2 * Unix SMB/CIFS implementation.
3 * Group Policy Object Support
4 * Copyright (C) Guenther Deschner 2005-2008 (from samba 3 gpo.h)
5 * Copyright (C) Wilco Baan Hofman 2010
7 * This program is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU General Public License as published by
9 * the Free Software Foundation; either version 3 of the License, or
10 * (at your option) any later version.
12 * This program is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 * GNU General Public License for more details.
17 * You should have received a copy of the GNU General Public License
18 * along with this program; if not, see <http://www.gnu.org/licenses/>.
23 #include "libcli/libcli.h"
25 #define GPLINK_OPT_DISABLE (1 << 0)
26 #define GPLINK_OPT_ENFORCE (1 << 1)
29 #define GPO_FLAG_USER_DISABLE (1 << 0)
30 #define GPO_FLAG_MACHINE_DISABLE (1 << 1)
32 struct security_token
;
34 enum gpo_inheritance
{
36 GPO_BLOCK_INHERITANCE
= 1,
40 struct ldb_context
*ldb_ctx
;
41 struct loadparm_context
*lp_ctx
;
42 struct cli_credentials
*credentials
;
43 struct tevent_context
*ev_ctx
;
44 struct smbcli_state
*cli
;
45 struct nbt_dc_name active_dc
;
51 const char *display_name
;
54 const char *file_sys_path
;
55 struct security_descriptor
*security_descriptor
;
69 struct gp_ini_section
{
72 struct gp_ini_param
*params
;
75 struct gp_ini_context
{
76 uint16_t num_sections
;
77 struct gp_ini_section
*sections
;
80 NTSTATUS
gp_init(TALLOC_CTX
*mem_ctx
,
81 struct loadparm_context
*lp_ctx
,
82 struct cli_credentials
*creds
,
83 struct tevent_context
*ev_ctx
,
84 struct gp_context
**gp_ctx
);
88 NTSTATUS
gp_list_all_gpos(struct gp_context
*gp_ctx
, struct gp_object
***ret
);
89 NTSTATUS
gp_get_gplinks(struct gp_context
*gp_ctx
, const char *req_dn
, struct gp_link
***ret
);
90 NTSTATUS
gp_list_gpos(struct gp_context
*gp_ctx
, struct security_token
*token
, const char ***ret
);
92 NTSTATUS
gp_get_gpo_info(struct gp_context
*gp_ctx
, const char *dn_str
, struct gp_object
**ret
);
93 NTSTATUS
gp_set_gpo_info(struct gp_context
*gp_ctx
, const char *dn_str
, struct gp_object
*gpo
);
94 NTSTATUS
gp_del_gpo(struct gp_context
*gp_ctx
, const char *dn_str
);
97 NTSTATUS
gp_get_gplink_options(TALLOC_CTX
*mem_ctx
, uint32_t flags
, const char ***ret
);
98 NTSTATUS
gp_get_gpo_flags(TALLOC_CTX
*mem_ctx
, uint32_t flags
, const char ***ret
);
100 NTSTATUS
gp_set_gplink(struct gp_context
*gp_ctx
, const char *dn_str
, struct gp_link
*gplink
);
101 NTSTATUS
gp_del_gplink(struct gp_context
*gp_ctx
, const char *dn_str
, const char *gp_dn
);
102 NTSTATUS
gp_get_inheritance(struct gp_context
*gp_ctx
, const char *dn_str
, enum gpo_inheritance
*inheritance
);
103 NTSTATUS
gp_set_inheritance(struct gp_context
*gp_ctx
, const char *dn_str
, enum gpo_inheritance inheritance
);
105 NTSTATUS
gp_create_ldap_gpo(struct gp_context
*gp_ctx
, struct gp_object
*gpo
);
106 NTSTATUS
gp_set_ads_acl (struct gp_context
*gp_ctx
, const char *dn_str
, const struct security_descriptor
*sd
);
107 NTSTATUS
gp_push_gpo (struct gp_context
*gp_ctx
, const char *local_path
, struct gp_object
*gpo
);
108 NTSTATUS
gp_set_ldap_gpo(struct gp_context
*gp_ctx
, struct gp_object
*gpo
);
110 /* File system functions */
111 NTSTATUS
gp_fetch_gpt (struct gp_context
*gp_ctx
, struct gp_object
*gpo
, const char **path
);
112 NTSTATUS
gp_create_gpt(struct gp_context
*gp_ctx
, const char *name
, const char *file_sys_path
);
113 NTSTATUS
gp_set_gpt_security_descriptor(struct gp_context
*gp_ctx
, struct gp_object
*gpo
, struct security_descriptor
*sd
);
114 NTSTATUS
gp_push_gpt(struct gp_context
*gp_ctx
, const char *local_path
,
115 const char *file_sys_path
);
118 NTSTATUS
gp_parse_ini(TALLOC_CTX
*mem_ctx
, struct gp_context
*gp_ctx
, const char *filename
, struct gp_ini_context
**ret
);
119 NTSTATUS
gp_get_ini_string(struct gp_ini_context
*ini
, const char *section
, const char *name
, char **ret
);
120 NTSTATUS
gp_get_ini_uint(struct gp_ini_context
*ini
, const char *section
, const char *name
, uint32_t *ret
);
122 /* Managing functions */
123 NTSTATUS
gp_create_gpo (struct gp_context
*gp_ctx
, const char *display_name
, struct gp_object
**ret
);
124 NTSTATUS
gp_create_gpt_security_descriptor (TALLOC_CTX
*mem_ctx
, struct security_descriptor
*ds_sd
, struct security_descriptor
**ret
);
125 NTSTATUS
gp_set_acl (struct gp_context
*gp_ctx
, const char *dn_str
, const struct security_descriptor
*sd
);