1/* 2 Unix SMB/CIFS implementation. 3 RPC pipe client 4 5 Copyright (C) Tim Potter 2000 6 7 This program is free software; you can redistribute it and/or modify 8 it under the terms of the GNU General Public License as published by 9 the Free Software Foundation; either version 2 of the License, or 10 (at your option) any later version. 11 12 This program is distributed in the hope that it will be useful, 13 but WITHOUT ANY WARRANTY; without even the implied warranty of 14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the 15 GNU General Public License for more details. 16 17 You should have received a copy of the GNU General Public License 18 along with this program; if not, write to the Free Software 19 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. 20*/ 21 22#include "includes.h" 23#include "rpcclient.h" 24 25static NTSTATUS cmd_netlogon_logon_ctrl2(struct cli_state *cli, 26 TALLOC_CTX *mem_ctx, int argc, 27 const char **argv) 28{ 29 uint32 query_level = 1; 30 NTSTATUS result = NT_STATUS_UNSUCCESSFUL; 31 32 if (argc > 1) { 33 fprintf(stderr, "Usage: %s\n", argv[0]); 34 return NT_STATUS_OK; 35 } 36 37 result = cli_netlogon_logon_ctrl2(cli, mem_ctx, query_level); 38 39 if (!NT_STATUS_IS_OK(result)) 40 goto done; 41 42 /* Display results */ 43 44 done: 45 return result; 46} 47 48static NTSTATUS cmd_netlogon_getdcname(struct cli_state *cli, 49 TALLOC_CTX *mem_ctx, int argc, 50 const char **argv) 51{ 52 fstring dcname; 53 NTSTATUS result = NT_STATUS_UNSUCCESSFUL; 54 55 if (argc != 2) { 56 fprintf(stderr, "Usage: %s domainname\n", argv[0]); 57 return NT_STATUS_OK; 58 } 59 60 result = cli_netlogon_getdcname(cli, mem_ctx, argv[1], dcname); 61 62 if (!NT_STATUS_IS_OK(result)) 63 goto done; 64 65 /* Display results */ 66 67 printf("%s\n", dcname); 68 69 done: 70 return result; 71} 72 73static NTSTATUS cmd_netlogon_logon_ctrl(struct cli_state *cli, 74 TALLOC_CTX *mem_ctx, int argc, 75 const char **argv) 76{ 77#if 0 78 uint32 query_level = 1; 79#endif 80 NTSTATUS result = NT_STATUS_UNSUCCESSFUL; 81 82 if (argc > 1) { 83 fprintf(stderr, "Usage: %s\n", argv[0]); 84 return NT_STATUS_OK; 85 } 86 87#if 0 88 result = cli_netlogon_logon_ctrl(cli, mem_ctx, query_level); 89 if (!NT_STATUS_IS_OK(result)) { 90 goto done; 91 } 92#endif 93 94 /* Display results */ 95 96 return result; 97} 98 99/* Display sam synchronisation information */ 100 101static void display_sam_sync(uint32 num_deltas, SAM_DELTA_HDR *hdr_deltas, 102 SAM_DELTA_CTR *deltas) 103{ 104 fstring name; 105 uint32 i, j; 106 107 for (i = 0; i < num_deltas; i++) { 108 switch (hdr_deltas[i].type) { 109 case SAM_DELTA_DOMAIN_INFO: 110 unistr2_to_ascii(name, 111 &deltas[i].domain_info.uni_dom_name, 112 sizeof(name) - 1); 113 printf("Domain: %s\n", name); 114 break; 115 case SAM_DELTA_GROUP_INFO: 116 unistr2_to_ascii(name, 117 &deltas[i].group_info.uni_grp_name, 118 sizeof(name) - 1); 119 printf("Group: %s\n", name); 120 break; 121 case SAM_DELTA_ACCOUNT_INFO: 122 unistr2_to_ascii(name, 123 &deltas[i].account_info.uni_acct_name, 124 sizeof(name) - 1); 125 printf("Account: %s\n", name); 126 break; 127 case SAM_DELTA_ALIAS_INFO: 128 unistr2_to_ascii(name, 129 &deltas[i].alias_info.uni_als_name, 130 sizeof(name) - 1); 131 printf("Alias: %s\n", name); 132 break; 133 case SAM_DELTA_ALIAS_MEM: { 134 SAM_ALIAS_MEM_INFO *alias = &deltas[i].als_mem_info; 135 136 for (j = 0; j < alias->num_members; j++) { 137 fstring sid_str; 138 139 sid_to_string(sid_str, &alias->sids[j].sid); 140 141 printf("%s\n", sid_str); 142 } 143 break; 144 } 145 case SAM_DELTA_GROUP_MEM: { 146 SAM_GROUP_MEM_INFO *group = &deltas[i].grp_mem_info; 147 148 for (j = 0; j < group->num_members; j++) 149 printf("rid 0x%x, attrib 0x%08x\n", 150 group->rids[j], group->attribs[j]); 151 break; 152 } 153 case SAM_DELTA_MODIFIED_COUNT: { 154 SAM_DELTA_MOD_COUNT *mc = &deltas[i].mod_count; 155 156 printf("sam sequence update: 0x%04x\n", mc->seqnum); 157 break; 158 } 159 default: 160 printf("unknown delta type 0x%02x\n", 161 hdr_deltas[i].type); 162 break; 163 } 164 } 165} 166 167/* Perform sam synchronisation */ 168 169static NTSTATUS cmd_netlogon_sam_sync(struct cli_state *cli, 170 TALLOC_CTX *mem_ctx, int argc, 171 const char **argv) 172{ 173 NTSTATUS result = NT_STATUS_UNSUCCESSFUL; 174 uint32 database_id = 0, num_deltas; 175 SAM_DELTA_HDR *hdr_deltas; 176 SAM_DELTA_CTR *deltas; 177 DOM_CRED ret_creds; 178 179 if (argc > 2) { 180 fprintf(stderr, "Usage: %s [database_id]\n", argv[0]); 181 return NT_STATUS_OK; 182 } 183 184 if (argc == 2) 185 database_id = atoi(argv[1]); 186 187 /* on first call the returnAuthenticator is empty */ 188 memset(&ret_creds, 0, sizeof(ret_creds)); 189 190 /* Synchronise sam database */ 191 192 result = cli_netlogon_sam_sync(cli, mem_ctx, &ret_creds, database_id, 193 0, &num_deltas, &hdr_deltas, &deltas); 194 195 if (!NT_STATUS_IS_OK(result)) 196 goto done; 197 198 /* Display results */ 199 200 display_sam_sync(num_deltas, hdr_deltas, deltas); 201 202 done: 203 return result; 204} 205 206/* Perform sam delta synchronisation */ 207 208static NTSTATUS cmd_netlogon_sam_deltas(struct cli_state *cli, 209 TALLOC_CTX *mem_ctx, int argc, 210 const char **argv) 211{ 212 NTSTATUS result = NT_STATUS_UNSUCCESSFUL; 213 uint32 database_id, num_deltas, tmp; 214 SAM_DELTA_HDR *hdr_deltas; 215 SAM_DELTA_CTR *deltas; 216 UINT64_S seqnum; 217 218 if (argc != 3) { 219 fprintf(stderr, "Usage: %s database_id seqnum\n", argv[0]); 220 return NT_STATUS_OK; 221 } 222 223 database_id = atoi(argv[1]); 224 tmp = atoi(argv[2]); 225 226 seqnum.low = tmp & 0xffff; 227 seqnum.high = 0; 228 229 result = cli_netlogon_sam_deltas(cli, mem_ctx, database_id, 230 seqnum, &num_deltas, 231 &hdr_deltas, &deltas); 232 233 if (!NT_STATUS_IS_OK(result)) 234 goto done; 235 236 /* Display results */ 237 238 display_sam_sync(num_deltas, hdr_deltas, deltas); 239 240 done: 241 return result; 242} 243 244/* Log on a domain user */ 245 246static NTSTATUS cmd_netlogon_sam_logon(struct cli_state *cli, 247 TALLOC_CTX *mem_ctx, int argc, 248 const char **argv) 249{ 250 NTSTATUS result = NT_STATUS_UNSUCCESSFUL; 251 int logon_type = NET_LOGON_TYPE; 252 const char *username, *password; 253 uint32 neg_flags = 0x000001ff; 254 int auth_level = 2; 255 DOM_CRED ret_creds; 256 257 /* Check arguments */ 258 259 if (argc < 3 || argc > 6) { 260 fprintf(stderr, "Usage: samlogon <username> <password> " 261 "[logon_type] [neg flags] [auth level (2 or 3)]\n" 262 "neg flags being 0x000001ff or 0x6007ffff\n"); 263 return NT_STATUS_OK; 264 } 265 266 username = argv[1]; 267 password = argv[2]; 268 269 if (argc >= 4) 270 sscanf(argv[3], "%i", &logon_type); 271 272 if (argc >= 5) 273 sscanf(argv[4], "%i", &neg_flags); 274 275 if (argc == 6) 276 sscanf(argv[5], "%i", &auth_level); 277 278 /* Perform the sam logon */ 279 280 ZERO_STRUCT(ret_creds); 281 282 result = cli_netlogon_sam_logon(cli, mem_ctx, &ret_creds, username, password, logon_type); 283 284 clnt_deal_with_creds(cli->sess_key, &(cli->clnt_cred), &ret_creds); 285 286 if (!NT_STATUS_IS_OK(result)) 287 goto done; 288 289 done: 290 return result; 291} 292 293/* Change the trust account password */ 294 295static NTSTATUS cmd_netlogon_change_trust_pw(struct cli_state *cli, 296 TALLOC_CTX *mem_ctx, int argc, 297 const char **argv) 298{ 299 NTSTATUS result = NT_STATUS_UNSUCCESSFUL; 300 DOM_CRED ret_creds; 301 302 /* Check arguments */ 303 304 if (argc > 1) { 305 fprintf(stderr, "Usage: change_trust_pw"); 306 return NT_STATUS_OK; 307 } 308 309 /* Perform the sam logon */ 310 311 ZERO_STRUCT(ret_creds); 312 313 result = trust_pw_find_change_and_store_it(cli, mem_ctx, 314 lp_workgroup()); 315 316 clnt_deal_with_creds(cli->sess_key, &(cli->clnt_cred), &ret_creds); 317 318 if (!NT_STATUS_IS_OK(result)) 319 goto done; 320 321 done: 322 return result; 323} 324 325 326/* List of commands exported by this module */ 327 328struct cmd_set netlogon_commands[] = { 329 330 { "NETLOGON" }, 331 332 { "logonctrl2", RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl2, NULL, PI_NETLOGON, "Logon Control 2", "" }, 333 { "getdcname", RPC_RTYPE_NTSTATUS, cmd_netlogon_getdcname, NULL, PI_NETLOGON, "Get trusted DC name", "" }, 334 { "logonctrl", RPC_RTYPE_NTSTATUS, cmd_netlogon_logon_ctrl, NULL, PI_NETLOGON, "Logon Control", "" }, 335 { "samsync", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_sync, NULL, PI_NETLOGON, "Sam Synchronisation", "" }, 336 { "samdeltas", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_deltas, NULL, PI_NETLOGON, "Query Sam Deltas", "" }, 337 { "samlogon", RPC_RTYPE_NTSTATUS, cmd_netlogon_sam_logon, NULL, PI_NETLOGON, "Sam Logon", "" }, 338 { "change_trust_pw", RPC_RTYPE_NTSTATUS, cmd_netlogon_change_trust_pw, NULL, PI_NETLOGON, "Change Trust Account Password", "" }, 339 340 { NULL } 341}; 342