s3-spoolss: fix some crash bugs and missing error codes in AddDriver paths.
[Samba/ekacnet.git] / source3 / printing / nt_printing.c
blob56f5d18691f3ff2828a9b2ea2bd921ab81c3af34
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 * Copyright (C) Gerald Carter 2002-2005.
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 3 of the License, or
11 * (at your option) any later version.
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, see <http://www.gnu.org/licenses/>.
22 #include "includes.h"
24 static TDB_CONTEXT *tdb_forms; /* used for forms files */
25 static TDB_CONTEXT *tdb_drivers; /* used for driver files */
26 static TDB_CONTEXT *tdb_printers; /* used for printers files */
28 #define FORMS_PREFIX "FORMS/"
29 #define DRIVERS_PREFIX "DRIVERS/"
30 #define DRIVER_INIT_PREFIX "DRIVER_INIT/"
31 #define PRINTERS_PREFIX "PRINTERS/"
32 #define SECDESC_PREFIX "SECDESC/"
33 #define GLOBAL_C_SETPRINTER "GLOBALS/c_setprinter"
35 #define NTDRIVERS_DATABASE_VERSION_1 1
36 #define NTDRIVERS_DATABASE_VERSION_2 2
37 #define NTDRIVERS_DATABASE_VERSION_3 3 /* little endian version of v2 */
38 #define NTDRIVERS_DATABASE_VERSION_4 4 /* fix generic bits in security descriptors */
39 #define NTDRIVERS_DATABASE_VERSION_5 5 /* normalize keys in ntprinters.tdb */
41 /* Map generic permissions to printer object specific permissions */
43 const struct generic_mapping printer_generic_mapping = {
44 PRINTER_READ,
45 PRINTER_WRITE,
46 PRINTER_EXECUTE,
47 PRINTER_ALL_ACCESS
50 const struct standard_mapping printer_std_mapping = {
51 PRINTER_READ,
52 PRINTER_WRITE,
53 PRINTER_EXECUTE,
54 PRINTER_ALL_ACCESS
57 /* Map generic permissions to print server object specific permissions */
59 const struct generic_mapping printserver_generic_mapping = {
60 SERVER_READ,
61 SERVER_WRITE,
62 SERVER_EXECUTE,
63 SERVER_ALL_ACCESS
66 const struct generic_mapping printserver_std_mapping = {
67 SERVER_READ,
68 SERVER_WRITE,
69 SERVER_EXECUTE,
70 SERVER_ALL_ACCESS
73 /* Map generic permissions to job object specific permissions */
75 const struct generic_mapping job_generic_mapping = {
76 JOB_READ,
77 JOB_WRITE,
78 JOB_EXECUTE,
79 JOB_ALL_ACCESS
82 /* We need one default form to support our default printer. Msoft adds the
83 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
84 array index). Letter is always first, so (for the current code) additions
85 always put things in the correct order. */
86 static const nt_forms_struct default_forms[] = {
87 {"Letter",0x1,0x34b5c,0x44368,0x0,0x0,0x34b5c,0x44368},
88 {"Letter Small",0x1,0x34b5c,0x44368,0x0,0x0,0x34b5c,0x44368},
89 {"Tabloid",0x1,0x44368,0x696b8,0x0,0x0,0x44368,0x696b8},
90 {"Ledger",0x1,0x696b8,0x44368,0x0,0x0,0x696b8,0x44368},
91 {"Legal",0x1,0x34b5c,0x56d10,0x0,0x0,0x34b5c,0x56d10},
92 {"Statement",0x1,0x221b4,0x34b5c,0x0,0x0,0x221b4,0x34b5c},
93 {"Executive",0x1,0x2cf56,0x411cc,0x0,0x0,0x2cf56,0x411cc},
94 {"A3",0x1,0x48828,0x668a0,0x0,0x0,0x48828,0x668a0},
95 {"A4",0x1,0x33450,0x48828,0x0,0x0,0x33450,0x48828},
96 {"A4 Small",0x1,0x33450,0x48828,0x0,0x0,0x33450,0x48828},
97 {"A5",0x1,0x24220,0x33450,0x0,0x0,0x24220,0x33450},
98 {"B4 (JIS)",0x1,0x3ebe8,0x58de0,0x0,0x0,0x3ebe8,0x58de0},
99 {"B5 (JIS)",0x1,0x2c6f0,0x3ebe8,0x0,0x0,0x2c6f0,0x3ebe8},
100 {"Folio",0x1,0x34b5c,0x509d8,0x0,0x0,0x34b5c,0x509d8},
101 {"Quarto",0x1,0x347d8,0x43238,0x0,0x0,0x347d8,0x43238},
102 {"10x14",0x1,0x3e030,0x56d10,0x0,0x0,0x3e030,0x56d10},
103 {"11x17",0x1,0x44368,0x696b8,0x0,0x0,0x44368,0x696b8},
104 {"Note",0x1,0x34b5c,0x44368,0x0,0x0,0x34b5c,0x44368},
105 {"Envelope #9",0x1,0x18079,0x37091,0x0,0x0,0x18079,0x37091},
106 {"Envelope #10",0x1,0x19947,0x3ae94,0x0,0x0,0x19947,0x3ae94},
107 {"Envelope #11",0x1,0x1be7c,0x40565,0x0,0x0,0x1be7c,0x40565},
108 {"Envelope #12",0x1,0x1d74a,0x44368,0x0,0x0,0x1d74a,0x44368},
109 {"Envelope #14",0x1,0x1f018,0x47504,0x0,0x0,0x1f018,0x47504},
110 {"C size sheet",0x1,0x696b8,0x886d0,0x0,0x0,0x696b8,0x886d0},
111 {"D size sheet",0x1,0x886d0,0xd2d70,0x0,0x0,0x886d0,0xd2d70},
112 {"E size sheet",0x1,0xd2d70,0x110da0,0x0,0x0,0xd2d70,0x110da0},
113 {"Envelope DL",0x1,0x1adb0,0x35b60,0x0,0x0,0x1adb0,0x35b60},
114 {"Envelope C5",0x1,0x278d0,0x37e88,0x0,0x0,0x278d0,0x37e88},
115 {"Envelope C3",0x1,0x4f1a0,0x6fd10,0x0,0x0,0x4f1a0,0x6fd10},
116 {"Envelope C4",0x1,0x37e88,0x4f1a0,0x0,0x0,0x37e88,0x4f1a0},
117 {"Envelope C6",0x1,0x1bd50,0x278d0,0x0,0x0,0x1bd50,0x278d0},
118 {"Envelope C65",0x1,0x1bd50,0x37e88,0x0,0x0,0x1bd50,0x37e88},
119 {"Envelope B4",0x1,0x3d090,0x562e8,0x0,0x0,0x3d090,0x562e8},
120 {"Envelope B5",0x1,0x2af80,0x3d090,0x0,0x0,0x2af80,0x3d090},
121 {"Envelope B6",0x1,0x2af80,0x1e848,0x0,0x0,0x2af80,0x1e848},
122 {"Envelope",0x1,0x1adb0,0x38270,0x0,0x0,0x1adb0,0x38270},
123 {"Envelope Monarch",0x1,0x18079,0x2e824,0x0,0x0,0x18079,0x2e824},
124 {"6 3/4 Envelope",0x1,0x167ab,0x284ec,0x0,0x0,0x167ab,0x284ec},
125 {"US Std Fanfold",0x1,0x5c3e1,0x44368,0x0,0x0,0x5c3e1,0x44368},
126 {"German Std Fanfold",0x1,0x34b5c,0x4a6a0,0x0,0x0,0x34b5c,0x4a6a0},
127 {"German Legal Fanfold",0x1,0x34b5c,0x509d8,0x0,0x0,0x34b5c,0x509d8},
128 {"B4 (ISO)",0x1,0x3d090,0x562e8,0x0,0x0,0x3d090,0x562e8},
129 {"Japanese Postcard",0x1,0x186a0,0x24220,0x0,0x0,0x186a0,0x24220},
130 {"9x11",0x1,0x37cf8,0x44368,0x0,0x0,0x37cf8,0x44368},
131 {"10x11",0x1,0x3e030,0x44368,0x0,0x0,0x3e030,0x44368},
132 {"15x11",0x1,0x5d048,0x44368,0x0,0x0,0x5d048,0x44368},
133 {"Envelope Invite",0x1,0x35b60,0x35b60,0x0,0x0,0x35b60,0x35b60},
134 {"Reserved48",0x1,0x1,0x1,0x0,0x0,0x1,0x1},
135 {"Reserved49",0x1,0x1,0x1,0x0,0x0,0x1,0x1},
136 {"Letter Extra",0x1,0x3ae94,0x4a6a0,0x0,0x0,0x3ae94,0x4a6a0},
137 {"Legal Extra",0x1,0x3ae94,0x5d048,0x0,0x0,0x3ae94,0x5d048},
138 {"Tabloid Extra",0x1,0x4a6a0,0x6f9f0,0x0,0x0,0x4a6a0,0x6f9f0},
139 {"A4 Extra",0x1,0x397c2,0x4eb16,0x0,0x0,0x397c2,0x4eb16},
140 {"Letter Transverse",0x1,0x34b5c,0x44368,0x0,0x0,0x34b5c,0x44368},
141 {"A4 Transverse",0x1,0x33450,0x48828,0x0,0x0,0x33450,0x48828},
142 {"Letter Extra Transverse",0x1,0x3ae94,0x4a6a0,0x0,0x0,0x3ae94,0x4a6a0},
143 {"Super A",0x1,0x376b8,0x56ea0,0x0,0x0,0x376b8,0x56ea0},
144 {"Super B",0x1,0x4a768,0x76e58,0x0,0x0,0x4a768,0x76e58},
145 {"Letter Plus",0x1,0x34b5c,0x4eb16,0x0,0x0,0x34b5c,0x4eb16},
146 {"A4 Plus",0x1,0x33450,0x50910,0x0,0x0,0x33450,0x50910},
147 {"A5 Transverse",0x1,0x24220,0x33450,0x0,0x0,0x24220,0x33450},
148 {"B5 (JIS) Transverse",0x1,0x2c6f0,0x3ebe8,0x0,0x0,0x2c6f0,0x3ebe8},
149 {"A3 Extra",0x1,0x4e9d0,0x6ca48,0x0,0x0,0x4e9d0,0x6ca48},
150 {"A5 Extra",0x1,0x2a7b0,0x395f8,0x0,0x0,0x2a7b0,0x395f8},
151 {"B5 (ISO) Extra",0x1,0x31128,0x43620,0x0,0x0,0x31128,0x43620},
152 {"A2",0x1,0x668a0,0x91050,0x0,0x0,0x668a0,0x91050},
153 {"A3 Transverse",0x1,0x48828,0x668a0,0x0,0x0,0x48828,0x668a0},
154 {"A3 Extra Transverse",0x1,0x4e9d0,0x6ca48,0x0,0x0,0x4e9d0,0x6ca48},
155 {"Japanese Double Postcard",0x1,0x30d40,0x24220,0x0,0x0,0x30d40,0x24220},
156 {"A6",0x1,0x19a28,0x24220,0x0,0x0,0x19a28,0x24220},
157 {"Japanese Envelope Kaku #2",0x1,0x3a980,0x510e0,0x0,0x0,0x3a980,0x510e0},
158 {"Japanese Envelope Kaku #3",0x1,0x34bc0,0x43a08,0x0,0x0,0x34bc0,0x43a08},
159 {"Japanese Envelope Chou #3",0x1,0x1d4c0,0x395f8,0x0,0x0,0x1d4c0,0x395f8},
160 {"Japanese Envelope Chou #4",0x1,0x15f90,0x320c8,0x0,0x0,0x15f90,0x320c8},
161 {"Letter Rotated",0x1,0x44368,0x34b5c,0x0,0x0,0x44368,0x34b5c},
162 {"A3 Rotated",0x1,0x668a0,0x48828,0x0,0x0,0x668a0,0x48828},
163 {"A4 Rotated",0x1,0x48828,0x33450,0x0,0x0,0x48828,0x33450},
164 {"A5 Rotated",0x1,0x33450,0x24220,0x0,0x0,0x33450,0x24220},
165 {"B4 (JIS) Rotated",0x1,0x58de0,0x3ebe8,0x0,0x0,0x58de0,0x3ebe8},
166 {"B5 (JIS) Rotated",0x1,0x3ebe8,0x2c6f0,0x0,0x0,0x3ebe8,0x2c6f0},
167 {"Japanese Postcard Rotated",0x1,0x24220,0x186a0,0x0,0x0,0x24220,0x186a0},
168 {"Double Japan Postcard Rotated",0x1,0x24220,0x30d40,0x0,0x0,0x24220,0x30d40},
169 {"A6 Rotated",0x1,0x24220,0x19a28,0x0,0x0,0x24220,0x19a28},
170 {"Japan Envelope Kaku #2 Rotated",0x1,0x510e0,0x3a980,0x0,0x0,0x510e0,0x3a980},
171 {"Japan Envelope Kaku #3 Rotated",0x1,0x43a08,0x34bc0,0x0,0x0,0x43a08, 0x34bc0},
172 {"Japan Envelope Chou #3 Rotated",0x1,0x395f8,0x1d4c0,0x0,0x0,0x395f8,0x1d4c0},
173 {"Japan Envelope Chou #4 Rotated",0x1,0x320c8,0x15f90,0x0,0x0,0x320c8,0x15f90},
174 {"B6 (JIS)",0x1,0x1f400,0x2c6f0,0x0,0x0,0x1f400,0x2c6f0},
175 {"B6 (JIS) Rotated",0x1,0x2c6f0,0x1f400,0x0,0x0,0x2c6f0,0x1f400},
176 {"12x11",0x1,0x4a724,0x443e1,0x0,0x0,0x4a724,0x443e1},
177 {"Japan Envelope You #4",0x1,0x19a28,0x395f8,0x0,0x0,0x19a28,0x395f8},
178 {"Japan Envelope You #4 Rotated",0x1,0x395f8,0x19a28,0x0,0x0,0x395f8,0x19a28},
179 {"PRC 16K",0x1,0x2de60,0x3f7a0,0x0,0x0,0x2de60,0x3f7a0},
180 {"PRC 32K",0x1,0x1fbd0,0x2cec0,0x0,0x0,0x1fbd0,0x2cec0},
181 {"PRC 32K(Big)",0x1,0x222e0,0x318f8,0x0,0x0,0x222e0,0x318f8},
182 {"PRC Envelope #1",0x1,0x18e70,0x28488,0x0,0x0,0x18e70,0x28488},
183 {"PRC Envelope #2",0x1,0x18e70,0x2af80,0x0,0x0,0x18e70,0x2af80},
184 {"PRC Envelope #3",0x1,0x1e848,0x2af80,0x0,0x0,0x1e848,0x2af80},
185 {"PRC Envelope #4",0x1,0x1adb0,0x32c80,0x0,0x0,0x1adb0,0x32c80},
186 {"PRC Envelope #5",0x1,0x1adb0,0x35b60,0x0,0x0,0x1adb0,0x35b60},
187 {"PRC Envelope #6",0x1,0x1d4c0,0x38270,0x0,0x0,0x1d4c0,0x38270},
188 {"PRC Envelope #7",0x1,0x27100,0x38270,0x0,0x0,0x27100,0x38270},
189 {"PRC Envelope #8",0x1,0x1d4c0,0x4b708,0x0,0x0,0x1d4c0,0x4b708},
190 {"PRC Envelope #9",0x1,0x37e88,0x4f1a0,0x0,0x0,0x37e88,0x4f1a0},
191 {"PRC Envelope #10",0x1,0x4f1a0,0x6fd10,0x0,0x0,0x4f1a0,0x6fd10},
192 {"PRC 16K Rotated",0x1,0x3f7a0,0x2de60,0x0,0x0,0x3f7a0,0x2de60},
193 {"PRC 32K Rotated",0x1,0x2cec0,0x1fbd0,0x0,0x0,0x2cec0,0x1fbd0},
194 {"PRC 32K(Big) Rotated",0x1,0x318f8,0x222e0,0x0,0x0,0x318f8,0x222e0},
195 {"PRC Envelope #1 Rotated",0x1,0x28488,0x18e70,0x0,0x0,0x28488,0x18e70},
196 {"PRC Envelope #2 Rotated",0x1,0x2af80,0x18e70,0x0,0x0,0x2af80,0x18e70},
197 {"PRC Envelope #3 Rotated",0x1,0x2af80,0x1e848,0x0,0x0,0x2af80,0x1e848},
198 {"PRC Envelope #4 Rotated",0x1,0x32c80,0x1adb0,0x0,0x0,0x32c80,0x1adb0},
199 {"PRC Envelope #5 Rotated",0x1,0x35b60,0x1adb0,0x0,0x0,0x35b60,0x1adb0},
200 {"PRC Envelope #6 Rotated",0x1,0x38270,0x1d4c0,0x0,0x0,0x38270,0x1d4c0},
201 {"PRC Envelope #7 Rotated",0x1,0x38270,0x27100,0x0,0x0,0x38270,0x27100},
202 {"PRC Envelope #8 Rotated",0x1,0x4b708,0x1d4c0,0x0,0x0,0x4b708,0x1d4c0},
203 {"PRC Envelope #9 Rotated",0x1,0x4f1a0,0x37e88,0x0,0x0,0x4f1a0,0x37e88},
204 {"PRC Envelope #10 Rotated",0x1,0x6fd10,0x4f1a0,0x0,0x0,0x6fd10,0x4f1a0}
207 static const struct print_architecture_table_node archi_table[]= {
209 {"Windows 4.0", SPL_ARCH_WIN40, 0 },
210 {"Windows NT x86", SPL_ARCH_W32X86, 2 },
211 {"Windows NT R4000", SPL_ARCH_W32MIPS, 2 },
212 {"Windows NT Alpha_AXP", SPL_ARCH_W32ALPHA, 2 },
213 {"Windows NT PowerPC", SPL_ARCH_W32PPC, 2 },
214 {"Windows IA64", SPL_ARCH_IA64, 3 },
215 {"Windows x64", SPL_ARCH_X64, 3 },
216 {NULL, "", -1 }
220 /****************************************************************************
221 generate a new TDB_DATA key for storing a printer
222 ****************************************************************************/
224 static TDB_DATA make_printer_tdbkey(TALLOC_CTX *ctx, const char *sharename )
226 fstring share;
227 char *keystr = NULL;
228 TDB_DATA key;
230 fstrcpy(share, sharename);
231 strlower_m(share);
233 keystr = talloc_asprintf(ctx, "%s%s", PRINTERS_PREFIX, share);
234 key = string_term_tdb_data(keystr ? keystr : "");
236 return key;
239 /****************************************************************************
240 generate a new TDB_DATA key for storing a printer security descriptor
241 ****************************************************************************/
243 static TDB_DATA make_printers_secdesc_tdbkey(TALLOC_CTX *ctx,
244 const char* sharename )
246 fstring share;
247 char *keystr = NULL;
248 TDB_DATA key;
250 fstrcpy(share, sharename );
251 strlower_m(share);
253 keystr = talloc_asprintf(ctx, "%s%s", SECDESC_PREFIX, share);
254 key = string_term_tdb_data(keystr ? keystr : "");
256 return key;
259 /****************************************************************************
260 ****************************************************************************/
262 static bool upgrade_to_version_3(void)
264 TDB_DATA kbuf, newkey, dbuf;
266 DEBUG(0,("upgrade_to_version_3: upgrading print tdb's to version 3\n"));
268 for (kbuf = tdb_firstkey(tdb_drivers); kbuf.dptr;
269 newkey = tdb_nextkey(tdb_drivers, kbuf), free(kbuf.dptr), kbuf=newkey) {
271 dbuf = tdb_fetch(tdb_drivers, kbuf);
273 if (strncmp((const char *)kbuf.dptr, FORMS_PREFIX, strlen(FORMS_PREFIX)) == 0) {
274 DEBUG(0,("upgrade_to_version_3:moving form\n"));
275 if (tdb_store(tdb_forms, kbuf, dbuf, TDB_REPLACE) != 0) {
276 SAFE_FREE(dbuf.dptr);
277 DEBUG(0,("upgrade_to_version_3: failed to move form. Error (%s).\n", tdb_errorstr(tdb_forms)));
278 return False;
280 if (tdb_delete(tdb_drivers, kbuf) != 0) {
281 SAFE_FREE(dbuf.dptr);
282 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
283 return False;
287 if (strncmp((const char *)kbuf.dptr, PRINTERS_PREFIX, strlen(PRINTERS_PREFIX)) == 0) {
288 DEBUG(0,("upgrade_to_version_3:moving printer\n"));
289 if (tdb_store(tdb_printers, kbuf, dbuf, TDB_REPLACE) != 0) {
290 SAFE_FREE(dbuf.dptr);
291 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
292 return False;
294 if (tdb_delete(tdb_drivers, kbuf) != 0) {
295 SAFE_FREE(dbuf.dptr);
296 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
297 return False;
301 if (strncmp((const char *)kbuf.dptr, SECDESC_PREFIX, strlen(SECDESC_PREFIX)) == 0) {
302 DEBUG(0,("upgrade_to_version_3:moving secdesc\n"));
303 if (tdb_store(tdb_printers, kbuf, dbuf, TDB_REPLACE) != 0) {
304 SAFE_FREE(dbuf.dptr);
305 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
306 return False;
308 if (tdb_delete(tdb_drivers, kbuf) != 0) {
309 SAFE_FREE(dbuf.dptr);
310 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
311 return False;
315 SAFE_FREE(dbuf.dptr);
318 return True;
321 /*******************************************************************
322 Fix an issue with security descriptors. Printer sec_desc must
323 use more than the generic bits that were previously used
324 in <= 3.0.14a. They must also have a owner and group SID assigned.
325 Otherwise, any printers than have been migrated to a Windows
326 host using printmig.exe will not be accessible.
327 *******************************************************************/
329 static int sec_desc_upg_fn( TDB_CONTEXT *the_tdb, TDB_DATA key,
330 TDB_DATA data, void *state )
332 NTSTATUS status;
333 SEC_DESC_BUF *sd_orig = NULL;
334 SEC_DESC_BUF *sd_new, *sd_store;
335 SEC_DESC *sec, *new_sec;
336 TALLOC_CTX *ctx = state;
337 int result, i;
338 uint32 sd_size;
339 size_t size_new_sec;
341 if (!data.dptr || data.dsize == 0) {
342 return 0;
345 if ( strncmp((const char *) key.dptr, SECDESC_PREFIX, strlen(SECDESC_PREFIX) ) != 0 ) {
346 return 0;
349 /* upgrade the security descriptor */
351 status = unmarshall_sec_desc_buf(ctx, data.dptr, data.dsize, &sd_orig);
352 if (!NT_STATUS_IS_OK(status)) {
353 /* delete bad entries */
354 DEBUG(0,("sec_desc_upg_fn: Failed to parse original sec_desc for %si. Deleting....\n",
355 (const char *)key.dptr ));
356 tdb_delete( tdb_printers, key );
357 return 0;
360 if (!sd_orig) {
361 return 0;
363 sec = sd_orig->sd;
365 /* is this even valid? */
367 if ( !sec->dacl ) {
368 return 0;
371 /* update access masks */
373 for ( i=0; i<sec->dacl->num_aces; i++ ) {
374 switch ( sec->dacl->aces[i].access_mask ) {
375 case (GENERIC_READ_ACCESS | GENERIC_WRITE_ACCESS | GENERIC_EXECUTE_ACCESS):
376 sec->dacl->aces[i].access_mask = PRINTER_ACE_PRINT;
377 break;
379 case GENERIC_ALL_ACCESS:
380 sec->dacl->aces[i].access_mask = PRINTER_ACE_FULL_CONTROL;
381 break;
383 case READ_CONTROL_ACCESS:
384 sec->dacl->aces[i].access_mask = PRINTER_ACE_MANAGE_DOCUMENTS;
386 default: /* no change */
387 break;
391 /* create a new SEC_DESC with the appropriate owner and group SIDs */
393 new_sec = make_sec_desc( ctx, SEC_DESC_REVISION, SEC_DESC_SELF_RELATIVE,
394 &global_sid_Builtin_Administrators,
395 &global_sid_Builtin_Administrators,
396 NULL, NULL, &size_new_sec );
397 if (!new_sec) {
398 return 0;
400 sd_new = make_sec_desc_buf( ctx, size_new_sec, new_sec );
401 if (!sd_new) {
402 return 0;
405 if ( !(sd_store = sec_desc_merge( ctx, sd_new, sd_orig )) ) {
406 DEBUG(0,("sec_desc_upg_fn: Failed to update sec_desc for %s\n", key.dptr ));
407 return 0;
410 /* store it back */
412 sd_size = ndr_size_security_descriptor(sd_store->sd, NULL, 0)
413 + sizeof(SEC_DESC_BUF);
415 status = marshall_sec_desc_buf(ctx, sd_store, &data.dptr, &data.dsize);
416 if (!NT_STATUS_IS_OK(status)) {
417 DEBUG(0,("sec_desc_upg_fn: Failed to parse new sec_desc for %s\n", key.dptr ));
418 return 0;
421 result = tdb_store( tdb_printers, key, data, TDB_REPLACE );
423 /* 0 to continue and non-zero to stop traversal */
425 return (result == -1);
428 /*******************************************************************
429 *******************************************************************/
431 static bool upgrade_to_version_4(void)
433 TALLOC_CTX *ctx;
434 int result;
436 DEBUG(0,("upgrade_to_version_4: upgrading printer security descriptors\n"));
438 if ( !(ctx = talloc_init( "upgrade_to_version_4" )) )
439 return False;
441 result = tdb_traverse( tdb_printers, sec_desc_upg_fn, ctx );
443 talloc_destroy( ctx );
445 return ( result != -1 );
448 /*******************************************************************
449 Fix an issue with security descriptors. Printer sec_desc must
450 use more than the generic bits that were previously used
451 in <= 3.0.14a. They must also have a owner and group SID assigned.
452 Otherwise, any printers than have been migrated to a Windows
453 host using printmig.exe will not be accessible.
454 *******************************************************************/
456 static int normalize_printers_fn( TDB_CONTEXT *the_tdb, TDB_DATA key,
457 TDB_DATA data, void *state )
459 TALLOC_CTX *ctx = talloc_tos();
460 TDB_DATA new_key;
462 if (!data.dptr || data.dsize == 0)
463 return 0;
465 /* upgrade printer records and security descriptors */
467 if ( strncmp((const char *) key.dptr, PRINTERS_PREFIX, strlen(PRINTERS_PREFIX) ) == 0 ) {
468 new_key = make_printer_tdbkey(ctx, (const char *)key.dptr+strlen(PRINTERS_PREFIX) );
470 else if ( strncmp((const char *) key.dptr, SECDESC_PREFIX, strlen(SECDESC_PREFIX) ) == 0 ) {
471 new_key = make_printers_secdesc_tdbkey(ctx, (const char *)key.dptr+strlen(SECDESC_PREFIX) );
473 else {
474 /* ignore this record */
475 return 0;
478 /* delete the original record and store under the normalized key */
480 if ( tdb_delete( the_tdb, key ) != 0 ) {
481 DEBUG(0,("normalize_printers_fn: tdb_delete for [%s] failed!\n",
482 key.dptr));
483 return 1;
486 if ( tdb_store( the_tdb, new_key, data, TDB_REPLACE) != 0 ) {
487 DEBUG(0,("normalize_printers_fn: failed to store new record for [%s]!\n",
488 key.dptr));
489 return 1;
492 return 0;
495 /*******************************************************************
496 *******************************************************************/
498 static bool upgrade_to_version_5(void)
500 TALLOC_CTX *ctx;
501 int result;
503 DEBUG(0,("upgrade_to_version_5: normalizing printer keys\n"));
505 if ( !(ctx = talloc_init( "upgrade_to_version_5" )) )
506 return False;
508 result = tdb_traverse( tdb_printers, normalize_printers_fn, NULL );
510 talloc_destroy( ctx );
512 return ( result != -1 );
515 /****************************************************************************
516 Open the NT printing tdbs. Done once before fork().
517 ****************************************************************************/
519 bool nt_printing_init(struct messaging_context *msg_ctx)
521 const char *vstring = "INFO/version";
522 WERROR win_rc;
523 int32 vers_id;
525 if ( tdb_drivers && tdb_printers && tdb_forms )
526 return True;
528 if (tdb_drivers)
529 tdb_close(tdb_drivers);
530 tdb_drivers = tdb_open_log(state_path("ntdrivers.tdb"), 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
531 if (!tdb_drivers) {
532 DEBUG(0,("nt_printing_init: Failed to open nt drivers database %s (%s)\n",
533 state_path("ntdrivers.tdb"), strerror(errno) ));
534 return False;
537 if (tdb_printers)
538 tdb_close(tdb_printers);
539 tdb_printers = tdb_open_log(state_path("ntprinters.tdb"), 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
540 if (!tdb_printers) {
541 DEBUG(0,("nt_printing_init: Failed to open nt printers database %s (%s)\n",
542 state_path("ntprinters.tdb"), strerror(errno) ));
543 return False;
546 if (tdb_forms)
547 tdb_close(tdb_forms);
548 tdb_forms = tdb_open_log(state_path("ntforms.tdb"), 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
549 if (!tdb_forms) {
550 DEBUG(0,("nt_printing_init: Failed to open nt forms database %s (%s)\n",
551 state_path("ntforms.tdb"), strerror(errno) ));
552 return False;
555 /* handle a Samba upgrade */
557 vers_id = tdb_fetch_int32(tdb_drivers, vstring);
558 if (vers_id == -1) {
559 DEBUG(10, ("Fresh database\n"));
560 tdb_store_int32( tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_5 );
561 vers_id = NTDRIVERS_DATABASE_VERSION_5;
564 if ( vers_id != NTDRIVERS_DATABASE_VERSION_5 ) {
566 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
567 if (!upgrade_to_version_3())
568 return False;
569 tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_3);
570 vers_id = NTDRIVERS_DATABASE_VERSION_3;
573 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
574 /* Written on a bigendian machine with old fetch_int code. Save as le. */
575 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
576 tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_3);
577 vers_id = NTDRIVERS_DATABASE_VERSION_3;
580 if (vers_id == NTDRIVERS_DATABASE_VERSION_3 ) {
581 if ( !upgrade_to_version_4() )
582 return False;
583 tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_4);
584 vers_id = NTDRIVERS_DATABASE_VERSION_4;
587 if (vers_id == NTDRIVERS_DATABASE_VERSION_4 ) {
588 if ( !upgrade_to_version_5() )
589 return False;
590 tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_5);
591 vers_id = NTDRIVERS_DATABASE_VERSION_5;
595 if ( vers_id != NTDRIVERS_DATABASE_VERSION_5 ) {
596 DEBUG(0,("nt_printing_init: Unknown printer database version [%d]\n", vers_id));
597 return False;
601 update_c_setprinter(True);
604 * register callback to handle updating printers as new
605 * drivers are installed
608 messaging_register(msg_ctx, NULL, MSG_PRINTER_DRVUPGRADE,
609 do_drv_upgrade_printer);
612 * register callback to handle updating printer data
613 * when a driver is initialized
616 messaging_register(msg_ctx, NULL, MSG_PRINTERDATA_INIT_RESET,
617 reset_all_printerdata);
619 /* of course, none of the message callbacks matter if you don't
620 tell messages.c that you interested in receiving PRINT_GENERAL
621 msgs. This is done in serverid_register() */
624 if ( lp_security() == SEC_ADS ) {
625 win_rc = check_published_printers();
626 if (!W_ERROR_IS_OK(win_rc))
627 DEBUG(0, ("nt_printing_init: error checking published printers: %s\n", win_errstr(win_rc)));
630 return True;
633 /*******************************************************************
634 Function to allow filename parsing "the old way".
635 ********************************************************************/
637 static NTSTATUS driver_unix_convert(connection_struct *conn,
638 const char *old_name,
639 struct smb_filename **smb_fname)
641 NTSTATUS status;
642 TALLOC_CTX *ctx = talloc_tos();
643 char *name = talloc_strdup(ctx, old_name);
645 if (!name) {
646 return NT_STATUS_NO_MEMORY;
648 unix_format(name);
649 name = unix_clean_name(ctx, name);
650 if (!name) {
651 return NT_STATUS_NO_MEMORY;
653 trim_string(name,"/","/");
655 status = unix_convert(ctx, conn, name, smb_fname, 0);
656 if (!NT_STATUS_IS_OK(status)) {
657 return NT_STATUS_NO_MEMORY;
660 return NT_STATUS_OK;
663 /*******************************************************************
664 tdb traversal function for counting printers.
665 ********************************************************************/
667 static int traverse_counting_printers(TDB_CONTEXT *t, TDB_DATA key,
668 TDB_DATA data, void *context)
670 int *printer_count = (int*)context;
672 if (memcmp(PRINTERS_PREFIX, key.dptr, sizeof(PRINTERS_PREFIX)-1) == 0) {
673 (*printer_count)++;
674 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
677 return 0;
680 /*******************************************************************
681 Update the spooler global c_setprinter. This variable is initialized
682 when the parent smbd starts with the number of existing printers. It
683 is monotonically increased by the current number of printers *after*
684 each add or delete printer RPC. Only Microsoft knows why... JRR020119
685 ********************************************************************/
687 uint32 update_c_setprinter(bool initialize)
689 int32 c_setprinter;
690 int32 printer_count = 0;
692 tdb_lock_bystring(tdb_printers, GLOBAL_C_SETPRINTER);
694 /* Traverse the tdb, counting the printers */
695 tdb_traverse(tdb_printers, traverse_counting_printers, (void *)&printer_count);
697 /* If initializing, set c_setprinter to current printers count
698 * otherwise, bump it by the current printer count
700 if (!initialize)
701 c_setprinter = tdb_fetch_int32(tdb_printers, GLOBAL_C_SETPRINTER) + printer_count;
702 else
703 c_setprinter = printer_count;
705 DEBUG(10,("update_c_setprinter: c_setprinter = %u\n", (unsigned int)c_setprinter));
706 tdb_store_int32(tdb_printers, GLOBAL_C_SETPRINTER, c_setprinter);
708 tdb_unlock_bystring(tdb_printers, GLOBAL_C_SETPRINTER);
710 return (uint32)c_setprinter;
713 /*******************************************************************
714 Get the spooler global c_setprinter, accounting for initialization.
715 ********************************************************************/
717 uint32 get_c_setprinter(void)
719 int32 c_setprinter = tdb_fetch_int32(tdb_printers, GLOBAL_C_SETPRINTER);
721 if (c_setprinter == (int32)-1)
722 c_setprinter = update_c_setprinter(True);
724 DEBUG(10,("get_c_setprinter: c_setprinter = %d\n", c_setprinter));
726 return (uint32)c_setprinter;
729 /****************************************************************************
730 Get builtin form struct list.
731 ****************************************************************************/
733 int get_builtin_ntforms(nt_forms_struct **list)
735 *list = (nt_forms_struct *)memdup(&default_forms[0], sizeof(default_forms));
736 if (!*list) {
737 return 0;
739 return ARRAY_SIZE(default_forms);
742 /****************************************************************************
743 get a builtin form struct
744 ****************************************************************************/
746 bool get_a_builtin_ntform_by_string(const char *form_name, nt_forms_struct *form)
748 int i;
749 DEBUGADD(6,("Looking for builtin form %s \n", form_name));
750 for (i=0; i<ARRAY_SIZE(default_forms); i++) {
751 if (strequal(form_name,default_forms[i].name)) {
752 DEBUGADD(6,("Found builtin form %s \n", form_name));
753 memcpy(form,&default_forms[i],sizeof(*form));
754 return true;
758 return false;
761 /****************************************************************************
762 get a form struct list.
763 ****************************************************************************/
765 int get_ntforms(nt_forms_struct **list)
767 TDB_DATA kbuf, newkey, dbuf;
768 nt_forms_struct form;
769 int ret;
770 int i;
771 int n = 0;
773 *list = NULL;
775 for (kbuf = tdb_firstkey(tdb_forms);
776 kbuf.dptr;
777 newkey = tdb_nextkey(tdb_forms, kbuf), free(kbuf.dptr), kbuf=newkey)
779 if (strncmp((const char *)kbuf.dptr, FORMS_PREFIX, strlen(FORMS_PREFIX)) != 0)
780 continue;
782 dbuf = tdb_fetch(tdb_forms, kbuf);
783 if (!dbuf.dptr)
784 continue;
786 fstrcpy(form.name, (const char *)kbuf.dptr+strlen(FORMS_PREFIX));
787 ret = tdb_unpack(dbuf.dptr, dbuf.dsize, "dddddddd",
788 &i, &form.flag, &form.width, &form.length, &form.left,
789 &form.top, &form.right, &form.bottom);
790 SAFE_FREE(dbuf.dptr);
791 if (ret != dbuf.dsize)
792 continue;
794 *list = SMB_REALLOC_ARRAY(*list, nt_forms_struct, n+1);
795 if (!*list) {
796 DEBUG(0,("get_ntforms: Realloc fail.\n"));
797 return 0;
799 (*list)[n] = form;
800 n++;
804 return n;
807 /****************************************************************************
808 write a form struct list
809 ****************************************************************************/
811 int write_ntforms(nt_forms_struct **list, int number)
813 TALLOC_CTX *ctx = talloc_tos();
814 char *buf = NULL;
815 char *key = NULL;
816 int len;
817 TDB_DATA dbuf;
818 int i;
820 for (i=0;i<number;i++) {
821 /* save index, so list is rebuilt in correct order */
822 len = tdb_pack(NULL, 0, "dddddddd",
823 i, (*list)[i].flag, (*list)[i].width, (*list)[i].length,
824 (*list)[i].left, (*list)[i].top, (*list)[i].right,
825 (*list)[i].bottom);
826 if (!len) {
827 continue;
829 buf = TALLOC_ARRAY(ctx, char, len);
830 if (!buf) {
831 return 0;
833 len = tdb_pack((uint8 *)buf, len, "dddddddd",
834 i, (*list)[i].flag, (*list)[i].width, (*list)[i].length,
835 (*list)[i].left, (*list)[i].top, (*list)[i].right,
836 (*list)[i].bottom);
837 key = talloc_asprintf(ctx, "%s%s", FORMS_PREFIX, (*list)[i].name);
838 if (!key) {
839 return 0;
841 dbuf.dsize = len;
842 dbuf.dptr = (uint8 *)buf;
843 if (tdb_store_bystring(tdb_forms, key, dbuf, TDB_REPLACE) != 0) {
844 TALLOC_FREE(key);
845 TALLOC_FREE(buf);
846 break;
848 TALLOC_FREE(key);
849 TALLOC_FREE(buf);
852 return i;
855 /****************************************************************************
856 add a form struct at the end of the list
857 ****************************************************************************/
858 bool add_a_form(nt_forms_struct **list, struct spoolss_AddFormInfo1 *form, int *count)
860 int n=0;
861 bool update;
864 * NT tries to add forms even when
865 * they are already in the base
866 * only update the values if already present
869 update=False;
871 for (n=0; n<*count; n++) {
872 if ( strequal((*list)[n].name, form->form_name) ) {
873 update=True;
874 break;
878 if (update==False) {
879 if((*list=SMB_REALLOC_ARRAY(*list, nt_forms_struct, n+1)) == NULL) {
880 DEBUG(0,("add_a_form: failed to enlarge forms list!\n"));
881 return False;
883 fstrcpy((*list)[n].name, form->form_name);
884 (*count)++;
887 (*list)[n].flag = form->flags;
888 (*list)[n].width = form->size.width;
889 (*list)[n].length = form->size.height;
890 (*list)[n].left = form->area.left;
891 (*list)[n].top = form->area.top;
892 (*list)[n].right = form->area.right;
893 (*list)[n].bottom = form->area.bottom;
895 DEBUG(6,("add_a_form: Successfully %s form [%s]\n",
896 update ? "updated" : "added", form->form_name));
898 return True;
901 /****************************************************************************
902 Delete a named form struct.
903 ****************************************************************************/
905 bool delete_a_form(nt_forms_struct **list, const char *del_name, int *count, WERROR *ret)
907 char *key = NULL;
908 int n=0;
910 *ret = WERR_OK;
912 for (n=0; n<*count; n++) {
913 if (!strncmp((*list)[n].name, del_name, strlen(del_name))) {
914 DEBUG(103, ("delete_a_form, [%s] in list\n", del_name));
915 break;
919 if (n == *count) {
920 DEBUG(10,("delete_a_form, [%s] not found\n", del_name));
921 *ret = WERR_INVALID_FORM_NAME;
922 return False;
925 if (asprintf(&key, "%s%s", FORMS_PREFIX, (*list)[n].name) < 0) {
926 *ret = WERR_NOMEM;
927 return false;
929 if (tdb_delete_bystring(tdb_forms, key) != 0) {
930 SAFE_FREE(key);
931 *ret = WERR_NOMEM;
932 return False;
934 SAFE_FREE(key);
935 return true;
938 /****************************************************************************
939 Update a form struct.
940 ****************************************************************************/
942 void update_a_form(nt_forms_struct **list, struct spoolss_AddFormInfo1 *form, int count)
944 int n=0;
946 DEBUG(106, ("[%s]\n", form->form_name));
947 for (n=0; n<count; n++) {
948 DEBUGADD(106, ("n [%d]:[%s]\n", n, (*list)[n].name));
949 if (!strncmp((*list)[n].name, form->form_name, strlen(form->form_name)))
950 break;
953 if (n==count) return;
955 (*list)[n].flag = form->flags;
956 (*list)[n].width = form->size.width;
957 (*list)[n].length = form->size.height;
958 (*list)[n].left = form->area.left;
959 (*list)[n].top = form->area.top;
960 (*list)[n].right = form->area.right;
961 (*list)[n].bottom = form->area.bottom;
964 /****************************************************************************
965 Get the nt drivers list.
966 Traverse the database and look-up the matching names.
967 ****************************************************************************/
968 int get_ntdrivers(fstring **list, const char *architecture, uint32 version)
970 int total=0;
971 const char *short_archi;
972 char *key = NULL;
973 TDB_DATA kbuf, newkey;
975 short_archi = get_short_archi(architecture);
976 if (!short_archi) {
977 return 0;
980 if (asprintf(&key, "%s%s/%d/", DRIVERS_PREFIX,
981 short_archi, version) < 0) {
982 return 0;
985 for (kbuf = tdb_firstkey(tdb_drivers);
986 kbuf.dptr;
987 newkey = tdb_nextkey(tdb_drivers, kbuf), free(kbuf.dptr), kbuf=newkey) {
989 if (strncmp((const char *)kbuf.dptr, key, strlen(key)) != 0)
990 continue;
992 if((*list = SMB_REALLOC_ARRAY(*list, fstring, total+1)) == NULL) {
993 DEBUG(0,("get_ntdrivers: failed to enlarge list!\n"));
994 SAFE_FREE(key);
995 return -1;
998 fstrcpy((*list)[total], (const char *)kbuf.dptr+strlen(key));
999 total++;
1002 SAFE_FREE(key);
1003 return(total);
1006 /****************************************************************************
1007 Function to do the mapping between the long architecture name and
1008 the short one.
1009 ****************************************************************************/
1011 const char *get_short_archi(const char *long_archi)
1013 int i=-1;
1015 DEBUG(107,("Getting architecture dependant directory\n"));
1016 do {
1017 i++;
1018 } while ( (archi_table[i].long_archi!=NULL ) &&
1019 StrCaseCmp(long_archi, archi_table[i].long_archi) );
1021 if (archi_table[i].long_archi==NULL) {
1022 DEBUGADD(10,("Unknown architecture [%s] !\n", long_archi));
1023 return NULL;
1026 /* this might be client code - but shouldn't this be an fstrcpy etc? */
1028 DEBUGADD(108,("index: [%d]\n", i));
1029 DEBUGADD(108,("long architecture: [%s]\n", archi_table[i].long_archi));
1030 DEBUGADD(108,("short architecture: [%s]\n", archi_table[i].short_archi));
1032 return archi_table[i].short_archi;
1035 /****************************************************************************
1036 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
1037 There are two case to be covered here: PE (Portable Executable) and NE (New
1038 Executable) files. Both files support the same INFO structure, but PE files
1039 store the signature in unicode, and NE files store it as !unicode.
1040 returns -1 on error, 1 on version info found, and 0 on no version info found.
1041 ****************************************************************************/
1043 static int get_file_version(files_struct *fsp, char *fname,uint32 *major, uint32 *minor)
1045 int i;
1046 char *buf = NULL;
1047 ssize_t byte_count;
1049 if ((buf=(char *)SMB_MALLOC(DOS_HEADER_SIZE)) == NULL) {
1050 DEBUG(0,("get_file_version: PE file [%s] DOS Header malloc failed bytes = %d\n",
1051 fname, DOS_HEADER_SIZE));
1052 goto error_exit;
1055 if ((byte_count = vfs_read_data(fsp, buf, DOS_HEADER_SIZE)) < DOS_HEADER_SIZE) {
1056 DEBUG(3,("get_file_version: File [%s] DOS header too short, bytes read = %lu\n",
1057 fname, (unsigned long)byte_count));
1058 goto no_version_info;
1061 /* Is this really a DOS header? */
1062 if (SVAL(buf,DOS_HEADER_MAGIC_OFFSET) != DOS_HEADER_MAGIC) {
1063 DEBUG(6,("get_file_version: File [%s] bad DOS magic = 0x%x\n",
1064 fname, SVAL(buf,DOS_HEADER_MAGIC_OFFSET)));
1065 goto no_version_info;
1068 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
1069 if (SMB_VFS_LSEEK(fsp, SVAL(buf,DOS_HEADER_LFANEW_OFFSET), SEEK_SET) == (SMB_OFF_T)-1) {
1070 DEBUG(3,("get_file_version: File [%s] too short, errno = %d\n",
1071 fname, errno));
1072 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1073 goto no_version_info;
1076 /* Note: DOS_HEADER_SIZE and NE_HEADER_SIZE are incidentally same */
1077 if ((byte_count = vfs_read_data(fsp, buf, NE_HEADER_SIZE)) < NE_HEADER_SIZE) {
1078 DEBUG(3,("get_file_version: File [%s] Windows header too short, bytes read = %lu\n",
1079 fname, (unsigned long)byte_count));
1080 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1081 goto no_version_info;
1084 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
1085 if (IVAL(buf,PE_HEADER_SIGNATURE_OFFSET) == PE_HEADER_SIGNATURE) {
1086 unsigned int num_sections;
1087 unsigned int section_table_bytes;
1089 /* Just skip over optional header to get to section table */
1090 if (SMB_VFS_LSEEK(fsp,
1091 SVAL(buf,PE_HEADER_OPTIONAL_HEADER_SIZE)-(NE_HEADER_SIZE-PE_HEADER_SIZE),
1092 SEEK_CUR) == (SMB_OFF_T)-1) {
1093 DEBUG(3,("get_file_version: File [%s] Windows optional header too short, errno = %d\n",
1094 fname, errno));
1095 goto error_exit;
1098 /* get the section table */
1099 num_sections = SVAL(buf,PE_HEADER_NUMBER_OF_SECTIONS);
1100 section_table_bytes = num_sections * PE_HEADER_SECT_HEADER_SIZE;
1101 if (section_table_bytes == 0)
1102 goto error_exit;
1104 SAFE_FREE(buf);
1105 if ((buf=(char *)SMB_MALLOC(section_table_bytes)) == NULL) {
1106 DEBUG(0,("get_file_version: PE file [%s] section table malloc failed bytes = %d\n",
1107 fname, section_table_bytes));
1108 goto error_exit;
1111 if ((byte_count = vfs_read_data(fsp, buf, section_table_bytes)) < section_table_bytes) {
1112 DEBUG(3,("get_file_version: PE file [%s] Section header too short, bytes read = %lu\n",
1113 fname, (unsigned long)byte_count));
1114 goto error_exit;
1117 /* Iterate the section table looking for the resource section ".rsrc" */
1118 for (i = 0; i < num_sections; i++) {
1119 int sec_offset = i * PE_HEADER_SECT_HEADER_SIZE;
1121 if (strcmp(".rsrc", &buf[sec_offset+PE_HEADER_SECT_NAME_OFFSET]) == 0) {
1122 unsigned int section_pos = IVAL(buf,sec_offset+PE_HEADER_SECT_PTR_DATA_OFFSET);
1123 unsigned int section_bytes = IVAL(buf,sec_offset+PE_HEADER_SECT_SIZE_DATA_OFFSET);
1125 if (section_bytes == 0)
1126 goto error_exit;
1128 SAFE_FREE(buf);
1129 if ((buf=(char *)SMB_MALLOC(section_bytes)) == NULL) {
1130 DEBUG(0,("get_file_version: PE file [%s] version malloc failed bytes = %d\n",
1131 fname, section_bytes));
1132 goto error_exit;
1135 /* Seek to the start of the .rsrc section info */
1136 if (SMB_VFS_LSEEK(fsp, section_pos, SEEK_SET) == (SMB_OFF_T)-1) {
1137 DEBUG(3,("get_file_version: PE file [%s] too short for section info, errno = %d\n",
1138 fname, errno));
1139 goto error_exit;
1142 if ((byte_count = vfs_read_data(fsp, buf, section_bytes)) < section_bytes) {
1143 DEBUG(3,("get_file_version: PE file [%s] .rsrc section too short, bytes read = %lu\n",
1144 fname, (unsigned long)byte_count));
1145 goto error_exit;
1148 if (section_bytes < VS_VERSION_INFO_UNICODE_SIZE)
1149 goto error_exit;
1151 for (i=0; i<section_bytes-VS_VERSION_INFO_UNICODE_SIZE; i++) {
1152 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
1153 if (buf[i] == 'V' && buf[i+1] == '\0' && buf[i+2] == 'S') {
1154 /* Align to next long address */
1155 int pos = (i + sizeof(VS_SIGNATURE)*2 + 3) & 0xfffffffc;
1157 if (IVAL(buf,pos) == VS_MAGIC_VALUE) {
1158 *major = IVAL(buf,pos+VS_MAJOR_OFFSET);
1159 *minor = IVAL(buf,pos+VS_MINOR_OFFSET);
1161 DEBUG(6,("get_file_version: PE file [%s] Version = %08x:%08x (%d.%d.%d.%d)\n",
1162 fname, *major, *minor,
1163 (*major>>16)&0xffff, *major&0xffff,
1164 (*minor>>16)&0xffff, *minor&0xffff));
1165 SAFE_FREE(buf);
1166 return 1;
1173 /* Version info not found, fall back to origin date/time */
1174 DEBUG(10,("get_file_version: PE file [%s] has no version info\n", fname));
1175 SAFE_FREE(buf);
1176 return 0;
1178 } else if (SVAL(buf,NE_HEADER_SIGNATURE_OFFSET) == NE_HEADER_SIGNATURE) {
1179 if (CVAL(buf,NE_HEADER_TARGET_OS_OFFSET) != NE_HEADER_TARGOS_WIN ) {
1180 DEBUG(3,("get_file_version: NE file [%s] wrong target OS = 0x%x\n",
1181 fname, CVAL(buf,NE_HEADER_TARGET_OS_OFFSET)));
1182 /* At this point, we assume the file is in error. It still could be somthing
1183 * else besides a NE file, but it unlikely at this point. */
1184 goto error_exit;
1187 /* Allocate a bit more space to speed up things */
1188 SAFE_FREE(buf);
1189 if ((buf=(char *)SMB_MALLOC(VS_NE_BUF_SIZE)) == NULL) {
1190 DEBUG(0,("get_file_version: NE file [%s] malloc failed bytes = %d\n",
1191 fname, PE_HEADER_SIZE));
1192 goto error_exit;
1195 /* This is a HACK! I got tired of trying to sort through the messy
1196 * 'NE' file format. If anyone wants to clean this up please have at
1197 * it, but this works. 'NE' files will eventually fade away. JRR */
1198 while((byte_count = vfs_read_data(fsp, buf, VS_NE_BUF_SIZE)) > 0) {
1199 /* Cover case that should not occur in a well formed 'NE' .dll file */
1200 if (byte_count-VS_VERSION_INFO_SIZE <= 0) break;
1202 for(i=0; i<byte_count; i++) {
1203 /* Fast skip past data that can't possibly match */
1204 if (buf[i] != 'V') continue;
1206 /* Potential match data crosses buf boundry, move it to beginning
1207 * of buf, and fill the buf with as much as it will hold. */
1208 if (i>byte_count-VS_VERSION_INFO_SIZE) {
1209 int bc;
1211 memcpy(buf, &buf[i], byte_count-i);
1212 if ((bc = vfs_read_data(fsp, &buf[byte_count-i], VS_NE_BUF_SIZE-
1213 (byte_count-i))) < 0) {
1215 DEBUG(0,("get_file_version: NE file [%s] Read error, errno=%d\n",
1216 fname, errno));
1217 goto error_exit;
1220 byte_count = bc + (byte_count - i);
1221 if (byte_count<VS_VERSION_INFO_SIZE) break;
1223 i = 0;
1226 /* Check that the full signature string and the magic number that
1227 * follows exist (not a perfect solution, but the chances that this
1228 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
1229 * twice, as it is simpler to read the code. */
1230 if (strcmp(&buf[i], VS_SIGNATURE) == 0) {
1231 /* Compute skip alignment to next long address */
1232 int skip = -(SMB_VFS_LSEEK(fsp, 0, SEEK_CUR) - (byte_count - i) +
1233 sizeof(VS_SIGNATURE)) & 3;
1234 if (IVAL(buf,i+sizeof(VS_SIGNATURE)+skip) != 0xfeef04bd) continue;
1236 *major = IVAL(buf,i+sizeof(VS_SIGNATURE)+skip+VS_MAJOR_OFFSET);
1237 *minor = IVAL(buf,i+sizeof(VS_SIGNATURE)+skip+VS_MINOR_OFFSET);
1238 DEBUG(6,("get_file_version: NE file [%s] Version = %08x:%08x (%d.%d.%d.%d)\n",
1239 fname, *major, *minor,
1240 (*major>>16)&0xffff, *major&0xffff,
1241 (*minor>>16)&0xffff, *minor&0xffff));
1242 SAFE_FREE(buf);
1243 return 1;
1248 /* Version info not found, fall back to origin date/time */
1249 DEBUG(0,("get_file_version: NE file [%s] Version info not found\n", fname));
1250 SAFE_FREE(buf);
1251 return 0;
1253 } else
1254 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1255 DEBUG(3,("get_file_version: File [%s] unknown file format, signature = 0x%x\n",
1256 fname, IVAL(buf,PE_HEADER_SIGNATURE_OFFSET)));
1258 no_version_info:
1259 SAFE_FREE(buf);
1260 return 0;
1262 error_exit:
1263 SAFE_FREE(buf);
1264 return -1;
1267 /****************************************************************************
1268 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
1269 share one or more files. During the MS installation process files are checked
1270 to insure that only a newer version of a shared file is installed over an
1271 older version. There are several possibilities for this comparison. If there
1272 is no previous version, the new one is newer (obviously). If either file is
1273 missing the version info structure, compare the creation date (on Unix use
1274 the modification date). Otherwise chose the numerically larger version number.
1275 ****************************************************************************/
1277 static int file_version_is_newer(connection_struct *conn, fstring new_file, fstring old_file)
1279 bool use_version = true;
1281 uint32 new_major;
1282 uint32 new_minor;
1283 time_t new_create_time;
1285 uint32 old_major;
1286 uint32 old_minor;
1287 time_t old_create_time;
1289 struct smb_filename *smb_fname = NULL;
1290 files_struct *fsp = NULL;
1291 SMB_STRUCT_STAT st;
1293 NTSTATUS status;
1294 int ret;
1296 SET_STAT_INVALID(st);
1297 new_create_time = (time_t)0;
1298 old_create_time = (time_t)0;
1300 /* Get file version info (if available) for previous file (if it exists) */
1301 status = driver_unix_convert(conn, old_file, &smb_fname);
1302 if (!NT_STATUS_IS_OK(status)) {
1303 goto error_exit;
1306 status = SMB_VFS_CREATE_FILE(
1307 conn, /* conn */
1308 NULL, /* req */
1309 0, /* root_dir_fid */
1310 smb_fname, /* fname */
1311 FILE_GENERIC_READ, /* access_mask */
1312 FILE_SHARE_READ | FILE_SHARE_WRITE, /* share_access */
1313 FILE_OPEN, /* create_disposition*/
1314 0, /* create_options */
1315 FILE_ATTRIBUTE_NORMAL, /* file_attributes */
1316 INTERNAL_OPEN_ONLY, /* oplock_request */
1317 0, /* allocation_size */
1318 0, /* private_flags */
1319 NULL, /* sd */
1320 NULL, /* ea_list */
1321 &fsp, /* result */
1322 NULL); /* pinfo */
1324 if (!NT_STATUS_IS_OK(status)) {
1325 /* Old file not found, so by definition new file is in fact newer */
1326 DEBUG(10,("file_version_is_newer: Can't open old file [%s], "
1327 "errno = %d\n", smb_fname_str_dbg(smb_fname),
1328 errno));
1329 ret = 1;
1330 goto done;
1332 } else {
1333 ret = get_file_version(fsp, old_file, &old_major, &old_minor);
1334 if (ret == -1) {
1335 goto error_exit;
1338 if (!ret) {
1339 DEBUG(6,("file_version_is_newer: Version info not found [%s], use mod time\n",
1340 old_file));
1341 use_version = false;
1342 if (SMB_VFS_FSTAT(fsp, &st) == -1) {
1343 goto error_exit;
1345 old_create_time = convert_timespec_to_time_t(st.st_ex_mtime);
1346 DEBUGADD(6,("file_version_is_newer: mod time = %ld sec\n",
1347 (long)old_create_time));
1350 close_file(NULL, fsp, NORMAL_CLOSE);
1351 fsp = NULL;
1353 /* Get file version info (if available) for new file */
1354 status = driver_unix_convert(conn, new_file, &smb_fname);
1355 if (!NT_STATUS_IS_OK(status)) {
1356 goto error_exit;
1359 status = SMB_VFS_CREATE_FILE(
1360 conn, /* conn */
1361 NULL, /* req */
1362 0, /* root_dir_fid */
1363 smb_fname, /* fname */
1364 FILE_GENERIC_READ, /* access_mask */
1365 FILE_SHARE_READ | FILE_SHARE_WRITE, /* share_access */
1366 FILE_OPEN, /* create_disposition*/
1367 0, /* create_options */
1368 FILE_ATTRIBUTE_NORMAL, /* file_attributes */
1369 INTERNAL_OPEN_ONLY, /* oplock_request */
1370 0, /* allocation_size */
1371 0, /* private_flags */
1372 NULL, /* sd */
1373 NULL, /* ea_list */
1374 &fsp, /* result */
1375 NULL); /* pinfo */
1377 if (!NT_STATUS_IS_OK(status)) {
1378 /* New file not found, this shouldn't occur if the caller did its job */
1379 DEBUG(3,("file_version_is_newer: Can't open new file [%s], "
1380 "errno = %d\n", smb_fname_str_dbg(smb_fname), errno));
1381 goto error_exit;
1383 } else {
1384 ret = get_file_version(fsp, new_file, &new_major, &new_minor);
1385 if (ret == -1) {
1386 goto error_exit;
1389 if (!ret) {
1390 DEBUG(6,("file_version_is_newer: Version info not found [%s], use mod time\n",
1391 new_file));
1392 use_version = false;
1393 if (SMB_VFS_FSTAT(fsp, &st) == -1) {
1394 goto error_exit;
1396 new_create_time = convert_timespec_to_time_t(st.st_ex_mtime);
1397 DEBUGADD(6,("file_version_is_newer: mod time = %ld sec\n",
1398 (long)new_create_time));
1401 close_file(NULL, fsp, NORMAL_CLOSE);
1402 fsp = NULL;
1404 if (use_version && (new_major != old_major || new_minor != old_minor)) {
1405 /* Compare versions and choose the larger version number */
1406 if (new_major > old_major ||
1407 (new_major == old_major && new_minor > old_minor)) {
1409 DEBUG(6,("file_version_is_newer: Replacing [%s] with [%s]\n", old_file, new_file));
1410 ret = 1;
1411 goto done;
1413 else {
1414 DEBUG(6,("file_version_is_newer: Leaving [%s] unchanged\n", old_file));
1415 ret = 0;
1416 goto done;
1419 } else {
1420 /* Compare modification time/dates and choose the newest time/date */
1421 if (new_create_time > old_create_time) {
1422 DEBUG(6,("file_version_is_newer: Replacing [%s] with [%s]\n", old_file, new_file));
1423 ret = 1;
1424 goto done;
1426 else {
1427 DEBUG(6,("file_version_is_newer: Leaving [%s] unchanged\n", old_file));
1428 ret = 0;
1429 goto done;
1433 error_exit:
1434 if(fsp)
1435 close_file(NULL, fsp, NORMAL_CLOSE);
1436 ret = -1;
1437 done:
1438 TALLOC_FREE(smb_fname);
1439 return ret;
1442 /****************************************************************************
1443 Determine the correct cVersion associated with an architecture and driver
1444 ****************************************************************************/
1445 static uint32 get_correct_cversion(struct pipes_struct *p,
1446 const char *architecture,
1447 const char *driverpath_in,
1448 WERROR *perr)
1450 int cversion;
1451 NTSTATUS nt_status;
1452 struct smb_filename *smb_fname = NULL;
1453 char *driverpath = NULL;
1454 files_struct *fsp = NULL;
1455 connection_struct *conn = NULL;
1456 NTSTATUS status;
1457 char *oldcwd;
1458 fstring printdollar;
1459 int printdollar_snum;
1461 *perr = WERR_INVALID_PARAM;
1463 /* If architecture is Windows 95/98/ME, the version is always 0. */
1464 if (strcmp(architecture, SPL_ARCH_WIN40) == 0) {
1465 DEBUG(10,("get_correct_cversion: Driver is Win9x, cversion = 0\n"));
1466 *perr = WERR_OK;
1467 return 0;
1470 /* If architecture is Windows x64, the version is always 3. */
1471 if (strcmp(architecture, SPL_ARCH_X64) == 0) {
1472 DEBUG(10,("get_correct_cversion: Driver is x64, cversion = 3\n"));
1473 *perr = WERR_OK;
1474 return 3;
1477 fstrcpy(printdollar, "print$");
1479 printdollar_snum = find_service(printdollar);
1480 if (printdollar_snum == -1) {
1481 *perr = WERR_NO_SUCH_SHARE;
1482 return -1;
1485 nt_status = create_conn_struct(talloc_tos(), &conn, printdollar_snum,
1486 lp_pathname(printdollar_snum),
1487 p->server_info, &oldcwd);
1488 if (!NT_STATUS_IS_OK(nt_status)) {
1489 DEBUG(0,("get_correct_cversion: create_conn_struct "
1490 "returned %s\n", nt_errstr(nt_status)));
1491 *perr = ntstatus_to_werror(nt_status);
1492 return -1;
1495 /* Open the driver file (Portable Executable format) and determine the
1496 * deriver the cversion. */
1497 driverpath = talloc_asprintf(talloc_tos(),
1498 "%s/%s",
1499 architecture,
1500 driverpath_in);
1501 if (!driverpath) {
1502 *perr = WERR_NOMEM;
1503 goto error_exit;
1506 nt_status = driver_unix_convert(conn, driverpath, &smb_fname);
1507 if (!NT_STATUS_IS_OK(nt_status)) {
1508 *perr = ntstatus_to_werror(nt_status);
1509 goto error_exit;
1512 nt_status = vfs_file_exist(conn, smb_fname);
1513 if (!NT_STATUS_IS_OK(nt_status)) {
1514 *perr = WERR_BADFILE;
1515 goto error_exit;
1518 status = SMB_VFS_CREATE_FILE(
1519 conn, /* conn */
1520 NULL, /* req */
1521 0, /* root_dir_fid */
1522 smb_fname, /* fname */
1523 FILE_GENERIC_READ, /* access_mask */
1524 FILE_SHARE_READ | FILE_SHARE_WRITE, /* share_access */
1525 FILE_OPEN, /* create_disposition*/
1526 0, /* create_options */
1527 FILE_ATTRIBUTE_NORMAL, /* file_attributes */
1528 INTERNAL_OPEN_ONLY, /* oplock_request */
1529 0, /* private_flags */
1530 0, /* allocation_size */
1531 NULL, /* sd */
1532 NULL, /* ea_list */
1533 &fsp, /* result */
1534 NULL); /* pinfo */
1536 if (!NT_STATUS_IS_OK(status)) {
1537 DEBUG(3,("get_correct_cversion: Can't open file [%s], errno = "
1538 "%d\n", smb_fname_str_dbg(smb_fname), errno));
1539 *perr = WERR_ACCESS_DENIED;
1540 goto error_exit;
1541 } else {
1542 uint32 major;
1543 uint32 minor;
1544 int ret;
1546 ret = get_file_version(fsp, smb_fname->base_name, &major, &minor);
1547 if (ret == -1) goto error_exit;
1549 if (!ret) {
1550 DEBUG(6,("get_correct_cversion: Version info not "
1551 "found [%s]\n",
1552 smb_fname_str_dbg(smb_fname)));
1553 goto error_exit;
1557 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1558 * for more details. Version in this case is not just the version of the
1559 * file, but the version in the sense of kernal mode (2) vs. user mode
1560 * (3) drivers. Other bits of the version fields are the version info.
1561 * JRR 010716
1563 cversion = major & 0x0000ffff;
1564 switch (cversion) {
1565 case 2: /* WinNT drivers */
1566 case 3: /* Win2K drivers */
1567 break;
1569 default:
1570 DEBUG(6,("get_correct_cversion: cversion "
1571 "invalid [%s] cversion = %d\n",
1572 smb_fname_str_dbg(smb_fname),
1573 cversion));
1574 goto error_exit;
1577 DEBUG(10,("get_correct_cversion: Version info found [%s] major"
1578 " = 0x%x minor = 0x%x\n",
1579 smb_fname_str_dbg(smb_fname), major, minor));
1582 DEBUG(10,("get_correct_cversion: Driver file [%s] cversion = %d\n",
1583 smb_fname_str_dbg(smb_fname), cversion));
1585 goto done;
1587 error_exit:
1588 cversion = -1;
1589 done:
1590 TALLOC_FREE(smb_fname);
1591 if (fsp != NULL) {
1592 close_file(NULL, fsp, NORMAL_CLOSE);
1594 if (conn != NULL) {
1595 vfs_ChDir(conn, oldcwd);
1596 conn_free(conn);
1598 if (cversion != -1) {
1599 *perr = WERR_OK;
1601 return cversion;
1604 /****************************************************************************
1605 ****************************************************************************/
1607 #define strip_driver_path(_mem_ctx, _element) do { \
1608 if (_element && ((_p = strrchr((_element), '\\')) != NULL)) { \
1609 (_element) = talloc_asprintf((_mem_ctx), "%s", _p+1); \
1610 W_ERROR_HAVE_NO_MEMORY((_element)); \
1612 } while (0);
1614 static WERROR clean_up_driver_struct_level(TALLOC_CTX *mem_ctx,
1615 struct pipes_struct *rpc_pipe,
1616 const char *architecture,
1617 const char **driver_path,
1618 const char **data_file,
1619 const char **config_file,
1620 const char **help_file,
1621 struct spoolss_StringArray *dependent_files,
1622 uint32_t *version)
1624 const char *short_architecture;
1625 int i;
1626 WERROR err;
1627 char *_p;
1629 if (!*driver_path || !*data_file || !*config_file) {
1630 return WERR_INVALID_PARAM;
1633 /* clean up the driver name.
1634 * we can get .\driver.dll
1635 * or worse c:\windows\system\driver.dll !
1637 /* using an intermediate string to not have overlaping memcpy()'s */
1639 strip_driver_path(mem_ctx, *driver_path);
1640 strip_driver_path(mem_ctx, *data_file);
1641 strip_driver_path(mem_ctx, *config_file);
1642 if (help_file) {
1643 strip_driver_path(mem_ctx, *help_file);
1646 if (dependent_files && dependent_files->string) {
1647 for (i=0; dependent_files->string[i]; i++) {
1648 strip_driver_path(mem_ctx, dependent_files->string[i]);
1652 short_architecture = get_short_archi(architecture);
1653 if (!short_architecture) {
1654 return WERR_UNKNOWN_PRINTER_DRIVER;
1657 /* jfm:7/16/2000 the client always sends the cversion=0.
1658 * The server should check which version the driver is by reading
1659 * the PE header of driver->driverpath.
1661 * For Windows 95/98 the version is 0 (so the value sent is correct)
1662 * For Windows NT (the architecture doesn't matter)
1663 * NT 3.1: cversion=0
1664 * NT 3.5/3.51: cversion=1
1665 * NT 4: cversion=2
1666 * NT2K: cversion=3
1669 *version = get_correct_cversion(rpc_pipe, short_architecture,
1670 *driver_path, &err);
1671 if (*version == -1) {
1672 return err;
1675 return WERR_OK;
1678 /****************************************************************************
1679 ****************************************************************************/
1681 WERROR clean_up_driver_struct(struct pipes_struct *rpc_pipe,
1682 struct spoolss_AddDriverInfoCtr *r)
1684 switch (r->level) {
1685 case 3:
1686 return clean_up_driver_struct_level(r, rpc_pipe,
1687 r->info.info3->architecture,
1688 &r->info.info3->driver_path,
1689 &r->info.info3->data_file,
1690 &r->info.info3->config_file,
1691 &r->info.info3->help_file,
1692 r->info.info3->dependent_files,
1693 &r->info.info3->version);
1694 case 6:
1695 return clean_up_driver_struct_level(r, rpc_pipe,
1696 r->info.info6->architecture,
1697 &r->info.info6->driver_path,
1698 &r->info.info6->data_file,
1699 &r->info.info6->config_file,
1700 &r->info.info6->help_file,
1701 r->info.info6->dependent_files,
1702 &r->info.info6->version);
1703 default:
1704 return WERR_NOT_SUPPORTED;
1708 /****************************************************************************
1709 This function sucks and should be replaced. JRA.
1710 ****************************************************************************/
1712 static void convert_level_6_to_level3(struct spoolss_AddDriverInfo3 *dst,
1713 const struct spoolss_AddDriverInfo6 *src)
1715 dst->version = src->version;
1717 dst->driver_name = src->driver_name;
1718 dst->architecture = src->architecture;
1719 dst->driver_path = src->driver_path;
1720 dst->data_file = src->data_file;
1721 dst->config_file = src->config_file;
1722 dst->help_file = src->help_file;
1723 dst->monitor_name = src->monitor_name;
1724 dst->default_datatype = src->default_datatype;
1725 dst->_ndr_size_dependent_files = src->_ndr_size_dependent_files;
1726 dst->dependent_files = src->dependent_files;
1729 /****************************************************************************
1730 This function sucks and should be replaced. JRA.
1731 ****************************************************************************/
1733 static void convert_level_8_to_level3(TALLOC_CTX *mem_ctx,
1734 struct spoolss_AddDriverInfo3 *dst,
1735 const struct spoolss_DriverInfo8 *src)
1737 dst->version = src->version;
1738 dst->driver_name = src->driver_name;
1739 dst->architecture = src->architecture;
1740 dst->driver_path = src->driver_path;
1741 dst->data_file = src->data_file;
1742 dst->config_file = src->config_file;
1743 dst->help_file = src->help_file;
1744 dst->monitor_name = src->monitor_name;
1745 dst->default_datatype = src->default_datatype;
1746 if (src->dependent_files) {
1747 dst->dependent_files = talloc_zero(mem_ctx, struct spoolss_StringArray);
1748 if (!dst->dependent_files) return;
1749 dst->dependent_files->string = src->dependent_files;
1750 } else {
1751 dst->dependent_files = NULL;
1755 /****************************************************************************
1756 ****************************************************************************/
1758 static WERROR move_driver_file_to_download_area(TALLOC_CTX *mem_ctx,
1759 connection_struct *conn,
1760 const char *driver_file,
1761 const char *short_architecture,
1762 uint32_t driver_version,
1763 uint32_t version)
1765 struct smb_filename *smb_fname_old = NULL;
1766 struct smb_filename *smb_fname_new = NULL;
1767 char *old_name = NULL;
1768 char *new_name = NULL;
1769 NTSTATUS status;
1770 WERROR ret;
1772 old_name = talloc_asprintf(mem_ctx, "%s/%s",
1773 short_architecture, driver_file);
1774 W_ERROR_HAVE_NO_MEMORY(old_name);
1776 new_name = talloc_asprintf(mem_ctx, "%s/%d/%s",
1777 short_architecture, driver_version, driver_file);
1778 if (new_name == NULL) {
1779 TALLOC_FREE(old_name);
1780 return WERR_NOMEM;
1783 if (version != -1 && (version = file_version_is_newer(conn, old_name, new_name)) > 0) {
1785 status = driver_unix_convert(conn, old_name, &smb_fname_old);
1786 if (!NT_STATUS_IS_OK(status)) {
1787 ret = WERR_NOMEM;
1788 goto out;
1791 /* Setup a synthetic smb_filename struct */
1792 smb_fname_new = TALLOC_ZERO_P(mem_ctx, struct smb_filename);
1793 if (!smb_fname_new) {
1794 ret = WERR_NOMEM;
1795 goto out;
1798 smb_fname_new->base_name = new_name;
1800 DEBUG(10,("move_driver_file_to_download_area: copying '%s' to "
1801 "'%s'\n", smb_fname_old->base_name,
1802 smb_fname_new->base_name));
1804 status = copy_file(mem_ctx, conn, smb_fname_old, smb_fname_new,
1805 OPENX_FILE_EXISTS_TRUNCATE |
1806 OPENX_FILE_CREATE_IF_NOT_EXIST,
1807 0, false);
1809 if (!NT_STATUS_IS_OK(status)) {
1810 DEBUG(0,("move_driver_file_to_download_area: Unable "
1811 "to rename [%s] to [%s]: %s\n",
1812 smb_fname_old->base_name, new_name,
1813 nt_errstr(status)));
1814 ret = WERR_ACCESS_DENIED;
1815 goto out;
1819 ret = WERR_OK;
1820 out:
1821 TALLOC_FREE(smb_fname_old);
1822 TALLOC_FREE(smb_fname_new);
1823 return ret;
1826 WERROR move_driver_to_download_area(struct pipes_struct *p,
1827 struct spoolss_AddDriverInfoCtr *r,
1828 WERROR *perr)
1830 struct spoolss_AddDriverInfo3 *driver;
1831 struct spoolss_AddDriverInfo3 converted_driver;
1832 const char *short_architecture;
1833 struct smb_filename *smb_dname = NULL;
1834 char *new_dir = NULL;
1835 connection_struct *conn = NULL;
1836 NTSTATUS nt_status;
1837 int i;
1838 TALLOC_CTX *ctx = talloc_tos();
1839 int ver = 0;
1840 char *oldcwd;
1841 fstring printdollar;
1842 int printdollar_snum;
1844 *perr = WERR_OK;
1846 switch (r->level) {
1847 case 3:
1848 driver = r->info.info3;
1849 break;
1850 case 6:
1851 convert_level_6_to_level3(&converted_driver, r->info.info6);
1852 driver = &converted_driver;
1853 break;
1854 default:
1855 DEBUG(0,("move_driver_to_download_area: Unknown info level (%u)\n", (unsigned int)r->level));
1856 return WERR_UNKNOWN_LEVEL;
1859 short_architecture = get_short_archi(driver->architecture);
1860 if (!short_architecture) {
1861 return WERR_UNKNOWN_PRINTER_DRIVER;
1864 fstrcpy(printdollar, "print$");
1866 printdollar_snum = find_service(printdollar);
1867 if (printdollar_snum == -1) {
1868 *perr = WERR_NO_SUCH_SHARE;
1869 return WERR_NO_SUCH_SHARE;
1872 nt_status = create_conn_struct(talloc_tos(), &conn, printdollar_snum,
1873 lp_pathname(printdollar_snum),
1874 p->server_info, &oldcwd);
1875 if (!NT_STATUS_IS_OK(nt_status)) {
1876 DEBUG(0,("move_driver_to_download_area: create_conn_struct "
1877 "returned %s\n", nt_errstr(nt_status)));
1878 *perr = ntstatus_to_werror(nt_status);
1879 return *perr;
1882 new_dir = talloc_asprintf(ctx,
1883 "%s/%d",
1884 short_architecture,
1885 driver->version);
1886 if (!new_dir) {
1887 *perr = WERR_NOMEM;
1888 goto err_exit;
1890 nt_status = driver_unix_convert(conn, new_dir, &smb_dname);
1891 if (!NT_STATUS_IS_OK(nt_status)) {
1892 *perr = WERR_NOMEM;
1893 goto err_exit;
1896 DEBUG(5,("Creating first directory: %s\n", smb_dname->base_name));
1898 create_directory(conn, NULL, smb_dname);
1900 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1901 * listed for this driver which has already been moved, skip it (note:
1902 * drivers may list the same file name several times. Then check if the
1903 * file already exists in archi\version\, if so, check that the version
1904 * info (or time stamps if version info is unavailable) is newer (or the
1905 * date is later). If it is, move it to archi\version\filexxx.yyy.
1906 * Otherwise, delete the file.
1908 * If a file is not moved to archi\version\ because of an error, all the
1909 * rest of the 'unmoved' driver files are removed from archi\. If one or
1910 * more of the driver's files was already moved to archi\version\, it
1911 * potentially leaves the driver in a partially updated state. Version
1912 * trauma will most likely occur if an client attempts to use any printer
1913 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1914 * done is appropriate... later JRR
1917 DEBUG(5,("Moving files now !\n"));
1919 if (driver->driver_path && strlen(driver->driver_path)) {
1921 *perr = move_driver_file_to_download_area(ctx,
1922 conn,
1923 driver->driver_path,
1924 short_architecture,
1925 driver->version,
1926 ver);
1927 if (!W_ERROR_IS_OK(*perr)) {
1928 if (W_ERROR_EQUAL(*perr, WERR_ACCESS_DENIED)) {
1929 ver = -1;
1931 goto err_exit;
1935 if (driver->data_file && strlen(driver->data_file)) {
1936 if (!strequal(driver->data_file, driver->driver_path)) {
1938 *perr = move_driver_file_to_download_area(ctx,
1939 conn,
1940 driver->data_file,
1941 short_architecture,
1942 driver->version,
1943 ver);
1944 if (!W_ERROR_IS_OK(*perr)) {
1945 if (W_ERROR_EQUAL(*perr, WERR_ACCESS_DENIED)) {
1946 ver = -1;
1948 goto err_exit;
1953 if (driver->config_file && strlen(driver->config_file)) {
1954 if (!strequal(driver->config_file, driver->driver_path) &&
1955 !strequal(driver->config_file, driver->data_file)) {
1957 *perr = move_driver_file_to_download_area(ctx,
1958 conn,
1959 driver->config_file,
1960 short_architecture,
1961 driver->version,
1962 ver);
1963 if (!W_ERROR_IS_OK(*perr)) {
1964 if (W_ERROR_EQUAL(*perr, WERR_ACCESS_DENIED)) {
1965 ver = -1;
1967 goto err_exit;
1972 if (driver->help_file && strlen(driver->help_file)) {
1973 if (!strequal(driver->help_file, driver->driver_path) &&
1974 !strequal(driver->help_file, driver->data_file) &&
1975 !strequal(driver->help_file, driver->config_file)) {
1977 *perr = move_driver_file_to_download_area(ctx,
1978 conn,
1979 driver->help_file,
1980 short_architecture,
1981 driver->version,
1982 ver);
1983 if (!W_ERROR_IS_OK(*perr)) {
1984 if (W_ERROR_EQUAL(*perr, WERR_ACCESS_DENIED)) {
1985 ver = -1;
1987 goto err_exit;
1992 if (driver->dependent_files && driver->dependent_files->string) {
1993 for (i=0; driver->dependent_files->string[i]; i++) {
1994 if (!strequal(driver->dependent_files->string[i], driver->driver_path) &&
1995 !strequal(driver->dependent_files->string[i], driver->data_file) &&
1996 !strequal(driver->dependent_files->string[i], driver->config_file) &&
1997 !strequal(driver->dependent_files->string[i], driver->help_file)) {
1998 int j;
1999 for (j=0; j < i; j++) {
2000 if (strequal(driver->dependent_files->string[i], driver->dependent_files->string[j])) {
2001 goto NextDriver;
2005 *perr = move_driver_file_to_download_area(ctx,
2006 conn,
2007 driver->dependent_files->string[i],
2008 short_architecture,
2009 driver->version,
2010 ver);
2011 if (!W_ERROR_IS_OK(*perr)) {
2012 if (W_ERROR_EQUAL(*perr, WERR_ACCESS_DENIED)) {
2013 ver = -1;
2015 goto err_exit;
2018 NextDriver: ;
2022 err_exit:
2023 TALLOC_FREE(smb_dname);
2025 if (conn != NULL) {
2026 vfs_ChDir(conn, oldcwd);
2027 conn_free(conn);
2030 if (W_ERROR_EQUAL(*perr, WERR_OK)) {
2031 return WERR_OK;
2033 if (ver == -1) {
2034 return WERR_UNKNOWN_PRINTER_DRIVER;
2036 return (*perr);
2039 /****************************************************************************
2040 ****************************************************************************/
2042 static uint32 add_a_printer_driver_3(struct spoolss_AddDriverInfo3 *driver)
2044 TALLOC_CTX *ctx = talloc_tos();
2045 int len, buflen;
2046 const char *architecture;
2047 char *directory = NULL;
2048 char *key = NULL;
2049 uint8 *buf;
2050 int i, ret;
2051 TDB_DATA dbuf;
2053 architecture = get_short_archi(driver->architecture);
2054 if (!architecture) {
2055 return (uint32)-1;
2058 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
2059 * \\server is added in the rpc server layer.
2060 * It does make sense to NOT store the server's name in the printer TDB.
2063 directory = talloc_asprintf(ctx, "\\print$\\%s\\%d\\",
2064 architecture, driver->version);
2065 if (!directory) {
2066 return (uint32)-1;
2069 #define gen_full_driver_unc_path(ctx, directory, file) \
2070 do { \
2071 if (file && strlen(file)) { \
2072 file = talloc_asprintf(ctx, "%s%s", directory, file); \
2073 } else { \
2074 file = talloc_strdup(ctx, ""); \
2076 if (!file) { \
2077 return (uint32_t)-1; \
2079 } while (0);
2081 /* .inf files do not always list a file for each of the four standard files.
2082 * Don't prepend a path to a null filename, or client claims:
2083 * "The server on which the printer resides does not have a suitable
2084 * <printer driver name> printer driver installed. Click OK if you
2085 * wish to install the driver on your local machine."
2088 gen_full_driver_unc_path(ctx, directory, driver->driver_path);
2089 gen_full_driver_unc_path(ctx, directory, driver->data_file);
2090 gen_full_driver_unc_path(ctx, directory, driver->config_file);
2091 gen_full_driver_unc_path(ctx, directory, driver->help_file);
2093 if (driver->dependent_files && driver->dependent_files->string) {
2094 for (i=0; driver->dependent_files->string[i]; i++) {
2095 gen_full_driver_unc_path(ctx, directory,
2096 driver->dependent_files->string[i]);
2100 key = talloc_asprintf(ctx, "%s%s/%d/%s", DRIVERS_PREFIX,
2101 architecture, driver->version, driver->driver_name);
2102 if (!key) {
2103 return (uint32)-1;
2106 DEBUG(5,("add_a_printer_driver_3: Adding driver with key %s\n", key ));
2108 buf = NULL;
2109 len = buflen = 0;
2111 again:
2112 len = 0;
2113 len += tdb_pack(buf+len, buflen-len, "dffffffff",
2114 driver->version,
2115 driver->driver_name,
2116 driver->architecture,
2117 driver->driver_path,
2118 driver->data_file,
2119 driver->config_file,
2120 driver->help_file,
2121 driver->monitor_name ? driver->monitor_name : "",
2122 driver->default_datatype ? driver->default_datatype : "");
2124 if (driver->dependent_files && driver->dependent_files->string) {
2125 for (i=0; driver->dependent_files->string[i]; i++) {
2126 len += tdb_pack(buf+len, buflen-len, "f",
2127 driver->dependent_files->string[i]);
2131 if (len != buflen) {
2132 buf = (uint8 *)SMB_REALLOC(buf, len);
2133 if (!buf) {
2134 DEBUG(0,("add_a_printer_driver_3: failed to enlarge buffer\n!"));
2135 ret = -1;
2136 goto done;
2138 buflen = len;
2139 goto again;
2142 dbuf.dptr = buf;
2143 dbuf.dsize = len;
2145 ret = tdb_store_bystring(tdb_drivers, key, dbuf, TDB_REPLACE);
2147 done:
2148 if (ret)
2149 DEBUG(0,("add_a_printer_driver_3: Adding driver with key %s failed.\n", key ));
2151 SAFE_FREE(buf);
2152 return ret;
2155 /****************************************************************************
2156 ****************************************************************************/
2158 static uint32_t add_a_printer_driver_8(struct spoolss_DriverInfo8 *driver)
2160 TALLOC_CTX *mem_ctx = talloc_new(talloc_tos());
2161 struct spoolss_AddDriverInfo3 info3;
2162 uint32_t ret;
2164 convert_level_8_to_level3(mem_ctx, &info3, driver);
2166 ret = add_a_printer_driver_3(&info3);
2167 talloc_free(mem_ctx);
2169 return ret;
2172 /****************************************************************************
2173 ****************************************************************************/
2175 static WERROR get_a_printer_driver_3_default(TALLOC_CTX *mem_ctx,
2176 struct spoolss_DriverInfo3 *info,
2177 const char *driver, const char *arch)
2179 info->driver_name = talloc_strdup(mem_ctx, driver);
2180 if (!info->driver_name) {
2181 return WERR_NOMEM;
2184 info->default_datatype = talloc_strdup(mem_ctx, "RAW");
2185 if (!info->default_datatype) {
2186 return WERR_NOMEM;
2189 info->driver_path = talloc_strdup(mem_ctx, "");
2190 info->data_file = talloc_strdup(mem_ctx, "");
2191 info->config_file = talloc_strdup(mem_ctx, "");
2192 info->help_file = talloc_strdup(mem_ctx, "");
2193 if (!info->driver_path || !info->data_file || !info->config_file || !info->help_file) {
2194 return WERR_NOMEM;
2197 return WERR_OK;
2200 /****************************************************************************
2201 ****************************************************************************/
2203 static WERROR get_a_printer_driver_3(TALLOC_CTX *mem_ctx,
2204 struct spoolss_DriverInfo3 *driver,
2205 const char *drivername, const char *arch,
2206 uint32_t version)
2208 TDB_DATA dbuf;
2209 const char *architecture;
2210 int len = 0;
2211 int i;
2212 char *key = NULL;
2213 fstring name, driverpath, environment, datafile, configfile, helpfile, monitorname, defaultdatatype;
2215 architecture = get_short_archi(arch);
2216 if ( !architecture ) {
2217 return WERR_UNKNOWN_PRINTER_DRIVER;
2220 /* Windows 4.0 (i.e. win9x) should always use a version of 0 */
2222 if ( strcmp( architecture, SPL_ARCH_WIN40 ) == 0 )
2223 version = 0;
2225 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, drivername));
2227 if (asprintf(&key, "%s%s/%d/%s", DRIVERS_PREFIX,
2228 architecture, version, drivername) < 0) {
2229 return WERR_NOMEM;
2232 dbuf = tdb_fetch_bystring(tdb_drivers, key);
2233 if (!dbuf.dptr) {
2234 SAFE_FREE(key);
2235 return WERR_UNKNOWN_PRINTER_DRIVER;
2238 len += tdb_unpack(dbuf.dptr, dbuf.dsize, "dffffffff",
2239 &driver->version,
2240 name,
2241 environment,
2242 driverpath,
2243 datafile,
2244 configfile,
2245 helpfile,
2246 monitorname,
2247 defaultdatatype);
2249 driver->driver_name = talloc_strdup(mem_ctx, name);
2250 driver->architecture = talloc_strdup(mem_ctx, environment);
2251 driver->driver_path = talloc_strdup(mem_ctx, driverpath);
2252 driver->data_file = talloc_strdup(mem_ctx, datafile);
2253 driver->config_file = talloc_strdup(mem_ctx, configfile);
2254 driver->help_file = talloc_strdup(mem_ctx, helpfile);
2255 driver->monitor_name = talloc_strdup(mem_ctx, monitorname);
2256 driver->default_datatype = talloc_strdup(mem_ctx, defaultdatatype);
2258 i=0;
2260 while (len < dbuf.dsize) {
2262 fstring file;
2264 driver->dependent_files = talloc_realloc(mem_ctx, driver->dependent_files, const char *, i+2);
2265 if (!driver->dependent_files ) {
2266 DEBUG(0,("get_a_printer_driver_3: failed to enlarge buffer!\n"));
2267 break;
2270 len += tdb_unpack(dbuf.dptr+len, dbuf.dsize-len, "f",
2271 &file);
2273 driver->dependent_files[i] = talloc_strdup(mem_ctx, file);
2275 i++;
2278 if (driver->dependent_files)
2279 driver->dependent_files[i] = NULL;
2281 SAFE_FREE(dbuf.dptr);
2282 SAFE_FREE(key);
2284 if (len != dbuf.dsize) {
2285 return get_a_printer_driver_3_default(mem_ctx, driver, drivername, arch);
2288 return WERR_OK;
2291 /****************************************************************************
2292 ****************************************************************************/
2293 int pack_devicemode(NT_DEVICEMODE *nt_devmode, uint8 *buf, int buflen)
2295 int len = 0;
2297 len += tdb_pack(buf+len, buflen-len, "p", nt_devmode);
2299 if (!nt_devmode)
2300 return len;
2302 len += tdb_pack(buf+len, buflen-len, "ffwwwwwwwwwwwwwwwwwwddddddddddddddp",
2303 nt_devmode->devicename,
2304 nt_devmode->formname,
2306 nt_devmode->specversion,
2307 nt_devmode->driverversion,
2308 nt_devmode->size,
2309 nt_devmode->driverextra,
2310 nt_devmode->orientation,
2311 nt_devmode->papersize,
2312 nt_devmode->paperlength,
2313 nt_devmode->paperwidth,
2314 nt_devmode->scale,
2315 nt_devmode->copies,
2316 nt_devmode->defaultsource,
2317 nt_devmode->printquality,
2318 nt_devmode->color,
2319 nt_devmode->duplex,
2320 nt_devmode->yresolution,
2321 nt_devmode->ttoption,
2322 nt_devmode->collate,
2323 nt_devmode->logpixels,
2325 nt_devmode->fields,
2326 nt_devmode->bitsperpel,
2327 nt_devmode->pelswidth,
2328 nt_devmode->pelsheight,
2329 nt_devmode->displayflags,
2330 nt_devmode->displayfrequency,
2331 nt_devmode->icmmethod,
2332 nt_devmode->icmintent,
2333 nt_devmode->mediatype,
2334 nt_devmode->dithertype,
2335 nt_devmode->reserved1,
2336 nt_devmode->reserved2,
2337 nt_devmode->panningwidth,
2338 nt_devmode->panningheight,
2339 nt_devmode->nt_dev_private);
2341 if (nt_devmode->nt_dev_private) {
2342 len += tdb_pack(buf+len, buflen-len, "B",
2343 nt_devmode->driverextra,
2344 nt_devmode->nt_dev_private);
2347 DEBUG(8,("Packed devicemode [%s]\n", nt_devmode->formname));
2349 return len;
2352 /****************************************************************************
2353 Pack all values in all printer keys
2354 ***************************************************************************/
2356 static int pack_values(NT_PRINTER_DATA *data, uint8 *buf, int buflen)
2358 int len = 0;
2359 int i, j;
2360 struct regval_blob *val;
2361 struct regval_ctr *val_ctr;
2362 char *path = NULL;
2363 int num_values;
2365 if ( !data )
2366 return 0;
2368 /* loop over all keys */
2370 for ( i=0; i<data->num_keys; i++ ) {
2371 val_ctr = data->keys[i].values;
2372 num_values = regval_ctr_numvals( val_ctr );
2374 /* pack the keyname followed by a empty value */
2376 len += tdb_pack(buf+len, buflen-len, "pPdB",
2377 &data->keys[i].name,
2378 data->keys[i].name,
2379 REG_NONE,
2381 NULL);
2383 /* now loop over all values */
2385 for ( j=0; j<num_values; j++ ) {
2386 /* pathname should be stored as <key>\<value> */
2388 val = regval_ctr_specific_value( val_ctr, j );
2389 if (asprintf(&path, "%s\\%s",
2390 data->keys[i].name,
2391 regval_name(val)) < 0) {
2392 return -1;
2395 len += tdb_pack(buf+len, buflen-len, "pPdB",
2396 val,
2397 path,
2398 regval_type(val),
2399 regval_size(val),
2400 regval_data_p(val) );
2402 DEBUG(8,("specific: [%s], len: %d\n", regval_name(val), regval_size(val)));
2403 SAFE_FREE(path);
2408 /* terminator */
2410 len += tdb_pack(buf+len, buflen-len, "p", NULL);
2412 return len;
2416 /****************************************************************************
2417 Delete a printer - this just deletes the printer info file, any open
2418 handles are not affected.
2419 ****************************************************************************/
2421 uint32 del_a_printer(const char *sharename)
2423 TDB_DATA kbuf;
2424 char *printdb_path = NULL;
2425 TALLOC_CTX *ctx = talloc_tos();
2427 kbuf = make_printer_tdbkey(ctx, sharename);
2428 tdb_delete(tdb_printers, kbuf);
2430 kbuf= make_printers_secdesc_tdbkey(ctx, sharename);
2431 tdb_delete(tdb_printers, kbuf);
2433 close_all_print_db();
2435 if (geteuid() == sec_initial_uid()) {
2436 if (asprintf(&printdb_path, "%s%s.tdb",
2437 cache_path("printing/"),
2438 sharename) < 0) {
2439 return (uint32)-1;
2441 unlink(printdb_path);
2442 SAFE_FREE(printdb_path);
2445 return 0;
2448 /****************************************************************************
2449 ****************************************************************************/
2450 static WERROR update_a_printer_2(NT_PRINTER_INFO_LEVEL_2 *info)
2452 uint8 *buf;
2453 int buflen, len;
2454 int retlen;
2455 WERROR ret;
2456 TDB_DATA kbuf, dbuf;
2459 * in addprinter: no servername and the printer is the name
2460 * in setprinter: servername is \\server
2461 * and printer is \\server\\printer
2463 * Samba manages only local printers.
2464 * we currently don't support things like i
2465 * path=\\other_server\printer
2467 * We only store the printername, not \\server\printername
2470 if ( info->servername[0] != '\0' ) {
2471 trim_string(info->printername, info->servername, NULL);
2472 trim_char(info->printername, '\\', '\0');
2473 info->servername[0]='\0';
2477 * JFM: one day I'll forget.
2478 * below that's info->portname because that's the SAMBA sharename
2479 * and I made NT 'thinks' it's the portname
2480 * the info->sharename is the thing you can name when you add a printer
2481 * that's the short-name when you create shared printer for 95/98
2482 * So I've made a limitation in SAMBA: you can only have 1 printer model
2483 * behind a SAMBA share.
2486 buf = NULL;
2487 buflen = 0;
2489 again:
2490 len = 0;
2491 len += tdb_pack(buf+len, buflen-len, "dddddddddddfffffPfffff",
2492 info->attributes,
2493 info->priority,
2494 info->default_priority,
2495 info->starttime,
2496 info->untiltime,
2497 info->status,
2498 info->cjobs,
2499 info->averageppm,
2500 info->changeid,
2501 info->c_setprinter,
2502 info->setuptime,
2503 info->servername,
2504 info->printername,
2505 info->sharename,
2506 info->portname,
2507 info->drivername,
2508 info->comment,
2509 info->location,
2510 info->sepfile,
2511 info->printprocessor,
2512 info->datatype,
2513 info->parameters);
2515 len += pack_devicemode(info->devmode, buf+len, buflen-len);
2516 retlen = pack_values( info->data, buf+len, buflen-len );
2517 if (retlen == -1) {
2518 ret = WERR_NOMEM;
2519 goto done;
2521 len += retlen;
2523 if (buflen != len) {
2524 buf = (uint8 *)SMB_REALLOC(buf, len);
2525 if (!buf) {
2526 DEBUG(0,("update_a_printer_2: failed to enlarge buffer!\n"));
2527 ret = WERR_NOMEM;
2528 goto done;
2530 buflen = len;
2531 goto again;
2534 kbuf = make_printer_tdbkey(talloc_tos(), info->sharename );
2536 dbuf.dptr = buf;
2537 dbuf.dsize = len;
2539 ret = (tdb_store(tdb_printers, kbuf, dbuf, TDB_REPLACE) == 0? WERR_OK : WERR_NOMEM);
2541 done:
2542 if (!W_ERROR_IS_OK(ret))
2543 DEBUG(8, ("error updating printer to tdb on disk\n"));
2545 SAFE_FREE(buf);
2547 DEBUG(8,("packed printer [%s] with driver [%s] portname=[%s] len=%d\n",
2548 info->sharename, info->drivername, info->portname, len));
2550 return ret;
2554 /****************************************************************************
2555 Malloc and return an NT devicemode.
2556 ****************************************************************************/
2558 NT_DEVICEMODE *construct_nt_devicemode(const fstring default_devicename)
2561 char adevice[MAXDEVICENAME];
2562 NT_DEVICEMODE *nt_devmode = SMB_MALLOC_P(NT_DEVICEMODE);
2564 if (nt_devmode == NULL) {
2565 DEBUG(0,("construct_nt_devicemode: malloc fail.\n"));
2566 return NULL;
2569 ZERO_STRUCTP(nt_devmode);
2571 slprintf(adevice, sizeof(adevice), "%s", default_devicename);
2572 fstrcpy(nt_devmode->devicename, adevice);
2574 fstrcpy(nt_devmode->formname, "Letter");
2576 nt_devmode->specversion = DMSPEC_NT4_AND_ABOVE;
2577 nt_devmode->driverversion = 0x0400;
2578 nt_devmode->size = 0x00DC;
2579 nt_devmode->driverextra = 0x0000;
2580 nt_devmode->fields = DEVMODE_FORMNAME |
2581 DEVMODE_TTOPTION |
2582 DEVMODE_PRINTQUALITY |
2583 DEVMODE_DEFAULTSOURCE |
2584 DEVMODE_COPIES |
2585 DEVMODE_SCALE |
2586 DEVMODE_PAPERSIZE |
2587 DEVMODE_ORIENTATION;
2588 nt_devmode->orientation = DMORIENT_PORTRAIT;
2589 nt_devmode->papersize = DMPAPER_LETTER;
2590 nt_devmode->paperlength = 0;
2591 nt_devmode->paperwidth = 0;
2592 nt_devmode->scale = 0x64;
2593 nt_devmode->copies = 1;
2594 nt_devmode->defaultsource = DMBIN_FORMSOURCE;
2595 nt_devmode->printquality = DMRES_HIGH; /* 0x0258 */
2596 nt_devmode->color = DMRES_MONOCHROME;
2597 nt_devmode->duplex = DMDUP_SIMPLEX;
2598 nt_devmode->yresolution = 0;
2599 nt_devmode->ttoption = DMTT_SUBDEV;
2600 nt_devmode->collate = DMCOLLATE_FALSE;
2601 nt_devmode->icmmethod = 0;
2602 nt_devmode->icmintent = 0;
2603 nt_devmode->mediatype = 0;
2604 nt_devmode->dithertype = 0;
2606 /* non utilisés par un driver d'imprimante */
2607 nt_devmode->logpixels = 0;
2608 nt_devmode->bitsperpel = 0;
2609 nt_devmode->pelswidth = 0;
2610 nt_devmode->pelsheight = 0;
2611 nt_devmode->displayflags = 0;
2612 nt_devmode->displayfrequency = 0;
2613 nt_devmode->reserved1 = 0;
2614 nt_devmode->reserved2 = 0;
2615 nt_devmode->panningwidth = 0;
2616 nt_devmode->panningheight = 0;
2618 nt_devmode->nt_dev_private = NULL;
2619 return nt_devmode;
2622 /****************************************************************************
2623 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2624 ****************************************************************************/
2626 void free_nt_devicemode(NT_DEVICEMODE **devmode_ptr)
2628 NT_DEVICEMODE *nt_devmode = *devmode_ptr;
2630 if(nt_devmode == NULL)
2631 return;
2633 DEBUG(106,("free_nt_devicemode: deleting DEVMODE\n"));
2635 SAFE_FREE(nt_devmode->nt_dev_private);
2636 SAFE_FREE(*devmode_ptr);
2639 /****************************************************************************
2640 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2641 ****************************************************************************/
2643 static void free_nt_printer_info_level_2(NT_PRINTER_INFO_LEVEL_2 **info_ptr)
2645 NT_PRINTER_INFO_LEVEL_2 *info = *info_ptr;
2647 if ( !info )
2648 return;
2650 free_nt_devicemode(&info->devmode);
2652 TALLOC_FREE( *info_ptr );
2656 /****************************************************************************
2657 ****************************************************************************/
2658 int unpack_devicemode(NT_DEVICEMODE **nt_devmode, const uint8 *buf, int buflen)
2660 int len = 0;
2661 int extra_len = 0;
2662 NT_DEVICEMODE devmode;
2664 ZERO_STRUCT(devmode);
2666 len += tdb_unpack(buf+len, buflen-len, "p", nt_devmode);
2668 if (!*nt_devmode) return len;
2670 len += tdb_unpack(buf+len, buflen-len, "ffwwwwwwwwwwwwwwwwwwddddddddddddddp",
2671 devmode.devicename,
2672 devmode.formname,
2674 &devmode.specversion,
2675 &devmode.driverversion,
2676 &devmode.size,
2677 &devmode.driverextra,
2678 &devmode.orientation,
2679 &devmode.papersize,
2680 &devmode.paperlength,
2681 &devmode.paperwidth,
2682 &devmode.scale,
2683 &devmode.copies,
2684 &devmode.defaultsource,
2685 &devmode.printquality,
2686 &devmode.color,
2687 &devmode.duplex,
2688 &devmode.yresolution,
2689 &devmode.ttoption,
2690 &devmode.collate,
2691 &devmode.logpixels,
2693 &devmode.fields,
2694 &devmode.bitsperpel,
2695 &devmode.pelswidth,
2696 &devmode.pelsheight,
2697 &devmode.displayflags,
2698 &devmode.displayfrequency,
2699 &devmode.icmmethod,
2700 &devmode.icmintent,
2701 &devmode.mediatype,
2702 &devmode.dithertype,
2703 &devmode.reserved1,
2704 &devmode.reserved2,
2705 &devmode.panningwidth,
2706 &devmode.panningheight,
2707 &devmode.nt_dev_private);
2709 if (devmode.nt_dev_private) {
2710 /* the len in tdb_unpack is an int value and
2711 * devmode.driverextra is only a short
2713 len += tdb_unpack(buf+len, buflen-len, "B", &extra_len, &devmode.nt_dev_private);
2714 devmode.driverextra=(uint16)extra_len;
2716 /* check to catch an invalid TDB entry so we don't segfault */
2717 if (devmode.driverextra == 0) {
2718 devmode.nt_dev_private = NULL;
2722 *nt_devmode = (NT_DEVICEMODE *)memdup(&devmode, sizeof(devmode));
2723 if (!*nt_devmode) {
2724 SAFE_FREE(devmode.nt_dev_private);
2725 return -1;
2728 DEBUG(8,("Unpacked devicemode [%s](%s)\n", devmode.devicename, devmode.formname));
2729 if (devmode.nt_dev_private)
2730 DEBUG(8,("with a private section of %d bytes\n", devmode.driverextra));
2732 return len;
2735 /****************************************************************************
2736 Allocate and initialize a new slot.
2737 ***************************************************************************/
2739 int add_new_printer_key( NT_PRINTER_DATA *data, const char *name )
2741 NT_PRINTER_KEY *d;
2742 int key_index;
2744 if ( !name || !data )
2745 return -1;
2747 /* allocate another slot in the NT_PRINTER_KEY array */
2749 if ( !(d = TALLOC_REALLOC_ARRAY( data, data->keys, NT_PRINTER_KEY, data->num_keys+1)) ) {
2750 DEBUG(0,("add_new_printer_key: Realloc() failed!\n"));
2751 return -1;
2754 data->keys = d;
2756 key_index = data->num_keys;
2758 /* initialze new key */
2760 data->keys[key_index].name = talloc_strdup( data, name );
2762 if ( !(data->keys[key_index].values = TALLOC_ZERO_P( data, struct regval_ctr )) )
2763 return -1;
2765 data->num_keys++;
2767 DEBUG(10,("add_new_printer_key: Inserted new data key [%s]\n", name ));
2769 return key_index;
2772 /****************************************************************************
2773 search for a registry key name in the existing printer data
2774 ***************************************************************************/
2776 int delete_printer_key( NT_PRINTER_DATA *data, const char *name )
2778 int i;
2780 for ( i=0; i<data->num_keys; i++ ) {
2781 if ( strequal( data->keys[i].name, name ) ) {
2783 /* cleanup memory */
2785 TALLOC_FREE( data->keys[i].name );
2786 TALLOC_FREE( data->keys[i].values );
2788 /* if not the end of the array, move remaining elements down one slot */
2790 data->num_keys--;
2791 if ( data->num_keys && (i < data->num_keys) )
2792 memmove( &data->keys[i], &data->keys[i+1], sizeof(NT_PRINTER_KEY)*(data->num_keys-i) );
2794 break;
2799 return data->num_keys;
2802 /****************************************************************************
2803 search for a registry key name in the existing printer data
2804 ***************************************************************************/
2806 int lookup_printerkey( NT_PRINTER_DATA *data, const char *name )
2808 int key_index = -1;
2809 int i;
2811 if ( !data || !name )
2812 return -1;
2814 DEBUG(12,("lookup_printerkey: Looking for [%s]\n", name));
2816 /* loop over all existing keys */
2818 for ( i=0; i<data->num_keys; i++ ) {
2819 if ( strequal(data->keys[i].name, name) ) {
2820 DEBUG(12,("lookup_printerkey: Found [%s]!\n", name));
2821 key_index = i;
2822 break;
2827 return key_index;
2830 /****************************************************************************
2831 ***************************************************************************/
2833 int get_printer_subkeys( NT_PRINTER_DATA *data, const char* key, fstring **subkeys )
2835 int i, j;
2836 int key_len;
2837 int num_subkeys = 0;
2838 char *p;
2839 fstring *subkeys_ptr = NULL;
2840 fstring subkeyname;
2842 *subkeys = NULL;
2844 if ( !data )
2845 return 0;
2847 if ( !key )
2848 return -1;
2850 /* special case of asking for the top level printer data registry key names */
2852 if ( strlen(key) == 0 ) {
2853 for ( i=0; i<data->num_keys; i++ ) {
2855 /* found a match, so allocate space and copy the name */
2857 if ( !(subkeys_ptr = SMB_REALLOC_ARRAY( subkeys_ptr, fstring, num_subkeys+2)) ) {
2858 DEBUG(0,("get_printer_subkeys: Realloc failed for [%d] entries!\n",
2859 num_subkeys+1));
2860 return -1;
2863 fstrcpy( subkeys_ptr[num_subkeys], data->keys[i].name );
2864 num_subkeys++;
2867 goto done;
2870 /* asking for the subkeys of some key */
2871 /* subkey paths are stored in the key name using '\' as the delimiter */
2873 for ( i=0; i<data->num_keys; i++ ) {
2874 if ( StrnCaseCmp(data->keys[i].name, key, strlen(key)) == 0 ) {
2876 /* if we found the exact key, then break */
2877 key_len = strlen( key );
2878 if ( strlen(data->keys[i].name) == key_len )
2879 break;
2881 /* get subkey path */
2883 p = data->keys[i].name + key_len;
2884 if ( *p == '\\' )
2885 p++;
2886 fstrcpy( subkeyname, p );
2887 if ( (p = strchr( subkeyname, '\\' )) )
2888 *p = '\0';
2890 /* don't add a key more than once */
2892 for ( j=0; j<num_subkeys; j++ ) {
2893 if ( strequal( subkeys_ptr[j], subkeyname ) )
2894 break;
2897 if ( j != num_subkeys )
2898 continue;
2900 /* found a match, so allocate space and copy the name */
2902 if ( !(subkeys_ptr = SMB_REALLOC_ARRAY( subkeys_ptr, fstring, num_subkeys+2)) ) {
2903 DEBUG(0,("get_printer_subkeys: Realloc failed for [%d] entries!\n",
2904 num_subkeys+1));
2905 return 0;
2908 fstrcpy( subkeys_ptr[num_subkeys], subkeyname );
2909 num_subkeys++;
2914 /* return error if the key was not found */
2916 if ( i == data->num_keys ) {
2917 SAFE_FREE(subkeys_ptr);
2918 return -1;
2921 done:
2922 /* tag off the end */
2924 if (num_subkeys)
2925 fstrcpy(subkeys_ptr[num_subkeys], "" );
2927 *subkeys = subkeys_ptr;
2929 return num_subkeys;
2932 #ifdef HAVE_ADS
2933 static void map_sz_into_ctr(struct regval_ctr *ctr, const char *val_name,
2934 const char *sz)
2936 regval_ctr_delvalue(ctr, val_name);
2937 regval_ctr_addvalue_sz(ctr, val_name, sz);
2940 static void map_dword_into_ctr(struct regval_ctr *ctr, const char *val_name,
2941 uint32 dword)
2943 regval_ctr_delvalue(ctr, val_name);
2944 regval_ctr_addvalue(ctr, val_name, REG_DWORD,
2945 (char *) &dword, sizeof(dword));
2948 static void map_bool_into_ctr(struct regval_ctr *ctr, const char *val_name,
2949 bool b)
2951 uint8 bin_bool = (b ? 1 : 0);
2952 regval_ctr_delvalue(ctr, val_name);
2953 regval_ctr_addvalue(ctr, val_name, REG_BINARY,
2954 (char *) &bin_bool, sizeof(bin_bool));
2957 static void map_single_multi_sz_into_ctr(struct regval_ctr *ctr, const char *val_name,
2958 const char *multi_sz)
2960 const char *a[2];
2962 a[0] = multi_sz;
2963 a[1] = NULL;
2965 regval_ctr_delvalue(ctr, val_name);
2966 regval_ctr_addvalue_multi_sz(ctr, val_name, a);
2969 /****************************************************************************
2970 * Map the NT_PRINTER_INFO_LEVEL_2 data into DsSpooler keys for publishing.
2972 * @param info2 NT_PRINTER_INFO_LEVEL_2 describing printer - gets modified
2973 * @return bool indicating success or failure
2974 ***************************************************************************/
2976 static bool map_nt_printer_info2_to_dsspooler(NT_PRINTER_INFO_LEVEL_2 *info2)
2978 struct regval_ctr *ctr = NULL;
2979 fstring longname;
2980 const char *dnssuffix;
2981 char *allocated_string = NULL;
2982 const char *ascii_str;
2983 int i;
2985 if ((i = lookup_printerkey(info2->data, SPOOL_DSSPOOLER_KEY)) < 0)
2986 i = add_new_printer_key(info2->data, SPOOL_DSSPOOLER_KEY);
2987 ctr = info2->data->keys[i].values;
2989 map_sz_into_ctr(ctr, SPOOL_REG_PRINTERNAME, info2->sharename);
2990 map_sz_into_ctr(ctr, SPOOL_REG_SHORTSERVERNAME, global_myname());
2992 /* we make the assumption that the netbios name is the same
2993 as the DNS name sinc ethe former will be what we used to
2994 join the domain */
2996 dnssuffix = get_mydnsdomname(talloc_tos());
2997 if (dnssuffix && *dnssuffix) {
2998 fstr_sprintf( longname, "%s.%s", global_myname(), dnssuffix );
2999 } else {
3000 fstrcpy( longname, global_myname() );
3003 map_sz_into_ctr(ctr, SPOOL_REG_SERVERNAME, longname);
3005 if (asprintf(&allocated_string, "\\\\%s\\%s", longname, info2->sharename) == -1) {
3006 return false;
3008 map_sz_into_ctr(ctr, SPOOL_REG_UNCNAME, allocated_string);
3009 SAFE_FREE(allocated_string);
3011 map_dword_into_ctr(ctr, SPOOL_REG_VERSIONNUMBER, 4);
3012 map_sz_into_ctr(ctr, SPOOL_REG_DRIVERNAME, info2->drivername);
3013 map_sz_into_ctr(ctr, SPOOL_REG_LOCATION, info2->location);
3014 map_sz_into_ctr(ctr, SPOOL_REG_DESCRIPTION, info2->comment);
3015 map_single_multi_sz_into_ctr(ctr, SPOOL_REG_PORTNAME, info2->portname);
3016 map_sz_into_ctr(ctr, SPOOL_REG_PRINTSEPARATORFILE, info2->sepfile);
3017 map_dword_into_ctr(ctr, SPOOL_REG_PRINTSTARTTIME, info2->starttime);
3018 map_dword_into_ctr(ctr, SPOOL_REG_PRINTENDTIME, info2->untiltime);
3019 map_dword_into_ctr(ctr, SPOOL_REG_PRIORITY, info2->priority);
3021 map_bool_into_ctr(ctr, SPOOL_REG_PRINTKEEPPRINTEDJOBS,
3022 (info2->attributes &
3023 PRINTER_ATTRIBUTE_KEEPPRINTEDJOBS));
3025 switch (info2->attributes & 0x3) {
3026 case 0:
3027 ascii_str = SPOOL_REGVAL_PRINTWHILESPOOLING;
3028 break;
3029 case 1:
3030 ascii_str = SPOOL_REGVAL_PRINTAFTERSPOOLED;
3031 break;
3032 case 2:
3033 ascii_str = SPOOL_REGVAL_PRINTDIRECT;
3034 break;
3035 default:
3036 ascii_str = "unknown";
3038 map_sz_into_ctr(ctr, SPOOL_REG_PRINTSPOOLING, ascii_str);
3040 return True;
3043 /*****************************************************************
3044 ****************************************************************/
3046 static void store_printer_guid(NT_PRINTER_INFO_LEVEL_2 *info2,
3047 struct GUID guid)
3049 int i;
3050 struct regval_ctr *ctr=NULL;
3052 /* find the DsSpooler key */
3053 if ((i = lookup_printerkey(info2->data, SPOOL_DSSPOOLER_KEY)) < 0)
3054 i = add_new_printer_key(info2->data, SPOOL_DSSPOOLER_KEY);
3055 ctr = info2->data->keys[i].values;
3057 regval_ctr_delvalue(ctr, "objectGUID");
3059 /* We used to store this as a REG_BINARY but that causes
3060 Vista to whine */
3062 regval_ctr_addvalue_sz(ctr, "objectGUID",
3063 GUID_string(talloc_tos(), &guid));
3066 static WERROR nt_printer_publish_ads(ADS_STRUCT *ads,
3067 NT_PRINTER_INFO_LEVEL *printer)
3069 ADS_STATUS ads_rc;
3070 LDAPMessage *res;
3071 char *prt_dn = NULL, *srv_dn, *srv_cn_0, *srv_cn_escaped, *sharename_escaped;
3072 char *srv_dn_utf8, **srv_cn_utf8;
3073 TALLOC_CTX *ctx;
3074 ADS_MODLIST mods;
3075 const char *attrs[] = {"objectGUID", NULL};
3076 struct GUID guid;
3077 WERROR win_rc = WERR_OK;
3078 size_t converted_size;
3080 /* build the ads mods */
3081 ctx = talloc_init("nt_printer_publish_ads");
3082 if (ctx == NULL) {
3083 return WERR_NOMEM;
3086 DEBUG(5, ("publishing printer %s\n", printer->info_2->printername));
3088 /* figure out where to publish */
3089 ads_find_machine_acct(ads, &res, global_myname());
3091 /* We use ldap_get_dn here as we need the answer
3092 * in utf8 to call ldap_explode_dn(). JRA. */
3094 srv_dn_utf8 = ldap_get_dn((LDAP *)ads->ldap.ld, (LDAPMessage *)res);
3095 if (!srv_dn_utf8) {
3096 TALLOC_FREE(ctx);
3097 return WERR_SERVER_UNAVAILABLE;
3099 ads_msgfree(ads, res);
3100 srv_cn_utf8 = ldap_explode_dn(srv_dn_utf8, 1);
3101 if (!srv_cn_utf8) {
3102 TALLOC_FREE(ctx);
3103 ldap_memfree(srv_dn_utf8);
3104 return WERR_SERVER_UNAVAILABLE;
3106 /* Now convert to CH_UNIX. */
3107 if (!pull_utf8_talloc(ctx, &srv_dn, srv_dn_utf8, &converted_size)) {
3108 TALLOC_FREE(ctx);
3109 ldap_memfree(srv_dn_utf8);
3110 ldap_memfree(srv_cn_utf8);
3111 return WERR_SERVER_UNAVAILABLE;
3113 if (!pull_utf8_talloc(ctx, &srv_cn_0, srv_cn_utf8[0], &converted_size)) {
3114 TALLOC_FREE(ctx);
3115 ldap_memfree(srv_dn_utf8);
3116 ldap_memfree(srv_cn_utf8);
3117 TALLOC_FREE(srv_dn);
3118 return WERR_SERVER_UNAVAILABLE;
3121 ldap_memfree(srv_dn_utf8);
3122 ldap_memfree(srv_cn_utf8);
3124 srv_cn_escaped = escape_rdn_val_string_alloc(srv_cn_0);
3125 if (!srv_cn_escaped) {
3126 TALLOC_FREE(ctx);
3127 return WERR_SERVER_UNAVAILABLE;
3129 sharename_escaped = escape_rdn_val_string_alloc(printer->info_2->sharename);
3130 if (!sharename_escaped) {
3131 SAFE_FREE(srv_cn_escaped);
3132 TALLOC_FREE(ctx);
3133 return WERR_SERVER_UNAVAILABLE;
3136 prt_dn = talloc_asprintf(ctx, "cn=%s-%s,%s", srv_cn_escaped, sharename_escaped, srv_dn);
3138 SAFE_FREE(srv_cn_escaped);
3139 SAFE_FREE(sharename_escaped);
3141 mods = ads_init_mods(ctx);
3143 if (mods == NULL) {
3144 SAFE_FREE(prt_dn);
3145 TALLOC_FREE(ctx);
3146 return WERR_NOMEM;
3149 get_local_printer_publishing_data(ctx, &mods, printer->info_2->data);
3150 ads_mod_str(ctx, &mods, SPOOL_REG_PRINTERNAME,
3151 printer->info_2->sharename);
3153 /* publish it */
3154 ads_rc = ads_mod_printer_entry(ads, prt_dn, ctx, &mods);
3155 if (ads_rc.err.rc == LDAP_NO_SUCH_OBJECT) {
3156 int i;
3157 for (i=0; mods[i] != 0; i++)
3159 mods[i] = (LDAPMod *)-1;
3160 ads_rc = ads_add_printer_entry(ads, prt_dn, ctx, &mods);
3163 if (!ADS_ERR_OK(ads_rc))
3164 DEBUG(3, ("error publishing %s: %s\n", printer->info_2->sharename, ads_errstr(ads_rc)));
3166 /* retreive the guid and store it locally */
3167 if (ADS_ERR_OK(ads_search_dn(ads, &res, prt_dn, attrs))) {
3168 ZERO_STRUCT(guid);
3169 ads_pull_guid(ads, res, &guid);
3170 ads_msgfree(ads, res);
3171 store_printer_guid(printer->info_2, guid);
3172 win_rc = mod_a_printer(printer, 2);
3174 TALLOC_FREE(ctx);
3176 return win_rc;
3179 static WERROR nt_printer_unpublish_ads(ADS_STRUCT *ads,
3180 NT_PRINTER_INFO_LEVEL *printer)
3182 ADS_STATUS ads_rc;
3183 LDAPMessage *res = NULL;
3184 char *prt_dn = NULL;
3186 DEBUG(5, ("unpublishing printer %s\n", printer->info_2->printername));
3188 /* remove the printer from the directory */
3189 ads_rc = ads_find_printer_on_server(ads, &res,
3190 printer->info_2->sharename, global_myname());
3192 if (ADS_ERR_OK(ads_rc) && res && ads_count_replies(ads, res)) {
3193 prt_dn = ads_get_dn(ads, talloc_tos(), res);
3194 if (!prt_dn) {
3195 ads_msgfree(ads, res);
3196 return WERR_NOMEM;
3198 ads_rc = ads_del_dn(ads, prt_dn);
3199 TALLOC_FREE(prt_dn);
3202 if (res) {
3203 ads_msgfree(ads, res);
3205 return WERR_OK;
3208 /****************************************************************************
3209 * Publish a printer in the directory
3211 * @param snum describing printer service
3212 * @return WERROR indicating status of publishing
3213 ***************************************************************************/
3215 WERROR nt_printer_publish(Printer_entry *print_hnd, int snum, int action)
3217 ADS_STATUS ads_rc;
3218 ADS_STRUCT *ads = NULL;
3219 NT_PRINTER_INFO_LEVEL *printer = NULL;
3220 WERROR win_rc;
3222 win_rc = get_a_printer(print_hnd, &printer, 2, lp_servicename(snum));
3223 if (!W_ERROR_IS_OK(win_rc))
3224 goto done;
3226 switch (action) {
3227 case DSPRINT_PUBLISH:
3228 case DSPRINT_UPDATE:
3229 /* set the DsSpooler info and attributes */
3230 if (!(map_nt_printer_info2_to_dsspooler(printer->info_2))) {
3231 win_rc = WERR_NOMEM;
3232 goto done;
3235 printer->info_2->attributes |= PRINTER_ATTRIBUTE_PUBLISHED;
3236 break;
3237 case DSPRINT_UNPUBLISH:
3238 printer->info_2->attributes ^= PRINTER_ATTRIBUTE_PUBLISHED;
3239 break;
3240 default:
3241 win_rc = WERR_NOT_SUPPORTED;
3242 goto done;
3245 win_rc = mod_a_printer(printer, 2);
3246 if (!W_ERROR_IS_OK(win_rc)) {
3247 DEBUG(3, ("err %d saving data\n", W_ERROR_V(win_rc)));
3248 goto done;
3251 ads = ads_init(lp_realm(), lp_workgroup(), NULL);
3252 if (!ads) {
3253 DEBUG(3, ("ads_init() failed\n"));
3254 win_rc = WERR_SERVER_UNAVAILABLE;
3255 goto done;
3257 setenv(KRB5_ENV_CCNAME, "MEMORY:prtpub_cache", 1);
3258 SAFE_FREE(ads->auth.password);
3259 ads->auth.password = secrets_fetch_machine_password(lp_workgroup(),
3260 NULL, NULL);
3262 /* ads_connect() will find the DC for us */
3263 ads_rc = ads_connect(ads);
3264 if (!ADS_ERR_OK(ads_rc)) {
3265 DEBUG(3, ("ads_connect failed: %s\n", ads_errstr(ads_rc)));
3266 win_rc = WERR_ACCESS_DENIED;
3267 goto done;
3270 switch (action) {
3271 case DSPRINT_PUBLISH:
3272 case DSPRINT_UPDATE:
3273 win_rc = nt_printer_publish_ads(ads, printer);
3274 break;
3275 case DSPRINT_UNPUBLISH:
3276 win_rc = nt_printer_unpublish_ads(ads, printer);
3277 break;
3280 done:
3281 free_a_printer(&printer, 2);
3282 ads_destroy(&ads);
3283 return win_rc;
3286 WERROR check_published_printers(void)
3288 ADS_STATUS ads_rc;
3289 ADS_STRUCT *ads = NULL;
3290 int snum;
3291 int n_services = lp_numservices();
3292 NT_PRINTER_INFO_LEVEL *printer = NULL;
3294 ads = ads_init(lp_realm(), lp_workgroup(), NULL);
3295 if (!ads) {
3296 DEBUG(3, ("ads_init() failed\n"));
3297 return WERR_SERVER_UNAVAILABLE;
3299 setenv(KRB5_ENV_CCNAME, "MEMORY:prtpub_cache", 1);
3300 SAFE_FREE(ads->auth.password);
3301 ads->auth.password = secrets_fetch_machine_password(lp_workgroup(),
3302 NULL, NULL);
3304 /* ads_connect() will find the DC for us */
3305 ads_rc = ads_connect(ads);
3306 if (!ADS_ERR_OK(ads_rc)) {
3307 DEBUG(3, ("ads_connect failed: %s\n", ads_errstr(ads_rc)));
3308 ads_destroy(&ads);
3309 ads_kdestroy("MEMORY:prtpub_cache");
3310 return WERR_ACCESS_DENIED;
3313 for (snum = 0; snum < n_services; snum++) {
3314 if (!(lp_snum_ok(snum) && lp_print_ok(snum)))
3315 continue;
3317 if (W_ERROR_IS_OK(get_a_printer(NULL, &printer, 2,
3318 lp_servicename(snum))) &&
3319 (printer->info_2->attributes & PRINTER_ATTRIBUTE_PUBLISHED))
3320 nt_printer_publish_ads(ads, printer);
3322 free_a_printer(&printer, 2);
3325 ads_destroy(&ads);
3326 ads_kdestroy("MEMORY:prtpub_cache");
3327 return WERR_OK;
3330 bool is_printer_published(Printer_entry *print_hnd, int snum,
3331 struct GUID *guid)
3333 NT_PRINTER_INFO_LEVEL *printer = NULL;
3334 struct regval_ctr *ctr;
3335 struct regval_blob *guid_val;
3336 WERROR win_rc;
3337 int i;
3338 bool ret = False;
3339 DATA_BLOB blob;
3341 win_rc = get_a_printer(print_hnd, &printer, 2, lp_servicename(snum));
3343 if (!W_ERROR_IS_OK(win_rc) ||
3344 !(printer->info_2->attributes & PRINTER_ATTRIBUTE_PUBLISHED) ||
3345 ((i = lookup_printerkey(printer->info_2->data, SPOOL_DSSPOOLER_KEY)) < 0) ||
3346 !(ctr = printer->info_2->data->keys[i].values) ||
3347 !(guid_val = regval_ctr_getvalue(ctr, "objectGUID")))
3349 free_a_printer(&printer, 2);
3350 return False;
3353 /* fetching printer guids really ought to be a separate function. */
3355 if ( guid ) {
3356 char *guid_str;
3358 /* We used to store the guid as REG_BINARY, then swapped
3359 to REG_SZ for Vista compatibility so check for both */
3361 switch ( regval_type(guid_val) ){
3362 case REG_SZ:
3363 blob = data_blob_const(regval_data_p(guid_val),
3364 regval_size(guid_val));
3365 pull_reg_sz(talloc_tos(), NULL, &blob, (const char **)&guid_str);
3366 ret = NT_STATUS_IS_OK(GUID_from_string( guid_str, guid ));
3367 talloc_free(guid_str);
3368 break;
3369 case REG_BINARY:
3370 if ( regval_size(guid_val) != sizeof(struct GUID) ) {
3371 ret = False;
3372 break;
3374 memcpy(guid, regval_data_p(guid_val), sizeof(struct GUID));
3375 break;
3376 default:
3377 DEBUG(0,("is_printer_published: GUID value stored as "
3378 "invaluid type (%d)\n", regval_type(guid_val) ));
3379 break;
3383 free_a_printer(&printer, 2);
3384 return ret;
3386 #else
3387 WERROR nt_printer_publish(Printer_entry *print_hnd, int snum, int action)
3389 return WERR_OK;
3392 WERROR check_published_printers(void)
3394 return WERR_OK;
3397 bool is_printer_published(Printer_entry *print_hnd, int snum,
3398 struct GUID *guid)
3400 return False;
3402 #endif /* HAVE_ADS */
3404 /****************************************************************************
3405 ***************************************************************************/
3407 WERROR delete_all_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key )
3409 NT_PRINTER_DATA *data;
3410 int i;
3411 int removed_keys = 0;
3412 int empty_slot;
3414 data = p2->data;
3415 empty_slot = data->num_keys;
3417 if ( !key )
3418 return WERR_INVALID_PARAM;
3420 /* remove all keys */
3422 if ( !strlen(key) ) {
3424 TALLOC_FREE( data );
3426 p2->data = NULL;
3428 DEBUG(8,("delete_all_printer_data: Removed all Printer Data from printer [%s]\n",
3429 p2->printername ));
3431 return WERR_OK;
3434 /* remove a specific key (and all subkeys) */
3436 for ( i=0; i<data->num_keys; i++ ) {
3437 if ( StrnCaseCmp( data->keys[i].name, key, strlen(key)) == 0 ) {
3438 DEBUG(8,("delete_all_printer_data: Removed all Printer Data from key [%s]\n",
3439 data->keys[i].name));
3441 TALLOC_FREE( data->keys[i].name );
3442 TALLOC_FREE( data->keys[i].values );
3444 /* mark the slot as empty */
3446 ZERO_STRUCTP( &data->keys[i] );
3450 /* find the first empty slot */
3452 for ( i=0; i<data->num_keys; i++ ) {
3453 if ( !data->keys[i].name ) {
3454 empty_slot = i;
3455 removed_keys++;
3456 break;
3460 if ( i == data->num_keys )
3461 /* nothing was removed */
3462 return WERR_INVALID_PARAM;
3464 /* move everything down */
3466 for ( i=empty_slot+1; i<data->num_keys; i++ ) {
3467 if ( data->keys[i].name ) {
3468 memcpy( &data->keys[empty_slot], &data->keys[i], sizeof(NT_PRINTER_KEY) );
3469 ZERO_STRUCTP( &data->keys[i] );
3470 empty_slot++;
3471 removed_keys++;
3475 /* update count */
3477 data->num_keys -= removed_keys;
3479 /* sanity check to see if anything is left */
3481 if ( !data->num_keys ) {
3482 DEBUG(8,("delete_all_printer_data: No keys left for printer [%s]\n", p2->printername ));
3484 SAFE_FREE( data->keys );
3485 ZERO_STRUCTP( data );
3488 return WERR_OK;
3491 /****************************************************************************
3492 ***************************************************************************/
3494 WERROR delete_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value )
3496 WERROR result = WERR_OK;
3497 int key_index;
3499 /* we must have names on non-zero length */
3501 if ( !key || !*key|| !value || !*value )
3502 return WERR_INVALID_NAME;
3504 /* find the printer key first */
3506 key_index = lookup_printerkey( p2->data, key );
3507 if ( key_index == -1 )
3508 return WERR_OK;
3510 /* make sure the value exists so we can return the correct error code */
3512 if ( !regval_ctr_getvalue( p2->data->keys[key_index].values, value ) )
3513 return WERR_BADFILE;
3515 regval_ctr_delvalue( p2->data->keys[key_index].values, value );
3517 DEBUG(8,("delete_printer_data: Removed key => [%s], value => [%s]\n",
3518 key, value ));
3520 return result;
3523 /****************************************************************************
3524 ***************************************************************************/
3526 WERROR add_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value,
3527 uint32 type, uint8 *data, int real_len )
3529 WERROR result = WERR_OK;
3530 int key_index;
3532 /* we must have names on non-zero length */
3534 if ( !key || !*key|| !value || !*value )
3535 return WERR_INVALID_NAME;
3537 /* find the printer key first */
3539 key_index = lookup_printerkey( p2->data, key );
3540 if ( key_index == -1 )
3541 key_index = add_new_printer_key( p2->data, key );
3543 if ( key_index == -1 )
3544 return WERR_NOMEM;
3546 regval_ctr_addvalue( p2->data->keys[key_index].values, value,
3547 type, (const char *)data, real_len );
3549 DEBUG(8,("add_printer_data: Added key => [%s], value => [%s], type=> [%d], size => [%d]\n",
3550 key, value, type, real_len ));
3552 return result;
3555 /****************************************************************************
3556 ***************************************************************************/
3558 struct regval_blob* get_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value )
3560 int key_index;
3562 if ( (key_index = lookup_printerkey( p2->data, key )) == -1 )
3563 return NULL;
3565 DEBUG(8,("get_printer_data: Attempting to lookup key => [%s], value => [%s]\n",
3566 key, value ));
3568 return regval_ctr_getvalue( p2->data->keys[key_index].values, value );
3571 /****************************************************************************
3572 Unpack a list of registry values frem the TDB
3573 ***************************************************************************/
3575 static int unpack_values(NT_PRINTER_DATA *printer_data, const uint8 *buf, int buflen)
3577 int len = 0;
3578 uint32 type;
3579 fstring string;
3580 const char *valuename = NULL;
3581 const char *keyname = NULL;
3582 char *str;
3583 int size;
3584 uint8 *data_p;
3585 struct regval_blob *regval_p;
3586 int key_index;
3588 /* add the "PrinterDriverData" key first for performance reasons */
3590 add_new_printer_key( printer_data, SPOOL_PRINTERDATA_KEY );
3592 /* loop and unpack the rest of the registry values */
3594 while ( True ) {
3596 /* check to see if there are any more registry values */
3598 regval_p = NULL;
3599 len += tdb_unpack(buf+len, buflen-len, "p", &regval_p);
3600 if ( !regval_p )
3601 break;
3603 /* unpack the next regval */
3605 len += tdb_unpack(buf+len, buflen-len, "fdB",
3606 string,
3607 &type,
3608 &size,
3609 &data_p);
3611 /* lookup for subkey names which have a type of REG_NONE */
3612 /* there's no data with this entry */
3614 if ( type == REG_NONE ) {
3615 if ( (key_index=lookup_printerkey( printer_data, string)) == -1 )
3616 add_new_printer_key( printer_data, string );
3617 continue;
3621 * break of the keyname from the value name.
3622 * Valuenames can have embedded '\'s so be careful.
3623 * only support one level of keys. See the
3624 * "Konica Fiery S300 50C-K v1.1. enu" 2k driver.
3625 * -- jerry
3628 str = strchr_m( string, '\\');
3630 /* Put in "PrinterDriverData" is no key specified */
3632 if ( !str ) {
3633 keyname = SPOOL_PRINTERDATA_KEY;
3634 valuename = string;
3636 else {
3637 *str = '\0';
3638 keyname = string;
3639 valuename = str+1;
3642 /* see if we need a new key */
3644 if ( (key_index=lookup_printerkey( printer_data, keyname )) == -1 )
3645 key_index = add_new_printer_key( printer_data, keyname );
3647 if ( key_index == -1 ) {
3648 DEBUG(0,("unpack_values: Failed to allocate a new key [%s]!\n",
3649 keyname));
3650 break;
3653 DEBUG(8,("specific: [%s:%s], len: %d\n", keyname, valuename, size));
3655 /* Vista doesn't like unknown REG_BINARY values in DsSpooler.
3656 Thanks to Martin Zielinski for the hint. */
3658 if ( type == REG_BINARY &&
3659 strequal( keyname, SPOOL_DSSPOOLER_KEY ) &&
3660 strequal( valuename, "objectGUID" ) )
3662 struct GUID guid;
3664 /* convert the GUID to a UNICODE string */
3666 memcpy( &guid, data_p, sizeof(struct GUID) );
3668 regval_ctr_addvalue_sz(printer_data->keys[key_index].values,
3669 valuename,
3670 GUID_string(talloc_tos(), &guid));
3672 } else {
3673 /* add the value */
3675 regval_ctr_addvalue( printer_data->keys[key_index].values,
3676 valuename, type, (const char *)data_p,
3677 size );
3680 SAFE_FREE(data_p); /* 'B' option to tdbpack does a malloc() */
3684 return len;
3687 /****************************************************************************
3688 ***************************************************************************/
3690 static char *last_from;
3691 static char *last_to;
3693 static const char *get_last_from(void)
3695 if (!last_from) {
3696 return "";
3698 return last_from;
3701 static const char *get_last_to(void)
3703 if (!last_to) {
3704 return "";
3706 return last_to;
3709 static bool set_last_from_to(const char *from, const char *to)
3711 char *orig_from = last_from;
3712 char *orig_to = last_to;
3714 last_from = SMB_STRDUP(from);
3715 last_to = SMB_STRDUP(to);
3717 SAFE_FREE(orig_from);
3718 SAFE_FREE(orig_to);
3720 if (!last_from || !last_to) {
3721 SAFE_FREE(last_from);
3722 SAFE_FREE(last_to);
3723 return false;
3725 return true;
3728 static void map_to_os2_driver(fstring drivername)
3730 char *mapfile = lp_os2_driver_map();
3731 char **lines = NULL;
3732 int numlines = 0;
3733 int i;
3735 if (!strlen(drivername))
3736 return;
3738 if (!*mapfile)
3739 return;
3741 if (strequal(drivername,get_last_from())) {
3742 DEBUG(3,("Mapped Windows driver %s to OS/2 driver %s\n",
3743 drivername,get_last_to()));
3744 fstrcpy(drivername,get_last_to());
3745 return;
3748 lines = file_lines_load(mapfile, &numlines,0,NULL);
3749 if (numlines == 0 || lines == NULL) {
3750 DEBUG(0,("No entries in OS/2 driver map %s\n",mapfile));
3751 TALLOC_FREE(lines);
3752 return;
3755 DEBUG(4,("Scanning OS/2 driver map %s\n",mapfile));
3757 for( i = 0; i < numlines; i++) {
3758 char *nt_name = lines[i];
3759 char *os2_name = strchr(nt_name,'=');
3761 if (!os2_name)
3762 continue;
3764 *os2_name++ = 0;
3766 while (isspace(*nt_name))
3767 nt_name++;
3769 if (!*nt_name || strchr("#;",*nt_name))
3770 continue;
3773 int l = strlen(nt_name);
3774 while (l && isspace(nt_name[l-1])) {
3775 nt_name[l-1] = 0;
3776 l--;
3780 while (isspace(*os2_name))
3781 os2_name++;
3784 int l = strlen(os2_name);
3785 while (l && isspace(os2_name[l-1])) {
3786 os2_name[l-1] = 0;
3787 l--;
3791 if (strequal(nt_name,drivername)) {
3792 DEBUG(3,("Mapped windows driver %s to os2 driver%s\n",drivername,os2_name));
3793 set_last_from_to(drivername,os2_name);
3794 fstrcpy(drivername,os2_name);
3795 TALLOC_FREE(lines);
3796 return;
3800 TALLOC_FREE(lines);
3803 /****************************************************************************
3804 Get a default printer info 2 struct.
3805 ****************************************************************************/
3807 static WERROR get_a_printer_2_default(NT_PRINTER_INFO_LEVEL_2 *info,
3808 const char *servername,
3809 const char* sharename,
3810 bool get_loc_com)
3812 int snum = lp_servicenumber(sharename);
3814 slprintf(info->servername, sizeof(info->servername)-1, "\\\\%s", servername);
3815 slprintf(info->printername, sizeof(info->printername)-1, "\\\\%s\\%s",
3816 servername, sharename);
3817 fstrcpy(info->sharename, sharename);
3818 fstrcpy(info->portname, SAMBA_PRINTER_PORT_NAME);
3820 /* by setting the driver name to an empty string, a local NT admin
3821 can now run the **local** APW to install a local printer driver
3822 for a Samba shared printer in 2.2. Without this, drivers **must** be
3823 installed on the Samba server for NT clients --jerry */
3824 #if 0 /* JERRY --do not uncomment-- */
3825 if (!*info->drivername)
3826 fstrcpy(info->drivername, "NO DRIVER AVAILABLE FOR THIS PRINTER");
3827 #endif
3830 DEBUG(10,("get_a_printer_2_default: driver name set to [%s]\n", info->drivername));
3832 strlcpy(info->comment, "", sizeof(info->comment));
3833 fstrcpy(info->printprocessor, "winprint");
3834 fstrcpy(info->datatype, "RAW");
3836 #ifdef HAVE_CUPS
3837 if (get_loc_com && (enum printing_types)lp_printing(snum) == PRINT_CUPS ) {
3838 /* Pull the location and comment strings from cups if we don't
3839 already have one */
3840 if ( !strlen(info->location) || !strlen(info->comment) ) {
3841 char *comment = NULL;
3842 char *location = NULL;
3843 if (cups_pull_comment_location(info, info->sharename,
3844 &comment, &location)) {
3845 strlcpy(info->comment, comment, sizeof(info->comment));
3846 fstrcpy(info->location, location);
3847 TALLOC_FREE(comment);
3848 TALLOC_FREE(location);
3852 #endif
3854 info->attributes = PRINTER_ATTRIBUTE_SAMBA;
3856 info->starttime = 0; /* Minutes since 12:00am GMT */
3857 info->untiltime = 0; /* Minutes since 12:00am GMT */
3858 info->priority = 1;
3859 info->default_priority = 1;
3860 info->setuptime = (uint32)time(NULL);
3863 * I changed this as I think it is better to have a generic
3864 * DEVMODE than to crash Win2k explorer.exe --jerry
3865 * See the HP Deskjet 990c Win2k drivers for an example.
3867 * However the default devmode appears to cause problems
3868 * with the HP CLJ 8500 PCL driver. Hence the addition of
3869 * the "default devmode" parameter --jerry 22/01/2002
3872 if (lp_default_devmode(snum)) {
3873 if ((info->devmode = construct_nt_devicemode(info->printername)) == NULL) {
3874 goto fail;
3876 } else {
3877 info->devmode = NULL;
3880 if (!nt_printing_getsec(info, sharename, &info->secdesc_buf)) {
3881 goto fail;
3884 info->data = TALLOC_ZERO_P(info, NT_PRINTER_DATA);
3885 if (!info->data) {
3886 goto fail;
3889 add_new_printer_key(info->data, SPOOL_PRINTERDATA_KEY);
3891 return WERR_OK;
3893 fail:
3894 if (info->devmode)
3895 free_nt_devicemode(&info->devmode);
3897 return WERR_ACCESS_DENIED;
3900 /****************************************************************************
3901 ****************************************************************************/
3903 static WERROR get_a_printer_2(NT_PRINTER_INFO_LEVEL_2 *info,
3904 const char *servername,
3905 const char *sharename,
3906 bool get_loc_com)
3908 int len = 0;
3909 int snum = lp_servicenumber(sharename);
3910 TDB_DATA kbuf, dbuf;
3911 fstring printername;
3912 char adevice[MAXDEVICENAME];
3913 char *comment = NULL;
3915 kbuf = make_printer_tdbkey(talloc_tos(), sharename);
3917 dbuf = tdb_fetch(tdb_printers, kbuf);
3918 if (!dbuf.dptr) {
3919 return get_a_printer_2_default(info, servername,
3920 sharename, get_loc_com);
3923 len += tdb_unpack(dbuf.dptr+len, dbuf.dsize-len, "dddddddddddfffffPfffff",
3924 &info->attributes,
3925 &info->priority,
3926 &info->default_priority,
3927 &info->starttime,
3928 &info->untiltime,
3929 &info->status,
3930 &info->cjobs,
3931 &info->averageppm,
3932 &info->changeid,
3933 &info->c_setprinter,
3934 &info->setuptime,
3935 info->servername,
3936 info->printername,
3937 info->sharename,
3938 info->portname,
3939 info->drivername,
3940 &comment,
3941 info->location,
3942 info->sepfile,
3943 info->printprocessor,
3944 info->datatype,
3945 info->parameters);
3947 if (comment) {
3948 strlcpy(info->comment, comment, sizeof(info->comment));
3949 SAFE_FREE(comment);
3952 /* Samba has to have shared raw drivers. */
3953 info->attributes |= PRINTER_ATTRIBUTE_SAMBA;
3954 info->attributes &= ~PRINTER_ATTRIBUTE_NOT_SAMBA;
3956 /* Restore the stripped strings. */
3957 slprintf(info->servername, sizeof(info->servername)-1, "\\\\%s", servername);
3959 if ( lp_force_printername(snum) ) {
3960 slprintf(printername, sizeof(printername)-1, "\\\\%s\\%s", servername, sharename );
3961 } else {
3962 slprintf(printername, sizeof(printername)-1, "\\\\%s\\%s", servername, info->printername);
3965 fstrcpy(info->printername, printername);
3967 #ifdef HAVE_CUPS
3968 if (get_loc_com && (enum printing_types)lp_printing(snum) == PRINT_CUPS ) {
3969 /* Pull the location and comment strings from cups if we don't
3970 already have one */
3971 if ( !strlen(info->location) || !strlen(info->comment) ) {
3972 char *location = NULL;
3973 comment = NULL;
3974 if (cups_pull_comment_location(info, info->sharename,
3975 &comment, &location)) {
3976 strlcpy(info->comment, comment, sizeof(info->comment));
3977 fstrcpy(info->location, location);
3978 TALLOC_FREE(comment);
3979 TALLOC_FREE(location);
3983 #endif
3985 len += unpack_devicemode(&info->devmode,dbuf.dptr+len, dbuf.dsize-len);
3988 * Some client drivers freak out if there is a NULL devmode
3989 * (probably the driver is not checking before accessing
3990 * the devmode pointer) --jerry
3992 * See comments in get_a_printer_2_default()
3995 if (lp_default_devmode(snum) && !info->devmode) {
3996 DEBUG(8,("get_a_printer_2: Constructing a default device mode for [%s]\n",
3997 printername));
3998 info->devmode = construct_nt_devicemode(printername);
4001 slprintf( adevice, sizeof(adevice), "%s", info->printername );
4002 if (info->devmode) {
4003 fstrcpy(info->devmode->devicename, adevice);
4006 if ( !(info->data = TALLOC_ZERO_P( info, NT_PRINTER_DATA )) ) {
4007 DEBUG(0,("unpack_values: talloc() failed!\n"));
4008 SAFE_FREE(dbuf.dptr);
4009 return WERR_NOMEM;
4011 len += unpack_values( info->data, dbuf.dptr+len, dbuf.dsize-len );
4013 /* This will get the current RPC talloc context, but we should be
4014 passing this as a parameter... fixme... JRA ! */
4016 if (!nt_printing_getsec(info, sharename, &info->secdesc_buf)) {
4017 SAFE_FREE(dbuf.dptr);
4018 return WERR_NOMEM;
4021 /* Fix for OS/2 drivers. */
4023 if (get_remote_arch() == RA_OS2) {
4024 map_to_os2_driver(info->drivername);
4027 SAFE_FREE(dbuf.dptr);
4029 DEBUG(9,("Unpacked printer [%s] name [%s] running driver [%s]\n",
4030 sharename, info->printername, info->drivername));
4032 return WERR_OK;
4035 /****************************************************************************
4036 Debugging function, dump at level 6 the struct in the logs.
4037 ****************************************************************************/
4038 static uint32 dump_a_printer(NT_PRINTER_INFO_LEVEL *printer, uint32 level)
4040 uint32 result;
4041 NT_PRINTER_INFO_LEVEL_2 *info2;
4043 DEBUG(106,("Dumping printer at level [%d]\n", level));
4045 switch (level) {
4046 case 2:
4048 if (printer->info_2 == NULL)
4049 result=5;
4050 else
4052 info2=printer->info_2;
4054 DEBUGADD(106,("attributes:[%d]\n", info2->attributes));
4055 DEBUGADD(106,("priority:[%d]\n", info2->priority));
4056 DEBUGADD(106,("default_priority:[%d]\n", info2->default_priority));
4057 DEBUGADD(106,("starttime:[%d]\n", info2->starttime));
4058 DEBUGADD(106,("untiltime:[%d]\n", info2->untiltime));
4059 DEBUGADD(106,("status:[%d]\n", info2->status));
4060 DEBUGADD(106,("cjobs:[%d]\n", info2->cjobs));
4061 DEBUGADD(106,("averageppm:[%d]\n", info2->averageppm));
4062 DEBUGADD(106,("changeid:[%d]\n", info2->changeid));
4063 DEBUGADD(106,("c_setprinter:[%d]\n", info2->c_setprinter));
4064 DEBUGADD(106,("setuptime:[%d]\n", info2->setuptime));
4066 DEBUGADD(106,("servername:[%s]\n", info2->servername));
4067 DEBUGADD(106,("printername:[%s]\n", info2->printername));
4068 DEBUGADD(106,("sharename:[%s]\n", info2->sharename));
4069 DEBUGADD(106,("portname:[%s]\n", info2->portname));
4070 DEBUGADD(106,("drivername:[%s]\n", info2->drivername));
4071 DEBUGADD(106,("comment:[%s]\n", info2->comment));
4072 DEBUGADD(106,("location:[%s]\n", info2->location));
4073 DEBUGADD(106,("sepfile:[%s]\n", info2->sepfile));
4074 DEBUGADD(106,("printprocessor:[%s]\n", info2->printprocessor));
4075 DEBUGADD(106,("datatype:[%s]\n", info2->datatype));
4076 DEBUGADD(106,("parameters:[%s]\n", info2->parameters));
4077 result=0;
4079 break;
4081 default:
4082 DEBUGADD(106,("dump_a_printer: Level %u not implemented\n", (unsigned int)level ));
4083 result=1;
4084 break;
4087 return result;
4090 /****************************************************************************
4091 Update the changeid time.
4092 This is SO NASTY as some drivers need this to change, others need it
4093 static. This value will change every second, and I must hope that this
4094 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
4095 UTAH ! JRA.
4096 ****************************************************************************/
4098 static uint32 rev_changeid(void)
4100 struct timeval tv;
4102 get_process_uptime(&tv);
4104 #if 1 /* JERRY */
4105 /* Return changeid as msec since spooler restart */
4106 return tv.tv_sec * 1000 + tv.tv_usec / 1000;
4107 #else
4109 * This setting seems to work well but is too untested
4110 * to replace the above calculation. Left in for experiementation
4111 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
4113 return tv.tv_sec * 10 + tv.tv_usec / 100000;
4114 #endif
4119 * The function below are the high level ones.
4120 * only those ones must be called from the spoolss code.
4121 * JFM.
4124 /****************************************************************************
4125 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
4126 ****************************************************************************/
4128 WERROR mod_a_printer(NT_PRINTER_INFO_LEVEL *printer, uint32 level)
4130 WERROR result;
4132 dump_a_printer(printer, level);
4134 switch (level) {
4135 case 2:
4138 * Update the changestamp. Emperical tests show that the
4139 * ChangeID is always updated,but c_setprinter is
4140 * global spooler variable (not per printer).
4143 /* ChangeID **must** be increasing over the lifetime
4144 of client's spoolss service in order for the
4145 client's cache to show updates */
4147 printer->info_2->changeid = rev_changeid();
4150 * Because one day someone will ask:
4151 * NT->NT An admin connection to a remote
4152 * printer show changes imeediately in
4153 * the properities dialog
4155 * A non-admin connection will only show the
4156 * changes after viewing the properites page
4157 * 2 times. Seems to be related to a
4158 * race condition in the client between the spooler
4159 * updating the local cache and the Explorer.exe GUI
4160 * actually displaying the properties.
4162 * This is fixed in Win2k. admin/non-admin
4163 * connections both display changes immediately.
4165 * 14/12/01 --jerry
4168 result=update_a_printer_2(printer->info_2);
4169 break;
4171 default:
4172 result=WERR_UNKNOWN_LEVEL;
4173 break;
4176 return result;
4179 /****************************************************************************
4180 Initialize printer devmode & data with previously saved driver init values.
4181 ****************************************************************************/
4183 static bool set_driver_init_2( NT_PRINTER_INFO_LEVEL_2 *info_ptr )
4185 int len = 0;
4186 char *key = NULL;
4187 TDB_DATA dbuf;
4188 NT_PRINTER_INFO_LEVEL_2 info;
4191 ZERO_STRUCT(info);
4194 * Delete any printer data 'values' already set. When called for driver
4195 * replace, there will generally be some, but during an add printer, there
4196 * should not be any (if there are delete them).
4199 if ( info_ptr->data )
4200 delete_all_printer_data( info_ptr, "" );
4202 if (asprintf(&key, "%s%s", DRIVER_INIT_PREFIX,
4203 info_ptr->drivername) < 0) {
4204 return false;
4207 dbuf = tdb_fetch_bystring(tdb_drivers, key);
4208 if (!dbuf.dptr) {
4210 * When changing to a driver that has no init info in the tdb, remove
4211 * the previous drivers init info and leave the new on blank.
4213 free_nt_devicemode(&info_ptr->devmode);
4214 SAFE_FREE(key);
4215 return false;
4218 SAFE_FREE(key);
4220 * Get the saved DEVMODE..
4223 len += unpack_devicemode(&info.devmode,dbuf.dptr+len, dbuf.dsize-len);
4226 * The saved DEVMODE contains the devicename from the printer used during
4227 * the initialization save. Change it to reflect the new printer.
4230 if ( info.devmode ) {
4231 ZERO_STRUCT(info.devmode->devicename);
4232 fstrcpy(info.devmode->devicename, info_ptr->printername);
4236 * NT/2k does not change out the entire DeviceMode of a printer
4237 * when changing the driver. Only the driverextra, private, &
4238 * driverversion fields. --jerry (Thu Mar 14 08:58:43 CST 2002)
4240 * Later examination revealed that Windows NT/2k does reset the
4241 * the printer's device mode, bit **only** when you change a
4242 * property of the device mode such as the page orientation.
4243 * --jerry
4247 /* Bind the saved DEVMODE to the new the printer */
4249 free_nt_devicemode(&info_ptr->devmode);
4250 info_ptr->devmode = info.devmode;
4252 DEBUG(10,("set_driver_init_2: Set printer [%s] init %s DEVMODE for driver [%s]\n",
4253 info_ptr->printername, info_ptr->devmode?"VALID":"NULL", info_ptr->drivername));
4255 /* Add the printer data 'values' to the new printer */
4257 if ( !(info_ptr->data = TALLOC_ZERO_P( info_ptr, NT_PRINTER_DATA )) ) {
4258 DEBUG(0,("set_driver_init_2: talloc() failed!\n"));
4259 return False;
4262 len += unpack_values( info_ptr->data, dbuf.dptr+len, dbuf.dsize-len );
4264 SAFE_FREE(dbuf.dptr);
4266 return true;
4269 /****************************************************************************
4270 Initialize printer devmode & data with previously saved driver init values.
4271 When a printer is created using AddPrinter, the drivername bound to the
4272 printer is used to lookup previously saved driver initialization info, which
4273 is bound to the new printer.
4274 ****************************************************************************/
4276 bool set_driver_init(NT_PRINTER_INFO_LEVEL *printer, uint32 level)
4278 bool result = False;
4280 switch (level) {
4281 case 2:
4282 result = set_driver_init_2(printer->info_2);
4283 break;
4285 default:
4286 DEBUG(0,("set_driver_init: Programmer's error! Unknown driver_init level [%d]\n",
4287 level));
4288 break;
4291 return result;
4294 /****************************************************************************
4295 Delete driver init data stored for a specified driver
4296 ****************************************************************************/
4298 bool del_driver_init(const char *drivername)
4300 char *key;
4301 bool ret;
4303 if (!drivername || !*drivername) {
4304 DEBUG(3,("del_driver_init: No drivername specified!\n"));
4305 return false;
4308 if (asprintf(&key, "%s%s", DRIVER_INIT_PREFIX, drivername) < 0) {
4309 return false;
4312 DEBUG(6,("del_driver_init: Removing driver init data for [%s]\n",
4313 drivername));
4315 ret = (tdb_delete_bystring(tdb_drivers, key) == 0);
4316 SAFE_FREE(key);
4317 return ret;
4320 /****************************************************************************
4321 Pack up the DEVMODE and values for a printer into a 'driver init' entry
4322 in the tdb. Note: this is different from the driver entry and the printer
4323 entry. There should be a single driver init entry for each driver regardless
4324 of whether it was installed from NT or 2K. Technically, they should be
4325 different, but they work out to the same struct.
4326 ****************************************************************************/
4328 static uint32 update_driver_init_2(NT_PRINTER_INFO_LEVEL_2 *info)
4330 char *key = NULL;
4331 uint8 *buf;
4332 int buflen, len, ret;
4333 int retlen;
4334 TDB_DATA dbuf;
4336 buf = NULL;
4337 buflen = 0;
4339 again:
4340 len = 0;
4341 len += pack_devicemode(info->devmode, buf+len, buflen-len);
4343 retlen = pack_values( info->data, buf+len, buflen-len );
4344 if (retlen == -1) {
4345 ret = -1;
4346 goto done;
4348 len += retlen;
4350 if (buflen < len) {
4351 buf = (uint8 *)SMB_REALLOC(buf, len);
4352 if (!buf) {
4353 DEBUG(0, ("update_driver_init_2: failed to enlarge buffer!\n"));
4354 ret = -1;
4355 goto done;
4357 buflen = len;
4358 goto again;
4361 SAFE_FREE(key);
4362 if (asprintf(&key, "%s%s", DRIVER_INIT_PREFIX, info->drivername) < 0) {
4363 ret = (uint32)-1;
4364 goto done;
4367 dbuf.dptr = buf;
4368 dbuf.dsize = len;
4370 ret = tdb_store_bystring(tdb_drivers, key, dbuf, TDB_REPLACE);
4372 done:
4373 if (ret == -1)
4374 DEBUG(8, ("update_driver_init_2: error updating printer init to tdb on disk\n"));
4376 SAFE_FREE(buf);
4378 DEBUG(10,("update_driver_init_2: Saved printer [%s] init DEVMODE & values for driver [%s]\n",
4379 info->sharename, info->drivername));
4381 return ret;
4384 /****************************************************************************
4385 Update (i.e. save) the driver init info (DEVMODE and values) for a printer
4386 ****************************************************************************/
4388 static uint32 update_driver_init(NT_PRINTER_INFO_LEVEL *printer, uint32 level)
4390 uint32 result;
4392 dump_a_printer(printer, level);
4394 switch (level) {
4395 case 2:
4396 result = update_driver_init_2(printer->info_2);
4397 break;
4398 default:
4399 result = 1;
4400 break;
4403 return result;
4406 /****************************************************************************
4407 Convert the printer data value, a REG_BINARY array, into an initialization
4408 DEVMODE. Note: the array must be parsed as if it was a DEVMODE in an rpc...
4409 got to keep the endians happy :).
4410 ****************************************************************************/
4412 static bool convert_driver_init(TALLOC_CTX *mem_ctx, NT_DEVICEMODE *nt_devmode,
4413 const uint8_t *data, uint32_t data_len)
4415 struct spoolss_DeviceMode devmode;
4416 enum ndr_err_code ndr_err;
4417 DATA_BLOB blob;
4419 ZERO_STRUCT(devmode);
4421 blob = data_blob_const(data, data_len);
4423 ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, NULL, &devmode,
4424 (ndr_pull_flags_fn_t)ndr_pull_spoolss_DeviceMode);
4425 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
4426 DEBUG(10,("convert_driver_init: error parsing spoolss_DeviceMode\n"));
4427 return false;
4430 return convert_devicemode("", &devmode, &nt_devmode);
4433 /****************************************************************************
4434 Set the DRIVER_INIT info in the tdb. Requires Win32 client code that:
4436 1. Use the driver's config DLL to this UNC printername and:
4437 a. Call DrvPrintEvent with PRINTER_EVENT_INITIALIZE
4438 b. Call DrvConvertDevMode with CDM_DRIVER_DEFAULT to get default DEVMODE
4439 2. Call SetPrinterData with the 'magic' key and the DEVMODE as data.
4441 The last step triggers saving the "driver initialization" information for
4442 this printer into the tdb. Later, new printers that use this driver will
4443 have this initialization information bound to them. This simulates the
4444 driver initialization, as if it had run on the Samba server (as it would
4445 have done on NT).
4447 The Win32 client side code requirement sucks! But until we can run arbitrary
4448 Win32 printer driver code on any Unix that Samba runs on, we are stuck with it.
4450 It would have been easier to use SetPrinter because all the UNMARSHALLING of
4451 the DEVMODE is done there, but 2K/XP clients do not set the DEVMODE... think
4452 about it and you will realize why. JRR 010720
4453 ****************************************************************************/
4455 static WERROR save_driver_init_2(NT_PRINTER_INFO_LEVEL *printer, uint8 *data, uint32 data_len )
4457 WERROR status = WERR_OK;
4458 TALLOC_CTX *ctx = NULL;
4459 NT_DEVICEMODE *nt_devmode = NULL;
4460 NT_DEVICEMODE *tmp_devmode = printer->info_2->devmode;
4463 * When the DEVMODE is already set on the printer, don't try to unpack it.
4465 DEBUG(8,("save_driver_init_2: Enter...\n"));
4467 if ( !printer->info_2->devmode && data_len ) {
4469 * Set devmode on printer info, so entire printer initialization can be
4470 * saved to tdb.
4473 if ((ctx = talloc_init("save_driver_init_2")) == NULL)
4474 return WERR_NOMEM;
4476 if ((nt_devmode = SMB_MALLOC_P(NT_DEVICEMODE)) == NULL) {
4477 status = WERR_NOMEM;
4478 goto done;
4481 ZERO_STRUCTP(nt_devmode);
4484 * The DEVMODE is held in the 'data' component of the param in raw binary.
4485 * Convert it to to a devmode structure
4487 if ( !convert_driver_init( ctx, nt_devmode, data, data_len )) {
4488 DEBUG(10,("save_driver_init_2: error converting DEVMODE\n"));
4489 status = WERR_INVALID_PARAM;
4490 goto done;
4493 printer->info_2->devmode = nt_devmode;
4497 * Pack up and add (or update) the DEVMODE and any current printer data to
4498 * a 'driver init' element in the tdb
4502 if ( update_driver_init(printer, 2) != 0 ) {
4503 DEBUG(10,("save_driver_init_2: error updating DEVMODE\n"));
4504 status = WERR_NOMEM;
4505 goto done;
4509 * If driver initialization info was successfully saved, set the current
4510 * printer to match it. This allows initialization of the current printer
4511 * as well as the driver.
4513 status = mod_a_printer(printer, 2);
4514 if (!W_ERROR_IS_OK(status)) {
4515 DEBUG(10,("save_driver_init_2: error setting DEVMODE on printer [%s]\n",
4516 printer->info_2->printername));
4519 done:
4520 talloc_destroy(ctx);
4521 free_nt_devicemode( &nt_devmode );
4523 printer->info_2->devmode = tmp_devmode;
4525 return status;
4528 /****************************************************************************
4529 Update the driver init info (DEVMODE and specifics) for a printer
4530 ****************************************************************************/
4532 WERROR save_driver_init(NT_PRINTER_INFO_LEVEL *printer, uint32 level, uint8 *data, uint32 data_len)
4534 WERROR status = WERR_OK;
4536 switch (level) {
4537 case 2:
4538 status = save_driver_init_2( printer, data, data_len );
4539 break;
4540 default:
4541 status = WERR_UNKNOWN_LEVEL;
4542 break;
4545 return status;
4548 /****************************************************************************
4549 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
4551 Previously the code had a memory allocation problem because it always
4552 used the TALLOC_CTX from the Printer_entry*. This context lasts
4553 as a long as the original handle is open. So if the client made a lot
4554 of getprinter[data]() calls, the memory usage would climb. Now we use
4555 a short lived TALLOC_CTX for printer_info_2 objects returned. We
4556 still use the Printer_entry->ctx for maintaining the cache copy though
4557 since that object must live as long as the handle by definition.
4558 --jerry
4560 ****************************************************************************/
4562 static WERROR get_a_printer_internal( Printer_entry *print_hnd, NT_PRINTER_INFO_LEVEL **pp_printer, uint32 level,
4563 const char *sharename, bool get_loc_com)
4565 WERROR result;
4566 fstring servername;
4568 DEBUG(10,("get_a_printer: [%s] level %u\n", sharename, (unsigned int)level));
4570 if ( !(*pp_printer = TALLOC_ZERO_P(NULL, NT_PRINTER_INFO_LEVEL)) ) {
4571 DEBUG(0,("get_a_printer: talloc() fail.\n"));
4572 return WERR_NOMEM;
4575 switch (level) {
4576 case 2:
4577 if ( !((*pp_printer)->info_2 = TALLOC_ZERO_P(*pp_printer, NT_PRINTER_INFO_LEVEL_2)) ) {
4578 DEBUG(0,("get_a_printer: talloc() fail.\n"));
4579 TALLOC_FREE( *pp_printer );
4580 return WERR_NOMEM;
4583 if ( print_hnd )
4584 fstrcpy( servername, print_hnd->servername );
4585 else {
4586 fstrcpy( servername, "%L" );
4587 standard_sub_basic( "", "", servername,
4588 sizeof(servername)-1 );
4591 result = get_a_printer_2( (*pp_printer)->info_2,
4592 servername, sharename, get_loc_com);
4594 /* we have a new printer now. Save it with this handle */
4596 if ( !W_ERROR_IS_OK(result) ) {
4597 TALLOC_FREE( *pp_printer );
4598 DEBUG(10,("get_a_printer: [%s] level %u returning %s\n",
4599 sharename, (unsigned int)level, win_errstr(result)));
4600 return result;
4603 dump_a_printer( *pp_printer, level);
4605 break;
4607 default:
4608 TALLOC_FREE( *pp_printer );
4609 return WERR_UNKNOWN_LEVEL;
4612 return WERR_OK;
4615 WERROR get_a_printer( Printer_entry *print_hnd,
4616 NT_PRINTER_INFO_LEVEL **pp_printer,
4617 uint32 level,
4618 const char *sharename)
4620 return get_a_printer_internal(print_hnd, pp_printer, level,
4621 sharename, true);
4624 WERROR get_a_printer_search( Printer_entry *print_hnd,
4625 NT_PRINTER_INFO_LEVEL **pp_printer,
4626 uint32 level,
4627 const char *sharename)
4629 return get_a_printer_internal(print_hnd, pp_printer, level,
4630 sharename, false);
4633 /****************************************************************************
4634 Deletes a NT_PRINTER_INFO_LEVEL struct.
4635 ****************************************************************************/
4637 uint32 free_a_printer(NT_PRINTER_INFO_LEVEL **pp_printer, uint32 level)
4639 NT_PRINTER_INFO_LEVEL *printer = *pp_printer;
4641 if ( !printer )
4642 return 0;
4644 switch (level) {
4645 case 2:
4646 if ( printer->info_2 )
4647 free_nt_printer_info_level_2(&printer->info_2);
4648 break;
4650 default:
4651 DEBUG(0,("free_a_printer: unknown level! [%d]\n", level ));
4652 return 1;
4655 TALLOC_FREE(*pp_printer);
4657 return 0;
4660 /****************************************************************************
4661 ****************************************************************************/
4663 uint32_t add_a_printer_driver(TALLOC_CTX *mem_ctx,
4664 struct spoolss_AddDriverInfoCtr *r,
4665 char **driver_name,
4666 uint32_t *version)
4668 struct spoolss_DriverInfo8 info8;
4670 ZERO_STRUCT(info8);
4672 DEBUG(10,("adding a printer at level [%d]\n", r->level));
4674 switch (r->level) {
4675 case 3:
4676 info8.version = r->info.info3->version;
4677 info8.driver_name = r->info.info3->driver_name;
4678 info8.architecture = r->info.info3->architecture;
4679 info8.driver_path = r->info.info3->driver_path;
4680 info8.data_file = r->info.info3->data_file;
4681 info8.config_file = r->info.info3->config_file;
4682 info8.help_file = r->info.info3->help_file;
4683 info8.monitor_name = r->info.info3->monitor_name;
4684 info8.default_datatype = r->info.info3->default_datatype;
4685 if (r->info.info3->dependent_files && r->info.info3->dependent_files->string) {
4686 info8.dependent_files = r->info.info3->dependent_files->string;
4688 break;
4689 case 6:
4690 info8.version = r->info.info6->version;
4691 info8.driver_name = r->info.info6->driver_name;
4692 info8.architecture = r->info.info6->architecture;
4693 info8.driver_path = r->info.info6->driver_path;
4694 info8.data_file = r->info.info6->data_file;
4695 info8.config_file = r->info.info6->config_file;
4696 info8.help_file = r->info.info6->help_file;
4697 info8.monitor_name = r->info.info6->monitor_name;
4698 info8.default_datatype = r->info.info6->default_datatype;
4699 if (r->info.info6->dependent_files && r->info.info6->dependent_files->string) {
4700 info8.dependent_files = r->info.info6->dependent_files->string;
4702 info8.driver_date = r->info.info6->driver_date;
4703 info8.driver_version = r->info.info6->driver_version;
4704 info8.manufacturer_name = r->info.info6->manufacturer_name;
4705 info8.manufacturer_url = r->info.info6->manufacturer_url;
4706 info8.hardware_id = r->info.info6->hardware_id;
4707 info8.provider = r->info.info6->provider;
4708 break;
4709 case 8:
4710 info8.version = r->info.info8->version;
4711 info8.driver_name = r->info.info8->driver_name;
4712 info8.architecture = r->info.info8->architecture;
4713 info8.driver_path = r->info.info8->driver_path;
4714 info8.data_file = r->info.info8->data_file;
4715 info8.config_file = r->info.info8->config_file;
4716 info8.help_file = r->info.info8->help_file;
4717 info8.monitor_name = r->info.info8->monitor_name;
4718 info8.default_datatype = r->info.info8->default_datatype;
4719 if (r->info.info8->dependent_files && r->info.info8->dependent_files->string) {
4720 info8.dependent_files = r->info.info8->dependent_files->string;
4722 if (r->info.info8->previous_names && r->info.info8->previous_names->string) {
4723 info8.previous_names = r->info.info8->previous_names->string;
4725 info8.driver_date = r->info.info8->driver_date;
4726 info8.driver_version = r->info.info8->driver_version;
4727 info8.manufacturer_name = r->info.info8->manufacturer_name;
4728 info8.manufacturer_url = r->info.info8->manufacturer_url;
4729 info8.hardware_id = r->info.info8->hardware_id;
4730 info8.provider = r->info.info8->provider;
4731 info8.print_processor = r->info.info8->print_processor;
4732 info8.vendor_setup = r->info.info8->vendor_setup;
4733 if (r->info.info8->color_profiles && r->info.info8->color_profiles->string) {
4734 info8.color_profiles = r->info.info8->color_profiles->string;
4736 info8.inf_path = r->info.info8->inf_path;
4737 info8.printer_driver_attributes = r->info.info8->printer_driver_attributes;
4738 if (r->info.info8->core_driver_dependencies && r->info.info8->core_driver_dependencies->string) {
4739 info8.core_driver_dependencies = r->info.info8->core_driver_dependencies->string;
4741 info8.min_inbox_driver_ver_date = r->info.info8->min_inbox_driver_ver_date;
4742 info8.min_inbox_driver_ver_version = r->info.info8->min_inbox_driver_ver_version;
4743 break;
4744 default:
4745 return -1;
4748 *driver_name = talloc_strdup(mem_ctx, info8.driver_name);
4749 if (!*driver_name) {
4750 return -1;
4752 *version = info8.version;
4754 return add_a_printer_driver_8(&info8);
4757 /****************************************************************************
4758 ****************************************************************************/
4760 WERROR get_a_printer_driver(TALLOC_CTX *mem_ctx,
4761 struct spoolss_DriverInfo8 **driver,
4762 const char *drivername, const char *architecture,
4763 uint32_t version)
4765 WERROR result;
4766 struct spoolss_DriverInfo3 info3;
4767 struct spoolss_DriverInfo8 *info8;
4769 ZERO_STRUCT(info3);
4771 /* Sometime we just want any version of the driver */
4773 if (version == DRIVER_ANY_VERSION) {
4774 /* look for Win2k first and then for NT4 */
4775 result = get_a_printer_driver_3(mem_ctx,
4776 &info3,
4777 drivername,
4778 architecture, 3);
4779 if (!W_ERROR_IS_OK(result)) {
4780 result = get_a_printer_driver_3(mem_ctx,
4781 &info3,
4782 drivername,
4783 architecture, 2);
4785 } else {
4786 result = get_a_printer_driver_3(mem_ctx,
4787 &info3,
4788 drivername,
4789 architecture,
4790 version);
4793 if (!W_ERROR_IS_OK(result)) {
4794 return result;
4797 info8 = talloc_zero(mem_ctx, struct spoolss_DriverInfo8);
4798 if (!info8) {
4799 return WERR_NOMEM;
4802 info8->version = info3.version;
4803 info8->driver_name = info3.driver_name;
4804 info8->architecture = info3.architecture;
4805 info8->driver_path = info3.driver_path;
4806 info8->data_file = info3.data_file;
4807 info8->config_file = info3.config_file;
4808 info8->help_file = info3.help_file;
4809 info8->dependent_files = info3.dependent_files;
4810 info8->monitor_name = info3.monitor_name;
4811 info8->default_datatype = info3.default_datatype;
4813 *driver = info8;
4815 return WERR_OK;
4818 /****************************************************************************
4819 ****************************************************************************/
4821 uint32_t free_a_printer_driver(struct spoolss_DriverInfo8 *driver)
4823 talloc_free(driver);
4824 return 0;
4828 /****************************************************************************
4829 Determine whether or not a particular driver is currently assigned
4830 to a printer
4831 ****************************************************************************/
4833 bool printer_driver_in_use(const struct spoolss_DriverInfo8 *r)
4835 int snum;
4836 int n_services = lp_numservices();
4837 NT_PRINTER_INFO_LEVEL *printer = NULL;
4838 bool in_use = False;
4840 if (!r) {
4841 return false;
4844 DEBUG(10,("printer_driver_in_use: Beginning search through ntprinters.tdb...\n"));
4846 /* loop through the printers.tdb and check for the drivername */
4848 for (snum=0; snum<n_services && !in_use; snum++) {
4849 if ( !(lp_snum_ok(snum) && lp_print_ok(snum) ) )
4850 continue;
4852 if ( !W_ERROR_IS_OK(get_a_printer(NULL, &printer, 2, lp_servicename(snum))) )
4853 continue;
4855 if (strequal(r->driver_name, printer->info_2->drivername))
4856 in_use = True;
4858 free_a_printer( &printer, 2 );
4861 DEBUG(10,("printer_driver_in_use: Completed search through ntprinters.tdb...\n"));
4863 if ( in_use ) {
4864 struct spoolss_DriverInfo8 *d;
4865 WERROR werr;
4867 DEBUG(5,("printer_driver_in_use: driver \"%s\" is currently in use\n", r->driver_name));
4869 /* we can still remove the driver if there is one of
4870 "Windows NT x86" version 2 or 3 left */
4872 if (!strequal("Windows NT x86", r->architecture)) {
4873 werr = get_a_printer_driver(talloc_tos(), &d, r->driver_name, "Windows NT x86", DRIVER_ANY_VERSION);
4875 else {
4876 switch (r->version) {
4877 case 2:
4878 werr = get_a_printer_driver(talloc_tos(), &d, r->driver_name, "Windows NT x86", 3);
4879 break;
4880 case 3:
4881 werr = get_a_printer_driver(talloc_tos(), &d, r->driver_name, "Windows NT x86", 2);
4882 break;
4883 default:
4884 DEBUG(0,("printer_driver_in_use: ERROR! unknown driver version (%d)\n",
4885 r->version));
4886 werr = WERR_UNKNOWN_PRINTER_DRIVER;
4887 break;
4891 /* now check the error code */
4893 if ( W_ERROR_IS_OK(werr) ) {
4894 /* it's ok to remove the driver, we have other architctures left */
4895 in_use = False;
4896 free_a_printer_driver(d);
4900 /* report that the driver is not in use by default */
4902 return in_use;
4906 /**********************************************************************
4907 Check to see if a ogiven file is in use by *info
4908 *********************************************************************/
4910 static bool drv_file_in_use(const char *file, const struct spoolss_DriverInfo8 *info)
4912 int i = 0;
4914 if ( !info )
4915 return False;
4917 /* mz: skip files that are in the list but already deleted */
4918 if (!file || !file[0]) {
4919 return false;
4922 if (strequal(file, info->driver_path))
4923 return True;
4925 if (strequal(file, info->data_file))
4926 return True;
4928 if (strequal(file, info->config_file))
4929 return True;
4931 if (strequal(file, info->help_file))
4932 return True;
4934 /* see of there are any dependent files to examine */
4936 if (!info->dependent_files)
4937 return False;
4939 while (info->dependent_files[i] && *info->dependent_files[i]) {
4940 if (strequal(file, info->dependent_files[i]))
4941 return True;
4942 i++;
4945 return False;
4949 /**********************************************************************
4950 Utility function to remove the dependent file pointed to by the
4951 input parameter from the list
4952 *********************************************************************/
4954 static void trim_dependent_file(TALLOC_CTX *mem_ctx, const char **files, int idx)
4957 /* bump everything down a slot */
4959 while (files && files[idx+1]) {
4960 files[idx] = talloc_strdup(mem_ctx, files[idx+1]);
4961 idx++;
4964 files[idx] = NULL;
4966 return;
4969 /**********************************************************************
4970 Check if any of the files used by src are also used by drv
4971 *********************************************************************/
4973 static bool trim_overlap_drv_files(TALLOC_CTX *mem_ctx,
4974 struct spoolss_DriverInfo8 *src,
4975 const struct spoolss_DriverInfo8 *drv)
4977 bool in_use = False;
4978 int i = 0;
4980 if ( !src || !drv )
4981 return False;
4983 /* check each file. Remove it from the src structure if it overlaps */
4985 if (drv_file_in_use(src->driver_path, drv)) {
4986 in_use = True;
4987 DEBUG(10,("Removing driverfile [%s] from list\n", src->driver_path));
4988 src->driver_path = talloc_strdup(mem_ctx, "");
4989 if (!src->driver_path) { return false; }
4992 if (drv_file_in_use(src->data_file, drv)) {
4993 in_use = True;
4994 DEBUG(10,("Removing datafile [%s] from list\n", src->data_file));
4995 src->data_file = talloc_strdup(mem_ctx, "");
4996 if (!src->data_file) { return false; }
4999 if (drv_file_in_use(src->config_file, drv)) {
5000 in_use = True;
5001 DEBUG(10,("Removing configfile [%s] from list\n", src->config_file));
5002 src->config_file = talloc_strdup(mem_ctx, "");
5003 if (!src->config_file) { return false; }
5006 if (drv_file_in_use(src->help_file, drv)) {
5007 in_use = True;
5008 DEBUG(10,("Removing helpfile [%s] from list\n", src->help_file));
5009 src->help_file = talloc_strdup(mem_ctx, "");
5010 if (!src->help_file) { return false; }
5013 /* are there any dependentfiles to examine? */
5015 if (!src->dependent_files)
5016 return in_use;
5018 while (src->dependent_files[i] && *src->dependent_files[i]) {
5019 if (drv_file_in_use(src->dependent_files[i], drv)) {
5020 in_use = True;
5021 DEBUG(10,("Removing [%s] from dependent file list\n", src->dependent_files[i]));
5022 trim_dependent_file(mem_ctx, src->dependent_files, i);
5023 } else
5024 i++;
5027 return in_use;
5030 /****************************************************************************
5031 Determine whether or not a particular driver files are currently being
5032 used by any other driver.
5034 Return value is True if any files were in use by other drivers
5035 and False otherwise.
5037 Upon return, *info has been modified to only contain the driver files
5038 which are not in use
5040 Fix from mz:
5042 This needs to check all drivers to ensure that all files in use
5043 have been removed from *info, not just the ones in the first
5044 match.
5045 ****************************************************************************/
5047 bool printer_driver_files_in_use(TALLOC_CTX *mem_ctx,
5048 struct spoolss_DriverInfo8 *info)
5050 int i;
5051 int ndrivers;
5052 uint32 version;
5053 fstring *list = NULL;
5054 struct spoolss_DriverInfo8 *driver;
5055 bool in_use = false;
5057 if ( !info )
5058 return False;
5060 version = info->version;
5062 /* loop over all driver versions */
5064 DEBUG(5,("printer_driver_files_in_use: Beginning search through ntdrivers.tdb...\n"));
5066 /* get the list of drivers */
5068 list = NULL;
5069 ndrivers = get_ntdrivers(&list, info->architecture, version);
5071 DEBUGADD(4,("we have:[%d] drivers in environment [%s] and version [%d]\n",
5072 ndrivers, info->architecture, version));
5074 /* check each driver for overlap in files */
5076 for (i=0; i<ndrivers; i++) {
5077 DEBUGADD(5,("\tdriver: [%s]\n", list[i]));
5079 driver = NULL;
5081 if (!W_ERROR_IS_OK(get_a_printer_driver(talloc_tos(), &driver, list[i], info->architecture, version))) {
5082 SAFE_FREE(list);
5083 return True;
5086 /* check if d2 uses any files from d1 */
5087 /* only if this is a different driver than the one being deleted */
5089 if (!strequal(info->driver_name, driver->driver_name)) {
5090 if (trim_overlap_drv_files(mem_ctx, info, driver)) {
5091 /* mz: Do not instantly return -
5092 * we need to ensure this file isn't
5093 * also in use by other drivers. */
5094 in_use = true;
5098 free_a_printer_driver(driver);
5101 SAFE_FREE(list);
5103 DEBUG(5,("printer_driver_files_in_use: Completed search through ntdrivers.tdb...\n"));
5105 return in_use;
5108 static NTSTATUS driver_unlink_internals(connection_struct *conn,
5109 const char *name)
5111 struct smb_filename *smb_fname = NULL;
5112 NTSTATUS status;
5114 status = create_synthetic_smb_fname(talloc_tos(), name, NULL, NULL,
5115 &smb_fname);
5116 if (!NT_STATUS_IS_OK(status)) {
5117 return status;
5120 status = unlink_internals(conn, NULL, 0, smb_fname, false);
5122 TALLOC_FREE(smb_fname);
5123 return status;
5126 /****************************************************************************
5127 Actually delete the driver files. Make sure that
5128 printer_driver_files_in_use() return False before calling
5129 this.
5130 ****************************************************************************/
5132 static bool delete_driver_files(struct pipes_struct *rpc_pipe,
5133 const struct spoolss_DriverInfo8 *r)
5135 int i = 0;
5136 char *s;
5137 const char *file;
5138 connection_struct *conn;
5139 NTSTATUS nt_status;
5140 char *oldcwd;
5141 fstring printdollar;
5142 int printdollar_snum;
5143 bool ret = false;
5145 if (!r) {
5146 return false;
5149 DEBUG(6,("delete_driver_files: deleting driver [%s] - version [%d]\n",
5150 r->driver_name, r->version));
5152 fstrcpy(printdollar, "print$");
5154 printdollar_snum = find_service(printdollar);
5155 if (printdollar_snum == -1) {
5156 return false;
5159 nt_status = create_conn_struct(talloc_tos(), &conn, printdollar_snum,
5160 lp_pathname(printdollar_snum),
5161 rpc_pipe->server_info, &oldcwd);
5162 if (!NT_STATUS_IS_OK(nt_status)) {
5163 DEBUG(0,("delete_driver_files: create_conn_struct "
5164 "returned %s\n", nt_errstr(nt_status)));
5165 return false;
5168 if ( !CAN_WRITE(conn) ) {
5169 DEBUG(3,("delete_driver_files: Cannot delete print driver when [print$] is read-only\n"));
5170 goto fail;
5173 /* now delete the files; must strip the '\print$' string from
5174 fron of path */
5176 if (r->driver_path && r->driver_path[0]) {
5177 if ((s = strchr(&r->driver_path[1], '\\')) != NULL) {
5178 file = s;
5179 DEBUG(10,("deleting driverfile [%s]\n", s));
5180 driver_unlink_internals(conn, file);
5184 if (r->config_file && r->config_file[0]) {
5185 if ((s = strchr(&r->config_file[1], '\\')) != NULL) {
5186 file = s;
5187 DEBUG(10,("deleting configfile [%s]\n", s));
5188 driver_unlink_internals(conn, file);
5192 if (r->data_file && r->data_file[0]) {
5193 if ((s = strchr(&r->data_file[1], '\\')) != NULL) {
5194 file = s;
5195 DEBUG(10,("deleting datafile [%s]\n", s));
5196 driver_unlink_internals(conn, file);
5200 if (r->help_file && r->help_file[0]) {
5201 if ((s = strchr(&r->help_file[1], '\\')) != NULL) {
5202 file = s;
5203 DEBUG(10,("deleting helpfile [%s]\n", s));
5204 driver_unlink_internals(conn, file);
5208 /* check if we are done removing files */
5210 if (r->dependent_files) {
5211 while (r->dependent_files[i] && r->dependent_files[i][0]) {
5212 char *p;
5214 /* bypass the "\print$" portion of the path */
5216 if ((p = strchr(r->dependent_files[i]+1, '\\')) != NULL) {
5217 file = p;
5218 DEBUG(10,("deleting dependent file [%s]\n", file));
5219 driver_unlink_internals(conn, file);
5222 i++;
5226 goto done;
5227 fail:
5228 ret = false;
5229 done:
5230 if (conn != NULL) {
5231 vfs_ChDir(conn, oldcwd);
5232 conn_free(conn);
5234 return ret;
5237 /****************************************************************************
5238 Remove a printer driver from the TDB. This assumes that the the driver was
5239 previously looked up.
5240 ***************************************************************************/
5242 WERROR delete_printer_driver(struct pipes_struct *rpc_pipe,
5243 const struct spoolss_DriverInfo8 *r,
5244 uint32 version, bool delete_files )
5246 char *key = NULL;
5247 const char *arch;
5248 TDB_DATA dbuf;
5250 /* delete the tdb data first */
5252 arch = get_short_archi(r->architecture);
5253 if (!arch) {
5254 return WERR_UNKNOWN_PRINTER_DRIVER;
5256 if (asprintf(&key, "%s%s/%d/%s", DRIVERS_PREFIX,
5257 arch, version, r->driver_name) < 0) {
5258 return WERR_NOMEM;
5261 DEBUG(5,("delete_printer_driver: key = [%s] delete_files = %s\n",
5262 key, delete_files ? "TRUE" : "FALSE" ));
5264 /* check if the driver actually exists for this environment */
5266 dbuf = tdb_fetch_bystring( tdb_drivers, key );
5267 if ( !dbuf.dptr ) {
5268 DEBUG(8,("delete_printer_driver: Driver unknown [%s]\n", key));
5269 SAFE_FREE(key);
5270 return WERR_UNKNOWN_PRINTER_DRIVER;
5273 SAFE_FREE( dbuf.dptr );
5275 /* ok... the driver exists so the delete should return success */
5277 if (tdb_delete_bystring(tdb_drivers, key) == -1) {
5278 DEBUG (0,("delete_printer_driver: fail to delete %s!\n", key));
5279 SAFE_FREE(key);
5280 return WERR_ACCESS_DENIED;
5284 * now delete any associated files if delete_files == True
5285 * even if this part failes, we return succes because the
5286 * driver doesn not exist any more
5289 if ( delete_files )
5290 delete_driver_files(rpc_pipe, r);
5292 DEBUG(5,("delete_printer_driver: driver delete successful [%s]\n", key));
5293 SAFE_FREE(key);
5295 return WERR_OK;
5298 /****************************************************************************
5299 Store a security desc for a printer.
5300 ****************************************************************************/
5302 WERROR nt_printing_setsec(const char *sharename, SEC_DESC_BUF *secdesc_ctr)
5304 SEC_DESC_BUF *new_secdesc_ctr = NULL;
5305 SEC_DESC_BUF *old_secdesc_ctr = NULL;
5306 TALLOC_CTX *mem_ctx = NULL;
5307 TDB_DATA kbuf;
5308 TDB_DATA dbuf;
5309 DATA_BLOB blob;
5310 WERROR status;
5311 NTSTATUS nt_status;
5313 mem_ctx = talloc_init("nt_printing_setsec");
5314 if (mem_ctx == NULL)
5315 return WERR_NOMEM;
5317 /* The old owner and group sids of the security descriptor are not
5318 present when new ACEs are added or removed by changing printer
5319 permissions through NT. If they are NULL in the new security
5320 descriptor then copy them over from the old one. */
5322 if (!secdesc_ctr->sd->owner_sid || !secdesc_ctr->sd->group_sid) {
5323 DOM_SID *owner_sid, *group_sid;
5324 SEC_ACL *dacl, *sacl;
5325 SEC_DESC *psd = NULL;
5326 size_t size;
5328 if (!nt_printing_getsec(mem_ctx, sharename, &old_secdesc_ctr)) {
5329 status = WERR_NOMEM;
5330 goto out;
5333 /* Pick out correct owner and group sids */
5335 owner_sid = secdesc_ctr->sd->owner_sid ?
5336 secdesc_ctr->sd->owner_sid :
5337 old_secdesc_ctr->sd->owner_sid;
5339 group_sid = secdesc_ctr->sd->group_sid ?
5340 secdesc_ctr->sd->group_sid :
5341 old_secdesc_ctr->sd->group_sid;
5343 dacl = secdesc_ctr->sd->dacl ?
5344 secdesc_ctr->sd->dacl :
5345 old_secdesc_ctr->sd->dacl;
5347 sacl = secdesc_ctr->sd->sacl ?
5348 secdesc_ctr->sd->sacl :
5349 old_secdesc_ctr->sd->sacl;
5351 /* Make a deep copy of the security descriptor */
5353 psd = make_sec_desc(mem_ctx, secdesc_ctr->sd->revision, secdesc_ctr->sd->type,
5354 owner_sid, group_sid,
5355 sacl,
5356 dacl,
5357 &size);
5359 if (!psd) {
5360 status = WERR_NOMEM;
5361 goto out;
5364 new_secdesc_ctr = make_sec_desc_buf(mem_ctx, size, psd);
5367 if (!new_secdesc_ctr) {
5368 new_secdesc_ctr = secdesc_ctr;
5371 /* Store the security descriptor in a tdb */
5373 nt_status = marshall_sec_desc_buf(mem_ctx, new_secdesc_ctr,
5374 &blob.data, &blob.length);
5375 if (!NT_STATUS_IS_OK(nt_status)) {
5376 status = ntstatus_to_werror(nt_status);
5377 goto out;
5380 kbuf = make_printers_secdesc_tdbkey(mem_ctx, sharename );
5382 dbuf.dptr = (unsigned char *)blob.data;
5383 dbuf.dsize = blob.length;
5385 if (tdb_trans_store(tdb_printers, kbuf, dbuf, TDB_REPLACE)==0) {
5386 status = WERR_OK;
5387 } else {
5388 DEBUG(1,("Failed to store secdesc for %s\n", sharename));
5389 status = WERR_BADFUNC;
5392 /* Free malloc'ed memory */
5393 talloc_free(blob.data);
5395 out:
5397 if (mem_ctx)
5398 talloc_destroy(mem_ctx);
5399 return status;
5402 /****************************************************************************
5403 Construct a default security descriptor buffer for a printer.
5404 ****************************************************************************/
5406 static SEC_DESC_BUF *construct_default_printer_sdb(TALLOC_CTX *ctx)
5408 SEC_ACE ace[5]; /* max number of ace entries */
5409 int i = 0;
5410 uint32_t sa;
5411 SEC_ACL *psa = NULL;
5412 SEC_DESC_BUF *sdb = NULL;
5413 SEC_DESC *psd = NULL;
5414 DOM_SID adm_sid;
5415 size_t sd_size;
5417 /* Create an ACE where Everyone is allowed to print */
5419 sa = PRINTER_ACE_PRINT;
5420 init_sec_ace(&ace[i++], &global_sid_World, SEC_ACE_TYPE_ACCESS_ALLOWED,
5421 sa, SEC_ACE_FLAG_CONTAINER_INHERIT);
5423 /* Add the domain admins group if we are a DC */
5425 if ( IS_DC ) {
5426 DOM_SID domadmins_sid;
5428 sid_compose(&domadmins_sid, get_global_sam_sid(),
5429 DOMAIN_GROUP_RID_ADMINS);
5431 sa = PRINTER_ACE_FULL_CONTROL;
5432 init_sec_ace(&ace[i++], &domadmins_sid,
5433 SEC_ACE_TYPE_ACCESS_ALLOWED, sa,
5434 SEC_ACE_FLAG_OBJECT_INHERIT | SEC_ACE_FLAG_INHERIT_ONLY);
5435 init_sec_ace(&ace[i++], &domadmins_sid, SEC_ACE_TYPE_ACCESS_ALLOWED,
5436 sa, SEC_ACE_FLAG_CONTAINER_INHERIT);
5438 else if (secrets_fetch_domain_sid(lp_workgroup(), &adm_sid)) {
5439 sid_append_rid(&adm_sid, DOMAIN_USER_RID_ADMIN);
5441 sa = PRINTER_ACE_FULL_CONTROL;
5442 init_sec_ace(&ace[i++], &adm_sid,
5443 SEC_ACE_TYPE_ACCESS_ALLOWED, sa,
5444 SEC_ACE_FLAG_OBJECT_INHERIT | SEC_ACE_FLAG_INHERIT_ONLY);
5445 init_sec_ace(&ace[i++], &adm_sid, SEC_ACE_TYPE_ACCESS_ALLOWED,
5446 sa, SEC_ACE_FLAG_CONTAINER_INHERIT);
5449 /* add BUILTIN\Administrators as FULL CONTROL */
5451 sa = PRINTER_ACE_FULL_CONTROL;
5452 init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators,
5453 SEC_ACE_TYPE_ACCESS_ALLOWED, sa,
5454 SEC_ACE_FLAG_OBJECT_INHERIT | SEC_ACE_FLAG_INHERIT_ONLY);
5455 init_sec_ace(&ace[i++], &global_sid_Builtin_Administrators,
5456 SEC_ACE_TYPE_ACCESS_ALLOWED,
5457 sa, SEC_ACE_FLAG_CONTAINER_INHERIT);
5459 /* Make the security descriptor owned by the BUILTIN\Administrators */
5461 /* The ACL revision number in rpc_secdesc.h differs from the one
5462 created by NT when setting ACE entries in printer
5463 descriptors. NT4 complains about the property being edited by a
5464 NT5 machine. */
5466 if ((psa = make_sec_acl(ctx, NT4_ACL_REVISION, i, ace)) != NULL) {
5467 psd = make_sec_desc(ctx, SEC_DESC_REVISION, SEC_DESC_SELF_RELATIVE,
5468 &global_sid_Builtin_Administrators,
5469 &global_sid_Builtin_Administrators,
5470 NULL, psa, &sd_size);
5473 if (!psd) {
5474 DEBUG(0,("construct_default_printer_sd: Failed to make SEC_DESC.\n"));
5475 return NULL;
5478 sdb = make_sec_desc_buf(ctx, sd_size, psd);
5480 DEBUG(4,("construct_default_printer_sdb: size = %u.\n",
5481 (unsigned int)sd_size));
5483 return sdb;
5486 /****************************************************************************
5487 Get a security desc for a printer.
5488 ****************************************************************************/
5490 bool nt_printing_getsec(TALLOC_CTX *ctx, const char *sharename, SEC_DESC_BUF **secdesc_ctr)
5492 TDB_DATA kbuf;
5493 TDB_DATA dbuf;
5494 DATA_BLOB blob;
5495 char *temp;
5496 NTSTATUS status;
5498 if (strlen(sharename) > 2 && (temp = strchr(sharename + 2, '\\'))) {
5499 sharename = temp + 1;
5502 /* Fetch security descriptor from tdb */
5504 kbuf = make_printers_secdesc_tdbkey(ctx, sharename);
5506 dbuf = tdb_fetch(tdb_printers, kbuf);
5507 if (dbuf.dptr) {
5509 status = unmarshall_sec_desc_buf(ctx, dbuf.dptr, dbuf.dsize,
5510 secdesc_ctr);
5511 SAFE_FREE(dbuf.dptr);
5513 if (NT_STATUS_IS_OK(status)) {
5514 return true;
5518 *secdesc_ctr = construct_default_printer_sdb(ctx);
5519 if (!*secdesc_ctr) {
5520 return false;
5523 status = marshall_sec_desc_buf(ctx, *secdesc_ctr,
5524 &blob.data, &blob.length);
5525 if (NT_STATUS_IS_OK(status)) {
5526 dbuf.dptr = (unsigned char *)blob.data;
5527 dbuf.dsize = blob.length;
5528 tdb_trans_store(tdb_printers, kbuf, dbuf, TDB_REPLACE);
5529 talloc_free(blob.data);
5532 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
5533 this security descriptor has been created when winbindd was
5534 down. Take ownership of security descriptor. */
5536 if (sid_equal((*secdesc_ctr)->sd->owner_sid, &global_sid_World)) {
5537 DOM_SID owner_sid;
5539 /* Change sd owner to workgroup administrator */
5541 if (secrets_fetch_domain_sid(lp_workgroup(), &owner_sid)) {
5542 SEC_DESC_BUF *new_secdesc_ctr = NULL;
5543 SEC_DESC *psd = NULL;
5544 size_t size;
5546 /* Create new sd */
5548 sid_append_rid(&owner_sid, DOMAIN_USER_RID_ADMIN);
5550 psd = make_sec_desc(ctx, (*secdesc_ctr)->sd->revision, (*secdesc_ctr)->sd->type,
5551 &owner_sid,
5552 (*secdesc_ctr)->sd->group_sid,
5553 (*secdesc_ctr)->sd->sacl,
5554 (*secdesc_ctr)->sd->dacl,
5555 &size);
5557 if (!psd) {
5558 return False;
5561 new_secdesc_ctr = make_sec_desc_buf(ctx, size, psd);
5562 if (!new_secdesc_ctr) {
5563 return False;
5566 /* Swap with other one */
5568 *secdesc_ctr = new_secdesc_ctr;
5570 /* Set it */
5572 nt_printing_setsec(sharename, *secdesc_ctr);
5576 if (DEBUGLEVEL >= 10) {
5577 SEC_ACL *the_acl = (*secdesc_ctr)->sd->dacl;
5578 int i;
5580 DEBUG(10, ("secdesc_ctr for %s has %d aces:\n",
5581 sharename, the_acl->num_aces));
5583 for (i = 0; i < the_acl->num_aces; i++) {
5584 DEBUG(10, ("%s %d %d 0x%08x\n",
5585 sid_string_dbg(&the_acl->aces[i].trustee),
5586 the_acl->aces[i].type, the_acl->aces[i].flags,
5587 the_acl->aces[i].access_mask));
5591 return True;
5594 /* error code:
5595 0: everything OK
5596 1: level not implemented
5597 2: file doesn't exist
5598 3: can't allocate memory
5599 4: can't free memory
5600 5: non existant struct
5604 A printer and a printer driver are 2 different things.
5605 NT manages them separatelly, Samba does the same.
5606 Why ? Simply because it's easier and it makes sense !
5608 Now explanation: You have 3 printers behind your samba server,
5609 2 of them are the same make and model (laser A and B). But laser B
5610 has an 3000 sheet feeder and laser A doesn't such an option.
5611 Your third printer is an old dot-matrix model for the accounting :-).
5613 If the /usr/local/samba/lib directory (default dir), you will have
5614 5 files to describe all of this.
5616 3 files for the printers (1 by printer):
5617 NTprinter_laser A
5618 NTprinter_laser B
5619 NTprinter_accounting
5620 2 files for the drivers (1 for the laser and 1 for the dot matrix)
5621 NTdriver_printer model X
5622 NTdriver_printer model Y
5624 jfm: I should use this comment for the text file to explain
5625 same thing for the forms BTW.
5626 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
5630 /* Convert generic access rights to printer object specific access rights.
5631 It turns out that NT4 security descriptors use generic access rights and
5632 NT5 the object specific ones. */
5634 void map_printer_permissions(SEC_DESC *sd)
5636 int i;
5638 for (i = 0; sd->dacl && i < sd->dacl->num_aces; i++) {
5639 se_map_generic(&sd->dacl->aces[i].access_mask,
5640 &printer_generic_mapping);
5644 void map_job_permissions(SEC_DESC *sd)
5646 int i;
5648 for (i = 0; sd->dacl && i < sd->dacl->num_aces; i++) {
5649 se_map_generic(&sd->dacl->aces[i].access_mask,
5650 &job_generic_mapping);
5655 /****************************************************************************
5656 Check a user has permissions to perform the given operation. We use the
5657 permission constants defined in include/rpc_spoolss.h to check the various
5658 actions we perform when checking printer access.
5660 PRINTER_ACCESS_ADMINISTER:
5661 print_queue_pause, print_queue_resume, update_printer_sec,
5662 update_printer, spoolss_addprinterex_level_2,
5663 _spoolss_setprinterdata
5665 PRINTER_ACCESS_USE:
5666 print_job_start
5668 JOB_ACCESS_ADMINISTER:
5669 print_job_delete, print_job_pause, print_job_resume,
5670 print_queue_purge
5672 Try access control in the following order (for performance reasons):
5673 1) root and SE_PRINT_OPERATOR can do anything (easy check)
5674 2) check security descriptor (bit comparisons in memory)
5675 3) "printer admins" (may result in numerous calls to winbind)
5677 ****************************************************************************/
5678 bool print_access_check(struct auth_serversupplied_info *server_info, int snum,
5679 int access_type)
5681 SEC_DESC_BUF *secdesc = NULL;
5682 uint32 access_granted;
5683 NTSTATUS status;
5684 const char *pname;
5685 TALLOC_CTX *mem_ctx = NULL;
5686 SE_PRIV se_printop = SE_PRINT_OPERATOR;
5688 /* If user is NULL then use the current_user structure */
5690 /* Always allow root or SE_PRINT_OPERATROR to do anything */
5692 if (server_info->utok.uid == sec_initial_uid()
5693 || user_has_privileges(server_info->ptok, &se_printop ) ) {
5694 return True;
5697 /* Get printer name */
5699 pname = PRINTERNAME(snum);
5701 if (!pname || !*pname) {
5702 errno = EACCES;
5703 return False;
5706 /* Get printer security descriptor */
5708 if(!(mem_ctx = talloc_init("print_access_check"))) {
5709 errno = ENOMEM;
5710 return False;
5713 if (!nt_printing_getsec(mem_ctx, pname, &secdesc)) {
5714 talloc_destroy(mem_ctx);
5715 errno = ENOMEM;
5716 return False;
5719 if (access_type == JOB_ACCESS_ADMINISTER) {
5720 SEC_DESC_BUF *parent_secdesc = secdesc;
5722 /* Create a child security descriptor to check permissions
5723 against. This is because print jobs are child objects
5724 objects of a printer. */
5726 status = se_create_child_secdesc_buf(mem_ctx, &secdesc, parent_secdesc->sd, False);
5728 if (!NT_STATUS_IS_OK(status)) {
5729 talloc_destroy(mem_ctx);
5730 errno = map_errno_from_nt_status(status);
5731 return False;
5734 map_job_permissions(secdesc->sd);
5735 } else {
5736 map_printer_permissions(secdesc->sd);
5739 /* Check access */
5740 status = se_access_check(secdesc->sd, server_info->ptok, access_type,
5741 &access_granted);
5743 DEBUG(4, ("access check was %s\n", NT_STATUS_IS_OK(status) ? "SUCCESS" : "FAILURE"));
5745 /* see if we need to try the printer admin list */
5747 if (!NT_STATUS_IS_OK(status) &&
5748 (token_contains_name_in_list(uidtoname(server_info->utok.uid),
5749 NULL, NULL, server_info->ptok,
5750 lp_printer_admin(snum)))) {
5751 talloc_destroy(mem_ctx);
5752 return True;
5755 talloc_destroy(mem_ctx);
5757 if (!NT_STATUS_IS_OK(status)) {
5758 errno = EACCES;
5761 return NT_STATUS_IS_OK(status);
5764 /****************************************************************************
5765 Check the time parameters allow a print operation.
5766 *****************************************************************************/
5768 bool print_time_access_check(const char *servicename)
5770 NT_PRINTER_INFO_LEVEL *printer = NULL;
5771 bool ok = False;
5772 time_t now = time(NULL);
5773 struct tm *t;
5774 uint32 mins;
5776 if (!W_ERROR_IS_OK(get_a_printer(NULL, &printer, 2, servicename)))
5777 return False;
5779 if (printer->info_2->starttime == 0 && printer->info_2->untiltime == 0)
5780 ok = True;
5782 t = gmtime(&now);
5783 mins = (uint32)t->tm_hour*60 + (uint32)t->tm_min;
5785 if (mins >= printer->info_2->starttime && mins <= printer->info_2->untiltime)
5786 ok = True;
5788 free_a_printer(&printer, 2);
5790 if (!ok)
5791 errno = EACCES;
5793 return ok;
5796 /****************************************************************************
5797 Fill in the servername sent in the _spoolss_open_printer_ex() call
5798 ****************************************************************************/
5800 char* get_server_name( Printer_entry *printer )
5802 return printer->servername;