diff options
Diffstat (limited to 'winsup/utils/mkgroup.c')
| -rw-r--r-- | winsup/utils/mkgroup.c | 410 |
1 files changed, 410 insertions, 0 deletions
diff --git a/winsup/utils/mkgroup.c b/winsup/utils/mkgroup.c new file mode 100644 index 000000000..0c322bbc6 --- /dev/null +++ b/winsup/utils/mkgroup.c @@ -0,0 +1,410 @@ +/* mkgroup.c: + + Copyright 1997, 1998 Cygnus Solutions. + + This file is part of Cygwin. + + This software is a copyrighted work licensed under the terms of the + Cygwin license. Please consult the file "CYGWIN_LICENSE" for + details. */ + +#include <ctype.h> +#include <stdlib.h> +#include <wchar.h> +#include <stdio.h> +#include <sys/cygwin.h> +#include <windows.h> +#include <lmaccess.h> +#include <lmapibuf.h> + +SID_IDENTIFIER_AUTHORITY sid_world_auth = {SECURITY_WORLD_SID_AUTHORITY}; +SID_IDENTIFIER_AUTHORITY sid_nt_auth = {SECURITY_NT_AUTHORITY}; + +#ifndef min +#define min(a,b) (((a)<(b))?(a):(b)) +#endif + +char * +put_sid (PSID sid) +{ + static char s[512]; + char t[32]; + DWORD i; + + strcpy (s, "S-1-"); + sprintf(t, "%u", GetSidIdentifierAuthority (sid)->Value[5]); + strcat (s, t); + for (i = 0; i < *GetSidSubAuthorityCount (sid); ++i) + { + sprintf(t, "-%lu", *GetSidSubAuthority (sid, i)); + strcat (s, t); + } + return s; +} + +void +psx_dir (char *in, char *out) +{ + if (isalpha (in[0]) && in[1] == ':') + { + sprintf (out, "/cygdrive/%c", in[0]); + in += 2; + out += strlen (out); + } + + while (*in) + { + if (*in == '\\') + *out = '/'; + else + *out = *in; + in++; + out++; + } + + *out = '\0'; +} + +void +uni2ansi (LPWSTR wcs, char *mbs) +{ + if (wcs) + wcstombs (mbs, wcs, (wcslen (wcs) + 1) * sizeof (WCHAR)); + + else + *mbs = '\0'; +} + +int +enum_local_groups (int print_sids) +{ + LOCALGROUP_INFO_0 *buffer; + DWORD entriesread = 0; + DWORD totalentries = 0; + DWORD resume_handle = 0; + + do + { + DWORD i; + DWORD rc = NetLocalGroupEnum (NULL, 0, (LPBYTE *) & buffer, 1024, + &entriesread, &totalentries, &resume_handle); + + switch (rc) + { + case ERROR_ACCESS_DENIED: + fprintf (stderr, "Access denied\n"); + exit (1); + + case ERROR_MORE_DATA: + case ERROR_SUCCESS: + break; + + default: + fprintf (stderr, "NetUserEnum() failed with %ld\n", rc); + exit (1); + } + + for (i = 0; i < entriesread; i++) + { + char localgroup_name[100]; + char domain_name[100]; + DWORD domname_len = 100; + char psid_buffer[1024]; + PSID psid = (PSID) psid_buffer; + DWORD sid_length = 1024; + DWORD gid; + SID_NAME_USE acc_type; + uni2ansi (buffer[i].lgrpi0_name, localgroup_name); + + if (!LookupAccountName (NULL, localgroup_name, psid, + &sid_length, domain_name, &domname_len, + &acc_type)) + { + fprintf (stderr, "LookupAccountName(%s) failed with %ld\n", + localgroup_name, GetLastError ()); + continue; + } + else if (acc_type == SidTypeDomain) + { + char domname[356]; + + strcpy (domname, domain_name); + strcat (domname, "\\"); + strcat (domname, localgroup_name); + sid_length = 1024; + domname_len = 100; + if (!LookupAccountName (NULL, domname, + psid, &sid_length, + domain_name, &domname_len, + &acc_type)) + { + fprintf (stderr, + "LookupAccountName(%s) failed with error %ld\n", + localgroup_name, GetLastError ()); + continue; + } + } + + gid = *GetSidSubAuthority (psid, *GetSidSubAuthorityCount(psid) - 1); + + printf ("%s:%s:%ld:\n", localgroup_name, + print_sids ? put_sid (psid) : "", + gid); + } + + NetApiBufferFree (buffer); + + } + while (entriesread < totalentries); + + return 0; +} + +void +enum_groups (LPWSTR servername, int print_sids) +{ + GROUP_INFO_2 *buffer; + DWORD entriesread = 0; + DWORD totalentries = 0; + DWORD resume_handle = 0; + char ansi_srvname[256]; + + if (servername) + uni2ansi (servername, ansi_srvname); + + do + { + DWORD i; + DWORD rc = NetGroupEnum (servername, 2, (LPBYTE *) & buffer, 1024, + &entriesread, &totalentries, &resume_handle); + + switch (rc) + { + case ERROR_ACCESS_DENIED: + fprintf (stderr, "Access denied\n"); + exit (1); + + case ERROR_MORE_DATA: + case ERROR_SUCCESS: + break; + + default: + fprintf (stderr, "NetUserEnum() failed with %ld\n", rc); + exit (1); + } + + for (i = 0; i < entriesread; i++) + { + char groupname[100]; + char domain_name[100]; + DWORD domname_len = 100; + char psid_buffer[1024]; + PSID psid = (PSID) psid_buffer; + DWORD sid_length = 1024; + SID_NAME_USE acc_type; + + int gid = buffer[i].grpi2_group_id; + uni2ansi (buffer[i].grpi2_name, groupname); + if (print_sids) + { + if (!LookupAccountName (servername ? ansi_srvname : NULL, + groupname, + psid, &sid_length, + domain_name, &domname_len, + &acc_type)) + { + fprintf (stderr, + "LookupAccountName (%s, %s) failed with error %ld\n", + servername ? ansi_srvname : "NULL", + groupname, + GetLastError ()); + continue; + } + else if (acc_type == SidTypeDomain) + { + char domname[356]; + + strcpy (domname, domain_name); + strcat (domname, "\\"); + strcat (domname, groupname); + sid_length = 1024; + domname_len = 100; + if (!LookupAccountName (servername ? ansi_srvname : NULL, + domname, + psid, &sid_length, + domain_name, &domname_len, + &acc_type)) + { + fprintf (stderr, + "LookupAccountName(%s,%s) failed with error %ld\n", + servername ? ansi_srvname : "NULL", + domname, + GetLastError ()); + continue; + } + } + } + printf ("%s:%s:%d:\n", groupname, + print_sids ? put_sid (psid) : "", + gid); + } + + NetApiBufferFree (buffer); + + } + while (entriesread < totalentries); + + if (servername) + NetApiBufferFree (servername); +} + +void +usage () +{ + fprintf (stderr, "\n"); + fprintf (stderr, "usage: mkgroup <options> [domain]\n\n"); + fprintf (stderr, "This program prints group information to stdout\n\n"); + fprintf (stderr, "Options:\n"); + fprintf (stderr, " -l,--local print pseudo group information if there is\n"); + fprintf (stderr, " no domain\n"); + fprintf (stderr, " -d,--domain print global group information from the domain\n"); + fprintf (stderr, " specified (or from the current domain if there is\n"); + fprintf (stderr, " no domain specified)\n"); + fprintf (stderr, " -s,--no-sids don't print SIDs in pwd field\n"); + fprintf (stderr, " (this affects NT security)\n"); + fprintf (stderr, " -?,--help print this message\n\n"); + exit (1); +} + +int +main (int argc, char **argv) +{ + LPWSTR servername; + DWORD rc = ERROR_SUCCESS; + WCHAR domain_name[100]; + int print_local = 0; + int print_domain = 0; + int print_sids = 1; + int domain_specified = 0; + int i; + + char name[256], dom[256]; + DWORD len, len2; + PSID sid, csid; + SID_NAME_USE use; + + if (argc == 1) + usage (); + + else + { + for (i = 1; i < argc; i++) + { + if (!strcmp (argv[i], "-l") || !strcmp (argv[i], "--local")) + print_local = 1; + + else if (!strcmp (argv[i], "-d") || !strcmp (argv[i], "--domain")) + print_domain = 1; + + else if (!strcmp (argv[i], "-s") || !strcmp (argv[i], "--no-sids")) + print_sids = 0; + + else if (!strcmp (argv[i], "-?") || !strcmp (argv[i], "--help")) + usage (); + + else + { + mbstowcs (domain_name, argv[i], strlen (argv[i]) + 1); + domain_specified = 1; + } + } + } + + /* + * Get `Everyone' group + */ + if (AllocateAndInitializeSid (&sid_world_auth, 1, SECURITY_WORLD_RID, + 0, 0, 0, 0, 0, 0, 0, &sid)) + { + if (LookupAccountSid (NULL, sid, + name, (len = 256, &len), + dom, (len2 = 256, &len), + &use)) + printf ("%s:%s:%ld:\n", name, + print_sids ? put_sid (sid) : "", + SECURITY_WORLD_RID); + FreeSid (sid); + } + + /* + * Get `system' group + */ + if (AllocateAndInitializeSid (&sid_nt_auth, 1, SECURITY_LOCAL_SYSTEM_RID, + 0, 0, 0, 0, 0, 0, 0, &sid)) + { + if (LookupAccountSid (NULL, sid, + name, (len = 256, &len), + dom, (len2 = 256, &len), + &use)) + printf ("%s:%s:%ld:\n", name, + print_sids ? put_sid (sid) : "", + SECURITY_LOCAL_SYSTEM_RID); + FreeSid (sid); + } + + if (print_local) + { + /* + * Get `None' group + */ + GetComputerName (name, (len = 256, &len)); + csid = (PSID) malloc (1024); + LookupAccountName (NULL, name, + csid, (len = 1024, &len), + dom, (len2 = 256, &len), + &use); + if (AllocateAndInitializeSid (GetSidIdentifierAuthority (csid), + 5, + *GetSidSubAuthority (csid, 0), + *GetSidSubAuthority (csid, 1), + *GetSidSubAuthority (csid, 2), + *GetSidSubAuthority (csid, 3), + 513, + 0, + 0, + 0, + &sid)) + { + if (LookupAccountSid (NULL, sid, + name, (len = 256, &len), + dom, (len2 = 256, &len), + &use)) + printf ("%s:%s:513:\n", name, + print_sids ? put_sid (sid) : ""); + FreeSid (sid); + } + free (csid); + } + + if (print_domain) + { + if (domain_specified) + rc = NetGetDCName (NULL, domain_name, (LPBYTE *) & servername); + + else + rc = NetGetDCName (NULL, NULL, (LPBYTE *) & servername); + + if (rc != ERROR_SUCCESS) + { + fprintf (stderr, "Cannot get PDC, code = %ld\n", rc); + exit (1); + } + + enum_groups (servername, print_sids); + } + + if (print_local) + enum_local_groups (print_sids); + + return 0; +} |