s3-secrets: only include secrets.h when needed.
[nivanova/samba-autobuild/.git] / source3 / lib / netapi / joindomain.c
index 468360f1467271ae5ac76212b392a9b8003f8bf9..13a06c7136c97b7d8637802648c88195f73d0809 100644 (file)
  */
 
 #include "includes.h"
-
+#include "ads.h"
 #include "librpc/gen_ndr/libnetapi.h"
 #include "lib/netapi/netapi.h"
+#include "lib/netapi/netapi_private.h"
 #include "lib/netapi/libnetapi.h"
-#include "libnet/libnet.h"
+#include "librpc/gen_ndr/libnet_join.h"
+#include "libnet/libnet_join.h"
+#include "libcli/auth/libcli_auth.h"
+#include "../librpc/gen_ndr/cli_wkssvc.h"
+#include "secrets.h"
 
 /****************************************************************
 ****************************************************************/
@@ -46,18 +51,20 @@ WERROR NetJoinDomain_l(struct libnetapi_ctx *mem_ctx,
        if (r->in.join_flags & WKSSVC_JOIN_FLAGS_JOIN_TYPE) {
                NTSTATUS status;
                struct netr_DsRGetDCNameInfo *info = NULL;
+               const char *dc = NULL;
                uint32_t flags = DS_DIRECTORY_SERVICE_REQUIRED |
                                 DS_WRITABLE_REQUIRED |
                                 DS_RETURN_DNS_NAME;
-               status = dsgetdcname(mem_ctx, r->in.domain,
+               status = dsgetdcname(mem_ctx, NULL, r->in.domain,
                                     NULL, NULL, flags, &info);
                if (!NT_STATUS_IS_OK(status)) {
                        libnetapi_set_error_string(mem_ctx,
                                "%s", get_friendly_nt_error_msg(status));
                        return ntstatus_to_werror(status);
                }
-               j->in.dc_name = talloc_strdup(mem_ctx,
-                                             info->dc_unc);
+
+               dc = strip_hostname(info->dc_unc);
+               j->in.dc_name = talloc_strdup(mem_ctx, dc);
                W_ERROR_HAVE_NO_MEMORY(j->in.dc_name);
        }
 
@@ -95,41 +102,27 @@ WERROR NetJoinDomain_l(struct libnetapi_ctx *mem_ctx,
 WERROR NetJoinDomain_r(struct libnetapi_ctx *ctx,
                       struct NetJoinDomain *r)
 {
-       struct cli_state *cli = NULL;
        struct rpc_pipe_client *pipe_cli = NULL;
        struct wkssvc_PasswordBuffer *encrypted_password = NULL;
        NTSTATUS status;
        WERROR werr;
        unsigned int old_timeout = 0;
 
-       status = cli_full_connection(&cli, NULL, r->in.server,
-                                    NULL, 0,
-                                    "IPC$", "IPC",
-                                    ctx->username,
-                                    ctx->workgroup,
-                                    ctx->password,
-                                    0, Undefined, NULL);
-
-       if (!NT_STATUS_IS_OK(status)) {
-               werr = ntstatus_to_werror(status);
-               goto done;
-       }
-
-       pipe_cli = cli_rpc_pipe_open_noauth(cli, PI_WKSSVC,
-                                           &status);
-       if (!pipe_cli) {
-               werr = ntstatus_to_werror(status);
+       werr = libnetapi_open_pipe(ctx, r->in.server,
+                                  &ndr_table_wkssvc.syntax_id,
+                                  &pipe_cli);
+       if (!W_ERROR_IS_OK(werr)) {
                goto done;
        }
 
        if (r->in.password) {
                encode_wkssvc_join_password_buffer(ctx,
                                                   r->in.password,
-                                                  &cli->user_session_key,
+                                                  &pipe_cli->auth->user_session_key,
                                                   &encrypted_password);
        }
 
-       old_timeout = cli_set_timeout(cli, 600000);
+       old_timeout = rpccli_set_timeout(pipe_cli, 600000);
 
        status = rpccli_wkssvc_NetrJoinDomain2(pipe_cli, ctx,
                                               r->in.server,
@@ -145,11 +138,8 @@ WERROR NetJoinDomain_r(struct libnetapi_ctx *ctx,
        }
 
  done:
-       if (cli) {
-               if (old_timeout) {
-                       cli_set_timeout(cli, old_timeout);
-               }
-               cli_shutdown(cli);
+       if (pipe_cli && old_timeout) {
+               rpccli_set_timeout(pipe_cli, old_timeout);
        }
 
        return werr;
@@ -184,10 +174,11 @@ WERROR NetUnjoinDomain_l(struct libnetapi_ctx *mem_ctx,
        } else {
                NTSTATUS status;
                struct netr_DsRGetDCNameInfo *info = NULL;
+               const char *dc = NULL;
                uint32_t flags = DS_DIRECTORY_SERVICE_REQUIRED |
                                 DS_WRITABLE_REQUIRED |
                                 DS_RETURN_DNS_NAME;
-               status = dsgetdcname(mem_ctx, domain,
+               status = dsgetdcname(mem_ctx, NULL, domain,
                                     NULL, NULL, flags, &info);
                if (!NT_STATUS_IS_OK(status)) {
                        libnetapi_set_error_string(mem_ctx,
@@ -196,8 +187,9 @@ WERROR NetUnjoinDomain_l(struct libnetapi_ctx *mem_ctx,
                                get_friendly_nt_error_msg(status));
                        return ntstatus_to_werror(status);
                }
-               u->in.dc_name = talloc_strdup(mem_ctx,
-                                             info->dc_unc);
+
+               dc = strip_hostname(info->dc_unc);
+               u->in.dc_name = talloc_strdup(mem_ctx, dc);
                W_ERROR_HAVE_NO_MEMORY(u->in.dc_name);
 
                u->in.domain_name = domain;
@@ -215,6 +207,7 @@ WERROR NetUnjoinDomain_l(struct libnetapi_ctx *mem_ctx,
 
        u->in.domain_name = domain;
        u->in.unjoin_flags = r->in.unjoin_flags;
+       u->in.delete_machine_account = false;
        u->in.modify_config = true;
        u->in.debug = true;
 
@@ -235,41 +228,27 @@ WERROR NetUnjoinDomain_l(struct libnetapi_ctx *mem_ctx,
 WERROR NetUnjoinDomain_r(struct libnetapi_ctx *ctx,
                         struct NetUnjoinDomain *r)
 {
-       struct cli_state *cli = NULL;
        struct rpc_pipe_client *pipe_cli = NULL;
        struct wkssvc_PasswordBuffer *encrypted_password = NULL;
        NTSTATUS status;
        WERROR werr;
        unsigned int old_timeout = 0;
 
-       status = cli_full_connection(&cli, NULL, r->in.server_name,
-                                    NULL, 0,
-                                    "IPC$", "IPC",
-                                    ctx->username,
-                                    ctx->workgroup,
-                                    ctx->password,
-                                    0, Undefined, NULL);
-
-       if (!NT_STATUS_IS_OK(status)) {
-               werr = ntstatus_to_werror(status);
-               goto done;
-       }
-
-       pipe_cli = cli_rpc_pipe_open_noauth(cli, PI_WKSSVC,
-                                           &status);
-       if (!pipe_cli) {
-               werr = ntstatus_to_werror(status);
+       werr = libnetapi_open_pipe(ctx, r->in.server_name,
+                                  &ndr_table_wkssvc.syntax_id,
+                                  &pipe_cli);
+       if (!W_ERROR_IS_OK(werr)) {
                goto done;
        }
 
        if (r->in.password) {
                encode_wkssvc_join_password_buffer(ctx,
                                                   r->in.password,
-                                                  &cli->user_session_key,
+                                                  &pipe_cli->auth->user_session_key,
                                                   &encrypted_password);
        }
 
-       old_timeout = cli_set_timeout(cli, 60000);
+       old_timeout = rpccli_set_timeout(pipe_cli, 60000);
 
        status = rpccli_wkssvc_NetrUnjoinDomain2(pipe_cli, ctx,
                                                 r->in.server_name,
@@ -283,9 +262,8 @@ WERROR NetUnjoinDomain_r(struct libnetapi_ctx *ctx,
        }
 
  done:
-       if (cli) {
-               cli_set_timeout(cli, old_timeout);
-               cli_shutdown(cli);
+       if (pipe_cli && old_timeout) {
+               rpccli_set_timeout(pipe_cli, old_timeout);
        }
 
        return werr;
@@ -297,34 +275,21 @@ WERROR NetUnjoinDomain_r(struct libnetapi_ctx *ctx,
 WERROR NetGetJoinInformation_r(struct libnetapi_ctx *ctx,
                               struct NetGetJoinInformation *r)
 {
-       struct cli_state *cli = NULL;
        struct rpc_pipe_client *pipe_cli = NULL;
        NTSTATUS status;
        WERROR werr;
+       const char *buffer = NULL;
 
-       status = cli_full_connection(&cli, NULL, r->in.server_name,
-                                    NULL, 0,
-                                    "IPC$", "IPC",
-                                    ctx->username,
-                                    ctx->workgroup,
-                                    ctx->password,
-                                    0, Undefined, NULL);
-
-       if (!NT_STATUS_IS_OK(status)) {
-               werr = ntstatus_to_werror(status);
-               goto done;
-       }
-
-       pipe_cli = cli_rpc_pipe_open_noauth(cli, PI_WKSSVC,
-                                           &status);
-       if (!pipe_cli) {
-               werr = ntstatus_to_werror(status);
+       werr = libnetapi_open_pipe(ctx, r->in.server_name,
+                                  &ndr_table_wkssvc.syntax_id,
+                                  &pipe_cli);
+       if (!W_ERROR_IS_OK(werr)) {
                goto done;
        }
 
        status = rpccli_wkssvc_NetrGetJoinInformation(pipe_cli, ctx,
                                                      r->in.server_name,
-                                                     r->out.name_buffer,
+                                                     &buffer,
                                                      (enum wkssvc_NetJoinStatus *)r->out.name_type,
                                                      &werr);
        if (!NT_STATUS_IS_OK(status)) {
@@ -332,11 +297,10 @@ WERROR NetGetJoinInformation_r(struct libnetapi_ctx *ctx,
                goto done;
        }
 
- done:
-       if (cli) {
-               cli_shutdown(cli);
-       }
+       *r->out.name_buffer = talloc_strdup(ctx, buffer);
+       W_ERROR_HAVE_NO_MEMORY(*r->out.name_buffer);
 
+ done:
        return werr;
 }
 
@@ -381,10 +345,11 @@ WERROR NetGetJoinableOUs_l(struct libnetapi_ctx *ctx,
        ADS_STATUS ads_status;
        ADS_STRUCT *ads = NULL;
        struct netr_DsRGetDCNameInfo *info = NULL;
+       const char *dc = NULL;
        uint32_t flags = DS_DIRECTORY_SERVICE_REQUIRED |
                         DS_RETURN_DNS_NAME;
 
-       status = dsgetdcname(ctx, r->in.domain,
+       status = dsgetdcname(ctx, NULL, r->in.domain,
                             NULL, NULL, flags, &info);
        if (!NT_STATUS_IS_OK(status)) {
                libnetapi_set_error_string(ctx, "%s",
@@ -392,7 +357,9 @@ WERROR NetGetJoinableOUs_l(struct libnetapi_ctx *ctx,
                return ntstatus_to_werror(status);
        }
 
-       ads = ads_init(r->in.domain, r->in.domain, info->dc_unc);
+       dc = strip_hostname(info->dc_unc);
+
+       ads = ads_init(info->domain_name, info->domain_name, dc);
        if (!ads) {
                return WERR_GENERAL_FAILURE;
        }
@@ -411,7 +378,7 @@ WERROR NetGetJoinableOUs_l(struct libnetapi_ctx *ctx,
                ads->auth.password = SMB_STRDUP(ctx->password);
        }
 
-       ads_status = ads_connect(ads);
+       ads_status = ads_connect_user_creds(ads);
        if (!ADS_ERR_OK(ads_status)) {
                ads_destroy(&ads);
                return WERR_DEFAULT_JOIN_REQUIRED;
@@ -438,36 +405,22 @@ WERROR NetGetJoinableOUs_l(struct libnetapi_ctx *ctx,
 WERROR NetGetJoinableOUs_r(struct libnetapi_ctx *ctx,
                           struct NetGetJoinableOUs *r)
 {
-       struct cli_state *cli = NULL;
        struct rpc_pipe_client *pipe_cli = NULL;
        struct wkssvc_PasswordBuffer *encrypted_password = NULL;
        NTSTATUS status;
        WERROR werr;
 
-       status = cli_full_connection(&cli, NULL, r->in.server_name,
-                                    NULL, 0,
-                                    "IPC$", "IPC",
-                                    ctx->username,
-                                    ctx->workgroup,
-                                    ctx->password,
-                                    0, Undefined, NULL);
-
-       if (!NT_STATUS_IS_OK(status)) {
-               werr = ntstatus_to_werror(status);
-               goto done;
-       }
-
-       pipe_cli = cli_rpc_pipe_open_noauth(cli, PI_WKSSVC,
-                                           &status);
-       if (!pipe_cli) {
-               werr = ntstatus_to_werror(status);
+       werr = libnetapi_open_pipe(ctx, r->in.server_name,
+                                  &ndr_table_wkssvc.syntax_id,
+                                  &pipe_cli);
+       if (!W_ERROR_IS_OK(werr)) {
                goto done;
        }
 
        if (r->in.password) {
                encode_wkssvc_join_password_buffer(ctx,
                                                   r->in.password,
-                                                  &cli->user_session_key,
+                                                  &pipe_cli->auth->user_session_key,
                                                   &encrypted_password);
        }
 
@@ -485,9 +438,55 @@ WERROR NetGetJoinableOUs_r(struct libnetapi_ctx *ctx,
        }
 
  done:
-       if (cli) {
-               cli_shutdown(cli);
+       return werr;
+}
+
+/****************************************************************
+****************************************************************/
+
+WERROR NetRenameMachineInDomain_r(struct libnetapi_ctx *ctx,
+                                 struct NetRenameMachineInDomain *r)
+{
+       struct rpc_pipe_client *pipe_cli = NULL;
+       struct wkssvc_PasswordBuffer *encrypted_password = NULL;
+       NTSTATUS status;
+       WERROR werr;
+
+       werr = libnetapi_open_pipe(ctx, r->in.server_name,
+                                  &ndr_table_wkssvc.syntax_id,
+                                  &pipe_cli);
+       if (!W_ERROR_IS_OK(werr)) {
+               goto done;
        }
 
+       if (r->in.password) {
+               encode_wkssvc_join_password_buffer(ctx,
+                                                  r->in.password,
+                                                  &pipe_cli->auth->user_session_key,
+                                                  &encrypted_password);
+       }
+
+       status = rpccli_wkssvc_NetrRenameMachineInDomain2(pipe_cli, ctx,
+                                                         r->in.server_name,
+                                                         r->in.new_machine_name,
+                                                         r->in.account,
+                                                         encrypted_password,
+                                                         r->in.rename_options,
+                                                         &werr);
+       if (!NT_STATUS_IS_OK(status)) {
+               werr = ntstatus_to_werror(status);
+               goto done;
+       }
+
+ done:
        return werr;
 }
+
+/****************************************************************
+****************************************************************/
+
+WERROR NetRenameMachineInDomain_l(struct libnetapi_ctx *ctx,
+                                 struct NetRenameMachineInDomain *r)
+{
+       LIBNETAPI_REDIRECT_TO_LOCALHOST(ctx, r, NetRenameMachineInDomain);
+}