s3-rpc_client: Move client pipe functions to own header.
[samba.git] / source3 / rpcclient / cmd_netlogon.c
index 95d79b5825b3c42a49006b30d04b41df3e2c9eaf..4801d7d5630d501b03cf12c53f66ae245b0d0271 100644 (file)
 
 #include "includes.h"
 #include "rpcclient.h"
+#include "rpc_client/cli_pipe.h"
+#include "../libcli/auth/libcli_auth.h"
+#include "../librpc/gen_ndr/ndr_netlogon.h"
+#include "../librpc/gen_ndr/ndr_netlogon_c.h"
+#include "rpc_client/cli_netlogon.h"
+#include "secrets.h"
 
 static WERROR cmd_netlogon_logon_ctrl2(struct rpc_pipe_client *cli,
                                       TALLOC_CTX *mem_ctx, int argc,
@@ -28,12 +34,13 @@ static WERROR cmd_netlogon_logon_ctrl2(struct rpc_pipe_client *cli,
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        WERROR werr;
-       const char *logon_server = cli->cli->desthost;
+       const char *logon_server = cli->desthost;
        enum netr_LogonControlCode function_code = NETLOGON_CONTROL_REDISCOVER;
        uint32_t level = 1;
        union netr_CONTROL_DATA_INFORMATION data;
        union netr_CONTROL_QUERY_INFORMATION query;
        const char *domain = lp_workgroup();
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc > 5) {
                fprintf(stderr, "Usage: %s <logon_server> <function_code> "
@@ -66,7 +73,7 @@ static WERROR cmd_netlogon_logon_ctrl2(struct rpc_pipe_client *cli,
                        break;
        }
 
-       status = rpccli_netr_LogonControl2(cli, mem_ctx,
+       status = dcerpc_netr_LogonControl2(b, mem_ctx,
                                          logon_server,
                                          function_code,
                                          level,
@@ -94,6 +101,7 @@ static WERROR cmd_netlogon_getanydcname(struct rpc_pipe_client *cli,
        WERROR werr;
        NTSTATUS status;
        int old_timeout;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc != 2) {
                fprintf(stderr, "Usage: %s domainname\n", argv[0]);
@@ -101,14 +109,15 @@ static WERROR cmd_netlogon_getanydcname(struct rpc_pipe_client *cli,
        }
 
        /* Make sure to wait for our DC's reply */
-       old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
+       old_timeout = rpccli_set_timeout(cli, 30000); /* 30 seconds. */
+       rpccli_set_timeout(cli, MAX(old_timeout, 30000)); /* At least 30 sec */
 
-       status = rpccli_netr_GetAnyDCName(cli, mem_ctx,
-                                         cli->cli->desthost,
+       status = dcerpc_netr_GetAnyDCName(b, mem_ctx,
+                                         cli->desthost,
                                          argv[1],
                                          &dcname,
                                          &werr);
-       cli_set_timeout(cli->cli, old_timeout);
+       rpccli_set_timeout(cli, old_timeout);
 
        if (!NT_STATUS_IS_OK(status)) {
                return ntstatus_to_werror(status);
@@ -133,6 +142,7 @@ static WERROR cmd_netlogon_getdcname(struct rpc_pipe_client *cli,
        NTSTATUS status;
        WERROR werr;
        int old_timeout;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc != 2) {
                fprintf(stderr, "Usage: %s domainname\n", argv[0]);
@@ -140,14 +150,15 @@ static WERROR cmd_netlogon_getdcname(struct rpc_pipe_client *cli,
        }
 
        /* Make sure to wait for our DC's reply */
-       old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
+       old_timeout = rpccli_set_timeout(cli, 30000); /* 30 seconds. */
+       rpccli_set_timeout(cli, MAX(30000, old_timeout)); /* At least 30 sec */
 
-       status = rpccli_netr_GetDcName(cli, mem_ctx,
-                                      cli->cli->desthost,
+       status = dcerpc_netr_GetDcName(b, mem_ctx,
+                                      cli->desthost,
                                       argv[1],
                                       &dcname,
                                       &werr);
-       cli_set_timeout(cli->cli, old_timeout);
+       rpccli_set_timeout(cli, old_timeout);
 
        if (!NT_STATUS_IS_OK(status)) {
                return ntstatus_to_werror(status);
@@ -171,11 +182,12 @@ static WERROR cmd_netlogon_dsr_getdcname(struct rpc_pipe_client *cli,
        NTSTATUS result;
        WERROR werr = WERR_OK;
        uint32 flags = DS_RETURN_DNS_NAME;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        const char *domain_name;
        struct GUID domain_guid = GUID_zero();
        struct GUID site_guid = GUID_zero();
        struct netr_DsRGetDCNameInfo *info = NULL;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 2) {
                fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
@@ -203,7 +215,7 @@ static WERROR cmd_netlogon_dsr_getdcname(struct rpc_pipe_client *cli,
 
        debug_dsdcinfo_flags(1,flags);
 
-       result = rpccli_netr_DsRGetDCName(cli, mem_ctx,
+       result = dcerpc_netr_DsRGetDCName(b, mem_ctx,
                                          server_name,
                                          domain_name,
                                          &domain_guid,
@@ -211,6 +223,9 @@ static WERROR cmd_netlogon_dsr_getdcname(struct rpc_pipe_client *cli,
                                          flags,
                                          &info,
                                          &werr);
+       if (!NT_STATUS_IS_OK(result)) {
+               return ntstatus_to_werror(result);
+       }
 
        if (W_ERROR_IS_OK(werr)) {
                d_printf("DsGetDcName gave: %s\n",
@@ -219,7 +234,7 @@ static WERROR cmd_netlogon_dsr_getdcname(struct rpc_pipe_client *cli,
        }
 
        printf("rpccli_netlogon_dsr_getdcname returned %s\n",
-              dos_errstr(werr));
+              win_errstr(werr));
 
        return werr;
 }
@@ -231,11 +246,12 @@ static WERROR cmd_netlogon_dsr_getdcnameex(struct rpc_pipe_client *cli,
        WERROR result;
        NTSTATUS status;
        uint32_t flags = DS_RETURN_DNS_NAME;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        const char *domain_name;
        const char *site_name = NULL;
        struct GUID domain_guid = GUID_zero();
        struct netr_DsRGetDCNameInfo *info = NULL;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 2) {
                fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
@@ -261,7 +277,7 @@ static WERROR cmd_netlogon_dsr_getdcnameex(struct rpc_pipe_client *cli,
 
        debug_dsdcinfo_flags(1,flags);
 
-       status = rpccli_netr_DsRGetDCNameEx(cli, mem_ctx,
+       status = dcerpc_netr_DsRGetDCNameEx(b, mem_ctx,
                                            server_name,
                                            domain_name,
                                            &domain_guid,
@@ -290,13 +306,14 @@ static WERROR cmd_netlogon_dsr_getdcnameex2(struct rpc_pipe_client *cli,
        WERROR result;
        NTSTATUS status;
        uint32_t flags = DS_RETURN_DNS_NAME;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        const char *domain_name = NULL;
        const char *client_account = NULL;
        uint32_t mask = 0;
        const char *site_name = NULL;
        struct GUID domain_guid = GUID_zero();
        struct netr_DsRGetDCNameInfo *info = NULL;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 2) {
                fprintf(stderr, "Usage: %s [client_account] [acb_mask] "
@@ -333,7 +350,7 @@ static WERROR cmd_netlogon_dsr_getdcnameex2(struct rpc_pipe_client *cli,
 
        debug_dsdcinfo_flags(1,flags);
 
-       status = rpccli_netr_DsRGetDCNameEx2(cli, mem_ctx,
+       status = dcerpc_netr_DsRGetDCNameEx2(b, mem_ctx,
                                             server_name,
                                             client_account,
                                             mask,
@@ -365,13 +382,14 @@ static WERROR cmd_netlogon_dsr_getsitename(struct rpc_pipe_client *cli,
        WERROR werr;
        NTSTATUS status;
        const char *sitename = NULL;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc != 2) {
                fprintf(stderr, "Usage: %s computername\n", argv[0]);
                return WERR_OK;
        }
 
-       status = rpccli_netr_DsRGetSiteName(cli, mem_ctx,
+       status = dcerpc_netr_DsRGetSiteName(b, mem_ctx,
                                            argv[1],
                                            &sitename,
                                            &werr);
@@ -396,10 +414,11 @@ static WERROR cmd_netlogon_logon_ctrl(struct rpc_pipe_client *cli,
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        WERROR werr;
-       const char *logon_server = cli->cli->desthost;
+       const char *logon_server = cli->desthost;
        enum netr_LogonControlCode function_code = 1;
        uint32_t level = 1;
        union netr_CONTROL_QUERY_INFORMATION info;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc > 4) {
                fprintf(stderr, "Usage: %s <logon_server> <function_code> "
@@ -419,7 +438,7 @@ static WERROR cmd_netlogon_logon_ctrl(struct rpc_pipe_client *cli,
                level = atoi(argv[3]);
        }
 
-       status = rpccli_netr_LogonControl(cli, mem_ctx,
+       status = dcerpc_netr_LogonControl(b, mem_ctx,
                                          logon_server,
                                          function_code,
                                          level,
@@ -460,7 +479,7 @@ static void display_sam_sync(struct netr_DELTA_ENUM_ARRAY *r)
                        break;
                case NETR_DELTA_DELETE_GROUP:
                        printf("Delete Group: %d\n",
-                               u.delete_account.unknown);
+                               id.rid);
                        break;
                case NETR_DELTA_RENAME_GROUP:
                        printf("Rename Group: %s -> %s\n",
@@ -493,7 +512,7 @@ static void display_sam_sync(struct netr_DELTA_ENUM_ARRAY *r)
                        break;
                case NETR_DELTA_DELETE_ALIAS:
                        printf("Delete Alias: %d\n",
-                               r->delta_enum[i].delta_id_union.rid);
+                               id.rid);
                        break;
                case NETR_DELTA_RENAME_ALIAS:
                        printf("Rename alias: %s -> %s\n",
@@ -509,29 +528,32 @@ static void display_sam_sync(struct netr_DELTA_ENUM_ARRAY *r)
                        }
                        break;
                case NETR_DELTA_POLICY:
-                       printf("Policy\n");
+                       printf("Policy: %s\n",
+                               sid_string_dbg(id.sid));
                        break;
                case NETR_DELTA_TRUSTED_DOMAIN:
                        printf("Trusted Domain: %s\n",
                                u.trusted_domain->domain_name.string);
                        break;
                case NETR_DELTA_DELETE_TRUST:
-                       printf("Delete Trust: %d\n",
-                               u.delete_trust.unknown);
+                       printf("Delete Trust: %s\n",
+                               sid_string_dbg(id.sid));
                        break;
                case NETR_DELTA_ACCOUNT:
-                       printf("Account\n");
+                       printf("Account: %s\n",
+                               sid_string_dbg(id.sid));
                        break;
                case NETR_DELTA_DELETE_ACCOUNT:
-                       printf("Delete Account: %d\n",
-                               u.delete_account.unknown);
+                       printf("Delete Account: %s\n",
+                               sid_string_dbg(id.sid));
                        break;
                case NETR_DELTA_SECRET:
-                       printf("Secret\n");
+                       printf("Secret: %s\n",
+                               id.name);
                        break;
                case NETR_DELTA_DELETE_SECRET:
-                       printf("Delete Secret: %d\n",
-                               u.delete_secret.unknown);
+                       printf("Delete Secret: %s\n",
+                               id.name);
                        break;
                case NETR_DELTA_DELETE_GROUP2:
                        printf("Delete Group2: %s\n",
@@ -560,13 +582,15 @@ static NTSTATUS cmd_netlogon_sam_sync(struct rpc_pipe_client *cli,
                                       const char **argv)
 {
        NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
-       const char *logon_server = cli->cli->desthost;
+       NTSTATUS status;
+       const char *logon_server = cli->desthost;
        const char *computername = global_myname();
        struct netr_Authenticator credential;
        struct netr_Authenticator return_authenticator;
        enum netr_SamDatabaseID database_id = SAM_DATABASE_DOMAIN;
        uint16_t restart_state = 0;
        uint32_t sync_context = 0;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
         if (argc > 2) {
                 fprintf(stderr, "Usage: %s [database_id]\n", argv[0]);
@@ -582,9 +606,9 @@ static NTSTATUS cmd_netlogon_sam_sync(struct rpc_pipe_client *cli,
        do {
                struct netr_DELTA_ENUM_ARRAY *delta_enum_array = NULL;
 
-               netlogon_creds_client_step(cli->dc, &credential);
+               netlogon_creds_client_authenticator(cli->dc, &credential);
 
-               result = rpccli_netr_DatabaseSync2(cli, mem_ctx,
+               status = dcerpc_netr_DatabaseSync2(b, mem_ctx,
                                                   logon_server,
                                                   computername,
                                                   &credential,
@@ -593,7 +617,11 @@ static NTSTATUS cmd_netlogon_sam_sync(struct rpc_pipe_client *cli,
                                                   restart_state,
                                                   &sync_context,
                                                   &delta_enum_array,
-                                                  0xffff);
+                                                  0xffff,
+                                                  &result);
+               if (!NT_STATUS_IS_OK(status)) {
+                       return status;
+               }
 
                /* Check returned credentials. */
                if (!netlogon_creds_client_check(cli->dc,
@@ -624,13 +652,15 @@ static NTSTATUS cmd_netlogon_sam_deltas(struct rpc_pipe_client *cli,
                                        const char **argv)
 {
        NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
+       NTSTATUS status;
        uint32_t tmp;
-       const char *logon_server = cli->cli->desthost;
+       const char *logon_server = cli->desthost;
        const char *computername = global_myname();
        struct netr_Authenticator credential;
        struct netr_Authenticator return_authenticator;
        enum netr_SamDatabaseID database_id = SAM_DATABASE_DOMAIN;
        uint64_t sequence_num;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc != 3) {
                fprintf(stderr, "Usage: %s database_id seqnum\n", argv[0]);
@@ -645,9 +675,9 @@ static NTSTATUS cmd_netlogon_sam_deltas(struct rpc_pipe_client *cli,
        do {
                struct netr_DELTA_ENUM_ARRAY *delta_enum_array = NULL;
 
-               netlogon_creds_client_step(cli->dc, &credential);
+               netlogon_creds_client_authenticator(cli->dc, &credential);
 
-               result = rpccli_netr_DatabaseDeltas(cli, mem_ctx,
+               status = dcerpc_netr_DatabaseDeltas(b, mem_ctx,
                                                    logon_server,
                                                    computername,
                                                    &credential,
@@ -655,7 +685,11 @@ static NTSTATUS cmd_netlogon_sam_deltas(struct rpc_pipe_client *cli,
                                                    database_id,
                                                    &sequence_num,
                                                    &delta_enum_array,
-                                                   0xffff);
+                                                   0xffff,
+                                                   &result);
+               if (!NT_STATUS_IS_OK(status)) {
+                       return status;
+               }
 
                /* Check returned credentials. */
                if (!netlogon_creds_client_check(cli->dc,
@@ -686,9 +720,9 @@ static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli,
                                       const char **argv)
 {
        NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
-       int logon_type = NET_LOGON_TYPE;
+       int logon_type = NetlogonNetworkInformation;
        const char *username, *password;
-       int auth_level = 2;
+       uint16_t validation_level = 3;
        uint32 logon_param = 0;
        const char *workstation = NULL;
 
@@ -710,14 +744,14 @@ static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli,
                sscanf(argv[4], "%i", &logon_type);
 
        if (argc >= 6)
-               sscanf(argv[5], "%i", &auth_level);
+               validation_level = atoi(argv[5]);
 
        if (argc == 7)
                sscanf(argv[6], "%x", &logon_param);
 
        /* Perform the sam logon */
 
-       result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, logon_type);
+       result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, validation_level, logon_type);
 
        if (!NT_STATUS_IS_OK(result))
                goto done;
@@ -759,9 +793,10 @@ static WERROR cmd_netlogon_gettrustrid(struct rpc_pipe_client *cli,
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        WERROR werr = WERR_GENERAL_FAILURE;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        const char *domain_name = lp_workgroup();
        uint32_t rid = 0;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 1 || argc > 3) {
                fprintf(stderr, "Usage: %s <server_name> <domain_name>\n",
@@ -777,12 +812,13 @@ static WERROR cmd_netlogon_gettrustrid(struct rpc_pipe_client *cli,
                domain_name = argv[2];
        }
 
-       status = rpccli_netr_LogonGetTrustRid(cli, mem_ctx,
+       status = dcerpc_netr_LogonGetTrustRid(b, mem_ctx,
                                              server_name,
                                              domain_name,
                                              &rid,
                                              &werr);
        if (!NT_STATUS_IS_OK(status)) {
+               werr = ntstatus_to_werror(status);
                goto done;
        }
 
@@ -799,9 +835,10 @@ static WERROR cmd_netlogon_dsr_enumtrustdom(struct rpc_pipe_client *cli,
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        WERROR werr = WERR_GENERAL_FAILURE;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        uint32_t trust_flags = NETR_TRUST_FLAG_IN_FOREST;
        struct netr_DomainTrustList trusts;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 1 || argc > 3) {
                fprintf(stderr, "Usage: %s <server_name> <trust_flags>\n",
@@ -817,12 +854,13 @@ static WERROR cmd_netlogon_dsr_enumtrustdom(struct rpc_pipe_client *cli,
                sscanf(argv[2], "%x", &trust_flags);
        }
 
-       status = rpccli_netr_DsrEnumerateDomainTrusts(cli, mem_ctx,
+       status = dcerpc_netr_DsrEnumerateDomainTrusts(b, mem_ctx,
                                                      server_name,
                                                      trust_flags,
                                                      &trusts,
                                                      &werr);
        if (!NT_STATUS_IS_OK(status)) {
+               werr = ntstatus_to_werror(status);
                goto done;
        }
 
@@ -847,9 +885,10 @@ static WERROR cmd_netlogon_deregisterdnsrecords(struct rpc_pipe_client *cli,
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        WERROR werr = WERR_GENERAL_FAILURE;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        const char *domain = lp_workgroup();
        const char *dns_host = NULL;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 1 || argc > 4) {
                fprintf(stderr, "Usage: %s <server_name> <domain_name> "
@@ -869,7 +908,7 @@ static WERROR cmd_netlogon_deregisterdnsrecords(struct rpc_pipe_client *cli,
                dns_host = argv[3];
        }
 
-       status = rpccli_netr_DsrDeregisterDNSHostRecords(cli, mem_ctx,
+       status = dcerpc_netr_DsrDeregisterDNSHostRecords(b, mem_ctx,
                                                         server_name,
                                                         domain,
                                                         NULL,
@@ -877,6 +916,7 @@ static WERROR cmd_netlogon_deregisterdnsrecords(struct rpc_pipe_client *cli,
                                                         dns_host,
                                                         &werr);
        if (!NT_STATUS_IS_OK(status)) {
+               werr = ntstatus_to_werror(status);
                goto done;
        }
 
@@ -893,10 +933,11 @@ static WERROR cmd_netlogon_dsr_getforesttrustinfo(struct rpc_pipe_client *cli,
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        WERROR werr = WERR_GENERAL_FAILURE;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        const char *trusted_domain_name = NULL;
        struct lsa_ForestTrustInformation *info = NULL;
        uint32_t flags = 0;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 1 || argc > 4) {
                fprintf(stderr, "Usage: %s <server_name> <trusted_domain_name> "
@@ -916,13 +957,14 @@ static WERROR cmd_netlogon_dsr_getforesttrustinfo(struct rpc_pipe_client *cli,
                sscanf(argv[3], "%x", &flags);
        }
 
-       status = rpccli_netr_DsRGetForestTrustInformation(cli, mem_ctx,
+       status = dcerpc_netr_DsRGetForestTrustInformation(b, mem_ctx,
                                                         server_name,
                                                         trusted_domain_name,
                                                         flags,
                                                         &info,
                                                         &werr);
        if (!NT_STATUS_IS_OK(status)) {
+               werr = ntstatus_to_werror(status);
                goto done;
        }
 
@@ -933,39 +975,43 @@ static WERROR cmd_netlogon_dsr_getforesttrustinfo(struct rpc_pipe_client *cli,
        return werr;
 }
 
-static WERROR cmd_netlogon_enumtrusteddomains(struct rpc_pipe_client *cli,
-                                             TALLOC_CTX *mem_ctx, int argc,
-                                             const char **argv)
+static NTSTATUS cmd_netlogon_enumtrusteddomains(struct rpc_pipe_client *cli,
+                                               TALLOC_CTX *mem_ctx, int argc,
+                                               const char **argv)
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
-       WERROR werr = WERR_GENERAL_FAILURE;
-       const char *server_name = cli->cli->desthost;
+       NTSTATUS result;
+       const char *server_name = cli->desthost;
        struct netr_Blob blob;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
 
        if (argc < 1 || argc > 3) {
                fprintf(stderr, "Usage: %s <server_name>\n", argv[0]);
-               return WERR_OK;
+               return NT_STATUS_OK;
        }
 
        if (argc >= 2) {
                server_name = argv[1];
        }
 
-       status = rpccli_netr_NetrEnumerateTrustedDomains(cli, mem_ctx,
+       status = dcerpc_netr_NetrEnumerateTrustedDomains(b, mem_ctx,
                                                         server_name,
                                                         &blob,
-                                                        &werr);
+                                                        &result);
        if (!NT_STATUS_IS_OK(status)) {
                goto done;
        }
 
-       if (W_ERROR_IS_OK(werr)) {
-               printf("success\n");
-               dump_data(1, blob.data, blob.length);
+       if (!NT_STATUS_IS_OK(result)) {
+               status = result;
+               goto done;
        }
+
+       printf("success\n");
+       dump_data(1, blob.data, blob.length);
  done:
-       return werr;
+       return status;
 }
 
 static WERROR cmd_netlogon_enumtrusteddomainsex(struct rpc_pipe_client *cli,
@@ -974,8 +1020,9 @@ static WERROR cmd_netlogon_enumtrusteddomainsex(struct rpc_pipe_client *cli,
 {
        NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
        WERROR werr = WERR_GENERAL_FAILURE;
-       const char *server_name = cli->cli->desthost;
+       const char *server_name = cli->desthost;
        struct netr_DomainTrustList list;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
 
        if (argc < 1 || argc > 3) {
                fprintf(stderr, "Usage: %s <server_name>\n", argv[0]);
@@ -986,11 +1033,12 @@ static WERROR cmd_netlogon_enumtrusteddomainsex(struct rpc_pipe_client *cli,
                server_name = argv[1];
        }
 
-       status = rpccli_netr_NetrEnumerateTrustedDomainsEx(cli, mem_ctx,
+       status = dcerpc_netr_NetrEnumerateTrustedDomainsEx(b, mem_ctx,
                                                           server_name,
                                                           &list,
                                                           &werr);
        if (!NT_STATUS_IS_OK(status)) {
+               werr = ntstatus_to_werror(status);
                goto done;
        }
 
@@ -1001,6 +1049,165 @@ static WERROR cmd_netlogon_enumtrusteddomainsex(struct rpc_pipe_client *cli,
        return werr;
 }
 
+static WERROR cmd_netlogon_getdcsitecoverage(struct rpc_pipe_client *cli,
+                                            TALLOC_CTX *mem_ctx, int argc,
+                                            const char **argv)
+{
+       NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
+       WERROR werr = WERR_GENERAL_FAILURE;
+       const char *server_name = cli->desthost;
+       struct DcSitesCtr *ctr = NULL;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
+
+       if (argc < 1 || argc > 3) {
+               fprintf(stderr, "Usage: %s <server_name>\n", argv[0]);
+               return WERR_OK;
+       }
+
+       if (argc >= 2) {
+               server_name = argv[1];
+       }
+
+       status = dcerpc_netr_DsrGetDcSiteCoverageW(b, mem_ctx,
+                                                  server_name,
+                                                  &ctr,
+                                                  &werr);
+       if (!NT_STATUS_IS_OK(status)) {
+               werr = ntstatus_to_werror(status);
+               goto done;
+       }
+
+       if (W_ERROR_IS_OK(werr) && ctr->num_sites) {
+               int i;
+               printf("sites covered by this DC: %d\n", ctr->num_sites);
+               for (i=0; i<ctr->num_sites; i++) {
+                       printf("%s\n", ctr->sites[i].string);
+               }
+       }
+ done:
+       return werr;
+}
+
+static NTSTATUS cmd_netlogon_database_redo(struct rpc_pipe_client *cli,
+                                          TALLOC_CTX *mem_ctx, int argc,
+                                          const char **argv)
+{
+       NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
+       NTSTATUS result;
+       const char *server_name = cli->desthost;
+       uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS;
+       struct netr_Authenticator clnt_creds, srv_cred;
+       struct netr_DELTA_ENUM_ARRAY *delta_enum_array = NULL;
+       unsigned char trust_passwd_hash[16];
+       enum netr_SchannelType sec_channel_type = 0;
+       struct netr_ChangeLogEntry e;
+       uint32_t rid = 500;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
+
+       if (argc > 2) {
+               fprintf(stderr, "Usage: %s <user rid>\n", argv[0]);
+               return NT_STATUS_OK;
+       }
+
+       if (argc == 2) {
+               sscanf(argv[1], "%d", &rid);
+       }
+
+       if (!secrets_fetch_trust_account_password(lp_workgroup(),
+                                                 trust_passwd_hash,
+                                                 NULL, &sec_channel_type)) {
+               return NT_STATUS_UNSUCCESSFUL;
+       }
+
+       status = rpccli_netlogon_setup_creds(cli,
+                                            server_name, /* server name */
+                                            lp_workgroup(), /* domain */
+                                            global_myname(), /* client name */
+                                            global_myname(), /* machine account name */
+                                            trust_passwd_hash,
+                                            sec_channel_type,
+                                            &neg_flags);
+
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
+       }
+
+       netlogon_creds_client_authenticator(cli->dc, &clnt_creds);
+
+       ZERO_STRUCT(e);
+
+       e.object_rid            = rid;
+       e.db_index              = SAM_DATABASE_DOMAIN;
+       e.delta_type            = NETR_DELTA_USER;
+
+       status = dcerpc_netr_DatabaseRedo(b, mem_ctx,
+                                         server_name,
+                                         global_myname(),
+                                         &clnt_creds,
+                                         &srv_cred,
+                                         e,
+                                         0, /* is calculated automatically */
+                                         &delta_enum_array,
+                                         &result);
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
+       }
+
+       if (!netlogon_creds_client_check(cli->dc, &srv_cred.cred)) {
+               DEBUG(0,("credentials chain check failed\n"));
+               return NT_STATUS_ACCESS_DENIED;
+       }
+
+       return result;
+}
+
+static NTSTATUS cmd_netlogon_capabilities(struct rpc_pipe_client *cli,
+                                         TALLOC_CTX *mem_ctx, int argc,
+                                         const char **argv)
+{
+       NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
+       NTSTATUS result;
+       struct netr_Authenticator credential;
+       struct netr_Authenticator return_authenticator;
+       union netr_Capabilities capabilities;
+       uint32_t level = 1;
+       struct dcerpc_binding_handle *b = cli->binding_handle;
+
+       if (argc > 2) {
+               fprintf(stderr, "Usage: %s <level>\n", argv[0]);
+               return NT_STATUS_OK;
+       }
+
+       if (argc == 2) {
+               level = atoi(argv[1]);
+       }
+
+       ZERO_STRUCT(return_authenticator);
+
+       netlogon_creds_client_authenticator(cli->dc, &credential);
+
+       status = dcerpc_netr_LogonGetCapabilities(b, mem_ctx,
+                                                 cli->desthost,
+                                                 global_myname(),
+                                                 &credential,
+                                                 &return_authenticator,
+                                                 level,
+                                                 &capabilities,
+                                                 &result);
+       if (!NT_STATUS_IS_OK(status)) {
+               return status;
+       }
+
+       if (!netlogon_creds_client_check(cli->dc,
+                                        &return_authenticator.cred)) {
+               DEBUG(0,("credentials chain check failed\n"));
+               return NT_STATUS_ACCESS_DENIED;
+       }
+
+       printf("capabilities: 0x%08x\n", capabilities.server_capabilities);
+
+       return result;
+}
 
 /* List of commands exported by this module */
 
@@ -1008,25 +1215,28 @@ struct cmd_set netlogon_commands[] = {
 
        { "NETLOGON" },
 
-       { "logonctrl2", RPC_RTYPE_WERROR, NULL, cmd_netlogon_logon_ctrl2, PI_NETLOGON, NULL, "Logon Control 2",     "" },
-       { "getanydcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getanydcname, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
-       { "getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getdcname, PI_NETLOGON, NULL, "Get trusted PDC name",     "" },
-       { "dsr_getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcname, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
-       { "dsr_getdcnameex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
-       { "dsr_getdcnameex2", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex2, PI_NETLOGON, NULL, "Get trusted DC name",     "" },
-       { "dsr_getsitename", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getsitename, PI_NETLOGON, NULL, "Get sitename",     "" },
-       { "dsr_getforesttrustinfo", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getforesttrustinfo, PI_NETLOGON, NULL, "Get Forest Trust Info",     "" },
-       { "logonctrl",  RPC_RTYPE_WERROR, NULL, cmd_netlogon_logon_ctrl, PI_NETLOGON, NULL, "Logon Control",       "" },
-       { "samsync",    RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_sync,    NULL, PI_NETLOGON, NULL, "Sam Synchronisation", "" },
-       { "samdeltas",  RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_deltas,  NULL, PI_NETLOGON, NULL, "Query Sam Deltas",    "" },
-       { "samlogon",   RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_logon,   NULL, PI_NETLOGON, NULL, "Sam Logon",           "" },
-       { "change_trust_pw",   RPC_RTYPE_NTSTATUS, cmd_netlogon_change_trust_pw,   NULL, PI_NETLOGON, NULL, "Change Trust Account Password",           "" },
-       { "gettrustrid", RPC_RTYPE_WERROR, NULL, cmd_netlogon_gettrustrid, PI_NETLOGON, NULL, "Get trust rid",     "" },
-       { "dsr_enumtrustdom", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_enumtrustdom, PI_NETLOGON, NULL, "Enumerate trusted domains",     "" },
-       { "dsenumdomtrusts",  RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_enumtrustdom, PI_NETLOGON, NULL, "Enumerate all trusted domains in an AD forest",     "" },
-       { "deregisterdnsrecords", RPC_RTYPE_WERROR, NULL, cmd_netlogon_deregisterdnsrecords, PI_NETLOGON, NULL, "Deregister DNS records",     "" },
-       { "netrenumtrusteddomains", RPC_RTYPE_WERROR, NULL, cmd_netlogon_enumtrusteddomains, PI_NETLOGON, NULL, "Enumerate trusted domains",     "" },
-       { "netrenumtrusteddomainsex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_enumtrusteddomainsex, PI_NETLOGON, NULL, "Enumerate trusted domains",     "" },
+       { "logonctrl2", RPC_RTYPE_WERROR, NULL, cmd_netlogon_logon_ctrl2, &ndr_table_netlogon.syntax_id, NULL, "Logon Control 2",     "" },
+       { "getanydcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getanydcname, &ndr_table_netlogon.syntax_id, NULL, "Get trusted DC name",     "" },
+       { "getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getdcname, &ndr_table_netlogon.syntax_id, NULL, "Get trusted PDC name",     "" },
+       { "dsr_getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcname, &ndr_table_netlogon.syntax_id, NULL, "Get trusted DC name",     "" },
+       { "dsr_getdcnameex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex, &ndr_table_netlogon.syntax_id, NULL, "Get trusted DC name",     "" },
+       { "dsr_getdcnameex2", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex2, &ndr_table_netlogon.syntax_id, NULL, "Get trusted DC name",     "" },
+       { "dsr_getsitename", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getsitename, &ndr_table_netlogon.syntax_id, NULL, "Get sitename",     "" },
+       { "dsr_getforesttrustinfo", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getforesttrustinfo, &ndr_table_netlogon.syntax_id, NULL, "Get Forest Trust Info",     "" },
+       { "logonctrl",  RPC_RTYPE_WERROR, NULL, cmd_netlogon_logon_ctrl, &ndr_table_netlogon.syntax_id, NULL, "Logon Control",       "" },
+       { "samsync",    RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_sync,    NULL, &ndr_table_netlogon.syntax_id, NULL, "Sam Synchronisation", "" },
+       { "samdeltas",  RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_deltas,  NULL, &ndr_table_netlogon.syntax_id, NULL, "Query Sam Deltas",    "" },
+       { "samlogon",   RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_logon,   NULL, &ndr_table_netlogon.syntax_id, NULL, "Sam Logon",           "" },
+       { "change_trust_pw",   RPC_RTYPE_NTSTATUS, cmd_netlogon_change_trust_pw,   NULL, &ndr_table_netlogon.syntax_id, NULL, "Change Trust Account Password",           "" },
+       { "gettrustrid", RPC_RTYPE_WERROR, NULL, cmd_netlogon_gettrustrid, &ndr_table_netlogon.syntax_id, NULL, "Get trust rid",     "" },
+       { "dsr_enumtrustdom", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_enumtrustdom, &ndr_table_netlogon.syntax_id, NULL, "Enumerate trusted domains",     "" },
+       { "dsenumdomtrusts",  RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_enumtrustdom, &ndr_table_netlogon.syntax_id, NULL, "Enumerate all trusted domains in an AD forest",     "" },
+       { "deregisterdnsrecords", RPC_RTYPE_WERROR, NULL, cmd_netlogon_deregisterdnsrecords, &ndr_table_netlogon.syntax_id, NULL, "Deregister DNS records",     "" },
+       { "netrenumtrusteddomains", RPC_RTYPE_NTSTATUS, cmd_netlogon_enumtrusteddomains, NULL, &ndr_table_netlogon.syntax_id, NULL, "Enumerate trusted domains",     "" },
+       { "netrenumtrusteddomainsex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_enumtrusteddomainsex, &ndr_table_netlogon.syntax_id, NULL, "Enumerate trusted domains",     "" },
+       { "getdcsitecoverage", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getdcsitecoverage, &ndr_table_netlogon.syntax_id, NULL, "Get the Site-Coverage from a DC",     "" },
+       { "database_redo", RPC_RTYPE_NTSTATUS, cmd_netlogon_database_redo, NULL, &ndr_table_netlogon.syntax_id, NULL, "Replicate single object from a DC",     "" },
+       { "capabilities", RPC_RTYPE_NTSTATUS, cmd_netlogon_capabilities, NULL, &ndr_table_netlogon.syntax_id, NULL, "Return Capabilities",     "" },
 
        { NULL }
 };