1d352033479eee940535e7907f5d7a3afa7edbcd
[bbaumbach/samba-autobuild/.git] / source3 / rpcclient / rpcclient.c
1 /* 
2    Unix SMB/CIFS implementation.
3    RPC pipe client
4
5    Copyright (C) Tim Potter 2000-2001
6    Copyright (C) Martin Pool 2003
7
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License as published by
10    the Free Software Foundation; either version 3 of the License, or
11    (at your option) any later version.
12
13    This program is distributed in the hope that it will be useful,
14    but WITHOUT ANY WARRANTY; without even the implied warranty of
15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16    GNU General Public License for more details.
17
18    You should have received a copy of the GNU General Public License
19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #include "includes.h"
23 #include "popt_common.h"
24 #include "rpcclient.h"
25 #include "../libcli/auth/libcli_auth.h"
26 #include "../librpc/gen_ndr/ndr_lsa_c.h"
27 #include "rpc_client/cli_lsarpc.h"
28 #include "../librpc/gen_ndr/ndr_netlogon.h"
29 #include "rpc_client/cli_netlogon.h"
30 #include "../libcli/smbreadline/smbreadline.h"
31 #include "../libcli/security/security.h"
32 #include "passdb.h"
33 #include "libsmb/libsmb.h"
34 #include "auth/gensec/gensec.h"
35 #include "../libcli/smb/smbXcli_base.h"
36 #include "messages.h"
37
38 enum pipe_auth_type_spnego {
39         PIPE_AUTH_TYPE_SPNEGO_NONE = 0,
40         PIPE_AUTH_TYPE_SPNEGO_NTLMSSP,
41         PIPE_AUTH_TYPE_SPNEGO_KRB5
42 };
43
44 struct dom_sid domain_sid;
45
46 static enum dcerpc_AuthType pipe_default_auth_type = DCERPC_AUTH_TYPE_NONE;
47 static enum pipe_auth_type_spnego pipe_default_auth_spnego_type = 0;
48 static enum dcerpc_AuthLevel pipe_default_auth_level = DCERPC_AUTH_LEVEL_NONE;
49 static unsigned int timeout = 0;
50 static enum dcerpc_transport_t default_transport = NCACN_NP;
51
52 struct messaging_context *rpcclient_msg_ctx;
53 struct cli_state *rpcclient_cli_state;
54 struct netlogon_creds_cli_context *rpcclient_netlogon_creds;
55 static const char *rpcclient_netlogon_domain;
56
57 /* List to hold groups of commands.
58  *
59  * Commands are defined in a list of arrays: arrays are easy to
60  * statically declare, and lists are easier to dynamically extend.
61  */
62
63 static struct cmd_list {
64         struct cmd_list *prev, *next;
65         struct cmd_set *cmd_set;
66 } *cmd_list;
67
68 /****************************************************************************
69 handle completion of commands for readline
70 ****************************************************************************/
71 static char **completion_fn(const char *text, int start, int end)
72 {
73 #define MAX_COMPLETIONS 1000
74         char **matches;
75         int i, count=0;
76         struct cmd_list *commands = cmd_list;
77
78 #if 0   /* JERRY */
79         /* FIXME!!!  -- what to do when completing argument? */
80         /* for words not at the start of the line fallback 
81            to filename completion */
82         if (start) 
83                 return NULL;
84 #endif
85
86         /* make sure we have a list of valid commands */
87         if (!commands) {
88                 return NULL;
89         }
90
91         matches = SMB_MALLOC_ARRAY(char *, MAX_COMPLETIONS);
92         if (!matches) {
93                 return NULL;
94         }
95
96         matches[count++] = SMB_STRDUP(text);
97         if (!matches[0]) {
98                 SAFE_FREE(matches);
99                 return NULL;
100         }
101
102         while (commands && count < MAX_COMPLETIONS-1) {
103                 if (!commands->cmd_set) {
104                         break;
105                 }
106
107                 for (i=0; commands->cmd_set[i].name; i++) {
108                         if ((strncmp(text, commands->cmd_set[i].name, strlen(text)) == 0) &&
109                                 (( commands->cmd_set[i].returntype == RPC_RTYPE_NTSTATUS &&
110                         commands->cmd_set[i].ntfn ) || 
111                       ( commands->cmd_set[i].returntype == RPC_RTYPE_WERROR &&
112                         commands->cmd_set[i].wfn))) {
113                                 matches[count] = SMB_STRDUP(commands->cmd_set[i].name);
114                                 if (!matches[count]) {
115                                         for (i = 0; i < count; i++) {
116                                                 SAFE_FREE(matches[count]);
117                                         }
118                                         SAFE_FREE(matches);
119                                         return NULL;
120                                 }
121                                 count++;
122                         }
123                 }
124                 commands = commands->next;
125         }
126
127         if (count == 2) {
128                 SAFE_FREE(matches[0]);
129                 matches[0] = SMB_STRDUP(matches[1]);
130         }
131         matches[count] = NULL;
132         return matches;
133 }
134
135 static char *next_command (char **cmdstr)
136 {
137         char *command;
138         char                    *p;
139
140         if (!cmdstr || !(*cmdstr))
141                 return NULL;
142
143         p = strchr_m(*cmdstr, ';');
144         if (p)
145                 *p = '\0';
146         command = SMB_STRDUP(*cmdstr);
147         if (p)
148                 *cmdstr = p + 1;
149         else
150                 *cmdstr = NULL;
151
152         return command;
153 }
154
155 /* Fetch the SID for this computer */
156
157 static void fetch_machine_sid(struct cli_state *cli)
158 {
159         struct policy_handle pol;
160         NTSTATUS result = NT_STATUS_OK, status;
161         static bool got_domain_sid;
162         TALLOC_CTX *mem_ctx;
163         struct rpc_pipe_client *lsapipe = NULL;
164         union lsa_PolicyInformation *info = NULL;
165         struct dcerpc_binding_handle *b;
166
167         if (got_domain_sid) return;
168
169         if (!(mem_ctx=talloc_init("fetch_machine_sid"))) {
170                 DEBUG(0,("fetch_machine_sid: talloc_init returned NULL!\n"));
171                 goto error;
172         }
173
174         result = cli_rpc_pipe_open_noauth(cli, &ndr_table_lsarpc,
175                                           &lsapipe);
176         if (!NT_STATUS_IS_OK(result)) {
177                 fprintf(stderr, "could not initialise lsa pipe. Error was %s\n", nt_errstr(result) );
178                 goto error;
179         }
180
181         b = lsapipe->binding_handle;
182
183         result = rpccli_lsa_open_policy(lsapipe, mem_ctx, True, 
184                                      SEC_FLAG_MAXIMUM_ALLOWED,
185                                      &pol);
186         if (!NT_STATUS_IS_OK(result)) {
187                 goto error;
188         }
189
190         status = dcerpc_lsa_QueryInfoPolicy(b, mem_ctx,
191                                             &pol,
192                                             LSA_POLICY_INFO_ACCOUNT_DOMAIN,
193                                             &info,
194                                             &result);
195         if (!NT_STATUS_IS_OK(status)) {
196                 result = status;
197                 goto error;
198         }
199         if (!NT_STATUS_IS_OK(result)) {
200                 goto error;
201         }
202
203         got_domain_sid = True;
204         sid_copy(&domain_sid, info->account_domain.sid);
205
206         dcerpc_lsa_Close(b, mem_ctx, &pol, &result);
207         TALLOC_FREE(lsapipe);
208         talloc_destroy(mem_ctx);
209
210         return;
211
212  error:
213
214         if (lsapipe) {
215                 TALLOC_FREE(lsapipe);
216         }
217
218         fprintf(stderr, "could not obtain sid from server\n");
219
220         if (!NT_STATUS_IS_OK(result)) {
221                 fprintf(stderr, "error: %s\n", nt_errstr(result));
222         }
223
224         exit(1);
225 }
226
227 /* List the available commands on a given pipe */
228
229 static NTSTATUS cmd_listcommands(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
230                                  int argc, const char **argv)
231 {
232         struct cmd_list *tmp;
233         struct cmd_set *tmp_set;
234         int i;
235
236         /* Usage */
237
238         if (argc != 2) {
239                 printf("Usage: %s <pipe>\n", argv[0]);
240                 return NT_STATUS_OK;
241         }
242
243         /* Help on one command */
244
245         for (tmp = cmd_list; tmp; tmp = tmp->next) 
246         {
247                 tmp_set = tmp->cmd_set;
248
249                 if (!strcasecmp_m(argv[1], tmp_set->name))
250                 {
251                         printf("Available commands on the %s pipe:\n\n", tmp_set->name);
252
253                         i = 0;
254                         tmp_set++;
255                         while(tmp_set->name) {
256                                 printf("%30s", tmp_set->name);
257                                 tmp_set++;
258                                 i++;
259                                 if (i%3 == 0)
260                                         printf("\n");
261                         }
262
263                         /* drop out of the loop */
264                         break;
265                 }
266         }
267         printf("\n\n");
268
269         return NT_STATUS_OK;
270 }
271
272 /* Display help on commands */
273
274 static NTSTATUS cmd_help(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
275                          int argc, const char **argv)
276 {
277         struct cmd_list *tmp;
278         struct cmd_set *tmp_set;
279
280         /* Usage */
281
282         if (argc > 2) {
283                 printf("Usage: %s [command]\n", argv[0]);
284                 return NT_STATUS_OK;
285         }
286
287         /* Help on one command */
288
289         if (argc == 2) {
290                 for (tmp = cmd_list; tmp; tmp = tmp->next) {
291
292                         tmp_set = tmp->cmd_set;
293
294                         while(tmp_set->name) {
295                                 if (strequal(argv[1], tmp_set->name)) {
296                                         if (tmp_set->usage &&
297                                             tmp_set->usage[0])
298                                                 printf("%s\n", tmp_set->usage);
299                                         else
300                                                 printf("No help for %s\n", tmp_set->name);
301
302                                         return NT_STATUS_OK;
303                                 }
304
305                                 tmp_set++;
306                         }
307                 }
308
309                 printf("No such command: %s\n", argv[1]);
310                 return NT_STATUS_OK;
311         }
312
313         /* List all commands */
314
315         for (tmp = cmd_list; tmp; tmp = tmp->next) {
316
317                 tmp_set = tmp->cmd_set;
318
319                 while(tmp_set->name) {
320
321                         printf("%15s\t\t%s\n", tmp_set->name,
322                                tmp_set->description ? tmp_set->description:
323                                "");
324
325                         tmp_set++;
326                 }
327         }
328
329         return NT_STATUS_OK;
330 }
331
332 /* Change the debug level */
333
334 static NTSTATUS cmd_debuglevel(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
335                                int argc, const char **argv)
336 {
337         if (argc > 2) {
338                 printf("Usage: %s [debuglevel]\n", argv[0]);
339                 return NT_STATUS_OK;
340         }
341
342         if (argc == 2) {
343                 lp_set_cmdline("log level", argv[1]);
344         }
345
346         printf("debuglevel is %d\n", DEBUGLEVEL);
347
348         return NT_STATUS_OK;
349 }
350
351 static NTSTATUS cmd_quit(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
352                          int argc, const char **argv)
353 {
354         exit(0);
355         return NT_STATUS_OK; /* NOTREACHED */
356 }
357
358 static NTSTATUS cmd_set_ss_level(void)
359 {
360         struct cmd_list *tmp;
361
362         /* Close any existing connections not at this level. */
363
364         for (tmp = cmd_list; tmp; tmp = tmp->next) {
365                 struct cmd_set *tmp_set;
366
367                 for (tmp_set = tmp->cmd_set; tmp_set->name; tmp_set++) {
368                         if (tmp_set->rpc_pipe == NULL) {
369                                 continue;
370                         }
371
372                         if ((tmp_set->rpc_pipe->auth->auth_type
373                              != pipe_default_auth_type)
374                             || (tmp_set->rpc_pipe->auth->auth_level
375                                 != pipe_default_auth_level)) {
376                                 TALLOC_FREE(tmp_set->rpc_pipe);
377                                 tmp_set->rpc_pipe = NULL;
378                         }
379                 }
380         }
381         return NT_STATUS_OK;
382 }
383
384 static NTSTATUS cmd_set_transport(void)
385 {
386         struct cmd_list *tmp;
387
388         /* Close any existing connections not at this level. */
389
390         for (tmp = cmd_list; tmp; tmp = tmp->next) {
391                 struct cmd_set *tmp_set;
392
393                 for (tmp_set = tmp->cmd_set; tmp_set->name; tmp_set++) {
394                         if (tmp_set->rpc_pipe == NULL) {
395                                 continue;
396                         }
397
398                         if (tmp_set->rpc_pipe->transport->transport != default_transport) {
399                                 TALLOC_FREE(tmp_set->rpc_pipe);
400                                 tmp_set->rpc_pipe = NULL;
401                         }
402                 }
403         }
404         return NT_STATUS_OK;
405 }
406
407 static NTSTATUS cmd_sign(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
408                          int argc, const char **argv)
409 {
410         const char *p = "[KRB5|KRB5_SPNEGO|NTLMSSP|NTLMSSP_SPNEGO|SCHANNEL]";
411         const char *type = "NTLMSSP";
412
413         pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
414         pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
415
416         if (argc > 2) {
417                 printf("Usage: %s %s\n", argv[0], p);
418                 return NT_STATUS_OK;
419         }
420
421         if (argc == 2) {
422                 type = argv[1];
423                 if (strequal(type, "KRB5")) {
424                         pipe_default_auth_type = DCERPC_AUTH_TYPE_KRB5;
425                 } else if (strequal(type, "KRB5_SPNEGO")) {
426                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
427                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
428                 } else if (strequal(type, "NTLMSSP")) {
429                         pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
430                 } else if (strequal(type, "NTLMSSP_SPNEGO")) {
431                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
432                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
433                 } else if (strequal(type, "SCHANNEL")) {
434                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
435                 } else {
436                         printf("unknown type %s\n", type);
437                         printf("Usage: %s %s\n", argv[0], p);
438                         return NT_STATUS_INVALID_LEVEL;
439                 }
440         }
441
442         d_printf("Setting %s - sign\n", type);
443
444         return cmd_set_ss_level();
445 }
446
447 static NTSTATUS cmd_seal(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
448                          int argc, const char **argv)
449 {
450         const char *p = "[KRB5|KRB5_SPNEGO|NTLMSSP|NTLMSSP_SPNEGO|SCHANNEL]";
451         const char *type = "NTLMSSP";
452
453         pipe_default_auth_level = DCERPC_AUTH_LEVEL_PRIVACY;
454         pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
455
456         if (argc > 2) {
457                 printf("Usage: %s %s\n", argv[0], p);
458                 return NT_STATUS_OK;
459         }
460
461         if (argc == 2) {
462                 type = argv[1];
463                 if (strequal(type, "KRB5")) {
464                         pipe_default_auth_type = DCERPC_AUTH_TYPE_KRB5;
465                 } else if (strequal(type, "KRB5_SPNEGO")) {
466                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
467                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
468                 } else if (strequal(type, "NTLMSSP")) {
469                         pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
470                 } else if (strequal(type, "NTLMSSP_SPNEGO")) {
471                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
472                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
473                 } else if (strequal(type, "SCHANNEL")) {
474                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
475                 } else {
476                         printf("unknown type %s\n", type);
477                         printf("Usage: %s %s\n", argv[0], p);
478                         return NT_STATUS_INVALID_LEVEL;
479                 }
480         }
481
482         d_printf("Setting %s - sign and seal\n", type);
483
484         return cmd_set_ss_level();
485 }
486
487 static NTSTATUS cmd_packet(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
488                            int argc, const char **argv)
489 {
490         const char *p = "[KRB5|KRB5_SPNEGO|NTLMSSP|NTLMSSP_SPNEGO|SCHANNEL]";
491         const char *type = "NTLMSSP";
492
493         pipe_default_auth_level = DCERPC_AUTH_LEVEL_PACKET;
494         pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
495
496         if (argc > 2) {
497                 printf("Usage: %s %s\n", argv[0], p);
498                 return NT_STATUS_OK;
499         }
500
501         if (argc == 2) {
502                 type = argv[1];
503                 if (strequal(type, "KRB5")) {
504                         pipe_default_auth_type = DCERPC_AUTH_TYPE_KRB5;
505                 } else if (strequal(type, "KRB5_SPNEGO")) {
506                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
507                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
508                 } else if (strequal(type, "NTLMSSP")) {
509                         pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
510                 } else if (strequal(type, "NTLMSSP_SPNEGO")) {
511                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
512                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
513                 } else if (strequal(type, "SCHANNEL")) {
514                         pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
515                 } else {
516                         printf("unknown type %s\n", type);
517                         printf("Usage: %s %s\n", argv[0], p);
518                         return NT_STATUS_INVALID_LEVEL;
519                 }
520         }
521
522         d_printf("Setting %s - packet\n", type);
523
524         return cmd_set_ss_level();
525 }
526
527
528 static NTSTATUS cmd_timeout(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
529                             int argc, const char **argv)
530 {
531         if (argc > 2) {
532                 printf("Usage: %s timeout\n", argv[0]);
533                 return NT_STATUS_OK;
534         }
535
536         if (argc == 2) {
537                 timeout = atoi(argv[1]);
538         }
539
540         printf("timeout is %d\n", timeout);
541
542         return NT_STATUS_OK;
543 }
544
545
546 static NTSTATUS cmd_none(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
547                          int argc, const char **argv)
548 {
549         pipe_default_auth_level = DCERPC_AUTH_LEVEL_NONE;
550         pipe_default_auth_type = DCERPC_AUTH_TYPE_NONE;
551         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NONE;
552
553         return cmd_set_ss_level();
554 }
555
556 static NTSTATUS cmd_schannel(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
557                              int argc, const char **argv)
558 {
559         d_printf("Setting schannel - sign and seal\n");
560         pipe_default_auth_level = DCERPC_AUTH_LEVEL_PRIVACY;
561         pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
562
563         return cmd_set_ss_level();
564 }
565
566 static NTSTATUS cmd_schannel_sign(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
567                              int argc, const char **argv)
568 {
569         d_printf("Setting schannel - sign only\n");
570         pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
571         pipe_default_auth_type = DCERPC_AUTH_TYPE_SCHANNEL;
572
573         return cmd_set_ss_level();
574 }
575
576 static NTSTATUS cmd_choose_transport(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ctx,
577                                      int argc, const char **argv)
578 {
579         NTSTATUS status;
580
581         if (argc != 2) {
582                 printf("Usage: %s [NCACN_NP|NCACN_IP_TCP]\n", argv[0]);
583                 return NT_STATUS_OK;
584         }
585
586         if (strequal(argv[1], "NCACN_NP")) {
587                 default_transport = NCACN_NP;
588         } else if (strequal(argv[1], "NCACN_IP_TCP")) {
589                 default_transport = NCACN_IP_TCP;
590         } else {
591                 printf("transport type: %s unknown or not supported\n", argv[1]);
592                 return NT_STATUS_NOT_SUPPORTED;
593         }
594
595         status = cmd_set_transport();
596         if (!NT_STATUS_IS_OK(status)) {
597                 return status;
598         }
599
600         printf("default transport is now: %s\n", argv[1]);
601
602         return NT_STATUS_OK;
603 }
604
605 /* Built in rpcclient commands */
606
607 static struct cmd_set rpcclient_commands[] = {
608
609         { "GENERAL OPTIONS" },
610
611         { "help", RPC_RTYPE_NTSTATUS, cmd_help, NULL,     NULL, NULL,   "Get help on commands", "[command]" },
612         { "?",  RPC_RTYPE_NTSTATUS, cmd_help, NULL,       NULL, NULL,   "Get help on commands", "[command]" },
613         { "debuglevel", RPC_RTYPE_NTSTATUS, cmd_debuglevel, NULL,   NULL,       NULL, "Set debug level", "level" },
614         { "debug", RPC_RTYPE_NTSTATUS, cmd_debuglevel, NULL,   NULL,    NULL, "Set debug level", "level" },
615         { "list",       RPC_RTYPE_NTSTATUS, cmd_listcommands, NULL, NULL,       NULL, "List available commands on <pipe>", "pipe" },
616         { "exit", RPC_RTYPE_NTSTATUS, cmd_quit, NULL,   NULL,   NULL,   "Exit program", "" },
617         { "quit", RPC_RTYPE_NTSTATUS, cmd_quit, NULL,     NULL, NULL, "Exit program", "" },
618         { "sign", RPC_RTYPE_NTSTATUS, cmd_sign, NULL,     NULL, NULL, "Force RPC pipe connections to be signed", "" },
619         { "seal", RPC_RTYPE_NTSTATUS, cmd_seal, NULL,     NULL, NULL, "Force RPC pipe connections to be sealed", "" },
620         { "packet", RPC_RTYPE_NTSTATUS, cmd_packet, NULL,         NULL, NULL, "Force RPC pipe connections with packet authentication level", "" },
621         { "schannel", RPC_RTYPE_NTSTATUS, cmd_schannel, NULL,     NULL, NULL,   "Force RPC pipe connections to be sealed with 'schannel'.  Assumes valid machine account to this domain controller.", "" },
622         { "schannelsign", RPC_RTYPE_NTSTATUS, cmd_schannel_sign, NULL,    NULL, NULL, "Force RPC pipe connections to be signed (not sealed) with 'schannel'.  Assumes valid machine account to this domain controller.", "" },
623         { "timeout", RPC_RTYPE_NTSTATUS, cmd_timeout, NULL,       NULL, NULL, "Set timeout (in milliseconds) for RPC operations", "" },
624         { "transport", RPC_RTYPE_NTSTATUS, cmd_choose_transport, NULL,    NULL, NULL, "Choose ncacn transport for RPC operations", "" },
625         { "none", RPC_RTYPE_NTSTATUS, cmd_none, NULL,     NULL, NULL, "Force RPC pipe connections to have no special properties", "" },
626
627         { NULL }
628 };
629
630 static struct cmd_set separator_command[] = {
631         { "---------------", MAX_RPC_RETURN_TYPE, NULL, NULL,   NULL, NULL, "----------------------" },
632         { NULL }
633 };
634
635
636 /* Various pipe commands */
637
638 extern struct cmd_set lsarpc_commands[];
639 extern struct cmd_set samr_commands[];
640 extern struct cmd_set spoolss_commands[];
641 extern struct cmd_set iremotewinspool_commands[];
642 extern struct cmd_set netlogon_commands[];
643 extern struct cmd_set srvsvc_commands[];
644 extern struct cmd_set dfs_commands[];
645 extern struct cmd_set ds_commands[];
646 extern struct cmd_set echo_commands[];
647 extern struct cmd_set epmapper_commands[];
648 extern struct cmd_set shutdown_commands[];
649 extern struct cmd_set test_commands[];
650 extern struct cmd_set wkssvc_commands[];
651 extern struct cmd_set ntsvcs_commands[];
652 extern struct cmd_set drsuapi_commands[];
653 extern struct cmd_set eventlog_commands[];
654 extern struct cmd_set winreg_commands[];
655 extern struct cmd_set fss_commands[];
656 extern struct cmd_set witness_commands[];
657 extern struct cmd_set clusapi_commands[];
658
659 static struct cmd_set *rpcclient_command_list[] = {
660         rpcclient_commands,
661         lsarpc_commands,
662         ds_commands,
663         samr_commands,
664         spoolss_commands,
665         iremotewinspool_commands,
666         netlogon_commands,
667         srvsvc_commands,
668         dfs_commands,
669         echo_commands,
670         epmapper_commands,
671         shutdown_commands,
672         test_commands,
673         wkssvc_commands,
674         ntsvcs_commands,
675         drsuapi_commands,
676         eventlog_commands,
677         winreg_commands,
678         fss_commands,
679         witness_commands,
680         clusapi_commands,
681         NULL
682 };
683
684 static void add_command_set(struct cmd_set *cmd_set)
685 {
686         struct cmd_list *entry;
687
688         if (!(entry = SMB_MALLOC_P(struct cmd_list))) {
689                 DEBUG(0, ("out of memory\n"));
690                 return;
691         }
692
693         ZERO_STRUCTP(entry);
694
695         entry->cmd_set = cmd_set;
696         DLIST_ADD(cmd_list, entry);
697 }
698
699
700 /**
701  * Call an rpcclient function, passing an argv array.
702  *
703  * @param cmd Command to run, as a single string.
704  **/
705 static NTSTATUS do_cmd(struct cli_state *cli,
706                        struct user_auth_info *auth_info,
707                        struct cmd_set *cmd_entry,
708                        struct dcerpc_binding *binding,
709                        int argc, const char **argv)
710 {
711         NTSTATUS ntresult;
712         WERROR wresult;
713
714         TALLOC_CTX *mem_ctx;
715
716         /* Create mem_ctx */
717
718         if (!(mem_ctx = talloc_stackframe())) {
719                 DEBUG(0, ("talloc_init() failed\n"));
720                 return NT_STATUS_NO_MEMORY;
721         }
722
723         /* Open pipe */
724
725         if ((cmd_entry->table != NULL) && (cmd_entry->rpc_pipe == NULL)) {
726                 enum credentials_use_kerberos use_kerberos = CRED_AUTO_USE_KERBEROS;
727                 switch (pipe_default_auth_type) {
728                 case DCERPC_AUTH_TYPE_NONE:
729                         ntresult = cli_rpc_pipe_open_noauth_transport(
730                                 cli, default_transport,
731                                 cmd_entry->table,
732                                 &cmd_entry->rpc_pipe);
733                         break;
734                 case DCERPC_AUTH_TYPE_SPNEGO:
735                         switch (pipe_default_auth_spnego_type) {
736                         case PIPE_AUTH_TYPE_SPNEGO_NTLMSSP:
737                                 use_kerberos = CRED_DONT_USE_KERBEROS;
738                                 break;
739                         case PIPE_AUTH_TYPE_SPNEGO_KRB5:
740                                 use_kerberos = CRED_MUST_USE_KERBEROS;
741                                 break;
742                         case PIPE_AUTH_TYPE_SPNEGO_NONE:
743                                 use_kerberos = CRED_AUTO_USE_KERBEROS;
744                                 break;
745                         }
746                         /* Fall through */
747                 case DCERPC_AUTH_TYPE_NTLMSSP:
748                 case DCERPC_AUTH_TYPE_KRB5:
749                         ntresult = cli_rpc_pipe_open_generic_auth(
750                                 cli, cmd_entry->table,
751                                 default_transport,
752                                 use_kerberos,
753                                 pipe_default_auth_type,
754                                 pipe_default_auth_level,
755                                 smbXcli_conn_remote_name(cli->conn),
756                                 get_cmdline_auth_info_domain(auth_info),
757                                 get_cmdline_auth_info_username(auth_info),
758                                 get_cmdline_auth_info_password(auth_info),
759                                 &cmd_entry->rpc_pipe);
760                         break;
761                 case DCERPC_AUTH_TYPE_SCHANNEL:
762                         TALLOC_FREE(rpcclient_netlogon_creds);
763                         ntresult = cli_rpc_pipe_open_schannel(
764                                 cli, rpcclient_msg_ctx,
765                                 cmd_entry->table,
766                                 default_transport,
767                                 rpcclient_netlogon_domain,
768                                 &cmd_entry->rpc_pipe,
769                                 talloc_autofree_context(),
770                                 &rpcclient_netlogon_creds);
771                         break;
772                 default:
773                         DEBUG(0, ("Could not initialise %s. Invalid "
774                                   "auth type %u\n",
775                                   cmd_entry->table->name,
776                                   pipe_default_auth_type ));
777                         talloc_free(mem_ctx);
778                         return NT_STATUS_UNSUCCESSFUL;
779                 }
780                 if (!NT_STATUS_IS_OK(ntresult)) {
781                         DEBUG(0, ("Could not initialise %s. Error was %s\n",
782                                   cmd_entry->table->name,
783                                   nt_errstr(ntresult) ));
784                         talloc_free(mem_ctx);
785                         return ntresult;
786                 }
787
788                 if (rpcclient_netlogon_creds == NULL && cmd_entry->use_netlogon_creds) {
789                         const char *dc_name = cmd_entry->rpc_pipe->desthost;
790                         const char *domain = rpcclient_netlogon_domain;
791                         struct cli_credentials *creds = NULL;
792
793                         ntresult = pdb_get_trust_credentials(domain, NULL,
794                                                              mem_ctx, &creds);
795                         if (!NT_STATUS_IS_OK(ntresult)) {
796                                 DEBUG(0, ("Failed to fetch trust credentials for "
797                                           "%s to connect to %s: %s\n",
798                                           domain, cmd_entry->table->name,
799                                           nt_errstr(ntresult)));
800                                 TALLOC_FREE(cmd_entry->rpc_pipe);
801                                 talloc_free(mem_ctx);
802                                 return ntresult;
803                         }
804
805                         ntresult = rpccli_create_netlogon_creds_with_creds(creds,
806                                                         dc_name,
807                                                         rpcclient_msg_ctx,
808                                                         talloc_autofree_context(),
809                                                         &rpcclient_netlogon_creds);
810                         if (!NT_STATUS_IS_OK(ntresult)) {
811                                 DEBUG(0, ("Could not initialise credentials for %s.\n",
812                                           cmd_entry->table->name));
813                                 TALLOC_FREE(cmd_entry->rpc_pipe);
814                                 TALLOC_FREE(mem_ctx);
815                                 return ntresult;
816                         }
817
818                         ntresult = rpccli_setup_netlogon_creds_with_creds(cli,
819                                                         NCACN_NP,
820                                                         rpcclient_netlogon_creds,
821                                                         false, /* force_reauth */
822                                                         creds);
823                         TALLOC_FREE(creds);
824                         if (!NT_STATUS_IS_OK(ntresult)) {
825                                 DEBUG(0, ("Could not initialise credentials for %s.\n",
826                                           cmd_entry->table->name));
827                                 TALLOC_FREE(cmd_entry->rpc_pipe);
828                                 TALLOC_FREE(rpcclient_netlogon_creds);
829                                 TALLOC_FREE(mem_ctx);
830                                 return ntresult;
831                         }
832                 }
833         }
834
835         /* Set timeout for new connections */
836         if (cmd_entry->rpc_pipe) {
837                 rpccli_set_timeout(cmd_entry->rpc_pipe, timeout);
838         }
839
840         /* Run command */
841
842         if ( cmd_entry->returntype == RPC_RTYPE_NTSTATUS ) {
843                 ntresult = cmd_entry->ntfn(cmd_entry->rpc_pipe, mem_ctx, argc, argv);
844                 if (!NT_STATUS_IS_OK(ntresult)) {
845                         printf("result was %s\n", nt_errstr(ntresult));
846                 }
847         } else {
848                 wresult = cmd_entry->wfn(cmd_entry->rpc_pipe, mem_ctx, argc, argv);
849                 /* print out the DOS error */
850                 if (!W_ERROR_IS_OK(wresult)) {
851                         printf( "result was %s\n", win_errstr(wresult));
852                 }
853                 ntresult = W_ERROR_IS_OK(wresult)?NT_STATUS_OK:NT_STATUS_UNSUCCESSFUL;
854         }
855
856         /* Cleanup */
857
858         talloc_free(mem_ctx);
859
860         return ntresult;
861 }
862
863
864 /**
865  * Process a command entered at the prompt or as part of -c
866  *
867  * @returns The NTSTATUS from running the command.
868  **/
869 static NTSTATUS process_cmd(struct user_auth_info *auth_info,
870                             struct cli_state *cli,
871                             struct dcerpc_binding *binding,
872                             char *cmd)
873 {
874         struct cmd_list *temp_list;
875         NTSTATUS result = NT_STATUS_OK;
876         int ret;
877         int argc;
878         const char **argv = NULL;
879
880         if ((ret = poptParseArgvString(cmd, &argc, &argv)) != 0) {
881                 fprintf(stderr, "rpcclient: %s\n", poptStrerror(ret));
882                 return NT_STATUS_UNSUCCESSFUL;
883         }
884
885
886         /* Walk through a dlist of arrays of commands. */
887         for (temp_list = cmd_list; temp_list; temp_list = temp_list->next) {
888                 struct cmd_set *temp_set = temp_list->cmd_set;
889
890                 while (temp_set->name) {
891                         if (strequal(argv[0], temp_set->name)) {
892                                 if (!(temp_set->returntype == RPC_RTYPE_NTSTATUS && temp_set->ntfn ) &&
893                          !(temp_set->returntype == RPC_RTYPE_WERROR && temp_set->wfn )) {
894                                         fprintf (stderr, "Invalid command\n");
895                                         goto out_free;
896                                 }
897
898                                 result = do_cmd(cli, auth_info, temp_set,
899                                                 binding, argc, argv);
900
901                                 goto out_free;
902                         }
903                         temp_set++;
904                 }
905         }
906
907         if (argv[0]) {
908                 printf("command not found: %s\n", argv[0]);
909         }
910
911 out_free:
912 /* moved to do_cmd()
913         if (!NT_STATUS_IS_OK(result)) {
914                 printf("result was %s\n", nt_errstr(result));
915         }
916 */
917
918         /* NOTE: popt allocates the whole argv, including the
919          * strings, as a single block.  So a single free is
920          * enough to release it -- we don't free the
921          * individual strings.  rtfm. */
922         free(argv);
923
924         return result;
925 }
926
927
928 /* Main function */
929
930  int main(int argc, char *argv[])
931 {
932         const char **const_argv = discard_const_p(const char *, argv);
933         int                     opt;
934         static char             *cmdstr = NULL;
935         const char *server;
936         struct cli_state        *cli = NULL;
937         static char             *opt_ipaddr=NULL;
938         struct cmd_set          **cmd_set;
939         struct sockaddr_storage server_ss;
940         NTSTATUS                nt_status;
941         static int              opt_port = 0;
942         int result = 0;
943         TALLOC_CTX *frame = talloc_stackframe();
944         uint32_t flags = 0;
945         struct dcerpc_binding *binding = NULL;
946         enum dcerpc_transport_t transport;
947         uint32_t bflags = 0;
948         const char *binding_string = NULL;
949         const char *host;
950         int signing_state = SMB_SIGNING_IPC_DEFAULT;
951
952         /* make sure the vars that get altered (4th field) are in
953            a fixed location or certain compilers complain */
954         poptContext pc;
955         struct poptOption long_options[] = {
956                 POPT_AUTOHELP
957                 {"command",     'c', POPT_ARG_STRING,   &cmdstr, 'c', "Execute semicolon separated cmds", "COMMANDS"},
958                 {"dest-ip", 'I', POPT_ARG_STRING,   &opt_ipaddr, 'I', "Specify destination IP address", "IP"},
959                 {"port", 'p', POPT_ARG_INT,   &opt_port, 'p', "Specify port number", "PORT"},
960                 POPT_COMMON_SAMBA
961                 POPT_COMMON_CONNECTION
962                 POPT_COMMON_CREDENTIALS
963                 POPT_TABLEEND
964         };
965
966         smb_init_locale();
967
968         zero_sockaddr(&server_ss);
969
970         setlinebuf(stdout);
971
972         /* the following functions are part of the Samba debugging
973            facilities.  See lib/debug.c */
974         setup_logging("rpcclient", DEBUG_STDOUT);
975         lp_set_cmdline("log level", "0");
976
977         /* Parse options */
978
979         pc = poptGetContext("rpcclient", argc, const_argv,
980                             long_options, 0);
981
982         if (argc == 1) {
983                 poptPrintHelp(pc, stderr, 0);
984                 goto done;
985         }
986
987         while((opt = poptGetNextOpt(pc)) != -1) {
988                 switch (opt) {
989
990                 case 'I':
991                         if (!interpret_string_addr(&server_ss,
992                                                 opt_ipaddr,
993                                                 AI_NUMERICHOST)) {
994                                 fprintf(stderr, "%s not a valid IP address\n",
995                                         opt_ipaddr);
996                                 result = 1;
997                                 goto done;
998                         }
999                 }
1000         }
1001
1002         /* Get server as remaining unparsed argument.  Print usage if more
1003            than one unparsed argument is present. */
1004
1005         server = poptGetArg(pc);
1006
1007         if (!server || poptGetArg(pc)) {
1008                 poptPrintHelp(pc, stderr, 0);
1009                 result = 1;
1010                 goto done;
1011         }
1012
1013         poptFreeContext(pc);
1014         popt_burn_cmdline_password(argc, argv);
1015
1016         nt_status = messaging_init_client(talloc_autofree_context(),
1017                                           samba_tevent_context_init(talloc_autofree_context()),
1018                                           &rpcclient_msg_ctx);
1019         if (geteuid() != 0 &&
1020                         NT_STATUS_EQUAL(nt_status, NT_STATUS_ACCESS_DENIED)) {
1021                 /*
1022                  * Normal to fail to initialize messaging context
1023                  * if we're not root as we don't have ability to
1024                  * read lock directory.
1025                  */
1026                 DBG_NOTICE("Unable to initialize messaging context. "
1027                         "Must be root to do that.\n");
1028         } else if (!NT_STATUS_IS_OK(nt_status)) {
1029                 fprintf(stderr, "Could not init messaging context\n");
1030                 result = 1;
1031                 goto done;
1032         }
1033
1034         if (!init_names()) {
1035                 result = 1;
1036                 goto done;
1037         }
1038
1039         /*
1040          * Get password
1041          * from stdin if necessary
1042          */
1043
1044         if ((server[0] == '/' && server[1] == '/') ||
1045                         (server[0] == '\\' && server[1] ==  '\\')) {
1046                 server += 2;
1047         }
1048
1049         nt_status = dcerpc_parse_binding(frame, server, &binding);
1050
1051         if (!NT_STATUS_IS_OK(nt_status)) {
1052
1053                 binding_string = talloc_asprintf(frame, "ncacn_np:%s",
1054                                                  strip_hostname(server));
1055                 if (!binding_string) {
1056                         result = 1;
1057                         goto done;
1058                 }
1059
1060                 nt_status = dcerpc_parse_binding(frame, binding_string, &binding);
1061                 if (!NT_STATUS_IS_OK(nt_status)) {
1062                         result = -1;
1063                         goto done;
1064                 }
1065         }
1066
1067         transport = dcerpc_binding_get_transport(binding);
1068
1069         if (transport == NCA_UNKNOWN) {
1070                 nt_status = dcerpc_binding_set_transport(binding, NCACN_NP);
1071                 if (!NT_STATUS_IS_OK(nt_status)) {
1072                         result = -1;
1073                         goto done;
1074                 }
1075         }
1076
1077         host = dcerpc_binding_get_string_option(binding, "host");
1078
1079         bflags = dcerpc_binding_get_flags(binding);
1080         if (bflags & DCERPC_CONNECT) {
1081                 pipe_default_auth_level = DCERPC_AUTH_LEVEL_CONNECT;
1082                 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1083         }
1084         if (bflags & DCERPC_PACKET) {
1085                 pipe_default_auth_level = DCERPC_AUTH_LEVEL_PACKET;
1086                 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1087         }
1088         if (bflags & DCERPC_SIGN) {
1089                 pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
1090                 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1091         }
1092         if (bflags & DCERPC_SEAL) {
1093                 pipe_default_auth_level = DCERPC_AUTH_LEVEL_PRIVACY;
1094                 pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1095         }
1096         if (bflags & DCERPC_AUTH_SPNEGO) {
1097                 pipe_default_auth_type = DCERPC_AUTH_TYPE_SPNEGO;
1098                 pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
1099         }
1100         if (bflags & DCERPC_AUTH_NTLM) {
1101                 if (pipe_default_auth_type == DCERPC_AUTH_TYPE_SPNEGO) {
1102                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_NTLMSSP;
1103                 } else {
1104                         pipe_default_auth_type = DCERPC_AUTH_TYPE_NTLMSSP;
1105                 }
1106         }
1107         if (bflags & DCERPC_AUTH_KRB5) {
1108                 if (pipe_default_auth_type == DCERPC_AUTH_TYPE_SPNEGO) {
1109                         pipe_default_auth_spnego_type = PIPE_AUTH_TYPE_SPNEGO_KRB5;
1110                 } else {
1111                         pipe_default_auth_type = DCERPC_AUTH_TYPE_KRB5;
1112                 }
1113         }
1114         if (pipe_default_auth_type != DCERPC_AUTH_TYPE_NONE) {
1115                 /* If nothing is requested then default to integrity */
1116                 if (pipe_default_auth_level == DCERPC_AUTH_LEVEL_NONE) {
1117                         pipe_default_auth_level = DCERPC_AUTH_LEVEL_INTEGRITY;
1118                 }
1119         }
1120
1121         signing_state = get_cmdline_auth_info_signing_state(
1122                         popt_get_cmdline_auth_info());
1123         switch (signing_state) {
1124         case SMB_SIGNING_OFF:
1125                 lp_set_cmdline("client ipc signing", "no");
1126                 break;
1127         case SMB_SIGNING_REQUIRED:
1128                 lp_set_cmdline("client ipc signing", "required");
1129                 break;
1130         }
1131
1132         if (get_cmdline_auth_info_use_kerberos(popt_get_cmdline_auth_info())) {
1133                 flags |= CLI_FULL_CONNECTION_USE_KERBEROS |
1134                          CLI_FULL_CONNECTION_FALLBACK_AFTER_KERBEROS;
1135         }
1136         if (get_cmdline_auth_info_use_ccache(popt_get_cmdline_auth_info())) {
1137                 flags |= CLI_FULL_CONNECTION_USE_CCACHE;
1138         }
1139         if (get_cmdline_auth_info_use_pw_nt_hash(
1140                         popt_get_cmdline_auth_info())) {
1141                 flags |= CLI_FULL_CONNECTION_USE_NT_HASH;
1142         }
1143
1144         rpcclient_netlogon_domain = get_cmdline_auth_info_domain(
1145                         popt_get_cmdline_auth_info());
1146         if (rpcclient_netlogon_domain == NULL ||
1147             rpcclient_netlogon_domain[0] == '\0')
1148         {
1149                 rpcclient_netlogon_domain = lp_workgroup();
1150         }
1151
1152         nt_status = cli_full_connection(&cli, lp_netbios_name(), host,
1153                                         opt_ipaddr ? &server_ss : NULL, opt_port,
1154                                         "IPC$", "IPC",
1155                                         get_cmdline_auth_info_username(
1156                                                 popt_get_cmdline_auth_info()),
1157                                         get_cmdline_auth_info_domain(
1158                                                 popt_get_cmdline_auth_info()),
1159                                         get_cmdline_auth_info_password(
1160                                                 popt_get_cmdline_auth_info()),
1161                                         flags,
1162                                         SMB_SIGNING_IPC_DEFAULT);
1163
1164         if (!NT_STATUS_IS_OK(nt_status)) {
1165                 DEBUG(0,("Cannot connect to server.  Error was %s\n", nt_errstr(nt_status)));
1166                 result = 1;
1167                 goto done;
1168         }
1169
1170         if (get_cmdline_auth_info_smb_encrypt(popt_get_cmdline_auth_info())) {
1171                 nt_status = cli_cm_force_encryption(cli,
1172                                         get_cmdline_auth_info_username(
1173                                                 popt_get_cmdline_auth_info()),
1174                                         get_cmdline_auth_info_password(
1175                                                 popt_get_cmdline_auth_info()),
1176                                         get_cmdline_auth_info_domain(
1177                                                 popt_get_cmdline_auth_info()),
1178                                         "IPC$");
1179                 if (!NT_STATUS_IS_OK(nt_status)) {
1180                         result = 1;
1181                         goto done;
1182                 }
1183         }
1184
1185 #if 0   /* COMMENT OUT FOR TESTING */
1186         memset(cmdline_auth_info.password,'X',sizeof(cmdline_auth_info.password));
1187 #endif
1188
1189         /* Load command lists */
1190         rpcclient_cli_state = cli;
1191
1192         timeout = 10000;
1193         cli_set_timeout(cli, timeout);
1194
1195         cmd_set = rpcclient_command_list;
1196
1197         while(*cmd_set) {
1198                 add_command_set(*cmd_set);
1199                 add_command_set(separator_command);
1200                 cmd_set++;
1201         }
1202
1203         default_transport = dcerpc_binding_get_transport(binding);
1204
1205         fetch_machine_sid(cli);
1206
1207        /* Do anything specified with -c */
1208         if (cmdstr && cmdstr[0]) {
1209                 char    *cmd;
1210                 char    *p = cmdstr;
1211
1212                 result = 0;
1213
1214                 while((cmd=next_command(&p)) != NULL) {
1215                         NTSTATUS cmd_result = process_cmd(
1216                                                 popt_get_cmdline_auth_info(),
1217                                                 cli, binding, cmd);
1218                         SAFE_FREE(cmd);
1219                         result = NT_STATUS_IS_ERR(cmd_result);
1220                 }
1221
1222                 goto done;
1223         }
1224
1225         /* Loop around accepting commands */
1226
1227         while(1) {
1228                 char *line = NULL;
1229
1230                 line = smb_readline("rpcclient $> ", NULL, completion_fn);
1231
1232                 if (line == NULL) {
1233                         printf("\n");
1234                         break;
1235                 }
1236
1237                 if (line[0] != '\n')
1238                         process_cmd(popt_get_cmdline_auth_info(), cli,
1239                                 binding, line);
1240                 SAFE_FREE(line);
1241         }
1242
1243 done:
1244         rpcclient_cli_state = NULL;
1245         if (cli != NULL) {
1246                 cli_shutdown(cli);
1247         }
1248         TALLOC_FREE(frame);
1249         return result;
1250 }