2001-11-25 03:18:11 +03:00
/*
Samba Unix / Linux SMB client library
net ads commands
Copyright ( C ) 2001 Andrew Tridgell ( tridge @ samba . org )
2001-12-20 06:54:52 +03:00
Copyright ( C ) 2001 Remus Koos ( remuskoos @ yahoo . com )
2002-02-02 05:06:03 +03:00
Copyright ( C ) 2002 Jim McDonough ( jmcd @ us . ibm . com )
2001-11-25 03:18:11 +03:00
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 675 Mass Ave , Cambridge , MA 0213 9 , USA .
*/
# include "includes.h"
2002-04-10 17:29:23 +04:00
# include "../utils/net.h"
2001-11-25 03:18:11 +03:00
# ifdef HAVE_ADS
2001-11-26 07:53:08 +03:00
int net_ads_usage ( int argc , const char * * argv )
2001-11-25 03:18:11 +03:00
{
d_printf (
2001-12-17 14:16:22 +03:00
" \n net ads join <org_unit> " \
2001-11-25 03:18:11 +03:00
" \n \t joins the local machine to a ADS realm \n " \
" \n net ads leave " \
2001-11-25 04:42:29 +03:00
" \n \t removes the local machine from a ADS realm \n " \
" \n net ads user " \
2002-07-15 14:35:28 +04:00
" \n \t list, add, or delete users in the realm \n " \
2001-11-25 04:42:29 +03:00
" \n net ads group " \
2002-07-15 14:35:28 +04:00
" \n \t list, add, or delete groups in the realm \n " \
2001-12-13 16:19:20 +03:00
" \n net ads info " \
" \n \t shows some info on the server \n " \
2001-11-25 04:42:29 +03:00
" \n net ads status " \
" \n \t dump the machine account details to stdout \n "
2001-12-20 06:54:52 +03:00
" \n net ads password <username@realm> -Uadmin_username@realm%%admin_pass " \
2002-07-15 14:35:28 +04:00
" \n \t change a user's password using an admin account " \
" \n \t (note: use realm in UPPERCASE) \n " \
" \n net ads chostpass " \
" \n \t change the trust account password of this machine in the AD tree \n " \
" \n net ads printer [info | publish | remove] <printername> <servername> " \
" \n \t lookup, add, or remove directory entry for a printer \n " \
" \n net ads search " \
" \n \t perform a raw LDAP search and dump the results \n "
2001-11-25 03:18:11 +03:00
) ;
return - 1 ;
}
2001-12-13 16:19:20 +03:00
static int net_ads_info ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
2002-07-15 14:35:28 +04:00
ads = ads_init ( NULL , NULL , opt_host , NULL , NULL ) ;
2001-12-13 16:19:20 +03:00
ads_connect ( ads ) ;
if ( ! ads ) {
d_printf ( " Didn't find the ldap server! \n " ) ;
return - 1 ;
}
d_printf ( " LDAP server: %s \n " , ads - > ldap_server ) ;
d_printf ( " LDAP server name: %s \n " , ads - > ldap_server_name ) ;
d_printf ( " Realm: %s \n " , ads - > realm ) ;
d_printf ( " Bind Path: %s \n " , ads - > bind_path ) ;
d_printf ( " LDAP port: %d \n " , ads - > ldap_port ) ;
return 0 ;
}
2001-11-25 04:31:07 +03:00
static ADS_STRUCT * ads_startup ( void )
2001-11-25 03:18:11 +03:00
{
ADS_STRUCT * ads ;
2001-12-19 15:21:12 +03:00
ADS_STATUS status ;
2002-01-26 01:07:46 +03:00
BOOL need_password = False ;
BOOL second_time = False ;
2002-03-21 07:48:24 +03:00
2002-07-15 14:35:28 +04:00
ads = ads_init ( NULL , NULL , opt_host , NULL , NULL ) ;
2001-11-25 04:06:56 +03:00
2001-12-08 14:18:56 +03:00
if ( ! opt_user_name ) {
opt_user_name = " administrator " ;
}
2002-01-26 01:07:46 +03:00
if ( opt_user_specified )
need_password = True ;
retry :
if ( ! opt_password & & need_password ) {
2001-12-08 14:18:56 +03:00
char * prompt ;
asprintf ( & prompt , " %s password: " , opt_user_name ) ;
opt_password = getpass ( prompt ) ;
free ( prompt ) ;
}
2002-01-26 01:07:46 +03:00
2002-02-17 01:11:49 +03:00
if ( opt_password )
ads - > password = strdup ( opt_password ) ;
2001-12-08 14:18:56 +03:00
ads - > user_name = strdup ( opt_user_name ) ;
2001-12-19 15:21:12 +03:00
status = ads_connect ( ads ) ;
if ( ! ADS_ERR_OK ( status ) ) {
2002-01-26 01:07:46 +03:00
if ( ! need_password & & ! second_time ) {
need_password = True ;
second_time = True ;
goto retry ;
} else {
2002-04-04 20:47:24 +04:00
DEBUG ( 1 , ( " ads_connect: %s \n " , ads_errstr ( status ) ) ) ;
2002-01-26 01:07:46 +03:00
return NULL ;
}
2001-11-25 04:31:07 +03:00
}
return ads ;
}
2002-04-04 20:47:24 +04:00
/*
Check to see if connection can be made via ads .
ads_startup ( ) stores the password in opt_password if it needs to so
that rpc or rap can use it without re - prompting .
*/
int net_ads_check ( void )
{
ADS_STRUCT * ads ;
ads = ads_startup ( ) ;
if ( ! ads )
return - 1 ;
ads_destroy ( & ads ) ;
return 0 ;
}
2002-07-15 14:35:28 +04:00
static BOOL usergrp_display ( char * field , void * * values , void * data_area )
2002-03-30 00:09:44 +03:00
{
char * * disp_fields = ( char * * ) data_area ;
if ( ! field ) { /* must be end of record */
2002-04-05 23:28:02 +04:00
if ( ! strchr_m ( disp_fields [ 0 ] , ' $ ' ) ) {
if ( disp_fields [ 1 ] )
2002-07-15 14:35:28 +04:00
d_printf ( " %-21.21s %-50.50s \n " ,
2002-04-05 23:28:02 +04:00
disp_fields [ 0 ] , disp_fields [ 1 ] ) ;
else
2002-07-15 14:35:28 +04:00
d_printf ( " %s \n " , disp_fields [ 0 ] ) ;
2002-04-05 23:28:02 +04:00
}
2002-03-30 00:09:44 +03:00
SAFE_FREE ( disp_fields [ 0 ] ) ;
SAFE_FREE ( disp_fields [ 1 ] ) ;
2002-07-15 14:35:28 +04:00
return True ;
2002-03-30 00:09:44 +03:00
}
2002-07-15 14:35:28 +04:00
if ( ! values ) /* must be new field, indicate string field */
return True ;
2002-03-30 00:09:44 +03:00
if ( StrCaseCmp ( field , " sAMAccountName " ) = = 0 ) {
2002-07-15 14:35:28 +04:00
disp_fields [ 0 ] = strdup ( ( char * ) values [ 0 ] ) ;
2002-03-30 00:09:44 +03:00
}
if ( StrCaseCmp ( field , " description " ) = = 0 )
2002-07-15 14:35:28 +04:00
disp_fields [ 1 ] = strdup ( ( char * ) values [ 0 ] ) ;
return True ; /* always strings here */
2002-03-30 00:09:44 +03:00
}
2002-04-04 06:53:42 +04:00
static int net_ads_user_usage ( int argc , const char * * argv )
{
2002-04-05 05:36:28 +04:00
return net_help_user ( argc , argv ) ;
2002-04-04 06:53:42 +04:00
}
static int ads_user_add ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS status ;
2002-07-15 14:35:28 +04:00
char * upn , * userdn ;
2002-04-04 06:53:42 +04:00
void * res = NULL ;
int rc = - 1 ;
if ( argc < 1 ) return net_ads_user_usage ( argc , argv ) ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
status = ads_find_user_acct ( ads , & res , argv [ 0 ] ) ;
if ( ! ADS_ERR_OK ( status ) ) {
2002-04-04 07:06:22 +04:00
d_printf ( " ads_user_add: %s \n " , ads_errstr ( status ) ) ;
2002-04-04 06:53:42 +04:00
goto done ;
}
if ( ads_count_replies ( ads , res ) ) {
d_printf ( " ads_user_add: User %s already exists \n " , argv [ 0 ] ) ;
goto done ;
}
status = ads_add_user_acct ( ads , argv [ 0 ] , opt_comment ) ;
2002-07-15 14:35:28 +04:00
if ( ! ADS_ERR_OK ( status ) ) {
d_printf ( " Could not add user %s: %s \n " , argv [ 0 ] ,
ads_errstr ( status ) ) ;
goto done ;
}
/* if no password is to be set, we're done */
if ( argc = = 1 ) {
d_printf ( " User %s added \n " , argv [ 0 ] ) ;
rc = 0 ;
goto done ;
}
/* try setting the password */
asprintf ( & upn , " %s@%s " , argv [ 0 ] , ads - > realm ) ;
status = krb5_set_password ( ads - > kdc_server , upn , argv [ 1 ] ) ;
safe_free ( upn ) ;
2002-04-04 06:53:42 +04:00
if ( ADS_ERR_OK ( status ) ) {
d_printf ( " User %s added \n " , argv [ 0 ] ) ;
rc = 0 ;
2002-07-15 14:35:28 +04:00
goto done ;
}
/* password didn't set, delete account */
d_printf ( " Could not add user %s. Error setting password %s \n " ,
argv [ 0 ] , ads_errstr ( status ) ) ;
ads_msgfree ( ads , res ) ;
status = ads_find_user_acct ( ads , & res , argv [ 0 ] ) ;
if ( ADS_ERR_OK ( status ) ) {
userdn = ads_get_dn ( ads , res ) ;
ads_del_dn ( ads , userdn ) ;
ads_memfree ( ads , userdn ) ;
2002-04-04 06:53:42 +04:00
}
done :
if ( res )
ads_msgfree ( ads , res ) ;
ads_destroy ( & ads ) ;
return rc ;
}
static int ads_user_info ( int argc , const char * * argv )
2001-11-25 04:31:07 +03:00
{
ADS_STRUCT * ads ;
2001-12-19 15:21:12 +03:00
ADS_STATUS rc ;
2001-11-25 04:31:07 +03:00
void * res ;
2002-04-04 06:53:42 +04:00
const char * attrs [ ] = { " memberOf " , NULL } ;
char * searchstring = NULL ;
char * * grouplist ;
if ( argc < 1 ) return net_ads_user_usage ( argc , argv ) ;
2002-03-14 20:56:33 +03:00
2001-11-25 04:31:07 +03:00
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
2002-04-04 06:53:42 +04:00
asprintf ( & searchstring , " (sAMAccountName=%s) " , argv [ 0 ] ) ;
rc = ads_search ( ads , & res , searchstring , attrs ) ;
safe_free ( searchstring ) ;
2001-11-25 04:31:07 +03:00
2002-03-20 01:16:19 +03:00
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " ads_search: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
2002-03-30 00:09:44 +03:00
2002-04-04 06:53:42 +04:00
grouplist = ldap_get_values ( ads - > ld , res , " memberOf " ) ;
if ( grouplist ) {
int i ;
char * * groupname ;
for ( i = 0 ; grouplist [ i ] ; i + + ) {
groupname = ldap_explode_dn ( grouplist [ i ] , 1 ) ;
2002-07-15 14:35:28 +04:00
d_printf ( " %s \n " , groupname [ 0 ] ) ;
2002-04-04 06:53:42 +04:00
ldap_value_free ( groupname ) ;
}
ldap_value_free ( grouplist ) ;
}
2002-03-30 00:09:44 +03:00
ads_msgfree ( ads , res ) ;
2001-11-29 09:21:56 +03:00
ads_destroy ( & ads ) ;
2001-11-25 04:31:07 +03:00
return 0 ;
}
2002-04-04 06:53:42 +04:00
static int ads_user_delete ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS rc ;
void * res ;
char * userdn ;
if ( argc < 1 ) return net_ads_user_usage ( argc , argv ) ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
rc = ads_find_user_acct ( ads , & res , argv [ 0 ] ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
DEBUG ( 0 , ( " User %s does not exist \n " , argv [ 0 ] ) ) ;
return - 1 ;
}
userdn = ads_get_dn ( ads , res ) ;
ads_msgfree ( ads , res ) ;
rc = ads_del_dn ( ads , userdn ) ;
ads_memfree ( ads , userdn ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " User %s deleted \n " , argv [ 0 ] ) ;
return 0 ;
}
d_printf ( " Error deleting user %s: %s \n " , argv [ 0 ] ,
2002-04-04 07:06:22 +04:00
ads_errstr ( rc ) ) ;
2002-04-04 06:53:42 +04:00
return - 1 ;
}
2002-04-04 20:47:24 +04:00
int net_ads_user ( int argc , const char * * argv )
2002-04-04 06:53:42 +04:00
{
struct functable func [ ] = {
{ " ADD " , ads_user_add } ,
{ " INFO " , ads_user_info } ,
{ " DELETE " , ads_user_delete } ,
{ NULL , NULL }
} ;
ADS_STRUCT * ads ;
ADS_STATUS rc ;
const char * shortattrs [ ] = { " sAMAccountName " , NULL } ;
const char * longattrs [ ] = { " sAMAccountName " , " description " , NULL } ;
char * disp_fields [ 2 ] = { NULL , NULL } ;
if ( argc = = 0 ) {
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
if ( opt_long_list_entries )
d_printf ( " \n User name Comment " \
" \n ----------------------------- \n " ) ;
2002-04-10 17:29:23 +04:00
rc = ads_do_search_all_fn ( ads , ads - > bind_path ,
LDAP_SCOPE_SUBTREE ,
" (objectclass=user) " ,
opt_long_list_entries ? longattrs :
shortattrs , usergrp_display ,
disp_fields ) ;
2002-04-04 06:53:42 +04:00
ads_destroy ( & ads ) ;
return 0 ;
}
return net_run_function ( argc , argv , func , net_ads_user_usage ) ;
}
2002-07-15 14:35:28 +04:00
static int net_ads_group_usage ( int argc , const char * * argv )
{
return net_help_group ( argc , argv ) ;
}
static int ads_group_add ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS status ;
void * res = NULL ;
int rc = - 1 ;
if ( argc < 1 ) return net_ads_group_usage ( argc , argv ) ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
status = ads_find_user_acct ( ads , & res , argv [ 0 ] ) ;
if ( ! ADS_ERR_OK ( status ) ) {
d_printf ( " ads_group_add: %s \n " , ads_errstr ( status ) ) ;
goto done ;
}
if ( ads_count_replies ( ads , res ) ) {
d_printf ( " ads_group_add: Group %s already exists \n " , argv [ 0 ] ) ;
ads_msgfree ( ads , res ) ;
goto done ;
}
status = ads_add_group_acct ( ads , argv [ 0 ] , opt_comment ) ;
if ( ADS_ERR_OK ( status ) ) {
d_printf ( " Group %s added \n " , argv [ 0 ] ) ;
rc = 0 ;
} else {
d_printf ( " Could not add group %s: %s \n " , argv [ 0 ] ,
ads_errstr ( status ) ) ;
}
done :
if ( res )
ads_msgfree ( ads , res ) ;
ads_destroy ( & ads ) ;
return rc ;
}
static int ads_group_delete ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS rc ;
void * res ;
char * groupdn ;
if ( argc < 1 ) return net_ads_group_usage ( argc , argv ) ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
rc = ads_find_user_acct ( ads , & res , argv [ 0 ] ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
DEBUG ( 0 , ( " Group %s does not exist \n " , argv [ 0 ] ) ) ;
return - 1 ;
}
groupdn = ads_get_dn ( ads , res ) ;
ads_msgfree ( ads , res ) ;
rc = ads_del_dn ( ads , groupdn ) ;
ads_memfree ( ads , groupdn ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " Group %s deleted \n " , argv [ 0 ] ) ;
return 0 ;
}
d_printf ( " Error deleting group %s: %s \n " , argv [ 0 ] ,
ads_errstr ( rc ) ) ;
return - 1 ;
}
int net_ads_group ( int argc , const char * * argv )
2001-11-25 04:31:07 +03:00
{
2002-07-15 14:35:28 +04:00
struct functable func [ ] = {
{ " ADD " , ads_group_add } ,
{ " DELETE " , ads_group_delete } ,
{ NULL , NULL }
} ;
2001-11-25 04:31:07 +03:00
ADS_STRUCT * ads ;
2001-12-19 15:21:12 +03:00
ADS_STATUS rc ;
2002-03-30 00:09:44 +03:00
const char * shortattrs [ ] = { " sAMAccountName " , NULL } ;
const char * longattrs [ ] = { " sAMAccountName " , " description " , NULL } ;
char * disp_fields [ 2 ] = { NULL , NULL } ;
2001-11-25 04:31:07 +03:00
2002-07-15 14:35:28 +04:00
if ( argc = = 0 ) {
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
2001-11-25 04:31:07 +03:00
2002-07-15 14:35:28 +04:00
if ( opt_long_list_entries )
d_printf ( " \n Group name Comment " \
" \n ----------------------------- \n " ) ;
rc = ads_do_search_all_fn ( ads , ads - > bind_path ,
LDAP_SCOPE_SUBTREE ,
" (objectclass=group) " ,
opt_long_list_entries ? longattrs :
shortattrs , usergrp_display ,
disp_fields ) ;
2002-03-30 00:09:44 +03:00
2002-07-15 14:35:28 +04:00
ads_destroy ( & ads ) ;
return 0 ;
}
return net_run_function ( argc , argv , func , net_ads_group_usage ) ;
2001-11-25 04:31:07 +03:00
}
static int net_ads_status ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
2001-12-19 15:21:12 +03:00
ADS_STATUS rc ;
2001-11-25 04:31:07 +03:00
extern pstring global_myname ;
void * res ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
2001-11-25 04:06:56 +03:00
rc = ads_find_machine_acct ( ads , & res , global_myname ) ;
2001-12-19 15:21:12 +03:00
if ( ! ADS_ERR_OK ( rc ) ) {
2001-11-25 04:06:56 +03:00
d_printf ( " ads_find_machine_acct: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
if ( ads_count_replies ( ads , res ) = = 0 ) {
d_printf ( " No machine account for '%s' found \n " , global_myname ) ;
return - 1 ;
}
ads_dump ( ads , res ) ;
return 0 ;
}
static int net_ads_leave ( int argc , const char * * argv )
{
2001-12-17 14:16:22 +03:00
ADS_STRUCT * ads = NULL ;
2001-12-19 15:21:12 +03:00
ADS_STATUS rc ;
2001-11-25 04:06:56 +03:00
extern pstring global_myname ;
2001-11-25 03:18:11 +03:00
2002-03-10 04:52:09 +03:00
if ( ! secrets_init ( ) ) {
DEBUG ( 1 , ( " Failed to initialise secrets database \n " ) ) ;
2001-12-17 14:16:22 +03:00
return - 1 ;
}
2001-11-25 04:31:07 +03:00
2002-03-10 04:52:09 +03:00
if ( ! opt_password ) {
asprintf ( & opt_user_name , " %s$ " , global_myname ) ;
opt_password = secrets_fetch_machine_password ( ) ;
}
if ( ! ( ads = ads_startup ( ) ) ) {
2001-11-25 03:18:11 +03:00
return - 1 ;
}
2001-11-25 04:06:56 +03:00
rc = ads_leave_realm ( ads , global_myname ) ;
2001-12-19 15:21:12 +03:00
if ( ! ADS_ERR_OK ( rc ) ) {
2001-11-25 03:18:11 +03:00
d_printf ( " Failed to delete host '%s' from the '%s' realm. \n " ,
2001-11-25 04:06:56 +03:00
global_myname , ads - > realm ) ;
2001-11-25 03:18:11 +03:00
return - 1 ;
}
2001-11-25 04:06:56 +03:00
d_printf ( " Removed '%s' from realm '%s' \n " , global_myname , ads - > realm ) ;
2001-11-25 03:18:11 +03:00
return 0 ;
}
2002-03-16 01:05:39 +03:00
int net_ads_join ( int argc , const char * * argv )
2001-11-25 03:18:11 +03:00
{
ADS_STRUCT * ads ;
2001-12-19 15:21:12 +03:00
ADS_STATUS rc ;
2001-11-25 03:18:11 +03:00
char * password ;
2001-12-05 04:58:33 +03:00
char * tmp_password ;
2001-11-25 03:18:11 +03:00
extern pstring global_myname ;
2001-12-17 14:16:22 +03:00
const char * org_unit = " Computers " ;
char * dn ;
void * res ;
2001-12-21 02:35:53 +03:00
DOM_SID dom_sid ;
2002-01-16 05:22:30 +03:00
char * ou_str ;
2001-12-17 14:16:22 +03:00
if ( argc > 0 ) org_unit = argv [ 0 ] ;
2001-11-25 03:18:11 +03:00
if ( ! secrets_init ( ) ) {
DEBUG ( 1 , ( " Failed to initialise secrets database \n " ) ) ;
return - 1 ;
}
2001-12-17 14:16:22 +03:00
2001-12-05 14:00:26 +03:00
tmp_password = generate_random_str ( DEFAULT_TRUST_ACCOUNT_PASSWORD_LENGTH ) ;
2001-12-05 04:58:33 +03:00
password = strdup ( tmp_password ) ;
2001-11-25 03:18:11 +03:00
2001-11-25 04:31:07 +03:00
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
2001-11-25 03:18:11 +03:00
2002-01-16 05:22:30 +03:00
ou_str = ads_ou_string ( org_unit ) ;
asprintf ( & dn , " %s,%s " , ou_str , ads - > bind_path ) ;
free ( ou_str ) ;
2001-12-17 14:16:22 +03:00
rc = ads_search_dn ( ads , & res , dn , NULL ) ;
ads_msgfree ( ads , res ) ;
2001-12-19 15:21:12 +03:00
if ( rc . error_type = = ADS_ERROR_LDAP & & rc . rc = = LDAP_NO_SUCH_OBJECT ) {
2002-03-10 04:52:09 +03:00
d_printf ( " ads_join_realm: organizational unit %s does not exist (dn:%s) \n " ,
2002-01-16 05:22:30 +03:00
org_unit , dn ) ;
2001-12-19 15:21:12 +03:00
return - 1 ;
2001-12-17 14:16:22 +03:00
}
2002-01-16 05:22:30 +03:00
free ( dn ) ;
2001-12-17 14:16:22 +03:00
2001-12-19 15:21:12 +03:00
if ( ! ADS_ERR_OK ( rc ) ) {
2001-12-17 14:16:22 +03:00
d_printf ( " ads_join_realm: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
rc = ads_join_realm ( ads , global_myname , org_unit ) ;
2001-12-19 15:21:12 +03:00
if ( ! ADS_ERR_OK ( rc ) ) {
2001-11-25 03:18:11 +03:00
d_printf ( " ads_join_realm: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
2001-12-19 15:21:12 +03:00
rc = ads_set_machine_password ( ads , global_myname , password ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " ads_set_machine_password: %s \n " , ads_errstr ( rc ) ) ;
2001-11-25 03:18:11 +03:00
return - 1 ;
}
2001-12-21 02:35:53 +03:00
rc = ads_domain_sid ( ads , & dom_sid ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " ads_domain_sid: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
if ( ! secrets_store_domain_sid ( lp_workgroup ( ) , & dom_sid ) ) {
DEBUG ( 1 , ( " Failed to save domain sid \n " ) ) ;
return - 1 ;
}
2001-11-25 03:18:11 +03:00
if ( ! secrets_store_machine_password ( password ) ) {
DEBUG ( 1 , ( " Failed to save machine password \n " ) ) ;
return - 1 ;
}
2001-11-25 04:06:56 +03:00
d_printf ( " Joined '%s' to realm '%s' \n " , global_myname , ads - > realm ) ;
2001-11-25 03:18:11 +03:00
2001-11-25 04:36:02 +03:00
free ( password ) ;
2001-11-25 03:18:11 +03:00
return 0 ;
}
2002-02-02 05:06:03 +03:00
int net_ads_printer_usage ( int argc , const char * * argv )
{
d_printf (
" \n net ads printer info <printer> <server> "
" \n \t lookup info in directory for printer on server "
" \n \t (note: printer defaults to \" * \" , server defaults to local) \n "
" \n net ads printer publish <printername> "
" \n \t publish printer in directory "
" \n \t (note: printer name is required) \n "
" \n net ads printer remove <printername> "
" \n \t remove printer from directory "
" \n \t (note: printer name is required) \n " ) ;
return - 1 ;
}
static int net_ads_printer_info ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS rc ;
2002-07-15 14:35:28 +04:00
const char * servername , * printername ;
2002-02-02 05:06:03 +03:00
extern pstring global_myname ;
void * res = NULL ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
if ( argc > 0 )
printername = argv [ 0 ] ;
else
printername = " * " ;
if ( argc > 1 )
servername = argv [ 1 ] ;
else
servername = global_myname ;
rc = ads_find_printer_on_server ( ads , & res , printername , servername ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " ads_find_printer_on_server: %s \n " , ads_errstr ( rc ) ) ;
ads_msgfree ( ads , res ) ;
return - 1 ;
}
if ( ads_count_replies ( ads , res ) = = 0 ) {
d_printf ( " Printer '%s' not found \n " , printername ) ;
ads_msgfree ( ads , res ) ;
return - 1 ;
}
ads_dump ( ads , res ) ;
2002-03-30 00:09:44 +03:00
ads_msgfree ( ads , res ) ;
2002-02-02 05:06:03 +03:00
return 0 ;
}
2002-07-15 14:35:28 +04:00
void do_drv_upgrade_printer ( int msg_type , pid_t src , void * buf , size_t len )
{
return ;
}
2002-02-02 05:06:03 +03:00
static int net_ads_printer_publish ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS rc ;
char * uncname , * servername ;
ADS_PRINTER_ENTRY prt ;
extern pstring global_myname ;
2002-07-15 14:35:28 +04:00
char * ports [ 2 ] = { " Samba " , NULL } ;
2002-02-02 05:06:03 +03:00
/*
these const strings are only here as an example . The attributes
they represent are not implemented yet
*/
const char * bins [ ] = { " Tray 21 " , NULL } ;
const char * media [ ] = { " Letter " , NULL } ;
const char * orients [ ] = { " PORTRAIT " , NULL } ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
if ( argc < 1 )
return net_ads_printer_usage ( argc , argv ) ;
memset ( & prt , 0 , sizeof ( ADS_PRINTER_ENTRY ) ) ;
2002-07-15 14:35:28 +04:00
/* we don't sue the servername or unc name provided by
get_a_printer , because the server name might be
localhost or an ip address */
2002-02-02 05:06:03 +03:00
prt . printerName = argv [ 0 ] ;
asprintf ( & servername , " %s.%s " , global_myname , ads - > realm ) ;
prt . serverName = servername ;
prt . shortServerName = global_myname ;
prt . versionNumber = " 4 " ;
asprintf ( & uncname , " \\ \\ %s \\ %s " , global_myname , argv [ 0 ] ) ;
prt . uNCName = uncname ;
prt . printBinNames = ( char * * ) bins ;
prt . printMediaSupported = ( char * * ) media ;
prt . printOrientationsSupported = ( char * * ) orients ;
prt . portName = ( char * * ) ports ;
prt . printSpooling = " PrintAfterSpooled " ;
2002-07-15 14:35:28 +04:00
2002-02-02 05:06:03 +03:00
rc = ads_add_printer ( ads , & prt ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " ads_publish_printer: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
d_printf ( " published printer \n " ) ;
return 0 ;
}
static int net_ads_printer_remove ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS rc ;
char * servername , * prt_dn ;
extern pstring global_myname ;
void * res = NULL ;
if ( ! ( ads = ads_startup ( ) ) ) return - 1 ;
if ( argc < 1 )
return net_ads_printer_usage ( argc , argv ) ;
if ( argc > 1 )
servername = argv [ 1 ] ;
else
servername = global_myname ;
rc = ads_find_printer_on_server ( ads , & res , argv [ 0 ] , servername ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " ads_find_printer_on_server: %s \n " , ads_errstr ( rc ) ) ;
ads_msgfree ( ads , res ) ;
return - 1 ;
}
if ( ads_count_replies ( ads , res ) = = 0 ) {
d_printf ( " Printer '%s' not found \n " , argv [ 1 ] ) ;
ads_msgfree ( ads , res ) ;
return - 1 ;
}
prt_dn = ads_get_dn ( ads , res ) ;
ads_msgfree ( ads , res ) ;
rc = ads_del_dn ( ads , prt_dn ) ;
ads_memfree ( ads , prt_dn ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " ads_del_dn: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
return 0 ;
}
static int net_ads_printer ( int argc , const char * * argv )
{
struct functable func [ ] = {
{ " INFO " , net_ads_printer_info } ,
{ " PUBLISH " , net_ads_printer_publish } ,
{ " REMOVE " , net_ads_printer_remove } ,
{ NULL , NULL }
} ;
return net_run_function ( argc , argv , func , net_ads_printer_usage ) ;
}
2001-12-20 06:54:52 +03:00
static int net_ads_password ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
char * auth_principal = opt_user_name ;
char * auth_password = opt_password ;
char * realm = NULL ;
char * new_password = NULL ;
char * c ;
char * prompt ;
ADS_STATUS ret ;
if ( ( argc ! = 1 ) | | ( opt_user_name = = NULL ) | |
( opt_password = = NULL ) | | ( strchr ( opt_user_name , ' @ ' ) = = NULL ) | |
( strchr ( argv [ 0 ] , ' @ ' ) = = NULL ) ) {
return net_ads_usage ( argc , argv ) ;
}
c = strchr ( auth_principal , ' @ ' ) ;
realm = + + c ;
/* use the realm so we can eventually change passwords for users
in realms other than default */
2002-07-15 14:35:28 +04:00
if ( ! ( ads = ads_init ( realm , NULL , NULL , NULL , NULL ) ) ) return - 1 ;
2001-12-20 06:54:52 +03:00
asprintf ( & prompt , " Enter new password for %s: " , argv [ 0 ] ) ;
new_password = getpass ( prompt ) ;
ret = kerberos_set_password ( ads - > kdc_server , auth_principal ,
auth_password , argv [ 0 ] , new_password ) ;
if ( ! ADS_ERR_OK ( ret ) ) {
d_printf ( " Password change failed :-( ... \n " ) ;
ads_destroy ( & ads ) ;
free ( prompt ) ;
return - 1 ;
}
d_printf ( " Password change for %s completed. \n " , argv [ 0 ] ) ;
ads_destroy ( & ads ) ;
free ( prompt ) ;
return 0 ;
}
static int net_ads_change_localhost_pass ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
extern pstring global_myname ;
char * host_principal ;
char * hostname ;
ADS_STATUS ret ;
2002-07-15 14:35:28 +04:00
if ( ! ( ads = ads_init_simple ( ) ) ) return - 1 ;
2001-12-20 06:54:52 +03:00
hostname = strdup ( global_myname ) ;
strlower ( hostname ) ;
asprintf ( & host_principal , " %s@%s " , hostname , ads - > realm ) ;
SAFE_FREE ( hostname ) ;
d_printf ( " Changing password for principal: HOST/%s \n " , host_principal ) ;
ret = ads_change_trust_account_password ( ads , host_principal ) ;
if ( ! ADS_ERR_OK ( ret ) ) {
d_printf ( " Password change failed :-( ... \n " ) ;
ads_destroy ( & ads ) ;
SAFE_FREE ( host_principal ) ;
return - 1 ;
}
d_printf ( " Password change for principal HOST/%s succeeded. \n " , host_principal ) ;
ads_destroy ( & ads ) ;
SAFE_FREE ( host_principal ) ;
return 0 ;
}
2002-07-15 14:35:28 +04:00
/*
help for net ads search
*/
static int net_ads_search_usage ( int argc , const char * * argv )
{
d_printf (
" \n net ads search <expression> <attributes...> \n " \
" \n perform a raw LDAP search on a ADS server and dump the results \n " \
" The expression is a standard LDAP search expression, and the \n " \
" attributes are a list of LDAP fields to show in the results \n \n " \
" Example: net ads search '(objectCategory=group)' sAMAccountName \n \n "
) ;
net_common_flags_usage ( argc , argv ) ;
return - 1 ;
}
/*
general ADS search function . Useful in diagnosing problems in ADS
*/
static int net_ads_search ( int argc , const char * * argv )
{
ADS_STRUCT * ads ;
ADS_STATUS rc ;
const char * exp ;
const char * * attrs ;
void * res = NULL ;
if ( argc < 1 ) {
return net_ads_search_usage ( argc , argv ) ;
}
if ( ! ( ads = ads_startup ( ) ) ) {
return - 1 ;
}
exp = argv [ 0 ] ;
attrs = ( argv + 1 ) ;
rc = ads_do_search_all ( ads , ads - > bind_path ,
LDAP_SCOPE_SUBTREE ,
exp , attrs , & res ) ;
if ( ! ADS_ERR_OK ( rc ) ) {
d_printf ( " search failed: %s \n " , ads_errstr ( rc ) ) ;
return - 1 ;
}
d_printf ( " Got %d replies \n \n " , ads_count_replies ( ads , res ) ) ;
/* dump the results */
ads_dump ( ads , res ) ;
ads_msgfree ( ads , res ) ;
ads_destroy ( & ads ) ;
return 0 ;
}
2002-04-04 06:53:42 +04:00
int net_ads_help ( int argc , const char * * argv )
{
struct functable func [ ] = {
{ " USER " , net_ads_user_usage } ,
2002-07-15 14:35:28 +04:00
{ " GROUP " , net_ads_group_usage } ,
{ " PRINTER " , net_ads_printer_usage } ,
{ " SEARCH " , net_ads_search_usage } ,
2002-04-04 06:53:42 +04:00
#if 0
{ " INFO " , net_ads_info } ,
{ " JOIN " , net_ads_join } ,
{ " LEAVE " , net_ads_leave } ,
{ " STATUS " , net_ads_status } ,
{ " PASSWORD " , net_ads_password } ,
{ " CHOSTPASS " , net_ads_change_localhost_pass } ,
# endif
{ NULL , NULL }
} ;
return net_run_function ( argc , argv , func , net_ads_usage ) ;
}
2001-12-20 06:54:52 +03:00
2001-11-25 03:18:11 +03:00
int net_ads ( int argc , const char * * argv )
{
struct functable func [ ] = {
2001-12-13 16:19:20 +03:00
{ " INFO " , net_ads_info } ,
2001-11-25 03:18:11 +03:00
{ " JOIN " , net_ads_join } ,
{ " LEAVE " , net_ads_leave } ,
2001-11-25 04:06:56 +03:00
{ " STATUS " , net_ads_status } ,
2001-11-25 04:31:07 +03:00
{ " USER " , net_ads_user } ,
{ " GROUP " , net_ads_group } ,
2001-12-20 06:54:52 +03:00
{ " PASSWORD " , net_ads_password } ,
{ " CHOSTPASS " , net_ads_change_localhost_pass } ,
2002-02-02 05:06:03 +03:00
{ " PRINTER " , net_ads_printer } ,
2002-07-15 14:35:28 +04:00
{ " SEARCH " , net_ads_search } ,
2002-04-04 06:53:42 +04:00
{ " HELP " , net_ads_help } ,
2001-11-25 03:18:11 +03:00
{ NULL , NULL }
} ;
return net_run_function ( argc , argv , func , net_ads_usage ) ;
}
# else
2002-04-04 20:47:24 +04:00
static int net_ads_noads ( void )
2001-11-25 03:18:11 +03:00
{
d_printf ( " ADS support not compiled in \n " ) ;
return - 1 ;
}
2002-04-04 20:47:24 +04:00
int net_ads_usage ( int argc , const char * * argv )
{
return net_ads_noads ( ) ;
}
2002-04-04 07:14:25 +04:00
int net_ads_help ( int argc , const char * * argv )
{
2002-04-04 20:47:24 +04:00
return net_ads_noads ( ) ;
2002-04-04 07:14:25 +04:00
}
2002-03-16 04:30:09 +03:00
int net_ads_join ( int argc , const char * * argv )
2002-04-04 20:47:24 +04:00
{
return net_ads_noads ( ) ;
}
int net_ads_user ( int argc , const char * * argv )
{
return net_ads_noads ( ) ;
}
2002-07-15 14:35:28 +04:00
int net_ads_group ( int argc , const char * * argv )
{
return net_ads_noads ( ) ;
}
2002-04-04 20:47:24 +04:00
/* this one shouldn't display a message */
int net_ads_check ( void )
2002-03-16 04:30:09 +03:00
{
return - 1 ;
}
2001-11-25 03:18:11 +03:00
int net_ads ( int argc , const char * * argv )
{
2001-11-26 07:53:08 +03:00
return net_ads_usage ( argc , argv ) ;
2001-11-25 03:18:11 +03:00
}
# endif