1 | /*
|
---|
2 | Samba Unix/Linux SMB client library
|
---|
3 | Distributed SMB/CIFS Server Management Utility
|
---|
4 | Copyright (C) 2001 Steve French (sfrench@us.ibm.com)
|
---|
5 | Copyright (C) 2001 Jim McDonough (jmcd@us.ibm.com)
|
---|
6 | Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
|
---|
7 | Copyright (C) 2001 Andrew Bartlett (abartlet@samba.org)
|
---|
8 | Copyright (C) 2008 Kai Blin (kai@samba.org)
|
---|
9 |
|
---|
10 | Originally written by Steve and Jim. Largely rewritten by tridge in
|
---|
11 | November 2001.
|
---|
12 |
|
---|
13 | Reworked again by abartlet in December 2001
|
---|
14 |
|
---|
15 | Another overhaul, moving functionality into plug-ins loaded on demand by Kai
|
---|
16 | in May 2008.
|
---|
17 |
|
---|
18 | This program is free software; you can redistribute it and/or modify
|
---|
19 | it under the terms of the GNU General Public License as published by
|
---|
20 | the Free Software Foundation; either version 3 of the License, or
|
---|
21 | (at your option) any later version.
|
---|
22 |
|
---|
23 | This program is distributed in the hope that it will be useful,
|
---|
24 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
25 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
26 | GNU General Public License for more details.
|
---|
27 |
|
---|
28 | You should have received a copy of the GNU General Public License
|
---|
29 | along with this program. If not, see <http://www.gnu.org/licenses/>. */
|
---|
30 |
|
---|
31 | /*****************************************************/
|
---|
32 | /* */
|
---|
33 | /* Distributed SMB/CIFS Server Management Utility */
|
---|
34 | /* */
|
---|
35 | /* The intent was to make the syntax similar */
|
---|
36 | /* to the NET utility (first developed in DOS */
|
---|
37 | /* with additional interesting & useful functions */
|
---|
38 | /* added in later SMB server network operating */
|
---|
39 | /* systems). */
|
---|
40 | /* */
|
---|
41 | /*****************************************************/
|
---|
42 |
|
---|
43 | #include "includes.h"
|
---|
44 | #include "utils/net.h"
|
---|
45 |
|
---|
46 | extern bool AllowDebugChange;
|
---|
47 |
|
---|
48 | #ifdef WITH_FAKE_KASERVER
|
---|
49 | #include "utils/net_afs.h"
|
---|
50 | #endif
|
---|
51 |
|
---|
52 | /***********************************************************************/
|
---|
53 | /* end of internationalization section */
|
---|
54 | /***********************************************************************/
|
---|
55 |
|
---|
56 | enum netr_SchannelType get_sec_channel_type(const char *param)
|
---|
57 | {
|
---|
58 | if (!(param && *param)) {
|
---|
59 | return get_default_sec_channel();
|
---|
60 | } else {
|
---|
61 | if (strequal(param, "PDC")) {
|
---|
62 | return SEC_CHAN_BDC;
|
---|
63 | } else if (strequal(param, "BDC")) {
|
---|
64 | return SEC_CHAN_BDC;
|
---|
65 | } else if (strequal(param, "MEMBER")) {
|
---|
66 | return SEC_CHAN_WKSTA;
|
---|
67 | #if 0
|
---|
68 | } else if (strequal(param, "DOMAIN")) {
|
---|
69 | return SEC_CHAN_DOMAIN;
|
---|
70 | #endif
|
---|
71 | } else {
|
---|
72 | return get_default_sec_channel();
|
---|
73 | }
|
---|
74 | }
|
---|
75 | }
|
---|
76 |
|
---|
77 | static int net_changetrustpw(struct net_context *c, int argc, const char **argv)
|
---|
78 | {
|
---|
79 | if (net_ads_check_our_domain(c) == 0)
|
---|
80 | return net_ads_changetrustpw(c, argc, argv);
|
---|
81 |
|
---|
82 | return net_rpc_changetrustpw(c, argc, argv);
|
---|
83 | }
|
---|
84 |
|
---|
85 | static void set_line_buffering(FILE *f)
|
---|
86 | {
|
---|
87 | setvbuf(f, NULL, _IOLBF, 0);
|
---|
88 | }
|
---|
89 |
|
---|
90 | static int net_changesecretpw(struct net_context *c, int argc,
|
---|
91 | const char **argv)
|
---|
92 | {
|
---|
93 | char *trust_pw;
|
---|
94 | enum netr_SchannelType sec_channel_type = SEC_CHAN_WKSTA;
|
---|
95 |
|
---|
96 | if(c->opt_force) {
|
---|
97 | if (c->opt_stdin) {
|
---|
98 | set_line_buffering(stdin);
|
---|
99 | set_line_buffering(stdout);
|
---|
100 | set_line_buffering(stderr);
|
---|
101 | }
|
---|
102 |
|
---|
103 | trust_pw = get_pass(_("Enter machine password: "), c->opt_stdin);
|
---|
104 |
|
---|
105 | if (!secrets_store_machine_password(trust_pw, lp_workgroup(), sec_channel_type)) {
|
---|
106 | d_fprintf(stderr,
|
---|
107 | _("Unable to write the machine account password in the secrets database"));
|
---|
108 | return 1;
|
---|
109 | }
|
---|
110 | else {
|
---|
111 | d_printf(_("Modified trust account password in secrets database\n"));
|
---|
112 | }
|
---|
113 | }
|
---|
114 | else {
|
---|
115 | d_printf(_("Machine account password change requires the -f flag.\n"
|
---|
116 | "Do NOT use this function unless you know what it does!\n"
|
---|
117 | "This function will change the ADS Domain member "
|
---|
118 | "machine account password in the secrets.tdb file!\n"));
|
---|
119 | }
|
---|
120 |
|
---|
121 | return 0;
|
---|
122 | }
|
---|
123 |
|
---|
124 | /**
|
---|
125 | * @brief Set the authorised user for winbindd access in secrets.tdb
|
---|
126 | */
|
---|
127 | static int net_setauthuser(struct net_context *c, int argc, const char **argv)
|
---|
128 | {
|
---|
129 | const char *password = NULL;
|
---|
130 |
|
---|
131 | if (!secrets_init()) {
|
---|
132 | d_fprintf(stderr, _("Failed to open secrets.tdb.\n"));
|
---|
133 | return 1;
|
---|
134 | }
|
---|
135 |
|
---|
136 | /* Delete the settings. */
|
---|
137 | if (argc >= 1) {
|
---|
138 | if (strncmp(argv[0], "delete", 6) != 0) {
|
---|
139 | d_fprintf(stderr,_("Usage:\n"));
|
---|
140 | d_fprintf(stderr,
|
---|
141 | _(" net setauthuser -U user[%%password] \n"
|
---|
142 | " Set the auth user account to user"
|
---|
143 | "password. Prompt for password if not "
|
---|
144 | "specified.\n"));
|
---|
145 | d_fprintf(stderr,
|
---|
146 | _(" net setauthuser delete\n"
|
---|
147 | " Delete the auth user setting.\n"));
|
---|
148 | return 1;
|
---|
149 | }
|
---|
150 | secrets_delete(SECRETS_AUTH_USER);
|
---|
151 | secrets_delete(SECRETS_AUTH_DOMAIN);
|
---|
152 | secrets_delete(SECRETS_AUTH_PASSWORD);
|
---|
153 | return 0;
|
---|
154 | }
|
---|
155 |
|
---|
156 | if (!c->opt_user_specified) {
|
---|
157 | d_fprintf(stderr, _("Usage:\n"));
|
---|
158 | d_fprintf(stderr,
|
---|
159 | _(" net setauthuser -U user[%%password]\n"
|
---|
160 | " Set the auth user account to user"
|
---|
161 | "password. Prompt for password if not "
|
---|
162 | "specified.\n"));
|
---|
163 | d_fprintf(stderr,
|
---|
164 | _(" net setauthuser delete\n"
|
---|
165 | " Delete the auth user setting.\n"));
|
---|
166 | return 1;
|
---|
167 | }
|
---|
168 |
|
---|
169 | password = net_prompt_pass(c, _("the auth user"));
|
---|
170 | if (password == NULL) {
|
---|
171 | d_fprintf(stderr,_("Failed to get the auth users password.\n"));
|
---|
172 | return 1;
|
---|
173 | }
|
---|
174 |
|
---|
175 | if (!secrets_store(SECRETS_AUTH_USER, c->opt_user_name,
|
---|
176 | strlen(c->opt_user_name) + 1)) {
|
---|
177 | d_fprintf(stderr, _("error storing auth user name\n"));
|
---|
178 | return 1;
|
---|
179 | }
|
---|
180 |
|
---|
181 | if (!secrets_store(SECRETS_AUTH_DOMAIN, c->opt_workgroup,
|
---|
182 | strlen(c->opt_workgroup) + 1)) {
|
---|
183 | d_fprintf(stderr, _("error storing auth user domain\n"));
|
---|
184 | return 1;
|
---|
185 | }
|
---|
186 |
|
---|
187 | if (!secrets_store(SECRETS_AUTH_PASSWORD, password,
|
---|
188 | strlen(password) + 1)) {
|
---|
189 | d_fprintf(stderr, _("error storing auth user password\n"));
|
---|
190 | return 1;
|
---|
191 | }
|
---|
192 |
|
---|
193 | return 0;
|
---|
194 | }
|
---|
195 |
|
---|
196 | /**
|
---|
197 | * @brief Get the auth user settings
|
---|
198 | */
|
---|
199 | static int net_getauthuser(struct net_context *c, int argc, const char **argv)
|
---|
200 | {
|
---|
201 | char *user, *domain, *password;
|
---|
202 |
|
---|
203 | /* Lift data from secrets file */
|
---|
204 |
|
---|
205 | secrets_fetch_ipc_userpass(&user, &domain, &password);
|
---|
206 |
|
---|
207 | if ((!user || !*user) && (!domain || !*domain ) &&
|
---|
208 | (!password || !*password)){
|
---|
209 |
|
---|
210 | SAFE_FREE(user);
|
---|
211 | SAFE_FREE(domain);
|
---|
212 | SAFE_FREE(password);
|
---|
213 | d_printf(_("No authorised user configured\n"));
|
---|
214 | return 0;
|
---|
215 | }
|
---|
216 |
|
---|
217 | /* Pretty print authorised user info */
|
---|
218 |
|
---|
219 | d_printf("%s%s%s%s%s\n", domain ? domain : "",
|
---|
220 | domain ? lp_winbind_separator(): "", user,
|
---|
221 | password ? "%" : "", password ? password : "");
|
---|
222 |
|
---|
223 | SAFE_FREE(user);
|
---|
224 | SAFE_FREE(domain);
|
---|
225 | SAFE_FREE(password);
|
---|
226 |
|
---|
227 | return 0;
|
---|
228 | }
|
---|
229 | /*
|
---|
230 | Retrieve our local SID or the SID for the specified name
|
---|
231 | */
|
---|
232 | static int net_getlocalsid(struct net_context *c, int argc, const char **argv)
|
---|
233 | {
|
---|
234 | DOM_SID sid;
|
---|
235 | const char *name;
|
---|
236 | fstring sid_str;
|
---|
237 |
|
---|
238 | if (argc >= 1) {
|
---|
239 | name = argv[0];
|
---|
240 | }
|
---|
241 | else {
|
---|
242 | name = global_myname();
|
---|
243 | }
|
---|
244 |
|
---|
245 | if(!initialize_password_db(false, NULL)) {
|
---|
246 | DEBUG(0, ("WARNING: Could not open passdb - local sid may not reflect passdb\n"
|
---|
247 | "backend knowledge (such as the sid stored in LDAP)\n"));
|
---|
248 | }
|
---|
249 |
|
---|
250 | /* first check to see if we can even access secrets, so we don't
|
---|
251 | panic when we can't. */
|
---|
252 |
|
---|
253 | if (!secrets_init()) {
|
---|
254 | d_fprintf(stderr,
|
---|
255 | _("Unable to open secrets.tdb. Can't fetch domain "
|
---|
256 | "SID for name: %s\n"), name);
|
---|
257 | return 1;
|
---|
258 | }
|
---|
259 |
|
---|
260 | /* Generate one, if it doesn't exist */
|
---|
261 | get_global_sam_sid();
|
---|
262 |
|
---|
263 | if (!secrets_fetch_domain_sid(name, &sid)) {
|
---|
264 | DEBUG(0, ("Can't fetch domain SID for name: %s\n", name));
|
---|
265 | return 1;
|
---|
266 | }
|
---|
267 | sid_to_fstring(sid_str, &sid);
|
---|
268 | d_printf(_("SID for domain %s is: %s\n"), name, sid_str);
|
---|
269 | return 0;
|
---|
270 | }
|
---|
271 |
|
---|
272 | static int net_setlocalsid(struct net_context *c, int argc, const char **argv)
|
---|
273 | {
|
---|
274 | DOM_SID sid;
|
---|
275 |
|
---|
276 | if ( (argc != 1)
|
---|
277 | || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
|
---|
278 | || (!string_to_sid(&sid, argv[0]))
|
---|
279 | || (sid.num_auths != 4)) {
|
---|
280 | d_printf(_("Usage:"));
|
---|
281 | d_printf(" net setlocalsid S-1-5-21-x-y-z\n");
|
---|
282 | return 1;
|
---|
283 | }
|
---|
284 |
|
---|
285 | if (!secrets_store_domain_sid(global_myname(), &sid)) {
|
---|
286 | DEBUG(0,("Can't store domain SID as a pdc/bdc.\n"));
|
---|
287 | return 1;
|
---|
288 | }
|
---|
289 |
|
---|
290 | return 0;
|
---|
291 | }
|
---|
292 |
|
---|
293 | static int net_setdomainsid(struct net_context *c, int argc, const char **argv)
|
---|
294 | {
|
---|
295 | DOM_SID sid;
|
---|
296 |
|
---|
297 | if ( (argc != 1)
|
---|
298 | || (strncmp(argv[0], "S-1-5-21-", strlen("S-1-5-21-")) != 0)
|
---|
299 | || (!string_to_sid(&sid, argv[0]))
|
---|
300 | || (sid.num_auths != 4)) {
|
---|
301 | d_printf(_("Usage:"));
|
---|
302 | d_printf(" net setdomainsid S-1-5-21-x-y-z\n");
|
---|
303 | return 1;
|
---|
304 | }
|
---|
305 |
|
---|
306 | if (!secrets_store_domain_sid(lp_workgroup(), &sid)) {
|
---|
307 | DEBUG(0,("Can't store domain SID.\n"));
|
---|
308 | return 1;
|
---|
309 | }
|
---|
310 |
|
---|
311 | return 0;
|
---|
312 | }
|
---|
313 |
|
---|
314 | static int net_getdomainsid(struct net_context *c, int argc, const char **argv)
|
---|
315 | {
|
---|
316 | DOM_SID domain_sid;
|
---|
317 | fstring sid_str;
|
---|
318 |
|
---|
319 | if (argc > 0) {
|
---|
320 | d_printf(_("Usage:"));
|
---|
321 | d_printf(" net getdomainsid\n");
|
---|
322 | return 1;
|
---|
323 | }
|
---|
324 |
|
---|
325 | if(!initialize_password_db(false, NULL)) {
|
---|
326 | DEBUG(0, ("WARNING: Could not open passdb - domain SID may "
|
---|
327 | "not reflect passdb\n"
|
---|
328 | "backend knowledge (such as the SID stored in "
|
---|
329 | "LDAP)\n"));
|
---|
330 | }
|
---|
331 |
|
---|
332 | /* first check to see if we can even access secrets, so we don't
|
---|
333 | panic when we can't. */
|
---|
334 |
|
---|
335 | if (!secrets_init()) {
|
---|
336 | d_fprintf(stderr, _("Unable to open secrets.tdb. Can't fetch "
|
---|
337 | "domain SID for name: %s\n"),
|
---|
338 | get_global_sam_name());
|
---|
339 | return 1;
|
---|
340 | }
|
---|
341 |
|
---|
342 | /* Generate one, if it doesn't exist */
|
---|
343 | get_global_sam_sid();
|
---|
344 |
|
---|
345 | if (!secrets_fetch_domain_sid(global_myname(), &domain_sid)) {
|
---|
346 | d_fprintf(stderr, _("Could not fetch local SID\n"));
|
---|
347 | return 1;
|
---|
348 | }
|
---|
349 | sid_to_fstring(sid_str, &domain_sid);
|
---|
350 | d_printf(_("SID for local machine %s is: %s\n"),
|
---|
351 | global_myname(), sid_str);
|
---|
352 |
|
---|
353 | if (!secrets_fetch_domain_sid(c->opt_workgroup, &domain_sid)) {
|
---|
354 | d_fprintf(stderr, _("Could not fetch domain SID\n"));
|
---|
355 | return 1;
|
---|
356 | }
|
---|
357 |
|
---|
358 | sid_to_fstring(sid_str, &domain_sid);
|
---|
359 | d_printf(_("SID for domain %s is: %s\n"), c->opt_workgroup, sid_str);
|
---|
360 |
|
---|
361 | return 0;
|
---|
362 | }
|
---|
363 |
|
---|
364 | static bool search_maxrid(struct pdb_search *search, const char *type,
|
---|
365 | uint32 *max_rid)
|
---|
366 | {
|
---|
367 | struct samr_displayentry *entries;
|
---|
368 | uint32 i, num_entries;
|
---|
369 |
|
---|
370 | if (search == NULL) {
|
---|
371 | d_fprintf(stderr, _("get_maxrid: Could not search %s\n"), type);
|
---|
372 | return false;
|
---|
373 | }
|
---|
374 |
|
---|
375 | num_entries = pdb_search_entries(search, 0, 0xffffffff, &entries);
|
---|
376 | for (i=0; i<num_entries; i++)
|
---|
377 | *max_rid = MAX(*max_rid, entries[i].rid);
|
---|
378 | TALLOC_FREE(search);
|
---|
379 | return true;
|
---|
380 | }
|
---|
381 |
|
---|
382 | static uint32 get_maxrid(void)
|
---|
383 | {
|
---|
384 | uint32 max_rid = 0;
|
---|
385 |
|
---|
386 | if (!search_maxrid(pdb_search_users(talloc_tos(), 0), "users", &max_rid))
|
---|
387 | return 0;
|
---|
388 |
|
---|
389 | if (!search_maxrid(pdb_search_groups(talloc_tos()), "groups", &max_rid))
|
---|
390 | return 0;
|
---|
391 |
|
---|
392 | if (!search_maxrid(pdb_search_aliases(talloc_tos(),
|
---|
393 | get_global_sam_sid()),
|
---|
394 | "aliases", &max_rid))
|
---|
395 | return 0;
|
---|
396 |
|
---|
397 | return max_rid;
|
---|
398 | }
|
---|
399 |
|
---|
400 | static int net_maxrid(struct net_context *c, int argc, const char **argv)
|
---|
401 | {
|
---|
402 | uint32 rid;
|
---|
403 |
|
---|
404 | if (argc != 0) {
|
---|
405 | d_fprintf(stderr, "%s net maxrid\n", _("Usage:"));
|
---|
406 | return 1;
|
---|
407 | }
|
---|
408 |
|
---|
409 | if ((rid = get_maxrid()) == 0) {
|
---|
410 | d_fprintf(stderr, _("can't get current maximum rid\n"));
|
---|
411 | return 1;
|
---|
412 | }
|
---|
413 |
|
---|
414 | d_printf(_("Currently used maximum rid: %d\n"), rid);
|
---|
415 |
|
---|
416 | return 0;
|
---|
417 | }
|
---|
418 |
|
---|
419 | /* main function table */
|
---|
420 | static struct functable net_func[] = {
|
---|
421 | {
|
---|
422 | "rpc",
|
---|
423 | net_rpc,
|
---|
424 | NET_TRANSPORT_RPC,
|
---|
425 | N_("Run functions using RPC transport"),
|
---|
426 | N_(" Use 'net help rpc' to get more extensive information "
|
---|
427 | "about 'net rpc' commands.")
|
---|
428 | },
|
---|
429 | {
|
---|
430 | "rap",
|
---|
431 | net_rap,
|
---|
432 | NET_TRANSPORT_RAP,
|
---|
433 | N_("Run functions using RAP transport"),
|
---|
434 | N_(" Use 'net help rap' to get more extensive information "
|
---|
435 | "about 'net rap' commands.")
|
---|
436 | },
|
---|
437 | {
|
---|
438 | "ads",
|
---|
439 | net_ads,
|
---|
440 | NET_TRANSPORT_ADS,
|
---|
441 | N_("Run functions using ADS transport"),
|
---|
442 | N_(" Use 'net help ads' to get more extensive information "
|
---|
443 | "about 'net ads' commands.")
|
---|
444 | },
|
---|
445 |
|
---|
446 | /* eventually these should auto-choose the transport ... */
|
---|
447 | {
|
---|
448 | "file",
|
---|
449 | net_file,
|
---|
450 | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
451 | N_("Functions on remote opened files"),
|
---|
452 | N_(" Use 'net help file' to get more information about 'net "
|
---|
453 | "file' commands.")
|
---|
454 | },
|
---|
455 | {
|
---|
456 | "share",
|
---|
457 | net_share,
|
---|
458 | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
459 | N_("Functions on shares"),
|
---|
460 | N_(" Use 'net help share' to get more information about 'net "
|
---|
461 | "share' commands.")
|
---|
462 | },
|
---|
463 | {
|
---|
464 | "session",
|
---|
465 | net_rap_session,
|
---|
466 | NET_TRANSPORT_RAP,
|
---|
467 | N_("Manage sessions"),
|
---|
468 | N_(" Use 'net help session' to get more information about "
|
---|
469 | "'net session' commands.")
|
---|
470 | },
|
---|
471 | {
|
---|
472 | "server",
|
---|
473 | net_rap_server,
|
---|
474 | NET_TRANSPORT_RAP,
|
---|
475 | N_("List servers in workgroup"),
|
---|
476 | N_(" Use 'net help server' to get more information about 'net "
|
---|
477 | "server' commands.")
|
---|
478 | },
|
---|
479 | {
|
---|
480 | "domain",
|
---|
481 | net_rap_domain,
|
---|
482 | NET_TRANSPORT_RAP,
|
---|
483 | N_("List domains/workgroups on network"),
|
---|
484 | N_(" Use 'net help domain' to get more information about 'net "
|
---|
485 | "domain' commands.")
|
---|
486 | },
|
---|
487 | {
|
---|
488 | "printq",
|
---|
489 | net_rap_printq,
|
---|
490 | NET_TRANSPORT_RAP,
|
---|
491 | N_("Modify printer queue"),
|
---|
492 | N_(" Use 'net help printq' to get more information about 'net "
|
---|
493 | "printq' commands.")
|
---|
494 | },
|
---|
495 | {
|
---|
496 | "user",
|
---|
497 | net_user,
|
---|
498 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
499 | N_("Manage users"),
|
---|
500 | N_(" Use 'net help user' to get more information about 'net "
|
---|
501 | "user' commands.")
|
---|
502 | },
|
---|
503 | {
|
---|
504 | "group",
|
---|
505 | net_group,
|
---|
506 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC | NET_TRANSPORT_RAP,
|
---|
507 | N_("Manage groups"),
|
---|
508 | N_(" Use 'net help group' to get more information about 'net "
|
---|
509 | "group' commands.")
|
---|
510 | },
|
---|
511 | {
|
---|
512 | "groupmap",
|
---|
513 | net_groupmap,
|
---|
514 | NET_TRANSPORT_LOCAL,
|
---|
515 | N_("Manage group mappings"),
|
---|
516 | N_(" Use 'net help groupmap' to get more information about "
|
---|
517 | "'net groupmap' commands.")
|
---|
518 | },
|
---|
519 | {
|
---|
520 | "sam",
|
---|
521 | net_sam,
|
---|
522 | NET_TRANSPORT_LOCAL,
|
---|
523 | N_("Functions on the SAM database"),
|
---|
524 | N_(" Use 'net help sam' to get more information about 'net "
|
---|
525 | "sam' commands.")
|
---|
526 | },
|
---|
527 | {
|
---|
528 | "validate",
|
---|
529 | net_rap_validate,
|
---|
530 | NET_TRANSPORT_RAP,
|
---|
531 | N_("Validate username and password"),
|
---|
532 | N_(" Use 'net help validate' to get more information about "
|
---|
533 | "'net validate' commands.")
|
---|
534 | },
|
---|
535 | {
|
---|
536 | "groupmember",
|
---|
537 | net_rap_groupmember,
|
---|
538 | NET_TRANSPORT_RAP,
|
---|
539 | N_("Modify group memberships"),
|
---|
540 | N_(" Use 'net help groupmember' to get more information about "
|
---|
541 | "'net groupmember' commands.")
|
---|
542 | },
|
---|
543 | { "admin",
|
---|
544 | net_rap_admin,
|
---|
545 | NET_TRANSPORT_RAP,
|
---|
546 | N_("Execute remote command on a remote OS/2 server"),
|
---|
547 | N_(" Use 'net help admin' to get more information about 'net "
|
---|
548 | "admin' commands.")
|
---|
549 | },
|
---|
550 | { "service",
|
---|
551 | net_rap_service,
|
---|
552 | NET_TRANSPORT_RAP,
|
---|
553 | N_("List/modify running services"),
|
---|
554 | N_(" Use 'net help service' to get more information about "
|
---|
555 | "'net service' commands.")
|
---|
556 | },
|
---|
557 | {
|
---|
558 | "password",
|
---|
559 | net_rap_password,
|
---|
560 | NET_TRANSPORT_RAP,
|
---|
561 | N_("Change user password on target server"),
|
---|
562 | N_(" Use 'net help password' to get more information about "
|
---|
563 | "'net password' commands.")
|
---|
564 | },
|
---|
565 | { "changetrustpw",
|
---|
566 | net_changetrustpw,
|
---|
567 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
|
---|
568 | N_("Change the trust password"),
|
---|
569 | N_(" Use 'net help changetrustpw' to get more information "
|
---|
570 | "about 'net changetrustpw'.")
|
---|
571 | },
|
---|
572 | { "changesecretpw",
|
---|
573 | net_changesecretpw,
|
---|
574 | NET_TRANSPORT_LOCAL,
|
---|
575 | N_("Change the secret password"),
|
---|
576 | N_(" net [options] changesecretpw\n"
|
---|
577 | " Change the ADS domain member machine account password "
|
---|
578 | "in secrets.tdb.\n"
|
---|
579 | " Do NOT use this function unless you know what it does.\n"
|
---|
580 | " Requires the -f flag to work.")
|
---|
581 | },
|
---|
582 | {
|
---|
583 | "setauthuser",
|
---|
584 | net_setauthuser,
|
---|
585 | NET_TRANSPORT_LOCAL,
|
---|
586 | N_("Set the winbind auth user"),
|
---|
587 | N_(" net -U user[%%password] [-W domain] setauthuser\n"
|
---|
588 | " Set the auth user, password (and optionally domain\n"
|
---|
589 | " Will prompt for password if not given.\n"
|
---|
590 | " net setauthuser delete\n"
|
---|
591 | " Delete the existing auth user settings.")
|
---|
592 | },
|
---|
593 | {
|
---|
594 | "getauthuser",
|
---|
595 | net_getauthuser,
|
---|
596 | NET_TRANSPORT_LOCAL,
|
---|
597 | N_("Get the winbind auth user settings"),
|
---|
598 | N_(" net getauthuser\n"
|
---|
599 | " Get the current winbind auth user settings.")
|
---|
600 | },
|
---|
601 | { "time",
|
---|
602 | net_time,
|
---|
603 | NET_TRANSPORT_LOCAL,
|
---|
604 | N_("Show/set time"),
|
---|
605 | N_(" Use 'net help time' to get more information about 'net "
|
---|
606 | "time' commands.")
|
---|
607 | },
|
---|
608 | { "lookup",
|
---|
609 | net_lookup,
|
---|
610 | NET_TRANSPORT_LOCAL,
|
---|
611 | N_("Look up host names/IP addresses"),
|
---|
612 | N_(" Use 'net help lookup' to get more information about 'net "
|
---|
613 | "lookup' commands.")
|
---|
614 | },
|
---|
615 | { "join",
|
---|
616 | net_join,
|
---|
617 | NET_TRANSPORT_ADS | NET_TRANSPORT_RPC,
|
---|
618 | N_("Join a domain/AD"),
|
---|
619 | N_(" Use 'net help join' to get more information about 'net "
|
---|
620 | "join'.")
|
---|
621 | },
|
---|
622 | { "dom",
|
---|
623 | net_dom,
|
---|
624 | NET_TRANSPORT_LOCAL,
|
---|
625 | N_("Join/unjoin (remote) machines to/from a domain/AD"),
|
---|
626 | N_(" Use 'net help dom' to get more information about 'net "
|
---|
627 | "dom' commands.")
|
---|
628 | },
|
---|
629 | { "cache",
|
---|
630 | net_cache,
|
---|
631 | NET_TRANSPORT_LOCAL,
|
---|
632 | N_("Operate on the cache tdb file"),
|
---|
633 | N_(" Use 'net help cache' to get more information about 'net "
|
---|
634 | "cache' commands.")
|
---|
635 | },
|
---|
636 | { "getlocalsid",
|
---|
637 | net_getlocalsid,
|
---|
638 | NET_TRANSPORT_LOCAL,
|
---|
639 | N_("Get the SID for the local domain"),
|
---|
640 | N_(" net getlocalsid")
|
---|
641 | },
|
---|
642 | { "setlocalsid",
|
---|
643 | net_setlocalsid,
|
---|
644 | NET_TRANSPORT_LOCAL,
|
---|
645 | N_("Set the SID for the local domain"),
|
---|
646 | N_(" net setlocalsid S-1-5-21-x-y-z")
|
---|
647 | },
|
---|
648 | { "setdomainsid",
|
---|
649 | net_setdomainsid,
|
---|
650 | NET_TRANSPORT_LOCAL,
|
---|
651 | N_("Set domain SID on member servers"),
|
---|
652 | N_(" net setdomainsid S-1-5-21-x-y-z")
|
---|
653 | },
|
---|
654 | { "getdomainsid",
|
---|
655 | net_getdomainsid,
|
---|
656 | NET_TRANSPORT_LOCAL,
|
---|
657 | N_("Get domain SID on member servers"),
|
---|
658 | N_(" net getdomainsid")
|
---|
659 | },
|
---|
660 | { "maxrid",
|
---|
661 | net_maxrid,
|
---|
662 | NET_TRANSPORT_LOCAL,
|
---|
663 | N_("Display the maximul RID currently used"),
|
---|
664 | N_(" net maxrid")
|
---|
665 | },
|
---|
666 | { "idmap",
|
---|
667 | net_idmap,
|
---|
668 | NET_TRANSPORT_LOCAL,
|
---|
669 | N_("IDmap functions"),
|
---|
670 | N_(" Use 'net help idmap to get more information about 'net "
|
---|
671 | "idmap' commands.")
|
---|
672 | },
|
---|
673 | { "status",
|
---|
674 | net_status,
|
---|
675 | NET_TRANSPORT_LOCAL,
|
---|
676 | N_("Display server status"),
|
---|
677 | N_(" Use 'net help status' to get more information about 'net "
|
---|
678 | "status' commands.")
|
---|
679 | },
|
---|
680 | { "usershare",
|
---|
681 | net_usershare,
|
---|
682 | NET_TRANSPORT_LOCAL,
|
---|
683 | N_("Manage user-modifiable shares"),
|
---|
684 | N_(" Use 'net help usershare to get more information about "
|
---|
685 | "'net usershare' commands.")
|
---|
686 | },
|
---|
687 | { "usersidlist",
|
---|
688 | net_usersidlist,
|
---|
689 | NET_TRANSPORT_RPC,
|
---|
690 | N_("Display list of all users with SID"),
|
---|
691 | N_(" Use 'net help usersidlist' to get more information about "
|
---|
692 | "'net usersidlist'.")
|
---|
693 | },
|
---|
694 | { "conf",
|
---|
695 | net_conf,
|
---|
696 | NET_TRANSPORT_LOCAL,
|
---|
697 | N_("Manage Samba registry based configuration"),
|
---|
698 | N_(" Use 'net help conf' to get more information about 'net "
|
---|
699 | "conf' commands.")
|
---|
700 | },
|
---|
701 | { "registry",
|
---|
702 | net_registry,
|
---|
703 | NET_TRANSPORT_LOCAL,
|
---|
704 | N_("Manage the Samba registry"),
|
---|
705 | N_(" Use 'net help registry' to get more information about "
|
---|
706 | "'net registry' commands.")
|
---|
707 | },
|
---|
708 | { "eventlog",
|
---|
709 | net_eventlog,
|
---|
710 | NET_TRANSPORT_LOCAL,
|
---|
711 | N_("Process Win32 *.evt eventlog files"),
|
---|
712 | N_(" Use 'net help eventlog' to get more information about "
|
---|
713 | "'net eventlog' commands.")
|
---|
714 | },
|
---|
715 |
|
---|
716 | #ifdef WITH_FAKE_KASERVER
|
---|
717 | { "afs",
|
---|
718 | net_afs,
|
---|
719 | NET_TRANSPORT_LOCAL,
|
---|
720 | N_("Manage AFS tokens"),
|
---|
721 | N_(" Use 'net help afs' to get more information about 'net "
|
---|
722 | "afs' commands.")
|
---|
723 | },
|
---|
724 | #endif
|
---|
725 |
|
---|
726 | { "help",
|
---|
727 | net_help,
|
---|
728 | NET_TRANSPORT_LOCAL,
|
---|
729 | N_("Print usage information"),
|
---|
730 | N_(" Use 'net help help' to list usage information for 'net' "
|
---|
731 | "commands.")
|
---|
732 | },
|
---|
733 | {NULL, NULL, 0, NULL, NULL}
|
---|
734 | };
|
---|
735 |
|
---|
736 |
|
---|
737 | /****************************************************************************
|
---|
738 | main program
|
---|
739 | ****************************************************************************/
|
---|
740 | int main(int argc, const char **argv)
|
---|
741 | {
|
---|
742 | int opt,i;
|
---|
743 | char *p;
|
---|
744 | int rc = 0;
|
---|
745 | int argc_new = 0;
|
---|
746 | const char ** argv_new;
|
---|
747 | poptContext pc;
|
---|
748 | TALLOC_CTX *frame = talloc_stackframe();
|
---|
749 | struct net_context *c = talloc_zero(frame, struct net_context);
|
---|
750 |
|
---|
751 | struct poptOption long_options[] = {
|
---|
752 | {"help", 'h', POPT_ARG_NONE, 0, 'h'},
|
---|
753 | {"workgroup", 'w', POPT_ARG_STRING, &c->opt_target_workgroup},
|
---|
754 | {"user", 'U', POPT_ARG_STRING, &c->opt_user_name, 'U'},
|
---|
755 | {"ipaddress", 'I', POPT_ARG_STRING, 0,'I'},
|
---|
756 | {"port", 'p', POPT_ARG_INT, &c->opt_port},
|
---|
757 | {"myname", 'n', POPT_ARG_STRING, &c->opt_requester_name},
|
---|
758 | {"server", 'S', POPT_ARG_STRING, &c->opt_host},
|
---|
759 | {"encrypt", 'e', POPT_ARG_NONE, NULL, 'e', N_("Encrypt SMB transport (UNIX extended servers only)") },
|
---|
760 | {"container", 'c', POPT_ARG_STRING, &c->opt_container},
|
---|
761 | {"comment", 'C', POPT_ARG_STRING, &c->opt_comment},
|
---|
762 | {"maxusers", 'M', POPT_ARG_INT, &c->opt_maxusers},
|
---|
763 | {"flags", 'F', POPT_ARG_INT, &c->opt_flags},
|
---|
764 | {"long", 'l', POPT_ARG_NONE, &c->opt_long_list_entries},
|
---|
765 | {"reboot", 'r', POPT_ARG_NONE, &c->opt_reboot},
|
---|
766 | {"force", 'f', POPT_ARG_NONE, &c->opt_force},
|
---|
767 | {"stdin", 'i', POPT_ARG_NONE, &c->opt_stdin},
|
---|
768 | {"timeout", 't', POPT_ARG_INT, &c->opt_timeout},
|
---|
769 | {"request-timeout",0,POPT_ARG_INT, &c->opt_request_timeout},
|
---|
770 | {"machine-pass",'P', POPT_ARG_NONE, &c->opt_machine_pass},
|
---|
771 | {"kerberos", 'k', POPT_ARG_NONE, &c->opt_kerberos},
|
---|
772 | {"myworkgroup", 'W', POPT_ARG_STRING, &c->opt_workgroup},
|
---|
773 | {"use-ccache", 0, POPT_ARG_NONE, &c->opt_ccache},
|
---|
774 | {"verbose", 'v', POPT_ARG_NONE, &c->opt_verbose},
|
---|
775 | {"test", 'T', POPT_ARG_NONE, &c->opt_testmode},
|
---|
776 | /* Options for 'net groupmap set' */
|
---|
777 | {"local", 'L', POPT_ARG_NONE, &c->opt_localgroup},
|
---|
778 | {"domain", 'D', POPT_ARG_NONE, &c->opt_domaingroup},
|
---|
779 | {"ntname", 'N', POPT_ARG_STRING, &c->opt_newntname},
|
---|
780 | {"rid", 'R', POPT_ARG_INT, &c->opt_rid},
|
---|
781 | /* Options for 'net rpc share migrate' */
|
---|
782 | {"acls", 0, POPT_ARG_NONE, &c->opt_acls},
|
---|
783 | {"attrs", 0, POPT_ARG_NONE, &c->opt_attrs},
|
---|
784 | {"timestamps", 0, POPT_ARG_NONE, &c->opt_timestamps},
|
---|
785 | {"exclude", 'X', POPT_ARG_STRING, &c->opt_exclude},
|
---|
786 | {"destination", 0, POPT_ARG_STRING, &c->opt_destination},
|
---|
787 | {"tallocreport", 0, POPT_ARG_NONE, &c->do_talloc_report},
|
---|
788 | /* Options for 'net rpc vampire (keytab)' */
|
---|
789 | {"force-full-repl", 0, POPT_ARG_NONE, &c->opt_force_full_repl},
|
---|
790 | {"single-obj-repl", 0, POPT_ARG_NONE, &c->opt_single_obj_repl},
|
---|
791 | {"clean-old-entries", 0, POPT_ARG_NONE, &c->opt_clean_old_entries},
|
---|
792 |
|
---|
793 | POPT_COMMON_SAMBA
|
---|
794 | { 0, 0, 0, 0}
|
---|
795 | };
|
---|
796 |
|
---|
797 | zero_sockaddr(&c->opt_dest_ip);
|
---|
798 |
|
---|
799 | load_case_tables();
|
---|
800 |
|
---|
801 | setlocale(LC_ALL, "");
|
---|
802 | #if defined(HAVE_BINDTEXTDOMAIN)
|
---|
803 | bindtextdomain(MODULE_NAME, dyn_LOCALEDIR);
|
---|
804 | #endif
|
---|
805 | #if defined(HAVE_TEXTDOMAIN)
|
---|
806 | textdomain(MODULE_NAME);
|
---|
807 | #endif
|
---|
808 |
|
---|
809 | /* set default debug level to 0 regardless of what smb.conf sets */
|
---|
810 | DEBUGLEVEL_CLASS[DBGC_ALL] = 0;
|
---|
811 | dbf = x_stderr;
|
---|
812 | c->private_data = net_func;
|
---|
813 |
|
---|
814 | pc = poptGetContext(NULL, argc, (const char **) argv, long_options,
|
---|
815 | POPT_CONTEXT_KEEP_FIRST);
|
---|
816 |
|
---|
817 | while((opt = poptGetNextOpt(pc)) != -1) {
|
---|
818 | switch (opt) {
|
---|
819 | case 'h':
|
---|
820 | c->display_usage = true;
|
---|
821 | break;
|
---|
822 | case 'e':
|
---|
823 | c->smb_encrypt = true;
|
---|
824 | break;
|
---|
825 | case 'I':
|
---|
826 | if (!interpret_string_addr(&c->opt_dest_ip,
|
---|
827 | poptGetOptArg(pc), 0)) {
|
---|
828 | d_fprintf(stderr, _("\nInvalid ip address specified\n"));
|
---|
829 | } else {
|
---|
830 | c->opt_have_ip = true;
|
---|
831 | }
|
---|
832 | break;
|
---|
833 | case 'U':
|
---|
834 | c->opt_user_specified = true;
|
---|
835 | c->opt_user_name = SMB_STRDUP(c->opt_user_name);
|
---|
836 | p = strchr(c->opt_user_name,'%');
|
---|
837 | if (p) {
|
---|
838 | *p = 0;
|
---|
839 | c->opt_password = p+1;
|
---|
840 | }
|
---|
841 | break;
|
---|
842 | default:
|
---|
843 | d_fprintf(stderr, _("\nInvalid option %s: %s\n"),
|
---|
844 | poptBadOption(pc, 0), poptStrerror(opt));
|
---|
845 | net_help(c, argc, argv);
|
---|
846 | exit(1);
|
---|
847 | }
|
---|
848 | }
|
---|
849 |
|
---|
850 | /*
|
---|
851 | * Don't load debug level from smb.conf. It should be
|
---|
852 | * set by cmdline arg or remain default (0)
|
---|
853 | */
|
---|
854 | AllowDebugChange = false;
|
---|
855 | lp_load(get_dyn_CONFIGFILE(), true, false, false, true);
|
---|
856 |
|
---|
857 | argv_new = (const char **)poptGetArgs(pc);
|
---|
858 |
|
---|
859 | argc_new = argc;
|
---|
860 | for (i=0; i<argc; i++) {
|
---|
861 | if (argv_new[i] == NULL) {
|
---|
862 | argc_new = i;
|
---|
863 | break;
|
---|
864 | }
|
---|
865 | }
|
---|
866 |
|
---|
867 | if (c->do_talloc_report) {
|
---|
868 | talloc_enable_leak_report();
|
---|
869 | }
|
---|
870 |
|
---|
871 | if (c->opt_requester_name) {
|
---|
872 | set_global_myname(c->opt_requester_name);
|
---|
873 | }
|
---|
874 |
|
---|
875 | if (!c->opt_user_name && getenv("LOGNAME")) {
|
---|
876 | c->opt_user_name = getenv("LOGNAME");
|
---|
877 | }
|
---|
878 |
|
---|
879 | if (!c->opt_workgroup) {
|
---|
880 | c->opt_workgroup = smb_xstrdup(lp_workgroup());
|
---|
881 | }
|
---|
882 |
|
---|
883 | if (!c->opt_target_workgroup) {
|
---|
884 | c->opt_target_workgroup = smb_xstrdup(lp_workgroup());
|
---|
885 | }
|
---|
886 |
|
---|
887 | if (!init_names())
|
---|
888 | exit(1);
|
---|
889 |
|
---|
890 | load_interfaces();
|
---|
891 |
|
---|
892 | /* this makes sure that when we do things like call scripts,
|
---|
893 | that it won't assert becouse we are not root */
|
---|
894 | sec_init();
|
---|
895 |
|
---|
896 | if (c->opt_machine_pass) {
|
---|
897 | /* it is very useful to be able to make ads queries as the
|
---|
898 | machine account for testing purposes and for domain leave */
|
---|
899 |
|
---|
900 | net_use_krb_machine_account(c);
|
---|
901 | }
|
---|
902 |
|
---|
903 | if (!c->opt_password) {
|
---|
904 | c->opt_password = getenv("PASSWD");
|
---|
905 | }
|
---|
906 |
|
---|
907 | rc = net_run_function(c, argc_new-1, argv_new+1, "net", net_func);
|
---|
908 |
|
---|
909 | DEBUG(2,("return code = %d\n", rc));
|
---|
910 |
|
---|
911 | gencache_stabilize();
|
---|
912 |
|
---|
913 | libnetapi_free(c->netapi_ctx);
|
---|
914 |
|
---|
915 | poptFreeContext(pc);
|
---|
916 |
|
---|
917 | TALLOC_FREE(frame);
|
---|
918 | return rc;
|
---|
919 | }
|
---|