/* * Unix SMB/CIFS implementation. * Group Policy Object Support * Copyright (C) Guenther Deschner 2005-2006 * * This program is free software; you can redistribute it and/or modify * it under the terms of the GNU General Public License as published by * the Free Software Foundation; either version 2 of the License, or * (at your option) any later version. * * This program is distributed in the hope that it will be useful, * but WITHOUT ANY WARRANTY; without even the implied warranty of * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the * GNU General Public License for more details. * * You should have received a copy of the GNU General Public License * along with this program; if not, write to the Free Software * Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */ #include "includes.h" /**************************************************************** explode the GPO CIFS URI into their components ****************************************************************/ NTSTATUS ads_gpo_explode_filesyspath(ADS_STRUCT *ads, TALLOC_CTX *mem_ctx, const char *file_sys_path, char **server, char **service, char **nt_path, char **unix_path) { fstring tok; pstring path; *server = NULL; *service = NULL; *nt_path = NULL; *unix_path = NULL; if (!next_token(&file_sys_path, tok, "\\", sizeof(tok))) { return NT_STATUS_INVALID_PARAMETER; } if ((*server = talloc_strdup(mem_ctx, tok)) == NULL) { return NT_STATUS_NO_MEMORY; } if (!next_token(&file_sys_path, tok, "\\", sizeof(tok))) { return NT_STATUS_INVALID_PARAMETER; } if ((*service = talloc_strdup(mem_ctx, tok)) == NULL) { return NT_STATUS_NO_MEMORY; } if ((*nt_path = talloc_asprintf(mem_ctx, "\\%s", file_sys_path)) == NULL) { return NT_STATUS_NO_MEMORY; } pstrcpy(path, lock_path(GPO_CACHE_DIR)); pstrcat(path, "/"); pstrcat(path, file_sys_path); pstring_sub(path, "\\", "/"); if ((*unix_path = talloc_strdup(mem_ctx, path)) == NULL) { return NT_STATUS_NO_MEMORY; } return NT_STATUS_OK; } /**************************************************************** prepare the local disc storage for "unix_path" ****************************************************************/ NTSTATUS ads_gpo_prepare_local_store(ADS_STRUCT *ads, TALLOC_CTX *mem_ctx, const char *unix_path) { const char *top_dir = lock_path(GPO_CACHE_DIR); char *current_dir; fstring tok; current_dir = talloc_strdup(mem_ctx, top_dir); NT_STATUS_HAVE_NO_MEMORY(current_dir); if ((mkdir(top_dir, 0644)) < 0 && errno != EEXIST) { return NT_STATUS_ACCESS_DENIED; } while (next_token(&unix_path, tok, "/", sizeof(tok))) { if (strequal(tok, GPO_CACHE_DIR)) { break; } } while (next_token(&unix_path, tok, "/", sizeof(tok))) { current_dir = talloc_asprintf_append(current_dir, "/%s", tok); NT_STATUS_HAVE_NO_MEMORY(current_dir); if ((mkdir(current_dir, 0644)) < 0 && errno != EEXIST) { return NT_STATUS_ACCESS_DENIED; } } return NT_STATUS_OK; } /**************************************************************** download a full GPO via CIFS ****************************************************************/ NTSTATUS ads_fetch_gpo_files(ADS_STRUCT *ads, TALLOC_CTX *mem_ctx, struct cli_state *cli, struct GROUP_POLICY_OBJECT *gpo) { NTSTATUS result; char *server, *service, *nt_path, *unix_path, *nt_ini_path, *unix_ini_path; result = ads_gpo_explode_filesyspath(ads, mem_ctx, gpo->file_sys_path, &server, &service, &nt_path, &unix_path); if (!NT_STATUS_IS_OK(result)) { goto out; } result = ads_gpo_prepare_local_store(ads, mem_ctx, unix_path); if (!NT_STATUS_IS_OK(result)) { goto out; } unix_ini_path = talloc_asprintf(mem_ctx, "%s/%s", unix_path, GPT_INI); nt_ini_path = talloc_asprintf(mem_ctx, "%s\\%s", nt_path, GPT_INI); if (!unix_path || !nt_ini_path) { result = NT_STATUS_NO_MEMORY; goto out; } result = gpo_copy_file(mem_ctx, cli, nt_ini_path, unix_ini_path); if (!NT_STATUS_IS_OK(result)) { goto out; } result = gpo_sync_directories(mem_ctx, cli, nt_path, unix_path); if (!NT_STATUS_IS_OK(result)) { goto out; } result = NT_STATUS_OK; out: return result; } /**************************************************************** get the locally stored gpt.ini version number ****************************************************************/ NTSTATUS ads_gpo_get_sysvol_gpt_version(ADS_STRUCT *ads, TALLOC_CTX *mem_ctx, const char *unix_path, uint32 *sysvol_version, char **display_name) { NTSTATUS status; uint32 version; char *local_path = NULL; char *name = NULL; local_path = talloc_asprintf(mem_ctx, "%s/%s", unix_path, GPT_INI); NT_STATUS_HAVE_NO_MEMORY(local_path); status = parse_gpt_ini(mem_ctx, local_path, &version, &name); if (!NT_STATUS_IS_OK(status)) { DEBUG(10,("ads_gpo_get_sysvol_gpt_version: failed to parse ini [%s]: %s\n", unix_path, nt_errstr(status))); return status; } if (sysvol_version) { *sysvol_version = version; } if (name && *display_name) { *display_name = talloc_strdup(mem_ctx, name); NT_STATUS_HAVE_NO_MEMORY(*display_name); } return NT_STATUS_OK; }