2 Unix SMB/CIFS implementation.
3 NT Domain Authentication SMB / MSRPC client
4 Copyright (C) Andrew Tridgell 1994-1997
5 Copyright (C) Luke Kenneth Casson Leighton 1996-1997
6 Copyright (C) Jeremy Allison 1999.
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program; if not, write to the Free Software
20 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
26 #define DBGC_CLASS DBGC_RPC_CLI
28 /****************************************************************************
29 do a SAMR query user groups
30 ****************************************************************************/
31 BOOL get_samr_query_usergroups(struct cli_state *cli,
32 POLICY_HND *pol_open_domain, uint32 user_rid,
33 uint32 *num_groups, DOM_GID *gid)
35 POLICY_HND pol_open_user;
36 if (pol_open_domain == NULL || num_groups == NULL || gid == NULL)
39 /* send open domain (on user sid) */
40 if (!do_samr_open_user(cli,
48 /* send user groups query */
49 if (!do_samr_query_usergroups(cli,
53 DEBUG(5,("do_samr_query_usergroups: error in query user groups\n"));
56 return do_samr_close(cli, &pol_open_user);
60 /* DOES NOT COMPILE WITH THE NEW SAMR PARSE CODE. JRA. */
62 /****************************************************************************
63 do a SAMR query user info
64 ****************************************************************************/
65 BOOL get_samr_query_userinfo(struct cli_state *cli,
66 POLICY_HND *pol_open_domain,
68 uint32 user_rid, SAM_USER_INFO_21 *usr)
70 POLICY_HND pol_open_user;
71 if (pol_open_domain == NULL || usr == NULL)
74 memset((char *)usr, '\0', sizeof(*usr));
76 /* send open domain (on user sid) */
77 if (!do_samr_open_user(cli,
85 /* send user info query */
86 if (!do_samr_query_userinfo(cli,
88 info_level, (void*)usr))
90 DEBUG(5,("do_samr_query_userinfo: error in query user info, level 0x%x\n",
94 return do_samr_close(cli, &pol_open_user);
98 /****************************************************************************
99 do a SAMR change user password command
100 ****************************************************************************/
101 BOOL do_samr_chgpasswd_user(struct cli_state *cli,
102 char *srv_name, char *user_name,
103 char nt_newpass[516], uchar nt_oldhash[16],
104 char lm_newpass[516], uchar lm_oldhash[16])
108 SAMR_Q_CHGPASSWD_USER q_e;
109 SAMR_R_CHGPASSWD_USER r_e;
111 /* create and send a MSRPC command with api SAMR_CHGPASSWD_USER */
113 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
114 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
116 DEBUG(4,("SAMR Change User Password. server:%s username:%s\n",
117 srv_name, user_name));
119 init_samr_q_chgpasswd_user(&q_e, srv_name, user_name,
120 nt_newpass, nt_oldhash,
121 lm_newpass, lm_oldhash);
123 /* turn parameters into data stream */
124 if(!samr_io_q_chgpasswd_user("", &q_e, &data, 0)) {
126 prs_mem_free(&rdata);
130 /* send the data on \PIPE\ */
131 if (!rpc_api_pipe_req(cli, SAMR_CHGPASSWD_USER, &data, &rdata)) {
133 prs_mem_free(&rdata);
139 if(!samr_io_r_chgpasswd_user("", &r_e, &rdata, 0)) {
140 prs_mem_free(&rdata);
144 if (r_e.status != 0) {
145 /* report error code */
146 DEBUG(0,("SAMR_R_CHGPASSWD_USER: %s\n", nt_errstr(r_e.status)));
147 prs_mem_free(&rdata);
151 prs_mem_free(&rdata);
158 /* CURRENTLY THIS DOESN'T COMPILE AND IS NOT USED ANYWHERE. JRA. */
160 /****************************************************************************
161 do a SAMR unknown 0x38 command
162 ****************************************************************************/
163 BOOL do_samr_unknown_38(struct cli_state *cli, char *srv_name)
168 SAMR_Q_UNKNOWN_38 q_e;
169 SAMR_R_UNKNOWN_38 r_e;
171 /* create and send a MSRPC command with api SAMR_ENUM_DOM_USERS */
173 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
174 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
176 DEBUG(4,("SAMR Unknown 38 server:%s\n", srv_name));
178 init_samr_q_unknown_38(&q_e, srv_name);
180 /* turn parameters into data stream */
181 if(!samr_io_q_unknown_38("", &q_e, &data, 0)) {
183 prs_mem_free(&rdata);
187 /* send the data on \PIPE\ */
188 if (!rpc_api_pipe_req(cli, SAMR_UNKNOWN_38, &data, &rdata)) {
190 prs_mem_free(&rdata);
196 if(!samr_io_r_unknown_38("", &r_e, &rdata, 0)) {
197 prs_mem_free(&rdata);
201 if (r_e.status != 0) {
202 /* report error code */
203 DEBUG(0,("SAMR_R_UNKNOWN_38: %s\n", nt_errstr(r_e.status)));
204 prs_mem_free(&rdata);
208 prs_mem_free(&rdata);
214 /****************************************************************************
215 do a SAMR unknown 0x8 command
216 ****************************************************************************/
217 BOOL do_samr_query_dom_info(struct cli_state *cli,
218 POLICY_HND *domain_pol, uint16 switch_value)
222 SAMR_Q_QUERY_DOMAIN_INFO q_e;
223 SAMR_R_QUERY_DOMAIN_INFO r_e;
225 if (domain_pol == NULL)
228 /* create and send a MSRPC command with api SAMR_ENUM_DOM_USERS */
230 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
231 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
233 DEBUG(4,("SAMR Unknown 8 switch:%d\n", switch_value));
235 /* store the parameters */
236 init_samr_q_query_dom_info(&q_e, domain_pol, switch_value);
238 /* turn parameters into data stream */
239 if(!samr_io_q_query_dom_info("", &q_e, &data, 0)) {
241 prs_mem_free(&rdata);
245 /* send the data on \PIPE\ */
246 if (!rpc_api_pipe_req(cli, SAMR_QUERY_DOMAIN_INFO, &data, &rdata)) {
248 prs_mem_free(&rdata);
254 if(!samr_io_r_query_dom_info("", &r_e, &rdata, 0)) {
255 prs_mem_free(&rdata);
259 if (r_e.status != 0) {
260 /* report error code */
261 DEBUG(0,("SAMR_R_QUERY_DOMAIN_INFO: %s\n", nt_errstr(r_e.status)));
262 prs_mem_free(&rdata);
266 prs_mem_free(&rdata);
273 /* CURRENTLY DOESN'T COMPILE WITH THE NEW SAMR PARSE CODE. JRA */
275 /****************************************************************************
276 do a SAMR enumerate users
277 ****************************************************************************/
278 BOOL do_samr_enum_dom_users(struct cli_state *cli,
279 POLICY_HND *pol, uint16 num_entries, uint16 unk_0,
280 uint16 acb_mask, uint16 unk_1, uint32 size,
281 struct acct_info **sam,
286 SAMR_Q_ENUM_DOM_USERS q_e;
287 SAMR_R_ENUM_DOM_USERS r_e;
291 if (pol == NULL || num_sam_users == NULL)
294 /* create and send a MSRPC command with api SAMR_ENUM_DOM_USERS */
296 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
297 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
299 DEBUG(4,("SAMR Enum SAM DB max size:%x\n", size));
301 /* store the parameters */
302 init_samr_q_enum_dom_users(&q_e, pol,
304 acb_mask, unk_1, size);
306 /* turn parameters into data stream */
307 if(!samr_io_q_enum_dom_users("", &q_e, &data, 0)) {
309 prs_mem_free(&rdata);
313 /* send the data on \PIPE\ */
314 if (!rpc_api_pipe_req(cli, SAMR_ENUM_DOM_USERS, &data, &rdata)) {
316 prs_mem_free(&rdata);
322 if(!samr_io_r_enum_dom_users("", &r_e, &rdata, 0)) {
323 prs_mem_free(&rdata);
327 if (r_e.status != 0) {
328 /* report error code */
329 DEBUG(0,("SAMR_R_ENUM_DOM_USERS: %s\n", nt_errstr(r_e.status)));
330 prs_mem_free(&rdata);
334 *num_sam_users = r_e.num_entries2;
335 if (*num_sam_users > MAX_SAM_ENTRIES) {
336 *num_sam_users = MAX_SAM_ENTRIES;
337 DEBUG(2,("do_samr_enum_dom_users: sam user entries limited to %d\n",
341 *sam = (struct acct_info*) malloc(sizeof(struct acct_info) * (*num_sam_users));
346 for (i = 0; i < *num_sam_users; i++) {
347 (*sam)[i].smb_userid = r_e.sam[i].rid;
348 if (r_e.sam[i].hdr_name.buffer) {
349 char *acct_name = dos_unistrn2(r_e.uni_acct_name[name_idx].buffer,
350 r_e.uni_acct_name[name_idx].uni_str_len);
351 fstrcpy((*sam)[i].acct_name, acct_name);
354 memset((char *)(*sam)[i].acct_name, '\0', sizeof((*sam)[i].acct_name));
357 DEBUG(5,("do_samr_enum_dom_users: idx: %4d rid: %8x acct: %s\n",
358 i, (*sam)[i].smb_userid, (*sam)[i].acct_name));
361 prs_mem_free(&rdata );
367 /****************************************************************************
369 ****************************************************************************/
370 BOOL do_samr_connect(struct cli_state *cli,
371 char *srv_name, uint32 unknown_0,
372 POLICY_HND *connect_pol)
379 if (srv_name == NULL || connect_pol == NULL)
382 /* create and send a MSRPC command with api SAMR_CONNECT */
384 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
385 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
387 DEBUG(4,("SAMR Open Policy server:%s undoc value:%x\n",
388 srv_name, unknown_0));
390 /* store the parameters */
391 init_samr_q_connect(&q_o, srv_name, unknown_0);
393 /* turn parameters into data stream */
394 if(!samr_io_q_connect("", &q_o, &data, 0)) {
396 prs_mem_free(&rdata);
400 /* send the data on \PIPE\ */
401 if (!rpc_api_pipe_req(cli, SAMR_CONNECT, &data, &rdata)) {
403 prs_mem_free(&rdata);
409 if(!samr_io_r_connect("", &r_o, &rdata, 0)) {
410 prs_mem_free(&rdata);
414 if (r_o.status != 0) {
415 /* report error code */
416 DEBUG(0,("SAMR_R_CONNECT: %s\n", nt_errstr(r_o.status)));
417 prs_mem_free(&rdata);
421 memcpy(connect_pol, &r_o.connect_pol, sizeof(r_o.connect_pol));
423 prs_mem_free(&rdata);
428 /****************************************************************************
430 ****************************************************************************/
431 BOOL do_samr_open_user(struct cli_state *cli,
432 POLICY_HND *pol, uint32 unk_0, uint32 rid,
433 POLICY_HND *user_pol)
437 SAMR_Q_OPEN_USER q_o;
438 SAMR_R_OPEN_USER r_o;
440 if (pol == NULL || user_pol == NULL)
443 /* create and send a MSRPC command with api SAMR_OPEN_USER */
445 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
446 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
448 DEBUG(4,("SAMR Open User. unk_0: %08x RID:%x\n",
451 /* store the parameters */
452 init_samr_q_open_user(&q_o, pol, unk_0, rid);
454 /* turn parameters into data stream */
455 if(!samr_io_q_open_user("", &q_o, &data, 0)) {
457 prs_mem_free(&rdata);
461 /* send the data on \PIPE\ */
462 if (!rpc_api_pipe_req(cli, SAMR_OPEN_USER, &data, &rdata)) {
464 prs_mem_free(&rdata);
470 if(!samr_io_r_open_user("", &r_o, &rdata, 0)) {
471 prs_mem_free(&rdata);
475 if (r_o.status != 0) {
476 /* report error code */
477 DEBUG(0,("SAMR_R_OPEN_USER: %s\n", nt_errstr(r_o.status)));
478 prs_mem_free(&rdata);
482 memcpy(user_pol, &r_o.user_pol, sizeof(r_o.user_pol));
484 prs_mem_free(&rdata);
489 /****************************************************************************
490 do a SAMR Open Domain
491 ****************************************************************************/
492 BOOL do_samr_open_domain(struct cli_state *cli,
493 POLICY_HND *connect_pol, uint32 rid, DOM_SID *sid,
494 POLICY_HND *domain_pol)
499 SAMR_Q_OPEN_DOMAIN q_o;
500 SAMR_R_OPEN_DOMAIN r_o;
502 if (connect_pol == NULL || sid == NULL || domain_pol == NULL)
505 /* create and send a MSRPC command with api SAMR_OPEN_DOMAIN */
507 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
508 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
510 sid_to_string(sid_str, sid);
511 DEBUG(4,("SAMR Open Domain. SID:%s RID:%x\n", sid_str, rid));
513 /* store the parameters */
514 init_samr_q_open_domain(&q_o, connect_pol, rid, sid);
516 /* turn parameters into data stream */
517 if(!samr_io_q_open_domain("", &q_o, &data, 0)) {
519 prs_mem_free(&rdata);
523 /* send the data on \PIPE\ */
524 if (!rpc_api_pipe_req(cli, SAMR_OPEN_DOMAIN, &data, &rdata)) {
526 prs_mem_free(&rdata);
532 if(!samr_io_r_open_domain("", &r_o, &rdata, 0)) {
533 prs_mem_free(&rdata);
537 if (r_o.status != 0) {
538 /* report error code */
539 DEBUG(0,("SAMR_R_OPEN_DOMAIN: %s\n", nt_errstr(r_o.status)));
540 prs_mem_free(&rdata);
544 memcpy(domain_pol, &r_o.domain_pol, sizeof(r_o.domain_pol));
546 prs_mem_free(&rdata);
553 /* CURRENTLY DOES NOT COMPILE AND IS NOT USED ANYWHERE. JRA. */
555 /****************************************************************************
556 do a SAMR Query Unknown 12
557 ****************************************************************************/
558 BOOL do_samr_query_unknown_12(struct cli_state *cli,
559 POLICY_HND *pol, uint32 rid, uint32 num_gids, uint32 *gids,
561 fstring als_names [MAX_LOOKUP_SIDS],
562 uint32 num_als_users[MAX_LOOKUP_SIDS])
566 SAMR_Q_LOOKUP_RIDS q_o;
567 SAMR_R_LOOKUP_RIDS r_o;
569 if (pol == NULL || rid == 0 || num_gids == 0 || gids == NULL ||
570 num_aliases == NULL || als_names == NULL || num_als_users == NULL )
573 /* create and send a MSRPC command with api SAMR_UNKNOWN_12 */
575 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
576 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
578 DEBUG(4,("SAMR Query Unknown 12.\n"));
580 /* store the parameters */
581 init_samr_q_lookup_rids(&q_o, pol, rid, num_gids, gids);
583 /* turn parameters into data stream */
584 if(!samr_io_q_lookup_rids("", &q_o, &data, 0)) {
586 prs_mem_free(&rdata);
590 /* send the data on \PIPE\ */
591 if (!rpc_api_pipe_req(cli, SAMR_LOOKUP_RIDS, &data, &rdata)) {
593 prs_mem_free(&rdata);
599 if(!samr_io_r_lookup_rids("", &r_o, &rdata, 0)) {
600 prs_mem_free(&rdata);
604 if (r_o.status != 0) {
605 /* report error code */
606 DEBUG(0,("SAMR_R_UNKNOWN_12: %s\n", nt_errstr(r_o.status)));
607 prs_mem_free(&rdata);
611 if (r_o.ptr_aliases != 0 && r_o.ptr_als_usrs != 0 &&
612 r_o.num_als_usrs1 == r_o.num_aliases1) {
615 *num_aliases = r_o.num_aliases1;
617 for (i = 0; i < r_o.num_aliases1; i++) {
618 fstrcpy(als_names[i], dos_unistrn2(r_o.uni_als_name[i].buffer,
619 r_o.uni_als_name[i].uni_str_len));
621 for (i = 0; i < r_o.num_als_usrs1; i++) {
622 num_als_users[i] = r_o.num_als_usrs[i];
624 } else if (r_o.ptr_aliases == 0 && r_o.ptr_als_usrs == 0) {
627 prs_mem_free(&rdata);
631 prs_mem_free(&rdata);
637 /****************************************************************************
638 do a SAMR Query User Groups
639 ****************************************************************************/
640 BOOL do_samr_query_usergroups(struct cli_state *cli,
641 POLICY_HND *pol, uint32 *num_groups, DOM_GID *gid)
645 SAMR_Q_QUERY_USERGROUPS q_o;
646 SAMR_R_QUERY_USERGROUPS r_o;
648 if (pol == NULL || gid == NULL || num_groups == 0)
651 /* create and send a MSRPC command with api SAMR_QUERY_USERGROUPS */
653 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
654 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
656 DEBUG(4,("SAMR Query User Groups.\n"));
658 /* store the parameters */
659 init_samr_q_query_usergroups(&q_o, pol);
661 /* turn parameters into data stream */
662 if(!samr_io_q_query_usergroups("", &q_o, &data, 0)) {
664 prs_mem_free(&rdata);
668 /* send the data on \PIPE\ */
669 if (!rpc_api_pipe_req(cli, SAMR_QUERY_USERGROUPS, &data, &rdata)) {
671 prs_mem_free(&rdata);
680 if(!samr_io_r_query_usergroups("", &r_o, &rdata, 0)) {
681 prs_mem_free(&rdata);
685 if (r_o.status != 0) {
686 /* report error code */
687 DEBUG(0,("SAMR_R_QUERY_USERGROUPS: %s\n", nt_errstr(r_o.status)));
688 prs_mem_free(&rdata);
692 *num_groups = r_o.num_entries;
694 prs_mem_free(&rdata);
701 /* CURRENTLY DOES NOT COMPILE WITH THE NEW SAMR PARSE CODE. JRA */
703 /****************************************************************************
704 do a SAMR Query User Info
705 ****************************************************************************/
706 BOOL do_samr_query_userinfo(struct cli_state *cli,
707 POLICY_HND *pol, uint16 switch_value, void* usr)
711 SAMR_Q_QUERY_USERINFO q_o;
712 SAMR_R_QUERY_USERINFO r_o;
714 if (pol == NULL || usr == NULL || switch_value == 0)
717 /* create and send a MSRPC command with api SAMR_QUERY_USERINFO */
719 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
720 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
722 DEBUG(4,("SAMR Query User Info. level: %d\n", switch_value));
724 /* store the parameters */
725 init_samr_q_query_userinfo(&q_o, pol, switch_value);
727 /* turn parameters into data stream */
728 if(!samr_io_q_query_userinfo("", &q_o, &data, 0)) {
730 prs_mem_free(&rdata);
734 /* send the data on \PIPE\ */
735 if (!rpc_api_pipe_req(cli, SAMR_QUERY_USERINFO, &data, &rdata)) {
737 prs_mem_free(&rdata);
746 if(!samr_io_r_query_userinfo("", &r_o, &rdata, 0)) {
747 prs_mem_free(&rdata);
751 if (r_o.status != 0) {
752 /* report error code */
753 DEBUG(0,("SAMR_R_QUERY_USERINFO: %s\n", nt_errstr(r_o.status)));
754 prs_mem_free(&rdata);
758 if (r_o.switch_value != switch_value) {
759 DEBUG(0,("SAMR_R_QUERY_USERINFO: received incorrect level %d\n",
761 prs_mem_free(&rdata);
766 prs_mem_free(&rdata);
770 prs_mem_free(&rdata);
777 /****************************************************************************
779 ****************************************************************************/
780 BOOL do_samr_close(struct cli_state *cli, POLICY_HND *hnd)
784 SAMR_Q_CLOSE_HND q_c;
785 SAMR_R_CLOSE_HND r_c;
790 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
791 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
793 /* create and send a MSRPC command with api SAMR_CLOSE_HND */
795 DEBUG(4,("SAMR Close\n"));
797 /* store the parameters */
798 init_samr_q_close_hnd(&q_c, hnd);
800 /* turn parameters into data stream */
801 if(!samr_io_q_close_hnd("", &q_c, &data, 0)) {
803 prs_mem_free(&rdata);
807 /* send the data on \PIPE\ */
808 if (!rpc_api_pipe_req(cli, SAMR_CLOSE_HND, &data, &rdata)) {
810 prs_mem_free(&rdata);
816 if(!samr_io_r_close_hnd("", &r_c, &rdata, 0)) {
817 prs_mem_free(&rdata);
821 if (r_c.status != 0) {
822 /* report error code */
823 DEBUG(0,("SAMR_CLOSE_HND: %s\n", nt_errstr(r_c.status)));
824 prs_mem_free(&rdata);
828 /* check that the returned policy handle is all zeros */
830 if (IVAL(&r_c.pol.data1,0) || IVAL(&r_c.pol.data2,0) || SVAL(&r_c.pol.data3,0) ||
831 SVAL(&r_c.pol.data4,0) || IVAL(r_c.pol.data5,0) || IVAL(r_c.pol.data5,4) ) {
832 DEBUG(0,("SAMR_CLOSE_HND: non-zero handle returned\n"));
833 prs_mem_free(&rdata);
837 prs_mem_free(&rdata);