source3/rpc_server/srv_spoolss_util.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *
   4  *  SPOOLSS RPC Pipe server / winreg client routines
   5  *
   6  *  Copyright (c) 2010      Andreas Schneider <asn@samba.org>
   7  *
   8  *  This program is free software; you can redistribute it and/or modify
   9  *  it under the terms of the GNU General Public License as published by
  10  *  the Free Software Foundation; either version 3 of the License, or
  11  *  (at your option) any later version.
  12  *
  13  *  This program is distributed in the hope that it will be useful,
  14  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16  *  GNU General Public License for more details.
  17  *
  18  *  You should have received a copy of the GNU General Public License
  19  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  20  */
  21
  22 #include "includes.h"
  23 #include "srv_spoolss_util.h"
  24 #include "../librpc/gen_ndr/srv_winreg.h"
  25 #include "../librpc/gen_ndr/cli_winreg.h"
  26
  27 #define TOP_LEVEL_PRINT_KEY "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print"
  28 #define TOP_LEVEL_PRINT_PRINTERS_KEY TOP_LEVEL_PRINT_KEY "\\Printers"
  29 #define TOP_LEVEL_CONTROL_KEY "SYSTEM\\CurrentControlSet\\Control\\Print"
  30 #define TOP_LEVEL_CONTROL_FORMS_KEY TOP_LEVEL_CONTROL_KEY "\\Forms"
  31
  32 #define EMPTY_STRING ""
  33 static const char *empty_string_array[1] = { NULL };
  34 #define EMPTY_STRING_ARRAY empty_string_array
  35
  36 #define CHECK_ERROR(result) \
  37         if (W_ERROR_IS_OK(result)) continue; \
  38         if (W_ERROR_EQUAL(result, WERR_NOT_FOUND)) result = WERR_OK; \
  39         if (!W_ERROR_IS_OK(result)) break
  40
  41 /*        FLAGS,                NAME,                              with,   height,   left, top, right, bottom */
  42 static const struct spoolss_FormInfo1 builtin_forms1[] = {
  43         { SPOOLSS_FORM_BUILTIN, "10x11",                          {0x3e030,0x44368}, {0x0,0x0,0x3e030,0x44368} },
  44         { SPOOLSS_FORM_BUILTIN, "10x14",                          {0x3e030,0x56d10}, {0x0,0x0,0x3e030,0x56d10} },
  45         { SPOOLSS_FORM_BUILTIN, "11x17",                          {0x44368,0x696b8}, {0x0,0x0,0x44368,0x696b8} },
  46         { SPOOLSS_FORM_BUILTIN, "12x11",                          {0x4a724,0x443e1}, {0x0,0x0,0x4a724,0x443e1} },
  47         { SPOOLSS_FORM_BUILTIN, "15x11",                          {0x5d048,0x44368}, {0x0,0x0,0x5d048,0x44368} },
  48         { SPOOLSS_FORM_BUILTIN, "6 3/4 Envelope",                 {0x167ab,0x284ec}, {0x0,0x0,0x167ab,0x284ec} },
  49         { SPOOLSS_FORM_BUILTIN, "9x11",                           {0x37cf8,0x44368}, {0x0,0x0,0x37cf8,0x44368} },
  50         { SPOOLSS_FORM_BUILTIN, "A0",                             {0xcd528,0x122488},{0x0,0x0,0xcd528,0x122488} },
  51         { SPOOLSS_FORM_BUILTIN, "A1",                             {0x91050,0xcd528}, {0x0,0x0,0x91050,0xcd528} },
  52         { SPOOLSS_FORM_BUILTIN, "A2",                             {0x668a0,0x91050}, {0x0,0x0,0x668a0,0x91050} },
  53         { SPOOLSS_FORM_BUILTIN, "A3 Extra Transverse",            {0x4e9d0,0x6ca48}, {0x0,0x0,0x4e9d0,0x6ca48} },
  54         { SPOOLSS_FORM_BUILTIN, "A3 Extra",                       {0x4e9d0,0x6ca48}, {0x0,0x0,0x4e9d0,0x6ca48} },
  55         { SPOOLSS_FORM_BUILTIN, "A3 Rotated",                     {0x668a0,0x48828}, {0x0,0x0,0x668a0,0x48828} },
  56         { SPOOLSS_FORM_BUILTIN, "A3 Transverse",                  {0x48828,0x668a0}, {0x0,0x0,0x48828,0x668a0} },
  57         { SPOOLSS_FORM_BUILTIN, "A3",                             {0x48828,0x668a0}, {0x0,0x0,0x48828,0x668a0} },
  58         { SPOOLSS_FORM_BUILTIN, "A4 Extra",                       {0x397c2,0x4eb16}, {0x0,0x0,0x397c2,0x4eb16} },
  59         { SPOOLSS_FORM_BUILTIN, "A4 Plus",                        {0x33450,0x50910}, {0x0,0x0,0x33450,0x50910} },
  60         { SPOOLSS_FORM_BUILTIN, "A4 Rotated",                     {0x48828,0x33450}, {0x0,0x0,0x48828,0x33450} },
  61         { SPOOLSS_FORM_BUILTIN, "A4 Small",                       {0x33450,0x48828}, {0x0,0x0,0x33450,0x48828} },
  62         { SPOOLSS_FORM_BUILTIN, "A4 Transverse",                  {0x33450,0x48828}, {0x0,0x0,0x33450,0x48828} },
  63         { SPOOLSS_FORM_BUILTIN, "A4",                             {0x33450,0x48828}, {0x0,0x0,0x33450,0x48828} },
  64         { SPOOLSS_FORM_BUILTIN, "A5 Extra",                       {0x2a7b0,0x395f8}, {0x0,0x0,0x2a7b0,0x395f8} },
  65         { SPOOLSS_FORM_BUILTIN, "A5 Rotated",                     {0x33450,0x24220}, {0x0,0x0,0x33450,0x24220} },
  66         { SPOOLSS_FORM_BUILTIN, "A5 Transverse",                  {0x24220,0x33450}, {0x0,0x0,0x24220,0x33450} },
  67         { SPOOLSS_FORM_BUILTIN, "A5",                             {0x24220,0x33450}, {0x0,0x0,0x24220,0x33450} },
  68         { SPOOLSS_FORM_BUILTIN, "A6 Rotated",                     {0x24220,0x19a28}, {0x0,0x0,0x24220,0x19a28} },
  69         { SPOOLSS_FORM_BUILTIN, "A6",                             {0x19a28,0x24220}, {0x0,0x0,0x19a28,0x24220} },
  70         { SPOOLSS_FORM_BUILTIN, "B4 (ISO)",                       {0x3d090,0x562e8}, {0x0,0x0,0x3d090,0x562e8} },
  71         { SPOOLSS_FORM_BUILTIN, "B4 (JIS) Rotated",               {0x58de0,0x3ebe8}, {0x0,0x0,0x58de0,0x3ebe8} },
  72         { SPOOLSS_FORM_BUILTIN, "B4 (JIS)",                       {0x3ebe8,0x58de0}, {0x0,0x0,0x3ebe8,0x58de0} },
  73         { SPOOLSS_FORM_BUILTIN, "B5 (ISO) Extra",                 {0x31128,0x43620}, {0x0,0x0,0x31128,0x43620} },
  74         { SPOOLSS_FORM_BUILTIN, "B5 (JIS) Rotated",               {0x3ebe8,0x2c6f0}, {0x0,0x0,0x3ebe8,0x2c6f0} },
  75         { SPOOLSS_FORM_BUILTIN, "B5 (JIS) Transverse",            {0x2c6f0,0x3ebe8}, {0x0,0x0,0x2c6f0,0x3ebe8} },
  76         { SPOOLSS_FORM_BUILTIN, "B5 (JIS)",                       {0x2c6f0,0x3ebe8}, {0x0,0x0,0x2c6f0,0x3ebe8} },
  77         { SPOOLSS_FORM_BUILTIN, "B6 (JIS) Rotated",               {0x2c6f0,0x1f400}, {0x0,0x0,0x2c6f0,0x1f400} },
  78         { SPOOLSS_FORM_BUILTIN, "B6 (JIS)",                       {0x1f400,0x2c6f0}, {0x0,0x0,0x1f400,0x2c6f0} },
  79         { SPOOLSS_FORM_BUILTIN, "C size sheet",                   {0x696b8,0x886d0}, {0x0,0x0,0x696b8,0x886d0} },
  80         { SPOOLSS_FORM_BUILTIN, "D size sheet",                   {0x886d0,0xd2d70}, {0x0,0x0,0x886d0,0xd2d70} },
  81         { SPOOLSS_FORM_BUILTIN, "Double Japan Postcard Rotated",  {0x24220,0x30d40}, {0x0,0x0,0x24220,0x30d40} },
  82         { SPOOLSS_FORM_BUILTIN, "E size sheet",                   {0xd2d70,0x110da0},{0x0,0x0,0xd2d70,0x110da0} },
  83         { SPOOLSS_FORM_BUILTIN, "Envelope #10",                   {0x19947,0x3ae94}, {0x0,0x0,0x19947,0x3ae94} },
  84         { SPOOLSS_FORM_BUILTIN, "Envelope #11",                   {0x1be7c,0x40565}, {0x0,0x0,0x1be7c,0x40565} },
  85         { SPOOLSS_FORM_BUILTIN, "Envelope #12",                   {0x1d74a,0x44368}, {0x0,0x0,0x1d74a,0x44368} },
  86         { SPOOLSS_FORM_BUILTIN, "Envelope #14",                   {0x1f018,0x47504}, {0x0,0x0,0x1f018,0x47504} },
  87         { SPOOLSS_FORM_BUILTIN, "Envelope #9",                    {0x18079,0x37091}, {0x0,0x0,0x18079,0x37091} },
  88         { SPOOLSS_FORM_BUILTIN, "Envelope B4",                    {0x3d090,0x562e8}, {0x0,0x0,0x3d090,0x562e8} },
  89         { SPOOLSS_FORM_BUILTIN, "Envelope B5",                    {0x2af80,0x3d090}, {0x0,0x0,0x2af80,0x3d090} },
  90         { SPOOLSS_FORM_BUILTIN, "Envelope B6",                    {0x2af80,0x1e848}, {0x0,0x0,0x2af80,0x1e848} },
  91         { SPOOLSS_FORM_BUILTIN, "Envelope C3",                    {0x4f1a0,0x6fd10}, {0x0,0x0,0x4f1a0,0x6fd10} },
  92         { SPOOLSS_FORM_BUILTIN, "Envelope C4",                    {0x37e88,0x4f1a0}, {0x0,0x0,0x37e88,0x4f1a0} },
  93         { SPOOLSS_FORM_BUILTIN, "Envelope C5",                    {0x278d0,0x37e88}, {0x0,0x0,0x278d0,0x37e88} },
  94         { SPOOLSS_FORM_BUILTIN, "Envelope C6",                    {0x1bd50,0x278d0}, {0x0,0x0,0x1bd50,0x278d0} },
  95         { SPOOLSS_FORM_BUILTIN, "Envelope C65",                   {0x1bd50,0x37e88}, {0x0,0x0,0x1bd50,0x37e88} },
  96         { SPOOLSS_FORM_BUILTIN, "Envelope DL",                    {0x1adb0,0x35b60}, {0x0,0x0,0x1adb0,0x35b60} },
  97         { SPOOLSS_FORM_BUILTIN, "Envelope Invite",                {0x35b60,0x35b60}, {0x0,0x0,0x35b60,0x35b60} },
  98         { SPOOLSS_FORM_BUILTIN, "Envelope Monarch",               {0x18079,0x2e824}, {0x0,0x0,0x18079,0x2e824} },
  99         { SPOOLSS_FORM_BUILTIN, "Envelope",                       {0x1adb0,0x38270}, {0x0,0x0,0x1adb0,0x38270} },
 100         { SPOOLSS_FORM_BUILTIN, "Executive",                      {0x2cf56,0x411cc}, {0x0,0x0,0x2cf56,0x411cc} },
 101         { SPOOLSS_FORM_BUILTIN, "Folio",                          {0x34b5c,0x509d8}, {0x0,0x0,0x34b5c,0x509d8} },
 102         { SPOOLSS_FORM_BUILTIN, "German Legal Fanfold",           {0x34b5c,0x509d8}, {0x0,0x0,0x34b5c,0x509d8} },
 103         { SPOOLSS_FORM_BUILTIN, "German Std Fanfold",             {0x34b5c,0x4a6a0}, {0x0,0x0,0x34b5c,0x4a6a0} },
 104         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Chou #3 Rotated", {0x395f8,0x1d4c0}, {0x0,0x0,0x395f8,0x1d4c0} },
 105         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Chou #4 Rotated", {0x320c8,0x15f90}, {0x0,0x0,0x320c8,0x15f90} },
 106         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Kaku #2 Rotated", {0x510e0,0x3a980}, {0x0,0x0,0x510e0,0x3a980} },
 107         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Kaku #3 Rotated", {0x43a08,0x34bc0}, {0x0,0x0,0x43a08,0x34bc0} },
 108         { SPOOLSS_FORM_BUILTIN, "Japan Envelope You #4 Rotated",  {0x395f8,0x19a28}, {0x0,0x0,0x395f8,0x19a28} },
 109         { SPOOLSS_FORM_BUILTIN, "Japan Envelope You #4",          {0x19a28,0x395f8}, {0x0,0x0,0x19a28,0x395f8} },
 110         { SPOOLSS_FORM_BUILTIN, "Japanese Double Postcard",       {0x30d40,0x24220}, {0x0,0x0,0x30d40,0x24220} },
 111         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Chou #3",      {0x1d4c0,0x395f8}, {0x0,0x0,0x1d4c0,0x395f8} },
 112         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Chou #4",      {0x15f90,0x320c8}, {0x0,0x0,0x15f90,0x320c8} },
 113         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Kaku #2",      {0x3a980,0x510e0}, {0x0,0x0,0x3a980,0x510e0} },
 114         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Kaku #3",      {0x34bc0,0x43a08}, {0x0,0x0,0x34bc0,0x43a08} },
 115         { SPOOLSS_FORM_BUILTIN, "Japanese Postcard Rotated",      {0x24220,0x186a0}, {0x0,0x0,0x24220,0x186a0} },
 116         { SPOOLSS_FORM_BUILTIN, "Japanese Postcard",              {0x186a0,0x24220}, {0x0,0x0,0x186a0,0x24220} },
 117         { SPOOLSS_FORM_BUILTIN, "Ledger",                         {0x696b8,0x44368}, {0x0,0x0,0x696b8,0x44368} },
 118         { SPOOLSS_FORM_BUILTIN, "Legal Extra",                    {0x3ae94,0x5d048}, {0x0,0x0,0x3ae94,0x5d048} },
 119         { SPOOLSS_FORM_BUILTIN, "Legal",                          {0x34b5c,0x56d10}, {0x0,0x0,0x34b5c,0x56d10} },
 120         { SPOOLSS_FORM_BUILTIN, "Letter Extra Transverse",        {0x3ae94,0x4a6a0}, {0x0,0x0,0x3ae94,0x4a6a0} },
 121         { SPOOLSS_FORM_BUILTIN, "Letter Extra",                   {0x3ae94,0x4a6a0}, {0x0,0x0,0x3ae94,0x4a6a0} },
 122         { SPOOLSS_FORM_BUILTIN, "Letter Plus",                    {0x34b5c,0x4eb16}, {0x0,0x0,0x34b5c,0x4eb16} },
 123         { SPOOLSS_FORM_BUILTIN, "Letter Rotated",                 {0x44368,0x34b5c}, {0x0,0x0,0x44368,0x34b5c} },
 124         { SPOOLSS_FORM_BUILTIN, "Letter Small",                   {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
 125         { SPOOLSS_FORM_BUILTIN, "Letter Transverse",              {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
 126         { SPOOLSS_FORM_BUILTIN, "Letter",                         {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
 127         { SPOOLSS_FORM_BUILTIN, "Note",                           {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
 128         { SPOOLSS_FORM_BUILTIN, "PRC 16K Rotated",                {0x3f7a0,0x2de60}, {0x0,0x0,0x3f7a0,0x2de60} },
 129         { SPOOLSS_FORM_BUILTIN, "PRC 16K",                        {0x2de60,0x3f7a0}, {0x0,0x0,0x2de60,0x3f7a0} },
 130         { SPOOLSS_FORM_BUILTIN, "PRC 32K Rotated",                {0x2cec0,0x1fbd0}, {0x0,0x0,0x2cec0,0x1fbd0} },
 131         { SPOOLSS_FORM_BUILTIN, "PRC 32K",                        {0x1fbd0,0x2cec0}, {0x0,0x0,0x1fbd0,0x2cec0} },
 132         { SPOOLSS_FORM_BUILTIN, "PRC 32K(Big) Rotated",           {0x318f8,0x222e0}, {0x0,0x0,0x318f8,0x222e0} },
 133         { SPOOLSS_FORM_BUILTIN, "PRC 32K(Big)",                   {0x222e0,0x318f8}, {0x0,0x0,0x222e0,0x318f8} },
 134         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #1 Rotated",        {0x28488,0x18e70}, {0x0,0x0,0x28488,0x18e70} },
 135         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #1",                {0x18e70,0x28488}, {0x0,0x0,0x18e70,0x28488} },
 136         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #10 Rotated",       {0x6fd10,0x4f1a0}, {0x0,0x0,0x6fd10,0x4f1a0} },
 137         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #10",               {0x4f1a0,0x6fd10}, {0x0,0x0,0x4f1a0,0x6fd10} },
 138         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #2 Rotated",        {0x2af80,0x18e70}, {0x0,0x0,0x2af80,0x18e70} },
 139         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #2",                {0x18e70,0x2af80}, {0x0,0x0,0x18e70,0x2af80} },
 140         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #3 Rotated",        {0x2af80,0x1e848}, {0x0,0x0,0x2af80,0x1e848} },
 141         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #3",                {0x1e848,0x2af80}, {0x0,0x0,0x1e848,0x2af80} },
 142         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #4 Rotated",        {0x32c80,0x1adb0}, {0x0,0x0,0x32c80,0x1adb0} },
 143         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #4",                {0x1adb0,0x32c80}, {0x0,0x0,0x1adb0,0x32c80} },
 144         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #5 Rotated",        {0x35b60,0x1adb0}, {0x0,0x0,0x35b60,0x1adb0} },
 145         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #5",                {0x1adb0,0x35b60}, {0x0,0x0,0x1adb0,0x35b60} },
 146         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #6 Rotated",        {0x38270,0x1d4c0}, {0x0,0x0,0x38270,0x1d4c0} },
 147         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #6",                {0x1d4c0,0x38270}, {0x0,0x0,0x1d4c0,0x38270} },
 148         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #7 Rotated",        {0x38270,0x27100}, {0x0,0x0,0x38270,0x27100} },
 149         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #7",                {0x27100,0x38270}, {0x0,0x0,0x27100,0x38270} },
 150         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #8 Rotated",        {0x4b708,0x1d4c0}, {0x0,0x0,0x4b708,0x1d4c0} },
 151         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #8",                {0x1d4c0,0x4b708}, {0x0,0x0,0x1d4c0,0x4b708} },
 152         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #9 Rotated",        {0x4f1a0,0x37e88}, {0x0,0x0,0x4f1a0,0x37e88} },
 153         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #9",                {0x37e88,0x4f1a0}, {0x0,0x0,0x37e88,0x4f1a0} },
 154         { SPOOLSS_FORM_BUILTIN, "Quarto",                         {0x347d8,0x43238}, {0x0,0x0,0x347d8,0x43238} },
 155         { SPOOLSS_FORM_BUILTIN, "Reserved48",                     {0x1,0x1},         {0x0,0x0,0x1,0x1} },
 156         { SPOOLSS_FORM_BUILTIN, "Reserved49",                     {0x1,0x1},         {0x0,0x0,0x1,0x1} },
 157         { SPOOLSS_FORM_BUILTIN, "Statement",                      {0x221b4,0x34b5c}, {0x0,0x0,0x221b4,0x34b5c} },
 158         { SPOOLSS_FORM_BUILTIN, "Super A",                        {0x376b8,0x56ea0}, {0x0,0x0,0x376b8,0x56ea0} },
 159         { SPOOLSS_FORM_BUILTIN, "Super B",                        {0x4a768,0x76e58}, {0x0,0x0,0x4a768,0x76e58} },
 160         { SPOOLSS_FORM_BUILTIN, "Tabloid Extra",                  {0x4a6a0,0x6f9f0}, {0x0,0x0,0x4a6a0,0x6f9f0} },
 161         { SPOOLSS_FORM_BUILTIN, "Tabloid",                        {0x44368,0x696b8}, {0x0,0x0,0x44368,0x696b8} },
 162         { SPOOLSS_FORM_BUILTIN, "US Std Fanfold",                 {0x5c3e1,0x44368}, {0x0,0x0,0x5c3e1,0x44368} }
 163 };
 164
 165 /********************************************************************
 166  static helper functions
 167 ********************************************************************/
 168
 169 /****************************************************************************
 170  Update the changeid time.
 171 ****************************************************************************/
 172 /**
 173  * @internal
 174  *
 175  * @brief Update the ChangeID time of a printer.
 176  *
 177  * This is SO NASTY as some drivers need this to change, others need it
 178  * static. This value will change every second, and I must hope that this
 179  * is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
 180  * UTAH ! JRA.
 181  *
 182  * @return              The ChangeID.
 183  */
 184 static uint32_t winreg_printer_rev_changeid(void)
 185 {
 186         struct timeval tv;
 187
 188         get_process_uptime(&tv);
 189
 190 #if 1   /* JERRY */
 191         /* Return changeid as msec since spooler restart */
 192         return tv.tv_sec * 1000 + tv.tv_usec / 1000;
 193 #else
 194         /*
 195          * This setting seems to work well but is too untested
 196          * to replace the above calculation.  Left in for experiementation
 197          * of the reader            --jerry (Tue Mar 12 09:15:05 CST 2002)
 198          */
 199         return tv.tv_sec * 10 + tv.tv_usec / 100000;
 200 #endif
 201 }
 202
 203 /**
 204  * @internal
 205  *
 206  * @brief Connect to the interal winreg server and open the given printer key.
 207  *
 208  * The function will create the needed subkeys if they don't exist.
 209  *
 210  * @param[in]  mem_ctx       The memory context to use.
 211  *
 212  * @param[in]  server_info   The supplied server info.
 213  *
 214  * @param[out] winreg_pipe   A pointer for the winreg rpc client pipe.
 215  *
 216  * @param[in]  path          The path to the key to open.
 217  *
 218  * @param[in]  key           The key to open.
 219  *
 220  * @param[in]  create_key    Set to true if the key should be created if it
 221  *                           doesn't exist.
 222  *
 223  * @param[in]  access_mask   The access mask to open the key.
 224  *
 225  * @param[out] hive_handle   A policy handle for the opened hive.
 226  *
 227  * @param[out] key_handle    A policy handle for the opened key.
 228  *
 229  * @return                   WERR_OK on success, the corresponding DOS error
 230  *                           code if something gone wrong.
 231  */
 232 static WERROR winreg_printer_openkey(TALLOC_CTX *mem_ctx,
 233                               struct auth_serversupplied_info *server_info,
 234                               struct rpc_pipe_client **winreg_pipe,
 235                               const char *path,
 236                               const char *key,
 237                               bool create_key,
 238                               uint32_t access_mask,
 239                               struct policy_handle *hive_handle,
 240                               struct policy_handle *key_handle)
 241 {
 242         struct rpc_pipe_client *pipe_handle;
 243         struct winreg_String wkey, wkeyclass;
 244         char *keyname;
 245         NTSTATUS status;
 246         WERROR result = WERR_OK;
 247
 248         /* create winreg connection */
 249         status = rpc_pipe_open_internal(mem_ctx,
 250                                         &ndr_table_winreg.syntax_id,
 251                                         rpc_winreg_dispatch,
 252                                         server_info,
 253                                         &pipe_handle);
 254         if (!NT_STATUS_IS_OK(status)) {
 255                 DEBUG(0, ("winreg_printer_openkey: Could not connect to winreg_pipe: %s\n",
 256                           nt_errstr(status)));
 257                 return ntstatus_to_werror(status);
 258         }
 259
 260         status = rpccli_winreg_OpenHKLM(pipe_handle,
 261                                         mem_ctx,
 262                                         NULL,
 263                                         access_mask,
 264                                         hive_handle,
 265                                         &result);
 266         if (!NT_STATUS_IS_OK(status)) {
 267                 DEBUG(0, ("winreg_printer_openkey: Could not open HKLM hive: %s\n",
 268                           nt_errstr(status)));
 269                 talloc_free(pipe_handle);
 270                 if (!W_ERROR_IS_OK(result)) {
 271                         return result;
 272                 }
 273                 return ntstatus_to_werror(status);
 274         }
 275
 276         if (key && *key) {
 277                 keyname = talloc_asprintf(mem_ctx, "%s\\%s", path, key);
 278         } else {
 279                 keyname = talloc_strdup(mem_ctx, path);
 280         }
 281         if (keyname == NULL) {
 282                 talloc_free(pipe_handle);
 283                 return WERR_NOMEM;
 284         }
 285
 286         ZERO_STRUCT(wkey);
 287         wkey.name = keyname;
 288
 289         if (create_key) {
 290                 enum winreg_CreateAction action = REG_ACTION_NONE;
 291
 292                 ZERO_STRUCT(wkeyclass);
 293                 wkeyclass.name = "";
 294
 295                 status = rpccli_winreg_CreateKey(pipe_handle,
 296                                                  mem_ctx,
 297                                                  hive_handle,
 298                                                  wkey,
 299                                                  wkeyclass,
 300                                                  0,
 301                                                  access_mask,
 302                                                  NULL,
 303                                                  key_handle,
 304                                                  &action,
 305                                                  &result);
 306                 switch (action) {
 307                         case REG_ACTION_NONE:
 308                                 DEBUG(8, ("winreg_printer_openkey:createkey did nothing -- huh?\n"));
 309                                 break;
 310                         case REG_CREATED_NEW_KEY:
 311                                 DEBUG(8, ("winreg_printer_openkey: createkey created %s\n", keyname));
 312                                 break;
 313                         case REG_OPENED_EXISTING_KEY:
 314                                 DEBUG(8, ("winreg_printer_openkey: createkey opened existing %s\n", keyname));
 315                                 break;
 316                 }
 317         } else {
 318                 status = rpccli_winreg_OpenKey(pipe_handle,
 319                                                mem_ctx,
 320                                                hive_handle,
 321                                                wkey,
 322                                                0,
 323                                                access_mask,
 324                                                key_handle,
 325                                                &result);
 326         }
 327         if (!NT_STATUS_IS_OK(status)) {
 328                 talloc_free(pipe_handle);
 329                 if (!W_ERROR_IS_OK(result)) {
 330                         return result;
 331                 }
 332                 return ntstatus_to_werror(status);
 333         }
 334
 335         *winreg_pipe = pipe_handle;
 336
 337         return WERR_OK;
 338 }
 339
 340 /**
 341  * @brief Create the registry keyname for the given printer.
 342  *
 343  * @param[in]  mem_ctx  The memory context to use.
 344  *
 345  * @param[in]  printer  The name of the printer to get the registry key.
 346  *
 347  * @return     The registry key or NULL on error.
 348  */
 349 static char *winreg_printer_data_keyname(TALLOC_CTX *mem_ctx, const char *printer) {
 350         return talloc_asprintf(mem_ctx, "%s\\%s", TOP_LEVEL_PRINT_PRINTERS_KEY, printer);
 351 }
 352
 353 /**
 354  * @internal
 355  *
 356  * @brief Enumerate values of an opened key handle and retrieve the data.
 357  *
 358  * @param[in]  mem_ctx  The memory context to use.
 359  *
 360  * @param[in]  pipe_handle The pipe handle for the rpc connection.
 361  *
 362  * @param[in]  key_hnd  The opened key handle.
 363  *
 364  * @param[out] pnum_values A pointer to store he number of values found.
 365  *
 366  * @param[out] pnum_values A pointer to store the number of values we found.
 367  *
 368  * @return                   WERR_OK on success, the corresponding DOS error
 369  *                           code if something gone wrong.
 370  */
 371 static WERROR winreg_printer_enumvalues(TALLOC_CTX *mem_ctx,
 372                                         struct rpc_pipe_client *pipe_handle,
 373                                         struct policy_handle *key_hnd,
 374                                         uint32_t *pnum_values,
 375                                         struct spoolss_PrinterEnumValues **penum_values)
 376 {
 377         TALLOC_CTX *tmp_ctx;
 378         uint32_t num_subkeys, max_subkeylen, max_classlen;
 379         uint32_t num_values, max_valnamelen, max_valbufsize;
 380         uint32_t secdescsize;
 381         uint32_t i;
 382         NTTIME last_changed_time;
 383         struct winreg_String classname;
 384
 385         struct spoolss_PrinterEnumValues *enum_values;
 386
 387         WERROR result = WERR_OK;
 388         NTSTATUS status;
 389
 390         tmp_ctx = talloc_new(mem_ctx);
 391         if (tmp_ctx == NULL) {
 392                 return WERR_NOMEM;
 393         }
 394
 395         ZERO_STRUCT(classname);
 396
 397         status = rpccli_winreg_QueryInfoKey(pipe_handle,
 398                                             tmp_ctx,
 399                                             key_hnd,
 400                                             &classname,
 401                                             &num_subkeys,
 402                                             &max_subkeylen,
 403                                             &max_classlen,
 404                                             &num_values,
 405                                             &max_valnamelen,
 406                                             &max_valbufsize,
 407                                             &secdescsize,
 408                                             &last_changed_time,
 409                                             &result);
 410         if (!NT_STATUS_IS_OK(status)) {
 411                 DEBUG(0, ("winreg_printer_enumvalues: Could not query info: %s\n",
 412                           nt_errstr(status)));
 413                 if (!W_ERROR_IS_OK(result)) {
 414                         goto error;
 415                 }
 416                 result = ntstatus_to_werror(status);
 417                 goto error;
 418         }
 419
 420         if (num_values == 0) {
 421                 *pnum_values = 0;
 422                 TALLOC_FREE(tmp_ctx);
 423                 return WERR_OK;
 424         }
 425
 426         enum_values = TALLOC_ARRAY(tmp_ctx, struct spoolss_PrinterEnumValues, num_values);
 427         if (enum_values == NULL) {
 428                 result = WERR_NOMEM;
 429                 goto error;
 430         }
 431
 432         for (i = 0; i < num_values; i++) {
 433                 struct spoolss_PrinterEnumValues val;
 434                 struct winreg_ValNameBuf name_buf;
 435                 enum winreg_Type type = REG_NONE;
 436                 uint8_t *data = NULL;
 437                 uint32_t data_size;
 438                 uint32_t length;
 439                 char n = '\0';;
 440
 441                 name_buf.name = &n;
 442                 name_buf.size = max_valnamelen + 2;
 443                 name_buf.length = 0;
 444
 445                 data_size = max_valbufsize;
 446                 data = (uint8_t *) TALLOC(tmp_ctx, data_size);
 447                 length = 0;
 448
 449                 status = rpccli_winreg_EnumValue(pipe_handle,
 450                                                  tmp_ctx,
 451                                                  key_hnd,
 452                                                  i,
 453                                                  &name_buf,
 454                                                  &type,
 455                                                  data,
 456                                                  &data_size,
 457                                                  &length,
 458                                                  &result);
 459                 if (W_ERROR_EQUAL(result, WERR_NO_MORE_ITEMS) ) {
 460                         result = WERR_OK;
 461                         status = NT_STATUS_OK;
 462                         break;
 463                 }
 464
 465                 if (!NT_STATUS_IS_OK(status)) {
 466                         DEBUG(0, ("winreg_printer_enumvalues: Could not enumerate values: %s\n",
 467                                   nt_errstr(status)));
 468                         if (!W_ERROR_IS_OK(result)) {
 469                                 goto error;
 470                         }
 471                         result = ntstatus_to_werror(status);
 472                         goto error;
 473                 }
 474
 475                 if (name_buf.name == NULL) {
 476                         result = WERR_INVALID_PARAMETER;
 477                         goto error;
 478                 }
 479
 480                 val.value_name = talloc_strdup(enum_values, name_buf.name);
 481                 if (val.value_name == NULL) {
 482                         result = WERR_NOMEM;
 483                         goto error;
 484                 }
 485                 val.value_name_len = strlen_m_term(val.value_name) * 2;
 486
 487                 val.type = type;
 488                 val.data_length = data_size;
 489                 val.data = NULL;
 490                 if (val.data_length) {
 491                         val.data = talloc(enum_values, DATA_BLOB);
 492                         if (val.data == NULL) {
 493                                 result = WERR_NOMEM;
 494                                 goto error;
 495                         }
 496                         *val.data = data_blob_talloc(enum_values, data, data_size);
 497                 }
 498
 499                 enum_values[i] = val;
 500         }
 501
 502         *pnum_values = num_values;
 503         if (penum_values) {
 504                 *penum_values = talloc_move(mem_ctx, &enum_values);
 505         }
 506
 507         result = WERR_OK;
 508
 509  error:
 510         TALLOC_FREE(tmp_ctx);
 511         return result;
 512 }
 513
 514 /**
 515  * @internal
 516  *
 517  * @brief Enumerate subkeys of an opened key handle and get the names.
 518  *
 519  * @param[in]  mem_ctx  The memory context to use.
 520  *
 521  * @param[in]  pipe_handle The pipe handle for the rpc connection.
 522  *
 523  * @param[in]  key_hnd  The opened key handle.
 524  *
 525  * @param[in]  pnum_subkeys A pointer to store the number of found subkeys.
 526  *
 527  * @param[in]  psubkeys A pointer to an array to store the found names of
 528  *                      subkeys.
 529  *
 530  * @return                   WERR_OK on success, the corresponding DOS error
 531  *                           code if something gone wrong.
 532  */
 533 static WERROR winreg_printer_enumkeys(TALLOC_CTX *mem_ctx,
 534                                       struct rpc_pipe_client *pipe_handle,
 535                                       struct policy_handle *key_hnd,
 536                                       uint32_t *pnum_subkeys,
 537                                       const char ***psubkeys)
 538 {
 539         TALLOC_CTX *tmp_ctx;
 540         const char **subkeys;
 541         uint32_t num_subkeys, max_subkeylen, max_classlen;
 542         uint32_t num_values, max_valnamelen, max_valbufsize;
 543         uint32_t i;
 544         NTTIME last_changed_time;
 545         uint32_t secdescsize;
 546         struct winreg_String classname;
 547         WERROR result = WERR_OK;
 548         NTSTATUS status;
 549
 550         tmp_ctx = talloc_new(mem_ctx);
 551         if (tmp_ctx == NULL) {
 552                 return WERR_NOMEM;
 553         }
 554
 555         ZERO_STRUCT(classname);
 556
 557         status = rpccli_winreg_QueryInfoKey(pipe_handle,
 558                                             tmp_ctx,
 559                                             key_hnd,
 560                                             &classname,
 561                                             &num_subkeys,
 562                                             &max_subkeylen,
 563                                             &max_classlen,
 564                                             &num_values,
 565                                             &max_valnamelen,
 566                                             &max_valbufsize,
 567                                             &secdescsize,
 568                                             &last_changed_time,
 569                                             &result);
 570         if (!NT_STATUS_IS_OK(status)) {
 571                 DEBUG(0, ("winreg_printer_enumkeys: Could not query info: %s\n",
 572                           nt_errstr(status)));
 573                 if (!W_ERROR_IS_OK(result)) {
 574                         goto error;
 575                 }
 576                 result = ntstatus_to_werror(status);
 577                 goto error;
 578         }
 579
 580         subkeys = talloc_zero_array(tmp_ctx, const char *, num_subkeys + 2);
 581         if (subkeys == NULL) {
 582                 result = WERR_NOMEM;
 583                 goto error;
 584         }
 585
 586         if (num_subkeys == 0) {
 587                 subkeys[0] = talloc_strdup(subkeys, "");
 588                 if (subkeys[0] == NULL) {
 589                         result = WERR_NOMEM;
 590                         goto error;
 591                 }
 592                 *pnum_subkeys = 0;
 593                 if (psubkeys) {
 594                         *psubkeys = talloc_move(mem_ctx, &subkeys);
 595                 }
 596
 597                 TALLOC_FREE(tmp_ctx);
 598                 return WERR_OK;
 599         }
 600
 601         for (i = 0; i < num_subkeys; i++) {
 602                 char c = '\0';
 603                 char n = '\0';
 604                 char *name = NULL;
 605                 struct winreg_StringBuf class_buf;
 606                 struct winreg_StringBuf name_buf;
 607                 NTTIME modtime;
 608
 609                 class_buf.name = &c;
 610                 class_buf.size = max_classlen + 2;
 611                 class_buf.length = 0;
 612
 613                 name_buf.name = &n;
 614                 name_buf.size = max_subkeylen + 2;
 615                 name_buf.length = 0;
 616
 617                 ZERO_STRUCT(modtime);
 618
 619                 status = rpccli_winreg_EnumKey(pipe_handle,
 620                                                tmp_ctx,
 621                                                key_hnd,
 622                                                i,
 623                                                &name_buf,
 624                                                &class_buf,
 625                                                &modtime,
 626                                                &result);
 627                 if (W_ERROR_EQUAL(result, WERR_NO_MORE_ITEMS) ) {
 628                         result = WERR_OK;
 629                         status = NT_STATUS_OK;
 630                         break;
 631                 }
 632
 633                 if (!NT_STATUS_IS_OK(status)) {
 634                         DEBUG(0, ("winreg_printer_enumkeys: Could not enumerate keys: %s\n",
 635                                   nt_errstr(status)));
 636                         if (!W_ERROR_IS_OK(result)) {
 637                                 goto error;
 638                         }
 639                         result = ntstatus_to_werror(status);
 640                         goto error;
 641                 }
 642
 643                 if (name_buf.name == NULL) {
 644                         result = WERR_INVALID_PARAMETER;
 645                         goto error;
 646                 }
 647
 648                 name = talloc_strdup(subkeys, name_buf.name);
 649                 if (name == NULL) {
 650                         result = WERR_NOMEM;
 651                         goto error;
 652                 }
 653
 654                 subkeys[i] = name;
 655         }
 656
 657         *pnum_subkeys = num_subkeys;
 658         if (psubkeys) {
 659                 *psubkeys = talloc_move(mem_ctx, &subkeys);
 660         }
 661
 662  error:
 663         TALLOC_FREE(tmp_ctx);
 664         return result;
 665 }
 666
 667 /**
 668  * @internal
 669  *
 670  * @brief A function to delete a key and its subkeys recurively.
 671  *
 672  * @param[in]  mem_ctx  The memory context to use.
 673  *
 674  * @param[in]  pipe_handle The pipe handle for the rpc connection.
 675  *
 676  * @param[in]  hive_handle A opened hive handle to the key.
 677  *
 678  * @param[in]  access_mask The access mask to access the key.
 679  *
 680  * @param[in]  key      The key to delete
 681  *
 682  * @return              WERR_OK on success, the corresponding DOS error
 683  *                      code if something gone wrong.
 684  */
 685 static WERROR winreg_printer_delete_subkeys(TALLOC_CTX *mem_ctx,
 686                                             struct rpc_pipe_client *pipe_handle,
 687                                             struct policy_handle *hive_handle,
 688                                             uint32_t access_mask,
 689                                             const char *key)
 690 {
 691         const char **subkeys = NULL;
 692         uint32_t num_subkeys = 0;
 693         struct policy_handle key_hnd;
 694         struct winreg_String wkey;
 695         WERROR result = WERR_OK;
 696         NTSTATUS status;
 697         uint32_t i;
 698
 699         ZERO_STRUCT(key_hnd);
 700         wkey.name = key;
 701
 702         DEBUG(2, ("winreg_printer_delete_subkeys: delete key %s\n", key));
 703         /* open the key */
 704         status = rpccli_winreg_OpenKey(pipe_handle,
 705                                        mem_ctx,
 706                                        hive_handle,
 707                                        wkey,
 708                                        0,
 709                                        access_mask,
 710                                        &key_hnd,
 711                                        &result);
 712         if (!NT_STATUS_IS_OK(status)) {
 713                 DEBUG(0, ("winreg_printer_delete_subkeys: Could not open key %s: %s\n",
 714                           wkey.name, nt_errstr(status)));
 715                 if (!W_ERROR_IS_OK(result)) {
 716                         return result;
 717                 }
 718                 return ntstatus_to_werror(status);
 719         }
 720
 721         result = winreg_printer_enumkeys(mem_ctx,
 722                                          pipe_handle,
 723                                          &key_hnd,
 724                                          &num_subkeys,
 725                                          &subkeys);
 726         if (!W_ERROR_IS_OK(result)) {
 727                 goto done;
 728         }
 729
 730         for (i = 0; i < num_subkeys; i++) {
 731                 /* create key + subkey */
 732                 char *subkey = talloc_asprintf(mem_ctx, "%s\\%s", key, subkeys[i]);
 733                 if (subkey == NULL) {
 734                         goto done;
 735                 }
 736
 737                 DEBUG(2, ("winreg_printer_delete_subkeys: delete subkey %s\n", subkey));
 738                 result = winreg_printer_delete_subkeys(mem_ctx,
 739                                                        pipe_handle,
 740                                                        hive_handle,
 741                                                        access_mask,
 742                                                        subkey);
 743                 if (!W_ERROR_IS_OK(result)) {
 744                         goto done;
 745                 }
 746         }
 747
 748         if (is_valid_policy_hnd(&key_hnd)) {
 749                 rpccli_winreg_CloseKey(pipe_handle, mem_ctx, &key_hnd, NULL);
 750         }
 751
 752         wkey.name = key;
 753
 754         status = rpccli_winreg_DeleteKey(pipe_handle,
 755                                          mem_ctx,
 756                                          hive_handle,
 757                                          wkey,
 758                                          &result);
 759
 760 done:
 761         if (is_valid_policy_hnd(&key_hnd)) {
 762                 rpccli_winreg_CloseKey(pipe_handle, mem_ctx, &key_hnd, NULL);
 763         }
 764
 765         return result;
 766 }
 767
 768 static WERROR winreg_printer_write_sz(TALLOC_CTX *mem_ctx,
 769                                       struct rpc_pipe_client *pipe_handle,
 770                                       struct policy_handle *key_handle,
 771                                       const char *value,
 772                                       const char *data)
 773 {
 774         struct winreg_String wvalue;
 775         DATA_BLOB blob;
 776         WERROR result = WERR_OK;
 777         NTSTATUS status;
 778
 779         wvalue.name = value;
 780         if (data == NULL) {
 781                 blob = data_blob_string_const("");
 782         } else {
 783                 if (!push_reg_sz(mem_ctx, &blob, data)) {
 784                         DEBUG(0, ("winreg_printer_write_sz: Could not marshall string %s for %s\n",
 785                                 data, wvalue.name));
 786                         return WERR_NOMEM;
 787                 }
 788         }
 789         status = rpccli_winreg_SetValue(pipe_handle,
 790                                         mem_ctx,
 791                                         key_handle,
 792                                         wvalue,
 793                                         REG_SZ,
 794                                         blob.data,
 795                                         blob.length,
 796                                         &result);
 797         if (!NT_STATUS_IS_OK(status)) {
 798                 DEBUG(0, ("winreg_printer_write_sz: Could not set value %s: %s\n",
 799                         wvalue.name, win_errstr(result)));
 800                 if (!W_ERROR_IS_OK(result)) {
 801                         result = ntstatus_to_werror(status);
 802                 }
 803         }
 804
 805         return result;
 806 }
 807
 808 static WERROR winreg_printer_write_dword(TALLOC_CTX *mem_ctx,
 809                                          struct rpc_pipe_client *pipe_handle,
 810                                          struct policy_handle *key_handle,
 811                                          const char *value,
 812                                          uint32_t data)
 813 {
 814         struct winreg_String wvalue;
 815         DATA_BLOB blob;
 816         WERROR result = WERR_OK;
 817         NTSTATUS status;
 818
 819         wvalue.name = value;
 820         blob = data_blob_talloc(mem_ctx, NULL, 4);
 821         SIVAL(blob.data, 0, data);
 822
 823         status = rpccli_winreg_SetValue(pipe_handle,
 824                                         mem_ctx,
 825                                         key_handle,
 826                                         wvalue,
 827                                         REG_DWORD,
 828                                         blob.data,
 829                                         blob.length,
 830                                         &result);
 831         if (!NT_STATUS_IS_OK(status)) {
 832                 DEBUG(0, ("winreg_printer_write_dword: Could not set value %s: %s\n",
 833                         wvalue.name, win_errstr(result)));
 834                 if (!W_ERROR_IS_OK(result)) {
 835                         result = ntstatus_to_werror(status);
 836                 }
 837         }
 838
 839         return result;
 840 }
 841
 842 static WERROR winreg_printer_write_binary(TALLOC_CTX *mem_ctx,
 843                                           struct rpc_pipe_client *pipe_handle,
 844                                           struct policy_handle *key_handle,
 845                                           const char *value,
 846                                           DATA_BLOB blob)
 847 {
 848         struct winreg_String wvalue;
 849         WERROR result = WERR_OK;
 850         NTSTATUS status;
 851
 852         wvalue.name = value;
 853         status = rpccli_winreg_SetValue(pipe_handle,
 854                                         mem_ctx,
 855                                         key_handle,
 856                                         wvalue,
 857                                         REG_BINARY,
 858                                         blob.data,
 859                                         blob.length,
 860                                         &result);
 861         if (!NT_STATUS_IS_OK(status)) {
 862                 DEBUG(0, ("winreg_printer_write_binary: Could not set value %s: %s\n",
 863                         wvalue.name, win_errstr(result)));
 864                 if (!W_ERROR_IS_OK(result)) {
 865                         result = ntstatus_to_werror(status);
 866                 }
 867         }
 868
 869         return result;
 870 }
 871
 872 static WERROR winreg_printer_query_binary(TALLOC_CTX *mem_ctx,
 873                                           struct rpc_pipe_client *pipe_handle,
 874                                           struct policy_handle *key_handle,
 875                                           const char *value,
 876                                           DATA_BLOB *data)
 877 {
 878         struct winreg_String wvalue;
 879         enum winreg_Type type;
 880         WERROR result = WERR_OK;
 881         uint32_t value_len = 0;
 882         uint32_t data_size = 0;
 883         NTSTATUS status;
 884         DATA_BLOB blob;
 885
 886         wvalue.name = value;
 887         status = rpccli_winreg_QueryValue(pipe_handle,
 888                                           mem_ctx,
 889                                           key_handle,
 890                                           &wvalue,
 891                                           &type,
 892                                           NULL,
 893                                           &data_size,
 894                                           &value_len,
 895                                           &result);
 896         if (!NT_STATUS_IS_OK(status)) {
 897                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
 898                           wvalue.name, nt_errstr(status)));
 899                 if (!W_ERROR_IS_OK(result)) {
 900                         goto done;
 901                 }
 902                 result = ntstatus_to_werror(status);
 903                 goto done;
 904         }
 905
 906         if (type != REG_BINARY) {
 907                 result = WERR_INVALID_DATATYPE;
 908                 goto done;
 909         }
 910         blob = data_blob_talloc(mem_ctx, NULL, data_size);
 911         if (blob.data == NULL) {
 912                 result = WERR_NOMEM;
 913                 goto done;
 914         }
 915         value_len = 0;
 916
 917         status = rpccli_winreg_QueryValue(pipe_handle,
 918                                           mem_ctx,
 919                                           key_handle,
 920                                           &wvalue,
 921                                           &type,
 922                                           blob.data,
 923                                           &data_size,
 924                                           &value_len,
 925                                           &result);
 926         if (!NT_STATUS_IS_OK(status)) {
 927                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
 928                           wvalue.name, nt_errstr(status)));
 929                 if (!W_ERROR_IS_OK(result)) {
 930                         result = ntstatus_to_werror(status);
 931                 }
 932                 goto done;
 933         }
 934
 935         if (data) {
 936                 data->data = blob.data;
 937                 data->length = blob.length;
 938         }
 939 done:
 940         return result;
 941 }
 942
 943 static WERROR winreg_printer_query_dword(TALLOC_CTX *mem_ctx,
 944                                          struct rpc_pipe_client *pipe_handle,
 945                                          struct policy_handle *key_handle,
 946                                          const char *value,
 947                                          uint32_t *data)
 948 {
 949         struct winreg_String wvalue;
 950         enum winreg_Type type;
 951         WERROR result = WERR_OK;
 952         uint32_t value_len = 0;
 953         uint32_t data_size = 0;
 954         NTSTATUS status;
 955         DATA_BLOB blob;
 956
 957         wvalue.name = value;
 958         status = rpccli_winreg_QueryValue(pipe_handle,
 959                                           mem_ctx,
 960                                           key_handle,
 961                                           &wvalue,
 962                                           &type,
 963                                           NULL,
 964                                           &data_size,
 965                                           &value_len,
 966                                           &result);
 967         if (!NT_STATUS_IS_OK(status)) {
 968                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
 969                           wvalue.name, nt_errstr(status)));
 970                 if (!W_ERROR_IS_OK(result)) {
 971                         goto done;
 972                 }
 973                 result = ntstatus_to_werror(status);
 974                 goto done;
 975         }
 976
 977         if (type != REG_DWORD) {
 978                 result = WERR_INVALID_DATATYPE;
 979                 goto done;
 980         }
 981
 982         if (data_size != 4) {
 983                 result = WERR_INVALID_DATA;
 984                 goto done;
 985         }
 986
 987         blob = data_blob_talloc(mem_ctx, NULL, data_size);
 988         if (blob.data == NULL) {
 989                 result = WERR_NOMEM;
 990                 goto done;
 991         }
 992         value_len = 0;
 993
 994         status = rpccli_winreg_QueryValue(pipe_handle,
 995                                           mem_ctx,
 996                                           key_handle,
 997                                           &wvalue,
 998                                           &type,
 999                                           blob.data,
1000                                           &data_size,
1001                                           &value_len,
1002                                           &result);
1003         if (!NT_STATUS_IS_OK(status)) {
1004                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
1005                           wvalue.name, nt_errstr(status)));
1006                 if (!W_ERROR_IS_OK(result)) {
1007                         result = ntstatus_to_werror(status);
1008                 }
1009                 goto done;
1010         }
1011
1012         if (data) {
1013                 *data = IVAL(blob.data, 0);
1014         }
1015 done:
1016         return result;
1017 }
1018
1019 static WERROR winreg_printer_write_multi_sz(TALLOC_CTX *mem_ctx,
1020                                             struct rpc_pipe_client *pipe_handle,
1021                                             struct policy_handle *key_handle,
1022                                             const char *value,
1023                                             const char **data)
1024 {
1025         struct winreg_String wvalue;
1026         DATA_BLOB blob;
1027         WERROR result = WERR_OK;
1028         NTSTATUS status;
1029
1030         wvalue.name = value;
1031         if (!push_reg_multi_sz(mem_ctx, &blob, data)) {
1032                 return WERR_NOMEM;
1033         }
1034         status = rpccli_winreg_SetValue(pipe_handle,
1035                                         mem_ctx,
1036                                         key_handle,
1037                                         wvalue,
1038                                         REG_MULTI_SZ,
1039                                         blob.data,
1040                                         blob.length,
1041                                         &result);
1042         if (!NT_STATUS_IS_OK(status)) {
1043                 DEBUG(0, ("winreg_printer_write_multi_sz: Could not set value %s: %s\n",
1044                         wvalue.name, win_errstr(result)));
1045                 if (!W_ERROR_IS_OK(result)) {
1046                         result = ntstatus_to_werror(status);
1047                 }
1048         }
1049
1050         return result;
1051 }
1052
1053 static WERROR winreg_printer_opendriver(TALLOC_CTX *mem_ctx,
1054                                         struct auth_serversupplied_info *server_info,
1055                                         const char *drivername,
1056                                         const char *architecture,
1057                                         uint32_t version,
1058                                         uint32_t access_mask,
1059                                         bool create,
1060                                         struct rpc_pipe_client **winreg_pipe,
1061                                         struct policy_handle *hive_hnd,
1062                                         struct policy_handle *key_hnd)
1063 {
1064         WERROR result;
1065         char *key_name;
1066
1067         key_name = talloc_asprintf(mem_ctx, "%s\\Environments\\%s\\Drivers\\Version-%u",
1068                                    TOP_LEVEL_CONTROL_KEY,
1069                                    architecture, version);
1070         if (!key_name) {
1071                 return WERR_NOMEM;
1072         }
1073
1074         result = winreg_printer_openkey(mem_ctx,
1075                                         server_info,
1076                                         winreg_pipe,
1077                                         key_name,
1078                                         drivername,
1079                                         create,
1080                                         access_mask,
1081                                         hive_hnd,
1082                                         key_hnd);
1083         return result;
1084 }
1085
1086 static WERROR winreg_enumval_to_dword(TALLOC_CTX *mem_ctx,
1087                                       struct spoolss_PrinterEnumValues *v,
1088                                       const char *valuename, uint32_t *dw)
1089 {
1090         /* just return if it is not the one we are looking for */
1091         if (strcmp(valuename, v->value_name) != 0) {
1092                 return WERR_NOT_FOUND;
1093         }
1094
1095         if (v->type != REG_DWORD) {
1096                 return WERR_INVALID_DATATYPE;
1097         }
1098
1099         *dw = IVAL(v->data->data, 0);
1100         return WERR_OK;
1101 }
1102
1103 static WERROR winreg_enumval_to_sz(TALLOC_CTX *mem_ctx,
1104                                    struct spoolss_PrinterEnumValues *v,
1105                                    const char *valuename, const char **_str)
1106 {
1107         /* just return if it is not the one we are looking for */
1108         if (strcmp(valuename, v->value_name) != 0) {
1109                 return WERR_NOT_FOUND;
1110         }
1111
1112         if (v->type != REG_SZ) {
1113                 return WERR_INVALID_DATATYPE;
1114         }
1115
1116         if (!pull_reg_sz(mem_ctx, v->data, _str)) {
1117                 return WERR_NOMEM;
1118         }
1119
1120         return WERR_OK;
1121 }
1122
1123 static WERROR winreg_enumval_to_multi_sz(TALLOC_CTX *mem_ctx,
1124                                          struct spoolss_PrinterEnumValues *v,
1125                                          const char *valuename,
1126                                          const char ***array)
1127 {
1128         /* just return if it is not the one we are looking for */
1129         if (strcmp(valuename, v->value_name) != 0) {
1130                 return WERR_NOT_FOUND;
1131         }
1132
1133         if (v->type != REG_MULTI_SZ) {
1134                 return WERR_INVALID_DATATYPE;
1135         }
1136
1137         if (!pull_reg_multi_sz(mem_ctx, v->data, array)) {
1138                 return WERR_NOMEM;
1139         }
1140
1141         return WERR_OK;
1142 }
1143
1144 static WERROR winreg_printer_write_date(TALLOC_CTX *mem_ctx,
1145                                         struct rpc_pipe_client *pipe_handle,
1146                                         struct policy_handle *key_handle,
1147                                         const char *value,
1148                                         NTTIME data)
1149 {
1150         struct winreg_String wvalue;
1151         DATA_BLOB blob;
1152         WERROR result = WERR_OK;
1153         NTSTATUS status;
1154         const char *str;
1155         struct tm *tm;
1156         time_t t;
1157
1158         t = nt_time_to_unix(data);
1159         tm = localtime(&t);
1160         str = talloc_asprintf(mem_ctx, "%02d/%02d/%04d",
1161                               tm->tm_mon + 1, tm->tm_mday, tm->tm_year + 1900);
1162         if (!str) {
1163                 return WERR_NOMEM;
1164         }
1165
1166         wvalue.name = value;
1167         if (!push_reg_sz(mem_ctx, &blob, str)) {
1168                 return WERR_NOMEM;
1169         }
1170         status = rpccli_winreg_SetValue(pipe_handle,
1171                                         mem_ctx,
1172                                         key_handle,
1173                                         wvalue,
1174                                         REG_SZ,
1175                                         blob.data,
1176                                         blob.length,
1177                                         &result);
1178         if (!NT_STATUS_IS_OK(status)) {
1179                 DEBUG(0, ("winreg_printer_write_date: Could not set value %s: %s\n",
1180                         wvalue.name, win_errstr(result)));
1181                 if (!W_ERROR_IS_OK(result)) {
1182                         result = ntstatus_to_werror(status);
1183                 }
1184         }
1185
1186         return result;
1187 }
1188
1189 static WERROR winreg_printer_date_to_NTTIME(const char *str, NTTIME *data)
1190 {
1191         struct tm tm;
1192         time_t t;
1193
1194         ZERO_STRUCT(tm);
1195
1196         if (sscanf(str, "%d/%d/%d",
1197                    &tm.tm_mon, &tm.tm_mday, &tm.tm_year) != 3) {
1198                 return WERR_INVALID_PARAMETER;
1199         }
1200         tm.tm_mon -= 1;
1201         tm.tm_year -= 1900;
1202         tm.tm_isdst = -1;
1203
1204         t = mktime(&tm);
1205         unix_to_nt_time(data, t);
1206
1207         return WERR_OK;
1208 }
1209
1210 static WERROR winreg_printer_write_ver(TALLOC_CTX *mem_ctx,
1211                                        struct rpc_pipe_client *pipe_handle,
1212                                        struct policy_handle *key_handle,
1213                                        const char *value,
1214                                        uint64_t data)
1215 {
1216         struct winreg_String wvalue;
1217         DATA_BLOB blob;
1218         WERROR result = WERR_OK;
1219         NTSTATUS status;
1220         char *str;
1221
1222         /* FIXME: check format is right,
1223          *      this needs to be something like: 6.1.7600.16385 */
1224         str = talloc_asprintf(mem_ctx, "%u.%u.%u.%u",
1225                               (unsigned)((data >> 48) & 0xFFFF),
1226                               (unsigned)((data >> 32) & 0xFFFF),
1227                               (unsigned)((data >> 16) & 0xFFFF),
1228                               (unsigned)(data & 0xFFFF));
1229         if (!str) {
1230                 return WERR_NOMEM;
1231         }
1232
1233         wvalue.name = value;
1234         if (!push_reg_sz(mem_ctx, &blob, str)) {
1235                 return WERR_NOMEM;
1236         }
1237         status = rpccli_winreg_SetValue(pipe_handle,
1238                                         mem_ctx,
1239                                         key_handle,
1240                                         wvalue,
1241                                         REG_SZ,
1242                                         blob.data,
1243                                         blob.length,
1244                                         &result);
1245         if (!NT_STATUS_IS_OK(status)) {
1246                 DEBUG(0, ("winreg_printer_write_date: Could not set value %s: %s\n",
1247                         wvalue.name, win_errstr(result)));
1248                 if (!W_ERROR_IS_OK(result)) {
1249                         result = ntstatus_to_werror(status);
1250                 }
1251         }
1252
1253         return result;
1254 }
1255
1256 static WERROR winreg_printer_ver_to_dword(const char *str, uint64_t *data)
1257 {
1258         unsigned int v1, v2, v3, v4;
1259
1260         if (sscanf(str, "%u.%u.%u.%u", &v1, &v2, &v3, &v4) != 4) {
1261                 return WERR_INVALID_PARAMETER;
1262         }
1263
1264         *data = ((uint64_t)(v1 & 0xFFFF) << 48) +
1265                 ((uint64_t)(v2 & 0xFFFF) << 32) +
1266                 ((uint64_t)(v3 & 0xFFFF) << 16) +
1267                 (uint64_t)(v2 & 0xFFFF);
1268
1269         return WERR_OK;
1270 }
1271
1272 /********************************************************************
1273  Public winreg function for spoolss
1274 ********************************************************************/
1275
1276 WERROR winreg_create_printer(TALLOC_CTX *mem_ctx,
1277                              struct auth_serversupplied_info *server_info,
1278                              const char *servername,
1279                              const char *sharename)
1280 {
1281         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
1282         struct rpc_pipe_client *winreg_pipe = NULL;
1283         struct policy_handle hive_hnd, key_hnd;
1284         struct spoolss_SetPrinterInfo2 *info2;
1285         struct security_descriptor *secdesc;
1286         struct winreg_String wkey, wkeyclass;
1287         const char *path;
1288         const char *subkeys[] = { SPOOL_DSDRIVER_KEY, SPOOL_DSSPOOLER_KEY, SPOOL_PRINTERDATA_KEY };
1289         uint32_t i, count = ARRAY_SIZE(subkeys);
1290         uint32_t info2_mask = 0;
1291         WERROR result = WERR_OK;
1292         TALLOC_CTX *tmp_ctx;
1293
1294         tmp_ctx = talloc_new(mem_ctx);
1295         if (tmp_ctx == NULL) {
1296                 return WERR_NOMEM;
1297         }
1298
1299         path = winreg_printer_data_keyname(tmp_ctx, sharename);
1300         if (path == NULL) {
1301                 TALLOC_FREE(tmp_ctx);
1302                 return WERR_NOMEM;
1303         }
1304
1305         ZERO_STRUCT(hive_hnd);
1306         ZERO_STRUCT(key_hnd);
1307
1308         result = winreg_printer_openkey(tmp_ctx,
1309                                         server_info,
1310                                         &winreg_pipe,
1311                                         path,
1312                                         "",
1313                                         false,
1314                                         access_mask,
1315                                         &hive_hnd,
1316                                         &key_hnd);
1317         if (W_ERROR_IS_OK(result)) {
1318                 DEBUG(2, ("winreg_create_printer: Skipping, %s already exists\n", path));
1319                 goto done;
1320         } else if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
1321                 DEBUG(2, ("winreg_create_printer: Creating default values in %s\n", path));
1322         } else if (!W_ERROR_IS_OK(result)) {
1323                 DEBUG(0, ("winreg_create_printer: Could not open key %s: %s\n",
1324                         path, win_errstr(result)));
1325                 goto done;
1326         }
1327
1328         /* Create the main key */
1329         result = winreg_printer_openkey(tmp_ctx,
1330                                         server_info,
1331                                         &winreg_pipe,
1332                                         path,
1333                                         "",
1334                                         true,
1335                                         access_mask,
1336                                         &hive_hnd,
1337                                         &key_hnd);
1338         if (!W_ERROR_IS_OK(result)) {
1339                 DEBUG(0, ("winreg_create_printer_keys: Could not create key %s: %s\n",
1340                         path, win_errstr(result)));
1341                 goto done;
1342         }
1343
1344         if (is_valid_policy_hnd(&key_hnd)) {
1345                 rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1346         }
1347
1348         /* Create subkeys */
1349         for (i = 0; i < count; i++) {
1350                 NTSTATUS status;
1351                 enum winreg_CreateAction action = REG_ACTION_NONE;
1352
1353                 ZERO_STRUCT(key_hnd);
1354                 ZERO_STRUCT(wkey);
1355
1356                 wkey.name = talloc_asprintf(tmp_ctx, "%s\\%s", path, subkeys[i]);
1357                 if (wkey.name == NULL) {
1358                         result = WERR_NOMEM;
1359                         goto done;
1360                 }
1361
1362                 ZERO_STRUCT(wkeyclass);
1363                 wkeyclass.name = "";
1364
1365                 status = rpccli_winreg_CreateKey(winreg_pipe,
1366                                                  tmp_ctx,
1367                                                  &hive_hnd,
1368                                                  wkey,
1369                                                  wkeyclass,
1370                                                  0,
1371                                                  access_mask,
1372                                                  NULL,
1373                                                  &key_hnd,
1374                                                  &action,
1375                                                  &result);
1376                 if (!NT_STATUS_IS_OK(status)) {
1377                         DEBUG(0, ("winreg_create_printer_keys: Could not create key %s: %s\n",
1378                                 wkey.name, win_errstr(result)));
1379                         if (!W_ERROR_IS_OK(result)) {
1380                                 result = ntstatus_to_werror(status);
1381                         }
1382                         goto done;
1383                 }
1384
1385                 switch (i) {
1386                 case 1: {
1387                         const char *dnssuffix;
1388                         const char *longname;
1389                         const char *uncname;
1390
1391                         result = winreg_printer_write_sz(tmp_ctx,
1392                                                          winreg_pipe,
1393                                                          &key_hnd,
1394                                                          SPOOL_REG_PRINTERNAME,
1395                                                          sharename);
1396                         if (!W_ERROR_IS_OK(result)) {
1397                                 goto done;
1398                         }
1399
1400                         result = winreg_printer_write_sz(tmp_ctx,
1401                                                          winreg_pipe,
1402                                                          &key_hnd,
1403                                                          SPOOL_REG_SHORTSERVERNAME,
1404                                                          global_myname());
1405                         if (!W_ERROR_IS_OK(result)) {
1406                                 goto done;
1407                         }
1408
1409                         /* We make the assumption that the netbios name
1410                          * is the same as the DNS name since the former
1411                          * will be what we used to join the domain
1412                          */
1413                         dnssuffix = get_mydnsdomname(tmp_ctx);
1414                         if (dnssuffix != NULL && dnssuffix[0] != '\0') {
1415                                 longname = talloc_asprintf(tmp_ctx, "%s.%s", global_myname(), dnssuffix);
1416                         } else {
1417                                 longname = talloc_strdup(tmp_ctx, global_myname());
1418                         }
1419                         if (longname == NULL) {
1420                                 result = WERR_NOMEM;
1421                                 goto done;
1422                         }
1423
1424                         result = winreg_printer_write_sz(tmp_ctx,
1425                                                          winreg_pipe,
1426                                                          &key_hnd,
1427                                                          SPOOL_REG_SERVERNAME,
1428                                                          longname);
1429                         if (!W_ERROR_IS_OK(result)) {
1430                                 goto done;
1431                         }
1432
1433                         uncname = talloc_asprintf(tmp_ctx, "\\\\%s\\%s",
1434                                                   longname, sharename);
1435                         if (uncname == NULL) {
1436                                 result = WERR_NOMEM;
1437                                 goto done;
1438                         }
1439
1440                         result = winreg_printer_write_sz(tmp_ctx,
1441                                                          winreg_pipe,
1442                                                          &key_hnd,
1443                                                          SPOOL_REG_UNCNAME,
1444                                                          uncname);
1445                         if (!W_ERROR_IS_OK(result)) {
1446                                 goto done;
1447                         }
1448
1449                         result = winreg_printer_write_dword(tmp_ctx,
1450                                                             winreg_pipe,
1451                                                             &key_hnd,
1452                                                             SPOOL_REG_VERSIONNUMBER,
1453                                                             4);
1454                         if (!W_ERROR_IS_OK(result)) {
1455                                 goto done;
1456                         }
1457
1458                         result = winreg_printer_write_dword(tmp_ctx,
1459                                                             winreg_pipe,
1460                                                             &key_hnd,
1461                                                             SPOOL_REG_PRINTSTARTTIME,
1462                                                             0);
1463                         if (!W_ERROR_IS_OK(result)) {
1464                                 goto done;
1465                         }
1466
1467                         result = winreg_printer_write_dword(tmp_ctx,
1468                                                             winreg_pipe,
1469                                                             &key_hnd,
1470                                                             SPOOL_REG_PRINTENDTIME,
1471                                                             0);
1472                         if (!W_ERROR_IS_OK(result)) {
1473                                 goto done;
1474                         }
1475
1476                         result = winreg_printer_write_dword(tmp_ctx,
1477                                                             winreg_pipe,
1478                                                             &key_hnd,
1479                                                             SPOOL_REG_PRIORITY,
1480                                                             1);
1481                         if (!W_ERROR_IS_OK(result)) {
1482                                 goto done;
1483                         }
1484
1485                         result = winreg_printer_write_dword(tmp_ctx,
1486                                                             winreg_pipe,
1487                                                             &key_hnd,
1488                                                             SPOOL_REG_PRINTKEEPPRINTEDJOBS,
1489                                                             0);
1490                         if (!W_ERROR_IS_OK(result)) {
1491                                 goto done;
1492                         }
1493                 } /* case 1 */
1494                 default:
1495                         break;
1496                 }
1497
1498                 if (is_valid_policy_hnd(&key_hnd)) {
1499                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1500                 }
1501         }
1502         info2 = talloc_zero(tmp_ctx, struct spoolss_SetPrinterInfo2);
1503         if (info2 == NULL) {
1504                 result = WERR_NOMEM;
1505                 goto done;
1506         }
1507
1508         if (servername != NULL) {
1509                 info2->printername = talloc_asprintf(tmp_ctx, "\\\\%s\\%s",
1510                                                      servername, sharename);
1511         } else {
1512                 info2->printername = sharename;
1513         }
1514         if (info2->printername == NULL) {
1515                 result = WERR_NOMEM;
1516                 goto done;
1517         }
1518         info2_mask |= SPOOLSS_PRINTER_INFO_PRINTERNAME;
1519
1520         info2->sharename = sharename;
1521         info2_mask |= SPOOLSS_PRINTER_INFO_SHARENAME;
1522
1523         info2->portname = SAMBA_PRINTER_PORT_NAME;
1524         info2_mask |= SPOOLSS_PRINTER_INFO_PORTNAME;
1525
1526         info2->printprocessor = "winprint";
1527         info2_mask |= SPOOLSS_PRINTER_INFO_PRINTPROCESSOR;
1528
1529         info2->datatype = "RAW";
1530         info2_mask |= SPOOLSS_PRINTER_INFO_DATATYPE;
1531
1532         info2->comment = "";
1533         info2_mask |= SPOOLSS_PRINTER_INFO_COMMENT;
1534
1535         info2->attributes = PRINTER_ATTRIBUTE_SAMBA;
1536         info2_mask |= SPOOLSS_PRINTER_INFO_ATTRIBUTES;
1537
1538         info2->starttime = 0; /* Minutes since 12:00am GMT */
1539         info2_mask |= SPOOLSS_PRINTER_INFO_STARTTIME;
1540
1541         info2->untiltime = 0; /* Minutes since 12:00am GMT */
1542         info2_mask |= SPOOLSS_PRINTER_INFO_UNTILTIME;
1543
1544         info2->priority = 1;
1545         info2_mask |= SPOOLSS_PRINTER_INFO_PRIORITY;
1546
1547         info2->defaultpriority = 1;
1548         info2_mask |= SPOOLSS_PRINTER_INFO_DEFAULTPRIORITY;
1549
1550         result = spoolss_create_default_secdesc(tmp_ctx, &secdesc);
1551         if (!W_ERROR_IS_OK(result)) {
1552                 goto done;
1553         }
1554         info2_mask |= SPOOLSS_PRINTER_INFO_SECDESC;
1555
1556         /*
1557          * Don't write a default Device Mode to the registry! The Device Mode is
1558          * only written to disk with a SetPrinter level 2 or 8.
1559          */
1560
1561         result = winreg_update_printer(tmp_ctx,
1562                                        server_info,
1563                                        sharename,
1564                                        info2_mask,
1565                                        info2,
1566                                        NULL,
1567                                        secdesc);
1568
1569 done:
1570         if (winreg_pipe != NULL) {
1571                 if (is_valid_policy_hnd(&key_hnd)) {
1572                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1573                 }
1574                 if (is_valid_policy_hnd(&hive_hnd)) {
1575                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
1576                 }
1577         }
1578
1579         talloc_free(tmp_ctx);
1580         return result;
1581 }
1582
1583 WERROR winreg_update_printer(TALLOC_CTX *mem_ctx,
1584                              struct auth_serversupplied_info *server_info,
1585                              const char *sharename,
1586                              uint32_t info2_mask,
1587                              struct spoolss_SetPrinterInfo2 *info2,
1588                              struct spoolss_DeviceMode *devmode,
1589                              struct security_descriptor *secdesc)
1590 {
1591         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
1592         struct rpc_pipe_client *winreg_pipe = NULL;
1593         struct policy_handle hive_hnd, key_hnd;
1594         int snum = lp_servicenumber(sharename);
1595         enum ndr_err_code ndr_err;
1596         DATA_BLOB blob;
1597         char *path;
1598         WERROR result = WERR_OK;
1599         TALLOC_CTX *tmp_ctx;
1600
1601         tmp_ctx = talloc_new(mem_ctx);
1602         if (tmp_ctx == NULL) {
1603                 return WERR_NOMEM;
1604         }
1605
1606         path = winreg_printer_data_keyname(tmp_ctx, sharename);
1607         if (path == NULL) {
1608                 TALLOC_FREE(tmp_ctx);
1609                 return WERR_NOMEM;
1610         }
1611
1612         ZERO_STRUCT(hive_hnd);
1613         ZERO_STRUCT(key_hnd);
1614
1615         result = winreg_printer_openkey(tmp_ctx,
1616                                         server_info,
1617                                         &winreg_pipe,
1618                                         path,
1619                                         "",
1620                                         true,
1621                                         access_mask,
1622                                         &hive_hnd,
1623                                         &key_hnd);
1624         if (!W_ERROR_IS_OK(result)) {
1625                 DEBUG(0, ("winreg_update_printer: Could not open key %s: %s\n",
1626                         path, win_errstr(result)));
1627                 goto done;
1628         }
1629
1630         if (info2_mask & SPOOLSS_PRINTER_INFO_ATTRIBUTES) {
1631                 result = winreg_printer_write_dword(tmp_ctx,
1632                                                     winreg_pipe,
1633                                                     &key_hnd,
1634                                                     "Attributes",
1635                                                     info2->attributes);
1636                 if (!W_ERROR_IS_OK(result)) {
1637                         goto done;
1638                 }
1639         }
1640
1641 #if 0
1642         if (info2_mask & SPOOLSS_PRINTER_INFO_AVERAGEPPM) {
1643                 result = winreg_printer_write_dword(tmp_ctx,
1644                                                     winreg_pipe,
1645                                                     &key_hnd,
1646                                                     "AveragePpm",
1647                                                     info2->attributes);
1648                 if (!W_ERROR_IS_OK(result)) {
1649                         goto done;
1650                 }
1651         }
1652 #endif
1653
1654         if (info2_mask & SPOOLSS_PRINTER_INFO_COMMENT) {
1655                 result = winreg_printer_write_sz(tmp_ctx,
1656                                                  winreg_pipe,
1657                                                  &key_hnd,
1658                                                  "Description",
1659                                                  info2->comment);
1660                 if (!W_ERROR_IS_OK(result)) {
1661                         goto done;
1662                 }
1663         }
1664
1665         if (info2_mask & SPOOLSS_PRINTER_INFO_DATATYPE) {
1666                 result = winreg_printer_write_sz(tmp_ctx,
1667                                                  winreg_pipe,
1668                                                  &key_hnd,
1669                                                  "Datatype",
1670                                                  info2->datatype);
1671                 if (!W_ERROR_IS_OK(result)) {
1672                         goto done;
1673                 }
1674         }
1675
1676         if (info2_mask & SPOOLSS_PRINTER_INFO_DEFAULTPRIORITY) {
1677                 result = winreg_printer_write_dword(tmp_ctx,
1678                                                     winreg_pipe,
1679                                                     &key_hnd,
1680                                                     "Default Priority",
1681                                                     info2->defaultpriority);
1682                 if (!W_ERROR_IS_OK(result)) {
1683                         goto done;
1684                 }
1685         }
1686
1687         if (info2_mask & SPOOLSS_PRINTER_INFO_DEVMODE) {
1688                 /*
1689                  * Some client drivers freak out if there is a NULL devmode
1690                  * (probably the driver is not checking before accessing
1691                  * the devmode pointer)   --jerry
1692                  */
1693                 if (devmode == NULL && lp_default_devmode(snum) && info2 != NULL) {
1694                         result = spoolss_create_default_devmode(tmp_ctx,
1695                                                                 info2->printername,
1696                                                                 &devmode);
1697                         if (!W_ERROR_IS_OK(result)) {
1698                                 goto done;
1699                         }
1700                 }
1701                 ndr_err = ndr_push_struct_blob(&blob, tmp_ctx, devmode,
1702                                 (ndr_push_flags_fn_t) ndr_push_spoolss_DeviceMode);
1703                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1704                         DEBUG(0, ("winreg_update_printer: Failed to marshall device mode\n"));
1705                         result = WERR_NOMEM;
1706                         goto done;
1707                 }
1708
1709                 result = winreg_printer_write_binary(tmp_ctx,
1710                                                      winreg_pipe,
1711                                                      &key_hnd,
1712                                                      "Default DevMode",
1713                                                      blob);
1714                 if (!W_ERROR_IS_OK(result)) {
1715                         goto done;
1716                 }
1717         }
1718
1719         if (info2_mask & SPOOLSS_PRINTER_INFO_DRIVERNAME) {
1720                 result = winreg_printer_write_sz(tmp_ctx,
1721                                                  winreg_pipe,
1722                                                  &key_hnd,
1723                                                  "Printer Driver",
1724                                                  info2->drivername);
1725                 if (!W_ERROR_IS_OK(result)) {
1726                         goto done;
1727                 }
1728         }
1729
1730         if (info2_mask & SPOOLSS_PRINTER_INFO_LOCATION) {
1731                 result = winreg_printer_write_sz(tmp_ctx,
1732                                                  winreg_pipe,
1733                                                  &key_hnd,
1734                                                  "Location",
1735                                                  info2->location);
1736                 if (!W_ERROR_IS_OK(result)) {
1737                         goto done;
1738                 }
1739         }
1740
1741         if (info2_mask & SPOOLSS_PRINTER_INFO_PARAMETERS) {
1742                 result = winreg_printer_write_sz(tmp_ctx,
1743                                                  winreg_pipe,
1744                                                  &key_hnd,
1745                                                  "Parameters",
1746                                                  info2->parameters);
1747                 if (!W_ERROR_IS_OK(result)) {
1748                         goto done;
1749                 }
1750         }
1751
1752         if (info2_mask & SPOOLSS_PRINTER_INFO_PORTNAME) {
1753                 result = winreg_printer_write_sz(tmp_ctx,
1754                                                  winreg_pipe,
1755                                                  &key_hnd,
1756                                                  "Port",
1757                                                  info2->portname);
1758                 if (!W_ERROR_IS_OK(result)) {
1759                         goto done;
1760                 }
1761         }
1762
1763         if (info2_mask & SPOOLSS_PRINTER_INFO_PRINTERNAME) {
1764                 /*
1765                  * in addprinter: no servername and the printer is the name
1766                  * in setprinter: servername is \\server
1767                  *                and printer is \\server\\printer
1768                  *
1769                  * Samba manages only local printers.
1770                  * we currently don't support things like i
1771                  * path=\\other_server\printer
1772                  *
1773                  * We only store the printername, not \\server\printername
1774                  */
1775                 const char *p = strrchr(info2->printername, '\\');
1776                 if (p == NULL) {
1777                         p = info2->printername;
1778                 } else {
1779                         p++;
1780                 }
1781                 result = winreg_printer_write_sz(tmp_ctx,
1782                                                  winreg_pipe,
1783                                                  &key_hnd,
1784                                                  "Name",
1785                                                  p);
1786                 if (!W_ERROR_IS_OK(result)) {
1787                         goto done;
1788                 }
1789         }
1790
1791         if (info2_mask & SPOOLSS_PRINTER_INFO_PRINTPROCESSOR) {
1792                 result = winreg_printer_write_sz(tmp_ctx,
1793                                                  winreg_pipe,
1794                                                  &key_hnd,
1795                                                  "Print Processor",
1796                                                  info2->printprocessor);
1797                 if (!W_ERROR_IS_OK(result)) {
1798                         goto done;
1799                 }
1800         }
1801
1802         if (info2_mask & SPOOLSS_PRINTER_INFO_PRIORITY) {
1803                 result = winreg_printer_write_dword(tmp_ctx,
1804                                                     winreg_pipe,
1805                                                     &key_hnd,
1806                                                     "Priority",
1807                                                     info2->priority);
1808                 if (!W_ERROR_IS_OK(result)) {
1809                         goto done;
1810                 }
1811         }
1812
1813         if (info2_mask & SPOOLSS_PRINTER_INFO_SECDESC) {
1814                 /*
1815                  * We need a security descriptor, if it isn't specified by
1816                  * AddPrinter{Ex} then create a default descriptor.
1817                  */
1818                 if (secdesc == NULL) {
1819                         result = spoolss_create_default_secdesc(tmp_ctx, &secdesc);
1820                         if (!W_ERROR_IS_OK(result)) {
1821                                 goto done;
1822                         }
1823                 }
1824                 result = winreg_set_printer_secdesc(tmp_ctx,
1825                                                     server_info,
1826                                                     sharename,
1827                                                     secdesc);
1828                 if (!W_ERROR_IS_OK(result)) {
1829                         goto done;
1830                 }
1831         }
1832
1833         if (info2_mask & SPOOLSS_PRINTER_INFO_SEPFILE) {
1834                 result = winreg_printer_write_sz(tmp_ctx,
1835                                                  winreg_pipe,
1836                                                  &key_hnd,
1837                                                  "Separator File",
1838                                                  info2->sepfile);
1839                 if (!W_ERROR_IS_OK(result)) {
1840                         goto done;
1841                 }
1842         }
1843
1844         if (info2_mask & SPOOLSS_PRINTER_INFO_SHARENAME) {
1845                 result = winreg_printer_write_sz(tmp_ctx,
1846                                                  winreg_pipe,
1847                                                  &key_hnd,
1848                                                  "Share Name",
1849                                                  info2->sharename);
1850                 if (!W_ERROR_IS_OK(result)) {
1851                         goto done;
1852                 }
1853         }
1854
1855         if (info2_mask & SPOOLSS_PRINTER_INFO_STARTTIME) {
1856                 result = winreg_printer_write_dword(tmp_ctx,
1857                                                     winreg_pipe,
1858                                                     &key_hnd,
1859                                                     "StartTime",
1860                                                     info2->starttime);
1861                 if (!W_ERROR_IS_OK(result)) {
1862                         goto done;
1863                 }
1864         }
1865
1866         if (info2_mask & SPOOLSS_PRINTER_INFO_STATUS) {
1867                 result = winreg_printer_write_dword(tmp_ctx,
1868                                                     winreg_pipe,
1869                                                     &key_hnd,
1870                                                     "Status",
1871                                                     info2->status);
1872                 if (!W_ERROR_IS_OK(result)) {
1873                         goto done;
1874                 }
1875         }
1876
1877         if (info2_mask & SPOOLSS_PRINTER_INFO_UNTILTIME) {
1878                 result = winreg_printer_write_dword(tmp_ctx,
1879                                                     winreg_pipe,
1880                                                     &key_hnd,
1881                                                     "UntilTime",
1882                                                     info2->untiltime);
1883                 if (!W_ERROR_IS_OK(result)) {
1884                         goto done;
1885                 }
1886         }
1887
1888         result = winreg_printer_write_dword(tmp_ctx,
1889                                             winreg_pipe,
1890                                             &key_hnd,
1891                                             "ChangeID",
1892                                             winreg_printer_rev_changeid());
1893         if (!W_ERROR_IS_OK(result)) {
1894                 goto done;
1895         }
1896
1897         result = WERR_OK;
1898 done:
1899         if (winreg_pipe != NULL) {
1900                 if (is_valid_policy_hnd(&key_hnd)) {
1901                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1902                 }
1903                 if (is_valid_policy_hnd(&hive_hnd)) {
1904                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
1905                 }
1906         }
1907
1908         TALLOC_FREE(tmp_ctx);
1909         return result;
1910 }
1911
1912 WERROR winreg_get_printer(TALLOC_CTX *mem_ctx,
1913                           struct auth_serversupplied_info *server_info,
1914                           const char *servername,
1915                           const char *printer,
1916                           struct spoolss_PrinterInfo2 **pinfo2)
1917 {
1918         struct spoolss_PrinterInfo2 *info2;
1919         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
1920         struct rpc_pipe_client *winreg_pipe = NULL;
1921         struct policy_handle hive_hnd, key_hnd;
1922         struct spoolss_PrinterEnumValues *enum_values = NULL;
1923         struct spoolss_PrinterEnumValues *v;
1924         enum ndr_err_code ndr_err;
1925         DATA_BLOB blob;
1926         int snum = lp_servicenumber(printer);
1927         uint32_t num_values = 0;
1928         uint32_t i;
1929         char *path;
1930         WERROR result = WERR_OK;
1931         TALLOC_CTX *tmp_ctx;
1932
1933         tmp_ctx = talloc_new(mem_ctx);
1934         if (tmp_ctx == NULL) {
1935                 return WERR_NOMEM;
1936         }
1937
1938         path = winreg_printer_data_keyname(tmp_ctx, printer);
1939         if (path == NULL) {
1940                 TALLOC_FREE(tmp_ctx);
1941                 return WERR_NOMEM;
1942         }
1943
1944         result = winreg_printer_openkey(tmp_ctx,
1945                                         server_info,
1946                                         &winreg_pipe,
1947                                         path,
1948                                         "",
1949                                         false,
1950                                         access_mask,
1951                                         &hive_hnd,
1952                                         &key_hnd);
1953         if (!W_ERROR_IS_OK(result)) {
1954                 DEBUG(0, ("winreg_get_printer: Could not open key %s: %s\n",
1955                           path, win_errstr(result)));
1956                 goto done;
1957         }
1958
1959         result = winreg_printer_enumvalues(tmp_ctx,
1960                                            winreg_pipe,
1961                                            &key_hnd,
1962                                            &num_values,
1963                                            &enum_values);
1964         if (!W_ERROR_IS_OK(result)) {
1965                 DEBUG(0, ("winreg_get_printer: Could not enumerate values in %s: %s\n",
1966                           path, win_errstr(result)));
1967                 goto done;
1968         }
1969
1970         info2 = talloc_zero(tmp_ctx, struct spoolss_PrinterInfo2);
1971         if (info2 == NULL) {
1972                 result = WERR_NOMEM;
1973                 goto done;
1974         }
1975
1976         info2->servername     = EMPTY_STRING;
1977         info2->printername    = EMPTY_STRING;
1978         info2->sharename      = EMPTY_STRING;
1979         info2->portname       = EMPTY_STRING;
1980         info2->drivername     = EMPTY_STRING;
1981         info2->comment        = EMPTY_STRING;
1982         info2->location       = EMPTY_STRING;
1983         info2->sepfile        = EMPTY_STRING;
1984         info2->printprocessor = EMPTY_STRING;
1985         info2->datatype       = EMPTY_STRING;
1986         info2->parameters     = EMPTY_STRING;
1987
1988         if (servername != NULL && servername[0] != '\0') {
1989                 info2->servername = talloc_asprintf(info2, "\\\\%s", servername);
1990                 if (info2->servername == NULL) {
1991                         result = WERR_NOMEM;
1992                         goto done;
1993                 }
1994         }
1995
1996         for (i = 0; i < num_values; i++) {
1997                 v = &enum_values[i];
1998
1999                 result = winreg_enumval_to_sz(info2,
2000                                               v,
2001                                               "Name",
2002                                               &info2->printername);
2003                 CHECK_ERROR(result);
2004
2005                 result = winreg_enumval_to_sz(info2,
2006                                               v,
2007                                               "Share Name",
2008                                               &info2->sharename);
2009                 CHECK_ERROR(result);
2010
2011                 result = winreg_enumval_to_sz(info2,
2012                                               v,
2013                                               "Port",
2014                                               &info2->portname);
2015                 CHECK_ERROR(result);
2016
2017                 result = winreg_enumval_to_sz(info2,
2018                                               v,
2019                                               "Description",
2020                                               &info2->comment);
2021                 CHECK_ERROR(result);
2022
2023                 result = winreg_enumval_to_sz(info2,
2024                                               v,
2025                                               "Location",
2026                                               &info2->location);
2027                 CHECK_ERROR(result);
2028
2029                 result = winreg_enumval_to_sz(info2,
2030                                               v,
2031                                               "Separator File",
2032                                               &info2->sepfile);
2033                 CHECK_ERROR(result);
2034
2035                 result = winreg_enumval_to_sz(info2,
2036                                               v,
2037                                               "Print Processor",
2038                                               &info2->printprocessor);
2039                 CHECK_ERROR(result);
2040
2041                 result = winreg_enumval_to_sz(info2,
2042                                               v,
2043                                               "Datatype",
2044                                               &info2->datatype);
2045                 CHECK_ERROR(result);
2046
2047                 result = winreg_enumval_to_sz(info2,
2048                                               v,
2049                                               "Parameters",
2050                                               &info2->parameters);
2051                 CHECK_ERROR(result);
2052
2053                 result = winreg_enumval_to_sz(info2,
2054                                               v,
2055                                               "Printer Driver",
2056                                               &info2->drivername);
2057                 CHECK_ERROR(result);
2058
2059                 result = winreg_enumval_to_dword(info2,
2060                                                  v,
2061                                                  "Attributes",
2062                                                  &info2->attributes);
2063                 CHECK_ERROR(result);
2064
2065                 result = winreg_enumval_to_dword(info2,
2066                                                  v,
2067                                                  "Priority",
2068                                                  &info2->priority);
2069                 CHECK_ERROR(result);
2070
2071                 result = winreg_enumval_to_dword(info2,
2072                                                  v,
2073                                                  "Default Priority",
2074                                                  &info2->defaultpriority);
2075                 CHECK_ERROR(result);
2076
2077                 result = winreg_enumval_to_dword(info2,
2078                                                  v,
2079                                                  "StartTime",
2080                                                  &info2->starttime);
2081                 CHECK_ERROR(result);
2082
2083                 result = winreg_enumval_to_dword(info2,
2084                                                  v,
2085                                                  "UntilTime",
2086                                                  &info2->untiltime);
2087                 CHECK_ERROR(result);
2088
2089                 result = winreg_enumval_to_dword(info2,
2090                                                  v,
2091                                                  "Status",
2092                                                  &info2->status);
2093                 CHECK_ERROR(result);
2094
2095                 result = winreg_enumval_to_dword(info2,
2096                                                  v,
2097                                                  "StartTime",
2098                                                  &info2->starttime);
2099                 CHECK_ERROR(result);
2100         }
2101
2102         if (!W_ERROR_IS_OK(result)) {
2103                 DEBUG(0, ("winreg_get_printer: winreg_enumval_to_TYPE() failed "
2104                                         "for %s: %s\n",
2105                                         v->value_name,
2106                                         win_errstr(result)));
2107                 goto done;
2108         }
2109
2110         /* Create the printername */
2111         if (info2->servername[0] != '\0') {
2112                 if (lp_force_printername(snum)) {
2113                         const char *p = talloc_asprintf(info2, "%s\\%s",
2114                                                         info2->servername,
2115                                                         info2->sharename);
2116                                 if (p == NULL) {
2117                                         result = WERR_NOMEM;
2118                                         goto done;
2119                                 }
2120                                 info2->printername = p;
2121                 } else {
2122                         char *p = talloc_asprintf(info2, "%s\\%s",
2123                                                   info2->servername,
2124                                                   info2->printername);
2125                         if (p == NULL) {
2126                                 result = WERR_NOMEM;
2127                                 goto done;
2128                         }
2129                         info2->printername = p;
2130                 }
2131         }
2132
2133         /* Construct the Device Mode */
2134         result = winreg_printer_query_binary(tmp_ctx,
2135                                              winreg_pipe,
2136                                              &key_hnd,
2137                                              "Default DevMode",
2138                                              &blob);
2139         if (W_ERROR_IS_OK(result)) {
2140                 info2->devmode = talloc_zero(info2, struct spoolss_DeviceMode);
2141                 if (info2->devmode == NULL) {
2142                         result = WERR_NOMEM;
2143                         goto done;
2144                 }
2145                 ndr_err = ndr_pull_struct_blob(&blob,
2146                                                info2->devmode,
2147                                                info2->devmode,
2148                                                (ndr_pull_flags_fn_t) ndr_pull_spoolss_DeviceMode);
2149                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2150                         DEBUG(0, ("winreg_get_printer: Failed to unmarshall device mode\n"));
2151                         result = WERR_NOMEM;
2152                         goto done;
2153                 }
2154         }
2155
2156         if (info2->devmode == NULL && lp_default_devmode(snum)) {
2157                 result = spoolss_create_default_devmode(info2,
2158                                                         info2->printername,
2159                                                         &info2->devmode);
2160                 if (!W_ERROR_IS_OK(result)) {
2161                         goto done;
2162                 }
2163         }
2164
2165         if (info2->devmode != NULL) {
2166                 info2->devmode->devicename = talloc_strdup(info2->devmode,
2167                                                            info2->printername);
2168                 if (info2->devmode->devicename == NULL) {
2169                         DEBUG(0, ("winreg_get_printer: Failed to set devicename\n"));
2170                         result = WERR_NOMEM;
2171                         goto done;
2172                 }
2173         }
2174
2175         result = winreg_get_printer_secdesc(info2,
2176                                             server_info,
2177                                             printer,
2178                                             &info2->secdesc);
2179         if (!W_ERROR_IS_OK(result)) {
2180                 goto done;
2181         }
2182
2183         if (pinfo2) {
2184                 *pinfo2 = talloc_move(mem_ctx, &info2);
2185         }
2186
2187         result = WERR_OK;
2188 done:
2189         if (winreg_pipe != NULL) {
2190                 if (is_valid_policy_hnd(&key_hnd)) {
2191                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2192                 }
2193                 if (is_valid_policy_hnd(&hive_hnd)) {
2194                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2195                 }
2196         }
2197
2198         TALLOC_FREE(tmp_ctx);
2199         return result;
2200 }
2201
2202 WERROR winreg_get_printer_secdesc(TALLOC_CTX *mem_ctx,
2203                                   struct auth_serversupplied_info *server_info,
2204                                   const char *sharename,
2205                                   struct spoolss_security_descriptor **psecdesc)
2206 {
2207         struct spoolss_security_descriptor *secdesc;
2208         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2209         struct rpc_pipe_client *winreg_pipe = NULL;
2210         struct policy_handle hive_hnd, key_hnd;
2211         enum ndr_err_code ndr_err;
2212         const char *path;
2213         DATA_BLOB blob;
2214         TALLOC_CTX *tmp_ctx;
2215         WERROR result;
2216
2217         tmp_ctx = talloc_new(mem_ctx);
2218         if (tmp_ctx == NULL) {
2219                 return WERR_NOMEM;
2220         }
2221
2222         path = winreg_printer_data_keyname(tmp_ctx, sharename);
2223         if (path == NULL) {
2224                 talloc_free(tmp_ctx);
2225                 return WERR_NOMEM;
2226         }
2227
2228         ZERO_STRUCT(hive_hnd);
2229         ZERO_STRUCT(key_hnd);
2230
2231         result = winreg_printer_openkey(tmp_ctx,
2232                                         server_info,
2233                                         &winreg_pipe,
2234                                         path,
2235                                         "",
2236                                         false,
2237                                         access_mask,
2238                                         &hive_hnd,
2239                                         &key_hnd);
2240         if (!W_ERROR_IS_OK(result)) {
2241                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
2242                         goto create_default;
2243                 }
2244                 goto done;
2245         }
2246
2247         result = winreg_printer_query_binary(tmp_ctx,
2248                                              winreg_pipe,
2249                                              &key_hnd,
2250                                              "Security",
2251                                              &blob);
2252         if (!W_ERROR_IS_OK(result)) {
2253                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
2254                         goto create_default;
2255                 }
2256                 goto done;
2257         }
2258
2259         secdesc = talloc_zero(tmp_ctx, struct spoolss_security_descriptor);
2260         if (secdesc == NULL) {
2261                 result = WERR_NOMEM;
2262                 goto done;
2263         }
2264         ndr_err = ndr_pull_struct_blob(&blob,
2265                                        secdesc,
2266                                        secdesc,
2267                                        (ndr_pull_flags_fn_t) ndr_pull_security_descriptor);
2268         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2269                 DEBUG(0, ("winreg_get_secdesc: Failed to unmarshall security descriptor\n"));
2270                 result = WERR_NOMEM;
2271                 goto done;
2272         }
2273
2274         if (psecdesc) {
2275                 *psecdesc = talloc_move(mem_ctx, &secdesc);
2276         }
2277
2278         result = WERR_OK;
2279         goto done;
2280
2281 create_default:
2282         result = spoolss_create_default_secdesc(tmp_ctx, &secdesc);
2283         if (!W_ERROR_IS_OK(result)) {
2284                 return result;
2285         }
2286
2287         /* If security descriptor is owned by S-1-1-0 and winbindd is up,
2288            this security descriptor has been created when winbindd was
2289            down.  Take ownership of security descriptor. */
2290         if (sid_equal(secdesc->owner_sid, &global_sid_World)) {
2291                 DOM_SID owner_sid;
2292
2293                 /* Change sd owner to workgroup administrator */
2294
2295                 if (secrets_fetch_domain_sid(lp_workgroup(), &owner_sid)) {
2296                         struct spoolss_security_descriptor *new_secdesc;
2297                         size_t size;
2298
2299                         /* Create new sd */
2300                         sid_append_rid(&owner_sid, DOMAIN_RID_ADMINISTRATOR);
2301
2302                         new_secdesc = make_sec_desc(tmp_ctx,
2303                                                     secdesc->revision,
2304                                                     secdesc->type,
2305                                                     &owner_sid,
2306                                                     secdesc->group_sid,
2307                                                     secdesc->sacl,
2308                                                     secdesc->dacl,
2309                                                     &size);
2310
2311                         if (new_secdesc == NULL) {
2312                                 result = WERR_NOMEM;
2313                                 goto done;
2314                         }
2315
2316                         /* Swap with other one */
2317                         secdesc = new_secdesc;
2318                 }
2319         }
2320
2321         ndr_err = ndr_push_struct_blob(&blob, tmp_ctx, secdesc,
2322                         (ndr_push_flags_fn_t) ndr_push_security_descriptor);
2323         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2324                 DEBUG(0, ("winreg_set_secdesc: Failed to marshall security descriptor\n"));
2325                 result = WERR_NOMEM;
2326                 goto done;
2327         }
2328
2329         result = winreg_printer_write_binary(tmp_ctx,
2330                                              winreg_pipe,
2331                                              &key_hnd,
2332                                              "Security",
2333                                              blob);
2334         if (!W_ERROR_IS_OK(result)) {
2335                 return result;
2336         }
2337
2338         if (psecdesc) {
2339                 *psecdesc = talloc_move(mem_ctx, &secdesc);
2340         }
2341
2342         result = WERR_OK;
2343 done:
2344         if (winreg_pipe != NULL) {
2345                 if (is_valid_policy_hnd(&key_hnd)) {
2346                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2347                 }
2348                 if (is_valid_policy_hnd(&hive_hnd)) {
2349                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2350                 }
2351         }
2352
2353         talloc_free(tmp_ctx);
2354         return result;
2355 }
2356
2357 WERROR winreg_set_printer_secdesc(TALLOC_CTX *mem_ctx,
2358                                   struct auth_serversupplied_info *server_info,
2359                                   const char *sharename,
2360                                   const struct spoolss_security_descriptor *secdesc)
2361 {
2362         const struct spoolss_security_descriptor *new_secdesc = secdesc;
2363         struct spoolss_security_descriptor *old_secdesc;
2364         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2365         struct rpc_pipe_client *winreg_pipe = NULL;
2366         struct policy_handle hive_hnd, key_hnd;
2367         enum ndr_err_code ndr_err;
2368         const char *path;
2369         DATA_BLOB blob;
2370         TALLOC_CTX *tmp_ctx;
2371         WERROR result;
2372
2373         tmp_ctx = talloc_new(mem_ctx);
2374         if (tmp_ctx == NULL) {
2375                 return WERR_NOMEM;
2376         }
2377
2378         path = winreg_printer_data_keyname(tmp_ctx, sharename);
2379         if (path == NULL) {
2380                 talloc_free(tmp_ctx);
2381                 return WERR_NOMEM;
2382         }
2383
2384         /*
2385          * The old owner and group sids of the security descriptor are not
2386          * present when new ACEs are added or removed by changing printer
2387          * permissions through NT.  If they are NULL in the new security
2388          * descriptor then copy them over from the old one.
2389          */
2390         if (!secdesc->owner_sid || !secdesc->group_sid) {
2391                 DOM_SID *owner_sid, *group_sid;
2392                 struct security_acl *dacl, *sacl;
2393                 size_t size;
2394
2395                 result = winreg_get_printer_secdesc(tmp_ctx,
2396                                                     server_info,
2397                                                     sharename,
2398                                                     &old_secdesc);
2399                 if (!W_ERROR_IS_OK(result)) {
2400                         talloc_free(tmp_ctx);
2401                         return result;
2402                 }
2403
2404                 /* Pick out correct owner and group sids */
2405                 owner_sid = secdesc->owner_sid ?
2406                             secdesc->owner_sid :
2407                             old_secdesc->owner_sid;
2408
2409                 group_sid = secdesc->group_sid ?
2410                             secdesc->group_sid :
2411                             old_secdesc->group_sid;
2412
2413                 dacl = secdesc->dacl ?
2414                        secdesc->dacl :
2415                        old_secdesc->dacl;
2416
2417                 sacl = secdesc->sacl ?
2418                        secdesc->sacl :
2419                        old_secdesc->sacl;
2420
2421                 /* Make a deep copy of the security descriptor */
2422                 new_secdesc = make_sec_desc(tmp_ctx,
2423                                             secdesc->revision,
2424                                             secdesc->type,
2425                                             owner_sid,
2426                                             group_sid,
2427                                             sacl,
2428                                             dacl,
2429                                             &size);
2430                 if (new_secdesc == NULL) {
2431                         talloc_free(tmp_ctx);
2432                         return WERR_NOMEM;
2433                 }
2434         }
2435
2436         ZERO_STRUCT(hive_hnd);
2437         ZERO_STRUCT(key_hnd);
2438
2439         result = winreg_printer_openkey(tmp_ctx,
2440                                         server_info,
2441                                         &winreg_pipe,
2442                                         path,
2443                                         "",
2444                                         false,
2445                                         access_mask,
2446                                         &hive_hnd,
2447                                         &key_hnd);
2448         if (!W_ERROR_IS_OK(result)) {
2449                 goto done;
2450         }
2451
2452         ndr_err = ndr_push_struct_blob(&blob, tmp_ctx, new_secdesc,
2453                         (ndr_push_flags_fn_t) ndr_push_security_descriptor);
2454         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2455                 DEBUG(0, ("winreg_set_secdesc: Failed to marshall security descriptor\n"));
2456                 result = WERR_NOMEM;
2457                 goto done;
2458         }
2459
2460         result = winreg_printer_write_binary(tmp_ctx,
2461                                              winreg_pipe,
2462                                              &key_hnd,
2463                                              "Security",
2464                                              blob);
2465
2466 done:
2467         if (winreg_pipe != NULL) {
2468                 if (is_valid_policy_hnd(&key_hnd)) {
2469                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2470                 }
2471                 if (is_valid_policy_hnd(&hive_hnd)) {
2472                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2473                 }
2474         }
2475
2476         talloc_free(tmp_ctx);
2477         return result;
2478 }
2479
2480 /* Set printer data over the winreg pipe. */
2481 WERROR winreg_set_printer_dataex(TALLOC_CTX *mem_ctx,
2482                                  struct auth_serversupplied_info *server_info,
2483                                  const char *printer,
2484                                  const char *key,
2485                                  const char *value,
2486                                  enum winreg_Type type,
2487                                  uint8_t *data,
2488                                  uint32_t data_size)
2489 {
2490         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2491         struct rpc_pipe_client *winreg_pipe = NULL;
2492         struct policy_handle hive_hnd, key_hnd;
2493         struct winreg_String wvalue;
2494         char *path;
2495         WERROR result = WERR_OK;
2496         NTSTATUS status;
2497         TALLOC_CTX *tmp_ctx;
2498
2499         tmp_ctx = talloc_new(mem_ctx);
2500         if (tmp_ctx == NULL) {
2501                 return WERR_NOMEM;
2502         }
2503
2504         path = winreg_printer_data_keyname(tmp_ctx, printer);
2505         if (path == NULL) {
2506                 TALLOC_FREE(tmp_ctx);
2507                 return WERR_NOMEM;
2508         }
2509
2510         ZERO_STRUCT(hive_hnd);
2511         ZERO_STRUCT(key_hnd);
2512
2513         DEBUG(8, ("winreg_set_printer_dataex: Open printer key %s, value %s, access_mask: 0x%05x for [%s]\n",
2514                         key, value, access_mask, printer));
2515         result = winreg_printer_openkey(tmp_ctx,
2516                                         server_info,
2517                                         &winreg_pipe,
2518                                         path,
2519                                         key,
2520                                         true,
2521                                         access_mask,
2522                                         &hive_hnd,
2523                                         &key_hnd);
2524         if (!W_ERROR_IS_OK(result)) {
2525                 DEBUG(0, ("winreg_set_printer_dataex: Could not open key %s: %s\n",
2526                           key, win_errstr(result)));
2527                 goto done;
2528         }
2529
2530         wvalue.name = value;
2531         status = rpccli_winreg_SetValue(winreg_pipe,
2532                                         tmp_ctx,
2533                                         &key_hnd,
2534                                         wvalue,
2535                                         type,
2536                                         data,
2537                                         data_size,
2538                                         &result);
2539         if (!NT_STATUS_IS_OK(status)) {
2540                 DEBUG(0, ("winreg_set_printer_dataex: Could not set value %s: %s\n",
2541                           value, nt_errstr(status)));
2542                 if (!W_ERROR_IS_OK(result)) {
2543                         goto done;
2544                 }
2545                 result = ntstatus_to_werror(status);
2546                 goto done;
2547         }
2548
2549         result = WERR_OK;
2550 done:
2551         if (winreg_pipe != NULL) {
2552                 if (is_valid_policy_hnd(&key_hnd)) {
2553                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2554                 }
2555                 if (is_valid_policy_hnd(&hive_hnd)) {
2556                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2557                 }
2558         }
2559
2560         TALLOC_FREE(tmp_ctx);
2561         return result;
2562 }
2563
2564 /* Get printer data over a winreg pipe. */
2565 WERROR winreg_get_printer_dataex(TALLOC_CTX *mem_ctx,
2566                                  struct auth_serversupplied_info *server_info,
2567                                  const char *printer,
2568                                  const char *key,
2569                                  const char *value,
2570                                  enum winreg_Type *type,
2571                                  uint8_t **data,
2572                                  uint32_t *data_size)
2573 {
2574         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2575         struct rpc_pipe_client *winreg_pipe = NULL;
2576         struct policy_handle hive_hnd, key_hnd;
2577         struct winreg_String wvalue;
2578         enum winreg_Type type_in;
2579         char *path;
2580         uint8_t *data_in;
2581         uint32_t data_in_size = 0;
2582         uint32_t value_len = 0;
2583         WERROR result = WERR_OK;
2584         NTSTATUS status;
2585         TALLOC_CTX *tmp_ctx;
2586
2587         tmp_ctx = talloc_new(mem_ctx);
2588         if (tmp_ctx == NULL) {
2589                 return WERR_NOMEM;
2590         }
2591
2592         path = winreg_printer_data_keyname(tmp_ctx, printer);
2593         if (path == NULL) {
2594                 TALLOC_FREE(tmp_ctx);
2595                 return WERR_NOMEM;
2596         }
2597
2598         ZERO_STRUCT(hive_hnd);
2599         ZERO_STRUCT(key_hnd);
2600
2601         result = winreg_printer_openkey(tmp_ctx,
2602                                         server_info,
2603                                         &winreg_pipe,
2604                                         path,
2605                                         key,
2606                                         false,
2607                                         access_mask,
2608                                         &hive_hnd,
2609                                         &key_hnd);
2610         if (!W_ERROR_IS_OK(result)) {
2611                 DEBUG(0, ("winreg_get_printer_dataex: Could not open key %s: %s\n",
2612                           key, win_errstr(result)));
2613                 goto done;
2614         }
2615
2616         wvalue.name = value;
2617
2618         /*
2619          * call QueryValue once with data == NULL to get the
2620          * needed memory size to be allocated, then allocate
2621          * data buffer and call again.
2622          */
2623         status = rpccli_winreg_QueryValue(winreg_pipe,
2624                                           tmp_ctx,
2625                                           &key_hnd,
2626                                           &wvalue,
2627                                           &type_in,
2628                                           NULL,
2629                                           &data_in_size,
2630                                           &value_len,
2631                                           &result);
2632         if (!NT_STATUS_IS_OK(status)) {
2633                 DEBUG(0, ("winreg_get_printer_dataex: Could not query value %s: %s\n",
2634                           value, nt_errstr(status)));
2635                 if (!W_ERROR_IS_OK(result)) {
2636                         goto done;
2637                 }
2638                 result = ntstatus_to_werror(status);
2639                 goto done;
2640         }
2641
2642         data_in = (uint8_t *) TALLOC(tmp_ctx, data_in_size);
2643         if (data_in == NULL) {
2644                 result = WERR_NOMEM;
2645                 goto done;
2646         }
2647         value_len = 0;
2648
2649         status = rpccli_winreg_QueryValue(winreg_pipe,
2650                                           tmp_ctx,
2651                                           &key_hnd,
2652                                           &wvalue,
2653                                           &type_in,
2654                                           data_in,
2655                                           &data_in_size,
2656                                           &value_len,
2657                                           &result);
2658         if (!NT_STATUS_IS_OK(status)) {
2659                 DEBUG(0, ("winreg_get_printer_dataex: Could not query value %s: %s\n",
2660                           value, nt_errstr(status)));
2661                 if (!W_ERROR_IS_OK(result)) {
2662                         result = ntstatus_to_werror(status);
2663                 }
2664                 goto done;
2665         }
2666
2667         *type = type_in;
2668         *data_size = data_in_size;
2669         if (data_in_size) {
2670                 *data = talloc_move(mem_ctx, &data_in);
2671         }
2672
2673         result = WERR_OK;
2674 done:
2675         if (winreg_pipe != NULL) {
2676                 if (is_valid_policy_hnd(&key_hnd)) {
2677                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2678                 }
2679                 if (is_valid_policy_hnd(&hive_hnd)) {
2680                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2681                 }
2682         }
2683
2684         TALLOC_FREE(tmp_ctx);
2685         return result;
2686 }
2687
2688 /* Enumerate on the values of a given key and provide the data. */
2689 WERROR winreg_enum_printer_dataex(TALLOC_CTX *mem_ctx,
2690                                   struct auth_serversupplied_info *server_info,
2691                                   const char *printer,
2692                                   const char *key,
2693                                   uint32_t *pnum_values,
2694                                   struct spoolss_PrinterEnumValues **penum_values)
2695 {
2696         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2697         struct rpc_pipe_client *winreg_pipe = NULL;
2698         struct policy_handle hive_hnd, key_hnd;
2699
2700         struct spoolss_PrinterEnumValues *enum_values = NULL;
2701         uint32_t num_values = 0;
2702         char *path;
2703         WERROR result = WERR_OK;
2704
2705         TALLOC_CTX *tmp_ctx;
2706
2707         tmp_ctx = talloc_new(mem_ctx);
2708         if (tmp_ctx == NULL) {
2709                 return WERR_NOMEM;
2710         }
2711
2712         path = winreg_printer_data_keyname(tmp_ctx, printer);
2713         if (path == NULL) {
2714                 TALLOC_FREE(tmp_ctx);
2715                 return WERR_NOMEM;
2716         }
2717
2718         result = winreg_printer_openkey(tmp_ctx,
2719                                         server_info,
2720                                         &winreg_pipe,
2721                                         path,
2722                                         key,
2723                                         false,
2724                                         access_mask,
2725                                         &hive_hnd,
2726                                         &key_hnd);
2727         if (!W_ERROR_IS_OK(result)) {
2728                 DEBUG(0, ("winreg_enum_printer_dataex: Could not open key %s: %s\n",
2729                           key, win_errstr(result)));
2730                 goto done;
2731         }
2732
2733         result = winreg_printer_enumvalues(tmp_ctx,
2734                                            winreg_pipe,
2735                                            &key_hnd,
2736                                            &num_values,
2737                                            &enum_values);
2738         if (!W_ERROR_IS_OK(result)) {
2739                 DEBUG(0, ("winreg_enum_printer_dataex: Could not enumerate values in %s: %s\n",
2740                           key, win_errstr(result)));
2741                 goto done;
2742         }
2743
2744         *pnum_values = num_values;
2745         if (penum_values) {
2746                 *penum_values = talloc_move(mem_ctx, &enum_values);
2747         }
2748
2749         result = WERR_OK;
2750 done:
2751         if (winreg_pipe != NULL) {
2752                 if (is_valid_policy_hnd(&key_hnd)) {
2753                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2754                 }
2755                 if (is_valid_policy_hnd(&hive_hnd)) {
2756                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2757                 }
2758         }
2759
2760         TALLOC_FREE(tmp_ctx);
2761         return result;
2762 }
2763
2764 /* Delete printer data over a winreg pipe. */
2765 WERROR winreg_delete_printer_dataex(TALLOC_CTX *mem_ctx,
2766                                     struct auth_serversupplied_info *server_info,
2767                                     const char *printer,
2768                                     const char *key,
2769                                     const char *value)
2770 {
2771         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2772         struct rpc_pipe_client *winreg_pipe = NULL;
2773         struct policy_handle hive_hnd, key_hnd;
2774         struct winreg_String wvalue;
2775         char *path;
2776         WERROR result = WERR_OK;
2777         NTSTATUS status;
2778
2779         TALLOC_CTX *tmp_ctx;
2780
2781         tmp_ctx = talloc_new(mem_ctx);
2782         if (tmp_ctx == NULL) {
2783                 return WERR_NOMEM;
2784         }
2785
2786         path = winreg_printer_data_keyname(tmp_ctx, printer);
2787         if (path == NULL) {
2788                 TALLOC_FREE(tmp_ctx);
2789                 return WERR_NOMEM;
2790         }
2791
2792         ZERO_STRUCT(hive_hnd);
2793         ZERO_STRUCT(key_hnd);
2794
2795         result = winreg_printer_openkey(tmp_ctx,
2796                                         server_info,
2797                                         &winreg_pipe,
2798                                         path,
2799                                         key,
2800                                         false,
2801                                         access_mask,
2802                                         &hive_hnd,
2803                                         &key_hnd);
2804         if (!W_ERROR_IS_OK(result)) {
2805                 DEBUG(0, ("winreg_delete_printer_dataex: Could not open key %s: %s\n",
2806                           key, win_errstr(result)));
2807                 goto done;
2808         }
2809
2810         wvalue.name = value;
2811         status = rpccli_winreg_DeleteValue(winreg_pipe,
2812                                            tmp_ctx,
2813                                            &key_hnd,
2814                                            wvalue,
2815                                            &result);
2816         if (!NT_STATUS_IS_OK(status)) {
2817                 DEBUG(0, ("winreg_delete_printer_dataex: Could not delete value %s: %s\n",
2818                           value, nt_errstr(status)));
2819                 if (!W_ERROR_IS_OK(result)) {
2820                         goto done;
2821                 }
2822                 result = ntstatus_to_werror(status);
2823                 goto done;
2824         }
2825
2826         result = WERR_OK;
2827 done:
2828         if (winreg_pipe != NULL) {
2829                 if (is_valid_policy_hnd(&key_hnd)) {
2830                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2831                 }
2832                 if (is_valid_policy_hnd(&hive_hnd)) {
2833                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2834                 }
2835         }
2836
2837         TALLOC_FREE(tmp_ctx);
2838         return result;
2839 }
2840
2841 /* Enumerate on the subkeys of a given key and provide the data. */
2842 WERROR winreg_enum_printer_key(TALLOC_CTX *mem_ctx,
2843                                struct auth_serversupplied_info *server_info,
2844                                const char *printer,
2845                                const char *key,
2846                                uint32_t *pnum_subkeys,
2847                                const char ***psubkeys)
2848 {
2849         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2850         struct rpc_pipe_client *winreg_pipe = NULL;
2851         struct policy_handle hive_hnd, key_hnd;
2852         char *path;
2853         const char **subkeys = NULL;
2854         uint32_t num_subkeys = -1;
2855
2856         WERROR result = WERR_OK;
2857
2858         TALLOC_CTX *tmp_ctx;
2859
2860         tmp_ctx = talloc_new(mem_ctx);
2861         if (tmp_ctx == NULL) {
2862                 return WERR_NOMEM;
2863         }
2864
2865         path = winreg_printer_data_keyname(tmp_ctx, printer);
2866         if (path == NULL) {
2867                 TALLOC_FREE(tmp_ctx);
2868                 return WERR_NOMEM;
2869         }
2870
2871         ZERO_STRUCT(hive_hnd);
2872         ZERO_STRUCT(key_hnd);
2873
2874         result = winreg_printer_openkey(tmp_ctx,
2875                                         server_info,
2876                                         &winreg_pipe,
2877                                         path,
2878                                         key,
2879                                         false,
2880                                         access_mask,
2881                                         &hive_hnd,
2882                                         &key_hnd);
2883         if (!W_ERROR_IS_OK(result)) {
2884                 DEBUG(0, ("winreg_enum_printer_key: Could not open key %s: %s\n",
2885                           key, win_errstr(result)));
2886                 goto done;
2887         }
2888
2889         result = winreg_printer_enumkeys(tmp_ctx,
2890                                          winreg_pipe,
2891                                          &key_hnd,
2892                                          &num_subkeys,
2893                                          &subkeys);
2894         if (!W_ERROR_IS_OK(result)) {
2895                 DEBUG(0, ("winreg_enum_printer_key: Could not enumerate subkeys in %s: %s\n",
2896                           key, win_errstr(result)));
2897                 goto done;
2898         }
2899
2900         *pnum_subkeys = num_subkeys;
2901         if (psubkeys) {
2902                 *psubkeys = talloc_move(mem_ctx, &subkeys);
2903         }
2904
2905         result = WERR_OK;
2906 done:
2907         if (winreg_pipe != NULL) {
2908                 if (is_valid_policy_hnd(&key_hnd)) {
2909                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2910                 }
2911                 if (is_valid_policy_hnd(&hive_hnd)) {
2912                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2913                 }
2914         }
2915
2916         TALLOC_FREE(tmp_ctx);
2917         return result;
2918 }
2919
2920 /* Delete a key with subkeys of a given printer. */
2921 WERROR winreg_delete_printer_key(TALLOC_CTX *mem_ctx,
2922                                  struct auth_serversupplied_info *server_info,
2923                                  const char *printer,
2924                                  const char *key)
2925 {
2926         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2927         struct rpc_pipe_client *winreg_pipe = NULL;
2928         struct policy_handle hive_hnd, key_hnd;
2929         char *keyname;
2930         char *path;
2931         WERROR result;
2932         TALLOC_CTX *tmp_ctx;
2933
2934         tmp_ctx = talloc_new(mem_ctx);
2935         if (tmp_ctx == NULL) {
2936                 return WERR_NOMEM;
2937         }
2938
2939         path = winreg_printer_data_keyname(tmp_ctx, printer);
2940         if (path == NULL) {
2941                 TALLOC_FREE(tmp_ctx);
2942                 return WERR_NOMEM;
2943         }
2944
2945         result = winreg_printer_openkey(tmp_ctx,
2946                                         server_info,
2947                                         &winreg_pipe,
2948                                         path,
2949                                         key,
2950                                         false,
2951                                         access_mask,
2952                                         &hive_hnd,
2953                                         &key_hnd);
2954         if (!W_ERROR_IS_OK(result)) {
2955                 /* key doesn't exist */
2956                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
2957                         result = WERR_OK;
2958                         goto done;
2959                 }
2960
2961                 DEBUG(0, ("winreg_delete_printer_key: Could not open key %s: %s\n",
2962                           key, win_errstr(result)));
2963                 goto done;
2964         }
2965
2966         if (is_valid_policy_hnd(&key_hnd)) {
2967                 rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2968         }
2969
2970         if (key == NULL || key[0] == '\0') {
2971                 keyname = path;
2972         } else {
2973                 keyname = talloc_asprintf(tmp_ctx,
2974                                           "%s\\%s",
2975                                           path,
2976                                           key);
2977                 if (keyname == NULL) {
2978                         result = WERR_NOMEM;
2979                         goto done;
2980                 }
2981         }
2982
2983         result = winreg_printer_delete_subkeys(tmp_ctx,
2984                                                winreg_pipe,
2985                                                &hive_hnd,
2986                                                access_mask,
2987                                                keyname);
2988         if (!W_ERROR_IS_OK(result)) {
2989                 DEBUG(0, ("winreg_delete_printer_key: Could not delete key %s: %s\n",
2990                           key, win_errstr(result)));
2991                 goto done;
2992         }
2993
2994 done:
2995         if (winreg_pipe != NULL) {
2996                 if (is_valid_policy_hnd(&key_hnd)) {
2997                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2998                 }
2999                 if (is_valid_policy_hnd(&hive_hnd)) {
3000                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3001                 }
3002         }
3003
3004         TALLOC_FREE(tmp_ctx);
3005         return result;
3006 }
3007
3008 WERROR winreg_printer_update_changeid(TALLOC_CTX *mem_ctx,
3009                                       struct auth_serversupplied_info *server_info,
3010                                       const char *printer)
3011 {
3012         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3013         struct rpc_pipe_client *winreg_pipe = NULL;
3014         struct policy_handle hive_hnd, key_hnd;
3015         char *path;
3016         WERROR result;
3017         TALLOC_CTX *tmp_ctx;
3018
3019         tmp_ctx = talloc_new(mem_ctx);
3020         if (tmp_ctx == NULL) {
3021                 return WERR_NOMEM;
3022         }
3023
3024         path = winreg_printer_data_keyname(tmp_ctx, printer);
3025         if (path == NULL) {
3026                 TALLOC_FREE(tmp_ctx);
3027                 return WERR_NOMEM;
3028         }
3029
3030         ZERO_STRUCT(hive_hnd);
3031         ZERO_STRUCT(key_hnd);
3032
3033         result = winreg_printer_openkey(tmp_ctx,
3034                                         server_info,
3035                                         &winreg_pipe,
3036                                         path,
3037                                         "",
3038                                         false,
3039                                         access_mask,
3040                                         &hive_hnd,
3041                                         &key_hnd);
3042         if (!W_ERROR_IS_OK(result)) {
3043                 DEBUG(0, ("winreg_printer_update_changeid: Could not open key %s: %s\n",
3044                           path, win_errstr(result)));
3045                 goto done;
3046         }
3047
3048         result = winreg_printer_write_dword(tmp_ctx,
3049                                             winreg_pipe,
3050                                             &key_hnd,
3051                                             "ChangeID",
3052                                             winreg_printer_rev_changeid());
3053         if (!W_ERROR_IS_OK(result)) {
3054                 goto done;
3055         }
3056
3057         result = WERR_OK;
3058 done:
3059         if (winreg_pipe != NULL) {
3060                 if (is_valid_policy_hnd(&key_hnd)) {
3061                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3062                 }
3063                 if (is_valid_policy_hnd(&hive_hnd)) {
3064                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3065                 }
3066         }
3067
3068         TALLOC_FREE(tmp_ctx);
3069         return result;
3070 }
3071
3072 WERROR winreg_printer_get_changeid(TALLOC_CTX *mem_ctx,
3073                                    struct auth_serversupplied_info *server_info,
3074                                    const char *printer,
3075                                    uint32_t *pchangeid)
3076 {
3077         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3078         struct rpc_pipe_client *winreg_pipe = NULL;
3079         struct policy_handle hive_hnd, key_hnd;
3080         uint32_t changeid = 0;
3081         char *path;
3082         WERROR result;
3083         TALLOC_CTX *tmp_ctx;
3084
3085         tmp_ctx = talloc_new(mem_ctx);
3086         if (tmp_ctx == NULL) {
3087                 return WERR_NOMEM;
3088         }
3089
3090         path = winreg_printer_data_keyname(tmp_ctx, printer);
3091         if (path == NULL) {
3092                 TALLOC_FREE(tmp_ctx);
3093                 return WERR_NOMEM;
3094         }
3095
3096         ZERO_STRUCT(hive_hnd);
3097         ZERO_STRUCT(key_hnd);
3098
3099         result = winreg_printer_openkey(tmp_ctx,
3100                                         server_info,
3101                                         &winreg_pipe,
3102                                         path,
3103                                         "",
3104                                         false,
3105                                         access_mask,
3106                                         &hive_hnd,
3107                                         &key_hnd);
3108         if (!W_ERROR_IS_OK(result)) {
3109                 DEBUG(0, ("winreg_printer_get_changeid: Could not open key %s: %s\n",
3110                           path, win_errstr(result)));
3111                 goto done;
3112         }
3113
3114         DEBUG(0, ("winreg_printer_get_changeid: get changeid from %s\n", path));
3115         result = winreg_printer_query_dword(tmp_ctx,
3116                                             winreg_pipe,
3117                                             &key_hnd,
3118                                             "ChangeID",
3119                                             &changeid);
3120         if (!W_ERROR_IS_OK(result)) {
3121                 goto done;
3122         }
3123
3124         if (pchangeid) {
3125                 *pchangeid = changeid;
3126         }
3127
3128         result = WERR_OK;
3129 done:
3130         if (winreg_pipe != NULL) {
3131                 if (is_valid_policy_hnd(&key_hnd)) {
3132                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3133                 }
3134                 if (is_valid_policy_hnd(&hive_hnd)) {
3135                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3136                 }
3137         }
3138
3139         TALLOC_FREE(tmp_ctx);
3140         return result;
3141 }
3142
3143 /*
3144  * The special behaviour of the spoolss forms is documented at the website:
3145  *
3146  * Managing Win32 Printserver Forms
3147  * http://unixwiz.net/techtips/winspooler-forms.html
3148  */
3149
3150 WERROR winreg_printer_addform1(TALLOC_CTX *mem_ctx,
3151                                struct auth_serversupplied_info *server_info,
3152                                struct spoolss_AddFormInfo1 *form)
3153 {
3154         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3155         struct rpc_pipe_client *winreg_pipe = NULL;
3156         struct policy_handle hive_hnd, key_hnd;
3157         struct winreg_String wvalue;
3158         DATA_BLOB blob;
3159         uint32_t num_info = 0;
3160         union spoolss_FormInfo *info = NULL;
3161         uint32_t i;
3162         WERROR result;
3163         NTSTATUS status;
3164         TALLOC_CTX *tmp_ctx;
3165
3166         tmp_ctx = talloc_new(mem_ctx);
3167         if (tmp_ctx == NULL) {
3168                 return WERR_NOMEM;
3169         }
3170
3171         ZERO_STRUCT(hive_hnd);
3172         ZERO_STRUCT(key_hnd);
3173
3174         result = winreg_printer_openkey(tmp_ctx,
3175                                         server_info,
3176                                         &winreg_pipe,
3177                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3178                                         "",
3179                                         true,
3180                                         access_mask,
3181                                         &hive_hnd,
3182                                         &key_hnd);
3183         if (!W_ERROR_IS_OK(result)) {
3184                 DEBUG(0, ("winreg_printer_addform1: Could not open key %s: %s\n",
3185                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3186                 goto done;
3187         }
3188
3189         result = winreg_printer_enumforms1(tmp_ctx, server_info, &num_info, &info);
3190         if (!W_ERROR_IS_OK(result)) {
3191                 DEBUG(0, ("winreg_printer_addform: Could not enum keys %s: %s\n",
3192                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3193                 goto done;
3194         }
3195
3196         /* If form name already exists or is builtin return ALREADY_EXISTS */
3197         for (i = 0; i < num_info; i++) {
3198                 if (strequal(info[i].info1.form_name, form->form_name)) {
3199                         result = WERR_FILE_EXISTS;
3200                         goto done;
3201                 }
3202         }
3203
3204         wvalue.name = form->form_name;
3205
3206         blob = data_blob_talloc(tmp_ctx, NULL, 32);
3207         SIVAL(blob.data,  0, form->size.width);
3208         SIVAL(blob.data,  4, form->size.height);
3209         SIVAL(blob.data,  8, form->area.left);
3210         SIVAL(blob.data, 12, form->area.top);
3211         SIVAL(blob.data, 16, form->area.right);
3212         SIVAL(blob.data, 20, form->area.bottom);
3213         SIVAL(blob.data, 24, num_info + 1); /* FIXME */
3214         SIVAL(blob.data, 28, form->flags);
3215
3216         status = rpccli_winreg_SetValue(winreg_pipe,
3217                                         tmp_ctx,
3218                                         &key_hnd,
3219                                         wvalue,
3220                                         REG_BINARY,
3221                                         blob.data,
3222                                         blob.length,
3223                                         &result);
3224         if (!NT_STATUS_IS_OK(status)) {
3225                 DEBUG(0, ("winreg_printer_addform1: Could not set value %s: %s\n",
3226                           wvalue.name, nt_errstr(status)));
3227                 if (!W_ERROR_IS_OK(result)) {
3228                         goto done;
3229                 }
3230                 result = ntstatus_to_werror(status);
3231                 goto done;
3232         }
3233
3234         result = WERR_OK;
3235 done:
3236         if (winreg_pipe != NULL) {
3237                 if (is_valid_policy_hnd(&key_hnd)) {
3238                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3239                 }
3240                 if (is_valid_policy_hnd(&hive_hnd)) {
3241                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3242                 }
3243         }
3244
3245         TALLOC_FREE(info);
3246         TALLOC_FREE(tmp_ctx);
3247         return result;
3248 }
3249
3250 WERROR winreg_printer_enumforms1(TALLOC_CTX *mem_ctx,
3251                                  struct auth_serversupplied_info *server_info,
3252                                  uint32_t *pnum_info,
3253                                  union spoolss_FormInfo **pinfo)
3254 {
3255         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3256         struct rpc_pipe_client *winreg_pipe = NULL;
3257         struct policy_handle hive_hnd, key_hnd;
3258         union spoolss_FormInfo *info;
3259         struct spoolss_PrinterEnumValues *enum_values = NULL;
3260         uint32_t num_values = 0;
3261         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3262         uint32_t i;
3263         WERROR result;
3264         TALLOC_CTX *tmp_ctx;
3265
3266         tmp_ctx = talloc_new(mem_ctx);
3267         if (tmp_ctx == NULL) {
3268                 return WERR_NOMEM;
3269         }
3270
3271         ZERO_STRUCT(hive_hnd);
3272         ZERO_STRUCT(key_hnd);
3273
3274         result = winreg_printer_openkey(tmp_ctx,
3275                                         server_info,
3276                                         &winreg_pipe,
3277                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3278                                         "",
3279                                         true,
3280                                         access_mask,
3281                                         &hive_hnd,
3282                                         &key_hnd);
3283         if (!W_ERROR_IS_OK(result)) {
3284                 /* key doesn't exist */
3285                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
3286                         result = WERR_OK;
3287                         goto done;
3288                 }
3289
3290                 DEBUG(0, ("winreg_printer_enumforms1: Could not open key %s: %s\n",
3291                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3292                 goto done;
3293         }
3294
3295         result = winreg_printer_enumvalues(tmp_ctx,
3296                                            winreg_pipe,
3297                                            &key_hnd,
3298                                            &num_values,
3299                                            &enum_values);
3300         if (!W_ERROR_IS_OK(result)) {
3301                 DEBUG(0, ("winreg_printer_enumforms1: Could not enumerate values in %s: %s\n",
3302                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3303                 goto done;
3304         }
3305
3306         info = TALLOC_ARRAY(tmp_ctx, union spoolss_FormInfo, num_builtin + num_values);
3307         if (info == NULL) {
3308                 result = WERR_NOMEM;
3309                 goto done;
3310         }
3311
3312         /* Enumerate BUILTIN forms */
3313         for (i = 0; i < num_builtin; i++) {
3314                 info[i].info1 = builtin_forms1[i];
3315         }
3316
3317         /* Enumerate registry forms */
3318         for (i = 0; i < num_values; i++) {
3319                 union spoolss_FormInfo val;
3320
3321                 if (enum_values[i].type != REG_BINARY ||
3322                     enum_values[i].data_length != 32) {
3323                         continue;
3324                 }
3325
3326                 val.info1.form_name = talloc_strdup(info, enum_values[i].value_name);
3327                 if (val.info1.form_name == NULL) {
3328                         result = WERR_NOMEM;
3329                         goto done;
3330                 }
3331
3332                 val.info1.size.width  = IVAL(enum_values[i].data->data,  0);
3333                 val.info1.size.height = IVAL(enum_values[i].data->data,  4);
3334                 val.info1.area.left   = IVAL(enum_values[i].data->data,  8);
3335                 val.info1.area.top    = IVAL(enum_values[i].data->data, 12);
3336                 val.info1.area.right  = IVAL(enum_values[i].data->data, 16);
3337                 val.info1.area.bottom = IVAL(enum_values[i].data->data, 20);
3338                 /* skip form index      IVAL(enum_values[i].data->data, 24)));*/
3339                 val.info1.flags       = IVAL(enum_values[i].data->data, 28);
3340
3341                 info[i + num_builtin] = val;
3342         }
3343
3344         *pnum_info = num_builtin + num_values;
3345         if (pinfo) {
3346                 *pinfo = talloc_move(mem_ctx, &info);
3347         }
3348
3349 done:
3350         if (winreg_pipe != NULL) {
3351                 if (is_valid_policy_hnd(&key_hnd)) {
3352                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3353                 }
3354                 if (is_valid_policy_hnd(&hive_hnd)) {
3355                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3356                 }
3357         }
3358
3359         TALLOC_FREE(enum_values);
3360         TALLOC_FREE(tmp_ctx);
3361         return result;
3362 }
3363
3364 WERROR winreg_printer_deleteform1(TALLOC_CTX *mem_ctx,
3365                                   struct auth_serversupplied_info *server_info,
3366                                   const char *form_name)
3367 {
3368         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3369         struct rpc_pipe_client *winreg_pipe = NULL;
3370         struct policy_handle hive_hnd, key_hnd;
3371         struct winreg_String wvalue;
3372         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3373         uint32_t i;
3374         WERROR result = WERR_OK;
3375         NTSTATUS status;
3376         TALLOC_CTX *tmp_ctx;
3377
3378         for (i = 0; i < num_builtin; i++) {
3379                 if (strequal(builtin_forms1[i].form_name, form_name)) {
3380                         return WERR_INVALID_PARAMETER;
3381                 }
3382         }
3383
3384         tmp_ctx = talloc_new(mem_ctx);
3385         if (tmp_ctx == NULL) {
3386                 return WERR_NOMEM;
3387         }
3388
3389         ZERO_STRUCT(hive_hnd);
3390         ZERO_STRUCT(key_hnd);
3391
3392         result = winreg_printer_openkey(tmp_ctx,
3393                                         server_info,
3394                                         &winreg_pipe,
3395                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3396                                         "",
3397                                         false,
3398                                         access_mask,
3399                                         &hive_hnd,
3400                                         &key_hnd);
3401         if (!W_ERROR_IS_OK(result)) {
3402                 DEBUG(0, ("winreg_printer_deleteform1: Could not open key %s: %s\n",
3403                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3404                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
3405                         result = WERR_INVALID_FORM_NAME;
3406                 }
3407                 goto done;
3408         }
3409
3410         wvalue.name = form_name;
3411         status = rpccli_winreg_DeleteValue(winreg_pipe,
3412                                            tmp_ctx,
3413                                            &key_hnd,
3414                                            wvalue,
3415                                            &result);
3416         if (!NT_STATUS_IS_OK(status)) {
3417                 /* If the value doesn't exist, return WERR_INVALID_FORM_NAME */
3418                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
3419                         result = WERR_INVALID_FORM_NAME;
3420                         goto done;
3421                 }
3422                 DEBUG(0, ("winreg_printer_delteform1: Could not delete value %s: %s\n",
3423                           wvalue.name, nt_errstr(status)));
3424                 if (!W_ERROR_IS_OK(result)) {
3425                         goto done;
3426                 }
3427                 result = ntstatus_to_werror(status);
3428                 goto done;
3429         }
3430
3431         result = WERR_OK;
3432 done:
3433         if (winreg_pipe != NULL) {
3434                 if (is_valid_policy_hnd(&key_hnd)) {
3435                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3436                 }
3437                 if (is_valid_policy_hnd(&hive_hnd)) {
3438                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3439                 }
3440         }
3441
3442         TALLOC_FREE(tmp_ctx);
3443         return result;
3444 }
3445
3446 WERROR winreg_printer_setform1(TALLOC_CTX *mem_ctx,
3447                                struct auth_serversupplied_info *server_info,
3448                                const char *form_name,
3449                                struct spoolss_AddFormInfo1 *form)
3450 {
3451         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3452         struct rpc_pipe_client *winreg_pipe = NULL;
3453         struct policy_handle hive_hnd, key_hnd;
3454         struct winreg_String wvalue;
3455         DATA_BLOB blob;
3456         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3457         uint32_t i;
3458         WERROR result;
3459         NTSTATUS status;
3460         TALLOC_CTX *tmp_ctx = NULL;
3461
3462         for (i = 0; i < num_builtin; i++) {
3463                 if (strequal(builtin_forms1[i].form_name, form->form_name)) {
3464                         result = WERR_INVALID_PARAM;
3465                         goto done;
3466                 }
3467         }
3468
3469         tmp_ctx = talloc_new(mem_ctx);
3470         if (tmp_ctx == NULL) {
3471                 return WERR_NOMEM;
3472         }
3473
3474         ZERO_STRUCT(hive_hnd);
3475         ZERO_STRUCT(key_hnd);
3476
3477         result = winreg_printer_openkey(tmp_ctx,
3478                                         server_info,
3479                                         &winreg_pipe,
3480                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3481                                         "",
3482                                         true,
3483                                         access_mask,
3484                                         &hive_hnd,
3485                                         &key_hnd);
3486         if (!W_ERROR_IS_OK(result)) {
3487                 DEBUG(0, ("winreg_printer_setform1: Could not open key %s: %s\n",
3488                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3489                 goto done;
3490         }
3491
3492         /* If form_name != form->form_name then we renamed the form */
3493         if (strequal(form_name, form->form_name)) {
3494                 result = winreg_printer_deleteform1(tmp_ctx, server_info, form_name);
3495                 if (!W_ERROR_IS_OK(result)) {
3496                         DEBUG(0, ("winreg_printer_setform1: Could not open key %s: %s\n",
3497                                   TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3498                         goto done;
3499                 }
3500         }
3501
3502         wvalue.name = form->form_name;
3503
3504         blob = data_blob_talloc(tmp_ctx, NULL, 32);
3505         SIVAL(blob.data,  0, form->size.width);
3506         SIVAL(blob.data,  4, form->size.height);
3507         SIVAL(blob.data,  8, form->area.left);
3508         SIVAL(blob.data, 12, form->area.top);
3509         SIVAL(blob.data, 16, form->area.right);
3510         SIVAL(blob.data, 20, form->area.bottom);
3511         SIVAL(blob.data, 24, 42);
3512         SIVAL(blob.data, 28, form->flags);
3513
3514         status = rpccli_winreg_SetValue(winreg_pipe,
3515                                         tmp_ctx,
3516                                         &key_hnd,
3517                                         wvalue,
3518                                         REG_BINARY,
3519                                         blob.data,
3520                                         blob.length,
3521                                         &result);
3522         if (!NT_STATUS_IS_OK(status)) {
3523                 DEBUG(0, ("winreg_printer_setform1: Could not set value %s: %s\n",
3524                           wvalue.name, nt_errstr(status)));
3525                 if (!W_ERROR_IS_OK(result)) {
3526                         goto done;
3527                 }
3528                 result = ntstatus_to_werror(status);
3529                 goto done;
3530         }
3531
3532         result = WERR_OK;
3533 done:
3534         if (winreg_pipe != NULL) {
3535                 if (is_valid_policy_hnd(&key_hnd)) {
3536                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3537                 }
3538                 if (is_valid_policy_hnd(&hive_hnd)) {
3539                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3540                 }
3541         }
3542
3543         TALLOC_FREE(tmp_ctx);
3544         return result;
3545 }
3546
3547 WERROR winreg_printer_getform1(TALLOC_CTX *mem_ctx,
3548                                struct auth_serversupplied_info *server_info,
3549                                const char *form_name,
3550                                struct spoolss_FormInfo1 *r)
3551 {
3552         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3553         struct rpc_pipe_client *winreg_pipe = NULL;
3554         struct policy_handle hive_hnd, key_hnd;
3555         struct winreg_String wvalue;
3556         enum winreg_Type type_in;
3557         uint8_t *data_in;
3558         uint32_t data_in_size = 0;
3559         uint32_t value_len = 0;
3560         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3561         uint32_t i;
3562         WERROR result;
3563         NTSTATUS status;
3564         TALLOC_CTX *tmp_ctx;
3565
3566         /* check builtin forms first */
3567         for (i = 0; i < num_builtin; i++) {
3568                 if (strequal(builtin_forms1[i].form_name, form_name)) {
3569                         *r = builtin_forms1[i];
3570                         return WERR_OK;
3571                 }
3572         }
3573
3574         tmp_ctx = talloc_new(mem_ctx);
3575         if (tmp_ctx == NULL) {
3576                 return WERR_NOMEM;
3577         }
3578
3579         ZERO_STRUCT(hive_hnd);
3580         ZERO_STRUCT(key_hnd);
3581
3582         result = winreg_printer_openkey(tmp_ctx,
3583                                         server_info,
3584                                         &winreg_pipe,
3585                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3586                                         "",
3587                                         true,
3588                                         access_mask,
3589                                         &hive_hnd,
3590                                         &key_hnd);
3591         if (!W_ERROR_IS_OK(result)) {
3592                 DEBUG(0, ("winreg_printer_getform1: Could not open key %s: %s\n",
3593                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3594                 goto done;
3595         }
3596
3597         wvalue.name = form_name;
3598
3599         /*
3600          * call QueryValue once with data == NULL to get the
3601          * needed memory size to be allocated, then allocate
3602          * data buffer and call again.
3603          */
3604         status = rpccli_winreg_QueryValue(winreg_pipe,
3605                                           tmp_ctx,
3606                                           &key_hnd,
3607                                           &wvalue,
3608                                           &type_in,
3609                                           NULL,
3610                                           &data_in_size,
3611                                           &value_len,
3612                                           &result);
3613         if (!NT_STATUS_IS_OK(status)) {
3614                 DEBUG(0, ("winreg_printer_getform1: Could not query value %s: %s\n",
3615                           wvalue.name, nt_errstr(status)));
3616                 if (!W_ERROR_IS_OK(result)) {
3617                         goto done;
3618                 }
3619                 result = ntstatus_to_werror(status);
3620                 goto done;
3621         }
3622
3623         data_in = (uint8_t *) TALLOC(tmp_ctx, data_in_size);
3624         if (data_in == NULL) {
3625                 result = WERR_NOMEM;
3626                 goto done;
3627         }
3628         value_len = 0;
3629
3630         status = rpccli_winreg_QueryValue(winreg_pipe,
3631                                           tmp_ctx,
3632                                           &key_hnd,
3633                                           &wvalue,
3634                                           &type_in,
3635                                           data_in,
3636                                           &data_in_size,
3637                                           &value_len,
3638                                           &result);
3639         if (!NT_STATUS_IS_OK(status)) {
3640                 DEBUG(0, ("winreg_printer_getform1: Could not query value %s: %s\n",
3641                           wvalue.name, nt_errstr(status)));
3642                 if (!W_ERROR_IS_OK(result)) {
3643                         goto done;
3644                 }
3645                 result = ntstatus_to_werror(status);
3646                 goto done;
3647         }
3648
3649         r->form_name = talloc_strdup(mem_ctx, form_name);
3650         if (r->form_name == NULL) {
3651                 result = WERR_NOMEM;
3652                 goto done;
3653         }
3654
3655         r->size.width  = IVAL(data_in,  0);
3656         r->size.height = IVAL(data_in,  4);
3657         r->area.left   = IVAL(data_in,  8);
3658         r->area.top    = IVAL(data_in, 12);
3659         r->area.right  = IVAL(data_in, 16);
3660         r->area.bottom = IVAL(data_in, 20);
3661         /* skip index    IVAL(data_in, 24)));*/
3662         r->flags       = IVAL(data_in, 28);
3663
3664         result = WERR_OK;
3665 done:
3666         if (winreg_pipe != NULL) {
3667                 if (is_valid_policy_hnd(&key_hnd)) {
3668                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3669                 }
3670                 if (is_valid_policy_hnd(&hive_hnd)) {
3671                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3672                 }
3673         }
3674
3675         TALLOC_FREE(tmp_ctx);
3676         return result;
3677 }
3678
3679 WERROR winreg_add_driver(TALLOC_CTX *mem_ctx,
3680                          struct auth_serversupplied_info *server_info,
3681                          struct spoolss_AddDriverInfoCtr *r,
3682                          const char **driver_name,
3683                          uint32_t *driver_version)
3684 {
3685         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3686         struct rpc_pipe_client *winreg_pipe = NULL;
3687         struct policy_handle hive_hnd, key_hnd;
3688         struct spoolss_DriverInfo8 info8;
3689         TALLOC_CTX *tmp_ctx = NULL;
3690         WERROR result;
3691
3692         ZERO_STRUCT(hive_hnd);
3693         ZERO_STRUCT(key_hnd);
3694         ZERO_STRUCT(info8);
3695
3696         if (!driver_info_ctr_to_info8(r, &info8)) {
3697                 result = WERR_INVALID_PARAMETER;
3698                 goto done;
3699         }
3700
3701         tmp_ctx = talloc_new(mem_ctx);
3702         if (tmp_ctx == NULL) {
3703                 return WERR_NOMEM;
3704         }
3705
3706         result = winreg_printer_opendriver(tmp_ctx,
3707                                            server_info,
3708                                            info8.driver_name,
3709                                            info8.architecture,
3710                                            info8.version,
3711                                            access_mask, true,
3712                                            &winreg_pipe,
3713                                            &hive_hnd,
3714                                            &key_hnd);
3715         if (!W_ERROR_IS_OK(result)) {
3716                 DEBUG(0, ("winreg_add_driver: "
3717                           "Could not open driver key (%s,%s,%d): %s\n",
3718                           info8.driver_name, info8.architecture,
3719                           info8.version, win_errstr(result)));
3720                 goto done;
3721         }
3722
3723         /* TODO: "Attributes" ? */
3724
3725         result = winreg_printer_write_dword(tmp_ctx, winreg_pipe,
3726                                             &key_hnd, "Version",
3727                                             info8.version);
3728         if (!W_ERROR_IS_OK(result)) {
3729                 goto done;
3730         }
3731
3732         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3733                                          &key_hnd, "Driver",
3734                                          info8.driver_path);
3735         if (!W_ERROR_IS_OK(result)) {
3736                 goto done;
3737         }
3738
3739         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3740                                          &key_hnd, "Data File",
3741                                          info8.data_file);
3742         if (!W_ERROR_IS_OK(result)) {
3743                 goto done;
3744         }
3745
3746         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3747                                          &key_hnd, "Configuration File",
3748                                          info8.config_file);
3749         if (!W_ERROR_IS_OK(result)) {
3750                 goto done;
3751         }
3752
3753         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3754                                          &key_hnd, "Help File",
3755                                          info8.help_file);
3756         if (!W_ERROR_IS_OK(result)) {
3757                 goto done;
3758         }
3759
3760         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3761                                                &key_hnd, "Dependent Files",
3762                                                info8.dependent_files);
3763         if (!W_ERROR_IS_OK(result)) {
3764                 goto done;
3765         }
3766
3767         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3768                                          &key_hnd, "Monitor",
3769                                          info8.monitor_name);
3770         if (!W_ERROR_IS_OK(result)) {
3771                 goto done;
3772         }
3773
3774         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3775                                          &key_hnd, "Datatype",
3776                                          info8.default_datatype);
3777         if (!W_ERROR_IS_OK(result)) {
3778                 goto done;
3779         }
3780
3781         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3782                                                &key_hnd, "Previous Names",
3783                                                info8.previous_names);
3784         if (!W_ERROR_IS_OK(result)) {
3785                 goto done;
3786         }
3787
3788         result = winreg_printer_write_date(tmp_ctx, winreg_pipe,
3789                                            &key_hnd, "DriverDate",
3790                                            info8.driver_date);
3791         if (!W_ERROR_IS_OK(result)) {
3792                 goto done;
3793         }
3794
3795         result = winreg_printer_write_ver(tmp_ctx, winreg_pipe,
3796                                           &key_hnd, "DriverVersion",
3797                                           info8.driver_version);
3798         if (!W_ERROR_IS_OK(result)) {
3799                 goto done;
3800         }
3801
3802         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3803                                          &key_hnd, "Manufacturer",
3804                                          info8.manufacturer_name);
3805         if (!W_ERROR_IS_OK(result)) {
3806                 goto done;
3807         }
3808
3809         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3810                                          &key_hnd, "OEM URL",
3811                                          info8.manufacturer_url);
3812         if (!W_ERROR_IS_OK(result)) {
3813                 goto done;
3814         }
3815
3816         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3817                                          &key_hnd, "HardwareID",
3818                                          info8.hardware_id);
3819         if (!W_ERROR_IS_OK(result)) {
3820                 goto done;
3821         }
3822
3823         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3824                                          &key_hnd, "Provider",
3825                                          info8.provider);
3826         if (!W_ERROR_IS_OK(result)) {
3827                 goto done;
3828         }
3829
3830         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3831                                          &key_hnd, "Print Processor",
3832                                          info8.print_processor);
3833         if (!W_ERROR_IS_OK(result)) {
3834                 goto done;
3835         }
3836
3837         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3838                                          &key_hnd, "VendorSetup",
3839                                          info8.vendor_setup);
3840         if (!W_ERROR_IS_OK(result)) {
3841                 goto done;
3842         }
3843
3844         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3845                                                &key_hnd, "Color Profiles",
3846                                                info8.color_profiles);
3847         if (!W_ERROR_IS_OK(result)) {
3848                 goto done;
3849         }
3850
3851         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3852                                          &key_hnd, "InfPath",
3853                                          info8.inf_path);
3854         if (!W_ERROR_IS_OK(result)) {
3855                 goto done;
3856         }
3857
3858         result = winreg_printer_write_dword(tmp_ctx, winreg_pipe, &key_hnd,
3859                                             "PrinterDriverAttributes",
3860                                             info8.printer_driver_attributes);
3861         if (!W_ERROR_IS_OK(result)) {
3862                 goto done;
3863         }
3864
3865         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3866                                                &key_hnd, "CoreDependencies",
3867                                                info8.core_driver_dependencies);
3868         if (!W_ERROR_IS_OK(result)) {
3869                 goto done;
3870         }
3871
3872         result = winreg_printer_write_date(tmp_ctx, winreg_pipe,
3873                                            &key_hnd, "MinInboxDriverVerDate",
3874                                            info8.min_inbox_driver_ver_date);
3875         if (!W_ERROR_IS_OK(result)) {
3876                 goto done;
3877         }
3878
3879         result = winreg_printer_write_ver(tmp_ctx, winreg_pipe, &key_hnd,
3880                                           "MinInboxDriverVerVersion",
3881                                           info8.min_inbox_driver_ver_version);
3882         if (!W_ERROR_IS_OK(result)) {
3883                 goto done;
3884         }
3885
3886         *driver_name = info8.driver_name;
3887         *driver_version = info8.version;
3888         result = WERR_OK;
3889 done:
3890         if (winreg_pipe != NULL) {
3891                 if (is_valid_policy_hnd(&key_hnd)) {
3892                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3893                 }
3894                 if (is_valid_policy_hnd(&hive_hnd)) {
3895                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3896                 }
3897         }
3898
3899         TALLOC_FREE(tmp_ctx);
3900         return result;
3901 }
3902
3903 WERROR winreg_get_driver(TALLOC_CTX *mem_ctx,
3904                          struct auth_serversupplied_info *server_info,
3905                          const char *architecture,
3906                          const char *driver_name,
3907                          uint32_t driver_version,
3908                          struct spoolss_DriverInfo8 **_info8)
3909 {
3910         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3911         struct rpc_pipe_client *winreg_pipe = NULL;
3912         struct policy_handle hive_hnd, key_hnd;
3913         struct spoolss_DriverInfo8 i8, *info8;
3914         struct spoolss_PrinterEnumValues *enum_values = NULL;
3915         struct spoolss_PrinterEnumValues *v;
3916         uint32_t num_values = 0;
3917         TALLOC_CTX *tmp_ctx;
3918         WERROR result;
3919         uint32_t i;
3920
3921         ZERO_STRUCT(hive_hnd);
3922         ZERO_STRUCT(key_hnd);
3923         ZERO_STRUCT(i8);
3924
3925         tmp_ctx = talloc_new(mem_ctx);
3926         if (tmp_ctx == NULL) {
3927                 return WERR_NOMEM;
3928         }
3929
3930         if (driver_version == DRIVER_ANY_VERSION) {
3931                 /* look for Win2k first and then for NT4 */
3932                 result = winreg_printer_opendriver(tmp_ctx,
3933                                                    server_info,
3934                                                    driver_name,
3935                                                    architecture,
3936                                                    3,
3937                                                    access_mask, false,
3938                                                    &winreg_pipe,
3939                                                    &hive_hnd,
3940                                                    &key_hnd);
3941                 if (!W_ERROR_IS_OK(result)) {
3942                         result = winreg_printer_opendriver(tmp_ctx,
3943                                                            server_info,
3944                                                            driver_name,
3945                                                            architecture,
3946                                                            2,
3947                                                            access_mask, false,
3948                                                            &winreg_pipe,
3949                                                            &hive_hnd,
3950                                                            &key_hnd);
3951                 }
3952         } else {
3953                 /* ok normal case */
3954                 result = winreg_printer_opendriver(tmp_ctx,
3955                                                    server_info,
3956                                                    driver_name,
3957                                                    architecture,
3958                                                    driver_version,
3959                                                    access_mask, false,
3960                                                    &winreg_pipe,
3961                                                    &hive_hnd,
3962                                                    &key_hnd);
3963         }
3964         if (!W_ERROR_IS_OK(result)) {
3965                 DEBUG(5, ("winreg_get_driver: "
3966                           "Could not open driver key (%s,%s,%d): %s\n",
3967                           driver_name, architecture,
3968                           driver_version, win_errstr(result)));
3969                 goto done;
3970         }
3971
3972         result = winreg_printer_enumvalues(tmp_ctx,
3973                                            winreg_pipe,
3974                                            &key_hnd,
3975                                            &num_values,
3976                                            &enum_values);
3977         if (!W_ERROR_IS_OK(result)) {
3978                 DEBUG(0, ("winreg_get_driver: "
3979                           "Could not enumerate values for (%s,%s,%d): %s\n",
3980                           driver_name, architecture,
3981                           driver_version, win_errstr(result)));
3982                 goto done;
3983         }
3984
3985         info8 = talloc_zero(tmp_ctx, struct spoolss_DriverInfo8);
3986         if (info8 == NULL) {
3987                 result = WERR_NOMEM;
3988                 goto done;
3989         }
3990
3991         info8->driver_name = talloc_strdup(info8, driver_name);
3992         if (info8->driver_name == NULL) {
3993                 result = WERR_NOMEM;
3994                 goto done;
3995         }
3996
3997         info8->architecture = talloc_strdup(info8, architecture);
3998         if (info8->architecture == NULL) {
3999                 result = WERR_NOMEM;
4000                 goto done;
4001         }
4002
4003         info8->config_file = EMPTY_STRING;
4004         info8->data_file = EMPTY_STRING;
4005         info8->default_datatype = EMPTY_STRING;
4006         info8->driver_path = EMPTY_STRING;
4007         info8->hardware_id = EMPTY_STRING;
4008         info8->help_file = EMPTY_STRING;
4009         info8->inf_path = EMPTY_STRING;
4010         info8->manufacturer_name = EMPTY_STRING;
4011         info8->manufacturer_url = EMPTY_STRING;
4012         info8->monitor_name = EMPTY_STRING;
4013         info8->print_processor = EMPTY_STRING;
4014         info8->provider = EMPTY_STRING;
4015         info8->vendor_setup = EMPTY_STRING;
4016
4017         info8->color_profiles = empty_string_array;
4018         info8->core_driver_dependencies = EMPTY_STRING_ARRAY;
4019         info8->dependent_files = EMPTY_STRING_ARRAY;
4020         info8->previous_names = EMPTY_STRING_ARRAY;
4021
4022         result = WERR_OK;
4023
4024         for (i = 0; i < num_values; i++) {
4025                 const char *tmp_str;
4026
4027                 v = &enum_values[i];
4028
4029                 result = winreg_enumval_to_dword(info8, v,
4030                                                  "Version",
4031                                                  &info8->version);
4032                 CHECK_ERROR(result);
4033
4034                 result = winreg_enumval_to_sz(info8, v,
4035                                               "Driver",
4036                                               &info8->driver_path);
4037                 CHECK_ERROR(result);
4038
4039                 result = winreg_enumval_to_sz(info8, v,
4040                                               "Data File",
4041                                               &info8->data_file);
4042                 CHECK_ERROR(result);
4043
4044                 result = winreg_enumval_to_sz(info8, v,
4045                                               "Configuration File",
4046                                               &info8->config_file);
4047                 CHECK_ERROR(result);
4048
4049                 result = winreg_enumval_to_sz(info8, v,
4050                                               "Help File",
4051                                               &info8->help_file);
4052                 CHECK_ERROR(result);
4053
4054                 result = winreg_enumval_to_multi_sz(info8, v,
4055                                                     "Dependent Files",
4056                                                     &info8->dependent_files);
4057                 CHECK_ERROR(result);
4058
4059                 result = winreg_enumval_to_sz(info8, v,
4060                                               "Monitor",
4061                                               &info8->monitor_name);
4062                 CHECK_ERROR(result);
4063
4064                 result = winreg_enumval_to_sz(info8, v,
4065                                               "Datatype",
4066                                               &info8->default_datatype);
4067                 CHECK_ERROR(result);
4068
4069                 result = winreg_enumval_to_multi_sz(info8, v,
4070                                                     "Previous Names",
4071                                                     &info8->previous_names);
4072                 CHECK_ERROR(result);
4073
4074                 result = winreg_enumval_to_sz(info8, v,
4075                                               "DriverDate",
4076                                               &tmp_str);
4077                 if (W_ERROR_IS_OK(result)) {
4078                         result = winreg_printer_date_to_NTTIME(tmp_str,
4079                                                 &info8->driver_date);
4080                 }
4081                 CHECK_ERROR(result);
4082
4083                 result = winreg_enumval_to_sz(info8, v,
4084                                               "DriverVersion",
4085                                               &tmp_str);
4086                 if (W_ERROR_IS_OK(result)) {
4087                         result = winreg_printer_ver_to_dword(tmp_str,
4088                                                 &info8->driver_version);
4089                 }
4090                 CHECK_ERROR(result);
4091
4092                 result = winreg_enumval_to_sz(info8, v,
4093                                               "Manufacturer",
4094                                               &info8->manufacturer_name);
4095                 CHECK_ERROR(result);
4096
4097                 result = winreg_enumval_to_sz(info8, v,
4098                                               "OEM URL",
4099                                               &info8->manufacturer_url);
4100                 CHECK_ERROR(result);
4101
4102                 result = winreg_enumval_to_sz(info8, v,
4103                                               "HardwareID",
4104                                               &info8->hardware_id);
4105                 CHECK_ERROR(result);
4106
4107                 result = winreg_enumval_to_sz(info8, v,
4108                                               "Provider",
4109                                               &info8->provider);
4110                 CHECK_ERROR(result);
4111
4112                 result = winreg_enumval_to_sz(info8, v,
4113                                               "Print Processor",
4114                                               &info8->print_processor);
4115                 CHECK_ERROR(result);
4116
4117                 result = winreg_enumval_to_sz(info8, v,
4118                                               "VendorSetup",
4119                                               &info8->vendor_setup);
4120                 CHECK_ERROR(result);
4121
4122                 result = winreg_enumval_to_multi_sz(info8, v,
4123                                                     "Color Profiles",
4124                                                     &info8->color_profiles);
4125                 CHECK_ERROR(result);
4126
4127                 result = winreg_enumval_to_sz(info8, v,
4128                                               "InfPath",
4129                                               &info8->inf_path);
4130                 CHECK_ERROR(result);
4131
4132                 result = winreg_enumval_to_dword(info8, v,
4133                                                  "PrinterDriverAttributes",
4134                                                  &info8->printer_driver_attributes);
4135                 CHECK_ERROR(result);
4136
4137                 result = winreg_enumval_to_multi_sz(info8, v,
4138                                                     "CoreDependencies",
4139                                                     &info8->core_driver_dependencies);
4140                 CHECK_ERROR(result);
4141
4142                 result = winreg_enumval_to_sz(info8, v,
4143                                               "MinInboxDriverVerDate",
4144                                               &tmp_str);
4145                 if (W_ERROR_IS_OK(result)) {
4146                         result = winreg_printer_date_to_NTTIME(tmp_str,
4147                                         &info8->min_inbox_driver_ver_date);
4148                 }
4149                 CHECK_ERROR(result);
4150
4151                 result = winreg_enumval_to_sz(info8, v,
4152                                               "MinInboxDriverVerVersion",
4153                                               &tmp_str);
4154                 if (W_ERROR_IS_OK(result)) {
4155                         result = winreg_printer_ver_to_dword(tmp_str,
4156                                         &info8->min_inbox_driver_ver_version);
4157                 }
4158                 CHECK_ERROR(result);
4159         }
4160
4161         if (!W_ERROR_IS_OK(result)) {
4162                 DEBUG(0, ("winreg_enumval_to_TYPE() failed "
4163                           "for %s: %s\n", v->value_name,
4164                           win_errstr(result)));
4165                 goto done;
4166         }
4167
4168         *_info8 = talloc_steal(mem_ctx, info8);
4169         result = WERR_OK;
4170 done:
4171         if (winreg_pipe != NULL) {
4172                 if (is_valid_policy_hnd(&key_hnd)) {
4173                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4174                 }
4175                 if (is_valid_policy_hnd(&hive_hnd)) {
4176                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
4177                 }
4178         }
4179
4180         TALLOC_FREE(tmp_ctx);
4181         return result;
4182 }
4183
4184 WERROR winreg_del_driver(TALLOC_CTX *mem_ctx,
4185                          struct auth_serversupplied_info *server_info,
4186                          struct spoolss_DriverInfo8 *info8,
4187                          uint32_t version)
4188 {
4189         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
4190         struct rpc_pipe_client *winreg_pipe = NULL;
4191         struct policy_handle hive_hnd, key_hnd;
4192         TALLOC_CTX *tmp_ctx;
4193         char *key_name;
4194         WERROR result;
4195
4196         ZERO_STRUCT(hive_hnd);
4197         ZERO_STRUCT(key_hnd);
4198
4199         tmp_ctx = talloc_new(mem_ctx);
4200         if (tmp_ctx == NULL) {
4201                 return WERR_NOMEM;
4202         }
4203
4204         /* test that the key exists */
4205         result = winreg_printer_opendriver(tmp_ctx,
4206                                            server_info,
4207                                            info8->driver_name,
4208                                            info8->architecture,
4209                                            version,
4210                                            access_mask, false,
4211                                            &winreg_pipe,
4212                                            &hive_hnd,
4213                                            &key_hnd);
4214         if (!W_ERROR_IS_OK(result)) {
4215                 /* key doesn't exist */
4216                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
4217                         result = WERR_OK;
4218                         goto done;
4219                 }
4220
4221                 DEBUG(5, ("winreg_del_driver: "
4222                           "Could not open driver (%s,%s,%u): %s\n",
4223                           info8->driver_name, info8->architecture,
4224                           version, win_errstr(result)));
4225                 goto done;
4226         }
4227
4228
4229         if (is_valid_policy_hnd(&key_hnd)) {
4230                 rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4231         }
4232
4233         key_name = talloc_asprintf(tmp_ctx,
4234                                    "%s\\Environments\\%s\\Drivers\\Version-%u",
4235                                    TOP_LEVEL_CONTROL_KEY,
4236                                    info8->architecture, version);
4237         if (key_name == NULL) {
4238                 result = WERR_NOMEM;
4239                 goto done;
4240         }
4241
4242         result = winreg_printer_delete_subkeys(tmp_ctx,
4243                                                winreg_pipe,
4244                                                &hive_hnd,
4245                                                access_mask,
4246                                                key_name);
4247         if (!W_ERROR_IS_OK(result)) {
4248                 DEBUG(0, ("winreg_del_driver: "
4249                           "Could not open driver (%s,%s,%u): %s\n",
4250                           info8->driver_name, info8->architecture,
4251                           version, win_errstr(result)));
4252                 goto done;
4253         }
4254
4255         result = WERR_OK;
4256 done:
4257         if (winreg_pipe != NULL) {
4258                 if (is_valid_policy_hnd(&key_hnd)) {
4259                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4260                 }
4261                 if (is_valid_policy_hnd(&hive_hnd)) {
4262                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
4263                 }
4264         }
4265
4266         TALLOC_FREE(tmp_ctx);
4267         return result;
4268 }
4269
4270 WERROR winreg_get_driver_list(TALLOC_CTX *mem_ctx,
4271                               struct auth_serversupplied_info *server_info,
4272                               const char *architecture,
4273                               uint32_t version,
4274                               uint32_t *num_drivers,
4275                               const char ***drivers_p)
4276 {
4277         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
4278         struct rpc_pipe_client *winreg_pipe = NULL;
4279         struct policy_handle hive_hnd, key_hnd;
4280         const char **drivers;
4281         TALLOC_CTX *tmp_ctx;
4282         WERROR result;
4283
4284         *num_drivers = 0;
4285         *drivers_p = NULL;
4286
4287         ZERO_STRUCT(hive_hnd);
4288         ZERO_STRUCT(key_hnd);
4289
4290         tmp_ctx = talloc_new(mem_ctx);
4291         if (tmp_ctx == NULL) {
4292                 return WERR_NOMEM;
4293         }
4294
4295         /* use NULL for the driver name so we open the key that is
4296          * parent of all drivers for this architecture and version */
4297         result = winreg_printer_opendriver(tmp_ctx,
4298                                            server_info,
4299                                            NULL,
4300                                            architecture,
4301                                            version,
4302                                            access_mask, false,
4303                                            &winreg_pipe,
4304                                            &hive_hnd,
4305                                            &key_hnd);
4306         if (!W_ERROR_IS_OK(result)) {
4307                 DEBUG(5, ("winreg_get_driver_list: "
4308                           "Could not open key (%s,%u): %s\n",
4309                           architecture, version, win_errstr(result)));
4310                 result = WERR_OK;
4311                 goto done;
4312         }
4313
4314         result = winreg_printer_enumkeys(tmp_ctx,
4315                                          winreg_pipe,
4316                                          &key_hnd,
4317                                          num_drivers,
4318                                          &drivers);
4319         if (!W_ERROR_IS_OK(result)) {
4320                 DEBUG(0, ("winreg_get_driver_list: "
4321                           "Could not enumerate drivers for (%s,%u): %s\n",
4322                           architecture, version, win_errstr(result)));
4323                 goto done;
4324         }
4325
4326         *drivers_p = talloc_steal(mem_ctx, drivers);
4327
4328         result = WERR_OK;
4329 done:
4330         if (winreg_pipe != NULL) {
4331                 if (is_valid_policy_hnd(&key_hnd)) {
4332                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4333                 }
4334                 if (is_valid_policy_hnd(&hive_hnd)) {
4335                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
4336                 }
4337         }
4338
4339         TALLOC_FREE(tmp_ctx);
4340         return result;
4341 }
4342