split some security related functions in their own files.

[amitay/samba.git] / source3 / rpc_server / srv_lsa.c

diff --git a/source3/rpc_server/srv_lsa.c b/source3/rpc_server/srv_lsa.c
index b05fb972bef0638e47427188d8b636c919d49b0a..5d6c1551c91b8d5ce685d0384bff9954742eb86d 100644 (file)
--- a/source3/rpc_server/srv_lsa.c
+++ b/source3/rpc_server/srv_lsa.c
@@ -1,11 +1,11 @@
 /* 
- *  Unix SMB/Netbios implementation.
- *  Version 1.9.
+ *  Unix SMB/CIFS implementation.
  *  RPC Pipe client / server routines
  *  Copyright (C) Andrew Tridgell              1992-1997,
  *  Copyright (C) Luke Kenneth Casson Leighton 1996-1997,
- *  Copyright (C) Paul Ashton                       1997.
- *  Copyright (C) Jeremy Allison                    2001.
+ *  Copyright (C) Paul Ashton                       1997,
+ *  Copyright (C) Jeremy Allison                    2001,
+ *  Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2002-2003.
  *
  *  This program is free software; you can redistribute it and/or modify
  *  it under the terms of the GNU General Public License as published by
@@ -26,6 +26,9 @@
 
 #include "includes.h"
 
+#undef DBGC_CLASS
+#define DBGC_CLASS DBGC_RPC_SRV
+
 /***************************************************************************
  api_lsa_open_policy2
  ***************************************************************************/
@@ -106,8 +109,10 @@ static BOOL api_lsa_enum_trust_dom(pipes_struct *p)
        if(!lsa_io_q_enum_trust_dom("", &q_u, data, 0))
                return False;
 
+       /* get required trusted domains information */
        r_u.status = _lsa_enum_trust_dom(p, &q_u, &r_u);
 
+       /* prepare the response */
        if(!lsa_io_r_enum_trust_dom("", &r_u, rdata, 0))
                return False;
 
@@ -438,7 +443,7 @@ static BOOL api_lsa_enum_privsaccount(pipes_struct *p)
                return False;
        }
 
-       r_u.status = _lsa_enum_privsaccount(p, &q_u, &r_u);
+       r_u.status = _lsa_enum_privsaccount(p, rdata, &q_u, &r_u);
 
        /* store the response in the SMB stream */
        if(!lsa_io_r_enum_privsaccount("", &r_u, rdata, 0)) {
@@ -606,9 +611,40 @@ static BOOL api_lsa_query_secobj(pipes_struct *p)
 }
 
 /***************************************************************************
- \PIPE\ntlsa commands
+ api_lsa_query_dnsdomainfo
  ***************************************************************************/
 
+static BOOL api_lsa_query_info2(pipes_struct *p)
+{
+       LSA_Q_QUERY_INFO2 q_u;
+       LSA_R_QUERY_INFO2 r_u;
+
+       prs_struct *data = &p->in_data.data;
+       prs_struct *rdata = &p->out_data.rdata;
+
+       ZERO_STRUCT(q_u);
+       ZERO_STRUCT(r_u);
+
+       if(!lsa_io_q_query_info2("", &q_u, data, 0)) {
+               DEBUG(0,("api_lsa_query_info2: failed to unmarshall LSA_Q_QUERY_INFO2.\n"));
+               return False;
+       }
+
+       r_u.status = _lsa_query_info2(p, &q_u, &r_u);
+
+       if (!lsa_io_r_query_info2("", &r_u, rdata, 0)) {
+               DEBUG(0,("api_lsa_query_info2: failed to marshall LSA_R_QUERY_INFO2.\n"));
+               return False;
+       }
+
+       return True;
+}
+
+
+/***************************************************************************
+ \PIPE\ntlsa commands
+ ***************************************************************************/
+ 
 static struct api_struct api_lsa_cmds[] =
 {
        { "LSA_OPENPOLICY2"     , LSA_OPENPOLICY2     , api_lsa_open_policy2     },
@@ -630,13 +666,37 @@ static struct api_struct api_lsa_cmds[] =
        { "LSA_ADDPRIVS"        , LSA_ADDPRIVS        , api_lsa_addprivs         },
        { "LSA_REMOVEPRIVS"     , LSA_REMOVEPRIVS     , api_lsa_removeprivs      },
        { "LSA_QUERYSECOBJ"     , LSA_QUERYSECOBJ     , api_lsa_query_secobj     },
-       { NULL                  , 0                   , NULL                     }
+       /* be careful of the adding of new RPC's.  See commentrs below about
+          ADS DC capabilities                                               */
+       { "LSA_QUERYINFO2"      , LSA_QUERYINFO2      , api_lsa_query_info2      }
 };
 
-/***************************************************************************
- api_ntLsarpcTNP
- ***************************************************************************/
-BOOL api_ntlsa_rpc(pipes_struct *p)
+static int count_fns(void)
+{
+       int funcs = sizeof(api_lsa_cmds) / sizeof(struct api_struct);
+       
+       /*
+        * NOTE: Certain calls can not be enabled if we aren't an ADS DC.  Make sure
+        * these calls are always last and that you decrement by the amount of calls
+        * to disable.
+        */
+       if (!(SEC_ADS == lp_security() && ROLE_DOMAIN_PDC == lp_server_role())) {
+               funcs -= 1;
+       }
+
+       return funcs;
+}
+void lsa_get_pipe_fns( struct api_struct **fns, int *n_fns )
 {
-       return api_rpcTNP(p, "api_ntlsa_rpc", api_lsa_cmds);
+       *fns = api_lsa_cmds;
+       *n_fns = count_fns();
+}
+
+
+NTSTATUS rpc_lsa_init(void)
+{
+       int funcs = count_fns();
+
+       return rpc_pipe_register_commands(SMB_RPC_INTERFACE_VERSION, "lsarpc", "lsass", api_lsa_cmds, 
+               funcs);
 }