wmi-1.3.16 from opsview.com
This commit is contained in:
Are Casilla
@@ -0,0 +1,15 @@
|
||||
[SUBSYSTEM::LIBCMDLINE_CREDENTIALS]
|
||||
PRIVATE_PROTO_HEADER = credentials.h
|
||||
OBJ_FILES = credentials.o
|
||||
PUBLIC_DEPENDENCIES = CREDENTIALS LIBPOPT
|
||||
|
||||
[SUBSYSTEM::POPT_SAMBA]
|
||||
PUBLIC_HEADERS = popt_common.h
|
||||
OBJ_FILES = popt_common.o
|
||||
PUBLIC_DEPENDENCIES = LIBPOPT
|
||||
|
||||
[SUBSYSTEM::POPT_CREDENTIALS]
|
||||
PRIVATE_PROTO_HEADER = popt_credentials.h
|
||||
OBJ_FILES = popt_credentials.o
|
||||
PUBLIC_DEPENDENCIES = CREDENTIALS_KRB5 LIBCMDLINE_CREDENTIALS LIBPOPT
|
||||
PRIVATE_DEPENDENCIES = LIBSAMBA-UTIL
|
||||
@@ -0,0 +1,45 @@
|
||||
/*
|
||||
Unix SMB/CIFS implementation.
|
||||
|
||||
Copyright (C) Jelmer Vernooij 2005
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
#include "includes.h"
|
||||
#include "system/filesys.h"
|
||||
#include "auth/credentials/credentials.h"
|
||||
|
||||
static const char *cmdline_get_userpassword(struct cli_credentials *credentials)
|
||||
{
|
||||
char *ret;
|
||||
TALLOC_CTX *mem_ctx = talloc_new(NULL);
|
||||
|
||||
const char *prompt_name = cli_credentials_get_unparsed_name(credentials, mem_ctx);
|
||||
const char *prompt;
|
||||
|
||||
prompt = talloc_asprintf(mem_ctx, "Password for [%s]:",
|
||||
prompt_name);
|
||||
|
||||
ret = getpass(prompt);
|
||||
|
||||
talloc_free(mem_ctx);
|
||||
return ret;
|
||||
}
|
||||
|
||||
void cli_credentials_set_cmdline_callbacks(struct cli_credentials *cred)
|
||||
{
|
||||
cli_credentials_set_password_callback(cred, cmdline_get_userpassword);
|
||||
}
|
||||
@@ -0,0 +1,180 @@
|
||||
/*
|
||||
Unix SMB/CIFS implementation.
|
||||
Common popt routines
|
||||
|
||||
Copyright (C) Tim Potter 2001,2002
|
||||
Copyright (C) Jelmer Vernooij 2002,2003,2005
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
#include "includes.h"
|
||||
#include "version.h"
|
||||
#include "lib/cmdline/popt_common.h"
|
||||
|
||||
/* Handle command line options:
|
||||
* -d,--debuglevel
|
||||
* -s,--configfile
|
||||
* -O,--socket-options
|
||||
* -V,--version
|
||||
* -l,--log-base
|
||||
* -n,--netbios-name
|
||||
* -W,--workgroup
|
||||
* --realm
|
||||
* -i,--scope
|
||||
*/
|
||||
|
||||
enum {OPT_OPTION=1,OPT_LEAK_REPORT,OPT_LEAK_REPORT_FULL,OPT_DEBUG_STDERR};
|
||||
|
||||
struct cli_credentials *cmdline_credentials = NULL;
|
||||
|
||||
static void popt_common_callback(poptContext con,
|
||||
enum poptCallbackReason reason,
|
||||
const struct poptOption *opt,
|
||||
const char *arg, const void *data)
|
||||
{
|
||||
const char *pname;
|
||||
|
||||
if (reason == POPT_CALLBACK_REASON_POST) {
|
||||
lp_load();
|
||||
/* Hook any 'every Samba program must do this, after
|
||||
* the smb.conf is setup' functions here */
|
||||
return;
|
||||
}
|
||||
|
||||
/* Find out basename of current program */
|
||||
pname = strrchr_m(poptGetInvocationName(con),'/');
|
||||
|
||||
if (!pname)
|
||||
pname = poptGetInvocationName(con);
|
||||
else
|
||||
pname++;
|
||||
|
||||
if (reason == POPT_CALLBACK_REASON_PRE) {
|
||||
/* Hook for 'almost the first thing to do in a samba program' here */
|
||||
/* setup for panics */
|
||||
fault_setup(poptGetInvocationName(con));
|
||||
|
||||
/* and logging */
|
||||
setup_logging(pname, DEBUG_STDOUT);
|
||||
return;
|
||||
}
|
||||
|
||||
switch(opt->val) {
|
||||
case 'd':
|
||||
lp_set_cmdline("log level", arg);
|
||||
break;
|
||||
|
||||
case OPT_DEBUG_STDERR:
|
||||
setup_logging(pname, DEBUG_STDERR);
|
||||
break;
|
||||
|
||||
case 'V':
|
||||
printf( "Version %s\n", SAMBA_VERSION_STRING );
|
||||
exit(0);
|
||||
break;
|
||||
|
||||
case 'O':
|
||||
if (arg) {
|
||||
lp_set_cmdline("socket options", arg);
|
||||
}
|
||||
break;
|
||||
|
||||
case 's':
|
||||
if (arg) {
|
||||
lp_set_cmdline("config file", arg);
|
||||
}
|
||||
break;
|
||||
|
||||
case 'l':
|
||||
if (arg) {
|
||||
char *new_logfile = talloc_asprintf(NULL, "%s/log.%s", arg, pname);
|
||||
lp_set_cmdline("log file", new_logfile);
|
||||
talloc_free(new_logfile);
|
||||
}
|
||||
break;
|
||||
|
||||
case 'W':
|
||||
lp_set_cmdline("workgroup", arg);
|
||||
break;
|
||||
|
||||
case 'r':
|
||||
lp_set_cmdline("realm", arg);
|
||||
break;
|
||||
|
||||
case 'n':
|
||||
lp_set_cmdline("netbios name", arg);
|
||||
break;
|
||||
|
||||
case 'i':
|
||||
lp_set_cmdline("netbios scope", arg);
|
||||
break;
|
||||
|
||||
case 'm':
|
||||
lp_set_cmdline("client max protocol", arg);
|
||||
break;
|
||||
|
||||
case 'R':
|
||||
lp_set_cmdline("name resolve order", arg);
|
||||
break;
|
||||
|
||||
case OPT_OPTION:
|
||||
if (!lp_set_option(arg)) {
|
||||
fprintf(stderr, "Error setting option '%s'\n", arg);
|
||||
exit(1);
|
||||
}
|
||||
break;
|
||||
|
||||
case OPT_LEAK_REPORT:
|
||||
talloc_enable_leak_report();
|
||||
break;
|
||||
|
||||
case OPT_LEAK_REPORT_FULL:
|
||||
talloc_enable_leak_report_full();
|
||||
break;
|
||||
|
||||
}
|
||||
}
|
||||
|
||||
struct poptOption popt_common_connection[] = {
|
||||
{ NULL, 0, POPT_ARG_CALLBACK, popt_common_callback },
|
||||
{ "name-resolve", 'R', POPT_ARG_STRING, NULL, 'R', "Use these name resolution services only", "NAME-RESOLVE-ORDER" },
|
||||
{ "socket-options", 'O', POPT_ARG_STRING, NULL, 'O', "socket options to use", "SOCKETOPTIONS" },
|
||||
{ "netbiosname", 'n', POPT_ARG_STRING, NULL, 'n', "Primary netbios name", "NETBIOSNAME" },
|
||||
{ "workgroup", 'W', POPT_ARG_STRING, NULL, 'W', "Set the workgroup name", "WORKGROUP" },
|
||||
{ "realm", 0, POPT_ARG_STRING, NULL, 'r', "Set the realm name", "REALM" },
|
||||
{ "scope", 'i', POPT_ARG_STRING, NULL, 'i', "Use this Netbios scope", "SCOPE" },
|
||||
{ "maxprotocol", 'm', POPT_ARG_STRING, NULL, 'm', "Set max protocol level", "MAXPROTOCOL" },
|
||||
{ NULL }
|
||||
};
|
||||
|
||||
struct poptOption popt_common_samba[] = {
|
||||
{ NULL, 0, POPT_ARG_CALLBACK|POPT_CBFLAG_PRE|POPT_CBFLAG_POST, popt_common_callback },
|
||||
{ "debuglevel", 'd', POPT_ARG_STRING, NULL, 'd', "Set debug level", "DEBUGLEVEL" },
|
||||
{ "debug-stderr", 0, POPT_ARG_NONE, NULL, OPT_DEBUG_STDERR, "Send debug output to STDERR", NULL },
|
||||
{ "configfile", 's', POPT_ARG_STRING, NULL, 's', "Use alternative configuration file", "CONFIGFILE" },
|
||||
{ "option", 0, POPT_ARG_STRING, NULL, OPT_OPTION, "Set smb.conf option from command line", "name=value" },
|
||||
{ "log-basename", 'l', POPT_ARG_STRING, NULL, 'l', "Basename for log/debug files", "LOGFILEBASE" },
|
||||
{ "leak-report", 0, POPT_ARG_NONE, NULL, OPT_LEAK_REPORT, "enable talloc leak reporting on exit", NULL },
|
||||
{ "leak-report-full",0, POPT_ARG_NONE, NULL, OPT_LEAK_REPORT_FULL, "enable full talloc leak reporting on exit", NULL },
|
||||
{ NULL }
|
||||
};
|
||||
|
||||
struct poptOption popt_common_version[] = {
|
||||
{ NULL, 0, POPT_ARG_CALLBACK, popt_common_callback },
|
||||
{ "version", 'V', POPT_ARG_NONE, NULL, 'V', "Print version" },
|
||||
{ NULL }
|
||||
};
|
||||
|
||||
@@ -0,0 +1,39 @@
|
||||
/*
|
||||
Unix SMB/CIFS implementation.
|
||||
Common popt arguments
|
||||
Copyright (C) Jelmer Vernooij 2003
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
#ifndef _POPT_COMMON_H
|
||||
#define _POPT_COMMON_H
|
||||
|
||||
#include <popt.h>
|
||||
|
||||
/* Common popt structures */
|
||||
extern struct poptOption popt_common_samba[];
|
||||
extern struct poptOption popt_common_connection[];
|
||||
extern struct poptOption popt_common_version[];
|
||||
extern struct poptOption popt_common_credentials[];
|
||||
|
||||
#define POPT_COMMON_SAMBA { NULL, 0, POPT_ARG_INCLUDE_TABLE, popt_common_samba, 0, "Common samba options:", NULL },
|
||||
#define POPT_COMMON_CONNECTION { NULL, 0, POPT_ARG_INCLUDE_TABLE, popt_common_connection, 0, "Connection options:", NULL },
|
||||
#define POPT_COMMON_VERSION { NULL, 0, POPT_ARG_INCLUDE_TABLE, popt_common_version, 0, "Common samba options:", NULL },
|
||||
#define POPT_COMMON_CREDENTIALS { NULL, 0, POPT_ARG_INCLUDE_TABLE, popt_common_credentials, 0, "Authentication options:", NULL },
|
||||
|
||||
extern struct cli_credentials *cmdline_credentials;
|
||||
|
||||
#endif /* _POPT_COMMON_H */
|
||||
@@ -0,0 +1,151 @@
|
||||
/*
|
||||
Unix SMB/CIFS implementation.
|
||||
Credentials popt routines
|
||||
|
||||
Copyright (C) Jelmer Vernooij 2002,2003,2005
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
#include "includes.h"
|
||||
#include "lib/cmdline/popt_common.h"
|
||||
#include "lib/cmdline/credentials.h"
|
||||
#include "auth/credentials/credentials.h"
|
||||
#include "auth/credentials/credentials_krb5.h"
|
||||
#include "auth/gensec/gensec.h"
|
||||
|
||||
/* Handle command line options:
|
||||
* -U,--user
|
||||
* -A,--authentication-file
|
||||
* -k,--use-kerberos
|
||||
* -N,--no-pass
|
||||
* -S,--signing
|
||||
* -P --machine-pass
|
||||
* --simple-bind-dn
|
||||
* --password
|
||||
* --use-security-mechanisms
|
||||
*/
|
||||
|
||||
|
||||
static BOOL dont_ask;
|
||||
|
||||
enum opt { OPT_SIMPLE_BIND_DN, OPT_PASSWORD, OPT_KERBEROS, OPT_GENSEC_MECHS };
|
||||
|
||||
/*
|
||||
disable asking for a password
|
||||
*/
|
||||
void popt_common_dont_ask(void)
|
||||
{
|
||||
dont_ask = True;
|
||||
}
|
||||
|
||||
static void popt_common_credentials_callback(poptContext con,
|
||||
enum poptCallbackReason reason,
|
||||
const struct poptOption *opt,
|
||||
const char *arg, const void *data)
|
||||
{
|
||||
if (reason == POPT_CALLBACK_REASON_PRE) {
|
||||
cmdline_credentials = cli_credentials_init(talloc_autofree_context());
|
||||
return;
|
||||
}
|
||||
|
||||
if (reason == POPT_CALLBACK_REASON_POST) {
|
||||
cli_credentials_guess(cmdline_credentials);
|
||||
|
||||
if (!dont_ask) {
|
||||
cli_credentials_set_cmdline_callbacks(cmdline_credentials);
|
||||
}
|
||||
return;
|
||||
}
|
||||
|
||||
switch(opt->val) {
|
||||
case 'U':
|
||||
{
|
||||
char *lp;
|
||||
|
||||
cli_credentials_parse_string(cmdline_credentials, arg, CRED_SPECIFIED);
|
||||
/* This breaks the abstraction, including the const above */
|
||||
if ((lp=strchr_m(arg,'%'))) {
|
||||
lp[0]='\0';
|
||||
lp++;
|
||||
/* Try to prevent this showing up in ps */
|
||||
memset(lp,0,strlen(lp));
|
||||
}
|
||||
}
|
||||
break;
|
||||
|
||||
case OPT_PASSWORD:
|
||||
cli_credentials_set_password(cmdline_credentials, arg, CRED_SPECIFIED);
|
||||
/* Try to prevent this showing up in ps */
|
||||
memset(discard_const(arg),0,strlen(arg));
|
||||
break;
|
||||
|
||||
case 'A':
|
||||
cli_credentials_parse_file(cmdline_credentials, arg, CRED_SPECIFIED);
|
||||
break;
|
||||
|
||||
case 'S':
|
||||
lp_set_cmdline("client signing", arg);
|
||||
break;
|
||||
|
||||
case 'P':
|
||||
/* Later, after this is all over, get the machine account details from the secrets.ldb */
|
||||
cli_credentials_set_machine_account_pending(cmdline_credentials);
|
||||
break;
|
||||
|
||||
case OPT_KERBEROS:
|
||||
{
|
||||
BOOL use_kerberos = True;
|
||||
/* Force us to only use kerberos */
|
||||
if (arg) {
|
||||
if (!set_boolean(arg, &use_kerberos)) {
|
||||
fprintf(stderr, "Error parsing -k %s\n", arg);
|
||||
exit(1);
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
cli_credentials_set_kerberos_state(cmdline_credentials,
|
||||
use_kerberos
|
||||
? CRED_MUST_USE_KERBEROS
|
||||
: CRED_DONT_USE_KERBEROS);
|
||||
break;
|
||||
}
|
||||
case OPT_GENSEC_MECHS:
|
||||
/* Convert a list of strings into a list of available authentication standards */
|
||||
|
||||
break;
|
||||
|
||||
case OPT_SIMPLE_BIND_DN:
|
||||
cli_credentials_set_bind_dn(cmdline_credentials, arg);
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
|
||||
struct poptOption popt_common_credentials[] = {
|
||||
{ NULL, 0, POPT_ARG_CALLBACK|POPT_CBFLAG_PRE|POPT_CBFLAG_POST, popt_common_credentials_callback },
|
||||
{ "user", 'U', POPT_ARG_STRING, NULL, 'U', "Set the network username", "[DOMAIN\\]USERNAME[%PASSWORD]" },
|
||||
{ "no-pass", 'N', POPT_ARG_NONE, &dont_ask, True, "Don't ask for a password" },
|
||||
{ "password", 0, POPT_ARG_STRING, NULL, OPT_PASSWORD, "Password" },
|
||||
{ "authentication-file", 'A', POPT_ARG_STRING, NULL, 'A', "Get the credentials from a file", "FILE" },
|
||||
{ "signing", 'S', POPT_ARG_STRING, NULL, 'S', "Set the client signing state", "on|off|required" },
|
||||
{ "machine-pass", 'P', POPT_ARG_NONE, NULL, 'P', "Use stored machine account password (implies -k)" },
|
||||
{ "simple-bind-dn", 0, POPT_ARG_STRING, NULL, OPT_SIMPLE_BIND_DN, "DN to use for a simple bind" },
|
||||
{ "kerberos", 'k', POPT_ARG_STRING, NULL, OPT_KERBEROS, "Use Kerberos" },
|
||||
{ "use-security-mechanisms", 0, POPT_ARG_STRING, NULL, OPT_GENSEC_MECHS, "Restricted list of authentication mechanisms available for use with this authentication"},
|
||||
{ NULL }
|
||||
};
|
||||
Reference in New Issue
Block a user