s3:registry: move the reg_api prototypes to their own header.
[kai/samba.git] / source3 / registry / reg_api.c
1 /*
2  *  Unix SMB/CIFS implementation.
3  *  Virtual Windows Registry Layer
4  *  Copyright (C) Volker Lendecke 2006
5  *  Copyright (C) Michael Adam 2007-2010
6  *
7  *  This program is free software; you can redistribute it and/or modify
8  *  it under the terms of the GNU General Public License as published by
9  *  the Free Software Foundation; either version 3 of the License, or
10  *  (at your option) any later version.
11  *
12  *  This program is distributed in the hope that it will be useful,
13  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
14  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15  *  GNU General Public License for more details.
16  *
17  *  You should have received a copy of the GNU General Public License
18  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
19  */
20
21 /* Attempt to wrap the existing API in a more winreg.idl-like way */
22
23 /*
24  * Here is a list of winreg.idl functions and corresponding implementations
25  * provided here:
26  *
27  * 0x00         winreg_OpenHKCR
28  * 0x01         winreg_OpenHKCU
29  * 0x02         winreg_OpenHKLM
30  * 0x03         winreg_OpenHKPD
31  * 0x04         winreg_OpenHKU
32  * 0x05         winreg_CloseKey
33  * 0x06         winreg_CreateKey                        reg_createkey
34  * 0x07         winreg_DeleteKey                        reg_deletekey
35  * 0x08         winreg_DeleteValue                      reg_deletevalue
36  * 0x09         winreg_EnumKey                          reg_enumkey
37  * 0x0a         winreg_EnumValue                        reg_enumvalue
38  * 0x0b         winreg_FlushKey
39  * 0x0c         winreg_GetKeySecurity                   reg_getkeysecurity
40  * 0x0d         winreg_LoadKey
41  * 0x0e         winreg_NotifyChangeKeyValue
42  * 0x0f         winreg_OpenKey                          reg_openkey
43  * 0x10         winreg_QueryInfoKey                     reg_queryinfokey
44  * 0x11         winreg_QueryValue                       reg_queryvalue
45  * 0x12         winreg_ReplaceKey
46  * 0x13         winreg_RestoreKey                       reg_restorekey
47  * 0x14         winreg_SaveKey                          reg_savekey
48  * 0x15         winreg_SetKeySecurity                   reg_setkeysecurity
49  * 0x16         winreg_SetValue                         reg_setvalue
50  * 0x17         winreg_UnLoadKey
51  * 0x18         winreg_InitiateSystemShutdown
52  * 0x19         winreg_AbortSystemShutdown
53  * 0x1a         winreg_GetVersion                       reg_getversion
54  * 0x1b         winreg_OpenHKCC
55  * 0x1c         winreg_OpenHKDD
56  * 0x1d         winreg_QueryMultipleValues              reg_querymultiplevalues
57  * 0x1e         winreg_InitiateSystemShutdownEx
58  * 0x1f         winreg_SaveKeyEx
59  * 0x20         winreg_OpenHKPT
60  * 0x21         winreg_OpenHKPN
61  * 0x22         winreg_QueryMultipleValues2             reg_querymultiplevalues
62  *
63  */
64
65 #include "includes.h"
66 #include "registry.h"
67 #include "reg_api.h"
68 #include "reg_cachehook.h"
69 #include "reg_util_internal.h"
70 #include "reg_backend_db.h"
71 #include "reg_dispatcher.h"
72 #include "reg_objects.h"
73 #include "../librpc/gen_ndr/ndr_security.h"
74
75 #undef DBGC_CLASS
76 #define DBGC_CLASS DBGC_REGISTRY
77
78
79 /**********************************************************************
80  * Helper functions
81  **********************************************************************/
82
83 static WERROR fill_value_cache(struct registry_key *key)
84 {
85         WERROR werr;
86
87         if (key->values != NULL) {
88                 if (!reg_values_need_update(key->key, key->values)) {
89                         return WERR_OK;
90                 }
91         }
92
93         werr = regval_ctr_init(key, &(key->values));
94         W_ERROR_NOT_OK_RETURN(werr);
95
96         if (fetch_reg_values(key->key, key->values) == -1) {
97                 TALLOC_FREE(key->values);
98                 return WERR_BADFILE;
99         }
100
101         return WERR_OK;
102 }
103
104 static WERROR fill_subkey_cache(struct registry_key *key)
105 {
106         WERROR werr;
107
108         if (key->subkeys != NULL) {
109                 if (!reg_subkeys_need_update(key->key, key->subkeys)) {
110                         return WERR_OK;
111                 }
112         }
113
114         werr = regsubkey_ctr_init(key, &(key->subkeys));
115         W_ERROR_NOT_OK_RETURN(werr);
116
117         if (fetch_reg_keys(key->key, key->subkeys) == -1) {
118                 TALLOC_FREE(key->subkeys);
119                 return WERR_NO_MORE_ITEMS;
120         }
121
122         return WERR_OK;
123 }
124
125 static int regkey_destructor(struct registry_key_handle *key)
126 {
127         return regdb_close();
128 }
129
130 static WERROR regkey_open_onelevel(TALLOC_CTX *mem_ctx, 
131                                    struct registry_key *parent,
132                                    const char *name,
133                                    const struct security_token *token,
134                                    uint32 access_desired,
135                                    struct registry_key **pregkey)
136 {
137         WERROR          result = WERR_OK;
138         struct registry_key *regkey;
139         struct registry_key_handle *key;
140         struct regsubkey_ctr    *subkeys = NULL;
141
142         DEBUG(7,("regkey_open_onelevel: name = [%s]\n", name));
143
144         SMB_ASSERT(strchr(name, '\\') == NULL);
145
146         if (!(regkey = TALLOC_ZERO_P(mem_ctx, struct registry_key)) ||
147             !(regkey->token = dup_nt_token(regkey, token)) ||
148             !(regkey->key = TALLOC_ZERO_P(regkey, struct registry_key_handle)))
149         {
150                 result = WERR_NOMEM;
151                 goto done;
152         }
153
154         if ( !(W_ERROR_IS_OK(result = regdb_open())) ) {
155                 goto done;
156         }
157
158         key = regkey->key;
159         talloc_set_destructor(key, regkey_destructor);
160
161         /* initialization */
162
163         key->type = REG_KEY_GENERIC;
164
165         if (name[0] == '\0') {
166                 /*
167                  * Open a copy of the parent key
168                  */
169                 if (!parent) {
170                         result = WERR_BADFILE;
171                         goto done;
172                 }
173                 key->name = talloc_strdup(key, parent->key->name);
174         }
175         else {
176                 /*
177                  * Normal subkey open
178                  */
179                 key->name = talloc_asprintf(key, "%s%s%s",
180                                             parent ? parent->key->name : "",
181                                             parent ? "\\": "",
182                                             name);
183         }
184
185         if (key->name == NULL) {
186                 result = WERR_NOMEM;
187                 goto done;
188         }
189
190         /* Tag this as a Performance Counter Key */
191
192         if( StrnCaseCmp(key->name, KEY_HKPD, strlen(KEY_HKPD)) == 0 )
193                 key->type = REG_KEY_HKPD;
194
195         /* Look up the table of registry I/O operations */
196
197         if ( !(key->ops = reghook_cache_find( key->name )) ) {
198                 DEBUG(0,("reg_open_onelevel: Failed to assign "
199                          "registry_ops to [%s]\n", key->name ));
200                 result = WERR_BADFILE;
201                 goto done;
202         }
203
204         /* check if the path really exists; failed is indicated by -1 */
205         /* if the subkey count failed, bail out */
206
207         result = regsubkey_ctr_init(key, &subkeys);
208         if (!W_ERROR_IS_OK(result)) {
209                 goto done;
210         }
211
212         if ( fetch_reg_keys( key, subkeys ) == -1 )  {
213                 result = WERR_BADFILE;
214                 goto done;
215         }
216
217         TALLOC_FREE( subkeys );
218
219         if ( !regkey_access_check( key, access_desired, &key->access_granted,
220                                    token ) ) {
221                 result = WERR_ACCESS_DENIED;
222                 goto done;
223         }
224
225         *pregkey = regkey;
226         result = WERR_OK;
227
228 done:
229         if ( !W_ERROR_IS_OK(result) ) {
230                 TALLOC_FREE(regkey);
231         }
232
233         return result;
234 }
235
236 WERROR reg_openhive(TALLOC_CTX *mem_ctx, const char *hive,
237                     uint32 desired_access,
238                     const struct security_token *token,
239                     struct registry_key **pkey)
240 {
241         SMB_ASSERT(hive != NULL);
242         SMB_ASSERT(hive[0] != '\0');
243         SMB_ASSERT(strchr(hive, '\\') == NULL);
244
245         return regkey_open_onelevel(mem_ctx, NULL, hive, token, desired_access,
246                                     pkey);
247 }
248
249
250 /**********************************************************************
251  * The API functions
252  **********************************************************************/
253
254 WERROR reg_openkey(TALLOC_CTX *mem_ctx, struct registry_key *parent,
255                    const char *name, uint32 desired_access,
256                    struct registry_key **pkey)
257 {
258         struct registry_key *direct_parent = parent;
259         WERROR err;
260         char *p, *path, *to_free;
261         size_t len;
262
263         if (!(path = SMB_STRDUP(name))) {
264                 return WERR_NOMEM;
265         }
266         to_free = path;
267
268         len = strlen(path);
269
270         if ((len > 0) && (path[len-1] == '\\')) {
271                 path[len-1] = '\0';
272         }
273
274         while ((p = strchr(path, '\\')) != NULL) {
275                 char *name_component;
276                 struct registry_key *tmp;
277
278                 if (!(name_component = SMB_STRNDUP(path, (p - path)))) {
279                         err = WERR_NOMEM;
280                         goto error;
281                 }
282
283                 err = regkey_open_onelevel(mem_ctx, direct_parent,
284                                            name_component, parent->token,
285                                            KEY_ENUMERATE_SUB_KEYS, &tmp);
286                 SAFE_FREE(name_component);
287
288                 if (!W_ERROR_IS_OK(err)) {
289                         goto error;
290                 }
291                 if (direct_parent != parent) {
292                         TALLOC_FREE(direct_parent);
293                 }
294
295                 direct_parent = tmp;
296                 path = p+1;
297         }
298
299         err = regkey_open_onelevel(mem_ctx, direct_parent, path, parent->token,
300                                    desired_access, pkey);
301  error:
302         if (direct_parent != parent) {
303                 TALLOC_FREE(direct_parent);
304         }
305         SAFE_FREE(to_free);
306         return err;
307 }
308
309 WERROR reg_enumkey(TALLOC_CTX *mem_ctx, struct registry_key *key,
310                    uint32 idx, char **name, NTTIME *last_write_time)
311 {
312         WERROR err;
313
314         if (!(key->key->access_granted & KEY_ENUMERATE_SUB_KEYS)) {
315                 return WERR_ACCESS_DENIED;
316         }
317
318         if (!W_ERROR_IS_OK(err = fill_subkey_cache(key))) {
319                 return err;
320         }
321
322         if (idx >= regsubkey_ctr_numkeys(key->subkeys)) {
323                 return WERR_NO_MORE_ITEMS;
324         }
325
326         if (!(*name = talloc_strdup(mem_ctx,
327                         regsubkey_ctr_specific_key(key->subkeys, idx))))
328         {
329                 return WERR_NOMEM;
330         }
331
332         if (last_write_time) {
333                 *last_write_time = 0;
334         }
335
336         return WERR_OK;
337 }
338
339 WERROR reg_enumvalue(TALLOC_CTX *mem_ctx, struct registry_key *key,
340                      uint32 idx, char **pname, struct registry_value **pval)
341 {
342         struct registry_value *val;
343         struct regval_blob *blob;
344         WERROR err;
345
346         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
347                 return WERR_ACCESS_DENIED;
348         }
349
350         if (!(W_ERROR_IS_OK(err = fill_value_cache(key)))) {
351                 return err;
352         }
353
354         if (idx >= regval_ctr_numvals(key->values)) {
355                 return WERR_NO_MORE_ITEMS;
356         }
357
358         blob = regval_ctr_specific_value(key->values, idx);
359
360         val = talloc_zero(mem_ctx, struct registry_value);
361         if (val == NULL) {
362                 return WERR_NOMEM;
363         }
364
365         val->type = regval_type(blob);
366         val->data = data_blob_talloc(mem_ctx, regval_data_p(blob), regval_size(blob));
367
368         if (pname
369             && !(*pname = talloc_strdup(
370                          mem_ctx, regval_name(blob)))) {
371                 TALLOC_FREE(val);
372                 return WERR_NOMEM;
373         }
374
375         *pval = val;
376         return WERR_OK;
377 }
378
379 WERROR reg_queryvalue(TALLOC_CTX *mem_ctx, struct registry_key *key,
380                       const char *name, struct registry_value **pval)
381 {
382         WERROR err;
383         uint32 i;
384
385         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
386                 return WERR_ACCESS_DENIED;
387         }
388
389         if (!(W_ERROR_IS_OK(err = fill_value_cache(key)))) {
390                 return err;
391         }
392
393         for (i=0; i < regval_ctr_numvals(key->values); i++) {
394                 struct regval_blob *blob;
395                 blob = regval_ctr_specific_value(key->values, i);
396                 if (strequal(regval_name(blob), name)) {
397                         return reg_enumvalue(mem_ctx, key, i, NULL, pval);
398                 }
399         }
400
401         return WERR_BADFILE;
402 }
403
404 WERROR reg_querymultiplevalues(TALLOC_CTX *mem_ctx,
405                                struct registry_key *key,
406                                uint32_t num_names,
407                                const char **names,
408                                uint32_t *pnum_vals,
409                                struct registry_value **pvals)
410 {
411         WERROR err;
412         uint32_t i, n, found = 0;
413         struct registry_value *vals;
414
415         if (num_names == 0) {
416                 return WERR_OK;
417         }
418
419         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
420                 return WERR_ACCESS_DENIED;
421         }
422
423         if (!(W_ERROR_IS_OK(err = fill_value_cache(key)))) {
424                 return err;
425         }
426
427         vals = talloc_zero_array(mem_ctx, struct registry_value, num_names);
428         if (vals == NULL) {
429                 return WERR_NOMEM;
430         }
431
432         for (n=0; n < num_names; n++) {
433                 for (i=0; i < regval_ctr_numvals(key->values); i++) {
434                         struct regval_blob *blob;
435                         blob = regval_ctr_specific_value(key->values, i);
436                         if (strequal(regval_name(blob), names[n])) {
437                                 struct registry_value *v;
438                                 err = reg_enumvalue(mem_ctx, key, i, NULL, &v);
439                                 if (!W_ERROR_IS_OK(err)) {
440                                         return err;
441                                 }
442                                 vals[n] = *v;
443                                 found++;
444                         }
445                 }
446         }
447
448         *pvals = vals;
449         *pnum_vals = found;
450
451         return WERR_OK;
452 }
453
454 WERROR reg_queryinfokey(struct registry_key *key, uint32_t *num_subkeys,
455                         uint32_t *max_subkeylen, uint32_t *max_subkeysize, 
456                         uint32_t *num_values, uint32_t *max_valnamelen, 
457                         uint32_t *max_valbufsize, uint32_t *secdescsize,
458                         NTTIME *last_changed_time)
459 {
460         uint32 i, max_size;
461         size_t max_len;
462         TALLOC_CTX *mem_ctx;
463         WERROR err;
464         struct security_descriptor *secdesc;
465
466         if (!(key->key->access_granted & KEY_QUERY_VALUE)) {
467                 return WERR_ACCESS_DENIED;
468         }
469
470         if (!W_ERROR_IS_OK(fill_subkey_cache(key)) ||
471             !W_ERROR_IS_OK(fill_value_cache(key))) {
472                 return WERR_BADFILE;
473         }
474
475         max_len = 0;
476         for (i=0; i< regsubkey_ctr_numkeys(key->subkeys); i++) {
477                 max_len = MAX(max_len,
478                         strlen(regsubkey_ctr_specific_key(key->subkeys, i)));
479         }
480
481         *num_subkeys = regsubkey_ctr_numkeys(key->subkeys);
482         *max_subkeylen = max_len;
483         *max_subkeysize = 0;    /* Class length? */
484
485         max_len = 0;
486         max_size = 0;
487         for (i=0; i < regval_ctr_numvals(key->values); i++) {
488                 struct regval_blob *blob;
489                 blob = regval_ctr_specific_value(key->values, i);
490                 max_len = MAX(max_len, strlen(regval_name(blob)));
491                 max_size = MAX(max_size, regval_size(blob));
492         }
493
494         *num_values = regval_ctr_numvals(key->values);
495         *max_valnamelen = max_len;
496         *max_valbufsize = max_size;
497
498         if (!(mem_ctx = talloc_new(key))) {
499                 return WERR_NOMEM;
500         }
501
502         err = regkey_get_secdesc(mem_ctx, key->key, &secdesc);
503         if (!W_ERROR_IS_OK(err)) {
504                 TALLOC_FREE(mem_ctx);
505                 return err;
506         }
507
508         *secdescsize = ndr_size_security_descriptor(secdesc, 0);
509         TALLOC_FREE(mem_ctx);
510
511         *last_changed_time = 0;
512
513         return WERR_OK;
514 }
515
516 WERROR reg_createkey(TALLOC_CTX *ctx, struct registry_key *parent,
517                      const char *subkeypath, uint32 desired_access,
518                      struct registry_key **pkey,
519                      enum winreg_CreateAction *paction)
520 {
521         struct registry_key *key = parent;
522         struct registry_key *create_parent;
523         TALLOC_CTX *mem_ctx;
524         char *path, *end;
525         WERROR err;
526
527         if (!(mem_ctx = talloc_new(ctx))) return WERR_NOMEM;
528
529         if (!(path = talloc_strdup(mem_ctx, subkeypath))) {
530                 err = WERR_NOMEM;
531                 goto done;
532         }
533
534         while ((end = strchr(path, '\\')) != NULL) {
535                 struct registry_key *tmp;
536                 enum winreg_CreateAction action;
537
538                 *end = '\0';
539
540                 err = reg_createkey(mem_ctx, key, path,
541                                     KEY_ENUMERATE_SUB_KEYS, &tmp, &action);
542                 if (!W_ERROR_IS_OK(err)) {
543                         goto done;
544                 }
545
546                 if (key != parent) {
547                         TALLOC_FREE(key);
548                 }
549
550                 key = tmp;
551                 path = end+1;
552         }
553
554         /*
555          * At this point, "path" contains the one-element subkey of "key". We
556          * can try to open it.
557          */
558
559         err = reg_openkey(ctx, key, path, desired_access, pkey);
560         if (W_ERROR_IS_OK(err)) {
561                 if (paction != NULL) {
562                         *paction = REG_OPENED_EXISTING_KEY;
563                 }
564                 goto done;
565         }
566
567         if (!W_ERROR_EQUAL(err, WERR_BADFILE)) {
568                 /*
569                  * Something but "notfound" has happened, so bail out
570                  */
571                 goto done;
572         }
573
574         /*
575          * We have to make a copy of the current key, as we opened it only
576          * with ENUM_SUBKEY access.
577          */
578
579         err = reg_openkey(mem_ctx, key, "", KEY_CREATE_SUB_KEY,
580                           &create_parent);
581         if (!W_ERROR_IS_OK(err)) {
582                 goto done;
583         }
584
585         /*
586          * Actually create the subkey
587          */
588
589         err = fill_subkey_cache(create_parent);
590         if (!W_ERROR_IS_OK(err)) goto done;
591
592         err = create_reg_subkey(key->key, path);
593         W_ERROR_NOT_OK_GOTO_DONE(err);
594
595         /*
596          * Now open the newly created key
597          */
598
599         err = reg_openkey(ctx, create_parent, path, desired_access, pkey);
600         if (W_ERROR_IS_OK(err) && (paction != NULL)) {
601                 *paction = REG_CREATED_NEW_KEY;
602         }
603
604  done:
605         TALLOC_FREE(mem_ctx);
606         return err;
607 }
608
609 WERROR reg_deletekey(struct registry_key *parent, const char *path)
610 {
611         WERROR err;
612         char *name, *end;
613         struct registry_key *tmp_key, *key;
614         TALLOC_CTX *mem_ctx = talloc_stackframe();
615
616         name = talloc_strdup(mem_ctx, path);
617         if (name == NULL) {
618                 err = WERR_NOMEM;
619                 goto done;
620         }
621
622         /* check if the key has subkeys */
623         err = reg_openkey(mem_ctx, parent, name, REG_KEY_READ, &key);
624         W_ERROR_NOT_OK_GOTO_DONE(err);
625
626         err = fill_subkey_cache(key);
627         W_ERROR_NOT_OK_GOTO_DONE(err);
628
629         if (regsubkey_ctr_numkeys(key->subkeys) > 0) {
630                 err = WERR_ACCESS_DENIED;
631                 goto done;
632         }
633
634         /* no subkeys - proceed with delete */
635         end = strrchr(name, '\\');
636         if (end != NULL) {
637                 *end = '\0';
638
639                 err = reg_openkey(mem_ctx, parent, name,
640                                   KEY_CREATE_SUB_KEY, &tmp_key);
641                 W_ERROR_NOT_OK_GOTO_DONE(err);
642
643                 parent = tmp_key;
644                 name = end+1;
645         }
646
647         if (name[0] == '\0') {
648                 err = WERR_INVALID_PARAM;
649                 goto done;
650         }
651
652         err = delete_reg_subkey(parent->key, name);
653
654 done:
655         TALLOC_FREE(mem_ctx);
656         return err;
657 }
658
659 WERROR reg_setvalue(struct registry_key *key, const char *name,
660                     const struct registry_value *val)
661 {
662         WERROR err;
663         int res;
664
665         if (!(key->key->access_granted & KEY_SET_VALUE)) {
666                 return WERR_ACCESS_DENIED;
667         }
668
669         if (!W_ERROR_IS_OK(err = fill_value_cache(key))) {
670                 return err;
671         }
672
673         res = regval_ctr_addvalue(key->values, name, val->type,
674                                   val->data.data, val->data.length);
675
676         if (res == 0) {
677                 TALLOC_FREE(key->values);
678                 return WERR_NOMEM;
679         }
680
681         if (!store_reg_values(key->key, key->values)) {
682                 TALLOC_FREE(key->values);
683                 return WERR_REG_IO_FAILURE;
684         }
685
686         return WERR_OK;
687 }
688
689 static WERROR reg_value_exists(struct registry_key *key, const char *name)
690 {
691         struct regval_blob *blob;
692
693         blob = regval_ctr_getvalue(key->values, name);
694
695         if (blob == NULL) {
696                 return WERR_BADFILE;
697         } else {
698                 return WERR_OK;
699         }
700 }
701
702 WERROR reg_deletevalue(struct registry_key *key, const char *name)
703 {
704         WERROR err;
705
706         if (!(key->key->access_granted & KEY_SET_VALUE)) {
707                 return WERR_ACCESS_DENIED;
708         }
709
710         if (!W_ERROR_IS_OK(err = fill_value_cache(key))) {
711                 return err;
712         }
713
714         err = reg_value_exists(key, name);
715         if (!W_ERROR_IS_OK(err)) {
716                 return err;
717         }
718
719         regval_ctr_delvalue(key->values, name);
720
721         if (!store_reg_values(key->key, key->values)) {
722                 TALLOC_FREE(key->values);
723                 return WERR_REG_IO_FAILURE;
724         }
725
726         return WERR_OK;
727 }
728
729 WERROR reg_getkeysecurity(TALLOC_CTX *mem_ctx, struct registry_key *key,
730                           struct security_descriptor **psecdesc)
731 {
732         return regkey_get_secdesc(mem_ctx, key->key, psecdesc);
733 }
734
735 WERROR reg_setkeysecurity(struct registry_key *key,
736                           struct security_descriptor *psecdesc)
737 {
738         return regkey_set_secdesc(key->key, psecdesc);
739 }
740
741 WERROR reg_getversion(uint32_t *version)
742 {
743         if (version == NULL) {
744                 return WERR_INVALID_PARAM;
745         }
746
747         *version = 0x00000005; /* Windows 2000 registry API version */
748         return WERR_OK;
749 }
750
751 /**********************************************************************
752  * Higher level utility functions
753  **********************************************************************/
754
755 WERROR reg_deleteallvalues(struct registry_key *key)
756 {
757         WERROR err;
758         int i;
759
760         if (!(key->key->access_granted & KEY_SET_VALUE)) {
761                 return WERR_ACCESS_DENIED;
762         }
763
764         if (!W_ERROR_IS_OK(err = fill_value_cache(key))) {
765                 return err;
766         }
767
768         for (i=0; i < regval_ctr_numvals(key->values); i++) {
769                 struct regval_blob *blob;
770                 blob = regval_ctr_specific_value(key->values, i);
771                 regval_ctr_delvalue(key->values, regval_name(blob));
772         }
773
774         if (!store_reg_values(key->key, key->values)) {
775                 TALLOC_FREE(key->values);
776                 return WERR_REG_IO_FAILURE;
777         }
778
779         return WERR_OK;
780 }
781
782 /*
783  * Utility function to delete a registry key with all its subkeys.
784  * Note that reg_deletekey returns ACCESS_DENIED when called on a
785  * key that has subkeys.
786  */
787 static WERROR reg_deletekey_recursive_internal(TALLOC_CTX *ctx,
788                                                struct registry_key *parent,
789                                                const char *path,
790                                                bool del_key)
791 {
792         TALLOC_CTX *mem_ctx = NULL;
793         WERROR werr = WERR_OK;
794         struct registry_key *key;
795         char *subkey_name = NULL;
796         uint32 i;
797
798         mem_ctx = talloc_new(ctx);
799         if (mem_ctx == NULL) {
800                 werr = WERR_NOMEM;
801                 goto done;
802         }
803
804         /* recurse through subkeys first */
805         werr = reg_openkey(mem_ctx, parent, path, REG_KEY_ALL, &key);
806         if (!W_ERROR_IS_OK(werr)) {
807                 goto done;
808         }
809
810         werr = fill_subkey_cache(key);
811         W_ERROR_NOT_OK_GOTO_DONE(werr);
812
813         /*
814          * loop from top to bottom for perfomance:
815          * this way, we need to rehash the regsubkey containers less
816          */
817         for (i = regsubkey_ctr_numkeys(key->subkeys) ; i > 0; i--) {
818                 subkey_name = regsubkey_ctr_specific_key(key->subkeys, i-1);
819                 werr = reg_deletekey_recursive_internal(mem_ctx, key,
820                                         subkey_name,
821                                         true);
822                 W_ERROR_NOT_OK_GOTO_DONE(werr);
823         }
824
825         if (del_key) {
826                 /* now delete the actual key */
827                 werr = reg_deletekey(parent, path);
828         }
829
830 done:
831         TALLOC_FREE(mem_ctx);
832         return werr;
833 }
834
835 static WERROR reg_deletekey_recursive_trans(TALLOC_CTX *ctx,
836                                             struct registry_key *parent,
837                                             const char *path,
838                                             bool del_key)
839 {
840         WERROR werr;
841
842         werr = regdb_transaction_start();
843         if (!W_ERROR_IS_OK(werr)) {
844                 DEBUG(0, ("reg_deletekey_recursive_trans: "
845                           "error starting transaction: %s\n",
846                           win_errstr(werr)));
847                 return werr;
848         }
849
850         werr = reg_deletekey_recursive_internal(ctx, parent, path, del_key);
851
852         if (!W_ERROR_IS_OK(werr)) {
853                 DEBUG(1, (__location__ " failed to delete key '%s' from key "
854                           "'%s': %s\n", path, parent->key->name,
855                           win_errstr(werr)));
856                 werr = regdb_transaction_cancel();
857                 if (!W_ERROR_IS_OK(werr)) {
858                         DEBUG(0, ("reg_deletekey_recursive_trans: "
859                                   "error cancelling transaction: %s\n",
860                                   win_errstr(werr)));
861                 }
862         } else {
863                 werr = regdb_transaction_commit();
864                 if (!W_ERROR_IS_OK(werr)) {
865                         DEBUG(0, ("reg_deletekey_recursive_trans: "
866                                   "error committing transaction: %s\n",
867                                   win_errstr(werr)));
868                 }
869         }
870
871         return werr;
872 }
873
874 WERROR reg_deletekey_recursive(TALLOC_CTX *ctx,
875                                struct registry_key *parent,
876                                const char *path)
877 {
878         return reg_deletekey_recursive_trans(ctx, parent, path, true);
879 }
880
881 WERROR reg_deletesubkeys_recursive(TALLOC_CTX *ctx,
882                                    struct registry_key *parent,
883                                    const char *path)
884 {
885         return reg_deletekey_recursive_trans(ctx, parent, path, false);
886 }
887