2 Unix SMB/CIFS implementation.
5 Copyright (C) Tim Potter 2000
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "rpcclient.h"
24 static NTSTATUS cmd_netlogon_logon_ctrl2(struct rpc_pipe_client *cli,
25 TALLOC_CTX *mem_ctx, int argc,
28 uint32 query_level = 1;
29 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
32 fprintf(stderr, "Usage: %s\n", argv[0]);
36 result = rpccli_netlogon_logon_ctrl2(cli, mem_ctx, query_level);
38 if (!NT_STATUS_IS_OK(result))
47 static WERROR cmd_netlogon_getanydcname(struct rpc_pipe_client *cli,
48 TALLOC_CTX *mem_ctx, int argc,
51 const char *dcname = NULL;
57 fprintf(stderr, "Usage: %s domainname\n", argv[0]);
61 /* Make sure to wait for our DC's reply */
62 old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
64 status = rpccli_netr_GetAnyDCName(cli, mem_ctx,
69 cli_set_timeout(cli->cli, old_timeout);
71 if (!NT_STATUS_IS_OK(status)) {
72 return ntstatus_to_werror(status);
75 if (!W_ERROR_IS_OK(werr)) {
81 printf("%s\n", dcname);
86 static WERROR cmd_netlogon_getdcname(struct rpc_pipe_client *cli,
87 TALLOC_CTX *mem_ctx, int argc,
90 const char *dcname = NULL;
96 fprintf(stderr, "Usage: %s domainname\n", argv[0]);
100 /* Make sure to wait for our DC's reply */
101 old_timeout = cli_set_timeout(cli->cli, MAX(cli->cli->timeout,30000)); /* 30 seconds. */
103 status = rpccli_netr_GetDcName(cli, mem_ctx,
108 cli_set_timeout(cli->cli, old_timeout);
110 if (!NT_STATUS_IS_OK(status)) {
111 return ntstatus_to_werror(status);
114 if (!W_ERROR_IS_OK(werr)) {
118 /* Display results */
120 printf("%s\n", dcname);
125 static WERROR cmd_netlogon_dsr_getdcname(struct rpc_pipe_client *cli,
126 TALLOC_CTX *mem_ctx, int argc,
130 uint32 flags = DS_RETURN_DNS_NAME;
131 const char *server_name = cli->cli->desthost;
132 const char *domain_name;
133 struct GUID domain_guid = GUID_zero();
134 struct GUID site_guid = GUID_zero();
135 struct DS_DOMAIN_CONTROLLER_INFO *info = NULL;
138 fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
139 "[site_guid] [flags]\n", argv[0]);
144 domain_name = argv[1];
147 if (!NT_STATUS_IS_OK(GUID_from_string(argv[2], &domain_guid))) {
153 if (!NT_STATUS_IS_OK(GUID_from_string(argv[3], &site_guid))) {
159 sscanf(argv[4], "%x", &flags);
161 debug_dsdcinfo_flags(1,flags);
163 result = rpccli_netlogon_dsr_getdcname(cli, mem_ctx, server_name, domain_name,
164 &domain_guid, &site_guid, flags,
167 if (W_ERROR_IS_OK(result)) {
168 d_printf("DsGetDcName gave\n");
169 display_ds_domain_controller_info(mem_ctx, info);
173 printf("rpccli_netlogon_dsr_getdcname returned %s\n",
179 static WERROR cmd_netlogon_dsr_getdcnameex(struct rpc_pipe_client *cli,
180 TALLOC_CTX *mem_ctx, int argc,
185 uint32_t flags = DS_RETURN_DNS_NAME;
186 const char *server_name = cli->cli->desthost;
187 const char *domain_name;
188 const char *site_name = NULL;
189 struct GUID domain_guid = GUID_zero();
190 struct netr_DsRGetDCNameInfo *info = NULL;
193 fprintf(stderr, "Usage: %s [domain_name] [domain_guid] "
194 "[site_name] [flags]\n", argv[0]);
198 domain_name = argv[1];
201 if (!NT_STATUS_IS_OK(GUID_from_string(argv[2], &domain_guid))) {
211 sscanf(argv[4], "%x", &flags);
214 debug_dsdcinfo_flags(1,flags);
216 status = rpccli_netr_DsRGetDCNameEx(cli, mem_ctx,
224 if (!NT_STATUS_IS_OK(status)) {
225 return ntstatus_to_werror(status);
228 if (!W_ERROR_IS_OK(result)) {
232 d_printf("DsRGetDCNameEx gave %s\n",
233 NDR_PRINT_STRUCT_STRING(mem_ctx, netr_DsRGetDCNameInfo, info));
238 static WERROR cmd_netlogon_dsr_getdcnameex2(struct rpc_pipe_client *cli,
239 TALLOC_CTX *mem_ctx, int argc,
244 uint32_t flags = DS_RETURN_DNS_NAME;
245 const char *server_name = cli->cli->desthost;
246 const char *domain_name = NULL;
247 const char *client_account = NULL;
249 const char *site_name = NULL;
250 struct GUID domain_guid = GUID_zero();
251 struct netr_DsRGetDCNameInfo *info = NULL;
254 fprintf(stderr, "Usage: %s [client_account] [acb_mask] "
255 "[domain_name] [domain_guid] [site_name] "
256 "[flags]\n", argv[0]);
261 client_account = argv[1];
265 mask = atoi(argv[2]);
269 domain_name = argv[3];
273 if (!NT_STATUS_IS_OK(GUID_from_string(argv[4], &domain_guid))) {
283 sscanf(argv[6], "%x", &flags);
286 debug_dsdcinfo_flags(1,flags);
288 status = rpccli_netr_DsRGetDCNameEx2(cli, mem_ctx,
298 if (!NT_STATUS_IS_OK(status)) {
299 return ntstatus_to_werror(status);
302 if (!W_ERROR_IS_OK(result)) {
306 d_printf("DsRGetDCNameEx2 gave %s\n",
307 NDR_PRINT_STRUCT_STRING(mem_ctx, netr_DsRGetDCNameInfo, info));
313 static WERROR cmd_netlogon_dsr_getsitename(struct rpc_pipe_client *cli,
314 TALLOC_CTX *mem_ctx, int argc,
321 fprintf(stderr, "Usage: %s computername\n", argv[0]);
325 result = rpccli_netlogon_dsr_getsitename(cli, mem_ctx, argv[1], &sitename);
327 if (!W_ERROR_IS_OK(result)) {
328 printf("rpccli_netlogon_dsr_gesitename returned %s\n",
329 nt_errstr(werror_to_ntstatus(result)));
333 printf("Computer %s is on Site: %s\n", argv[1], sitename);
338 static NTSTATUS cmd_netlogon_logon_ctrl(struct rpc_pipe_client *cli,
339 TALLOC_CTX *mem_ctx, int argc,
343 uint32 query_level = 1;
345 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
348 fprintf(stderr, "Usage: %s\n", argv[0]);
353 result = cli_netlogon_logon_ctrl(cli, mem_ctx, query_level);
354 if (!NT_STATUS_IS_OK(result)) {
359 /* Display results */
364 /* Display sam synchronisation information */
366 static void display_sam_sync(uint32 num_deltas, SAM_DELTA_HDR *hdr_deltas,
367 SAM_DELTA_CTR *deltas)
372 for (i = 0; i < num_deltas; i++) {
373 switch (hdr_deltas[i].type) {
374 case SAM_DELTA_DOMAIN_INFO:
375 unistr2_to_ascii(name,
376 &deltas[i].domain_info.uni_dom_name,
378 printf("Domain: %s\n", name);
380 case SAM_DELTA_GROUP_INFO:
381 unistr2_to_ascii(name,
382 &deltas[i].group_info.uni_grp_name,
384 printf("Group: %s\n", name);
386 case SAM_DELTA_ACCOUNT_INFO:
387 unistr2_to_ascii(name,
388 &deltas[i].account_info.uni_acct_name,
390 printf("Account: %s\n", name);
392 case SAM_DELTA_ALIAS_INFO:
393 unistr2_to_ascii(name,
394 &deltas[i].alias_info.uni_als_name,
396 printf("Alias: %s\n", name);
398 case SAM_DELTA_ALIAS_MEM: {
399 SAM_ALIAS_MEM_INFO *alias = &deltas[i].als_mem_info;
401 for (j = 0; j < alias->num_members; j++) {
404 sid_to_fstring(sid_str, &alias->sids[j].sid);
406 printf("%s\n", sid_str);
410 case SAM_DELTA_GROUP_MEM: {
411 SAM_GROUP_MEM_INFO *group = &deltas[i].grp_mem_info;
413 for (j = 0; j < group->num_members; j++)
414 printf("rid 0x%x, attrib 0x%08x\n",
415 group->rids[j], group->attribs[j]);
418 case SAM_DELTA_MODIFIED_COUNT: {
419 SAM_DELTA_MOD_COUNT *mc = &deltas[i].mod_count;
421 printf("sam sequence update: 0x%04x\n", mc->seqnum);
425 printf("unknown delta type 0x%02x\n",
432 /* Perform sam synchronisation */
434 static NTSTATUS cmd_netlogon_sam_sync(struct rpc_pipe_client *cli,
435 TALLOC_CTX *mem_ctx, int argc,
438 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
439 uint32 database_id = 0, num_deltas;
440 SAM_DELTA_HDR *hdr_deltas;
441 SAM_DELTA_CTR *deltas;
444 fprintf(stderr, "Usage: %s [database_id]\n", argv[0]);
449 database_id = atoi(argv[1]);
451 /* Synchronise sam database */
453 result = rpccli_netlogon_sam_sync(cli, mem_ctx, database_id,
454 0, &num_deltas, &hdr_deltas, &deltas);
456 if (!NT_STATUS_IS_OK(result))
459 /* Display results */
461 display_sam_sync(num_deltas, hdr_deltas, deltas);
467 /* Perform sam delta synchronisation */
469 static NTSTATUS cmd_netlogon_sam_deltas(struct rpc_pipe_client *cli,
470 TALLOC_CTX *mem_ctx, int argc,
473 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
474 uint32 database_id, num_deltas, tmp;
475 SAM_DELTA_HDR *hdr_deltas;
476 SAM_DELTA_CTR *deltas;
480 fprintf(stderr, "Usage: %s database_id seqnum\n", argv[0]);
484 database_id = atoi(argv[1]);
487 seqnum = tmp & 0xffff;
489 result = rpccli_netlogon_sam_deltas(cli, mem_ctx, database_id,
491 &hdr_deltas, &deltas);
493 if (!NT_STATUS_IS_OK(result))
496 /* Display results */
498 display_sam_sync(num_deltas, hdr_deltas, deltas);
504 /* Log on a domain user */
506 static NTSTATUS cmd_netlogon_sam_logon(struct rpc_pipe_client *cli,
507 TALLOC_CTX *mem_ctx, int argc,
510 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
511 int logon_type = NET_LOGON_TYPE;
512 const char *username, *password;
514 uint32 logon_param = 0;
515 const char *workstation = NULL;
517 /* Check arguments */
519 if (argc < 3 || argc > 7) {
520 fprintf(stderr, "Usage: samlogon <username> <password> [workstation]"
521 "[logon_type (1 or 2)] [auth level (2 or 3)] [logon_parameter]\n");
529 workstation = argv[3];
532 sscanf(argv[4], "%i", &logon_type);
535 sscanf(argv[5], "%i", &auth_level);
538 sscanf(argv[6], "%x", &logon_param);
540 /* Perform the sam logon */
542 result = rpccli_netlogon_sam_logon(cli, mem_ctx, logon_param, lp_workgroup(), username, password, workstation, logon_type);
544 if (!NT_STATUS_IS_OK(result))
551 /* Change the trust account password */
553 static NTSTATUS cmd_netlogon_change_trust_pw(struct rpc_pipe_client *cli,
554 TALLOC_CTX *mem_ctx, int argc,
557 NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
559 /* Check arguments */
562 fprintf(stderr, "Usage: change_trust_pw");
566 /* Perform the sam logon */
568 result = trust_pw_find_change_and_store_it(cli, mem_ctx,
571 if (!NT_STATUS_IS_OK(result))
578 static WERROR cmd_netlogon_gettrustrid(struct rpc_pipe_client *cli,
579 TALLOC_CTX *mem_ctx, int argc,
582 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
583 WERROR werr = WERR_GENERAL_FAILURE;
584 const char *server_name = cli->cli->desthost;
585 const char *domain_name = lp_workgroup();
588 if (argc < 1 || argc > 3) {
589 fprintf(stderr, "Usage: %s <server_name> <domain_name>\n",
595 server_name = argv[1];
599 domain_name = argv[2];
602 status = rpccli_netr_LogonGetTrustRid(cli, mem_ctx,
607 if (!NT_STATUS_IS_OK(status)) {
611 if (W_ERROR_IS_OK(werr)) {
612 printf("Rid: %d\n", rid);
618 static WERROR cmd_netlogon_dsr_enumtrustdom(struct rpc_pipe_client *cli,
619 TALLOC_CTX *mem_ctx, int argc,
622 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
623 WERROR werr = WERR_GENERAL_FAILURE;
624 const char *server_name = cli->cli->desthost;
625 uint32_t trust_flags = NETR_TRUST_FLAG_IN_FOREST;
626 struct netr_DomainTrustList trusts;
628 if (argc < 1 || argc > 3) {
629 fprintf(stderr, "Usage: %s <server_name> <trust_flags>\n",
635 server_name = argv[1];
639 sscanf(argv[2], "%x", &trust_flags);
642 status = rpccli_netr_DsrEnumerateDomainTrusts(cli, mem_ctx,
647 if (!NT_STATUS_IS_OK(status)) {
651 if (W_ERROR_IS_OK(werr)) {
654 printf("%d domains returned\n", trusts.count);
656 for (i=0; i<trusts.count; i++ ) {
658 trusts.array[i].dns_name,
659 trusts.array[i].netbios_name);
666 static WERROR cmd_netlogon_deregisterdnsrecords(struct rpc_pipe_client *cli,
667 TALLOC_CTX *mem_ctx, int argc,
670 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
671 WERROR werr = WERR_GENERAL_FAILURE;
672 const char *server_name = cli->cli->desthost;
673 const char *domain = lp_workgroup();
674 const char *dns_host = NULL;
676 if (argc < 1 || argc > 4) {
677 fprintf(stderr, "Usage: %s <server_name> <domain_name> "
678 "<dns_host>\n", argv[0]);
683 server_name = argv[1];
694 status = rpccli_netr_DsrDeregisterDNSHostRecords(cli, mem_ctx,
701 if (!NT_STATUS_IS_OK(status)) {
705 if (W_ERROR_IS_OK(werr)) {
712 static WERROR cmd_netlogon_dsr_getforesttrustinfo(struct rpc_pipe_client *cli,
713 TALLOC_CTX *mem_ctx, int argc,
716 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
717 WERROR werr = WERR_GENERAL_FAILURE;
718 const char *server_name = cli->cli->desthost;
719 const char *trusted_domain_name = NULL;
720 struct lsa_ForestTrustInformation *info = NULL;
723 if (argc < 1 || argc > 4) {
724 fprintf(stderr, "Usage: %s <server_name> <trusted_domain_name> "
725 "<flags>\n", argv[0]);
730 server_name = argv[1];
734 trusted_domain_name = argv[2];
738 sscanf(argv[3], "%x", &flags);
741 status = rpccli_netr_DsRGetForestTrustInformation(cli, mem_ctx,
747 if (!NT_STATUS_IS_OK(status)) {
751 if (W_ERROR_IS_OK(werr)) {
758 static WERROR cmd_netlogon_enumtrusteddomains(struct rpc_pipe_client *cli,
759 TALLOC_CTX *mem_ctx, int argc,
762 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
763 WERROR werr = WERR_GENERAL_FAILURE;
764 const char *server_name = cli->cli->desthost;
765 struct netr_Blob blob;
768 if (argc < 1 || argc > 3) {
769 fprintf(stderr, "Usage: %s <server_name>\n", argv[0]);
774 server_name = argv[1];
777 status = rpccli_netr_NetrEnumerateTrustedDomains(cli, mem_ctx,
781 if (!NT_STATUS_IS_OK(status)) {
785 if (W_ERROR_IS_OK(werr)) {
787 dump_data(1, blob.data, blob.length);
793 static WERROR cmd_netlogon_enumtrusteddomainsex(struct rpc_pipe_client *cli,
794 TALLOC_CTX *mem_ctx, int argc,
797 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
798 WERROR werr = WERR_GENERAL_FAILURE;
799 const char *server_name = cli->cli->desthost;
800 struct netr_DomainTrustList list;
802 if (argc < 1 || argc > 3) {
803 fprintf(stderr, "Usage: %s <server_name>\n", argv[0]);
808 server_name = argv[1];
811 status = rpccli_netr_NetrEnumerateTrustedDomainsEx(cli, mem_ctx,
815 if (!NT_STATUS_IS_OK(status)) {
819 if (W_ERROR_IS_OK(werr)) {
828 /* List of commands exported by this module */
830 struct cmd_set netlogon_commands[] = {
834 { "logonctrl2", RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl2, NULL, PI_NETLOGON, NULL, "Logon Control 2", "" },
835 { "getanydcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getanydcname, PI_NETLOGON, NULL, "Get trusted DC name", "" },
836 { "getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_getdcname, PI_NETLOGON, NULL, "Get trusted PDC name", "" },
837 { "dsr_getdcname", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcname, PI_NETLOGON, NULL, "Get trusted DC name", "" },
838 { "dsr_getdcnameex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex, PI_NETLOGON, NULL, "Get trusted DC name", "" },
839 { "dsr_getdcnameex2", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getdcnameex2, PI_NETLOGON, NULL, "Get trusted DC name", "" },
840 { "dsr_getsitename", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getsitename, PI_NETLOGON, NULL, "Get sitename", "" },
841 { "dsr_getforesttrustinfo", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_getforesttrustinfo, PI_NETLOGON, NULL, "Get Forest Trust Info", "" },
842 { "logonctrl", RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl, NULL, PI_NETLOGON, NULL, "Logon Control", "" },
843 { "samsync", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_sync, NULL, PI_NETLOGON, NULL, "Sam Synchronisation", "" },
844 { "samdeltas", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_deltas, NULL, PI_NETLOGON, NULL, "Query Sam Deltas", "" },
845 { "samlogon", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_logon, NULL, PI_NETLOGON, NULL, "Sam Logon", "" },
846 { "change_trust_pw", RPC_RTYPE_NTSTATUS, cmd_netlogon_change_trust_pw, NULL, PI_NETLOGON, NULL, "Change Trust Account Password", "" },
847 { "gettrustrid", RPC_RTYPE_WERROR, NULL, cmd_netlogon_gettrustrid, PI_NETLOGON, NULL, "Get trust rid", "" },
848 { "dsr_enumtrustdom", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_enumtrustdom, PI_NETLOGON, NULL, "Enumerate trusted domains", "" },
849 { "dsenumdomtrusts", RPC_RTYPE_WERROR, NULL, cmd_netlogon_dsr_enumtrustdom, PI_NETLOGON, NULL, "Enumerate all trusted domains in an AD forest", "" },
850 { "deregisterdnsrecords", RPC_RTYPE_WERROR, NULL, cmd_netlogon_deregisterdnsrecords, PI_NETLOGON, NULL, "Deregister DNS records", "" },
851 { "netrenumtrusteddomains", RPC_RTYPE_WERROR, NULL, cmd_netlogon_enumtrusteddomains, PI_NETLOGON, NULL, "Enumerate trusted domains", "" },
852 { "netrenumtrusteddomainsex", RPC_RTYPE_WERROR, NULL, cmd_netlogon_enumtrusteddomainsex, PI_NETLOGON, NULL, "Enumerate trusted domains", "" },