/* Unix SMB/Netbios implementation. Version 1.9. Samba Web Administration Tool Copyright (C) Andrew Tridgell 1997-1998 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */ #ifdef SYSLOG #undef SYSLOG #endif #include "includes.h" #include "smb.h" #define GLOBALS_SNUM -1 static pstring servicesf = CONFIGFILE; static BOOL demo_mode = False; static BOOL have_write_access = False; static BOOL have_read_access = False; static int iNumNonAutoPrintServices = 0; /* * Password Management Globals */ #define SWAT_USER "username" #define OLD_PSWD "old_passwd" #define NEW_PSWD "new_passwd" #define NEW2_PSWD "new2_passwd" #define CHG_S_PASSWD_FLAG "chg_s_passwd_flag" #define CHG_R_PASSWD_FLAG "chg_r_passwd_flag" #define ADD_USER_FLAG "add_user_flag" #define DELETE_USER_FLAG "delete_user_flag" #define DISABLE_USER_FLAG "disable_user_flag" #define ENABLE_USER_FLAG "enable_user_flag" #define RHOST "remote_host" /* we need these because we link to locking*.o */ void become_root(void) {} void unbecome_root(void) {} /**************************************************************************** ****************************************************************************/ static int enum_index(int value, struct enum_list *enumlist) { int i; for (i=0;enumlist[i].name;i++) if (value == enumlist[i].value) break; return(i); } static char *fix_backslash(char *str) { static char newstring[1024]; char *p = newstring; while (*str) { if (*str == '\\') {*p++ = '\\';*p++ = '\\';} else *p++ = *str; ++str; } *p = '\0'; return newstring; } static char *stripspace(char *str) { static char newstring[1024]; char *p = newstring; while (*str) { if (*str != ' ') *p++ = *str; ++str; } *p = '\0'; return newstring; } static char *make_parm_name(char *label) { static char parmname[1024]; char *p = parmname; while (*label) { if (*label == ' ') *p++ = '_'; else *p++ = *label; ++label; } *p = '\0'; return parmname; } /**************************************************************************** include a lump of html in a page ****************************************************************************/ static int include_html(char *fname) { FILE *f = sys_fopen(fname,"r"); char buf[1024]; int ret; if (!f) { d_printf("ERROR: Can't open %s\n", fname); return 0; } while (!feof(f)) { ret = fread(buf, 1, sizeof(buf), f); if (ret <= 0) break; fwrite(buf, 1, ret, stdout); } fclose(f); return 1; } /**************************************************************************** start the page with standard stuff ****************************************************************************/ static void print_header(void) { if (!cgi_waspost()) { d_printf("Expires: 0\r\n"); } d_printf("Content-type: text/html\r\n\r\n"); if (!include_html("include/header.html")) { d_printf("\n"); d_printf("\n\nSamba Web Administration Tool\n\n\n\n"); } } /**************************************************************************** finish off the page ****************************************************************************/ static void print_footer(void) { if (!include_html("include/footer.html")) { d_printf("\n\n\n"); } } /**************************************************************************** display one editable parameter in a form ****************************************************************************/ static void show_parameter(int snum, struct parm_struct *parm) { int i; void *ptr = parm->ptr; char* str; if (parm->class == P_LOCAL && snum >= 0) { ptr = lp_local_ptr(snum, ptr); } str = stripspace(parm->label); strupper (str); d_printf("Help       %s", str, parm->label); switch (parm->type) { case P_CHAR: d_printf("", make_parm_name(parm->label), *(char *)ptr); d_printf("", make_parm_name(parm->label),(char)(parm->def.cvalue)); break; case P_LIST: d_printf("label)); if ((char ***)ptr && *(char ***)ptr && **(char ***)ptr) { char **list = *(char ***)ptr; for (;*list;list++) { d_printf("%s%s", *list, ((*(list+1))?" ":"")); } } d_printf("\">"); d_printf("label)); if (parm->def.lvalue) { char **list = (char **)(parm->def.lvalue); for (; *list; list++) { d_printf("%s%s", *list, ((*(list+1))?" ":"")); } } d_printf("\'\">"); break; case P_STRING: case P_USTRING: d_printf("", make_parm_name(parm->label), *(char **)ptr); d_printf("", make_parm_name(parm->label),fix_backslash((char *)(parm->def.svalue))); break; case P_GSTRING: case P_UGSTRING: d_printf("", make_parm_name(parm->label), (char *)ptr); d_printf("", make_parm_name(parm->label),fix_backslash((char *)(parm->def.svalue))); break; case P_BOOL: d_printf(""); d_printf("", make_parm_name(parm->label),(BOOL)(parm->def.bvalue)?0:1); break; case P_BOOLREV: d_printf(""); d_printf("", make_parm_name(parm->label),(BOOL)(parm->def.bvalue)?1:0); break; case P_INTEGER: d_printf("", make_parm_name(parm->label), *(int *)ptr); d_printf("", make_parm_name(parm->label),(int)(parm->def.ivalue)); break; case P_OCTAL: d_printf("", make_parm_name(parm->label), octal_string(*(int *)ptr)); d_printf("", make_parm_name(parm->label), octal_string((int)(parm->def.ivalue))); break; case P_ENUM: d_printf(""); d_printf("", make_parm_name(parm->label),enum_index((int)(parm->def.ivalue),parm->enum_list)); break; case P_SEP: break; } d_printf("\n"); } /**************************************************************************** display a set of parameters for a service ****************************************************************************/ static void show_parameters(int snum, int allparameters, int advanced, int printers) { int i = 0; struct parm_struct *parm; char *heading = NULL; char *last_heading = NULL; while ((parm = lp_next_parameter(snum, &i, allparameters))) { if (snum < 0 && parm->class == P_LOCAL && !(parm->flags & FLAG_GLOBAL)) continue; if (parm->class == P_SEPARATOR) { heading = parm->label; continue; } if (parm->flags & FLAG_HIDE) continue; if (snum >= 0) { if (printers & !(parm->flags & FLAG_PRINT)) continue; if (!printers & !(parm->flags & FLAG_SHARE)) continue; } if (!advanced) { if (!(parm->flags & FLAG_BASIC)) { void *ptr = parm->ptr; if (parm->class == P_LOCAL && snum >= 0) { ptr = lp_local_ptr(snum, ptr); } switch (parm->type) { case P_CHAR: if (*(char *)ptr == (char)(parm->def.cvalue)) continue; break; case P_LIST: if (!lp_list_compare(*(char ***)ptr, (char **)(parm->def.lvalue))) continue; break; case P_STRING: case P_USTRING: if (!strcmp(*(char **)ptr,(char *)(parm->def.svalue))) continue; break; case P_GSTRING: case P_UGSTRING: if (!strcmp((char *)ptr,(char *)(parm->def.svalue))) continue; break; case P_BOOL: case P_BOOLREV: if (*(BOOL *)ptr == (BOOL)(parm->def.bvalue)) continue; break; case P_INTEGER: case P_OCTAL: if (*(int *)ptr == (int)(parm->def.ivalue)) continue; break; case P_ENUM: if (*(int *)ptr == (int)(parm->def.ivalue)) continue; break; case P_SEP: continue; } } if (printers && !(parm->flags & FLAG_PRINT)) continue; } if (heading && heading != last_heading) { d_printf("%s\n", heading); last_heading = heading; } show_parameter(snum, parm); } } /**************************************************************************** load the smb.conf file into loadparm. ****************************************************************************/ static BOOL load_config(BOOL save_def) { lp_resetnumservices(); return lp_load(servicesf,False,save_def,False); } /**************************************************************************** write a config file ****************************************************************************/ static void write_config(FILE *f, BOOL show_defaults) { fprintf(f, "# Samba config file created using SWAT\n"); fprintf(f, "# from %s (%s)\n", cgi_remote_host(), cgi_remote_addr()); fprintf(f, "# Date: %s\n\n", timestring(False)); lp_dump(f, show_defaults, iNumNonAutoPrintServices); } /**************************************************************************** save and reoad the smb.conf config file ****************************************************************************/ static int save_reload(int snum) { FILE *f; struct stat st; f = sys_fopen(servicesf,"w"); if (!f) { d_printf("failed to open %s for writing\n", servicesf); return 0; } /* just in case they have used the buggy xinetd to create the file */ if (fstat(fileno(f), &st) == 0 && (st.st_mode & S_IWOTH)) { fchmod(fileno(f), S_IWUSR | S_IRUSR | S_IRGRP | S_IROTH); } write_config(f, False); if (snum) lp_dump_one(f, False, snum); fclose(f); lp_killunused(NULL); if (!load_config(False)) { d_printf("Can't reload %s\n", servicesf); return 0; } iNumNonAutoPrintServices = lp_numservices(); load_printers(); return 1; } /**************************************************************************** commit one parameter ****************************************************************************/ static void commit_parameter(int snum, struct parm_struct *parm, char *v) { int i; char *s; if (snum < 0 && parm->class == P_LOCAL) { /* this handles the case where we are changing a local variable globally. We need to change the parameter in all shares where it is currently set to the default */ for (i=0;ilabel, v); } } } lp_do_parameter(snum, parm->label, v); } /**************************************************************************** commit a set of parameters for a service ****************************************************************************/ static void commit_parameters(int snum) { int i = 0; struct parm_struct *parm; pstring label; char *v; while ((parm = lp_next_parameter(snum, &i, 1))) { slprintf(label, sizeof(label)-1, "parm_%s", make_parm_name(parm->label)); if ((v = cgi_variable(label))) { if (parm->flags & FLAG_HIDE) continue; commit_parameter(snum, parm, v); } } } /**************************************************************************** spit out the html for a link with an image ****************************************************************************/ static void image_link(char *name,char *hlink, char *src) { d_printf("\"%s\"\n", cgi_baseurl(), hlink, src, name); } /**************************************************************************** display the main navigation controls at the top of each page along with a title ****************************************************************************/ static void show_main_buttons(void) { char *p; if ((p = cgi_user_name()) && strcmp(p, "root")) { d_printf("Logged in as %s

\n", p); } image_link("Home", "", "images/home.gif"); if (have_write_access) { image_link("Globals", "globals", "images/globals.gif"); image_link("Shares", "shares", "images/shares.gif"); image_link("Printers", "printers", "images/printers.gif"); } if (have_read_access) { image_link("Status", "status", "images/status.gif"); image_link("View Config", "viewconfig","images/viewconfig.gif"); } image_link("Password Management", "passwd", "images/passwd.gif"); d_printf("


\n"); } /**************************************************************************** display a welcome page ****************************************************************************/ static void welcome_page(void) { include_html("help/welcome.html"); } /**************************************************************************** display the current smb.conf ****************************************************************************/ static void viewconfig_page(void) { int full_view=0; if (cgi_variable("full_view")) { full_view = 1; } d_printf("

Current Config

\n"); d_printf("
\n"); if (full_view) { d_printf("\n"); } else { d_printf("\n"); } d_printf("

");
	write_config(stdout, full_view);
	d_printf("
"); d_printf("
\n"); } /**************************************************************************** display a globals editing page ****************************************************************************/ static void globals_page(void) { int advanced = 0; d_printf("

Global Variables

\n"); if (cgi_variable("Advanced") && !cgi_variable("Basic")) advanced = 1; if (cgi_variable("Commit")) { commit_parameters(GLOBALS_SNUM); save_reload(0); } d_printf("
\n"); if (have_write_access) { d_printf("\n"); } d_printf("\n"); if (advanced == 0) { d_printf("\n"); } else { d_printf("\n"); } d_printf("

\n"); d_printf("\n"); show_parameters(GLOBALS_SNUM, 1, advanced, 0); d_printf("
\n"); if (advanced) { d_printf("\n"); } d_printf("

\n"); } /**************************************************************************** display a shares editing page. share is in unix codepage, and must be in dos codepage. FIXME !!! JRA. ****************************************************************************/ static void shares_page(void) { char *share = cgi_variable("share"); char *s; int snum=-1; int i; int advanced = 0; if (share) snum = lp_servicenumber(share); d_printf("

Share Parameters

\n"); if (cgi_variable("Advanced") && !cgi_variable("Basic")) advanced = 1; if (cgi_variable("Commit") && snum >= 0) { commit_parameters(snum); save_reload(0); } if (cgi_variable("Delete") && snum >= 0) { lp_remove_service(snum); save_reload(0); share = NULL; snum = -1; } if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) { load_config(False); lp_copy_service(GLOBALS_SNUM, share); iNumNonAutoPrintServices = lp_numservices(); save_reload(0); snum = lp_servicenumber(share); } d_printf("
\n"); d_printf("\n"); d_printf("\n"); d_printf("\n"); d_printf("\n"); if (have_write_access) { d_printf("\n"); } d_printf("\n"); d_printf("
"); d_printf(""); if (have_write_access) { d_printf("\n"); d_printf("\n"); d_printf("\n"); } d_printf("
"); if (snum >= 0) { if (have_write_access) { d_printf("\n"); } d_printf("\n"); if (advanced == 0) { d_printf("\n"); } else { d_printf("\n"); } d_printf("

\n"); } if (snum >= 0) { d_printf("\n"); show_parameters(snum, 1, advanced, 0); d_printf("
\n"); } if (advanced) { d_printf("\n"); } d_printf("

\n"); } /************************************************************* change a password either locally or remotely *************************************************************/ static BOOL change_password(const char *remote_machine, char *user_name, char *old_passwd, char *new_passwd, int local_flags) { BOOL ret = False; pstring err_str; pstring msg_str; if (demo_mode) { d_printf("password change in demo mode rejected\n

"); return False; } if (remote_machine != NULL) { ret = remote_password_change(remote_machine, user_name, old_passwd, new_passwd, err_str, sizeof(err_str)); if(*err_str) d_printf("%s\n

", err_str); return ret; } if(!initialize_password_db(True)) { d_printf("Can't setup password database vectors.\n

"); return False; } ret = local_password_change(user_name, local_flags, new_passwd, err_str, sizeof(err_str), msg_str, sizeof(msg_str)); if(*msg_str) d_printf("%s\n

", msg_str); if(*err_str) d_printf("%s\n

", err_str); return ret; } /**************************************************************************** do the stuff required to add or change a password ****************************************************************************/ static void chg_passwd(void) { char *host; BOOL rslt; int local_flags = 0; /* Make sure users name has been specified */ if (strlen(cgi_variable(SWAT_USER)) == 0) { d_printf("

Must specify \"User Name\" \n"); return; } /* * smbpasswd doesn't require anything but the users name to delete, disable or enable the user, * so if that's what we're doing, skip the rest of the checks */ if (!cgi_variable(DISABLE_USER_FLAG) && !cgi_variable(ENABLE_USER_FLAG) && !cgi_variable(DELETE_USER_FLAG)) { /* * If current user is not root, make sure old password has been specified * If REMOTE change, even root must provide old password */ if (((!am_root()) && (strlen( cgi_variable(OLD_PSWD)) <= 0)) || ((cgi_variable(CHG_R_PASSWD_FLAG)) && (strlen( cgi_variable(OLD_PSWD)) <= 0))) { d_printf("

Must specify \"Old Password\" \n"); return; } /* If changing a users password on a remote hosts we have to know what host */ if ((cgi_variable(CHG_R_PASSWD_FLAG)) && (strlen( cgi_variable(RHOST)) <= 0)) { d_printf("

Must specify \"Remote Machine\" \n"); return; } /* Make sure new passwords have been specified */ if ((strlen( cgi_variable(NEW_PSWD)) <= 0) || (strlen( cgi_variable(NEW2_PSWD)) <= 0)) { d_printf("

Must specify \"New, and Re-typed Passwords\" \n"); return; } /* Make sure new passwords was typed correctly twice */ if (strcmp(cgi_variable(NEW_PSWD), cgi_variable(NEW2_PSWD)) != 0) { d_printf("

Re-typed password didn't match new password\n"); return; } } if (cgi_variable(CHG_R_PASSWD_FLAG)) { host = cgi_variable(RHOST); } else if (am_root()) { host = NULL; } else { host = "127.0.0.1"; } /* * Set up the local flags. */ local_flags |= (cgi_variable(ADD_USER_FLAG) ? LOCAL_ADD_USER : 0); local_flags |= (cgi_variable(DELETE_USER_FLAG) ? LOCAL_DELETE_USER : 0); local_flags |= (cgi_variable(ENABLE_USER_FLAG) ? LOCAL_ENABLE_USER : 0); local_flags |= (cgi_variable(DISABLE_USER_FLAG) ? LOCAL_DISABLE_USER : 0); rslt = change_password(host, cgi_variable(SWAT_USER), cgi_variable(OLD_PSWD), cgi_variable(NEW_PSWD), local_flags); if(local_flags == 0) { if (rslt == True) { d_printf("

The passwd for '%s' has been changed. \n", cgi_variable(SWAT_USER)); } else { d_printf("

The passwd for '%s' has NOT been changed. \n",cgi_variable(SWAT_USER)); } } return; } /**************************************************************************** display a password editing page ****************************************************************************/ static void passwd_page(void) { char *new_name = cgi_user_name(); /* * After the first time through here be nice. If the user * changed the User box text to another users name, remember it. */ if (cgi_variable(SWAT_USER)) { new_name = cgi_variable(SWAT_USER); } if (!new_name) new_name = ""; d_printf("

Server Password Management

\n"); d_printf("
\n"); d_printf("\n"); /* * Create all the dialog boxes for data collection */ d_printf("\n"); d_printf(" \n", SWAT_USER, new_name); if (!am_root()) { d_printf("\n"); d_printf(" \n",OLD_PSWD); } d_printf("\n"); d_printf("\n",NEW_PSWD); d_printf("\n"); d_printf("\n",NEW2_PSWD); d_printf("
User Name :
Old Password :
New Password :
Re-type New Password :
\n"); /* * Create all the control buttons for requesting action */ d_printf("\n", CHG_S_PASSWD_FLAG); if (demo_mode || am_root()) { d_printf("\n", ADD_USER_FLAG); d_printf("\n", DELETE_USER_FLAG); d_printf("\n", DISABLE_USER_FLAG); d_printf("\n", ENABLE_USER_FLAG); } d_printf("

\n"); /* * Do some work if change, add, disable or enable was * requested. It could be this is the first time through this * code, so there isn't anything to do. */ if ((cgi_variable(CHG_S_PASSWD_FLAG)) || (cgi_variable(ADD_USER_FLAG)) || (cgi_variable(DELETE_USER_FLAG)) || (cgi_variable(DISABLE_USER_FLAG)) || (cgi_variable(ENABLE_USER_FLAG))) { chg_passwd(); } d_printf("

Client/Server Password Management

\n"); d_printf("
\n"); d_printf("\n"); /* * Create all the dialog boxes for data collection */ d_printf("\n"); d_printf("\n",SWAT_USER, new_name); d_printf("\n"); d_printf("\n",OLD_PSWD); d_printf("\n"); d_printf("\n",NEW_PSWD); d_printf("\n"); d_printf("\n",NEW2_PSWD); d_printf("\n"); d_printf("\n",RHOST); d_printf("
User Name :
Old Password :
New Password :
Re-type New Password :
Remote Machine :
"); /* * Create all the control buttons for requesting action */ d_printf("", CHG_R_PASSWD_FLAG); d_printf("

\n"); /* * Do some work if a request has been made to change the * password somewhere other than the server. It could be this * is the first time through this code, so there isn't * anything to do. */ if (cgi_variable(CHG_R_PASSWD_FLAG)) { chg_passwd(); } } /**************************************************************************** display a printers editing page ****************************************************************************/ static void printers_page(void) { char *share = cgi_variable("share"); char *s; int snum=-1; int i; int advanced = 0; if (share) snum = lp_servicenumber(share); d_printf("

Printer Parameters

\n"); d_printf("

Important Note:

\n"); d_printf("Printer names marked with [*] in the Choose Printer drop-down box "); d_printf("are autoloaded printers from "); d_printf("Printcap Name.\n"); d_printf("Attempting to delete these printers from SWAT will have no effect.\n"); if (cgi_variable("Advanced") && !cgi_variable("Basic")) advanced = 1; if (cgi_variable("Commit") && snum >= 0) { commit_parameters(snum); if (snum >= iNumNonAutoPrintServices) save_reload(snum); else save_reload(0); } if (cgi_variable("Delete") && snum >= 0) { lp_remove_service(snum); save_reload(0); share = NULL; snum = -1; } if (cgi_variable("createshare") && (share=cgi_variable("newshare"))) { load_config(False); lp_copy_service(GLOBALS_SNUM, share); iNumNonAutoPrintServices = lp_numservices(); snum = lp_servicenumber(share); lp_do_parameter(snum, "print ok", "Yes"); save_reload(0); snum = lp_servicenumber(share); } d_printf("
\n"); d_printf("\n"); d_printf("\n"); d_printf(""); if (have_write_access) { d_printf("\n"); } d_printf(""); d_printf("
\n"); if (have_write_access) { d_printf("\n"); d_printf("\n"); d_printf("\n"); d_printf("
"); } if (snum >= 0) { if (have_write_access) { d_printf("\n"); } d_printf("\n"); if (advanced == 0) { d_printf("\n"); } else { d_printf("\n"); } d_printf("

\n"); } if (snum >= 0) { d_printf("\n"); show_parameters(snum, 1, advanced, 1); d_printf("
\n"); } if (advanced) { d_printf("\n"); } d_printf("

\n"); } /**************************************************************************** MAIN() ****************************************************************************/ int main(int argc, char *argv[]) { extern char *optarg; extern int optind; extern FILE *dbf; int opt; char *page; fault_setup(NULL); umask(S_IWGRP | S_IWOTH); #if defined(HAVE_SET_AUTH_PARAMETERS) set_auth_parameters(argc, argv); #endif /* HAVE_SET_AUTH_PARAMETERS */ /* just in case it goes wild ... */ alarm(300); /* we don't want any SIGPIPE messages */ BlockSignals(True,SIGPIPE); dbf = sys_fopen("/dev/null", "w"); if (!dbf) dbf = stderr; /* we don't want stderr screwing us up */ close(2); open("/dev/null", O_WRONLY); while ((opt = getopt(argc, argv,"s:a")) != EOF) { switch (opt) { case 's': pstrcpy(servicesf,optarg); break; case 'a': demo_mode = True; break; } } setup_logging(argv[0],False); load_config(True); iNumNonAutoPrintServices = lp_numservices(); load_printers(); cgi_setup(SWATDIR, !demo_mode); print_header(); cgi_load_variables(NULL); if (!file_exist(servicesf, NULL)) { have_read_access = True; have_write_access = True; } else { /* check if the authenticated user has write access - if not then don't show write options */ have_write_access = (access(servicesf,W_OK) == 0); /* if the user doesn't have read access to smb.conf then don't let them view it */ have_read_access = (access(servicesf,R_OK) == 0); } show_main_buttons(); page = cgi_pathinfo(); /* Root gets full functionality */ if (have_read_access && strcmp(page, "globals")==0) { globals_page(); } else if (have_read_access && strcmp(page,"shares")==0) { shares_page(); } else if (have_read_access && strcmp(page,"printers")==0) { printers_page(); } else if (have_read_access && strcmp(page,"status")==0) { status_page(); } else if (have_read_access && strcmp(page,"viewconfig")==0) { viewconfig_page(); } else if (strcmp(page,"passwd")==0) { passwd_page(); } else { welcome_page(); } print_footer(); return 0; }