winsup/utils/mkpasswd.c

   1 /* mkpasswd.c:
   2
   3    Copyright 1997, 1998, 1999, 2000 Cygnus Solutions.
   4
   5    This file is part of Cygwin.
   6
   7    This software is a copyrighted work licensed under the terms of the
   8    Cygwin license.  Please consult the file "CYGWIN_LICENSE" for
   9    details. */
  10
  11 #include <ctype.h>
  12 #include <stdlib.h>
  13 #include <wchar.h>
  14 #include <stdio.h>
  15 #include <sys/cygwin.h>
  16 #include <windows.h>
  17 #include <lmaccess.h>
  18 #include <lmapibuf.h>
  19
  20 SID_IDENTIFIER_AUTHORITY sid_world_auth = {SECURITY_WORLD_SID_AUTHORITY};
  21 SID_IDENTIFIER_AUTHORITY sid_nt_auth = {SECURITY_NT_AUTHORITY};
  22
  23 #ifndef min
  24 #define min(a,b) (((a)<(b))?(a):(b))
  25 #endif
  26
  27 char *
  28 put_sid (PSID sid)
  29 {
  30   static char s[512];
  31   char t[32];
  32   DWORD i;
  33
  34   strcpy (s, "S-1-");
  35   sprintf(t, "%u", GetSidIdentifierAuthority (sid)->Value[5]);
  36   strcat (s, t);
  37   for (i = 0; i < *GetSidSubAuthorityCount (sid); ++i)
  38     {
  39       sprintf(t, "-%lu", *GetSidSubAuthority (sid, i));
  40       strcat (s, t);
  41     }
  42   return s;
  43 }
  44
  45 void
  46 psx_dir (char *in, char *out)
  47 {
  48   if (isalpha (in[0]) && in[1] == ':')
  49     {
  50       sprintf (out, "/cygdrive/%c", in[0]);
  51       in += 2;
  52       out += strlen (out);
  53     }
  54
  55   while (*in)
  56     {
  57       if (*in == '\\')
  58         *out = '/';
  59       else
  60         *out = *in;
  61       in++;
  62       out++;
  63     }
  64
  65   *out = '\0';
  66 }
  67
  68 void
  69 uni2ansi (LPWSTR wcs, char *mbs)
  70 {
  71   if (wcs)
  72     wcstombs (mbs, wcs, (wcslen (wcs) + 1) * sizeof (WCHAR));
  73
  74   else
  75     *mbs = '\0';
  76 }
  77
  78 int
  79 enum_users (LPWSTR servername, int print_sids, int print_cygpath)
  80 {
  81   USER_INFO_3 *buffer;
  82   DWORD entriesread = 0;
  83   DWORD totalentries = 0;
  84   DWORD resume_handle = 0;
  85   char ansi_srvname[256];
  86
  87   if (servername)
  88     uni2ansi (servername, ansi_srvname);
  89
  90   do
  91     {
  92       DWORD i;
  93       DWORD rc = NetUserEnum (servername, 3, FILTER_NORMAL_ACCOUNT,
  94                               (LPBYTE *) & buffer, 1024,
  95                               &entriesread, &totalentries, &resume_handle);
  96
  97       switch (rc)
  98         {
  99         case ERROR_ACCESS_DENIED:
 100           fprintf (stderr, "Access denied\n");
 101           exit (1);
 102
 103         case ERROR_MORE_DATA:
 104         case ERROR_SUCCESS:
 105           break;
 106
 107         default:
 108           fprintf (stderr, "NetUserEnum() failed with %ld\n", rc);
 109           exit (1);
 110         }
 111
 112       for (i = 0; i < entriesread; i++)
 113         {
 114           char username[100];
 115           char fullname[100];
 116           char homedir_psx[MAX_PATH];
 117           char homedir_w32[MAX_PATH];
 118           char domain_name[100];
 119           DWORD domname_len = 100;
 120           char psid_buffer[1024];
 121           PSID psid = (PSID) psid_buffer;
 122           DWORD sid_length = 1024;
 123           SID_NAME_USE acc_type;
 124
 125           int uid = buffer[i].usri3_user_id;
 126           int gid = buffer[i].usri3_primary_group_id;
 127           uni2ansi (buffer[i].usri3_name, username);
 128           uni2ansi (buffer[i].usri3_full_name, fullname);
 129           homedir_w32[0] = homedir_psx[0] = '\0';
 130           uni2ansi (buffer[i].usri3_home_dir, homedir_w32);
 131           if (print_cygpath)
 132             cygwin_conv_to_posix_path (homedir_w32, homedir_psx);
 133           else
 134             psx_dir (homedir_w32, homedir_psx);
 135
 136           if (print_sids)
 137             {
 138               if (!LookupAccountName (servername ? ansi_srvname : NULL,
 139                                       username,
 140                                       psid, &sid_length,
 141                                       domain_name, &domname_len,
 142                                       &acc_type))
 143                 {
 144                   fprintf (stderr,
 145                            "LookupAccountName(%s,%s) failed with error %ld\n",
 146                            servername ? ansi_srvname : "NULL",
 147                            username,
 148                            GetLastError ());
 149                   continue;
 150                 }
 151               else if (acc_type == SidTypeDomain)
 152                 {
 153                   char domname[356];
 154
 155                   strcpy (domname, domain_name);
 156                   strcat (domname, "\\");
 157                   strcat (domname, username);
 158                   sid_length = 1024;
 159                   domname_len = 100;
 160                   if (!LookupAccountName (servername ? ansi_srvname : NULL,
 161                                           domname,
 162                                           psid, &sid_length,
 163                                           domain_name, &domname_len,
 164                                           &acc_type))
 165                     {
 166                       fprintf (stderr,
 167                                "LookupAccountName(%s,%s) failed with error %ld\n",
 168                                servername ? ansi_srvname : "NULL",
 169                                domname,
 170                                GetLastError ());
 171                       continue;
 172                     }
 173                 }
 174             }
 175           printf ("%s::%d:%d:%s%s%s:%s:/bin/sh\n", username, uid, gid,
 176                   fullname,
 177                   print_sids ? "," : "",
 178                   print_sids ? put_sid (psid) : "",
 179                   homedir_psx);
 180         }
 181
 182       NetApiBufferFree (buffer);
 183
 184     }
 185   while (entriesread < totalentries);
 186
 187   if (servername)
 188     NetApiBufferFree (servername);
 189
 190   return 0;
 191 }
 192
 193 int
 194 enum_local_groups (int print_sids)
 195 {
 196   LOCALGROUP_INFO_0 *buffer;
 197   DWORD entriesread = 0;
 198   DWORD totalentries = 0;
 199   DWORD resume_handle = 0;
 200
 201   do
 202     {
 203       DWORD i;
 204       DWORD rc = NetLocalGroupEnum (NULL, 0, (LPBYTE *) & buffer, 1024,
 205                                &entriesread, &totalentries, &resume_handle);
 206
 207       switch (rc)
 208         {
 209         case ERROR_ACCESS_DENIED:
 210           fprintf (stderr, "Access denied\n");
 211           exit (1);
 212
 213         case ERROR_MORE_DATA:
 214         case ERROR_SUCCESS:
 215           break;
 216
 217         default:
 218           fprintf (stderr, "NetUserEnum() failed with %ld\n", rc);
 219           exit (1);
 220         }
 221
 222       for (i = 0; i < entriesread; i++)
 223         {
 224           char localgroup_name[100];
 225           char domain_name[100];
 226           DWORD domname_len = 100;
 227           char psid_buffer[1024];
 228           PSID psid = (PSID) psid_buffer;
 229           DWORD sid_length = 1024;
 230           DWORD gid;
 231           SID_NAME_USE acc_type;
 232           uni2ansi (buffer[i].lgrpi0_name, localgroup_name);
 233
 234           if (!LookupAccountName (NULL, localgroup_name, psid,
 235                                   &sid_length, domain_name, &domname_len,
 236                                   &acc_type))
 237             {
 238               fprintf (stderr, "LookupAccountName(%s) failed with %ld\n",
 239                        localgroup_name, GetLastError ());
 240               continue;
 241             }
 242           else if (acc_type == SidTypeDomain)
 243             {
 244               char domname[356];
 245
 246               strcpy (domname, domain_name);
 247               strcat (domname, "\\");
 248               strcat (domname, localgroup_name);
 249               sid_length = 1024;
 250               domname_len = 100;
 251               if (!LookupAccountName (NULL, domname,
 252                                       psid, &sid_length,
 253                                       domain_name, &domname_len,
 254                                       &acc_type))
 255                 {
 256                   fprintf (stderr,
 257                            "LookupAccountName(%s) failed with error %ld\n",
 258                            localgroup_name, GetLastError ());
 259                   continue;
 260                 }
 261             }
 262
 263           gid = *GetSidSubAuthority (psid, *GetSidSubAuthorityCount(psid) - 1);
 264
 265           printf ("%s:*:%ld:%ld:%s%s::\n", localgroup_name, gid, gid,
 266                   print_sids ? "," : "",
 267                   print_sids ? put_sid (psid) : "");
 268         }
 269
 270       NetApiBufferFree (buffer);
 271
 272     }
 273   while (entriesread < totalentries);
 274
 275   return 0;
 276 }
 277
 278 void
 279 usage ()
 280 {
 281   fprintf (stderr, "\n");
 282   fprintf (stderr, "usage: mkpasswd [options] [domain]\n\n");
 283   fprintf (stderr, "This program prints a /etc/passwd file to stdout\n\n");
 284   fprintf (stderr, "Options are\n");
 285   fprintf (stderr, "   -l,--local              print local accounts\n");
 286   fprintf (stderr, "   -d,--domain             print domain accounts (from current domain\n");
 287   fprintf (stderr, "                           if no domain specified\n");
 288   fprintf (stderr, "   -g,--local-groups       print local group information too\n");
 289   fprintf (stderr, "   -m,--no-mount           don't use mount points for home dir\n");
 290   fprintf (stderr, "   -s,--no-sids            don't print SIDs in GCOS field\n");
 291   fprintf (stderr, "                           (this affects NT security)\n");
 292   fprintf (stderr, "   -?,--help               displays this message\n\n");
 293   fprintf (stderr, "This program does only work on Windows NT\n\n");
 294   exit (1);
 295 }
 296
 297 int
 298 main (int argc, char **argv)
 299 {
 300   LPWSTR servername = NULL;
 301   DWORD rc = ERROR_SUCCESS;
 302   WCHAR domain_name[200];
 303   int print_local = 0;
 304   int print_domain = 0;
 305   int print_local_groups = 0;
 306   int domain_name_specified = 0;
 307   int print_sids = 1;
 308   int print_cygpath = 1;
 309   int i;
 310
 311   char name[256], dom[256];
 312   DWORD len, len2;
 313   PSID sid;
 314   SID_NAME_USE use;
 315
 316   if (argc == 1)
 317     usage ();
 318
 319   else
 320     {
 321       for (i = 1; i < argc; i++)
 322         {
 323           if (!strcmp (argv[i], "-l") || !strcmp (argv[i], "--local"))
 324             print_local = 1;
 325
 326           else if (!strcmp (argv[i], "-d") || !strcmp (argv[i], "--domain"))
 327             print_domain = 1;
 328
 329           else if (!strcmp (argv[i], "-g") || !strcmp (argv[i], "--local-groups"))
 330             print_local_groups = 1;
 331
 332           else if (!strcmp (argv[i], "-s") || !strcmp (argv[i], "--no-sids"))
 333             print_sids = 0;
 334
 335           else if (!strcmp (argv[i], "-m") || !strcmp (argv[i], "--no-mount"))
 336             print_cygpath = 0;
 337
 338           else if (!strcmp (argv[i], "-?") || !strcmp (argv[i], "--help"))
 339             usage ();
 340
 341           else
 342             {
 343               mbstowcs (domain_name, argv[i], (strlen (argv[i]) + 1));
 344               domain_name_specified = 1;
 345             }
 346         }
 347     }
 348
 349   /* FIXME: this needs to take Windows 98 into account. */
 350   if (GetVersion () >= 0x80000000)
 351     {
 352       fprintf (stderr, "The required functionality is not supported by Windows 95. Sorry.\n");
 353       exit (1);
 354     }
 355
 356   /*
 357    * Get `Everyone' group
 358   */
 359   if (AllocateAndInitializeSid (&sid_world_auth, 1, SECURITY_WORLD_RID,
 360                                 0, 0, 0, 0, 0, 0, 0, &sid))
 361     {
 362       if (LookupAccountSid (NULL, sid,
 363                             name, (len = 256, &len),
 364                             dom, (len2 = 256, &len),
 365                             &use))
 366         printf ("%s:*:%ld:%ld:%s%s::\n", name,
 367                                          SECURITY_WORLD_RID,
 368                                          SECURITY_WORLD_RID,
 369                                          print_sids ? "," : "",
 370                                          print_sids ? put_sid (sid) : "");
 371       FreeSid (sid);
 372     }
 373
 374   /*
 375    * Get `system' group
 376   */
 377   if (AllocateAndInitializeSid (&sid_nt_auth, 1, SECURITY_LOCAL_SYSTEM_RID,
 378                                 0, 0, 0, 0, 0, 0, 0, &sid))
 379     {
 380       if (LookupAccountSid (NULL, sid,
 381                             name, (len = 256, &len),
 382                             dom, (len2 = 256, &len),
 383                             &use))
 384         printf ("%s:*:%ld:%ld:%s%s::\n", name,
 385                                          SECURITY_LOCAL_SYSTEM_RID,
 386                                          SECURITY_LOCAL_SYSTEM_RID,
 387                                          print_sids ? "," : "",
 388                                          print_sids ? put_sid (sid) : "");
 389       FreeSid (sid);
 390     }
 391
 392   /*
 393    * Get `administrators' group
 394   */
 395   if (AllocateAndInitializeSid (&sid_nt_auth, 2, SECURITY_BUILTIN_DOMAIN_RID,
 396                                 DOMAIN_ALIAS_RID_ADMINS,
 397                                 0, 0, 0, 0, 0, 0, &sid))
 398     {
 399       if (LookupAccountSid (NULL, sid,
 400                             name, (len = 256, &len),
 401                             dom, (len2 = 256, &len),
 402                             &use))
 403         printf ("%s:*:%ld:%ld:%s%s::\n", name,
 404                                          DOMAIN_ALIAS_RID_ADMINS,
 405                                          DOMAIN_ALIAS_RID_ADMINS,
 406                                          print_sids ? "," : "",
 407                                          print_sids ? put_sid (sid) : "");
 408       FreeSid (sid);
 409     }
 410
 411   if (print_local_groups)
 412     enum_local_groups (print_sids);
 413
 414   if (print_domain)
 415     {
 416       if (domain_name_specified)
 417         rc = NetGetAnyDCName (NULL, domain_name, (LPBYTE *) & servername);
 418
 419       else
 420         rc = NetGetAnyDCName (NULL, NULL, (LPBYTE *) & servername);
 421
 422       if (rc != ERROR_SUCCESS)
 423         {
 424           fprintf (stderr, "Cannot get DC, code = %ld\n", rc);
 425           exit (1);
 426         }
 427
 428       enum_users (servername, print_sids, print_cygpath);
 429     }
 430
 431   if (print_local)
 432     enum_users (NULL, print_sids, print_cygpath);
 433
 434   if (servername)
 435     NetApiBufferFree (servername);
 436
 437   return 0;
 438 }