2 Unix SMB/CIFS implementation.
5 Copyright (C) Tim Potter 2000
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "rpcclient.h"
24 static NTSTATUS cmd_netlogon_logon_ctrl2(struct rpc_pipe_client *cli,
25 TALLOC_CTX *mem_ctx, int argc,
28 uint32 query_level = 1;
29 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
32 fprintf(stderr, "Usage: %s\n", argv[0]);
36 result = rpccli_netlogon_logon_ctrl2(cli, mem_ctx, query_level);
38 if (!NT_STATUS_IS_OK(result))
47 static WERROR cmd_netlogon_getanydcname(struct rpc_pipe_client *cli,
48 TALLOC_CTX *mem_ctx, int argc,
52 WERROR result = WERR_GENERAL_FAILURE;
56 fprintf(stderr, "Usage: %s domainname\n", argv[0]);
60 /* Make sure to wait for our DC's reply */
61 old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
63 result = rpccli_netlogon_getanydcname(cli, mem_ctx, cli->cli->desthost, argv[1], &dcname);
65 cli_set_timeout(cli->cli, old_timeout);
67 if (!W_ERROR_IS_OK(result))
72 printf("%s\n", dcname);
78 static WERROR cmd_netlogon_getdcname(struct rpc_pipe_client *cli,
79 TALLOC_CTX *mem_ctx, int argc,
83 WERROR result = WERR_GENERAL_FAILURE;
87 fprintf(stderr, "Usage: %s domainname\n", argv[0]);
91 /* Make sure to wait for our DC's reply */
92 old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
94 result = rpccli_netlogon_getdcname(cli, mem_ctx, cli->cli->desthost, argv[1], &dcname);
96 cli_set_timeout(cli->cli, old_timeout);
98 if (!W_ERROR_IS_OK(result))
101 /* Display results */
103 printf("%s\n", dcname);
109 static WERROR cmd_netlogon_dsr_getdcname(struct rpc_pipe_client *cli,
110 TALLOC_CTX *mem_ctx, int argc,
114 uint32 flags = DS_RETURN_DNS_NAME;
115 const char *server_name = cli->cli->desthost;
116 const char *domain_name;
117 struct GUID domain_guid = GUID_zero();
118 struct GUID site_guid = GUID_zero();
119 struct DS_DOMAIN_CONTROLLER_INFO *info = NULL;
122 fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
123 "[site_guid] [flags]\n", argv[0]);
128 domain_name = argv[1];
131 if (!NT_STATUS_IS_OK(GUID_from_string(argv[2], &domain_guid))) {
137 if (!NT_STATUS_IS_OK(GUID_from_string(argv[3], &site_guid))) {
143 sscanf(argv[4], "%x", &flags);
145 debug_dsdcinfo_flags(1,flags);
147 result = rpccli_netlogon_dsr_getdcname(cli, mem_ctx, server_name, domain_name,
148 &domain_guid, &site_guid, flags,
151 if (W_ERROR_IS_OK(result)) {
152 d_printf("DsGetDcName gave\n");
153 display_ds_domain_controller_info(mem_ctx, info);
157 printf("rpccli_netlogon_dsr_getdcname returned %s\n",
163 static WERROR cmd_netlogon_dsr_getdcnameex(struct rpc_pipe_client *cli,
164 TALLOC_CTX *mem_ctx, int argc,
169 uint32_t flags = DS_RETURN_DNS_NAME;
170 const char *server_name = cli->cli->desthost;
171 const char *domain_name;
172 const char *site_name = NULL;
173 struct GUID domain_guid = GUID_zero();
174 struct netr_DsRGetDCNameInfo *info = NULL;
177 fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
178 "[site_name] [flags]\n", argv[0]);
182 domain_name = argv[1];
185 if (!NT_STATUS_IS_OK(GUID_from_string(argv[2], &domain_guid))) {
195 sscanf(argv[4], "%x", &flags);
198 debug_dsdcinfo_flags(1,flags);
200 status = rpccli_netr_DsRGetDCNameEx(cli, mem_ctx,
208 if (!NT_STATUS_IS_OK(status)) {
209 return ntstatus_to_werror(status);
212 if (!W_ERROR_IS_OK(result)) {
216 d_printf("DsRGetDCNameEx gave %s\n",
217 NDR_PRINT_STRUCT_STRING(mem_ctx, netr_DsRGetDCNameInfo, info));
222 static WERROR cmd_netlogon_dsr_getdcnameex2(struct rpc_pipe_client *cli,
223 TALLOC_CTX *mem_ctx, int argc,
228 uint32_t flags = DS_RETURN_DNS_NAME;
229 const char *server_name = cli->cli->desthost;
230 const char *domain_name = NULL;
231 const char *client_account = NULL;
233 const char *site_name = NULL;
234 struct GUID domain_guid = GUID_zero();
235 struct netr_DsRGetDCNameInfo *info = NULL;
238 fprintf(stderr, "Usage: %s [client_account] [acb_mask] "
239 "[domain_name] [domain_guid] [site_name] "
240 "[flags]\n", argv[0]);
245 client_account = argv[1];
249 mask = atoi(argv[2]);
253 domain_name = argv[3];
257 if (!NT_STATUS_IS_OK(GUID_from_string(argv[4], &domain_guid))) {
267 sscanf(argv[6], "%x", &flags);
270 debug_dsdcinfo_flags(1,flags);
272 status = rpccli_netr_DsRGetDCNameEx2(cli, mem_ctx,
282 if (!NT_STATUS_IS_OK(status)) {
283 return ntstatus_to_werror(status);
286 if (!W_ERROR_IS_OK(result)) {
290 d_printf("DsRGetDCNameEx2 gave %s\n",
291 NDR_PRINT_STRUCT_STRING(mem_ctx, netr_DsRGetDCNameInfo, info));
297 static WERROR cmd_netlogon_dsr_getsitename(struct rpc_pipe_client *cli,
298 TALLOC_CTX *mem_ctx, int argc,
305 fprintf(stderr, "Usage: %s computername\n", argv[0]);
309 result = rpccli_netlogon_dsr_getsitename(cli, mem_ctx, argv[1], &sitename);
311 if (!W_ERROR_IS_OK(result)) {
312 printf("rpccli_netlogon_dsr_gesitename returned %s\n",
313 nt_errstr(werror_to_ntstatus(result)));
317 printf("Computer %s is on Site: %s\n", argv[1], sitename);
322 static NTSTATUS cmd_netlogon_logon_ctrl(struct rpc_pipe_client *cli,
323 TALLOC_CTX *mem_ctx, int argc,
327 uint32 query_level = 1;
329 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
332 fprintf(stderr, "Usage: %s\n", argv[0]);
337 result = cli_netlogon_logon_ctrl(cli, mem_ctx, query_level);
338 if (!NT_STATUS_IS_OK(result)) {
343 /* Display results */
348 /* Display sam synchronisation information */
350 static void display_sam_sync(uint32 num_deltas, SAM_DELTA_HDR *hdr_deltas,
351 SAM_DELTA_CTR *deltas)
356 for (i = 0; i < num_deltas; i++) {
357 switch (hdr_deltas[i].type) {
358 case SAM_DELTA_DOMAIN_INFO:
359 unistr2_to_ascii(name,
360 &deltas[i].domain_info.uni_dom_name,
362 printf("Domain: %s\n", name);
364 case SAM_DELTA_GROUP_INFO:
365 unistr2_to_ascii(name,
366 &deltas[i].group_info.uni_grp_name,
368 printf("Group: %s\n", name);
370 case SAM_DELTA_ACCOUNT_INFO:
371 unistr2_to_ascii(name,
372 &deltas[i].account_info.uni_acct_name,
374 printf("Account: %s\n", name);
376 case SAM_DELTA_ALIAS_INFO:
377 unistr2_to_ascii(name,
378 &deltas[i].alias_info.uni_als_name,
380 printf("Alias: %s\n", name);
382 case SAM_DELTA_ALIAS_MEM: {
383 SAM_ALIAS_MEM_INFO *alias = &deltas[i].als_mem_info;
385 for (j = 0; j < alias->num_members; j++) {
388 sid_to_fstring(sid_str, &alias->sids[j].sid);
390 printf("%s\n", sid_str);
394 case SAM_DELTA_GROUP_MEM: {
395 SAM_GROUP_MEM_INFO *group = &deltas[i].grp_mem_info;
397 for (j = 0; j < group->num_members; j++)
398 printf("rid 0x%x, attrib 0x%08x\n",
399 group->rids[j], group->attribs[j]);
402 case SAM_DELTA_MODIFIED_COUNT: {
403 SAM_DELTA_MOD_COUNT *mc = &deltas[i].mod_count;
405 printf("sam sequence update: 0x%04x\n", mc->seqnum);
409 printf("unknown delta type 0x%02x\n",
416 /* Perform sam synchronisation */
418 static NTSTATUS cmd_netlogon_sam_sync(struct rpc_pipe_client *cli,
419 TALLOC_CTX *mem_ctx, int argc,
422 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
423 uint32 database_id = 0, num_deltas;
424 SAM_DELTA_HDR *hdr_deltas;
425 SAM_DELTA_CTR *deltas;
428 fprintf(stderr, "Usage: %s [database_id]\n", argv[0]);
433 database_id = atoi(argv[1]);
435 /* Synchronise sam database */
437 result = rpccli_netlogon_sam_sync(cli, mem_ctx, database_id,
438 0, &num_deltas, &hdr_deltas, &deltas);
440 if (!NT_STATUS_IS_OK(result))
443 /* Display results */
445 display_sam_sync(num_deltas, hdr_deltas, deltas);
451 /* Perform sam delta synchronisation */
453 static NTSTATUS cmd_netlogon_sam_deltas(struct rpc_pipe_client *cli,
454 TALLOC_CTX *mem_ctx, int argc,
457 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
458 uint32 database_id, num_deltas, tmp;
459 SAM_DELTA_HDR *hdr_deltas;
460 SAM_DELTA_CTR *deltas;
464 fprintf(stderr, "Usage: %s database_id seqnum\n", argv[0]);
468 database_id = atoi(argv[1]);
471 seqnum = tmp & 0xffff;
473 result = rpccli_netlogon_sam_deltas(cli, mem_ctx, database_id,
475 &hdr_deltas, &deltas);
477 if (!NT_STATUS_IS_OK(result))
480 /* Display results */
482 display_sam_sync(num_deltas, hdr_deltas, deltas);
488 /* Log on a domain user */
490 static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli,
491 TALLOC_CTX *mem_ctx, int argc,
494 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
495 int logon_type = NET_LOGON_TYPE;
496 const char *username, *password;
498 uint32 logon_param = 0;
499 const char *workstation = NULL;
501 /* Check arguments */
503 if (argc < 3 || argc > 7) {
504 fprintf(stderr, "Usage: samlogon <username> <password> [workstation]"
505 "[logon_type (1 or 2)] [auth level (2 or 3)] [logon_parameter]\n");
513 workstation = argv[3];
516 sscanf(argv[4], "%i", &logon_type);
519 sscanf(argv[5], "%i", &auth_level);
522 sscanf(argv[6], "%x", &logon_param);
524 /* Perform the sam logon */
526 result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, logon_type);
528 if (!NT_STATUS_IS_OK(result))
535 /* Change the trust account password */
537 static NTSTATUS cmd_netlogon_change_trust_pw(struct rpc_pipe_client *cli,
538 TALLOC_CTX *mem_ctx, int argc,
541 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
543 /* Check arguments */
546 fprintf(stderr, "Usage: change_trust_pw");
550 /* Perform the sam logon */
552 result = trust_pw_find_change_and_store_it(cli, mem_ctx,
555 if (!NT_STATUS_IS_OK(result))
562 static WERROR cmd_netlogon_gettrustrid(struct rpc_pipe_client *cli,
563 TALLOC_CTX *mem_ctx, int argc,
566 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
567 WERROR werr = WERR_GENERAL_FAILURE;
568 const char *server_name = cli->cli->desthost;
569 const char *domain_name = lp_workgroup();
572 if (argc < 1 || argc > 3) {
573 fprintf(stderr, "Usage: %s <server_name> <domain_name>\n",
579 server_name = argv[1];
583 domain_name = argv[2];
586 status = rpccli_netr_LogonGetTrustRid(cli, mem_ctx,
591 if (!NT_STATUS_IS_OK(status)) {
595 if (W_ERROR_IS_OK(werr)) {
596 printf("Rid: %d\n", rid);
602 static WERROR cmd_netlogon_dsr_enumtrustdom(struct rpc_pipe_client *cli,
603 TALLOC_CTX *mem_ctx, int argc,
606 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
607 WERROR werr = WERR_GENERAL_FAILURE;
608 const char *server_name = cli->cli->desthost;
609 uint32_t trust_flags = NETR_TRUST_FLAG_IN_FOREST;
610 struct netr_DomainTrustList trusts;
612 if (argc < 1 || argc > 3) {
613 fprintf(stderr, "Usage: %s <server_name> <trust_flags>\n",
619 server_name = argv[1];
623 sscanf(argv[2], "%x", &trust_flags);
626 status = rpccli_netr_DsrEnumerateDomainTrusts(cli, mem_ctx,
631 if (!NT_STATUS_IS_OK(status)) {
635 if (W_ERROR_IS_OK(werr)) {
638 printf("%d domains returned\n", trusts.count);
640 for (i=0; i<trusts.count; i++ ) {
642 trusts.array[i].dns_name,
643 trusts.array[i].netbios_name);
650 static WERROR cmd_netlogon_deregisterdnsrecords(struct rpc_pipe_client *cli,
651 TALLOC_CTX *mem_ctx, int argc,
654 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
655 WERROR werr = WERR_GENERAL_FAILURE;
656 const char *server_name = cli->cli->desthost;
657 const char *domain = lp_workgroup();
658 const char *dns_host = NULL;
660 if (argc < 1 || argc > 4) {
661 fprintf(stderr, "Usage: %s <server_name> <domain_name> "
662 "<dns_host>\n", argv[0]);
667 server_name = argv[1];
678 status = rpccli_netr_DsrDeregisterDNSHostRecords(cli, mem_ctx,
685 if (!NT_STATUS_IS_OK(status)) {
689 if (W_ERROR_IS_OK(werr)) {
696 static WERROR cmd_netlogon_dsr_getforesttrustinfo(struct rpc_pipe_client *cli,
697 TALLOC_CTX *mem_ctx, int argc,
700 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
701 WERROR werr = WERR_GENERAL_FAILURE;
702 const char *server_name = cli->cli->desthost;
703 const char *trusted_domain_name = NULL;
704 struct lsa_ForestTrustInformation *info = NULL;
707 if (argc < 1 || argc > 4) {
708 fprintf(stderr, "Usage: %s <server_name> <trusted_domain_name> "
709 "<flags>\n", argv[0]);
714 server_name = argv[1];
718 trusted_domain_name = argv[2];
722 sscanf(argv[3], "%x", &flags);
725 status = rpccli_netr_DsRGetForestTrustInformation(cli, mem_ctx,
731 if (!NT_STATUS_IS_OK(status)) {
735 if (W_ERROR_IS_OK(werr)) {
743 /* List of commands exported by this module */
745 struct cmd_set netlogon_commands[] = {
749 { "logonctrl2", RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl2, NULL, PI_NETLOGON, NULL, "Logon Control 2", "" },
750 { "getanydcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getanydcname, PI_NETLOGON, NULL, "Get trusted DC name", "" },
751 { "getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getdcname, PI_NETLOGON, NULL, "Get trusted PDC name", "" },
752 { "dsr_getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcname, PI_NETLOGON, NULL, "Get trusted DC name", "" },
753 { "dsr_getdcnameex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex, PI_NETLOGON, NULL, "Get trusted DC name", "" },
754 { "dsr_getdcnameex2", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex2, PI_NETLOGON, NULL, "Get trusted DC name", "" },
755 { "dsr_getsitename", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getsitename, PI_NETLOGON, NULL, "Get sitename", "" },
756 { "dsr_getforesttrustinfo", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getforesttrustinfo, PI_NETLOGON, NULL, "Get Forest Trust Info", "" },
757 { "logonctrl", RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl, NULL, PI_NETLOGON, NULL, "Logon Control", "" },
758 { "samsync", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_sync, NULL, PI_NETLOGON, NULL, "Sam Synchronisation", "" },
759 { "samdeltas", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_deltas, NULL, PI_NETLOGON, NULL, "Query Sam Deltas", "" },
760 { "samlogon", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_logon, NULL, PI_NETLOGON, NULL, "Sam Logon", "" },
761 { "change_trust_pw", RPC_RTYPE_NTSTATUS, cmd_netlogon_change_trust_pw, NULL, PI_NETLOGON, NULL, "Change Trust Account Password", "" },
762 { "gettrustrid", RPC_RTYPE_WERROR, NULL, cmd_netlogon_gettrustrid, PI_NETLOGON, NULL, "Get trust rid", "" },
763 { "dsr_enumtrustdom", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_enumtrustdom, PI_NETLOGON, NULL, "Enumerate trusted domains", "" },
764 { "deregisterdnsrecords", RPC_RTYPE_WERROR, NULL, cmd_netlogon_deregisterdnsrecords, PI_NETLOGON, NULL, "Deregister DNS records", "" },