gpo_fetch.c   [plain text]


/* 
 *  Unix SMB/CIFS implementation.
 *  Group Policy Object Support
 *  Copyright (C) Guenther Deschner 2005-2006
 *  
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *  
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *  
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */

#include "includes.h"

/****************************************************************
 explode the GPO CIFS URI into their components
****************************************************************/

NTSTATUS ads_gpo_explode_filesyspath(ADS_STRUCT *ads, 
				     TALLOC_CTX *mem_ctx, 
				     const char *file_sys_path, 
				     char **server, 
				     char **service, 
				     char **nt_path,
				     char **unix_path)
{
	fstring tok;
	pstring path;

	*server = NULL;
	*service = NULL;
	*nt_path = NULL;
	*unix_path = NULL;

	if (!next_token(&file_sys_path, tok, "\\", sizeof(tok))) {
		return NT_STATUS_INVALID_PARAMETER;
	}

	if ((*server = talloc_strdup(mem_ctx, tok)) == NULL) {
		return NT_STATUS_NO_MEMORY;
	}

	if (!next_token(&file_sys_path, tok, "\\", sizeof(tok))) {
		return NT_STATUS_INVALID_PARAMETER;
	}

	if ((*service = talloc_strdup(mem_ctx, tok)) == NULL) {
		return NT_STATUS_NO_MEMORY;
	}

	if ((*nt_path = talloc_asprintf(mem_ctx, "\\%s", file_sys_path)) == NULL) {
		return NT_STATUS_NO_MEMORY;
	}

	pstrcpy(path, lock_path(GPO_CACHE_DIR));
	pstrcat(path, "/");
	pstrcat(path, file_sys_path);
	pstring_sub(path, "\\", "/");

	if ((*unix_path = talloc_strdup(mem_ctx, path)) == NULL) {
		return NT_STATUS_NO_MEMORY;
	}

	return NT_STATUS_OK;
}

/****************************************************************
 prepare the local disc storage for "unix_path"
****************************************************************/

NTSTATUS ads_gpo_prepare_local_store(ADS_STRUCT *ads, 
				     TALLOC_CTX *mem_ctx, 
				     const char *unix_path)
{
	const char *top_dir = lock_path(GPO_CACHE_DIR);
	char *current_dir;
	fstring tok;

	current_dir = talloc_strdup(mem_ctx, top_dir);
	NT_STATUS_HAVE_NO_MEMORY(current_dir);

	if ((mkdir(top_dir, 0644)) < 0 && errno != EEXIST) {
		return NT_STATUS_ACCESS_DENIED;
	}

	while (next_token(&unix_path, tok, "/", sizeof(tok))) {
	
		if (strequal(tok, GPO_CACHE_DIR)) {
			break;
		}
	}

	while (next_token(&unix_path, tok, "/", sizeof(tok))) {

		current_dir = talloc_asprintf_append(current_dir, "/%s", tok);
		NT_STATUS_HAVE_NO_MEMORY(current_dir);

		if ((mkdir(current_dir, 0644)) < 0 && errno != EEXIST) {
			return NT_STATUS_ACCESS_DENIED;
		}
	}

	return NT_STATUS_OK;
}

/****************************************************************
 download a full GPO via CIFS
****************************************************************/

NTSTATUS ads_fetch_gpo_files(ADS_STRUCT *ads, 
			    TALLOC_CTX *mem_ctx, 
			    struct cli_state *cli, 
			    struct GROUP_POLICY_OBJECT *gpo)
{
	NTSTATUS result;
	char *server, *service, *nt_path, *unix_path, *nt_ini_path, *unix_ini_path;

	result = ads_gpo_explode_filesyspath(ads, mem_ctx, gpo->file_sys_path, 
					     &server, &service, &nt_path, &unix_path);
	if (!NT_STATUS_IS_OK(result)) {
		goto out;
	}

	result = ads_gpo_prepare_local_store(ads, mem_ctx, unix_path);
	if (!NT_STATUS_IS_OK(result)) {
		goto out;
	}

	unix_ini_path = talloc_asprintf(mem_ctx, "%s/%s", unix_path, GPT_INI);
	nt_ini_path = talloc_asprintf(mem_ctx, "%s\\%s", nt_path, GPT_INI);
	if (!unix_path || !nt_ini_path) {
		result = NT_STATUS_NO_MEMORY;
		goto out;
	}

	result = gpo_copy_file(mem_ctx, cli, nt_ini_path, unix_ini_path);
	if (!NT_STATUS_IS_OK(result)) {
		goto out;
	}

	result = gpo_sync_directories(mem_ctx, cli, nt_path, unix_path);
	if (!NT_STATUS_IS_OK(result)) {
		goto out;
	}

	result = NT_STATUS_OK;

 out:
	return result;
}

/****************************************************************
 get the locally stored gpt.ini version number
****************************************************************/

NTSTATUS ads_gpo_get_sysvol_gpt_version(ADS_STRUCT *ads, 
					TALLOC_CTX *mem_ctx, 
					const char *unix_path, 
					uint32 *sysvol_version,
					char **display_name)
{
	NTSTATUS status;
	uint32 version;
	char *local_path = NULL;
	char *name = NULL;

	local_path = talloc_asprintf(mem_ctx, "%s/%s", unix_path, GPT_INI);
	NT_STATUS_HAVE_NO_MEMORY(local_path);

	status = parse_gpt_ini(mem_ctx, local_path, &version, &name);
	if (!NT_STATUS_IS_OK(status)) {
		DEBUG(10,("ads_gpo_get_sysvol_gpt_version: failed to parse ini [%s]: %s\n", 
			unix_path, nt_errstr(status)));
		return status;
	}

	if (sysvol_version) {
		*sysvol_version = version;
	}

	if (name && *display_name) {
		*display_name = talloc_strdup(mem_ctx, name);
		NT_STATUS_HAVE_NO_MEMORY(*display_name);
	}

	return NT_STATUS_OK;
}