#include "includes.h"
extern struct current_user current_user;
extern userdom_struct current_user_info;
#ifdef CHECK_TYPES
#undef CHECK_TYPES
#endif
#define CHECK_TYPES 0
#define NERR_Success 0
#define NERR_badpass 86
#define NERR_notsupported 50
#define NERR_BASE (2100)
#define NERR_BufTooSmall (NERR_BASE+23)
#define NERR_JobNotFound (NERR_BASE+51)
#define NERR_DestNotFound (NERR_BASE+52)
#define ACCESS_READ 0x01
#define ACCESS_WRITE 0x02
#define ACCESS_CREATE 0x04
#define SHPWLEN 8
static BOOL api_Unsupported(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt, int mprcnt,
char **rdata, char **rparam,
int *rdata_len, int *rparam_len);
static BOOL api_TooSmall(connection_struct *conn, uint16 vuid, char *param, char *data,
int mdrcnt, int mprcnt,
char **rdata, char **rparam,
int *rdata_len, int *rparam_len);
static int CopyExpanded(connection_struct *conn,
int snum, char **dst, char *src, int *n)
{
pstring buf;
int l;
if (!src || !dst || !n || !(*dst)) {
return 0;
}
StrnCpy(buf,src,sizeof(buf)/2);
pstring_sub(buf,"%S",lp_servicename(snum));
standard_sub_advanced(lp_servicename(SNUM(conn)), conn->user,
conn->connectpath, conn->gid,
get_current_username(),
current_user_info.domain,
buf, sizeof(buf));
l = push_ascii(*dst,buf,*n, STR_TERMINATE);
if (l == -1) {
return 0;
}
(*dst) += l;
(*n) -= l;
return l;
}
static int CopyAndAdvance(char **dst, char *src, int *n)
{
int l;
if (!src || !dst || !n || !(*dst)) {
return 0;
}
l = push_ascii(*dst,src,*n, STR_TERMINATE);
if (l == -1) {
return 0;
}
(*dst) += l;
(*n) -= l;
return l;
}
static int StrlenExpanded(connection_struct *conn, int snum, char *s)
{
pstring buf;
if (!s) {
return 0;
}
StrnCpy(buf,s,sizeof(buf)/2);
pstring_sub(buf,"%S",lp_servicename(snum));
standard_sub_advanced(lp_servicename(SNUM(conn)), conn->user,
conn->connectpath, conn->gid,
get_current_username(),
current_user_info.domain,
buf, sizeof(buf));
return strlen(buf) + 1;
}
static char *Expand(connection_struct *conn, int snum, char *s)
{
static pstring buf;
if (!s) {
return NULL;
}
StrnCpy(buf,s,sizeof(buf)/2);
pstring_sub(buf,"%S",lp_servicename(snum));
standard_sub_advanced(lp_servicename(SNUM(conn)), conn->user,
conn->connectpath, conn->gid,
get_current_username(),
current_user_info.domain,
buf, sizeof(buf));
return &buf[0];
}
static BOOL prefix_ok(const char *str, const char *prefix)
{
return(strncmp(str,prefix,strlen(prefix)) == 0);
}
struct pack_desc {
const char *format;
const char *subformat;
char *base;
int buflen;
int subcount;
char *structbuf;
int stringlen;
char *stringbuf;
int neededlen;
int usedlen;
const char *curpos;
int errcode;
};
static int get_counter(const char **p)
{
int i, n;
if (!p || !(*p)) {
return 1;
}
if (!isdigit((int)**p)) {
return 1;
}
for (n = 0;;) {
i = **p;
if (isdigit(i)) {
n = 10 * n + (i - '0');
} else {
return n;
}
(*p)++;
}
}
static int getlen(const char *p)
{
int n = 0;
if (!p) {
return 0;
}
while (*p) {
switch( *p++ ) {
case 'W':
n += 2;
break;
case 'K':
n += 2;
break;
case 'N':
n += 2;
break;
case 'D':
case 'z':
case 'l':
n += 4;
break;
case 'b':
n += 4;
get_counter(&p);
break;
case 'B':
n += get_counter(&p);
break;
}
}
return n;
}
static BOOL init_package(struct pack_desc *p, int count, int subcount)
{
int n = p->buflen;
int i;
if (!p->format || !p->base) {
return False;
}
i = count * getlen(p->format);
if (p->subformat) {
i += subcount * getlen(p->subformat);
}
p->structbuf = p->base;
p->neededlen = 0;
p->usedlen = 0;
p->subcount = 0;
p->curpos = p->format;
if (i > n) {
p->neededlen = i;
i = n = 0;
#if 0
p->errcode = ERRmoredata;
#else
p->errcode = ERRbuftoosmall;
#endif
} else {
p->errcode = NERR_Success;
}
p->buflen = i;
n -= i;
p->stringbuf = p->base + i;
p->stringlen = n;
return (p->errcode == NERR_Success);
}
static int package(struct pack_desc *p, ...)
{
va_list args;
int needed=0, stringneeded;
const char *str=NULL;
int is_string=0, stringused;
int32 temp;
va_start(args,p);
if (!*p->curpos) {
if (!p->subcount) {
p->curpos = p->format;
} else {
p->curpos = p->subformat;
p->subcount--;
}
}
#if CHECK_TYPES
str = va_arg(args,char*);
SMB_ASSERT(strncmp(str,p->curpos,strlen(str)) == 0);
#endif
stringneeded = -1;
if (!p->curpos) {
va_end(args);
return 0;
}
switch( *p->curpos++ ) {
case 'W':
needed = 2;
temp = va_arg(args,int);
if (p->buflen >= needed) {
SSVAL(p->structbuf,0,temp);
}
break;
case 'K':
needed = 2;
temp = va_arg(args,int);
if (p->buflen >= needed) {
SSVAL(p->structbuf,0,temp);
}
break;
case 'N':
needed = 2;
p->subcount = va_arg(args,int);
if (p->buflen >= needed) {
SSVAL(p->structbuf,0,p->subcount);
}
break;
case 'D':
needed = 4;
temp = va_arg(args,int);
if (p->buflen >= needed) {
SIVAL(p->structbuf,0,temp);
}
break;
case 'B':
needed = get_counter(&p->curpos);
{
char *s = va_arg(args,char*);
if (p->buflen >= needed) {
StrnCpy(p->structbuf,s?s:"",needed-1);
}
}
break;
case 'z':
str = va_arg(args,char*);
stringneeded = (str ? strlen(str)+1 : 0);
is_string = 1;
break;
case 'l':
str = va_arg(args,char*);
stringneeded = va_arg(args,int);
is_string = 0;
break;
case 'b':
str = va_arg(args,char*);
stringneeded = get_counter(&p->curpos);
is_string = 0;
break;
}
va_end(args);
if (stringneeded >= 0) {
needed = 4;
if (p->buflen >= needed) {
stringused = stringneeded;
if (stringused > p->stringlen) {
stringused = (is_string ? p->stringlen : 0);
if (p->errcode == NERR_Success) {
p->errcode = ERRmoredata;
}
}
if (!stringused) {
SIVAL(p->structbuf,0,0);
} else {
SIVAL(p->structbuf,0,PTR_DIFF(p->stringbuf,p->base));
memcpy(p->stringbuf,str?str:"",stringused);
if (is_string) {
p->stringbuf[stringused-1] = '\0';
}
p->stringbuf += stringused;
p->stringlen -= stringused;
p->usedlen += stringused;
}
}
p->neededlen += stringneeded;
}
p->neededlen += needed;
if (p->buflen >= needed) {
p->structbuf += needed;
p->buflen -= needed;
p->usedlen += needed;
} else {
if (p->errcode == NERR_Success) {
p->errcode = ERRmoredata;
}
}
return 1;
}
#if CHECK_TYPES
#define PACK(desc,t,v) package(desc,t,v,0,0,0,0)
#define PACKl(desc,t,v,l) package(desc,t,v,l,0,0,0,0)
#else
#define PACK(desc,t,v) package(desc,v)
#define PACKl(desc,t,v,l) package(desc,v,l)
#endif
static void PACKI(struct pack_desc* desc, const char *t,int v)
{
PACK(desc,t,v);
}
static void PACKS(struct pack_desc* desc,const char *t,const char *v)
{
PACK(desc,t,v);
}
static void PackDriverData(struct pack_desc* desc)
{
char drivdata[4+4+32];
SIVAL(drivdata,0,sizeof drivdata);
SIVAL(drivdata,4,1000);
memset(drivdata+8,0,32);
push_ascii(drivdata+8,"NULL",32, STR_TERMINATE);
PACKl(desc,"l",drivdata,sizeof drivdata);
}
static int check_printq_info(struct pack_desc* desc,
unsigned int uLevel, char *id1, char *id2)
{
desc->subformat = NULL;
switch( uLevel ) {
case 0:
desc->format = "B13";
break;
case 1:
desc->format = "B13BWWWzzzzzWW";
break;
case 2:
desc->format = "B13BWWWzzzzzWN";
desc->subformat = "WB21BB16B10zWWzDDz";
break;
case 3:
desc->format = "zWWWWzzzzWWzzl";
break;
case 4:
desc->format = "zWWWWzzzzWNzzl";
desc->subformat = "WWzWWDDzz";
break;
case 5:
desc->format = "z";
break;
case 51:
desc->format = "K";
break;
case 52:
desc->format = "WzzzzzzzzN";
desc->subformat = "z";
break;
default:
DEBUG(0,("check_printq_info: invalid level %d\n",
uLevel ));
return False;
}
if (id1 == NULL || strcmp(desc->format,id1) != 0) {
DEBUG(0,("check_printq_info: invalid format %s\n",
id1 ? id1 : "<NULL>" ));
return False;
}
if (desc->subformat && (id2 == NULL || strcmp(desc->subformat,id2) != 0)) {
DEBUG(0,("check_printq_info: invalid subformat %s\n",
id2 ? id2 : "<NULL>" ));
return False;
}
return True;
}
#define RAP_JOB_STATUS_QUEUED 0
#define RAP_JOB_STATUS_PAUSED 1
#define RAP_JOB_STATUS_SPOOLING 2
#define RAP_JOB_STATUS_PRINTING 3
#define RAP_JOB_STATUS_PRINTED 4
#define RAP_QUEUE_STATUS_PAUSED 1
#define RAP_QUEUE_STATUS_ERROR 2
static int printj_status(int v)
{
switch (v) {
case LPQ_QUEUED:
return RAP_JOB_STATUS_QUEUED;
case LPQ_PAUSED:
return RAP_JOB_STATUS_PAUSED;
case LPQ_SPOOLING:
return RAP_JOB_STATUS_SPOOLING;
case LPQ_PRINTING:
return RAP_JOB_STATUS_PRINTING;
}
return 0;
}
static int printq_status(int v)
{
switch (v) {
case LPQ_QUEUED:
return 0;
case LPQ_PAUSED:
return RAP_QUEUE_STATUS_PAUSED;
}
return RAP_QUEUE_STATUS_ERROR;
}
static void fill_printjob_info(connection_struct *conn, int snum, int uLevel,
struct pack_desc *desc,
print_queue_struct *queue, int n)
{
time_t t = queue->time;
t -= get_time_zone(t);
PACKI(desc,"W",pjobid_to_rap(lp_const_servicename(snum),queue->job));
if (uLevel == 1) {
PACKS(desc,"B21",queue->fs_user);
PACKS(desc,"B","");
PACKS(desc,"B16","");
PACKS(desc,"B10","PM_Q_RAW");
PACKS(desc,"z","");
PACKI(desc,"W",n+1);
PACKI(desc,"W",printj_status(queue->status));
PACKS(desc,"z","");
PACKI(desc,"D",t);
PACKI(desc,"D",queue->size);
PACKS(desc,"z",queue->fs_file);
}
if (uLevel == 2 || uLevel == 3 || uLevel == 4) {
PACKI(desc,"W",queue->priority);
PACKS(desc,"z",queue->fs_user);
PACKI(desc,"W",n+1);
PACKI(desc,"W",printj_status(queue->status));
PACKI(desc,"D",t);
PACKI(desc,"D",queue->size);
PACKS(desc,"z","Samba");
PACKS(desc,"z",queue->fs_file);
if (uLevel == 3) {
PACKS(desc,"z","");
PACKS(desc,"z","PM_Q_RAW");
PACKS(desc,"z","");
PACKS(desc,"z","");
PACKS(desc,"z",SERVICE(snum));
PACKS(desc,"z","lpd");
PACKS(desc,"z","");
PACKS(desc,"z","NULL");
PackDriverData(desc);
PACKS(desc,"z","");
} else if (uLevel == 4) {
PACKS(desc,"z","");
PACKS(desc,"z","");
PACKS(desc,"z","");
PACKI(desc,"D",0);
PACKI(desc,"D",0);
PACKI(desc,"D",0);
PACKI(desc,"D",0);
PACKI(desc,"D",0);
PACKI(desc,"D",0);
PACKI(desc,"D",0);
}
}
}
static BOOL get_driver_name(int snum, pstring drivername)
{
NT_PRINTER_INFO_LEVEL *info = NULL;
BOOL in_tdb = False;
get_a_printer (NULL, &info, 2, lp_servicename(snum));
if (info != NULL) {
pstrcpy( drivername, info->info_2->drivername);
in_tdb = True;
free_a_printer(&info, 2);
}
return in_tdb;
}
static void fill_printq_info_52(connection_struct *conn, int snum,
struct pack_desc* desc, int count )
{
int i;
fstring location;
NT_PRINTER_DRIVER_INFO_LEVEL driver;
NT_PRINTER_INFO_LEVEL *printer = NULL;
ZERO_STRUCT(driver);
if ( !W_ERROR_IS_OK(get_a_printer( NULL, &printer, 2, lp_servicename(snum))) ) {
DEBUG(3,("fill_printq_info_52: Failed to lookup printer [%s]\n",
lp_servicename(snum)));
goto err;
}
if ( !W_ERROR_IS_OK(get_a_printer_driver(&driver, 3, printer->info_2->drivername,
"Windows 4.0", 0)) )
{
DEBUG(3,("fill_printq_info_52: Failed to lookup driver [%s]\n",
printer->info_2->drivername));
goto err;
}
trim_string(driver.info_3->driverpath, "\\print$\\WIN40\\0\\", 0);
trim_string(driver.info_3->datafile, "\\print$\\WIN40\\0\\", 0);
trim_string(driver.info_3->helpfile, "\\print$\\WIN40\\0\\", 0);
PACKI(desc, "W", 0x0400);
PACKS(desc, "z", driver.info_3->name);
PACKS(desc, "z", driver.info_3->driverpath);
PACKS(desc, "z", driver.info_3->datafile);
PACKS(desc, "z", driver.info_3->monitorname);
fstrcpy(location, "\\\\%L\\print$\\WIN40\\0");
standard_sub_basic( "", "", location, sizeof(location)-1 );
PACKS(desc,"z", location);
PACKS(desc,"z", driver.info_3->defaultdatatype);
PACKS(desc,"z", driver.info_3->helpfile);
PACKS(desc,"z", driver.info_3->driverpath);
DEBUG(3,("Printer Driver Name: %s:\n",driver.info_3->name));
DEBUG(3,("Driver: %s:\n",driver.info_3->driverpath));
DEBUG(3,("Data File: %s:\n",driver.info_3->datafile));
DEBUG(3,("Language Monitor: %s:\n",driver.info_3->monitorname));
DEBUG(3,("Driver Location: %s:\n",location));
DEBUG(3,("Data Type: %s:\n",driver.info_3->defaultdatatype));
DEBUG(3,("Help File: %s:\n",driver.info_3->helpfile));
PACKI(desc,"N",count);
for ( i=0; i<count && driver.info_3->dependentfiles && *driver.info_3->dependentfiles[i]; i++)
{
trim_string(driver.info_3->dependentfiles[i], "\\print$\\WIN40\\0\\", 0);
PACKS(desc,"z",driver.info_3->dependentfiles[i]);
DEBUG(3,("Dependent File: %s:\n",driver.info_3->dependentfiles[i]));
}
if ( i != count )
DEBUG(3,("fill_printq_info_52: file count specified by client [%d] != number of dependent files [%i]\n",
count, i));
DEBUG(3,("fill_printq_info on <%s> gave %d entries\n", SERVICE(snum),i));
desc->errcode=NERR_Success;
goto done;
err:
DEBUG(3,("fill_printq_info: Can't supply driver files\n"));
desc->errcode=NERR_notsupported;
done:
if ( printer )
free_a_printer( &printer, 2 );
if ( driver.info_3 )
free_a_printer_driver( driver, 3 );
}
static void fill_printq_info(connection_struct *conn, int snum, int uLevel,
struct pack_desc* desc,
int count, print_queue_struct* queue,
print_status_struct* status)
{
switch (uLevel) {
case 1:
case 2:
PACKS(desc,"B13",SERVICE(snum));
break;
case 3:
case 4:
case 5:
PACKS(desc,"z",Expand(conn,snum,SERVICE(snum)));
break;
case 51:
PACKI(desc,"K",printq_status(status->status));
break;
}
if (uLevel == 1 || uLevel == 2) {
PACKS(desc,"B","");
PACKI(desc,"W",5);
PACKI(desc,"W",0);
PACKI(desc,"W",0);
PACKS(desc,"z","");
PACKS(desc,"z","lpd");
PACKS(desc,"z",SERVICE(snum));
PACKS(desc,"z","");
if (snum < 0) {
PACKS(desc,"z","UNKNOWN PRINTER");
PACKI(desc,"W",LPSTAT_ERROR);
}
else if (!status || !status->message[0]) {
PACKS(desc,"z",Expand(conn,snum,lp_comment(snum)));
PACKI(desc,"W",LPSTAT_OK);
} else {
PACKS(desc,"z",status->message);
PACKI(desc,"W",printq_status(status->status));
}
PACKI(desc,(uLevel == 1 ? "W" : "N"),count);
}
if (uLevel == 3 || uLevel == 4) {
pstring drivername;
PACKI(desc,"W",5);
PACKI(desc,"W",0);
PACKI(desc,"W",0);
PACKI(desc,"W",5);
PACKS(desc,"z","");
PACKS(desc,"z","WinPrint");
PACKS(desc,"z",NULL);
PACKS(desc,"z",NULL);
if (!status) {
PACKI(desc,"W",LPSTAT_OK);
} else {
PACKI(desc,"W",printq_status(status->status));
}
PACKI(desc,(uLevel == 3 ? "W" : "N"),count);
PACKS(desc,"z",SERVICE(snum));
get_driver_name(snum,drivername);
PACKS(desc,"z",drivername);
PackDriverData(desc);
}
if (uLevel == 2 || uLevel == 4) {
int i;
for (i=0;i<count;i++)
fill_printjob_info(conn,snum,uLevel == 2 ? 1 : 2,desc,&queue[i],i);
}
if (uLevel==52)
fill_printq_info_52( conn, snum, desc, count );
}
static int get_printerdrivernumber(int snum)
{
int result = 0;
NT_PRINTER_DRIVER_INFO_LEVEL driver;
NT_PRINTER_INFO_LEVEL *printer = NULL;
ZERO_STRUCT(driver);
if ( !W_ERROR_IS_OK(get_a_printer( NULL, &printer, 2, lp_servicename(snum))) ) {
DEBUG(3,("get_printerdrivernumber: Failed to lookup printer [%s]\n",
lp_servicename(snum)));
goto done;
}
if ( !W_ERROR_IS_OK(get_a_printer_driver(&driver, 3, printer->info_2->drivername,
"Windows 4.0", 0)) )
{
DEBUG(3,("get_printerdrivernumber: Failed to lookup driver [%s]\n",
printer->info_2->drivername));
goto done;
}
while ( driver.info_3->dependentfiles && *driver.info_3->dependentfiles[result] )
result++;
\
done:
if ( printer )
free_a_printer( &printer, 2 );
if ( driver.info_3 )
free_a_printer_driver( driver, 3 );
return result;
}
static BOOL api_DosPrintQGetInfo(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
char *QueueName = p;
unsigned int uLevel;
int count=0;
int snum;
char *str3;
struct pack_desc desc;
print_queue_struct *queue=NULL;
print_status_struct status;
char* tmpdata=NULL;
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&status,'\0',sizeof(status));
memset((char *)&desc,'\0',sizeof(desc));
p = skip_string(param,tpscnt,p);
if (!p) {
return False;
}
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
str3 = get_safe_str_ptr(param,tpscnt,p,4);
if ((p = strchr_m(QueueName,'%')))
*p = 0;
DEBUG(3,("api_DosPrintQGetInfo uLevel=%d name=%s\n",uLevel,QueueName));
if (!prefix_ok(str1,"zWrLh"))
return False;
if (!check_printq_info(&desc,uLevel,str2,str3)) {
*rdata_len = 0;
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,ERRunknownlevel);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,0);
return(True);
}
snum = find_service(QueueName);
if ( !(lp_snum_ok(snum) && lp_print_ok(snum)) )
return False;
if (uLevel==52) {
count = get_printerdrivernumber(snum);
DEBUG(3,("api_DosPrintQGetInfo: Driver files count: %d\n",count));
} else {
count = print_queue_status(snum, &queue,&status);
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
desc.base = *rdata;
desc.buflen = mdrcnt;
} else {
desc.buflen = getlen(desc.format);
desc.base = tmpdata = (char *) SMB_MALLOC (desc.buflen);
}
if (init_package(&desc,1,count)) {
desc.subcount = count;
fill_printq_info(conn,snum,uLevel,&desc,count,queue,&status);
}
*rdata_len = desc.usedlen;
if (!mdrcnt && lp_disable_spoolss())
desc.errcode = ERRbuftoosmall;
*rdata_len = desc.usedlen;
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,desc.neededlen);
DEBUG(4,("printqgetinfo: errorcode %d\n",desc.errcode));
SAFE_FREE(queue);
SAFE_FREE(tmpdata);
return(True);
}
static BOOL api_DosPrintQEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt, int mprcnt,
char **rdata, char** rparam,
int *rdata_len, int *rparam_len)
{
char *param_format = get_safe_str_ptr(param,tpscnt,param,2);
char *output_format1 = skip_string(param,tpscnt,param_format);
char *p = skip_string(param,tpscnt,output_format1);
unsigned int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
char *output_format2 = get_safe_str_ptr(param,tpscnt,p,4);
int services = lp_numservices();
int i, n;
struct pack_desc desc;
print_queue_struct **queue = NULL;
print_status_struct *status = NULL;
int *subcntarr = NULL;
int queuecnt = 0, subcnt = 0, succnt = 0;
if (!param_format || !output_format1 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
DEBUG(3,("DosPrintQEnum uLevel=%d\n",uLevel));
if (!prefix_ok(param_format,"WrLeh")) {
return False;
}
if (!check_printq_info(&desc,uLevel,output_format1,output_format2)) {
*rdata_len = 0;
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,ERRunknownlevel);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,0);
return(True);
}
for (i = 0; i < services; i++) {
if (lp_snum_ok(i) && lp_print_ok(i) && lp_browseable(i)) {
queuecnt++;
}
}
if((queue = SMB_MALLOC_ARRAY(print_queue_struct*, queuecnt)) == NULL) {
DEBUG(0,("api_DosPrintQEnum: malloc fail !\n"));
goto err;
}
memset(queue,0,queuecnt*sizeof(print_queue_struct*));
if((status = SMB_MALLOC_ARRAY(print_status_struct,queuecnt)) == NULL) {
DEBUG(0,("api_DosPrintQEnum: malloc fail !\n"));
goto err;
}
memset(status,0,queuecnt*sizeof(print_status_struct));
if((subcntarr = SMB_MALLOC_ARRAY(int,queuecnt)) == NULL) {
DEBUG(0,("api_DosPrintQEnum: malloc fail !\n"));
goto err;
}
subcnt = 0;
n = 0;
for (i = 0; i < services; i++) {
if (lp_snum_ok(i) && lp_print_ok(i) && lp_browseable(i)) {
subcntarr[n] = print_queue_status(i, &queue[n],&status[n]);
subcnt += subcntarr[n];
n++;
}
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
goto err;
}
}
desc.base = *rdata;
desc.buflen = mdrcnt;
if (init_package(&desc,queuecnt,subcnt)) {
n = 0;
succnt = 0;
for (i = 0; i < services; i++) {
if (lp_snum_ok(i) && lp_print_ok(i) && lp_browseable(i)) {
fill_printq_info(conn,i,uLevel,&desc,subcntarr[n],queue[n],&status[n]);
n++;
if (desc.errcode == NERR_Success) {
succnt = n;
}
}
}
}
SAFE_FREE(subcntarr);
*rdata_len = desc.usedlen;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
goto err;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,succnt);
SSVAL(*rparam,6,queuecnt);
for (i = 0; i < queuecnt; i++) {
if (queue) {
SAFE_FREE(queue[i]);
}
}
SAFE_FREE(queue);
SAFE_FREE(status);
return True;
err:
SAFE_FREE(subcntarr);
for (i = 0; i < queuecnt; i++) {
if (queue) {
SAFE_FREE(queue[i]);
}
}
SAFE_FREE(queue);
SAFE_FREE(status);
return False;
}
static BOOL check_server_info(int uLevel, char* id)
{
switch( uLevel ) {
case 0:
if (strcmp(id,"B16") != 0) {
return False;
}
break;
case 1:
if (strcmp(id,"B16BBDz") != 0) {
return False;
}
break;
default:
return False;
}
return True;
}
struct srv_info_struct {
fstring name;
uint32 type;
fstring comment;
fstring domain;
BOOL server_added;
};
static int get_server_info(uint32 servertype,
struct srv_info_struct **servers,
const char *domain)
{
int count=0;
int alloced=0;
char **lines;
BOOL local_list_only;
int i;
lines = file_lines_load(lock_path(SERVER_LIST), NULL, 0);
if (!lines) {
DEBUG(4,("Can't open %s - %s\n",lock_path(SERVER_LIST),strerror(errno)));
return 0;
}
if (servertype == SV_TYPE_ALL) {
servertype &= ~(SV_TYPE_DOMAIN_ENUM|SV_TYPE_LOCAL_LIST_ONLY);
}
local_list_only = (servertype & SV_TYPE_LOCAL_LIST_ONLY);
DEBUG(4,("Servertype search: %8x\n",servertype));
for (i=0;lines[i];i++) {
fstring stype;
struct srv_info_struct *s;
const char *ptr = lines[i];
BOOL ok = True;
if (!*ptr) {
continue;
}
if (count == alloced) {
alloced += 10;
*servers = SMB_REALLOC_ARRAY(*servers,struct srv_info_struct, alloced);
if (!*servers) {
DEBUG(0,("get_server_info: failed to enlarge servers info struct!\n"));
file_lines_free(lines);
return 0;
}
memset((char *)((*servers)+count),'\0',sizeof(**servers)*(alloced-count));
}
s = &(*servers)[count];
if (!next_token(&ptr,s->name, NULL, sizeof(s->name))) {
continue;
}
if (!next_token(&ptr,stype, NULL, sizeof(stype))) {
continue;
}
if (!next_token(&ptr,s->comment, NULL, sizeof(s->comment))) {
continue;
}
if (!next_token(&ptr,s->domain, NULL, sizeof(s->domain))) {
fstrcpy(s->domain,lp_workgroup());
}
if (sscanf(stype,"%X",&s->type) != 1) {
DEBUG(4,("r:host file "));
ok = False;
}
if(local_list_only && ((s->type & SV_TYPE_LOCAL_LIST_ONLY) == 0)) {
DEBUG(4,("r: local list only"));
ok = False;
}
if (!(servertype & s->type)) {
DEBUG(4,("r:serv type "));
ok = False;
}
if ((servertype & SV_TYPE_DOMAIN_ENUM) !=
(s->type & SV_TYPE_DOMAIN_ENUM)) {
DEBUG(4,("s: dom mismatch "));
ok = False;
}
if (!strequal(domain, s->domain) && !(servertype & SV_TYPE_DOMAIN_ENUM)) {
ok = False;
}
s->type &= ~SV_TYPE_LOCAL_LIST_ONLY;
if (ok) {
DEBUG(4,("**SV** %20s %8x %25s %15s\n",
s->name, s->type, s->comment, s->domain));
s->server_added = True;
count++;
} else {
DEBUG(4,("%20s %8x %25s %15s\n",
s->name, s->type, s->comment, s->domain));
}
}
file_lines_free(lines);
return count;
}
static int fill_srv_info(struct srv_info_struct *service,
int uLevel, char **buf, int *buflen,
char **stringbuf, int *stringspace, char *baseaddr)
{
int struct_len;
char* p;
char* p2;
int l2;
int len;
switch (uLevel) {
case 0:
struct_len = 16;
break;
case 1:
struct_len = 26;
break;
default:
return -1;
}
if (!buf) {
len = 0;
switch (uLevel) {
case 1:
len = strlen(service->comment)+1;
break;
}
*buflen = struct_len;
*stringspace = len;
return struct_len + len;
}
len = struct_len;
p = *buf;
if (*buflen < struct_len) {
return -1;
}
if (stringbuf) {
p2 = *stringbuf;
l2 = *stringspace;
} else {
p2 = p + struct_len;
l2 = *buflen - struct_len;
}
if (!baseaddr) {
baseaddr = p;
}
switch (uLevel) {
case 0:
push_ascii(p,service->name, MAX_NETBIOSNAME_LEN, STR_TERMINATE);
break;
case 1:
push_ascii(p,service->name,MAX_NETBIOSNAME_LEN, STR_TERMINATE);
SIVAL(p,18,service->type);
SIVAL(p,22,PTR_DIFF(p2,baseaddr));
len += CopyAndAdvance(&p2,service->comment,&l2);
break;
}
if (stringbuf) {
*buf = p + struct_len;
*buflen -= struct_len;
*stringbuf = p2;
*stringspace = l2;
} else {
*buf = p2;
*buflen -= len;
}
return len;
}
static BOOL srv_comp(struct srv_info_struct *s1,struct srv_info_struct *s2)
{
return(strcmp(s1->name,s2->name));
}
static BOOL api_RNetServerEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt, int mprcnt, char **rdata,
char **rparam, int *rdata_len, int *rparam_len)
{
char *str1 = get_safe_str_ptr(param, tpscnt, param, 2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel = get_safe_SVAL(param, tpscnt, p, 0, -1);
int buf_len = get_safe_SVAL(param,tpscnt, p, 2, 0);
uint32 servertype = get_safe_IVAL(param,tpscnt,p,4, 0);
char *p2;
int data_len, fixed_len, string_len;
int f_len = 0, s_len = 0;
struct srv_info_struct *servers=NULL;
int counted=0,total=0;
int i,missed;
fstring domain;
BOOL domain_request;
BOOL local_request;
if (!str1 || !str2 || !p) {
return False;
}
if (servertype == SV_TYPE_ALL) {
servertype &= ~(SV_TYPE_DOMAIN_ENUM|SV_TYPE_LOCAL_LIST_ONLY);
}
if ((servertype & SV_TYPE_LOCAL_LIST_ONLY) && !(servertype & SV_TYPE_DOMAIN_ENUM)) {
servertype = SV_TYPE_ALL & ~(SV_TYPE_DOMAIN_ENUM);
}
domain_request = ((servertype & SV_TYPE_DOMAIN_ENUM) != 0);
local_request = ((servertype & SV_TYPE_LOCAL_LIST_ONLY) != 0);
p += 8;
if (!prefix_ok(str1,"WrLehD")) {
return False;
}
if (!check_server_info(uLevel,str2)) {
return False;
}
DEBUG(4, ("server request level: %s %8x ", str2, servertype));
DEBUG(4, ("domains_req:%s ", BOOLSTR(domain_request)));
DEBUG(4, ("local_only:%s\n", BOOLSTR(local_request)));
if (strcmp(str1, "WrLehDz") == 0) {
if (skip_string(param,tpscnt,p) == NULL) {
return False;
}
pull_ascii_fstring(domain, p);
} else {
fstrcpy(domain, lp_workgroup());
}
if (lp_browse_list()) {
total = get_server_info(servertype,&servers,domain);
}
data_len = fixed_len = string_len = 0;
missed = 0;
if (total > 0) {
qsort(servers,total,sizeof(servers[0]),QSORT_CAST srv_comp);
}
{
char *lastname=NULL;
for (i=0;i<total;i++) {
struct srv_info_struct *s = &servers[i];
if (lastname && strequal(lastname,s->name)) {
continue;
}
lastname = s->name;
data_len += fill_srv_info(s,uLevel,0,&f_len,0,&s_len,0);
DEBUG(4,("fill_srv_info %20s %8x %25s %15s\n",
s->name, s->type, s->comment, s->domain));
if (data_len <= buf_len) {
counted++;
fixed_len += f_len;
string_len += s_len;
} else {
missed++;
}
}
}
*rdata_len = fixed_len + string_len;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
memset(*rdata,'\0',*rdata_len);
p2 = (*rdata) + fixed_len;
p = *rdata;
f_len = fixed_len;
s_len = string_len;
{
char *lastname=NULL;
int count2 = counted;
for (i = 0; i < total && count2;i++) {
struct srv_info_struct *s = &servers[i];
if (lastname && strequal(lastname,s->name)) {
continue;
}
lastname = s->name;
fill_srv_info(s,uLevel,&p,&f_len,&p2,&s_len,*rdata);
DEBUG(4,("fill_srv_info %20s %8x %25s %15s\n",
s->name, s->type, s->comment, s->domain));
count2--;
}
}
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVAL(*rparam,0,(missed == 0 ? NERR_Success : ERRmoredata));
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,counted);
SSVAL(*rparam,6,counted+missed);
SAFE_FREE(servers);
DEBUG(3,("NetServerEnum domain = %s uLevel=%d counted=%d total=%d\n",
domain,uLevel,counted,counted+missed));
return True;
}
static BOOL api_RNetGroupGetUsers(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt, int mprcnt, char **rdata,
char **rparam, int *rdata_len, int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
int buf_len = get_safe_SVAL(param,tpscnt,p,2,0);
int counted=0;
int missed=0;
if (!str1 || !str2 || !p) {
return False;
}
DEBUG(5,("RNetGroupGetUsers: %s %s %s %d %d\n",
str1, str2, p, uLevel, buf_len));
if (!prefix_ok(str1,"zWrLeh")) {
return False;
}
*rdata_len = 0;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVAL(*rparam,0,0x08AC);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,counted);
SSVAL(*rparam,6,counted+missed);
return True;
}
static BOOL check_share_info(int uLevel, char* id)
{
switch( uLevel ) {
case 0:
if (strcmp(id,"B13") != 0) {
return False;
}
break;
case 1:
if (strcmp(id,"B13BWz") != 0) {
return False;
}
break;
case 2:
if (strcmp(id,"B13BWzWWWzB9B") != 0) {
return False;
}
break;
case 91:
if (strcmp(id,"B13BWzWWWzB9BB9BWzWWzWW") != 0) {
return False;
}
break;
default:
return False;
}
return True;
}
static int fill_share_info(connection_struct *conn, int snum, int uLevel,
char** buf, int* buflen,
char** stringbuf, int* stringspace, char* baseaddr)
{
int struct_len;
char* p;
char* p2;
int l2;
int len;
switch( uLevel ) {
case 0:
struct_len = 13;
break;
case 1:
struct_len = 20;
break;
case 2:
struct_len = 40;
break;
case 91:
struct_len = 68;
break;
default:
return -1;
}
if (!buf) {
len = 0;
if (uLevel > 0) {
len += StrlenExpanded(conn,snum,lp_comment(snum));
}
if (uLevel > 1) {
len += strlen(lp_pathname(snum)) + 1;
}
if (buflen) {
*buflen = struct_len;
}
if (stringspace) {
*stringspace = len;
}
return struct_len + len;
}
len = struct_len;
p = *buf;
if ((*buflen) < struct_len) {
return -1;
}
if (stringbuf) {
p2 = *stringbuf;
l2 = *stringspace;
} else {
p2 = p + struct_len;
l2 = (*buflen) - struct_len;
}
if (!baseaddr) {
baseaddr = p;
}
push_ascii(p,lp_servicename(snum),13, STR_TERMINATE);
if (uLevel > 0) {
int type;
SCVAL(p,13,0);
type = STYPE_DISKTREE;
if (lp_print_ok(snum)) {
type = STYPE_PRINTQ;
}
if (strequal("IPC",lp_fstype(snum))) {
type = STYPE_IPC;
}
SSVAL(p,14,type);
SIVAL(p,16,PTR_DIFF(p2,baseaddr));
len += CopyExpanded(conn,snum,&p2,lp_comment(snum),&l2);
}
if (uLevel > 1) {
SSVAL(p,20,ACCESS_READ|ACCESS_WRITE|ACCESS_CREATE);
SSVALS(p,22,-1);
SSVAL(p,24,1);
SIVAL(p,26,PTR_DIFF(p2,baseaddr));
len += CopyAndAdvance(&p2,lp_pathname(snum),&l2);
memset(p+30,0,SHPWLEN+2);
}
if (uLevel > 2) {
memset(p+40,0,SHPWLEN+2);
SSVAL(p,50,0);
SIVAL(p,52,0);
SSVAL(p,56,0);
SSVAL(p,58,0);
SIVAL(p,60,0);
SSVAL(p,64,0);
SSVAL(p,66,0);
}
if (stringbuf) {
(*buf) = p + struct_len;
(*buflen) -= struct_len;
(*stringbuf) = p2;
(*stringspace) = l2;
} else {
(*buf) = p2;
(*buflen) -= len;
}
return len;
}
static BOOL api_RNetShareGetInfo(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *netname = skip_string(param,tpscnt,str2);
char *p = skip_string(param,tpscnt,netname);
int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
int snum;
if (!str1 || !str2 || !netname || !p) {
return False;
}
snum = find_service(netname);
if (snum < 0) {
return False;
}
if (!prefix_ok(str1,"zWrLh")) {
return False;
}
if (!check_share_info(uLevel,str2)) {
return False;
}
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
p = *rdata;
*rdata_len = fill_share_info(conn,snum,uLevel,&p,&mdrcnt,0,0,0);
if (*rdata_len < 0) {
return False;
}
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVAL(*rparam,0,NERR_Success);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,*rdata_len);
return True;
}
static BOOL api_RNetShareEnum( connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,
int mprcnt,
char **rdata,
char **rparam,
int *rdata_len,
int *rparam_len )
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
int buf_len = get_safe_SVAL(param,tpscnt,p,2,0);
char *p2;
int count = 0;
int total=0,counted=0;
BOOL missed = False;
int i;
int data_len, fixed_len, string_len;
int f_len = 0, s_len = 0;
if (!str1 || !str2 || !p) {
return False;
}
if (!prefix_ok(str1,"WrLeh")) {
return False;
}
if (!check_share_info(uLevel,str2)) {
return False;
}
become_root();
count = load_usershare_shares();
unbecome_root();
data_len = fixed_len = string_len = 0;
for (i=0;i<count;i++) {
fstring servicename_dos;
if (!(lp_browseable(i) && lp_snum_ok(i))) {
continue;
}
if ((lp_parm_bool(i, "com.apple", "filter shares by access", False) == True) &&
(check_share_access(lp_pathname(i)) == False)) {
DEBUG(10,("Marking service %s unbrowseable - path = %s\n", lp_servicename(i), lp_pathname(i)));
lp_set_browseable(i, False);
continue;
}
push_ascii_fstring(servicename_dos, lp_servicename(i));
if( lp_browseable( i ) && lp_snum_ok( i ) && (strlen(servicename_dos) < 13)) {
total++;
data_len += fill_share_info(conn,i,uLevel,0,&f_len,0,&s_len,0);
if (data_len <= buf_len) {
counted++;
fixed_len += f_len;
string_len += s_len;
} else {
missed = True;
}
}
}
*rdata_len = fixed_len + string_len;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
memset(*rdata,0,*rdata_len);
p2 = (*rdata) + fixed_len;
p = *rdata;
f_len = fixed_len;
s_len = string_len;
for( i = 0; i < count; i++ ) {
fstring servicename_dos;
if (!(lp_browseable(i) && lp_snum_ok(i))) {
continue;
}
push_ascii_fstring(servicename_dos, lp_servicename(i));
if (lp_browseable(i) && lp_snum_ok(i) && (strlen(servicename_dos) < 13)) {
if (fill_share_info( conn,i,uLevel,&p,&f_len,&p2,&s_len,*rdata ) < 0) {
break;
}
}
}
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVAL(*rparam,0,missed ? ERRmoredata : NERR_Success);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,counted);
SSVAL(*rparam,6,total);
DEBUG(3,("RNetShareEnum gave %d entries of %d (%d %d %d %d)\n",
counted,total,uLevel,
buf_len,*rdata_len,mdrcnt));
return True;
}
static BOOL api_RNetShareAdd(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
fstring sharename;
fstring comment;
pstring pathname;
char *command, *cmdname;
unsigned int offset;
int snum;
int res = ERRunsup;
if (!str1 || !str2 || !p) {
return False;
}
if (!prefix_ok(str1,RAP_WShareAdd_REQ)) {
return False;
}
if (!check_share_info(uLevel,str2)) {
return False;
}
if (uLevel != 2) {
return False;
}
if (skip_string(data,mdrcnt,data) == NULL) {
return False;
}
pull_ascii_fstring(sharename,data);
snum = find_service(sharename);
if (snum >= 0) {
res = ERRfilexists;
goto error_exit;
}
if (mdrcnt < 28) {
return False;
}
if (SVAL(data,14)!=STYPE_DISKTREE) {
return False;
}
offset = IVAL(data, 16);
if (offset >= mdrcnt) {
res = ERRinvalidparam;
goto error_exit;
}
if (skip_string(data,mdrcnt,data+offset) == NULL) {
return False;
}
pull_ascii_fstring(comment, offset? (data+offset) : "");
offset = IVAL(data, 26);
if (offset >= mdrcnt) {
res = ERRinvalidparam;
goto error_exit;
}
if (skip_string(data,mdrcnt,data+offset) == NULL) {
return False;
}
pull_ascii_pstring(pathname, offset? (data+offset) : "");
string_replace(sharename, '"', ' ');
string_replace(pathname, '"', ' ');
string_replace(comment, '"', ' ');
cmdname = lp_add_share_cmd();
if (!cmdname || *cmdname == '\0') {
return False;
}
asprintf(&command, "%s \"%s\" \"%s\" \"%s\" \"%s\"",
lp_add_share_cmd(), dyn_CONFIGFILE, sharename, pathname, comment);
if (command) {
DEBUG(10,("api_RNetShareAdd: Running [%s]\n", command ));
if ((res = smbrun(command, NULL)) != 0) {
DEBUG(1,("api_RNetShareAdd: Running [%s] returned (%d)\n", command, res ));
SAFE_FREE(command);
res = ERRnoaccess;
goto error_exit;
} else {
SAFE_FREE(command);
message_send_all(conn_tdb_ctx(), MSG_SMB_CONF_UPDATED, NULL, 0, False, NULL);
}
} else {
return False;
}
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVAL(*rparam,0,NERR_Success);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,*rdata_len);
*rdata_len = 0;
return True;
error_exit:
*rparam_len = 4;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
*rdata_len = 0;
SSVAL(*rparam,0,res);
SSVAL(*rparam,2,0);
return True;
}
static BOOL api_RNetGroupEnum(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
int i;
int errflags=0;
int resume_context, cli_buf_size;
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
struct pdb_search *search;
struct samr_displayentry *entries;
int num_entries;
if (!str1 || !str2 || !p) {
return False;
}
if (strcmp(str1,"WrLeh") != 0) {
return False;
}
if (strcmp("B21",str2) != 0) {
return False;
}
become_root();
search = pdb_search_groups();
unbecome_root();
if (search == NULL) {
DEBUG(3,("api_RNetGroupEnum:failed to get group list"));
return False;
}
resume_context = get_safe_SVAL(param,tpscnt,p,0,-1);
cli_buf_size= get_safe_SVAL(param,tpscnt,p,2,0);
DEBUG(10,("api_RNetGroupEnum:resume context: %d, client buffer size: "
"%d\n", resume_context, cli_buf_size));
become_root();
num_entries = pdb_search_entries(search, resume_context, 0xffffffff,
&entries);
unbecome_root();
*rdata_len = cli_buf_size;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
p = *rdata;
for(i=0; i<num_entries; i++) {
fstring name;
fstrcpy(name, entries[i].account_name);
if( ((PTR_DIFF(p,*rdata)+21) <= *rdata_len) ) {
memcpy(p, name, 21);
DEBUG(10,("adding entry %d group %s\n", i, p));
p += 21;
p += 5;
} else {
DEBUG(3,("overflow on entry %d group %s\n", i, name));
errflags=234;
break;
}
}
pdb_search_destroy(search);
*rdata_len = PTR_DIFF(p,*rdata);
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVAL(*rparam, 0, errflags);
SSVAL(*rparam, 2, 0);
SSVAL(*rparam, 4, i);
SSVAL(*rparam, 6, resume_context+num_entries);
return(True);
}
static BOOL api_NetUserGetGroups(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *UserName = skip_string(param,tpscnt,str2);
char *p = skip_string(param,tpscnt,UserName);
int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
const char *level_string;
int count=0;
struct samu *sampw = NULL;
BOOL ret = False;
DOM_SID *sids;
gid_t *gids;
size_t num_groups;
size_t i;
NTSTATUS result;
DOM_SID user_sid;
enum lsa_SidType type;
TALLOC_CTX *mem_ctx;
if (!str1 || !str2 || !UserName || !p) {
return False;
}
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
if ( strcmp(str1,"zWrLeh") != 0 )
return False;
switch( uLevel ) {
case 0:
level_string = "B21";
break;
default:
return False;
}
if (strcmp(level_string,str2) != 0)
return False;
*rdata_len = mdrcnt + 1024;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
SSVAL(*rparam,0,NERR_Success);
SSVAL(*rparam,2,0);
p = *rdata;
mem_ctx = talloc_new(NULL);
if (mem_ctx == NULL) {
DEBUG(0, ("talloc_new failed\n"));
return False;
}
if ( !(sampw = samu_new(mem_ctx)) ) {
DEBUG(0, ("samu_new() failed!\n"));
TALLOC_FREE(mem_ctx);
return False;
}
become_root();
if (!lookup_name(mem_ctx, UserName, LOOKUP_NAME_ALL,
NULL, NULL, &user_sid, &type)) {
DEBUG(10, ("lookup_name(%s) failed\n", UserName));
goto done;
}
if (type != SID_NAME_USER) {
DEBUG(10, ("%s is a %s, not a user\n", UserName,
sid_type_lookup(type)));
goto done;
}
if ( !pdb_getsampwsid(sampw, &user_sid) ) {
DEBUG(10, ("pdb_getsampwsid(%s) failed for user %s\n",
sid_string_static(&user_sid), UserName));
goto done;
}
gids = NULL;
sids = NULL;
num_groups = 0;
result = pdb_enum_group_memberships(mem_ctx, sampw,
&sids, &gids, &num_groups);
if (!NT_STATUS_IS_OK(result)) {
DEBUG(10, ("pdb_enum_group_memberships failed for %s\n",
UserName));
goto done;
}
for (i=0; i<num_groups; i++) {
const char *grp_name;
if ( lookup_sid(mem_ctx, &sids[i], NULL, &grp_name, NULL) ) {
pstrcpy(p, grp_name);
p += 21;
count++;
}
}
*rdata_len = PTR_DIFF(p,*rdata);
SSVAL(*rparam,4,count);
SSVAL(*rparam,6,count);
ret = True;
done:
unbecome_root();
TALLOC_FREE(mem_ctx);
return ret;
}
static BOOL api_RNetUserEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
int count_sent=0;
int num_users=0;
int errflags=0;
int i, resume_context, cli_buf_size;
struct pdb_search *search;
struct samr_displayentry *users;
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
if (!str1 || !str2 || !p) {
return False;
}
if (strcmp(str1,"WrLeh") != 0)
return False;
resume_context = get_safe_SVAL(param,tpscnt,p,0,-1);
cli_buf_size= get_safe_SVAL(param,tpscnt,p,2,0);
DEBUG(10,("api_RNetUserEnum:resume context: %d, client buffer size: %d\n",
resume_context, cli_buf_size));
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
if (strcmp("B21",str2) != 0)
return False;
*rdata_len = cli_buf_size;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
p = *rdata;
become_root();
search = pdb_search_users(ACB_NORMAL);
unbecome_root();
if (search == NULL) {
DEBUG(0, ("api_RNetUserEnum:unable to open sam database.\n"));
return False;
}
become_root();
num_users = pdb_search_entries(search, resume_context, 0xffffffff,
&users);
unbecome_root();
errflags=NERR_Success;
for (i=0; i<num_users; i++) {
const char *name = users[i].account_name;
if(((PTR_DIFF(p,*rdata)+21)<=*rdata_len)&&(strlen(name)<=21)) {
pstrcpy(p,name);
DEBUG(10,("api_RNetUserEnum:adding entry %d username "
"%s\n",count_sent,p));
p += 21;
count_sent++;
} else {
DEBUG(10,("api_RNetUserEnum:overflow on entry %d "
"username %s\n",count_sent,name));
errflags=234;
break;
}
}
pdb_search_destroy(search);
*rdata_len = PTR_DIFF(p,*rdata);
SSVAL(*rparam,0,errflags);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,count_sent);
SSVAL(*rparam,6,num_users);
return True;
}
static BOOL api_NetRemoteTOD(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
struct tm *t;
time_t unixdate = time(NULL);
char *p;
*rparam_len = 4;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
*rdata_len = 21;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
SSVAL(*rparam,0,NERR_Success);
SSVAL(*rparam,2,0);
p = *rdata;
srv_put_dos_date3(p,0,unixdate);
t = localtime(&unixdate);
if (!t) {
return False;
}
SIVAL(p,4,0);
SCVAL(p,8,t->tm_hour);
SCVAL(p,9,t->tm_min);
SCVAL(p,10,t->tm_sec);
SCVAL(p,11,0);
SSVALS(p,12,get_time_zone(unixdate)/60);
SSVAL(p,14,10000);
SCVAL(p,16,t->tm_mday);
SCVAL(p,17,t->tm_mon + 1);
SSVAL(p,18,1900+t->tm_year);
SCVAL(p,20,t->tm_wday);
return True;
}
static BOOL api_SetUserPassword(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *np = get_safe_str_ptr(param,tpscnt,param,2);
char *p = NULL;
fstring user;
fstring pass1,pass2;
p = skip_string(param,tpscnt,np);
p = skip_string(param,tpscnt,p);
if (!np || !p) {
return False;
}
if (skip_string(param,tpscnt,p) == NULL) {
return False;
}
pull_ascii_fstring(user,p);
p = skip_string(param,tpscnt,p);
if (!p) {
return False;
}
memset(pass1,'\0',sizeof(pass1));
memset(pass2,'\0',sizeof(pass2));
if (!is_offset_safe(param,tpscnt,p,31)) {
return False;
}
memcpy(pass1,p,16);
memcpy(pass2,p+16,16);
*rparam_len = 4;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
*rdata_len = 0;
SSVAL(*rparam,0,NERR_badpass);
SSVAL(*rparam,2,0);
DEBUG(3,("Set password for <%s>\n",user));
{
auth_serversupplied_info *server_info = NULL;
DATA_BLOB password = data_blob(pass1, strlen(pass1)+1);
if (NT_STATUS_IS_OK(check_plaintext_password(user,password,&server_info))) {
become_root();
if (NT_STATUS_IS_OK(change_oem_password(server_info->sam_account, pass1, pass2, False, NULL))) {
SSVAL(*rparam,0,NERR_Success);
}
unbecome_root();
TALLOC_FREE(server_info);
}
data_blob_clear_free(&password);
}
if(SVAL(*rparam,0) != NERR_Success) {
struct samu *hnd = NULL;
if (check_lanman_password(user,(unsigned char *)pass1,(unsigned char *)pass2, &hnd)) {
become_root();
if (change_lanman_password(hnd,(uchar *)pass2)) {
SSVAL(*rparam,0,NERR_Success);
}
unbecome_root();
TALLOC_FREE(hnd);
}
}
memset((char *)pass1,'\0',sizeof(fstring));
memset((char *)pass2,'\0',sizeof(fstring));
return(True);
}
static BOOL api_SamOEMChangePassword(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
fstring user;
char *p = get_safe_str_ptr(param,tpscnt,param,2);
*rparam_len = 2;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
if (!p) {
return False;
}
*rdata_len = 0;
SSVAL(*rparam,0,NERR_badpass);
if (skip_string(param,tpscnt,p) == 0) {
return False;
}
if(!strequal(p, "zsT")) {
DEBUG(0,("api_SamOEMChangePassword: Invalid parameter string %s\n", p));
return False;
}
p = skip_string(param, tpscnt, p);
if (!p) {
return False;
}
if (skip_string(param,tpscnt,p) == 0) {
return False;
}
if(!strequal(p, "B516B16")) {
DEBUG(0,("api_SamOEMChangePassword: Invalid data parameter string %s\n", p));
return False;
}
p = skip_string(param,tpscnt,p);
if (!p) {
return False;
}
if (skip_string(param,tpscnt,p) == 0) {
return False;
}
p += pull_ascii_fstring(user,p);
DEBUG(3,("api_SamOEMChangePassword: Change password for <%s>\n",user));
(void)map_username(user);
if (NT_STATUS_IS_OK(pass_oem_change(user, (uchar*) data, (uchar *)&data[516], NULL, NULL, NULL))) {
SSVAL(*rparam,0,NERR_Success);
}
return(True);
}
static BOOL api_RDosPrintJobDel(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
int function = get_safe_SVAL(param,tpscnt,param,0,0);
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
uint32 jobid;
int snum;
fstring sharename;
int errcode;
WERROR werr = WERR_OK;
if (!str1 || !str2 || !p) {
return False;
}
if (!is_offset_safe(param,tpscnt,p,1)) {
return False;
}
if(!rap_to_pjobid(SVAL(p,0), sharename, &jobid))
return False;
if (!(strcsequal(str1,"W") && strcsequal(str2,"")))
return(False);
*rparam_len = 4;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
*rdata_len = 0;
if (!print_job_exists(sharename, jobid)) {
errcode = NERR_JobNotFound;
goto out;
}
snum = lp_servicenumber( sharename);
if (snum == -1) {
errcode = NERR_DestNotFound;
goto out;
}
errcode = NERR_notsupported;
switch (function) {
case 81:
if (print_job_delete(¤t_user, snum, jobid, &werr))
errcode = NERR_Success;
break;
case 82:
if (print_job_pause(¤t_user, snum, jobid, &werr))
errcode = NERR_Success;
break;
case 83:
if (print_job_resume(¤t_user, snum, jobid, &werr))
errcode = NERR_Success;
break;
}
if (!W_ERROR_IS_OK(werr))
errcode = W_ERROR_V(werr);
out:
SSVAL(*rparam,0,errcode);
SSVAL(*rparam,2,0);
return(True);
}
static BOOL api_WPrintQueueCtrl(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
int function = get_safe_SVAL(param,tpscnt,param,0,0);
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *QueueName = skip_string(param,tpscnt,str2);
int errcode = NERR_notsupported;
int snum;
WERROR werr = WERR_OK;
if (!str1 || !str2 || !QueueName) {
return False;
}
if (!(strcsequal(str1,"z") && strcsequal(str2,"")))
return(False);
*rparam_len = 4;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
*rdata_len = 0;
if (skip_string(param,tpscnt,QueueName) == NULL) {
return False;
}
snum = print_queue_snum(QueueName);
if (snum == -1) {
errcode = NERR_JobNotFound;
goto out;
}
switch (function) {
case 74:
if (print_queue_pause(¤t_user, snum, &werr)) errcode = NERR_Success;
break;
case 75:
if (print_queue_resume(¤t_user, snum, &werr)) errcode = NERR_Success;
break;
case 103:
if (print_queue_purge(¤t_user, snum, &werr)) errcode = NERR_Success;
break;
}
if (!W_ERROR_IS_OK(werr)) errcode = W_ERROR_V(werr);
out:
SSVAL(*rparam,0,errcode);
SSVAL(*rparam,2,0);
return(True);
}
static int check_printjob_info(struct pack_desc* desc,
int uLevel, char* id)
{
desc->subformat = NULL;
switch( uLevel ) {
case 0: desc->format = "W"; break;
case 1: desc->format = "WB21BB16B10zWWzDDz"; break;
case 2: desc->format = "WWzWWDDzz"; break;
case 3: desc->format = "WWzWWDDzzzzzzzzzzlz"; break;
case 4: desc->format = "WWzWWDDzzzzzDDDDDDD"; break;
default:
DEBUG(0,("check_printjob_info: invalid level %d\n",
uLevel ));
return False;
}
if (id == NULL || strcmp(desc->format,id) != 0) {
DEBUG(0,("check_printjob_info: invalid format %s\n",
id ? id : "<NULL>" ));
return False;
}
return True;
}
static BOOL api_PrintJobInfo(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
struct pack_desc desc;
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
uint32 jobid;
fstring sharename;
int uLevel = get_safe_SVAL(param,tpscnt,p,2,-1);
int function = get_safe_SVAL(param,tpscnt,p,4,-1);
int place, errcode;
if (!str1 || !str2 || !p) {
return False;
}
if (!is_offset_safe(param,tpscnt,p,1)) {
return False;
}
if(!rap_to_pjobid(SVAL(p,0), sharename, &jobid))
return False;
*rparam_len = 4;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
if (!share_defined(sharename)) {
DEBUG(0,("api_PrintJobInfo: sharen [%s] not defined\n",
sharename));
return False;
}
*rdata_len = 0;
if ((strcmp(str1,"WWsTP")) ||
(!check_printjob_info(&desc,uLevel,str2)))
return(False);
if (!print_job_exists(sharename, jobid)) {
errcode=NERR_JobNotFound;
goto out;
}
errcode = NERR_notsupported;
switch (function) {
case 0x6:
place = SVAL(data,0);
if (print_job_set_place(sharename, jobid, place)) {
errcode=NERR_Success;
}
break;
case 0xb:
if (print_job_set_name(sharename, jobid, data)) {
errcode=NERR_Success;
}
break;
default:
return False;
}
out:
SSVALS(*rparam,0,errcode);
SSVAL(*rparam,2,0);
return(True);
}
static BOOL api_RNetServerGetInfo(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
char *p2;
int struct_len;
if (!str1 || !str2 || !p) {
return False;
}
DEBUG(4,("NetServerGetInfo level %d\n",uLevel));
if (!prefix_ok(str1,"WrLh")) {
return False;
}
switch( uLevel ) {
case 0:
if (strcmp(str2,"B16") != 0) {
return False;
}
struct_len = 16;
break;
case 1:
if (strcmp(str2,"B16BBDz") != 0) {
return False;
}
struct_len = 26;
break;
case 2:
if (strcmp(str2,"B16BBDzDDDWWzWWWWWWWBB21zWWWWWWWWWWWWWWWWWWWWWWz")!= 0) {
return False;
}
struct_len = 134;
break;
case 3:
if (strcmp(str2,"B16BBDzDDDWWzWWWWWWWBB21zWWWWWWWWWWWWWWWWWWWWWWzDWz") != 0) {
return False;
}
struct_len = 144;
break;
case 20:
if (strcmp(str2,"DN") != 0) {
return False;
}
struct_len = 6;
break;
case 50:
if (strcmp(str2,"B16BBDzWWzzz") != 0) {
return False;
}
struct_len = 42;
break;
default:
return False;
}
*rdata_len = mdrcnt;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
p = *rdata;
p2 = p + struct_len;
if (uLevel != 20) {
srvstr_push(NULL, p,global_myname(),16,
STR_ASCII|STR_UPPER|STR_TERMINATE);
}
p += 16;
if (uLevel > 0) {
struct srv_info_struct *servers=NULL;
int i,count;
pstring comment;
uint32 servertype= lp_default_server_announce();
push_ascii(comment,lp_serverstring(), MAX_SERVER_STRING_LENGTH,STR_TERMINATE);
if ((count=get_server_info(SV_TYPE_ALL,&servers,lp_workgroup()))>0) {
for (i=0;i<count;i++) {
if (strequal(servers[i].name,global_myname())) {
servertype = servers[i].type;
push_ascii(comment,servers[i].comment,sizeof(pstring),STR_TERMINATE);
}
}
}
SAFE_FREE(servers);
SCVAL(p,0,lp_major_announce_version());
SCVAL(p,1,lp_minor_announce_version());
SIVAL(p,2,servertype);
if (mdrcnt == struct_len) {
SIVAL(p,6,0);
} else {
SIVAL(p,6,PTR_DIFF(p2,*rdata));
standard_sub_advanced(lp_servicename(SNUM(conn)), conn->user,
conn->connectpath, conn->gid,
get_current_username(),
current_user_info.domain,
comment, sizeof(comment));
StrnCpy(p2,comment,MAX(mdrcnt - struct_len,0));
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
}
}
if (uLevel > 1) {
return False;
}
*rdata_len = PTR_DIFF(p2,*rdata);
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVAL(*rparam,0,NERR_Success);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,*rdata_len);
return True;
}
static BOOL api_NetWkstaGetInfo(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
char *p2;
int level = get_safe_SVAL(param,tpscnt,p,0,-1);
if (!str1 || !str2 || !p) {
return False;
}
DEBUG(4,("NetWkstaGetInfo level %d\n",level));
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
if (!(level==10 && strcsequal(str1,"WrLh") && strcsequal(str2,"zzzBBzz"))) {
return False;
}
*rdata_len = mdrcnt + 1024;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
SSVAL(*rparam,0,NERR_Success);
SSVAL(*rparam,2,0);
p = *rdata;
p2 = get_safe_ptr(*rdata,*rdata_len,p,22);
if (!p2) {
return False;
}
SIVAL(p,0,PTR_DIFF(p2,*rdata));
pstrcpy(p2,get_local_machine_name());
strupper_m(p2);
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
p += 4;
SIVAL(p,0,PTR_DIFF(p2,*rdata));
pstrcpy(p2,current_user_info.smb_name);
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
p += 4;
SIVAL(p,0,PTR_DIFF(p2,*rdata));
pstrcpy(p2,lp_workgroup());
strupper_m(p2);
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
p += 4;
SCVAL(p,0,lp_major_announce_version());
SCVAL(p,1,lp_minor_announce_version());
p += 2;
SIVAL(p,0,PTR_DIFF(p2,*rdata));
pstrcpy(p2,lp_workgroup());
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
p += 4;
SIVAL(p,0,PTR_DIFF(p2,*rdata));
pstrcpy(p2,"");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
p += 4;
*rdata_len = PTR_DIFF(p2,*rdata);
SSVAL(*rparam,4,*rdata_len);
return True;
}
#define usri11_name 0
#define usri11_pad 21
#define usri11_comment 22
#define usri11_usr_comment 26
#define usri11_full_name 30
#define usri11_priv 34
#define usri11_auth_flags 36
#define usri11_password_age 40
#define usri11_homedir 44
#define usri11_parms 48
#define usri11_last_logon 52
#define usri11_last_logoff 56
#define usri11_bad_pw_count 60
#define usri11_num_logons 62
#define usri11_logon_server 64
#define usri11_country_code 68
#define usri11_workstations 70
#define usri11_max_storage 74
#define usri11_units_per_week 78
#define usri11_logon_hours 80
#define usri11_code_page 84
#define usri11_end 86
#define USER_PRIV_GUEST 0
#define USER_PRIV_USER 1
#define USER_PRIV_ADMIN 2
#define AF_OP_PRINT 0
#define AF_OP_COMM 1
#define AF_OP_SERVER 2
#define AF_OP_ACCOUNTS 3
static BOOL api_RNetUserGetInfo(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *UserName = skip_string(param,tpscnt,str2);
char *p = skip_string(param,tpscnt,UserName);
int uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
char *p2;
const char *level_string;
user_struct *vuser = get_valid_user_struct(vuid);
if(vuser != NULL) {
DEBUG(3,(" Username of UID %d is %s\n", (int)vuser->uid,
vuser->user.unix_name));
}
if (!str1 || !str2 || !UserName || !p) {
return False;
}
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
DEBUG(4,("RNetUserGetInfo level=%d\n", uLevel));
if (strcmp(str1,"zWrLh") != 0) {
return False;
}
switch( uLevel ) {
case 0: level_string = "B21"; break;
case 1: level_string = "B21BB16DWzzWz"; break;
case 2: level_string = "B21BB16DWzzWzDzzzzDDDDWb21WWzWW"; break;
case 10: level_string = "B21Bzzz"; break;
case 11: level_string = "B21BzzzWDDzzDDWWzWzDWb21W"; break;
default: return False;
}
if (strcmp(level_string,str2) != 0) {
return False;
}
*rdata_len = mdrcnt + 1024;
*rdata = SMB_REALLOC_LIMIT(*rdata,*rdata_len);
if (!*rdata) {
return False;
}
SSVAL(*rparam,0,NERR_Success);
SSVAL(*rparam,2,0);
p = *rdata;
p2 = get_safe_ptr(*rdata,*rdata_len,p,usri11_end);
if (!p2) {
return False;
}
memset(p,0,21);
fstrcpy(p+usri11_name,UserName);
if (uLevel > 0) {
SCVAL(p,usri11_pad,0);
*p2 = 0;
}
if (uLevel >= 10) {
SIVAL(p,usri11_comment,PTR_DIFF(p2,p));
pstrcpy(p2,"Comment");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVAL(p,usri11_usr_comment,PTR_DIFF(p2,p));
pstrcpy(p2,"UserComment");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVAL(p,usri11_full_name,PTR_DIFF(p2,p));
pstrcpy(p2,((vuser != NULL) ? vuser->user.full_name : UserName));
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
}
if (uLevel == 11) {
SSVAL(p,usri11_priv,conn->admin_user?USER_PRIV_ADMIN:USER_PRIV_USER);
SIVAL(p,usri11_auth_flags,AF_OP_PRINT);
SIVALS(p,usri11_password_age,-1);
SIVAL(p,usri11_homedir,PTR_DIFF(p2,p));
pstrcpy(p2, vuser && vuser->homedir ? vuser->homedir : "");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVAL(p,usri11_parms,PTR_DIFF(p2,p));
pstrcpy(p2,"");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVAL(p,usri11_last_logon,0);
SIVAL(p,usri11_last_logoff,0);
SSVALS(p,usri11_bad_pw_count,-1);
SSVALS(p,usri11_num_logons,-1);
SIVAL(p,usri11_logon_server,PTR_DIFF(p2,p));
pstrcpy(p2,"\\\\*");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SSVAL(p,usri11_country_code,0);
SIVAL(p,usri11_workstations,PTR_DIFF(p2,p));
pstrcpy(p2,"");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVALS(p,usri11_max_storage,-1);
SSVAL(p,usri11_units_per_week,168);
SIVAL(p,usri11_logon_hours,PTR_DIFF(p2,p));
memset(p2,0xff,21);
SCVAL(p2,21,0);
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SSVAL(p,usri11_code_page,0);
}
if (uLevel == 1 || uLevel == 2) {
memset(p+22,' ',16);
SIVALS(p,38,-1);
SSVAL(p,42,
conn->admin_user?USER_PRIV_ADMIN:USER_PRIV_USER);
SIVAL(p,44,PTR_DIFF(p2,*rdata));
pstrcpy(p2, vuser && vuser->homedir ? vuser->homedir : "");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVAL(p,48,PTR_DIFF(p2,*rdata));
*p2++ = 0;
SSVAL(p,52,0);
SIVAL(p,54,PTR_DIFF(p2,*rdata));
pstrcpy(p2,vuser && vuser->logon_script ? vuser->logon_script : "");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
if (uLevel == 2) {
SIVAL(p,60,0);
SIVAL(p,64,PTR_DIFF(p2,*rdata));
pstrcpy(p2,((vuser != NULL) ? vuser->user.full_name : UserName));
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVAL(p,68,0);
SIVAL(p,72,PTR_DIFF(p2,*rdata));
pstrcpy(p2,"");
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SIVAL(p,76,0);
SIVAL(p,80,0);
SIVAL(p,84,0);
SIVALS(p,88,-1);
SIVALS(p,92,-1);
SSVAL(p,96,168);
SIVAL(p,98,PTR_DIFF(p2,*rdata));
memset(p2,-1,21);
p2 += 21;
SSVALS(p,102,-1);
SSVALS(p,104,-1);
SIVAL(p,106,PTR_DIFF(p2,*rdata));
{
pstring tmp;
pstrcpy(tmp, "\\\\%L");
standard_sub_basic("", "", tmp, sizeof(tmp));
pstrcpy(p2, tmp);
}
p2 = skip_string(*rdata,*rdata_len,p2);
if (!p2) {
return False;
}
SSVAL(p,110,49);
SSVAL(p,112,860);
}
}
*rdata_len = PTR_DIFF(p2,*rdata);
SSVAL(*rparam,4,*rdata_len);
return(True);
}
static BOOL api_WWkstaUserLogon(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel;
struct pack_desc desc;
char* name;
user_struct *vuser = get_valid_user_struct(vuid);
if (!str1 || !str2 || !p) {
return False;
}
if(vuser != NULL) {
DEBUG(3,(" Username of UID %d is %s\n", (int)vuser->uid,
vuser->user.unix_name));
}
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
name = get_safe_str_ptr(param,tpscnt,p,2);
if (!name) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
DEBUG(3,("WWkstaUserLogon uLevel=%d name=%s\n",uLevel,name));
if (strcmp(str1,"OOWb54WrLh") != 0) {
return False;
}
if (uLevel != 1 || strcmp(str2,"WB21BWDWWDDDDDDDzzzD") != 0) {
return False;
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
}
desc.base = *rdata;
desc.buflen = mdrcnt;
desc.subformat = NULL;
desc.format = str2;
if (init_package(&desc,1,0)) {
PACKI(&desc,"W",0);
PACKS(&desc,"B21",name);
PACKS(&desc,"B","");
PACKI(&desc,"W", conn->admin_user?USER_PRIV_ADMIN:USER_PRIV_USER);
PACKI(&desc,"D",0);
PACKI(&desc,"W",0);
PACKI(&desc,"W",0);
PACKI(&desc,"D",0);
PACKI(&desc,"D",-1);
PACKI(&desc,"D",-1);
PACKI(&desc,"D",-1);
PACKI(&desc,"D",0);
PACKI(&desc,"D",0);
PACKI(&desc,"D",-1);
{
fstring mypath;
fstrcpy(mypath,"\\\\");
fstrcat(mypath,get_local_machine_name());
strupper_m(mypath);
PACKS(&desc,"z",mypath);
}
PACKS(&desc,"z",lp_workgroup());
PACKS(&desc,"z", vuser && vuser->logon_script ? vuser->logon_script :"");
PACKI(&desc,"D",0x00000000);
}
*rdata_len = desc.usedlen;
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,desc.neededlen);
DEBUG(4,("WWkstaUserLogon: errorcode %d\n",desc.errcode));
return True;
}
static BOOL api_WAccessGetUserPerms(connection_struct *conn,uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *user = skip_string(param,tpscnt,str2);
char *resource = skip_string(param,tpscnt,user);
if (!str1 || !str2 || !user || !resource) {
return False;
}
if (skip_string(param,tpscnt,resource) == NULL) {
return False;
}
DEBUG(3,("WAccessGetUserPerms user=%s resource=%s\n",user,resource));
if (strcmp(str1,"zzh") != 0) {
return False;
}
if (strcmp(str2,"") != 0) {
return False;
}
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,0);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,0x7f);
return True;
}
static BOOL api_WPrintJobGetInfo(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel;
int count;
int i;
int snum;
fstring sharename;
uint32 jobid;
struct pack_desc desc;
print_queue_struct *queue=NULL;
print_status_struct status;
char *tmpdata=NULL;
if (!str1 || !str2 || !p) {
return False;
}
uLevel = get_safe_SVAL(param,tpscnt,p,2,-1);
memset((char *)&desc,'\0',sizeof(desc));
memset((char *)&status,'\0',sizeof(status));
DEBUG(3,("WPrintJobGetInfo uLevel=%d uJobId=0x%X\n",uLevel,SVAL(p,0)));
if (strcmp(str1,"WWrLh") != 0) {
return False;
}
if (!check_printjob_info(&desc,uLevel,str2)) {
return False;
}
if(!rap_to_pjobid(SVAL(p,0), sharename, &jobid)) {
return False;
}
snum = lp_servicenumber( sharename);
if (snum < 0 || !VALID_SNUM(snum)) {
return(False);
}
count = print_queue_status(snum,&queue,&status);
for (i = 0; i < count; i++) {
if (queue[i].job == jobid) {
break;
}
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
desc.base = *rdata;
desc.buflen = mdrcnt;
} else {
desc.buflen = getlen(desc.format);
desc.base = tmpdata = (char *)SMB_MALLOC( desc.buflen );
}
if (init_package(&desc,1,0)) {
if (i < count) {
fill_printjob_info(conn,snum,uLevel,&desc,&queue[i],i);
*rdata_len = desc.usedlen;
} else {
desc.errcode = NERR_JobNotFound;
*rdata_len = 0;
}
}
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,desc.neededlen);
SAFE_FREE(queue);
SAFE_FREE(tmpdata);
DEBUG(4,("WPrintJobGetInfo: errorcode %d\n",desc.errcode));
return True;
}
static BOOL api_WPrintJobEnumerate(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
char *name = p;
int uLevel;
int count;
int i, succnt=0;
int snum;
struct pack_desc desc;
print_queue_struct *queue=NULL;
print_status_struct status;
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
memset((char *)&status,'\0',sizeof(status));
p = skip_string(param,tpscnt,p);
if (!p) {
return False;
}
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
DEBUG(3,("WPrintJobEnumerate uLevel=%d name=%s\n",uLevel,name));
if (strcmp(str1,"zWrLeh") != 0) {
return False;
}
if (uLevel > 2) {
return False;
}
if (!check_printjob_info(&desc,uLevel,str2)) {
return False;
}
snum = find_service(name);
if ( !(lp_snum_ok(snum) && lp_print_ok(snum)) ) {
return False;
}
count = print_queue_status(snum,&queue,&status);
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
}
desc.base = *rdata;
desc.buflen = mdrcnt;
if (init_package(&desc,count,0)) {
succnt = 0;
for (i = 0; i < count; i++) {
fill_printjob_info(conn,snum,uLevel,&desc,&queue[i],i);
if (desc.errcode == NERR_Success) {
succnt = i+1;
}
}
}
*rdata_len = desc.usedlen;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,succnt);
SSVAL(*rparam,6,count);
SAFE_FREE(queue);
DEBUG(4,("WPrintJobEnumerate: errorcode %d\n",desc.errcode));
return True;
}
static int check_printdest_info(struct pack_desc* desc,
int uLevel, char* id)
{
desc->subformat = NULL;
switch( uLevel ) {
case 0:
desc->format = "B9";
break;
case 1:
desc->format = "B9B21WWzW";
break;
case 2:
desc->format = "z";
break;
case 3:
desc->format = "zzzWWzzzWW";
break;
default:
DEBUG(0,("check_printdest_info: invalid level %d\n",
uLevel));
return False;
}
if (id == NULL || strcmp(desc->format,id) != 0) {
DEBUG(0,("check_printdest_info: invalid string %s\n",
id ? id : "<NULL>" ));
return False;
}
return True;
}
static void fill_printdest_info(connection_struct *conn, int snum, int uLevel,
struct pack_desc* desc)
{
char buf[100];
strncpy(buf,SERVICE(snum),sizeof(buf)-1);
buf[sizeof(buf)-1] = 0;
strupper_m(buf);
if (uLevel <= 1) {
PACKS(desc,"B9",buf);
if (uLevel == 1) {
PACKS(desc,"B21","");
PACKI(desc,"W",0);
PACKI(desc,"W",0);
PACKS(desc,"z","");
PACKI(desc,"W",0);
}
}
if (uLevel == 2 || uLevel == 3) {
PACKS(desc,"z",buf);
if (uLevel == 3) {
PACKS(desc,"z","");
PACKS(desc,"z","");
PACKI(desc,"W",0);
PACKI(desc,"W",0);
PACKS(desc,"z","");
PACKS(desc,"z","");
PACKS(desc,"z","NULL");
PACKI(desc,"W",0);
PACKI(desc,"W",0);
}
}
}
static BOOL api_WPrintDestGetInfo(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
char* PrinterName = p;
int uLevel;
struct pack_desc desc;
int snum;
char *tmpdata=NULL;
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
p = skip_string(param,tpscnt,p);
if (!p) {
return False;
}
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
DEBUG(3,("WPrintDestGetInfo uLevel=%d PrinterName=%s\n",uLevel,PrinterName));
if (strcmp(str1,"zWrLh") != 0) {
return False;
}
if (!check_printdest_info(&desc,uLevel,str2)) {
return False;
}
snum = find_service(PrinterName);
if ( !(lp_snum_ok(snum) && lp_print_ok(snum)) ) {
*rdata_len = 0;
desc.errcode = NERR_DestNotFound;
desc.neededlen = 0;
} else {
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
desc.base = *rdata;
desc.buflen = mdrcnt;
} else {
desc.buflen = getlen(desc.format);
desc.base = tmpdata = (char *)SMB_MALLOC( desc.buflen );
}
if (init_package(&desc,1,0)) {
fill_printdest_info(conn,snum,uLevel,&desc);
}
*rdata_len = desc.usedlen;
}
*rparam_len = 6;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,desc.neededlen);
DEBUG(4,("WPrintDestGetInfo: errorcode %d\n",desc.errcode));
SAFE_FREE(tmpdata);
return True;
}
static BOOL api_WPrintDestEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel;
int queuecnt;
int i, n, succnt=0;
struct pack_desc desc;
int services = lp_numservices();
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
DEBUG(3,("WPrintDestEnum uLevel=%d\n",uLevel));
if (strcmp(str1,"WrLeh") != 0) {
return False;
}
if (!check_printdest_info(&desc,uLevel,str2)) {
return False;
}
queuecnt = 0;
for (i = 0; i < services; i++) {
if (lp_snum_ok(i) && lp_print_ok(i) && lp_browseable(i)) {
queuecnt++;
}
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
}
desc.base = *rdata;
desc.buflen = mdrcnt;
if (init_package(&desc,queuecnt,0)) {
succnt = 0;
n = 0;
for (i = 0; i < services; i++) {
if (lp_snum_ok(i) && lp_print_ok(i) && lp_browseable(i)) {
fill_printdest_info(conn,i,uLevel,&desc);
n++;
if (desc.errcode == NERR_Success) {
succnt = n;
}
}
}
}
*rdata_len = desc.usedlen;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,succnt);
SSVAL(*rparam,6,queuecnt);
DEBUG(4,("WPrintDestEnumerate: errorcode %d\n",desc.errcode));
return True;
}
static BOOL api_WPrintDriverEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel;
int succnt;
struct pack_desc desc;
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
DEBUG(3,("WPrintDriverEnum uLevel=%d\n",uLevel));
if (strcmp(str1,"WrLeh") != 0) {
return False;
}
if (uLevel != 0 || strcmp(str2,"B41") != 0) {
return False;
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
}
desc.base = *rdata;
desc.buflen = mdrcnt;
if (init_package(&desc,1,0)) {
PACKS(&desc,"B41","NULL");
}
succnt = (desc.errcode == NERR_Success ? 1 : 0);
*rdata_len = desc.usedlen;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,succnt);
SSVAL(*rparam,6,1);
DEBUG(4,("WPrintDriverEnum: errorcode %d\n",desc.errcode));
return True;
}
static BOOL api_WPrintQProcEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel;
int succnt;
struct pack_desc desc;
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
DEBUG(3,("WPrintQProcEnum uLevel=%d\n",uLevel));
if (strcmp(str1,"WrLeh") != 0) {
return False;
}
if (uLevel != 0 || strcmp(str2,"B13") != 0) {
return False;
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
}
desc.base = *rdata;
desc.buflen = mdrcnt;
desc.format = str2;
if (init_package(&desc,1,0)) {
PACKS(&desc,"B13","lpd");
}
succnt = (desc.errcode == NERR_Success ? 1 : 0);
*rdata_len = desc.usedlen;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,succnt);
SSVAL(*rparam,6,1);
DEBUG(4,("WPrintQProcEnum: errorcode %d\n",desc.errcode));
return True;
}
static BOOL api_WPrintPortEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel;
int succnt;
struct pack_desc desc;
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
DEBUG(3,("WPrintPortEnum uLevel=%d\n",uLevel));
if (strcmp(str1,"WrLeh") != 0) {
return False;
}
if (uLevel != 0 || strcmp(str2,"B9") != 0) {
return False;
}
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
return False;
}
}
memset((char *)&desc,'\0',sizeof(desc));
desc.base = *rdata;
desc.buflen = mdrcnt;
desc.format = str2;
if (init_package(&desc,1,0)) {
PACKS(&desc,"B13","lp0");
}
succnt = (desc.errcode == NERR_Success ? 1 : 0);
*rdata_len = desc.usedlen;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,succnt);
SSVAL(*rparam,6,1);
DEBUG(4,("WPrintPortEnum: errorcode %d\n",desc.errcode));
return True;
}
static BOOL api_RNetSessionEnum(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt,int mprcnt,
char **rdata,char **rparam,
int *rdata_len,int *rparam_len)
{
char *str1 = get_safe_str_ptr(param,tpscnt,param,2);
char *str2 = skip_string(param,tpscnt,str1);
char *p = skip_string(param,tpscnt,str2);
int uLevel;
struct pack_desc desc;
struct sessionid *session_list = NULL;
int i, num_sessions;
if (!str1 || !str2 || !p) {
return False;
}
memset((char *)&desc,'\0',sizeof(desc));
uLevel = get_safe_SVAL(param,tpscnt,p,0,-1);
DEBUG(3,("RNetSessionEnum uLevel=%d\n",uLevel));
DEBUG(7,("RNetSessionEnum req string=%s\n",str1));
DEBUG(7,("RNetSessionEnum ret string=%s\n",str2));
if (strcmp(str1,RAP_NetSessionEnum_REQ) != 0) {
return False;
}
if (uLevel != 2 || strcmp(str2,RAP_SESSION_INFO_L2) != 0) {
return False;
}
num_sessions = list_sessions(&session_list);
if (mdrcnt > 0) {
*rdata = SMB_REALLOC_LIMIT(*rdata,mdrcnt);
if (!*rdata) {
SAFE_FREE(session_list);
return False;
}
}
memset((char *)&desc,'\0',sizeof(desc));
desc.base = *rdata;
desc.buflen = mdrcnt;
desc.format = str2;
if (!init_package(&desc,num_sessions,0)) {
SAFE_FREE(session_list);
return False;
}
for(i=0; i<num_sessions; i++) {
PACKS(&desc, "z", session_list[i].remote_machine);
PACKS(&desc, "z", session_list[i].username);
PACKI(&desc, "W", 1);
PACKI(&desc, "W", 0);
PACKI(&desc, "W", 1);
PACKI(&desc, "D", 0);
PACKI(&desc, "D", 0);
PACKI(&desc, "D", 0);
PACKS(&desc, "z", "Unknown Client");
}
*rdata_len = desc.usedlen;
*rparam_len = 8;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
SAFE_FREE(session_list);
return False;
}
SSVALS(*rparam,0,desc.errcode);
SSVAL(*rparam,2,0);
SSVAL(*rparam,4,num_sessions);
DEBUG(4,("RNetSessionEnum: errorcode %d\n",desc.errcode));
SAFE_FREE(session_list);
return True;
}
static BOOL api_TooSmall(connection_struct *conn,uint16 vuid, char *param, char *data,
int mdrcnt, int mprcnt,
char **rdata, char **rparam,
int *rdata_len, int *rparam_len)
{
*rparam_len = MIN(*rparam_len,mprcnt);
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
*rdata_len = 0;
SSVAL(*rparam,0,NERR_BufTooSmall);
DEBUG(3,("Supplied buffer too small in API command\n"));
return True;
}
static BOOL api_Unsupported(connection_struct *conn, uint16 vuid,
char *param, int tpscnt,
char *data, int tdscnt,
int mdrcnt, int mprcnt,
char **rdata, char **rparam,
int *rdata_len, int *rparam_len)
{
*rparam_len = 4;
*rparam = SMB_REALLOC_LIMIT(*rparam,*rparam_len);
if (!*rparam) {
return False;
}
*rdata_len = 0;
SSVAL(*rparam,0,NERR_notsupported);
SSVAL(*rparam,2,0);
DEBUG(3,("Unsupported API command\n"));
return True;
}
static const struct {
const char *name;
int id;
BOOL (*fn)(connection_struct *, uint16,
char *, int,
char *, int,
int,int,char **,char **,int *,int *);
BOOL auth_user;
} api_commands[] = {
{"RNetShareEnum", RAP_WshareEnum, api_RNetShareEnum, True},
{"RNetShareGetInfo", RAP_WshareGetInfo, api_RNetShareGetInfo},
{"RNetShareAdd", RAP_WshareAdd, api_RNetShareAdd},
{"RNetSessionEnum", RAP_WsessionEnum, api_RNetSessionEnum, True},
{"RNetServerGetInfo", RAP_WserverGetInfo, api_RNetServerGetInfo},
{"RNetGroupEnum", RAP_WGroupEnum, api_RNetGroupEnum, True},
{"RNetGroupGetUsers", RAP_WGroupGetUsers, api_RNetGroupGetUsers, True},
{"RNetUserEnum", RAP_WUserEnum, api_RNetUserEnum, True},
{"RNetUserGetInfo", RAP_WUserGetInfo, api_RNetUserGetInfo},
{"NetUserGetGroups", RAP_WUserGetGroups, api_NetUserGetGroups},
{"NetWkstaGetInfo", RAP_WWkstaGetInfo, api_NetWkstaGetInfo},
{"DosPrintQEnum", RAP_WPrintQEnum, api_DosPrintQEnum, True},
{"DosPrintQGetInfo", RAP_WPrintQGetInfo, api_DosPrintQGetInfo},
{"WPrintQueuePause", RAP_WPrintQPause, api_WPrintQueueCtrl},
{"WPrintQueueResume", RAP_WPrintQContinue, api_WPrintQueueCtrl},
{"WPrintJobEnumerate",RAP_WPrintJobEnum, api_WPrintJobEnumerate},
{"WPrintJobGetInfo", RAP_WPrintJobGetInfo, api_WPrintJobGetInfo},
{"RDosPrintJobDel", RAP_WPrintJobDel, api_RDosPrintJobDel},
{"RDosPrintJobPause", RAP_WPrintJobPause, api_RDosPrintJobDel},
{"RDosPrintJobResume",RAP_WPrintJobContinue, api_RDosPrintJobDel},
{"WPrintDestEnum", RAP_WPrintDestEnum, api_WPrintDestEnum},
{"WPrintDestGetInfo", RAP_WPrintDestGetInfo, api_WPrintDestGetInfo},
{"NetRemoteTOD", RAP_NetRemoteTOD, api_NetRemoteTOD},
{"WPrintQueuePurge", RAP_WPrintQPurge, api_WPrintQueueCtrl},
{"NetServerEnum", RAP_NetServerEnum2, api_RNetServerEnum},
{"WAccessGetUserPerms",RAP_WAccessGetUserPerms,api_WAccessGetUserPerms},
{"SetUserPassword", RAP_WUserPasswordSet2, api_SetUserPassword},
{"WWkstaUserLogon", RAP_WWkstaUserLogon, api_WWkstaUserLogon},
{"PrintJobInfo", RAP_WPrintJobSetInfo, api_PrintJobInfo},
{"WPrintDriverEnum", RAP_WPrintDriverEnum, api_WPrintDriverEnum},
{"WPrintQProcEnum", RAP_WPrintQProcessorEnum,api_WPrintQProcEnum},
{"WPrintPortEnum", RAP_WPrintPortEnum, api_WPrintPortEnum},
{"SamOEMChangePassword",RAP_SamOEMChgPasswordUser2_P,api_SamOEMChangePassword},
{NULL, -1, api_Unsupported}
};
int api_reply(connection_struct *conn,uint16 vuid,char *outbuf,char *data,char *params,
int tdscnt,int tpscnt,int mdrcnt,int mprcnt)
{
int api_command;
char *rdata = NULL;
char *rparam = NULL;
const char *name1 = NULL;
const char *name2 = NULL;
int rdata_len = 0;
int rparam_len = 0;
BOOL reply=False;
int i;
if (!params) {
DEBUG(0,("ERROR: NULL params in api_reply()\n"));
return 0;
}
if (tpscnt < 2) {
return 0;
}
api_command = SVAL(params,0);
if (skip_string(params,tpscnt,params+2)) {
name1 = params + 2;
} else {
name1 = "";
}
name2 = skip_string(params,tpscnt,params+2);
if (!name2) {
name2 = "";
}
DEBUG(3,("Got API command %d of form <%s> <%s> (tdscnt=%d,tpscnt=%d,mdrcnt=%d,mprcnt=%d)\n",
api_command,
name1,
name2,
tdscnt,tpscnt,mdrcnt,mprcnt));
for (i=0;api_commands[i].name;i++) {
if (api_commands[i].id == api_command && api_commands[i].fn) {
DEBUG(3,("Doing %s\n",api_commands[i].name));
break;
}
}
if (api_commands[i].auth_user && lp_restrict_anonymous()) {
user_struct *user = get_valid_user_struct(vuid);
if (!user || user->guest) {
return ERROR_NT(NT_STATUS_ACCESS_DENIED);
}
}
rdata = (char *)SMB_MALLOC(1024);
if (rdata) {
memset(rdata,'\0',1024);
}
rparam = (char *)SMB_MALLOC(1024);
if (rparam) {
memset(rparam,'\0',1024);
}
if(!rdata || !rparam) {
DEBUG(0,("api_reply: malloc fail !\n"));
SAFE_FREE(rdata);
SAFE_FREE(rparam);
return -1;
}
reply = api_commands[i].fn(conn,
vuid,
params,tpscnt,
data,tdscnt,
mdrcnt,mprcnt,
&rdata,&rparam,&rdata_len,&rparam_len);
if (rdata_len > mdrcnt || rparam_len > mprcnt) {
reply = api_TooSmall(conn,vuid,params,data,mdrcnt,mprcnt,
&rdata,&rparam,&rdata_len,&rparam_len);
}
if (!reply) {
reply = api_Unsupported(conn,vuid,params,tpscnt,data,tdscnt,mdrcnt,mprcnt,
&rdata,&rparam,&rdata_len,&rparam_len);
}
if (reply) {
send_trans_reply(outbuf, rparam, rparam_len, rdata, rdata_len, False);
}
SAFE_FREE(rdata);
SAFE_FREE(rparam);
return -1;
}