1998-09-26 01:01:52 +04:00
/*
Unix SMB / Netbios implementation .
2001-01-12 01:49:30 +03:00
Version 2.2
RPC pipe client
2001-01-16 02:35:59 +03:00
Copyright ( C ) Andrew Tridgell 1992 - 2000 ,
Copyright ( C ) Luke Kenneth Casson Leighton 1996 - 2000 ,
2001-05-04 08:17:39 +04:00
Copyright ( C ) Elrond 2000 ,
Copyright ( C ) Tim Potter 2000
2001-01-12 01:49:30 +03:00
1998-09-26 01:01:52 +04:00
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 675 Mass Ave , Cambridge , MA 0213 9 , USA .
*/
# include "includes.h"
2001-10-12 09:56:23 +04:00
# include "rpcclient.h"
1998-09-26 01:01:52 +04:00
2001-01-16 02:35:59 +03:00
extern DOM_SID domain_sid ;
1998-09-26 01:01:52 +04:00
2001-01-16 02:35:59 +03:00
/****************************************************************************
display sam_user_info_21 structure
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void display_sam_user_info_21 ( SAM_USER_INFO_21 * usr )
{
fstring temp ;
unistr2_to_ascii ( temp , & usr - > uni_user_name , sizeof ( temp ) - 1 ) ;
printf ( " \t User Name : \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_full_name , sizeof ( temp ) - 1 ) ;
printf ( " \t Full Name : \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_home_dir , sizeof ( temp ) - 1 ) ;
printf ( " \t Home Drive : \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_dir_drive , sizeof ( temp ) - 1 ) ;
printf ( " \t Dir Drive : \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_profile_path , sizeof ( temp ) - 1 ) ;
printf ( " \t Profile Path: \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_logon_script , sizeof ( temp ) - 1 ) ;
printf ( " \t Logon Script: \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_acct_desc , sizeof ( temp ) - 1 ) ;
printf ( " \t Description : \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_workstations , sizeof ( temp ) - 1 ) ;
printf ( " \t Workstations: \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_unknown_str , sizeof ( temp ) - 1 ) ;
printf ( " \t Unknown Str : \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & usr - > uni_munged_dial , sizeof ( temp ) - 1 ) ;
printf ( " \t Remote Dial : \t %s \n " , temp ) ;
printf ( " \t Logon Time : \t %s \n " ,
http_timestring ( nt_time_to_unix ( & usr - > logon_time ) ) ) ;
printf ( " \t Logoff Time : \t %s \n " ,
http_timestring ( nt_time_to_unix ( & usr - > logoff_time ) ) ) ;
printf ( " \t Kickoff Time : \t %s \n " ,
http_timestring ( nt_time_to_unix ( & usr - > kickoff_time ) ) ) ;
printf ( " \t Password last set Time : \t %s \n " ,
http_timestring ( nt_time_to_unix ( & usr - > pass_last_set_time ) ) ) ;
printf ( " \t Password can change Time : \t %s \n " ,
http_timestring ( nt_time_to_unix ( & usr - > pass_can_change_time ) ) ) ;
printf ( " \t Password must change Time: \t %s \n " ,
http_timestring ( nt_time_to_unix ( & usr - > pass_must_change_time ) ) ) ;
printf ( " \t unknown_2[0..31]... \n " ) ; /* user passwords? */
printf ( " \t user_rid : \t %x \n " , usr - > user_rid ) ; /* User ID */
printf ( " \t group_rid: \t %x \n " , usr - > group_rid ) ; /* Group ID */
printf ( " \t acb_info : \t %04x \n " , usr - > acb_info ) ; /* Account Control Info */
printf ( " \t unknown_3: \t %08x \n " , usr - > unknown_3 ) ; /* 0x00ff ffff */
printf ( " \t logon_divs: \t %d \n " , usr - > logon_divs ) ; /* 0x0000 00a8 which is 168 which is num hrs in a week */
printf ( " \t unknown_5: \t %08x \n " , usr - > unknown_5 ) ; /* 0x0002 0000 */
printf ( " \t padding1[0..7]... \n " ) ;
if ( usr - > ptr_logon_hrs ) {
printf ( " \t logon_hrs[0..%d]... \n " , usr - > logon_hrs . len ) ;
}
}
2001-11-22 02:25:30 +03:00
static char * display_time ( NTTIME nttime )
{
static fstring string ;
float high ;
float low ;
int sec ;
int days , hours , mins , secs ;
if ( nttime . high = = 0 & & nttime . low = = 0 )
return " Now " ;
if ( nttime . high = = 0x80000000 & & nttime . low = = 0 )
return " Never " ;
high = 65536 ;
high = high / 10000 ;
high = high * 65536 ;
high = high / 1000 ;
high = high * ( ~ nttime . high ) ;
low = ~ nttime . low ;
low = low / ( 1000 * 1000 * 10 ) ;
sec = high + low ;
days = sec / ( 60 * 60 * 24 ) ;
hours = ( sec - ( days * 60 * 60 * 24 ) ) / ( 60 * 60 ) ;
mins = ( sec - ( days * 60 * 60 * 24 ) - ( hours * 60 * 60 ) ) / 60 ;
secs = sec - ( days * 60 * 60 * 24 ) - ( hours * 60 * 60 ) - ( mins * 60 ) ;
snprintf ( string , sizeof ( string ) - 1 , " %u days, %u hours, %u minutes, %u seconds " , days , hours , mins , secs ) ;
return ( string ) ;
}
static void display_sam_unk_info_1 ( SAM_UNK_INFO_1 * info1 )
{
printf ( " Minimum password length: %d \n " , info1 - > min_length_password ) ;
printf ( " Password uniqueness (remember x passwords): %d \n " , info1 - > password_history ) ;
printf ( " flag: " ) ;
if ( info1 - > flag & & 2 = = 2 ) printf ( " users must open a session to change password " ) ;
printf ( " \n " ) ;
printf ( " password expire in: %s \n " , display_time ( info1 - > expire ) ) ;
printf ( " Min password age (allow changing in x days): %s \n " , display_time ( info1 - > min_passwordage ) ) ;
}
2001-05-07 06:00:28 +04:00
static void display_sam_unk_info_2 ( SAM_UNK_INFO_2 * info2 )
{
fstring name ;
unistr2_to_ascii ( name , & info2 - > uni_domain , sizeof ( name ) - 1 ) ;
printf ( " Domain: \t %s \n " , name ) ;
unistr2_to_ascii ( name , & info2 - > uni_server , sizeof ( name ) - 1 ) ;
printf ( " Server: \t %s \n " , name ) ;
printf ( " Total Users: \t %d \n " , info2 - > num_domain_usrs ) ;
printf ( " Total Groups: \t %d \n " , info2 - > num_domain_grps ) ;
printf ( " Total Aliases: \t %d \n " , info2 - > num_local_grps ) ;
printf ( " Sequence No: \t %d \n " , info2 - > seq_num ) ;
printf ( " Unknown 0: \t 0x%x \n " , info2 - > unknown_0 ) ;
printf ( " Unknown 1: \t 0x%x \n " , info2 - > unknown_1 ) ;
printf ( " Unknown 2: \t 0x%x \n " , info2 - > unknown_2 ) ;
printf ( " Unknown 3: \t 0x%x \n " , info2 - > unknown_3 ) ;
printf ( " Unknown 4: \t 0x%x \n " , info2 - > unknown_4 ) ;
printf ( " Unknown 5: \t 0x%x \n " , info2 - > unknown_5 ) ;
printf ( " Unknown 6: \t 0x%x \n " , info2 - > unknown_6 ) ;
}
2001-05-08 07:53:16 +04:00
void display_sam_info_1 ( SAM_ENTRY1 * e1 , SAM_STR1 * s1 )
{
fstring tmp ;
printf ( " RID: 0x%x " , e1 - > rid_user ) ;
unistr2_to_ascii ( tmp , & s1 - > uni_acct_name , sizeof ( tmp ) - 1 ) ;
printf ( " Account: %s \t " , tmp ) ;
unistr2_to_ascii ( tmp , & s1 - > uni_full_name , sizeof ( tmp ) - 1 ) ;
printf ( " Name: %s \t " , tmp ) ;
unistr2_to_ascii ( tmp , & s1 - > uni_acct_desc , sizeof ( tmp ) - 1 ) ;
printf ( " Desc: %s \n " , tmp ) ;
}
2001-10-22 10:30:18 +04:00
void display_sam_info_4 ( SAM_ENTRY4 * e4 , SAM_STR4 * s4 )
{
int i ;
printf ( " index: %d " , e4 - > user_idx ) ;
printf ( " Account: " ) ;
for ( i = 0 ; i < s4 - > acct_name . str_str_len ; i + + )
printf ( " %c " , s4 - > acct_name . buffer [ i ] ) ;
printf ( " \n " ) ;
}
2001-03-14 23:22:57 +03:00
/**********************************************************************
* Query user information
*/
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_query_user ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
1999-02-24 04:52:30 +03:00
{
2001-01-16 02:35:59 +03:00
POLICY_HND connect_pol , domain_pol , user_pol ;
2001-09-04 11:13:01 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
uint32 info_level = 21 ;
2001-05-15 09:02:29 +04:00
SAM_USERINFO_CTR * user_ctr ;
2001-10-12 09:56:23 +04:00
fstring server ;
2001-05-07 06:00:28 +04:00
uint32 user_rid ;
2001-04-28 04:32:56 +04:00
2001-05-07 06:00:28 +04:00
if ( argc ! = 2 ) {
printf ( " Usage: %s rid \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-01-16 02:35:59 +03:00
}
2001-04-28 04:32:56 +04:00
2001-05-07 06:00:28 +04:00
sscanf ( argv [ 1 ] , " %i " , & user_rid ) ;
2001-04-09 00:22:39 +04:00
slprintf ( server , sizeof ( fstring ) - 1 , " \\ \\ %s " , cli - > desthost ) ;
2001-03-16 01:06:53 +03:00
strupper ( server ) ;
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
2001-01-16 02:35:59 +03:00
2001-10-12 09:56:23 +04:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
2001-01-16 02:35:59 +03:00
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
2001-01-16 02:35:59 +03:00
2001-10-12 09:56:23 +04:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
2001-01-16 02:35:59 +03:00
2001-09-04 14:57:29 +04:00
result = cli_samr_open_user ( cli , mem_ctx , & domain_pol ,
MAXIMUM_ALLOWED_ACCESS ,
user_rid , & user_pol ) ;
2001-01-16 02:35:59 +03:00
2001-10-12 09:56:23 +04:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
2001-01-16 02:35:59 +03:00
ZERO_STRUCT ( user_ctr ) ;
2001-09-04 14:57:29 +04:00
result = cli_samr_query_userinfo ( cli , mem_ctx , & user_pol ,
info_level , & user_ctr ) ;
2001-10-12 09:56:23 +04:00
if ( ! NT_STATUS_IS_OK ( result ) )
2001-01-16 02:35:59 +03:00
goto done ;
1998-12-04 19:30:00 +03:00
2001-05-15 09:02:29 +04:00
display_sam_user_info_21 ( user_ctr - > info . id21 ) ;
2001-01-16 02:35:59 +03:00
2001-03-14 23:22:57 +03:00
done :
2001-01-16 02:35:59 +03:00
return result ;
}
/****************************************************************************
display group info
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void display_group_info1 ( GROUP_INFO1 * info1 )
{
fstring temp ;
unistr2_to_ascii ( temp , & info1 - > uni_acct_name , sizeof ( temp ) - 1 ) ;
printf ( " \t Group Name: \t %s \n " , temp ) ;
unistr2_to_ascii ( temp , & info1 - > uni_acct_desc , sizeof ( temp ) - 1 ) ;
printf ( " \t Description: \t %s \n " , temp ) ;
printf ( " \t unk1:%d \n " , info1 - > unknown_1 ) ;
printf ( " \t Num Members:%d \n " , info1 - > num_members ) ;
}
/****************************************************************************
display group info
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void display_group_info4 ( GROUP_INFO4 * info4 )
{
fstring desc ;
unistr2_to_ascii ( desc , & info4 - > uni_acct_desc , sizeof ( desc ) - 1 ) ;
printf ( " \t Group Description:%s \n " , desc ) ;
}
/****************************************************************************
display sam sync structure
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void display_group_info_ctr ( GROUP_INFO_CTR * ctr )
{
switch ( ctr - > switch_value1 ) {
case 1 : {
display_group_info1 ( & ctr - > group . info1 ) ;
break ;
}
case 4 : {
display_group_info4 ( & ctr - > group . info4 ) ;
break ;
}
}
}
2001-03-14 23:22:57 +03:00
/***********************************************************************
* Query group information
*/
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_query_group ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-01-16 02:35:59 +03:00
{
POLICY_HND connect_pol , domain_pol , group_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
uint32 info_level = 1 ;
2001-01-16 02:35:59 +03:00
GROUP_INFO_CTR group_ctr ;
2001-03-16 01:06:53 +03:00
fstring server ;
2001-05-14 07:51:39 +04:00
uint32 group_rid ;
2001-01-16 02:35:59 +03:00
2001-05-14 07:51:39 +04:00
if ( argc ! = 2 ) {
printf ( " Usage: %s rid \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
1998-12-04 19:30:00 +03:00
}
1999-11-22 22:02:39 +03:00
2001-10-29 08:38:02 +03:00
sscanf ( argv [ 1 ] , " %i " , & group_rid ) ;
2001-05-14 07:51:39 +04:00
2001-04-09 00:22:39 +04:00
slprintf ( server , sizeof ( fstring ) - 1 , " \\ \\ %s " , cli - > desthost ) ;
2001-03-16 01:06:53 +03:00
strupper ( server ) ;
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
2001-01-16 02:35:59 +03:00
2001-10-12 09:56:23 +04:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
1998-12-04 19:30:00 +03:00
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
2001-10-12 09:56:23 +04:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
1999-12-13 16:27:58 +03:00
2001-09-04 14:57:29 +04:00
result = cli_samr_open_group ( cli , mem_ctx , & domain_pol ,
MAXIMUM_ALLOWED_ACCESS ,
group_rid , & group_pol ) ;
2001-01-16 02:35:59 +03:00
2001-10-12 09:56:23 +04:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
1999-12-13 16:27:58 +03:00
2001-01-16 02:35:59 +03:00
ZERO_STRUCT ( group_ctr ) ;
2001-09-04 14:57:29 +04:00
result = cli_samr_query_groupinfo ( cli , mem_ctx , & group_pol ,
info_level , & group_ctr ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-12 01:49:30 +03:00
goto done ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
}
1999-12-13 16:27:58 +03:00
2001-01-16 02:35:59 +03:00
display_group_info_ctr ( & group_ctr ) ;
2001-03-14 23:22:57 +03:00
done :
2001-01-16 02:35:59 +03:00
return result ;
}
/* Query groups a user is a member of */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_query_usergroups ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-01-16 02:35:59 +03:00
{
2001-03-16 01:06:53 +03:00
POLICY_HND connect_pol ,
domain_pol ,
user_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-03-16 01:06:53 +03:00
uint32 num_groups ,
user_rid ;
DOM_GID * user_gids ;
int i ;
fstring server ;
2001-01-16 02:35:59 +03:00
if ( argc ! = 2 ) {
2001-03-28 09:01:54 +04:00
printf ( " Usage: %s rid \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-01-16 02:35:59 +03:00
}
sscanf ( argv [ 1 ] , " %i " , & user_rid ) ;
2001-04-09 00:22:39 +04:00
slprintf ( server , sizeof ( fstring ) - 1 , " \\ \\ %s " , cli - > desthost ) ;
2001-03-16 01:06:53 +03:00
strupper ( server ) ;
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-16 02:35:59 +03:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-16 02:35:59 +03:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_open_user ( cli , mem_ctx , & domain_pol ,
MAXIMUM_ALLOWED_ACCESS ,
user_rid , & user_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-16 02:35:59 +03:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_query_usergroups ( cli , mem_ctx , & user_pol ,
& num_groups , & user_gids ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-12 01:49:30 +03:00
goto done ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
}
2001-01-16 02:35:59 +03:00
for ( i = 0 ; i < num_groups ; i + + ) {
printf ( " \t group rid:[0x%x] attr:[0x%x] \n " ,
user_gids [ i ] . g_rid , user_gids [ i ] . attr ) ;
}
done :
return result ;
}
2001-12-02 04:45:50 +03:00
/* Query aliases a user is a member of */
static NTSTATUS cmd_samr_query_useraliases ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
{
2001-12-11 05:22:42 +03:00
POLICY_HND connect_pol , domain_pol ;
2001-12-02 04:45:50 +03:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
uint32 user_rid , num_aliases , * alias_rids ;
int i ;
fstring server ;
DOM_SID tmp_sid ;
DOM_SID2 sid ;
DOM_SID global_sid_Builtin ;
string_to_sid ( & global_sid_Builtin , " S-1-5-32 " ) ;
if ( argc ! = 3 ) {
printf ( " Usage: %s builtin|domain rid \n " , argv [ 0 ] ) ;
return NT_STATUS_OK ;
}
sscanf ( argv [ 2 ] , " %i " , & user_rid ) ;
slprintf ( server , sizeof ( fstring ) - 1 , " \\ \\ %s " , cli - > desthost ) ;
strupper ( server ) ;
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
goto done ;
}
if ( StrCaseCmp ( argv [ 1 ] , " domain " ) = = 0 )
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
else if ( StrCaseCmp ( argv [ 1 ] , " builtin " ) = = 0 )
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& global_sid_Builtin , & domain_pol ) ;
else
return NT_STATUS_OK ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
goto done ;
}
sid_copy ( & tmp_sid , & domain_sid ) ;
sid_append_rid ( & tmp_sid , user_rid ) ;
init_dom_sid2 ( & sid , & tmp_sid ) ;
result = cli_samr_query_useraliases ( cli , mem_ctx , & domain_pol , 1 , & sid , & num_aliases , & alias_rids ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
goto done ;
}
for ( i = 0 ; i < num_aliases ; i + + ) {
printf ( " \t group rid:[0x%x] \n " , alias_rids [ i ] ) ;
}
done :
return result ;
}
2001-01-16 02:35:59 +03:00
/* Query members of a group */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_query_groupmem ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-01-16 02:35:59 +03:00
{
POLICY_HND connect_pol , domain_pol , group_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-01-16 02:35:59 +03:00
uint32 num_members , * group_rids , * group_attrs , group_rid ;
int i ;
2001-03-16 01:06:53 +03:00
fstring server ;
2001-01-16 02:35:59 +03:00
if ( argc ! = 2 ) {
2001-03-28 09:01:54 +04:00
printf ( " Usage: %s rid \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-01-16 02:35:59 +03:00
}
sscanf ( argv [ 1 ] , " %i " , & group_rid ) ;
2001-04-09 00:22:39 +04:00
slprintf ( server , sizeof ( fstring ) - 1 , " \\ \\ %s " , cli - > desthost ) ;
2001-03-16 01:06:53 +03:00
strupper ( server ) ;
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-16 02:35:59 +03:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-16 02:35:59 +03:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_open_group ( cli , mem_ctx , & domain_pol ,
MAXIMUM_ALLOWED_ACCESS ,
group_rid , & group_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-16 02:35:59 +03:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_query_groupmem ( cli , mem_ctx , & group_pol ,
& num_members , & group_rids ,
& group_attrs ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-01-16 02:35:59 +03:00
goto done ;
}
for ( i = 0 ; i < num_members ; i + + ) {
printf ( " \t rid:[0x%x] attr:[0x%x] \n " , group_rids [ i ] ,
group_attrs [ i ] ) ;
}
done :
2001-01-12 01:49:30 +03:00
return result ;
1999-12-13 16:27:58 +03:00
}
1998-12-04 01:20:30 +03:00
2001-05-04 08:17:39 +04:00
/* Enumerate domain groups */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_enum_dom_groups ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-05-04 08:17:39 +04:00
{
POLICY_HND connect_pol , domain_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-05-04 08:17:39 +04:00
uint32 start_idx , size , num_dom_groups , i ;
struct acct_info * dom_groups ;
if ( argc ! = 1 ) {
printf ( " Usage: %s \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-05-04 08:17:39 +04:00
}
/* Get sam policy handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-04 08:17:39 +04:00
goto done ;
}
/* Get domain policy handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-04 08:17:39 +04:00
goto done ;
}
/* Enumerate domain groups */
start_idx = 0 ;
size = 0xffff ;
result = cli_samr_enum_dom_groups ( cli , mem_ctx , & domain_pol ,
& start_idx , size ,
& dom_groups , & num_dom_groups ) ;
for ( i = 0 ; i < num_dom_groups ; i + + )
printf ( " group:[%s] rid:[0x%x] \n " , dom_groups [ i ] . acct_name ,
dom_groups [ i ] . rid ) ;
done :
return result ;
}
2001-12-11 01:30:31 +03:00
/* Enumerate domain groups */
static NTSTATUS cmd_samr_enum_als_groups ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
{
POLICY_HND connect_pol , domain_pol ;
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
uint32 start_idx , size , num_dom_groups , i ;
struct acct_info * dom_groups ;
DOM_SID global_sid_Builtin ;
string_to_sid ( & global_sid_Builtin , " S-1-5-32 " ) ;
if ( argc ! = 2 ) {
printf ( " Usage: %s builtin|domain \n " , argv [ 0 ] ) ;
return NT_STATUS_OK ;
}
/* Get sam policy handle */
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
goto done ;
}
/* Get domain policy handle */
if ( StrCaseCmp ( argv [ 1 ] , " domain " ) = = 0 )
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
else if ( StrCaseCmp ( argv [ 1 ] , " builtin " ) = = 0 )
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& global_sid_Builtin , & domain_pol ) ;
else
return NT_STATUS_OK ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
goto done ;
}
/* Enumerate domain groups */
start_idx = 0 ;
size = 0xffff ;
result = cli_samr_enum_als_groups ( cli , mem_ctx , & domain_pol ,
& start_idx , size ,
& dom_groups , & num_dom_groups ) ;
for ( i = 0 ; i < num_dom_groups ; i + + )
printf ( " group:[%s] rid:[0x%x] \n " , dom_groups [ i ] . acct_name ,
dom_groups [ i ] . rid ) ;
done :
return result ;
}
2001-05-04 11:35:25 +04:00
/* Query alias membership */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_query_aliasmem ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-05-04 11:35:25 +04:00
{
POLICY_HND connect_pol , domain_pol , alias_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
uint32 alias_rid , num_members , i ;
2001-05-04 11:35:25 +04:00
DOM_SID * alias_sids ;
if ( argc ! = 2 ) {
printf ( " Usage: %s rid \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-05-04 11:35:25 +04:00
}
sscanf ( argv [ 1 ] , " %i " , & alias_rid ) ;
/* Open SAMR handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-04 11:35:25 +04:00
goto done ;
}
/* Open handle on domain */
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-04 11:35:25 +04:00
goto done ;
}
/* Open handle on alias */
2001-09-04 14:57:29 +04:00
result = cli_samr_open_alias ( cli , mem_ctx , & domain_pol ,
MAXIMUM_ALLOWED_ACCESS ,
alias_rid , & alias_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-04 11:35:25 +04:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_query_aliasmem ( cli , mem_ctx , & alias_pol ,
& num_members , & alias_sids ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-04 11:35:25 +04:00
goto done ;
}
for ( i = 0 ; i < num_members ; i + + ) {
fstring sid_str ;
sid_to_string ( sid_str , & alias_sids [ i ] ) ;
printf ( " \t sid:[%s] \n " , sid_str ) ;
}
done :
return result ;
}
2001-05-07 06:00:28 +04:00
/* Query display info */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_query_dispinfo ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-05-07 06:00:28 +04:00
{
POLICY_HND connect_pol , domain_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-10-22 10:30:18 +04:00
uint32 start_idx = 0 , max_entries = 250 , num_entries , i ;
2001-10-29 08:38:02 +03:00
int info_level = 1 ;
2001-05-08 07:53:16 +04:00
SAM_DISPINFO_CTR ctr ;
SAM_DISPINFO_1 info1 ;
2001-05-07 06:00:28 +04:00
2001-10-22 10:30:18 +04:00
if ( argc > 4 ) {
printf ( " Usage: %s [info level] [start index] [max entries] \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-05-07 06:00:28 +04:00
}
2001-10-22 10:30:18 +04:00
if ( argc > = 2 )
2001-10-29 08:38:02 +03:00
sscanf ( argv [ 1 ] , " %i " , & info_level ) ;
2001-10-22 10:30:18 +04:00
if ( argc > = 3 )
2001-10-29 08:38:02 +03:00
sscanf ( argv [ 2 ] , " %i " , & start_idx ) ;
2001-10-22 10:30:18 +04:00
if ( argc > = 4 )
2001-10-29 08:38:02 +03:00
sscanf ( argv [ 3 ] , " %i " , & max_entries ) ;
2001-10-22 10:30:18 +04:00
2001-05-07 06:00:28 +04:00
/* Get sam policy handle */
2001-10-22 10:30:18 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS , & connect_pol ) ;
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-07 06:00:28 +04:00
goto done ;
}
/* Get domain policy handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-07 06:00:28 +04:00
goto done ;
}
/* Query display info */
2001-05-08 07:53:16 +04:00
ZERO_STRUCT ( ctr ) ;
ZERO_STRUCT ( info1 ) ;
2001-05-07 06:00:28 +04:00
2001-05-08 07:53:16 +04:00
ctr . sam . info1 = & info1 ;
result = cli_samr_query_dispinfo ( cli , mem_ctx , & domain_pol ,
& start_idx , info_level ,
& num_entries , max_entries , & ctr ) ;
2001-10-29 08:38:02 +03:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
2001-05-08 07:53:16 +04:00
for ( i = 0 ; i < num_entries ; i + + ) {
2001-10-22 10:30:18 +04:00
switch ( info_level ) {
case 1 :
display_sam_info_1 ( & ctr . sam . info1 - > sam [ i ] , & ctr . sam . info1 - > str [ i ] ) ;
break ;
case 4 :
display_sam_info_4 ( & ctr . sam . info4 - > sam [ i ] , & ctr . sam . info4 - > str [ i ] ) ;
break ;
}
2001-05-08 07:53:16 +04:00
}
2001-05-07 06:00:28 +04:00
done :
return result ;
}
/* Query domain info */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_query_dominfo ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-05-07 06:00:28 +04:00
{
POLICY_HND connect_pol , domain_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-10-29 08:38:02 +03:00
int switch_value = 2 ;
2001-05-07 06:00:28 +04:00
SAM_UNK_CTR ctr ;
if ( argc > 2 ) {
2001-08-10 13:52:10 +04:00
printf ( " Usage: %s [infolevel] \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-05-07 06:00:28 +04:00
}
if ( argc = = 2 )
2001-10-29 08:38:02 +03:00
sscanf ( argv [ 1 ] , " %i " , & switch_value ) ;
2001-05-07 06:00:28 +04:00
/* Get sam policy handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-07 06:00:28 +04:00
goto done ;
}
/* Get domain policy handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-07 06:00:28 +04:00
goto done ;
}
/* Query domain info */
2001-09-04 14:57:29 +04:00
result = cli_samr_query_dom_info ( cli , mem_ctx , & domain_pol ,
switch_value , & ctr ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-05-07 06:00:28 +04:00
goto done ;
}
/* Display domain info */
switch ( switch_value ) {
2001-11-22 02:25:30 +03:00
case 1 :
display_sam_unk_info_1 ( & ctr . info . inf1 ) ;
break ;
2001-05-07 06:00:28 +04:00
case 2 :
display_sam_unk_info_2 ( & ctr . info . inf2 ) ;
break ;
default :
printf ( " cannot display domain info for switch value %d \n " ,
switch_value ) ;
break ;
}
done :
return result ;
}
2001-06-04 08:34:50 +04:00
/* Create domain user */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_create_dom_user ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-06-04 08:34:50 +04:00
{
POLICY_HND connect_pol , domain_pol , user_pol ;
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-06-04 08:34:50 +04:00
char * acct_name ;
uint16 acb_info ;
uint32 unknown , user_rid ;
if ( argc ! = 2 ) {
printf ( " Usage: %s username \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-06-04 08:34:50 +04:00
}
acct_name = argv [ 1 ] ;
/* Get sam policy handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-04 08:34:50 +04:00
goto done ;
}
/* Get domain policy handle */
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-04 08:34:50 +04:00
goto done ;
}
/* Create domain user */
acb_info = ACB_NORMAL ;
unknown = 0xe005000b ; /* No idea what this is - a permission mask? */
2001-09-04 14:57:29 +04:00
result = cli_samr_create_dom_user ( cli , mem_ctx , & domain_pol ,
acct_name , acb_info , unknown ,
& user_pol , & user_rid ) ;
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-04 08:34:50 +04:00
goto done ;
}
done :
return result ;
}
2001-06-06 11:18:58 +04:00
/* Lookup sam names */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_lookup_names ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-06-06 11:18:58 +04:00
{
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-06-06 11:18:58 +04:00
POLICY_HND connect_pol , domain_pol ;
2001-10-12 09:56:23 +04:00
uint32 flags = 0x000003e8 ; /* Unknown */
2001-06-06 11:18:58 +04:00
uint32 num_rids , num_names , * name_types , * rids ;
char * * names ;
int i ;
2001-12-02 03:00:21 +03:00
DOM_SID global_sid_Builtin ;
2001-06-06 11:18:58 +04:00
2001-12-02 03:00:21 +03:00
string_to_sid ( & global_sid_Builtin , " S-1-5-32 " ) ;
if ( argc < 3 ) {
printf ( " Usage: %s domain|builtin name1 [name2 [name3] [...]] \n " , argv [ 0 ] ) ;
printf ( " check on the domain SID: S-1-5-21-x-y-z \n " ) ;
printf ( " or check on the builtin SID: S-1-5-32 \n " ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-06-06 11:18:58 +04:00
}
/* Get sam policy and domain handles */
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-06 11:18:58 +04:00
goto done ;
}
2001-12-02 03:00:21 +03:00
if ( StrCaseCmp ( argv [ 1 ] , " domain " ) = = 0 )
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
else if ( StrCaseCmp ( argv [ 1 ] , " builtin " ) = = 0 )
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& global_sid_Builtin , & domain_pol ) ;
else
return NT_STATUS_OK ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-06 11:18:58 +04:00
goto done ;
}
/* Look up names */
2001-12-02 03:00:21 +03:00
num_names = argc - 2 ;
2001-06-06 11:18:58 +04:00
names = ( char * * ) talloc ( mem_ctx , sizeof ( char * ) * num_names ) ;
2001-12-02 03:00:21 +03:00
for ( i = 0 ; i < argc - 2 ; i + + )
names [ i ] = argv [ i + 2 ] ;
2001-06-06 11:18:58 +04:00
2001-09-04 14:57:29 +04:00
result = cli_samr_lookup_names ( cli , mem_ctx , & domain_pol ,
flags , num_names , names ,
& num_rids , & rids , & name_types ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-06 11:18:58 +04:00
goto done ;
}
/* Display results */
for ( i = 0 ; i < num_names ; i + + )
2001-06-20 11:07:43 +04:00
printf ( " name %s: 0x%x (%d) \n " , names [ i ] , rids [ i ] ,
name_types [ i ] ) ;
2001-06-06 11:18:58 +04:00
done :
return result ;
}
/* Lookup sam rids */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_lookup_rids ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-06-06 11:18:58 +04:00
{
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-06-06 11:18:58 +04:00
POLICY_HND connect_pol , domain_pol ;
2001-10-12 09:56:23 +04:00
uint32 flags = 0x000003e8 ; /* Unknown */
2001-06-06 11:18:58 +04:00
uint32 num_rids , num_names , * rids , * name_types ;
char * * names ;
int i ;
if ( argc < 2 ) {
printf ( " Usage: %s rid1 [rid2 [rid3] [...]] \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-06-06 11:18:58 +04:00
}
/* Get sam policy and domain handles */
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-06 11:18:58 +04:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-06 11:18:58 +04:00
goto done ;
}
/* Look up rids */
num_rids = argc - 1 ;
rids = ( uint32 * ) talloc ( mem_ctx , sizeof ( uint32 ) * num_rids ) ;
for ( i = 0 ; i < argc - 1 ; i + + )
2001-10-29 08:38:02 +03:00
sscanf ( argv [ i + 1 ] , " %i " , & rids [ i ] ) ;
2001-06-06 11:18:58 +04:00
2001-09-04 14:57:29 +04:00
result = cli_samr_lookup_rids ( cli , mem_ctx , & domain_pol ,
flags , num_rids , rids ,
& num_names , & names , & name_types ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-06 11:18:58 +04:00
goto done ;
}
/* Display results */
for ( i = 0 ; i < num_names ; i + + )
2001-10-29 08:38:02 +03:00
printf ( " rid 0x%x: %s (%d) \n " , rids [ i ] , names [ i ] , name_types [ i ] ) ;
2001-06-06 11:18:58 +04:00
done :
return result ;
}
2001-06-20 11:07:43 +04:00
/* Delete domain user */
2001-10-12 09:56:23 +04:00
static NTSTATUS cmd_samr_delete_dom_user ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
2001-06-20 11:07:43 +04:00
{
2001-09-04 14:57:29 +04:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
2001-06-20 11:07:43 +04:00
POLICY_HND connect_pol , domain_pol , user_pol ;
if ( argc ! = 2 ) {
printf ( " Usage: %s username \n " , argv [ 0 ] ) ;
2001-09-04 14:57:29 +04:00
return NT_STATUS_OK ;
2001-06-20 11:07:43 +04:00
}
/* Get sam policy and domain handles */
2001-09-04 14:57:29 +04:00
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-20 11:07:43 +04:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-20 11:07:43 +04:00
goto done ;
}
/* Get handle on user */
{
uint32 * user_rids , num_rids , * name_types ;
2001-10-12 09:56:23 +04:00
uint32 flags = 0x000003e8 ; /* Unknown */
2001-06-20 11:07:43 +04:00
2001-09-04 14:57:29 +04:00
result = cli_samr_lookup_names ( cli , mem_ctx , & domain_pol ,
flags , 1 , & argv [ 1 ] ,
& num_rids , & user_rids ,
& name_types ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-20 11:07:43 +04:00
goto done ;
}
2001-09-04 14:57:29 +04:00
result = cli_samr_open_user ( cli , mem_ctx , & domain_pol ,
MAXIMUM_ALLOWED_ACCESS ,
user_rids [ 0 ] , & user_pol ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-20 11:07:43 +04:00
goto done ;
}
}
/* Delete user */
2001-09-04 14:57:29 +04:00
result = cli_samr_delete_dom_user ( cli , mem_ctx , & user_pol ) ;
2001-10-12 09:56:23 +04:00
2001-09-04 14:57:29 +04:00
if ( ! NT_STATUS_IS_OK ( result ) ) {
2001-06-20 11:07:43 +04:00
goto done ;
}
/* Display results */
done :
return result ;
}
2001-12-02 03:00:21 +03:00
/**********************************************************************
* Query user security object
*/
static NTSTATUS cmd_samr_query_sec_obj ( struct cli_state * cli ,
TALLOC_CTX * mem_ctx ,
int argc , char * * argv )
{
2001-12-11 06:03:45 +03:00
POLICY_HND connect_pol , domain_pol , user_pol , * pol ;
2001-12-02 03:00:21 +03:00
NTSTATUS result = NT_STATUS_UNSUCCESSFUL ;
uint32 info_level = 4 ;
fstring server ;
2001-12-11 06:03:45 +03:00
uint32 user_rid = 0 ;
2001-12-02 03:00:21 +03:00
TALLOC_CTX * ctx = NULL ;
SEC_DESC_BUF * sec_desc_buf = NULL ;
2001-12-11 06:03:45 +03:00
BOOL domain = False ;
2001-12-02 03:00:21 +03:00
ctx = talloc_init ( ) ;
2001-12-11 06:03:45 +03:00
if ( argc > 2 ) {
printf ( " Usage: %s [rid|-d] \n " , argv [ 0 ] ) ;
printf ( " \t Specify rid for security on user, -d for security on domain \n " ) ;
2001-12-02 03:00:21 +03:00
return NT_STATUS_OK ;
}
2001-12-11 06:03:45 +03:00
if ( argc = = 2 ) {
if ( strcmp ( argv [ 1 ] , " -d " ) = = 0 )
domain = True ;
else
sscanf ( argv [ 1 ] , " %i " , & user_rid ) ;
}
2001-12-02 03:00:21 +03:00
slprintf ( server , sizeof ( fstring ) - 1 , " \\ \\ %s " , cli - > desthost ) ;
strupper ( server ) ;
result = cli_samr_connect ( cli , mem_ctx , MAXIMUM_ALLOWED_ACCESS ,
& connect_pol ) ;
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
2001-12-11 06:03:45 +03:00
if ( domain | | user_rid )
result = cli_samr_open_domain ( cli , mem_ctx , & connect_pol ,
MAXIMUM_ALLOWED_ACCESS ,
& domain_sid , & domain_pol ) ;
2001-12-02 03:00:21 +03:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
2001-12-11 06:03:45 +03:00
if ( user_rid )
result = cli_samr_open_user ( cli , mem_ctx , & domain_pol ,
MAXIMUM_ALLOWED_ACCESS ,
user_rid , & user_pol ) ;
2001-12-02 03:00:21 +03:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
2001-12-11 06:03:45 +03:00
/* Pick which query pol to use */
pol = & connect_pol ;
if ( domain )
pol = & domain_pol ;
if ( user_rid )
pol = & user_pol ;
/* Query SAM security object */
result = cli_samr_query_sec_obj ( cli , mem_ctx , pol , info_level , ctx ,
& sec_desc_buf ) ;
2001-12-02 03:00:21 +03:00
if ( ! NT_STATUS_IS_OK ( result ) )
goto done ;
display_sec_desc ( sec_desc_buf - > sec ) ;
done :
talloc_destroy ( ctx ) ;
return result ;
}
2001-01-12 01:49:30 +03:00
/* List of commands exported by this module */
1999-11-16 01:43:08 +03:00
2001-01-12 01:49:30 +03:00
struct cmd_set samr_commands [ ] = {
2001-07-20 08:38:58 +04:00
{ " SAMR " } ,
2001-10-22 10:13:38 +04:00
{ " queryuser " , cmd_samr_query_user , PIPE_SAMR , " Query user info " , " " } ,
{ " querygroup " , cmd_samr_query_group , PIPE_SAMR , " Query group info " , " " } ,
{ " queryusergroups " , cmd_samr_query_usergroups , PIPE_SAMR , " Query user groups " , " " } ,
2001-12-11 01:30:31 +03:00
{ " queryuseraliases " , cmd_samr_query_useraliases , PIPE_SAMR , " Query user aliases " , " " } ,
2001-10-22 10:13:38 +04:00
{ " querygroupmem " , cmd_samr_query_groupmem , PIPE_SAMR , " Query group membership " , " " } ,
{ " queryaliasmem " , cmd_samr_query_aliasmem , PIPE_SAMR , " Query alias membership " , " " } ,
{ " querydispinfo " , cmd_samr_query_dispinfo , PIPE_SAMR , " Query display info " , " " } ,
{ " querydominfo " , cmd_samr_query_dominfo , PIPE_SAMR , " Query domain info " , " " } ,
{ " enumdomgroups " , cmd_samr_enum_dom_groups , PIPE_SAMR , " Enumerate domain groups " , " " } ,
2001-12-11 01:30:31 +03:00
{ " enumalsgroups " , cmd_samr_enum_als_groups , PIPE_SAMR , " Enumerate alias groups " , " " } ,
2001-10-22 10:13:38 +04:00
{ " createdomuser " , cmd_samr_create_dom_user , PIPE_SAMR , " Create domain user " , " " } ,
{ " samlookupnames " , cmd_samr_lookup_names , PIPE_SAMR , " Look up names " , " " } ,
{ " samlookuprids " , cmd_samr_lookup_rids , PIPE_SAMR , " Look up names " , " " } ,
{ " deletedomuser " , cmd_samr_delete_dom_user , PIPE_SAMR , " Delete domain user " , " " } ,
2001-12-11 05:17:26 +03:00
{ " samquerysecobj " , cmd_samr_query_sec_obj , PIPE_SAMR , " Query SAMR security object " , " " } ,
2001-07-20 08:38:58 +04:00
{ NULL }
2001-01-12 01:49:30 +03:00
} ;