mirror of
https://github.com/samba-team/samba.git
synced 2024-12-25 23:21:54 +03:00
101 lines
3.3 KiB
C
101 lines
3.3 KiB
C
/*
|
|
* Unix SMB/CIFS implementation.
|
|
* Periodic Trust account password changing.
|
|
* Copyright (C) Andrew Tridgell 1992-1997,
|
|
* Copyright (C) Luke Kenneth Casson Leighton 1996-1997,
|
|
* Copyright (C) Paul Ashton 1997.
|
|
* Copyright (C) Jeremy Allison 1998.
|
|
* Copyright (C) Andrew Bartlett 2001.
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
|
|
/************************************************************************
|
|
Change the trust account password for a domain.
|
|
************************************************************************/
|
|
|
|
NTSTATUS change_trust_account_password( const char *domain, const char *remote_machine)
|
|
{
|
|
NTSTATUS nt_status = NT_STATUS_UNSUCCESSFUL;
|
|
struct sockaddr_storage pdc_ss;
|
|
fstring dc_name;
|
|
struct cli_state *cli = NULL;
|
|
struct rpc_pipe_client *netlogon_pipe = NULL;
|
|
|
|
DEBUG(5,("change_trust_account_password: Attempting to change trust account password in domain %s....\n",
|
|
domain));
|
|
|
|
if (remote_machine == NULL || !strcmp(remote_machine, "*")) {
|
|
/* Use the PDC *only* for this */
|
|
|
|
if ( !get_pdc_ip(domain, &pdc_ss) ) {
|
|
DEBUG(0,("Can't get IP for PDC for domain %s\n", domain));
|
|
goto failed;
|
|
}
|
|
|
|
if ( !name_status_find( domain, 0x1b, 0x20, &pdc_ss, dc_name) )
|
|
goto failed;
|
|
} else {
|
|
/* supoport old deprecated "smbpasswd -j DOMAIN -r MACHINE" behavior */
|
|
fstrcpy( dc_name, remote_machine );
|
|
}
|
|
|
|
/* if this next call fails, then give up. We can't do
|
|
password changes on BDC's --jerry */
|
|
|
|
if (!NT_STATUS_IS_OK(cli_full_connection(&cli, global_myname(), dc_name,
|
|
NULL, 0,
|
|
"IPC$", "IPC",
|
|
"", "",
|
|
"", 0, Undefined, NULL))) {
|
|
DEBUG(0,("modify_trust_password: Connection to %s failed!\n", dc_name));
|
|
nt_status = NT_STATUS_UNSUCCESSFUL;
|
|
goto failed;
|
|
}
|
|
|
|
/*
|
|
* Ok - we have an anonymous connection to the IPC$ share.
|
|
* Now start the NT Domain stuff :-).
|
|
*/
|
|
|
|
/* Shouldn't we open this with schannel ? JRA. */
|
|
|
|
netlogon_pipe = cli_rpc_pipe_open_noauth(cli, PI_NETLOGON, &nt_status);
|
|
if (!netlogon_pipe) {
|
|
DEBUG(0,("modify_trust_password: unable to open the domain client session to machine %s. Error was : %s.\n",
|
|
dc_name, nt_errstr(nt_status)));
|
|
cli_shutdown(cli);
|
|
cli = NULL;
|
|
goto failed;
|
|
}
|
|
|
|
nt_status = trust_pw_find_change_and_store_it(
|
|
netlogon_pipe, netlogon_pipe, domain);
|
|
|
|
cli_shutdown(cli);
|
|
cli = NULL;
|
|
|
|
failed:
|
|
if (!NT_STATUS_IS_OK(nt_status)) {
|
|
DEBUG(0,("%s : change_trust_account_password: Failed to change password for domain %s.\n",
|
|
current_timestring(debug_ctx(), False), domain));
|
|
}
|
|
else
|
|
DEBUG(5,("change_trust_account_password: sucess!\n"));
|
|
|
|
return nt_status;
|
|
}
|