2 Unix SMB/Netbios implementation.
4 NT Domain Authentication SMB / MSRPC client
5 Copyright (C) Andrew Tridgell 1994-1997
6 Copyright (C) Luke Kenneth Casson Leighton 1996-1997
7 Copyright (C) Jeremy Allison 1999.
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
30 /****************************************************************************
31 do a SAMR query user groups
32 ****************************************************************************/
33 BOOL get_samr_query_usergroups(struct cli_state *cli,
34 POLICY_HND *pol_open_domain, uint32 user_rid,
35 uint32 *num_groups, DOM_GID *gid)
37 POLICY_HND pol_open_user;
38 if (pol_open_domain == NULL || num_groups == NULL || gid == NULL)
41 /* send open domain (on user sid) */
42 if (!do_samr_open_user(cli,
50 /* send user groups query */
51 if (!do_samr_query_usergroups(cli,
55 DEBUG(5,("do_samr_query_usergroups: error in query user groups\n"));
58 return do_samr_close(cli, &pol_open_user);
62 /* DOES NOT COMPILE WITH THE NEW SAMR PARSE CODE. JRA. */
64 /****************************************************************************
65 do a SAMR query user info
66 ****************************************************************************/
67 BOOL get_samr_query_userinfo(struct cli_state *cli,
68 POLICY_HND *pol_open_domain,
70 uint32 user_rid, SAM_USER_INFO_21 *usr)
72 POLICY_HND pol_open_user;
73 if (pol_open_domain == NULL || usr == NULL)
76 memset((char *)usr, '\0', sizeof(*usr));
78 /* send open domain (on user sid) */
79 if (!do_samr_open_user(cli,
87 /* send user info query */
88 if (!do_samr_query_userinfo(cli,
90 info_level, (void*)usr))
92 DEBUG(5,("do_samr_query_userinfo: error in query user info, level 0x%x\n",
96 return do_samr_close(cli, &pol_open_user);
100 /****************************************************************************
101 do a SAMR change user password command
102 ****************************************************************************/
103 BOOL do_samr_chgpasswd_user(struct cli_state *cli,
104 char *srv_name, char *user_name,
105 char nt_newpass[516], uchar nt_oldhash[16],
106 char lm_newpass[516], uchar lm_oldhash[16])
110 SAMR_Q_CHGPASSWD_USER q_e;
111 SAMR_R_CHGPASSWD_USER r_e;
113 /* create and send a MSRPC command with api SAMR_CHGPASSWD_USER */
115 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
116 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
118 DEBUG(4,("SAMR Change User Password. server:%s username:%s\n",
119 srv_name, user_name));
121 init_samr_q_chgpasswd_user(&q_e, srv_name, user_name,
122 nt_newpass, nt_oldhash,
123 lm_newpass, lm_oldhash);
125 /* turn parameters into data stream */
126 if(!samr_io_q_chgpasswd_user("", &q_e, &data, 0)) {
128 prs_mem_free(&rdata);
132 /* send the data on \PIPE\ */
133 if (!rpc_api_pipe_req(cli, SAMR_CHGPASSWD_USER, &data, &rdata)) {
135 prs_mem_free(&rdata);
141 if(!samr_io_r_chgpasswd_user("", &r_e, &rdata, 0)) {
142 prs_mem_free(&rdata);
146 if (r_e.status != 0) {
147 /* report error code */
148 DEBUG(0,("SAMR_R_CHGPASSWD_USER: %s\n", get_nt_error_msg(r_e.status)));
149 prs_mem_free(&rdata);
153 prs_mem_free(&rdata);
160 /* CURRENTLY THIS DOESN'T COMPILE AND IS NOT USED ANYWHERE. JRA. */
162 /****************************************************************************
163 do a SAMR unknown 0x38 command
164 ****************************************************************************/
165 BOOL do_samr_unknown_38(struct cli_state *cli, char *srv_name)
170 SAMR_Q_UNKNOWN_38 q_e;
171 SAMR_R_UNKNOWN_38 r_e;
173 /* create and send a MSRPC command with api SAMR_ENUM_DOM_USERS */
175 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
176 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
178 DEBUG(4,("SAMR Unknown 38 server:%s\n", srv_name));
180 init_samr_q_unknown_38(&q_e, srv_name);
182 /* turn parameters into data stream */
183 if(!samr_io_q_unknown_38("", &q_e, &data, 0)) {
185 prs_mem_free(&rdata);
189 /* send the data on \PIPE\ */
190 if (!rpc_api_pipe_req(cli, SAMR_UNKNOWN_38, &data, &rdata)) {
192 prs_mem_free(&rdata);
198 if(!samr_io_r_unknown_38("", &r_e, &rdata, 0)) {
199 prs_mem_free(&rdata);
203 if (r_e.status != 0) {
204 /* report error code */
205 DEBUG(0,("SAMR_R_UNKNOWN_38: %s\n", get_nt_error_msg(r_e.status)));
206 prs_mem_free(&rdata);
210 prs_mem_free(&rdata);
216 /****************************************************************************
217 do a SAMR unknown 0x8 command
218 ****************************************************************************/
219 BOOL do_samr_query_dom_info(struct cli_state *cli,
220 POLICY_HND *domain_pol, uint16 switch_value)
224 SAMR_Q_QUERY_DOMAIN_INFO q_e;
225 SAMR_R_QUERY_DOMAIN_INFO r_e;
227 if (domain_pol == NULL)
230 /* create and send a MSRPC command with api SAMR_ENUM_DOM_USERS */
232 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
233 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
235 DEBUG(4,("SAMR Unknown 8 switch:%d\n", switch_value));
237 /* store the parameters */
238 init_samr_q_query_dom_info(&q_e, domain_pol, switch_value);
240 /* turn parameters into data stream */
241 if(!samr_io_q_query_dom_info("", &q_e, &data, 0)) {
243 prs_mem_free(&rdata);
247 /* send the data on \PIPE\ */
248 if (!rpc_api_pipe_req(cli, SAMR_QUERY_DOMAIN_INFO, &data, &rdata)) {
250 prs_mem_free(&rdata);
256 if(!samr_io_r_query_dom_info("", &r_e, &rdata, 0)) {
257 prs_mem_free(&rdata);
261 if (r_e.status != 0) {
262 /* report error code */
263 DEBUG(0,("SAMR_R_QUERY_DOMAIN_INFO: %s\n", get_nt_error_msg(r_e.status)));
264 prs_mem_free(&rdata);
268 prs_mem_free(&rdata);
275 /* CURRENTLY DOESN'T COMPILE WITH THE NEW SAMR PARSE CODE. JRA */
277 /****************************************************************************
278 do a SAMR enumerate users
279 ****************************************************************************/
280 BOOL do_samr_enum_dom_users(struct cli_state *cli,
281 POLICY_HND *pol, uint16 num_entries, uint16 unk_0,
282 uint16 acb_mask, uint16 unk_1, uint32 size,
283 struct acct_info **sam,
288 SAMR_Q_ENUM_DOM_USERS q_e;
289 SAMR_R_ENUM_DOM_USERS r_e;
293 if (pol == NULL || num_sam_users == NULL)
296 /* create and send a MSRPC command with api SAMR_ENUM_DOM_USERS */
298 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
299 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
301 DEBUG(4,("SAMR Enum SAM DB max size:%x\n", size));
303 /* store the parameters */
304 init_samr_q_enum_dom_users(&q_e, pol,
306 acb_mask, unk_1, size);
308 /* turn parameters into data stream */
309 if(!samr_io_q_enum_dom_users("", &q_e, &data, 0)) {
311 prs_mem_free(&rdata);
315 /* send the data on \PIPE\ */
316 if (!rpc_api_pipe_req(cli, SAMR_ENUM_DOM_USERS, &data, &rdata)) {
318 prs_mem_free(&rdata);
324 if(!samr_io_r_enum_dom_users("", &r_e, &rdata, 0)) {
325 prs_mem_free(&rdata);
329 if (r_e.status != 0) {
330 /* report error code */
331 DEBUG(0,("SAMR_R_ENUM_DOM_USERS: %s\n", get_nt_error_msg(r_e.status)));
332 prs_mem_free(&rdata);
336 *num_sam_users = r_e.num_entries2;
337 if (*num_sam_users > MAX_SAM_ENTRIES) {
338 *num_sam_users = MAX_SAM_ENTRIES;
339 DEBUG(2,("do_samr_enum_dom_users: sam user entries limited to %d\n",
343 *sam = (struct acct_info*) malloc(sizeof(struct acct_info) * (*num_sam_users));
348 for (i = 0; i < *num_sam_users; i++) {
349 (*sam)[i].smb_userid = r_e.sam[i].rid;
350 if (r_e.sam[i].hdr_name.buffer) {
351 char *acct_name = dos_unistrn2(r_e.uni_acct_name[name_idx].buffer,
352 r_e.uni_acct_name[name_idx].uni_str_len);
353 fstrcpy((*sam)[i].acct_name, acct_name);
356 memset((char *)(*sam)[i].acct_name, '\0', sizeof((*sam)[i].acct_name));
359 DEBUG(5,("do_samr_enum_dom_users: idx: %4d rid: %8x acct: %s\n",
360 i, (*sam)[i].smb_userid, (*sam)[i].acct_name));
363 prs_mem_free(&rdata );
369 /****************************************************************************
371 ****************************************************************************/
372 BOOL do_samr_connect(struct cli_state *cli,
373 char *srv_name, uint32 unknown_0,
374 POLICY_HND *connect_pol)
381 if (srv_name == NULL || connect_pol == NULL)
384 /* create and send a MSRPC command with api SAMR_CONNECT */
386 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
387 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
389 DEBUG(4,("SAMR Open Policy server:%s undoc value:%x\n",
390 srv_name, unknown_0));
392 /* store the parameters */
393 init_samr_q_connect(&q_o, srv_name, unknown_0);
395 /* turn parameters into data stream */
396 if(!samr_io_q_connect("", &q_o, &data, 0)) {
398 prs_mem_free(&rdata);
402 /* send the data on \PIPE\ */
403 if (!rpc_api_pipe_req(cli, SAMR_CONNECT, &data, &rdata)) {
405 prs_mem_free(&rdata);
411 if(!samr_io_r_connect("", &r_o, &rdata, 0)) {
412 prs_mem_free(&rdata);
416 if (r_o.status != 0) {
417 /* report error code */
418 DEBUG(0,("SAMR_R_CONNECT: %s\n", get_nt_error_msg(r_o.status)));
419 prs_mem_free(&rdata);
423 memcpy(connect_pol, &r_o.connect_pol, sizeof(r_o.connect_pol));
425 prs_mem_free(&rdata);
430 /****************************************************************************
432 ****************************************************************************/
433 BOOL do_samr_open_user(struct cli_state *cli,
434 POLICY_HND *pol, uint32 unk_0, uint32 rid,
435 POLICY_HND *user_pol)
439 SAMR_Q_OPEN_USER q_o;
440 SAMR_R_OPEN_USER r_o;
442 if (pol == NULL || user_pol == NULL)
445 /* create and send a MSRPC command with api SAMR_OPEN_USER */
447 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
448 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
450 DEBUG(4,("SAMR Open User. unk_0: %08x RID:%x\n",
453 /* store the parameters */
454 init_samr_q_open_user(&q_o, pol, unk_0, rid);
456 /* turn parameters into data stream */
457 if(!samr_io_q_open_user("", &q_o, &data, 0)) {
459 prs_mem_free(&rdata);
463 /* send the data on \PIPE\ */
464 if (!rpc_api_pipe_req(cli, SAMR_OPEN_USER, &data, &rdata)) {
466 prs_mem_free(&rdata);
472 if(!samr_io_r_open_user("", &r_o, &rdata, 0)) {
473 prs_mem_free(&rdata);
477 if (r_o.status != 0) {
478 /* report error code */
479 DEBUG(0,("SAMR_R_OPEN_USER: %s\n", get_nt_error_msg(r_o.status)));
480 prs_mem_free(&rdata);
484 memcpy(user_pol, &r_o.user_pol, sizeof(r_o.user_pol));
486 prs_mem_free(&rdata);
491 /****************************************************************************
492 do a SAMR Open Domain
493 ****************************************************************************/
494 BOOL do_samr_open_domain(struct cli_state *cli,
495 POLICY_HND *connect_pol, uint32 rid, DOM_SID *sid,
496 POLICY_HND *domain_pol)
501 SAMR_Q_OPEN_DOMAIN q_o;
502 SAMR_R_OPEN_DOMAIN r_o;
504 if (connect_pol == NULL || sid == NULL || domain_pol == NULL)
507 /* create and send a MSRPC command with api SAMR_OPEN_DOMAIN */
509 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
510 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
512 sid_to_string(sid_str, sid);
513 DEBUG(4,("SAMR Open Domain. SID:%s RID:%x\n", sid_str, rid));
515 /* store the parameters */
516 init_samr_q_open_domain(&q_o, connect_pol, rid, sid);
518 /* turn parameters into data stream */
519 if(!samr_io_q_open_domain("", &q_o, &data, 0)) {
521 prs_mem_free(&rdata);
525 /* send the data on \PIPE\ */
526 if (!rpc_api_pipe_req(cli, SAMR_OPEN_DOMAIN, &data, &rdata)) {
528 prs_mem_free(&rdata);
534 if(!samr_io_r_open_domain("", &r_o, &rdata, 0)) {
535 prs_mem_free(&rdata);
539 if (r_o.status != 0) {
540 /* report error code */
541 DEBUG(0,("SAMR_R_OPEN_DOMAIN: %s\n", get_nt_error_msg(r_o.status)));
542 prs_mem_free(&rdata);
546 memcpy(domain_pol, &r_o.domain_pol, sizeof(r_o.domain_pol));
548 prs_mem_free(&rdata);
555 /* CURRENTLY DOES NOT COMPILE AND IS NOT USED ANYWHERE. JRA. */
557 /****************************************************************************
558 do a SAMR Query Unknown 12
559 ****************************************************************************/
560 BOOL do_samr_query_unknown_12(struct cli_state *cli,
561 POLICY_HND *pol, uint32 rid, uint32 num_gids, uint32 *gids,
563 fstring als_names [MAX_LOOKUP_SIDS],
564 uint32 num_als_users[MAX_LOOKUP_SIDS])
568 SAMR_Q_LOOKUP_RIDS q_o;
569 SAMR_R_LOOKUP_RIDS r_o;
571 if (pol == NULL || rid == 0 || num_gids == 0 || gids == NULL ||
572 num_aliases == NULL || als_names == NULL || num_als_users == NULL )
575 /* create and send a MSRPC command with api SAMR_UNKNOWN_12 */
577 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
578 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
580 DEBUG(4,("SAMR Query Unknown 12.\n"));
582 /* store the parameters */
583 init_samr_q_lookup_rids(&q_o, pol, rid, num_gids, gids);
585 /* turn parameters into data stream */
586 if(!samr_io_q_lookup_rids("", &q_o, &data, 0)) {
588 prs_mem_free(&rdata);
592 /* send the data on \PIPE\ */
593 if (!rpc_api_pipe_req(cli, SAMR_LOOKUP_RIDS, &data, &rdata)) {
595 prs_mem_free(&rdata);
601 if(!samr_io_r_lookup_rids("", &r_o, &rdata, 0)) {
602 prs_mem_free(&rdata);
606 if (r_o.status != 0) {
607 /* report error code */
608 DEBUG(0,("SAMR_R_UNKNOWN_12: %s\n", get_nt_error_msg(r_o.status)));
609 prs_mem_free(&rdata);
613 if (r_o.ptr_aliases != 0 && r_o.ptr_als_usrs != 0 &&
614 r_o.num_als_usrs1 == r_o.num_aliases1) {
617 *num_aliases = r_o.num_aliases1;
619 for (i = 0; i < r_o.num_aliases1; i++) {
620 fstrcpy(als_names[i], dos_unistrn2(r_o.uni_als_name[i].buffer,
621 r_o.uni_als_name[i].uni_str_len));
623 for (i = 0; i < r_o.num_als_usrs1; i++) {
624 num_als_users[i] = r_o.num_als_usrs[i];
626 } else if (r_o.ptr_aliases == 0 && r_o.ptr_als_usrs == 0) {
629 prs_mem_free(&rdata);
633 prs_mem_free(&rdata);
639 /****************************************************************************
640 do a SAMR Query User Groups
641 ****************************************************************************/
642 BOOL do_samr_query_usergroups(struct cli_state *cli,
643 POLICY_HND *pol, uint32 *num_groups, DOM_GID *gid)
647 SAMR_Q_QUERY_USERGROUPS q_o;
648 SAMR_R_QUERY_USERGROUPS r_o;
650 if (pol == NULL || gid == NULL || num_groups == 0)
653 /* create and send a MSRPC command with api SAMR_QUERY_USERGROUPS */
655 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
656 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
658 DEBUG(4,("SAMR Query User Groups.\n"));
660 /* store the parameters */
661 init_samr_q_query_usergroups(&q_o, pol);
663 /* turn parameters into data stream */
664 if(!samr_io_q_query_usergroups("", &q_o, &data, 0)) {
666 prs_mem_free(&rdata);
670 /* send the data on \PIPE\ */
671 if (!rpc_api_pipe_req(cli, SAMR_QUERY_USERGROUPS, &data, &rdata)) {
673 prs_mem_free(&rdata);
682 if(!samr_io_r_query_usergroups("", &r_o, &rdata, 0)) {
683 prs_mem_free(&rdata);
687 if (r_o.status != 0) {
688 /* report error code */
689 DEBUG(0,("SAMR_R_QUERY_USERGROUPS: %s\n", get_nt_error_msg(r_o.status)));
690 prs_mem_free(&rdata);
694 *num_groups = r_o.num_entries;
696 prs_mem_free(&rdata);
703 /* CURRENTLY DOES NOT COMPILE WITH THE NEW SAMR PARSE CODE. JRA */
705 /****************************************************************************
706 do a SAMR Query User Info
707 ****************************************************************************/
708 BOOL do_samr_query_userinfo(struct cli_state *cli,
709 POLICY_HND *pol, uint16 switch_value, void* usr)
713 SAMR_Q_QUERY_USERINFO q_o;
714 SAMR_R_QUERY_USERINFO r_o;
716 if (pol == NULL || usr == NULL || switch_value == 0)
719 /* create and send a MSRPC command with api SAMR_QUERY_USERINFO */
721 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
722 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
724 DEBUG(4,("SAMR Query User Info. level: %d\n", switch_value));
726 /* store the parameters */
727 init_samr_q_query_userinfo(&q_o, pol, switch_value);
729 /* turn parameters into data stream */
730 if(!samr_io_q_query_userinfo("", &q_o, &data, 0)) {
732 prs_mem_free(&rdata);
736 /* send the data on \PIPE\ */
737 if (!rpc_api_pipe_req(cli, SAMR_QUERY_USERINFO, &data, &rdata)) {
739 prs_mem_free(&rdata);
748 if(!samr_io_r_query_userinfo("", &r_o, &rdata, 0)) {
749 prs_mem_free(&rdata);
753 if (r_o.status != 0) {
754 /* report error code */
755 DEBUG(0,("SAMR_R_QUERY_USERINFO: %s\n", get_nt_error_msg(r_o.status)));
756 prs_mem_free(&rdata);
760 if (r_o.switch_value != switch_value) {
761 DEBUG(0,("SAMR_R_QUERY_USERINFO: received incorrect level %d\n",
763 prs_mem_free(&rdata);
768 prs_mem_free(&rdata);
772 prs_mem_free(&rdata);
779 /****************************************************************************
781 ****************************************************************************/
782 BOOL do_samr_close(struct cli_state *cli, POLICY_HND *hnd)
786 SAMR_Q_CLOSE_HND q_c;
787 SAMR_R_CLOSE_HND r_c;
792 prs_init(&data, MAX_PDU_FRAG_LEN, cli->mem_ctx, MARSHALL);
793 prs_init(&rdata, 0, cli->mem_ctx, UNMARSHALL);
795 /* create and send a MSRPC command with api SAMR_CLOSE_HND */
797 DEBUG(4,("SAMR Close\n"));
799 /* store the parameters */
800 init_samr_q_close_hnd(&q_c, hnd);
802 /* turn parameters into data stream */
803 if(!samr_io_q_close_hnd("", &q_c, &data, 0)) {
805 prs_mem_free(&rdata);
809 /* send the data on \PIPE\ */
810 if (!rpc_api_pipe_req(cli, SAMR_CLOSE_HND, &data, &rdata)) {
812 prs_mem_free(&rdata);
818 if(!samr_io_r_close_hnd("", &r_c, &rdata, 0)) {
819 prs_mem_free(&rdata);
823 if (r_c.status != 0) {
824 /* report error code */
825 DEBUG(0,("SAMR_CLOSE_HND: %s\n", get_nt_error_msg(r_c.status)));
826 prs_mem_free(&rdata);
830 /* check that the returned policy handle is all zeros */
832 if (IVAL(&r_c.pol.data1,0) || IVAL(&r_c.pol.data2,0) || SVAL(&r_c.pol.data3,0) ||
833 SVAL(&r_c.pol.data4,0) || IVAL(r_c.pol.data5,0) || IVAL(r_c.pol.data5,4) ) {
834 DEBUG(0,("SAMR_CLOSE_HND: non-zero handle returned\n"));
835 prs_mem_free(&rdata);
839 prs_mem_free(&rdata);