source3/utils/net.c

   1 /*
   2    Samba Unix/Linux SMB client library
   3    Distributed SMB/CIFS Server Management Utility
   4    Copyright (C) 2001 Steve French  (sfrench@us.ibm.com)
   5    Copyright (C) 2001 Jim McDonough (jmcd@us.ibm.com)
   6    Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
   7    Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
   8    Copyright (C) 2008 Kai Blin (kai@samba.org)
   9
  10    Originally written by Steve and Jim. Largely rewritten by tridge in
  11    November 2001.
  12
  13    Reworked again by abartlet in December 2001
  14
  15    Another overhaul, moving functionality into plug-ins loaded on demand by Kai
  16    in May 2008.
  17
  18    This program is free software; you can redistribute it and/or modify
  19    it under the terms of the GNU General Public License as published by
  20    the Free Software Foundation; either version 3 of the License, or
  21    (at your option) any later version.
  22
  23    This program is distributed in the hope that it will be useful,
  24    but WITHOUT ANY WARRANTY; without even the implied warranty of
  25    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  26    GNU General Public License for more details.
  27
  28    You should have received a copy of the GNU General Public License
  29    along with this program.  If not, see <http://www.gnu.org/licenses/>.  */
  30
  31 /*****************************************************/
  32 /*                                                   */
  33 /*   Distributed SMB/CIFS Server Management Utility  */
  34 /*                                                   */
  35 /*   The intent was to make the syntax similar       */
  36 /*   to the NET utility (first developed in DOS      */
  37 /*   with additional interesting & useful functions  */
  38 /*   added in later SMB server network operating     */
  39 /*   systems).                                       */
  40 /*                                                   */
  41 /*****************************************************/
  42
  43 #include "includes.h"
  44 #include "utils/net.h"
  45
  46 extern bool AllowDebugChange;
  47
  48 #ifdef WITH_FAKE_KASERVER
  49 #include "utils/net_afs.h"
  50 #endif
  51
  52 /***********************************************************************/
  53 /* Beginning of internationalization section.  Translatable constants  */
  54 /* should be kept in this area and referenced in the rest of the code. */
  55 /*                                                                     */
  56 /* No functions, outside of Samba or LSB (Linux Standards Base) should */
  57 /* be used (if possible).                                              */
  58 /***********************************************************************/
  59
  60 #define YES_STRING              "Yes"
  61 #define NO_STRING               "No"
  62
  63 /***********************************************************************/
  64 /* end of internationalization section                                 */
  65 /***********************************************************************/
  66
  67 uint32 get_sec_channel_type(const char *param)
  68 {
  69         if (!(param && *param)) {
  70                 return get_default_sec_channel();
  71         } else {
  72                 if (strequal(param, "PDC")) {
  73                         return SEC_CHAN_BDC;
  74                 } else if (strequal(param, "BDC")) {
  75                         return SEC_CHAN_BDC;
  76                 } else if (strequal(param, "MEMBER")) {
  77                         return SEC_CHAN_WKSTA;
  78 #if 0
  79                 } else if (strequal(param, "DOMAIN")) {
  80                         return SEC_CHAN_DOMAIN;
  81 #endif
  82                 } else {
  83                         return get_default_sec_channel();
  84                 }
  85         }
  86 }
  87
  88 static int net_changetrustpw(struct net_context *c, int argc, const char **argv)
  89 {
  90         if (net_ads_check_our_domain(c) == 0)
  91                 return net_ads_changetrustpw(c, argc, argv);
  92
  93         return net_rpc_changetrustpw(c, argc, argv);
  94 }
  95
  96 static void set_line_buffering(FILE *f)
  97 {
  98         setvbuf(f, NULL, _IOLBF, 0);
  99 }
 100
 101 static int net_changesecretpw(struct net_context *c, int argc,
 102                               const char **argv)
 103 {
 104         char *trust_pw;
 105         uint32 sec_channel_type = SEC_CHAN_WKSTA;
 106
 107         if(c->opt_force) {
 108                 if (c->opt_stdin) {
 109                         set_line_buffering(stdin);
 110                         set_line_buffering(stdout);
 111                         set_line_buffering(stderr);
 112                 }
 113
 114                 trust_pw = get_pass("Enter machine password: ", c->opt_stdin);
 115
 116                 if (!secrets_store_machine_password(trust_pw, lp_workgroup(), sec_channel_type)) {
 117                             d_fprintf(stderr, "Unable to write the machine account password in the secrets database");
 118                             return 1;
 119                 }
 120                 else {
 121                     d_printf("Modified trust account password in secrets database\n");
 122                 }
 123         }
 124         else {
 125                 d_printf("Machine account password change requires the -f flag.\n");
 126                 d_printf("Do NOT use this function unless you know what it does!\n");
 127                 d_printf("This function will change the ADS Domain member machine account password in the secrets.tdb file!\n");
 128         }
 129
 130         return 0;
 131 }
 132
 133 /*
 134  Retrieve our local SID or the SID for the specified name
 135  */
 136 static int net_getlocalsid(struct net_context *c, int argc, const char **argv)
 137 {
 138         DOM_SID sid;
 139         const char *name;
 140         fstring sid_str;
 141
 142         if (argc >= 1) {
 143                 name = argv[0];
 144         }
 145         else {
 146                 name = global_myname();
 147         }
 148
 149         if(!initialize_password_db(false, NULL)) {
 150                 DEBUG(0, ("WARNING: Could not open passdb - local sid may not reflect passdb\n"
 151                           "backend knowledge (such as the sid stored in LDAP)\n"));
 152         }
 153
 154         /* first check to see if we can even access secrets, so we don't
 155            panic when we can't. */
 156
 157         if (!secrets_init()) {
 158                 d_fprintf(stderr, "Unable to open secrets.tdb.  Can't fetch domain SID for name: %s\n", name);
 159                 return 1;
 160         }
 161
 162         /* Generate one, if it doesn't exist */
 163         get_global_sam_sid();
 164
 165         if (!secrets_fetch_domain_sid(name, &sid)) {
 166                 DEBUG(0, ("Can't fetch domain SID for name: %s\n", name));
 167                 return 1;
 168         }
 169         sid_to_fstring(sid_str, &sid);
 170         d_printf("SID for domain %s is: %s\n", name, sid_str);
 171         return 0;
 172 }
 173
 174 static int net_setlocalsid(struct net_context *c, int argc, const char **argv)
 175 {
 176         DOM_SID sid;
 177
 178         if ( (argc != 1)
 179              || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
 180              || (!string_to_sid(&sid, argv[0]))
 181              || (sid.num_auths != 4)) {
 182                 d_printf("usage: net setlocalsid S-1-5-21-x-y-z\n");
 183                 return 1;
 184         }
 185
 186         if (!secrets_store_domain_sid(global_myname(), &sid)) {
 187                 DEBUG(0,("Can't store domain SID as a pdc/bdc.\n"));
 188                 return 1;
 189         }
 190
 191         return 0;
 192 }
 193
 194 static int net_setdomainsid(struct net_context *c, int argc, const char **argv)
 195 {
 196         DOM_SID sid;
 197
 198         if ( (argc != 1)
 199              || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
 200              || (!string_to_sid(&sid, argv[0]))
 201              || (sid.num_auths != 4)) {
 202                 d_printf("usage: net setdomainsid S-1-5-21-x-y-z\n");
 203                 return 1;
 204         }
 205
 206         if (!secrets_store_domain_sid(lp_workgroup(), &sid)) {
 207                 DEBUG(0,("Can't store domain SID.\n"));
 208                 return 1;
 209         }
 210
 211         return 0;
 212 }
 213
 214 static int net_getdomainsid(struct net_context *c, int argc, const char **argv)
 215 {
 216         DOM_SID domain_sid;
 217         fstring sid_str;
 218
 219         if (argc > 0) {
 220                 d_printf("usage: net getdomainsid\n");
 221                 return 1;
 222         }
 223
 224         if(!initialize_password_db(false, NULL)) {
 225                 DEBUG(0, ("WARNING: Could not open passdb - domain SID may "
 226                           "not reflect passdb\n"
 227                           "backend knowledge (such as the SID stored in "
 228                           "LDAP)\n"));
 229         }
 230
 231         /* first check to see if we can even access secrets, so we don't
 232            panic when we can't. */
 233
 234         if (!secrets_init()) {
 235                 d_fprintf(stderr, "Unable to open secrets.tdb.  Can't fetch domain"
 236                                   "SID for name: %s\n", get_global_sam_name());
 237                 return 1;
 238         }
 239
 240         /* Generate one, if it doesn't exist */
 241         get_global_sam_sid();
 242
 243         if (!secrets_fetch_domain_sid(global_myname(), &domain_sid)) {
 244                 d_fprintf(stderr, "Could not fetch local SID\n");
 245                 return 1;
 246         }
 247         sid_to_fstring(sid_str, &domain_sid);
 248         d_printf("SID for local machine %s is: %s\n", global_myname(), sid_str);
 249
 250         if (!secrets_fetch_domain_sid(c->opt_workgroup, &domain_sid)) {
 251                 d_fprintf(stderr, "Could not fetch domain SID\n");
 252                 return 1;
 253         }
 254
 255         sid_to_fstring(sid_str, &domain_sid);
 256         d_printf("SID for domain %s is: %s\n", c->opt_workgroup, sid_str);
 257
 258         return 0;
 259 }
 260
 261 static bool search_maxrid(struct pdb_search *search, const char *type,
 262                           uint32 *max_rid)
 263 {
 264         struct samr_displayentry *entries;
 265         uint32 i, num_entries;
 266
 267         if (search == NULL) {
 268                 d_fprintf(stderr, "get_maxrid: Could not search %s\n", type);
 269                 return false;
 270         }
 271
 272         num_entries = pdb_search_entries(search, 0, 0xffffffff, &entries);
 273         for (i=0; i<num_entries; i++)
 274                 *max_rid = MAX(*max_rid, entries[i].rid);
 275         pdb_search_destroy(search);
 276         return true;
 277 }
 278
 279 static uint32 get_maxrid(void)
 280 {
 281         uint32 max_rid = 0;
 282
 283         if (!search_maxrid(pdb_search_users(0), "users", &max_rid))
 284                 return 0;
 285
 286         if (!search_maxrid(pdb_search_groups(), "groups", &max_rid))
 287                 return 0;
 288
 289         if (!search_maxrid(pdb_search_aliases(get_global_sam_sid()),
 290                            "aliases", &max_rid))
 291                 return 0;
 292
 293         return max_rid;
 294 }
 295
 296 static int net_maxrid(struct net_context *c, int argc, const char **argv)
 297 {
 298         uint32 rid;
 299
 300         if (argc != 0) {
 301                 DEBUG(0, ("usage: net maxrid\n"));
 302                 return 1;
 303         }
 304
 305         if ((rid = get_maxrid()) == 0) {
 306                 DEBUG(0, ("can't get current maximum rid\n"));
 307                 return 1;
 308         }
 309
 310         d_printf("Currently used maximum rid: %d\n", rid);
 311
 312         return 0;
 313 }
 314
 315 /* main function table */
 316 static struct functable net_func[] = {
 317         {
 318                 "rpc",
 319                 net_rpc,
 320                 NET_TRANSPORT_RPC,
 321                 "Run functions using RPC transport",
 322                 "  Use 'net help rpc' to get more extensive information about "
 323                 "'net rpc' commands."
 324         },
 325         {
 326                 "rap",
 327                 net_rap,
 328                 NET_TRANSPORT_RAP,
 329                 "Run functions using RAP transport",
 330                 "  Use 'net help rap' to get more extensive information about "
 331                 "'net rap' commands."
 332         },
 333         {
 334                 "ads",
 335                 net_ads,
 336                 NET_TRANSPORT_ADS,
 337                 "Run functions using ADS transport",
 338                 "  Use 'net help ads' to get more extensive information about "
 339                 "'net ads' commands."
 340         },
 341
 342         /* eventually these should auto-choose the transport ... */
 343         {
 344                 "file",
 345                 net_file,
 346                 NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
 347                 "Functions on remote opened files",
 348                 "  Use 'net help file' to get more information about 'net "
 349                 "file' commands."
 350         },
 351         {
 352                 "share",
 353                 net_share,
 354                 NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
 355                 "Functions on shares",
 356                 "  Use 'net help share' to get more information about 'net "
 357                 "share' commands."
 358         },
 359         {
 360                 "session",
 361                 net_rap_session,
 362                 NET_TRANSPORT_RAP,
 363                 "Manage sessions",
 364                 "  Use 'net help session' to get more information about 'net "
 365                 "session' commands."
 366         },
 367         {
 368                 "server",
 369                 net_rap_server,
 370                 NET_TRANSPORT_RAP,
 371                 "List servers in workgroup",
 372                 "  Use 'net help server' to get more information about 'net "
 373                 "server' commands."
 374         },
 375         {
 376                 "domain",
 377                 net_rap_domain,
 378                 NET_TRANSPORT_RAP,
 379                 "List domains/workgroups on network",
 380                 "  Use 'net help domain' to get more information about 'net "
 381                 "domain' commands."
 382         },
 383         {
 384                 "printq",
 385                 net_rap_printq,
 386                 NET_TRANSPORT_RAP,
 387                 "Modify printer queue",
 388                 "  Use 'net help printq' to get more information about 'net "
 389                 "printq' commands."
 390         },
 391         {
 392                 "user",
 393                 net_user,
 394                 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
 395                 "Manage users",
 396                 "  Use 'net help user' to get more information about 'net "
 397                 "user' commands."
 398         },
 399         {
 400                 "group",
 401                 net_group,
 402                 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
 403                 "Manage groups",
 404                 "  Use 'net help group' to get more information about 'net "
 405                 "group' commands."
 406         },
 407         {
 408                 "groupmap",
 409                 net_groupmap,
 410                 NET_TRANSPORT_LOCAL,
 411                 "Manage group mappings",
 412                 "  Use 'net help groupmap' to get more information about 'net "
 413                 "groupmap' commands."
 414         },
 415         {
 416                 "sam",
 417                 net_sam,
 418                 NET_TRANSPORT_LOCAL,
 419                 "Functions on the SAM database",
 420                 "  Use 'net help sam' to get more information about 'net sam' "
 421                 "commands."
 422         },
 423         {
 424                 "validate",
 425                 net_rap_validate,
 426                 NET_TRANSPORT_RAP,
 427                 "Validate username and password",
 428                 "  Use 'net help validate' to get more information about 'net "
 429                 "validate' commands."
 430         },
 431         {
 432                 "groupmember",
 433                 net_rap_groupmember,
 434                 NET_TRANSPORT_RAP,
 435                 "Modify group memberships",
 436                 "  Use 'net help groupmember' to get more information about "
 437                 "'net groupmember' commands."
 438         },
 439         {       "admin",
 440                 net_rap_admin,
 441                 NET_TRANSPORT_RAP,
 442                 "Execute remote command on a remote OS/2 server",
 443                 "  Use 'net help admin' to get more information about 'net "
 444                 "admin' commands."
 445         },
 446         {       "service",
 447                 net_rap_service,
 448                 NET_TRANSPORT_RAP,
 449                 "List/modify running services",
 450                 "  Use 'net help service' to get more information about 'net "
 451                 "service' commands."
 452         },
 453         {
 454                 "password",
 455                 net_rap_password,
 456                 NET_TRANSPORT_RAP,
 457                 "Change user password on target server",
 458                 "  Use 'net help password' to get more information about 'net "
 459                 "password' commands."
 460         },
 461         {       "changetrustpw",
 462                 net_changetrustpw,
 463                 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
 464                 "Change the trust password",
 465                 "  Use 'net help changetrustpw' to get more information about "
 466                 "'net changetrustpw'."
 467         },
 468         {       "changesecretpw",
 469                 net_changesecretpw,
 470                 NET_TRANSPORT_LOCAL,
 471                 "Change the secret password",
 472                 "  net [options] changesecretpw\n"
 473                 "    Change the ADS domain member machine account password in "
 474                 "secrets.tdb.\n"
 475                 "    Do NOT use this function unless you know what it does.\n"
 476                 "    Requires the -f flag to work."
 477         },
 478         {       "time",
 479                 net_time,
 480                 NET_TRANSPORT_LOCAL,
 481                 "Show/set time",
 482                 "  Use 'net help time' to get more information about 'net "
 483                 "time' commands."
 484         },
 485         {       "lookup",
 486                 net_lookup,
 487                 NET_TRANSPORT_LOCAL,
 488                 "Look up host names/IP addresses",
 489                 "  Use 'net help lookup' to get more information about 'net "
 490                 "lookup' commands."
 491         },
 492         {       "join",
 493                 net_join,
 494                 NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
 495                 "Join a domain/AD",
 496                 "  Use 'net help join' to get more information about 'net "
 497                 "join'."
 498         },
 499         {       "dom",
 500                 net_dom,
 501                 NET_TRANSPORT_LOCAL,
 502                 "Join/unjoin (remote) machines to/from a domain/AD",
 503                 "  Use 'net help dom' to get more information about 'net dom' "
 504                 "commands."
 505         },
 506         {       "cache",
 507                 net_cache,
 508                 NET_TRANSPORT_LOCAL,
 509                 "Operate on the cache tdb file",
 510                 "  Use 'net help cache' to get more information about 'net "
 511                 "cache' commands."
 512         },
 513         {       "getlocalsid",
 514                 net_getlocalsid,
 515                 NET_TRANSPORT_LOCAL,
 516                 "Get the SID for the local domain",
 517                 "  net getlocalsid"
 518         },
 519         {       "setlocalsid",
 520                 net_setlocalsid,
 521                 NET_TRANSPORT_LOCAL,
 522                 "Set the SID for the local domain",
 523                 "  net setlocalsid S-1-5-21-x-y-z"
 524         },
 525         {       "setdomainsid",
 526                 net_setdomainsid,
 527                 NET_TRANSPORT_LOCAL,
 528                 "Set domain SID on member servers",
 529                 "  net setdomainsid S-1-5-21-x-y-z"
 530         },
 531         {       "getdomainsid",
 532                 net_getdomainsid,
 533                 NET_TRANSPORT_LOCAL,
 534                 "Get domain SID on member servers",
 535                 "  net getdomainsid"
 536         },
 537         {       "maxrid",
 538                 net_maxrid,
 539                 NET_TRANSPORT_LOCAL,
 540                 "Display the maximul RID currently used",
 541                 "  net maxrid"
 542         },
 543         {       "idmap",
 544                 net_idmap,
 545                 NET_TRANSPORT_LOCAL,
 546                 "IDmap functions",
 547                 "  Use 'net help idmap to get more information about 'net "
 548                 "idmap' commands."
 549         },
 550         {       "status",
 551                 net_status,
 552                 NET_TRANSPORT_LOCAL,
 553                 "Display server status",
 554                 "  Use 'net help status' to get more information about 'net "
 555                 "status' commands."
 556         },
 557         {       "usershare",
 558                 net_usershare,
 559                 NET_TRANSPORT_LOCAL,
 560                 "Manage user-modifiable shares",
 561                 "  Use 'net help usershare to get more information about 'net "
 562                 "usershare' commands."
 563         },
 564         {       "usersidlist",
 565                 net_usersidlist,
 566                 NET_TRANSPORT_RPC,
 567                 "Display list of all users with SID",
 568                 "  Use 'net help usersidlist' to get more information about "
 569                 "'net usersidlist'."
 570         },
 571         {       "conf",
 572                 net_conf,
 573                 NET_TRANSPORT_LOCAL,
 574                 "Manage Samba registry based configuration",
 575                 "  Use 'net help conf' to get more information about 'net "
 576                 "conf' commands."
 577         },
 578         {       "registry",
 579                 net_registry,
 580                 NET_TRANSPORT_LOCAL,
 581                 "Manage the Samba registry",
 582                 "  Use 'net help registry' to get more information about 'net "
 583                 "registry' commands."
 584         },
 585         {       "lua",
 586                 net_lua,
 587                 NET_TRANSPORT_LOCAL,
 588                 "Open a lua interpreter",
 589                 "  Use 'net help lua' to get more information about 'net "
 590                 "lua' commands."
 591         },
 592 #ifdef WITH_FAKE_KASERVER
 593         {       "afs",
 594                 net_afs,
 595                 NET_TRANSPORT_LOCAL,
 596                 "Manage AFS tokens",
 597                 "  Use 'net help afs' to get more information about 'net afs' "
 598                 "commands."
 599         },
 600 #endif
 601
 602         {       "help",
 603                 net_help,
 604                 NET_TRANSPORT_LOCAL,
 605                 "Print usage information",
 606                 "  Use 'net help help' to list usage information for 'net' "
 607                 "commands."
 608         },
 609         {NULL, NULL, 0, NULL, NULL}
 610 };
 611
 612
 613 /****************************************************************************
 614   main program
 615 ****************************************************************************/
 616  int main(int argc, const char **argv)
 617 {
 618         int opt,i;
 619         char *p;
 620         int rc = 0;
 621         int argc_new = 0;
 622         const char ** argv_new;
 623         poptContext pc;
 624         TALLOC_CTX *frame = talloc_stackframe();
 625         struct net_context *c = talloc_zero(frame, struct net_context);
 626
 627         struct poptOption long_options[] = {
 628                 {"help",        'h', POPT_ARG_NONE,   0, 'h'},
 629                 {"workgroup",   'w', POPT_ARG_STRING, &c->opt_target_workgroup},
 630                 {"user",        'U', POPT_ARG_STRING, &c->opt_user_name, 'U'},
 631                 {"ipaddress",   'I', POPT_ARG_STRING, 0,'I'},
 632                 {"port",        'p', POPT_ARG_INT,    &c->opt_port},
 633                 {"myname",      'n', POPT_ARG_STRING, &c->opt_requester_name},
 634                 {"server",      'S', POPT_ARG_STRING, &c->opt_host},
 635                 {"encrypt",     'e', POPT_ARG_NONE,   NULL, 'e', "Encrypt SMB transport (UNIX extended servers only)" },
 636                 {"container",   'c', POPT_ARG_STRING, &c->opt_container},
 637                 {"comment",     'C', POPT_ARG_STRING, &c->opt_comment},
 638                 {"maxusers",    'M', POPT_ARG_INT,    &c->opt_maxusers},
 639                 {"flags",       'F', POPT_ARG_INT,    &c->opt_flags},
 640                 {"long",        'l', POPT_ARG_NONE,   &c->opt_long_list_entries},
 641                 {"reboot",      'r', POPT_ARG_NONE,   &c->opt_reboot},
 642                 {"force",       'f', POPT_ARG_NONE,   &c->opt_force},
 643                 {"stdin",       'i', POPT_ARG_NONE,   &c->opt_stdin},
 644                 {"timeout",     't', POPT_ARG_INT,    &c->opt_timeout},
 645                 {"machine-pass",'P', POPT_ARG_NONE,   &c->opt_machine_pass},
 646                 {"kerberos",    'k', POPT_ARG_NONE,   &c->opt_kerberos},
 647                 {"myworkgroup", 'W', POPT_ARG_STRING, &c->opt_workgroup},
 648                 {"verbose",     'v', POPT_ARG_NONE,   &c->opt_verbose},
 649                 {"test",        'T', POPT_ARG_NONE,   &c->opt_testmode},
 650                 /* Options for 'net groupmap set' */
 651                 {"local",       'L', POPT_ARG_NONE,   &c->opt_localgroup},
 652                 {"domain",      'D', POPT_ARG_NONE,   &c->opt_domaingroup},
 653                 {"ntname",      'N', POPT_ARG_STRING, &c->opt_newntname},
 654                 {"rid",         'R', POPT_ARG_INT,    &c->opt_rid},
 655                 /* Options for 'net rpc share migrate' */
 656                 {"acls",        0, POPT_ARG_NONE,     &c->opt_acls},
 657                 {"attrs",       0, POPT_ARG_NONE,     &c->opt_attrs},
 658                 {"timestamps",  0, POPT_ARG_NONE,     &c->opt_timestamps},
 659                 {"exclude",     'X', POPT_ARG_STRING, &c->opt_exclude},
 660                 {"destination", 0, POPT_ARG_STRING,   &c->opt_destination},
 661                 {"tallocreport", 0, POPT_ARG_NONE,    &c->do_talloc_report},
 662                 /* Options for 'net rpc vampire (keytab)' */
 663                 {"force-full-repl", 0, POPT_ARG_NONE, &c->opt_force_full_repl},
 664                 {"single-obj-repl", 0, POPT_ARG_NONE, &c->opt_single_obj_repl},
 665                 {"clean-old-entries", 0, POPT_ARG_NONE, &c->opt_clean_old_entries},
 666
 667                 POPT_COMMON_SAMBA
 668                 { 0, 0, 0, 0}
 669         };
 670
 671
 672         zero_sockaddr(&c->opt_dest_ip);
 673
 674         load_case_tables();
 675
 676         /* set default debug level to 0 regardless of what smb.conf sets */
 677         DEBUGLEVEL_CLASS[DBGC_ALL] = 0;
 678         dbf = x_stderr;
 679         c->private_data = net_func;
 680
 681         pc = poptGetContext(NULL, argc, (const char **) argv, long_options,
 682                             POPT_CONTEXT_KEEP_FIRST);
 683
 684         while((opt = poptGetNextOpt(pc)) != -1) {
 685                 switch (opt) {
 686                 case 'h':
 687                         c->display_usage = true;
 688                         break;
 689                 case 'e':
 690                         c->smb_encrypt = true;
 691                         break;
 692                 case 'I':
 693                         if (!interpret_string_addr(&c->opt_dest_ip,
 694                                                 poptGetOptArg(pc), 0)) {
 695                                 d_fprintf(stderr, "\nInvalid ip address specified\n");
 696                         } else {
 697                                 c->opt_have_ip = true;
 698                         }
 699                         break;
 700                 case 'U':
 701                         c->opt_user_specified = true;
 702                         c->opt_user_name = SMB_STRDUP(c->opt_user_name);
 703                         p = strchr(c->opt_user_name,'%');
 704                         if (p) {
 705                                 *p = 0;
 706                                 c->opt_password = p+1;
 707                         }
 708                         break;
 709                 default:
 710                         d_fprintf(stderr, "\nInvalid option %s: %s\n",
 711                                  poptBadOption(pc, 0), poptStrerror(opt));
 712                         net_help(c, argc, argv);
 713                         exit(1);
 714                 }
 715         }
 716
 717         /*
 718          * Don't load debug level from smb.conf. It should be
 719          * set by cmdline arg or remain default (0)
 720          */
 721         AllowDebugChange = false;
 722         lp_load(get_dyn_CONFIGFILE(), true, false, false, true);
 723
 724         argv_new = (const char **)poptGetArgs(pc);
 725
 726         argc_new = argc;
 727         for (i=0; i<argc; i++) {
 728                 if (argv_new[i] == NULL) {
 729                         argc_new = i;
 730                         break;
 731                 }
 732         }
 733
 734         if (c->do_talloc_report) {
 735                 talloc_enable_leak_report();
 736         }
 737
 738         if (c->opt_requester_name) {
 739                 set_global_myname(c->opt_requester_name);
 740         }
 741
 742         if (!c->opt_user_name && getenv("LOGNAME")) {
 743                 c->opt_user_name = getenv("LOGNAME");
 744         }
 745
 746         if (!c->opt_workgroup) {
 747                 c->opt_workgroup = smb_xstrdup(lp_workgroup());
 748         }
 749
 750         if (!c->opt_target_workgroup) {
 751                 c->opt_target_workgroup = smb_xstrdup(lp_workgroup());
 752         }
 753
 754         if (!init_names())
 755                 exit(1);
 756
 757         load_interfaces();
 758
 759         /* this makes sure that when we do things like call scripts,
 760            that it won't assert becouse we are not root */
 761         sec_init();
 762
 763         if (c->opt_machine_pass) {
 764                 /* it is very useful to be able to make ads queries as the
 765                    machine account for testing purposes and for domain leave */
 766
 767                 net_use_krb_machine_account(c);
 768         }
 769
 770         if (!c->opt_password) {
 771                 c->opt_password = getenv("PASSWD");
 772         }
 773
 774         rc = net_run_function(c, argc_new-1, argv_new+1, "net", net_func);
 775
 776         DEBUG(2,("return code = %d\n", rc));
 777
 778         libnetapi_free(c->netapi_ctx);
 779
 780         poptFreeContext(pc);
 781
 782         TALLOC_FREE(frame);
 783         return rc;
 784 }