| blob | f3d2513c3f6fe1b1f8f8bf67d6eac04f61721b7f |
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 * Copyright (C) Gerald Carter 2002-2005.
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 */
38 #define NTDRIVERS_DATABASE_VERSION_1 1
39 #define NTDRIVERS_DATABASE_VERSION_2 2
44 /* Map generic permissions to printer object specific permissions */
46 GENERIC_MAPPING printer_generic_mapping = {
47 PRINTER_READ,
48 PRINTER_WRITE,
49 PRINTER_EXECUTE,
50 PRINTER_ALL_ACCESS
51 };
53 STANDARD_MAPPING printer_std_mapping = {
54 PRINTER_READ,
55 PRINTER_WRITE,
56 PRINTER_EXECUTE,
57 PRINTER_ALL_ACCESS
58 };
60 /* Map generic permissions to print server object specific permissions */
62 GENERIC_MAPPING printserver_generic_mapping = {
63 SERVER_READ,
64 SERVER_WRITE,
65 SERVER_EXECUTE,
66 SERVER_ALL_ACCESS
67 };
69 STANDARD_MAPPING printserver_std_mapping = {
70 SERVER_READ,
71 SERVER_WRITE,
72 SERVER_EXECUTE,
73 SERVER_ALL_ACCESS
74 };
76 /* We need one default form to support our default printer. Msoft adds the
77 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
78 array index). Letter is always first, so (for the current code) additions
79 always put things in the correct order. */
199 };
205 };
225 };
228 /****************************************************************************
229 generate a new TDB_DATA key for storing a printer
230 ****************************************************************************/
233 {
234 fstring share;
236 TDB_DATA key;
246 }
248 /****************************************************************************
249 generate a new TDB_DATA key for storing a printer security descriptor
250 ****************************************************************************/
253 {
254 fstring share;
256 TDB_DATA key;
266 }
268 /****************************************************************************
269 ****************************************************************************/
272 {
288 }
291 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
293 }
294 }
300 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
302 }
305 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
307 }
308 }
314 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
316 }
319 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
321 }
322 }
325 }
328 }
330 /*******************************************************************
331 Fix an issue with security descriptors. Printer sec_desc must
332 use more than the generic bits that were previously used
333 in <= 3.0.14a. They must also have a owner and group SID assigned.
334 Otherwise, any printers than have been migrated to a Windows
335 host using printmig.exe will not be accessible.
336 *******************************************************************/
340 {
341 prs_struct ps;
347 uint32 sd_size;
349 DOM_SID sid;
353 }
357 }
359 /* upgrade the security descriptor */
367 /* delete bad entries */
373 }
378 }
381 /* is this even valid? */
386 }
388 /* update access masks */
405 }
406 }
408 /* create a new SEC_DESC with the appropriate owner and group SIDs */
417 }
422 }
428 }
432 /* store it back */
441 }
450 /* 0 to continue and non-zero to stop traversal */
453 }
455 /*******************************************************************
456 *******************************************************************/
459 {
473 }
475 /*******************************************************************
476 Fix an issue with security descriptors. Printer sec_desc must
477 use more than the generic bits that were previously used
478 in <= 3.0.14a. They must also have a owner and group SID assigned.
479 Otherwise, any printers than have been migrated to a Windows
480 host using printmig.exe will not be accessible.
481 *******************************************************************/
485 {
486 TDB_DATA new_key;
491 /* upgrade printer records and security descriptors */
495 }
498 }
500 /* ignore this record */
502 }
504 /* delete the original record and store under the normalized key */
510 }
516 }
519 }
521 /*******************************************************************
522 *******************************************************************/
525 {
539 }
541 /****************************************************************************
542 Open the NT printing tdbs. Done once before fork().
543 ****************************************************************************/
546 {
548 WERROR win_rc;
549 int32 vers_id;
561 }
570 }
579 }
581 /* handle a Samba upgrade */
588 }
592 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
597 }
599 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
600 /* Written on a bigendian machine with old fetch_int code. Save as le. */
601 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
604 }
611 }
618 }
624 }
625 }
629 /*
630 * register callback to handle updating printers as new
631 * drivers are installed
632 */
636 /*
637 * register callback to handle updating printer data
638 * when a driver is initialized
639 */
642 NULL);
644 /* of course, none of the message callbacks matter if you don't
645 tell messages.c that you interested in receiving PRINT_GENERAL
646 msgs. This is done in claim_connection() */
653 }
656 }
658 /*******************************************************************
659 Function to allow filename parsing "the old way".
660 ********************************************************************/
664 {
669 }
671 /*******************************************************************
672 tdb traversal function for counting printers.
673 ********************************************************************/
677 {
682 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
683 }
686 }
688 /*******************************************************************
689 Update the spooler global c_setprinter. This variable is initialized
690 when the parent smbd starts with the number of existing printers. It
691 is monotonically increased by the current number of printers *after*
692 each add or delete printer RPC. Only Microsoft knows why... JRR020119
693 ********************************************************************/
696 {
697 int32 c_setprinter;
702 /* Traverse the tdb, counting the printers */
705 /* If initializing, set c_setprinter to current printers count
706 * otherwise, bump it by the current printer count
707 */
710 else
719 }
721 /*******************************************************************
722 Get the spooler global c_setprinter, accounting for initialization.
723 ********************************************************************/
726 {
735 }
737 /****************************************************************************
738 Get builtin form struct list.
739 ****************************************************************************/
742 {
746 }
748 }
750 /****************************************************************************
751 get a builtin form struct
752 ****************************************************************************/
755 {
757 fstring form_name;
766 }
767 }
770 }
772 /****************************************************************************
773 get a form struct list.
774 ****************************************************************************/
777 {
779 nt_forms_struct form;
789 {
809 }
811 n++;
812 }
816 }
818 /****************************************************************************
819 write a form struct list
820 ****************************************************************************/
822 {
825 TDB_DATA dbuf;
829 /* save index, so list is rebuilt in correct order */
839 }
842 }
844 /****************************************************************************
845 add a form struct at the end of the list
846 ****************************************************************************/
848 {
850 BOOL update;
851 fstring form_name;
853 /*
854 * NT tries to add forms even when
855 * they are already in the base
856 * only update the values if already present
857 */
866 }
867 }
873 }
876 }
890 }
892 /****************************************************************************
893 Delete a named form struct.
894 ****************************************************************************/
897 {
898 pstring key;
900 fstring form_name;
910 }
911 }
917 }
923 }
926 }
928 /****************************************************************************
929 Update a form struct.
930 ****************************************************************************/
933 {
935 fstring form_name;
943 }
954 }
956 /****************************************************************************
957 Get the nt drivers list.
958 Traverse the database and look-up the matching names.
959 ****************************************************************************/
961 {
964 pstring key;
970 }
984 }
987 total++;
988 }
991 }
993 /****************************************************************************
994 Function to do the mapping between the long architecture name and
995 the short one.
996 ****************************************************************************/
999 {
1004 i++;
1011 }
1013 /* this might be client code - but shouldn't this be an fstrcpy etc? */
1020 }
1022 /****************************************************************************
1023 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
1024 There are two case to be covered here: PE (Portable Executable) and NE (New
1025 Executable) files. Both files support the same INFO structure, but PE files
1026 store the signature in unicode, and NE files store it as !unicode.
1027 returns -1 on error, 1 on version info found, and 0 on no version info found.
1028 ****************************************************************************/
1031 {
1034 ssize_t byte_count;
1040 }
1046 }
1048 /* Is this really a DOS header? */
1053 }
1055 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
1056 if (SMB_VFS_LSEEK(fsp, fsp->fh->fd, SVAL(buf,DOS_HEADER_LFANEW_OFFSET), SEEK_SET) == (SMB_OFF_T)-1) {
1059 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1061 }
1063 /* Note: DOS_HEADER_SIZE and NE_HEADER_SIZE are incidentally same */
1067 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1069 }
1071 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
1076 /* Just skip over optional header to get to section table */
1083 }
1085 /* get the section table */
1096 }
1102 }
1104 /* Iterate the section table looking for the resource section ".rsrc" */
1120 }
1122 /* Seek to the start of the .rsrc section info */
1127 }
1133 }
1139 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
1141 /* Align to next long address */
1154 }
1155 }
1156 }
1157 }
1158 }
1160 /* Version info not found, fall back to origin date/time */
1169 /* At this point, we assume the file is in error. It still could be somthing
1170 * else besides a NE file, but it unlikely at this point. */
1172 }
1174 /* Allocate a bit more space to speed up things */
1180 }
1182 /* This is a HACK! I got tired of trying to sort through the messy
1183 * 'NE' file format. If anyone wants to clean this up please have at
1184 * it, but this works. 'NE' files will eventually fade away. JRR */
1186 /* Cover case that should not occur in a well formed 'NE' .dll file */
1190 /* Fast skip past data that can't possibly match */
1193 /* Potential match data crosses buf boundry, move it to beginning
1194 * of buf, and fill the buf with as much as it will hold. */
1205 }
1211 }
1213 /* Check that the full signature string and the magic number that
1214 * follows exist (not a perfect solution, but the chances that this
1215 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
1216 * twice, as it is simpler to read the code. */
1218 /* Compute skip alignment to next long address */
1231 }
1232 }
1233 }
1235 /* Version info not found, fall back to origin date/time */
1241 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1245 no_version_info:
1249 error_exit:
1252 }
1254 /****************************************************************************
1255 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
1256 share one or more files. During the MS installation process files are checked
1257 to insure that only a newer version of a shared file is installed over an
1258 older version. There are several possibilities for this comparison. If there
1259 is no previous version, the new one is newer (obviously). If either file is
1260 missing the version info structure, compare the creation date (on Unix use
1261 the modification date). Otherwise chose the numerically larger version number.
1262 ****************************************************************************/
1265 {
1267 pstring filepath;
1269 uint32 new_major;
1270 uint32 new_minor;
1273 uint32 old_major;
1274 uint32 old_minor;
1278 SMB_STRUCT_STAT st;
1279 SMB_STRUCT_STAT stat_buf;
1281 NTSTATUS status;
1288 /* Get file version info (if available) for previous file (if it exists) */
1294 FILE_GENERIC_READ,
1296 FILE_OPEN,
1298 FILE_ATTRIBUTE_NORMAL,
1299 INTERNAL_OPEN_ONLY,
1303 /* Old file not found, so by definition new file is in fact newer */
1312 }
1316 old_file));
1321 }
1322 }
1325 /* Get file version info (if available) for new file */
1330 FILE_GENERIC_READ,
1332 FILE_OPEN,
1334 FILE_ATTRIBUTE_NORMAL,
1335 INTERNAL_OPEN_ONLY,
1339 /* New file not found, this shouldn't occur if the caller did its job */
1348 }
1352 new_file));
1357 }
1358 }
1362 /* Compare versions and choose the larger version number */
1368 }
1372 }
1375 /* Compare modification time/dates and choose the newest time/date */
1379 }
1383 }
1384 }
1386 error_exit:
1390 }
1392 /****************************************************************************
1393 Determine the correct cVersion associated with an architecture and driver
1394 ****************************************************************************/
1397 {
1399 NTSTATUS nt_status;
1400 pstring driverpath;
1401 DATA_BLOB null_pw;
1402 fstring res_type;
1404 SMB_STRUCT_STAT st;
1406 NTSTATUS status;
1412 /* If architecture is Windows 95/98/ME, the version is always 0. */
1417 }
1419 /* If architecture is Windows x64, the version is always 3. */
1424 }
1426 /*
1427 * Connect to the print$ share under the same account as the user connected
1428 * to the rpc pipe. Note we must still be root to do this.
1429 */
1431 /* Null password is ok - we are already an authenticated user... */
1442 }
1444 /* We are temporarily becoming the connection user. */
1449 }
1451 /* Open the driver file (Portable Executable format) and determine the
1452 * deriver the cversion. */
1460 }
1463 FILE_GENERIC_READ,
1465 FILE_OPEN,
1467 FILE_ATTRIBUTE_NORMAL,
1468 INTERNAL_OPEN_ONLY,
1477 uint32 major;
1478 uint32 minor;
1485 }
1487 /*
1488 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1489 * for more details. Version in this case is not just the version of the
1490 * file, but the version in the sense of kernal mode (2) vs. user mode
1491 * (3) drivers. Other bits of the version fields are the version info.
1492 * JRR 010716
1493 */
1504 }
1508 }
1520 error_exit:
1528 }
1530 /****************************************************************************
1531 ****************************************************************************/
1534 {
1536 fstring new_name;
1539 WERROR err;
1541 /* clean up the driver name.
1542 * we can get .\driver.dll
1543 * or worse c:\windows\system\driver.dll !
1544 */
1545 /* using an intermediate string to not have overlaping memcpy()'s */
1549 }
1554 }
1559 }
1564 }
1571 }
1572 }
1573 }
1578 }
1580 /* jfm:7/16/2000 the client always sends the cversion=0.
1581 * The server should check which version the driver is by reading
1582 * the PE header of driver->driverpath.
1583 *
1584 * For Windows 95/98 the version is 0 (so the value sent is correct)
1585 * For Windows NT (the architecture doesn't matter)
1586 * NT 3.1: cversion=0
1587 * NT 3.5/3.51: cversion=1
1588 * NT 4: cversion=2
1589 * NT2K: cversion=3
1590 */
1591 if ((driver->cversion = get_correct_cversion( architecture, driver->driverpath, user, &err)) == -1)
1595 }
1597 /****************************************************************************
1598 ****************************************************************************/
1599 static WERROR clean_up_driver_struct_level_6(NT_PRINTER_DRIVER_INFO_LEVEL_6 *driver, struct current_user *user)
1600 {
1602 fstring new_name;
1605 WERROR err;
1607 /* clean up the driver name.
1608 * we can get .\driver.dll
1609 * or worse c:\windows\system\driver.dll !
1610 */
1611 /* using an intermediate string to not have overlaping memcpy()'s */
1615 }
1620 }
1625 }
1630 }
1637 }
1638 }
1639 }
1644 }
1646 /* jfm:7/16/2000 the client always sends the cversion=0.
1647 * The server should check which version the driver is by reading
1648 * the PE header of driver->driverpath.
1649 *
1650 * For Windows 95/98 the version is 0 (so the value sent is correct)
1651 * For Windows NT (the architecture doesn't matter)
1652 * NT 3.1: cversion=0
1653 * NT 3.5/3.51: cversion=1
1654 * NT 4: cversion=2
1655 * NT2K: cversion=3
1656 */
1658 if ((driver->version = get_correct_cversion(architecture, driver->driverpath, user, &err)) == -1)
1662 }
1664 /****************************************************************************
1665 ****************************************************************************/
1668 {
1671 {
1675 }
1677 {
1681 }
1684 }
1685 }
1687 /****************************************************************************
1688 This function sucks and should be replaced. JRA.
1689 ****************************************************************************/
1691 static void convert_level_6_to_level3(NT_PRINTER_DRIVER_INFO_LEVEL_3 *dst, NT_PRINTER_DRIVER_INFO_LEVEL_6 *src)
1692 {
1704 }
1715 else
1717 }
1720 }
1722 #endif
1724 /****************************************************************************
1725 ****************************************************************************/
1726 WERROR move_driver_to_download_area(NT_PRINTER_DRIVER_INFO_LEVEL driver_abstract, uint32 level,
1728 {
1730 NT_PRINTER_DRIVER_INFO_LEVEL_3 converted_driver;
1732 pstring new_dir;
1733 pstring old_name;
1734 pstring new_name;
1735 DATA_BLOB null_pw;
1737 NTSTATUS nt_status;
1738 pstring inbuf;
1739 pstring outbuf;
1740 fstring res_type;
1741 SMB_STRUCT_STAT st;
1757 }
1762 }
1764 /*
1765 * Connect to the print$ share under the same account as the user connected to the rpc pipe.
1766 * Note we must be root to do this.
1767 */
1779 }
1781 /*
1782 * Save who we are - we are temporarily becoming the connection user.
1783 */
1788 }
1790 /*
1791 * make the directories version and version\driver_name
1792 * under the architecture directory.
1793 */
1799 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1800 * listed for this driver which has already been moved, skip it (note:
1801 * drivers may list the same file name several times. Then check if the
1802 * file already exists in archi\cversion\, if so, check that the version
1803 * info (or time stamps if version info is unavailable) is newer (or the
1804 * date is later). If it is, move it to archi\cversion\filexxx.yyy.
1805 * Otherwise, delete the file.
1806 *
1807 * If a file is not moved to archi\cversion\ because of an error, all the
1808 * rest of the 'unmoved' driver files are removed from archi\. If one or
1809 * more of the driver's files was already moved to archi\cversion\, it
1810 * potentially leaves the driver in a partially updated state. Version
1811 * trauma will most likely occur if an client attempts to use any printer
1812 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1813 * done is appropriate... later JRR
1814 */
1829 }
1830 }
1831 }
1845 }
1846 }
1847 }
1848 }
1863 }
1864 }
1865 }
1866 }
1882 }
1883 }
1884 }
1885 }
1897 }
1898 }
1905 OPENX_FILE_EXISTS_TRUNCATE|
1911 }
1912 }
1913 }
1914 NextDriver: ;
1915 }
1916 }
1922 }
1924 /****************************************************************************
1925 ****************************************************************************/
1927 {
1930 pstring directory;
1931 fstring temp_name;
1932 pstring key;
1935 TDB_DATA dbuf;
1940 }
1942 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
1943 * \\server is added in the rpc server layer.
1944 * It does make sense to NOT store the server's name in the printer TDB.
1945 */
1947 slprintf(directory, sizeof(directory)-1, "\\print$\\%s\\%d\\", architecture, driver->cversion);
1949 /* .inf files do not always list a file for each of the four standard files.
1950 * Don't prepend a path to a null filename, or client claims:
1951 * "The server on which the printer resides does not have a suitable
1952 * <printer driver name> printer driver installed. Click OK if you
1953 * wish to install the driver on your local machine."
1954 */
1958 }
1963 }
1968 }
1973 }
1978 slprintf(driver->dependentfiles[i], sizeof(driver->dependentfiles[i])-1, "%s%s", directory, temp_name);
1979 }
1980 }
1982 slprintf(key, sizeof(key)-1, "%s%s/%d/%s", DRIVERS_PREFIX, architecture, driver->cversion, driver->name);
1989 again:
2006 }
2007 }
2015 }
2018 }
2025 done:
2031 }
2033 /****************************************************************************
2034 ****************************************************************************/
2036 {
2037 NT_PRINTER_DRIVER_INFO_LEVEL_3 info3;
2052 }
2055 /****************************************************************************
2056 ****************************************************************************/
2057 static WERROR get_a_printer_driver_3_default(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, const char *driver, const char *arch)
2058 {
2059 NT_PRINTER_DRIVER_INFO_LEVEL_3 info;
2081 }
2084 }
2086 /****************************************************************************
2087 ****************************************************************************/
2088 static WERROR get_a_printer_driver_3(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, fstring drivername, const char *arch, uint32 version)
2089 {
2090 NT_PRINTER_DRIVER_INFO_LEVEL_3 driver;
2091 TDB_DATA dbuf;
2095 pstring key;
2102 }
2104 /* Windows 4.0 (i.e. win9x) should always use a version of 0 */
2109 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, drivername));
2134 }
2138 i++;
2139 }
2150 }
2156 }
2159 }
2161 /****************************************************************************
2162 Debugging function, dump at level 6 the struct in the logs.
2163 ****************************************************************************/
2166 {
2167 uint32 result;
2174 {
2176 {
2196 }
2198 }
2200 }
2205 }
2208 }
2210 /****************************************************************************
2211 ****************************************************************************/
2213 {
2265 }
2270 }
2272 /****************************************************************************
2273 Pack all values in all printer keys
2274 ***************************************************************************/
2277 {
2282 pstring path;
2288 /* loop over all keys */
2294 /* pack the keyname followed by a empty value */
2299 REG_NONE,
2301 NULL);
2303 /* now loop over all values */
2306 /* pathname should be stored as <key>\<value> */
2314 val,
2315 path,
2321 }
2323 }
2325 /* terminator */
2330 }
2333 /****************************************************************************
2334 Delete a printer - this just deletes the printer info file, any open
2335 handles are not affected.
2336 ****************************************************************************/
2339 {
2340 TDB_DATA kbuf;
2341 pstring printdb_path;
2357 }
2360 }
2362 /****************************************************************************
2363 ****************************************************************************/
2365 {
2368 WERROR ret;
2371 /*
2372 * in addprinter: no servername and the printer is the name
2373 * in setprinter: servername is \\server
2374 * and printer is \\server\\printer
2375 *
2376 * Samba manages only local printers.
2377 * we currently don't support things like i
2378 * path=\\other_server\printer
2379 *
2380 * We only store the printername, not \\server\printername
2381 */
2387 }
2389 /*
2390 * JFM: one day I'll forget.
2391 * below that's info->portname because that's the SAMBA sharename
2392 * and I made NT 'thinks' it's the portname
2393 * the info->sharename is the thing you can name when you add a printer
2394 * that's the short-name when you create shared printer for 95/98
2395 * So I've made a limitation in SAMBA: you can only have 1 printer model
2396 * behind a SAMBA share.
2397 */
2402 again:
2438 }
2441 }
2451 done:
2461 }
2464 /****************************************************************************
2465 Malloc and return an NT devicemode.
2466 ****************************************************************************/
2469 {
2477 }
2511 /* non utilisés par un driver d'imprimante */
2525 }
2527 /****************************************************************************
2528 Deepcopy an NT devicemode.
2529 ****************************************************************************/
2532 {
2538 if ((new_nt_devicemode = (NT_DEVICEMODE *)memdup(nt_devicemode, sizeof(NT_DEVICEMODE))) == NULL) {
2541 }
2545 if ((new_nt_devicemode->nt_dev_private = (uint8 *)memdup(nt_devicemode->nt_dev_private, nt_devicemode->driverextra)) == NULL) {
2549 }
2550 }
2553 }
2555 /****************************************************************************
2556 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2557 ****************************************************************************/
2560 {
2570 }
2572 /****************************************************************************
2573 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2574 ****************************************************************************/
2577 {
2586 }
2589 /****************************************************************************
2590 ****************************************************************************/
2592 {
2595 NT_DEVICEMODE devmode;
2643 /* the len in tdb_unpack is an int value and
2644 * devmode.driverextra is only a short
2645 */
2649 /* check to catch an invalid TDB entry so we don't segfault */
2652 }
2653 }
2659 }
2666 }
2668 /****************************************************************************
2669 Allocate and initialize a new slot.
2670 ***************************************************************************/
2673 {
2680 /* allocate another slot in the NT_PRINTER_KEY array */
2685 }
2691 /* initialze new key */
2703 }
2705 /****************************************************************************
2706 search for a registry key name in the existing printer data
2707 ***************************************************************************/
2710 {
2716 /* cleanup memory */
2721 /* if not the end of the array, move remaining elements down one slot */
2728 }
2729 }
2733 }
2735 /****************************************************************************
2736 search for a registry key name in the existing printer data
2737 ***************************************************************************/
2740 {
2749 /* loop over all existing keys */
2757 }
2758 }
2761 }
2763 /****************************************************************************
2764 ***************************************************************************/
2767 {
2773 fstring subkeyname;
2783 /* special case of asking for the top level printer data registry key names */
2788 /* found a match, so allocate space and copy the name */
2794 }
2797 num_subkeys++;
2798 }
2801 }
2803 /* asking for the subkeys of some key */
2804 /* subkey paths are stored in the key name using '\' as the delimiter */
2809 /* if we found the exact key, then break */
2814 /* get subkey path */
2818 p++;
2823 /* don't add a key more than once */
2828 }
2833 /* found a match, so allocate space and copy the name */
2839 }
2842 num_subkeys++;
2843 }
2845 }
2847 /* return error if the key was not found */
2852 }
2854 done:
2855 /* tag off the end */
2863 }
2865 #ifdef HAVE_ADS
2868 {
2877 }
2880 uint32 dword)
2881 {
2885 }
2888 BOOL b)
2889 {
2894 }
2898 {
2902 /* a multi-sz has to have a null string terminator, i.e., the last
2903 string must be followed by two nulls */
2908 }
2910 /* Change to byte units. */
2920 }
2922 /****************************************************************************
2923 * Map the NT_PRINTER_INFO_LEVEL_2 data into DsSpooler keys for publishing.
2924 *
2925 * @param info2 NT_PRINTER_INFO_LEVEL_2 describing printer - gets modified
2926 * @return BOOL indicating success or failure
2927 ***************************************************************************/
2930 {
2932 fstring longname;
2933 fstring dnssuffix;
2945 /* we make the assumption that the netbios name is the same
2946 as the DNS name sinc ethe former will be what we used to
2947 join the domain */
2951 else
2972 PRINTER_ATTRIBUTE_KEEPPRINTEDJOBS));
2986 }
2990 }
2992 /*****************************************************************
2993 ****************************************************************/
2997 {
3000 UNISTR2 unistr_guid;
3002 /* find the DsSpooler key */
3009 /* We used to store this as a REG_BINARY but that causes
3010 Vista to whine */
3014 UNI_STR_TERMINATE );
3020 }
3024 {
3025 ADS_STATUS ads_rc;
3030 ADS_MODLIST mods;
3037 /* figure out where to publish */
3040 /* We use ldap_get_dn here as we need the answer
3041 * in utf8 to call ldap_explode_dn(). JRA. */
3047 }
3054 }
3055 /* Now convert to CH_UNIX. */
3061 }
3068 }
3079 }
3087 }
3097 /* build the ads mods */
3102 }
3110 }
3116 /* publish it */
3126 /* retreive the guid and store it locally */
3133 }
3137 }
3141 {
3142 ADS_STATUS ads_rc;
3148 /* remove the printer from the directory */
3157 }
3160 }
3164 }
3166 /****************************************************************************
3167 * Publish a printer in the directory
3168 *
3169 * @param snum describing printer service
3170 * @return WERROR indicating status of publishing
3171 ***************************************************************************/
3174 {
3175 ADS_STATUS ads_rc;
3178 WERROR win_rc;
3187 /* set the DsSpooler info and attributes */
3191 }
3201 }
3207 }
3214 }
3220 /* ads_connect() will find the DC for us */
3226 }
3236 }
3238 done:
3242 }
3245 {
3246 ADS_STATUS ads_rc;
3256 }
3262 /* ads_connect() will find the DC for us */
3269 }
3281 }
3286 }
3290 {
3294 WERROR win_rc;
3305 {
3308 }
3310 /* fetching printer guids really ought to be a separate function. */
3313 fstring guid_str;
3315 /* We used to store the guid as REG_BINARY, then swapped
3316 to REG_SZ for Vista compatibility so check for both */
3328 }
3335 }
3336 }
3340 }
3341 #else
3343 {
3345 }
3348 {
3350 }
3354 {
3356 }
3359 /****************************************************************************
3360 ***************************************************************************/
3363 {
3375 /* remove all keys */
3387 }
3389 /* remove a specific key (and all subkeys) */
3399 /* mark the slot as empty */
3402 }
3403 }
3405 /* find the first empty slot */
3410 removed_keys++;
3412 }
3413 }
3416 /* nothing was removed */
3419 /* move everything down */
3425 empty_slot++;
3426 removed_keys++;
3427 }
3428 }
3430 /* update count */
3434 /* sanity check to see if anything is left */
3441 }
3444 }
3446 /****************************************************************************
3447 ***************************************************************************/
3450 {
3454 /* we must have names on non-zero length */
3459 /* find the printer key first */
3465 /* make sure the value exists so we can return the correct error code */
3476 }
3478 /****************************************************************************
3479 ***************************************************************************/
3483 {
3487 /* we must have names on non-zero length */
3492 /* find the printer key first */
3508 }
3510 /****************************************************************************
3511 ***************************************************************************/
3513 REGISTRY_VALUE* get_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value )
3514 {
3524 }
3526 /****************************************************************************
3527 Unpack a list of registry values frem the TDB
3528 ***************************************************************************/
3531 {
3533 uint32 type;
3541 /* add the "PrinterDriverData" key first for performance reasons */
3545 /* loop and unpack the rest of the registry values */
3549 /* check to see if there are any more registry values */
3556 /* unpack the next regval */
3559 string,
3564 /* lookup for subkey names which have a type of REG_NONE */
3565 /* there's no data with this entry */
3571 }
3573 /*
3574 * break of the keyname from the value name.
3575 * Valuenames can have embedded '\'s so be careful.
3576 * only support one level of keys. See the
3577 * "Konica Fiery S300 50C-K v1.1. enu" 2k driver.
3578 * -- jerry
3579 */
3583 /* Put in "PrinterDriverData" is no key specified */
3588 }
3593 }
3595 /* see if we need a new key */
3602 keyname));
3604 }
3608 /* Vista doesn't like unknown REG_BINARY values in DsSpooler.
3609 Thanks to Martin Zielinski for the hint. */
3614 {
3616 UNISTR2 unistr_guid;
3620 /* convert the GUID to a UNICODE string */
3625 UNI_STR_TERMINATE );
3633 /* add the value */
3637 size );
3638 }
3643 }
3646 }
3648 /****************************************************************************
3649 ***************************************************************************/
3652 {
3669 }
3675 }
3682 }
3696 nt_name++;
3701 {
3705 l--;
3706 }
3707 }
3710 os2_name++;
3712 {
3716 l--;
3717 }
3718 }
3727 }
3728 }
3731 }
3733 /****************************************************************************
3734 Get a default printer info 2 struct.
3735 ****************************************************************************/
3736 static WERROR get_a_printer_2_default(NT_PRINTER_INFO_LEVEL_2 *info, const char *servername, const char* sharename)
3737 {
3746 /* by setting the driver name to an empty string, a local NT admin
3747 can now run the **local** APW to install a local printer driver
3748 for a Samba shared printer in 2.2. Without this, drivers **must** be
3749 installed on the Samba server for NT clients --jerry */
3753 #endif
3762 #ifdef HAVE_CUPS
3764 /* Pull the location and comment strings from cups if we don't
3765 already have one */
3768 }
3769 #endif
3779 /*
3780 * I changed this as I think it is better to have a generic
3781 * DEVMODE than to crash Win2k explorer.exe --jerry
3782 * See the HP Deskjet 990c Win2k drivers for an example.
3783 *
3784 * However the default devmode appears to cause problems
3785 * with the HP CLJ 8500 PCL driver. Hence the addition of
3786 * the "default devmode" parameter --jerry 22/01/2002
3787 */
3792 }
3795 }
3799 }
3803 fail:
3808 }
3810 /****************************************************************************
3811 ****************************************************************************/
3812 static WERROR get_a_printer_2(NT_PRINTER_INFO_LEVEL_2 *info, const char *servername, const char *sharename)
3813 {
3817 fstring printername;
3825 }
3851 /* Samba has to have shared raw drivers. */
3855 /* Restore the stripped strings. */
3862 }
3866 #ifdef HAVE_CUPS
3868 /* Pull the location and comment strings from cups if we don't
3869 already have one */
3872 }
3873 #endif
3877 /*
3878 * Some client drivers freak out if there is a NULL devmode
3879 * (probably the driver is not checking before accessing
3880 * the devmode pointer) --jerry
3881 *
3882 * See comments in get_a_printer_2_default()
3883 */
3887 printername));
3889 }
3894 }
3900 }
3903 /* This will get the current RPC talloc context, but we should be
3904 passing this as a parameter... fixme... JRA ! */
3909 }
3911 /* Fix for OS/2 drivers. */
3915 }
3923 }
3925 /****************************************************************************
3926 Debugging function, dump at level 6 the struct in the logs.
3927 ****************************************************************************/
3929 {
3930 uint32 result;
3937 {
3940 else
3941 {
3968 }
3970 }
3975 }
3978 }
3980 /****************************************************************************
3981 Update the changeid time.
3982 This is SO NASTY as some drivers need this to change, others need it
3983 static. This value will change every second, and I must hope that this
3984 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
3985 UTAH ! JRA.
3986 ****************************************************************************/
3989 {
3995 /* Return changeid as msec since spooler restart */
3997 #else
3998 /*
3999 * This setting seems to work well but is too untested
4000 * to replace the above calculation. Left in for experiementation
4001 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
4002 */
4004 #endif
4005 }
4008 /*
4009 * The function below are the high level ones.
4010 * only those ones must be called from the spoolss code.
4011 * JFM.
4012 */
4014 /****************************************************************************
4015 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
4016 ****************************************************************************/
4019 {
4020 WERROR result;
4026 {
4027 /*
4028 * Update the changestamp. Emperical tests show that the
4029 * ChangeID is always updated,but c_setprinter is
4030 * global spooler variable (not per printer).
4031 */
4033 /* ChangeID **must** be increasing over the lifetime
4034 of client's spoolss service in order for the
4035 client's cache to show updates */
4039 /*
4040 * Because one day someone will ask:
4041 * NT->NT An admin connection to a remote
4042 * printer show changes imeediately in
4043 * the properities dialog
4044 *
4045 * A non-admin connection will only show the
4046 * changes after viewing the properites page
4047 * 2 times. Seems to be related to a
4048 * race condition in the client between the spooler
4049 * updating the local cache and the Explorer.exe GUI
4050 * actually displaying the properties.
4051 *
4052 * This is fixed in Win2k. admin/non-admin
4053 * connections both display changes immediately.
4054 *
4055 * 14/12/01 --jerry
4056 */
4061 }
4065 }
4068 }
4070 /****************************************************************************
4071 Initialize printer devmode & data with previously saved driver init values.
4072 ****************************************************************************/
4075 {
4077 pstring key;
4078 TDB_DATA dbuf;
4079 NT_PRINTER_INFO_LEVEL_2 info;
4084 /*
4085 * Delete any printer data 'values' already set. When called for driver
4086 * replace, there will generally be some, but during an add printer, there
4087 * should not be any (if there are delete them).
4088 */
4097 /*
4098 * When changing to a driver that has no init info in the tdb, remove
4099 * the previous drivers init info and leave the new on blank.
4100 */
4103 }
4105 /*
4106 * Get the saved DEVMODE..
4107 */
4111 /*
4112 * The saved DEVMODE contains the devicename from the printer used during
4113 * the initialization save. Change it to reflect the new printer.
4114 */
4119 }
4121 /*
4122 * NT/2k does not change out the entire DeviceMode of a printer
4123 * when changing the driver. Only the driverextra, private, &
4124 * driverversion fields. --jerry (Thu Mar 14 08:58:43 CST 2002)
4125 *
4126 * Later examination revealed that Windows NT/2k does reset the
4127 * the printer's device mode, bit **only** when you change a
4128 * property of the device mode such as the page orientation.
4129 * --jerry
4130 */
4133 /* Bind the saved DEVMODE to the new the printer */
4141 /* Add the printer data 'values' to the new printer */
4146 }
4154 }
4156 /****************************************************************************
4157 Initialize printer devmode & data with previously saved driver init values.
4158 When a printer is created using AddPrinter, the drivername bound to the
4159 printer is used to lookup previously saved driver initialization info, which
4160 is bound to the new printer.
4161 ****************************************************************************/
4164 {
4174 level));
4176 }
4179 }
4181 /****************************************************************************
4182 Delete driver init data stored for a specified driver
4183 ****************************************************************************/
4186 {
4187 pstring key;
4192 }
4199 }
4201 /****************************************************************************
4202 Pack up the DEVMODE and values for a printer into a 'driver init' entry
4203 in the tdb. Note: this is different from the driver entry and the printer
4204 entry. There should be a single driver init entry for each driver regardless
4205 of whether it was installed from NT or 2K. Technically, they should be
4206 different, but they work out to the same struct.
4207 ****************************************************************************/
4210 {
4211 pstring key;
4214 TDB_DATA dbuf;
4219 again:
4231 }
4234 }
4243 done:
4253 }
4255 /****************************************************************************
4256 Update (i.e. save) the driver init info (DEVMODE and values) for a printer
4257 ****************************************************************************/
4260 {
4261 uint32 result;
4272 }
4275 }
4277 /****************************************************************************
4278 Convert the printer data value, a REG_BINARY array, into an initialization
4279 DEVMODE. Note: the array must be parsed as if it was a DEVMODE in an rpc...
4280 got to keep the endians happy :).
4281 ****************************************************************************/
4283 static BOOL convert_driver_init( TALLOC_CTX *ctx, NT_DEVICEMODE *nt_devmode, uint8 *data, uint32 data_len )
4284 {
4286 prs_struct ps;
4287 DEVICEMODE devmode;
4297 else
4301 }
4303 /****************************************************************************
4304 Set the DRIVER_INIT info in the tdb. Requires Win32 client code that:
4306 1. Use the driver's config DLL to this UNC printername and:
4307 a. Call DrvPrintEvent with PRINTER_EVENT_INITIALIZE
4308 b. Call DrvConvertDevMode with CDM_DRIVER_DEFAULT to get default DEVMODE
4309 2. Call SetPrinterData with the 'magic' key and the DEVMODE as data.
4311 The last step triggers saving the "driver initialization" information for
4312 this printer into the tdb. Later, new printers that use this driver will
4313 have this initialization information bound to them. This simulates the
4314 driver initialization, as if it had run on the Samba server (as it would
4315 have done on NT).
4317 The Win32 client side code requirement sucks! But until we can run arbitrary
4318 Win32 printer driver code on any Unix that Samba runs on, we are stuck with it.
4320 It would have been easier to use SetPrinter because all the UNMARSHALLING of
4321 the DEVMODE is done there, but 2K/XP clients do not set the DEVMODE... think
4322 about it and you will realize why. JRR 010720
4323 ****************************************************************************/
4325 static WERROR save_driver_init_2(NT_PRINTER_INFO_LEVEL *printer, uint8 *data, uint32 data_len )
4326 {
4332 /*
4333 * When the DEVMODE is already set on the printer, don't try to unpack it.
4334 */
4338 /*
4339 * Set devmode on printer info, so entire printer initialization can be
4340 * saved to tdb.
4341 */
4349 }
4353 /*
4354 * The DEVMODE is held in the 'data' component of the param in raw binary.
4355 * Convert it to to a devmode structure
4356 */
4361 }
4364 }
4366 /*
4367 * Pack up and add (or update) the DEVMODE and any current printer data to
4368 * a 'driver init' element in the tdb
4369 *
4370 */
4376 }
4378 /*
4379 * If driver initialization info was successfully saved, set the current
4380 * printer to match it. This allows initialization of the current printer
4381 * as well as the driver.
4382 */
4387 }
4389 done:
4396 }
4398 /****************************************************************************
4399 Update the driver init info (DEVMODE and specifics) for a printer
4400 ****************************************************************************/
4402 WERROR save_driver_init(NT_PRINTER_INFO_LEVEL *printer, uint32 level, uint8 *data, uint32 data_len)
4403 {
4413 }
4416 }
4418 /****************************************************************************
4419 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
4421 Previously the code had a memory allocation problem because it always
4422 used the TALLOC_CTX from the Printer_entry*. This context lasts
4423 as a long as the original handle is open. So if the client made a lot
4424 of getprinter[data]() calls, the memory usage would climb. Now we use
4425 a short lived TALLOC_CTX for printer_info_2 objects returned. We
4426 still use the Printer_entry->ctx for maintaining the cache copy though
4427 since that object must live as long as the handle by definition.
4428 --jerry
4430 ****************************************************************************/
4432 WERROR get_a_printer( Printer_entry *print_hnd, NT_PRINTER_INFO_LEVEL **pp_printer, uint32 level,
4434 {
4435 WERROR result;
4436 fstring servername;
4443 }
4451 }
4459 }
4464 /* we have a new printer now. Save it with this handle */
4471 }
4480 }
4483 }
4485 /****************************************************************************
4486 Deletes a NT_PRINTER_INFO_LEVEL struct.
4487 ****************************************************************************/
4490 {
4505 }
4510 }
4512 /****************************************************************************
4513 ****************************************************************************/
4515 {
4516 uint32 result;
4532 }
4535 }
4536 /****************************************************************************
4537 ****************************************************************************/
4541 {
4542 WERROR result;
4546 /* Sometime we just want any version of the driver */
4549 /* look for Win2k first and then for NT4 */
4556 }
4560 }
4566 }
4572 }
4574 /****************************************************************************
4575 ****************************************************************************/
4577 {
4578 uint32 result;
4582 {
4585 {
4593 }
4595 }
4597 {
4608 }
4610 }
4614 }
4616 }
4619 /****************************************************************************
4620 Determine whether or not a particular driver is currently assigned
4621 to a printer
4622 ****************************************************************************/
4625 {
4636 /* loop through the printers.tdb and check for the drivername */
4649 }
4654 NT_PRINTER_DRIVER_INFO_LEVEL d;
4655 WERROR werr;
4659 /* we can still remove the driver if there is one of
4660 "Windows NT x86" version 2 or 3 left */
4664 }
4678 }
4679 }
4681 /* now check the error code */
4684 /* it's ok to remove the driver, we have other architctures left */
4687 }
4688 }
4690 /* report that the driver is not in use by default */
4693 }
4696 /**********************************************************************
4697 Check to see if a ogiven file is in use by *info
4698 *********************************************************************/
4701 {
4719 /* see of there are any dependent files to examine */
4727 i++;
4728 }
4732 }
4734 /**********************************************************************
4735 Utility function to remove the dependent file pointed to by the
4736 input parameter from the list
4737 *********************************************************************/
4740 {
4742 /* bump everything down a slot */
4746 idx++;
4747 }
4752 }
4754 /**********************************************************************
4755 Check if any of the files used by src are also used by drv
4756 *********************************************************************/
4760 {
4767 /* check each file. Remove it from the src structure if it overlaps */
4773 }
4779 }
4785 }
4791 }
4793 /* are there any dependentfiles to examine? */
4804 i++;
4805 }
4808 }
4810 /****************************************************************************
4811 Determine whether or not a particular driver files are currently being
4812 used by any other driver.
4814 Return value is True if any files were in use by other drivers
4815 and False otherwise.
4817 Upon return, *info has been modified to only contain the driver files
4818 which are not in use
4819 ****************************************************************************/
4822 {
4825 uint32 version;
4827 NT_PRINTER_DRIVER_INFO_LEVEL driver;
4834 /* loop over all driver versions */
4838 /* get the list of drivers */
4846 /* check each driver for overlap in files */
4856 }
4858 /* check if d2 uses any files from d1 */
4859 /* only if this is a different driver than the one being deleted */
4866 }
4867 }
4870 }
4882 }
4884 /****************************************************************************
4885 Actually delete the driver files. Make sure that
4886 printer_driver_files_in_use() return False before calling
4887 this.
4888 ****************************************************************************/
4890 static BOOL delete_driver_files( NT_PRINTER_DRIVER_INFO_LEVEL_3 *info_3, struct current_user *user )
4891 {
4894 pstring file;
4896 DATA_BLOB null_pw;
4897 NTSTATUS nt_status;
4898 fstring res_type;
4899 SMB_STRUCT_STAT st;
4904 DEBUG(6,("delete_driver_files: deleting driver [%s] - version [%d]\n", info_3->name, info_3->cversion));
4906 /*
4907 * Connect to the print$ share under the same account as the
4908 * user connected to the rpc pipe. Note we must be root to
4909 * do this.
4910 */
4921 }
4926 }
4928 /* Save who we are - we are temporarily becoming the connection user. */
4933 }
4935 /* now delete the files; must strip the '\print$' string from
4936 fron of path */
4944 }
4945 }
4953 }
4954 }
4962 }
4963 }
4971 }
4972 }
4974 /* check if we are done removing files */
4980 /* bypass the "\print$" portion of the path */
4987 }
4989 i++;
4990 }
4991 }
4996 }
4998 /****************************************************************************
4999 Remove a printer driver from the TDB. This assumes that the the driver was
5000 previously looked up.
5001 ***************************************************************************/
5003 WERROR delete_printer_driver( NT_PRINTER_DRIVER_INFO_LEVEL_3 *info_3, struct current_user *user,
5005 {
5006 pstring key;
5008 TDB_DATA dbuf;
5009 NT_PRINTER_DRIVER_INFO_LEVEL ctr;
5011 /* delete the tdb data first */
5016 }
5026 /* check if the driver actually exists for this environment */
5032 }
5036 /* ok... the driver exists so the delete should return success */
5041 }
5043 /*
5044 * now delete any associated files if delete_files == True
5045 * even if this part failes, we return succes because the
5046 * driver doesn not exist any more
5047 */
5056 }
5058 /****************************************************************************
5059 Store a security desc for a printer.
5060 ****************************************************************************/
5063 {
5066 prs_struct ps;
5068 TDB_DATA kbuf;
5069 WERROR status;
5075 /* The old owner and group sids of the security descriptor are not
5076 present when new ACEs are added or removed by changing printer
5077 permissions through NT. If they are NULL in the new security
5078 descriptor then copy them over from the old one. */
5089 }
5091 /* Pick out correct owner and group sids */
5109 /* Make a deep copy of the security descriptor */
5113 sacl,
5114 dacl,
5120 }
5123 }
5127 }
5129 /* Store the security descriptor in a tdb */
5138 }
5147 }
5149 /* Free malloc'ed memory */
5151 out:
5157 }
5159 /****************************************************************************
5160 Construct a default security descriptor buffer for a printer.
5161 ****************************************************************************/
5164 {
5167 SEC_ACCESS sa;
5171 DOM_SID adm_sid;
5174 /* Create an ACE where Everyone is allowed to print */
5180 /* Add the domain admins group if we are a DC */
5183 DOM_SID domadmins_sid;
5194 }
5204 }
5206 /* add BUILTIN\Administrators as FULL CONTROL */
5213 SEC_ACE_TYPE_ACCESS_ALLOWED,
5216 /* Make the security descriptor owned by the BUILTIN\Administrators */
5218 /* The ACL revision number in rpc_secdesc.h differs from the one
5219 created by NT when setting ACE entries in printer
5220 descriptors. NT4 complains about the property being edited by a
5221 NT5 machine. */
5228 }
5233 }
5241 }
5243 /****************************************************************************
5244 Get a security desc for a printer.
5245 ****************************************************************************/
5248 {
5249 prs_struct ps;
5250 TDB_DATA kbuf;
5255 }
5259 /* Fetch security descriptor from tdb */
5272 }
5274 /* Save default security descriptor for later */
5281 }
5286 }
5290 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
5291 this security descriptor has been created when winbindd was
5292 down. Take ownership of security descriptor. */
5295 DOM_SID owner_sid;
5297 /* Change sd owner to workgroup administrator */
5304 /* Create new sd */
5317 }
5322 }
5324 /* Swap with other one */
5328 /* Set it */
5331 }
5332 }
5342 fstring sid_str;
5349 }
5350 }
5353 }
5355 /* error code:
5356 0: everything OK
5357 1: level not implemented
5358 2: file doesn't exist
5359 3: can't allocate memory
5360 4: can't free memory
5361 5: non existant struct
5362 */
5364 /*
5365 A printer and a printer driver are 2 different things.
5366 NT manages them separatelly, Samba does the same.
5367 Why ? Simply because it's easier and it makes sense !
5369 Now explanation: You have 3 printers behind your samba server,
5370 2 of them are the same make and model (laser A and B). But laser B
5371 has an 3000 sheet feeder and laser A doesn't such an option.
5372 Your third printer is an old dot-matrix model for the accounting :-).
5374 If the /usr/local/samba/lib directory (default dir), you will have
5375 5 files to describe all of this.
5377 3 files for the printers (1 by printer):
5378 NTprinter_laser A
5379 NTprinter_laser B
5380 NTprinter_accounting
5381 2 files for the drivers (1 for the laser and 1 for the dot matrix)
5382 NTdriver_printer model X
5383 NTdriver_printer model Y
5385 jfm: I should use this comment for the text file to explain
5386 same thing for the forms BTW.
5387 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
5389 */
5391 /* Convert generic access rights to printer object specific access rights.
5392 It turns out that NT4 security descriptors use generic access rights and
5393 NT5 the object specific ones. */
5396 {
5402 }
5403 }
5405 /****************************************************************************
5406 Check a user has permissions to perform the given operation. We use the
5407 permission constants defined in include/rpc_spoolss.h to check the various
5408 actions we perform when checking printer access.
5410 PRINTER_ACCESS_ADMINISTER:
5411 print_queue_pause, print_queue_resume, update_printer_sec,
5412 update_printer, spoolss_addprinterex_level_2,
5413 _spoolss_setprinterdata
5415 PRINTER_ACCESS_USE:
5416 print_job_start
5418 JOB_ACCESS_ADMINISTER:
5419 print_job_delete, print_job_pause, print_job_resume,
5420 print_queue_purge
5422 Try access control in the following order (for performance reasons):
5423 1) root ans SE_PRINT_OPERATOR can do anything (easy check)
5424 2) check security descriptor (bit comparisons in memory)
5425 3) "printer admins" (may result in numerous calls to winbind)
5427 ****************************************************************************/
5429 {
5431 uint32 access_granted;
5432 NTSTATUS status;
5433 BOOL result;
5438 /* If user is NULL then use the current_user structure */
5443 /* Always allow root or SE_PRINT_OPERATROR to do anything */
5447 }
5449 /* Get printer name */
5456 }
5458 /* Get printer security descriptor */
5463 }
5469 }
5474 /* Create a child security descriptor to check permissions
5475 against. This is because print jobs are child objects
5476 objects of a printer. */
5484 }
5486 /* Now this is the bit that really confuses me. The access
5487 type needs to be changed from JOB_ACCESS_ADMINISTER to
5488 PRINTER_ACCESS_ADMINISTER for this to work. Something
5489 to do with the child (job) object becoming like a
5490 printer?? -tpot */
5493 }
5495 /* Check access */
5504 /* see if we need to try the printer admin list */
5512 }
5518 }
5521 }
5523 /****************************************************************************
5524 Check the time parameters allow a print operation.
5525 *****************************************************************************/
5528 {
5533 uint32 mins;
5553 }
5555 /****************************************************************************
5556 Fill in the servername sent in the _spoolss_open_printer_ex() call
5557 ****************************************************************************/
5560 {
5562 }