s3fs-client: Burn commandline password of client utils.
[metze/samba/wip.git] / source3 / rpcclient / rpcclient.c
index c2f3e4c917ce93aa0c586e380850e39b06080256..d204d7fae2dea849fad99648f228275527515685 100644 (file)
@@ -31,6 +31,8 @@
 #include "../libcli/security/security.h"
 #include "passdb.h"
 #include "libsmb/libsmb.h"
+#include "auth/gensec/gensec.h"
+#include "../libcli/smb/smbXcli_base.h"
 
 enum pipe_auth_type_spnego {
        PIPE_AUTH_TYPE_SPNEGO_NONE = 0,
@@ -240,7 +242,7 @@ static NTSTATUS cmd_listcommands(struct rpc_pipe_client *cli, TALLOC_CTX *mem_ct
        {
                tmp_set = tmp->cmd_set;
 
-               if (!StrCaseCmp(argv[1], tmp_set->name))
+               if (!strcasecmp_m(argv[1], tmp_set->name))
                {
                        printf("Available commands on the %s pipe:\n\n", tmp_set->name);
 
@@ -618,6 +620,7 @@ extern struct cmd_set ntsvcs_commands[];
 extern struct cmd_set drsuapi_commands[];
 extern struct cmd_set eventlog_commands[];
 extern struct cmd_set winreg_commands[];
+extern struct cmd_set fss_commands[];
 
 static struct cmd_set *rpcclient_command_list[] = {
        rpcclient_commands,
@@ -637,6 +640,7 @@ static struct cmd_set *rpcclient_command_list[] = {
        drsuapi_commands,
        eventlog_commands,
        winreg_commands,
+       fss_commands,
        NULL
 };
 
@@ -681,84 +685,76 @@ static NTSTATUS do_cmd(struct cli_state *cli,
 
        /* Open pipe */
 
-       if ((cmd_entry->interface != NULL) && (cmd_entry->rpc_pipe == NULL)) {
+       if ((cmd_entry->table != NULL) && (cmd_entry->rpc_pipe == NULL)) {
                switch (pipe_default_auth_type) {
                case DCERPC_AUTH_TYPE_NONE:
                        ntresult = cli_rpc_pipe_open_noauth_transport(
                                cli, default_transport,
-                               cmd_entry->interface,
+                               &cmd_entry->table->syntax_id,
                                &cmd_entry->rpc_pipe);
                        break;
                case DCERPC_AUTH_TYPE_SPNEGO:
+               {
+                       /* won't happen, but if it does it will fail in cli_rpc_pipe_open_spnego() eventually */
+                       const char *oid = "INVALID";
                        switch (pipe_default_auth_spnego_type) {
                        case PIPE_AUTH_TYPE_SPNEGO_NTLMSSP:
-                               ntresult = cli_rpc_pipe_open_spnego_ntlmssp(
-                                               cli, cmd_entry->interface,
-                                               default_transport,
-                                               pipe_default_auth_level,
-                                               get_cmdline_auth_info_domain(auth_info),
-                                               get_cmdline_auth_info_username(auth_info),
-                                               get_cmdline_auth_info_password(auth_info),
-                                               &cmd_entry->rpc_pipe);
+                               oid = GENSEC_OID_NTLMSSP;
                                break;
                        case PIPE_AUTH_TYPE_SPNEGO_KRB5:
-                               ntresult = cli_rpc_pipe_open_spnego_krb5(
-                                               cli, cmd_entry->interface,
-                                               default_transport,
-                                               pipe_default_auth_level,
-                                               cli->desthost,
-                                               NULL, NULL,
-                                               &cmd_entry->rpc_pipe);
+                               oid = GENSEC_OID_KERBEROS5;
+                               break;
+                       case PIPE_AUTH_TYPE_SPNEGO_NONE:
                                break;
-                       default:
-                               ntresult = NT_STATUS_INTERNAL_ERROR;
                        }
-                       break;
-               case DCERPC_AUTH_TYPE_NTLMSSP:
-                       ntresult = cli_rpc_pipe_open_ntlmssp(
-                               cli, cmd_entry->interface,
+                       ntresult = cli_rpc_pipe_open_spnego(
+                               cli, cmd_entry->table,
                                default_transport,
+                               oid,
                                pipe_default_auth_level,
+                               smbXcli_conn_remote_name(cli->conn),
                                get_cmdline_auth_info_domain(auth_info),
                                get_cmdline_auth_info_username(auth_info),
                                get_cmdline_auth_info_password(auth_info),
                                &cmd_entry->rpc_pipe);
                        break;
-               case DCERPC_AUTH_TYPE_SCHANNEL:
-                       ntresult = cli_rpc_pipe_open_schannel(
-                               cli, cmd_entry->interface,
+               }
+               case DCERPC_AUTH_TYPE_NTLMSSP:
+               case DCERPC_AUTH_TYPE_KRB5:
+                       ntresult = cli_rpc_pipe_open_generic_auth(
+                               cli, cmd_entry->table,
                                default_transport,
+                               pipe_default_auth_type,
                                pipe_default_auth_level,
+                               smbXcli_conn_remote_name(cli->conn),
                                get_cmdline_auth_info_domain(auth_info),
+                               get_cmdline_auth_info_username(auth_info),
+                               get_cmdline_auth_info_password(auth_info),
                                &cmd_entry->rpc_pipe);
                        break;
-               case DCERPC_AUTH_TYPE_KRB5:
-                       ntresult = cli_rpc_pipe_open_krb5(
-                               cli, cmd_entry->interface,
+               case DCERPC_AUTH_TYPE_SCHANNEL:
+                       ntresult = cli_rpc_pipe_open_schannel(
+                               cli, &cmd_entry->table->syntax_id,
                                default_transport,
                                pipe_default_auth_level,
-                               cli->desthost,
-                               NULL, NULL,
+                               get_cmdline_auth_info_domain(auth_info),
                                &cmd_entry->rpc_pipe);
                        break;
                default:
                        DEBUG(0, ("Could not initialise %s. Invalid "
                                  "auth type %u\n",
-                                 get_pipe_name_from_syntax(
-                                         talloc_tos(),
-                                         cmd_entry->interface),
+                                 cmd_entry->table->name,
                                  pipe_default_auth_type ));
                        return NT_STATUS_UNSUCCESSFUL;
                }
                if (!NT_STATUS_IS_OK(ntresult)) {
                        DEBUG(0, ("Could not initialise %s. Error was %s\n",
-                                 get_pipe_name_from_syntax(
-                                         talloc_tos(), cmd_entry->interface),
+                                 cmd_entry->table->name,
                                  nt_errstr(ntresult) ));
                        return ntresult;
                }
 
-               if (ndr_syntax_id_equal(cmd_entry->interface,
+               if (ndr_syntax_id_equal(&cmd_entry->table->syntax_id,
                                        &ndr_table_netlogon.syntax_id)) {
                        uint32_t neg_flags = NETLOGON_NEG_AUTH2_ADS_FLAGS;
                        enum netr_SchannelType sec_channel_type;
@@ -773,9 +769,9 @@ static NTSTATUS do_cmd(struct cli_state *cli,
                        }
 
                        ntresult = rpccli_netlogon_setup_creds(cmd_entry->rpc_pipe,
-                                               cli->desthost,   /* server name */
+                                               cmd_entry->rpc_pipe->desthost,   /* server name */
                                                get_cmdline_auth_info_domain(auth_info),  /* domain */
-                                               global_myname(), /* client name */
+                                               lp_netbios_name(), /* client name */
                                                machine_account, /* machine account name */
                                                trust_password,
                                                sec_channel_type,
@@ -783,9 +779,7 @@ static NTSTATUS do_cmd(struct cli_state *cli,
 
                        if (!NT_STATUS_IS_OK(ntresult)) {
                                DEBUG(0, ("Could not initialise credentials for %s.\n",
-                                         get_pipe_name_from_syntax(
-                                                 talloc_tos(),
-                                                 cmd_entry->interface)));
+                                         cmd_entry->table->name));
                                return ntresult;
                        }
                }
@@ -892,7 +886,6 @@ out_free:
        struct sockaddr_storage server_ss;
        NTSTATUS                nt_status;
        static int              opt_port = 0;
-       fstring new_workgroup;
        int result = 0;
        TALLOC_CTX *frame = talloc_stackframe();
        uint32_t flags = 0;
@@ -967,29 +960,20 @@ out_free:
        }
 
        poptFreeContext(pc);
-
-       load_interfaces();
+       popt_burn_cmdline_password(argc, argv);
 
        if (!init_names()) {
                result = 1;
                goto done;
        }
 
-       /* save the workgroup...
-
-          FIXME!! do we need to do this for other options as well
-          (or maybe a generic way to keep lp_load() from overwriting
-          everything)?  */
-
-       fstrcpy( new_workgroup, lp_workgroup() );
-
        /* Load smb.conf file */
 
-       if (!lp_load(get_dyn_CONFIGFILE(),True,False,False,True))
+       if (!lp_load_global(get_dyn_CONFIGFILE()))
                fprintf(stderr, "Can't load %s\n", get_dyn_CONFIGFILE());
 
-       if ( strlen(new_workgroup) != 0 )
-               set_global_myworkgroup( new_workgroup );
+       /* We must load interfaces after we load the smb.conf */
+       load_interfaces();
 
        /*
         * Get password
@@ -1091,7 +1075,7 @@ out_free:
        }
 
 
-       nt_status = cli_full_connection(&cli, global_myname(), binding->host,
+       nt_status = cli_full_connection(&cli, lp_netbios_name(), binding->host,
                                        opt_ipaddr ? &server_ss : NULL, opt_port,
                                        "IPC$", "IPC",
                                        get_cmdline_auth_info_username(rpcclient_auth_info),