?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
drs-fsmo: Improve handling of FSMO role takeover.
[Samba/gebeck_regimport.git] / source3 / web / swat.c
blob90e4af9958faf4cdd0c19593c4ae91f58d5220bf
1 /*
2 Unix SMB/CIFS implementation.
3 Samba Web Administration Tool
4 Version 3.0.0
5 Copyright (C) Andrew Tridgell 1997-2002
6 Copyright (C) John H Terpstra 2002
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 /**
23 * @defgroup swat SWAT - Samba Web Administration Tool
24 * @{
25 * @file swat.c
26 *
27 * @brief Samba Web Administration Tool.
28 **/
29
30 #include "includes.h"
31 #include "system/filesys.h"
32 #include "popt_common.h"
33 #include "web/swat_proto.h"
34 #include "printing/pcap.h"
35 #include "printing/load.h"
36 #include "passdb.h"
37 #include "intl/lang_tdb.h"
38 #include "../lib/crypto/md5.h"
39 #include "lib/param/loadparm.h"
40 #include "messages.h"
41
42 static int demo_mode = False;
43 static int passwd_only = False;
44 static bool have_write_access = False;
45 static bool have_read_access = False;
46 static int iNumNonAutoPrintServices = 0;
47
48 /*
49 * Password Management Globals
50 */
51 #define SWAT_USER "username"
52 #define OLD_PSWD "old_passwd"
53 #define NEW_PSWD "new_passwd"
54 #define NEW2_PSWD "new2_passwd"
55 #define CHG_S_PASSWD_FLAG "chg_s_passwd_flag"
56 #define CHG_R_PASSWD_FLAG "chg_r_passwd_flag"
57 #define ADD_USER_FLAG "add_user_flag"
58 #define DELETE_USER_FLAG "delete_user_flag"
59 #define DISABLE_USER_FLAG "disable_user_flag"
60 #define ENABLE_USER_FLAG "enable_user_flag"
61 #define RHOST "remote_host"
62 #define XSRF_TOKEN "xsrf"
63 #define XSRF_TIME "xsrf_time"
64 #define XSRF_TIMEOUT 300
65
66 #define _(x) lang_msg_rotate(talloc_tos(),x)
67
68 /****************************************************************************
69 ****************************************************************************/
70 static int enum_index(int value, const struct enum_list *enumlist)
71 {
72 int i;
73 for (i=0;enumlist[i].name;i++)
74 if (value == enumlist[i].value) break;
75 return(i);
76 }
77
78 static char *fix_backslash(const char *str)
79 {
80 static char newstring[1024];
81 char *p = newstring;
82
83 while (*str) {
84 if (*str == '\\') {*p++ = '\\';*p++ = '\\';}
85 else *p++ = *str;
86 ++str;
87 }
88 *p = '\0';
89 return newstring;
90 }
91
92 static const char *fix_quotes(TALLOC_CTX *ctx, char *str)
93 {
94 char *newstring = NULL;
95 char *p = NULL;
96 size_t newstring_len;
97 int quote_len = strlen("&quot;");
98
99 /* Count the number of quotes. */
100 newstring_len = 1;
101 p = (char *) str;
102 while (*p) {
103 if ( *p == '\"') {
104 newstring_len += quote_len;
105 } else {
106 newstring_len++;
107 }
108 ++p;
109 }
110 newstring = talloc_array(ctx, char, newstring_len);
111 if (!newstring) {
112 return "";
113 }
114 for (p = newstring; *str; str++) {
115 if ( *str == '\"') {
116 strncpy( p, "&quot;", quote_len);
117 p += quote_len;
118 } else {
119 *p++ = *str;
120 }
121 }
122 *p = '\0';
123 return newstring;
124 }
125
126 static char *stripspaceupper(const char *str)
127 {
128 static char newstring[1024];
129 char *p = newstring;
130
131 while (*str) {
132 if (*str != ' ') *p++ = toupper_m(*str);
133 ++str;
134 }
135 *p = '\0';
136 return newstring;
137 }
138
139 static char *make_parm_name(const char *label)
140 {
141 static char parmname[1024];
142 char *p = parmname;
143
144 while (*label) {
145 if (*label == ' ') *p++ = '_';
146 else *p++ = *label;
147 ++label;
148 }
149 *p = '\0';
150 return parmname;
151 }
152
153 void get_xsrf_token(const char *username, const char *pass,
154 const char *formname, time_t xsrf_time, char token_str[33])
155 {
156 struct MD5Context md5_ctx;
157 uint8_t token[16];
158 int i;
159
160 token_str[0] = '\0';
161 ZERO_STRUCT(md5_ctx);
162 MD5Init(&md5_ctx);
163
164 MD5Update(&md5_ctx, (uint8_t *)formname, strlen(formname));
165 MD5Update(&md5_ctx, (uint8_t *)&xsrf_time, sizeof(time_t));
166 if (username != NULL) {
167 MD5Update(&md5_ctx, (uint8_t *)username, strlen(username));
168 }
169 if (pass != NULL) {
170 MD5Update(&md5_ctx, (uint8_t *)pass, strlen(pass));
171 }
172
173 MD5Final(token, &md5_ctx);
174
175 for(i = 0; i < sizeof(token); i++) {
176 char tmp[3];
177
178 snprintf(tmp, sizeof(tmp), "%02x", token[i]);
179 /* FIXME ! Truncate check. JRA. */
180 (void)strlcat(token_str, tmp, sizeof(tmp));
181 }
182 }
183
184 void print_xsrf_token(const char *username, const char *pass,
185 const char *formname)
186 {
187 char token[33];
188 time_t xsrf_time = time(NULL);
189
190 get_xsrf_token(username, pass, formname, xsrf_time, token);
191 printf("<input type=\"hidden\" name=\"%s\" value=\"%s\">\n",
192 XSRF_TOKEN, token);
193 printf("<input type=\"hidden\" name=\"%s\" value=\"%lld\">\n",
194 XSRF_TIME, (long long int)xsrf_time);
195 }
196
197 bool verify_xsrf_token(const char *formname)
198 {
199 char expected[33];
200 const char *username = cgi_user_name();
201 const char *pass = cgi_user_pass();
202 const char *token = cgi_variable_nonull(XSRF_TOKEN);
203 const char *time_str = cgi_variable_nonull(XSRF_TIME);
204 char *p = NULL;
205 long long xsrf_time_ll = 0;
206 time_t xsrf_time = 0;
207 time_t now = time(NULL);
208
209 errno = 0;
210 xsrf_time_ll = strtoll(time_str, &p, 10);
211 if (errno != 0) {
212 return false;
213 }
214 if (p == NULL) {
215 return false;
216 }
217 if (PTR_DIFF(p, time_str) > strlen(time_str)) {
218 return false;
219 }
220 if (xsrf_time_ll > _TYPE_MAXIMUM(time_t)) {
221 return false;
222 }
223 if (xsrf_time_ll < _TYPE_MINIMUM(time_t)) {
224 return false;
225 }
226 xsrf_time = xsrf_time_ll;
227
228 if (abs(now - xsrf_time) > XSRF_TIMEOUT) {
229 return false;
230 }
231
232 get_xsrf_token(username, pass, formname, xsrf_time, expected);
233 return (strncmp(expected, token, sizeof(expected)) == 0);
234 }
235
236
237 /****************************************************************************
238 include a lump of html in a page
239 ****************************************************************************/
240 static int include_html(const char *fname)
241 {
242 int fd;
243 char buf[1024];
244 int ret;
245
246 fd = web_open(fname, O_RDONLY, 0);
247
248 if (fd == -1) {
249 printf(_("ERROR: Can't open %s"), fname);
250 printf("\n");
251 return 0;
252 }
253
254 while ((ret = read(fd, buf, sizeof(buf))) > 0) {
255 if (write(1, buf, ret) == -1) {
256 break;
257 }
258 }
259
260 close(fd);
261 return 1;
262 }
263
264 /****************************************************************************
265 start the page with standard stuff
266 ****************************************************************************/
267 static void print_header(void)
268 {
269 if (!cgi_waspost()) {
270 printf("Expires: 0\r\n");
271 }
272 printf("Content-type: text/html\r\n\r\n");
273
274 if (!include_html("include/header.html")) {
275 printf("<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2//EN\">\n");
276 printf("<HTML>\n<HEAD>\n<TITLE>Samba Web Administration Tool</TITLE>\n</HEAD>\n<BODY background=\"/swat/images/background.jpg\">\n\n");
277 }
278 }
279
280 /* *******************************************************************
281 show parameter label with translated name in the following form
282 because showing original and translated label in one line looks
283 too long, and showing translated label only is unusable for
284 heavy users.
285 -------------------------------
286 HELP security [combo box][button]
287 SECURITY
288 -------------------------------
289 (capital words are translated by gettext.)
290 if no translation is available, then same form as original is
291 used.
292 "i18n_translated_parm" class is used to change the color of the
293 translated parameter with CSS.
294 **************************************************************** */
295 static const char *get_parm_translated(TALLOC_CTX *ctx,
296 const char* pAnchor, const char* pHelp, const char* pLabel)
297 {
298 const char *pTranslated = _(pLabel);
299 char *output;
300 if(strcmp(pLabel, pTranslated) != 0) {
301 output = talloc_asprintf(ctx,
302 "<A HREF=\"/swat/help/manpages/smb.conf.5.html#%s\" target=\"docs\"> %s</A>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s <br><span class=\"i18n_translated_parm\">%s</span>",
303 pAnchor, pHelp, pLabel, pTranslated);
304 return output;
305 }
306 output = talloc_asprintf(ctx,
307 "<A HREF=\"/swat/help/manpages/smb.conf.5.html#%s\" target=\"docs\"> %s</A>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s",
308 pAnchor, pHelp, pLabel);
309 return output;
310 }
311 /****************************************************************************
312 finish off the page
313 ****************************************************************************/
314 static void print_footer(void)
315 {
316 if (!include_html("include/footer.html")) {
317 printf("\n</BODY>\n</HTML>\n");
318 }
319 }
320
321 /****************************************************************************
322 display one editable parameter in a form
323 ****************************************************************************/
324 static void show_parameter(int snum, struct parm_struct *parm)
325 {
326 int i;
327 void *ptr;
328 char *utf8_s1, *utf8_s2;
329 size_t converted_size;
330 TALLOC_CTX *ctx = talloc_stackframe();
331
332 if (parm->p_class == P_LOCAL && snum >= 0) {
333 ptr = lp_local_ptr_by_snum(snum, parm);
334 } else {
335 ptr = lp_parm_ptr(NULL, parm);
336 }
337
338 printf("<tr><td>%s</td><td>", get_parm_translated(ctx,
339 stripspaceupper(parm->label), _("Help"), parm->label));
340 switch (parm->type) {
341 case P_CHAR:
342 printf("<input type=text size=2 name=\"parm_%s\" value=\"%c\">",
343 make_parm_name(parm->label), *(char *)ptr);
344 printf("<input type=button value=\"%s\" onClick=\"swatform.parm_%s.value=\'%c\'\">",
345 _("Set Default"), make_parm_name(parm->label),(char)(parm->def.cvalue));
346 break;
347
348 case P_LIST:
349 printf("<input type=text size=40 name=\"parm_%s\" value=\"",
350 make_parm_name(parm->label));
351 if ((char ***)ptr && *(char ***)ptr && **(char ***)ptr) {
352 char **list = *(char ***)ptr;
353 for (;*list;list++) {
354 /* enclose in HTML encoded quotes if the string contains a space */
355 if ( strchr_m(*list, ' ') ) {
356 push_utf8_talloc(talloc_tos(), &utf8_s1, *list, &converted_size);
357 push_utf8_talloc(talloc_tos(), &utf8_s2, ((*(list+1))?", ":""), &converted_size);
358 printf("&quot;%s&quot;%s", utf8_s1, utf8_s2);
359 } else {
360 push_utf8_talloc(talloc_tos(), &utf8_s1, *list, &converted_size);
361 push_utf8_talloc(talloc_tos(), &utf8_s2, ((*(list+1))?", ":""), &converted_size);
362 printf("%s%s", utf8_s1, utf8_s2);
363 }
364 TALLOC_FREE(utf8_s1);
365 TALLOC_FREE(utf8_s2);
366 }
367 }
368 printf("\">");
369 printf("<input type=button value=\"%s\" onClick=\"swatform.parm_%s.value=\'",
370 _("Set Default"), make_parm_name(parm->label));
371 if (parm->def.lvalue) {
372 char **list = (char **)(parm->def.lvalue);
373 for (; *list; list++) {
374 /* enclose in HTML encoded quotes if the string contains a space */
375 if ( strchr_m(*list, ' ') )
376 printf("&quot;%s&quot;%s", *list, ((*(list+1))?", ":""));
377 else
378 printf("%s%s", *list, ((*(list+1))?", ":""));
379 }
380 }
381 printf("\'\">");
382 break;
383
384 case P_STRING:
385 case P_USTRING:
386 push_utf8_talloc(talloc_tos(), &utf8_s1, *(char **)ptr, &converted_size);
387 printf("<input type=text size=40 name=\"parm_%s\" value=\"%s\">",
388 make_parm_name(parm->label), fix_quotes(ctx, utf8_s1));
389 TALLOC_FREE(utf8_s1);
390 printf("<input type=button value=\"%s\" onClick=\"swatform.parm_%s.value=\'%s\'\">",
391 _("Set Default"), make_parm_name(parm->label),fix_backslash((char *)(parm->def.svalue)));
392 break;
393
394 case P_BOOL:
395 printf("<select name=\"parm_%s\">",make_parm_name(parm->label));
396 printf("<option %s>Yes", (*(bool *)ptr)?"selected":"");
397 printf("<option %s>No", (*(bool *)ptr)?"":"selected");
398 printf("</select>");
399 printf("<input type=button value=\"%s\" onClick=\"swatform.parm_%s.selectedIndex=\'%d\'\">",
400 _("Set Default"), make_parm_name(parm->label),(bool)(parm->def.bvalue)?0:1);
401 break;
402
403 case P_BOOLREV:
404 printf("<select name=\"parm_%s\">",make_parm_name(parm->label));
405 printf("<option %s>Yes", (*(bool *)ptr)?"":"selected");
406 printf("<option %s>No", (*(bool *)ptr)?"selected":"");
407 printf("</select>");
408 printf("<input type=button value=\"%s\" onClick=\"swatform.parm_%s.selectedIndex=\'%d\'\">",
409 _("Set Default"), make_parm_name(parm->label),(bool)(parm->def.bvalue)?1:0);
410 break;
411
412 case P_INTEGER:
413 case P_BYTES:
414 printf("<input type=text size=8 name=\"parm_%s\" value=\"%d\">", make_parm_name(parm->label), *(int *)ptr);
415 printf("<input type=button value=\"%s\" onClick=\"swatform.parm_%s.value=\'%d\'\">",
416 _("Set Default"), make_parm_name(parm->label),(int)(parm->def.ivalue));
417 break;
418
419 case P_OCTAL: {
420 char *o;
421 o = octal_string(*(int *)ptr);
422 printf("<input type=text size=8 name=\"parm_%s\" value=%s>",
423 make_parm_name(parm->label), o);
424 TALLOC_FREE(o);
425 o = octal_string((int)(parm->def.ivalue));
426 printf("<input type=button value=\"%s\" "
427 "onClick=\"swatform.parm_%s.value=\'%s\'\">",
428 _("Set Default"), make_parm_name(parm->label), o);
429 TALLOC_FREE(o);
430 break;
431 }
432
433 case P_ENUM:
434 printf("<select name=\"parm_%s\">",make_parm_name(parm->label));
435 for (i=0;parm->enum_list[i].name;i++) {
436 if (i == 0 || parm->enum_list[i].value != parm->enum_list[i-1].value) {
437 printf("<option %s>%s",(*(int *)ptr)==parm->enum_list[i].value?"selected":"",parm->enum_list[i].name);
438 }
439 }
440 printf("</select>");
441 printf("<input type=button value=\"%s\" onClick=\"swatform.parm_%s.selectedIndex=\'%d\'\">",
442 _("Set Default"), make_parm_name(parm->label),enum_index((int)(parm->def.ivalue),parm->enum_list));
443 break;
444 case P_SEP:
445 break;
446 }
447 printf("</td></tr>\n");
448 TALLOC_FREE(ctx);
449 }
450
451 /****************************************************************************
452 display a set of parameters for a service
453 ****************************************************************************/
454 static void show_parameters(int snum, int allparameters, unsigned int parm_filter, int printers)
455 {
456 int i = 0;
457 struct parm_struct *parm;
458 const char *heading = NULL;
459 const char *last_heading = NULL;
460
461 while ((parm = lp_next_parameter(snum, &i, allparameters))) {
462 if (snum < 0 && parm->p_class == P_LOCAL && !(parm->flags & FLAG_GLOBAL))
463 continue;
464 if (parm->p_class == P_SEPARATOR) {
465 heading = parm->label;
466 continue;
467 }
468 if (parm->flags & FLAG_HIDE) continue;
469 if (snum >= 0) {
470 if (printers & !(parm->flags & FLAG_PRINT)) continue;
471 if (!printers & !(parm->flags & FLAG_SHARE)) continue;
472 }
473
474 if (!( parm_filter & FLAG_ADVANCED )) {
475 if (!(parm->flags & FLAG_BASIC)) {
476 void *ptr;
477 if (parm->p_class == P_LOCAL && snum >= 0) {
478 ptr = lp_local_ptr_by_snum(snum, parm);
479 } else {
480 ptr = lp_parm_ptr(NULL, parm);
481 }
482
483 switch (parm->type) {
484 case P_CHAR:
485 if (*(char *)ptr == (char)(parm->def.cvalue)) continue;
486 break;
487
488 case P_LIST:
489 if (!str_list_equal(*(const char ***)ptr,
490 (const char **)(parm->def.lvalue))) continue;
491 break;
492
493 case P_STRING:
494 case P_USTRING:
495 if (!strcmp(*(char **)ptr,(char *)(parm->def.svalue))) continue;
496 break;
497
498 case P_BOOL:
499 case P_BOOLREV:
500 if (*(bool *)ptr == (bool)(parm->def.bvalue)) continue;
501 break;
502
503 case P_INTEGER:
504 case P_BYTES:
505 case P_OCTAL:
506 if (*(int *)ptr == (int)(parm->def.ivalue)) continue;
507 break;
508
509
510 case P_ENUM:
511 if (*(int *)ptr == (int)(parm->def.ivalue)) continue;
512 break;
513 case P_SEP:
514 continue;
515 }
516 }
517 if (printers && !(parm->flags & FLAG_PRINT)) continue;
518 }
519
520 if ((parm_filter & FLAG_WIZARD) && !(parm->flags & FLAG_WIZARD)) continue;
521
522 if ((parm_filter & FLAG_ADVANCED) && !(parm->flags & FLAG_ADVANCED)) continue;
523
524 if (heading && heading != last_heading) {
525 printf("<tr><td></td></tr><tr><td><b><u>%s</u></b></td></tr>\n", _(heading));
526 last_heading = heading;
527 }
528 show_parameter(snum, parm);
529 }
530 }
531
532 /****************************************************************************
533 load the smb.conf file into loadparm.
534 ****************************************************************************/
535 static bool load_config(bool save_def)
536 {
537 return lp_load(get_dyn_CONFIGFILE(),False,save_def,False,True);
538 }
539
540 /****************************************************************************
541 write a config file
542 ****************************************************************************/
543 static void write_config(FILE *f, bool show_defaults)
544 {
545 TALLOC_CTX *ctx = talloc_stackframe();
546
547 fprintf(f, "# Samba config file created using SWAT\n");
548 fprintf(f, "# from %s (%s)\n", cgi_remote_host(), cgi_remote_addr());
549 fprintf(f, "# Date: %s\n\n", current_timestring(ctx, False));
550
551 lp_dump(f, show_defaults, iNumNonAutoPrintServices);
552
553 TALLOC_FREE(ctx);
554 }
555
556 /****************************************************************************
557 save and reload the smb.conf config file
558 ****************************************************************************/
559 static int save_reload(int snum)
560 {
561 FILE *f;
562 struct stat st;
563
564 f = fopen(get_dyn_CONFIGFILE(),"w");
565 if (!f) {
566 printf(_("failed to open %s for writing"), get_dyn_CONFIGFILE());
567 printf("\n");
568 return 0;
569 }
570
571 /* just in case they have used the buggy xinetd to create the file */
572 if (fstat(fileno(f), &st) == 0 &&
573 (st.st_mode & S_IWOTH)) {
574 #if defined HAVE_FCHMOD
575 fchmod(fileno(f), S_IWUSR | S_IRUSR | S_IRGRP | S_IROTH);
576 #else
577 chmod(get_dyn_CONFIGFILE(), S_IWUSR | S_IRUSR | S_IRGRP | S_IROTH);
578 #endif
579 }
580
581 write_config(f, False);
582 if (snum >= 0)
583 lp_dump_one(f, False, snum);
584 fclose(f);
585
586 lp_kill_all_services();
587
588 if (!load_config(False)) {
589 printf(_("Can't reload %s"), get_dyn_CONFIGFILE());
590 printf("\n");
591 return 0;
592 }
593 iNumNonAutoPrintServices = lp_numservices();
594 if (pcap_cache_loaded()) {
595 struct tevent_context *ev_ctx;
596 struct messaging_context *msg_ctx;
597
598 ev_ctx = s3_tevent_context_init(NULL);
599 if (ev_ctx == NULL) {
600 printf("s3_tevent_context_init() failed\n");
601 return 0;
602 }
603 msg_ctx = messaging_init(ev_ctx, ev_ctx);
604 if (msg_ctx == NULL) {
605 printf("messaging_init() failed\n");
606 return 0;
607 }
608
609 load_printers(ev_ctx, msg_ctx);
610
611 talloc_free(ev_ctx);
612 }
613
614 return 1;
615 }
616
617 /****************************************************************************
618 commit one parameter
619 ****************************************************************************/
620 static void commit_parameter(int snum, struct parm_struct *parm, const char *v)
621 {
622 int i;
623 char *s;
624
625 if (snum < 0 && parm->p_class == P_LOCAL) {
626 /* this handles the case where we are changing a local
627 variable globally. We need to change the parameter in
628 all shares where it is currently set to the default */
629 for (i=0;i<lp_numservices();i++) {
630 s = lp_servicename(talloc_tos(), i);
631 if (s && (*s) && lp_is_default(i, parm)) {
632 lp_do_parameter(i, parm->label, v);
633 }
634 }
635 }
636
637 lp_do_parameter(snum, parm->label, v);
638 }
639
640 /****************************************************************************
641 commit a set of parameters for a service
642 ****************************************************************************/
643 static void commit_parameters(int snum)
644 {
645 int i = 0;
646 struct parm_struct *parm;
647 char *label;
648 const char *v;
649
650 while ((parm = lp_next_parameter(snum, &i, 1))) {
651 if (asprintf(&label, "parm_%s", make_parm_name(parm->label)) > 0) {
652 if ((v = cgi_variable(label)) != NULL) {
653 if (parm->flags & FLAG_HIDE)
654 continue;
655 commit_parameter(snum, parm, v);
656 }
657 SAFE_FREE(label);
658 }
659 }
660 }
661
662 /****************************************************************************
663 spit out the html for a link with an image
664 ****************************************************************************/
665 static void image_link(const char *name, const char *hlink, const char *src)
666 {
667 printf("<A HREF=\"%s/%s\"><img border=\"0\" src=\"/swat/%s\" alt=\"%s\"></A>\n",
668 cgi_baseurl(), hlink, src, name);
669 }
670
671 /****************************************************************************
672 display the main navigation controls at the top of each page along
673 with a title
674 ****************************************************************************/
675 static void show_main_buttons(void)
676 {
677 char *p;
678
679 if ((p = cgi_user_name()) && strcmp(p, "root")) {
680 printf(_("Logged in as <b>%s</b>"), p);
681 printf("<p>\n");
682 }
683
684 image_link(_("Home"), "", "images/home.gif");
685 if (have_write_access) {
686 image_link(_("Globals"), "globals", "images/globals.gif");
687 image_link(_("Shares"), "shares", "images/shares.gif");
688 image_link(_("Printers"), "printers", "images/printers.gif");
689 image_link(_("Wizard"), "wizard", "images/wizard.gif");
690 }
691 /* root always gets all buttons, otherwise look for -P */
692 if ( have_write_access || (!passwd_only && have_read_access) ) {
693 image_link(_("Status"), "status", "images/status.gif");
694 image_link(_("View Config"), "viewconfig", "images/viewconfig.gif");
695 }
696 image_link(_("Password Management"), "passwd", "images/passwd.gif");
697
698 printf("<HR>\n");
699 }
700
701 /****************************************************************************
702 * Handle Display/Edit Mode CGI
703 ****************************************************************************/
704 static void ViewModeBoxes(int mode)
705 {
706 printf("<p>%s:&nbsp;\n", _("Current View Is"));
707 printf("<input type=radio name=\"ViewMode\" value=0 %s>%s\n", ((mode == 0) ? "checked" : ""), _("Basic"));
708 printf("<input type=radio name=\"ViewMode\" value=1 %s>%s\n", ((mode == 1) ? "checked" : ""), _("Advanced"));
709 printf("<br>%s:&nbsp;\n", _("Change View To"));
710 printf("<input type=submit name=\"BasicMode\" value=\"%s\">\n", _("Basic"));
711 printf("<input type=submit name=\"AdvMode\" value=\"%s\">\n", _("Advanced"));
712 printf("</p><br>\n");
713 }
714
715 /****************************************************************************
716 display a welcome page
717 ****************************************************************************/
718 static void welcome_page(void)
719 {
720 if (file_exist("help/welcome.html")) {
721 include_html("help/welcome.html");
722 } else {
723 include_html("help/welcome-no-samba-doc.html");
724 }
725 }
726
727 /****************************************************************************
728 display the current smb.conf
729 ****************************************************************************/
730 static void viewconfig_page(void)
731 {
732 int full_view=0;
733 const char form_name[] = "viewconfig";
734
735 if (!verify_xsrf_token(form_name)) {
736 goto output_page;
737 }
738
739 if (cgi_variable("full_view")) {
740 full_view = 1;
741 }
742
743 output_page:
744 printf("<H2>%s</H2>\n", _("Current Config"));
745 printf("<form method=post>\n");
746 print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
747
748 if (full_view) {
749 printf("<input type=submit name=\"normal_view\" value=\"%s\">\n", _("Normal View"));
750 } else {
751 printf("<input type=submit name=\"full_view\" value=\"%s\">\n", _("Full View"));
752 }
753
754 printf("<p><pre>");
755 write_config(stdout, full_view);
756 printf("</pre>");
757 printf("</form>\n");
758 }
759
760 /****************************************************************************
761 second screen of the wizard ... Fetch Configuration Parameters
762 ****************************************************************************/
763 static void wizard_params_page(void)
764 {
765 unsigned int parm_filter = FLAG_WIZARD;
766 const char form_name[] = "wizard_params";
767
768 /* Here we first set and commit all the parameters that were selected
769 in the previous screen. */
770
771 printf("<H2>%s</H2>\n", _("Wizard Parameter Edit Page"));
772
773 if (!verify_xsrf_token(form_name)) {
774 goto output_page;
775 }
776
777 if (cgi_variable("Commit")) {
778 commit_parameters(GLOBAL_SECTION_SNUM);
779 save_reload(-1);
780 }
781
782 output_page:
783 printf("<form name=\"swatform\" method=post action=wizard_params>\n");
784 print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
785
786 if (have_write_access) {
787 printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
788 }
789
790 printf("<input type=reset name=\"Reset Values\" value=\"Reset\">\n");
791 printf("<p>\n");
792
793 printf("<table>\n");
794 show_parameters(GLOBAL_SECTION_SNUM, 1, parm_filter, 0);
795 printf("</table>\n");
796 printf("</form>\n");
797 }
798
799 /****************************************************************************
800 Utility to just rewrite the smb.conf file - effectively just cleans it up
801 ****************************************************************************/
802 static void rewritecfg_file(void)
803 {
804 commit_parameters(GLOBAL_SECTION_SNUM);
805 save_reload(-1);
806 printf("<H2>%s</H2>\n", _("Note: smb.conf file has been read and rewritten"));
807 }
808
809 /****************************************************************************
810 wizard to create/modify the smb.conf file
811 ****************************************************************************/
812 static void wizard_page(void)
813 {
814 /* Set some variables to collect data from smb.conf */
815 int role = 0;
816 int winstype = 0;
817 int have_home = -1;
818 int HomeExpo = 0;
819 int SerType = 0;
820 const char form_name[] = "wizard";
821
822 if (!verify_xsrf_token(form_name)) {
823 goto output_page;
824 }
825
826 if (cgi_variable("Rewrite")) {
827 (void) rewritecfg_file();
828 return;
829 }
830
831 if (cgi_variable("GetWizardParams")){
832 (void) wizard_params_page();
833 return;
834 }
835
836 if (cgi_variable("Commit")){
837 SerType = atoi(cgi_variable_nonull("ServerType"));
838 winstype = atoi(cgi_variable_nonull("WINSType"));
839 have_home = lp_servicenumber(HOMES_NAME);
840 HomeExpo = atoi(cgi_variable_nonull("HomeExpo"));
841
842 /* Plain text passwords are too badly broken - use encrypted passwords only */
843 lp_do_parameter( GLOBAL_SECTION_SNUM, "encrypt passwords", "Yes");
844
845 switch ( SerType ){
846 case 0:
847 /* Stand-alone Server */
848 lp_do_parameter( GLOBAL_SECTION_SNUM, "security", "USER" );
849 lp_do_parameter( GLOBAL_SECTION_SNUM, "domain logons", "No" );
850 break;
851 case 1:
852 /* Domain Member */
853 lp_do_parameter( GLOBAL_SECTION_SNUM, "security", "DOMAIN" );
854 lp_do_parameter( GLOBAL_SECTION_SNUM, "domain logons", "No" );
855 break;
856 case 2:
857 /* Domain Controller */
858 lp_do_parameter( GLOBAL_SECTION_SNUM, "security", "USER" );
859 lp_do_parameter( GLOBAL_SECTION_SNUM, "domain logons", "Yes" );
860 break;
861 }
862 switch ( winstype ) {
863 case 0:
864 lp_do_parameter( GLOBAL_SECTION_SNUM, "wins support", "No" );
865 lp_do_parameter( GLOBAL_SECTION_SNUM, "wins server", "" );
866 break;
867 case 1:
868 lp_do_parameter( GLOBAL_SECTION_SNUM, "wins support", "Yes" );
869 lp_do_parameter( GLOBAL_SECTION_SNUM, "wins server", "" );
870 break;
871 case 2:
872 lp_do_parameter( GLOBAL_SECTION_SNUM, "wins support", "No" );
873 lp_do_parameter( GLOBAL_SECTION_SNUM, "wins server", cgi_variable_nonull("WINSAddr"));
874 break;
875 }
876
877 /* Have to create Homes share? */
878 if ((HomeExpo == 1) && (have_home == -1)) {
879 const char *unix_share = HOMES_NAME;
880
881 load_config(False);
882 lp_copy_service(GLOBAL_SECTION_SNUM, unix_share);
883 have_home = lp_servicenumber(HOMES_NAME);
884 lp_do_parameter( have_home, "read only", "No");
885 lp_do_parameter( have_home, "valid users", "%S");
886 lp_do_parameter( have_home, "browseable", "No");
887 commit_parameters(have_home);
888 save_reload(have_home);
889 }
890
891 /* Need to Delete Homes share? */
892 if ((HomeExpo == 0) && (have_home != -1)) {
893 lp_remove_service(have_home);
894 have_home = -1;
895 }
896
897 commit_parameters(GLOBAL_SECTION_SNUM);
898 save_reload(-1);
899 }
900 else
901 {
902 /* Now determine smb.conf WINS settings */
903 if (lp_we_are_a_wins_server())
904 winstype = 1;
905 if (lp_wins_server_list() && strlen(*lp_wins_server_list()))
906 winstype = 2;
907
908 /* Do we have a homes share? */
909 have_home = lp_servicenumber(HOMES_NAME);
910 }
911 if ((winstype == 2) && lp_we_are_a_wins_server())
912 winstype = 3;
913
914 role = lp_server_role();
915
916 output_page:
917 /* Here we go ... */
918 printf("<H2>%s</H2>\n", _("Samba Configuration Wizard"));
919 printf("<form method=post action=wizard>\n");
920 print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
921
922 if (have_write_access) {
923 printf("%s\n", _("The \"Rewrite smb.conf file\" button will clear the smb.conf file of all default values and of comments."));
924 printf("%s", _("The same will happen if you press the commit button."));
925 printf("<br><br>\n");
926 printf("<center>");
927 printf("<input type=submit name=\"Rewrite\" value=\"%s\"> &nbsp;&nbsp;",_("Rewrite smb.conf file"));
928 printf("<input type=submit name=\"Commit\" value=\"%s\"> &nbsp;&nbsp;",_("Commit"));
929 printf("<input type=submit name=\"GetWizardParams\" value=\"%s\">", _("Edit Parameter Values"));
930 printf("</center>\n");
931 }
932
933 printf("<hr>");
934 printf("<center><table border=0>");
935 printf("<tr><td><b>%s:&nbsp;</b></td>\n", _("Server Type"));
936 printf("<td><input type=radio name=\"ServerType\" value=\"0\" %s> %s&nbsp;</td>", ((role == ROLE_STANDALONE) ? "checked" : ""), _("Stand Alone"));
937 printf("<td><input type=radio name=\"ServerType\" value=\"1\" %s> %s&nbsp;</td>", ((role == ROLE_DOMAIN_MEMBER) ? "checked" : ""), _("Domain Member"));
938 printf("<td><input type=radio name=\"ServerType\" value=\"2\" %s> %s&nbsp;</td>", ((role == ROLE_DOMAIN_PDC) ? "checked" : ""), _("Domain Controller"));
939 printf("</tr>\n");
940 if (role == ROLE_DOMAIN_BDC) {
941 printf("<tr><td></td><td colspan=3><font color=\"#ff0000\">%s</font></td></tr>\n", _("Unusual Type in smb.conf - Please Select New Mode"));
942 }
943 printf("<tr><td><b>%s:&nbsp;</b></td>\n", _("Configure WINS As"));
944 printf("<td><input type=radio name=\"WINSType\" value=\"0\" %s> %s&nbsp;</td>", ((winstype == 0) ? "checked" : ""), _("Not Used"));
945 printf("<td><input type=radio name=\"WINSType\" value=\"1\" %s> %s&nbsp;</td>", ((winstype == 1) ? "checked" : ""), _("Server for client use"));
946 printf("<td><input type=radio name=\"WINSType\" value=\"2\" %s> %s&nbsp;</td>", ((winstype == 2) ? "checked" : ""), _("Client of another WINS server"));
947 printf("</tr>\n");
948 printf("<tr><td></td><td></td><td></td><td>%s&nbsp;<input type=text size=\"16\" name=\"WINSAddr\" value=\"", _("Remote WINS Server"));
949
950 /* Print out the list of wins servers */
951 if(lp_wins_server_list()) {
952 int i;
953 const char **wins_servers = lp_wins_server_list();
954 for(i = 0; wins_servers[i]; i++) printf("%s ", wins_servers[i]);
955 }
956
957 printf("\"></td></tr>\n");
958 if (winstype == 3) {
959 printf("<tr><td></td><td colspan=3><font color=\"#ff0000\">%s</font></td></tr>\n", _("Error: WINS Server Mode and WINS Support both set in smb.conf"));
960 printf("<tr><td></td><td colspan=3><font color=\"#ff0000\">%s</font></td></tr>\n", _("Please Select desired WINS mode above."));
961 }
962 printf("<tr><td><b>%s:&nbsp;</b></td>\n", _("Expose Home Directories"));
963 printf("<td><input type=radio name=\"HomeExpo\" value=\"1\" %s> Yes</td>", (have_home == -1) ? "" : "checked ");
964 printf("<td><input type=radio name=\"HomeExpo\" value=\"0\" %s> No</td>", (have_home == -1 ) ? "checked" : "");
965 printf("<td></td></tr>\n");
966
967 /* Enable this when we are ready ....
968 * printf("<tr><td><b>%s:&nbsp;</b></td>\n", _("Is Print Server"));
969 * printf("<td><input type=radio name=\"PtrSvr\" value=\"1\" %s> Yes</td>");
970 * printf("<td><input type=radio name=\"PtrSvr\" value=\"0\" %s> No</td>");
971 * printf("<td></td></tr>\n");
972 */
973
974 printf("</table></center>");
975 printf("<hr>");
976
977 printf("%s\n", _("The above configuration options will set multiple parameters and will generally assist with rapid Samba deployment."));
978 printf("</form>\n");
979 }
980
981
982 /****************************************************************************
983 display a globals editing page
984 ****************************************************************************/
985 static void globals_page(void)
986 {
987 unsigned int parm_filter = FLAG_BASIC;
988 int mode = 0;
989 const char form_name[] = "globals";
990
991 printf("<H2>%s</H2>\n", _("Global Parameters"));
992
993 if (!verify_xsrf_token(form_name)) {
994 goto output_page;
995 }
996
997 if (cgi_variable("Commit")) {
998 commit_parameters(GLOBAL_SECTION_SNUM);
999 save_reload(-1);
1000 }
1001
1002 if ( cgi_variable("ViewMode") )
1003 mode = atoi(cgi_variable_nonull("ViewMode"));
1004 if ( cgi_variable("BasicMode"))
1005 mode = 0;
1006 if ( cgi_variable("AdvMode"))
1007 mode = 1;
1008
1009 output_page:
1010 printf("<form name=\"swatform\" method=post action=globals>\n");
1011 print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
1012
1013 ViewModeBoxes( mode );
1014 switch ( mode ) {
1015 case 0:
1016 parm_filter = FLAG_BASIC;
1017 break;
1018 case 1:
1019 parm_filter = FLAG_ADVANCED;
1020 break;
1021 }
1022 printf("<br>\n");
1023 if (have_write_access) {
1024 printf("<input type=submit name=\"Commit\" value=\"%s\">\n",
1025 _("Commit Changes"));
1026 }
1027
1028 printf("<input type=reset name=\"Reset Values\" value=\"%s\">\n",
1029 _("Reset Values"));
1030
1031 printf("<p>\n");
1032 printf("<table>\n");
1033 show_parameters(GLOBAL_SECTION_SNUM, 1, parm_filter, 0);
1034 printf("</table>\n");
1035 printf("</form>\n");
1036 }
1037
1038 /****************************************************************************
1039 display a shares editing page. share is in unix codepage,
1040 ****************************************************************************/
1041 static void shares_page(void)
1042 {
1043 const char *share = cgi_variable("share");
1044 char *s;
1045 char *utf8_s;
1046 int snum = -1;
1047 int i;
1048 int mode = 0;
1049 unsigned int parm_filter = FLAG_BASIC;
1050 size_t converted_size;
1051 const char form_name[] = "shares";
1052
1053 printf("<H2>%s</H2>\n", _("Share Parameters"));
1054
1055 if (!verify_xsrf_token(form_name)) {
1056 goto output_page;
1057 }
1058
1059 if (share)
1060 snum = lp_servicenumber(share);
1061
1062
1063 if (cgi_variable("Commit") && snum >= 0) {
1064 commit_parameters(snum);
1065 save_reload(-1);
1066 snum = lp_servicenumber(share);
1067 }
1068
1069 if (cgi_variable("Delete") && snum >= 0) {
1070 lp_remove_service(snum);
1071 save_reload(-1);
1072 share = NULL;
1073 snum = -1;
1074 }
1075
1076 if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) {
1077 snum = lp_servicenumber(share);
1078 if (snum < 0) {
1079 load_config(False);
1080 lp_copy_service(GLOBAL_SECTION_SNUM, share);
1081 snum = lp_servicenumber(share);
1082 save_reload(snum);
1083 snum = lp_servicenumber(share);
1084 }
1085 }
1086
1087 if ( cgi_variable("ViewMode") )
1088 mode = atoi(cgi_variable_nonull("ViewMode"));
1089 if ( cgi_variable("BasicMode"))
1090 mode = 0;
1091 if ( cgi_variable("AdvMode"))
1092 mode = 1;
1093
1094 output_page:
1095 printf("<FORM name=\"swatform\" method=post>\n");
1096 print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
1097
1098 printf("<table>\n");
1099
1100 ViewModeBoxes( mode );
1101 switch ( mode ) {
1102 case 0:
1103 parm_filter = FLAG_BASIC;
1104 break;
1105 case 1:
1106 parm_filter = FLAG_ADVANCED;
1107 break;
1108 }
1109 printf("<br><tr>\n");
1110 printf("<td><input type=submit name=selectshare value=\"%s\"></td>\n", _("Choose Share"));
1111 printf("<td><select name=share>\n");
1112 if (snum < 0)
1113 printf("<option value=\" \"> \n");
1114 for (i=0;i<lp_numservices();i++) {
1115 s = lp_servicename(talloc_tos(), i);
1116 if (s && (*s) && strcmp(s,"IPC$") && !lp_print_ok(i)) {
1117 push_utf8_talloc(talloc_tos(), &utf8_s, s, &converted_size);
1118 printf("<option %s value=\"%s\">%s\n",
1119 (share && strcmp(share,s)==0)?"SELECTED":"",
1120 utf8_s, utf8_s);
1121 TALLOC_FREE(utf8_s);
1122 }
1123 }
1124 printf("</select></td>\n");
1125 if (have_write_access) {
1126 printf("<td><input type=submit name=\"Delete\" value=\"%s\"></td>\n", _("Delete Share"));
1127 }
1128 printf("</tr>\n");
1129 printf("</table>");
1130 printf("<table>");
1131 if (have_write_access) {
1132 printf("<tr>\n");
1133 printf("<td><input type=submit name=createshare value=\"%s\"></td>\n", _("Create Share"));
1134 printf("<td><input type=text size=30 name=newshare></td></tr>\n");
1135 }
1136 printf("</table>");
1137
1138
1139 if (snum >= 0) {
1140 if (have_write_access) {
1141 printf("<input type=submit name=\"Commit\" value=\"%s\">\n", _("Commit Changes"));
1142 }
1143
1144 printf("<input type=reset name=\"Reset Values\" value=\"%s\">\n", _("Reset Values"));
1145 printf("<p>\n");
1146 }
1147
1148 if (snum >= 0) {
1149 printf("<table>\n");
1150 show_parameters(snum, 1, parm_filter, 0);
1151 printf("</table>\n");
1152 }
1153
1154 printf("</FORM>\n");
1155 }
1156
1157 /*************************************************************
1158 change a password either locally or remotely
1159 *************************************************************/
1160 static bool change_password(const char *remote_machine, const char *user_name,
1161 const char *old_passwd, const char *new_passwd,
1162 int local_flags)
1163 {
1164 NTSTATUS ret;
1165 char *err_str = NULL;
1166 char *msg_str = NULL;
1167
1168 if (demo_mode) {
1169 printf("%s\n<p>", _("password change in demo mode rejected"));
1170 return False;
1171 }
1172
1173 if (remote_machine != NULL) {
1174 ret = remote_password_change(remote_machine, user_name,
1175 old_passwd, new_passwd, &err_str);
1176 if (err_str != NULL)
1177 printf("%s\n<p>", err_str);
1178 SAFE_FREE(err_str);
1179 return NT_STATUS_IS_OK(ret);
1180 }
1181
1182 if(!initialize_password_db(True, NULL)) {
1183 printf("%s\n<p>", _("Can't setup password database vectors."));
1184 return False;
1185 }
1186
1187 ret = local_password_change(user_name, local_flags, new_passwd,
1188 &err_str, &msg_str);
1189
1190 if(msg_str)
1191 printf("%s\n<p>", msg_str);
1192 if(err_str)
1193 printf("%s\n<p>", err_str);
1194
1195 SAFE_FREE(msg_str);
1196 SAFE_FREE(err_str);
1197 return NT_STATUS_IS_OK(ret);
1198 }
1199
1200 /****************************************************************************
1201 do the stuff required to add or change a password
1202 ****************************************************************************/
1203 static void chg_passwd(void)
1204 {
1205 const char *host;
1206 bool rslt;
1207 int local_flags = 0;
1208
1209 /* Make sure users name has been specified */
1210 if (strlen(cgi_variable_nonull(SWAT_USER)) == 0) {
1211 printf("<p>%s\n", _(" Must specify \"User Name\" "));
1212 return;
1213 }
1214
1215 /*
1216 * smbpasswd doesn't require anything but the users name to delete, disable or enable the user,
1217 * so if that's what we're doing, skip the rest of the checks
1218 */
1219 if (!cgi_variable(DISABLE_USER_FLAG) && !cgi_variable(ENABLE_USER_FLAG) && !cgi_variable(DELETE_USER_FLAG)) {
1220
1221 /*
1222 * If current user is not root, make sure old password has been specified
1223 * If REMOTE change, even root must provide old password
1224 */
1225 if (((!am_root()) && (strlen( cgi_variable_nonull(OLD_PSWD)) <= 0)) ||
1226 ((cgi_variable(CHG_R_PASSWD_FLAG)) && (strlen( cgi_variable_nonull(OLD_PSWD)) <= 0))) {
1227 printf("<p>%s\n", _(" Must specify \"Old Password\" "));
1228 return;
1229 }
1230
1231 /* If changing a users password on a remote hosts we have to know what host */
1232 if ((cgi_variable(CHG_R_PASSWD_FLAG)) && (strlen( cgi_variable_nonull(RHOST)) <= 0)) {
1233 printf("<p>%s\n", _(" Must specify \"Remote Machine\" "));
1234 return;
1235 }
1236
1237 /* Make sure new passwords have been specified */
1238 if ((strlen( cgi_variable_nonull(NEW_PSWD)) <= 0) ||
1239 (strlen( cgi_variable_nonull(NEW2_PSWD)) <= 0)) {
1240 printf("<p>%s\n", _(" Must specify \"New, and Re-typed Passwords\" "));
1241 return;
1242 }
1243
1244 /* Make sure new passwords was typed correctly twice */
1245 if (strcmp(cgi_variable_nonull(NEW_PSWD), cgi_variable_nonull(NEW2_PSWD)) != 0) {
1246 printf("<p>%s\n", _(" Re-typed password didn't match new password "));
1247 return;
1248 }
1249 }
1250
1251 if (cgi_variable(CHG_R_PASSWD_FLAG)) {
1252 host = cgi_variable(RHOST);
1253 } else if (am_root()) {
1254 host = NULL;
1255 } else {
1256 host = "127.0.0.1";
1257 }
1258
1259 /*
1260 * Set up the local flags.
1261 */
1262
1263 local_flags |= (cgi_variable(ADD_USER_FLAG) ? LOCAL_ADD_USER : 0);
1264 local_flags |= (cgi_variable(ADD_USER_FLAG) ? LOCAL_SET_PASSWORD : 0);
1265 local_flags |= (cgi_variable(CHG_S_PASSWD_FLAG) ? LOCAL_SET_PASSWORD : 0);
1266 local_flags |= (cgi_variable(DELETE_USER_FLAG) ? LOCAL_DELETE_USER : 0);
1267 local_flags |= (cgi_variable(ENABLE_USER_FLAG) ? LOCAL_ENABLE_USER : 0);
1268 local_flags |= (cgi_variable(DISABLE_USER_FLAG) ? LOCAL_DISABLE_USER : 0);
1269
1270 rslt = change_password(host,
1271 cgi_variable_nonull(SWAT_USER),
1272 cgi_variable_nonull(OLD_PSWD), cgi_variable_nonull(NEW_PSWD),
1273 local_flags);
1274
1275 if(cgi_variable(CHG_S_PASSWD_FLAG)) {
1276 printf("<p>");
1277 if (rslt == True) {
1278 printf("%s\n", _(" The passwd has been changed."));
1279 } else {
1280 printf("%s\n", _(" The passwd has NOT been changed."));
1281 }
1282 }
1283
1284 return;
1285 }
1286
1287 /****************************************************************************
1288 display a password editing page
1289 ****************************************************************************/
1290 static void passwd_page(void)
1291 {
1292 const char *new_name = cgi_user_name();
1293 const char passwd_form[] = "passwd";
1294 const char rpasswd_form[] = "rpasswd";
1295
1296 if (!new_name) new_name = "";
1297
1298 printf("<H2>%s</H2>\n", _("Server Password Management"));
1299
1300 printf("<FORM name=\"swatform\" method=post>\n");
1301 print_xsrf_token(cgi_user_name(), cgi_user_pass(), passwd_form);
1302
1303 printf("<table>\n");
1304
1305 /*
1306 * Create all the dialog boxes for data collection
1307 */
1308 printf("<tr><td> %s : </td>\n", _("User Name"));
1309 printf("<td><input type=text size=30 name=%s value=%s></td></tr> \n", SWAT_USER, new_name);
1310 if (!am_root()) {
1311 printf("<tr><td> %s : </td>\n", _("Old Password"));
1312 printf("<td><input type=password size=30 name=%s></td></tr> \n",OLD_PSWD);
1313 }
1314 printf("<tr><td> %s : </td>\n", _("New Password"));
1315 printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW_PSWD);
1316 printf("<tr><td> %s : </td>\n", _("Re-type New Password"));
1317 printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW2_PSWD);
1318 printf("</table>\n");
1319
1320 /*
1321 * Create all the control buttons for requesting action
1322 */
1323 printf("<input type=submit name=%s value=\"%s\">\n",
1324 CHG_S_PASSWD_FLAG, _("Change Password"));
1325 if (demo_mode || am_root()) {
1326 printf("<input type=submit name=%s value=\"%s\">\n",
1327 ADD_USER_FLAG, _("Add New User"));
1328 printf("<input type=submit name=%s value=\"%s\">\n",
1329 DELETE_USER_FLAG, _("Delete User"));
1330 printf("<input type=submit name=%s value=\"%s\">\n",
1331 DISABLE_USER_FLAG, _("Disable User"));
1332 printf("<input type=submit name=%s value=\"%s\">\n",
1333 ENABLE_USER_FLAG, _("Enable User"));
1334 }
1335 printf("<p></FORM>\n");
1336
1337 /*
1338 * Do some work if change, add, disable or enable was
1339 * requested. It could be this is the first time through this
1340 * code, so there isn't anything to do. */
1341 if (verify_xsrf_token(passwd_form) &&
1342 ((cgi_variable(CHG_S_PASSWD_FLAG)) || (cgi_variable(ADD_USER_FLAG)) || (cgi_variable(DELETE_USER_FLAG)) ||
1343 (cgi_variable(DISABLE_USER_FLAG)) || (cgi_variable(ENABLE_USER_FLAG)))) {
1344 chg_passwd();
1345 }
1346
1347 printf("<H2>%s</H2>\n", _("Client/Server Password Management"));
1348
1349 printf("<FORM name=\"swatform\" method=post>\n");
1350 print_xsrf_token(cgi_user_name(), cgi_user_pass(), rpasswd_form);
1351
1352 printf("<table>\n");
1353
1354 /*
1355 * Create all the dialog boxes for data collection
1356 */
1357 printf("<tr><td> %s : </td>\n", _("User Name"));
1358 printf("<td><input type=text size=30 name=%s value=%s></td></tr>\n",SWAT_USER, new_name);
1359 printf("<tr><td> %s : </td>\n", _("Old Password"));
1360 printf("<td><input type=password size=30 name=%s></td></tr>\n",OLD_PSWD);
1361 printf("<tr><td> %s : </td>\n", _("New Password"));
1362 printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW_PSWD);
1363 printf("<tr><td> %s : </td>\n", _("Re-type New Password"));
1364 printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW2_PSWD);
1365 printf("<tr><td> %s : </td>\n", _("Remote Machine"));
1366 printf("<td><input type=text size=30 name=%s></td></tr>\n",RHOST);
1367
1368 printf("</table>");
1369
1370 /*
1371 * Create all the control buttons for requesting action
1372 */
1373 printf("<input type=submit name=%s value=\"%s\">",
1374 CHG_R_PASSWD_FLAG, _("Change Password"));
1375
1376 printf("<p></FORM>\n");
1377
1378 /*
1379 * Do some work if a request has been made to change the
1380 * password somewhere other than the server. It could be this
1381 * is the first time through this code, so there isn't
1382 * anything to do. */
1383 if (verify_xsrf_token(passwd_form) && cgi_variable(CHG_R_PASSWD_FLAG)) {
1384 chg_passwd();
1385 }
1386
1387 }
1388
1389 /****************************************************************************
1390 display a printers editing page
1391 ****************************************************************************/
1392 static void printers_page(void)
1393 {
1394 const char *share = cgi_variable("share");
1395 char *s;
1396 int snum=-1;
1397 int i;
1398 int mode = 0;
1399 unsigned int parm_filter = FLAG_BASIC;
1400 const char form_name[] = "printers";
1401
1402 if (!verify_xsrf_token(form_name)) {
1403 goto output_page;
1404 }
1405
1406 if (share)
1407 snum = lp_servicenumber(share);
1408
1409 if (cgi_variable("Commit") && snum >= 0) {
1410 commit_parameters(snum);
1411 if (snum >= iNumNonAutoPrintServices)
1412 save_reload(snum);
1413 else
1414 save_reload(-1);
1415 snum = lp_servicenumber(share);
1416 }
1417
1418 if (cgi_variable("Delete") && snum >= 0) {
1419 lp_remove_service(snum);
1420 save_reload(-1);
1421 share = NULL;
1422 snum = -1;
1423 }
1424
1425 if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) {
1426 snum = lp_servicenumber(share);
1427 if (snum < 0 || snum >= iNumNonAutoPrintServices) {
1428 load_config(False);
1429 lp_copy_service(GLOBAL_SECTION_SNUM, share);
1430 snum = lp_servicenumber(share);
1431 lp_do_parameter(snum, "print ok", "Yes");
1432 save_reload(snum);
1433 snum = lp_servicenumber(share);
1434 }
1435 }
1436
1437 if ( cgi_variable("ViewMode") )
1438 mode = atoi(cgi_variable_nonull("ViewMode"));
1439 if ( cgi_variable("BasicMode"))
1440 mode = 0;
1441 if ( cgi_variable("AdvMode"))
1442 mode = 1;
1443
1444 output_page:
1445 printf("<H2>%s</H2>\n", _("Printer Parameters"));
1446
1447 printf("<H3>%s</H3>\n", _("Important Note:"));
1448 printf("%s",_("Printer names marked with [*] in the Choose Printer drop-down box "));
1449 printf("%s",_("are autoloaded printers from "));
1450 printf("<A HREF=\"/swat/help/smb.conf.5.html#printcapname\" target=\"docs\">%s</A>\n", _("Printcap Name"));
1451 printf("%s\n", _("Attempting to delete these printers from SWAT will have no effect."));
1452
1453
1454 printf("<FORM name=\"swatform\" method=post>\n");
1455 print_xsrf_token(cgi_user_name(), cgi_user_pass(), form_name);
1456
1457 ViewModeBoxes( mode );
1458 switch ( mode ) {
1459 case 0:
1460 parm_filter = FLAG_BASIC;
1461 break;
1462 case 1:
1463 parm_filter = FLAG_ADVANCED;
1464 break;
1465 }
1466 printf("<table>\n");
1467 printf("<tr><td><input type=submit name=\"selectshare\" value=\"%s\"></td>\n", _("Choose Printer"));
1468 printf("<td><select name=\"share\">\n");
1469 if (snum < 0 || !lp_print_ok(snum))
1470 printf("<option value=\" \"> \n");
1471 for (i=0;i<lp_numservices();i++) {
1472 s = lp_servicename(talloc_tos(), i);
1473 if (s && (*s) && strcmp(s,"IPC$") && lp_print_ok(i)) {
1474 if (i >= iNumNonAutoPrintServices)
1475 printf("<option %s value=\"%s\">[*]%s\n",
1476 (share && strcmp(share,s)==0)?"SELECTED":"",
1477 s, s);
1478 else
1479 printf("<option %s value=\"%s\">%s\n",
1480 (share && strcmp(share,s)==0)?"SELECTED":"",
1481 s, s);
1482 }
1483 }
1484 printf("</select></td>");
1485 if (have_write_access) {
1486 printf("<td><input type=submit name=\"Delete\" value=\"%s\"></td>\n", _("Delete Printer"));
1487 }
1488 printf("</tr>");
1489 printf("</table>\n");
1490
1491 if (have_write_access) {
1492 printf("<table>\n");
1493 printf("<tr><td><input type=submit name=\"createshare\" value=\"%s\"></td>\n", _("Create Printer"));
1494 printf("<td><input type=text size=30 name=\"newshare\"></td></tr>\n");
1495 printf("</table>");
1496 }
1497
1498
1499 if (snum >= 0) {
1500 if (have_write_access) {
1501 printf("<input type=submit name=\"Commit\" value=\"%s\">\n", _("Commit Changes"));
1502 }
1503 printf("<input type=reset name=\"Reset Values\" value=\"%s\">\n", _("Reset Values"));
1504 printf("<p>\n");
1505 }
1506
1507 if (snum >= 0) {
1508 printf("<table>\n");
1509 show_parameters(snum, 1, parm_filter, 1);
1510 printf("</table>\n");
1511 }
1512 printf("</FORM>\n");
1513 }
1514
1515 /*
1516 when the _() translation macro is used there is no obvious place to free
1517 the resulting string and there is no easy way to give a static pointer.
1518 All we can do is rotate between some static buffers and hope a single d_printf()
1519 doesn't have more calls to _() than the number of buffers
1520 */
1521
1522 const char *lang_msg_rotate(TALLOC_CTX *ctx, const char *msgid)
1523 {
1524 const char *msgstr;
1525 const char *ret;
1526
1527 msgstr = lang_msg(msgid);
1528 if (!msgstr) {
1529 return msgid;
1530 }
1531
1532 ret = talloc_strdup(ctx, msgstr);
1533
1534 lang_msg_free(msgstr);
1535 if (!ret) {
1536 return msgid;
1537 }
1538
1539 return ret;
1540 }
1541
1542 /**
1543 * main function for SWAT.
1544 **/
1545 int main(int argc, char *argv[])
1546 {
1547 const char *page;
1548 poptContext pc;
1549 struct poptOption long_options[] = {
1550 POPT_AUTOHELP
1551 { "disable-authentication", 'a', POPT_ARG_VAL, &demo_mode, True, "Disable authentication (demo mode)" },
1552 { "password-menu-only", 'P', POPT_ARG_VAL, &passwd_only, True, "Show only change password menu" },
1553 POPT_COMMON_SAMBA
1554 POPT_TABLEEND
1555 };
1556 TALLOC_CTX *frame = talloc_stackframe();
1557
1558 fault_setup();
1559 umask(S_IWGRP | S_IWOTH);
1560
1561 #if defined(HAVE_SET_AUTH_PARAMETERS)
1562 set_auth_parameters(argc, argv);
1563 #endif /* HAVE_SET_AUTH_PARAMETERS */
1564
1565 /* just in case it goes wild ... */
1566 alarm(300);
1567
1568 setlinebuf(stdout);
1569
1570 /* we don't want any SIGPIPE messages */
1571 BlockSignals(True,SIGPIPE);
1572
1573 debug_set_logfile("/dev/null");
1574
1575 /* we don't want stderr screwing us up */
1576 close(2);
1577 open("/dev/null", O_WRONLY);
1578 setup_logging("swat", DEBUG_FILE);
1579
1580 load_case_tables();
1581
1582 pc = poptGetContext("swat", argc, (const char **) argv, long_options, 0);
1583
1584 /* Parse command line options */
1585
1586 while(poptGetNextOpt(pc) != -1) { }
1587
1588 poptFreeContext(pc);
1589
1590 /* This should set a more apporiate log file */
1591 load_config(True);
1592 reopen_logs();
1593 load_interfaces();
1594 iNumNonAutoPrintServices = lp_numservices();
1595 if (pcap_cache_loaded()) {
1596 struct tevent_context *ev_ctx;
1597 struct messaging_context *msg_ctx;
1598
1599 ev_ctx = s3_tevent_context_init(NULL);
1600 if (ev_ctx == NULL) {
1601 printf("s3_tevent_context_init() failed\n");
1602 return 0;
1603 }
1604 msg_ctx = messaging_init(ev_ctx, ev_ctx);
1605 if (msg_ctx == NULL) {
1606 printf("messaging_init() failed\n");
1607 return 0;
1608 }
1609
1610 load_printers(ev_ctx, msg_ctx);
1611
1612 talloc_free(ev_ctx);
1613 }
1614
1615 cgi_setup(get_dyn_SWATDIR(), !demo_mode);
1616
1617 print_header();
1618
1619 cgi_load_variables();
1620
1621 if (!file_exist(get_dyn_CONFIGFILE())) {
1622 have_read_access = True;
1623 have_write_access = True;
1624 } else {
1625 /* check if the authenticated user has write access - if not then
1626 don't show write options */
1627 have_write_access = (access(get_dyn_CONFIGFILE(),W_OK) == 0);
1628
1629 /* if the user doesn't have read access to smb.conf then
1630 don't let them view it */
1631 have_read_access = (access(get_dyn_CONFIGFILE(),R_OK) == 0);
1632 }
1633
1634 show_main_buttons();
1635
1636 page = cgi_pathinfo();
1637
1638 /* Root gets full functionality */
1639 if (have_read_access && strcmp(page, "globals")==0) {
1640 globals_page();
1641 } else if (have_read_access && strcmp(page,"shares")==0) {
1642 shares_page();
1643 } else if (have_read_access && strcmp(page,"printers")==0) {
1644 printers_page();
1645 } else if (have_read_access && strcmp(page,"status")==0) {
1646 status_page();
1647 } else if (have_read_access && strcmp(page,"viewconfig")==0) {
1648 viewconfig_page();
1649 } else if (strcmp(page,"passwd")==0) {
1650 passwd_page();
1651 } else if (have_read_access && strcmp(page,"wizard")==0) {
1652 wizard_page();
1653 } else if (have_read_access && strcmp(page,"wizard_params")==0) {
1654 wizard_params_page();
1655 } else if (have_read_access && strcmp(page,"rewritecfg")==0) {
1656 rewritecfg_file();
1657 } else {
1658 welcome_page();
1659 }
1660
1661 print_footer();
1662
1663 TALLOC_FREE(frame);
1664 return 0;
1665 }
1666
1667 /** @} **/
reg import