1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-23 17:34:34 +03:00

added "net ads status" command

This commit is contained in:
Andrew Tridgell 0001-01-01 00:00:00 +00:00
parent 2f8fa175b1
commit ae0eabd04c
2 changed files with 115 additions and 29 deletions

View File

@ -285,6 +285,32 @@ static int ads_add_machine_acct(ADS_STRUCT *ads, const char *hostname)
return ret;
}
/*
dump a binary result from ldap
*/
static void dump_binary(const char *field, struct berval **values)
{
int i, j;
for (i=0; values[i]; i++) {
printf("%s: ", field);
for (j=0; j<values[i]->bv_len; j++) {
printf("%02X", (unsigned char)values[i]->bv_val[j]);
}
printf("\n");
}
}
/*
dump a string result from ldap
*/
static void dump_string(const char *field, struct berval **values)
{
int i;
for (i=0; values[i]; i++) {
printf("%s: %s\n", field, values[i]->bv_val);
}
}
/*
dump a record from LDAP on stdout
used for debugging
@ -295,6 +321,14 @@ void ads_dump(ADS_STRUCT *ads, void *res)
LDAPMessage *msg;
BerElement *b;
char *this_dn;
struct {
char *name;
void (*handler)(const char *, struct berval **);
} handlers[] = {
{"objectGUID", dump_binary},
{"objectSid", dump_binary},
{NULL, NULL}
};
for (msg = ldap_first_entry(ads->ld, (LDAPMessage *)res);
msg; msg = ldap_next_entry(ads->ld, msg)) {
@ -307,12 +341,21 @@ void ads_dump(ADS_STRUCT *ads, void *res)
for (field = ldap_first_attribute(ads->ld, msg, &b);
field;
field = ldap_next_attribute(ads->ld, msg, b)) {
char **values, **p;
values = ldap_get_values(ads->ld, msg, field);
for (p = values; *p; p++) {
printf("%s: %s\n", field, *p);
struct berval **values;
int i;
values = ldap_get_values_len(ads->ld, msg, field);
for (i=0; handlers[i].name; i++) {
if (StrCaseCmp(handlers[i].name, field) == 0) {
handlers[i].handler(field, values);
break;
}
}
ldap_value_free(values);
if (!handlers[i].name) {
dump_string(field, values);
}
ldap_value_free_len(values);
ldap_memfree(field);
}
@ -337,26 +380,33 @@ int ads_join_realm(ADS_STRUCT *ads, const char *hostname)
{
int rc;
LDAPMessage *res;
char *host;
rc = ads_find_machine_acct(ads, (void **)&res, hostname);
/* hostname must be lowercase */
host = strdup(hostname);
strlower(host);
rc = ads_find_machine_acct(ads, (void **)&res, host);
if (rc == LDAP_SUCCESS && ads_count_replies(ads, res) == 1) {
DEBUG(0, ("Host account for %s already exists\n", hostname));
DEBUG(0, ("Host account for %s already exists\n", host));
return LDAP_SUCCESS;
}
rc = ads_add_machine_acct(ads, hostname);
rc = ads_add_machine_acct(ads, host);
if (rc != LDAP_SUCCESS) {
DEBUG(0, ("ads_add_machine_acct: %s\n", ads_errstr(rc)));
return rc;
}
rc = ads_find_machine_acct(ads, (void **)&res, hostname);
rc = ads_find_machine_acct(ads, (void **)&res, host);
if (rc != LDAP_SUCCESS || ads_count_replies(ads, res) != 1) {
DEBUG(0, ("Host account test failed\n"));
/* hmmm, we need NTSTATUS */
return -1;
}
free(host);
return LDAP_SUCCESS;
}
@ -367,11 +417,15 @@ int ads_leave_realm(ADS_STRUCT *ads, const char *hostname)
{
int rc;
void *res;
char *hostnameDN;
char *hostnameDN, *host;
rc = ads_find_machine_acct(ads, &res, hostname);
/* hostname must be lowercase */
host = strdup(hostname);
strlower(host);
rc = ads_find_machine_acct(ads, &res, host);
if (rc != LDAP_SUCCESS || ads_count_replies(ads, res) != 1) {
DEBUG(0, ("Host account for %s does not exist.\n", hostname));
DEBUG(0, ("Host account for %s does not exist.\n", host));
return -1;
}
@ -383,13 +437,15 @@ int ads_leave_realm(ADS_STRUCT *ads, const char *hostname)
return rc;
}
rc = ads_find_machine_acct(ads, &res, hostname);
rc = ads_find_machine_acct(ads, &res, host);
if (rc == LDAP_SUCCESS && ads_count_replies(ads, res) == 1 ) {
DEBUG(0, ("Failed to remove host account.\n"));
/*hmmm, we need NTSTATUS */
return -1;
}
free(host);
return LDAP_SUCCESS;
}
@ -398,7 +454,12 @@ NTSTATUS ads_set_machine_password(ADS_STRUCT *ads,
const char *hostname,
const char *password)
{
return krb5_set_password(ads->kdc_server, hostname, ads->realm, password);
NTSTATUS ret;
char *host = strdup(hostname);
strlower(host);
ret = krb5_set_password(ads->kdc_server, host, ads->realm, password);
free(host);
return ret;
}
#endif

View File

@ -76,15 +76,43 @@ int net_ads_usage(void)
return -1;
}
static int net_ads_leave(int argc, const char **argv)
static int net_ads_status(int argc, const char **argv)
{
char *hostname;
ADS_STRUCT *ads;
int rc;
extern pstring global_myname;
void *res;
hostname = strdup(global_myname);
strlower(hostname);
ads = ads_init(NULL, NULL, NULL);
rc = ads_connect(ads);
if (rc) {
d_printf("ads_connect: %s\n", ads_errstr(rc));
return -1;
}
rc = ads_find_machine_acct(ads, &res, global_myname);
if (rc) {
d_printf("ads_find_machine_acct: %s\n", ads_errstr(rc));
return -1;
}
if (ads_count_replies(ads, res) == 0) {
d_printf("No machine account for '%s' found\n", global_myname);
return -1;
}
ads_dump(ads, res);
return 0;
}
static int net_ads_leave(int argc, const char **argv)
{
ADS_STRUCT *ads;
int rc;
extern pstring global_myname;
if (!secrets_init()) {
DEBUG(1,("Failed to initialise secrets database\n"));
@ -99,30 +127,26 @@ static int net_ads_leave(int argc, const char **argv)
return -1;
}
rc = ads_leave_realm(ads, hostname);
rc = ads_leave_realm(ads, global_myname);
if (rc) {
d_printf("Failed to delete host '%s' from the '%s' realm.\n",
hostname, ads->realm);
global_myname, ads->realm);
return -1;
}
d_printf("Removed '%s' from realm '%s'\n", hostname, ads->realm);
d_printf("Removed '%s' from realm '%s'\n", global_myname, ads->realm);
return 0;
}
static int net_ads_join(int argc, const char **argv)
{
char *hostname;
ADS_STRUCT *ads;
int rc;
char *password;
extern pstring global_myname;
NTSTATUS status;
hostname = strdup(global_myname);
strlower(hostname);
if (!secrets_init()) {
DEBUG(1,("Failed to initialise secrets database\n"));
return -1;
@ -138,13 +162,13 @@ static int net_ads_join(int argc, const char **argv)
return -1;
}
rc = ads_join_realm(ads, hostname);
rc = ads_join_realm(ads, global_myname);
if (rc) {
d_printf("ads_join_realm: %s\n", ads_errstr(rc));
return -1;
}
status = ads_set_machine_password(ads, hostname, password);
status = ads_set_machine_password(ads, global_myname, password);
if (!NT_STATUS_IS_OK(status)) {
d_printf("ads_set_machine_password: %s\n", get_nt_error_msg(status));
return -1;
@ -155,7 +179,7 @@ static int net_ads_join(int argc, const char **argv)
return -1;
}
d_printf("Joined '%s' to realm '%s'\n", hostname, ads->realm);
d_printf("Joined '%s' to realm '%s'\n", global_myname, ads->realm);
return 0;
}
@ -165,6 +189,7 @@ int net_ads(int argc, const char **argv)
struct functable func[] = {
{"JOIN", net_ads_join},
{"LEAVE", net_ads_leave},
{"STATUS", net_ads_status},
{NULL, NULL}
};