1 | /*
|
---|
2 | Samba Unix/Linux SMB client library
|
---|
3 | Distributed SMB/CIFS Server Management Utility
|
---|
4 | Copyright (C) 2001 Steve French (sfrench@us.ibm.com)
|
---|
5 | Copyright (C) 2001 Jim McDonough (jmcd@us.ibm.com)
|
---|
6 | Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
|
---|
7 | Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
|
---|
8 | Copyright (C) 2008 Kai Blin (kai@samba.org)
|
---|
9 |
|
---|
10 | Originally written by Steve and Jim. Largely rewritten by tridge in
|
---|
11 | November 2001.
|
---|
12 |
|
---|
13 | Reworked again by abartlet in December 2001
|
---|
14 |
|
---|
15 | Another overhaul, moving functionality into plug-ins loaded on demand by Kai
|
---|
16 | in May 2008.
|
---|
17 |
|
---|
18 | This program is free software; you can redistribute it and/or modify
|
---|
19 | it under the terms of the GNU General Public License as published by
|
---|
20 | the Free Software Foundation; either version 3 of the License, or
|
---|
21 | (at your option) any later version.
|
---|
22 |
|
---|
23 | This program is distributed in the hope that it will be useful,
|
---|
24 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
25 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
26 | GNU General Public License for more details.
|
---|
27 |
|
---|
28 | You should have received a copy of the GNU General Public License
|
---|
29 | along with this program. If not, see <http://www.gnu.org/licenses/>. */
|
---|
30 |
|
---|
31 | /*****************************************************/
|
---|
32 | /* */
|
---|
33 | /* Distributed SMB/CIFS Server Management Utility */
|
---|
34 | /* */
|
---|
35 | /* The intent was to make the syntax similar */
|
---|
36 | /* to the NET utility (first developed in DOS */
|
---|
37 | /* with additional interesting & useful functions */
|
---|
38 | /* added in later SMB server network operating */
|
---|
39 | /* systems). */
|
---|
40 | /* */
|
---|
41 | /*****************************************************/
|
---|
42 |
|
---|
43 | #include "includes.h"
|
---|
44 | #include "utils/net.h"
|
---|
45 |
|
---|
46 | extern bool AllowDebugChange;
|
---|
47 |
|
---|
48 | #ifdef WITH_FAKE_KASERVER
|
---|
49 | #include "utils/net_afs.h"
|
---|
50 | #endif
|
---|
51 |
|
---|
52 | /***********************************************************************/
|
---|
53 | /* Beginning of internationalization section. Translatable constants */
|
---|
54 | /* should be kept in this area and referenced in the rest of the code. */
|
---|
55 | /* */
|
---|
56 | /* No functions, outside of Samba or LSB (Linux Standards Base) should */
|
---|
57 | /* be used (if possible). */
|
---|
58 | /***********************************************************************/
|
---|
59 |
|
---|
60 | #define YES_STRING "Yes"
|
---|
61 | #define NO_STRING "No"
|
---|
62 |
|
---|
63 | /***********************************************************************/
|
---|
64 | /* end of internationalization section */
|
---|
65 | /***********************************************************************/
|
---|
66 |
|
---|
67 | uint32 get_sec_channel_type(const char *param)
|
---|
68 | {
|
---|
69 | if (!(param && *param)) {
|
---|
70 | return get_default_sec_channel();
|
---|
71 | } else {
|
---|
72 | if (strequal(param, "PDC")) {
|
---|
73 | return SEC_CHAN_BDC;
|
---|
74 | } else if (strequal(param, "BDC")) {
|
---|
75 | return SEC_CHAN_BDC;
|
---|
76 | } else if (strequal(param, "MEMBER")) {
|
---|
77 | return SEC_CHAN_WKSTA;
|
---|
78 | #if 0
|
---|
79 | } else if (strequal(param, "DOMAIN")) {
|
---|
80 | return SEC_CHAN_DOMAIN;
|
---|
81 | #endif
|
---|
82 | } else {
|
---|
83 | return get_default_sec_channel();
|
---|
84 | }
|
---|
85 | }
|
---|
86 | }
|
---|
87 |
|
---|
88 | static int net_changetrustpw(struct net_context *c, int argc, const char **argv)
|
---|
89 | {
|
---|
90 | if (net_ads_check_our_domain(c) == 0)
|
---|
91 | return net_ads_changetrustpw(c, argc, argv);
|
---|
92 |
|
---|
93 | return net_rpc_changetrustpw(c, argc, argv);
|
---|
94 | }
|
---|
95 |
|
---|
96 | static void set_line_buffering(FILE *f)
|
---|
97 | {
|
---|
98 | setvbuf(f, NULL, _IOLBF, 0);
|
---|
99 | }
|
---|
100 |
|
---|
101 | static int net_changesecretpw(struct net_context *c, int argc,
|
---|
102 | const char **argv)
|
---|
103 | {
|
---|
104 | char *trust_pw;
|
---|
105 | uint32 sec_channel_type = SEC_CHAN_WKSTA;
|
---|
106 |
|
---|
107 | if(c->opt_force) {
|
---|
108 | if (c->opt_stdin) {
|
---|
109 | set_line_buffering(stdin);
|
---|
110 | set_line_buffering(stdout);
|
---|
111 | set_line_buffering(stderr);
|
---|
112 | }
|
---|
113 |
|
---|
114 | trust_pw = get_pass("Enter machine password: ", c->opt_stdin);
|
---|
115 |
|
---|
116 | if (!secrets_store_machine_password(trust_pw, lp_workgroup(), sec_channel_type)) {
|
---|
117 | d_fprintf(stderr, "Unable to write the machine account password in the secrets database");
|
---|
118 | return 1;
|
---|
119 | }
|
---|
120 | else {
|
---|
121 | d_printf("Modified trust account password in secrets database\n");
|
---|
122 | }
|
---|
123 | }
|
---|
124 | else {
|
---|
125 | d_printf("Machine account password change requires the -f flag.\n");
|
---|
126 | d_printf("Do NOT use this function unless you know what it does!\n");
|
---|
127 | d_printf("This function will change the ADS Domain member machine account password in the secrets.tdb file!\n");
|
---|
128 | }
|
---|
129 |
|
---|
130 | return 0;
|
---|
131 | }
|
---|
132 |
|
---|
133 | /*
|
---|
134 | Retrieve our local SID or the SID for the specified name
|
---|
135 | */
|
---|
136 | static int net_getlocalsid(struct net_context *c, int argc, const char **argv)
|
---|
137 | {
|
---|
138 | DOM_SID sid;
|
---|
139 | const char *name;
|
---|
140 | fstring sid_str;
|
---|
141 |
|
---|
142 | if (argc >= 1) {
|
---|
143 | name = argv[0];
|
---|
144 | }
|
---|
145 | else {
|
---|
146 | name = global_myname();
|
---|
147 | }
|
---|
148 |
|
---|
149 | if(!initialize_password_db(false, NULL)) {
|
---|
150 | DEBUG(0, ("WARNING: Could not open passdb - local sid may not reflect passdb\n"
|
---|
151 | "backend knowledge (such as the sid stored in LDAP)\n"));
|
---|
152 | }
|
---|
153 |
|
---|
154 | /* first check to see if we can even access secrets, so we don't
|
---|
155 | panic when we can't. */
|
---|
156 |
|
---|
157 | if (!secrets_init()) {
|
---|
158 | d_fprintf(stderr, "Unable to open secrets.tdb. Can't fetch domain SID for name: %s\n", name);
|
---|
159 | return 1;
|
---|
160 | }
|
---|
161 |
|
---|
162 | /* Generate one, if it doesn't exist */
|
---|
163 | get_global_sam_sid();
|
---|
164 |
|
---|
165 | if (!secrets_fetch_domain_sid(name, &sid)) {
|
---|
166 | DEBUG(0, ("Can't fetch domain SID for name: %s\n", name));
|
---|
167 | return 1;
|
---|
168 | }
|
---|
169 | sid_to_fstring(sid_str, &sid);
|
---|
170 | d_printf("SID for domain %s is: %s\n", name, sid_str);
|
---|
171 | return 0;
|
---|
172 | }
|
---|
173 |
|
---|
174 | static int net_setlocalsid(struct net_context *c, int argc, const char **argv)
|
---|
175 | {
|
---|
176 | DOM_SID sid;
|
---|
177 |
|
---|
178 | if ( (argc != 1)
|
---|
179 | || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
|
---|
180 | || (!string_to_sid(&sid, argv[0]))
|
---|
181 | || (sid.num_auths != 4)) {
|
---|
182 | d_printf("usage: net setlocalsid S-1-5-21-x-y-z\n");
|
---|
183 | return 1;
|
---|
184 | }
|
---|
185 |
|
---|
186 | if (!secrets_store_domain_sid(global_myname(), &sid)) {
|
---|
187 | DEBUG(0,("Can't store domain SID as a pdc/bdc.\n"));
|
---|
188 | return 1;
|
---|
189 | }
|
---|
190 |
|
---|
191 | return 0;
|
---|
192 | }
|
---|
193 |
|
---|
194 | static int net_setdomainsid(struct net_context *c, int argc, const char **argv)
|
---|
195 | {
|
---|
196 | DOM_SID sid;
|
---|
197 |
|
---|
198 | if ( (argc != 1)
|
---|
199 | || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
|
---|
200 | || (!string_to_sid(&sid, argv[0]))
|
---|
201 | || (sid.num_auths != 4)) {
|
---|
202 | d_printf("usage: net setdomainsid S-1-5-21-x-y-z\n");
|
---|
203 | return 1;
|
---|
204 | }
|
---|
205 |
|
---|
206 | if (!secrets_store_domain_sid(lp_workgroup(), &sid)) {
|
---|
207 | DEBUG(0,("Can't store domain SID.\n"));
|
---|
208 | return 1;
|
---|
209 | }
|
---|
210 |
|
---|
211 | return 0;
|
---|
212 | }
|
---|
213 |
|
---|
214 | static int net_getdomainsid(struct net_context *c, int argc, const char **argv)
|
---|
215 | {
|
---|
216 | DOM_SID domain_sid;
|
---|
217 | fstring sid_str;
|
---|
218 |
|
---|
219 | if (argc > 0) {
|
---|
220 | d_printf("usage: net getdomainsid\n");
|
---|
221 | return 1;
|
---|
222 | }
|
---|
223 |
|
---|
224 | if(!initialize_password_db(false, NULL)) {
|
---|
225 | DEBUG(0, ("WARNING: Could not open passdb - domain SID may "
|
---|
226 | "not reflect passdb\n"
|
---|
227 | "backend knowledge (such as the SID stored in "
|
---|
228 | "LDAP)\n"));
|
---|
229 | }
|
---|
230 |
|
---|
231 | /* first check to see if we can even access secrets, so we don't
|
---|
232 | panic when we can't. */
|
---|
233 |
|
---|
234 | if (!secrets_init()) {
|
---|
235 | d_fprintf(stderr, "Unable to open secrets.tdb. Can't fetch domain"
|
---|
236 | "SID for name: %s\n", get_global_sam_name());
|
---|
237 | return 1;
|
---|
238 | }
|
---|
239 |
|
---|
240 | /* Generate one, if it doesn't exist */
|
---|
241 | get_global_sam_sid();
|
---|
242 |
|
---|
243 | if (!secrets_fetch_domain_sid(global_myname(), &domain_sid)) {
|
---|
244 | d_fprintf(stderr, "Could not fetch local SID\n");
|
---|
245 | return 1;
|
---|
246 | }
|
---|
247 | sid_to_fstring(sid_str, &domain_sid);
|
---|
248 | d_printf("SID for local machine %s is: %s\n", global_myname(), sid_str);
|
---|
249 |
|
---|
250 | if (!secrets_fetch_domain_sid(c->opt_workgroup, &domain_sid)) {
|
---|
251 | d_fprintf(stderr, "Could not fetch domain SID\n");
|
---|
252 | return 1;
|
---|
253 | }
|
---|
254 |
|
---|
255 | sid_to_fstring(sid_str, &domain_sid);
|
---|
256 | d_printf("SID for domain %s is: %s\n", c->opt_workgroup, sid_str);
|
---|
257 |
|
---|
258 | return 0;
|
---|
259 | }
|
---|
260 |
|
---|
261 | static bool search_maxrid(struct pdb_search *search, const char *type,
|
---|
262 | uint32 *max_rid)
|
---|
263 | {
|
---|
264 | struct samr_displayentry *entries;
|
---|
265 | uint32 i, num_entries;
|
---|
266 |
|
---|
267 | if (search == NULL) {
|
---|
268 | d_fprintf(stderr, "get_maxrid: Could not search %s\n", type);
|
---|
269 | return false;
|
---|
270 | }
|
---|
271 |
|
---|
272 | num_entries = pdb_search_entries(search, 0, 0xffffffff, &entries);
|
---|
273 | for (i=0; i<num_entries; i++)
|
---|
274 | *max_rid = MAX(*max_rid, entries[i].rid);
|
---|
275 | pdb_search_destroy(search);
|
---|
276 | return true;
|
---|
277 | }
|
---|
278 |
|
---|
279 | static uint32 get_maxrid(void)
|
---|
280 | {
|
---|
281 | uint32 max_rid = 0;
|
---|
282 |
|
---|
283 | if (!search_maxrid(pdb_search_users(0), "users", &max_rid))
|
---|
284 | return 0;
|
---|
285 |
|
---|
286 | if (!search_maxrid(pdb_search_groups(), "groups", &max_rid))
|
---|
287 | return 0;
|
---|
288 |
|
---|
289 | if (!search_maxrid(pdb_search_aliases(get_global_sam_sid()),
|
---|
290 | "aliases", &max_rid))
|
---|
291 | return 0;
|
---|
292 |
|
---|
293 | return max_rid;
|
---|
294 | }
|
---|
295 |
|
---|
296 | static int net_maxrid(struct net_context *c, int argc, const char **argv)
|
---|
297 | {
|
---|
298 | uint32 rid;
|
---|
299 |
|
---|
300 | if (argc != 0) {
|
---|
301 | DEBUG(0, ("usage: net maxrid\n"));
|
---|
302 | return 1;
|
---|
303 | }
|
---|
304 |
|
---|
305 | if ((rid = get_maxrid()) == 0) {
|
---|
306 | DEBUG(0, ("can't get current maximum rid\n"));
|
---|
307 | return 1;
|
---|
308 | }
|
---|
309 |
|
---|
310 | d_printf("Currently used maximum rid: %d\n", rid);
|
---|
311 |
|
---|
312 | return 0;
|
---|
313 | }
|
---|
314 |
|
---|
315 | /* main function table */
|
---|
316 | static struct functable net_func[] = {
|
---|
317 | {
|
---|
318 | "rpc",
|
---|
319 | net_rpc,
|
---|
320 | NET_TRANSPORT_RPC,
|
---|
321 | "Run functions using RPC transport",
|
---|
322 | " Use 'net help rpc' to get more extensive information about "
|
---|
323 | "'net rpc' commands."
|
---|
324 | },
|
---|
325 | {
|
---|
326 | "rap",
|
---|
327 | net_rap,
|
---|
328 | NET_TRANSPORT_RAP,
|
---|
329 | "Run functions using RAP transport",
|
---|
330 | " Use 'net help rap' to get more extensive information about "
|
---|
331 | "'net rap' commands."
|
---|
332 | },
|
---|
333 | {
|
---|
334 | "ads",
|
---|
335 | net_ads,
|
---|
336 | NET_TRANSPORT_ADS,
|
---|
337 | "Run functions using ADS transport",
|
---|
338 | " Use 'net help ads' to get more extensive information about "
|
---|
339 | "'net ads' commands."
|
---|
340 | },
|
---|
341 |
|
---|
342 | /* eventually these should auto-choose the transport ... */
|
---|
343 | {
|
---|
344 | "file",
|
---|
345 | net_file,
|
---|
346 | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
347 | "Functions on remote opened files",
|
---|
348 | " Use 'net help file' to get more information about 'net "
|
---|
349 | "file' commands."
|
---|
350 | },
|
---|
351 | {
|
---|
352 | "share",
|
---|
353 | net_share,
|
---|
354 | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
355 | "Functions on shares",
|
---|
356 | " Use 'net help share' to get more information about 'net "
|
---|
357 | "share' commands."
|
---|
358 | },
|
---|
359 | {
|
---|
360 | "session",
|
---|
361 | net_rap_session,
|
---|
362 | NET_TRANSPORT_RAP,
|
---|
363 | "Manage sessions",
|
---|
364 | " Use 'net help session' to get more information about 'net "
|
---|
365 | "session' commands."
|
---|
366 | },
|
---|
367 | {
|
---|
368 | "server",
|
---|
369 | net_rap_server,
|
---|
370 | NET_TRANSPORT_RAP,
|
---|
371 | "List servers in workgroup",
|
---|
372 | " Use 'net help server' to get more information about 'net "
|
---|
373 | "server' commands."
|
---|
374 | },
|
---|
375 | {
|
---|
376 | "domain",
|
---|
377 | net_rap_domain,
|
---|
378 | NET_TRANSPORT_RAP,
|
---|
379 | "List domains/workgroups on network",
|
---|
380 | " Use 'net help domain' to get more information about 'net "
|
---|
381 | "domain' commands."
|
---|
382 | },
|
---|
383 | {
|
---|
384 | "printq",
|
---|
385 | net_rap_printq,
|
---|
386 | NET_TRANSPORT_RAP,
|
---|
387 | "Modify printer queue",
|
---|
388 | " Use 'net help printq' to get more information about 'net "
|
---|
389 | "printq' commands."
|
---|
390 | },
|
---|
391 | {
|
---|
392 | "user",
|
---|
393 | net_user,
|
---|
394 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
395 | "Manage users",
|
---|
396 | " Use 'net help user' to get more information about 'net "
|
---|
397 | "user' commands."
|
---|
398 | },
|
---|
399 | {
|
---|
400 | "group",
|
---|
401 | net_group,
|
---|
402 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
403 | "Manage groups",
|
---|
404 | " Use 'net help group' to get more information about 'net "
|
---|
405 | "group' commands."
|
---|
406 | },
|
---|
407 | {
|
---|
408 | "groupmap",
|
---|
409 | net_groupmap,
|
---|
410 | NET_TRANSPORT_LOCAL,
|
---|
411 | "Manage group mappings",
|
---|
412 | " Use 'net help groupmap' to get more information about 'net "
|
---|
413 | "groupmap' commands."
|
---|
414 | },
|
---|
415 | {
|
---|
416 | "sam",
|
---|
417 | net_sam,
|
---|
418 | NET_TRANSPORT_LOCAL,
|
---|
419 | "Functions on the SAM database",
|
---|
420 | " Use 'net help sam' to get more information about 'net sam' "
|
---|
421 | "commands."
|
---|
422 | },
|
---|
423 | {
|
---|
424 | "validate",
|
---|
425 | net_rap_validate,
|
---|
426 | NET_TRANSPORT_RAP,
|
---|
427 | "Validate username and password",
|
---|
428 | " Use 'net help validate' to get more information about 'net "
|
---|
429 | "validate' commands."
|
---|
430 | },
|
---|
431 | {
|
---|
432 | "groupmember",
|
---|
433 | net_rap_groupmember,
|
---|
434 | NET_TRANSPORT_RAP,
|
---|
435 | "Modify group memberships",
|
---|
436 | " Use 'net help groupmember' to get more information about "
|
---|
437 | "'net groupmember' commands."
|
---|
438 | },
|
---|
439 | { "admin",
|
---|
440 | net_rap_admin,
|
---|
441 | NET_TRANSPORT_RAP,
|
---|
442 | "Execute remote command on a remote OS/2 server",
|
---|
443 | " Use 'net help admin' to get more information about 'net "
|
---|
444 | "admin' commands."
|
---|
445 | },
|
---|
446 | { "service",
|
---|
447 | net_rap_service,
|
---|
448 | NET_TRANSPORT_RAP,
|
---|
449 | "List/modify running services",
|
---|
450 | " Use 'net help service' to get more information about 'net "
|
---|
451 | "service' commands."
|
---|
452 | },
|
---|
453 | {
|
---|
454 | "password",
|
---|
455 | net_rap_password,
|
---|
456 | NET_TRANSPORT_RAP,
|
---|
457 | "Change user password on target server",
|
---|
458 | " Use 'net help password' to get more information about 'net "
|
---|
459 | "password' commands."
|
---|
460 | },
|
---|
461 | { "changetrustpw",
|
---|
462 | net_changetrustpw,
|
---|
463 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
|
---|
464 | "Change the trust password",
|
---|
465 | " Use 'net help changetrustpw' to get more information about "
|
---|
466 | "'net changetrustpw'."
|
---|
467 | },
|
---|
468 | { "changesecretpw",
|
---|
469 | net_changesecretpw,
|
---|
470 | NET_TRANSPORT_LOCAL,
|
---|
471 | "Change the secret password",
|
---|
472 | " net [options] changesecretpw\n"
|
---|
473 | " Change the ADS domain member machine account password in "
|
---|
474 | "secrets.tdb.\n"
|
---|
475 | " Do NOT use this function unless you know what it does.\n"
|
---|
476 | " Requires the -f flag to work."
|
---|
477 | },
|
---|
478 | { "time",
|
---|
479 | net_time,
|
---|
480 | NET_TRANSPORT_LOCAL,
|
---|
481 | "Show/set time",
|
---|
482 | " Use 'net help time' to get more information about 'net "
|
---|
483 | "time' commands."
|
---|
484 | },
|
---|
485 | { "lookup",
|
---|
486 | net_lookup,
|
---|
487 | NET_TRANSPORT_LOCAL,
|
---|
488 | "Look up host names/IP addresses",
|
---|
489 | " Use 'net help lookup' to get more information about 'net "
|
---|
490 | "lookup' commands."
|
---|
491 | },
|
---|
492 | { "join",
|
---|
493 | net_join,
|
---|
494 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
|
---|
495 | "Join a domain/AD",
|
---|
496 | " Use 'net help join' to get more information about 'net "
|
---|
497 | "join'."
|
---|
498 | },
|
---|
499 | { "dom",
|
---|
500 | net_dom,
|
---|
501 | NET_TRANSPORT_LOCAL,
|
---|
502 | "Join/unjoin (remote) machines to/from a domain/AD",
|
---|
503 | " Use 'net help dom' to get more information about 'net dom' "
|
---|
504 | "commands."
|
---|
505 | },
|
---|
506 | { "cache",
|
---|
507 | net_cache,
|
---|
508 | NET_TRANSPORT_LOCAL,
|
---|
509 | "Operate on the cache tdb file",
|
---|
510 | " Use 'net help cache' to get more information about 'net "
|
---|
511 | "cache' commands."
|
---|
512 | },
|
---|
513 | { "getlocalsid",
|
---|
514 | net_getlocalsid,
|
---|
515 | NET_TRANSPORT_LOCAL,
|
---|
516 | "Get the SID for the local domain",
|
---|
517 | " net getlocalsid"
|
---|
518 | },
|
---|
519 | { "setlocalsid",
|
---|
520 | net_setlocalsid,
|
---|
521 | NET_TRANSPORT_LOCAL,
|
---|
522 | "Set the SID for the local domain",
|
---|
523 | " net setlocalsid S-1-5-21-x-y-z"
|
---|
524 | },
|
---|
525 | { "setdomainsid",
|
---|
526 | net_setdomainsid,
|
---|
527 | NET_TRANSPORT_LOCAL,
|
---|
528 | "Set domain SID on member servers",
|
---|
529 | " net setdomainsid S-1-5-21-x-y-z"
|
---|
530 | },
|
---|
531 | { "getdomainsid",
|
---|
532 | net_getdomainsid,
|
---|
533 | NET_TRANSPORT_LOCAL,
|
---|
534 | "Get domain SID on member servers",
|
---|
535 | " net getdomainsid"
|
---|
536 | },
|
---|
537 | { "maxrid",
|
---|
538 | net_maxrid,
|
---|
539 | NET_TRANSPORT_LOCAL,
|
---|
540 | "Display the maximul RID currently used",
|
---|
541 | " net maxrid"
|
---|
542 | },
|
---|
543 | { "idmap",
|
---|
544 | net_idmap,
|
---|
545 | NET_TRANSPORT_LOCAL,
|
---|
546 | "IDmap functions",
|
---|
547 | " Use 'net help idmap to get more information about 'net "
|
---|
548 | "idmap' commands."
|
---|
549 | },
|
---|
550 | { "status",
|
---|
551 | net_status,
|
---|
552 | NET_TRANSPORT_LOCAL,
|
---|
553 | "Display server status",
|
---|
554 | " Use 'net help status' to get more information about 'net "
|
---|
555 | "status' commands."
|
---|
556 | },
|
---|
557 | { "usershare",
|
---|
558 | net_usershare,
|
---|
559 | NET_TRANSPORT_LOCAL,
|
---|
560 | "Manage user-modifiable shares",
|
---|
561 | " Use 'net help usershare to get more information about 'net "
|
---|
562 | "usershare' commands."
|
---|
563 | },
|
---|
564 | { "usersidlist",
|
---|
565 | net_usersidlist,
|
---|
566 | NET_TRANSPORT_RPC,
|
---|
567 | "Display list of all users with SID",
|
---|
568 | " Use 'net help usersidlist' to get more information about "
|
---|
569 | "'net usersidlist'."
|
---|
570 | },
|
---|
571 | { "conf",
|
---|
572 | net_conf,
|
---|
573 | NET_TRANSPORT_LOCAL,
|
---|
574 | "Manage Samba registry based configuration",
|
---|
575 | " Use 'net help conf' to get more information about 'net "
|
---|
576 | "conf' commands."
|
---|
577 | },
|
---|
578 | { "registry",
|
---|
579 | net_registry,
|
---|
580 | NET_TRANSPORT_LOCAL,
|
---|
581 | "Manage the Samba registry",
|
---|
582 | " Use 'net help registry' to get more information about 'net "
|
---|
583 | "registry' commands."
|
---|
584 | },
|
---|
585 | #ifdef WITH_FAKE_KASERVER
|
---|
586 | { "afs",
|
---|
587 | net_afs,
|
---|
588 | NET_TRANSPORT_LOCAL,
|
---|
589 | "Manage AFS tokens",
|
---|
590 | " Use 'net help afs' to get more information about 'net afs' "
|
---|
591 | "commands."
|
---|
592 | },
|
---|
593 | #endif
|
---|
594 |
|
---|
595 | { "help",
|
---|
596 | net_help,
|
---|
597 | NET_TRANSPORT_LOCAL,
|
---|
598 | "Print usage information",
|
---|
599 | " Use 'net help help' to list usage information for 'net' "
|
---|
600 | "commands."
|
---|
601 | },
|
---|
602 | {NULL, NULL, 0, NULL, NULL}
|
---|
603 | };
|
---|
604 |
|
---|
605 |
|
---|
606 | /****************************************************************************
|
---|
607 | main program
|
---|
608 | ****************************************************************************/
|
---|
609 | int main(int argc, const char **argv)
|
---|
610 | {
|
---|
611 | int opt,i;
|
---|
612 | char *p;
|
---|
613 | int rc = 0;
|
---|
614 | int argc_new = 0;
|
---|
615 | const char ** argv_new;
|
---|
616 | poptContext pc;
|
---|
617 | TALLOC_CTX *frame = talloc_stackframe();
|
---|
618 | struct net_context *c = talloc_zero(frame, struct net_context);
|
---|
619 |
|
---|
620 | struct poptOption long_options[] = {
|
---|
621 | {"help", 'h', POPT_ARG_NONE, 0, 'h'},
|
---|
622 | {"workgroup", 'w', POPT_ARG_STRING, &c->opt_target_workgroup},
|
---|
623 | {"user", 'U', POPT_ARG_STRING, &c->opt_user_name, 'U'},
|
---|
624 | {"ipaddress", 'I', POPT_ARG_STRING, 0,'I'},
|
---|
625 | {"port", 'p', POPT_ARG_INT, &c->opt_port},
|
---|
626 | {"myname", 'n', POPT_ARG_STRING, &c->opt_requester_name},
|
---|
627 | {"server", 'S', POPT_ARG_STRING, &c->opt_host},
|
---|
628 | {"encrypt", 'e', POPT_ARG_NONE, NULL, 'e', "Encrypt SMB transport (UNIX extended servers only)" },
|
---|
629 | {"container", 'c', POPT_ARG_STRING, &c->opt_container},
|
---|
630 | {"comment", 'C', POPT_ARG_STRING, &c->opt_comment},
|
---|
631 | {"maxusers", 'M', POPT_ARG_INT, &c->opt_maxusers},
|
---|
632 | {"flags", 'F', POPT_ARG_INT, &c->opt_flags},
|
---|
633 | {"long", 'l', POPT_ARG_NONE, &c->opt_long_list_entries},
|
---|
634 | {"reboot", 'r', POPT_ARG_NONE, &c->opt_reboot},
|
---|
635 | {"force", 'f', POPT_ARG_NONE, &c->opt_force},
|
---|
636 | {"stdin", 'i', POPT_ARG_NONE, &c->opt_stdin},
|
---|
637 | {"timeout", 't', POPT_ARG_INT, &c->opt_timeout},
|
---|
638 | {"request-timeout",0,POPT_ARG_INT, &c->opt_request_timeout},
|
---|
639 | {"machine-pass",'P', POPT_ARG_NONE, &c->opt_machine_pass},
|
---|
640 | {"kerberos", 'k', POPT_ARG_NONE, &c->opt_kerberos},
|
---|
641 | {"myworkgroup", 'W', POPT_ARG_STRING, &c->opt_workgroup},
|
---|
642 | {"verbose", 'v', POPT_ARG_NONE, &c->opt_verbose},
|
---|
643 | {"test", 'T', POPT_ARG_NONE, &c->opt_testmode},
|
---|
644 | /* Options for 'net groupmap set' */
|
---|
645 | {"local", 'L', POPT_ARG_NONE, &c->opt_localgroup},
|
---|
646 | {"domain", 'D', POPT_ARG_NONE, &c->opt_domaingroup},
|
---|
647 | {"ntname", 'N', POPT_ARG_STRING, &c->opt_newntname},
|
---|
648 | {"rid", 'R', POPT_ARG_INT, &c->opt_rid},
|
---|
649 | /* Options for 'net rpc share migrate' */
|
---|
650 | {"acls", 0, POPT_ARG_NONE, &c->opt_acls},
|
---|
651 | {"attrs", 0, POPT_ARG_NONE, &c->opt_attrs},
|
---|
652 | {"timestamps", 0, POPT_ARG_NONE, &c->opt_timestamps},
|
---|
653 | {"exclude", 'X', POPT_ARG_STRING, &c->opt_exclude},
|
---|
654 | {"destination", 0, POPT_ARG_STRING, &c->opt_destination},
|
---|
655 | {"tallocreport", 0, POPT_ARG_NONE, &c->do_talloc_report},
|
---|
656 | /* Options for 'net rpc vampire (keytab)' */
|
---|
657 | {"force-full-repl", 0, POPT_ARG_NONE, &c->opt_force_full_repl},
|
---|
658 | {"single-obj-repl", 0, POPT_ARG_NONE, &c->opt_single_obj_repl},
|
---|
659 | {"clean-old-entries", 0, POPT_ARG_NONE, &c->opt_clean_old_entries},
|
---|
660 |
|
---|
661 | POPT_COMMON_SAMBA
|
---|
662 | { 0, 0, 0, 0}
|
---|
663 | };
|
---|
664 |
|
---|
665 |
|
---|
666 | zero_sockaddr(&c->opt_dest_ip);
|
---|
667 |
|
---|
668 | load_case_tables();
|
---|
669 |
|
---|
670 | /* set default debug level to 0 regardless of what smb.conf sets */
|
---|
671 | DEBUGLEVEL_CLASS[DBGC_ALL] = 0;
|
---|
672 | dbf = x_stderr;
|
---|
673 | c->private_data = net_func;
|
---|
674 |
|
---|
675 | pc = poptGetContext(NULL, argc, (const char **) argv, long_options,
|
---|
676 | POPT_CONTEXT_KEEP_FIRST);
|
---|
677 |
|
---|
678 | while((opt = poptGetNextOpt(pc)) != -1) {
|
---|
679 | switch (opt) {
|
---|
680 | case 'h':
|
---|
681 | c->display_usage = true;
|
---|
682 | break;
|
---|
683 | case 'e':
|
---|
684 | c->smb_encrypt = true;
|
---|
685 | break;
|
---|
686 | case 'I':
|
---|
687 | if (!interpret_string_addr(&c->opt_dest_ip,
|
---|
688 | poptGetOptArg(pc), 0)) {
|
---|
689 | d_fprintf(stderr, "\nInvalid ip address specified\n");
|
---|
690 | } else {
|
---|
691 | c->opt_have_ip = true;
|
---|
692 | }
|
---|
693 | break;
|
---|
694 | case 'U':
|
---|
695 | c->opt_user_specified = true;
|
---|
696 | c->opt_user_name = SMB_STRDUP(c->opt_user_name);
|
---|
697 | p = strchr(c->opt_user_name,'%');
|
---|
698 | if (p) {
|
---|
699 | *p = 0;
|
---|
700 | c->opt_password = p+1;
|
---|
701 | }
|
---|
702 | break;
|
---|
703 | default:
|
---|
704 | d_fprintf(stderr, "\nInvalid option %s: %s\n",
|
---|
705 | poptBadOption(pc, 0), poptStrerror(opt));
|
---|
706 | net_help(c, argc, argv);
|
---|
707 | exit(1);
|
---|
708 | }
|
---|
709 | }
|
---|
710 |
|
---|
711 | /*
|
---|
712 | * Don't load debug level from smb.conf. It should be
|
---|
713 | * set by cmdline arg or remain default (0)
|
---|
714 | */
|
---|
715 | AllowDebugChange = false;
|
---|
716 | lp_load(get_dyn_CONFIGFILE(), true, false, false, true);
|
---|
717 |
|
---|
718 | argv_new = (const char **)poptGetArgs(pc);
|
---|
719 |
|
---|
720 | argc_new = argc;
|
---|
721 | for (i=0; i<argc; i++) {
|
---|
722 | if (argv_new[i] == NULL) {
|
---|
723 | argc_new = i;
|
---|
724 | break;
|
---|
725 | }
|
---|
726 | }
|
---|
727 |
|
---|
728 | if (c->do_talloc_report) {
|
---|
729 | talloc_enable_leak_report();
|
---|
730 | }
|
---|
731 |
|
---|
732 | if (c->opt_requester_name) {
|
---|
733 | set_global_myname(c->opt_requester_name);
|
---|
734 | }
|
---|
735 |
|
---|
736 | if (!c->opt_user_name && getenv("LOGNAME")) {
|
---|
737 | c->opt_user_name = getenv("LOGNAME");
|
---|
738 | }
|
---|
739 |
|
---|
740 | if (!c->opt_workgroup) {
|
---|
741 | c->opt_workgroup = smb_xstrdup(lp_workgroup());
|
---|
742 | }
|
---|
743 |
|
---|
744 | if (!c->opt_target_workgroup) {
|
---|
745 | c->opt_target_workgroup = smb_xstrdup(lp_workgroup());
|
---|
746 | }
|
---|
747 |
|
---|
748 | if (!init_names())
|
---|
749 | exit(1);
|
---|
750 |
|
---|
751 | load_interfaces();
|
---|
752 |
|
---|
753 | /* this makes sure that when we do things like call scripts,
|
---|
754 | that it won't assert becouse we are not root */
|
---|
755 | sec_init();
|
---|
756 |
|
---|
757 | if (c->opt_machine_pass) {
|
---|
758 | /* it is very useful to be able to make ads queries as the
|
---|
759 | machine account for testing purposes and for domain leave */
|
---|
760 |
|
---|
761 | net_use_krb_machine_account(c);
|
---|
762 | }
|
---|
763 |
|
---|
764 | if (!c->opt_password) {
|
---|
765 | c->opt_password = getenv("PASSWD");
|
---|
766 | }
|
---|
767 |
|
---|
768 | rc = net_run_function(c, argc_new-1, argv_new+1, "net", net_func);
|
---|
769 |
|
---|
770 | DEBUG(2,("return code = %d\n", rc));
|
---|
771 |
|
---|
772 | libnetapi_free(c->netapi_ctx);
|
---|
773 |
|
---|
774 | poptFreeContext(pc);
|
---|
775 |
|
---|
776 | TALLOC_FREE(frame);
|
---|
777 | return rc;
|
---|
778 | }
|
---|