source: trunk/server/source3/rpcclient/rpcclient.c

Last change on this file was 920, checked in by Silvan Scherrer, 9 years ago

Samba Server: apply latest security patches to trunk
File size: 30.6 KB
RevLine 
[918]1/*
2 Unix SMB/CIFS implementation.
3 RPC pipe client
4
5 Copyright (C) Tim Potter 2000-2001
6 Copyright (C) Martin Pool 2003
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20*/
21
22#include "includes.h"
23#include "popt_common.h"
24#include "rpcclient.h"
25#include "../libcli/auth/libcli_auth.h"
26#include "../librpc/gen_ndr/ndr_lsa_c.h"
27#include "rpc_client/cli_lsarpc.h"
28#include "../librpc/gen_ndr/ndr_netlogon.h"
29#include "rpc_client/cli_netlogon.h"
30#include "../libcli/smbreadline/smbreadline.h"
31#include "../libcli/security/security.h"
32#include "passdb.h"
33#include "libsmb/libsmb.h"
34
35enum pipe_auth_type_spnego {
36 PIPE_AUTH_TYPE_SPNEGO_NONE = 0,
37 PIPE_AUTH_TYPE_SPNEGO_NTLMSSP,
38 PIPE_AUTH_TYPE_SPNEGO_KRB5
39};
40
41struct dom_sid domain_sid;
42
43static enum dcerpc_AuthType pipe_default_auth_type = DCERPC_AUTH_TYPE_NONE;
44static enum pipe_auth_type_spnego pipe_default_auth_spnego_type = 0;
45static enum dcerpc_AuthLevel pipe_default_auth_level = DCERPC_AUTH_LEVEL_NONE;
46static unsigned int timeout = 0;
47static enum dcerpc_transport_t default_transport = NCACN_NP;
48
49struct user_auth_info *rpcclient_auth_info;
50
51/* List to hold groups of commands.
52 *
53 * Commands are defined in a list of arrays: arrays are easy to
54 * statically declare, and lists are easier to dynamically extend.
55 */
56
57static struct cmd_list {
58 struct cmd_list *prev, *next;
59 struct cmd_set *cmd_set;
60} *cmd_list;
61
62/****************************************************************************
63handle completion of commands for readline
64****************************************************************************/
65static char **completion_fn(const char *text, int start, int end)
66{
67#define MAX_COMPLETIONS 1000
68 char **matches;
69 int i, count=0;
70 struct cmd_list *commands = cmd_list;
71
72#if 0 /* JERRY */
73 /* FIXME!!! -- what to do when completing argument? */
74 /* for words not at the start of the line fallback
75 to filename completion */
76 if (start)
77 return NULL;
78#endif
79
80 /* make sure we have a list of valid commands */
81 if (!commands) {
82 return NULL;
83 }
84
85 matches = SMB_MALLOC_ARRAY(char *, MAX_COMPLETIONS);
86 if (!matches) {
87 return NULL;
88 }
89
90 matches[count++] = SMB_STRDUP(text);
91 if (!matches[0]) {
92 SAFE_FREE(matches);
93 return NULL;
94 }
95
96 while (commands && count < MAX_COMPLETIONS-1) {
97 if (!commands->cmd_set) {
98 break;
99 }
100
101 for (i=0; commands->cmd_set[i].name; i++) {
102 if ((strncmp(text, commands->cmd_set[i].name, strlen(text)) == 0) &&
103 (( commands->cmd_set[i].returntype == RPC_RTYPE_NTSTATUS &&
104 commands->cmd_set[i].ntfn ) ||
105 ( commands->cmd_set[i].returntype == RPC_RTYPE_WERROR &&
106 commands->cmd_set[i].wfn))) {
107 matches[count] = SMB_STRDUP(commands->cmd_set[i].name);
108 if (!matches[count]) {
109 for (i = 0; i < count; i++) {
110 SAFE_FREE(matches[count]);
111 }
112 SAFE_FREE(matches);
113 return NULL;
114 }
115 count++;
116 }
117 }
118 commands = commands->next;
119 }
120
121 if (count == 2) {
122 SAFE_FREE(matches[0]);
123 matches[0] = SMB_STRDUP(matches[1]);
124 }
125 matches[count] = NULL;
126 return matches;
127}
128
129static char *next_command (char **cmdstr)
130{
131 char *command;
132 char *p;
133
134 if (!cmdstr || !(*cmdstr))
135 return NULL;
136
137 p = strchr_m(*cmdstr, ';');
138 if (p)
139 *p = '\0';
140 command = SMB_STRDUP(*cmdstr);
141 if (p)
142 *cmdstr = p + 1;
143 else
144 *cmdstr = NULL;
145
146 return command;
147}
148
149/* Fetch the SID for this computer */
150
151static void fetch_machine_sid(struct cli_state *cli)
152{
153 struct policy_handle pol;
154 NTSTATUS result = NT_STATUS_OK, status;
155 static bool got_domain_sid;
156 TALLOC_CTX *mem_ctx;
157 struct rpc_pipe_client *lsapipe = NULL;
158 union lsa_PolicyInformation *info = NULL;
159 struct dcerpc_binding_handle *b;
160
161 if (got_domain_sid) return;
162
163 if (!(mem_ctx=talloc_init("fetch_machine_sid"))) {
164 DEBUG(0,("fetch_machine_sid: talloc_init returned NULL!\n"));
165 goto error;
166 }
167
168 result = cli_rpc_pipe_open_noauth(cli, &ndr_table_lsarpc.syntax_id,
169 &lsapipe);
170 if (!NT_STATUS_IS_OK(result)) {
171 fprintf(stderr, "could not initialise lsa pipe. Error was %s\n", nt_errstr(result) );
172 goto error;
173 }
174
175 b = lsapipe->binding_handle;
176
177 result = rpccli_lsa_open_policy(lsapipe, mem_ctx, True,
178 SEC_FLAG_MAXIMUM_ALLOWED,
179 &pol);
180 if (!NT_STATUS_IS_OK(result)) {
181 goto error;
182 }
183
184 status = dcerpc_lsa_QueryInfoPolicy(b, mem_ctx,
185 &pol,
186 LSA_POLICY_INFO_ACCOUNT_DOMAIN,
187 &info,
188 &result);
189 if (!NT_STATUS_IS_OK(status)) {
190 result = status;
191 goto error;
192 }
193 if (!NT_STATUS_IS_OK(result)) {
194 goto error;
195 }
196
197 got_domain_sid = True;
198 sid_copy(&domain_sid, info->account_domain.sid);
199
200 dcerpc_lsa_Close(b, mem_ctx, &pol, &result);
201 TALLOC_FREE(lsapipe);
202 talloc_destroy(mem_ctx);
203
204 return;
205
206 error:
207
208 if (lsapipe) {
209 TALLOC_FREE(lsapipe);
210 }
211
212 fprintf(stderr, "could not obtain sid for domain %s\n", cli->domain);
213
214 if (!NT_STATUS_IS_OK(result)) {
215 fprintf(stderr, "error: %s\n", nt_errstr(result));
216 }
217
218 exit(1);
219}
220
221/* List the available commands on a given pipe */
222
223static NTSTATUS cmd_listcommands(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
224 int argc, const char **argv)
225{
226 struct cmd_list *tmp;
227 struct cmd_set *tmp_set;
228 int i;
229
230 /* Usage */
231
232 if (argc != 2) {
233 printf("Usage: %s <pipe>\n", argv[0]);
234 return NT_STATUS_OK;
235 }
236
237 /* Help on one command */
238
239 for (tmp = cmd_list; tmp; tmp = tmp->next)
240 {
241 tmp_set = tmp->cmd_set;
242
243 if (!StrCaseCmp(argv[1], tmp_set->name))
244 {
245 printf("Available commands on the %s pipe:\n\n", tmp_set->name);
246
247 i = 0;
248 tmp_set++;
249 while(tmp_set->name) {
250 printf("%30s", tmp_set->name);
251 tmp_set++;
252 i++;
253 if (i%3 == 0)
254 printf("\n");
255 }
256
257 /* drop out of the loop */
258 break;
259 }
260 }
261 printf("\n\n");
262
263 return NT_STATUS_OK;
264}
265
266/* Display help on commands */
267
268static NTSTATUS cmd_help(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
269 int argc, const char **argv)
270{
271 struct cmd_list *tmp;
272 struct cmd_set *tmp_set;
273
274 /* Usage */
275
276 if (argc > 2) {
277 printf("Usage: %s [command]\n", argv[0]);
278 return NT_STATUS_OK;
279 }
280
281 /* Help on one command */
282
283 if (argc == 2) {
284 for (tmp = cmd_list; tmp; tmp = tmp->next) {
285
286 tmp_set = tmp->cmd_set;
287
288 while(tmp_set->name) {
289 if (strequal(argv[1], tmp_set->name)) {
290 if (tmp_set->usage &&
291 tmp_set->usage[0])
292 printf("%s\n", tmp_set->usage);
293 else
294 printf("No help for %s\n", tmp_set->name);
295
296 return NT_STATUS_OK;
297 }
298
299 tmp_set++;
300 }
301 }
302
303 printf("No such command: %s\n", argv[1]);
304 return NT_STATUS_OK;
305 }
306
307 /* List all commands */
308
309 for (tmp = cmd_list; tmp; tmp = tmp->next) {
310
311 tmp_set = tmp->cmd_set;
312
313 while(tmp_set->name) {
314
315 printf("%15s\t\t%s\n", tmp_set->name,
316 tmp_set->description ? tmp_set->description:
317 "");
318
319 tmp_set++;
320 }
321 }
322
323 return NT_STATUS_OK;
324}
325
326/* Change the debug level */
327
328static NTSTATUS cmd_debuglevel(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
329 int argc, const char **argv)
330{
331 if (argc > 2) {
332 printf("Usage: %s [debuglevel]\n", argv[0]);
333 return NT_STATUS_OK;
334 }
335
336 if (argc == 2) {
337 lp_set_cmdline("log level", argv[1]);
338 }
339
340 printf("debuglevel is %d\n", DEBUGLEVEL);
341
342 return NT_STATUS_OK;
343}
344
345static NTSTATUS cmd_quit(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
346 int argc, const char **argv)
347{
348 exit(0);
349 return NT_STATUS_OK; /* NOTREACHED */
350}
351
352static NTSTATUS cmd_set_ss_level(void)
353{
354 struct cmd_list *tmp;
355
356 /* Close any existing connections not at this level. */
357
358 for (tmp = cmd_list; tmp; tmp = tmp->next) {
359 struct cmd_set *tmp_set;
360
361 for (tmp_set = tmp->cmd_set; tmp_set->name; tmp_set++) {
362 if (tmp_set->rpc_pipe == NULL) {
363 continue;
364 }
365
366 if ((tmp_set->rpc_pipe->auth->auth_type
367 != pipe_default_auth_type)
368 || (tmp_set->rpc_pipe->auth->auth_level
369 != pipe_default_auth_level)) {
370 TALLOC_FREE(tmp_set->rpc_pipe);
371 tmp_set->rpc_pipe = NULL;
372 }
373 }
374 }
375 return NT_STATUS_OK;
376}
377
378static NTSTATUS cmd_set_transport(void)
379{
380 struct cmd_list *tmp;
381
382 /* Close any existing connections not at this level. */
383
384 for (tmp = cmd_list; tmp; tmp = tmp->next) {
385 struct cmd_set *tmp_set;
386
387 for (tmp_set = tmp->cmd_set; tmp_set->name; tmp_set++) {
388 if (tmp_set->rpc_pipe == NULL) {
389 continue;
390 }
391
392 if (tmp_set->rpc_pipe->transport->transport != default_transport) {
393 TALLOC_FREE(tmp_set->rpc_pipe);
394 tmp_set->rpc_pipe = NULL;
395 }
396 }
397 }
398 return NT_STATUS_OK;
399}
400
401static NTSTATUS cmd_sign(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
402 int argc, const char **argv)
403{
404 const char *p = "[KRB5|KRB5_SPNEGO|NTLMSSP|NTLMSSP_SPNEGO|SCHANNEL]";
405 const char *type = "NTLMSSP";
406
407 pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
408 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
409
410 if (argc > 2) {
411 printf("Usage: %s %s\n", argv[0], p);
412 return NT_STATUS_OK;
413 }
414
415 if (argc == 2) {
416 type = argv[1];
417 if (strequal(type, "KRB5")) {
418 pipe_default_auth_type = DCERPC_AUTH_TYPE_KRB5;
419 } else if (strequal(type, "KRB5_SPNEGO")) {
420 pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
421 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
422 } else if (strequal(type, "NTLMSSP")) {
423 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
424 } else if (strequal(type, "NTLMSSP_SPNEGO")) {
425 pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
426 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
427 } else if (strequal(type, "SCHANNEL")) {
428 pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
429 } else {
430 printf("unknown type %s\n", type);
431 printf("Usage: %s %s\n", argv[0], p);
432 return NT_STATUS_INVALID_LEVEL;
433 }
434 }
435
436 d_printf("Setting %s - sign\n", type);
437
438 return cmd_set_ss_level();
439}
440
441static NTSTATUS cmd_seal(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
442 int argc, const char **argv)
443{
444 const char *p = "[KRB5|KRB5_SPNEGO|NTLMSSP|NTLMSSP_SPNEGO|SCHANNEL]";
445 const char *type = "NTLMSSP";
446
447 pipe_default_auth_level = DCERPC_AUTH_LEVEL_PRIVACY;
448 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
449
450 if (argc > 2) {
451 printf("Usage: %s %s\n", argv[0], p);
452 return NT_STATUS_OK;
453 }
454
455 if (argc == 2) {
456 type = argv[1];
457 if (strequal(type, "KRB5")) {
458 pipe_default_auth_type = DCERPC_AUTH_TYPE_KRB5;
459 } else if (strequal(type, "KRB5_SPNEGO")) {
460 pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
461 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
462 } else if (strequal(type, "NTLMSSP")) {
463 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
464 } else if (strequal(type, "NTLMSSP_SPNEGO")) {
465 pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
466 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
467 } else if (strequal(type, "SCHANNEL")) {
468 pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
469 } else {
470 printf("unknown type %s\n", type);
471 printf("Usage: %s %s\n", argv[0], p);
472 return NT_STATUS_INVALID_LEVEL;
473 }
474 }
475
476 d_printf("Setting %s - sign and seal\n", type);
477
478 return cmd_set_ss_level();
479}
480
481static NTSTATUS cmd_timeout(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
482 int argc, const char **argv)
483{
484 struct cmd_list *tmp;
485
486 if (argc > 2) {
487 printf("Usage: %s timeout\n", argv[0]);
488 return NT_STATUS_OK;
489 }
490
491 if (argc == 2) {
492 timeout = atoi(argv[1]);
493
494 for (tmp = cmd_list; tmp; tmp = tmp->next) {
495
496 struct cmd_set *tmp_set;
497
498 for (tmp_set = tmp->cmd_set; tmp_set->name; tmp_set++) {
499 if (tmp_set->rpc_pipe == NULL) {
500 continue;
501 }
502
503 rpccli_set_timeout(tmp_set->rpc_pipe, timeout);
504 }
505 }
506 }
507
508 printf("timeout is %d\n", timeout);
509
510 return NT_STATUS_OK;
511}
512
513
514static NTSTATUS cmd_none(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
515 int argc, const char **argv)
516{
517 pipe_default_auth_level = DCERPC_AUTH_LEVEL_NONE;
518 pipe_default_auth_type = DCERPC_AUTH_TYPE_NONE;
519 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NONE;
520
521 return cmd_set_ss_level();
522}
523
524static NTSTATUS cmd_schannel(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
525 int argc, const char **argv)
526{
527 d_printf("Setting schannel - sign and seal\n");
528 pipe_default_auth_level = DCERPC_AUTH_LEVEL_PRIVACY;
529 pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
530
531 return cmd_set_ss_level();
532}
533
534static NTSTATUS cmd_schannel_sign(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
535 int argc, const char **argv)
536{
537 d_printf("Setting schannel - sign only\n");
538 pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
539 pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
540
541 return cmd_set_ss_level();
542}
543
544static NTSTATUS cmd_choose_transport(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
545 int argc, const char **argv)
546{
547 NTSTATUS status;
548
549 if (argc != 2) {
550 printf("Usage: %s [NCACN_NP|NCACN_IP_TCP]\n", argv[0]);
551 return NT_STATUS_OK;
552 }
553
554 if (strequal(argv[1], "NCACN_NP")) {
555 default_transport = NCACN_NP;
556 } else if (strequal(argv[1], "NCACN_IP_TCP")) {
557 default_transport = NCACN_IP_TCP;
558 } else {
559 printf("transport type: %s unknown or not supported\n", argv[1]);
560 return NT_STATUS_NOT_SUPPORTED;
561 }
562
563 status = cmd_set_transport();
564 if (!NT_STATUS_IS_OK(status)) {
565 return status;
566 }
567
568 printf("default transport is now: %s\n", argv[1]);
569
570 return NT_STATUS_OK;
571}
572
573/* Built in rpcclient commands */
574
575static struct cmd_set rpcclient_commands[] = {
576
577 { "GENERAL OPTIONS" },
578
579 { "help", RPC_RTYPE_NTSTATUS, cmd_help, NULL, NULL, NULL, "Get help on commands", "[command]" },
580 { "?", RPC_RTYPE_NTSTATUS, cmd_help, NULL, NULL, NULL, "Get help on commands", "[command]" },
581 { "debuglevel", RPC_RTYPE_NTSTATUS, cmd_debuglevel, NULL, NULL, NULL, "Set debug level", "level" },
582 { "debug", RPC_RTYPE_NTSTATUS, cmd_debuglevel, NULL, NULL, NULL, "Set debug level", "level" },
583 { "list", RPC_RTYPE_NTSTATUS, cmd_listcommands, NULL, NULL, NULL, "List available commands on <pipe>", "pipe" },
584 { "exit", RPC_RTYPE_NTSTATUS, cmd_quit, NULL, NULL, NULL, "Exit program", "" },
585 { "quit", RPC_RTYPE_NTSTATUS, cmd_quit, NULL, NULL, NULL, "Exit program", "" },
586 { "sign", RPC_RTYPE_NTSTATUS, cmd_sign, NULL, NULL, NULL, "Force RPC pipe connections to be signed", "" },
587 { "seal", RPC_RTYPE_NTSTATUS, cmd_seal, NULL, NULL, NULL, "Force RPC pipe connections to be sealed", "" },
588 { "schannel", RPC_RTYPE_NTSTATUS, cmd_schannel, NULL, NULL, NULL, "Force RPC pipe connections to be sealed with 'schannel'. Assumes valid machine account to this domain controller.", "" },
589 { "schannelsign", RPC_RTYPE_NTSTATUS, cmd_schannel_sign, NULL, NULL, NULL, "Force RPC pipe connections to be signed (not sealed) with 'schannel'. Assumes valid machine account to this domain controller.", "" },
590 { "timeout", RPC_RTYPE_NTSTATUS, cmd_timeout, NULL, NULL, NULL, "Set timeout (in milliseconds) for RPC operations", "" },
591 { "transport", RPC_RTYPE_NTSTATUS, cmd_choose_transport, NULL, NULL, NULL, "Choose ncacn transport for RPC operations", "" },
592 { "none", RPC_RTYPE_NTSTATUS, cmd_none, NULL, NULL, NULL, "Force RPC pipe connections to have no special properties", "" },
593
594 { NULL }
595};
596
597static struct cmd_set separator_command[] = {
598 { "---------------", MAX_RPC_RETURN_TYPE, NULL, NULL, NULL, NULL, "----------------------" },
599 { NULL }
600};
601
602
603/* Various pipe commands */
604
605extern struct cmd_set lsarpc_commands[];
606extern struct cmd_set samr_commands[];
607extern struct cmd_set spoolss_commands[];
608extern struct cmd_set netlogon_commands[];
609extern struct cmd_set srvsvc_commands[];
610extern struct cmd_set dfs_commands[];
611extern struct cmd_set ds_commands[];
612extern struct cmd_set echo_commands[];
613extern struct cmd_set epmapper_commands[];
614extern struct cmd_set shutdown_commands[];
615extern struct cmd_set test_commands[];
616extern struct cmd_set wkssvc_commands[];
617extern struct cmd_set ntsvcs_commands[];
618extern struct cmd_set drsuapi_commands[];
619extern struct cmd_set eventlog_commands[];
620extern struct cmd_set winreg_commands[];
621
622static struct cmd_set *rpcclient_command_list[] = {
623 rpcclient_commands,
624 lsarpc_commands,
625 ds_commands,
626 samr_commands,
627 spoolss_commands,
628 netlogon_commands,
629 srvsvc_commands,
630 dfs_commands,
631 echo_commands,
632 epmapper_commands,
633 shutdown_commands,
634 test_commands,
635 wkssvc_commands,
636 ntsvcs_commands,
637 drsuapi_commands,
638 eventlog_commands,
639 winreg_commands,
640 NULL
641};
642
643static void add_command_set(struct cmd_set *cmd_set)
644{
645 struct cmd_list *entry;
646
647 if (!(entry = SMB_MALLOC_P(struct cmd_list))) {
648 DEBUG(0, ("out of memory\n"));
649 return;
650 }
651
652 ZERO_STRUCTP(entry);
653
654 entry->cmd_set = cmd_set;
655 DLIST_ADD(cmd_list, entry);
656}
657
658
659/**
660 * Call an rpcclient function, passing an argv array.
661 *
662 * @param cmd Command to run, as a single string.
663 **/
664static NTSTATUS do_cmd(struct cli_state *cli,
665 struct user_auth_info *auth_info,
666 struct cmd_set *cmd_entry,
667 struct dcerpc_binding *binding,
668 int argc, char **argv)
669{
670 NTSTATUS ntresult;
671 WERROR wresult;
672
673 TALLOC_CTX *mem_ctx;
674
675 /* Create mem_ctx */
676
677 if (!(mem_ctx = talloc_init("do_cmd"))) {
678 DEBUG(0, ("talloc_init() failed\n"));
679 return NT_STATUS_NO_MEMORY;
680 }
681
682 /* Open pipe */
683
684 if ((cmd_entry->interface != NULL) && (cmd_entry->rpc_pipe == NULL)) {
685 switch (pipe_default_auth_type) {
686 case DCERPC_AUTH_TYPE_NONE:
687 ntresult = cli_rpc_pipe_open_noauth_transport(
688 cli, default_transport,
689 cmd_entry->interface,
690 &cmd_entry->rpc_pipe);
691 break;
692 case DCERPC_AUTH_TYPE_SPNEGO:
693 switch (pipe_default_auth_spnego_type) {
694 case PIPE_AUTH_TYPE_SPNEGO_NTLMSSP:
695 ntresult = cli_rpc_pipe_open_spnego_ntlmssp(
696 cli, cmd_entry->interface,
697 default_transport,
698 pipe_default_auth_level,
699 get_cmdline_auth_info_domain(auth_info),
700 get_cmdline_auth_info_username(auth_info),
701 get_cmdline_auth_info_password(auth_info),
702 &cmd_entry->rpc_pipe);
703 break;
704 case PIPE_AUTH_TYPE_SPNEGO_KRB5:
705 ntresult = cli_rpc_pipe_open_spnego_krb5(
706 cli, cmd_entry->interface,
707 default_transport,
708 pipe_default_auth_level,
709 cli->desthost,
710 NULL, NULL,
711 &cmd_entry->rpc_pipe);
712 break;
713 default:
714 ntresult = NT_STATUS_INTERNAL_ERROR;
715 }
716 break;
717 case DCERPC_AUTH_TYPE_NTLMSSP:
718 ntresult = cli_rpc_pipe_open_ntlmssp(
719 cli, cmd_entry->interface,
720 default_transport,
721 pipe_default_auth_level,
722 get_cmdline_auth_info_domain(auth_info),
723 get_cmdline_auth_info_username(auth_info),
724 get_cmdline_auth_info_password(auth_info),
725 &cmd_entry->rpc_pipe);
726 break;
727 case DCERPC_AUTH_TYPE_SCHANNEL:
728 ntresult = cli_rpc_pipe_open_schannel(
729 cli, cmd_entry->interface,
730 default_transport,
731 pipe_default_auth_level,
732 get_cmdline_auth_info_domain(auth_info),
733 &cmd_entry->rpc_pipe);
734 break;
735 case DCERPC_AUTH_TYPE_KRB5:
736 ntresult = cli_rpc_pipe_open_krb5(
737 cli, cmd_entry->interface,
738 default_transport,
739 pipe_default_auth_level,
740 cli->desthost,
741 NULL, NULL,
742 &cmd_entry->rpc_pipe);
743 break;
744 default:
745 DEBUG(0, ("Could not initialise %s. Invalid "
746 "auth type %u\n",
747 get_pipe_name_from_syntax(
748 talloc_tos(),
749 cmd_entry->interface),
750 pipe_default_auth_type ));
751 return NT_STATUS_UNSUCCESSFUL;
752 }
753 if (!NT_STATUS_IS_OK(ntresult)) {
754 DEBUG(0, ("Could not initialise %s. Error was %s\n",
755 get_pipe_name_from_syntax(
756 talloc_tos(), cmd_entry->interface),
757 nt_errstr(ntresult) ));
758 return ntresult;
759 }
760
761 if (ndr_syntax_id_equal(cmd_entry->interface,
762 &ndr_table_netlogon.syntax_id)) {
763 uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS;
764 enum netr_SchannelType sec_channel_type;
765 uchar trust_password[16];
766 const char *machine_account;
767
768 if (!get_trust_pw_hash(get_cmdline_auth_info_domain(auth_info),
769 trust_password, &machine_account,
770 &sec_channel_type))
771 {
772 return NT_STATUS_CANT_ACCESS_DOMAIN_INFO;
773 }
774
775 ntresult = rpccli_netlogon_setup_creds(cmd_entry->rpc_pipe,
776 cli->desthost, /* server name */
777 get_cmdline_auth_info_domain(auth_info), /* domain */
778 global_myname(), /* client name */
779 machine_account, /* machine account name */
780 trust_password,
781 sec_channel_type,
782 &neg_flags);
783
784 if (!NT_STATUS_IS_OK(ntresult)) {
785 DEBUG(0, ("Could not initialise credentials for %s.\n",
786 get_pipe_name_from_syntax(
787 talloc_tos(),
788 cmd_entry->interface)));
789 return ntresult;
790 }
791 }
792 }
793
794 /* Run command */
795
796 if ( cmd_entry->returntype == RPC_RTYPE_NTSTATUS ) {
797 ntresult = cmd_entry->ntfn(cmd_entry->rpc_pipe, mem_ctx, argc, (const char **) argv);
798 if (!NT_STATUS_IS_OK(ntresult)) {
799 printf("result was %s\n", nt_errstr(ntresult));
800 }
801 } else {
802 wresult = cmd_entry->wfn(cmd_entry->rpc_pipe, mem_ctx, argc, (const char **) argv);
803 /* print out the DOS error */
804 if (!W_ERROR_IS_OK(wresult)) {
805 printf( "result was %s\n", win_errstr(wresult));
806 }
807 ntresult = W_ERROR_IS_OK(wresult)?NT_STATUS_OK:NT_STATUS_UNSUCCESSFUL;
808 }
809
810 /* Cleanup */
811
812 talloc_destroy(mem_ctx);
813
814 return ntresult;
815}
816
817
818/**
819 * Process a command entered at the prompt or as part of -c
820 *
821 * @returns The NTSTATUS from running the command.
822 **/
823static NTSTATUS process_cmd(struct user_auth_info *auth_info,
824 struct cli_state *cli,
825 struct dcerpc_binding *binding,
826 char *cmd)
827{
828 struct cmd_list *temp_list;
829 NTSTATUS result = NT_STATUS_OK;
830 int ret;
831 int argc;
832 char **argv = NULL;
833
834 if ((ret = poptParseArgvString(cmd, &argc, (const char ***) &argv)) != 0) {
835 fprintf(stderr, "rpcclient: %s\n", poptStrerror(ret));
836 return NT_STATUS_UNSUCCESSFUL;
837 }
838
839
840 /* Walk through a dlist of arrays of commands. */
841 for (temp_list = cmd_list; temp_list; temp_list = temp_list->next) {
842 struct cmd_set *temp_set = temp_list->cmd_set;
843
844 while (temp_set->name) {
845 if (strequal(argv[0], temp_set->name)) {
846 if (!(temp_set->returntype == RPC_RTYPE_NTSTATUS && temp_set->ntfn ) &&
847 !(temp_set->returntype == RPC_RTYPE_WERROR && temp_set->wfn )) {
848 fprintf (stderr, "Invalid command\n");
849 goto out_free;
850 }
851
852 result = do_cmd(cli, auth_info, temp_set,
853 binding, argc, argv);
854
855 goto out_free;
856 }
857 temp_set++;
858 }
859 }
860
861 if (argv[0]) {
862 printf("command not found: %s\n", argv[0]);
863 }
864
865out_free:
866/* moved to do_cmd()
867 if (!NT_STATUS_IS_OK(result)) {
868 printf("result was %s\n", nt_errstr(result));
869 }
870*/
871
872 /* NOTE: popt allocates the whole argv, including the
873 * strings, as a single block. So a single free is
874 * enough to release it -- we don't free the
875 * individual strings. rtfm. */
876 free(argv);
877
878 return result;
879}
880
881
882/* Main function */
883
884 int main(int argc, char *argv[])
885{
886 int opt;
887 static char *cmdstr = NULL;
888 const char *server;
889 struct cli_state *cli = NULL;
890 static char *opt_ipaddr=NULL;
891 struct cmd_set **cmd_set;
892 struct sockaddr_storage server_ss;
893 NTSTATUS nt_status;
894 static int opt_port = 0;
895 fstring new_workgroup;
896 int result = 0;
897 TALLOC_CTX *frame = talloc_stackframe();
898 uint32_t flags = 0;
899 struct dcerpc_binding *binding = NULL;
900 const char *binding_string = NULL;
901 char *user, *domain, *q;
902
903 /* make sure the vars that get altered (4th field) are in
904 a fixed location or certain compilers complain */
905 poptContext pc;
906 struct poptOption long_options[] = {
907 POPT_AUTOHELP
908 {"command", 'c', POPT_ARG_STRING, &cmdstr, 'c', "Execute semicolon separated cmds", "COMMANDS"},
909 {"dest-ip", 'I', POPT_ARG_STRING, &opt_ipaddr, 'I', "Specify destination IP address", "IP"},
910 {"port", 'p', POPT_ARG_INT, &opt_port, 'p', "Specify port number", "PORT"},
911 POPT_COMMON_SAMBA
912 POPT_COMMON_CONNECTION
913 POPT_COMMON_CREDENTIALS
914 POPT_TABLEEND
915 };
916
917 load_case_tables();
918
919 zero_sockaddr(&server_ss);
920
921 setlinebuf(stdout);
922
923 /* the following functions are part of the Samba debugging
924 facilities. See lib/debug.c */
925 setup_logging("rpcclient", DEBUG_STDOUT);
926
927 rpcclient_auth_info = user_auth_info_init(frame);
928 if (rpcclient_auth_info == NULL) {
929 exit(1);
930 }
931 popt_common_set_auth_info(rpcclient_auth_info);
932
933 /* Parse options */
934
935 pc = poptGetContext("rpcclient", argc, (const char **) argv,
936 long_options, 0);
937
938 if (argc == 1) {
939 poptPrintHelp(pc, stderr, 0);
940 goto done;
941 }
942
943 while((opt = poptGetNextOpt(pc)) != -1) {
944 switch (opt) {
945
946 case 'I':
947 if (!interpret_string_addr(&server_ss,
948 opt_ipaddr,
949 AI_NUMERICHOST)) {
950 fprintf(stderr, "%s not a valid IP address\n",
951 opt_ipaddr);
952 result = 1;
953 goto done;
954 }
955 }
956 }
957
958 /* Get server as remaining unparsed argument. Print usage if more
959 than one unparsed argument is present. */
960
961 server = poptGetArg(pc);
962
963 if (!server || poptGetArg(pc)) {
964 poptPrintHelp(pc, stderr, 0);
965 result = 1;
966 goto done;
967 }
968
969 poptFreeContext(pc);
970
971 load_interfaces();
972
973 if (!init_names()) {
974 result = 1;
975 goto done;
976 }
977
978 /* save the workgroup...
979
980 FIXME!! do we need to do this for other options as well
981 (or maybe a generic way to keep lp_load() from overwriting
982 everything)? */
983
984 fstrcpy( new_workgroup, lp_workgroup() );
985
986 /* Load smb.conf file */
987
988 if (!lp_load(get_dyn_CONFIGFILE(),True,False,False,True))
989 fprintf(stderr, "Can't load %s\n", get_dyn_CONFIGFILE());
990
991 if ( strlen(new_workgroup) != 0 )
992 set_global_myworkgroup( new_workgroup );
993
994 /*
995 * Get password
996 * from stdin if necessary
997 */
998
999 if (get_cmdline_auth_info_use_machine_account(rpcclient_auth_info) &&
1000 !set_cmdline_auth_info_machine_account_creds(rpcclient_auth_info)) {
1001 result = 1;
1002 goto done;
1003 }
1004
1005 set_cmdline_auth_info_getpass(rpcclient_auth_info);
1006
1007 if ((server[0] == '/' && server[1] == '/') ||
1008 (server[0] == '\\' && server[1] == '\\')) {
1009 server += 2;
1010 }
1011
1012 nt_status = dcerpc_parse_binding(frame, server, &binding);
1013
1014 if (!NT_STATUS_IS_OK(nt_status)) {
1015
1016 binding_string = talloc_asprintf(frame, "ncacn_np:%s",
1017 strip_hostname(server));
1018 if (!binding_string) {
1019 result = 1;
1020 goto done;
1021 }
1022
1023 nt_status = dcerpc_parse_binding(frame, binding_string, &binding);
1024 if (!NT_STATUS_IS_OK(nt_status)) {
1025 result = -1;
1026 goto done;
1027 }
1028 }
1029
1030 if (binding->transport == NCA_UNKNOWN) {
1031 binding->transport = NCACN_NP;
1032 }
1033
[920]1034 if (binding->flags & DCERPC_CONNECT) {
1035 pipe_default_auth_level = DCERPC_AUTH_LEVEL_CONNECT;
1036 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1037 }
[918]1038 if (binding->flags & DCERPC_SIGN) {
1039 pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
1040 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1041 }
1042 if (binding->flags & DCERPC_SEAL) {
1043 pipe_default_auth_level = DCERPC_AUTH_LEVEL_PRIVACY;
1044 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1045 }
1046 if (binding->flags & DCERPC_AUTH_SPNEGO) {
1047 pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
1048 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
1049 }
1050 if (binding->flags & DCERPC_AUTH_NTLM) {
1051 if (pipe_default_auth_type == DCERPC_AUTH_TYPE_SPNEGO) {
1052 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
1053 } else {
1054 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1055 }
1056 }
1057 if (binding->flags & DCERPC_AUTH_KRB5) {
1058 if (pipe_default_auth_type == DCERPC_AUTH_TYPE_SPNEGO) {
1059 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
1060 } else {
1061 pipe_default_auth_type = DCERPC_AUTH_TYPE_KRB5;
1062 }
1063 }
[920]1064 if (pipe_default_auth_type != DCERPC_AUTH_TYPE_NONE) {
1065 /* If nothing is requested then default to integrity */
1066 if (pipe_default_auth_level == DCERPC_AUTH_LEVEL_NONE) {
1067 pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
1068 }
1069 }
[918]1070
1071 if (get_cmdline_auth_info_use_kerberos(rpcclient_auth_info)) {
1072 flags |= CLI_FULL_CONNECTION_USE_KERBEROS |
1073 CLI_FULL_CONNECTION_FALLBACK_AFTER_KERBEROS;
1074 }
1075 if (get_cmdline_auth_info_use_ccache(rpcclient_auth_info)) {
1076 flags |= CLI_FULL_CONNECTION_USE_CCACHE;
1077 }
1078
1079 user = talloc_strdup(frame, get_cmdline_auth_info_username(rpcclient_auth_info));
1080 SMB_ASSERT(user != NULL);
1081 domain = talloc_strdup(frame, lp_workgroup());
1082 SMB_ASSERT(domain != NULL);
1083 set_cmdline_auth_info_domain(rpcclient_auth_info, domain);
1084
1085 if ((q = strchr_m(user,'\\'))) {
1086 *q = 0;
1087 set_cmdline_auth_info_domain(rpcclient_auth_info, user);
1088 set_cmdline_auth_info_username(rpcclient_auth_info, q+1);
1089 }
1090
1091
1092 nt_status = cli_full_connection(&cli, global_myname(), binding->host,
1093 opt_ipaddr ? &server_ss : NULL, opt_port,
1094 "IPC$", "IPC",
1095 get_cmdline_auth_info_username(rpcclient_auth_info),
1096 get_cmdline_auth_info_domain(rpcclient_auth_info),
1097 get_cmdline_auth_info_password(rpcclient_auth_info),
1098 flags,
1099 get_cmdline_auth_info_signing_state(rpcclient_auth_info));
1100
1101 if (!NT_STATUS_IS_OK(nt_status)) {
1102 DEBUG(0,("Cannot connect to server. Error was %s\n", nt_errstr(nt_status)));
1103 result = 1;
1104 goto done;
1105 }
1106
1107 if (get_cmdline_auth_info_smb_encrypt(rpcclient_auth_info)) {
1108 nt_status = cli_cm_force_encryption(cli,
1109 get_cmdline_auth_info_username(rpcclient_auth_info),
1110 get_cmdline_auth_info_password(rpcclient_auth_info),
1111 get_cmdline_auth_info_domain(rpcclient_auth_info),
1112 "IPC$");
1113 if (!NT_STATUS_IS_OK(nt_status)) {
1114 result = 1;
1115 goto done;
1116 }
1117 }
1118
1119#if 0 /* COMMENT OUT FOR TESTING */
1120 memset(cmdline_auth_info.password,'X',sizeof(cmdline_auth_info.password));
1121#endif
1122
1123 /* Load command lists */
1124
1125 timeout = cli_set_timeout(cli, 10000);
1126
1127 cmd_set = rpcclient_command_list;
1128
1129 while(*cmd_set) {
1130 add_command_set(*cmd_set);
1131 add_command_set(separator_command);
1132 cmd_set++;
1133 }
1134
1135 default_transport = binding->transport;
1136
1137 fetch_machine_sid(cli);
1138
1139 /* Do anything specified with -c */
1140 if (cmdstr && cmdstr[0]) {
1141 char *cmd;
1142 char *p = cmdstr;
1143
1144 result = 0;
1145
1146 while((cmd=next_command(&p)) != NULL) {
1147 NTSTATUS cmd_result = process_cmd(rpcclient_auth_info, cli,
1148 binding, cmd);
1149 SAFE_FREE(cmd);
1150 result = NT_STATUS_IS_ERR(cmd_result);
1151 }
1152
1153 goto done;
1154 }
1155
1156 /* Loop around accepting commands */
1157
1158 while(1) {
1159 char *line = NULL;
1160
1161 line = smb_readline("rpcclient $> ", NULL, completion_fn);
1162
1163 if (line == NULL)
1164 break;
1165
1166 if (line[0] != '\n')
1167 process_cmd(rpcclient_auth_info, cli, binding, line);
1168 SAFE_FREE(line);
1169 }
1170
1171done:
1172 if (cli != NULL) {
1173 cli_shutdown(cli);
1174 }
1175 TALLOC_FREE(frame);
1176 return result;
1177}
Note: See TracBrowser for help on using the repository browser.