Correctly check for errors in strlower_m() returns.
[samba.git] / source3 / printing / nt_printing_tdb.c
1 /*
2  *  Unix SMB/CIFS implementation.
3  *  RPC Pipe client / server routines
4  *  Copyright (c) Andrew Tridgell              1992-2000,
5  *  Copyright (c) Jean Fran├žois Micouleau      1998-2000.
6  *  Copyright (c) Gerald Carter                2002-2005.
7  *  Copyright (c) Andreas Schneider            2010.
8  *
9  *  This program is free software; you can redistribute it and/or modify
10  *  it under the terms of the GNU General Public License as published by
11  *  the Free Software Foundation; either version 3 of the License, or
12  *  (at your option) any later version.
13  *
14  *  This program is distributed in the hope that it will be useful,
15  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
16  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17  *  GNU General Public License for more details.
18  *
19  *  You should have received a copy of the GNU General Public License
20  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
21  */
22
23 #include "includes.h"
24 #include "system/filesys.h"
25 #include "printing/nt_printing_tdb.h"
26 #include "librpc/gen_ndr/spoolss.h"
27 #include "librpc/gen_ndr/ndr_security.h"
28 #include "libcli/security/security.h"
29 #include "util_tdb.h"
30
31 #define FORMS_PREFIX "FORMS/"
32 #define DRIVERS_PREFIX "DRIVERS/"
33 #define PRINTERS_PREFIX "PRINTERS/"
34 #define SECDESC_PREFIX "SECDESC/"
35
36 #define NTDRIVERS_DATABASE_VERSION_1 1
37 #define NTDRIVERS_DATABASE_VERSION_2 2
38 #define NTDRIVERS_DATABASE_VERSION_3 3 /* little endian version of v2 */
39 #define NTDRIVERS_DATABASE_VERSION_4 4 /* fix generic bits in security descriptors */
40 #define NTDRIVERS_DATABASE_VERSION_5 5 /* normalize keys in ntprinters.tdb */
41
42 static TDB_CONTEXT *tdb_forms; /* used for forms files */
43 static TDB_CONTEXT *tdb_drivers; /* used for driver files */
44 static TDB_CONTEXT *tdb_printers; /* used for printers files */
45
46 /****************************************************************************
47  generate a new TDB_DATA key for storing a printer
48 ****************************************************************************/
49
50 static TDB_DATA make_printer_tdbkey(TALLOC_CTX *ctx, const char *sharename )
51 {
52         fstring share;
53         char *keystr = NULL;
54         TDB_DATA key;
55
56         fstrcpy(share, sharename);
57         (void)strlower_m(share);
58
59         keystr = talloc_asprintf(ctx, "%s%s", PRINTERS_PREFIX, share);
60         key = string_term_tdb_data(keystr ? keystr : "");
61
62         return key;
63 }
64
65 /****************************************************************************
66  generate a new TDB_DATA key for storing a printer security descriptor
67 ****************************************************************************/
68
69 static TDB_DATA make_printers_secdesc_tdbkey(TALLOC_CTX *ctx,
70                                         const char* sharename  )
71 {
72         fstring share;
73         char *keystr = NULL;
74         TDB_DATA key;
75
76         fstrcpy(share, sharename );
77         (void)strlower_m(share);
78
79         keystr = talloc_asprintf(ctx, "%s%s", SECDESC_PREFIX, share);
80         key = string_term_tdb_data(keystr ? keystr : "");
81
82         return key;
83 }
84
85 /****************************************************************************
86  Upgrade the tdb files to version 3
87 ****************************************************************************/
88
89 static bool upgrade_to_version_3(void)
90 {
91         TDB_DATA kbuf, dbuf;
92
93         DEBUG(0,("upgrade_to_version_3: upgrading print tdb's to version 3\n"));
94
95         for (kbuf = tdb_firstkey_compat(tdb_drivers); kbuf.dptr;
96                         kbuf = tdb_nextkey_compat(tdb_drivers, kbuf)) {
97
98                 dbuf = tdb_fetch_compat(tdb_drivers, kbuf);
99
100                 if (strncmp((const char *)kbuf.dptr, FORMS_PREFIX, strlen(FORMS_PREFIX)) == 0) {
101                         DEBUG(0,("upgrade_to_version_3:moving form\n"));
102                         if (tdb_store(tdb_forms, kbuf, dbuf, TDB_REPLACE) != 0) {
103                                 SAFE_FREE(dbuf.dptr);
104                                 DEBUG(0,("upgrade_to_version_3: failed to move form. Error (%s).\n", tdb_errorstr_compat(tdb_forms)));
105                                 return False;
106                         }
107                         if (tdb_delete(tdb_drivers, kbuf) != 0) {
108                                 SAFE_FREE(dbuf.dptr);
109                                 DEBUG(0,("upgrade_to_version_3: failed to delete form. Error (%s)\n", tdb_errorstr_compat(tdb_drivers)));
110                                 return False;
111                         }
112                 }
113
114                 if (strncmp((const char *)kbuf.dptr, PRINTERS_PREFIX, strlen(PRINTERS_PREFIX)) == 0) {
115                         DEBUG(0,("upgrade_to_version_3:moving printer\n"));
116                         if (tdb_store(tdb_printers, kbuf, dbuf, TDB_REPLACE) != 0) {
117                                 SAFE_FREE(dbuf.dptr);
118                                 DEBUG(0,("upgrade_to_version_3: failed to move printer. Error (%s)\n", tdb_errorstr_compat(tdb_printers)));
119                                 return False;
120                         }
121                         if (tdb_delete(tdb_drivers, kbuf) != 0) {
122                                 SAFE_FREE(dbuf.dptr);
123                                 DEBUG(0,("upgrade_to_version_3: failed to delete printer. Error (%s)\n", tdb_errorstr_compat(tdb_drivers)));
124                                 return False;
125                         }
126                 }
127
128                 if (strncmp((const char *)kbuf.dptr, SECDESC_PREFIX, strlen(SECDESC_PREFIX)) == 0) {
129                         DEBUG(0,("upgrade_to_version_3:moving secdesc\n"));
130                         if (tdb_store(tdb_printers, kbuf, dbuf, TDB_REPLACE) != 0) {
131                                 SAFE_FREE(dbuf.dptr);
132                                 DEBUG(0,("upgrade_to_version_3: failed to move secdesc. Error (%s)\n", tdb_errorstr_compat(tdb_printers)));
133                                 return False;
134                         }
135                         if (tdb_delete(tdb_drivers, kbuf) != 0) {
136                                 SAFE_FREE(dbuf.dptr);
137                                 DEBUG(0,("upgrade_to_version_3: failed to delete secdesc. Error (%s)\n", tdb_errorstr_compat(tdb_drivers)));
138                                 return False;
139                         }
140                 }
141
142                 SAFE_FREE(dbuf.dptr);
143         }
144
145         return True;
146 }
147
148 /*******************************************************************
149  Fix an issue with security descriptors.  Printer sec_desc must
150  use more than the generic bits that were previously used
151  in <= 3.0.14a.  They must also have a owner and group SID assigned.
152  Otherwise, any printers than have been migrated to a Windows
153  host using printmig.exe will not be accessible.
154 *******************************************************************/
155
156 static int sec_desc_upg_fn( TDB_CONTEXT *the_tdb, TDB_DATA key,
157                             TDB_DATA data, void *state )
158 {
159         NTSTATUS status;
160         struct sec_desc_buf *sd_orig = NULL;
161         struct sec_desc_buf *sd_new, *sd_store;
162         struct security_descriptor *sec, *new_sec;
163         TALLOC_CTX *ctx = state;
164         int result, i;
165         size_t size_new_sec;
166
167         if (!data.dptr || data.dsize == 0) {
168                 return 0;
169         }
170
171         if ( strncmp((const char *) key.dptr, SECDESC_PREFIX, strlen(SECDESC_PREFIX) ) != 0 ) {
172                 return 0;
173         }
174
175         /* upgrade the security descriptor */
176
177         status = unmarshall_sec_desc_buf(ctx, data.dptr, data.dsize, &sd_orig);
178         if (!NT_STATUS_IS_OK(status)) {
179                 /* delete bad entries */
180                 DEBUG(0,("sec_desc_upg_fn: Failed to parse original sec_desc for %si.  Deleting....\n",
181                         (const char *)key.dptr ));
182                 tdb_delete( tdb_printers, key );
183                 return 0;
184         }
185
186         if (!sd_orig) {
187                 return 0;
188         }
189         sec = sd_orig->sd;
190
191         /* is this even valid? */
192
193         if ( !sec->dacl ) {
194                 return 0;
195         }
196
197         /* update access masks */
198
199         for ( i=0; i<sec->dacl->num_aces; i++ ) {
200                 switch ( sec->dacl->aces[i].access_mask ) {
201                         case (GENERIC_READ_ACCESS | GENERIC_WRITE_ACCESS | GENERIC_EXECUTE_ACCESS):
202                                 sec->dacl->aces[i].access_mask = PRINTER_ACE_PRINT;
203                                 break;
204
205                         case GENERIC_ALL_ACCESS:
206                                 sec->dacl->aces[i].access_mask = PRINTER_ACE_FULL_CONTROL;
207                                 break;
208
209                         case READ_CONTROL_ACCESS:
210                                 sec->dacl->aces[i].access_mask = PRINTER_ACE_MANAGE_DOCUMENTS;
211
212                         default:        /* no change */
213                                 break;
214                 }
215         }
216
217         /* create a new struct security_descriptor with the appropriate owner and group SIDs */
218
219         new_sec = make_sec_desc( ctx, SD_REVISION, SEC_DESC_SELF_RELATIVE,
220                                  &global_sid_Builtin_Administrators,
221                                  &global_sid_Builtin_Administrators,
222                                  NULL, NULL, &size_new_sec );
223         if (!new_sec) {
224                 return 0;
225         }
226         sd_new = make_sec_desc_buf( ctx, size_new_sec, new_sec );
227         if (!sd_new) {
228                 return 0;
229         }
230
231         if ( !(sd_store = sec_desc_merge_buf( ctx, sd_new, sd_orig )) ) {
232                 DEBUG(0,("sec_desc_upg_fn: Failed to update sec_desc for %s\n", key.dptr ));
233                 return 0;
234         }
235
236         /* store it back */
237
238         status = marshall_sec_desc_buf(ctx, sd_store, &data.dptr, &data.dsize);
239         if (!NT_STATUS_IS_OK(status)) {
240                 DEBUG(0,("sec_desc_upg_fn: Failed to parse new sec_desc for %s\n", key.dptr ));
241                 return 0;
242         }
243
244         result = tdb_store( tdb_printers, key, data, TDB_REPLACE );
245
246         /* 0 to continue and non-zero to stop traversal */
247
248         return (result != 0);
249 }
250
251 /*******************************************************************
252  Upgrade the tdb files to version 4
253 *******************************************************************/
254
255 static bool upgrade_to_version_4(void)
256 {
257         TALLOC_CTX *ctx;
258         int result;
259
260         DEBUG(0,("upgrade_to_version_4: upgrading printer security descriptors\n"));
261
262         if ( !(ctx = talloc_init( "upgrade_to_version_4" )) )
263                 return False;
264
265         result = tdb_traverse( tdb_printers, sec_desc_upg_fn, ctx );
266
267         talloc_destroy( ctx );
268
269         return ( result >= 0 );
270 }
271
272 /*******************************************************************
273  Fix an issue with security descriptors.  Printer sec_desc must
274  use more than the generic bits that were previously used
275  in <= 3.0.14a.  They must also have a owner and group SID assigned.
276  Otherwise, any printers than have been migrated to a Windows
277  host using printmig.exe will not be accessible.
278 *******************************************************************/
279
280 static int normalize_printers_fn( TDB_CONTEXT *the_tdb, TDB_DATA key,
281                                   TDB_DATA data, void *state )
282 {
283         TALLOC_CTX *ctx = talloc_tos();
284         TDB_DATA new_key;
285
286         if (!data.dptr || data.dsize == 0)
287                 return 0;
288
289         /* upgrade printer records and security descriptors */
290
291         if ( strncmp((const char *) key.dptr, PRINTERS_PREFIX, strlen(PRINTERS_PREFIX) ) == 0 ) {
292                 new_key = make_printer_tdbkey(ctx, (const char *)key.dptr+strlen(PRINTERS_PREFIX) );
293         }
294         else if ( strncmp((const char *) key.dptr, SECDESC_PREFIX, strlen(SECDESC_PREFIX) ) == 0 ) {
295                 new_key = make_printers_secdesc_tdbkey(ctx, (const char *)key.dptr+strlen(SECDESC_PREFIX) );
296         }
297         else {
298                 /* ignore this record */
299                 return 0;
300         }
301
302         /* delete the original record and store under the normalized key */
303
304         if ( tdb_delete( the_tdb, key ) != 0 ) {
305                 DEBUG(0,("normalize_printers_fn: tdb_delete for [%s] failed!\n",
306                         key.dptr));
307                 return 1;
308         }
309
310         if ( tdb_store( the_tdb, new_key, data, TDB_REPLACE) != 0 ) {
311                 DEBUG(0,("normalize_printers_fn: failed to store new record for [%s]!\n",
312                         key.dptr));
313                 return 1;
314         }
315
316         return 0;
317 }
318
319 /*******************************************************************
320  Upgrade the tdb files to version 5
321 *******************************************************************/
322
323 static bool upgrade_to_version_5(void)
324 {
325         TALLOC_CTX *ctx;
326         int result;
327
328         DEBUG(0,("upgrade_to_version_5: normalizing printer keys\n"));
329
330         if ( !(ctx = talloc_init( "upgrade_to_version_5" )) )
331                 return False;
332
333         result = tdb_traverse( tdb_printers, normalize_printers_fn, NULL );
334
335         talloc_destroy( ctx );
336
337         return ( result >= 0 );
338 }
339
340 bool nt_printing_tdb_upgrade(void)
341 {
342         const char *drivers_path = state_path("ntdrivers.tdb");
343         const char *printers_path = state_path("ntprinters.tdb");
344         const char *forms_path = state_path("ntforms.tdb");
345         bool drivers_exists = file_exist(drivers_path);
346         bool printers_exists = file_exist(printers_path);
347         bool forms_exists = file_exist(forms_path);
348         const char *vstring = "INFO/version";
349         int32_t vers_id;
350
351         if (!drivers_exists && !printers_exists && !forms_exists) {
352                 return true;
353         }
354
355         tdb_drivers = tdb_open_log(drivers_path,
356                                    0,
357                                    TDB_DEFAULT,
358                                    O_RDWR|O_CREAT,
359                                    0600);
360         if (tdb_drivers == NULL) {
361                 DEBUG(0,("nt_printing_init: Failed to open nt drivers "
362                          "database %s (%s)\n",
363                          drivers_path, strerror(errno)));
364                 return false;
365         }
366
367         tdb_printers = tdb_open_log(printers_path,
368                                     0,
369                                     TDB_DEFAULT,
370                                     O_RDWR|O_CREAT,
371                                     0600);
372         if (tdb_printers == NULL) {
373                 DEBUG(0,("nt_printing_init: Failed to open nt printers "
374                          "database %s (%s)\n",
375                          printers_path, strerror(errno)));
376                 return false;
377         }
378
379         tdb_forms = tdb_open_log(forms_path,
380                                  0,
381                                  TDB_DEFAULT,
382                                  O_RDWR|O_CREAT,
383                                  0600);
384         if (tdb_forms == NULL) {
385                 DEBUG(0,("nt_printing_init: Failed to open nt forms "
386                          "database %s (%s)\n",
387                          forms_path, strerror(errno)));
388                 return false;
389         }
390
391         /* Samba upgrade */
392         vers_id = tdb_fetch_int32(tdb_drivers, vstring);
393         if (vers_id == -1) {
394                 DEBUG(10, ("Fresh database\n"));
395                 tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_5);
396                 vers_id = NTDRIVERS_DATABASE_VERSION_5;
397         }
398
399         if (vers_id != NTDRIVERS_DATABASE_VERSION_5) {
400                 if ((vers_id == NTDRIVERS_DATABASE_VERSION_1) ||
401                     (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_1)) {
402                         if (!upgrade_to_version_3()) {
403                                 return false;
404                         }
405
406                         tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_3);
407                         vers_id = NTDRIVERS_DATABASE_VERSION_3;
408                 }
409
410                 if ((vers_id == NTDRIVERS_DATABASE_VERSION_2) ||
411                     (IREV(vers_id) == NTDRIVERS_DATABASE_VERSION_2)) {
412                         /*
413                          * Written on a bigendian machine with old fetch_int
414                          * code. Save as le. The only upgrade between V2 and V3
415                          * is to save the version in little-endian.
416                          */
417                         tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_3);
418                         vers_id = NTDRIVERS_DATABASE_VERSION_3;
419                 }
420
421                 if (vers_id == NTDRIVERS_DATABASE_VERSION_3) {
422                         if (!upgrade_to_version_4()) {
423                                 return false;
424                         }
425                         tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_4);
426                         vers_id = NTDRIVERS_DATABASE_VERSION_4;
427                 }
428
429                 if (vers_id == NTDRIVERS_DATABASE_VERSION_4 ) {
430                         if (!upgrade_to_version_5()) {
431                                 return false;
432                         }
433                         tdb_store_int32(tdb_drivers, vstring, NTDRIVERS_DATABASE_VERSION_5);
434                         vers_id = NTDRIVERS_DATABASE_VERSION_5;
435                 }
436
437                 if (vers_id != NTDRIVERS_DATABASE_VERSION_5) {
438                         DEBUG(0,("nt_printing_init: Unknown printer database version [%d]\n", vers_id));
439                         return false;
440                 }
441         }
442
443         if (tdb_drivers) {
444                 tdb_close(tdb_drivers);
445                 tdb_drivers = NULL;
446         }
447
448         if (tdb_printers) {
449                 tdb_close(tdb_printers);
450                 tdb_printers = NULL;
451         }
452
453         if (tdb_forms) {
454                 tdb_close(tdb_forms);
455                 tdb_forms = NULL;
456         }
457
458         return true;
459 }