| blob | 75473c39f2010102876a7f5dbad52d9ce78e0d0c |
1 /*
2 * Unix SMB/CIFS implementation.
3 * RPC Pipe client / server routines
4 * Copyright (C) Andrew Tridgell 1992-2000,
5 * Copyright (C) Jean François Micouleau 1998-2000.
6 * Copyright (C) Gerald Carter 2002-2003.
7 *
8 * This program is free software; you can redistribute it and/or modify
9 * it under the terms of the GNU General Public License as published by
10 * the Free Software Foundation; either version 2 of the License, or
11 * (at your option) any later version.
12 *
13 * This program is distributed in the hope that it will be useful,
14 * but WITHOUT ANY WARRANTY; without even the implied warranty of
15 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 * GNU General Public License for more details.
17 *
18 * You should have received a copy of the GNU General Public License
19 * along with this program; if not, write to the Free Software
20 * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 */
38 #define NTDRIVERS_DATABASE_VERSION_1 1
39 #define NTDRIVERS_DATABASE_VERSION_2 2
43 #define NTDRIVERS_DATABASE_VERSION NTDRIVERS_DATABASE_VERSION_4
45 /* Map generic permissions to printer object specific permissions */
47 GENERIC_MAPPING printer_generic_mapping = {
48 PRINTER_READ,
49 PRINTER_WRITE,
50 PRINTER_EXECUTE,
51 PRINTER_ALL_ACCESS
52 };
54 STANDARD_MAPPING printer_std_mapping = {
55 PRINTER_READ,
56 PRINTER_WRITE,
57 PRINTER_EXECUTE,
58 PRINTER_ALL_ACCESS
59 };
61 /* Map generic permissions to print server object specific permissions */
63 GENERIC_MAPPING printserver_generic_mapping = {
64 SERVER_READ,
65 SERVER_WRITE,
66 SERVER_EXECUTE,
67 SERVER_ALL_ACCESS
68 };
70 STANDARD_MAPPING printserver_std_mapping = {
71 SERVER_READ,
72 SERVER_WRITE,
73 SERVER_EXECUTE,
74 SERVER_ALL_ACCESS
75 };
77 /* We need one default form to support our default printer. Msoft adds the
78 forms it wants and in the ORDER it wants them (note: DEVMODE papersize is an
79 array index). Letter is always first, so (for the current code) additions
80 always put things in the correct order. */
200 };
206 };
226 };
229 {
245 }
248 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr(tdb_drivers)));
250 }
251 }
257 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr(tdb_printers)));
259 }
262 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr(tdb_drivers)));
264 }
265 }
271 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr(tdb_printers)));
273 }
276 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr(tdb_drivers)));
278 }
279 }
282 }
285 }
287 /*******************************************************************
288 Fix an issue with security descriptors. Printer sec_desc must
289 use more than the generic bits that were previously used
290 in <= 3.0.14a. They must also have a owner and group SID assigned.
291 Otherwise, any printers than have been migrated to a Windows
292 host using printmig.exe will not be accessible.
293 *******************************************************************/
297 {
298 prs_struct ps;
305 DOM_SID sid;
313 /* upgrade the security descriptor */
321 /* delete bad entries */
322 DEBUG(0,("sec_desc_upg_fn: Failed to parse original sec_desc for %si. Deleting....\n", key.dptr ));
325 }
329 /* is this even valid? */
334 /* update access masks */
351 }
352 }
354 /* create a new SEC_DESC with the appropriate owner and group SIDs */
365 }
367 /* store it back */
375 }
384 /* 0 to continue and non-zero to stop traversal */
387 }
389 /*******************************************************************
390 *******************************************************************/
393 {
407 }
409 /****************************************************************************
410 Open the NT printing tdbs. Done once before fork().
411 ****************************************************************************/
414 {
417 WERROR win_rc;
418 uint32 vers_id;
430 }
439 }
448 }
452 /* handle a Samba upgrade */
455 /* ---------------- Start Lock Region ---------------- */
457 /* Cope with byte-reversed older versions of the db. */
462 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
463 /* Written on a bigendian machine with old fetch_int code. Save as le. */
464 /* The only upgrade between V2 and V3 is to save the version in little-endian. */
467 }
471 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) || (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
478 }
480 /* at this point we know that the database is at version 3 so upgrade to v4 */
485 }
487 /* ---------------- End Lock Region ------------------ */
493 /*
494 * register callback to handle updating printers as new
495 * drivers are installed
496 */
500 /*
501 * register callback to handle updating printer data
502 * when a driver is initialized
503 */
507 /*
508 * register callback to handle invalidating the printer cache
509 * between smbd processes.
510 */
514 /* of course, none of the message callbacks matter if you don't
515 tell messages.c that you interested in receiving PRINT_GENERAL
516 msgs. This is done in claim_connection() */
523 }
526 }
528 /*******************************************************************
529 Function to allow filename parsing "the old way".
530 ********************************************************************/
534 {
539 }
541 /*******************************************************************
542 tdb traversal function for counting printers.
543 ********************************************************************/
547 {
552 DEBUG(10,("traverse_counting_printers: printer = [%s] printer_count = %d\n", key.dptr, *printer_count));
553 }
556 }
558 /*******************************************************************
559 Update the spooler global c_setprinter. This variable is initialized
560 when the parent smbd starts with the number of existing printers. It
561 is monotonically increased by the current number of printers *after*
562 each add or delete printer RPC. Only Microsoft knows why... JRR020119
563 ********************************************************************/
566 {
567 int32 c_setprinter;
572 /* Traverse the tdb, counting the printers */
575 /* If initializing, set c_setprinter to current printers count
576 * otherwise, bump it by the current printer count
577 */
580 else
589 }
591 /*******************************************************************
592 Get the spooler global c_setprinter, accounting for initialization.
593 ********************************************************************/
596 {
605 }
607 /****************************************************************************
608 Get builtin form struct list.
609 ****************************************************************************/
612 {
615 }
617 /****************************************************************************
618 get a builtin form struct
619 ****************************************************************************/
622 {
624 fstring form_name;
633 }
634 }
637 }
639 /****************************************************************************
640 get a form struct list
641 ****************************************************************************/
643 {
646 nt_forms_struct form;
654 {
674 }
677 n++;
678 }
682 }
684 /****************************************************************************
685 write a form struct list
686 ****************************************************************************/
688 {
695 /* save index, so list is rebuilt in correct order */
707 }
710 }
712 /****************************************************************************
713 add a form struct at the end of the list
714 ****************************************************************************/
716 {
718 BOOL update;
719 fstring form_name;
722 /*
723 * NT tries to add forms even when
724 * they are already in the base
725 * only update the values if already present
726 */
735 }
736 }
742 }
746 }
760 }
762 /****************************************************************************
763 Delete a named form struct.
764 ****************************************************************************/
767 {
768 pstring key;
769 TDB_DATA kbuf;
771 fstring form_name;
781 }
782 }
788 }
796 }
799 }
801 /****************************************************************************
802 Update a form struct.
803 ****************************************************************************/
806 {
808 fstring form_name;
816 }
827 }
829 /****************************************************************************
830 Get the nt drivers list.
831 Traverse the database and look-up the matching names.
832 ****************************************************************************/
834 {
838 pstring key;
854 }
858 total++;
859 }
862 }
864 /****************************************************************************
865 function to do the mapping between the long architecture name and
866 the short one.
867 ****************************************************************************/
869 {
874 i++;
881 }
883 /* this might be client code - but shouldn't this be an fstrcpy etc? */
891 }
893 /****************************************************************************
894 Version information in Microsoft files is held in a VS_VERSION_INFO structure.
895 There are two case to be covered here: PE (Portable Executable) and NE (New
896 Executable) files. Both files support the same INFO structure, but PE files
897 store the signature in unicode, and NE files store it as !unicode.
898 returns -1 on error, 1 on version info found, and 0 on no version info found.
899 ****************************************************************************/
902 {
905 ssize_t byte_count;
911 }
913 /* Note: DOS_HEADER_SIZE < malloc'ed PE_HEADER_SIZE */
918 }
920 /* Is this really a DOS header? */
925 }
927 /* Skip OEM header (if any) and the DOS stub to start of Windows header */
928 if (SMB_VFS_LSEEK(fsp, fsp->fd, SVAL(buf,DOS_HEADER_LFANEW_OFFSET), SEEK_SET) == (SMB_OFF_T)-1) {
931 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
933 }
938 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
940 }
942 /* The header may be a PE (Portable Executable) or an NE (New Executable) */
950 /* At this point, we assume the file is in error. It still could be somthing
951 * else besides a PE file, but it unlikely at this point.
952 */
954 }
956 /* get the section table */
967 }
973 }
975 /* Iterate the section table looking for the resource section ".rsrc" */
991 }
993 /* Seek to the start of the .rsrc section info */
998 }
1004 }
1010 /* Scan for 1st 3 unicoded bytes followed by word aligned magic value */
1012 /* Align to next long address */
1025 }
1026 }
1027 }
1028 }
1029 }
1031 /* Version info not found, fall back to origin date/time */
1040 /* At this point, we assume the file is in error. It still could be somthing
1041 * else besides a NE file, but it unlikely at this point. */
1043 }
1045 /* Allocate a bit more space to speed up things */
1051 }
1053 /* This is a HACK! I got tired of trying to sort through the messy
1054 * 'NE' file format. If anyone wants to clean this up please have at
1055 * it, but this works. 'NE' files will eventually fade away. JRR */
1057 /* Cover case that should not occur in a well formed 'NE' .dll file */
1061 /* Fast skip past data that can't possibly match */
1064 /* Potential match data crosses buf boundry, move it to beginning
1065 * of buf, and fill the buf with as much as it will hold. */
1076 }
1082 }
1084 /* Check that the full signature string and the magic number that
1085 * follows exist (not a perfect solution, but the chances that this
1086 * occurs in code is, well, remote. Yes I know I'm comparing the 'V'
1087 * twice, as it is simpler to read the code. */
1089 /* Compute skip alignment to next long address */
1102 }
1103 }
1104 }
1106 /* Version info not found, fall back to origin date/time */
1112 /* Assume this isn't an error... the file just looks sort of like a PE/NE file */
1116 no_version_info:
1120 error_exit:
1123 }
1125 /****************************************************************************
1126 Drivers for Microsoft systems contain multiple files. Often, multiple drivers
1127 share one or more files. During the MS installation process files are checked
1128 to insure that only a newer version of a shared file is installed over an
1129 older version. There are several possibilities for this comparison. If there
1130 is no previous version, the new one is newer (obviously). If either file is
1131 missing the version info structure, compare the creation date (on Unix use
1132 the modification date). Otherwise chose the numerically larger version number.
1133 ****************************************************************************/
1136 {
1138 pstring filepath;
1140 uint32 new_major;
1141 uint32 new_minor;
1144 uint32 old_major;
1145 uint32 old_minor;
1151 SMB_STRUCT_STAT st;
1152 SMB_STRUCT_STAT stat_buf;
1153 BOOL bad_path;
1160 /* Get file version info (if available) for previous file (if it exists) */
1170 /* Old file not found, so by definition new file is in fact newer */
1181 old_file));
1186 }
1187 }
1190 /* Get file version info (if available) for new file */
1199 /* New file not found, this shouldn't occur if the caller did its job */
1210 new_file));
1215 }
1216 }
1220 /* Compare versions and choose the larger version number */
1226 }
1230 }
1233 /* Compare modification time/dates and choose the newest time/date */
1237 }
1241 }
1242 }
1244 error_exit:
1248 }
1250 /****************************************************************************
1251 Determine the correct cVersion associated with an architecture and driver
1252 ****************************************************************************/
1255 {
1259 NTSTATUS nt_status;
1260 pstring driverpath;
1261 DATA_BLOB null_pw;
1262 fstring res_type;
1264 BOOL bad_path;
1265 SMB_STRUCT_STAT st;
1272 /* If architecture is Windows 95/98/ME, the version is always 0. */
1277 }
1279 /*
1280 * Connect to the print$ share under the same account as the user connected
1281 * to the rpc pipe. Note we must still be root to do this.
1282 */
1284 /* Null password is ok - we are already an authenticated user... */
1295 }
1297 /* We are temporarily becoming the connection user. */
1302 }
1304 /* Open the driver file (Portable Executable format) and determine the
1305 * deriver the cversion. */
1313 }
1325 }
1327 uint32 major;
1328 uint32 minor;
1335 }
1337 /*
1338 * This is a Microsoft'ism. See references in MSDN to VER_FILEVERSION
1339 * for more details. Version in this case is not just the version of the
1340 * file, but the version in the sense of kernal mode (2) vs. user mode
1341 * (3) drivers. Other bits of the version fields are the version info.
1342 * JRR 010716
1343 */
1354 }
1358 }
1370 error_exit:
1378 }
1380 /****************************************************************************
1381 ****************************************************************************/
1384 {
1386 fstring new_name;
1389 WERROR err;
1391 /* clean up the driver name.
1392 * we can get .\driver.dll
1393 * or worse c:\windows\system\driver.dll !
1394 */
1395 /* using an intermediate string to not have overlaping memcpy()'s */
1399 }
1404 }
1409 }
1414 }
1421 }
1422 }
1423 }
1427 /* jfm:7/16/2000 the client always sends the cversion=0.
1428 * The server should check which version the driver is by reading
1429 * the PE header of driver->driverpath.
1430 *
1431 * For Windows 95/98 the version is 0 (so the value sent is correct)
1432 * For Windows NT (the architecture doesn't matter)
1433 * NT 3.1: cversion=0
1434 * NT 3.5/3.51: cversion=1
1435 * NT 4: cversion=2
1436 * NT2K: cversion=3
1437 */
1438 if ((driver->cversion = get_correct_cversion( architecture, driver->driverpath, user, &err)) == -1)
1442 }
1444 /****************************************************************************
1445 ****************************************************************************/
1446 static WERROR clean_up_driver_struct_level_6(NT_PRINTER_DRIVER_INFO_LEVEL_6 *driver, struct current_user *user)
1447 {
1449 fstring new_name;
1452 WERROR err;
1454 /* clean up the driver name.
1455 * we can get .\driver.dll
1456 * or worse c:\windows\system\driver.dll !
1457 */
1458 /* using an intermediate string to not have overlaping memcpy()'s */
1462 }
1467 }
1472 }
1477 }
1484 }
1485 }
1486 }
1490 /* jfm:7/16/2000 the client always sends the cversion=0.
1491 * The server should check which version the driver is by reading
1492 * the PE header of driver->driverpath.
1493 *
1494 * For Windows 95/98 the version is 0 (so the value sent is correct)
1495 * For Windows NT (the architecture doesn't matter)
1496 * NT 3.1: cversion=0
1497 * NT 3.5/3.51: cversion=1
1498 * NT 4: cversion=2
1499 * NT2K: cversion=3
1500 */
1502 if ((driver->version = get_correct_cversion(architecture, driver->driverpath, user, &err)) == -1)
1506 }
1508 /****************************************************************************
1509 ****************************************************************************/
1512 {
1515 {
1519 }
1521 {
1525 }
1528 }
1529 }
1531 /****************************************************************************
1532 This function sucks and should be replaced. JRA.
1533 ****************************************************************************/
1535 static void convert_level_6_to_level3(NT_PRINTER_DRIVER_INFO_LEVEL_3 *dst, NT_PRINTER_DRIVER_INFO_LEVEL_6 *src)
1536 {
1548 }
1559 else
1561 }
1564 }
1566 #endif
1568 /****************************************************************************
1569 ****************************************************************************/
1570 WERROR move_driver_to_download_area(NT_PRINTER_DRIVER_INFO_LEVEL driver_abstract, uint32 level,
1572 {
1574 NT_PRINTER_DRIVER_INFO_LEVEL_3 converted_driver;
1576 pstring new_dir;
1577 pstring old_name;
1578 pstring new_name;
1579 DATA_BLOB null_pw;
1581 NTSTATUS nt_status;
1582 pstring inbuf;
1583 pstring outbuf;
1584 fstring res_type;
1585 BOOL bad_path;
1586 SMB_STRUCT_STAT st;
1603 }
1607 /*
1608 * Connect to the print$ share under the same account as the user connected to the rpc pipe.
1609 * Note we must be root to do this.
1610 */
1622 }
1624 /*
1625 * Save who we are - we are temporarily becoming the connection user.
1626 */
1631 }
1633 /*
1634 * make the directories version and version\driver_name
1635 * under the architecture directory.
1636 */
1642 /* For each driver file, archi\filexxx.yyy, if there is a duplicate file
1643 * listed for this driver which has already been moved, skip it (note:
1644 * drivers may list the same file name several times. Then check if the
1645 * file already exists in archi\cversion\, if so, check that the version
1646 * info (or time stamps if version info is unavailable) is newer (or the
1647 * date is later). If it is, move it to archi\cversion\filexxx.yyy.
1648 * Otherwise, delete the file.
1649 *
1650 * If a file is not moved to archi\cversion\ because of an error, all the
1651 * rest of the 'unmoved' driver files are removed from archi\. If one or
1652 * more of the driver's files was already moved to archi\cversion\, it
1653 * potentially leaves the driver in a partially updated state. Version
1654 * trauma will most likely occur if an client attempts to use any printer
1655 * bound to the driver. Perhaps a rewrite to make sure the moves can be
1656 * done is appropriate... later JRR
1657 */
1665 NTSTATUS status;
1667 if ( !copy_file(new_name, old_name, conn, FILE_EXISTS_TRUNCATE|FILE_CREATE_IF_NOT_EXIST, 0, False, &err) ) {
1672 }
1673 }
1674 }
1681 NTSTATUS status;
1683 if ( !copy_file(new_name, old_name, conn, FILE_EXISTS_TRUNCATE|FILE_CREATE_IF_NOT_EXIST, 0, False, &err) ) {
1688 }
1689 }
1690 }
1691 }
1699 NTSTATUS status;
1701 if ( !copy_file(new_name, old_name, conn, FILE_EXISTS_TRUNCATE|FILE_CREATE_IF_NOT_EXIST, 0, False, &err) ) {
1706 }
1707 }
1708 }
1709 }
1718 NTSTATUS status;
1720 if ( !copy_file(new_name, old_name, conn, FILE_EXISTS_TRUNCATE|FILE_CREATE_IF_NOT_EXIST, 0, False, &err) ) {
1725 }
1726 }
1727 }
1728 }
1740 }
1741 }
1746 NTSTATUS status;
1748 if ( !copy_file(new_name, old_name, conn, FILE_EXISTS_TRUNCATE|FILE_CREATE_IF_NOT_EXIST, 0, False, &err) ) {
1753 }
1754 }
1755 }
1756 NextDriver: ;
1757 }
1758 }
1764 }
1766 /****************************************************************************
1767 ****************************************************************************/
1769 {
1772 pstring directory;
1773 fstring temp_name;
1774 pstring key;
1781 /* The names are relative. We store them in the form: \print$\arch\version\driver.xxx
1782 * \\server is added in the rpc server layer.
1783 * It does make sense to NOT store the server's name in the printer TDB.
1784 */
1786 slprintf(directory, sizeof(directory)-1, "\\print$\\%s\\%d\\", architecture, driver->cversion);
1788 /* .inf files do not always list a file for each of the four standard files.
1789 * Don't prepend a path to a null filename, or client claims:
1790 * "The server on which the printer resides does not have a suitable
1791 * <printer driver name> printer driver installed. Click OK if you
1792 * wish to install the driver on your local machine."
1793 */
1797 }
1802 }
1807 }
1812 }
1817 slprintf(driver->dependentfiles[i], sizeof(driver->dependentfiles[i])-1, "%s%s", directory, temp_name);
1818 }
1819 }
1821 slprintf(key, sizeof(key)-1, "%s%s/%d/%s", DRIVERS_PREFIX, architecture, driver->cversion, driver->name);
1828 again:
1845 }
1846 }
1856 }
1860 }
1870 done:
1876 }
1878 /****************************************************************************
1879 ****************************************************************************/
1881 {
1882 NT_PRINTER_DRIVER_INFO_LEVEL_3 info3;
1897 }
1900 /****************************************************************************
1901 ****************************************************************************/
1902 static WERROR get_a_printer_driver_3_default(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, const char *driver, const char *arch)
1903 {
1904 NT_PRINTER_DRIVER_INFO_LEVEL_3 info;
1925 }
1927 /****************************************************************************
1928 ****************************************************************************/
1929 static WERROR get_a_printer_driver_3(NT_PRINTER_DRIVER_INFO_LEVEL_3 **info_ptr, fstring drivername, const char *arch, uint32 version)
1930 {
1931 NT_PRINTER_DRIVER_INFO_LEVEL_3 driver;
1936 pstring key;
1945 /* Windows 4.0 (i.e. win9x) should always use a version of 0 */
1950 DEBUG(8,("get_a_printer_driver_3: [%s%s/%d/%s]\n", DRIVERS_PREFIX, architecture, version, drivername));
1980 }
1985 i++;
1986 }
1997 }
2002 }
2004 /****************************************************************************
2005 Debugging function, dump at level 6 the struct in the logs.
2006 ****************************************************************************/
2009 {
2010 uint32 result;
2017 {
2019 {
2039 }
2041 }
2043 }
2048 }
2051 }
2053 /****************************************************************************
2054 ****************************************************************************/
2056 {
2108 }
2113 }
2115 /****************************************************************************
2116 Pack all values in all printer keys
2117 ***************************************************************************/
2120 {
2125 pstring path;
2131 /* loop over all keys */
2137 /* loop over all values */
2140 /* pathname should be stored as <key>\<value> */
2148 val,
2149 path,
2153 }
2155 }
2157 /* terminator */
2162 }
2165 /****************************************************************************
2166 Delete a printer - this just deletes the printer info file, any open
2167 handles are not affected.
2168 ****************************************************************************/
2171 {
2172 pstring key;
2173 TDB_DATA kbuf;
2174 pstring printdb_path;
2194 }
2197 }
2199 /****************************************************************************
2200 ****************************************************************************/
2202 {
2203 pstring key;
2206 WERROR ret;
2209 /*
2210 * in addprinter: no servername and the printer is the name
2211 * in setprinter: servername is \\server
2212 * and printer is \\server\\printer
2213 *
2214 * Samba manages only local printers.
2215 * we currently don't support things like i
2216 * path=\\other_server\printer
2217 *
2218 * We only store the printername, not \\server\printername
2219 */
2225 }
2227 /*
2228 * JFM: one day I'll forget.
2229 * below that's info->portname because that's the SAMBA sharename
2230 * and I made NT 'thinks' it's the portname
2231 * the info->sharename is the thing you can name when you add a printer
2232 * that's the short-name when you create shared printer for 95/98
2233 * So I've made a limitation in SAMBA: you can only have 1 printer model
2234 * behind a SAMBA share.
2235 */
2240 again:
2278 }
2282 }
2294 done:
2304 }
2307 /****************************************************************************
2308 Malloc and return an NT devicemode.
2309 ****************************************************************************/
2312 {
2320 }
2354 /* non utilisés par un driver d'imprimante */
2368 }
2370 /****************************************************************************
2371 Deepcopy an NT devicemode.
2372 ****************************************************************************/
2375 {
2381 if ((new_nt_devicemode = (NT_DEVICEMODE *)memdup(nt_devicemode, sizeof(NT_DEVICEMODE))) == NULL) {
2384 }
2388 if ((new_nt_devicemode->private = memdup(nt_devicemode->private, nt_devicemode->driverextra)) == NULL) {
2392 }
2393 }
2396 }
2398 /****************************************************************************
2399 Clean up and deallocate a (maybe partially) allocated NT_DEVICEMODE.
2400 ****************************************************************************/
2403 {
2413 }
2415 /****************************************************************************
2416 Clean up and deallocate a (maybe partially) allocated NT_PRINTER_INFO_LEVEL_2.
2417 ****************************************************************************/
2419 {
2431 /* clean up all registry keys */
2437 }
2440 /* finally the top level structure */
2443 }
2446 /****************************************************************************
2447 ****************************************************************************/
2449 {
2452 NT_DEVICEMODE devmode;
2500 /* the len in tdb_unpack is an int value and
2501 * devmode.driverextra is only a short
2502 */
2506 /* check to catch an invalid TDB entry so we don't segfault */
2509 }
2510 }
2519 }
2521 /****************************************************************************
2522 Allocate and initialize a new slot.
2523 ***************************************************************************/
2526 {
2533 /* allocate another slot in the NT_PRINTER_KEY array */
2541 /* initialze new key */
2551 }
2553 /****************************************************************************
2554 search for a registry key name in the existing printer data
2555 ***************************************************************************/
2558 {
2567 /* loop over all existing keys */
2575 }
2576 }
2579 }
2581 /****************************************************************************
2582 ***************************************************************************/
2585 {
2591 fstring subkeyname;
2598 /* match sure it is a subkey and not the key itself */
2604 /* get subkey path */
2608 p++;
2613 /* don't add a key more than once */
2618 }
2623 /* found a match, so allocate space and copy the name */
2630 }
2634 num_subkeys++;
2635 }
2637 }
2639 /* tag of the end */
2647 }
2649 #ifdef HAVE_ADS
2652 {
2661 }
2664 uint32 dword)
2665 {
2669 }
2672 BOOL b)
2673 {
2678 }
2682 {
2686 /* a multi-sz has to have a null string terminator, i.e., the last
2687 string must be followed by two nulls */
2692 }
2694 /* Change to byte units. */
2704 }
2706 /****************************************************************************
2707 * Map the NT_PRINTER_INFO_LEVEL_2 data into DsSpooler keys for publishing.
2708 *
2709 * @param info2 NT_PRINTER_INFO_LEVEL_2 describing printer - gets modified
2710 * @return BOOL indicating success or failure
2711 ***************************************************************************/
2714 {
2716 fstring longname;
2717 fstring dnssuffix;
2729 /* we make the assumption that the netbios name is the same
2730 as the DNS name sinc ethe former will be what we used to
2731 join the domain */
2735 else
2756 PRINTER_ATTRIBUTE_KEEPPRINTEDJOBS));
2770 }
2774 }
2778 {
2782 /* find the DsSpooler key */
2790 }
2794 {
2795 ADS_STATUS ads_rc;
2800 ADS_MODLIST mods;
2807 /* figure out where to publish */
2810 /* We use ldap_get_dn here as we need the answer
2811 * in utf8 to call ldap_explode_dn(). JRA. */
2817 }
2824 }
2825 /* Now convert to CH_UNIX. */
2831 }
2838 }
2849 /* build the ads mods */
2858 /* publish it */
2868 /* retreive the guid and store it locally */
2875 }
2879 }
2883 {
2884 ADS_STATUS ads_rc;
2890 /* remove the printer from the directory */
2898 }
2902 }
2904 /****************************************************************************
2905 * Publish a printer in the directory
2906 *
2907 * @param snum describing printer service
2908 * @return WERROR indicating status of publishing
2909 ***************************************************************************/
2912 {
2913 ADS_STATUS ads_rc;
2916 WERROR win_rc;
2925 /* set the DsSpooler info and attributes */
2929 }
2939 }
2945 }
2952 }
2958 /* ads_connect() will find the DC for us */
2964 }
2974 }
2976 done:
2980 }
2983 {
2984 ADS_STATUS ads_rc;
2994 }
3000 /* ads_connect() will find the DC for us */
3006 }
3018 }
3022 }
3026 {
3030 WERROR win_rc;
3043 }
3045 /* fetching printer guids really ought to be a separate function.. */
3051 }
3052 #else
3054 {
3056 }
3059 {
3061 }
3065 {
3067 }
3070 /****************************************************************************
3071 ***************************************************************************/
3074 {
3086 /* remove all keys */
3095 }
3104 }
3106 /* remove a specific key (and all subkeys) */
3116 /* mark the slot as empty */
3119 }
3120 }
3122 /* find the first empty slot */
3127 removed_keys++;
3129 }
3130 }
3133 /* nothing was removed */
3136 /* move everything down */
3142 empty_slot++;
3143 removed_keys++;
3144 }
3145 }
3147 /* update count */
3151 /* sanity check to see if anything is left */
3158 }
3161 }
3163 /****************************************************************************
3164 ***************************************************************************/
3167 {
3171 /* we must have names on non-zero length */
3176 /* find the printer key first */
3182 /* make sure the value exists so we can return the correct error code */
3193 }
3195 /****************************************************************************
3196 ***************************************************************************/
3200 {
3204 /* we must have names on non-zero length */
3209 /* find the printer key first */
3225 }
3227 /****************************************************************************
3228 ***************************************************************************/
3230 REGISTRY_VALUE* get_printer_data( NT_PRINTER_INFO_LEVEL_2 *p2, const char *key, const char *value )
3231 {
3241 }
3243 /****************************************************************************
3244 Unpack a list of registry values frem the TDB
3245 ***************************************************************************/
3248 {
3250 uint32 type;
3258 /* add the "PrinterDriverData" key first for performance reasons */
3262 /* loop and unpack the rest of the registry values */
3266 /* check to see if there are any more registry values */
3273 /* unpack the next regval */
3276 string,
3281 /*
3282 * break of the keyname from the value name.
3283 * Valuenames can have embedded '\'s so be careful.
3284 * only support one level of keys. See the
3285 * "Konica Fiery S300 50C-K v1.1. enu" 2k driver.
3286 * -- jerry
3287 */
3291 /* Put in "PrinterDriverData" is no key specified */
3296 }
3301 }
3303 /* see if we need a new key */
3310 keyname));
3312 }
3314 /* add the new value */
3316 regval_ctr_addvalue( &printer_data->keys[key_index].values, valuename, type, (const char *)data_p, size );
3321 }
3324 }
3326 /****************************************************************************
3327 ***************************************************************************/
3330 {
3347 }
3353 }
3359 }
3373 nt_name++;
3378 {
3382 l--;
3383 }
3384 }
3387 os2_name++;
3389 {
3393 l--;
3394 }
3395 }
3404 }
3405 }
3408 }
3410 /****************************************************************************
3411 Get a default printer info 2 struct.
3412 ****************************************************************************/
3413 static WERROR get_a_printer_2_default(NT_PRINTER_INFO_LEVEL_2 **info_ptr, const char *servername, const char* sharename)
3414 {
3416 NT_PRINTER_INFO_LEVEL_2 info;
3428 /* by setting the driver name to an empty string, a local NT admin
3429 can now run the **local** APW to install a local printer driver
3430 for a Samba shared printer in 2.2. Without this, drivers **must** be
3431 installed on the Samba server for NT clients --jerry */
3435 #endif
3452 /*
3453 * I changed this as I think it is better to have a generic
3454 * DEVMODE than to crash Win2k explorer.exe --jerry
3455 * See the HP Deskjet 990c Win2k drivers for an example.
3456 *
3457 * However the default devmode appears to cause problems
3458 * with the HP CLJ 8500 PCL driver. Hence the addition of
3459 * the "default devmode" parameter --jerry 22/01/2002
3460 */
3465 }
3468 }
3470 /* This will get the current RPC talloc context, but we should be
3471 passing this as a parameter... fixme... JRA ! */
3480 }
3484 fail:
3488 }
3490 /****************************************************************************
3491 ****************************************************************************/
3492 static WERROR get_a_printer_2(NT_PRINTER_INFO_LEVEL_2 **info_ptr, const char *servername, const char *sharename)
3493 {
3494 pstring key;
3495 NT_PRINTER_INFO_LEVEL_2 info;
3499 fstring printername;
3537 /* Samba has to have shared raw drivers. */
3541 /* Restore the stripped strings. */
3546 else
3553 /*
3554 * Some client drivers freak out if there is a NULL devmode
3555 * (probably the driver is not checking before accessing
3556 * the devmode pointer) --jerry
3557 *
3558 * See comments in get_a_printer_2_default()
3559 */
3563 printername));
3565 }
3570 }
3574 /* This will get the current RPC talloc context, but we should be
3575 passing this as a parameter... fixme... JRA ! */
3579 /* Fix for OS/2 drivers. */
3591 }
3593 /****************************************************************************
3594 Debugging function, dump at level 6 the struct in the logs.
3595 ****************************************************************************/
3597 {
3598 uint32 result;
3605 {
3608 else
3609 {
3636 }
3638 }
3643 }
3646 }
3648 /****************************************************************************
3649 Update the changeid time.
3650 This is SO NASTY as some drivers need this to change, others need it
3651 static. This value will change every second, and I must hope that this
3652 is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
3653 UTAH ! JRA.
3654 ****************************************************************************/
3657 {
3663 /* Return changeid as msec since spooler restart */
3665 #else
3666 /*
3667 * This setting seems to work well but is too untested
3668 * to replace the above calculation. Left in for experiementation
3669 * of the reader --jerry (Tue Mar 12 09:15:05 CST 2002)
3670 */
3672 #endif
3673 }
3675 /********************************************************************
3676 Send a message to all smbds about the printer that just changed
3677 ********************************************************************/
3680 {
3687 printername));
3689 /* spam everyone that we just changed this printer */
3694 }
3696 /*
3697 * The function below are the high level ones.
3698 * only those ones must be called from the spoolss code.
3699 * JFM.
3700 */
3702 /****************************************************************************
3703 Modify a printer. This is called from SETPRINTERDATA/DELETEPRINTERDATA.
3704 ****************************************************************************/
3707 {
3708 WERROR result;
3712 /*
3713 * invalidate cache for all open handles to this printer.
3714 * cache for a given handle will be updated on the next
3715 * get_a_printer()
3716 */
3723 {
3724 /*
3725 * Update the changestamp. Emperical tests show that the
3726 * ChangeID is always updated,but c_setprinter is
3727 * global spooler variable (not per printer).
3728 */
3730 /* ChangeID **must** be increasing over the lifetime
3731 of client's spoolss service in order for the
3732 client's cache to show updates */
3736 /*
3737 * Because one day someone will ask:
3738 * NT->NT An admin connection to a remote
3739 * printer show changes imeediately in
3740 * the properities dialog
3741 *
3742 * A non-admin connection will only show the
3743 * changes after viewing the properites page
3744 * 2 times. Seems to be related to a
3745 * race condition in the client between the spooler
3746 * updating the local cache and the Explorer.exe GUI
3747 * actually displaying the properties.
3748 *
3749 * This is fixed in Win2k. admin/non-admin
3750 * connections both display changes immediately.
3751 *
3752 * 14/12/01 --jerry
3753 */
3758 }
3762 }
3765 }
3767 /****************************************************************************
3768 Initialize printer devmode & data with previously saved driver init values.
3769 ****************************************************************************/
3772 {
3774 pstring key;
3776 NT_PRINTER_INFO_LEVEL_2 info;
3781 /*
3782 * Delete any printer data 'values' already set. When called for driver
3783 * replace, there will generally be some, but during an add printer, there
3784 * should not be any (if there are delete them).
3785 */
3796 /*
3797 * When changing to a driver that has no init info in the tdb, remove
3798 * the previous drivers init info and leave the new on blank.
3799 */
3802 }
3804 /*
3805 * Get the saved DEVMODE..
3806 */
3810 /*
3811 * The saved DEVMODE contains the devicename from the printer used during
3812 * the initialization save. Change it to reflect the new printer.
3813 */
3818 }
3820 /*
3821 * NT/2k does not change out the entire DeviceMode of a printer
3822 * when changing the driver. Only the driverextra, private, &
3823 * driverversion fields. --jerry (Thu Mar 14 08:58:43 CST 2002)
3824 *
3825 * Later examination revealed that Windows NT/2k does reset the
3826 * the printer's device mode, bit **only** when you change a
3827 * property of the device mode such as the page orientation.
3828 * --jerry
3829 */
3832 /* Bind the saved DEVMODE to the new the printer */
3840 /* Add the printer data 'values' to the new printer */
3848 }
3850 /****************************************************************************
3851 Initialize printer devmode & data with previously saved driver init values.
3852 When a printer is created using AddPrinter, the drivername bound to the
3853 printer is used to lookup previously saved driver initialization info, which
3854 is bound to the new printer.
3855 ****************************************************************************/
3858 {
3868 level));
3870 }
3873 }
3875 /****************************************************************************
3876 Delete driver init data stored for a specified driver
3877 ****************************************************************************/
3880 {
3881 pstring key;
3882 TDB_DATA kbuf;
3887 }
3897 }
3899 /****************************************************************************
3900 Pack up the DEVMODE and values for a printer into a 'driver init' entry
3901 in the tdb. Note: this is different from the driver entry and the printer
3902 entry. There should be a single driver init entry for each driver regardless
3903 of whether it was installed from NT or 2K. Technically, they should be
3904 different, but they work out to the same struct.
3905 ****************************************************************************/
3908 {
3909 pstring key;
3917 again:
3931 }
3932 else
3936 }
3947 done:
3957 }
3959 /****************************************************************************
3960 Update (i.e. save) the driver init info (DEVMODE and values) for a printer
3961 ****************************************************************************/
3964 {
3965 uint32 result;
3976 }
3979 }
3981 /****************************************************************************
3982 Convert the printer data value, a REG_BINARY array, into an initialization
3983 DEVMODE. Note: the array must be parsed as if it was a DEVMODE in an rpc...
3984 got to keep the endians happy :).
3985 ****************************************************************************/
3987 static BOOL convert_driver_init( TALLOC_CTX *ctx, NT_DEVICEMODE *nt_devmode, uint8 *data, uint32 data_len )
3988 {
3990 prs_struct ps;
3991 DEVICEMODE devmode;
4001 else
4005 }
4007 /****************************************************************************
4008 Set the DRIVER_INIT info in the tdb. Requires Win32 client code that:
4010 1. Use the driver's config DLL to this UNC printername and:
4011 a. Call DrvPrintEvent with PRINTER_EVENT_INITIALIZE
4012 b. Call DrvConvertDevMode with CDM_DRIVER_DEFAULT to get default DEVMODE
4013 2. Call SetPrinterData with the 'magic' key and the DEVMODE as data.
4015 The last step triggers saving the "driver initialization" information for
4016 this printer into the tdb. Later, new printers that use this driver will
4017 have this initialization information bound to them. This simulates the
4018 driver initialization, as if it had run on the Samba server (as it would
4019 have done on NT).
4021 The Win32 client side code requirement sucks! But until we can run arbitrary
4022 Win32 printer driver code on any Unix that Samba runs on, we are stuck with it.
4024 It would have been easier to use SetPrinter because all the UNMARSHALLING of
4025 the DEVMODE is done there, but 2K/XP clients do not set the DEVMODE... think
4026 about it and you will realize why. JRR 010720
4027 ****************************************************************************/
4029 static WERROR save_driver_init_2(NT_PRINTER_INFO_LEVEL *printer, uint8 *data, uint32 data_len )
4030 {
4036 /*
4037 * When the DEVMODE is already set on the printer, don't try to unpack it.
4038 */
4042 /*
4043 * Set devmode on printer info, so entire printer initialization can be
4044 * saved to tdb.
4045 */
4053 }
4057 /*
4058 * The DEVMODE is held in the 'data' component of the param in raw binary.
4059 * Convert it to to a devmode structure
4060 */
4065 }
4068 }
4070 /*
4071 * Pack up and add (or update) the DEVMODE and any current printer data to
4072 * a 'driver init' element in the tdb
4073 *
4074 */
4080 }
4082 /*
4083 * If driver initialization info was successfully saved, set the current
4084 * printer to match it. This allows initialization of the current printer
4085 * as well as the driver.
4086 */
4091 }
4093 done:
4100 }
4102 /****************************************************************************
4103 Update the driver init info (DEVMODE and specifics) for a printer
4104 ****************************************************************************/
4106 WERROR save_driver_init(NT_PRINTER_INFO_LEVEL *printer, uint32 level, uint8 *data, uint32 data_len)
4107 {
4117 }
4120 }
4122 /****************************************************************************
4123 Deep copy a NT_PRINTER_DATA
4124 ****************************************************************************/
4127 {
4136 /* create a new instance of the printerkey in the destination
4137 printer_data object */
4145 /* dup the printer entire printer key */
4149 }
4150 }
4153 }
4155 /****************************************************************************
4156 Deep copy a NT_PRINTER_INFO_LEVEL_2 structure using malloc()'d memeory
4157 Caller must free.
4158 ****************************************************************************/
4161 {
4172 /* malloc()'d members copied here */
4179 /* this is talloc()'d; very ugly that we have a structure that
4180 is half malloc()'d and half talloc()'d but that is the way
4181 that the PRINTER_INFO stuff is written right now. --jerry */
4186 }
4188 /****************************************************************************
4189 Get a NT_PRINTER_INFO_LEVEL struct. It returns malloced memory.
4191 Previously the code had a memory allocation problem because it always
4192 used the TALLOC_CTX from the Printer_entry*. This context lasts
4193 as a long as the original handle is open. So if the client made a lot
4194 of getprinter[data]() calls, the memory usage would climb. Now we use
4195 a short lived TALLOC_CTX for printer_info_2 objects returned. We
4196 still use the Printer_entry->ctx for maintaining the cache copy though
4197 since that object must live as long as the handle by definition.
4198 --jerry
4200 ****************************************************************************/
4202 WERROR get_a_printer( Printer_entry *print_hnd, NT_PRINTER_INFO_LEVEL **pp_printer, uint32 level,
4204 {
4205 WERROR result;
4207 fstring servername;
4218 }
4226 }
4228 /*
4229 * check for cache first. A Printer handle cannot changed
4230 * to another printer object so we only check that the printer
4231 * is actually for a printer and that the printer_info pointer
4232 * is valid
4233 */
4237 {
4238 /* get_talloc_ctx() works here because we need a short
4239 lived talloc context */
4242 {
4247 }
4255 }
4257 /* no cache for this handle; see if we can match one from another handle.
4258 Make sure to use a short lived talloc ctx */
4261 result = find_printer_in_print_hnd_cache(get_talloc_ctx(), &printer->info_2, servername, sharename);
4263 /* fail to disk if we don't have it with any open handle */
4268 /* we have a new printer now. Save it with this handle */
4273 /* save a copy in cache */
4279 /* make sure to use the handle's talloc ctx here since
4280 the printer_2 object must last until the handle is closed */
4284 /* don't fail the lookup just because the cache update failed */
4287 }
4288 }
4290 }
4291 else
4299 }
4301 DEBUG(10,("get_a_printer: [%s] level %u returning %s\n", sharename, (unsigned int)level, dos_errstr(result)));
4304 }
4306 /****************************************************************************
4307 Deletes a NT_PRINTER_INFO_LEVEL struct.
4308 ****************************************************************************/
4311 {
4312 uint32 result;
4332 }
4336 }
4338 /****************************************************************************
4339 ****************************************************************************/
4341 {
4342 uint32 result;
4358 }
4361 }
4362 /****************************************************************************
4363 ****************************************************************************/
4367 {
4368 WERROR result;
4372 /* Sometime we just want any version of the driver */
4375 /* look for Win2k first and then for NT4 */
4382 }
4386 }
4392 }
4398 }
4400 /****************************************************************************
4401 ****************************************************************************/
4403 {
4404 uint32 result;
4408 {
4411 {
4419 }
4421 }
4423 {
4434 }
4436 }
4440 }
4442 }
4445 /****************************************************************************
4446 Determine whether or not a particular driver is currently assigned
4447 to a printer
4448 ****************************************************************************/
4451 {
4462 /* loop through the printers.tdb and check for the drivername */
4475 }
4480 NT_PRINTER_DRIVER_INFO_LEVEL d;
4481 WERROR werr;
4485 /* we can still remove the driver if there is one of
4486 "Windows NT x86" version 2 or 3 left */
4490 }
4504 }
4505 }
4507 /* now check the error code */
4510 /* it's ok to remove the driver, we have other architctures left */
4513 }
4514 }
4516 /* report that the driver is not in use by default */
4519 }
4522 /**********************************************************************
4523 Check to see if a ogiven file is in use by *info
4524 *********************************************************************/
4527 {
4545 /* see of there are any dependent files to examine */
4553 i++;
4554 }
4558 }
4560 /**********************************************************************
4561 Utility function to remove the dependent file pointed to by the
4562 input parameter from the list
4563 *********************************************************************/
4566 {
4568 /* bump everything down a slot */
4572 idx++;
4573 }
4578 }
4580 /**********************************************************************
4581 Check if any of the files used by src are also used by drv
4582 *********************************************************************/
4586 {
4593 /* check each file. Remove it from the src structure if it overlaps */
4599 }
4605 }
4611 }
4617 }
4619 /* are there any dependentfiles to examine? */
4630 i++;
4631 }
4634 }
4636 /****************************************************************************
4637 Determine whether or not a particular driver files are currently being
4638 used by any other driver.
4640 Return value is True if any files were in use by other drivers
4641 and False otherwise.
4643 Upon return, *info has been modified to only contain the driver files
4644 which are not in use
4645 ****************************************************************************/
4648 {
4651 uint32 version;
4653 NT_PRINTER_DRIVER_INFO_LEVEL driver;
4660 /* loop over all driver versions */
4664 /* get the list of drivers */
4672 /* check each driver for overlap in files */
4682 }
4684 /* check if d2 uses any files from d1 */
4685 /* only if this is a different driver than the one being deleted */
4692 }
4693 }
4696 }
4708 }
4710 /****************************************************************************
4711 Actually delete the driver files. Make sure that
4712 printer_driver_files_in_use() return False before calling
4713 this.
4714 ****************************************************************************/
4716 static BOOL delete_driver_files( NT_PRINTER_DRIVER_INFO_LEVEL_3 *info_3, struct current_user *user )
4717 {
4721 DATA_BLOB null_pw;
4722 NTSTATUS nt_status;
4723 fstring res_type;
4724 BOOL bad_path;
4725 SMB_STRUCT_STAT st;
4730 DEBUG(6,("delete_driver_files: deleting driver [%s] - version [%d]\n", info_3->name, info_3->cversion));
4732 /*
4733 * Connect to the print$ share under the same account as the
4734 * user connected to the rpc pipe. Note we must be root to
4735 * do this.
4736 */
4747 }
4749 /* Save who we are - we are temporarily becoming the connection user. */
4754 }
4756 /* now delete the files; must strip the '\print$' string from
4757 fron of path */
4764 }
4765 }
4772 }
4773 }
4780 }
4781 }
4788 }
4789 }
4791 /* check if we are done removing files */
4797 /* bypass the "\print$" portion of the path */
4803 }
4805 i++;
4806 }
4807 }
4812 }
4814 /****************************************************************************
4815 Remove a printer driver from the TDB. This assumes that the the driver was
4816 previously looked up.
4817 ***************************************************************************/
4819 WERROR delete_printer_driver( NT_PRINTER_DRIVER_INFO_LEVEL_3 *info_3, struct current_user *user,
4821 {
4822 pstring key;
4825 NT_PRINTER_DRIVER_INFO_LEVEL ctr;
4827 /* delete the tdb data first */
4842 /* check if the driver actually exists for this environment */
4848 }
4852 /* ok... the driver exists so the delete should return success */
4857 }
4859 /*
4860 * now delete any associated files if delete_files == True
4861 * even if this part failes, we return succes because the
4862 * driver doesn not exist any more
4863 */
4872 }
4874 /****************************************************************************
4875 Store a security desc for a printer.
4876 ****************************************************************************/
4879 {
4882 prs_struct ps;
4884 fstring key;
4885 WERROR status;
4891 /* The old owner and group sids of the security descriptor are not
4892 present when new ACEs are added or removed by changing printer
4893 permissions through NT. If they are NULL in the new security
4894 descriptor then copy them over from the old one. */
4904 /* Pick out correct owner and group sids */
4922 /* Make a deep copy of the security descriptor */
4926 sacl,
4927 dacl,
4931 }
4935 }
4937 /* Store the security descriptor in a tdb */
4946 }
4955 }
4957 /* Free malloc'ed memory */
4959 out:
4965 }
4967 /****************************************************************************
4968 Construct a default security descriptor buffer for a printer.
4969 ****************************************************************************/
4972 {
4975 SEC_ACCESS sa;
4979 DOM_SID adm_sid;
4982 /* Create an ACE where Everyone is allowed to print */
4988 /* Add the domain admins group if we are a DC */
4991 DOM_SID domadmins_sid;
5002 }
5012 }
5014 /* add BUILTIN\Administrators as FULL CONTROL */
5021 SEC_ACE_TYPE_ACCESS_ALLOWED,
5024 /* Make the security descriptor owned by the BUILTIN\Administrators */
5026 /* The ACL revision number in rpc_secdesc.h differs from the one
5027 created by NT when setting ACE entries in printer
5028 descriptors. NT4 complains about the property being edited by a
5029 NT5 machine. */
5036 }
5041 }
5049 }
5051 /****************************************************************************
5052 Get a security desc for a printer.
5053 ****************************************************************************/
5056 {
5057 prs_struct ps;
5058 fstring key;
5063 }
5065 /* Fetch security descriptor from tdb */
5076 }
5078 /* Save default security descriptor for later */
5089 }
5091 /* If security descriptor is owned by S-1-1-0 and winbindd is up,
5092 this security descriptor has been created when winbindd was
5093 down. Take ownership of security descriptor. */
5096 DOM_SID owner_sid;
5098 /* Change sd owner to workgroup administrator */
5105 /* Create new sd */
5118 /* Swap with other one */
5122 /* Set it */
5125 }
5126 }
5136 fstring sid_str;
5143 }
5144 }
5148 }
5150 /* error code:
5151 0: everything OK
5152 1: level not implemented
5153 2: file doesn't exist
5154 3: can't allocate memory
5155 4: can't free memory
5156 5: non existant struct
5157 */
5159 /*
5160 A printer and a printer driver are 2 different things.
5161 NT manages them separatelly, Samba does the same.
5162 Why ? Simply because it's easier and it makes sense !
5164 Now explanation: You have 3 printers behind your samba server,
5165 2 of them are the same make and model (laser A and B). But laser B
5166 has an 3000 sheet feeder and laser A doesn't such an option.
5167 Your third printer is an old dot-matrix model for the accounting :-).
5169 If the /usr/local/samba/lib directory (default dir), you will have
5170 5 files to describe all of this.
5172 3 files for the printers (1 by printer):
5173 NTprinter_laser A
5174 NTprinter_laser B
5175 NTprinter_accounting
5176 2 files for the drivers (1 for the laser and 1 for the dot matrix)
5177 NTdriver_printer model X
5178 NTdriver_printer model Y
5180 jfm: I should use this comment for the text file to explain
5181 same thing for the forms BTW.
5182 Je devrais mettre mes commentaires en francais, ca serait mieux :-)
5184 */
5186 /* Convert generic access rights to printer object specific access rights.
5187 It turns out that NT4 security descriptors use generic access rights and
5188 NT5 the object specific ones. */
5191 {
5197 }
5198 }
5200 /****************************************************************************
5201 Check a user has permissions to perform the given operation. We use the
5202 permission constants defined in include/rpc_spoolss.h to check the various
5203 actions we perform when checking printer access.
5205 PRINTER_ACCESS_ADMINISTER:
5206 print_queue_pause, print_queue_resume, update_printer_sec,
5207 update_printer, spoolss_addprinterex_level_2,
5208 _spoolss_setprinterdata
5210 PRINTER_ACCESS_USE:
5211 print_job_start
5213 JOB_ACCESS_ADMINISTER:
5214 print_job_delete, print_job_pause, print_job_resume,
5215 print_queue_purge
5217 Try access control in the following order (for performance reasons):
5218 1) root ans SE_PRINT_OPERATOR can do anything (easy check)
5219 2) check security descriptor (bit comparisons in memory)
5220 3) "printer admins" (may result in numerous calls to winbind)
5222 ****************************************************************************/
5224 {
5226 uint32 access_granted;
5227 NTSTATUS status;
5228 BOOL result;
5233 /* If user is NULL then use the current_user structure */
5238 /* Always allow root or SE_PRINT_OPERATROR to do anything */
5242 }
5244 /* Get printer name */
5251 }
5253 /* Get printer security descriptor */
5258 }
5265 /* Create a child security descriptor to check permissions
5266 against. This is because print jobs are child objects
5267 objects of a printer. */
5271 /* Now this is the bit that really confuses me. The access
5272 type needs to be changed from JOB_ACCESS_ADMINISTER to
5273 PRINTER_ACCESS_ADMINISTER for this to work. Something
5274 to do with the child (job) object becoming like a
5275 printer?? -tpot */
5278 }
5280 /* Check access */
5289 /* see if we need to try the printer admin list */
5294 }
5302 }
5304 /****************************************************************************
5305 Check the time parameters allow a print operation.
5306 *****************************************************************************/
5309 {
5314 uint32 mins;
5334 }
5336 /****************************************************************************
5337 Fill in the servername sent in the _spoolss_open_printer_ex() call
5338 ****************************************************************************/
5340 {
5342 }