[GLUE] Rsync SAMBA_3_2_0 SVN r25598 in order to create the v3-2-test branch.
[samba.git] / source / utils / pdbedit.c
index 0a6fb7e8bec82fd0020b86e8bf0f3c0a9543a30d..66a706d1ce99c990ffa4a5bd1e29358495ba8305 100644 (file)
@@ -8,7 +8,7 @@
 
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
+   the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.
    
    This program is distributed in the hope that it will be useful,
@@ -17,8 +17,7 @@
    GNU General Public License for more details.
    
    You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 
 #include "includes.h"
@@ -96,7 +95,7 @@ static int export_database (struct pdb_methods *in,
                                return 1;
                        }
 
-                       printf("Importing accout for %s...", user->username);
+                       printf("Importing account for %s...", user->username);
                        if ( !NT_STATUS_IS_OK(out->getsampwnam( out, account, user->username )) ) {
                                status = out->add_sam_account(out, user);
                        } else {
@@ -176,11 +175,6 @@ static int reinit_account_policies (void)
                }
        }
 
-       if (!remove_account_policy_migrated()) {
-               fprintf(stderr, "Can't remove marker from tdb\n");
-               return -1;
-       }
-
        return 0;
 }
 
@@ -193,11 +187,6 @@ static int export_account_policies (struct pdb_methods *in, struct pdb_methods *
 {
        int i;
 
-       if (!account_policy_migrated(True)) {
-               fprintf(stderr, "Unable to set account policy marker in tdb\n");
-               return -1;
-       }
-
        for ( i=1; decode_account_policy_name(i) != NULL; i++ ) {
                uint32 policy_value;
                NTSTATUS status;
@@ -206,7 +195,6 @@ static int export_account_policies (struct pdb_methods *in, struct pdb_methods *
 
                if ( NT_STATUS_IS_ERR(status) ) {
                        fprintf(stderr, "Unable to get account policy from %s\n", in->name);
-                       remove_account_policy_migrated();
                        return -1;
                }
 
@@ -214,7 +202,6 @@ static int export_account_policies (struct pdb_methods *in, struct pdb_methods *
 
                if ( NT_STATUS_IS_ERR(status) ) {
                        fprintf(stderr, "Unable to migrate account policy to %s\n", out->name);
-                       remove_account_policy_migrated();
                        return -1;
                }
        }
@@ -297,14 +284,14 @@ static int print_sam_info (struct samu *sam_pwent, BOOL verbosity, BOOL smbpwdst
                       lm_passwd,
                       nt_passwd,
                       pdb_encode_acct_ctrl(pdb_get_acct_ctrl(sam_pwent),NEW_PW_FORMAT_SPACE_PADDED_LEN),
-                      (uint32)pdb_get_pass_last_set_time(sam_pwent));
+                      (uint32)convert_time_t_to_uint32(pdb_get_pass_last_set_time(sam_pwent)));
        } else {
                uid = nametouid(pdb_get_username(sam_pwent));
                printf ("%s:%lu:%s\n", pdb_get_username(sam_pwent), (unsigned long)uid, 
                        pdb_get_fullname(sam_pwent));
        }
 
-       return 0;       
+       return 0;
 }
 
 /*********************************************************
@@ -419,8 +406,7 @@ static int set_user_info (struct pdb_methods *in, const char *username,
                          const char *drive, const char *script, 
                          const char *profile, const char *account_control,
                          const char *user_sid, const char *user_domain,
-                         const BOOL badpw, const BOOL hours,
-                         time_t pwd_can_change, time_t pwd_must_change)
+                         const BOOL badpw, const BOOL hours)
 {
        BOOL updated_autolock = False, updated_badpw = False;
        struct samu *sam_pwent=NULL;
@@ -447,14 +433,6 @@ static int set_user_info (struct pdb_methods *in, const char *username,
                pdb_set_hours(sam_pwent, hours_array, PDB_CHANGED);
        }
 
-       if (pwd_can_change != -1) {
-               pdb_set_pass_can_change_time(sam_pwent, pwd_can_change, PDB_CHANGED);
-       }
-
-       if (pwd_must_change != -1) {
-               pdb_set_pass_must_change_time(sam_pwent, pwd_must_change, PDB_CHANGED);
-       }
-
        if (!pdb_update_autolock_flag(sam_pwent, &updated_autolock)) {
                DEBUG(2,("pdb_update_autolock_flag failed.\n"));
        }
@@ -594,6 +572,7 @@ static int new_user (struct pdb_methods *in, const char *username,
                        
                        if (sscanf(user_sid, "%d", &u_rid) != 1) {
                                fprintf(stderr, "Error passed string is not a complete user SID or RID!\n");
+                               TALLOC_FREE(sam_pwent);
                                return -1;
                        }
                        sid_copy(&u_sid, get_global_sam_sid());
@@ -644,28 +623,25 @@ static int new_machine (struct pdb_methods *in, const char *machine_in)
        fstrcpy(machineaccount, machinename);
        fstrcat(machineaccount, "$");
 
-       if ((pwd = getpwnam_alloc(NULL, machineaccount))) {
-
-               if ( (sam_pwent = samu_new( NULL )) == NULL ) {
-                       fprintf(stderr, "Memory allocation error!\n");
-                       TALLOC_FREE(pwd);
-                       return -1;
-               }
+       if ( !(pwd = getpwnam_alloc( NULL, machineaccount )) ) {
+               DEBUG(0,("Cannot locate Unix account for %s\n", machineaccount));
+               return -1;
+       }
 
-               if ( !NT_STATUS_IS_OK(samu_set_unix(sam_pwent, pwd )) ) {
-                       fprintf(stderr, "Could not init sam from pw\n");
-                       TALLOC_FREE(pwd);
-                       return -1;
-               }
+       if ( (sam_pwent = samu_new( NULL )) == NULL ) {
+               fprintf(stderr, "Memory allocation error!\n");
+               TALLOC_FREE(pwd);
+               return -1;
+       }
 
+       if ( !NT_STATUS_IS_OK(samu_alloc_rid_unix(sam_pwent, pwd )) ) {
+               fprintf(stderr, "Could not init sam from pw\n");
                TALLOC_FREE(pwd);
-       } else {
-               if ( (sam_pwent = samu_new( NULL )) == NULL ) {
-                       fprintf(stderr, "Could not init sam from pw\n");
-                       return -1;
-               }
+               return -1;
        }
 
+       TALLOC_FREE(pwd);
+
        pdb_set_plaintext_passwd (sam_pwent, machinename);
        pdb_set_username (sam_pwent, machineaccount, PDB_CHANGED);      
        pdb_set_acct_ctrl (sam_pwent, ACB_WSTRUST, PDB_CHANGED);
@@ -778,11 +754,11 @@ int main (int argc, char **argv)
        BOOL account_policy_value_set = False;
        static BOOL badpw_reset = False;
        static BOOL hours_reset = False;
-       static char *pwd_can_change_time = NULL;
-       static char *pwd_must_change_time = NULL;
        static char *pwd_time_format = NULL;
        static BOOL pw_from_stdin = False;
        struct pdb_methods *bin, *bout, *bdef;
+       char *configfile = NULL;
+       TALLOC_CTX *frame = talloc_stackframe();
        poptContext pc;
        struct poptOption long_options[] = {
                POPT_AUTOHELP
@@ -814,14 +790,19 @@ int main (int argc, char **argv)
                {"force-initialized-passwords", 0, POPT_ARG_NONE, &force_initialised_password, 0, "Force initialization of corrupt password strings in a passdb backend", NULL},
                {"bad-password-count-reset", 'z', POPT_ARG_NONE, &badpw_reset, 0, "reset bad password count", NULL},
                {"logon-hours-reset", 'Z', POPT_ARG_NONE, &hours_reset, 0, "reset logon hours", NULL},
-               {"pwd-can-change-time", 0, POPT_ARG_STRING, &pwd_can_change_time, 0, "Set password can change time (unix time in seconds since 1970 if time format not provided)", NULL },
-               {"pwd-must-change-time", 0, POPT_ARG_STRING, &pwd_must_change_time, 0, "Set password must change time (unix time in seconds since 1970 if time format not provided)", NULL },
                {"time-format", 0, POPT_ARG_STRING, &pwd_time_format, 0, "The time format for time parameters", NULL },
                {"password-from-stdin", 't', POPT_ARG_NONE, &pw_from_stdin, 0, "get password from standard in", NULL},
                POPT_COMMON_SAMBA
                POPT_TABLEEND
        };
        
+       /* we shouldn't have silly checks like this */
+       if (getuid() != 0) {
+               d_fprintf(stderr, "You must be root to use pdbedit\n");
+               TALLOC_FREE(frame);
+               return -1;
+       }
+       
        bin = bout = bdef = NULL;
 
        load_case_tables();
@@ -836,6 +817,9 @@ int main (int argc, char **argv)
                case 'C':
                        account_policy_value_set = True;
                        break;
+               case 's':
+                       configfile = optarg;
+                       break;
                }
        }
 
@@ -849,7 +833,7 @@ int main (int argc, char **argv)
                exit(1);
        }
 
-       if(!initialize_password_db(False))
+       if(!initialize_password_db(False, NULL))
                exit(1);
 
        if (!init_names())
@@ -878,9 +862,7 @@ int main (int argc, char **argv)
                        (backend_in ? BIT_IMPORT : 0) +
                        (backend_out ? BIT_EXPORT : 0) +
                        (badpw_reset ? BIT_BADPWRESET : 0) +
-                       (hours_reset ? BIT_LOGONHOURS : 0) +
-                       (pwd_can_change_time ? BIT_CAN_CHANGE: 0) +
-                       (pwd_must_change_time ? BIT_MUST_CHANGE: 0);
+                       (hours_reset ? BIT_LOGONHOURS : 0);
 
        if (setparms & BIT_BACKEND) {
                if (!NT_STATUS_IS_OK(make_pdb_method_name( &bdef, backend ))) {
@@ -906,12 +888,18 @@ int main (int argc, char **argv)
                uint32 value;
                int field = account_policy_name_to_fieldnum(account_policy);
                if (field == 0) {
-                       char *apn = account_policy_names_list();
-                       fprintf(stderr, "No account policy by that name\n");
-                       if (apn) {
-                               fprintf(stderr, "Account policy names are :\n%s\n", apn);
+                       const char **names;
+                       int count;
+                       int i;
+                       account_policy_names_list(&names, &count);
+                       fprintf(stderr, "No account policy by that name!\n");
+                       if (count !=0) {
+                               fprintf(stderr, "Account policy names are:\n");
+                               for (i = 0; i < count ; i++) {
+                                       d_fprintf(stderr, "%s\n", names[i]);
+                               }
                        }
-                       SAFE_FREE(apn);
+                       SAFE_FREE(names);
                        exit(1);
                }
                if (!pdb_get_account_policy(field, &value)) {
@@ -1052,67 +1040,9 @@ int main (int argc, char **argv)
 
                /* account modification operations */
                if (!(checkparms & ~(BIT_MODIFY + BIT_USER))) {
-                       time_t pwd_can_change = -1;
-                       time_t pwd_must_change = -1;
-                       const char *errstr;
-
-                       if (pwd_can_change_time) {
-                               errstr = "can";
-                               if (pwd_time_format) {
-                                       struct tm tm;
-                                       char *ret;
-
-                                       memset(&tm, 0, sizeof(struct tm));
-                                       ret = strptime(pwd_can_change_time, pwd_time_format, &tm);
-                                       if (ret == NULL || *ret != '\0') {
-                                               goto error;
-                                       }
-
-                                       pwd_can_change = mktime(&tm);
-
-                                       if (pwd_can_change == -1) {
-                                               goto error;
-                                       }
-                               } else { /* assume it is unix time */
-                                       errno = 0;
-                                       pwd_can_change = strtol(pwd_can_change_time, NULL, 10);
-                                       if (errno) {
-                                               goto error;
-                                       }
-                               }       
-                       }
-                       if (pwd_must_change_time) {
-                               errstr = "must";
-                               if (pwd_time_format) {
-                                       struct tm tm;
-                                       char *ret;
-
-                                       memset(&tm, 0, sizeof(struct tm));
-                                       ret = strptime(pwd_must_change_time, pwd_time_format, &tm);
-                                       if (ret == NULL || *ret != '\0') {
-                                               goto error;
-                                       }
-
-                                       pwd_must_change = mktime(&tm);
-
-                                       if (pwd_must_change == -1) {
-                                               goto error;
-                                       }
-                               } else { /* assume it is unix time */
-                                       errno = 0;
-                                       pwd_must_change = strtol(pwd_must_change_time, NULL, 10);
-                                       if (errno) {
-                                               goto error;
-                                       }
-                               }       
-                       }
                        return set_user_info (bdef, user_name, full_name, home_dir,
                                acct_desc, home_drive, logon_script, profile_path, account_control,
-                               user_sid, user_domain, badpw_reset, hours_reset, pwd_can_change, 
-                               pwd_must_change);
-error:
-                       fprintf (stderr, "Error parsing the time in pwd-%s-change-time!\n", errstr);
-                       return -1;
+                               user_sid, user_domain, badpw_reset, hours_reset);
                }
        }
 
@@ -1121,5 +1051,6 @@ error:
        }
        poptPrintHelp(pc, stderr, 0);
 
+       TALLOC_FREE(frame);
        return 1;
 }