replaced stdio in many parts of samba with a XFILE. XFILE is a cut-down
[tprouty/samba.git] / source / web / swat.c
index ae5a8006ce804ef770988c9d8348a23009174cdb..8551c5e907ed8b58440dc5778abb40296a3233bb 100644 (file)
 #define GLOBALS_SNUM -1
 
 static pstring servicesf = CONFIGFILE;
-
+static BOOL demo_mode = False;
+static BOOL have_write_access = False;
+static BOOL have_read_access = False;
+static int iNumNonAutoPrintServices = 0;
+
+/*
+ * Password Management Globals
+ */
+#define SWAT_USER "username"
+#define OLD_PSWD "old_passwd"
+#define NEW_PSWD "new_passwd"
+#define NEW2_PSWD "new2_passwd"
+#define CHG_S_PASSWD_FLAG "chg_s_passwd_flag"
+#define CHG_R_PASSWD_FLAG "chg_r_passwd_flag"
+#define ADD_USER_FLAG "add_user_flag"
+#define DELETE_USER_FLAG "delete_user_flag"
+#define DISABLE_USER_FLAG "disable_user_flag"
+#define ENABLE_USER_FLAG "enable_user_flag"
+#define RHOST "remote_host"
 
 /* we need these because we link to locking*.o */
- void become_root(BOOL save_dir) {}
- void unbecome_root(BOOL restore_dir) {}
-connection_struct Connections[MAX_CONNECTIONS];
-files_struct Files[MAX_OPEN_FILES];
-struct current_user current_user;
+ void become_root(void) {}
+ void unbecome_root(void) {}
 
+/****************************************************************************
+****************************************************************************/
+static int enum_index(int value, struct enum_list *enumlist)
+{
+       int i;
+       for (i=0;enumlist[i].name;i++)
+               if (value == enumlist[i].value) break;
+       return(i);
+}
 
-/* start the page with standard stuff */
-static void print_header(void)
+static char *fix_backslash(char *str)
 {
-       printf("Expires: 0\r\n");
-       printf("Content-type: text/html\r\n\r\n");
-       printf("<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2//EN\">\n");
-       printf("<HTML>\n<HEAD>\n<TITLE>Samba Web Administration Tool</TITLE>\n</HEAD>\n<BODY background=\"%simages/background.jpg\">\n\n", cgi_rooturl());
+       static char newstring[1024];
+       char *p = newstring;
+
+        while (*str) {
+                if (*str == '\\') {*p++ = '\\';*p++ = '\\';}
+                else *p++ = *str;
+                ++str;
+        }
+       *p = '\0';
+       return newstring;
 }
 
+static char *stripspace(char *str)
+{
+static char newstring[1024];
+char *p = newstring;
 
-/* finish off the page */
-static void print_footer(void)
+        while (*str) {
+                if (*str != ' ') *p++ = *str;
+                ++str;
+        }
+       *p = '\0';
+       return newstring;
+}
+
+static char *make_parm_name(char *label)
 {
-       printf("\n</BODY>\n</HTML>\n");
+       static char parmname[1024];
+       char *p = parmname;
+
+       while (*label) {
+               if (*label == ' ') *p++ = '_';
+               else *p++ = *label;
+               ++label;
+       }
+       *p = '\0';
+       return parmname;
 }
 
-/* include a lump of html in a page */
-static void include_html(char *fname)
+/****************************************************************************
+  include a lump of html in a page 
+****************************************************************************/
+static int include_html(char *fname)
 {
-       FILE *f = fopen(fname,"r");
+       FILE *f = sys_fopen(fname,"r");
        char buf[1024];
        int ret;
 
        if (!f) {
-               printf("ERROR: Can't open %s\n", fname);
-               return;
+               d_printf("ERROR: Can't open %s\n", fname);
+               return 0;
        }
 
        while (!feof(f)) {
@@ -74,72 +125,149 @@ static void include_html(char *fname)
        }
 
        fclose(f);
+       return 1;
 }
 
+/****************************************************************************
+  start the page with standard stuff 
+****************************************************************************/
+static void print_header(void)
+{
+       if (!cgi_waspost()) {
+               d_printf("Expires: 0\r\n");
+       }
+       d_printf("Content-type: text/html\r\n\r\n");
 
-/* display one editable parameter in a form */
+       if (!include_html("include/header.html")) {
+               d_printf("<!DOCTYPE HTML PUBLIC \"-//W3C//DTD HTML 3.2//EN\">\n");
+               d_printf("<HTML>\n<HEAD>\n<TITLE>Samba Web Administration Tool</TITLE>\n</HEAD>\n<BODY background=\"/swat/images/background.jpg\">\n\n");
+       }
+}
+
+/****************************************************************************
+ finish off the page 
+****************************************************************************/
+static void print_footer(void)
+{
+       if (!include_html("include/footer.html")) {
+               d_printf("\n</BODY>\n</HTML>\n");
+       }
+}
+
+/****************************************************************************
+  display one editable parameter in a form 
+****************************************************************************/
 static void show_parameter(int snum, struct parm_struct *parm)
 {
        int i;
        void *ptr = parm->ptr;
+       char* str;
 
        if (parm->class == P_LOCAL && snum >= 0) {
                ptr = lp_local_ptr(snum, ptr);
        }
 
-       printf("<tr><td><A HREF=\"%shelp/parameters.html#%s\">?</A> %s</td><td>", 
-              cgi_rooturl(), parm->label, parm->label);
+       str = stripspace(parm->label);
+       strupper (str);
+       d_printf("<tr><td><A HREF=\"/swat/help/smb.conf.5.html#%s\" target=\"docs\">Help</A>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; %s</td><td>", 
+              str, parm->label);
 
        switch (parm->type) {
        case P_CHAR:
-               printf("<input type=text size=2 name=\"parm_%s\" value=\"%c\">",
-                      parm->label, *(char *)ptr);
+               d_printf("<input type=text size=2 name=\"parm_%s\" value=\"%c\">",
+                      make_parm_name(parm->label), *(char *)ptr);
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.value=\'%c\'\">",
+                       make_parm_name(parm->label),(char)(parm->def.cvalue));
+               break;
+
+       case P_LIST:
+               d_printf("<input type=text size=40 name=\"parm_%s\" value=\"",
+                       make_parm_name(parm->label));
+               if ((char ***)ptr && *(char ***)ptr && **(char ***)ptr) {
+                       char **list = *(char ***)ptr;
+                       for (;*list;list++) {
+                               d_printf("%s%s", *list, ((*(list+1))?" ":""));
+                       }
+               }
+               d_printf("\">");
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.value=\'",
+                       make_parm_name(parm->label));
+               if (parm->def.lvalue) {
+                       char **list = (char **)(parm->def.lvalue);
+                       for (; *list; list++) {
+                               d_printf("%s%s", *list, ((*(list+1))?" ":""));
+                       }
+               }
+               d_printf("\'\">");
                break;
 
        case P_STRING:
        case P_USTRING:
-               printf("<input type=text size=40 name=\"parm_%s\" value=\"%s\">",
-                      parm->label, *(char **)ptr);
+               d_printf("<input type=text size=40 name=\"parm_%s\" value=\"%s\">",
+                      make_parm_name(parm->label), *(char **)ptr);
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.value=\'%s\'\">",
+                       make_parm_name(parm->label),fix_backslash((char *)(parm->def.svalue)));
                break;
 
        case P_GSTRING:
        case P_UGSTRING:
-               printf("<input type=text size=40 name=\"parm_%s\" value=\"%s\">",
-                      parm->label, (char *)ptr);
+               d_printf("<input type=text size=40 name=\"parm_%s\" value=\"%s\">",
+                      make_parm_name(parm->label), (char *)ptr);
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.value=\'%s\'\">",
+                       make_parm_name(parm->label),fix_backslash((char *)(parm->def.svalue)));
                break;
 
        case P_BOOL:
-               printf("<input type=radio name=\"parm_%s\" value=Yes %s>yes&nbsp;&nbsp;", parm->label, (*(BOOL *)ptr)?"CHECKED":"");
-               printf("<input type=radio name=\"parm_%s\" value=No %s>no", parm->label, (*(BOOL *)ptr)?"":"CHECKED");
+               d_printf("<select name=\"parm_%s\">",make_parm_name(parm->label)); 
+               d_printf("<option %s>Yes", (*(BOOL *)ptr)?"selected":"");
+               d_printf("<option %s>No", (*(BOOL *)ptr)?"":"selected");
+               d_printf("</select>");
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.selectedIndex=\'%d\'\">",
+                       make_parm_name(parm->label),(BOOL)(parm->def.bvalue)?0:1);
                break;
 
        case P_BOOLREV:
-               printf("<input type=radio name=\"parm_%s\" value=Yes %s>yes&nbsp;&nbsp;", parm->label, (*(BOOL *)ptr)?"":"CHECKED");
-               printf("<input type=radio name=\"parm_%s\" value=No %s>no", parm->label, (*(BOOL *)ptr)?"CHECKED":"");
+               d_printf("<select name=\"parm_%s\">",make_parm_name(parm->label)); 
+               d_printf("<option %s>Yes", (*(BOOL *)ptr)?"":"selected");
+               d_printf("<option %s>No", (*(BOOL *)ptr)?"selected":"");
+               d_printf("</select>");
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.selectedIndex=\'%d\'\">",
+                       make_parm_name(parm->label),(BOOL)(parm->def.bvalue)?1:0);
                break;
 
        case P_INTEGER:
-               printf("<input type=text size=8 name=\"parm_%s\" value=%d>", parm->label, *(int *)ptr);
+               d_printf("<input type=text size=8 name=\"parm_%s\" value=%d>", make_parm_name(parm->label), *(int *)ptr);
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.value=\'%d\'\">",
+                       make_parm_name(parm->label),(int)(parm->def.ivalue));
                break;
 
        case P_OCTAL:
-               printf("<input type=text size=8 name=\"parm_%s\" value=0%o>", parm->label, *(int *)ptr);
+               d_printf("<input type=text size=8 name=\"parm_%s\" value=%s>", make_parm_name(parm->label), octal_string(*(int *)ptr));
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.value=\'%s\'\">",
+                      make_parm_name(parm->label),
+                      octal_string((int)(parm->def.ivalue)));
                break;
 
        case P_ENUM:
-               for (i=0;parm->enum_list[i].name;i++)
-                       printf("<input type=radio name=\"parm_%s\" value=%s %s>%s&nbsp;&nbsp;", 
-                              parm->label, parm->enum_list[i].name, 
-                              (*(int *)ptr)==parm->enum_list[i].value?"CHECKED":"", 
-                              parm->enum_list[i].name);
+               d_printf("<select name=\"parm_%s\">",make_parm_name(parm->label)); 
+               for (i=0;parm->enum_list[i].name;i++) {
+                       if (i == 0 || parm->enum_list[i].value != parm->enum_list[i-1].value) {
+                               d_printf("<option %s>%s",(*(int *)ptr)==parm->enum_list[i].value?"selected":"",parm->enum_list[i].name);
+                       }
+               }
+               d_printf("</select>");
+               d_printf("<input type=button value=\"Set Default\" onClick=\"swatform.parm_%s.selectedIndex=\'%d\'\">",
+                       make_parm_name(parm->label),enum_index((int)(parm->def.ivalue),parm->enum_list));
                break;
        case P_SEP:
                break;
        }
-       printf("</td></tr>\n");
+       d_printf("</td></tr>\n");
 }
 
-/* display a set of parameters for a service */
+/****************************************************************************
+  display a set of parameters for a service 
+****************************************************************************/
 static void show_parameters(int snum, int allparameters, int advanced, int printers)
 {
        int i = 0;
@@ -155,57 +283,126 @@ static void show_parameters(int snum, int allparameters, int advanced, int print
                        continue;
                }
                if (parm->flags & FLAG_HIDE) continue;
+               if (snum >= 0) {
+                       if (printers & !(parm->flags & FLAG_PRINT)) continue;
+                       if (!printers & !(parm->flags & FLAG_SHARE)) continue;
+               }
                if (!advanced) {
-                       if (!printers && !(parm->flags & FLAG_BASIC)) continue;
+                       if (!(parm->flags & FLAG_BASIC)) {
+                               void *ptr = parm->ptr;
+
+                               if (parm->class == P_LOCAL && snum >= 0) {
+                                       ptr = lp_local_ptr(snum, ptr);
+                               }
+
+                               switch (parm->type) {
+                               case P_CHAR:
+                                       if (*(char *)ptr == (char)(parm->def.cvalue)) continue;
+                                       break;
+
+                               case P_LIST:
+                                       if (!lp_list_compare(*(char ***)ptr, (char **)(parm->def.lvalue))) continue;
+                                       break;
+
+                               case P_STRING:
+                               case P_USTRING:
+                                       if (!strcmp(*(char **)ptr,(char *)(parm->def.svalue))) continue;
+                                       break;
+
+                               case P_GSTRING:
+                               case P_UGSTRING:
+                                       if (!strcmp((char *)ptr,(char *)(parm->def.svalue))) continue;
+                                       break;
+
+                               case P_BOOL:
+                               case P_BOOLREV:
+                                       if (*(BOOL *)ptr == (BOOL)(parm->def.bvalue)) continue;
+                                       break;
+
+                               case P_INTEGER:
+                               case P_OCTAL:
+                                       if (*(int *)ptr == (int)(parm->def.ivalue)) continue;
+                                       break;
+
+
+                               case P_ENUM:
+                                       if (*(int *)ptr == (int)(parm->def.ivalue)) continue;
+                                       break;
+                               case P_SEP:
+                                       continue;
+                               }
+                       }
                        if (printers && !(parm->flags & FLAG_PRINT)) continue;
                }
                if (heading && heading != last_heading) {
-                       printf("<tr><td></td></tr><tr><td><b><u>%s</u></b></td></tr>\n", heading);
+                       d_printf("<tr><td></td></tr><tr><td><b><u>%s</u></b></td></tr>\n", heading);
                        last_heading = heading;
                }
                show_parameter(snum, parm);
        }
 }
 
+/****************************************************************************
+  load the smb.conf file into loadparm.
+****************************************************************************/
+static BOOL load_config(BOOL save_def)
+{
+       lp_resetnumservices();
+       return lp_load(servicesf,False,save_def,False);
+}
 
-/* write a config file */
+/****************************************************************************
+  write a config file 
+****************************************************************************/
 static void write_config(FILE *f, BOOL show_defaults)
 {
        fprintf(f, "# Samba config file created using SWAT\n");
        fprintf(f, "# from %s (%s)\n", cgi_remote_host(), cgi_remote_addr());
-       fprintf(f, "# Date: %s\n\n", timestring());
+       fprintf(f, "# Date: %s\n\n", timestring(False));
        
-       lp_dump(f, show_defaults);      
+       lp_dump(f, show_defaults, iNumNonAutoPrintServices);
 }
 
-
-/* save and reoad the smb.conf config file */
-static int save_reload(void)
+/****************************************************************************
+  save and reoad the smb.conf config file 
+****************************************************************************/
+static int save_reload(int snum)
 {
        FILE *f;
+       struct stat st;
 
-       f = fopen(servicesf,"w");
+       f = sys_fopen(servicesf,"w");
        if (!f) {
-               printf("failed to open %s for writing\n", servicesf);
+               d_printf("failed to open %s for writing\n", servicesf);
                return 0;
        }
 
+       /* just in case they have used the buggy xinetd to create the file */
+       if (fstat(fileno(f), &st) == 0 &&
+           (st.st_mode & S_IWOTH)) {
+               fchmod(fileno(f), S_IWUSR | S_IRUSR | S_IRGRP | S_IROTH);
+       }
+
        write_config(f, False);
+       if (snum)
+               lp_dump_one(f, False, snum);
        fclose(f);
 
        lp_killunused(NULL);
 
-       if (!lp_load(servicesf,False,False,False)) {
-                printf("Can't reload %s\n", servicesf);
+       if (!load_config(False)) {
+                d_printf("Can't reload %s\n", servicesf);
                 return 0;
         }
+       iNumNonAutoPrintServices = lp_numservices();
+       load_printers();
 
        return 1;
 }
 
-
-
-/* commit one parameter */
+/****************************************************************************
+  commit one parameter 
+****************************************************************************/
 static void commit_parameter(int snum, struct parm_struct *parm, char *v)
 {
        int i;
@@ -226,7 +423,9 @@ static void commit_parameter(int snum, struct parm_struct *parm, char *v)
        lp_do_parameter(snum, parm->label, v);
 }
 
-/* commit a set of parameters for a service */
+/****************************************************************************
+  commit a set of parameters for a service 
+****************************************************************************/
 static void commit_parameters(int snum)
 {
        int i = 0;
@@ -235,7 +434,7 @@ static void commit_parameters(int snum)
        char *v;
 
        while ((parm = lp_next_parameter(snum, &i, 1))) {
-               sprintf(label, "parm_%s", parm->label);
+               slprintf(label, sizeof(label)-1, "parm_%s", make_parm_name(parm->label));
                if ((v = cgi_variable(label))) {
                        if (parm->flags & FLAG_HIDE) continue;
                        commit_parameter(snum, parm, v); 
@@ -243,50 +442,53 @@ static void commit_parameters(int snum)
        }
 }
 
-
-/* load the smb.conf file into loadparm. */
-static void load_config(void)
-{
-       if (!lp_load(servicesf,False,True,False)) {
-               printf("<b>Can't load %s - using defaults</b><p>\n", 
-                      servicesf);
-       }
-}
-
-/* spit out the html for a link with an image */
-static void image_link(char *name,char *hlink, char *src, int width, int height)
+/****************************************************************************
+  spit out the html for a link with an image 
+****************************************************************************/
+static void image_link(char *name,char *hlink, char *src)
 {
-       printf("<A HREF=\"%s/%s\"><img width=%d height=%d src=\"%s%s\" alt=\"%s\"></A>\n", 
-              cgi_baseurl(),
-              hlink, width, height, 
-              cgi_rooturl(),
-              src, name);
+       d_printf("<A HREF=\"%s/%s\"><img border=\"0\" src=\"/swat/%s\" alt=\"%s\"></A>\n", 
+              cgi_baseurl(), hlink, src, name);
 }
 
-/* display the main navigation controls at the top of each page along
-   with a title */
+/****************************************************************************
+  display the main navigation controls at the top of each page along
+  with a title 
+****************************************************************************/
 static void show_main_buttons(void)
 {
-       printf("<H2 align=center>Samba Web Administration Tool</H2>\n");
+       char *p;
+       
+       if ((p = cgi_user_name()) && strcmp(p, "root")) {
+               d_printf("Logged in as <b>%s</b><p>\n", p);
+       }
 
-       image_link("Home", "", "images/home.gif", 50, 50);
-       image_link("Globals", "globals", "images/globals.gif", 50, 50);
-       image_link("Shares", "shares", "images/shares.gif", 50, 50);
-       image_link("Printers", "printers", "images/printers.gif", 50, 50);
-       image_link("Status", "status", "images/status.gif", 50, 50);
-       image_link("View Config", "viewconfig", "images/viewconfig.gif", 50, 50);
+       image_link("Home", "", "images/home.gif");
+       if (have_write_access) {
+               image_link("Globals", "globals", "images/globals.gif");
+               image_link("Shares", "shares", "images/shares.gif");
+               image_link("Printers", "printers", "images/printers.gif");
+       }
+       if (have_read_access) {
+               image_link("Status", "status", "images/status.gif");
+               image_link("View Config", "viewconfig","images/viewconfig.gif");
+       }
+       image_link("Password Management", "passwd", "images/passwd.gif");
 
-       printf("<HR>\n");
+       d_printf("<HR>\n");
 }
 
-/* display a welcome page  */
+/****************************************************************************
+  display a welcome page  
+****************************************************************************/
 static void welcome_page(void)
 {
        include_html("help/welcome.html");
 }
 
-
-/* display the current smb.conf  */
+/****************************************************************************
+  display the current smb.conf  
+****************************************************************************/
 static void viewconfig_page(void)
 {
        int full_view=0;
@@ -295,59 +497,67 @@ static void viewconfig_page(void)
                full_view = 1;
        }
 
-       printf("<H2>Current Config</H2>\n");
-       printf("<form method=post>\n");
+       d_printf("<H2>Current Config</H2>\n");
+       d_printf("<form method=post>\n");
 
        if (full_view) {
-               printf("<input type=submit name=\"normal_view\" value=\"Normal View\">\n");
+               d_printf("<input type=submit name=\"normal_view\" value=\"Normal View\">\n");
        } else {
-               printf("<input type=submit name=\"full_view\" value=\"Full View\">\n");
+               d_printf("<input type=submit name=\"full_view\" value=\"Full View\">\n");
        }
 
-       printf("<p><pre>");
+       d_printf("<p><pre>");
        write_config(stdout, full_view);
-       printf("</pre>");
-       printf("</form>\n");
+       d_printf("</pre>");
+       d_printf("</form>\n");
 }
 
-
-/* display a globals editing page  */
+/****************************************************************************
+  display a globals editing page  
+****************************************************************************/
 static void globals_page(void)
 {
        int advanced = 0;
 
-       printf("<H2>Global Variables</H2>\n");
+       d_printf("<H2>Global Variables</H2>\n");
 
        if (cgi_variable("Advanced") && !cgi_variable("Basic"))
                advanced = 1;
 
        if (cgi_variable("Commit")) {
                commit_parameters(GLOBALS_SNUM);
-               save_reload();
+               save_reload(0);
        }
 
-       printf("<FORM method=post>\n");
+       d_printf("<FORM name=\"swatform\" method=post>\n");
+
+       if (have_write_access) {
+               d_printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
+       }
 
-       printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
+       d_printf("<input type=reset name=\"Reset Values\" value=\"Reset Values\">\n");
        if (advanced == 0) {
-               printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
+               d_printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
        } else {
-               printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
+               d_printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
        }
-       printf("<p>\n");
+       d_printf("<p>\n");
        
-       printf("<table>\n");
+       d_printf("<table>\n");
        show_parameters(GLOBALS_SNUM, 1, advanced, 0);
-       printf("</table>\n");
+       d_printf("</table>\n");
 
        if (advanced) {
-               printf("<input type=hidden name=\"Advanced\" value=1>\n");
+               d_printf("<input type=hidden name=\"Advanced\" value=1>\n");
        }
 
-       printf("</form>\n");
+       d_printf("</FORM>\n");
 }
 
-/* display a shares editing page  */
+/****************************************************************************
+  display a shares editing page. share is in unix codepage, and must be in
+  dos codepage. FIXME !!! JRA.
+****************************************************************************/
 static void shares_page(void)
 {
        char *share = cgi_variable("share");
@@ -359,77 +569,321 @@ static void shares_page(void)
        if (share)
                snum = lp_servicenumber(share);
 
-       printf("<H2>Share Parameters</H2>\n");
+       d_printf("<H2>Share Parameters</H2>\n");
 
        if (cgi_variable("Advanced") && !cgi_variable("Basic"))
                advanced = 1;
 
        if (cgi_variable("Commit") && snum >= 0) {
                commit_parameters(snum);
-               save_reload();
+               save_reload(0);
        }
 
        if (cgi_variable("Delete") && snum >= 0) {
                lp_remove_service(snum);
-               save_reload();
+               save_reload(0);
                share = NULL;
                snum = -1;
        }
 
        if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) {
+               load_config(False);
                lp_copy_service(GLOBALS_SNUM, share);
-               save_reload();
+               iNumNonAutoPrintServices = lp_numservices();
+               save_reload(0);
                snum = lp_servicenumber(share);
        }
 
-       printf("<FORM method=post>\n");
+       d_printf("<FORM name=\"swatform\" method=post>\n");
 
-       printf("<table>\n");
-       printf("<tr><td><input type=submit name=selectshare value=\"Choose Share\"></td>\n");
-       printf("<td><select name=share>\n");
+       d_printf("<table>\n");
+       d_printf("<tr>\n");
+       d_printf("<td><input type=submit name=selectshare value=\"Choose Share\"></td>\n");
+       d_printf("<td><select name=share>\n");
        if (snum < 0)
-               printf("<option value=\" \"> \n");
+               d_printf("<option value=\" \"> \n");
        for (i=0;i<lp_numservices();i++) {
                s = lp_servicename(i);
                if (s && (*s) && strcmp(s,"IPC$") && !lp_print_ok(i)) {
-                       printf("<option %s value=\"%s\">%s\n", 
+                       d_printf("<option %s value=\"%s\">%s\n", 
                               (share && strcmp(share,s)==0)?"SELECTED":"",
                               s, s);
                }
        }
-       printf("</select></td></tr><p>");
-
-       printf("<tr><td><input type=submit name=createshare value=\"Create Share\"></td>\n");
-       printf("<td><input type=text size=30 name=newshare></td></tr>\n");
-       printf("</table>");
+       d_printf("</select></td>\n");
+       if (have_write_access) {
+               d_printf("<td><input type=submit name=\"Delete\" value=\"Delete Share\"></td>\n");
+       }
+       d_printf("</tr>\n");
+       d_printf("</table>");
+       d_printf("<table>");
+       if (have_write_access) {
+               d_printf("<tr>\n");
+               d_printf("<td><input type=submit name=createshare value=\"Create Share\"></td>\n");
+               d_printf("<td><input type=text size=30 name=newshare></td></tr>\n");
+       }
+       d_printf("</table>");
 
 
        if (snum >= 0) {
-               printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
-               printf("<input type=submit name=\"Delete\" value=\"Delete Share\">\n");
+               if (have_write_access) {
+                       d_printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
+               }
+
+               d_printf("<input type=reset name=\"Reset Values\" value=\"Reset Values\">\n");
                if (advanced == 0) {
-                       printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
+                       d_printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
                } else {
-                       printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
+                       d_printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
                }
-               printf("<p>\n");
+               d_printf("<p>\n");
        }
 
        if (snum >= 0) {
-               printf("<table>\n");
+               d_printf("<table>\n");
                show_parameters(snum, 1, advanced, 0);
-               printf("</table>\n");
+               d_printf("</table>\n");
        }
 
        if (advanced) {
-               printf("<input type=hidden name=\"Advanced\" value=1>\n");
+               d_printf("<input type=hidden name=\"Advanced\" value=1>\n");
+       }
+
+       d_printf("</FORM>\n");
+}
+
+/*************************************************************
+change a password either locally or remotely
+*************************************************************/
+static BOOL change_password(const char *remote_machine, char *user_name, 
+                           char *old_passwd, char *new_passwd, 
+                               int local_flags)
+{
+       BOOL ret = False;
+       pstring err_str;
+       pstring msg_str;
+
+       if (demo_mode) {
+               d_printf("password change in demo mode rejected\n<p>");
+               return False;
+       }
+       
+       if (remote_machine != NULL) {
+               ret = remote_password_change(remote_machine, user_name, old_passwd, 
+                                                                        new_passwd, err_str, sizeof(err_str));
+               if(*err_str)
+                       d_printf("%s\n<p>", err_str);
+               return ret;
        }
 
-       printf("</FORM>\n");
+       if(!initialize_password_db(True)) {
+               d_printf("Can't setup password database vectors.\n<p>");
+               return False;
+       }
+       
+       ret = local_password_change(user_name, local_flags, new_passwd, err_str, sizeof(err_str),
+                                        msg_str, sizeof(msg_str));
+
+       if(*msg_str)
+               d_printf("%s\n<p>", msg_str);
+       if(*err_str)
+               d_printf("%s\n<p>", err_str);
+
+       return ret;
 }
 
+/****************************************************************************
+  do the stuff required to add or change a password 
+****************************************************************************/
+static void chg_passwd(void)
+{
+       char *host;
+       BOOL rslt;
+       int local_flags = 0;
+
+       /* Make sure users name has been specified */
+       if (strlen(cgi_variable(SWAT_USER)) == 0) {
+               d_printf("<p> Must specify \"User Name\" \n");
+               return;
+       }
+
+       /*
+        * smbpasswd doesn't require anything but the users name to delete, disable or enable the user,
+        * so if that's what we're doing, skip the rest of the checks
+        */
+       if (!cgi_variable(DISABLE_USER_FLAG) && !cgi_variable(ENABLE_USER_FLAG) && !cgi_variable(DELETE_USER_FLAG)) {
+
+               /*
+                * If current user is not root, make sure old password has been specified 
+                * If REMOTE change, even root must provide old password 
+                */
+               if (((!am_root()) && (strlen( cgi_variable(OLD_PSWD)) <= 0)) ||
+                   ((cgi_variable(CHG_R_PASSWD_FLAG)) &&  (strlen( cgi_variable(OLD_PSWD)) <= 0))) {
+                       d_printf("<p> Must specify \"Old Password\" \n");
+                       return;
+               }
+
+               /* If changing a users password on a remote hosts we have to know what host */
+               if ((cgi_variable(CHG_R_PASSWD_FLAG)) && (strlen( cgi_variable(RHOST)) <= 0)) {
+                       d_printf("<p> Must specify \"Remote Machine\" \n");
+                       return;
+               }
+
+               /* Make sure new passwords have been specified */
+               if ((strlen( cgi_variable(NEW_PSWD)) <= 0) ||
+                   (strlen( cgi_variable(NEW2_PSWD)) <= 0)) {
+                       d_printf("<p> Must specify \"New, and Re-typed Passwords\" \n");
+                       return;
+               }
+
+               /* Make sure new passwords was typed correctly twice */
+               if (strcmp(cgi_variable(NEW_PSWD), cgi_variable(NEW2_PSWD)) != 0) {
+                       d_printf("<p> Re-typed password didn't match new password\n");
+                       return;
+               }
+       }
+
+       if (cgi_variable(CHG_R_PASSWD_FLAG)) {
+               host = cgi_variable(RHOST);
+       } else if (am_root()) {
+               host = NULL;
+       } else {
+               host = "127.0.0.1";
+       }
+
+       /*
+        * Set up the local flags.
+        */
+
+       local_flags |= (cgi_variable(ADD_USER_FLAG) ? LOCAL_ADD_USER : 0);
+       local_flags |= (cgi_variable(DELETE_USER_FLAG) ? LOCAL_DELETE_USER : 0);
+       local_flags |= (cgi_variable(ENABLE_USER_FLAG) ? LOCAL_ENABLE_USER : 0);
+       local_flags |= (cgi_variable(DISABLE_USER_FLAG) ? LOCAL_DISABLE_USER : 0);
 
-/* display a printers editing page  */
+       rslt = change_password(host,
+                              cgi_variable(SWAT_USER),
+                              cgi_variable(OLD_PSWD), cgi_variable(NEW_PSWD),
+                                  local_flags);
+
+       if(local_flags == 0) {
+               if (rslt == True) {
+                       d_printf("<p> The passwd for '%s' has been changed. \n", cgi_variable(SWAT_USER));
+               } else {
+                       d_printf("<p> The passwd for '%s' has NOT been changed. \n",cgi_variable(SWAT_USER));
+               }
+       }
+       
+       return;
+}
+
+/****************************************************************************
+  display a password editing page  
+****************************************************************************/
+static void passwd_page(void)
+{
+       char *new_name = cgi_user_name();
+
+       /* 
+        * After the first time through here be nice. If the user
+        * changed the User box text to another users name, remember it.
+        */
+       if (cgi_variable(SWAT_USER)) {
+               new_name = cgi_variable(SWAT_USER);
+       } 
+
+       if (!new_name) new_name = "";
+
+       d_printf("<H2>Server Password Management</H2>\n");
+
+       d_printf("<FORM name=\"swatform\" method=post>\n");
+
+       d_printf("<table>\n");
+
+       /* 
+        * Create all the dialog boxes for data collection
+        */
+       d_printf("<tr><td> User Name : </td>\n");
+       d_printf("<td><input type=text size=30 name=%s value=%s></td></tr> \n", SWAT_USER, new_name);
+       if (!am_root()) {
+               d_printf("<tr><td> Old Password : </td>\n");
+               d_printf("<td><input type=password size=30 name=%s></td></tr> \n",OLD_PSWD);
+       }
+       d_printf("<tr><td> New Password : </td>\n");
+       d_printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW_PSWD);
+       d_printf("<tr><td> Re-type New Password : </td>\n");
+       d_printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW2_PSWD);
+       d_printf("</table>\n");
+
+       /*
+        * Create all the control buttons for requesting action
+        */
+       d_printf("<input type=submit name=%s value=\"Change Password\">\n", 
+              CHG_S_PASSWD_FLAG);
+       if (demo_mode || am_root()) {
+               d_printf("<input type=submit name=%s value=\"Add New User\">\n",
+                      ADD_USER_FLAG);
+               d_printf("<input type=submit name=%s value=\"Delete User\">\n",
+                      DELETE_USER_FLAG);
+               d_printf("<input type=submit name=%s value=\"Disable User\">\n", 
+                      DISABLE_USER_FLAG);
+               d_printf("<input type=submit name=%s value=\"Enable User\">\n", 
+                      ENABLE_USER_FLAG);
+       }
+       d_printf("<p></FORM>\n");
+
+       /*
+        * Do some work if change, add, disable or enable was
+        * requested. It could be this is the first time through this
+        * code, so there isn't anything to do.  */
+       if ((cgi_variable(CHG_S_PASSWD_FLAG)) || (cgi_variable(ADD_USER_FLAG)) || (cgi_variable(DELETE_USER_FLAG)) ||
+           (cgi_variable(DISABLE_USER_FLAG)) || (cgi_variable(ENABLE_USER_FLAG))) {
+               chg_passwd();           
+       }
+
+       d_printf("<H2>Client/Server Password Management</H2>\n");
+
+       d_printf("<FORM name=\"swatform\" method=post>\n");
+
+       d_printf("<table>\n");
+
+       /* 
+        * Create all the dialog boxes for data collection
+        */
+       d_printf("<tr><td> User Name : </td>\n");
+       d_printf("<td><input type=text size=30 name=%s value=%s></td></tr>\n",SWAT_USER, new_name);
+       d_printf("<tr><td> Old Password : </td>\n");
+       d_printf("<td><input type=password size=30 name=%s></td></tr>\n",OLD_PSWD);
+       d_printf("<tr><td> New Password : </td>\n");
+       d_printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW_PSWD);
+       d_printf("<tr><td> Re-type New Password : </td>\n");
+       d_printf("<td><input type=password size=30 name=%s></td></tr>\n",NEW2_PSWD);
+       d_printf("<tr><td> Remote Machine : </td>\n");
+       d_printf("<td><input type=text size=30 name=%s></td></tr>\n",RHOST);
+
+       d_printf("</table>");
+
+       /*
+        * Create all the control buttons for requesting action
+        */
+       d_printf("<input type=submit name=%s value=\"Change Password\">", 
+              CHG_R_PASSWD_FLAG);
+
+       d_printf("<p></FORM>\n");
+
+       /*
+        * Do some work if a request has been made to change the
+        * password somewhere other than the server. It could be this
+        * is the first time through this code, so there isn't
+        * anything to do.  */
+       if (cgi_variable(CHG_R_PASSWD_FLAG)) {
+               chg_passwd();           
+       }
+
+}
+
+/****************************************************************************
+  display a printers editing page  
+****************************************************************************/
 static void printers_page(void)
 {
        char *share = cgi_variable("share");
@@ -441,94 +895,133 @@ static void printers_page(void)
        if (share)
                snum = lp_servicenumber(share);
 
-       printf("<H2>Printer Parameters</H2>\n");
+       d_printf("<H2>Printer Parameters</H2>\n");
+
+       d_printf("<H3>Important Note:</H3>\n");
+       d_printf("Printer names marked with [*] in the Choose Printer drop-down box ");
+       d_printf("are autoloaded printers from ");
+       d_printf("<A HREF=\"/swat/help/smb.conf.5.html#PRINTCAPNAME\" target=\"docs\">Printcap Name</A>.\n");
+       d_printf("Attempting to delete these printers from SWAT will have no effect.\n");
 
        if (cgi_variable("Advanced") && !cgi_variable("Basic"))
                advanced = 1;
 
        if (cgi_variable("Commit") && snum >= 0) {
                commit_parameters(snum);
-               save_reload();
+               if (snum >= iNumNonAutoPrintServices)
+                   save_reload(snum);
+               else
+                   save_reload(0);
        }
 
        if (cgi_variable("Delete") && snum >= 0) {
                lp_remove_service(snum);
-               save_reload();
+               save_reload(0);
                share = NULL;
                snum = -1;
        }
 
        if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) {
+               load_config(False);
                lp_copy_service(GLOBALS_SNUM, share);
+               iNumNonAutoPrintServices = lp_numservices();
                snum = lp_servicenumber(share);
                lp_do_parameter(snum, "print ok", "Yes");
-               save_reload();
+               save_reload(0);
                snum = lp_servicenumber(share);
        }
 
-       printf("<FORM method=post>\n");
+       d_printf("<FORM name=\"swatform\" method=post>\n");
 
-       printf("<table>\n");
-       printf("<tr><td><input type=submit name=selectshare value=\"Choose Printer\"></td>\n");
-       printf("<td><select name=share>\n");
+       d_printf("<table>\n");
+       d_printf("<tr><td><input type=submit name=selectshare value=\"Choose Printer\"></td>\n");
+       d_printf("<td><select name=share>\n");
        if (snum < 0 || !lp_print_ok(snum))
-               printf("<option value=\" \"> \n");
+               d_printf("<option value=\" \"> \n");
        for (i=0;i<lp_numservices();i++) {
                s = lp_servicename(i);
                if (s && (*s) && strcmp(s,"IPC$") && lp_print_ok(i)) {
-                       printf("<option %s value=\"%s\">%s\n", 
+                    if (i >= iNumNonAutoPrintServices)
+                        d_printf("<option %s value=\"%s\">[*]%s\n",
+                               (share && strcmp(share,s)==0)?"SELECTED":"",
+                               s, s);
+                    else
+                       d_printf("<option %s value=\"%s\">%s\n", 
                               (share && strcmp(share,s)==0)?"SELECTED":"",
                               s, s);
                }
        }
-       printf("</select></td></tr><p>");
-
-       printf("<tr><td><input type=submit name=createshare value=\"Create Printer\"></td>\n");
-       printf("<td><input type=text size=30 name=newshare></td></tr>\n");
-       printf("</table>");
+       d_printf("</select></td>");
+       if (have_write_access) {
+               d_printf("<td><input type=submit name=\"Delete\" value=\"Delete Printer\"></td>\n");
+       }
+       d_printf("</tr>");
+       d_printf("</table>\n");
+
+       if (have_write_access) {
+               d_printf("<table>\n");
+               d_printf("<tr><td><input type=submit name=createshare value=\"Create Printer\"></td>\n");
+               d_printf("<td><input type=text size=30 name=newshare></td></tr>\n");
+               d_printf("</table>");
+       }
 
 
        if (snum >= 0) {
-               printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
-               printf("<input type=submit name=\"Delete\" value=\"Delete Printer\">\n");
+               if (have_write_access) {
+                       d_printf("<input type=submit name=\"Commit\" value=\"Commit Changes\">\n");
+               }
+               d_printf("<input type=reset name=\"Reset Values\" value=\"Reset Values\">\n");
                if (advanced == 0) {
-                       printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
+                       d_printf("<input type=submit name=\"Advanced\" value=\"Advanced View\">\n");
                } else {
-                       printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
+                       d_printf("<input type=submit name=\"Basic\" value=\"Basic View\">\n");
                }
-               printf("<p>\n");
+               d_printf("<p>\n");
        }
 
        if (snum >= 0) {
-               printf("<table>\n");
+               d_printf("<table>\n");
                show_parameters(snum, 1, advanced, 1);
-               printf("</table>\n");
+               d_printf("</table>\n");
        }
 
        if (advanced) {
-               printf("<input type=hidden name=\"Advanced\" value=1>\n");
+               d_printf("<input type=hidden name=\"Advanced\" value=1>\n");
        }
 
-       printf("</FORM>\n");
+       d_printf("</FORM>\n");
 }
 
-
-
-int main(int argc, char *argv[])
+/****************************************************************************
+  MAIN()
+****************************************************************************/
+ int main(int argc, char *argv[])
 {
        extern char *optarg;
        extern int optind;
-       extern FILE *dbf;
+       extern XFILE *dbf;
        int opt;
        char *page;
-       int auth_required = 1;
+
+       fault_setup(NULL);
+       umask(S_IWGRP | S_IWOTH);
+
+#if defined(HAVE_SET_AUTH_PARAMETERS)
+       set_auth_parameters(argc, argv);
+#endif /* HAVE_SET_AUTH_PARAMETERS */
 
        /* just in case it goes wild ... */
        alarm(300);
 
-       dbf = fopen("/dev/null", "w");
+       /* we don't want any SIGPIPE messages */
+       BlockSignals(True,SIGPIPE);
 
-       if (!dbf) dbf = stderr;
+       dbf = x_fopen("/dev/null", O_WRONLY, 0);
+       if (!dbf) dbf = x_stderr;
+
+       /* we don't want stderr screwing us up */
+       close(2);
+       open("/dev/null", O_WRONLY);
 
        while ((opt = getopt(argc, argv,"s:a")) != EOF) {
                switch (opt) {
@@ -536,44 +1029,57 @@ int main(int argc, char *argv[])
                        pstrcpy(servicesf,optarg);
                        break;    
                case 'a':
-                       auth_required = 0;
+                       demo_mode = True;
                        break;    
                }
        }
 
-       cgi_setup(SWATDIR, auth_required);
+       setup_logging(argv[0],False);
+       load_config(True);
+       iNumNonAutoPrintServices = lp_numservices();
+       load_printers();
+
+       cgi_setup(SWATDIR, !demo_mode);
 
        print_header();
        
-       charset_initialise();
+       cgi_load_variables(NULL);
 
-       /* if this binary is setuid then run completely as root */
-       setuid(0);
+       if (!file_exist(servicesf, NULL)) {
+               have_read_access = True;
+               have_write_access = True;
+       } else {
+               /* check if the authenticated user has write access - if not then
+                  don't show write options */
+               have_write_access = (access(servicesf,W_OK) == 0);
 
-       load_config();
+               /* if the user doesn't have read access to smb.conf then
+                  don't let them view it */
+               have_read_access = (access(servicesf,R_OK) == 0);
+       }
 
-       cgi_load_variables(NULL);
 
        show_main_buttons();
 
        page = cgi_pathinfo();
 
-       if (strcmp(page, "globals")==0) {
+       /* Root gets full functionality */
+       if (have_read_access && strcmp(page, "globals")==0) {
                globals_page();
-       } else if (strcmp(page,"shares")==0) {
+       } else if (have_read_access && strcmp(page,"shares")==0) {
                shares_page();
-       } else if (strcmp(page,"printers")==0) {
+       } else if (have_read_access && strcmp(page,"printers")==0) {
                printers_page();
-       } else if (strcmp(page,"status")==0) {
+       } else if (have_read_access && strcmp(page,"status")==0) {
                status_page();
-       } else if (strcmp(page,"viewconfig")==0) {
+       } else if (have_read_access && strcmp(page,"viewconfig")==0) {
                viewconfig_page();
+       } else if (strcmp(page,"passwd")==0) {
+               passwd_page();
        } else {
                welcome_page();
        }
-       
+
        print_footer();
        return 0;
 }
-
-