initial components are already
5549 * stripped.
5550 *
5551 * @return A shell status integer (0 for success).
5552 **/
5554 {
5557 }
5560 }
5562 /**
5563 * Formatted print of open file info
5564 *
5565 * @param r struct FILE_INFO_3 contents
5566 **/
5569 {
5573 }
5575 /**
5576 * List files for a user on a remote RPC server.
5577 *
5578 * @param argc Standard main() style argc.
5579 * @param argv Standard main() style argv. Initial components are already
5580 * stripped.
5581 *
5582 * @return A shell status integer (0 for success)..
5583 **/
5586 {
5587 NET_API_STATUS status;
5597 }
5599 /* if argc > 0, must be user command */
5602 }
5605 NULL,
5606 username,
5609 preferred_len,
5616 }
5618 /* Display results */
5626 }
5627 done:
5630 }
5632 /**
5633 * 'net rpc file' entrypoint.
5634 * @param argc Standard main() style argc.
5635 * @param argv Standard main() style argv. Initial components are already
5636 * stripped.
5637 **/
5640 {
5641 NET_API_STATUS status;
5644 {
5646 rpc_file_close,
5647 NET_TRANSPORT_RPC,
5651 },
5652 {
5654 rpc_file_user,
5655 NET_TRANSPORT_RPC,
5659 },
5660 #if 0
5661 {
5663 rpc_file_info,
5664 NET_TRANSPORT_RPC,
5668 },
5669 #endif
5671 };
5676 }
5681 }
5690 }
5693 }
5696 }
5698 /**
5699 * ABORT the shutdown of a remote RPC Server, over initshutdown pipe.
5700 *
5701 * All parameters are provided by the run_rpc_command function, except for
5702 * argc, argv which are passed through.
5703 *
5704 * @param c A net_context structure.
5705 * @param domain_sid The domain sid acquired from the remote server.
5706 * @param cli A cli_state connected to the server.
5707 * @param mem_ctx Talloc context, destroyed on completion of the function.
5708 * @param argc Standard main() style argc.
5709 * @param argv Standard main() style argv. Initial components are already
5710 * stripped.
5711 *
5712 * @return Normal NTSTATUS return.
5713 **/
5723 {
5725 WERROR result;
5731 }
5739 }
5741 /**
5742 * ABORT the shutdown of a remote RPC Server, over winreg pipe.
5743 *
5744 * All parameters are provided by the run_rpc_command function, except for
5745 * argc, argv which are passed through.
5746 *
5747 * @param c A net_context structure.
5748 * @param domain_sid The domain sid acquired from the remote server.
5749 * @param cli A cli_state connected to the server.
5750 * @param mem_ctx Talloc context, destroyed on completion of the function.
5751 * @param argc Standard main() style argc.
5752 * @param argv Standard main() style argv. Initial components are already
5753 * stripped.
5754 *
5755 * @return Normal NTSTATUS return.
5756 **/
5766 {
5768 WERROR werr;
5776 }
5784 }
5786 /**
5787 * ABORT the shutdown of a remote RPC server.
5788 *
5789 * @param argc Standard main() style argc.
5790 * @param argv Standard main() style argv. Initial components are already
5791 * stripped.
5792 *
5793 * @return A shell status integer (0 for success).
5794 **/
5798 {
5808 }
5819 rpc_reg_shutdown_abort_internals,
5821 }
5823 /**
5824 * Shut down a remote RPC Server via initshutdown pipe.
5825 *
5826 * All parameters are provided by the run_rpc_command function, except for
5827 * argc, argv which are passed through.
5828 *
5829 * @param c A net_context structure.
5830 * @param domain_sid The domain sid acquired from the remote server.
5831 * @param cli A cli_state connected to the server.
5832 * @param mem_ctx Talloc context, destroyed on completion of the function.
5833 * @param argc Standard main() style argc.
5834 * @param argv Standard main() style argv. Initial components are already
5835 * stripped.
5836 *
5837 * @return Normal NTSTATUS return.
5838 **/
5848 {
5850 WERROR result;
5858 }
5861 }
5865 /* create an entry */
5871 }
5877 }
5879 }
5881 /**
5882 * Shut down a remote RPC Server via winreg pipe.
5883 *
5884 * All parameters are provided by the run_rpc_command function, except for
5885 * argc, argv which are passed through.
5886 *
5887 * @param c A net_context structure.
5888 * @param domain_sid The domain sid acquired from the remote server.
5889 * @param cli A cli_state connected to the server.
5890 * @param mem_ctx Talloc context, destroyed on completion of the function.
5891 * @param argc Standard main() style argc.
5892 * @param argv Standard main() style argv. Initial components are already
5893 * stripped.
5894 *
5895 * @return Normal NTSTATUS return.
5896 **/
5906 {
5910 NTSTATUS result;
5911 WERROR werr;
5916 }
5921 }
5923 /* create an entry */
5930 }
5938 else
5940 }
5943 }
5945 /**
5946 * Shut down a remote RPC server.
5947 *
5948 * @param argc Standard main() style argc.
5949 * @param argv Standard main() style argv. Initial components are already
5950 * stripped.
5951 *
5952 * @return A shell status integer (0 for success).
5953 **/
5956 {
5966 }
5975 }
5978 }
5980 /***************************************************************************
5981 NT Domain trusts code (i.e. 'net rpc trustdom' functionality)
5982 ***************************************************************************/
5984 /**
5985 * Add interdomain trust account to the RPC server.
5986 * All parameters (except for argc and argv) are passed by run_rpc_command
5987 * function.
5988 *
5989 * @param c A net_context structure.
5990 * @param domain_sid The domain sid acquired from the server.
5991 * @param cli A cli_state connected to the server.
5992 * @param mem_ctx Talloc context, destroyed on completion of the function.
5993 * @param argc Standard main() style argc.
5994 * @param argv Standard main() style argv. Initial components are already
5995 * stripped.
5996 *
5997 * @return normal NTSTATUS return code.
5998 */
6008 {
6013 uint32 acb_info;
6015 uint32 user_rid;
6028 }
6030 /*
6031 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6032 */
6036 }
6041 }
6050 }
6052 /* Get samr policy handle */
6055 MAXIMUM_ALLOWED_ACCESS,
6060 }
6064 }
6066 /* Get domain policy handle */
6069 MAXIMUM_ALLOWED_ACCESS,
6075 }
6079 }
6081 /* This call can take a long time - allow the server to time out.
6082 * 35 seconds should do it. */
6086 /* Create trusting domain's account */
6090 SAMR_USER_ACCESS_SET_PASSWORD |
6091 SAMR_USER_ACCESS_GET_ATTRIBUTES |
6092 SAMR_USER_ACCESS_SET_ATTRIBUTES;
6097 acb_info,
6098 acct_flags,
6105 }
6106 /* And restore our original timeout. */
6114 }
6116 {
6126 SAMR_FIELD_NT_PASSWORD_PRESENT;
6137 }
6144 }
6145 }
6147 done:
6151 }
6153 /**
6154 * Create interdomain trust account for a remote domain.
6155 *
6156 * @param argc Standard argc.
6157 * @param argv Standard argv without initial components.
6158 *
6159 * @return Integer status (0 means success).
6160 **/
6163 {
6173 }
6174 }
6177 /**
6178 * Remove interdomain trust account from the RPC server.
6179 * All parameters (except for argc and argv) are passed by run_rpc_command
6180 * function.
6181 *
6182 * @param c A net_context structure.
6183 * @param domain_sid The domain sid acquired from the server.
6184 * @param cli A cli_state connected to the server.
6185 * @param mem_ctx Talloc context, destroyed on completion of the function.
6186 * @param argc Standard main() style argc.
6187 * @param argv Standard main() style argv. Initial components are already
6188 * stripped.
6189 *
6190 * @return normal NTSTATUS return code.
6191 */
6201 {
6215 }
6217 /*
6218 * Make valid trusting domain account (ie. uppercased and with '$' appended)
6219 */
6228 }
6230 /* Get samr policy handle */
6233 MAXIMUM_ALLOWED_ACCESS,
6238 }
6242 }
6244 /* Get domain policy handle */
6247 MAXIMUM_ALLOWED_ACCESS,
6253 }
6257 }
6273 }
6280 }
6284 }
6288 }
6292 MAXIMUM_ALLOWED_ACCESS,
6301 }
6309 }
6311 /* append the rid to the domain sid */
6314 }
6316 /* remove the sid */
6327 }
6334 }
6337 /* Delete user */
6347 }
6355 }
6361 }
6363 done:
6365 }
6367 /**
6368 * Delete interdomain trust account for a remote domain.
6369 *
6370 * @param argc Standard argc.
6371 * @param argv Standard argv without initial components.
6372 *
6373 * @return Integer status (0 means success).
6374 **/
6377 {
6386 }
6387 }
6393 {
6397 NTSTATUS status;
6398 WERROR result;
6401 /* Use NetServerEnum2 */
6406 }
6411 /* Try netr_GetDcName */
6417 }
6423 domain_name,
6430 }
6437 }
6440 }
6442 /**
6443 * Establish trust relationship to a trusting domain.
6444 * Interdomain account must already be created on remote PDC.
6445 *
6446 * @param c A net_context structure.
6447 * @param argc Standard argc.
6448 * @param argv Standard argv without initial components.
6449 *
6450 * @return Integer status (0 means success).
6451 **/
6455 {
6466 fstring pdc_name;
6470 /*
6471 * Connect to \\server\ipc$ as 'our domain' account with password
6472 */
6479 }
6485 }
6487 /* account name used at first is our domain's name with '$' */
6490 }
6495 }
6497 /*
6498 * opt_workgroup will be used by connection functions further,
6499 * hence it should be set to remote domain name instead of ours
6500 */
6503 };
6507 /* find the domain controller */
6511 }
6513 /* connect to ipc$ as username/password */
6517 /* Is it trusting domain account for sure ? */
6521 }
6523 /* store who we connected to */
6527 /*
6528 * Connect to \\server\ipc$ again (this time anonymously)
6529 */
6538 }
6545 }
6547 /* Make sure we're talking to a proper server */
6554 }
6556 /*
6557 * Call LsaOpenPolicy and LsaQueryInfo
6558 */
6567 }
6579 }
6581 /* Querying info level 5 */
6585 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6594 }
6601 }
6605 /* There should be actually query info level 3 (following nt serv behaviour),
6606 but I still don't know if it's _really_ necessary */
6608 /*
6609 * Store the password in secrets db
6610 */
6617 }
6619 /*
6620 * Close the pipes and clean up
6621 */
6630 }
6638 }
6640 /**
6641 * Revoke trust relationship to the remote domain.
6642 *
6643 * @param c A net_context structure.
6644 * @param argc Standard argc.
6645 * @param argv Standard argv without initial components.
6646 *
6647 * @return Integer status (0 means success).
6648 **/
6652 {
6663 }
6665 /* generate upper cased domain name */
6670 }
6672 /* delete password of the trust */
6675 domain_name));
6677 };
6680 done:
6683 }
6693 {
6694 fstring str_sid;
6697 }
6700 }
6703 {
6704 fstring ascii_sid;
6706 /* convert sid into ascii string */
6710 }
6717 {
6721 DATA_BLOB session_key;
6726 pol,
6728 LSA_TRUSTED_DOMAIN_INFO_PASSWORD,
6735 }
6741 }
6750 }
6759 }
6765 }
6767 #ifdef DEBUG_PASSWORD
6771 #endif
6773 done:
6778 }
6782 {
6783 /* common variables */
6792 /* trusted domains listing variables */
6796 fstring pdc_name;
6806 }
6808 /*
6809 * Listing trusted domains (stored in secrets.tdb, if local)
6810 */
6814 /*
6815 * set domain and pdc name to local samba server (default)
6816 * or to remote one given in command line
6817 */
6826 };
6828 /* open \PIPE\lsarpc and open policy handle */
6835 };
6845 };
6857 };
6859 /* query info level 5 to obtain sid of a domain being queried */
6862 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
6872 }
6879 }
6881 /*
6882 * Keep calling LsaEnumTrustdom over opened pipe until
6883 * the end of enumeration is reached
6884 */
6901 };
6909 };
6924 }
6925 };
6927 /*
6928 * in case of no trusted domains say something rather
6929 * than just display blank line
6930 */
6935 /* close this connection before doing next one */
6943 };
6945 /* close lsarpc pipe and connection to IPC$ */
6950 }
6953 {
6954 /* common variables */
6966 /* trusted domains listing variables */
6970 fstring pdc_name;
6973 /* trusting domains listing variables */
6984 }
6986 /*
6987 * Listing trusted domains (stored in secrets.tdb, if local)
6988 */
6992 /*
6993 * set domain and pdc name to local samba server (default)
6994 * or to remote one given in command line
6995 */
7004 };
7006 /* open \PIPE\lsarpc and open policy handle */
7013 };
7023 };
7035 };
7037 /* query info level 5 to obtain sid of a domain being queried */
7040 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
7050 }
7057 }
7061 /*
7062 * Keep calling LsaEnumTrustdom over opened pipe until
7063 * the end of enumeration is reached
7064 */
7083 };
7090 };
7097 };
7102 /*
7103 * in case of no trusted domains say something rather
7104 * than just display blank line
7105 */
7108 }
7110 /* close this connection before doing next one */
7118 };
7122 /*
7123 * Listing trusting domains (stored in passdb backend, if local)
7124 */
7128 /*
7129 * Open \PIPE\samr and get needed policy handles
7130 */
7138 };
7142 /* SamrConnect2 */
7145 SAMR_ACCESS_LOOKUP_DOMAIN,
7154 };
7162 };
7164 /* SamrOpenDomain - we have to open domain policy handle in order to be
7165 able to enumerate accounts*/
7168 SAMR_DOMAIN_ACCESS_ENUM_ACCOUNTS,
7169 queried_dom_sid,
7178 };
7186 };
7188 /*
7189 * perform actual enumeration
7190 */
7200 ACB_DOMTRUST,
7211 };
7219 };
7227 /*
7228 * get each single domain's sid (do we _really_ need this ?):
7229 * 1) connect to domain's pdc
7230 * 2) query the pdc for domain's sid
7231 */
7233 /* get rid of '$' tail */
7238 /* set opt_* variables to remote domain */
7243 }
7249 /* connect to remote domain controller */
7254 /* query for domain's sid */
7259 argv))
7269 }
7270 }
7276 }
7278 /* close opened samr and domain policy handles */
7282 };
7287 };
7289 /* close samr pipe and connection to IPC$ */
7294 }
7296 /**
7297 * Entrypoint for 'net rpc trustdom' code.
7298 *
7299 * @param argc Standard argc.
7300 * @param argv Standard argv without initial components.
7301 *
7302 * @return Integer status (0 means success).
7303 */
7306 {
7308 {
7310 rpc_trustdom_add,
7311 NET_TRANSPORT_RPC,
7315 },
7316 {
7318 rpc_trustdom_del,
7319 NET_TRANSPORT_RPC,
7323 },
7324 {
7326 rpc_trustdom_establish,
7327 NET_TRANSPORT_RPC,
7331 },
7332 {
7334 rpc_trustdom_revoke,
7335 NET_TRANSPORT_RPC,
7339 },
7340 {
7342 rpc_trustdom_list,
7343 NET_TRANSPORT_RPC,
7347 },
7348 {
7350 rpc_trustdom_vampire,
7351 NET_TRANSPORT_RPC,
7355 },
7357 };
7360 }
7362 /**
7363 * Check if a server will take rpc commands
7364 * @param flags Type of server to connect to (PDC, DMB, localhost)
7365 * if the host is not explicitly specified
7366 * @return bool (true means rpc supported)
7367 */
7369 {
7374 NTSTATUS status;
7376 /* flags (i.e. server type) may depend on command */
7385 }
7387 PROTOCOL_NT1);
7394 done:
7397 }
7399 /* dump sam database via samsync rpc calls */
7408 }
7411 NET_FLAGS_ANONYMOUS,
7413 }
7415 /* syncronise sam database via samsync rpc calls */
7417 {
7419 {
7421 rpc_vampire_ldif,
7422 NET_TRANSPORT_RPC,
7425 " Dump remote SAM database to LDIF file or "
7427 },
7428 {
7430 rpc_vampire_keytab,
7431 NET_TRANSPORT_RPC,
7434 " Dump remote SAM database to Kerberos keytab "
7436 },
7437 {
7439 rpc_vampire_passdb,
7440 NET_TRANSPORT_RPC,
7444 },
7447 };
7457 }
7460 }
7463 }
7465 /**
7466 * Migrate everything from a print server.
7467 *
7468 * @param c A net_context structure.
7469 * @param argc Standard main() style argc.
7470 * @param argv Standard main() style argv. Initial components are already
7471 * stripped.
7472 *
7473 * @return A shell status integer (0 for success).
7474 *
7475 * The order is important !
7476 * To successfully add drivers the print queues have to exist !
7477 * Applying ACLs should be the last step, because you're easily locked out.
7478 *
7479 **/
7482 {
7492 }
7497 }
7501 argv);
7507 argv);
7518 argv);
7524 argv);
7526 }
7528 /**
7529 * Migrate print drivers from a print server.
7530 *
7531 * @param c A net_context structure.
7532 * @param argc Standard main() style argc.
7533 * @param argv Standard main() style argv. Initial components are already
7534 * stripped.
7535 *
7536 * @return A shell status integer (0 for success).
7537 **/
7540 {
7548 }
7553 }
7556 rpc_printer_migrate_drivers_internals,
7558 }
7560 /**
7561 * Migrate print-forms from a print-server.
7562 *
7563 * @param c A net_context structure.
7564 * @param argc Standard main() style argc.
7565 * @param argv Standard main() style argv. Initial components are already
7566 * stripped.
7567 *
7568 * @return A shell status integer (0 for success).
7569 **/
7572 {
7580 }
7585 }
7588 rpc_printer_migrate_forms_internals,
7590 }
7592 /**
7593 * Migrate printers from a print-server.
7594 *
7595 * @param c A net_context structure.
7596 * @param argc Standard main() style argc.
7597 * @param argv Standard main() style argv. Initial components are already
7598 * stripped.
7599 *
7600 * @return A shell status integer (0 for success).
7601 **/
7604 {
7612 }
7617 }
7620 rpc_printer_migrate_printers_internals,
7622 }
7624 /**
7625 * Migrate printer-ACLs from a print-server
7626 *
7627 * @param c A net_context structure.
7628 * @param argc Standard main() style argc.
7629 * @param argv Standard main() style argv. Initial components are already
7630 * stripped.
7631 *
7632 * @return A shell status integer (0 for success).
7633 **/
7636 {
7644 }
7649 }
7652 rpc_printer_migrate_security_internals,
7654 }
7656 /**
7657 * Migrate printer-settings from a print-server.
7658 *
7659 * @param c A net_context structure.
7660 * @param argc Standard main() style argc.
7661 * @param argv Standard main() style argv. Initial components are already
7662 * stripped.
7663 *
7664 * @return A shell status integer (0 for success).
7665 **/
7668 {
7677 }
7682 }
7685 rpc_printer_migrate_settings_internals,
7687 }
7689 /**
7690 * 'net rpc printer' entrypoint.
7691 *
7692 * @param c A net_context structure.
7693 * @param argc Standard main() style argc.
7694 * @param argv Standard main() style argv. Initial components are already
7695 * stripped.
7696 **/
7699 {
7701 /* ouch: when addriver and setdriver are called from within
7702 rpc_printer_migrate_drivers_internals, the printer-queue already
7703 *has* to exist */
7706 {
7708 rpc_printer_migrate_all,
7709 NET_TRANSPORT_RPC,
7713 },
7714 {
7716 rpc_printer_migrate_drivers,
7717 NET_TRANSPORT_RPC,
7721 },
7722 {
7724 rpc_printer_migrate_forms,
7725 NET_TRANSPORT_RPC,
7729 },
7730 {
7732 rpc_printer_migrate_printers,
7733 NET_TRANSPORT_RPC,
7737 },
7738 {
7740 rpc_printer_migrate_security,
7741 NET_TRANSPORT_RPC,
7745 },
7746 {
7748 rpc_printer_migrate_settings,
7749 NET_TRANSPORT_RPC,
7753 },
7755 };
7758 }
7761 /**
7762 * List printers on a remote RPC server.
7763 *
7764 * @param c A net_context structure.
7765 * @param argc Standard main() style argc.
7766 * @param argv Standard main() style argv. Initial components are already
7767 * stripped.
7768 *
7769 * @return A shell status integer (0 for success).
7770 **/
7772 {
7780 }
7783 rpc_printer_list_internals,
7785 }
7787 /**
7788 * List printer-drivers on a remote RPC server.
7789 *
7790 * @param c A net_context structure.
7791 * @param argc Standard main() style argc.
7792 * @param argv Standard main() style argv. Initial components are already
7793 * stripped.
7794 *
7795 * @return A shell status integer (0 for success).
7796 **/
7799 {
7807 }
7810 rpc_printer_driver_list_internals,
7812 }
7814 /**
7815 * Publish printer in ADS via MSRPC.
7816 *
7817 * @param c A net_context structure.
7818 * @param argc Standard main() style argc.
7819 * @param argv Standard main() style argv. Initial components are already
7820 * stripped.
7821 *
7822 * @return A shell status integer (0 for success).
7823 **/
7826 {
7834 }
7837 rpc_printer_publish_publish_internals,
7839 }
7841 /**
7842 * Update printer in ADS via MSRPC.
7843 *
7844 * @param c A net_context structure.
7845 * @param argc Standard main() style argc.
7846 * @param argv Standard main() style argv. Initial components are already
7847 * stripped.
7848 *
7849 * @return A shell status integer (0 for success).
7850 **/
7852 {
7860 }
7863 rpc_printer_publish_update_internals,
7865 }
7867 /**
7868 * UnPublish printer in ADS via MSRPC.
7869 *
7870 * @param c A net_context structure.
7871 * @param argc Standard main() style argc.
7872 * @param argv Standard main() style argv. Initial components are already
7873 * stripped.
7874 *
7875 * @return A shell status integer (0 for success).
7876 **/
7879 {
7887 }
7890 rpc_printer_publish_unpublish_internals,
7892 }
7894 /**
7895 * List published printers via MSRPC.
7896 *
7897 * @param c A net_context structure.
7898 * @param argc Standard main() style argc.
7899 * @param argv Standard main() style argv. Initial components are already
7900 * stripped.
7901 *
7902 * @return A shell status integer (0 for success).
7903 **/
7906 {
7914 }
7917 rpc_printer_publish_list_internals,
7919 }
7922 /**
7923 * Publish printer in ADS.
7924 *
7925 * @param c A net_context structure.
7926 * @param argc Standard main() style argc.
7927 * @param argv Standard main() style argv. Initial components are already
7928 * stripped.
7929 *
7930 * @return A shell status integer (0 for success).
7931 **/
7934 {
7937 {
7939 rpc_printer_publish_publish,
7940 NET_TRANSPORT_RPC,
7944 },
7945 {
7947 rpc_printer_publish_update,
7948 NET_TRANSPORT_RPC,
7952 },
7953 {
7955 rpc_printer_publish_unpublish,
7956 NET_TRANSPORT_RPC,
7960 },
7961 {
7963 rpc_printer_publish_list,
7964 NET_TRANSPORT_RPC,
7968 },
7970 };
7977 " Alias of net rpc printer publish "
7981 }
7983 rpc_printer_publish_list_internals,
7985 }
7989 }
7992 /**
7993 * Display rpc printer help page.
7994 *
7995 * @param c A net_context structure.
7996 * @param argc Standard main() style argc.
7997 * @param argv Standard main() style argv. Initial components are already
7998 * stripped.
7999 **/
8001 {
8029 }
8031 /**
8032 * 'net rpc printer' entrypoint.
8033 *
8034 * @param c A net_context structure.
8035 * @param argc Standard main() style argc.
8036 * @param argv Standard main() style argv. Initial components are already
8037 * stripped.
8038 **/
8040 {
8042 {
8044 rpc_printer_list,
8045 NET_TRANSPORT_RPC,
8049 },
8050 {
8052 rpc_printer_migrate,
8053 NET_TRANSPORT_RPC,
8057 },
8058 {
8060 rpc_printer_driver_list,
8061 NET_TRANSPORT_RPC,
8065 },
8066 {
8068 rpc_printer_publish,
8069 NET_TRANSPORT_RPC,
8073 },
8075 };
8084 }
8086 rpc_printer_list_internals,
8088 }
8091 }
8093 /**
8094 * 'net rpc' entrypoint.
8095 *
8096 * @param c A net_context structure.
8097 * @param argc Standard main() style argc.
8098 * @param argv Standard main() style argv. Initial components are already
8099 * stripped.
8100 **/
8103 {
8104 NET_API_STATUS status;
8107 {
8109 net_rpc_audit,
8110 NET_TRANSPORT_RPC,
8114 },
8115 {
8117 net_rpc_info,
8118 NET_TRANSPORT_RPC,
8122 },
8123 {
8125 net_rpc_join,
8126 NET_TRANSPORT_RPC,
8130 },
8131 {
8133 net_rpc_oldjoin,
8134 NET_TRANSPORT_RPC,
8138 },
8139 {
8141 net_rpc_testjoin,
8142 NET_TRANSPORT_RPC,
8146 },
8147 {
8149 net_rpc_user,
8150 NET_TRANSPORT_RPC,
8154 },
8155 {
8157 rpc_user_password,
8158 NET_TRANSPORT_RPC,
8163 },
8164 {
8166 net_rpc_group,
8167 NET_TRANSPORT_RPC,
8171 },
8172 {
8174 net_rpc_share,
8175 NET_TRANSPORT_RPC,
8179 },
8180 {
8182 net_rpc_file,
8183 NET_TRANSPORT_RPC,
8187 },
8188 {
8190 net_rpc_printer,
8191 NET_TRANSPORT_RPC,
8195 },
8196 {
8198 net_rpc_changetrustpw,
8199 NET_TRANSPORT_RPC,
8203 },
8204 {
8206 rpc_trustdom,
8207 NET_TRANSPORT_RPC,
8211 },
8212 {
8214 rpc_shutdown_abort,
8215 NET_TRANSPORT_RPC,
8219 },
8220 {
8222 rpc_shutdown,
8223 NET_TRANSPORT_RPC,
8227 },
8228 {
8230 rpc_samdump,
8231 NET_TRANSPORT_RPC,
8235 },
8236 {
8238 rpc_vampire,
8239 NET_TRANSPORT_RPC,
8243 },
8244 {
8246 net_rpc_getsid,
8247 NET_TRANSPORT_RPC,
8251 },
8252 {
8254 net_rpc_rights,
8255 NET_TRANSPORT_RPC,
8259 },
8260 {
8262 net_rpc_service,
8263 NET_TRANSPORT_RPC,
8267 },
8268 {
8270 net_rpc_registry,
8271 NET_TRANSPORT_RPC,
8275 },
8276 {
8278 net_rpc_shell,
8279 NET_TRANSPORT_RPC,
8283 },
8284 {
8286 net_rpc_trust,
8287 NET_TRANSPORT_RPC,
8291 },
8292 {
8294 net_rpc_conf,
8295 NET_TRANSPORT_RPC,
8299 },
8301 };
8306 }
8311 }
8314 }
8317 }