2 Unix SMB/CIFS implementation.
4 provide hooks into smbd C calls from ejs scripts
6 Copyright (C) Jelmer Vernooij 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program; if not, write to the Free Software
20 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 #include "scripting/ejs/smbcalls.h"
25 #include "lib/appweb/ejs/ejs.h"
26 #include "lib/samba3/samba3.h"
27 #include "libcli/security/security.h"
28 #include "librpc/gen_ndr/ndr_misc.h"
31 static struct MprVar mprRegistry(struct samba3_regdb *reg)
33 struct MprVar mpv = mprObject("registry"), ks, vs, k, v;
36 ks = mprArray("array");
38 for (i = 0; i < reg->key_count; i++) {
39 k = mprObject("regkey");
41 mprSetVar(&k, "name", mprString(reg->keys[i].name));
43 vs = mprArray("array");
45 for (j = 0; j < reg->keys[i].value_count; j++) {
46 v = mprObject("regval");
48 mprSetVar(&v, "name", mprString(reg->keys[i].values[j].name));
49 mprSetVar(&v, "type", mprCreateIntegerVar(reg->keys[i].values[j].type));
50 mprSetVar(&v, "data", mprDataBlob(reg->keys[i].values[j].data));
52 mprAddArray(&vs, j, v);
55 mprSetVar(&k, "values", vs);
57 mprAddArray(&ks, i, k);
61 mprSetVar(&ks, "length", mprCreateIntegerVar(i));
64 mprSetVar(&mpv, "keys", ks);
69 static struct MprVar mprPolicy(struct samba3_policy *pol)
71 struct MprVar mpv = mprObject("policy");
73 mprSetVar(&mpv, "min_password_length", mprCreateIntegerVar(pol->min_password_length));
74 mprSetVar(&mpv, "password_history", mprCreateIntegerVar(pol->password_history));
75 mprSetVar(&mpv, "user_must_logon_to_change_password", mprCreateIntegerVar(pol->user_must_logon_to_change_password));
76 mprSetVar(&mpv, "maximum_password_age", mprCreateIntegerVar(pol->maximum_password_age));
77 mprSetVar(&mpv, "minimum_password_age", mprCreateIntegerVar(pol->minimum_password_age));
78 mprSetVar(&mpv, "lockout_duration", mprCreateIntegerVar(pol->lockout_duration));
79 mprSetVar(&mpv, "reset_count_minutes", mprCreateIntegerVar(pol->reset_count_minutes));
80 mprSetVar(&mpv, "bad_lockout_minutes", mprCreateIntegerVar(pol->bad_lockout_minutes));
81 mprSetVar(&mpv, "disconnect_time", mprCreateIntegerVar(pol->disconnect_time));
82 mprSetVar(&mpv, "refuse_machine_password_change", mprCreateIntegerVar(pol->refuse_machine_password_change));
87 static struct MprVar mprIdmapDb(struct samba3_idmapdb *db)
89 struct MprVar mpv = mprObject("idmapdb"), mps, mp;
92 mprSetVar(&mpv, "user_hwm", mprCreateIntegerVar(db->user_hwm));
93 mprSetVar(&mpv, "group_hwm", mprCreateIntegerVar(db->group_hwm));
95 mps = mprArray("array");
97 for (i = 0; i < db->mapping_count; i++) {
99 mp = mprObject("idmap");
101 mprSetVar(&mp, "IDMAP_GROUP", mprCreateIntegerVar(IDMAP_GROUP));
102 mprSetVar(&mp, "IDMAP_USER", mprCreateIntegerVar(IDMAP_USER));
103 mprSetVar(&mp, "type", mprCreateIntegerVar(db->mappings[i].type));
104 mprSetVar(&mp, "unix_id", mprCreateIntegerVar(db->mappings[i].unix_id));
106 tmp = dom_sid_string(NULL, db->mappings[i].sid);
107 mprSetVar(&mp, "sid", mprString(tmp));
110 mprAddArray(&mps, i, mp);
114 mprSetVar(&mpv, "length", mprCreateIntegerVar(i));
118 mprSetVar(&mpv, "mappings", mps);
123 static struct MprVar mprGroupMappings(struct samba3_groupdb *db)
125 struct MprVar mpv = mprArray("array"), g;
128 for (i = 0; i < db->groupmap_count; i++) {
130 g = mprObject("group");
132 mprSetVar(&g, "gid", mprCreateIntegerVar(db->groupmappings[i].gid));
134 tmp = dom_sid_string(NULL, db->groupmappings[i].sid);
135 mprSetVar(&g, "sid", mprString(tmp));
138 mprSetVar(&g, "sid_name_use", mprCreateIntegerVar(db->groupmappings[i].sid_name_use));
139 mprSetVar(&g, "nt_name", mprString(db->groupmappings[i].nt_name));
140 mprSetVar(&g, "comment", mprString(db->groupmappings[i].comment));
142 mprAddArray(&mpv, i, g);
146 mprSetVar(&mpv, "length", mprCreateIntegerVar(i));
153 static struct MprVar mprAliases(struct samba3_groupdb *db)
155 struct MprVar mpv = mprObject("array"), a, am;
158 for (i = 0; i < db->alias_count; i++) {
160 a = mprObject("alias");
162 tmp = dom_sid_string(NULL, db->aliases[i].sid);
163 mprSetVar(&a, "sid", mprString(tmp));
166 am = mprArray("array");
168 for (j = 0; j < db->aliases[i].member_count; j++) {
169 tmp = dom_sid_string(NULL, db->aliases[i].members[j]);
170 mprAddArray(&am, j, mprString(tmp));
174 mprSetVar(&a, "members", am);
178 mprSetVar(&mpv, "length", mprCreateIntegerVar(i));
184 static struct MprVar mprDomainSecrets(struct samba3_domainsecrets *ds)
186 struct MprVar v, e = mprObject("domainsecrets");
190 mprSetVar(&e, "name", mprString(ds->name));
192 tmp = dom_sid_string(NULL, &ds->sid);
193 mprSetVar(&e, "sid", mprString(tmp));
196 tmp = GUID_string(NULL, &ds->guid);
197 mprSetVar(&e, "guid", mprString(tmp));
200 mprSetVar(&e, "plaintext_pw", mprString(ds->plaintext_pw));
202 mprSetVar(&e, "last_change_time", mprCreateIntegerVar(ds->last_change_time));
203 mprSetVar(&e, "sec_channel_type", mprCreateIntegerVar(ds->sec_channel_type));
205 v = mprObject("hash_pw");
207 blob.data = ds->hash_pw.hash;
209 mprSetVar(&v, "hash", mprDataBlob(blob));
211 mprSetVar(&v, "mod_time", mprCreateIntegerVar(ds->hash_pw.mod_time));
213 mprSetVar(&e, "hash_pw", v);
218 static struct MprVar mprSecrets(struct samba3_secrets *sec)
220 struct MprVar mpv = mprObject("samba3_secrets"), es, e;
223 es = mprArray("array");
225 for (i = 0; i < sec->ldappw_count; i++) {
226 e = mprObject("ldappw");
228 mprSetVar(&e, "dn", mprString(sec->ldappws[i].dn));
229 mprSetVar(&e, "password", mprString(sec->ldappws[i].password));
231 mprAddArray(&es, i, e);
234 mprSetVar(&mpv, "ldappws", es);
236 es = mprArray("array");
238 for (i = 0; i < sec->domain_count; i++) {
239 mprAddArray(&es, i, mprDomainSecrets(&sec->domains[i]));
243 mprSetVar(&es, "length", mprCreateIntegerVar(i));
246 mprSetVar(&mpv, "domains", es);
248 es = mprArray("trusted_domains");
250 for (i = 0; i < sec->trusted_domain_count; i++) {
254 e = mprObject("trusted_domain");
256 ns = mprArray("array");
258 for (j = 0; j < sec->trusted_domains[i].uni_name_len; j++) {
259 mprAddArray(&ns, j, mprString(sec->trusted_domains[i].uni_name[j]));
262 mprSetVar(&e, "uni_name", ns);
264 mprSetVar(&e, "pass", mprString(sec->trusted_domains[i].pass));
265 mprSetVar(&e, "mod_time", mprCreateIntegerVar(sec->trusted_domains[i].mod_time));
267 tmp = dom_sid_string(NULL, &sec->trusted_domains[i].domain_sid);
268 mprSetVar(&e, "domains_sid", mprString(tmp));
271 mprAddArray(&es, i, e);
275 mprSetVar(&es, "length", mprCreateIntegerVar(i));
278 mprSetVar(&mpv, "trusted_domains", es);
280 es = mprArray("array");
282 for (i = 0; i < sec->afs_keyfile_count; i++) {
285 e = mprObject("afs_keyfile");
287 mprSetVar(&e, "cell", mprString(sec->afs_keyfiles[i].cell));
289 ks = mprArray("array");
291 for (j = 0; j < 8; j++) {
292 struct MprVar k = mprObject("entry");
295 mprSetVar(&k, "kvno", mprCreateIntegerVar(sec->afs_keyfiles[i].entry[j].kvno));
296 blob.data = (uint8_t*)sec->afs_keyfiles[i].entry[j].key;
298 mprSetVar(&k, "key", mprDataBlob(blob));
300 mprAddArray(&ks, j, k);
303 mprSetVar(&e, "entry", ks);
305 mprSetVar(&e, "nkeys", mprCreateIntegerVar(sec->afs_keyfiles[i].nkeys));
307 mprAddArray(&es, i, e);
311 mprSetVar(&es, "length", mprCreateIntegerVar(i));
314 mprSetVar(&mpv, "afs_keyfiles", es);
316 mprSetVar(&mpv, "ipc_cred", mprCredentials(sec->ipc_cred));
321 static struct MprVar mprShares(struct samba3 *samba3)
323 struct MprVar mpv = mprArray("array"), s;
326 for (i = 0; i < samba3->share_count; i++) {
327 s = mprObject("share");
329 mprSetVar(&s, "name", mprString(samba3->shares[i].name));
333 mprAddArray(&mpv, i, s);
337 mprSetVar(&mpv, "length", mprCreateIntegerVar(i));
343 static struct MprVar mprSamAccounts(struct samba3 *samba3)
345 struct MprVar mpv = mprArray("array"), m;
348 for (i = 0; i < samba3->samaccount_count; i++) {
349 struct samba3_samaccount *a = &samba3->samaccounts[i];
352 m = mprObject("samba3_samaccount");
354 mprSetVar(&m, "logon_time", mprCreateIntegerVar(a->logon_time));
355 mprSetVar(&m, "logoff_time", mprCreateIntegerVar(a->logoff_time));
356 mprSetVar(&m, "kickoff_time", mprCreateIntegerVar(a->kickoff_time));
357 mprSetVar(&m, "bad_password_time", mprCreateIntegerVar(a->bad_password_time));
358 mprSetVar(&m, "pass_last_set_time", mprCreateIntegerVar(a->pass_last_set_time));
359 mprSetVar(&m, "pass_can_change_time", mprCreateIntegerVar(a->pass_can_change_time));
360 mprSetVar(&m, "pass_must_change_time", mprCreateIntegerVar(a->pass_must_change_time));
361 mprSetVar(&m, "user_rid", mprCreateIntegerVar(a->user_rid));
362 mprSetVar(&m, "group_rid", mprCreateIntegerVar(a->group_rid));
363 mprSetVar(&m, "acct_ctrl", mprCreateIntegerVar(a->acct_ctrl));
364 mprSetVar(&m, "logon_divs", mprCreateIntegerVar(a->logon_divs));
365 mprSetVar(&m, "bad_password_count", mprCreateIntegerVar(a->bad_password_count));
366 mprSetVar(&m, "logon_count", mprCreateIntegerVar(a->logon_count));
367 mprSetVar(&m, "username", mprString(a->username));
368 mprSetVar(&m, "domain", mprString(a->domain));
369 mprSetVar(&m, "nt_username", mprString(a->nt_username));
370 mprSetVar(&m, "dir_drive", mprString(a->dir_drive));
371 mprSetVar(&m, "munged_dial", mprString(a->munged_dial));
372 mprSetVar(&m, "fullname", mprString(a->fullname));
373 mprSetVar(&m, "homedir", mprString(a->homedir));
374 mprSetVar(&m, "logon_script", mprString(a->logon_script));
375 mprSetVar(&m, "profile_path", mprString(a->profile_path));
376 mprSetVar(&m, "acct_desc", mprString(a->acct_desc));
377 mprSetVar(&m, "workstations", mprString(a->workstations));
379 blob.data = a->lm_pw.hash;
380 mprSetVar(&m, "lm_pw", mprDataBlob(blob));
381 blob.data = a->nt_pw.hash;
382 mprSetVar(&m, "nt_pw", mprDataBlob(blob));
384 mprAddArray(&mpv, i, m);
388 mprSetVar(&mpv, "length", mprCreateIntegerVar(i));
394 static struct MprVar mprWinsEntries(struct samba3 *samba3)
396 struct MprVar mpv = mprArray("array");
399 for (i = 0; i < samba3->winsdb_count; i++) {
400 struct MprVar w = mprObject("wins_entry"), ips;
402 mprSetVar(&w, "name", mprString(samba3->winsdb_entries[i].name));
403 mprSetVar(&w, "nb_flags", mprCreateIntegerVar(samba3->winsdb_entries[i].nb_flags));
404 mprSetVar(&w, "type", mprCreateIntegerVar(samba3->winsdb_entries[i].type));
405 mprSetVar(&w, "ttl", mprCreateIntegerVar(samba3->winsdb_entries[i].ttl));
407 ips = mprObject("array");
409 for (j = 0; j < samba3->winsdb_entries[i].ip_count; j++) {
411 addr = sys_inet_ntoa(samba3->winsdb_entries[i].ips[j]);
412 mprAddArray(&ips, j, mprString(addr));
415 mprSetVar(&w, "ips", ips);
417 mprAddArray(&mpv, i, w);
421 mprSetVar(&mpv, "length", mprCreateIntegerVar(i));
427 static int ejs_find_domainsecrets(MprVarHandle eid, int argc, struct MprVar **argv)
429 struct samba3 *samba3 = NULL;
430 struct samba3_domainsecrets *sec;
433 ejsSetErrorMsg(eid, "find_domainsecrets invalid arguments");
437 samba3 = mprGetThisPtr(eid, "samba3");
439 sec = samba3_find_domainsecrets(samba3, mprToString(argv[0]));
442 mpr_Return(eid, mprCreateUndefinedVar());
444 mpr_Return(eid, mprDomainSecrets(sec));
451 initialise samba3 ejs subsystem
453 samba3 = samba3_read(libdir,smbconf)
455 static int ejs_samba3_read(MprVarHandle eid, int argc, struct MprVar **argv)
457 struct MprVar mpv = mprObject("samba3");
458 struct samba3 *samba3;
462 ejsSetErrorMsg(eid, "samba3_read invalid arguments");
466 status = samba3_read(mprToString(argv[0]), mprToString(argv[1]), mprMemCtx(), &samba3);
468 if (NT_STATUS_IS_ERR(status)) {
469 ejsSetErrorMsg(eid, "samba3_read: error");
475 mprSetPtrChild(&mpv, "samba3", samba3);
476 mprSetVar(&mpv, "winsentries", mprWinsEntries(samba3));
477 mprSetVar(&mpv, "samaccounts", mprSamAccounts(samba3));
478 mprSetVar(&mpv, "shares", mprShares(samba3));
479 mprSetVar(&mpv, "secrets", mprSecrets(&samba3->secrets));
480 mprSetVar(&mpv, "groupmappings", mprGroupMappings(&samba3->group));
481 mprSetVar(&mpv, "aliases", mprAliases(&samba3->group));
482 mprSetVar(&mpv, "idmapdb", mprIdmapDb(&samba3->idmap));
483 mprSetVar(&mpv, "policy", mprPolicy(&samba3->policy));
484 mprSetVar(&mpv, "registry", mprRegistry(&samba3->registry));
485 mprSetVar(&mpv, "configuration", mprParam(samba3->configuration));
486 mprSetCFunction(&mpv, "find_domainsecrets", ejs_find_domainsecrets);
488 mpr_Return(eid, mpv);
495 setup C functions that be called from ejs
497 NTSTATUS smb_setup_ejs_samba3(void)
499 ejsDefineCFunction(-1, "samba3_read", ejs_samba3_read, NULL, MPR_VAR_SCRIPT_HANDLE);