summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorGünther Deschner <gd@samba.org>2006-09-29 01:27:54 +0000
committerGerald (Jerry) Carter <jerry@samba.org>2007-10-10 12:14:53 -0500
commit372750387297ca91533ff2ed503fac57468a6438 (patch)
treef789454c61fe5b5f66c0539da7c12eb4d5760cde
parent4db2fc3c89173d275d5088ffd6620b7f7f0f2fcf (diff)
downloadsamba-372750387297ca91533ff2ed503fac57468a6438.tar.gz
samba-372750387297ca91533ff2ed503fac57468a6438.tar.bz2
samba-372750387297ca91533ff2ed503fac57468a6438.zip
r18986: Add some more GPO download helper functions.
Guenther (This used to be commit d2db3b6b4695038374d0848e1ce981ccf0ae8c24)
-rw-r--r--source3/Makefile.in3
-rw-r--r--source3/include/gpo.h3
-rw-r--r--source3/libgpo/gpo_fetch.c237
3 files changed, 242 insertions, 1 deletions
diff --git a/source3/Makefile.in b/source3/Makefile.in
index 19bd0afbf3..1120228ba4 100644
--- a/source3/Makefile.in
+++ b/source3/Makefile.in
@@ -267,7 +267,8 @@ LIBADDNS_OBJ0 = libaddns/dnsrecord.o libaddns/dnsrequest.o libaddns/dnsresponse.
libaddns/dnsupresp.o libaddns/dnsupdate.o libaddns/dnsgss.o
LIBADDNS_OBJ = $(LIBADDNS_OBJ0) $(TALLOC_OBJ)
-LIBGPO_OBJ0 = libgpo/gpo_ldap.o libgpo/gpo_parse.o libgpo/gpo_util.o
+LIBGPO_OBJ0 = libgpo/gpo_ldap.o libgpo/gpo_parse.o libgpo/gpo_util.o \
+ libgpo/gpo_fetch.o
LIBGPO_OBJ = $(LIBGPO_OBJ0)
LIBADS_OBJ = libads/ldap.o libads/ldap_printer.o libads/sasl.o \
diff --git a/source3/include/gpo.h b/source3/include/gpo.h
index 24aaaea75d..c3ae20dd20 100644
--- a/source3/include/gpo.h
+++ b/source3/include/gpo.h
@@ -90,3 +90,6 @@ struct GP_EXT {
char **snapins;
char **snapins_guid;
};
+
+#define GPO_CACHE_DIR "gpo_cache"
+#define GPT_INI "GPT.INI"
diff --git a/source3/libgpo/gpo_fetch.c b/source3/libgpo/gpo_fetch.c
new file mode 100644
index 0000000000..23a719a95d
--- /dev/null
+++ b/source3/libgpo/gpo_fetch.c
@@ -0,0 +1,237 @@
+/*
+ * Unix SMB/CIFS implementation.
+ * Group Policy Object Support
+ * Copyright (C) Guenther Deschner 2005-2006
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 2 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program; if not, write to the Free Software
+ * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+ */
+
+#include "includes.h"
+
+/****************************************************************
+ explode the GPO CIFS URI into their components
+****************************************************************/
+
+NTSTATUS ads_gpo_explode_filesyspath(ADS_STRUCT *ads,
+ TALLOC_CTX *mem_ctx,
+ const char *file_sys_path,
+ char **server,
+ char **service,
+ char **nt_path,
+ char **unix_path)
+{
+ fstring tok;
+ pstring path;
+
+ *server = NULL;
+ *service = NULL;
+ *nt_path = NULL;
+ *unix_path = NULL;
+
+ if (!next_token(&file_sys_path, tok, "\\", sizeof(tok))) {
+ return NT_STATUS_INVALID_PARAMETER;
+ }
+
+ if ((*server = talloc_strdup(mem_ctx, tok)) == NULL) {
+ return NT_STATUS_NO_MEMORY;
+ }
+
+ if (!next_token(&file_sys_path, tok, "\\", sizeof(tok))) {
+ return NT_STATUS_INVALID_PARAMETER;
+ }
+
+ if ((*service = talloc_strdup(mem_ctx, tok)) == NULL) {
+ return NT_STATUS_NO_MEMORY;
+ }
+
+ if ((*nt_path = talloc_asprintf(mem_ctx, "\\%s", file_sys_path)) == NULL) {
+ return NT_STATUS_NO_MEMORY;
+ }
+
+ pstrcpy(path, lock_path(GPO_CACHE_DIR));
+ pstrcat(path, "/");
+ pstrcat(path, file_sys_path);
+ pstring_sub(path, "\\", "/");
+
+ if ((*unix_path = talloc_strdup(mem_ctx, path)) == NULL) {
+ return NT_STATUS_NO_MEMORY;
+ }
+
+ return NT_STATUS_OK;
+}
+
+/****************************************************************
+ prepare the local disc storage for "unix_path"
+****************************************************************/
+
+NTSTATUS ads_gpo_prepare_local_store(ADS_STRUCT *ads,
+ TALLOC_CTX *mem_ctx,
+ const char *unix_path)
+{
+ const char *top_dir = lock_path(GPO_CACHE_DIR);
+ char *current_dir;
+ fstring tok;
+
+ current_dir = talloc_strdup(mem_ctx, top_dir);
+ NT_STATUS_HAVE_NO_MEMORY(current_dir);
+
+ if ((mkdir(top_dir, 0644)) < 0 && errno != EEXIST) {
+ return NT_STATUS_ACCESS_DENIED;
+ }
+
+ while (next_token(&unix_path, tok, "/", sizeof(tok))) {
+
+ if (strequal(tok, GPO_CACHE_DIR)) {
+ break;
+ }
+ }
+
+ while (next_token(&unix_path, tok, "/", sizeof(tok))) {
+
+ current_dir = talloc_asprintf_append(current_dir, "/%s", tok);
+ NT_STATUS_HAVE_NO_MEMORY(current_dir);
+
+ if ((mkdir(current_dir, 0644)) < 0 && errno != EEXIST) {
+ return NT_STATUS_ACCESS_DENIED;
+ }
+ }
+
+ return NT_STATUS_OK;
+}
+
+/****************************************************************
+ download a full GPO via CIFS
+****************************************************************/
+
+NTSTATUS ads_fetch_gpo_files(ADS_STRUCT *ads,
+ TALLOC_CTX *mem_ctx,
+ struct cli_state *cli,
+ struct GROUP_POLICY_OBJECT *gpo)
+{
+ NTSTATUS result;
+ int fnum = 0;
+ int fd = 0;
+ char *data = NULL;
+ static int io_bufsize = 64512;
+ int read_size = io_bufsize;
+ char *server, *service, *nt_path, *unix_path, *nt_ini_path, *unix_ini_path;
+ off_t start = 0;
+ off_t nread = 0;
+
+ result = ads_gpo_explode_filesyspath(ads, mem_ctx, gpo->file_sys_path,
+ &server, &service, &nt_path, &unix_path);
+ if (!NT_STATUS_IS_OK(result)) {
+ goto out;
+ }
+
+ result = ads_gpo_prepare_local_store(ads, mem_ctx, unix_path);
+ if (!NT_STATUS_IS_OK(result)) {
+ goto out;
+ }
+
+ unix_ini_path = talloc_asprintf(mem_ctx, "%s/%s", unix_path, GPT_INI);
+ nt_ini_path = talloc_asprintf(mem_ctx, "%s\\%s", nt_path, GPT_INI);
+ if (!unix_path || !nt_ini_path) {
+ result = NT_STATUS_NO_MEMORY;
+ goto out;
+ }
+
+ /* open local file */
+
+ fd = sys_open(unix_ini_path, O_WRONLY|O_CREAT|O_TRUNC, 0644);
+ if (fd == -1) {
+ result = map_nt_error_from_unix(errno);
+ goto out;
+ }
+
+ /* open remote file */
+
+ fnum = cli_open(cli, nt_ini_path, O_RDONLY, DENY_NONE);
+ if (fnum == -1) {
+ result = NT_STATUS_NO_SUCH_FILE;
+ goto out;
+ }
+
+ /* copy gpt.ini */
+
+ data = (char *)SMB_MALLOC(read_size);
+ if (data == NULL) {
+ result = NT_STATUS_NO_MEMORY;
+ goto out;
+ }
+
+ while (1) {
+
+ int n = cli_read(cli, fnum, data, nread + start, read_size);
+
+ if (n <= 0)
+ break;
+
+ if (write(fd, data, n) != n) {
+ break;
+ }
+
+ nread += n;
+ }
+
+ result = NT_STATUS_OK;
+
+ out:
+ SAFE_FREE(data);
+ if (fd) {
+ close(fd);
+ }
+ if (fnum) {
+ cli_close(cli, fnum);
+ }
+
+ return result;
+}
+
+/****************************************************************
+ get the locally stored gpt.ini version number
+****************************************************************/
+
+NTSTATUS ads_gpo_get_sysvol_gpt_version(ADS_STRUCT *ads,
+ TALLOC_CTX *mem_ctx,
+ const char *unix_path,
+ uint32 *sysvol_version,
+ char **display_name)
+{
+ NTSTATUS status;
+ uint32 version;
+ char *local_path = NULL;
+ char *name = NULL;
+
+ local_path = talloc_asprintf(mem_ctx, "%s/%s", unix_path, GPT_INI);
+ NT_STATUS_HAVE_NO_MEMORY(local_path);
+
+ status = parse_gpt_ini(mem_ctx, local_path, &version, &name);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(10,("ads_gpo_get_sysvol_gpt_version: failed to parse ini [%s]: %s\n",
+ unix_path, nt_errstr(status)));
+ return status;
+ }
+
+ if (sysvol_version) {
+ *sysvol_version = version;
+ }
+
+ if (name && *display_name) {
+ *display_name = talloc_strdup(mem_ctx, name);
+ }
+
+ return NT_STATUS_OK;
+}