[44] | 1 | /*
|
---|
| 2 | Unix SMB/CIFS implementation.
|
---|
| 3 | RPC pipe client
|
---|
| 4 |
|
---|
| 5 | Copyright (C) Tim Potter 2000-2001
|
---|
| 6 | Copyright (C) Martin Pool 2003
|
---|
| 7 |
|
---|
| 8 | This program is free software; you can redistribute it and/or modify
|
---|
| 9 | it under the terms of the GNU General Public License as published by
|
---|
| 10 | the Free Software Foundation; either version 2 of the License, or
|
---|
| 11 | (at your option) any later version.
|
---|
| 12 |
|
---|
| 13 | This program is distributed in the hope that it will be useful,
|
---|
| 14 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
| 15 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
| 16 | GNU General Public License for more details.
|
---|
| 17 |
|
---|
| 18 | You should have received a copy of the GNU General Public License
|
---|
| 19 | along with this program; if not, write to the Free Software
|
---|
| 20 | Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
---|
| 21 | */
|
---|
| 22 |
|
---|
| 23 | #include "includes.h"
|
---|
| 24 | #include "rpcclient.h"
|
---|
| 25 |
|
---|
| 26 | DOM_SID domain_sid;
|
---|
| 27 |
|
---|
| 28 | static enum pipe_auth_type pipe_default_auth_type = PIPE_AUTH_TYPE_NONE;
|
---|
| 29 | static enum pipe_auth_level pipe_default_auth_level = PIPE_AUTH_LEVEL_NONE;
|
---|
| 30 |
|
---|
| 31 | /* List to hold groups of commands.
|
---|
| 32 | *
|
---|
| 33 | * Commands are defined in a list of arrays: arrays are easy to
|
---|
| 34 | * statically declare, and lists are easier to dynamically extend.
|
---|
| 35 | */
|
---|
| 36 |
|
---|
| 37 | static struct cmd_list {
|
---|
| 38 | struct cmd_list *prev, *next;
|
---|
| 39 | struct cmd_set *cmd_set;
|
---|
| 40 | } *cmd_list;
|
---|
| 41 |
|
---|
| 42 | /****************************************************************************
|
---|
| 43 | handle completion of commands for readline
|
---|
| 44 | ****************************************************************************/
|
---|
| 45 | static char **completion_fn(const char *text, int start, int end)
|
---|
| 46 | {
|
---|
| 47 | #define MAX_COMPLETIONS 100
|
---|
| 48 | char **matches;
|
---|
| 49 | int i, count=0;
|
---|
| 50 | struct cmd_list *commands = cmd_list;
|
---|
| 51 |
|
---|
| 52 | #if 0 /* JERRY */
|
---|
| 53 | /* FIXME!!! -- what to do when completing argument? */
|
---|
| 54 | /* for words not at the start of the line fallback
|
---|
| 55 | to filename completion */
|
---|
| 56 | if (start)
|
---|
| 57 | return NULL;
|
---|
| 58 | #endif
|
---|
| 59 |
|
---|
| 60 | /* make sure we have a list of valid commands */
|
---|
| 61 | if (!commands) {
|
---|
| 62 | return NULL;
|
---|
| 63 | }
|
---|
| 64 |
|
---|
| 65 | matches = SMB_MALLOC_ARRAY(char *, MAX_COMPLETIONS);
|
---|
| 66 | if (!matches) {
|
---|
| 67 | return NULL;
|
---|
| 68 | }
|
---|
| 69 |
|
---|
| 70 | matches[count++] = SMB_STRDUP(text);
|
---|
| 71 | if (!matches[0]) {
|
---|
| 72 | SAFE_FREE(matches);
|
---|
| 73 | return NULL;
|
---|
| 74 | }
|
---|
| 75 |
|
---|
| 76 | while (commands && count < MAX_COMPLETIONS-1) {
|
---|
| 77 | if (!commands->cmd_set) {
|
---|
| 78 | break;
|
---|
| 79 | }
|
---|
| 80 |
|
---|
| 81 | for (i=0; commands->cmd_set[i].name; i++) {
|
---|
| 82 | if ((strncmp(text, commands->cmd_set[i].name, strlen(text)) == 0) &&
|
---|
| 83 | (( commands->cmd_set[i].returntype == RPC_RTYPE_NTSTATUS &&
|
---|
| 84 | commands->cmd_set[i].ntfn ) ||
|
---|
| 85 | ( commands->cmd_set[i].returntype == RPC_RTYPE_WERROR &&
|
---|
| 86 | commands->cmd_set[i].wfn))) {
|
---|
| 87 | matches[count] = SMB_STRDUP(commands->cmd_set[i].name);
|
---|
| 88 | if (!matches[count]) {
|
---|
| 89 | for (i = 0; i < count; i++) {
|
---|
| 90 | SAFE_FREE(matches[count]);
|
---|
| 91 | }
|
---|
| 92 | SAFE_FREE(matches);
|
---|
| 93 | return NULL;
|
---|
| 94 | }
|
---|
| 95 | count++;
|
---|
| 96 | }
|
---|
| 97 | }
|
---|
| 98 | commands = commands->next;
|
---|
| 99 |
|
---|
| 100 | }
|
---|
| 101 |
|
---|
| 102 | if (count == 2) {
|
---|
| 103 | SAFE_FREE(matches[0]);
|
---|
| 104 | matches[0] = SMB_STRDUP(matches[1]);
|
---|
| 105 | }
|
---|
| 106 | matches[count] = NULL;
|
---|
| 107 | return matches;
|
---|
| 108 | }
|
---|
| 109 |
|
---|
| 110 | static char *next_command (char **cmdstr)
|
---|
| 111 | {
|
---|
| 112 | char *command;
|
---|
| 113 | char *p;
|
---|
| 114 |
|
---|
| 115 | if (!cmdstr || !(*cmdstr))
|
---|
| 116 | return NULL;
|
---|
| 117 |
|
---|
| 118 | p = strchr_m(*cmdstr, ';');
|
---|
| 119 | if (p)
|
---|
| 120 | *p = '\0';
|
---|
| 121 | command = SMB_STRDUP(*cmdstr);
|
---|
| 122 | if (p)
|
---|
| 123 | *cmdstr = p + 1;
|
---|
| 124 | else
|
---|
| 125 | *cmdstr = NULL;
|
---|
| 126 |
|
---|
| 127 | return command;
|
---|
| 128 | }
|
---|
| 129 |
|
---|
| 130 | /* Fetch the SID for this computer */
|
---|
| 131 |
|
---|
| 132 | static void fetch_machine_sid(struct cli_state *cli)
|
---|
| 133 | {
|
---|
| 134 | POLICY_HND pol;
|
---|
| 135 | NTSTATUS result = NT_STATUS_OK;
|
---|
| 136 | uint32 info_class = 5;
|
---|
| 137 | char *domain_name = NULL;
|
---|
| 138 | static BOOL got_domain_sid;
|
---|
| 139 | TALLOC_CTX *mem_ctx;
|
---|
| 140 | DOM_SID *dom_sid = NULL;
|
---|
| 141 | struct rpc_pipe_client *lsapipe = NULL;
|
---|
| 142 |
|
---|
| 143 | if (got_domain_sid) return;
|
---|
| 144 |
|
---|
| 145 | if (!(mem_ctx=talloc_init("fetch_machine_sid"))) {
|
---|
| 146 | DEBUG(0,("fetch_machine_sid: talloc_init returned NULL!\n"));
|
---|
| 147 | goto error;
|
---|
| 148 | }
|
---|
| 149 |
|
---|
| 150 | if ((lsapipe = cli_rpc_pipe_open_noauth(cli, PI_LSARPC, &result)) == NULL) {
|
---|
| 151 | fprintf(stderr, "could not initialise lsa pipe. Error was %s\n", nt_errstr(result) );
|
---|
| 152 | goto error;
|
---|
| 153 | }
|
---|
| 154 |
|
---|
| 155 | result = rpccli_lsa_open_policy(lsapipe, mem_ctx, True,
|
---|
| 156 | SEC_RIGHTS_MAXIMUM_ALLOWED,
|
---|
| 157 | &pol);
|
---|
| 158 | if (!NT_STATUS_IS_OK(result)) {
|
---|
| 159 | goto error;
|
---|
| 160 | }
|
---|
| 161 |
|
---|
| 162 | result = rpccli_lsa_query_info_policy(lsapipe, mem_ctx, &pol, info_class,
|
---|
| 163 | &domain_name, &dom_sid);
|
---|
| 164 | if (!NT_STATUS_IS_OK(result)) {
|
---|
| 165 | goto error;
|
---|
| 166 | }
|
---|
| 167 |
|
---|
| 168 | got_domain_sid = True;
|
---|
| 169 | sid_copy( &domain_sid, dom_sid );
|
---|
| 170 |
|
---|
| 171 | rpccli_lsa_close(lsapipe, mem_ctx, &pol);
|
---|
| 172 | cli_rpc_pipe_close(lsapipe);
|
---|
| 173 | talloc_destroy(mem_ctx);
|
---|
| 174 |
|
---|
| 175 | return;
|
---|
| 176 |
|
---|
| 177 | error:
|
---|
| 178 |
|
---|
| 179 | if (lsapipe) {
|
---|
| 180 | cli_rpc_pipe_close(lsapipe);
|
---|
| 181 | }
|
---|
| 182 |
|
---|
| 183 | fprintf(stderr, "could not obtain sid for domain %s\n", cli->domain);
|
---|
| 184 |
|
---|
| 185 | if (!NT_STATUS_IS_OK(result)) {
|
---|
| 186 | fprintf(stderr, "error: %s\n", nt_errstr(result));
|
---|
| 187 | }
|
---|
| 188 |
|
---|
| 189 | exit(1);
|
---|
| 190 | }
|
---|
| 191 |
|
---|
| 192 | /* List the available commands on a given pipe */
|
---|
| 193 |
|
---|
| 194 | static NTSTATUS cmd_listcommands(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 195 | int argc, const char **argv)
|
---|
| 196 | {
|
---|
| 197 | struct cmd_list *tmp;
|
---|
| 198 | struct cmd_set *tmp_set;
|
---|
| 199 | int i;
|
---|
| 200 |
|
---|
| 201 | /* Usage */
|
---|
| 202 |
|
---|
| 203 | if (argc != 2) {
|
---|
| 204 | printf("Usage: %s <pipe>\n", argv[0]);
|
---|
| 205 | return NT_STATUS_OK;
|
---|
| 206 | }
|
---|
| 207 |
|
---|
| 208 | /* Help on one command */
|
---|
| 209 |
|
---|
| 210 | for (tmp = cmd_list; tmp; tmp = tmp->next)
|
---|
| 211 | {
|
---|
| 212 | tmp_set = tmp->cmd_set;
|
---|
| 213 |
|
---|
| 214 | if (!StrCaseCmp(argv[1], tmp_set->name))
|
---|
| 215 | {
|
---|
| 216 | printf("Available commands on the %s pipe:\n\n", tmp_set->name);
|
---|
| 217 |
|
---|
| 218 | i = 0;
|
---|
| 219 | tmp_set++;
|
---|
| 220 | while(tmp_set->name) {
|
---|
| 221 | printf("%30s", tmp_set->name);
|
---|
| 222 | tmp_set++;
|
---|
| 223 | i++;
|
---|
| 224 | if (i%3 == 0)
|
---|
| 225 | printf("\n");
|
---|
| 226 | }
|
---|
| 227 |
|
---|
| 228 | /* drop out of the loop */
|
---|
| 229 | break;
|
---|
| 230 | }
|
---|
| 231 | }
|
---|
| 232 | printf("\n\n");
|
---|
| 233 |
|
---|
| 234 | return NT_STATUS_OK;
|
---|
| 235 | }
|
---|
| 236 |
|
---|
| 237 | /* Display help on commands */
|
---|
| 238 |
|
---|
| 239 | static NTSTATUS cmd_help(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 240 | int argc, const char **argv)
|
---|
| 241 | {
|
---|
| 242 | struct cmd_list *tmp;
|
---|
| 243 | struct cmd_set *tmp_set;
|
---|
| 244 |
|
---|
| 245 | /* Usage */
|
---|
| 246 |
|
---|
| 247 | if (argc > 2) {
|
---|
| 248 | printf("Usage: %s [command]\n", argv[0]);
|
---|
| 249 | return NT_STATUS_OK;
|
---|
| 250 | }
|
---|
| 251 |
|
---|
| 252 | /* Help on one command */
|
---|
| 253 |
|
---|
| 254 | if (argc == 2) {
|
---|
| 255 | for (tmp = cmd_list; tmp; tmp = tmp->next) {
|
---|
| 256 |
|
---|
| 257 | tmp_set = tmp->cmd_set;
|
---|
| 258 |
|
---|
| 259 | while(tmp_set->name) {
|
---|
| 260 | if (strequal(argv[1], tmp_set->name)) {
|
---|
| 261 | if (tmp_set->usage &&
|
---|
| 262 | tmp_set->usage[0])
|
---|
| 263 | printf("%s\n", tmp_set->usage);
|
---|
| 264 | else
|
---|
| 265 | printf("No help for %s\n", tmp_set->name);
|
---|
| 266 |
|
---|
| 267 | return NT_STATUS_OK;
|
---|
| 268 | }
|
---|
| 269 |
|
---|
| 270 | tmp_set++;
|
---|
| 271 | }
|
---|
| 272 | }
|
---|
| 273 |
|
---|
| 274 | printf("No such command: %s\n", argv[1]);
|
---|
| 275 | return NT_STATUS_OK;
|
---|
| 276 | }
|
---|
| 277 |
|
---|
| 278 | /* List all commands */
|
---|
| 279 |
|
---|
| 280 | for (tmp = cmd_list; tmp; tmp = tmp->next) {
|
---|
| 281 |
|
---|
| 282 | tmp_set = tmp->cmd_set;
|
---|
| 283 |
|
---|
| 284 | while(tmp_set->name) {
|
---|
| 285 |
|
---|
| 286 | printf("%15s\t\t%s\n", tmp_set->name,
|
---|
| 287 | tmp_set->description ? tmp_set->description:
|
---|
| 288 | "");
|
---|
| 289 |
|
---|
| 290 | tmp_set++;
|
---|
| 291 | }
|
---|
| 292 | }
|
---|
| 293 |
|
---|
| 294 | return NT_STATUS_OK;
|
---|
| 295 | }
|
---|
| 296 |
|
---|
| 297 | /* Change the debug level */
|
---|
| 298 |
|
---|
| 299 | static NTSTATUS cmd_debuglevel(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 300 | int argc, const char **argv)
|
---|
| 301 | {
|
---|
| 302 | if (argc > 2) {
|
---|
| 303 | printf("Usage: %s [debuglevel]\n", argv[0]);
|
---|
| 304 | return NT_STATUS_OK;
|
---|
| 305 | }
|
---|
| 306 |
|
---|
| 307 | if (argc == 2) {
|
---|
| 308 | DEBUGLEVEL = atoi(argv[1]);
|
---|
| 309 | }
|
---|
| 310 |
|
---|
| 311 | printf("debuglevel is %d\n", DEBUGLEVEL);
|
---|
| 312 |
|
---|
| 313 | return NT_STATUS_OK;
|
---|
| 314 | }
|
---|
| 315 |
|
---|
| 316 | static NTSTATUS cmd_quit(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 317 | int argc, const char **argv)
|
---|
| 318 | {
|
---|
| 319 | exit(0);
|
---|
| 320 | return NT_STATUS_OK; /* NOTREACHED */
|
---|
| 321 | }
|
---|
| 322 |
|
---|
| 323 | static NTSTATUS cmd_set_ss_level(void)
|
---|
| 324 | {
|
---|
| 325 | struct cmd_list *tmp;
|
---|
| 326 |
|
---|
| 327 | /* Close any existing connections not at this level. */
|
---|
| 328 |
|
---|
| 329 | for (tmp = cmd_list; tmp; tmp = tmp->next) {
|
---|
| 330 | struct cmd_set *tmp_set;
|
---|
| 331 |
|
---|
| 332 | for (tmp_set = tmp->cmd_set; tmp_set->name; tmp_set++) {
|
---|
| 333 | if (tmp_set->rpc_pipe == NULL) {
|
---|
| 334 | continue;
|
---|
| 335 | }
|
---|
| 336 |
|
---|
| 337 | if (tmp_set->rpc_pipe->auth.auth_type != pipe_default_auth_type ||
|
---|
| 338 | tmp_set->rpc_pipe->auth.auth_level != pipe_default_auth_level) {
|
---|
| 339 | cli_rpc_pipe_close(tmp_set->rpc_pipe);
|
---|
| 340 | tmp_set->rpc_pipe = NULL;
|
---|
| 341 | }
|
---|
| 342 | }
|
---|
| 343 | }
|
---|
| 344 | return NT_STATUS_OK;
|
---|
| 345 | }
|
---|
| 346 |
|
---|
| 347 | static NTSTATUS cmd_sign(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 348 | int argc, const char **argv)
|
---|
| 349 | {
|
---|
| 350 | pipe_default_auth_level = PIPE_AUTH_LEVEL_INTEGRITY;
|
---|
| 351 | pipe_default_auth_type = PIPE_AUTH_TYPE_NTLMSSP;
|
---|
| 352 |
|
---|
| 353 | if (argc > 2) {
|
---|
| 354 | printf("Usage: %s [NTLMSSP|NTLMSSP_SPNEGO|SCHANNEL]\n", argv[0]);
|
---|
| 355 | return NT_STATUS_OK;
|
---|
| 356 | }
|
---|
| 357 |
|
---|
| 358 | if (argc == 2) {
|
---|
| 359 | if (strequal(argv[1], "NTLMSSP")) {
|
---|
| 360 | pipe_default_auth_type = PIPE_AUTH_TYPE_NTLMSSP;
|
---|
| 361 | } else if (strequal(argv[1], "NTLMSSP_SPNEGO")) {
|
---|
| 362 | pipe_default_auth_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
|
---|
| 363 | } else if (strequal(argv[1], "SCHANNEL")) {
|
---|
| 364 | pipe_default_auth_type = PIPE_AUTH_TYPE_SCHANNEL;
|
---|
| 365 | } else {
|
---|
| 366 | printf("unknown type %s\n", argv[1]);
|
---|
| 367 | return NT_STATUS_INVALID_LEVEL;
|
---|
| 368 | }
|
---|
| 369 | }
|
---|
| 370 |
|
---|
| 371 | printf("debuglevel is %d\n", DEBUGLEVEL);
|
---|
| 372 | return cmd_set_ss_level();
|
---|
| 373 | }
|
---|
| 374 |
|
---|
| 375 | static NTSTATUS cmd_seal(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 376 | int argc, const char **argv)
|
---|
| 377 | {
|
---|
| 378 | pipe_default_auth_level = PIPE_AUTH_LEVEL_PRIVACY;
|
---|
| 379 | pipe_default_auth_type = PIPE_AUTH_TYPE_NTLMSSP;
|
---|
| 380 |
|
---|
| 381 | if (argc > 2) {
|
---|
| 382 | printf("Usage: %s [NTLMSSP|NTLMSSP_SPNEGO|SCHANNEL]\n", argv[0]);
|
---|
| 383 | return NT_STATUS_OK;
|
---|
| 384 | }
|
---|
| 385 |
|
---|
| 386 | if (argc == 2) {
|
---|
| 387 | if (strequal(argv[1], "NTLMSSP")) {
|
---|
| 388 | pipe_default_auth_type = PIPE_AUTH_TYPE_NTLMSSP;
|
---|
| 389 | } else if (strequal(argv[1], "NTLMSSP_SPNEGO")) {
|
---|
| 390 | pipe_default_auth_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
|
---|
| 391 | } else if (strequal(argv[1], "SCHANNEL")) {
|
---|
| 392 | pipe_default_auth_type = PIPE_AUTH_TYPE_SCHANNEL;
|
---|
| 393 | } else {
|
---|
| 394 | printf("unknown type %s\n", argv[1]);
|
---|
| 395 | return NT_STATUS_INVALID_LEVEL;
|
---|
| 396 | }
|
---|
| 397 | }
|
---|
| 398 | return cmd_set_ss_level();
|
---|
| 399 | }
|
---|
| 400 |
|
---|
| 401 | static NTSTATUS cmd_none(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 402 | int argc, const char **argv)
|
---|
| 403 | {
|
---|
| 404 | pipe_default_auth_level = PIPE_AUTH_LEVEL_NONE;
|
---|
| 405 | pipe_default_auth_type = PIPE_AUTH_TYPE_NONE;
|
---|
| 406 |
|
---|
| 407 | return cmd_set_ss_level();
|
---|
| 408 | }
|
---|
| 409 |
|
---|
| 410 | static NTSTATUS cmd_schannel(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 411 | int argc, const char **argv)
|
---|
| 412 | {
|
---|
| 413 | d_printf("Setting schannel - sign and seal\n");
|
---|
| 414 | pipe_default_auth_level = PIPE_AUTH_LEVEL_PRIVACY;
|
---|
| 415 | pipe_default_auth_type = PIPE_AUTH_TYPE_SCHANNEL;
|
---|
| 416 |
|
---|
| 417 | return cmd_set_ss_level();
|
---|
| 418 | }
|
---|
| 419 |
|
---|
| 420 | static NTSTATUS cmd_schannel_sign(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
|
---|
| 421 | int argc, const char **argv)
|
---|
| 422 | {
|
---|
| 423 | d_printf("Setting schannel - sign only\n");
|
---|
| 424 | pipe_default_auth_level = PIPE_AUTH_LEVEL_INTEGRITY;
|
---|
| 425 | pipe_default_auth_type = PIPE_AUTH_TYPE_SCHANNEL;
|
---|
| 426 |
|
---|
| 427 | return cmd_set_ss_level();
|
---|
| 428 | }
|
---|
| 429 |
|
---|
| 430 |
|
---|
| 431 | /* Built in rpcclient commands */
|
---|
| 432 |
|
---|
| 433 | static struct cmd_set rpcclient_commands[] = {
|
---|
| 434 |
|
---|
| 435 | { "GENERAL OPTIONS" },
|
---|
| 436 |
|
---|
| 437 | { "help", RPC_RTYPE_NTSTATUS, cmd_help, NULL, -1, NULL, "Get help on commands", "[command]" },
|
---|
| 438 | { "?", RPC_RTYPE_NTSTATUS, cmd_help, NULL, -1, NULL, "Get help on commands", "[command]" },
|
---|
| 439 | { "debuglevel", RPC_RTYPE_NTSTATUS, cmd_debuglevel, NULL, -1, NULL, "Set debug level", "level" },
|
---|
| 440 | { "list", RPC_RTYPE_NTSTATUS, cmd_listcommands, NULL, -1, NULL, "List available commands on <pipe>", "pipe" },
|
---|
| 441 | { "exit", RPC_RTYPE_NTSTATUS, cmd_quit, NULL, -1, NULL, "Exit program", "" },
|
---|
| 442 | { "quit", RPC_RTYPE_NTSTATUS, cmd_quit, NULL, -1, NULL, "Exit program", "" },
|
---|
| 443 | { "sign", RPC_RTYPE_NTSTATUS, cmd_sign, NULL, -1, NULL, "Force RPC pipe connections to be signed", "" },
|
---|
| 444 | { "seal", RPC_RTYPE_NTSTATUS, cmd_seal, NULL, -1, NULL, "Force RPC pipe connections to be sealed", "" },
|
---|
| 445 | { "schannel", RPC_RTYPE_NTSTATUS, cmd_schannel, NULL, -1, NULL, "Force RPC pipe connections to be sealed with 'schannel'. Assumes valid machine account to this domain controller.", "" },
|
---|
| 446 | { "schannelsign", RPC_RTYPE_NTSTATUS, cmd_schannel_sign, NULL, -1, NULL, "Force RPC pipe connections to be signed (not sealed) with 'schannel'. Assumes valid machine account to this domain controller.", "" },
|
---|
| 447 | { "none", RPC_RTYPE_NTSTATUS, cmd_none, NULL, -1, NULL, "Force RPC pipe connections to have no special properties", "" },
|
---|
| 448 |
|
---|
| 449 | { NULL }
|
---|
| 450 | };
|
---|
| 451 |
|
---|
| 452 | static struct cmd_set separator_command[] = {
|
---|
| 453 | { "---------------", MAX_RPC_RETURN_TYPE, NULL, NULL, -1, NULL, "----------------------" },
|
---|
| 454 | { NULL }
|
---|
| 455 | };
|
---|
| 456 |
|
---|
| 457 |
|
---|
| 458 | /* Various pipe commands */
|
---|
| 459 |
|
---|
| 460 | extern struct cmd_set lsarpc_commands[];
|
---|
| 461 | extern struct cmd_set samr_commands[];
|
---|
| 462 | extern struct cmd_set spoolss_commands[];
|
---|
| 463 | extern struct cmd_set netlogon_commands[];
|
---|
| 464 | extern struct cmd_set srvsvc_commands[];
|
---|
| 465 | extern struct cmd_set dfs_commands[];
|
---|
| 466 | extern struct cmd_set ds_commands[];
|
---|
| 467 | extern struct cmd_set echo_commands[];
|
---|
| 468 | extern struct cmd_set shutdown_commands[];
|
---|
| 469 | extern struct cmd_set test_commands[];
|
---|
| 470 |
|
---|
| 471 | static struct cmd_set *rpcclient_command_list[] = {
|
---|
| 472 | rpcclient_commands,
|
---|
| 473 | lsarpc_commands,
|
---|
| 474 | ds_commands,
|
---|
| 475 | samr_commands,
|
---|
| 476 | spoolss_commands,
|
---|
| 477 | netlogon_commands,
|
---|
| 478 | srvsvc_commands,
|
---|
| 479 | dfs_commands,
|
---|
| 480 | echo_commands,
|
---|
| 481 | shutdown_commands,
|
---|
| 482 | test_commands,
|
---|
| 483 | NULL
|
---|
| 484 | };
|
---|
| 485 |
|
---|
| 486 | static void add_command_set(struct cmd_set *cmd_set)
|
---|
| 487 | {
|
---|
| 488 | struct cmd_list *entry;
|
---|
| 489 |
|
---|
| 490 | if (!(entry = SMB_MALLOC_P(struct cmd_list))) {
|
---|
| 491 | DEBUG(0, ("out of memory\n"));
|
---|
| 492 | return;
|
---|
| 493 | }
|
---|
| 494 |
|
---|
| 495 | ZERO_STRUCTP(entry);
|
---|
| 496 |
|
---|
| 497 | entry->cmd_set = cmd_set;
|
---|
| 498 | DLIST_ADD(cmd_list, entry);
|
---|
| 499 | }
|
---|
| 500 |
|
---|
| 501 |
|
---|
| 502 | /**
|
---|
| 503 | * Call an rpcclient function, passing an argv array.
|
---|
| 504 | *
|
---|
| 505 | * @param cmd Command to run, as a single string.
|
---|
| 506 | **/
|
---|
| 507 | static NTSTATUS do_cmd(struct cli_state *cli,
|
---|
| 508 | struct cmd_set *cmd_entry,
|
---|
| 509 | int argc, char **argv)
|
---|
| 510 | {
|
---|
| 511 | NTSTATUS ntresult;
|
---|
| 512 | WERROR wresult;
|
---|
| 513 |
|
---|
| 514 | TALLOC_CTX *mem_ctx;
|
---|
| 515 |
|
---|
| 516 | /* Create mem_ctx */
|
---|
| 517 |
|
---|
| 518 | if (!(mem_ctx = talloc_init("do_cmd"))) {
|
---|
| 519 | DEBUG(0, ("talloc_init() failed\n"));
|
---|
| 520 | return NT_STATUS_NO_MEMORY;
|
---|
| 521 | }
|
---|
| 522 |
|
---|
| 523 | /* Open pipe */
|
---|
| 524 |
|
---|
| 525 | if (cmd_entry->pipe_idx != -1 && cmd_entry->rpc_pipe == NULL) {
|
---|
| 526 | switch (pipe_default_auth_type) {
|
---|
| 527 | case PIPE_AUTH_TYPE_NONE:
|
---|
| 528 | cmd_entry->rpc_pipe = cli_rpc_pipe_open_noauth(cli,
|
---|
| 529 | cmd_entry->pipe_idx,
|
---|
| 530 | &ntresult);
|
---|
| 531 | break;
|
---|
| 532 | case PIPE_AUTH_TYPE_SPNEGO_NTLMSSP:
|
---|
| 533 | cmd_entry->rpc_pipe = cli_rpc_pipe_open_spnego_ntlmssp(cli,
|
---|
| 534 | cmd_entry->pipe_idx,
|
---|
| 535 | pipe_default_auth_level,
|
---|
| 536 | lp_workgroup(),
|
---|
| 537 | cmdline_auth_info.username,
|
---|
| 538 | cmdline_auth_info.password,
|
---|
| 539 | &ntresult);
|
---|
| 540 | break;
|
---|
| 541 | case PIPE_AUTH_TYPE_NTLMSSP:
|
---|
| 542 | cmd_entry->rpc_pipe = cli_rpc_pipe_open_ntlmssp(cli,
|
---|
| 543 | cmd_entry->pipe_idx,
|
---|
| 544 | pipe_default_auth_level,
|
---|
| 545 | lp_workgroup(),
|
---|
| 546 | cmdline_auth_info.username,
|
---|
| 547 | cmdline_auth_info.password,
|
---|
| 548 | &ntresult);
|
---|
| 549 | break;
|
---|
| 550 | case PIPE_AUTH_TYPE_SCHANNEL:
|
---|
| 551 | cmd_entry->rpc_pipe = cli_rpc_pipe_open_schannel(cli,
|
---|
| 552 | cmd_entry->pipe_idx,
|
---|
| 553 | pipe_default_auth_level,
|
---|
| 554 | lp_workgroup(),
|
---|
| 555 | &ntresult);
|
---|
| 556 | break;
|
---|
| 557 | default:
|
---|
| 558 | DEBUG(0, ("Could not initialise %s. Invalid auth type %u\n",
|
---|
| 559 | cli_get_pipe_name(cmd_entry->pipe_idx),
|
---|
| 560 | pipe_default_auth_type ));
|
---|
| 561 | return NT_STATUS_UNSUCCESSFUL;
|
---|
| 562 | }
|
---|
| 563 | if (!cmd_entry->rpc_pipe) {
|
---|
| 564 | DEBUG(0, ("Could not initialise %s. Error was %s\n",
|
---|
| 565 | cli_get_pipe_name(cmd_entry->pipe_idx),
|
---|
| 566 | nt_errstr(ntresult) ));
|
---|
| 567 | return ntresult;
|
---|
| 568 | }
|
---|
| 569 |
|
---|
| 570 | if (cmd_entry->pipe_idx == PI_NETLOGON) {
|
---|
[134] | 571 | uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS;
|
---|
[44] | 572 | uint32 sec_channel_type;
|
---|
| 573 | uchar trust_password[16];
|
---|
| 574 |
|
---|
| 575 | if (!secrets_fetch_trust_account_password(lp_workgroup(),
|
---|
| 576 | trust_password,
|
---|
| 577 | NULL, &sec_channel_type)) {
|
---|
| 578 | return NT_STATUS_UNSUCCESSFUL;
|
---|
| 579 | }
|
---|
| 580 |
|
---|
| 581 | ntresult = rpccli_netlogon_setup_creds(cmd_entry->rpc_pipe,
|
---|
| 582 | cli->desthost, /* server name */
|
---|
| 583 | lp_workgroup(), /* domain */
|
---|
| 584 | global_myname(), /* client name */
|
---|
| 585 | global_myname(), /* machine account name */
|
---|
| 586 | trust_password,
|
---|
| 587 | sec_channel_type,
|
---|
| 588 | &neg_flags);
|
---|
| 589 |
|
---|
| 590 | if (!NT_STATUS_IS_OK(ntresult)) {
|
---|
| 591 | DEBUG(0, ("Could not initialise credentials for %s.\n",
|
---|
| 592 | cli_get_pipe_name(cmd_entry->pipe_idx)));
|
---|
| 593 | return ntresult;
|
---|
| 594 | }
|
---|
| 595 | }
|
---|
| 596 | }
|
---|
| 597 |
|
---|
| 598 | /* Run command */
|
---|
| 599 |
|
---|
| 600 | if ( cmd_entry->returntype == RPC_RTYPE_NTSTATUS ) {
|
---|
| 601 | ntresult = cmd_entry->ntfn(cmd_entry->rpc_pipe, mem_ctx, argc, (const char **) argv);
|
---|
| 602 | if (!NT_STATUS_IS_OK(ntresult)) {
|
---|
| 603 | printf("result was %s\n", nt_errstr(ntresult));
|
---|
| 604 | }
|
---|
| 605 | } else {
|
---|
| 606 | wresult = cmd_entry->wfn(cmd_entry->rpc_pipe, mem_ctx, argc, (const char **) argv);
|
---|
| 607 | /* print out the DOS error */
|
---|
| 608 | if (!W_ERROR_IS_OK(wresult)) {
|
---|
| 609 | printf( "result was %s\n", dos_errstr(wresult));
|
---|
| 610 | }
|
---|
| 611 | ntresult = W_ERROR_IS_OK(wresult)?NT_STATUS_OK:NT_STATUS_UNSUCCESSFUL;
|
---|
| 612 | }
|
---|
| 613 |
|
---|
| 614 | /* Cleanup */
|
---|
| 615 |
|
---|
| 616 | talloc_destroy(mem_ctx);
|
---|
| 617 |
|
---|
| 618 | return ntresult;
|
---|
| 619 | }
|
---|
| 620 |
|
---|
| 621 |
|
---|
| 622 | /**
|
---|
| 623 | * Process a command entered at the prompt or as part of -c
|
---|
| 624 | *
|
---|
| 625 | * @returns The NTSTATUS from running the command.
|
---|
| 626 | **/
|
---|
| 627 | static NTSTATUS process_cmd(struct cli_state *cli, char *cmd)
|
---|
| 628 | {
|
---|
| 629 | struct cmd_list *temp_list;
|
---|
| 630 | NTSTATUS result = NT_STATUS_OK;
|
---|
| 631 | int ret;
|
---|
| 632 | int argc;
|
---|
| 633 | char **argv = NULL;
|
---|
| 634 |
|
---|
| 635 | if ((ret = poptParseArgvString(cmd, &argc, (const char ***) &argv)) != 0) {
|
---|
| 636 | fprintf(stderr, "rpcclient: %s\n", poptStrerror(ret));
|
---|
| 637 | return NT_STATUS_UNSUCCESSFUL;
|
---|
| 638 | }
|
---|
| 639 |
|
---|
| 640 |
|
---|
| 641 | /* Walk through a dlist of arrays of commands. */
|
---|
| 642 | for (temp_list = cmd_list; temp_list; temp_list = temp_list->next) {
|
---|
| 643 | struct cmd_set *temp_set = temp_list->cmd_set;
|
---|
| 644 |
|
---|
| 645 | while (temp_set->name) {
|
---|
| 646 | if (strequal(argv[0], temp_set->name)) {
|
---|
| 647 | if (!(temp_set->returntype == RPC_RTYPE_NTSTATUS && temp_set->ntfn ) &&
|
---|
| 648 | !(temp_set->returntype == RPC_RTYPE_WERROR && temp_set->wfn )) {
|
---|
| 649 | fprintf (stderr, "Invalid command\n");
|
---|
| 650 | goto out_free;
|
---|
| 651 | }
|
---|
| 652 |
|
---|
| 653 | result = do_cmd(cli, temp_set, argc, argv);
|
---|
| 654 |
|
---|
| 655 | goto out_free;
|
---|
| 656 | }
|
---|
| 657 | temp_set++;
|
---|
| 658 | }
|
---|
| 659 | }
|
---|
| 660 |
|
---|
| 661 | if (argv[0]) {
|
---|
| 662 | printf("command not found: %s\n", argv[0]);
|
---|
| 663 | }
|
---|
| 664 |
|
---|
| 665 | out_free:
|
---|
| 666 | /* moved to do_cmd()
|
---|
| 667 | if (!NT_STATUS_IS_OK(result)) {
|
---|
| 668 | printf("result was %s\n", nt_errstr(result));
|
---|
| 669 | }
|
---|
| 670 | */
|
---|
| 671 |
|
---|
| 672 | /* NOTE: popt allocates the whole argv, including the
|
---|
| 673 | * strings, as a single block. So a single free is
|
---|
| 674 | * enough to release it -- we don't free the
|
---|
| 675 | * individual strings. rtfm. */
|
---|
| 676 | free(argv);
|
---|
| 677 |
|
---|
| 678 | return result;
|
---|
| 679 | }
|
---|
| 680 |
|
---|
| 681 |
|
---|
| 682 | /* Main function */
|
---|
| 683 |
|
---|
| 684 | int main(int argc, char *argv[])
|
---|
| 685 | {
|
---|
| 686 | int opt;
|
---|
| 687 | static char *cmdstr = NULL;
|
---|
| 688 | const char *server;
|
---|
| 689 | struct cli_state *cli;
|
---|
| 690 | static char *opt_ipaddr=NULL;
|
---|
| 691 | struct cmd_set **cmd_set;
|
---|
| 692 | struct in_addr server_ip;
|
---|
| 693 | NTSTATUS nt_status;
|
---|
| 694 | static int opt_port = 0;
|
---|
| 695 | fstring new_workgroup;
|
---|
| 696 |
|
---|
| 697 | /* make sure the vars that get altered (4th field) are in
|
---|
| 698 | a fixed location or certain compilers complain */
|
---|
| 699 | poptContext pc;
|
---|
| 700 | struct poptOption long_options[] = {
|
---|
| 701 | POPT_AUTOHELP
|
---|
| 702 | {"command", 'c', POPT_ARG_STRING, &cmdstr, 'c', "Execute semicolon separated cmds", "COMMANDS"},
|
---|
| 703 | {"dest-ip", 'I', POPT_ARG_STRING, &opt_ipaddr, 'I', "Specify destination IP address", "IP"},
|
---|
| 704 | {"port", 'p', POPT_ARG_INT, &opt_port, 'p', "Specify port number", "PORT"},
|
---|
| 705 | POPT_COMMON_SAMBA
|
---|
| 706 | POPT_COMMON_CONNECTION
|
---|
| 707 | POPT_COMMON_CREDENTIALS
|
---|
| 708 | POPT_TABLEEND
|
---|
| 709 | };
|
---|
| 710 |
|
---|
| 711 | load_case_tables();
|
---|
| 712 |
|
---|
| 713 | ZERO_STRUCT(server_ip);
|
---|
| 714 |
|
---|
| 715 | setlinebuf(stdout);
|
---|
| 716 |
|
---|
| 717 | /* the following functions are part of the Samba debugging
|
---|
| 718 | facilities. See lib/debug.c */
|
---|
| 719 | setup_logging("rpcclient", True);
|
---|
| 720 |
|
---|
| 721 | /* Parse options */
|
---|
| 722 |
|
---|
| 723 | pc = poptGetContext("rpcclient", argc, (const char **) argv,
|
---|
| 724 | long_options, 0);
|
---|
| 725 |
|
---|
| 726 | if (argc == 1) {
|
---|
| 727 | poptPrintHelp(pc, stderr, 0);
|
---|
| 728 | return 0;
|
---|
| 729 | }
|
---|
| 730 |
|
---|
| 731 | while((opt = poptGetNextOpt(pc)) != -1) {
|
---|
| 732 | switch (opt) {
|
---|
| 733 |
|
---|
| 734 | case 'I':
|
---|
| 735 | if ( (server_ip.s_addr=inet_addr(opt_ipaddr)) == INADDR_NONE ) {
|
---|
| 736 | fprintf(stderr, "%s not a valid IP address\n",
|
---|
| 737 | opt_ipaddr);
|
---|
| 738 | return 1;
|
---|
| 739 | }
|
---|
| 740 | }
|
---|
| 741 | }
|
---|
| 742 |
|
---|
| 743 | /* Get server as remaining unparsed argument. Print usage if more
|
---|
| 744 | than one unparsed argument is present. */
|
---|
| 745 |
|
---|
| 746 | server = poptGetArg(pc);
|
---|
| 747 |
|
---|
| 748 | if (!server || poptGetArg(pc)) {
|
---|
| 749 | poptPrintHelp(pc, stderr, 0);
|
---|
| 750 | return 1;
|
---|
| 751 | }
|
---|
| 752 |
|
---|
| 753 | poptFreeContext(pc);
|
---|
| 754 |
|
---|
| 755 | load_interfaces();
|
---|
| 756 |
|
---|
| 757 | if (!init_names())
|
---|
| 758 | return 1;
|
---|
| 759 |
|
---|
| 760 | /* save the workgroup...
|
---|
| 761 |
|
---|
| 762 | FIXME!! do we need to do this for other options as well
|
---|
| 763 | (or maybe a generic way to keep lp_load() from overwriting
|
---|
| 764 | everything)? */
|
---|
| 765 |
|
---|
| 766 | fstrcpy( new_workgroup, lp_workgroup() );
|
---|
| 767 |
|
---|
| 768 | /* Load smb.conf file */
|
---|
| 769 |
|
---|
| 770 | if (!lp_load(dyn_CONFIGFILE,True,False,False,True))
|
---|
| 771 | fprintf(stderr, "Can't load %s\n", dyn_CONFIGFILE);
|
---|
| 772 |
|
---|
| 773 | if ( strlen(new_workgroup) != 0 )
|
---|
| 774 | set_global_myworkgroup( new_workgroup );
|
---|
| 775 |
|
---|
| 776 | /*
|
---|
| 777 | * Get password
|
---|
| 778 | * from stdin if necessary
|
---|
| 779 | */
|
---|
| 780 |
|
---|
| 781 | if (!cmdline_auth_info.got_pass) {
|
---|
| 782 | char *pass = getpass("Password:");
|
---|
| 783 | if (pass) {
|
---|
| 784 | pstrcpy(cmdline_auth_info.password, pass);
|
---|
| 785 | }
|
---|
| 786 | }
|
---|
| 787 |
|
---|
| 788 | if ((server[0] == '/' && server[1] == '/') ||
|
---|
| 789 | (server[0] == '\\' && server[1] == '\\')) {
|
---|
| 790 | server += 2;
|
---|
| 791 | }
|
---|
| 792 |
|
---|
| 793 | nt_status = cli_full_connection(&cli, global_myname(), server,
|
---|
| 794 | opt_ipaddr ? &server_ip : NULL, opt_port,
|
---|
| 795 | "IPC$", "IPC",
|
---|
| 796 | cmdline_auth_info.username,
|
---|
| 797 | lp_workgroup(),
|
---|
| 798 | cmdline_auth_info.password,
|
---|
| 799 | cmdline_auth_info.use_kerberos ? CLI_FULL_CONNECTION_USE_KERBEROS : 0,
|
---|
| 800 | cmdline_auth_info.signing_state,NULL);
|
---|
| 801 |
|
---|
| 802 | if (!NT_STATUS_IS_OK(nt_status)) {
|
---|
| 803 | DEBUG(0,("Cannot connect to server. Error was %s\n", nt_errstr(nt_status)));
|
---|
| 804 | return 1;
|
---|
| 805 | }
|
---|
| 806 |
|
---|
| 807 | #if 0 /* COMMENT OUT FOR TESTING */
|
---|
| 808 | memset(cmdline_auth_info.password,'X',sizeof(cmdline_auth_info.password));
|
---|
| 809 | #endif
|
---|
| 810 |
|
---|
| 811 | /* Load command lists */
|
---|
| 812 |
|
---|
| 813 | cmd_set = rpcclient_command_list;
|
---|
| 814 |
|
---|
| 815 | while(*cmd_set) {
|
---|
| 816 | add_command_set(*cmd_set);
|
---|
| 817 | add_command_set(separator_command);
|
---|
| 818 | cmd_set++;
|
---|
| 819 | }
|
---|
| 820 |
|
---|
| 821 | fetch_machine_sid(cli);
|
---|
| 822 |
|
---|
| 823 | /* Do anything specified with -c */
|
---|
| 824 | if (cmdstr && cmdstr[0]) {
|
---|
| 825 | char *cmd;
|
---|
| 826 | char *p = cmdstr;
|
---|
| 827 | int result = 0;
|
---|
| 828 |
|
---|
| 829 | while((cmd=next_command(&p)) != NULL) {
|
---|
| 830 | NTSTATUS cmd_result = process_cmd(cli, cmd);
|
---|
| 831 | SAFE_FREE(cmd);
|
---|
| 832 | result = NT_STATUS_IS_ERR(cmd_result);
|
---|
| 833 | }
|
---|
| 834 |
|
---|
| 835 | cli_shutdown(cli);
|
---|
| 836 | return result;
|
---|
| 837 | }
|
---|
| 838 |
|
---|
| 839 | /* Loop around accepting commands */
|
---|
| 840 |
|
---|
| 841 | while(1) {
|
---|
| 842 | pstring prompt;
|
---|
| 843 | char *line;
|
---|
| 844 |
|
---|
| 845 | slprintf(prompt, sizeof(prompt) - 1, "rpcclient $> ");
|
---|
| 846 |
|
---|
| 847 | line = smb_readline(prompt, NULL, completion_fn);
|
---|
| 848 |
|
---|
| 849 | if (line == NULL)
|
---|
| 850 | break;
|
---|
| 851 |
|
---|
| 852 | if (line[0] != '\n')
|
---|
| 853 | process_cmd(cli, line);
|
---|
| 854 | }
|
---|
| 855 |
|
---|
| 856 | cli_shutdown(cli);
|
---|
| 857 | return 0;
|
---|
| 858 | }
|
---|