source3/rpc_server/srv_spoolss_util.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *
   4  *  SPOOLSS RPC Pipe server / winreg client routines
   5  *
   6  *  Copyright (c) 2010      Andreas Schneider <asn@samba.org>
   7  *
   8  *  This program is free software; you can redistribute it and/or modify
   9  *  it under the terms of the GNU General Public License as published by
  10  *  the Free Software Foundation; either version 3 of the License, or
  11  *  (at your option) any later version.
  12  *
  13  *  This program is distributed in the hope that it will be useful,
  14  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  15  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16  *  GNU General Public License for more details.
  17  *
  18  *  You should have received a copy of the GNU General Public License
  19  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  20  */
  21
  22 #include "includes.h"
  23 #include "srv_spoolss_util.h"
  24 #include "../librpc/gen_ndr/srv_winreg.h"
  25 #include "../librpc/gen_ndr/cli_winreg.h"
  26
  27 #define TOP_LEVEL_PRINT_KEY "SOFTWARE\\Microsoft\\Windows NT\\CurrentVersion\\Print"
  28 #define TOP_LEVEL_PRINT_PRINTERS_KEY TOP_LEVEL_PRINT_KEY "\\Printers"
  29 #define TOP_LEVEL_CONTROL_KEY "SYSTEM\\CurrentControlSet\\Control\\Print"
  30 #define TOP_LEVEL_CONTROL_FORMS_KEY TOP_LEVEL_CONTROL_KEY "\\Forms"
  31
  32 #define EMPTY_STRING ""
  33 static const char *empty_string_array[1] = { NULL };
  34 #define EMPTY_STRING_ARRAY empty_string_array
  35
  36 #define CHECK_ERROR(result) \
  37         if (W_ERROR_IS_OK(result)) continue; \
  38         if (W_ERROR_EQUAL(result, WERR_NOT_FOUND)) result = WERR_OK; \
  39         if (!W_ERROR_IS_OK(result)) break
  40
  41 /*        FLAGS,                NAME,                              with,   height,   left, top, right, bottom */
  42 static const struct spoolss_FormInfo1 builtin_forms1[] = {
  43         { SPOOLSS_FORM_BUILTIN, "Letter",                         {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
  44         { SPOOLSS_FORM_BUILTIN, "Letter Small",                   {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
  45         { SPOOLSS_FORM_BUILTIN, "Tabloid",                        {0x44368,0x696b8}, {0x0,0x0,0x44368,0x696b8} },
  46         { SPOOLSS_FORM_BUILTIN, "Ledger",                         {0x696b8,0x44368}, {0x0,0x0,0x696b8,0x44368} },
  47         { SPOOLSS_FORM_BUILTIN, "Legal",                          {0x34b5c,0x56d10}, {0x0,0x0,0x34b5c,0x56d10} },
  48         { SPOOLSS_FORM_BUILTIN, "Statement",                      {0x221b4,0x34b5c}, {0x0,0x0,0x221b4,0x34b5c} },
  49         { SPOOLSS_FORM_BUILTIN, "Executive",                      {0x2cf56,0x411cc}, {0x0,0x0,0x2cf56,0x411cc} },
  50         { SPOOLSS_FORM_BUILTIN, "A3",                             {0x48828,0x668a0}, {0x0,0x0,0x48828,0x668a0} },
  51         { SPOOLSS_FORM_BUILTIN, "A4",                             {0x33450,0x48828}, {0x0,0x0,0x33450,0x48828} },
  52         { SPOOLSS_FORM_BUILTIN, "A4 Small",                       {0x33450,0x48828}, {0x0,0x0,0x33450,0x48828} },
  53         { SPOOLSS_FORM_BUILTIN, "A5",                             {0x24220,0x33450}, {0x0,0x0,0x24220,0x33450} },
  54         { SPOOLSS_FORM_BUILTIN, "B4 (JIS)",                       {0x3ebe8,0x58de0}, {0x0,0x0,0x3ebe8,0x58de0} },
  55         { SPOOLSS_FORM_BUILTIN, "B5 (JIS)",                       {0x2c6f0,0x3ebe8}, {0x0,0x0,0x2c6f0,0x3ebe8} },
  56         { SPOOLSS_FORM_BUILTIN, "Folio",                          {0x34b5c,0x509d8}, {0x0,0x0,0x34b5c,0x509d8} },
  57         { SPOOLSS_FORM_BUILTIN, "Quarto",                         {0x347d8,0x43238}, {0x0,0x0,0x347d8,0x43238} },
  58         { SPOOLSS_FORM_BUILTIN, "10x14",                          {0x3e030,0x56d10}, {0x0,0x0,0x3e030,0x56d10} },
  59         { SPOOLSS_FORM_BUILTIN, "11x17",                          {0x44368,0x696b8}, {0x0,0x0,0x44368,0x696b8} },
  60         { SPOOLSS_FORM_BUILTIN, "Note",                           {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
  61         { SPOOLSS_FORM_BUILTIN, "Envelope #9",                    {0x18079,0x37091}, {0x0,0x0,0x18079,0x37091} },
  62         { SPOOLSS_FORM_BUILTIN, "Envelope #10",                   {0x19947,0x3ae94}, {0x0,0x0,0x19947,0x3ae94} },
  63         { SPOOLSS_FORM_BUILTIN, "Envelope #11",                   {0x1be7c,0x40565}, {0x0,0x0,0x1be7c,0x40565} },
  64         { SPOOLSS_FORM_BUILTIN, "Envelope #12",                   {0x1d74a,0x44368}, {0x0,0x0,0x1d74a,0x44368} },
  65         { SPOOLSS_FORM_BUILTIN, "Envelope #14",                   {0x1f018,0x47504}, {0x0,0x0,0x1f018,0x47504} },
  66         { SPOOLSS_FORM_BUILTIN, "C size sheet",                   {0x696b8,0x886d0}, {0x0,0x0,0x696b8,0x886d0} },
  67         { SPOOLSS_FORM_BUILTIN, "D size sheet",                   {0x886d0,0xd2d70}, {0x0,0x0,0x886d0,0xd2d70} },
  68         { SPOOLSS_FORM_BUILTIN, "E size sheet",                   {0xd2d70,0x110da0},{0x0,0x0,0xd2d70,0x110da0} },
  69         { SPOOLSS_FORM_BUILTIN, "Envelope DL",                    {0x1adb0,0x35b60}, {0x0,0x0,0x1adb0,0x35b60} },
  70         { SPOOLSS_FORM_BUILTIN, "Envelope C5",                    {0x278d0,0x37e88}, {0x0,0x0,0x278d0,0x37e88} },
  71         { SPOOLSS_FORM_BUILTIN, "Envelope C3",                    {0x4f1a0,0x6fd10}, {0x0,0x0,0x4f1a0,0x6fd10} },
  72         { SPOOLSS_FORM_BUILTIN, "Envelope C4",                    {0x37e88,0x4f1a0}, {0x0,0x0,0x37e88,0x4f1a0} },
  73         { SPOOLSS_FORM_BUILTIN, "Envelope C6",                    {0x1bd50,0x278d0}, {0x0,0x0,0x1bd50,0x278d0} },
  74         { SPOOLSS_FORM_BUILTIN, "Envelope C65",                   {0x1bd50,0x37e88}, {0x0,0x0,0x1bd50,0x37e88} },
  75         { SPOOLSS_FORM_BUILTIN, "Envelope B4",                    {0x3d090,0x562e8}, {0x0,0x0,0x3d090,0x562e8} },
  76         { SPOOLSS_FORM_BUILTIN, "Envelope B5",                    {0x2af80,0x3d090}, {0x0,0x0,0x2af80,0x3d090} },
  77         { SPOOLSS_FORM_BUILTIN, "Envelope B6",                    {0x2af80,0x1e848}, {0x0,0x0,0x2af80,0x1e848} },
  78         { SPOOLSS_FORM_BUILTIN, "Envelope",                       {0x1adb0,0x38270}, {0x0,0x0,0x1adb0,0x38270} },
  79         { SPOOLSS_FORM_BUILTIN, "Envelope Monarch",               {0x18079,0x2e824}, {0x0,0x0,0x18079,0x2e824} },
  80         { SPOOLSS_FORM_BUILTIN, "6 3/4 Envelope",                 {0x167ab,0x284ec}, {0x0,0x0,0x167ab,0x284ec} },
  81         { SPOOLSS_FORM_BUILTIN, "US Std Fanfold",                 {0x5c3e1,0x44368}, {0x0,0x0,0x5c3e1,0x44368} },
  82         { SPOOLSS_FORM_BUILTIN, "German Std Fanfold",             {0x34b5c,0x4a6a0}, {0x0,0x0,0x34b5c,0x4a6a0} },
  83         { SPOOLSS_FORM_BUILTIN, "German Legal Fanfold",           {0x34b5c,0x509d8}, {0x0,0x0,0x34b5c,0x509d8} },
  84         { SPOOLSS_FORM_BUILTIN, "B4 (ISO)",                       {0x3d090,0x562e8}, {0x0,0x0,0x3d090,0x562e8} },
  85         { SPOOLSS_FORM_BUILTIN, "Japanese Postcard",              {0x186a0,0x24220}, {0x0,0x0,0x186a0,0x24220} },
  86         { SPOOLSS_FORM_BUILTIN, "9x11",                           {0x37cf8,0x44368}, {0x0,0x0,0x37cf8,0x44368} },
  87         { SPOOLSS_FORM_BUILTIN, "10x11",                          {0x3e030,0x44368}, {0x0,0x0,0x3e030,0x44368} },
  88         { SPOOLSS_FORM_BUILTIN, "15x11",                          {0x5d048,0x44368}, {0x0,0x0,0x5d048,0x44368} },
  89         { SPOOLSS_FORM_BUILTIN, "Envelope Invite",                {0x35b60,0x35b60}, {0x0,0x0,0x35b60,0x35b60} },
  90         { SPOOLSS_FORM_BUILTIN, "Reserved48",                     {0x1,0x1},         {0x0,0x0,0x1,0x1} },
  91         { SPOOLSS_FORM_BUILTIN, "Reserved49",                     {0x1,0x1},         {0x0,0x0,0x1,0x1} },
  92         { SPOOLSS_FORM_BUILTIN, "Letter Extra",                   {0x3ae94,0x4a6a0}, {0x0,0x0,0x3ae94,0x4a6a0} },
  93         { SPOOLSS_FORM_BUILTIN, "Legal Extra",                    {0x3ae94,0x5d048}, {0x0,0x0,0x3ae94,0x5d048} },
  94         { SPOOLSS_FORM_BUILTIN, "Tabloid Extra",                  {0x4a6a0,0x6f9f0}, {0x0,0x0,0x4a6a0,0x6f9f0} },
  95         { SPOOLSS_FORM_BUILTIN, "A4 Extra",                       {0x397c2,0x4eb16}, {0x0,0x0,0x397c2,0x4eb16} },
  96         { SPOOLSS_FORM_BUILTIN, "Letter Transverse",              {0x34b5c,0x44368}, {0x0,0x0,0x34b5c,0x44368} },
  97         { SPOOLSS_FORM_BUILTIN, "A4 Transverse",                  {0x33450,0x48828}, {0x0,0x0,0x33450,0x48828} },
  98         { SPOOLSS_FORM_BUILTIN, "Letter Extra Transverse",        {0x3ae94,0x4a6a0}, {0x0,0x0,0x3ae94,0x4a6a0} },
  99         { SPOOLSS_FORM_BUILTIN, "Super A",                        {0x376b8,0x56ea0}, {0x0,0x0,0x376b8,0x56ea0} },
 100         { SPOOLSS_FORM_BUILTIN, "Super B",                        {0x4a768,0x76e58}, {0x0,0x0,0x4a768,0x76e58} },
 101         { SPOOLSS_FORM_BUILTIN, "Letter Plus",                    {0x34b5c,0x4eb16}, {0x0,0x0,0x34b5c,0x4eb16} },
 102         { SPOOLSS_FORM_BUILTIN, "A4 Plus",                        {0x33450,0x50910}, {0x0,0x0,0x33450,0x50910} },
 103         { SPOOLSS_FORM_BUILTIN, "A5 Transverse",                  {0x24220,0x33450}, {0x0,0x0,0x24220,0x33450} },
 104         { SPOOLSS_FORM_BUILTIN, "B5 (JIS) Transverse",            {0x2c6f0,0x3ebe8}, {0x0,0x0,0x2c6f0,0x3ebe8} },
 105         { SPOOLSS_FORM_BUILTIN, "A3 Extra",                       {0x4e9d0,0x6ca48}, {0x0,0x0,0x4e9d0,0x6ca48} },
 106         { SPOOLSS_FORM_BUILTIN, "A5 Extra",                       {0x2a7b0,0x395f8}, {0x0,0x0,0x2a7b0,0x395f8} },
 107         { SPOOLSS_FORM_BUILTIN, "B5 (ISO) Extra",                 {0x31128,0x43620}, {0x0,0x0,0x31128,0x43620} },
 108         { SPOOLSS_FORM_BUILTIN, "A2",                             {0x668a0,0x91050}, {0x0,0x0,0x668a0,0x91050} },
 109         { SPOOLSS_FORM_BUILTIN, "A3 Transverse",                  {0x48828,0x668a0}, {0x0,0x0,0x48828,0x668a0} },
 110         { SPOOLSS_FORM_BUILTIN, "A3 Extra Transverse",            {0x4e9d0,0x6ca48}, {0x0,0x0,0x4e9d0,0x6ca48} },
 111         { SPOOLSS_FORM_BUILTIN, "Japanese Double Postcard",       {0x30d40,0x24220}, {0x0,0x0,0x30d40,0x24220} },
 112         { SPOOLSS_FORM_BUILTIN, "A6",                             {0x19a28,0x24220}, {0x0,0x0,0x19a28,0x24220} },
 113         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Kaku #2",      {0x3a980,0x510e0}, {0x0,0x0,0x3a980,0x510e0} },
 114         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Kaku #3",      {0x34bc0,0x43a08}, {0x0,0x0,0x34bc0,0x43a08} },
 115         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Chou #3",      {0x1d4c0,0x395f8}, {0x0,0x0,0x1d4c0,0x395f8} },
 116         { SPOOLSS_FORM_BUILTIN, "Japanese Envelope Chou #4",      {0x15f90,0x320c8}, {0x0,0x0,0x15f90,0x320c8} },
 117         { SPOOLSS_FORM_BUILTIN, "Letter Rotated",                 {0x44368,0x34b5c}, {0x0,0x0,0x44368,0x34b5c} },
 118         { SPOOLSS_FORM_BUILTIN, "A3 Rotated",                     {0x668a0,0x48828}, {0x0,0x0,0x668a0,0x48828} },
 119         { SPOOLSS_FORM_BUILTIN, "A4 Rotated",                     {0x48828,0x33450}, {0x0,0x0,0x48828,0x33450} },
 120         { SPOOLSS_FORM_BUILTIN, "A5 Rotated",                     {0x33450,0x24220}, {0x0,0x0,0x33450,0x24220} },
 121         { SPOOLSS_FORM_BUILTIN, "B4 (JIS) Rotated",               {0x58de0,0x3ebe8}, {0x0,0x0,0x58de0,0x3ebe8} },
 122         { SPOOLSS_FORM_BUILTIN, "B5 (JIS) Rotated",               {0x3ebe8,0x2c6f0}, {0x0,0x0,0x3ebe8,0x2c6f0} },
 123         { SPOOLSS_FORM_BUILTIN, "Japanese Postcard Rotated",      {0x24220,0x186a0}, {0x0,0x0,0x24220,0x186a0} },
 124         { SPOOLSS_FORM_BUILTIN, "Double Japan Postcard Rotated",  {0x24220,0x30d40}, {0x0,0x0,0x24220,0x30d40} },
 125         { SPOOLSS_FORM_BUILTIN, "A6 Rotated",                     {0x24220,0x19a28}, {0x0,0x0,0x24220,0x19a28} },
 126         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Kaku #2 Rotated", {0x510e0,0x3a980}, {0x0,0x0,0x510e0,0x3a980} },
 127         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Kaku #3 Rotated", {0x43a08,0x34bc0}, {0x0,0x0,0x43a08,0x34bc0} },
 128         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Chou #3 Rotated", {0x395f8,0x1d4c0}, {0x0,0x0,0x395f8,0x1d4c0} },
 129         { SPOOLSS_FORM_BUILTIN, "Japan Envelope Chou #4 Rotated", {0x320c8,0x15f90}, {0x0,0x0,0x320c8,0x15f90} },
 130         { SPOOLSS_FORM_BUILTIN, "B6 (JIS)",                       {0x1f400,0x2c6f0}, {0x0,0x0,0x1f400,0x2c6f0} },
 131         { SPOOLSS_FORM_BUILTIN, "B6 (JIS) Rotated",               {0x2c6f0,0x1f400}, {0x0,0x0,0x2c6f0,0x1f400} },
 132         { SPOOLSS_FORM_BUILTIN, "12x11",                          {0x4a724,0x443e1}, {0x0,0x0,0x4a724,0x443e1} },
 133         { SPOOLSS_FORM_BUILTIN, "Japan Envelope You #4",          {0x19a28,0x395f8}, {0x0,0x0,0x19a28,0x395f8} },
 134         { SPOOLSS_FORM_BUILTIN, "Japan Envelope You #4 Rotated",  {0x395f8,0x19a28}, {0x0,0x0,0x395f8,0x19a28} },
 135         { SPOOLSS_FORM_BUILTIN, "PRC 16K",                        {0x2de60,0x3f7a0}, {0x0,0x0,0x2de60,0x3f7a0} },
 136         { SPOOLSS_FORM_BUILTIN, "PRC 32K",                        {0x1fbd0,0x2cec0}, {0x0,0x0,0x1fbd0,0x2cec0} },
 137         { SPOOLSS_FORM_BUILTIN, "PRC 32K(Big)",                   {0x222e0,0x318f8}, {0x0,0x0,0x222e0,0x318f8} },
 138         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #1",                {0x18e70,0x28488}, {0x0,0x0,0x18e70,0x28488} },
 139         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #2",                {0x18e70,0x2af80}, {0x0,0x0,0x18e70,0x2af80} },
 140         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #3",                {0x1e848,0x2af80}, {0x0,0x0,0x1e848,0x2af80} },
 141         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #4",                {0x1adb0,0x32c80}, {0x0,0x0,0x1adb0,0x32c80} },
 142         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #5",                {0x1adb0,0x35b60}, {0x0,0x0,0x1adb0,0x35b60} },
 143         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #6",                {0x1d4c0,0x38270}, {0x0,0x0,0x1d4c0,0x38270} },
 144         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #7",                {0x27100,0x38270}, {0x0,0x0,0x27100,0x38270} },
 145         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #8",                {0x1d4c0,0x4b708}, {0x0,0x0,0x1d4c0,0x4b708} },
 146         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #9",                {0x37e88,0x4f1a0}, {0x0,0x0,0x37e88,0x4f1a0} },
 147         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #10",               {0x4f1a0,0x6fd10}, {0x0,0x0,0x4f1a0,0x6fd10} },
 148         { SPOOLSS_FORM_BUILTIN, "PRC 16K Rotated",                {0x3f7a0,0x2de60}, {0x0,0x0,0x3f7a0,0x2de60} },
 149         { SPOOLSS_FORM_BUILTIN, "PRC 32K Rotated",                {0x2cec0,0x1fbd0}, {0x0,0x0,0x2cec0,0x1fbd0} },
 150         { SPOOLSS_FORM_BUILTIN, "PRC 32K(Big) Rotated",           {0x318f8,0x222e0}, {0x0,0x0,0x318f8,0x222e0} },
 151         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #1 Rotated",        {0x28488,0x18e70}, {0x0,0x0,0x28488,0x18e70} },
 152         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #2 Rotated",        {0x2af80,0x18e70}, {0x0,0x0,0x2af80,0x18e70} },
 153         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #3 Rotated",        {0x2af80,0x1e848}, {0x0,0x0,0x2af80,0x1e848} },
 154         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #4 Rotated",        {0x32c80,0x1adb0}, {0x0,0x0,0x32c80,0x1adb0} },
 155         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #5 Rotated",        {0x35b60,0x1adb0}, {0x0,0x0,0x35b60,0x1adb0} },
 156         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #6 Rotated",        {0x38270,0x1d4c0}, {0x0,0x0,0x38270,0x1d4c0} },
 157         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #7 Rotated",        {0x38270,0x27100}, {0x0,0x0,0x38270,0x27100} },
 158         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #8 Rotated",        {0x4b708,0x1d4c0}, {0x0,0x0,0x4b708,0x1d4c0} },
 159         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #9 Rotated",        {0x4f1a0,0x37e88}, {0x0,0x0,0x4f1a0,0x37e88} },
 160         { SPOOLSS_FORM_BUILTIN, "PRC Envelope #10 Rotated",       {0x6fd10,0x4f1a0}, {0x0,0x0,0x6fd10,0x4f1a0} }
 161 };
 162
 163 /********************************************************************
 164  static helper functions
 165 ********************************************************************/
 166
 167 /****************************************************************************
 168  Update the changeid time.
 169 ****************************************************************************/
 170 /**
 171  * @internal
 172  *
 173  * @brief Update the ChangeID time of a printer.
 174  *
 175  * This is SO NASTY as some drivers need this to change, others need it
 176  * static. This value will change every second, and I must hope that this
 177  * is enough..... DON'T CHANGE THIS CODE WITHOUT A TEST MATRIX THE SIZE OF
 178  * UTAH ! JRA.
 179  *
 180  * @return              The ChangeID.
 181  */
 182 static uint32_t winreg_printer_rev_changeid(void)
 183 {
 184         struct timeval tv;
 185
 186         get_process_uptime(&tv);
 187
 188 #if 1   /* JERRY */
 189         /* Return changeid as msec since spooler restart */
 190         return tv.tv_sec * 1000 + tv.tv_usec / 1000;
 191 #else
 192         /*
 193          * This setting seems to work well but is too untested
 194          * to replace the above calculation.  Left in for experiementation
 195          * of the reader            --jerry (Tue Mar 12 09:15:05 CST 2002)
 196          */
 197         return tv.tv_sec * 10 + tv.tv_usec / 100000;
 198 #endif
 199 }
 200
 201 /**
 202  * @internal
 203  *
 204  * @brief Connect to the interal winreg server and open the given printer key.
 205  *
 206  * The function will create the needed subkeys if they don't exist.
 207  *
 208  * @param[in]  mem_ctx       The memory context to use.
 209  *
 210  * @param[in]  server_info   The supplied server info.
 211  *
 212  * @param[out] winreg_pipe   A pointer for the winreg rpc client pipe.
 213  *
 214  * @param[in]  path          The path to the key to open.
 215  *
 216  * @param[in]  key           The key to open.
 217  *
 218  * @param[in]  create_key    Set to true if the key should be created if it
 219  *                           doesn't exist.
 220  *
 221  * @param[in]  access_mask   The access mask to open the key.
 222  *
 223  * @param[out] hive_handle   A policy handle for the opened hive.
 224  *
 225  * @param[out] key_handle    A policy handle for the opened key.
 226  *
 227  * @return                   WERR_OK on success, the corresponding DOS error
 228  *                           code if something gone wrong.
 229  */
 230 static WERROR winreg_printer_openkey(TALLOC_CTX *mem_ctx,
 231                               struct auth_serversupplied_info *server_info,
 232                               struct rpc_pipe_client **winreg_pipe,
 233                               const char *path,
 234                               const char *key,
 235                               bool create_key,
 236                               uint32_t access_mask,
 237                               struct policy_handle *hive_handle,
 238                               struct policy_handle *key_handle)
 239 {
 240         struct rpc_pipe_client *pipe_handle;
 241         struct winreg_String wkey, wkeyclass;
 242         char *keyname;
 243         NTSTATUS status;
 244         WERROR result = WERR_OK;
 245
 246         /* create winreg connection */
 247         status = rpc_pipe_open_internal(mem_ctx,
 248                                         &ndr_table_winreg.syntax_id,
 249                                         rpc_winreg_dispatch,
 250                                         server_info,
 251                                         &pipe_handle);
 252         if (!NT_STATUS_IS_OK(status)) {
 253                 DEBUG(0, ("winreg_printer_openkey: Could not connect to winreg_pipe: %s\n",
 254                           nt_errstr(status)));
 255                 return ntstatus_to_werror(status);
 256         }
 257
 258         status = rpccli_winreg_OpenHKLM(pipe_handle,
 259                                         mem_ctx,
 260                                         NULL,
 261                                         access_mask,
 262                                         hive_handle,
 263                                         &result);
 264         if (!NT_STATUS_IS_OK(status)) {
 265                 DEBUG(0, ("winreg_printer_openkey: Could not open HKLM hive: %s\n",
 266                           nt_errstr(status)));
 267                 talloc_free(pipe_handle);
 268                 if (!W_ERROR_IS_OK(result)) {
 269                         return result;
 270                 }
 271                 return ntstatus_to_werror(status);
 272         }
 273
 274         if (key && *key) {
 275                 keyname = talloc_asprintf(mem_ctx, "%s\\%s", path, key);
 276         } else {
 277                 keyname = talloc_strdup(mem_ctx, path);
 278         }
 279         if (keyname == NULL) {
 280                 talloc_free(pipe_handle);
 281                 return WERR_NOMEM;
 282         }
 283
 284         ZERO_STRUCT(wkey);
 285         wkey.name = keyname;
 286
 287         if (create_key) {
 288                 enum winreg_CreateAction action = REG_ACTION_NONE;
 289
 290                 ZERO_STRUCT(wkeyclass);
 291                 wkeyclass.name = "";
 292
 293                 status = rpccli_winreg_CreateKey(pipe_handle,
 294                                                  mem_ctx,
 295                                                  hive_handle,
 296                                                  wkey,
 297                                                  wkeyclass,
 298                                                  0,
 299                                                  access_mask,
 300                                                  NULL,
 301                                                  key_handle,
 302                                                  &action,
 303                                                  &result);
 304                 switch (action) {
 305                         case REG_ACTION_NONE:
 306                                 DEBUG(8, ("winreg_printer_openkey:createkey did nothing -- huh?\n"));
 307                                 break;
 308                         case REG_CREATED_NEW_KEY:
 309                                 DEBUG(8, ("winreg_printer_openkey: createkey created %s\n", keyname));
 310                                 break;
 311                         case REG_OPENED_EXISTING_KEY:
 312                                 DEBUG(8, ("winreg_printer_openkey: createkey opened existing %s\n", keyname));
 313                                 break;
 314                 }
 315         } else {
 316                 status = rpccli_winreg_OpenKey(pipe_handle,
 317                                                mem_ctx,
 318                                                hive_handle,
 319                                                wkey,
 320                                                0,
 321                                                access_mask,
 322                                                key_handle,
 323                                                &result);
 324         }
 325         if (!NT_STATUS_IS_OK(status)) {
 326                 talloc_free(pipe_handle);
 327                 if (!W_ERROR_IS_OK(result)) {
 328                         return result;
 329                 }
 330                 return ntstatus_to_werror(status);
 331         }
 332
 333         *winreg_pipe = pipe_handle;
 334
 335         return WERR_OK;
 336 }
 337
 338 /**
 339  * @brief Create the registry keyname for the given printer.
 340  *
 341  * @param[in]  mem_ctx  The memory context to use.
 342  *
 343  * @param[in]  printer  The name of the printer to get the registry key.
 344  *
 345  * @return     The registry key or NULL on error.
 346  */
 347 static char *winreg_printer_data_keyname(TALLOC_CTX *mem_ctx, const char *printer) {
 348         return talloc_asprintf(mem_ctx, "%s\\%s", TOP_LEVEL_PRINT_PRINTERS_KEY, printer);
 349 }
 350
 351 /**
 352  * @internal
 353  *
 354  * @brief Enumerate values of an opened key handle and retrieve the data.
 355  *
 356  * @param[in]  mem_ctx  The memory context to use.
 357  *
 358  * @param[in]  pipe_handle The pipe handle for the rpc connection.
 359  *
 360  * @param[in]  key_hnd  The opened key handle.
 361  *
 362  * @param[out] pnum_values A pointer to store he number of values found.
 363  *
 364  * @param[out] pnum_values A pointer to store the number of values we found.
 365  *
 366  * @return                   WERR_OK on success, the corresponding DOS error
 367  *                           code if something gone wrong.
 368  */
 369 static WERROR winreg_printer_enumvalues(TALLOC_CTX *mem_ctx,
 370                                         struct rpc_pipe_client *pipe_handle,
 371                                         struct policy_handle *key_hnd,
 372                                         uint32_t *pnum_values,
 373                                         struct spoolss_PrinterEnumValues **penum_values)
 374 {
 375         TALLOC_CTX *tmp_ctx;
 376         uint32_t num_subkeys, max_subkeylen, max_classlen;
 377         uint32_t num_values, max_valnamelen, max_valbufsize;
 378         uint32_t secdescsize;
 379         uint32_t i;
 380         NTTIME last_changed_time;
 381         struct winreg_String classname;
 382
 383         struct spoolss_PrinterEnumValues *enum_values;
 384
 385         WERROR result = WERR_OK;
 386         NTSTATUS status;
 387
 388         tmp_ctx = talloc_new(mem_ctx);
 389         if (tmp_ctx == NULL) {
 390                 return WERR_NOMEM;
 391         }
 392
 393         ZERO_STRUCT(classname);
 394
 395         status = rpccli_winreg_QueryInfoKey(pipe_handle,
 396                                             tmp_ctx,
 397                                             key_hnd,
 398                                             &classname,
 399                                             &num_subkeys,
 400                                             &max_subkeylen,
 401                                             &max_classlen,
 402                                             &num_values,
 403                                             &max_valnamelen,
 404                                             &max_valbufsize,
 405                                             &secdescsize,
 406                                             &last_changed_time,
 407                                             &result);
 408         if (!NT_STATUS_IS_OK(status)) {
 409                 DEBUG(0, ("winreg_printer_enumvalues: Could not query info: %s\n",
 410                           nt_errstr(status)));
 411                 if (!W_ERROR_IS_OK(result)) {
 412                         goto error;
 413                 }
 414                 result = ntstatus_to_werror(status);
 415                 goto error;
 416         }
 417
 418         if (num_values == 0) {
 419                 *pnum_values = 0;
 420                 TALLOC_FREE(tmp_ctx);
 421                 return WERR_OK;
 422         }
 423
 424         enum_values = TALLOC_ARRAY(tmp_ctx, struct spoolss_PrinterEnumValues, num_values);
 425         if (enum_values == NULL) {
 426                 result = WERR_NOMEM;
 427                 goto error;
 428         }
 429
 430         for (i = 0; i < num_values; i++) {
 431                 struct spoolss_PrinterEnumValues val;
 432                 struct winreg_ValNameBuf name_buf;
 433                 enum winreg_Type type = REG_NONE;
 434                 uint8_t *data = NULL;
 435                 uint32_t data_size;
 436                 uint32_t length;
 437                 char n = '\0';;
 438
 439                 name_buf.name = &n;
 440                 name_buf.size = max_valnamelen + 2;
 441                 name_buf.length = 0;
 442
 443                 data_size = max_valbufsize;
 444                 data = (uint8_t *) TALLOC(tmp_ctx, data_size);
 445                 length = 0;
 446
 447                 status = rpccli_winreg_EnumValue(pipe_handle,
 448                                                  tmp_ctx,
 449                                                  key_hnd,
 450                                                  i,
 451                                                  &name_buf,
 452                                                  &type,
 453                                                  data,
 454                                                  &data_size,
 455                                                  &length,
 456                                                  &result);
 457                 if (W_ERROR_EQUAL(result, WERR_NO_MORE_ITEMS) ) {
 458                         result = WERR_OK;
 459                         status = NT_STATUS_OK;
 460                         break;
 461                 }
 462
 463                 if (!NT_STATUS_IS_OK(status)) {
 464                         DEBUG(0, ("winreg_printer_enumvalues: Could not enumerate values: %s\n",
 465                                   nt_errstr(status)));
 466                         if (!W_ERROR_IS_OK(result)) {
 467                                 goto error;
 468                         }
 469                         result = ntstatus_to_werror(status);
 470                         goto error;
 471                 }
 472
 473                 if (name_buf.name == NULL) {
 474                         result = WERR_INVALID_PARAMETER;
 475                         goto error;
 476                 }
 477
 478                 val.value_name = talloc_strdup(enum_values, name_buf.name);
 479                 if (val.value_name == NULL) {
 480                         result = WERR_NOMEM;
 481                         goto error;
 482                 }
 483                 val.value_name_len = strlen_m_term(val.value_name) * 2;
 484
 485                 val.type = type;
 486                 val.data_length = data_size;
 487                 val.data = NULL;
 488                 if (val.data_length) {
 489                         val.data = talloc(enum_values, DATA_BLOB);
 490                         if (val.data == NULL) {
 491                                 result = WERR_NOMEM;
 492                                 goto error;
 493                         }
 494                         *val.data = data_blob_talloc(enum_values, data, data_size);
 495                 }
 496
 497                 enum_values[i] = val;
 498         }
 499
 500         *pnum_values = num_values;
 501         if (penum_values) {
 502                 *penum_values = talloc_move(mem_ctx, &enum_values);
 503         }
 504
 505         result = WERR_OK;
 506
 507  error:
 508         TALLOC_FREE(tmp_ctx);
 509         return result;
 510 }
 511
 512 /**
 513  * @internal
 514  *
 515  * @brief Enumerate subkeys of an opened key handle and get the names.
 516  *
 517  * @param[in]  mem_ctx  The memory context to use.
 518  *
 519  * @param[in]  pipe_handle The pipe handle for the rpc connection.
 520  *
 521  * @param[in]  key_hnd  The opened key handle.
 522  *
 523  * @param[in]  pnum_subkeys A pointer to store the number of found subkeys.
 524  *
 525  * @param[in]  psubkeys A pointer to an array to store the found names of
 526  *                      subkeys.
 527  *
 528  * @return                   WERR_OK on success, the corresponding DOS error
 529  *                           code if something gone wrong.
 530  */
 531 static WERROR winreg_printer_enumkeys(TALLOC_CTX *mem_ctx,
 532                                       struct rpc_pipe_client *pipe_handle,
 533                                       struct policy_handle *key_hnd,
 534                                       uint32_t *pnum_subkeys,
 535                                       const char ***psubkeys)
 536 {
 537         TALLOC_CTX *tmp_ctx;
 538         const char **subkeys;
 539         uint32_t num_subkeys, max_subkeylen, max_classlen;
 540         uint32_t num_values, max_valnamelen, max_valbufsize;
 541         uint32_t i;
 542         NTTIME last_changed_time;
 543         uint32_t secdescsize;
 544         struct winreg_String classname;
 545         WERROR result = WERR_OK;
 546         NTSTATUS status;
 547
 548         tmp_ctx = talloc_new(mem_ctx);
 549         if (tmp_ctx == NULL) {
 550                 return WERR_NOMEM;
 551         }
 552
 553         ZERO_STRUCT(classname);
 554
 555         status = rpccli_winreg_QueryInfoKey(pipe_handle,
 556                                             tmp_ctx,
 557                                             key_hnd,
 558                                             &classname,
 559                                             &num_subkeys,
 560                                             &max_subkeylen,
 561                                             &max_classlen,
 562                                             &num_values,
 563                                             &max_valnamelen,
 564                                             &max_valbufsize,
 565                                             &secdescsize,
 566                                             &last_changed_time,
 567                                             &result);
 568         if (!NT_STATUS_IS_OK(status)) {
 569                 DEBUG(0, ("winreg_printer_enumkeys: Could not query info: %s\n",
 570                           nt_errstr(status)));
 571                 if (!W_ERROR_IS_OK(result)) {
 572                         goto error;
 573                 }
 574                 result = ntstatus_to_werror(status);
 575                 goto error;
 576         }
 577
 578         subkeys = talloc_zero_array(tmp_ctx, const char *, num_subkeys + 2);
 579         if (subkeys == NULL) {
 580                 result = WERR_NOMEM;
 581                 goto error;
 582         }
 583
 584         if (num_subkeys == 0) {
 585                 subkeys[0] = talloc_strdup(subkeys, "");
 586                 if (subkeys[0] == NULL) {
 587                         result = WERR_NOMEM;
 588                         goto error;
 589                 }
 590                 *pnum_subkeys = 0;
 591                 if (psubkeys) {
 592                         *psubkeys = talloc_move(mem_ctx, &subkeys);
 593                 }
 594
 595                 TALLOC_FREE(tmp_ctx);
 596                 return WERR_OK;
 597         }
 598
 599         for (i = 0; i < num_subkeys; i++) {
 600                 char c = '\0';
 601                 char n = '\0';
 602                 char *name = NULL;
 603                 struct winreg_StringBuf class_buf;
 604                 struct winreg_StringBuf name_buf;
 605                 NTTIME modtime;
 606
 607                 class_buf.name = &c;
 608                 class_buf.size = max_classlen + 2;
 609                 class_buf.length = 0;
 610
 611                 name_buf.name = &n;
 612                 name_buf.size = max_subkeylen + 2;
 613                 name_buf.length = 0;
 614
 615                 ZERO_STRUCT(modtime);
 616
 617                 status = rpccli_winreg_EnumKey(pipe_handle,
 618                                                tmp_ctx,
 619                                                key_hnd,
 620                                                i,
 621                                                &name_buf,
 622                                                &class_buf,
 623                                                &modtime,
 624                                                &result);
 625                 if (W_ERROR_EQUAL(result, WERR_NO_MORE_ITEMS) ) {
 626                         result = WERR_OK;
 627                         status = NT_STATUS_OK;
 628                         break;
 629                 }
 630
 631                 if (!NT_STATUS_IS_OK(status)) {
 632                         DEBUG(0, ("winreg_printer_enumkeys: Could not enumerate keys: %s\n",
 633                                   nt_errstr(status)));
 634                         if (!W_ERROR_IS_OK(result)) {
 635                                 goto error;
 636                         }
 637                         result = ntstatus_to_werror(status);
 638                         goto error;
 639                 }
 640
 641                 if (name_buf.name == NULL) {
 642                         result = WERR_INVALID_PARAMETER;
 643                         goto error;
 644                 }
 645
 646                 name = talloc_strdup(subkeys, name_buf.name);
 647                 if (name == NULL) {
 648                         result = WERR_NOMEM;
 649                         goto error;
 650                 }
 651
 652                 subkeys[i] = name;
 653         }
 654
 655         *pnum_subkeys = num_subkeys;
 656         if (psubkeys) {
 657                 *psubkeys = talloc_move(mem_ctx, &subkeys);
 658         }
 659
 660  error:
 661         TALLOC_FREE(tmp_ctx);
 662         return result;
 663 }
 664
 665 /**
 666  * @internal
 667  *
 668  * @brief A function to delete a key and its subkeys recurively.
 669  *
 670  * @param[in]  mem_ctx  The memory context to use.
 671  *
 672  * @param[in]  pipe_handle The pipe handle for the rpc connection.
 673  *
 674  * @param[in]  hive_handle A opened hive handle to the key.
 675  *
 676  * @param[in]  access_mask The access mask to access the key.
 677  *
 678  * @param[in]  key      The key to delete
 679  *
 680  * @return              WERR_OK on success, the corresponding DOS error
 681  *                      code if something gone wrong.
 682  */
 683 static WERROR winreg_printer_delete_subkeys(TALLOC_CTX *mem_ctx,
 684                                             struct rpc_pipe_client *pipe_handle,
 685                                             struct policy_handle *hive_handle,
 686                                             uint32_t access_mask,
 687                                             const char *key)
 688 {
 689         const char **subkeys = NULL;
 690         uint32_t num_subkeys = 0;
 691         struct policy_handle key_hnd;
 692         struct winreg_String wkey;
 693         WERROR result = WERR_OK;
 694         NTSTATUS status;
 695         uint32_t i;
 696
 697         ZERO_STRUCT(key_hnd);
 698         wkey.name = key;
 699
 700         DEBUG(2, ("winreg_printer_delete_subkeys: delete key %s\n", key));
 701         /* open the key */
 702         status = rpccli_winreg_OpenKey(pipe_handle,
 703                                        mem_ctx,
 704                                        hive_handle,
 705                                        wkey,
 706                                        0,
 707                                        access_mask,
 708                                        &key_hnd,
 709                                        &result);
 710         if (!NT_STATUS_IS_OK(status)) {
 711                 DEBUG(0, ("winreg_printer_delete_subkeys: Could not open key %s: %s\n",
 712                           wkey.name, nt_errstr(status)));
 713                 if (!W_ERROR_IS_OK(result)) {
 714                         return result;
 715                 }
 716                 return ntstatus_to_werror(status);
 717         }
 718
 719         result = winreg_printer_enumkeys(mem_ctx,
 720                                          pipe_handle,
 721                                          &key_hnd,
 722                                          &num_subkeys,
 723                                          &subkeys);
 724         if (!W_ERROR_IS_OK(result)) {
 725                 goto done;
 726         }
 727
 728         for (i = 0; i < num_subkeys; i++) {
 729                 /* create key + subkey */
 730                 char *subkey = talloc_asprintf(mem_ctx, "%s\\%s", key, subkeys[i]);
 731                 if (subkey == NULL) {
 732                         goto done;
 733                 }
 734
 735                 DEBUG(2, ("winreg_printer_delete_subkeys: delete subkey %s\n", subkey));
 736                 result = winreg_printer_delete_subkeys(mem_ctx,
 737                                                        pipe_handle,
 738                                                        hive_handle,
 739                                                        access_mask,
 740                                                        subkey);
 741                 if (!W_ERROR_IS_OK(result)) {
 742                         goto done;
 743                 }
 744         }
 745
 746         if (is_valid_policy_hnd(&key_hnd)) {
 747                 rpccli_winreg_CloseKey(pipe_handle, mem_ctx, &key_hnd, NULL);
 748         }
 749
 750         wkey.name = key;
 751
 752         status = rpccli_winreg_DeleteKey(pipe_handle,
 753                                          mem_ctx,
 754                                          hive_handle,
 755                                          wkey,
 756                                          &result);
 757
 758 done:
 759         if (is_valid_policy_hnd(&key_hnd)) {
 760                 rpccli_winreg_CloseKey(pipe_handle, mem_ctx, &key_hnd, NULL);
 761         }
 762
 763         return result;
 764 }
 765
 766 static WERROR winreg_printer_write_sz(TALLOC_CTX *mem_ctx,
 767                                       struct rpc_pipe_client *pipe_handle,
 768                                       struct policy_handle *key_handle,
 769                                       const char *value,
 770                                       const char *data)
 771 {
 772         struct winreg_String wvalue;
 773         DATA_BLOB blob;
 774         WERROR result = WERR_OK;
 775         NTSTATUS status;
 776
 777         wvalue.name = value;
 778         if (data == NULL) {
 779                 blob = data_blob_string_const("");
 780         } else {
 781                 if (!push_reg_sz(mem_ctx, NULL, &blob, data)) {
 782                         DEBUG(0, ("winreg_printer_write_sz: Could not marshall string %s for %s\n",
 783                                 data, wvalue.name));
 784                         return WERR_NOMEM;
 785                 }
 786         }
 787         status = rpccli_winreg_SetValue(pipe_handle,
 788                                         mem_ctx,
 789                                         key_handle,
 790                                         wvalue,
 791                                         REG_SZ,
 792                                         blob.data,
 793                                         blob.length,
 794                                         &result);
 795         if (!NT_STATUS_IS_OK(status)) {
 796                 DEBUG(0, ("winreg_printer_write_sz: Could not set value %s: %s\n",
 797                         wvalue.name, win_errstr(result)));
 798                 if (!W_ERROR_IS_OK(result)) {
 799                         result = ntstatus_to_werror(status);
 800                 }
 801         }
 802
 803         return result;
 804 }
 805
 806 static WERROR winreg_printer_write_dword(TALLOC_CTX *mem_ctx,
 807                                          struct rpc_pipe_client *pipe_handle,
 808                                          struct policy_handle *key_handle,
 809                                          const char *value,
 810                                          uint32_t data)
 811 {
 812         struct winreg_String wvalue;
 813         DATA_BLOB blob;
 814         WERROR result = WERR_OK;
 815         NTSTATUS status;
 816
 817         wvalue.name = value;
 818         blob = data_blob_talloc(mem_ctx, NULL, 4);
 819         SIVAL(blob.data, 0, data);
 820
 821         status = rpccli_winreg_SetValue(pipe_handle,
 822                                         mem_ctx,
 823                                         key_handle,
 824                                         wvalue,
 825                                         REG_DWORD,
 826                                         blob.data,
 827                                         blob.length,
 828                                         &result);
 829         if (!NT_STATUS_IS_OK(status)) {
 830                 DEBUG(0, ("winreg_printer_write_dword: Could not set value %s: %s\n",
 831                         wvalue.name, win_errstr(result)));
 832                 if (!W_ERROR_IS_OK(result)) {
 833                         result = ntstatus_to_werror(status);
 834                 }
 835         }
 836
 837         return result;
 838 }
 839
 840 static WERROR winreg_printer_write_binary(TALLOC_CTX *mem_ctx,
 841                                           struct rpc_pipe_client *pipe_handle,
 842                                           struct policy_handle *key_handle,
 843                                           const char *value,
 844                                           DATA_BLOB blob)
 845 {
 846         struct winreg_String wvalue;
 847         WERROR result = WERR_OK;
 848         NTSTATUS status;
 849
 850         wvalue.name = value;
 851         status = rpccli_winreg_SetValue(pipe_handle,
 852                                         mem_ctx,
 853                                         key_handle,
 854                                         wvalue,
 855                                         REG_BINARY,
 856                                         blob.data,
 857                                         blob.length,
 858                                         &result);
 859         if (!NT_STATUS_IS_OK(status)) {
 860                 DEBUG(0, ("winreg_printer_write_binary: Could not set value %s: %s\n",
 861                         wvalue.name, win_errstr(result)));
 862                 if (!W_ERROR_IS_OK(result)) {
 863                         result = ntstatus_to_werror(status);
 864                 }
 865         }
 866
 867         return result;
 868 }
 869
 870 static WERROR winreg_printer_query_binary(TALLOC_CTX *mem_ctx,
 871                                           struct rpc_pipe_client *pipe_handle,
 872                                           struct policy_handle *key_handle,
 873                                           const char *value,
 874                                           DATA_BLOB *data)
 875 {
 876         struct winreg_String wvalue;
 877         enum winreg_Type type;
 878         WERROR result = WERR_OK;
 879         uint32_t value_len = 0;
 880         uint32_t data_size = 0;
 881         NTSTATUS status;
 882         DATA_BLOB blob;
 883
 884         wvalue.name = value;
 885         status = rpccli_winreg_QueryValue(pipe_handle,
 886                                           mem_ctx,
 887                                           key_handle,
 888                                           &wvalue,
 889                                           &type,
 890                                           NULL,
 891                                           &data_size,
 892                                           &value_len,
 893                                           &result);
 894         if (!NT_STATUS_IS_OK(status)) {
 895                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
 896                           wvalue.name, nt_errstr(status)));
 897                 if (!W_ERROR_IS_OK(result)) {
 898                         goto done;
 899                 }
 900                 result = ntstatus_to_werror(status);
 901                 goto done;
 902         }
 903
 904         if (type != REG_BINARY) {
 905                 result = WERR_INVALID_DATATYPE;
 906                 goto done;
 907         }
 908         blob = data_blob_talloc(mem_ctx, NULL, data_size);
 909         if (blob.data == NULL) {
 910                 result = WERR_NOMEM;
 911                 goto done;
 912         }
 913         value_len = 0;
 914
 915         status = rpccli_winreg_QueryValue(pipe_handle,
 916                                           mem_ctx,
 917                                           key_handle,
 918                                           &wvalue,
 919                                           &type,
 920                                           blob.data,
 921                                           &data_size,
 922                                           &value_len,
 923                                           &result);
 924         if (!NT_STATUS_IS_OK(status)) {
 925                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
 926                           wvalue.name, nt_errstr(status)));
 927                 if (!W_ERROR_IS_OK(result)) {
 928                         result = ntstatus_to_werror(status);
 929                 }
 930                 goto done;
 931         }
 932
 933         if (data) {
 934                 data->data = blob.data;
 935                 data->length = blob.length;
 936         }
 937 done:
 938         return result;
 939 }
 940
 941 static WERROR winreg_printer_query_dword(TALLOC_CTX *mem_ctx,
 942                                          struct rpc_pipe_client *pipe_handle,
 943                                          struct policy_handle *key_handle,
 944                                          const char *value,
 945                                          uint32_t *data)
 946 {
 947         struct winreg_String wvalue;
 948         enum winreg_Type type;
 949         WERROR result = WERR_OK;
 950         uint32_t value_len = 0;
 951         uint32_t data_size = 0;
 952         NTSTATUS status;
 953         DATA_BLOB blob;
 954
 955         wvalue.name = value;
 956         status = rpccli_winreg_QueryValue(pipe_handle,
 957                                           mem_ctx,
 958                                           key_handle,
 959                                           &wvalue,
 960                                           &type,
 961                                           NULL,
 962                                           &data_size,
 963                                           &value_len,
 964                                           &result);
 965         if (!NT_STATUS_IS_OK(status)) {
 966                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
 967                           wvalue.name, nt_errstr(status)));
 968                 if (!W_ERROR_IS_OK(result)) {
 969                         goto done;
 970                 }
 971                 result = ntstatus_to_werror(status);
 972                 goto done;
 973         }
 974
 975         if (type != REG_DWORD) {
 976                 result = WERR_INVALID_DATATYPE;
 977                 goto done;
 978         }
 979
 980         if (data_size != 4) {
 981                 result = WERR_INVALID_DATA;
 982                 goto done;
 983         }
 984
 985         blob = data_blob_talloc(mem_ctx, NULL, data_size);
 986         if (blob.data == NULL) {
 987                 result = WERR_NOMEM;
 988                 goto done;
 989         }
 990         value_len = 0;
 991
 992         status = rpccli_winreg_QueryValue(pipe_handle,
 993                                           mem_ctx,
 994                                           key_handle,
 995                                           &wvalue,
 996                                           &type,
 997                                           blob.data,
 998                                           &data_size,
 999                                           &value_len,
1000                                           &result);
1001         if (!NT_STATUS_IS_OK(status)) {
1002                 DEBUG(0, ("winreg_printer_query_dword: Could not query value %s: %s\n",
1003                           wvalue.name, nt_errstr(status)));
1004                 if (!W_ERROR_IS_OK(result)) {
1005                         result = ntstatus_to_werror(status);
1006                 }
1007                 goto done;
1008         }
1009
1010         if (data) {
1011                 *data = IVAL(blob.data, 0);
1012         }
1013 done:
1014         return result;
1015 }
1016
1017 static WERROR winreg_printer_write_multi_sz(TALLOC_CTX *mem_ctx,
1018                                             struct rpc_pipe_client *pipe_handle,
1019                                             struct policy_handle *key_handle,
1020                                             const char *value,
1021                                             const char **data)
1022 {
1023         struct winreg_String wvalue;
1024         DATA_BLOB blob;
1025         WERROR result = WERR_OK;
1026         NTSTATUS status;
1027
1028         wvalue.name = value;
1029         if (!push_reg_multi_sz(mem_ctx, NULL, &blob, data)) {
1030                 return WERR_NOMEM;
1031         }
1032         status = rpccli_winreg_SetValue(pipe_handle,
1033                                         mem_ctx,
1034                                         key_handle,
1035                                         wvalue,
1036                                         REG_MULTI_SZ,
1037                                         blob.data,
1038                                         blob.length,
1039                                         &result);
1040         if (!NT_STATUS_IS_OK(status)) {
1041                 DEBUG(0, ("winreg_printer_write_multi_sz: Could not set value %s: %s\n",
1042                         wvalue.name, win_errstr(result)));
1043                 if (!W_ERROR_IS_OK(result)) {
1044                         result = ntstatus_to_werror(status);
1045                 }
1046         }
1047
1048         return result;
1049 }
1050
1051 static WERROR winreg_printer_opendriver(TALLOC_CTX *mem_ctx,
1052                                         struct auth_serversupplied_info *server_info,
1053                                         const char *drivername,
1054                                         const char *architecture,
1055                                         uint32_t version,
1056                                         uint32_t access_mask,
1057                                         bool create,
1058                                         struct rpc_pipe_client **winreg_pipe,
1059                                         struct policy_handle *hive_hnd,
1060                                         struct policy_handle *key_hnd)
1061 {
1062         WERROR result;
1063         char *key_name;
1064
1065         key_name = talloc_asprintf(mem_ctx, "%s\\Environments\\%s\\Drivers\\Version-%u",
1066                                    TOP_LEVEL_CONTROL_KEY,
1067                                    architecture, version);
1068         if (!key_name) {
1069                 return WERR_NOMEM;
1070         }
1071
1072         result = winreg_printer_openkey(mem_ctx,
1073                                         server_info,
1074                                         winreg_pipe,
1075                                         key_name,
1076                                         drivername,
1077                                         create,
1078                                         access_mask,
1079                                         hive_hnd,
1080                                         key_hnd);
1081         return result;
1082 }
1083
1084 static WERROR winreg_enumval_to_dword(TALLOC_CTX *mem_ctx,
1085                                       struct spoolss_PrinterEnumValues *v,
1086                                       const char *valuename, uint32_t *dw)
1087 {
1088         /* just return if it is not the one we are looking for */
1089         if (strcmp(valuename, v->value_name) != 0) {
1090                 return WERR_NOT_FOUND;
1091         }
1092
1093         if (v->type != REG_DWORD) {
1094                 return WERR_INVALID_DATATYPE;
1095         }
1096
1097         *dw = IVAL(v->data->data, 0);
1098         return WERR_OK;
1099 }
1100
1101 static WERROR winreg_enumval_to_sz(TALLOC_CTX *mem_ctx,
1102                                    struct spoolss_PrinterEnumValues *v,
1103                                    const char *valuename, const char **_str)
1104 {
1105         /* just return if it is not the one we are looking for */
1106         if (strcmp(valuename, v->value_name) != 0) {
1107                 return WERR_NOT_FOUND;
1108         }
1109
1110         if (v->type != REG_SZ) {
1111                 return WERR_INVALID_DATATYPE;
1112         }
1113
1114         if (!pull_reg_sz(mem_ctx, NULL, v->data, _str)) {
1115                 return WERR_NOMEM;
1116         }
1117
1118         return WERR_OK;
1119 }
1120
1121 static WERROR winreg_enumval_to_multi_sz(TALLOC_CTX *mem_ctx,
1122                                          struct spoolss_PrinterEnumValues *v,
1123                                          const char *valuename,
1124                                          const char ***array)
1125 {
1126         /* just return if it is not the one we are looking for */
1127         if (strcmp(valuename, v->value_name) != 0) {
1128                 return WERR_NOT_FOUND;
1129         }
1130
1131         if (v->type != REG_MULTI_SZ) {
1132                 return WERR_INVALID_DATATYPE;
1133         }
1134
1135         if (!pull_reg_multi_sz(mem_ctx, NULL, v->data, array)) {
1136                 return WERR_NOMEM;
1137         }
1138
1139         return WERR_OK;
1140 }
1141
1142 static WERROR winreg_printer_write_date(TALLOC_CTX *mem_ctx,
1143                                         struct rpc_pipe_client *pipe_handle,
1144                                         struct policy_handle *key_handle,
1145                                         const char *value,
1146                                         NTTIME data)
1147 {
1148         struct winreg_String wvalue;
1149         DATA_BLOB blob;
1150         WERROR result = WERR_OK;
1151         NTSTATUS status;
1152         const char *str;
1153         struct tm *tm;
1154         time_t t;
1155
1156         t = nt_time_to_unix(data);
1157         tm = localtime(&t);
1158         str = talloc_asprintf(mem_ctx, "%02d/%02d/%04d",
1159                               tm->tm_mon + 1, tm->tm_mday, tm->tm_year + 1900);
1160         if (!str) {
1161                 return WERR_NOMEM;
1162         }
1163
1164         wvalue.name = value;
1165         if (!push_reg_sz(mem_ctx, NULL, &blob, str)) {
1166                 return WERR_NOMEM;
1167         }
1168         status = rpccli_winreg_SetValue(pipe_handle,
1169                                         mem_ctx,
1170                                         key_handle,
1171                                         wvalue,
1172                                         REG_SZ,
1173                                         blob.data,
1174                                         blob.length,
1175                                         &result);
1176         if (!NT_STATUS_IS_OK(status)) {
1177                 DEBUG(0, ("winreg_printer_write_date: Could not set value %s: %s\n",
1178                         wvalue.name, win_errstr(result)));
1179                 if (!W_ERROR_IS_OK(result)) {
1180                         result = ntstatus_to_werror(status);
1181                 }
1182         }
1183
1184         return result;
1185 }
1186
1187 static WERROR winreg_printer_date_to_NTTIME(const char *str, NTTIME *data)
1188 {
1189         struct tm tm;
1190         time_t t;
1191
1192         ZERO_STRUCT(tm);
1193
1194         if (sscanf(str, "%d/%d/%d",
1195                    &tm.tm_mon, &tm.tm_mday, &tm.tm_year) != 3) {
1196                 return WERR_INVALID_PARAMETER;
1197         }
1198         tm.tm_mon -= 1;
1199         tm.tm_year -= 1900;
1200         tm.tm_isdst = -1;
1201
1202         t = mktime(&tm);
1203         unix_to_nt_time(data, t);
1204
1205         return WERR_OK;
1206 }
1207
1208 static WERROR winreg_printer_write_ver(TALLOC_CTX *mem_ctx,
1209                                        struct rpc_pipe_client *pipe_handle,
1210                                        struct policy_handle *key_handle,
1211                                        const char *value,
1212                                        uint64_t data)
1213 {
1214         struct winreg_String wvalue;
1215         DATA_BLOB blob;
1216         WERROR result = WERR_OK;
1217         NTSTATUS status;
1218         char *str;
1219
1220         /* FIXME: check format is right,
1221          *      this needs to be something like: 6.1.7600.16385 */
1222         str = talloc_asprintf(mem_ctx, "%u.%u.%u.%u",
1223                               (unsigned)((data >> 48) & 0xFFFF),
1224                               (unsigned)((data >> 32) & 0xFFFF),
1225                               (unsigned)((data >> 16) & 0xFFFF),
1226                               (unsigned)(data & 0xFFFF));
1227         if (!str) {
1228                 return WERR_NOMEM;
1229         }
1230
1231         wvalue.name = value;
1232         if (!push_reg_sz(mem_ctx, NULL, &blob, str)) {
1233                 return WERR_NOMEM;
1234         }
1235         status = rpccli_winreg_SetValue(pipe_handle,
1236                                         mem_ctx,
1237                                         key_handle,
1238                                         wvalue,
1239                                         REG_SZ,
1240                                         blob.data,
1241                                         blob.length,
1242                                         &result);
1243         if (!NT_STATUS_IS_OK(status)) {
1244                 DEBUG(0, ("winreg_printer_write_date: Could not set value %s: %s\n",
1245                         wvalue.name, win_errstr(result)));
1246                 if (!W_ERROR_IS_OK(result)) {
1247                         result = ntstatus_to_werror(status);
1248                 }
1249         }
1250
1251         return result;
1252 }
1253
1254 static WERROR winreg_printer_ver_to_dword(const char *str, uint64_t *data)
1255 {
1256         unsigned int v1, v2, v3, v4;
1257
1258         if (sscanf(str, "%u.%u.%u.%u", &v1, &v2, &v3, &v4) != 4) {
1259                 return WERR_INVALID_PARAMETER;
1260         }
1261
1262         *data = ((uint64_t)(v1 & 0xFFFF) << 48) +
1263                 ((uint64_t)(v2 & 0xFFFF) << 32) +
1264                 ((uint64_t)(v3 & 0xFFFF) << 16) +
1265                 (uint64_t)(v2 & 0xFFFF);
1266
1267         return WERR_OK;
1268 }
1269
1270 /********************************************************************
1271  Public winreg function for spoolss
1272 ********************************************************************/
1273
1274 WERROR winreg_create_printer(TALLOC_CTX *mem_ctx,
1275                              struct auth_serversupplied_info *server_info,
1276                              const char *servername,
1277                              const char *sharename)
1278 {
1279         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
1280         struct rpc_pipe_client *winreg_pipe = NULL;
1281         struct policy_handle hive_hnd, key_hnd;
1282         struct spoolss_SetPrinterInfo2 *info2;
1283         struct security_descriptor *secdesc;
1284         struct winreg_String wkey, wkeyclass;
1285         const char *path;
1286         const char *subkeys[] = { SPOOL_DSDRIVER_KEY, SPOOL_DSSPOOLER_KEY, SPOOL_PRINTERDATA_KEY };
1287         uint32_t i, count = ARRAY_SIZE(subkeys);
1288         uint32_t info2_mask = 0;
1289         WERROR result = WERR_OK;
1290         TALLOC_CTX *tmp_ctx;
1291
1292         tmp_ctx = talloc_new(mem_ctx);
1293         if (tmp_ctx == NULL) {
1294                 return WERR_NOMEM;
1295         }
1296
1297         path = winreg_printer_data_keyname(tmp_ctx, sharename);
1298         if (path == NULL) {
1299                 TALLOC_FREE(tmp_ctx);
1300                 return WERR_NOMEM;
1301         }
1302
1303         ZERO_STRUCT(hive_hnd);
1304         ZERO_STRUCT(key_hnd);
1305
1306         result = winreg_printer_openkey(tmp_ctx,
1307                                         server_info,
1308                                         &winreg_pipe,
1309                                         path,
1310                                         "",
1311                                         false,
1312                                         access_mask,
1313                                         &hive_hnd,
1314                                         &key_hnd);
1315         if (W_ERROR_IS_OK(result)) {
1316                 DEBUG(2, ("winreg_create_printer: Skipping, %s already exists\n", path));
1317                 goto done;
1318         } else if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
1319                 DEBUG(2, ("winreg_create_printer: Creating default values in %s\n", path));
1320         } else if (!W_ERROR_IS_OK(result)) {
1321                 DEBUG(0, ("winreg_create_printer: Could not open key %s: %s\n",
1322                         path, win_errstr(result)));
1323                 goto done;
1324         }
1325
1326         /* Create the main key */
1327         result = winreg_printer_openkey(tmp_ctx,
1328                                         server_info,
1329                                         &winreg_pipe,
1330                                         path,
1331                                         "",
1332                                         true,
1333                                         access_mask,
1334                                         &hive_hnd,
1335                                         &key_hnd);
1336         if (!W_ERROR_IS_OK(result)) {
1337                 DEBUG(0, ("winreg_create_printer_keys: Could not create key %s: %s\n",
1338                         path, win_errstr(result)));
1339                 goto done;
1340         }
1341
1342         if (is_valid_policy_hnd(&key_hnd)) {
1343                 rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1344         }
1345
1346         /* Create subkeys */
1347         for (i = 0; i < count; i++) {
1348                 NTSTATUS status;
1349                 enum winreg_CreateAction action = REG_ACTION_NONE;
1350
1351                 ZERO_STRUCT(key_hnd);
1352                 ZERO_STRUCT(wkey);
1353
1354                 wkey.name = talloc_asprintf(tmp_ctx, "%s\\%s", path, subkeys[i]);
1355                 if (wkey.name == NULL) {
1356                         result = WERR_NOMEM;
1357                         goto done;
1358                 }
1359
1360                 ZERO_STRUCT(wkeyclass);
1361                 wkeyclass.name = "";
1362
1363                 status = rpccli_winreg_CreateKey(winreg_pipe,
1364                                                  tmp_ctx,
1365                                                  &hive_hnd,
1366                                                  wkey,
1367                                                  wkeyclass,
1368                                                  0,
1369                                                  access_mask,
1370                                                  NULL,
1371                                                  &key_hnd,
1372                                                  &action,
1373                                                  &result);
1374                 if (!NT_STATUS_IS_OK(status)) {
1375                         DEBUG(0, ("winreg_create_printer_keys: Could not create key %s: %s\n",
1376                                 wkey.name, win_errstr(result)));
1377                         if (!W_ERROR_IS_OK(result)) {
1378                                 result = ntstatus_to_werror(status);
1379                         }
1380                         goto done;
1381                 }
1382
1383                 switch (i) {
1384                 case 1: {
1385                         const char *dnssuffix;
1386                         const char *longname;
1387                         const char *uncname;
1388
1389                         result = winreg_printer_write_sz(tmp_ctx,
1390                                                          winreg_pipe,
1391                                                          &key_hnd,
1392                                                          SPOOL_REG_PRINTERNAME,
1393                                                          sharename);
1394                         if (!W_ERROR_IS_OK(result)) {
1395                                 goto done;
1396                         }
1397
1398                         result = winreg_printer_write_sz(tmp_ctx,
1399                                                          winreg_pipe,
1400                                                          &key_hnd,
1401                                                          SPOOL_REG_SHORTSERVERNAME,
1402                                                          global_myname());
1403                         if (!W_ERROR_IS_OK(result)) {
1404                                 goto done;
1405                         }
1406
1407                         /* We make the assumption that the netbios name
1408                          * is the same as the DNS name since the former
1409                          * will be what we used to join the domain
1410                          */
1411                         dnssuffix = get_mydnsdomname(tmp_ctx);
1412                         if (dnssuffix != NULL && dnssuffix[0] != '\0') {
1413                                 longname = talloc_asprintf(tmp_ctx, "%s.%s", global_myname(), dnssuffix);
1414                         } else {
1415                                 longname = talloc_strdup(tmp_ctx, global_myname());
1416                         }
1417                         if (longname == NULL) {
1418                                 result = WERR_NOMEM;
1419                                 goto done;
1420                         }
1421
1422                         result = winreg_printer_write_sz(tmp_ctx,
1423                                                          winreg_pipe,
1424                                                          &key_hnd,
1425                                                          SPOOL_REG_SERVERNAME,
1426                                                          longname);
1427                         if (!W_ERROR_IS_OK(result)) {
1428                                 goto done;
1429                         }
1430
1431                         uncname = talloc_asprintf(tmp_ctx, "\\\\%s\\%s",
1432                                                   longname, sharename);
1433                         if (uncname == NULL) {
1434                                 result = WERR_NOMEM;
1435                                 goto done;
1436                         }
1437
1438                         result = winreg_printer_write_sz(tmp_ctx,
1439                                                          winreg_pipe,
1440                                                          &key_hnd,
1441                                                          SPOOL_REG_UNCNAME,
1442                                                          uncname);
1443                         if (!W_ERROR_IS_OK(result)) {
1444                                 goto done;
1445                         }
1446
1447                         result = winreg_printer_write_dword(tmp_ctx,
1448                                                             winreg_pipe,
1449                                                             &key_hnd,
1450                                                             SPOOL_REG_VERSIONNUMBER,
1451                                                             4);
1452                         if (!W_ERROR_IS_OK(result)) {
1453                                 goto done;
1454                         }
1455
1456                         result = winreg_printer_write_dword(tmp_ctx,
1457                                                             winreg_pipe,
1458                                                             &key_hnd,
1459                                                             SPOOL_REG_PRINTSTARTTIME,
1460                                                             0);
1461                         if (!W_ERROR_IS_OK(result)) {
1462                                 goto done;
1463                         }
1464
1465                         result = winreg_printer_write_dword(tmp_ctx,
1466                                                             winreg_pipe,
1467                                                             &key_hnd,
1468                                                             SPOOL_REG_PRINTENDTIME,
1469                                                             0);
1470                         if (!W_ERROR_IS_OK(result)) {
1471                                 goto done;
1472                         }
1473
1474                         result = winreg_printer_write_dword(tmp_ctx,
1475                                                             winreg_pipe,
1476                                                             &key_hnd,
1477                                                             SPOOL_REG_PRIORITY,
1478                                                             1);
1479                         if (!W_ERROR_IS_OK(result)) {
1480                                 goto done;
1481                         }
1482
1483                         result = winreg_printer_write_dword(tmp_ctx,
1484                                                             winreg_pipe,
1485                                                             &key_hnd,
1486                                                             SPOOL_REG_PRINTKEEPPRINTEDJOBS,
1487                                                             0);
1488                         if (!W_ERROR_IS_OK(result)) {
1489                                 goto done;
1490                         }
1491                 } /* case 1 */
1492                 default:
1493                         break;
1494                 }
1495
1496                 if (is_valid_policy_hnd(&key_hnd)) {
1497                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1498                 }
1499         }
1500         info2 = talloc_zero(tmp_ctx, struct spoolss_SetPrinterInfo2);
1501         if (info2 == NULL) {
1502                 result = WERR_NOMEM;
1503                 goto done;
1504         }
1505
1506         if (servername != NULL) {
1507                 info2->printername = talloc_asprintf(tmp_ctx, "\\\\%s\\%s",
1508                                                      servername, sharename);
1509         } else {
1510                 info2->printername = sharename;
1511         }
1512         if (info2->printername == NULL) {
1513                 result = WERR_NOMEM;
1514                 goto done;
1515         }
1516         info2_mask |= SPOOLSS_PRINTER_INFO_PRINTERNAME;
1517
1518         info2->sharename = sharename;
1519         info2_mask |= SPOOLSS_PRINTER_INFO_SHARENAME;
1520
1521         info2->portname = SAMBA_PRINTER_PORT_NAME;
1522         info2_mask |= SPOOLSS_PRINTER_INFO_PORTNAME;
1523
1524         info2->printprocessor = "winprint";
1525         info2_mask |= SPOOLSS_PRINTER_INFO_PRINTPROCESSOR;
1526
1527         info2->datatype = "RAW";
1528         info2_mask |= SPOOLSS_PRINTER_INFO_DATATYPE;
1529
1530         info2->comment = "";
1531         info2_mask |= SPOOLSS_PRINTER_INFO_COMMENT;
1532
1533         info2->attributes = PRINTER_ATTRIBUTE_SAMBA;
1534         info2_mask |= SPOOLSS_PRINTER_INFO_ATTRIBUTES;
1535
1536         info2->starttime = 0; /* Minutes since 12:00am GMT */
1537         info2_mask |= SPOOLSS_PRINTER_INFO_STARTTIME;
1538
1539         info2->untiltime = 0; /* Minutes since 12:00am GMT */
1540         info2_mask |= SPOOLSS_PRINTER_INFO_UNTILTIME;
1541
1542         info2->priority = 1;
1543         info2_mask |= SPOOLSS_PRINTER_INFO_PRIORITY;
1544
1545         info2->defaultpriority = 1;
1546         info2_mask |= SPOOLSS_PRINTER_INFO_DEFAULTPRIORITY;
1547
1548         result = spoolss_create_default_secdesc(tmp_ctx, &secdesc);
1549         if (!W_ERROR_IS_OK(result)) {
1550                 goto done;
1551         }
1552         info2_mask |= SPOOLSS_PRINTER_INFO_SECDESC;
1553
1554         /*
1555          * Don't write a default Device Mode to the registry! The Device Mode is
1556          * only written to disk with a SetPrinter level 2 or 8.
1557          */
1558
1559         result = winreg_update_printer(tmp_ctx,
1560                                        server_info,
1561                                        sharename,
1562                                        info2_mask,
1563                                        info2,
1564                                        NULL,
1565                                        secdesc);
1566
1567 done:
1568         if (winreg_pipe != NULL) {
1569                 if (is_valid_policy_hnd(&key_hnd)) {
1570                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1571                 }
1572                 if (is_valid_policy_hnd(&hive_hnd)) {
1573                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
1574                 }
1575         }
1576
1577         talloc_free(tmp_ctx);
1578         return result;
1579 }
1580
1581 WERROR winreg_update_printer(TALLOC_CTX *mem_ctx,
1582                              struct auth_serversupplied_info *server_info,
1583                              const char *sharename,
1584                              uint32_t info2_mask,
1585                              struct spoolss_SetPrinterInfo2 *info2,
1586                              struct spoolss_DeviceMode *devmode,
1587                              struct security_descriptor *secdesc)
1588 {
1589         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
1590         struct rpc_pipe_client *winreg_pipe = NULL;
1591         struct policy_handle hive_hnd, key_hnd;
1592         int snum = lp_servicenumber(sharename);
1593         enum ndr_err_code ndr_err;
1594         DATA_BLOB blob;
1595         char *path;
1596         WERROR result = WERR_OK;
1597         TALLOC_CTX *tmp_ctx;
1598
1599         tmp_ctx = talloc_new(mem_ctx);
1600         if (tmp_ctx == NULL) {
1601                 return WERR_NOMEM;
1602         }
1603
1604         path = winreg_printer_data_keyname(tmp_ctx, sharename);
1605         if (path == NULL) {
1606                 TALLOC_FREE(tmp_ctx);
1607                 return WERR_NOMEM;
1608         }
1609
1610         ZERO_STRUCT(hive_hnd);
1611         ZERO_STRUCT(key_hnd);
1612
1613         result = winreg_printer_openkey(tmp_ctx,
1614                                         server_info,
1615                                         &winreg_pipe,
1616                                         path,
1617                                         "",
1618                                         true,
1619                                         access_mask,
1620                                         &hive_hnd,
1621                                         &key_hnd);
1622         if (!W_ERROR_IS_OK(result)) {
1623                 DEBUG(0, ("winreg_update_printer: Could not open key %s: %s\n",
1624                         path, win_errstr(result)));
1625                 goto done;
1626         }
1627
1628         if (info2_mask & SPOOLSS_PRINTER_INFO_ATTRIBUTES) {
1629                 result = winreg_printer_write_dword(tmp_ctx,
1630                                                     winreg_pipe,
1631                                                     &key_hnd,
1632                                                     "Attributes",
1633                                                     info2->attributes);
1634                 if (!W_ERROR_IS_OK(result)) {
1635                         goto done;
1636                 }
1637         }
1638
1639 #if 0
1640         if (info2_mask & SPOOLSS_PRINTER_INFO_AVERAGEPPM) {
1641                 result = winreg_printer_write_dword(tmp_ctx,
1642                                                     winreg_pipe,
1643                                                     &key_hnd,
1644                                                     "AveragePpm",
1645                                                     info2->attributes);
1646                 if (!W_ERROR_IS_OK(result)) {
1647                         goto done;
1648                 }
1649         }
1650 #endif
1651
1652         if (info2_mask & SPOOLSS_PRINTER_INFO_COMMENT) {
1653                 result = winreg_printer_write_sz(tmp_ctx,
1654                                                  winreg_pipe,
1655                                                  &key_hnd,
1656                                                  "Description",
1657                                                  info2->comment);
1658                 if (!W_ERROR_IS_OK(result)) {
1659                         goto done;
1660                 }
1661         }
1662
1663         if (info2_mask & SPOOLSS_PRINTER_INFO_DATATYPE) {
1664                 result = winreg_printer_write_sz(tmp_ctx,
1665                                                  winreg_pipe,
1666                                                  &key_hnd,
1667                                                  "Datatype",
1668                                                  info2->datatype);
1669                 if (!W_ERROR_IS_OK(result)) {
1670                         goto done;
1671                 }
1672         }
1673
1674         if (info2_mask & SPOOLSS_PRINTER_INFO_DEFAULTPRIORITY) {
1675                 result = winreg_printer_write_dword(tmp_ctx,
1676                                                     winreg_pipe,
1677                                                     &key_hnd,
1678                                                     "Default Priority",
1679                                                     info2->defaultpriority);
1680                 if (!W_ERROR_IS_OK(result)) {
1681                         goto done;
1682                 }
1683         }
1684
1685         if (info2_mask & SPOOLSS_PRINTER_INFO_DEVMODE) {
1686                 /*
1687                  * Some client drivers freak out if there is a NULL devmode
1688                  * (probably the driver is not checking before accessing
1689                  * the devmode pointer)   --jerry
1690                  */
1691                 if (devmode == NULL && lp_default_devmode(snum) && info2 != NULL) {
1692                         result = spoolss_create_default_devmode(tmp_ctx,
1693                                                                 info2->printername,
1694                                                                 &devmode);
1695                         if (!W_ERROR_IS_OK(result)) {
1696                                 goto done;
1697                         }
1698                 }
1699                 ndr_err = ndr_push_struct_blob(&blob, tmp_ctx, NULL, devmode,
1700                                 (ndr_push_flags_fn_t) ndr_push_spoolss_DeviceMode);
1701                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1702                         DEBUG(0, ("winreg_update_printer: Failed to marshall device mode\n"));
1703                         result = WERR_NOMEM;
1704                         goto done;
1705                 }
1706
1707                 result = winreg_printer_write_binary(tmp_ctx,
1708                                                      winreg_pipe,
1709                                                      &key_hnd,
1710                                                      "Default DevMode",
1711                                                      blob);
1712                 if (!W_ERROR_IS_OK(result)) {
1713                         goto done;
1714                 }
1715         }
1716
1717         if (info2_mask & SPOOLSS_PRINTER_INFO_DRIVERNAME) {
1718                 result = winreg_printer_write_sz(tmp_ctx,
1719                                                  winreg_pipe,
1720                                                  &key_hnd,
1721                                                  "Printer Driver",
1722                                                  info2->drivername);
1723                 if (!W_ERROR_IS_OK(result)) {
1724                         goto done;
1725                 }
1726         }
1727
1728         if (info2_mask & SPOOLSS_PRINTER_INFO_LOCATION) {
1729                 result = winreg_printer_write_sz(tmp_ctx,
1730                                                  winreg_pipe,
1731                                                  &key_hnd,
1732                                                  "Location",
1733                                                  info2->location);
1734                 if (!W_ERROR_IS_OK(result)) {
1735                         goto done;
1736                 }
1737         }
1738
1739         if (info2_mask & SPOOLSS_PRINTER_INFO_PARAMETERS) {
1740                 result = winreg_printer_write_sz(tmp_ctx,
1741                                                  winreg_pipe,
1742                                                  &key_hnd,
1743                                                  "Parameters",
1744                                                  info2->parameters);
1745                 if (!W_ERROR_IS_OK(result)) {
1746                         goto done;
1747                 }
1748         }
1749
1750         if (info2_mask & SPOOLSS_PRINTER_INFO_PORTNAME) {
1751                 result = winreg_printer_write_sz(tmp_ctx,
1752                                                  winreg_pipe,
1753                                                  &key_hnd,
1754                                                  "Port",
1755                                                  info2->portname);
1756                 if (!W_ERROR_IS_OK(result)) {
1757                         goto done;
1758                 }
1759         }
1760
1761         if (info2_mask & SPOOLSS_PRINTER_INFO_PRINTERNAME) {
1762                 /*
1763                  * in addprinter: no servername and the printer is the name
1764                  * in setprinter: servername is \\server
1765                  *                and printer is \\server\\printer
1766                  *
1767                  * Samba manages only local printers.
1768                  * we currently don't support things like i
1769                  * path=\\other_server\printer
1770                  *
1771                  * We only store the printername, not \\server\printername
1772                  */
1773                 const char *p = strrchr(info2->printername, '\\');
1774                 if (p == NULL) {
1775                         p = info2->printername;
1776                 } else {
1777                         p++;
1778                 }
1779                 result = winreg_printer_write_sz(tmp_ctx,
1780                                                  winreg_pipe,
1781                                                  &key_hnd,
1782                                                  "Name",
1783                                                  p);
1784                 if (!W_ERROR_IS_OK(result)) {
1785                         goto done;
1786                 }
1787         }
1788
1789         if (info2_mask & SPOOLSS_PRINTER_INFO_PRINTPROCESSOR) {
1790                 result = winreg_printer_write_sz(tmp_ctx,
1791                                                  winreg_pipe,
1792                                                  &key_hnd,
1793                                                  "Print Processor",
1794                                                  info2->printprocessor);
1795                 if (!W_ERROR_IS_OK(result)) {
1796                         goto done;
1797                 }
1798         }
1799
1800         if (info2_mask & SPOOLSS_PRINTER_INFO_PRIORITY) {
1801                 result = winreg_printer_write_dword(tmp_ctx,
1802                                                     winreg_pipe,
1803                                                     &key_hnd,
1804                                                     "Priority",
1805                                                     info2->priority);
1806                 if (!W_ERROR_IS_OK(result)) {
1807                         goto done;
1808                 }
1809         }
1810
1811         if (info2_mask & SPOOLSS_PRINTER_INFO_SECDESC) {
1812                 /*
1813                  * We need a security descriptor, if it isn't specified by
1814                  * AddPrinter{Ex} then create a default descriptor.
1815                  */
1816                 if (secdesc == NULL) {
1817                         result = spoolss_create_default_secdesc(tmp_ctx, &secdesc);
1818                         if (!W_ERROR_IS_OK(result)) {
1819                                 goto done;
1820                         }
1821                 }
1822                 result = winreg_set_printer_secdesc(tmp_ctx,
1823                                                     server_info,
1824                                                     sharename,
1825                                                     secdesc);
1826                 if (!W_ERROR_IS_OK(result)) {
1827                         goto done;
1828                 }
1829         }
1830
1831         if (info2_mask & SPOOLSS_PRINTER_INFO_SEPFILE) {
1832                 result = winreg_printer_write_sz(tmp_ctx,
1833                                                  winreg_pipe,
1834                                                  &key_hnd,
1835                                                  "Separator File",
1836                                                  info2->sepfile);
1837                 if (!W_ERROR_IS_OK(result)) {
1838                         goto done;
1839                 }
1840         }
1841
1842         if (info2_mask & SPOOLSS_PRINTER_INFO_SHARENAME) {
1843                 result = winreg_printer_write_sz(tmp_ctx,
1844                                                  winreg_pipe,
1845                                                  &key_hnd,
1846                                                  "Share Name",
1847                                                  info2->sharename);
1848                 if (!W_ERROR_IS_OK(result)) {
1849                         goto done;
1850                 }
1851         }
1852
1853         if (info2_mask & SPOOLSS_PRINTER_INFO_STARTTIME) {
1854                 result = winreg_printer_write_dword(tmp_ctx,
1855                                                     winreg_pipe,
1856                                                     &key_hnd,
1857                                                     "StartTime",
1858                                                     info2->starttime);
1859                 if (!W_ERROR_IS_OK(result)) {
1860                         goto done;
1861                 }
1862         }
1863
1864         if (info2_mask & SPOOLSS_PRINTER_INFO_STATUS) {
1865                 result = winreg_printer_write_dword(tmp_ctx,
1866                                                     winreg_pipe,
1867                                                     &key_hnd,
1868                                                     "Status",
1869                                                     info2->status);
1870                 if (!W_ERROR_IS_OK(result)) {
1871                         goto done;
1872                 }
1873         }
1874
1875         if (info2_mask & SPOOLSS_PRINTER_INFO_UNTILTIME) {
1876                 result = winreg_printer_write_dword(tmp_ctx,
1877                                                     winreg_pipe,
1878                                                     &key_hnd,
1879                                                     "UntilTime",
1880                                                     info2->untiltime);
1881                 if (!W_ERROR_IS_OK(result)) {
1882                         goto done;
1883                 }
1884         }
1885
1886         result = winreg_printer_write_dword(tmp_ctx,
1887                                             winreg_pipe,
1888                                             &key_hnd,
1889                                             "ChangeID",
1890                                             winreg_printer_rev_changeid());
1891         if (!W_ERROR_IS_OK(result)) {
1892                 goto done;
1893         }
1894
1895         result = WERR_OK;
1896 done:
1897         if (winreg_pipe != NULL) {
1898                 if (is_valid_policy_hnd(&key_hnd)) {
1899                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
1900                 }
1901                 if (is_valid_policy_hnd(&hive_hnd)) {
1902                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
1903                 }
1904         }
1905
1906         TALLOC_FREE(tmp_ctx);
1907         return result;
1908 }
1909
1910 WERROR winreg_get_printer(TALLOC_CTX *mem_ctx,
1911                           struct auth_serversupplied_info *server_info,
1912                           const char *servername,
1913                           const char *printer,
1914                           struct spoolss_PrinterInfo2 **pinfo2)
1915 {
1916         struct spoolss_PrinterInfo2 *info2;
1917         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
1918         struct rpc_pipe_client *winreg_pipe = NULL;
1919         struct policy_handle hive_hnd, key_hnd;
1920         struct spoolss_PrinterEnumValues *enum_values = NULL;
1921         struct spoolss_PrinterEnumValues *v;
1922         enum ndr_err_code ndr_err;
1923         DATA_BLOB blob;
1924         int snum = lp_servicenumber(printer);
1925         uint32_t num_values = 0;
1926         uint32_t i;
1927         char *path;
1928         WERROR result = WERR_OK;
1929         TALLOC_CTX *tmp_ctx;
1930
1931         tmp_ctx = talloc_new(mem_ctx);
1932         if (tmp_ctx == NULL) {
1933                 return WERR_NOMEM;
1934         }
1935
1936         path = winreg_printer_data_keyname(tmp_ctx, printer);
1937         if (path == NULL) {
1938                 TALLOC_FREE(tmp_ctx);
1939                 return WERR_NOMEM;
1940         }
1941
1942         result = winreg_printer_openkey(tmp_ctx,
1943                                         server_info,
1944                                         &winreg_pipe,
1945                                         path,
1946                                         "",
1947                                         false,
1948                                         access_mask,
1949                                         &hive_hnd,
1950                                         &key_hnd);
1951         if (!W_ERROR_IS_OK(result)) {
1952                 DEBUG(0, ("winreg_get_printer: Could not open key %s: %s\n",
1953                           path, win_errstr(result)));
1954                 goto done;
1955         }
1956
1957         result = winreg_printer_enumvalues(tmp_ctx,
1958                                            winreg_pipe,
1959                                            &key_hnd,
1960                                            &num_values,
1961                                            &enum_values);
1962         if (!W_ERROR_IS_OK(result)) {
1963                 DEBUG(0, ("winreg_get_printer: Could not enumerate values in %s: %s\n",
1964                           path, win_errstr(result)));
1965                 goto done;
1966         }
1967
1968         info2 = talloc_zero(tmp_ctx, struct spoolss_PrinterInfo2);
1969         if (info2 == NULL) {
1970                 result = WERR_NOMEM;
1971                 goto done;
1972         }
1973
1974         info2->servername     = EMPTY_STRING;
1975         info2->printername    = EMPTY_STRING;
1976         info2->sharename      = EMPTY_STRING;
1977         info2->portname       = EMPTY_STRING;
1978         info2->drivername     = EMPTY_STRING;
1979         info2->comment        = EMPTY_STRING;
1980         info2->location       = EMPTY_STRING;
1981         info2->sepfile        = EMPTY_STRING;
1982         info2->printprocessor = EMPTY_STRING;
1983         info2->datatype       = EMPTY_STRING;
1984         info2->parameters     = EMPTY_STRING;
1985
1986         if (servername != NULL && servername[0] != '\0') {
1987                 info2->servername = talloc_asprintf(info2, "\\\\%s", servername);
1988                 if (info2->servername == NULL) {
1989                         result = WERR_NOMEM;
1990                         goto done;
1991                 }
1992         }
1993
1994         for (i = 0; i < num_values; i++) {
1995                 v = &enum_values[i];
1996
1997                 result = winreg_enumval_to_sz(info2,
1998                                               v,
1999                                               "Name",
2000                                               &info2->printername);
2001                 CHECK_ERROR(result);
2002
2003                 result = winreg_enumval_to_sz(info2,
2004                                               v,
2005                                               "Share Name",
2006                                               &info2->sharename);
2007                 CHECK_ERROR(result);
2008
2009                 result = winreg_enumval_to_sz(info2,
2010                                               v,
2011                                               "Port",
2012                                               &info2->portname);
2013                 CHECK_ERROR(result);
2014
2015                 result = winreg_enumval_to_sz(info2,
2016                                               v,
2017                                               "Description",
2018                                               &info2->comment);
2019                 CHECK_ERROR(result);
2020
2021                 result = winreg_enumval_to_sz(info2,
2022                                               v,
2023                                               "Location",
2024                                               &info2->location);
2025                 CHECK_ERROR(result);
2026
2027                 result = winreg_enumval_to_sz(info2,
2028                                               v,
2029                                               "Separator File",
2030                                               &info2->sepfile);
2031                 CHECK_ERROR(result);
2032
2033                 result = winreg_enumval_to_sz(info2,
2034                                               v,
2035                                               "Print Processor",
2036                                               &info2->printprocessor);
2037                 CHECK_ERROR(result);
2038
2039                 result = winreg_enumval_to_sz(info2,
2040                                               v,
2041                                               "Datatype",
2042                                               &info2->datatype);
2043                 CHECK_ERROR(result);
2044
2045                 result = winreg_enumval_to_sz(info2,
2046                                               v,
2047                                               "Parameters",
2048                                               &info2->parameters);
2049                 CHECK_ERROR(result);
2050
2051                 result = winreg_enumval_to_sz(info2,
2052                                               v,
2053                                               "Printer Driver",
2054                                               &info2->drivername);
2055                 CHECK_ERROR(result);
2056
2057                 result = winreg_enumval_to_dword(info2,
2058                                                  v,
2059                                                  "Attributes",
2060                                                  &info2->attributes);
2061                 CHECK_ERROR(result);
2062
2063                 result = winreg_enumval_to_dword(info2,
2064                                                  v,
2065                                                  "Priority",
2066                                                  &info2->priority);
2067                 CHECK_ERROR(result);
2068
2069                 result = winreg_enumval_to_dword(info2,
2070                                                  v,
2071                                                  "Default Priority",
2072                                                  &info2->defaultpriority);
2073                 CHECK_ERROR(result);
2074
2075                 result = winreg_enumval_to_dword(info2,
2076                                                  v,
2077                                                  "StartTime",
2078                                                  &info2->starttime);
2079                 CHECK_ERROR(result);
2080
2081                 result = winreg_enumval_to_dword(info2,
2082                                                  v,
2083                                                  "UntilTime",
2084                                                  &info2->untiltime);
2085                 CHECK_ERROR(result);
2086
2087                 result = winreg_enumval_to_dword(info2,
2088                                                  v,
2089                                                  "Status",
2090                                                  &info2->status);
2091                 CHECK_ERROR(result);
2092
2093                 result = winreg_enumval_to_dword(info2,
2094                                                  v,
2095                                                  "StartTime",
2096                                                  &info2->starttime);
2097                 CHECK_ERROR(result);
2098         }
2099
2100         if (!W_ERROR_IS_OK(result)) {
2101                 DEBUG(0, ("winreg_get_printer: winreg_enumval_to_TYPE() failed "
2102                                         "for %s: %s\n",
2103                                         v->value_name,
2104                                         win_errstr(result)));
2105                 goto done;
2106         }
2107
2108         /* Create the printername */
2109         if (info2->servername[0] != '\0') {
2110                 if (lp_force_printername(snum)) {
2111                         const char *p = talloc_asprintf(info2, "%s\\%s",
2112                                                         info2->servername,
2113                                                         info2->sharename);
2114                                 if (p == NULL) {
2115                                         result = WERR_NOMEM;
2116                                         goto done;
2117                                 }
2118                                 info2->printername = p;
2119                 } else {
2120                         char *p = talloc_asprintf(info2, "%s\\%s",
2121                                                   info2->servername,
2122                                                   info2->printername);
2123                         if (p == NULL) {
2124                                 result = WERR_NOMEM;
2125                                 goto done;
2126                         }
2127                         info2->printername = p;
2128                 }
2129         }
2130
2131         /* Construct the Device Mode */
2132         result = winreg_printer_query_binary(tmp_ctx,
2133                                              winreg_pipe,
2134                                              &key_hnd,
2135                                              "Default DevMode",
2136                                              &blob);
2137         if (W_ERROR_IS_OK(result)) {
2138                 info2->devmode = talloc_zero(info2, struct spoolss_DeviceMode);
2139                 if (info2->devmode == NULL) {
2140                         result = WERR_NOMEM;
2141                         goto done;
2142                 }
2143                 ndr_err = ndr_pull_struct_blob(&blob,
2144                                                info2->devmode,
2145                                                NULL,
2146                                                info2->devmode,
2147                                                (ndr_pull_flags_fn_t) ndr_pull_spoolss_DeviceMode);
2148                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2149                         DEBUG(0, ("winreg_get_printer: Failed to unmarshall device mode\n"));
2150                         result = WERR_NOMEM;
2151                         goto done;
2152                 }
2153         }
2154
2155         if (info2->devmode == NULL && lp_default_devmode(snum)) {
2156                 result = spoolss_create_default_devmode(info2,
2157                                                         info2->printername,
2158                                                         &info2->devmode);
2159                 if (!W_ERROR_IS_OK(result)) {
2160                         goto done;
2161                 }
2162         }
2163
2164         if (info2->devmode != NULL) {
2165                 info2->devmode->devicename = talloc_strdup(info2->devmode,
2166                                                            info2->printername);
2167                 if (info2->devmode->devicename == NULL) {
2168                         DEBUG(0, ("winreg_get_printer: Failed to set devicename\n"));
2169                         result = WERR_NOMEM;
2170                         goto done;
2171                 }
2172         }
2173
2174         result = winreg_get_printer_secdesc(info2,
2175                                             server_info,
2176                                             printer,
2177                                             &info2->secdesc);
2178         if (!W_ERROR_IS_OK(result)) {
2179                 goto done;
2180         }
2181
2182         if (pinfo2) {
2183                 *pinfo2 = talloc_move(mem_ctx, &info2);
2184         }
2185
2186         result = WERR_OK;
2187 done:
2188         if (winreg_pipe != NULL) {
2189                 if (is_valid_policy_hnd(&key_hnd)) {
2190                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2191                 }
2192                 if (is_valid_policy_hnd(&hive_hnd)) {
2193                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2194                 }
2195         }
2196
2197         TALLOC_FREE(tmp_ctx);
2198         return result;
2199 }
2200
2201 WERROR winreg_get_printer_secdesc(TALLOC_CTX *mem_ctx,
2202                                   struct auth_serversupplied_info *server_info,
2203                                   const char *sharename,
2204                                   struct spoolss_security_descriptor **psecdesc)
2205 {
2206         struct spoolss_security_descriptor *secdesc;
2207         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2208         struct rpc_pipe_client *winreg_pipe = NULL;
2209         struct policy_handle hive_hnd, key_hnd;
2210         enum ndr_err_code ndr_err;
2211         const char *path;
2212         DATA_BLOB blob;
2213         TALLOC_CTX *tmp_ctx;
2214         WERROR result;
2215
2216         tmp_ctx = talloc_new(mem_ctx);
2217         if (tmp_ctx == NULL) {
2218                 return WERR_NOMEM;
2219         }
2220
2221         path = winreg_printer_data_keyname(tmp_ctx, sharename);
2222         if (path == NULL) {
2223                 talloc_free(tmp_ctx);
2224                 return WERR_NOMEM;
2225         }
2226
2227         ZERO_STRUCT(hive_hnd);
2228         ZERO_STRUCT(key_hnd);
2229
2230         result = winreg_printer_openkey(tmp_ctx,
2231                                         server_info,
2232                                         &winreg_pipe,
2233                                         path,
2234                                         "",
2235                                         false,
2236                                         access_mask,
2237                                         &hive_hnd,
2238                                         &key_hnd);
2239         if (!W_ERROR_IS_OK(result)) {
2240                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
2241                         goto create_default;
2242                 }
2243                 goto done;
2244         }
2245
2246         result = winreg_printer_query_binary(tmp_ctx,
2247                                              winreg_pipe,
2248                                              &key_hnd,
2249                                              "Security",
2250                                              &blob);
2251         if (!W_ERROR_IS_OK(result)) {
2252                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
2253                         goto create_default;
2254                 }
2255                 goto done;
2256         }
2257
2258         secdesc = talloc_zero(tmp_ctx, struct spoolss_security_descriptor);
2259         if (secdesc == NULL) {
2260                 result = WERR_NOMEM;
2261                 goto done;
2262         }
2263         ndr_err = ndr_pull_struct_blob(&blob,
2264                                        secdesc,
2265                                        NULL,
2266                                        secdesc,
2267                                        (ndr_pull_flags_fn_t) ndr_pull_security_descriptor);
2268         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2269                 DEBUG(0, ("winreg_get_secdesc: Failed to unmarshall security descriptor\n"));
2270                 result = WERR_NOMEM;
2271                 goto done;
2272         }
2273
2274         if (psecdesc) {
2275                 *psecdesc = talloc_move(mem_ctx, &secdesc);
2276         }
2277
2278         result = WERR_OK;
2279         goto done;
2280
2281 create_default:
2282         result = spoolss_create_default_secdesc(tmp_ctx, &secdesc);
2283         if (!W_ERROR_IS_OK(result)) {
2284                 return result;
2285         }
2286
2287         /* If security descriptor is owned by S-1-1-0 and winbindd is up,
2288            this security descriptor has been created when winbindd was
2289            down.  Take ownership of security descriptor. */
2290         if (sid_equal(secdesc->owner_sid, &global_sid_World)) {
2291                 DOM_SID owner_sid;
2292
2293                 /* Change sd owner to workgroup administrator */
2294
2295                 if (secrets_fetch_domain_sid(lp_workgroup(), &owner_sid)) {
2296                         struct spoolss_security_descriptor *new_secdesc;
2297                         size_t size;
2298
2299                         /* Create new sd */
2300                         sid_append_rid(&owner_sid, DOMAIN_RID_ADMINISTRATOR);
2301
2302                         new_secdesc = make_sec_desc(tmp_ctx,
2303                                                     secdesc->revision,
2304                                                     secdesc->type,
2305                                                     &owner_sid,
2306                                                     secdesc->group_sid,
2307                                                     secdesc->sacl,
2308                                                     secdesc->dacl,
2309                                                     &size);
2310
2311                         if (new_secdesc == NULL) {
2312                                 result = WERR_NOMEM;
2313                                 goto done;
2314                         }
2315
2316                         /* Swap with other one */
2317                         secdesc = new_secdesc;
2318                 }
2319         }
2320
2321         ndr_err = ndr_push_struct_blob(&blob, tmp_ctx, NULL, secdesc,
2322                         (ndr_push_flags_fn_t) ndr_push_security_descriptor);
2323         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2324                 DEBUG(0, ("winreg_set_secdesc: Failed to marshall security descriptor\n"));
2325                 result = WERR_NOMEM;
2326                 goto done;
2327         }
2328
2329         result = winreg_printer_write_binary(tmp_ctx,
2330                                              winreg_pipe,
2331                                              &key_hnd,
2332                                              "Security",
2333                                              blob);
2334         if (!W_ERROR_IS_OK(result)) {
2335                 return result;
2336         }
2337
2338         if (psecdesc) {
2339                 *psecdesc = talloc_move(mem_ctx, &secdesc);
2340         }
2341
2342         result = WERR_OK;
2343 done:
2344         if (winreg_pipe != NULL) {
2345                 if (is_valid_policy_hnd(&key_hnd)) {
2346                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2347                 }
2348                 if (is_valid_policy_hnd(&hive_hnd)) {
2349                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2350                 }
2351         }
2352
2353         talloc_free(tmp_ctx);
2354         return result;
2355 }
2356
2357 WERROR winreg_set_printer_secdesc(TALLOC_CTX *mem_ctx,
2358                                   struct auth_serversupplied_info *server_info,
2359                                   const char *sharename,
2360                                   const struct spoolss_security_descriptor *secdesc)
2361 {
2362         const struct spoolss_security_descriptor *new_secdesc = secdesc;
2363         struct spoolss_security_descriptor *old_secdesc;
2364         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2365         struct rpc_pipe_client *winreg_pipe = NULL;
2366         struct policy_handle hive_hnd, key_hnd;
2367         enum ndr_err_code ndr_err;
2368         const char *path;
2369         DATA_BLOB blob;
2370         TALLOC_CTX *tmp_ctx;
2371         WERROR result;
2372
2373         tmp_ctx = talloc_new(mem_ctx);
2374         if (tmp_ctx == NULL) {
2375                 return WERR_NOMEM;
2376         }
2377
2378         path = winreg_printer_data_keyname(tmp_ctx, sharename);
2379         if (path == NULL) {
2380                 talloc_free(tmp_ctx);
2381                 return WERR_NOMEM;
2382         }
2383
2384         /*
2385          * The old owner and group sids of the security descriptor are not
2386          * present when new ACEs are added or removed by changing printer
2387          * permissions through NT.  If they are NULL in the new security
2388          * descriptor then copy them over from the old one.
2389          */
2390         if (!secdesc->owner_sid || !secdesc->group_sid) {
2391                 DOM_SID *owner_sid, *group_sid;
2392                 SEC_ACL *dacl, *sacl;
2393                 size_t size;
2394
2395                 result = winreg_get_printer_secdesc(tmp_ctx,
2396                                                     server_info,
2397                                                     sharename,
2398                                                     &old_secdesc);
2399                 if (!W_ERROR_IS_OK(result)) {
2400                         talloc_free(tmp_ctx);
2401                         return result;
2402                 }
2403
2404                 /* Pick out correct owner and group sids */
2405                 owner_sid = secdesc->owner_sid ?
2406                             secdesc->owner_sid :
2407                             old_secdesc->owner_sid;
2408
2409                 group_sid = secdesc->group_sid ?
2410                             secdesc->group_sid :
2411                             old_secdesc->group_sid;
2412
2413                 dacl = secdesc->dacl ?
2414                        secdesc->dacl :
2415                        old_secdesc->dacl;
2416
2417                 sacl = secdesc->sacl ?
2418                        secdesc->sacl :
2419                        old_secdesc->sacl;
2420
2421                 /* Make a deep copy of the security descriptor */
2422                 new_secdesc = make_sec_desc(tmp_ctx,
2423                                             secdesc->revision,
2424                                             secdesc->type,
2425                                             owner_sid,
2426                                             group_sid,
2427                                             sacl,
2428                                             dacl,
2429                                             &size);
2430                 if (new_secdesc == NULL) {
2431                         talloc_free(tmp_ctx);
2432                         return WERR_NOMEM;
2433                 }
2434         }
2435
2436         ZERO_STRUCT(hive_hnd);
2437         ZERO_STRUCT(key_hnd);
2438
2439         result = winreg_printer_openkey(tmp_ctx,
2440                                         server_info,
2441                                         &winreg_pipe,
2442                                         path,
2443                                         "",
2444                                         false,
2445                                         access_mask,
2446                                         &hive_hnd,
2447                                         &key_hnd);
2448         if (!W_ERROR_IS_OK(result)) {
2449                 goto done;
2450         }
2451
2452         ndr_err = ndr_push_struct_blob(&blob, tmp_ctx, NULL, new_secdesc,
2453                         (ndr_push_flags_fn_t) ndr_push_security_descriptor);
2454         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
2455                 DEBUG(0, ("winreg_set_secdesc: Failed to marshall security descriptor\n"));
2456                 result = WERR_NOMEM;
2457                 goto done;
2458         }
2459
2460         result = winreg_printer_write_binary(tmp_ctx,
2461                                              winreg_pipe,
2462                                              &key_hnd,
2463                                              "Security",
2464                                              blob);
2465
2466 done:
2467         if (winreg_pipe != NULL) {
2468                 if (is_valid_policy_hnd(&key_hnd)) {
2469                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2470                 }
2471                 if (is_valid_policy_hnd(&hive_hnd)) {
2472                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2473                 }
2474         }
2475
2476         talloc_free(tmp_ctx);
2477         return result;
2478 }
2479
2480 /* Set printer data over the winreg pipe. */
2481 WERROR winreg_set_printer_dataex(TALLOC_CTX *mem_ctx,
2482                                  struct auth_serversupplied_info *server_info,
2483                                  const char *printer,
2484                                  const char *key,
2485                                  const char *value,
2486                                  enum winreg_Type type,
2487                                  uint8_t *data,
2488                                  uint32_t data_size)
2489 {
2490         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2491         struct rpc_pipe_client *winreg_pipe = NULL;
2492         struct policy_handle hive_hnd, key_hnd;
2493         struct winreg_String wvalue;
2494         char *path;
2495         WERROR result = WERR_OK;
2496         NTSTATUS status;
2497         TALLOC_CTX *tmp_ctx;
2498
2499         tmp_ctx = talloc_new(mem_ctx);
2500         if (tmp_ctx == NULL) {
2501                 return WERR_NOMEM;
2502         }
2503
2504         path = winreg_printer_data_keyname(tmp_ctx, printer);
2505         if (path == NULL) {
2506                 TALLOC_FREE(tmp_ctx);
2507                 return WERR_NOMEM;
2508         }
2509
2510         ZERO_STRUCT(hive_hnd);
2511         ZERO_STRUCT(key_hnd);
2512
2513         DEBUG(8, ("winreg_set_printer_dataex: Open printer key %s, value %s, access_mask: 0x%05x for [%s]\n",
2514                         key, value, access_mask, printer));
2515         result = winreg_printer_openkey(tmp_ctx,
2516                                         server_info,
2517                                         &winreg_pipe,
2518                                         path,
2519                                         key,
2520                                         true,
2521                                         access_mask,
2522                                         &hive_hnd,
2523                                         &key_hnd);
2524         if (!W_ERROR_IS_OK(result)) {
2525                 DEBUG(0, ("winreg_set_printer_dataex: Could not open key %s: %s\n",
2526                           key, win_errstr(result)));
2527                 goto done;
2528         }
2529
2530         wvalue.name = value;
2531         status = rpccli_winreg_SetValue(winreg_pipe,
2532                                         tmp_ctx,
2533                                         &key_hnd,
2534                                         wvalue,
2535                                         type,
2536                                         data,
2537                                         data_size,
2538                                         &result);
2539         if (!NT_STATUS_IS_OK(status)) {
2540                 DEBUG(0, ("winreg_set_printer_dataex: Could not set value %s: %s\n",
2541                           value, nt_errstr(status)));
2542                 if (!W_ERROR_IS_OK(result)) {
2543                         goto done;
2544                 }
2545                 result = ntstatus_to_werror(status);
2546                 goto done;
2547         }
2548
2549         result = WERR_OK;
2550 done:
2551         if (winreg_pipe != NULL) {
2552                 if (is_valid_policy_hnd(&key_hnd)) {
2553                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2554                 }
2555                 if (is_valid_policy_hnd(&hive_hnd)) {
2556                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2557                 }
2558         }
2559
2560         TALLOC_FREE(tmp_ctx);
2561         return result;
2562 }
2563
2564 /* Get printer data over a winreg pipe. */
2565 WERROR winreg_get_printer_dataex(TALLOC_CTX *mem_ctx,
2566                                  struct auth_serversupplied_info *server_info,
2567                                  const char *printer,
2568                                  const char *key,
2569                                  const char *value,
2570                                  enum winreg_Type *type,
2571                                  uint8_t **data,
2572                                  uint32_t *data_size)
2573 {
2574         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2575         struct rpc_pipe_client *winreg_pipe = NULL;
2576         struct policy_handle hive_hnd, key_hnd;
2577         struct winreg_String wvalue;
2578         enum winreg_Type type_in;
2579         char *path;
2580         uint8_t *data_in;
2581         uint32_t data_in_size = 0;
2582         uint32_t value_len = 0;
2583         WERROR result = WERR_OK;
2584         NTSTATUS status;
2585         TALLOC_CTX *tmp_ctx;
2586
2587         tmp_ctx = talloc_new(mem_ctx);
2588         if (tmp_ctx == NULL) {
2589                 return WERR_NOMEM;
2590         }
2591
2592         path = winreg_printer_data_keyname(tmp_ctx, printer);
2593         if (path == NULL) {
2594                 TALLOC_FREE(tmp_ctx);
2595                 return WERR_NOMEM;
2596         }
2597
2598         ZERO_STRUCT(hive_hnd);
2599         ZERO_STRUCT(key_hnd);
2600
2601         result = winreg_printer_openkey(tmp_ctx,
2602                                         server_info,
2603                                         &winreg_pipe,
2604                                         path,
2605                                         key,
2606                                         false,
2607                                         access_mask,
2608                                         &hive_hnd,
2609                                         &key_hnd);
2610         if (!W_ERROR_IS_OK(result)) {
2611                 DEBUG(0, ("winreg_get_printer_dataex: Could not open key %s: %s\n",
2612                           key, win_errstr(result)));
2613                 goto done;
2614         }
2615
2616         wvalue.name = value;
2617
2618         /*
2619          * call QueryValue once with data == NULL to get the
2620          * needed memory size to be allocated, then allocate
2621          * data buffer and call again.
2622          */
2623         status = rpccli_winreg_QueryValue(winreg_pipe,
2624                                           tmp_ctx,
2625                                           &key_hnd,
2626                                           &wvalue,
2627                                           &type_in,
2628                                           NULL,
2629                                           &data_in_size,
2630                                           &value_len,
2631                                           &result);
2632         if (!NT_STATUS_IS_OK(status)) {
2633                 DEBUG(0, ("winreg_get_printer_dataex: Could not query value %s: %s\n",
2634                           value, nt_errstr(status)));
2635                 if (!W_ERROR_IS_OK(result)) {
2636                         goto done;
2637                 }
2638                 result = ntstatus_to_werror(status);
2639                 goto done;
2640         }
2641
2642         data_in = (uint8_t *) TALLOC(tmp_ctx, data_in_size);
2643         if (data_in == NULL) {
2644                 result = WERR_NOMEM;
2645                 goto done;
2646         }
2647         value_len = 0;
2648
2649         status = rpccli_winreg_QueryValue(winreg_pipe,
2650                                           tmp_ctx,
2651                                           &key_hnd,
2652                                           &wvalue,
2653                                           &type_in,
2654                                           data_in,
2655                                           &data_in_size,
2656                                           &value_len,
2657                                           &result);
2658         if (!NT_STATUS_IS_OK(status)) {
2659                 DEBUG(0, ("winreg_get_printer_dataex: Could not query value %s: %s\n",
2660                           value, nt_errstr(status)));
2661                 if (!W_ERROR_IS_OK(result)) {
2662                         result = ntstatus_to_werror(status);
2663                 }
2664                 goto done;
2665         }
2666
2667         *type = type_in;
2668         *data_size = data_in_size;
2669         if (data_in_size) {
2670                 *data = talloc_move(mem_ctx, &data_in);
2671         }
2672
2673         result = WERR_OK;
2674 done:
2675         if (winreg_pipe != NULL) {
2676                 if (is_valid_policy_hnd(&key_hnd)) {
2677                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2678                 }
2679                 if (is_valid_policy_hnd(&hive_hnd)) {
2680                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2681                 }
2682         }
2683
2684         TALLOC_FREE(tmp_ctx);
2685         return result;
2686 }
2687
2688 /* Enumerate on the values of a given key and provide the data. */
2689 WERROR winreg_enum_printer_dataex(TALLOC_CTX *mem_ctx,
2690                                   struct auth_serversupplied_info *server_info,
2691                                   const char *printer,
2692                                   const char *key,
2693                                   uint32_t *pnum_values,
2694                                   struct spoolss_PrinterEnumValues **penum_values)
2695 {
2696         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2697         struct rpc_pipe_client *winreg_pipe = NULL;
2698         struct policy_handle hive_hnd, key_hnd;
2699
2700         struct spoolss_PrinterEnumValues *enum_values = NULL;
2701         uint32_t num_values = 0;
2702         char *path;
2703         WERROR result = WERR_OK;
2704
2705         TALLOC_CTX *tmp_ctx;
2706
2707         tmp_ctx = talloc_new(mem_ctx);
2708         if (tmp_ctx == NULL) {
2709                 return WERR_NOMEM;
2710         }
2711
2712         path = winreg_printer_data_keyname(tmp_ctx, printer);
2713         if (path == NULL) {
2714                 TALLOC_FREE(tmp_ctx);
2715                 return WERR_NOMEM;
2716         }
2717
2718         result = winreg_printer_openkey(tmp_ctx,
2719                                         server_info,
2720                                         &winreg_pipe,
2721                                         path,
2722                                         key,
2723                                         false,
2724                                         access_mask,
2725                                         &hive_hnd,
2726                                         &key_hnd);
2727         if (!W_ERROR_IS_OK(result)) {
2728                 DEBUG(0, ("winreg_enum_printer_dataex: Could not open key %s: %s\n",
2729                           key, win_errstr(result)));
2730                 goto done;
2731         }
2732
2733         result = winreg_printer_enumvalues(tmp_ctx,
2734                                            winreg_pipe,
2735                                            &key_hnd,
2736                                            &num_values,
2737                                            &enum_values);
2738         if (!W_ERROR_IS_OK(result)) {
2739                 DEBUG(0, ("winreg_enum_printer_dataex: Could not enumerate values in %s: %s\n",
2740                           key, win_errstr(result)));
2741                 goto done;
2742         }
2743
2744         *pnum_values = num_values;
2745         if (penum_values) {
2746                 *penum_values = talloc_move(mem_ctx, &enum_values);
2747         }
2748
2749         result = WERR_OK;
2750 done:
2751         if (winreg_pipe != NULL) {
2752                 if (is_valid_policy_hnd(&key_hnd)) {
2753                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2754                 }
2755                 if (is_valid_policy_hnd(&hive_hnd)) {
2756                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2757                 }
2758         }
2759
2760         TALLOC_FREE(tmp_ctx);
2761         return result;
2762 }
2763
2764 /* Delete printer data over a winreg pipe. */
2765 WERROR winreg_delete_printer_dataex(TALLOC_CTX *mem_ctx,
2766                                     struct auth_serversupplied_info *server_info,
2767                                     const char *printer,
2768                                     const char *key,
2769                                     const char *value)
2770 {
2771         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2772         struct rpc_pipe_client *winreg_pipe = NULL;
2773         struct policy_handle hive_hnd, key_hnd;
2774         struct winreg_String wvalue;
2775         char *path;
2776         WERROR result = WERR_OK;
2777         NTSTATUS status;
2778
2779         TALLOC_CTX *tmp_ctx;
2780
2781         tmp_ctx = talloc_new(mem_ctx);
2782         if (tmp_ctx == NULL) {
2783                 return WERR_NOMEM;
2784         }
2785
2786         path = winreg_printer_data_keyname(tmp_ctx, printer);
2787         if (path == NULL) {
2788                 TALLOC_FREE(tmp_ctx);
2789                 return WERR_NOMEM;
2790         }
2791
2792         ZERO_STRUCT(hive_hnd);
2793         ZERO_STRUCT(key_hnd);
2794
2795         result = winreg_printer_openkey(tmp_ctx,
2796                                         server_info,
2797                                         &winreg_pipe,
2798                                         path,
2799                                         key,
2800                                         false,
2801                                         access_mask,
2802                                         &hive_hnd,
2803                                         &key_hnd);
2804         if (!W_ERROR_IS_OK(result)) {
2805                 DEBUG(0, ("winreg_delete_printer_dataex: Could not open key %s: %s\n",
2806                           key, win_errstr(result)));
2807                 goto done;
2808         }
2809
2810         wvalue.name = value;
2811         status = rpccli_winreg_DeleteValue(winreg_pipe,
2812                                            tmp_ctx,
2813                                            &key_hnd,
2814                                            wvalue,
2815                                            &result);
2816         if (!NT_STATUS_IS_OK(status)) {
2817                 DEBUG(0, ("winreg_delete_printer_dataex: Could not delete value %s: %s\n",
2818                           value, nt_errstr(status)));
2819                 if (!W_ERROR_IS_OK(result)) {
2820                         goto done;
2821                 }
2822                 result = ntstatus_to_werror(status);
2823                 goto done;
2824         }
2825
2826         result = WERR_OK;
2827 done:
2828         if (winreg_pipe != NULL) {
2829                 if (is_valid_policy_hnd(&key_hnd)) {
2830                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2831                 }
2832                 if (is_valid_policy_hnd(&hive_hnd)) {
2833                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2834                 }
2835         }
2836
2837         TALLOC_FREE(tmp_ctx);
2838         return result;
2839 }
2840
2841 /* Enumerate on the subkeys of a given key and provide the data. */
2842 WERROR winreg_enum_printer_key(TALLOC_CTX *mem_ctx,
2843                                struct auth_serversupplied_info *server_info,
2844                                const char *printer,
2845                                const char *key,
2846                                uint32_t *pnum_subkeys,
2847                                const char ***psubkeys)
2848 {
2849         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2850         struct rpc_pipe_client *winreg_pipe = NULL;
2851         struct policy_handle hive_hnd, key_hnd;
2852         char *path;
2853         const char **subkeys = NULL;
2854         uint32_t num_subkeys = -1;
2855
2856         WERROR result = WERR_OK;
2857
2858         TALLOC_CTX *tmp_ctx;
2859
2860         tmp_ctx = talloc_new(mem_ctx);
2861         if (tmp_ctx == NULL) {
2862                 return WERR_NOMEM;
2863         }
2864
2865         path = winreg_printer_data_keyname(tmp_ctx, printer);
2866         if (path == NULL) {
2867                 TALLOC_FREE(tmp_ctx);
2868                 return WERR_NOMEM;
2869         }
2870
2871         ZERO_STRUCT(hive_hnd);
2872         ZERO_STRUCT(key_hnd);
2873
2874         result = winreg_printer_openkey(tmp_ctx,
2875                                         server_info,
2876                                         &winreg_pipe,
2877                                         path,
2878                                         key,
2879                                         false,
2880                                         access_mask,
2881                                         &hive_hnd,
2882                                         &key_hnd);
2883         if (!W_ERROR_IS_OK(result)) {
2884                 DEBUG(0, ("winreg_enum_printer_key: Could not open key %s: %s\n",
2885                           key, win_errstr(result)));
2886                 goto done;
2887         }
2888
2889         result = winreg_printer_enumkeys(tmp_ctx,
2890                                          winreg_pipe,
2891                                          &key_hnd,
2892                                          &num_subkeys,
2893                                          &subkeys);
2894         if (!W_ERROR_IS_OK(result)) {
2895                 DEBUG(0, ("winreg_enum_printer_key: Could not enumerate subkeys in %s: %s\n",
2896                           key, win_errstr(result)));
2897                 goto done;
2898         }
2899
2900         *pnum_subkeys = num_subkeys;
2901         if (psubkeys) {
2902                 *psubkeys = talloc_move(mem_ctx, &subkeys);
2903         }
2904
2905         result = WERR_OK;
2906 done:
2907         if (winreg_pipe != NULL) {
2908                 if (is_valid_policy_hnd(&key_hnd)) {
2909                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2910                 }
2911                 if (is_valid_policy_hnd(&hive_hnd)) {
2912                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
2913                 }
2914         }
2915
2916         TALLOC_FREE(tmp_ctx);
2917         return result;
2918 }
2919
2920 /* Delete a key with subkeys of a given printer. */
2921 WERROR winreg_delete_printer_key(TALLOC_CTX *mem_ctx,
2922                                  struct auth_serversupplied_info *server_info,
2923                                  const char *printer,
2924                                  const char *key)
2925 {
2926         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
2927         struct rpc_pipe_client *winreg_pipe = NULL;
2928         struct policy_handle hive_hnd, key_hnd;
2929         char *keyname;
2930         char *path;
2931         WERROR result;
2932         TALLOC_CTX *tmp_ctx;
2933
2934         tmp_ctx = talloc_new(mem_ctx);
2935         if (tmp_ctx == NULL) {
2936                 return WERR_NOMEM;
2937         }
2938
2939         path = winreg_printer_data_keyname(tmp_ctx, printer);
2940         if (path == NULL) {
2941                 TALLOC_FREE(tmp_ctx);
2942                 return WERR_NOMEM;
2943         }
2944
2945         result = winreg_printer_openkey(tmp_ctx,
2946                                         server_info,
2947                                         &winreg_pipe,
2948                                         path,
2949                                         key,
2950                                         false,
2951                                         access_mask,
2952                                         &hive_hnd,
2953                                         &key_hnd);
2954         if (!W_ERROR_IS_OK(result)) {
2955                 /* key doesn't exist */
2956                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
2957                         result = WERR_OK;
2958                         goto done;
2959                 }
2960
2961                 DEBUG(0, ("winreg_delete_printer_key: Could not open key %s: %s\n",
2962                           key, win_errstr(result)));
2963                 goto done;
2964         }
2965
2966         if (is_valid_policy_hnd(&key_hnd)) {
2967                 rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2968         }
2969
2970         if (key == NULL || key[0] == '\0') {
2971                 keyname = path;
2972         } else {
2973                 keyname = talloc_asprintf(tmp_ctx,
2974                                           "%s\\%s",
2975                                           path,
2976                                           key);
2977                 if (keyname == NULL) {
2978                         result = WERR_NOMEM;
2979                         goto done;
2980                 }
2981         }
2982
2983         result = winreg_printer_delete_subkeys(tmp_ctx,
2984                                                winreg_pipe,
2985                                                &hive_hnd,
2986                                                access_mask,
2987                                                keyname);
2988         if (!W_ERROR_IS_OK(result)) {
2989                 DEBUG(0, ("winreg_delete_printer_key: Could not delete key %s: %s\n",
2990                           key, win_errstr(result)));
2991                 goto done;
2992         }
2993
2994 done:
2995         if (winreg_pipe != NULL) {
2996                 if (is_valid_policy_hnd(&key_hnd)) {
2997                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
2998                 }
2999                 if (is_valid_policy_hnd(&hive_hnd)) {
3000                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3001                 }
3002         }
3003
3004         TALLOC_FREE(tmp_ctx);
3005         return result;
3006 }
3007
3008 WERROR winreg_printer_update_changeid(TALLOC_CTX *mem_ctx,
3009                                       struct auth_serversupplied_info *server_info,
3010                                       const char *printer)
3011 {
3012         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3013         struct rpc_pipe_client *winreg_pipe = NULL;
3014         struct policy_handle hive_hnd, key_hnd;
3015         char *path;
3016         WERROR result;
3017         TALLOC_CTX *tmp_ctx;
3018
3019         tmp_ctx = talloc_new(mem_ctx);
3020         if (tmp_ctx == NULL) {
3021                 return WERR_NOMEM;
3022         }
3023
3024         path = winreg_printer_data_keyname(tmp_ctx, printer);
3025         if (path == NULL) {
3026                 TALLOC_FREE(tmp_ctx);
3027                 return WERR_NOMEM;
3028         }
3029
3030         ZERO_STRUCT(hive_hnd);
3031         ZERO_STRUCT(key_hnd);
3032
3033         result = winreg_printer_openkey(tmp_ctx,
3034                                         server_info,
3035                                         &winreg_pipe,
3036                                         path,
3037                                         "",
3038                                         false,
3039                                         access_mask,
3040                                         &hive_hnd,
3041                                         &key_hnd);
3042         if (!W_ERROR_IS_OK(result)) {
3043                 DEBUG(0, ("winreg_printer_update_changeid: Could not open key %s: %s\n",
3044                           path, win_errstr(result)));
3045                 goto done;
3046         }
3047
3048         result = winreg_printer_write_dword(tmp_ctx,
3049                                             winreg_pipe,
3050                                             &key_hnd,
3051                                             "ChangeID",
3052                                             winreg_printer_rev_changeid());
3053         if (!W_ERROR_IS_OK(result)) {
3054                 goto done;
3055         }
3056
3057         result = WERR_OK;
3058 done:
3059         if (winreg_pipe != NULL) {
3060                 if (is_valid_policy_hnd(&key_hnd)) {
3061                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3062                 }
3063                 if (is_valid_policy_hnd(&hive_hnd)) {
3064                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3065                 }
3066         }
3067
3068         TALLOC_FREE(tmp_ctx);
3069         return result;
3070 }
3071
3072 WERROR winreg_printer_get_changeid(TALLOC_CTX *mem_ctx,
3073                                    struct auth_serversupplied_info *server_info,
3074                                    const char *printer,
3075                                    uint32_t *pchangeid)
3076 {
3077         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3078         struct rpc_pipe_client *winreg_pipe = NULL;
3079         struct policy_handle hive_hnd, key_hnd;
3080         uint32_t changeid = 0;
3081         char *path;
3082         WERROR result;
3083         TALLOC_CTX *tmp_ctx;
3084
3085         tmp_ctx = talloc_new(mem_ctx);
3086         if (tmp_ctx == NULL) {
3087                 return WERR_NOMEM;
3088         }
3089
3090         path = winreg_printer_data_keyname(tmp_ctx, printer);
3091         if (path == NULL) {
3092                 TALLOC_FREE(tmp_ctx);
3093                 return WERR_NOMEM;
3094         }
3095
3096         ZERO_STRUCT(hive_hnd);
3097         ZERO_STRUCT(key_hnd);
3098
3099         result = winreg_printer_openkey(tmp_ctx,
3100                                         server_info,
3101                                         &winreg_pipe,
3102                                         path,
3103                                         "",
3104                                         false,
3105                                         access_mask,
3106                                         &hive_hnd,
3107                                         &key_hnd);
3108         if (!W_ERROR_IS_OK(result)) {
3109                 DEBUG(0, ("winreg_printer_get_changeid: Could not open key %s: %s\n",
3110                           path, win_errstr(result)));
3111                 goto done;
3112         }
3113
3114         DEBUG(0, ("winreg_printer_get_changeid: get changeid from %s\n", path));
3115         result = winreg_printer_query_dword(tmp_ctx,
3116                                             winreg_pipe,
3117                                             &key_hnd,
3118                                             "ChangeID",
3119                                             &changeid);
3120         if (!W_ERROR_IS_OK(result)) {
3121                 goto done;
3122         }
3123
3124         if (pchangeid) {
3125                 *pchangeid = changeid;
3126         }
3127
3128         result = WERR_OK;
3129 done:
3130         if (winreg_pipe != NULL) {
3131                 if (is_valid_policy_hnd(&key_hnd)) {
3132                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3133                 }
3134                 if (is_valid_policy_hnd(&hive_hnd)) {
3135                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3136                 }
3137         }
3138
3139         TALLOC_FREE(tmp_ctx);
3140         return result;
3141 }
3142
3143 /*
3144  * The special behaviour of the spoolss forms is documented at the website:
3145  *
3146  * Managing Win32 Printserver Forms
3147  * http://unixwiz.net/techtips/winspooler-forms.html
3148  */
3149
3150 WERROR winreg_printer_addform1(TALLOC_CTX *mem_ctx,
3151                                struct auth_serversupplied_info *server_info,
3152                                struct spoolss_AddFormInfo1 *form)
3153 {
3154         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3155         struct rpc_pipe_client *winreg_pipe = NULL;
3156         struct policy_handle hive_hnd, key_hnd;
3157         struct winreg_String wvalue;
3158         DATA_BLOB blob;
3159         uint32_t num_info = 0;
3160         union spoolss_FormInfo *info = NULL;
3161         uint32_t i;
3162         WERROR result;
3163         NTSTATUS status;
3164         TALLOC_CTX *tmp_ctx;
3165
3166         tmp_ctx = talloc_new(mem_ctx);
3167         if (tmp_ctx == NULL) {
3168                 return WERR_NOMEM;
3169         }
3170
3171         ZERO_STRUCT(hive_hnd);
3172         ZERO_STRUCT(key_hnd);
3173
3174         result = winreg_printer_openkey(tmp_ctx,
3175                                         server_info,
3176                                         &winreg_pipe,
3177                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3178                                         "",
3179                                         true,
3180                                         access_mask,
3181                                         &hive_hnd,
3182                                         &key_hnd);
3183         if (!W_ERROR_IS_OK(result)) {
3184                 DEBUG(0, ("winreg_printer_addform1: Could not open key %s: %s\n",
3185                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3186                 goto done;
3187         }
3188
3189         result = winreg_printer_enumforms1(tmp_ctx, server_info, &num_info, &info);
3190         if (!W_ERROR_IS_OK(result)) {
3191                 DEBUG(0, ("winreg_printer_addform: Could not enum keys %s: %s\n",
3192                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3193                 goto done;
3194         }
3195
3196         /* If form name already exists or is builtin return ALREADY_EXISTS */
3197         for (i = 0; i < num_info; i++) {
3198                 if (strequal(info[i].info1.form_name, form->form_name)) {
3199                         result = WERR_FILE_EXISTS;
3200                         goto done;
3201                 }
3202         }
3203
3204         wvalue.name = form->form_name;
3205
3206         blob = data_blob_talloc(tmp_ctx, NULL, 32);
3207         SIVAL(blob.data,  0, form->size.width);
3208         SIVAL(blob.data,  4, form->size.height);
3209         SIVAL(blob.data,  8, form->area.left);
3210         SIVAL(blob.data, 12, form->area.top);
3211         SIVAL(blob.data, 16, form->area.right);
3212         SIVAL(blob.data, 20, form->area.bottom);
3213         SIVAL(blob.data, 24, num_info + 1); /* FIXME */
3214         SIVAL(blob.data, 28, form->flags);
3215
3216         status = rpccli_winreg_SetValue(winreg_pipe,
3217                                         tmp_ctx,
3218                                         &key_hnd,
3219                                         wvalue,
3220                                         REG_BINARY,
3221                                         blob.data,
3222                                         blob.length,
3223                                         &result);
3224         if (!NT_STATUS_IS_OK(status)) {
3225                 DEBUG(0, ("winreg_printer_addform1: Could not set value %s: %s\n",
3226                           wvalue.name, nt_errstr(status)));
3227                 if (!W_ERROR_IS_OK(result)) {
3228                         goto done;
3229                 }
3230                 result = ntstatus_to_werror(status);
3231                 goto done;
3232         }
3233
3234         result = WERR_OK;
3235 done:
3236         if (winreg_pipe != NULL) {
3237                 if (is_valid_policy_hnd(&key_hnd)) {
3238                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3239                 }
3240                 if (is_valid_policy_hnd(&hive_hnd)) {
3241                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3242                 }
3243         }
3244
3245         TALLOC_FREE(info);
3246         TALLOC_FREE(tmp_ctx);
3247         return result;
3248 }
3249
3250 WERROR winreg_printer_enumforms1(TALLOC_CTX *mem_ctx,
3251                                  struct auth_serversupplied_info *server_info,
3252                                  uint32_t *pnum_info,
3253                                  union spoolss_FormInfo **pinfo)
3254 {
3255         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3256         struct rpc_pipe_client *winreg_pipe = NULL;
3257         struct policy_handle hive_hnd, key_hnd;
3258         union spoolss_FormInfo *info;
3259         struct spoolss_PrinterEnumValues *enum_values = NULL;
3260         uint32_t num_values = 0;
3261         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3262         uint32_t i;
3263         WERROR result;
3264         TALLOC_CTX *tmp_ctx;
3265
3266         tmp_ctx = talloc_new(mem_ctx);
3267         if (tmp_ctx == NULL) {
3268                 return WERR_NOMEM;
3269         }
3270
3271         ZERO_STRUCT(hive_hnd);
3272         ZERO_STRUCT(key_hnd);
3273
3274         result = winreg_printer_openkey(tmp_ctx,
3275                                         server_info,
3276                                         &winreg_pipe,
3277                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3278                                         "",
3279                                         true,
3280                                         access_mask,
3281                                         &hive_hnd,
3282                                         &key_hnd);
3283         if (!W_ERROR_IS_OK(result)) {
3284                 /* key doesn't exist */
3285                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
3286                         result = WERR_OK;
3287                         goto done;
3288                 }
3289
3290                 DEBUG(0, ("winreg_printer_enumforms1: Could not open key %s: %s\n",
3291                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3292                 goto done;
3293         }
3294
3295         result = winreg_printer_enumvalues(tmp_ctx,
3296                                            winreg_pipe,
3297                                            &key_hnd,
3298                                            &num_values,
3299                                            &enum_values);
3300         if (!W_ERROR_IS_OK(result)) {
3301                 DEBUG(0, ("winreg_printer_enumforms1: Could not enumerate values in %s: %s\n",
3302                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3303                 goto done;
3304         }
3305
3306         info = TALLOC_ARRAY(tmp_ctx, union spoolss_FormInfo, num_builtin + num_values);
3307         if (info == NULL) {
3308                 result = WERR_NOMEM;
3309                 goto done;
3310         }
3311
3312         /* Enumerate BUILTIN forms */
3313         for (i = 0; i < num_builtin; i++) {
3314                 info[i].info1 = builtin_forms1[i];
3315         }
3316
3317         /* Enumerate registry forms */
3318         for (i = 0; i < num_values; i++) {
3319                 union spoolss_FormInfo val;
3320
3321                 if (enum_values[i].type != REG_BINARY ||
3322                     enum_values[i].data_length != 32) {
3323                         continue;
3324                 }
3325
3326                 val.info1.form_name = talloc_strdup(info, enum_values[i].value_name);
3327                 if (val.info1.form_name == NULL) {
3328                         result = WERR_NOMEM;
3329                         goto done;
3330                 }
3331
3332                 val.info1.size.width  = IVAL(enum_values[i].data->data,  0);
3333                 val.info1.size.height = IVAL(enum_values[i].data->data,  4);
3334                 val.info1.area.left   = IVAL(enum_values[i].data->data,  8);
3335                 val.info1.area.top    = IVAL(enum_values[i].data->data, 12);
3336                 val.info1.area.right  = IVAL(enum_values[i].data->data, 16);
3337                 val.info1.area.bottom = IVAL(enum_values[i].data->data, 20);
3338                 /* skip form index      IVAL(enum_values[i].data->data, 24)));*/
3339                 val.info1.flags       = IVAL(enum_values[i].data->data, 28);
3340
3341                 info[i + num_builtin] = val;
3342         }
3343
3344         *pnum_info = num_builtin + num_values;
3345         if (pinfo) {
3346                 *pinfo = talloc_move(mem_ctx, &info);
3347         }
3348
3349 done:
3350         if (winreg_pipe != NULL) {
3351                 if (is_valid_policy_hnd(&key_hnd)) {
3352                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3353                 }
3354                 if (is_valid_policy_hnd(&hive_hnd)) {
3355                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3356                 }
3357         }
3358
3359         TALLOC_FREE(enum_values);
3360         TALLOC_FREE(tmp_ctx);
3361         return result;
3362 }
3363
3364 WERROR winreg_printer_deleteform1(TALLOC_CTX *mem_ctx,
3365                                   struct auth_serversupplied_info *server_info,
3366                                   const char *form_name)
3367 {
3368         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3369         struct rpc_pipe_client *winreg_pipe = NULL;
3370         struct policy_handle hive_hnd, key_hnd;
3371         struct winreg_String wvalue;
3372         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3373         uint32_t i;
3374         WERROR result = WERR_OK;
3375         NTSTATUS status;
3376         TALLOC_CTX *tmp_ctx;
3377
3378         for (i = 0; i < num_builtin; i++) {
3379                 if (strequal(builtin_forms1[i].form_name, form_name)) {
3380                         return WERR_INVALID_PARAMETER;
3381                 }
3382         }
3383
3384         tmp_ctx = talloc_new(mem_ctx);
3385         if (tmp_ctx == NULL) {
3386                 return WERR_NOMEM;
3387         }
3388
3389         ZERO_STRUCT(hive_hnd);
3390         ZERO_STRUCT(key_hnd);
3391
3392         result = winreg_printer_openkey(tmp_ctx,
3393                                         server_info,
3394                                         &winreg_pipe,
3395                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3396                                         "",
3397                                         false,
3398                                         access_mask,
3399                                         &hive_hnd,
3400                                         &key_hnd);
3401         if (!W_ERROR_IS_OK(result)) {
3402                 DEBUG(0, ("winreg_printer_deleteform1: Could not open key %s: %s\n",
3403                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3404                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
3405                         result = WERR_INVALID_FORM_NAME;
3406                 }
3407                 goto done;
3408         }
3409
3410         wvalue.name = form_name;
3411         status = rpccli_winreg_DeleteValue(winreg_pipe,
3412                                            tmp_ctx,
3413                                            &key_hnd,
3414                                            wvalue,
3415                                            &result);
3416         if (!NT_STATUS_IS_OK(status)) {
3417                 /* If the value doesn't exist, return WERR_INVALID_FORM_NAME */
3418                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
3419                         result = WERR_INVALID_FORM_NAME;
3420                         goto done;
3421                 }
3422                 DEBUG(0, ("winreg_printer_delteform1: Could not delete value %s: %s\n",
3423                           wvalue.name, nt_errstr(status)));
3424                 if (!W_ERROR_IS_OK(result)) {
3425                         goto done;
3426                 }
3427                 result = ntstatus_to_werror(status);
3428                 goto done;
3429         }
3430
3431         result = WERR_OK;
3432 done:
3433         if (winreg_pipe != NULL) {
3434                 if (is_valid_policy_hnd(&key_hnd)) {
3435                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3436                 }
3437                 if (is_valid_policy_hnd(&hive_hnd)) {
3438                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3439                 }
3440         }
3441
3442         TALLOC_FREE(tmp_ctx);
3443         return result;
3444 }
3445
3446 WERROR winreg_printer_setform1(TALLOC_CTX *mem_ctx,
3447                                struct auth_serversupplied_info *server_info,
3448                                const char *form_name,
3449                                struct spoolss_AddFormInfo1 *form)
3450 {
3451         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3452         struct rpc_pipe_client *winreg_pipe = NULL;
3453         struct policy_handle hive_hnd, key_hnd;
3454         struct winreg_String wvalue;
3455         DATA_BLOB blob;
3456         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3457         uint32_t i;
3458         WERROR result;
3459         NTSTATUS status;
3460         TALLOC_CTX *tmp_ctx = NULL;
3461
3462         for (i = 0; i < num_builtin; i++) {
3463                 if (strequal(builtin_forms1[i].form_name, form->form_name)) {
3464                         result = WERR_INVALID_PARAM;
3465                         goto done;
3466                 }
3467         }
3468
3469         tmp_ctx = talloc_new(mem_ctx);
3470         if (tmp_ctx == NULL) {
3471                 return WERR_NOMEM;
3472         }
3473
3474         ZERO_STRUCT(hive_hnd);
3475         ZERO_STRUCT(key_hnd);
3476
3477         result = winreg_printer_openkey(tmp_ctx,
3478                                         server_info,
3479                                         &winreg_pipe,
3480                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3481                                         "",
3482                                         true,
3483                                         access_mask,
3484                                         &hive_hnd,
3485                                         &key_hnd);
3486         if (!W_ERROR_IS_OK(result)) {
3487                 DEBUG(0, ("winreg_printer_setform1: Could not open key %s: %s\n",
3488                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3489                 goto done;
3490         }
3491
3492         /* If form_name != form->form_name then we renamed the form */
3493         if (strequal(form_name, form->form_name)) {
3494                 result = winreg_printer_deleteform1(tmp_ctx, server_info, form_name);
3495                 if (!W_ERROR_IS_OK(result)) {
3496                         DEBUG(0, ("winreg_printer_setform1: Could not open key %s: %s\n",
3497                                   TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3498                         goto done;
3499                 }
3500         }
3501
3502         wvalue.name = form->form_name;
3503
3504         blob = data_blob_talloc(tmp_ctx, NULL, 32);
3505         SIVAL(blob.data,  0, form->size.width);
3506         SIVAL(blob.data,  4, form->size.height);
3507         SIVAL(blob.data,  8, form->area.left);
3508         SIVAL(blob.data, 12, form->area.top);
3509         SIVAL(blob.data, 16, form->area.right);
3510         SIVAL(blob.data, 20, form->area.bottom);
3511         SIVAL(blob.data, 24, 42);
3512         SIVAL(blob.data, 28, form->flags);
3513
3514         status = rpccli_winreg_SetValue(winreg_pipe,
3515                                         tmp_ctx,
3516                                         &key_hnd,
3517                                         wvalue,
3518                                         REG_BINARY,
3519                                         blob.data,
3520                                         blob.length,
3521                                         &result);
3522         if (!NT_STATUS_IS_OK(status)) {
3523                 DEBUG(0, ("winreg_printer_setform1: Could not set value %s: %s\n",
3524                           wvalue.name, nt_errstr(status)));
3525                 if (!W_ERROR_IS_OK(result)) {
3526                         goto done;
3527                 }
3528                 result = ntstatus_to_werror(status);
3529                 goto done;
3530         }
3531
3532         result = WERR_OK;
3533 done:
3534         if (winreg_pipe != NULL) {
3535                 if (is_valid_policy_hnd(&key_hnd)) {
3536                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3537                 }
3538                 if (is_valid_policy_hnd(&hive_hnd)) {
3539                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3540                 }
3541         }
3542
3543         TALLOC_FREE(tmp_ctx);
3544         return result;
3545 }
3546
3547 WERROR winreg_printer_getform1(TALLOC_CTX *mem_ctx,
3548                                struct auth_serversupplied_info *server_info,
3549                                const char *form_name,
3550                                struct spoolss_FormInfo1 *r)
3551 {
3552         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3553         struct rpc_pipe_client *winreg_pipe = NULL;
3554         struct policy_handle hive_hnd, key_hnd;
3555         struct winreg_String wvalue;
3556         enum winreg_Type type_in;
3557         uint8_t *data_in;
3558         uint32_t data_in_size = 0;
3559         uint32_t value_len = 0;
3560         uint32_t num_builtin = ARRAY_SIZE(builtin_forms1);
3561         uint32_t i;
3562         WERROR result;
3563         NTSTATUS status;
3564         TALLOC_CTX *tmp_ctx;
3565
3566         /* check builtin forms first */
3567         for (i = 0; i < num_builtin; i++) {
3568                 if (strequal(builtin_forms1[i].form_name, form_name)) {
3569                         *r = builtin_forms1[i];
3570                         return WERR_OK;
3571                 }
3572         }
3573
3574         tmp_ctx = talloc_new(mem_ctx);
3575         if (tmp_ctx == NULL) {
3576                 return WERR_NOMEM;
3577         }
3578
3579         ZERO_STRUCT(hive_hnd);
3580         ZERO_STRUCT(key_hnd);
3581
3582         result = winreg_printer_openkey(tmp_ctx,
3583                                         server_info,
3584                                         &winreg_pipe,
3585                                         TOP_LEVEL_CONTROL_FORMS_KEY,
3586                                         "",
3587                                         true,
3588                                         access_mask,
3589                                         &hive_hnd,
3590                                         &key_hnd);
3591         if (!W_ERROR_IS_OK(result)) {
3592                 DEBUG(0, ("winreg_printer_getform1: Could not open key %s: %s\n",
3593                           TOP_LEVEL_CONTROL_FORMS_KEY, win_errstr(result)));
3594                 goto done;
3595         }
3596
3597         wvalue.name = form_name;
3598
3599         /*
3600          * call QueryValue once with data == NULL to get the
3601          * needed memory size to be allocated, then allocate
3602          * data buffer and call again.
3603          */
3604         status = rpccli_winreg_QueryValue(winreg_pipe,
3605                                           tmp_ctx,
3606                                           &key_hnd,
3607                                           &wvalue,
3608                                           &type_in,
3609                                           NULL,
3610                                           &data_in_size,
3611                                           &value_len,
3612                                           &result);
3613         if (!NT_STATUS_IS_OK(status)) {
3614                 DEBUG(0, ("winreg_printer_getform1: Could not query value %s: %s\n",
3615                           wvalue.name, nt_errstr(status)));
3616                 if (!W_ERROR_IS_OK(result)) {
3617                         goto done;
3618                 }
3619                 result = ntstatus_to_werror(status);
3620                 goto done;
3621         }
3622
3623         data_in = (uint8_t *) TALLOC(tmp_ctx, data_in_size);
3624         if (data_in == NULL) {
3625                 result = WERR_NOMEM;
3626                 goto done;
3627         }
3628         value_len = 0;
3629
3630         status = rpccli_winreg_QueryValue(winreg_pipe,
3631                                           tmp_ctx,
3632                                           &key_hnd,
3633                                           &wvalue,
3634                                           &type_in,
3635                                           data_in,
3636                                           &data_in_size,
3637                                           &value_len,
3638                                           &result);
3639         if (!NT_STATUS_IS_OK(status)) {
3640                 DEBUG(0, ("winreg_printer_getform1: Could not query value %s: %s\n",
3641                           wvalue.name, nt_errstr(status)));
3642                 if (!W_ERROR_IS_OK(result)) {
3643                         goto done;
3644                 }
3645                 result = ntstatus_to_werror(status);
3646                 goto done;
3647         }
3648
3649         r->form_name = talloc_strdup(mem_ctx, form_name);
3650         if (r->form_name == NULL) {
3651                 result = WERR_NOMEM;
3652                 goto done;
3653         }
3654
3655         r->size.width  = IVAL(data_in,  0);
3656         r->size.height = IVAL(data_in,  4);
3657         r->area.left   = IVAL(data_in,  8);
3658         r->area.top    = IVAL(data_in, 12);
3659         r->area.right  = IVAL(data_in, 16);
3660         r->area.bottom = IVAL(data_in, 20);
3661         /* skip index    IVAL(data_in, 24)));*/
3662         r->flags       = IVAL(data_in, 28);
3663
3664         result = WERR_OK;
3665 done:
3666         if (winreg_pipe != NULL) {
3667                 if (is_valid_policy_hnd(&key_hnd)) {
3668                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3669                 }
3670                 if (is_valid_policy_hnd(&hive_hnd)) {
3671                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3672                 }
3673         }
3674
3675         TALLOC_FREE(tmp_ctx);
3676         return result;
3677 }
3678
3679 WERROR winreg_add_driver(TALLOC_CTX *mem_ctx,
3680                          struct auth_serversupplied_info *server_info,
3681                          struct spoolss_AddDriverInfoCtr *r,
3682                          const char **driver_name,
3683                          uint32_t *driver_version)
3684 {
3685         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3686         struct rpc_pipe_client *winreg_pipe = NULL;
3687         struct policy_handle hive_hnd, key_hnd;
3688         struct spoolss_DriverInfo8 info8;
3689         TALLOC_CTX *tmp_ctx = NULL;
3690         WERROR result;
3691
3692         ZERO_STRUCT(hive_hnd);
3693         ZERO_STRUCT(key_hnd);
3694         ZERO_STRUCT(info8);
3695
3696         if (!driver_info_ctr_to_info8(r, &info8)) {
3697                 result = WERR_INVALID_PARAMETER;
3698                 goto done;
3699         }
3700
3701         tmp_ctx = talloc_new(mem_ctx);
3702         if (tmp_ctx == NULL) {
3703                 return WERR_NOMEM;
3704         }
3705
3706         result = winreg_printer_opendriver(tmp_ctx,
3707                                            server_info,
3708                                            info8.driver_name,
3709                                            info8.architecture,
3710                                            info8.version,
3711                                            access_mask, true,
3712                                            &winreg_pipe,
3713                                            &hive_hnd,
3714                                            &key_hnd);
3715         if (!W_ERROR_IS_OK(result)) {
3716                 DEBUG(0, ("winreg_add_driver: "
3717                           "Could not open driver key (%s,%s,%d): %s\n",
3718                           info8.driver_name, info8.architecture,
3719                           info8.version, win_errstr(result)));
3720                 goto done;
3721         }
3722
3723         /* TODO: "Attributes" ? */
3724
3725         result = winreg_printer_write_dword(tmp_ctx, winreg_pipe,
3726                                             &key_hnd, "Version",
3727                                             info8.version);
3728         if (!W_ERROR_IS_OK(result)) {
3729                 goto done;
3730         }
3731
3732         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3733                                          &key_hnd, "Driver",
3734                                          info8.driver_path);
3735         if (!W_ERROR_IS_OK(result)) {
3736                 goto done;
3737         }
3738
3739         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3740                                          &key_hnd, "Data File",
3741                                          info8.data_file);
3742         if (!W_ERROR_IS_OK(result)) {
3743                 goto done;
3744         }
3745
3746         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3747                                          &key_hnd, "Configuration File",
3748                                          info8.config_file);
3749         if (!W_ERROR_IS_OK(result)) {
3750                 goto done;
3751         }
3752
3753         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3754                                          &key_hnd, "Help File",
3755                                          info8.help_file);
3756         if (!W_ERROR_IS_OK(result)) {
3757                 goto done;
3758         }
3759
3760         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3761                                                &key_hnd, "Dependent Files",
3762                                                info8.dependent_files);
3763         if (!W_ERROR_IS_OK(result)) {
3764                 goto done;
3765         }
3766
3767         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3768                                          &key_hnd, "Monitor",
3769                                          info8.monitor_name);
3770         if (!W_ERROR_IS_OK(result)) {
3771                 goto done;
3772         }
3773
3774         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3775                                          &key_hnd, "Datatype",
3776                                          info8.default_datatype);
3777         if (!W_ERROR_IS_OK(result)) {
3778                 goto done;
3779         }
3780
3781         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3782                                                &key_hnd, "Previous Names",
3783                                                info8.previous_names);
3784         if (!W_ERROR_IS_OK(result)) {
3785                 goto done;
3786         }
3787
3788         result = winreg_printer_write_date(tmp_ctx, winreg_pipe,
3789                                            &key_hnd, "DriverDate",
3790                                            info8.driver_date);
3791         if (!W_ERROR_IS_OK(result)) {
3792                 goto done;
3793         }
3794
3795         result = winreg_printer_write_ver(tmp_ctx, winreg_pipe,
3796                                           &key_hnd, "DriverVersion",
3797                                           info8.driver_version);
3798         if (!W_ERROR_IS_OK(result)) {
3799                 goto done;
3800         }
3801
3802         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3803                                          &key_hnd, "Manufacturer",
3804                                          info8.manufacturer_name);
3805         if (!W_ERROR_IS_OK(result)) {
3806                 goto done;
3807         }
3808
3809         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3810                                          &key_hnd, "OEM URL",
3811                                          info8.manufacturer_url);
3812         if (!W_ERROR_IS_OK(result)) {
3813                 goto done;
3814         }
3815
3816         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3817                                          &key_hnd, "HardwareID",
3818                                          info8.hardware_id);
3819         if (!W_ERROR_IS_OK(result)) {
3820                 goto done;
3821         }
3822
3823         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3824                                          &key_hnd, "Provider",
3825                                          info8.provider);
3826         if (!W_ERROR_IS_OK(result)) {
3827                 goto done;
3828         }
3829
3830         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3831                                          &key_hnd, "Print Processor",
3832                                          info8.print_processor);
3833         if (!W_ERROR_IS_OK(result)) {
3834                 goto done;
3835         }
3836
3837         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3838                                          &key_hnd, "VendorSetup",
3839                                          info8.vendor_setup);
3840         if (!W_ERROR_IS_OK(result)) {
3841                 goto done;
3842         }
3843
3844         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3845                                                &key_hnd, "Color Profiles",
3846                                                info8.color_profiles);
3847         if (!W_ERROR_IS_OK(result)) {
3848                 goto done;
3849         }
3850
3851         result = winreg_printer_write_sz(tmp_ctx, winreg_pipe,
3852                                          &key_hnd, "InfPath",
3853                                          info8.inf_path);
3854         if (!W_ERROR_IS_OK(result)) {
3855                 goto done;
3856         }
3857
3858         result = winreg_printer_write_dword(tmp_ctx, winreg_pipe, &key_hnd,
3859                                             "PrinterDriverAttributes",
3860                                             info8.printer_driver_attributes);
3861         if (!W_ERROR_IS_OK(result)) {
3862                 goto done;
3863         }
3864
3865         result = winreg_printer_write_multi_sz(tmp_ctx, winreg_pipe,
3866                                                &key_hnd, "CoreDependencies",
3867                                                info8.core_driver_dependencies);
3868         if (!W_ERROR_IS_OK(result)) {
3869                 goto done;
3870         }
3871
3872         result = winreg_printer_write_date(tmp_ctx, winreg_pipe,
3873                                            &key_hnd, "MinInboxDriverVerDate",
3874                                            info8.min_inbox_driver_ver_date);
3875         if (!W_ERROR_IS_OK(result)) {
3876                 goto done;
3877         }
3878
3879         result = winreg_printer_write_ver(tmp_ctx, winreg_pipe, &key_hnd,
3880                                           "MinInboxDriverVerVersion",
3881                                           info8.min_inbox_driver_ver_version);
3882         if (!W_ERROR_IS_OK(result)) {
3883                 goto done;
3884         }
3885
3886         *driver_name = info8.driver_name;
3887         *driver_version = info8.version;
3888         result = WERR_OK;
3889 done:
3890         if (winreg_pipe != NULL) {
3891                 if (is_valid_policy_hnd(&key_hnd)) {
3892                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
3893                 }
3894                 if (is_valid_policy_hnd(&hive_hnd)) {
3895                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
3896                 }
3897         }
3898
3899         TALLOC_FREE(tmp_ctx);
3900         return result;
3901 }
3902
3903 WERROR winreg_get_driver(TALLOC_CTX *mem_ctx,
3904                          struct auth_serversupplied_info *server_info,
3905                          const char *architecture,
3906                          const char *driver_name,
3907                          uint32_t driver_version,
3908                          struct spoolss_DriverInfo8 **_info8)
3909 {
3910         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
3911         struct rpc_pipe_client *winreg_pipe = NULL;
3912         struct policy_handle hive_hnd, key_hnd;
3913         struct spoolss_DriverInfo8 i8, *info8;
3914         struct spoolss_PrinterEnumValues *enum_values = NULL;
3915         struct spoolss_PrinterEnumValues *v;
3916         uint32_t num_values = 0;
3917         TALLOC_CTX *tmp_ctx;
3918         WERROR result;
3919         uint32_t i;
3920
3921         ZERO_STRUCT(hive_hnd);
3922         ZERO_STRUCT(key_hnd);
3923         ZERO_STRUCT(i8);
3924
3925         tmp_ctx = talloc_new(mem_ctx);
3926         if (tmp_ctx == NULL) {
3927                 return WERR_NOMEM;
3928         }
3929
3930         if (driver_version == DRIVER_ANY_VERSION) {
3931                 /* look for Win2k first and then for NT4 */
3932                 result = winreg_printer_opendriver(tmp_ctx,
3933                                                    server_info,
3934                                                    driver_name,
3935                                                    architecture,
3936                                                    3,
3937                                                    access_mask, false,
3938                                                    &winreg_pipe,
3939                                                    &hive_hnd,
3940                                                    &key_hnd);
3941                 if (!W_ERROR_IS_OK(result)) {
3942                         result = winreg_printer_opendriver(tmp_ctx,
3943                                                            server_info,
3944                                                            driver_name,
3945                                                            architecture,
3946                                                            2,
3947                                                            access_mask, false,
3948                                                            &winreg_pipe,
3949                                                            &hive_hnd,
3950                                                            &key_hnd);
3951                 }
3952         } else {
3953                 /* ok normal case */
3954                 result = winreg_printer_opendriver(tmp_ctx,
3955                                                    server_info,
3956                                                    driver_name,
3957                                                    architecture,
3958                                                    driver_version,
3959                                                    access_mask, false,
3960                                                    &winreg_pipe,
3961                                                    &hive_hnd,
3962                                                    &key_hnd);
3963         }
3964         if (!W_ERROR_IS_OK(result)) {
3965                 DEBUG(5, ("winreg_get_driver: "
3966                           "Could not open driver key (%s,%s,%d): %s\n",
3967                           driver_name, architecture,
3968                           driver_version, win_errstr(result)));
3969                 goto done;
3970         }
3971
3972         result = winreg_printer_enumvalues(tmp_ctx,
3973                                            winreg_pipe,
3974                                            &key_hnd,
3975                                            &num_values,
3976                                            &enum_values);
3977         if (!W_ERROR_IS_OK(result)) {
3978                 DEBUG(0, ("winreg_get_driver: "
3979                           "Could not enumerate values for (%s,%s,%d): %s\n",
3980                           driver_name, architecture,
3981                           driver_version, win_errstr(result)));
3982                 goto done;
3983         }
3984
3985         info8 = talloc_zero(tmp_ctx, struct spoolss_DriverInfo8);
3986         if (info8 == NULL) {
3987                 result = WERR_NOMEM;
3988                 goto done;
3989         }
3990
3991         info8->driver_name = talloc_strdup(info8, driver_name);
3992         if (info8->driver_name == NULL) {
3993                 result = WERR_NOMEM;
3994                 goto done;
3995         }
3996
3997         info8->architecture = talloc_strdup(info8, architecture);
3998         if (info8->architecture == NULL) {
3999                 result = WERR_NOMEM;
4000                 goto done;
4001         }
4002
4003         info8->config_file = EMPTY_STRING;
4004         info8->data_file = EMPTY_STRING;
4005         info8->default_datatype = EMPTY_STRING;
4006         info8->driver_path = EMPTY_STRING;
4007         info8->hardware_id = EMPTY_STRING;
4008         info8->help_file = EMPTY_STRING;
4009         info8->inf_path = EMPTY_STRING;
4010         info8->manufacturer_name = EMPTY_STRING;
4011         info8->manufacturer_url = EMPTY_STRING;
4012         info8->monitor_name = EMPTY_STRING;
4013         info8->print_processor = EMPTY_STRING;
4014         info8->provider = EMPTY_STRING;
4015         info8->vendor_setup = EMPTY_STRING;
4016
4017         info8->color_profiles = empty_string_array;
4018         info8->core_driver_dependencies = EMPTY_STRING_ARRAY;
4019         info8->dependent_files = EMPTY_STRING_ARRAY;
4020         info8->previous_names = EMPTY_STRING_ARRAY;
4021
4022         result = WERR_OK;
4023
4024         for (i = 0; i < num_values; i++) {
4025                 const char *tmp_str;
4026
4027                 v = &enum_values[i];
4028
4029                 result = winreg_enumval_to_dword(info8, v,
4030                                                  "Version",
4031                                                  &info8->version);
4032                 CHECK_ERROR(result);
4033
4034                 result = winreg_enumval_to_sz(info8, v,
4035                                               "Driver",
4036                                               &info8->driver_path);
4037                 CHECK_ERROR(result);
4038
4039                 result = winreg_enumval_to_sz(info8, v,
4040                                               "Data File",
4041                                               &info8->data_file);
4042                 CHECK_ERROR(result);
4043
4044                 result = winreg_enumval_to_sz(info8, v,
4045                                               "Configuration File",
4046                                               &info8->config_file);
4047                 CHECK_ERROR(result);
4048
4049                 result = winreg_enumval_to_sz(info8, v,
4050                                               "Help File",
4051                                               &info8->help_file);
4052                 CHECK_ERROR(result);
4053
4054                 result = winreg_enumval_to_multi_sz(info8, v,
4055                                                     "Dependent Files",
4056                                                     &info8->dependent_files);
4057                 CHECK_ERROR(result);
4058
4059                 result = winreg_enumval_to_sz(info8, v,
4060                                               "Monitor",
4061                                               &info8->monitor_name);
4062                 CHECK_ERROR(result);
4063
4064                 result = winreg_enumval_to_sz(info8, v,
4065                                               "Datatype",
4066                                               &info8->default_datatype);
4067                 CHECK_ERROR(result);
4068
4069                 result = winreg_enumval_to_multi_sz(info8, v,
4070                                                     "Previous Names",
4071                                                     &info8->previous_names);
4072                 CHECK_ERROR(result);
4073
4074                 result = winreg_enumval_to_sz(info8, v,
4075                                               "DriverDate",
4076                                               &tmp_str);
4077                 if (W_ERROR_IS_OK(result)) {
4078                         result = winreg_printer_date_to_NTTIME(tmp_str,
4079                                                 &info8->driver_date);
4080                 }
4081                 CHECK_ERROR(result);
4082
4083                 result = winreg_enumval_to_sz(info8, v,
4084                                               "DriverVersion",
4085                                               &tmp_str);
4086                 if (W_ERROR_IS_OK(result)) {
4087                         result = winreg_printer_ver_to_dword(tmp_str,
4088                                                 &info8->driver_version);
4089                 }
4090                 CHECK_ERROR(result);
4091
4092                 result = winreg_enumval_to_sz(info8, v,
4093                                               "Manufacturer",
4094                                               &info8->manufacturer_name);
4095                 CHECK_ERROR(result);
4096
4097                 result = winreg_enumval_to_sz(info8, v,
4098                                               "OEM URL",
4099                                               &info8->manufacturer_url);
4100                 CHECK_ERROR(result);
4101
4102                 result = winreg_enumval_to_sz(info8, v,
4103                                               "HardwareID",
4104                                               &info8->hardware_id);
4105                 CHECK_ERROR(result);
4106
4107                 result = winreg_enumval_to_sz(info8, v,
4108                                               "Provider",
4109                                               &info8->provider);
4110                 CHECK_ERROR(result);
4111
4112                 result = winreg_enumval_to_sz(info8, v,
4113                                               "Print Processor",
4114                                               &info8->print_processor);
4115                 CHECK_ERROR(result);
4116
4117                 result = winreg_enumval_to_sz(info8, v,
4118                                               "VendorSetup",
4119                                               &info8->vendor_setup);
4120                 CHECK_ERROR(result);
4121
4122                 result = winreg_enumval_to_multi_sz(info8, v,
4123                                                     "Color Profiles",
4124                                                     &info8->color_profiles);
4125                 CHECK_ERROR(result);
4126
4127                 result = winreg_enumval_to_sz(info8, v,
4128                                               "InfPath",
4129                                               &info8->inf_path);
4130                 CHECK_ERROR(result);
4131
4132                 result = winreg_enumval_to_dword(info8, v,
4133                                                  "PrinterDriverAttributes",
4134                                                  &info8->printer_driver_attributes);
4135                 CHECK_ERROR(result);
4136
4137                 result = winreg_enumval_to_multi_sz(info8, v,
4138                                                     "CoreDependencies",
4139                                                     &info8->core_driver_dependencies);
4140                 CHECK_ERROR(result);
4141
4142                 result = winreg_enumval_to_sz(info8, v,
4143                                               "MinInboxDriverVerDate",
4144                                               &tmp_str);
4145                 if (W_ERROR_IS_OK(result)) {
4146                         result = winreg_printer_date_to_NTTIME(tmp_str,
4147                                         &info8->min_inbox_driver_ver_date);
4148                 }
4149                 CHECK_ERROR(result);
4150
4151                 result = winreg_enumval_to_sz(info8, v,
4152                                               "MinInboxDriverVerVersion",
4153                                               &tmp_str);
4154                 if (W_ERROR_IS_OK(result)) {
4155                         result = winreg_printer_ver_to_dword(tmp_str,
4156                                         &info8->min_inbox_driver_ver_version);
4157                 }
4158                 CHECK_ERROR(result);
4159         }
4160
4161         if (!W_ERROR_IS_OK(result)) {
4162                 DEBUG(0, ("winreg_enumval_to_TYPE() failed "
4163                           "for %s: %s\n", v->value_name,
4164                           win_errstr(result)));
4165                 goto done;
4166         }
4167
4168         *_info8 = talloc_steal(mem_ctx, info8);
4169         result = WERR_OK;
4170 done:
4171         if (winreg_pipe != NULL) {
4172                 if (is_valid_policy_hnd(&key_hnd)) {
4173                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4174                 }
4175                 if (is_valid_policy_hnd(&hive_hnd)) {
4176                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
4177                 }
4178         }
4179
4180         TALLOC_FREE(tmp_ctx);
4181         return result;
4182 }
4183
4184 WERROR winreg_del_driver(TALLOC_CTX *mem_ctx,
4185                          struct auth_serversupplied_info *server_info,
4186                          struct spoolss_DriverInfo8 *info8,
4187                          uint32_t version)
4188 {
4189         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
4190         struct rpc_pipe_client *winreg_pipe = NULL;
4191         struct policy_handle hive_hnd, key_hnd;
4192         TALLOC_CTX *tmp_ctx;
4193         char *key_name;
4194         WERROR result;
4195
4196         ZERO_STRUCT(hive_hnd);
4197         ZERO_STRUCT(key_hnd);
4198
4199         tmp_ctx = talloc_new(mem_ctx);
4200         if (tmp_ctx == NULL) {
4201                 return WERR_NOMEM;
4202         }
4203
4204         /* test that the key exists */
4205         result = winreg_printer_opendriver(tmp_ctx,
4206                                            server_info,
4207                                            info8->driver_name,
4208                                            info8->architecture,
4209                                            version,
4210                                            access_mask, false,
4211                                            &winreg_pipe,
4212                                            &hive_hnd,
4213                                            &key_hnd);
4214         if (!W_ERROR_IS_OK(result)) {
4215                 /* key doesn't exist */
4216                 if (W_ERROR_EQUAL(result, WERR_BADFILE)) {
4217                         result = WERR_OK;
4218                         goto done;
4219                 }
4220
4221                 DEBUG(5, ("winreg_del_driver: "
4222                           "Could not open driver (%s,%s,%u): %s\n",
4223                           info8->driver_name, info8->architecture,
4224                           version, win_errstr(result)));
4225                 goto done;
4226         }
4227
4228
4229         if (is_valid_policy_hnd(&key_hnd)) {
4230                 rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4231         }
4232
4233         key_name = talloc_asprintf(tmp_ctx,
4234                                    "%s\\Environments\\%s\\Drivers\\Version-%u",
4235                                    TOP_LEVEL_CONTROL_KEY,
4236                                    info8->architecture, version);
4237         if (key_name == NULL) {
4238                 result = WERR_NOMEM;
4239                 goto done;
4240         }
4241
4242         result = winreg_printer_delete_subkeys(tmp_ctx,
4243                                                winreg_pipe,
4244                                                &hive_hnd,
4245                                                access_mask,
4246                                                key_name);
4247         if (!W_ERROR_IS_OK(result)) {
4248                 DEBUG(0, ("winreg_del_driver: "
4249                           "Could not open driver (%s,%s,%u): %s\n",
4250                           info8->driver_name, info8->architecture,
4251                           version, win_errstr(result)));
4252                 goto done;
4253         }
4254
4255         result = WERR_OK;
4256 done:
4257         if (winreg_pipe != NULL) {
4258                 if (is_valid_policy_hnd(&key_hnd)) {
4259                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4260                 }
4261                 if (is_valid_policy_hnd(&hive_hnd)) {
4262                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
4263                 }
4264         }
4265
4266         TALLOC_FREE(tmp_ctx);
4267         return result;
4268 }
4269
4270 WERROR winreg_get_driver_list(TALLOC_CTX *mem_ctx,
4271                               struct auth_serversupplied_info *server_info,
4272                               const char *architecture,
4273                               uint32_t version,
4274                               uint32_t *num_drivers,
4275                               const char ***drivers_p)
4276 {
4277         uint32_t access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
4278         struct rpc_pipe_client *winreg_pipe = NULL;
4279         struct policy_handle hive_hnd, key_hnd;
4280         const char **drivers;
4281         TALLOC_CTX *tmp_ctx;
4282         WERROR result;
4283
4284         *num_drivers = 0;
4285         *drivers_p = NULL;
4286
4287         ZERO_STRUCT(hive_hnd);
4288         ZERO_STRUCT(key_hnd);
4289
4290         tmp_ctx = talloc_new(mem_ctx);
4291         if (tmp_ctx == NULL) {
4292                 return WERR_NOMEM;
4293         }
4294
4295         /* use NULL for the driver name so we open the key that is
4296          * parent of all drivers for this architecture and version */
4297         result = winreg_printer_opendriver(tmp_ctx,
4298                                            server_info,
4299                                            NULL,
4300                                            architecture,
4301                                            version,
4302                                            access_mask, false,
4303                                            &winreg_pipe,
4304                                            &hive_hnd,
4305                                            &key_hnd);
4306         if (!W_ERROR_IS_OK(result)) {
4307                 DEBUG(5, ("winreg_get_driver_list: "
4308                           "Could not open key (%s,%u): %s\n",
4309                           architecture, version, win_errstr(result)));
4310                 result = WERR_OK;
4311                 goto done;
4312         }
4313
4314         result = winreg_printer_enumkeys(tmp_ctx,
4315                                          winreg_pipe,
4316                                          &key_hnd,
4317                                          num_drivers,
4318                                          &drivers);
4319         if (!W_ERROR_IS_OK(result)) {
4320                 DEBUG(0, ("winreg_get_driver_list: "
4321                           "Could not enumerate drivers for (%s,%u): %s\n",
4322                           architecture, version, win_errstr(result)));
4323                 goto done;
4324         }
4325
4326         *drivers_p = talloc_steal(mem_ctx, drivers);
4327
4328         result = WERR_OK;
4329 done:
4330         if (winreg_pipe != NULL) {
4331                 if (is_valid_policy_hnd(&key_hnd)) {
4332                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &key_hnd, NULL);
4333                 }
4334                 if (is_valid_policy_hnd(&hive_hnd)) {
4335                         rpccli_winreg_CloseKey(winreg_pipe, tmp_ctx, &hive_hnd, NULL);
4336                 }
4337         }
4338
4339         TALLOC_FREE(tmp_ctx);
4340         return result;
4341 }
4342