| blob | 42ea5fb7c4e71be0813d6913a05a4c64dec64e00 |
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 * Copyright (C) Gerald Carter 2002-2005.
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 3 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, see <http://www.gnu.org/licenses/>.
20 */
38 #define NTDRIVERS_DATABASE_VERSION_1 1
39 #define NTDRIVERS_DATABASE_VERSION_2 2
44 /* Map generic permissions to printer object specific permissions */
47 PRINTER_READ,
48 PRINTER_WRITE,
49 PRINTER_EXECUTE,
50 PRINTER_ALL_ACCESS
51 };
54 PRINTER_READ,
55 PRINTER_WRITE,
56 PRINTER_EXECUTE,
57 PRINTER_ALL_ACCESS
58 };
60 /* Map generic permissions to print server object specific permissions */
63 SERVER_READ,
64 SERVER_WRITE,
65 SERVER_EXECUTE,
66 SERVER_ALL_ACCESS
67 };
70 SERVER_READ,
71 SERVER_WRITE,
72 SERVER_EXECUTE,
73 SERVER_ALL_ACCESS
74 };
76 /* Map generic permissions to job object specific permissions */
79 JOB_READ,
80 JOB_WRITE,
81 JOB_EXECUTE,
82 JOB_ALL_ACCESS
83 };
85 /* We need one default form to support our default printer. Msoft adds the
86 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
87 array index). Letter is always first, so (for the current code) additions
88 always put things in the correct order. */
210 };
222 };
225 /****************************************************************************
226 generate a new TDB_DATA key for storing a printer
227 ****************************************************************************/
230 {
231 fstring share;
233 TDB_DATA key;
242 }
244 /****************************************************************************
245 generate a new TDB_DATA key for storing a printer security descriptor
246 ****************************************************************************/
250 {
251 fstring share;
253 TDB_DATA key;
262 }
264 /****************************************************************************
265 ****************************************************************************/
268 {
284 }
287 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
289 }
290 }
296 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
298 }
301 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
303 }
304 }
310 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
312 }
315 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
317 }
318 }
321 }
324 }
326 /*******************************************************************
327 Fix an issue with security descriptors. Printer sec_desc must
328 use more than the generic bits that were previously used
329 in <= 3.0.14a. They must also have a owner and group SID assigned.
330 Otherwise, any printers than have been migrated to a Windows
331 host using printmig.exe will not be accessible.
332 *******************************************************************/
336 {
337 NTSTATUS status;
343 uint32 sd_size;
348 }
352 }
354 /* upgrade the security descriptor */
358 /* delete bad entries */
363 }
367 }
370 /* is this even valid? */
374 }
376 /* update access masks */
393 }
394 }
396 /* create a new struct security_descriptor with the appropriate owner and group SIDs */
404 }
408 }
413 }
415 /* store it back */
424 }
428 /* 0 to continue and non-zero to stop traversal */
431 }
433 /*******************************************************************
434 *******************************************************************/
437 {
451 }
453 /*******************************************************************
454 Fix an issue with security descriptors. Printer sec_desc must
455 use more than the generic bits that were previously used
456 in <= 3.0.14a. They must also have a owner and group SID assigned.
457 Otherwise, any printers than have been migrated to a Windows
458 host using printmig.exe will not be accessible.
459 *******************************************************************/
463 {
465 TDB_DATA new_key;
470 /* upgrade printer records and security descriptors */
474 }
477 }
479 /* ignore this record */
481 }
483 /* delete the original record and store under the normalized key */
489 }
495 }
498 }
500 /*******************************************************************
501 *******************************************************************/
504 {
518 }
520 /****************************************************************************
521 Open the NT printing tdbs. Done once before fork().
522 ****************************************************************************/
525 {
527 WERROR win_rc;
528 int32 vers_id;
540 }
544 tdb_printers = tdb_open_log(state_path("ntprinters.tdb"), 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
549 }
558 }
560 /* handle a Samba upgrade */
567 }
571 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
576 }
578 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
579 /* Written on a bigendian machine with old fetch_int code. Save as le. */
580 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
583 }
590 }
597 }
603 }
604 }
608 /*
609 * register callback to handle updating printers as new
610 * drivers are installed
611 */
614 do_drv_upgrade_printer);
616 /* of course, none of the message callbacks matter if you don't
617 tell messages.c that you interested in receiving PRINT_GENERAL
618 msgs. This is done in serverid_register() */
625 }
628 }
630 /*******************************************************************
631 Function to allow filename parsing "the old way".
632 ********************************************************************/
637 {
638 NTSTATUS status;
644 }
649 }
655 }
658 }
660 /*******************************************************************
661 tdb traversal function for counting printers.
662 ********************************************************************/
666 {
671 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
672 }
675 }
677 /*******************************************************************
678 Update the spooler global c_setprinter. This variable is initialized
679 when the parent smbd starts with the number of existing printers. It
680 is monotonically increased by the current number of printers *after*
681 each add or delete printer RPC. Only Microsoft knows why... JRR020119
682 ********************************************************************/
685 {
686 int32 c_setprinter;
691 /* Traverse the tdb, counting the printers */
694 /* If initializing, set c_setprinter to current printers count
695 * otherwise, bump it by the current printer count
696 */
699 else
708 }
710 /*******************************************************************
711 Get the spooler global c_setprinter, accounting for initialization.
712 ********************************************************************/
715 {
724 }
726 /****************************************************************************
727 Get builtin form struct list.
728 ****************************************************************************/
731 {
735 }
737 }
739 /****************************************************************************
740 get a builtin form struct
741 ****************************************************************************/
744 {
752 }
753 }
756 }
758 /****************************************************************************
759 get a form struct list.
760 ****************************************************************************/
763 {
765 nt_forms_struct form;
775 {
795 }
797 n++;
798 }
802 }
804 /****************************************************************************
805 write a form struct list
806 ****************************************************************************/
809 {
814 TDB_DATA dbuf;
818 /* save index, so list is rebuilt in correct order */
825 }
829 }
837 }
844 }
847 }
850 }
852 /****************************************************************************
853 add a form struct at the end of the list
854 ****************************************************************************/
856 {
860 /*
861 * NT tries to add forms even when
862 * they are already in the base
863 * only update the values if already present
864 */
872 }
873 }
879 }
882 }
896 }
898 /****************************************************************************
899 Delete a named form struct.
900 ****************************************************************************/
903 {
913 }
914 }
920 }
925 }
930 }
933 }
935 /****************************************************************************
936 Update a form struct.
937 ****************************************************************************/
940 {
948 }
959 }
961 /****************************************************************************
962 Get the nt drivers list.
963 Traverse the database and look-up the matching names.
964 ****************************************************************************/
966 {
975 }
980 }
993 }
996 total++;
997 }
1001 }
1003 /****************************************************************************
1004 Function to do the mapping between the long architecture name and
1005 the short one.
1006 ****************************************************************************/
1009 {
1014 i++;
1021 }
1023 /* this might be client code - but shouldn't this be an fstrcpy etc? */
1030 }
1032 /****************************************************************************
1033 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
1034 There are two case to be covered here: PE (Portable Executable) and NE (New
1035 Executable) files. Both files support the same INFO structure, but PE files
1036 store the signature in unicode, and NE files store it as !unicode.
1037 returns -1 on error, 1 on version info found, and 0 on no version info found.
1038 ****************************************************************************/
1041 {
1044 ssize_t byte_count;
1050 }
1056 }
1058 /* Is this really a DOS header? */
1063 }
1065 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
1069 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1071 }
1073 /* Note: DOS_HEADER_SIZE and NE_HEADER_SIZE are incidentally same */
1077 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1079 }
1081 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
1086 /* Just skip over optional header to get to section table */
1093 }
1095 /* get the section table */
1106 }
1112 }
1114 /* Iterate the section table looking for the resource section ".rsrc" */
1130 }
1132 /* Seek to the start of the .rsrc section info */
1137 }
1143 }
1149 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
1151 /* Align to next long address */
1164 }
1165 }
1166 }
1167 }
1168 }
1170 /* Version info not found, fall back to origin date/time */
1179 /* At this point, we assume the file is in error. It still could be somthing
1180 * else besides a NE file, but it unlikely at this point. */
1182 }
1184 /* Allocate a bit more space to speed up things */
1190 }
1192 /* This is a HACK! I got tired of trying to sort through the messy
1193 * 'NE' file format. If anyone wants to clean this up please have at
1194 * it, but this works. 'NE' files will eventually fade away. JRR */
1196 /* Cover case that should not occur in a well formed 'NE' .dll file */
1200 /* Fast skip past data that can't possibly match */
1203 /* Potential match data crosses buf boundry, move it to beginning
1204 * of buf, and fill the buf with as much as it will hold. */
1215 }
1221 }
1223 /* Check that the full signature string and the magic number that
1224 * follows exist (not a perfect solution, but the chances that this
1225 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
1226 * twice, as it is simpler to read the code. */
1228 /* Compute skip alignment to next long address */
1241 }
1242 }
1243 }
1245 /* Version info not found, fall back to origin date/time */
1251 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1255 no_version_info:
1259 error_exit:
1262 }
1264 /****************************************************************************
1265 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
1266 share one or more files. During the MS installation process files are checked
1267 to insure that only a newer version of a shared file is installed over an
1268 older version. There are several possibilities for this comparison. If there
1269 is no previous version, the new one is newer (obviously). If either file is
1270 missing the version info structure, compare the creation date (on Unix use
1271 the modification date). Otherwise chose the numerically larger version number.
1272 ****************************************************************************/
1275 {
1278 uint32 new_major;
1279 uint32 new_minor;
1282 uint32 old_major;
1283 uint32 old_minor;
1288 SMB_STRUCT_STAT st;
1290 NTSTATUS status;
1297 /* Get file version info (if available) for previous file (if it exists) */
1301 }
1322 /* Old file not found, so by definition new file is in fact newer */
1325 errno));
1333 }
1337 old_file));
1341 }
1345 }
1346 }
1350 /* Get file version info (if available) for new file */
1354 }
1375 /* New file not found, this shouldn't occur if the caller did its job */
1384 }
1388 new_file));
1392 }
1396 }
1397 }
1402 /* Compare versions and choose the larger version number */
1409 }
1414 }
1417 /* Compare modification time/dates and choose the newest time/date */
1422 }
1427 }
1428 }
1430 error_exit:
1434 done:
1437 }
1439 /****************************************************************************
1440 Determine the correct cVersion associated with an architecture and driver
1441 ****************************************************************************/
1446 {
1448 NTSTATUS nt_status;
1453 NTSTATUS status;
1455 fstring printdollar;
1460 /* If architecture is Windows 95/98/ME, the version is always 0. */
1465 }
1467 /* If architecture is Windows x64, the version is always 3. */
1472 }
1480 }
1490 }
1492 /* Open the driver file (Portable Executable format) and determine the
1493 * deriver the cversion. */
1496 architecture,
1497 driverpath_in);
1501 }
1507 }
1513 }
1539 uint32 major;
1540 uint32 minor;
1551 }
1553 /*
1554 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1555 * for more details. Version in this case is not just the version of the
1556 * file, but the version in the sense of kernal mode (2) vs. user mode
1557 * (3) drivers. Other bits of the version fields are the version info.
1558 * JRR 010716
1559 */
1570 cversion));
1572 }
1577 }
1584 error_exit:
1586 done:
1590 }
1594 }
1597 }
1599 }
1601 /****************************************************************************
1602 ****************************************************************************/
1604 #define strip_driver_path(_mem_ctx, _element) do { \
1607 W_ERROR_HAVE_NO_MEMORY((_element)); \
1608 } \
1609 } while (0);
1620 {
1623 WERROR err;
1628 }
1630 /* clean up the driver name.
1631 * we can get .\driver.dll
1632 * or worse c:\windows\system\driver.dll !
1633 */
1634 /* using an intermediate string to not have overlaping memcpy()'s */
1641 }
1646 }
1647 }
1652 }
1654 /* jfm:7/16/2000 the client always sends the cversion=0.
1655 * The server should check which version the driver is by reading
1656 * the PE header of driver->driverpath.
1657 *
1658 * For Windows 95/98 the version is 0 (so the value sent is correct)
1659 * For Windows NT (the architecture doesn't matter)
1660 * NT 3.1: cversion=0
1661 * NT 3.5/3.51: cversion=1
1662 * NT 4: cversion=2
1663 * NT2K: cversion=3
1664 */
1670 }
1673 }
1675 /****************************************************************************
1676 ****************************************************************************/
1680 {
1702 }
1703 }
1705 /****************************************************************************
1706 This function sucks and should be replaced. JRA.
1707 ****************************************************************************/
1711 {
1724 }
1726 /****************************************************************************
1727 This function sucks and should be replaced. JRA.
1728 ****************************************************************************/
1733 {
1749 }
1750 }
1752 /****************************************************************************
1753 ****************************************************************************/
1761 {
1766 NTSTATUS status;
1767 WERROR ret;
1778 }
1786 }
1788 /* Setup a synthetic smb_filename struct */
1793 }
1802 OPENX_FILE_EXISTS_TRUNCATE |
1803 OPENX_FILE_CREATE_IF_NOT_EXIST,
1813 }
1814 }
1817 out:
1821 }
1826 {
1833 NTSTATUS nt_status;
1838 fstring printdollar;
1854 }
1859 }
1867 }
1877 }
1881 short_architecture,
1886 }
1891 }
1897 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1898 * listed for this driver which has already been moved, skip it (note:
1899 * drivers may list the same file name several times. Then check if the
1900 * file already exists in archi\version\, if so, check that the version
1901 * info (or time stamps if version info is unavailable) is newer (or the
1902 * date is later). If it is, move it to archi\version\filexxx.yyy.
1903 * Otherwise, delete the file.
1904 *
1905 * If a file is not moved to archi\version\ because of an error, all the
1906 * rest of the 'unmoved' driver files are removed from archi\. If one or
1907 * more of the driver's files was already moved to archi\version\, it
1908 * potentially leaves the driver in a partially updated state. Version
1909 * trauma will most likely occur if an client attempts to use any printer
1910 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1911 * done is appropriate... later JRR
1912 */
1919 conn,
1921 short_architecture,
1923 ver);
1927 }
1929 }
1930 }
1936 conn,
1938 short_architecture,
1940 ver);
1944 }
1946 }
1947 }
1948 }
1955 conn,
1957 short_architecture,
1959 ver);
1963 }
1965 }
1966 }
1967 }
1975 conn,
1977 short_architecture,
1979 ver);
1983 }
1985 }
1986 }
1987 }
1999 }
2000 }
2003 conn,
2005 short_architecture,
2007 ver);
2011 }
2013 }
2014 }
2015 NextDriver: ;
2016 }
2017 }
2019 err_exit:
2025 }
2029 }
2032 }
2034 }
2036 /****************************************************************************
2037 ****************************************************************************/
2040 {
2048 TDB_DATA dbuf;
2053 }
2055 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
2056 * \\server is added in the rpc server layer.
2057 * It does make sense to NOT store the server's name in the printer TDB.
2058 */
2064 }
2066 #define gen_full_driver_unc_path(ctx, directory, file) \
2067 do { \
2068 if (file && strlen(file)) { \
2070 } else { \
2072 } \
2073 if (!file) { \
2074 return (uint32_t)-1; \
2075 } \
2076 } while (0);
2078 /* .inf files do not always list a file for each of the four standard files.
2079 * Don't prepend a path to a null filename, or client claims:
2080 * "The server on which the printer resides does not have a suitable
2081 * <printer driver name> printer driver installed. Click OK if you
2082 * wish to install the driver on your local machine."
2083 */
2094 }
2095 }
2101 }
2108 again:
2125 }
2126 }
2134 }
2137 }
2144 done:
2150 }
2152 /****************************************************************************
2153 ****************************************************************************/
2156 {
2167 }
2169 /****************************************************************************
2170 ****************************************************************************/
2175 {
2179 }
2184 }
2192 }
2195 }
2197 /****************************************************************************
2198 ****************************************************************************/
2204 {
2205 TDB_DATA dbuf;
2210 fstring name, driverpath, environment, datafile, configfile, helpfile, monitorname, defaultdatatype;
2215 }
2217 /* Windows 4.0 (i.e. win9x) should always use a version of 0 */
2222 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, drivername));
2227 }
2233 }
2237 name,
2238 environment,
2239 driverpath,
2240 datafile,
2241 configfile,
2242 helpfile,
2243 monitorname,
2244 defaultdatatype);
2259 fstring file;
2265 }
2272 i++;
2273 }
2283 }
2286 }
2288 /****************************************************************************
2289 ****************************************************************************/
2291 {
2342 }
2347 }
2349 /****************************************************************************
2350 Pack all values in all printer keys
2351 ***************************************************************************/
2354 {
2365 /* loop over all keys */
2371 /* pack the keyname followed by a empty value */
2376 REG_NONE,
2378 NULL);
2380 /* now loop over all values */
2383 /* pathname should be stored as <key>\<value> */
2390 }
2393 val,
2394 path,
2401 }
2403 }
2405 /* terminator */
2410 }
2413 /****************************************************************************
2414 Delete a printer - this just deletes the printer info file, any open
2415 handles are not affected.
2416 ****************************************************************************/
2419 {
2420 TDB_DATA kbuf;
2437 }
2440 }
2443 }
2445 /****************************************************************************
2446 ****************************************************************************/
2448 {
2452 WERROR ret;
2455 /*
2456 * in addprinter: no servername and the printer is the name
2457 * in setprinter: servername is \\server
2458 * and printer is \\server\\printer
2459 *
2460 * Samba manages only local printers.
2461 * we currently don't support things like i
2462 * path=\\other_server\printer
2463 *
2464 * We only store the printername, not \\server\printername
2465 */
2471 }
2473 /*
2474 * JFM: one day I'll forget.
2475 * below that's info->portname because that's the SAMBA sharename
2476 * and I made NT 'thinks' it's the portname
2477 * the info->sharename is the thing you can name when you add a printer
2478 * that's the short-name when you create shared printer for 95/98
2479 * So I've made a limitation in SAMBA: you can only have 1 printer model
2480 * behind a SAMBA share.
2481 */
2486 again:
2517 }
2526 }
2529 }
2538 done:
2548 }
2550 /****************************************************************************
2551 Create and allocate a default devicemode.
2552 ****************************************************************************/
2557 {
2564 }
2569 }
2572 }
2578 }
2585 DEVMODE_TTOPTION |
2586 DEVMODE_PRINTQUALITY |
2587 DEVMODE_DEFAULTSOURCE |
2588 DEVMODE_COPIES |
2589 DEVMODE_SCALE |
2590 DEVMODE_PAPERSIZE |
2591 DEVMODE_ORIENTATION;
2626 }
2630 {
2639 /* Create an ACE where Everyone is allowed to print */
2645 /* Add the domain admins group if we are a DC */
2651 DOMAIN_RID_ADMINS);
2659 }
2669 }
2671 /* add BUILTIN\Administrators as FULL CONTROL */
2678 SEC_ACE_TYPE_ACCESS_ALLOWED,
2681 /* Make the security descriptor owned by the BUILTIN\Administrators */
2683 /* The ACL revision number in rpc_secdesc.h differs from the one
2684 created by NT when setting ACE entries in printer
2685 descriptors. NT4 complains about the property being edited by a
2686 NT5 machine. */
2690 SD_REVISION,
2691 SEC_DESC_SELF_RELATIVE,
2694 NULL,
2695 psa,
2697 }
2702 }
2710 }
2712 /****************************************************************************
2713 Malloc and return an NT devicemode.
2714 ****************************************************************************/
2717 {
2725 }
2739 DEVMODE_TTOPTION |
2740 DEVMODE_PRINTQUALITY |
2741 DEVMODE_DEFAULTSOURCE |
2742 DEVMODE_COPIES |
2743 DEVMODE_SCALE |
2744 DEVMODE_PAPERSIZE |
2745 DEVMODE_ORIENTATION;
2764 /* non utilisés par un driver d'imprimante */
2778 }
2780 /****************************************************************************
2781 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2782 ****************************************************************************/
2785 {
2795 }
2797 /****************************************************************************
2798 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2799 ****************************************************************************/
2802 {
2811 }
2814 /****************************************************************************
2815 ****************************************************************************/
2817 {
2820 NT_DEVICEMODE devmode;
2868 /* the len in tdb_unpack is an int value and
2869 * devmode.driverextra is only a short
2870 */
2874 /* check to catch an invalid TDB entry so we don't segfault */
2877 }
2878 }
2884 }
2891 }
2893 /****************************************************************************
2894 Allocate and initialize a new slot.
2895 ***************************************************************************/
2898 {
2901 WERROR werr;
2906 /* allocate another slot in the NT_PRINTER_KEY array */
2911 }
2917 /* initialze new key */
2924 }
2931 }
2933 /****************************************************************************
2934 search for a registry key name in the existing printer data
2935 ***************************************************************************/
2938 {
2944 /* cleanup memory */
2949 /* if not the end of the array, move remaining elements down one slot */
2956 }
2957 }
2961 }
2963 /****************************************************************************
2964 search for a registry key name in the existing printer data
2965 ***************************************************************************/
2968 {
2977 /* loop over all existing keys */
2985 }
2986 }
2989 }
2991 /****************************************************************************
2992 ***************************************************************************/
2995 {
3001 fstring subkeyname;
3011 /* special case of asking for the top level printer data registry key names */
3016 /* found a match, so allocate space and copy the name */
3022 }
3025 num_subkeys++;
3026 }
3029 }
3031 /* asking for the subkeys of some key */
3032 /* subkey paths are stored in the key name using '\' as the delimiter */
3037 /* if we found the exact key, then break */
3042 /* get subkey path */
3046 p++;
3051 /* don't add a key more than once */
3056 }
3061 /* found a match, so allocate space and copy the name */
3067 }
3070 num_subkeys++;
3071 }
3073 }
3075 /* return error if the key was not found */
3080 }
3082 done:
3083 /* tag off the end */
3091 }
3093 #ifdef HAVE_ADS
3096 {
3099 }
3102 uint32 dword)
3103 {
3107 }
3111 {
3116 }
3120 {
3128 }
3130 /****************************************************************************
3131 * Map the NT_PRINTER_INFO_LEVEL_2 data into DsSpooler keys for publishing.
3132 *
3133 * @param info2 NT_PRINTER_INFO_LEVEL_2 describing printer - gets modified
3134 * @return bool indicating success or failure
3135 ***************************************************************************/
3138 {
3140 fstring longname;
3153 /* we make the assumption that the netbios name is the same
3154 as the DNS name sinc ethe former will be what we used to
3155 join the domain */
3162 }
3168 }
3184 PRINTER_ATTRIBUTE_KEEPPRINTEDJOBS));
3198 }
3202 }
3204 /*****************************************************************
3205 ****************************************************************/
3209 {
3213 /* find the DsSpooler key */
3220 /* We used to store this as a REG_BINARY but that causes
3221 Vista to whine */
3225 }
3229 {
3230 ADS_STATUS ads_rc;
3235 ADS_MODLIST mods;
3241 /* build the ads mods */
3245 }
3249 /* figure out where to publish */
3252 /* We use ldap_get_dn here as we need the answer
3253 * in utf8 to call ldap_explode_dn(). JRA. */
3259 }
3266 }
3267 /* Now convert to CH_UNIX. */
3273 }
3280 }
3289 }
3295 }
3308 }
3314 /* publish it */
3319 ;
3322 }
3327 /* retreive the guid and store it locally */
3334 }
3338 }
3342 {
3343 ADS_STATUS ads_rc;
3349 /* remove the printer from the directory */
3358 }
3361 }
3365 }
3367 }
3369 /****************************************************************************
3370 * Publish a printer in the directory
3371 *
3372 * @param snum describing printer service
3373 * @return WERROR indicating status of publishing
3374 ***************************************************************************/
3377 {
3378 ADS_STATUS ads_rc;
3381 WERROR win_rc;
3390 /* set the DsSpooler info and attributes */
3394 }
3404 }
3410 }
3417 }
3423 /* ads_connect() will find the DC for us */
3429 }
3439 }
3441 done:
3445 }
3448 {
3449 ADS_STATUS ads_rc;
3459 }
3465 /* ads_connect() will find the DC for us */
3472 }
3484 }
3489 }
3493 {
3497 WERROR win_rc;
3500 DATA_BLOB blob;
3509 {
3512 }
3514 /* fetching printer guids really ought to be a separate function. */
3519 /* We used to store the guid as REG_BINARY, then swapped
3520 to REG_SZ for Vista compatibility so check for both */
3534 }
3541 }
3542 }
3546 }
3547 #else
3549 {
3551 }
3554 {
3556 }
3560 {
3562 }
3565 /****************************************************************************
3566 ***************************************************************************/
3569 {
3581 /* remove all keys */
3593 }
3595 /* remove a specific key (and all subkeys) */
3605 /* mark the slot as empty */
3608 }
3609 }
3611 /* find the first empty slot */
3616 removed_keys++;
3618 }
3619 }
3622 /* nothing was removed */
3625 /* move everything down */
3631 empty_slot++;
3632 removed_keys++;
3633 }
3634 }
3636 /* update count */
3640 /* sanity check to see if anything is left */
3647 }
3650 }
3652 /****************************************************************************
3653 ***************************************************************************/
3656 {
3660 /* we must have names on non-zero length */
3665 /* find the printer key first */
3671 /* make sure the value exists so we can return the correct error code */
3682 }
3684 /****************************************************************************
3685 ***************************************************************************/
3689 {
3693 /* we must have names on non-zero length */
3698 /* find the printer key first */
3714 }
3716 /****************************************************************************
3717 ***************************************************************************/
3719 struct regval_blob* get_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value )
3720 {
3730 }
3732 /****************************************************************************
3733 Unpack a list of registry values frem the TDB
3734 ***************************************************************************/
3737 {
3739 uint32 type;
3740 fstring string;
3749 /* add the "PrinterDriverData" key first for performance reasons */
3753 /* loop and unpack the rest of the registry values */
3757 /* check to see if there are any more registry values */
3764 /* unpack the next regval */
3767 string,
3772 /* lookup for subkey names which have a type of REG_NONE */
3773 /* there's no data with this entry */
3779 }
3781 /*
3782 * break of the keyname from the value name.
3783 * Valuenames can have embedded '\'s so be careful.
3784 * only support one level of keys. See the
3785 * "Konica Fiery S300 50C-K v1.1. enu" 2k driver.
3786 * -- jerry
3787 */
3791 /* Put in "PrinterDriverData" is no key specified */
3796 }
3801 }
3803 /* see if we need a new key */
3810 keyname));
3812 }
3816 /* Vista doesn't like unknown REG_BINARY values in DsSpooler.
3817 Thanks to Martin Zielinski for the hint. */
3822 {
3825 /* convert the GUID to a UNICODE string */
3830 valuename,
3834 /* add the value */
3838 size );
3839 }
3843 }
3846 }
3848 /****************************************************************************
3849 ***************************************************************************/
3855 {
3858 }
3860 }
3863 {
3866 }
3868 }
3871 {
3882 }
3884 }
3887 {
3904 }
3911 }
3925 nt_name++;
3930 {
3934 l--;
3935 }
3936 }
3939 os2_name++;
3941 {
3945 l--;
3946 }
3947 }
3955 }
3956 }
3959 }
3961 /**
3962 * @internal
3963 *
3964 * @brief Map a Windows driver to a OS/2 driver.
3965 *
3966 * @param[in] mem_ctx The memory context to use.
3967 *
3968 * @param[in,out] pdrivername The drivername of Windows to remap.
3969 *
3970 * @return WERR_OK on success, a corresponding WERROR on failure.
3971 */
3973 {
3982 }
3988 }
3996 }
3999 }
4006 }
4016 }
4021 nt_name++;
4022 }
4026 }
4028 {
4032 l--;
4033 }
4034 }
4037 os2_name++;
4038 }
4040 {
4044 l--;
4045 }
4046 }
4055 }
4058 }
4059 }
4063 }
4065 /****************************************************************************
4066 Get a default printer info 2 struct.
4067 ****************************************************************************/
4073 {
4082 /* by setting the driver name to an empty string, a local NT admin
4083 can now run the **local** APW to install a local printer driver
4084 for a Samba shared printer in 2.2. Without this, drivers **must** be
4085 installed on the Samba server for NT clients --jerry */
4089 #endif
4098 #ifdef HAVE_CUPS
4100 /* Pull the location and comment strings from cups if we don't
4101 already have one */
4111 }
4112 }
4113 }
4114 #endif
4124 /*
4125 * I changed this as I think it is better to have a generic
4126 * DEVMODE than to crash Win2k explorer.exe --jerry
4127 * See the HP Deskjet 990c Win2k drivers for an example.
4128 *
4129 * However the default devmode appears to cause problems
4130 * with the HP CLJ 8500 PCL driver. Hence the addition of
4131 * the "default devmode" parameter --jerry 22/01/2002
4132 */
4137 }
4140 }
4144 }
4149 }
4155 fail:
4160 }
4162 /****************************************************************************
4163 ****************************************************************************/
4169 {
4173 fstring printername;
4183 }
4212 }
4214 /* Samba has to have shared raw drivers. */
4218 /* Restore the stripped strings. */
4225 }
4229 #ifdef HAVE_CUPS
4231 /* Pull the location and comment strings from cups if we don't
4232 already have one */
4242 }
4243 }
4244 }
4245 #endif
4249 /*
4250 * Some client drivers freak out if there is a NULL devmode
4251 * (probably the driver is not checking before accessing
4252 * the devmode pointer) --jerry
4253 *
4254 * See comments in get_a_printer_2_default()
4255 */
4259 printername));
4261 }
4266 }
4272 }
4275 /* This will get the current RPC talloc context, but we should be
4276 passing this as a parameter... fixme... JRA ! */
4281 }
4283 /* Fix for OS/2 drivers. */
4287 }
4295 }
4297 /****************************************************************************
4298 Debugging function, dump at level 6 the struct in the logs.
4299 ****************************************************************************/
4301 {
4302 uint32 result;
4309 {
4312 else
4313 {
4340 }
4342 }
4347 }
4350 }
4352 /****************************************************************************
4353 Update the changeid time.
4354 This is SO NASTY as some drivers need this to change, others need it
4355 static. This value will change every second, and I must hope that this
4356 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
4357 UTAH ! JRA.
4358 ****************************************************************************/
4361 {
4367 /* Return changeid as msec since spooler restart */
4369 #else
4370 /*
4371 * This setting seems to work well but is too untested
4372 * to replace the above calculation. Left in for experiementation
4373 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
4374 */
4376 #endif
4377 }
4380 /*
4381 * The function below are the high level ones.
4382 * only those ones must be called from the spoolss code.
4383 * JFM.
4384 */
4386 /****************************************************************************
4387 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
4388 ****************************************************************************/
4391 {
4392 WERROR result;
4398 {
4399 /*
4400 * Update the changestamp. Emperical tests show that the
4401 * ChangeID is always updated,but c_setprinter is
4402 * global spooler variable (not per printer).
4403 */
4405 /* ChangeID **must** be increasing over the lifetime
4406 of client's spoolss service in order for the
4407 client's cache to show updates */
4411 /*
4412 * Because one day someone will ask:
4413 * NT->NT An admin connection to a remote
4414 * printer show changes imeediately in
4415 * the properities dialog
4416 *
4417 * A non-admin connection will only show the
4418 * changes after viewing the properites page
4419 * 2 times. Seems to be related to a
4420 * race condition in the client between the spooler
4421 * updating the local cache and the Explorer.exe GUI
4422 * actually displaying the properties.
4423 *
4424 * This is fixed in Win2k. admin/non-admin
4425 * connections both display changes immediately.
4426 *
4427 * 14/12/01 --jerry
4428 */
4432 }
4436 }
4439 }
4441 /****************************************************************************
4442 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
4444 Previously the code had a memory allocation problem because it always
4445 used the TALLOC_CTX from the Printer_entry*. This context lasts
4446 as a long as the original handle is open. So if the client made a lot
4447 of getprinter[data]() calls, the memory usage would climb. Now we use
4448 a short lived TALLOC_CTX for printer_info_2 objects returned. We
4449 still use the Printer_entry->ctx for maintaining the cache copy though
4450 since that object must live as long as the handle by definition.
4451 --jerry
4453 ****************************************************************************/
4455 static WERROR get_a_printer_internal( Printer_entry *print_hnd, NT_PRINTER_INFO_LEVEL **pp_printer, uint32 level,
4457 {
4458 WERROR result;
4459 fstring servername;
4466 }
4474 }
4482 }
4487 /* we have a new printer now. Save it with this handle */
4494 }
4503 }
4506 }
4510 uint32 level,
4512 {
4515 }
4519 uint32 level,
4521 {
4524 }
4526 /****************************************************************************
4527 Deletes a NT_PRINTER_INFO_LEVEL struct.
4528 ****************************************************************************/
4531 {
4546 }
4551 }
4553 /****************************************************************************
4554 ****************************************************************************/
4558 {
4576 }
4590 }
4610 }
4613 }
4624 }
4627 if (r->info.info8->core_driver_dependencies && r->info.info8->core_driver_dependencies->string) {
4629 }
4635 }
4640 }
4647 {
4656 }
4661 }
4665 }
4667 /****************************************************************************
4668 ****************************************************************************/
4674 {
4675 WERROR result;
4681 /* Sometime we just want any version of the driver */
4684 /* look for Win2k first and then for NT4 */
4687 drivername,
4692 drivername,
4694 }
4698 drivername,
4699 architecture,
4700 version);
4701 }
4705 }
4710 }
4726 }
4728 /****************************************************************************
4729 ****************************************************************************/
4732 {
4735 }
4738 /****************************************************************************
4739 Determine whether or not a particular driver is currently assigned
4740 to a printer
4741 ****************************************************************************/
4744 {
4752 }
4756 /* loop through the printers.tdb and check for the drivername */
4769 }
4775 WERROR werr;
4779 /* we can still remove the driver if there is one of
4780 "Windows NT x86" version 2 or 3 left */
4783 werr = get_a_printer_driver(talloc_tos(), &d, r->driver_name, "Windows NT x86", DRIVER_ANY_VERSION);
4784 }
4798 }
4799 }
4801 /* now check the error code */
4804 /* it's ok to remove the driver, we have other architctures left */
4807 }
4808 }
4810 /* report that the driver is not in use by default */
4813 }
4816 /**********************************************************************
4817 Check to see if a ogiven file is in use by *info
4818 *********************************************************************/
4821 {
4827 /* mz: skip files that are in the list but already deleted */
4830 }
4844 /* see of there are any dependent files to examine */
4852 i++;
4853 }
4857 }
4859 /**********************************************************************
4860 Utility function to remove the dependent file pointed to by the
4861 input parameter from the list
4862 *********************************************************************/
4865 {
4867 /* bump everything down a slot */
4871 idx++;
4872 }
4877 }
4879 /**********************************************************************
4880 Check if any of the files used by src are also used by drv
4881 *********************************************************************/
4886 {
4893 /* check each file. Remove it from the src structure if it overlaps */
4900 }
4907 }
4914 }
4921 }
4923 /* are there any dependentfiles to examine? */
4934 i++;
4935 }
4938 }
4940 /****************************************************************************
4941 Determine whether or not a particular driver files are currently being
4942 used by any other driver.
4944 Return value is True if any files were in use by other drivers
4945 and False otherwise.
4947 Upon return, *info has been modified to only contain the driver files
4948 which are not in use
4950 Fix from mz:
4952 This needs to check all drivers to ensure that all files in use
4953 have been removed from *info, not just the ones in the first
4954 match.
4955 ****************************************************************************/
4959 {
4962 uint32 version;
4972 /* loop over all driver versions */
4976 /* get the list of drivers */
4984 /* check each driver for overlap in files */
4991 if (!W_ERROR_IS_OK(get_a_printer_driver(talloc_tos(), &driver, list[i], info->architecture, version))) {
4994 }
4996 /* check if d2 uses any files from d1 */
4997 /* only if this is a different driver than the one being deleted */
5001 /* mz: Do not instantly return -
5002 * we need to ensure this file isn't
5003 * also in use by other drivers. */
5005 }
5006 }
5009 }
5016 }
5020 {
5022 NTSTATUS status;
5028 }
5034 }
5036 /****************************************************************************
5037 Actually delete the driver files. Make sure that
5038 printer_driver_files_in_use() return False before calling
5039 this.
5040 ****************************************************************************/
5044 {
5049 NTSTATUS nt_status;
5051 fstring printdollar;
5057 }
5067 }
5076 }
5081 }
5083 /* now delete the files; must strip the '\print$' string from
5084 fron of path */
5091 }
5092 }
5099 }
5100 }
5107 }
5108 }
5115 }
5116 }
5118 /* check if we are done removing files */
5124 /* bypass the "\print$" portion of the path */
5130 }
5132 i++;
5133 }
5134 }
5137 fail:
5139 done:
5143 }
5145 }
5147 /****************************************************************************
5148 Remove a printer driver from the TDB. This assumes that the the driver was
5149 previously looked up.
5150 ***************************************************************************/
5155 {
5158 TDB_DATA dbuf;
5160 /* delete the tdb data first */
5165 }
5169 }
5174 /* check if the driver actually exists for this environment */
5181 }
5185 /* ok... the driver exists so the delete should return success */
5191 }
5193 /*
5194 * now delete any associated files if delete_files == True
5195 * even if this part failes, we return succes because the
5196 * driver doesn not exist any more
5197 */
5206 }
5208 /****************************************************************************
5209 Store a security desc for a printer.
5210 ****************************************************************************/
5213 {
5217 TDB_DATA kbuf;
5218 TDB_DATA dbuf;
5219 DATA_BLOB blob;
5220 WERROR status;
5221 NTSTATUS nt_status;
5227 /* The old owner and group sids of the security descriptor are not
5228 present when new ACEs are added or removed by changing printer
5229 permissions through NT. If they are NULL in the new security
5230 descriptor then copy them over from the old one. */
5241 }
5243 /* Pick out correct owner and group sids */
5261 /* Make a deep copy of the security descriptor */
5265 sacl,
5266 dacl,
5272 }
5275 }
5279 }
5281 /* Store the security descriptor in a tdb */
5288 }
5300 }
5302 /* Free malloc'ed memory */
5305 out:
5310 }
5312 /****************************************************************************
5313 Construct a default security descriptor buffer for a printer.
5314 ****************************************************************************/
5317 {
5327 /* Create an ACE where Everyone is allowed to print */
5333 /* Add the domain admins group if we are a DC */
5339 DOMAIN_RID_ADMINS);
5347 }
5357 }
5359 /* add BUILTIN\Administrators as FULL CONTROL */
5366 SEC_ACE_TYPE_ACCESS_ALLOWED,
5369 /* Make the security descriptor owned by the BUILTIN\Administrators */
5371 /* The ACL revision number in rpc_secdesc.h differs from the one
5372 created by NT when setting ACE entries in printer
5373 descriptors. NT4 complains about the property being edited by a
5374 NT5 machine. */
5381 }
5386 }
5394 }
5396 /****************************************************************************
5397 Get a security desc for a printer.
5398 ****************************************************************************/
5400 bool nt_printing_getsec(TALLOC_CTX *ctx, const char *sharename, struct sec_desc_buf **secdesc_ctr)
5401 {
5402 TDB_DATA kbuf;
5403 TDB_DATA dbuf;
5404 DATA_BLOB blob;
5406 NTSTATUS status;
5410 }
5412 /* Fetch security descriptor from tdb */
5420 secdesc_ctr);
5425 }
5426 }
5431 }
5440 }
5442 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
5443 this security descriptor has been created when winbindd was
5444 down. Take ownership of security descriptor. */
5449 /* Change sd owner to workgroup administrator */
5456 /* Create new sd */
5469 }
5474 }
5476 /* Swap with other one */
5480 /* Set it */
5483 }
5484 }
5498 }
5499 }
5502 }
5504 /* error code:
5505 0: everything OK
5506 1: level not implemented
5507 2: file doesn't exist
5508 3: can't allocate memory
5509 4: can't free memory
5510 5: non existant struct
5511 */
5513 /*
5514 A printer and a printer driver are 2 different things.
5515 NT manages them separatelly, Samba does the same.
5516 Why ? Simply because it's easier and it makes sense !
5518 Now explanation: You have 3 printers behind your samba server,
5519 2 of them are the same make and model (laser A and B). But laser B
5520 has an 3000 sheet feeder and laser A doesn't such an option.
5521 Your third printer is an old dot-matrix model for the accounting :-).
5523 If the /usr/local/samba/lib directory (default dir), you will have
5524 5 files to describe all of this.
5526 3 files for the printers (1 by printer):
5527 NTprinter_laser A
5528 NTprinter_laser B
5529 NTprinter_accounting
5530 2 files for the drivers (1 for the laser and 1 for the dot matrix)
5531 NTdriver_printer model X
5532 NTdriver_printer model Y
5534 jfm: I should use this comment for the text file to explain
5535 same thing for the forms BTW.
5536 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
5538 */
5540 /* Convert generic access rights to printer object specific access rights.
5541 It turns out that NT4 security descriptors use generic access rights and
5542 NT5 the object specific ones. */
5545 {
5551 }
5552 }
5555 {
5561 }
5562 }
5565 /****************************************************************************
5566 Check a user has permissions to perform the given operation. We use the
5567 permission constants defined in include/rpc_spoolss.h to check the various
5568 actions we perform when checking printer access.
5570 PRINTER_ACCESS_ADMINISTER:
5571 print_queue_pause, print_queue_resume, update_printer_sec,
5572 update_printer, spoolss_addprinterex_level_2,
5573 _spoolss_setprinterdata
5575 PRINTER_ACCESS_USE:
5576 print_job_start
5578 JOB_ACCESS_ADMINISTER:
5579 print_job_delete, print_job_pause, print_job_resume,
5580 print_queue_purge
5582 Try access control in the following order (for performance reasons):
5583 1) root and SE_PRINT_OPERATOR can do anything (easy check)
5584 2) check security descriptor (bit comparisons in memory)
5585 3) "printer admins" (may result in numerous calls to winbind)
5587 ****************************************************************************/
5590 {
5592 uint32 access_granted;
5593 NTSTATUS status;
5598 /* If user is NULL then use the current_user structure */
5600 /* Always allow root or SE_PRINT_OPERATROR to do anything */
5605 }
5607 /* Get printer name */
5614 }
5616 /* Get printer security descriptor */
5621 }
5627 }
5632 /* Create a child security descriptor to check permissions
5633 against. This is because print jobs are child objects
5634 objects of a printer. */
5642 }
5647 }
5649 /* Check access */
5655 /* see if we need to try the printer admin list */
5663 }
5669 }
5672 }
5674 /****************************************************************************
5675 Check the time parameters allow a print operation.
5676 *****************************************************************************/
5679 {
5684 uint32 mins;
5704 }
5706 /****************************************************************************
5707 Fill in the servername sent in the _spoolss_open_printer_ex() call
5708 ****************************************************************************/
5711 {
5713 }