diff options
Diffstat (limited to 'source4/libnet/groupman.c')
| -rw-r--r-- | source4/libnet/groupman.c | 311 |
1 files changed, 311 insertions, 0 deletions
diff --git a/source4/libnet/groupman.c b/source4/libnet/groupman.c new file mode 100644 index 0000000000..1e12c87713 --- /dev/null +++ b/source4/libnet/groupman.c @@ -0,0 +1,311 @@ +/* + Unix SMB/CIFS implementation. + + Copyright (C) Rafal Szczesniak 2007 + + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 3 of the License, or + (at your option) any later version. + + This program is distributed in the hope that it will be useful, + but WITHOUT ANY WARRANTY; without even the implied warranty of + MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + GNU General Public License for more details. + + You should have received a copy of the GNU General Public License + along with this program. If not, see <http://www.gnu.org/licenses/>. +*/ + +/* + a composite function for manipulating (add/edit/del) groups via samr pipe +*/ + +#include "includes.h" +#include "libcli/composite/composite.h" +#include "libnet/composite.h" +#include "libnet/groupman.h" +#include "librpc/gen_ndr/ndr_samr_c.h" + + +struct groupadd_state { + struct dcerpc_pipe *pipe; + struct policy_handle domain_handle; + struct samr_CreateDomainGroup creategroup; + struct policy_handle group_handle; + uint32_t group_rid; + + void (*monitor_fn)(struct monitor_msg*); +}; + + +static void continue_groupadd_created(struct rpc_request *req); + + +struct composite_context* libnet_rpc_groupadd_send(struct dcerpc_pipe *p, + struct libnet_rpc_groupadd *io, + void (*monitor)(struct monitor_msg*)) +{ + struct composite_context *c; + struct groupadd_state *s; + struct rpc_request *create_req; + + if (!p || !io) return NULL; + + c = composite_create(p, dcerpc_event_context(p)); + if (c == NULL) return NULL; + + s = talloc_zero(c, struct groupadd_state); + if (composite_nomem(s, c)) return c; + + c->private_data = s; + + s->domain_handle = io->in.domain_handle; + s->pipe = p; + s->monitor_fn = monitor; + + s->creategroup.in.domain_handle = &s->domain_handle; + + s->creategroup.in.name = talloc_zero(c, struct lsa_String); + if (composite_nomem(s->creategroup.in.name, c)) return c; + + s->creategroup.in.name->string = talloc_strdup(c, io->in.groupname); + if (composite_nomem(s->creategroup.in.name->string, c)) return c; + + s->creategroup.in.access_mask = 0; + + s->creategroup.out.group_handle = &s->group_handle; + s->creategroup.out.rid = &s->group_rid; + + create_req = dcerpc_samr_CreateDomainGroup_send(s->pipe, c, &s->creategroup); + if (composite_nomem(create_req, c)) return c; + + composite_continue_rpc(c, create_req, continue_groupadd_created, c); + return c; +} + + +NTSTATUS libnet_rpc_groupadd_recv(struct composite_context *c, TALLOC_CTX *mem_ctx, + struct libnet_rpc_groupadd *io) +{ + NTSTATUS status; + struct groupadd_state *s; + + status = composite_wait(c); + if (NT_STATUS_IS_OK(status)) { + s = talloc_get_type(c, struct groupadd_state); + } + + return status; +} + + +static void continue_groupadd_created(struct rpc_request *req) +{ + struct composite_context *c; + struct groupadd_state *s; + + c = talloc_get_type(req->async.private_data, struct composite_context); + s = talloc_get_type(c->private_data, struct groupadd_state); + + c->status = dcerpc_ndr_request_recv(req); + if (!composite_is_ok(c)) return; + + c->status = s->creategroup.out.result; + if (!composite_is_ok(c)) return; + + composite_done(c); +} + + +NTSTATUS libnet_rpc_groupadd(struct dcerpc_pipe *p, TALLOC_CTX *mem_ctx, + struct libnet_rpc_groupadd *io) +{ + struct composite_context *c; + + c = libnet_rpc_groupadd_send(p, io, NULL); + return libnet_rpc_groupadd_recv(c, mem_ctx, io); +} + + +struct groupdel_state { + struct dcerpc_pipe *pipe; + struct policy_handle domain_handle; + struct policy_handle group_handle; + struct samr_LookupNames lookupname; + struct samr_OpenGroup opengroup; + struct samr_DeleteDomainGroup deletegroup; + + /* information about the progress */ + void (*monitor_fn)(struct monitor_msg *); +}; + + +static void continue_groupdel_name_found(struct rpc_request *req); +static void continue_groupdel_group_opened(struct rpc_request *req); +static void continue_groupdel_deleted(struct rpc_request *req); + + +struct composite_context* libnet_rpc_groupdel_send(struct dcerpc_pipe *p, + struct libnet_rpc_groupdel *io, + void (*monitor)(struct monitor_msg*)) +{ + struct composite_context *c; + struct groupdel_state *s; + struct rpc_request *lookup_req; + + /* composite context allocation and setup */ + c = composite_create(p, dcerpc_event_context(p)); + if (c == NULL) return NULL; + + s = talloc_zero(c, struct groupdel_state); + if (composite_nomem(s, c)) return c; + + c->private_data = s; + + /* store function parameters in the state structure */ + s->pipe = p; + s->domain_handle = io->in.domain_handle; + s->monitor_fn = monitor; + + /* prepare parameters to send rpc request */ + s->lookupname.in.domain_handle = &io->in.domain_handle; + s->lookupname.in.num_names = 1; + s->lookupname.in.names = talloc_zero(s, struct lsa_String); + s->lookupname.in.names->string = io->in.groupname; + + /* send the request */ + lookup_req = dcerpc_samr_LookupNames_send(p, c, &s->lookupname); + if (composite_nomem(lookup_req, c)) return c; + + composite_continue_rpc(c, lookup_req, continue_groupdel_name_found, c); + return c; +} + + +static void continue_groupdel_name_found(struct rpc_request *req) +{ + struct composite_context *c; + struct groupdel_state *s; + struct rpc_request *opengroup_req; + + c = talloc_get_type(req->async.private_data, struct composite_context); + s = talloc_get_type(c->private_data, struct groupdel_state); + + /* receive samr_LookupNames result */ + c->status = dcerpc_ndr_request_recv(req); + if (!composite_is_ok(c)) return; + + c->status = s->lookupname.out.result; + if (!NT_STATUS_IS_OK(c->status)) { + composite_error(c, c->status); + return; + } + + /* what to do when there's no group account to delete + and what if there's more than one rid resolved */ + if (!s->lookupname.out.rids.count) { + c->status = NT_STATUS_NO_SUCH_GROUP; + composite_error(c, c->status); + return; + + } else if (!s->lookupname.out.rids.count > 1) { + c->status = NT_STATUS_INVALID_ACCOUNT_NAME; + composite_error(c, c->status); + return; + } + + /* prepare the arguments for rpc call */ + s->opengroup.in.domain_handle = &s->domain_handle; + s->opengroup.in.rid = s->lookupname.out.rids.ids[0]; + s->opengroup.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED; + s->opengroup.out.group_handle = &s->group_handle; + + /* send rpc request */ + opengroup_req = dcerpc_samr_OpenGroup_send(s->pipe, c, &s->opengroup); + if (composite_nomem(opengroup_req, c)) return; + + composite_continue_rpc(c, opengroup_req, continue_groupdel_group_opened, c); +} + + +static void continue_groupdel_group_opened(struct rpc_request *req) +{ + struct composite_context *c; + struct groupdel_state *s; + struct rpc_request *delgroup_req; + + c = talloc_get_type(req->async.private_data, struct composite_context); + s = talloc_get_type(c->private_data, struct groupdel_state); + + /* receive samr_OpenGroup result */ + c->status = dcerpc_ndr_request_recv(req); + if (!composite_is_ok(c)) return; + + c->status = s->opengroup.out.result; + if (!NT_STATUS_IS_OK(c->status)) { + composite_error(c, c->status); + return; + } + + /* prepare the final rpc call arguments */ + s->deletegroup.in.group_handle = &s->group_handle; + s->deletegroup.out.group_handle = &s->group_handle; + + /* send rpc request */ + delgroup_req = dcerpc_samr_DeleteDomainGroup_send(s->pipe, c, &s->deletegroup); + if (composite_nomem(delgroup_req, c)) return; + + /* callback handler setup */ + composite_continue_rpc(c, delgroup_req, continue_groupdel_deleted, c); +} + + +static void continue_groupdel_deleted(struct rpc_request *req) +{ + struct composite_context *c; + struct groupdel_state *s; + + c = talloc_get_type(req->async.private_data, struct composite_context); + s = talloc_get_type(c->private_data, struct groupdel_state); + + /* receive samr_DeleteGroup result */ + c->status = dcerpc_ndr_request_recv(req); + if (!composite_is_ok(c)) return; + + /* return the actual function call status */ + c->status = s->deletegroup.out.result; + if (!NT_STATUS_IS_OK(c->status)) { + composite_error(c, c->status); + return; + } + + composite_done(c); +} + + +NTSTATUS libnet_rpc_groupdel_recv(struct composite_context *c, TALLOC_CTX *mem_ctx, + struct libnet_rpc_groupdel *io) +{ + NTSTATUS status; + struct groupdel_state *s; + + status = composite_wait(c); + if (NT_STATUS_IS_OK(status) && io) { + s = talloc_get_type(c->private_data, struct groupdel_state); + io->out.group_handle = s->group_handle; + } + + talloc_free(c); + return status; +} + + +NTSTATUS libnet_rpc_groupdel(struct dcerpc_pipe *p, TALLOC_CTX *mem_ctx, + struct libnet_rpc_groupdel *io) +{ + struct composite_context *c; + + c = libnet_rpc_groupdel_send(p, io, NULL); + return libnet_rpc_groupdel_recv(c, mem_ctx, io); +} |