2
* Unix SMB/CIFS implementation.
4
* Copyright (C) Guenther Deschner 2007-2008
6
* This program is free software; you can redistribute it and/or modify
7
* it under the terms of the GNU General Public License as published by
8
* the Free Software Foundation; either version 3 of the License, or
9
* (at your option) any later version.
11
* This program is distributed in the hope that it will be useful,
12
* but WITHOUT ANY WARRANTY; without even the implied warranty of
13
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14
* GNU General Public License for more details.
16
* You should have received a copy of the GNU General Public License
17
* along with this program; if not, see <http://www.gnu.org/licenses/>.
22
static struct gp_extension *extensions = NULL;
24
/****************************************************************
25
****************************************************************/
27
struct gp_extension *get_gp_extension_list(void)
32
/****************************************************************
33
****************************************************************/
35
/* see http://support.microsoft.com/kb/216358/en-us/ for more info */
37
struct gp_extension_reg_table gpext_reg_vals[] = {
38
{ "DllName", REG_EXPAND_SZ },
39
{ "ProcessGroupPolicy", REG_SZ },
40
{ "NoMachinePolicy", REG_DWORD },
41
{ "NoUserPolicy", REG_DWORD },
42
{ "NoSlowLink", REG_DWORD },
43
{ "NoBackgroundPolicy", REG_DWORD },
44
{ "NoGPOListChanges", REG_DWORD },
45
{ "PerUserLocalSettings", REG_DWORD },
46
{ "RequiresSuccessfulRegistry", REG_DWORD },
47
{ "EnableAsynchronousProcessing", REG_DWORD },
48
{ "ExtensionDebugLevel", REG_DWORD },
50
{ "GenerateGroupPolicy", REG_SZ }, /* not supported on w2k */
51
{ "NotifyLinkTransition", REG_DWORD },
52
{ "ProcessGroupPolicyEx", REG_SZ }, /* not supported on w2k */
53
{ "ExtensionEventSource", REG_MULTI_SZ }, /* not supported on w2k */
54
{ "GenerateGroupPolicy", REG_SZ },
55
{ "MaxNoGPOListChangesInterval", REG_DWORD },
59
/****************************************************************
60
****************************************************************/
62
static struct gp_extension *get_extension_by_name(struct gp_extension *be,
65
struct gp_extension *b;
67
for (b = be; b; b = b->next) {
68
if (strequal(b->name, name)) {
76
/****************************************************************
77
****************************************************************/
79
static struct gp_extension_methods *get_methods_by_name(struct gp_extension *be,
82
struct gp_extension *b;
84
for (b = be; b; b = b->next) {
85
if (strequal(b->name, name)) {
93
/****************************************************************
94
****************************************************************/
96
NTSTATUS unregister_gp_extension(const char *name)
98
struct gp_extension *ext;
100
ext = get_extension_by_name(extensions, name);
105
DLIST_REMOVE(extensions, ext);
108
DEBUG(2,("Successfully removed GP extension '%s'\n", name));
113
/****************************************************************
114
****************************************************************/
116
NTSTATUS register_gp_extension(TALLOC_CTX *gpext_ctx,
120
struct gp_extension_methods *methods)
122
struct gp_extension_methods *test;
123
struct gp_extension *entry;
127
return NT_STATUS_INTERNAL_DB_ERROR;
130
if ((version != SMB_GPEXT_INTERFACE_VERSION)) {
131
DEBUG(0,("Failed to register gp extension.\n"
132
"The module was compiled against "
133
"SMB_GPEXT_INTERFACE_VERSION %d,\n"
134
"current SMB_GPEXT_INTERFACE_VERSION is %d.\n"
135
"Please recompile against the current "
136
"version of samba!\n",
137
version, SMB_GPEXT_INTERFACE_VERSION));
138
return NT_STATUS_OBJECT_TYPE_MISMATCH;
141
if (!guid || !name || !name[0] || !methods) {
142
DEBUG(0,("Called with NULL pointer or empty name!\n"));
143
return NT_STATUS_INVALID_PARAMETER;
146
test = get_methods_by_name(extensions, name);
148
DEBUG(0,("GP extension module %s already registered!\n",
150
return NT_STATUS_OBJECT_NAME_COLLISION;
153
entry = TALLOC_ZERO_P(gpext_ctx, struct gp_extension);
154
NT_STATUS_HAVE_NO_MEMORY(entry);
156
entry->name = talloc_strdup(gpext_ctx, name);
157
NT_STATUS_HAVE_NO_MEMORY(entry->name);
159
entry->guid = TALLOC_ZERO_P(gpext_ctx, struct GUID);
160
NT_STATUS_HAVE_NO_MEMORY(entry->guid);
161
status = GUID_from_string(guid, entry->guid);
162
NT_STATUS_NOT_OK_RETURN(status);
164
entry->methods = methods;
165
DLIST_ADD(extensions, entry);
167
DEBUG(2,("Successfully added GP extension '%s' %s\n",
168
name, GUID_string2(gpext_ctx, entry->guid)));
173
/****************************************************************
174
****************************************************************/
176
static NTSTATUS gp_extension_init_module(TALLOC_CTX *mem_ctx,
178
struct gp_extension **gpext)
181
struct gp_extension *ext = NULL;
183
ext = TALLOC_ZERO_P(mem_ctx, struct gp_extension);
184
NT_STATUS_HAVE_NO_MEMORY(gpext);
186
ext->methods = get_methods_by_name(extensions, name);
189
status = smb_probe_module(SAMBA_SUBSYSTEM_GPEXT,
191
if (!NT_STATUS_IS_OK(status)) {
195
ext->methods = get_methods_by_name(extensions, name);
197
return NT_STATUS_DLL_INIT_FAILED;
206
/****************************************************************
207
****************************************************************/
209
static bool add_gp_extension_reg_entry_to_array(TALLOC_CTX *mem_ctx,
210
struct gp_extension_reg_entry *entry,
211
struct gp_extension_reg_entry **entries,
214
*entries = TALLOC_REALLOC_ARRAY(mem_ctx, *entries,
215
struct gp_extension_reg_entry,
217
if (*entries == NULL) {
222
(*entries)[*num].value = entry->value;
223
(*entries)[*num].data = entry->data;
229
/****************************************************************
230
****************************************************************/
232
static bool add_gp_extension_reg_info_entry_to_array(TALLOC_CTX *mem_ctx,
233
struct gp_extension_reg_info_entry *entry,
234
struct gp_extension_reg_info_entry **entries,
237
*entries = TALLOC_REALLOC_ARRAY(mem_ctx, *entries,
238
struct gp_extension_reg_info_entry,
240
if (*entries == NULL) {
245
(*entries)[*num].guid = entry->guid;
246
(*entries)[*num].num_entries = entry->num_entries;
247
(*entries)[*num].entries = entry->entries;
253
/****************************************************************
254
****************************************************************/
256
static NTSTATUS gp_ext_info_add_reg(TALLOC_CTX *mem_ctx,
257
struct gp_extension_reg_info_entry *entry,
259
enum winreg_Type type,
262
struct gp_extension_reg_entry *reg_entry = NULL;
263
struct registry_value *data = NULL;
265
reg_entry = TALLOC_ZERO_P(mem_ctx, struct gp_extension_reg_entry);
266
NT_STATUS_HAVE_NO_MEMORY(reg_entry);
268
data = TALLOC_ZERO_P(mem_ctx, struct registry_value);
269
NT_STATUS_HAVE_NO_MEMORY(data);
276
data->v.sz.str = talloc_strdup(mem_ctx, data_s);
277
NT_STATUS_HAVE_NO_MEMORY(data->v.sz.str);
278
data->v.sz.len = strlen(data_s);
281
data->v.dword = atoi(data_s);
284
return NT_STATUS_NOT_SUPPORTED;
287
reg_entry->value = value;
288
reg_entry->data = data;
290
if (!add_gp_extension_reg_entry_to_array(mem_ctx, reg_entry,
292
&entry->num_entries)) {
293
return NT_STATUS_NO_MEMORY;
299
/****************************************************************
300
****************************************************************/
302
static NTSTATUS gp_ext_info_add_reg_table(TALLOC_CTX *mem_ctx,
304
struct gp_extension_reg_info_entry *entry,
305
struct gp_extension_reg_table *table)
308
const char *module_name = NULL;
311
module_name = talloc_asprintf(mem_ctx, "%s.%s", module, shlib_ext());
312
NT_STATUS_HAVE_NO_MEMORY(module_name);
314
status = gp_ext_info_add_reg(mem_ctx, entry,
315
"DllName", REG_EXPAND_SZ, module_name);
316
NT_STATUS_NOT_OK_RETURN(status);
318
for (i=0; table[i].val; i++) {
319
status = gp_ext_info_add_reg(mem_ctx, entry,
323
NT_STATUS_NOT_OK_RETURN(status);
329
/****************************************************************
330
****************************************************************/
332
NTSTATUS gp_ext_info_add_entry(TALLOC_CTX *mem_ctx,
334
const char *ext_guid,
335
struct gp_extension_reg_table *table,
336
struct gp_extension_reg_info *info)
339
struct gp_extension_reg_info_entry *entry = NULL;
341
entry = TALLOC_ZERO_P(mem_ctx, struct gp_extension_reg_info_entry);
342
NT_STATUS_HAVE_NO_MEMORY(entry);
344
status = GUID_from_string(ext_guid, &entry->guid);
345
NT_STATUS_NOT_OK_RETURN(status);
347
status = gp_ext_info_add_reg_table(mem_ctx, module, entry, table);
348
NT_STATUS_NOT_OK_RETURN(status);
350
if (!add_gp_extension_reg_info_entry_to_array(mem_ctx, entry,
352
&info->num_entries)) {
353
return NT_STATUS_NO_MEMORY;
359
/****************************************************************
360
****************************************************************/
362
static bool gp_extension_reg_info_verify_entry(struct gp_extension_reg_entry *entry)
366
for (i=0; gpext_reg_vals[i].val; i++) {
368
if ((strequal(entry->value, gpext_reg_vals[i].val)) &&
369
(entry->data->type == gpext_reg_vals[i].type)) {
377
/****************************************************************
378
****************************************************************/
380
static bool gp_extension_reg_info_verify(struct gp_extension_reg_info_entry *entry)
384
for (i=0; i < entry->num_entries; i++) {
385
if (!gp_extension_reg_info_verify_entry(&entry->entries[i])) {
393
/****************************************************************
394
****************************************************************/
396
static WERROR gp_extension_store_reg_vals(TALLOC_CTX *mem_ctx,
397
struct registry_key *key,
398
struct gp_extension_reg_info_entry *entry)
400
WERROR werr = WERR_OK;
403
for (i=0; i < entry->num_entries; i++) {
405
werr = reg_setvalue(key,
406
entry->entries[i].value,
407
entry->entries[i].data);
408
W_ERROR_NOT_OK_RETURN(werr);
414
/****************************************************************
415
****************************************************************/
417
static WERROR gp_extension_store_reg_entry(TALLOC_CTX *mem_ctx,
418
struct gp_registry_context *reg_ctx,
419
struct gp_extension_reg_info_entry *entry)
422
struct registry_key *key = NULL;
423
const char *subkeyname = NULL;
425
if (!gp_extension_reg_info_verify(entry)) {
426
return WERR_INVALID_PARAM;
429
subkeyname = GUID_string2(mem_ctx, &entry->guid);
430
W_ERROR_HAVE_NO_MEMORY(subkeyname);
432
strupper_m(CONST_DISCARD(char *,subkeyname));
434
werr = gp_store_reg_subkey(mem_ctx,
438
W_ERROR_NOT_OK_RETURN(werr);
440
werr = gp_extension_store_reg_vals(mem_ctx,
443
W_ERROR_NOT_OK_RETURN(werr);
448
/****************************************************************
449
****************************************************************/
451
static WERROR gp_extension_store_reg(TALLOC_CTX *mem_ctx,
452
struct gp_registry_context *reg_ctx,
453
struct gp_extension_reg_info *info)
455
WERROR werr = WERR_OK;
462
for (i=0; i < info->num_entries; i++) {
463
werr = gp_extension_store_reg_entry(mem_ctx,
466
W_ERROR_NOT_OK_RETURN(werr);
472
/****************************************************************
473
****************************************************************/
475
static NTSTATUS gp_glob_ext_list(TALLOC_CTX *mem_ctx,
476
const char ***ext_list,
477
size_t *ext_list_len)
479
SMB_STRUCT_DIR *dir = NULL;
480
SMB_STRUCT_DIRENT *dirent = NULL;
482
dir = sys_opendir(modules_path(SAMBA_SUBSYSTEM_GPEXT));
484
return map_nt_error_from_unix(errno);
487
while ((dirent = sys_readdir(dir))) {
489
fstring name; /* forgive me... */
492
if ((strequal(dirent->d_name, ".")) ||
493
(strequal(dirent->d_name, ".."))) {
497
p = strrchr(dirent->d_name, '.');
500
return NT_STATUS_NO_MEMORY;
503
if (!strcsequal(p+1, shlib_ext())) {
504
DEBUG(10,("gp_glob_ext_list: not a *.so file: %s\n",
509
fstrcpy(name, dirent->d_name);
510
name[PTR_DIFF(p, dirent->d_name)] = 0;
512
if (!add_string_to_array(mem_ctx, name, ext_list,
513
(int *)ext_list_len)) {
515
return NT_STATUS_NO_MEMORY;
524
/****************************************************************
525
****************************************************************/
527
NTSTATUS shutdown_gp_extensions(void)
529
struct gp_extension *ext = NULL;
531
for (ext = extensions; ext; ext = ext->next) {
532
if (ext->methods && ext->methods->shutdown) {
533
ext->methods->shutdown();
540
/****************************************************************
541
****************************************************************/
543
NTSTATUS init_gp_extensions(TALLOC_CTX *mem_ctx)
548
const char **ext_array = NULL;
549
size_t ext_array_len = 0;
550
struct gp_extension *gpext = NULL;
551
struct gp_registry_context *reg_ctx = NULL;
553
if (get_gp_extension_list()) {
557
status = gp_glob_ext_list(mem_ctx, &ext_array, &ext_array_len);
558
NT_STATUS_NOT_OK_RETURN(status);
560
for (i=0; i<ext_array_len; i++) {
562
struct gp_extension_reg_info *info = NULL;
564
status = gp_extension_init_module(mem_ctx, ext_array[i],
566
if (!NT_STATUS_IS_OK(status)) {
570
if (gpext->methods->get_reg_config) {
572
status = gpext->methods->initialize(mem_ctx);
573
if (!NT_STATUS_IS_OK(status)) {
574
gpext->methods->shutdown();
578
status = gpext->methods->get_reg_config(mem_ctx,
580
if (!NT_STATUS_IS_OK(status)) {
581
gpext->methods->shutdown();
586
struct nt_user_token *token;
588
token = registry_create_system_token(mem_ctx);
589
NT_STATUS_HAVE_NO_MEMORY(token);
591
werr = gp_init_reg_ctx(mem_ctx,
592
KEY_WINLOGON_GPEXT_PATH,
596
if (!W_ERROR_IS_OK(werr)) {
597
status = werror_to_ntstatus(werr);
598
gpext->methods->shutdown();
603
werr = gp_extension_store_reg(mem_ctx, reg_ctx, info);
604
if (!W_ERROR_IS_OK(werr)) {
605
DEBUG(1,("gp_extension_store_reg failed: %s\n",
608
gpext->methods->shutdown();
609
status = werror_to_ntstatus(werr);
618
TALLOC_FREE(reg_ctx);
623
/****************************************************************
624
****************************************************************/
626
NTSTATUS free_gp_extensions(void)
628
struct gp_extension *ext, *ext_next = NULL;
630
for (ext = extensions; ext; ext = ext_next) {
631
ext_next = ext->next;
632
DLIST_REMOVE(extensions, ext);
641
/****************************************************************
642
****************************************************************/
644
void debug_gpext_header(int lvl,
647
struct GROUP_POLICY_OBJECT *gpo,
648
const char *extension_guid,
649
const char *snapin_guid)
651
char *flags_str = NULL;
653
DEBUG(lvl,("%s\n", name));
654
DEBUGADD(lvl,("\tgpo: %s (%s)\n", gpo->name,
656
DEBUGADD(lvl,("\tcse extension: %s (%s)\n", extension_guid,
657
cse_gpo_guid_string_to_name(extension_guid)));
658
DEBUGADD(lvl,("\tgplink: %s\n", gpo->link));
659
DEBUGADD(lvl,("\tsnapin: %s (%s)\n", snapin_guid,
660
cse_snapin_gpo_guid_string_to_name(snapin_guid)));
662
flags_str = gpo_flag_str(flags);
663
DEBUGADD(lvl,("\tflags: 0x%08x %s\n", flags, flags_str));
664
SAFE_FREE(flags_str);
667
NTSTATUS process_gpo_list_with_extension(ADS_STRUCT *ads,
670
const struct nt_user_token *token,
671
struct GROUP_POLICY_OBJECT *gpo_list,
672
const char *extension_guid,
673
const char *snapin_guid)
678
/****************************************************************
679
****************************************************************/
681
NTSTATUS gpext_process_extension(ADS_STRUCT *ads,
684
const struct nt_user_token *token,
685
struct registry_key *root_key,
686
struct GROUP_POLICY_OBJECT *gpo,
687
const char *extension_guid,
688
const char *snapin_guid)
691
struct gp_extension *ext = NULL;
693
bool cse_found = false;
695
status = init_gp_extensions(mem_ctx);
696
if (!NT_STATUS_IS_OK(status)) {
697
DEBUG(1,("init_gp_extensions failed: %s\n",
702
status = GUID_from_string(extension_guid, &guid);
703
if (!NT_STATUS_IS_OK(status)) {
707
for (ext = extensions; ext; ext = ext->next) {
709
if (GUID_equal(ext->guid, &guid)) {
719
status = ext->methods->initialize(mem_ctx);
720
NT_STATUS_NOT_OK_RETURN(status);
722
status = ext->methods->process_group_policy(ads,
730
if (!NT_STATUS_IS_OK(status)) {
731
ext->methods->shutdown();
737
if (flags & GPO_INFO_FLAG_VERBOSE) {
738
DEBUG(0,("process_extension: no extension available for:\n"));
739
DEBUGADD(0,("%s (%s) (snapin: %s)\n",
741
cse_gpo_guid_string_to_name(extension_guid),