Blame 0015-make-Samba-data-tool-configurable.patch

461678c
From 9b73f79a2436760b8278377014bf78a144a427ae Mon Sep 17 00:00:00 2001
461678c
From: Sumit Bose <sbose@redhat.com>
461678c
Date: Thu, 1 Feb 2018 14:26:22 +0100
461678c
Subject: [PATCH 15/23] make Samba data tool configurable
461678c
461678c
Allow to specify an alternative path to Samba's net utility at configure
461678c
time and at run time.
461678c
461678c
https://bugs.freedesktop.org/show_bug.cgi?id=100118
461678c
461678c
Reviewed-by: Jakub Hrozek <jhrozek@redhat.com>
461678c
---
461678c
 configure.ac                    | 13 ++++++++++++
461678c
 doc/adcli.xml                   | 21 ++++++++++++++++++-
461678c
 doc/samba_data_tool_path.xml.in |  1 +
461678c
 library/adenroll.c              | 46 ++++++++++++++++++++++++++++++++++-------
461678c
 library/adenroll.h              |  5 +++++
461678c
 tools/computer.c                | 16 ++++++++++++++
461678c
 7 files changed, 95 insertions(+), 8 deletions(-)
461678c
 create mode 100644 doc/samba_data_tool_path.xml.in
461678c
461678c
diff --git a/configure.ac b/configure.ac
461678c
index fe86638..68877c7 100644
461678c
--- a/configure.ac
461678c
+++ b/configure.ac
461678c
@@ -291,6 +291,18 @@ else
461678c
 	AC_DEFINE_UNQUOTED(BIN_ECHO, "$BIN_ECHO", [path to echo, used in unit test])
461678c
 fi
461678c
 
461678c
+AC_MSG_CHECKING([where is Samba's net utility])
461678c
+AC_ARG_WITH([samba_data_tool],
461678c
+              AC_HELP_STRING([--with-samba-data-tool=/path],
461678c
+              [Path to Samba's net utility]),
461678c
+              [],
461678c
+              [with_samba_data_tool=/usr/bin/net])
461678c
+AC_MSG_RESULT([$with_samba_data_tool])
461678c
+
461678c
+AC_DEFINE_UNQUOTED(SAMBA_DATA_TOOL, "$with_samba_data_tool",
461678c
+                   [Path to Samba's net utility])
461678c
+
461678c
+AC_SUBST(SAMBA_DATA_TOOL, [$with_samba_data_tool])
461678c
 # ---------------------------------------------------------------------
461678c
 
461678c
 ADCLI_LT_RELEASE=$ADCLI_CURRENT:$ADCLI_REVISION:$ADCLI_AGE
461678c
@@ -300,6 +312,7 @@ AC_CONFIG_FILES([Makefile
461678c
 	build/Makefile
461678c
 	doc/Makefile
461678c
 	doc/version.xml
461678c
+	doc/samba_data_tool_path.xml
461678c
 	library/Makefile
461678c
 	tools/Makefile
461678c
 ])
461678c
diff --git a/doc/adcli.xml b/doc/adcli.xml
461678c
index fbc6c63..c2b7760 100644
461678c
--- a/doc/adcli.xml
461678c
+++ b/doc/adcli.xml
461678c
@@ -1,6 +1,9 @@
461678c
 
461678c
 
461678c
-	"http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd">
461678c
+	"http://www.oasis-open.org/docbook/xml/4.3/docbookx.dtd"
461678c
+[
461678c
+	
461678c
+]>
461678c
 
461678c
 <refentry id="adcli">
461678c
 
461678c
@@ -307,6 +310,14 @@ Password for Administrator:
461678c
 			<citerefentry><refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>
461678c
 			for details.</para></listitem>
461678c
 		</varlistentry>
461678c
+		<varlistentry>
461678c
+			<term><option>--samba-data-tool=<parameter>/path/to/net</parameter></option></term>
461678c
+			<listitem><para>If Samba's <command>net</command>
461678c
+			cannot be found at
461678c
+			<filename>&samba_data_tool;</filename> this option can
461678c
+			be used to specific an alternative location with the
461678c
+			help of an absolute path.</para></listitem>
461678c
+		</varlistentry>
461678c
 	</variablelist>
461678c
 
461678c
 </refsect1>
461678c
@@ -412,6 +423,14 @@ $ adcli update --login-ccache=/tmp/krbcc_123
461678c
 			<citerefentry><refentrytitle>smb.conf</refentrytitle><manvolnum>5</manvolnum></citerefentry>
461678c
 			for details.</para></listitem>
461678c
 		</varlistentry>
461678c
+		<varlistentry>
461678c
+			<term><option>--samba-data-tool=<parameter>/path/to/net</parameter></option></term>
461678c
+			<listitem><para>If Samba's <command>net</command>
461678c
+			cannot be found at
461678c
+			<filename>&samba_data_tool;</filename> this option can
461678c
+			be used to specific an alternative location with the
461678c
+			help of an absolute path.</para></listitem>
461678c
+		</varlistentry>
461678c
 	</variablelist>
461678c
 
461678c
 </refsect1>
461678c
diff --git a/doc/samba_data_tool_path.xml.in b/doc/samba_data_tool_path.xml.in
461678c
new file mode 100644
461678c
index 0000000..a667c57
461678c
--- /dev/null
461678c
+++ b/doc/samba_data_tool_path.xml.in
461678c
@@ -0,0 +1 @@
461678c
+@SAMBA_DATA_TOOL@
461678c
diff --git a/library/adenroll.c b/library/adenroll.c
461678c
index 20731cd..a693049 100644
461678c
--- a/library/adenroll.c
461678c
+++ b/library/adenroll.c
461678c
@@ -42,6 +42,10 @@
461678c
 #include <stdio.h>
461678c
 #include <unistd.h>
461678c
 
461678c
+#ifndef SAMBA_DATA_TOOL
461678c
+#define SAMBA_DATA_TOOL "/usr/bin/net"
461678c
+#endif
461678c
+
461678c
 static krb5_enctype v60_later_enctypes[] = {
461678c
 	ENCTYPE_AES256_CTS_HMAC_SHA1_96,
461678c
 	ENCTYPE_AES128_CTS_HMAC_SHA1_96,
461678c
@@ -100,6 +104,7 @@ struct _adcli_enroll {
461678c
 	int keytab_enctypes_explicit;
461678c
 	unsigned int computer_password_lifetime;
461678c
 	int computer_password_lifetime_explicit;
461678c
+	char *samba_data_tool;
461678c
 };
461678c
 
461678c
 static adcli_result
461678c
@@ -1537,26 +1542,33 @@ static adcli_result
461678c
 update_samba_data (adcli_enroll *enroll)
461678c
 {
461678c
 	int ret;
461678c
-	char *argv_pw[] = { "/usr/bin/net", "changesecretpw", "-i", "-f", NULL };
461678c
-	char *argv_sid[] = { "/usr/bin/net", "setdomainsid", NULL, NULL };
461678c
+	char *argv_pw[] = { NULL, "changesecretpw", "-i", "-f", NULL };
461678c
+	char *argv_sid[] = { NULL, "setdomainsid", NULL, NULL };
461678c
+
461678c
+	argv_pw[0] = (char *) adcli_enroll_get_samba_data_tool (enroll);
461678c
+	if (argv_pw[0] ==NULL) {
461678c
+		_adcli_err ("Samba data tool not available.");
461678c
+		return ADCLI_ERR_FAIL;
461678c
+	}
461678c
+	argv_sid[0] = argv_pw[0];
461678c
 
461678c
-	_adcli_info ("Trying to set Samba secret.\n");
461678c
+	_adcli_info ("Trying to set Samba secret.");
461678c
 	ret = _adcli_call_external_program (argv_pw[0], argv_pw,
461678c
 	                                    enroll->computer_password, NULL, NULL);
461678c
 	if (ret != ADCLI_SUCCESS) {
461678c
-		_adcli_err ("Failed to set Samba computer account password.\n");
461678c
+		_adcli_err ("Failed to set Samba computer account password.");
461678c
 	}
461678c
 
461678c
 	argv_sid[2] = (char *) adcli_conn_get_domain_sid (enroll->conn);
461678c
 	if (argv_sid[2] == NULL) {
461678c
-		_adcli_err ("Domain SID not available.\n");
461678c
+		_adcli_err ("Domain SID not available.");
461678c
 	} else {
461678c
-		_adcli_info ("Trying to set domain SID %s for Samba.\n",
461678c
+		_adcli_info ("Trying to set domain SID %s for Samba.",
461678c
 		             argv_sid[2]);
461678c
 		ret = _adcli_call_external_program (argv_sid[0], argv_sid,
461678c
 		                                    NULL, NULL, NULL);
461678c
 		if (ret != ADCLI_SUCCESS) {
461678c
-			_adcli_err ("Failed to set Samba domain SID.\n");
461678c
+			_adcli_err ("Failed to set Samba domain SID.");
461678c
 		}
461678c
 	}
461678c
 
461678c
@@ -1951,6 +1963,9 @@ adcli_enroll_new (adcli_conn *conn)
461678c
 	enroll->os_name = strdup (value);
461678c
 	return_val_if_fail (enroll->os_name != NULL, NULL);
461678c
 
461678c
+	enroll->samba_data_tool = strdup (SAMBA_DATA_TOOL);
461678c
+	return_val_if_fail (enroll->samba_data_tool != NULL, NULL);
461678c
+
461678c
 	return enroll;
461678c
 }
461678c
 
461678c
@@ -1978,6 +1993,7 @@ enroll_free (adcli_enroll *enroll)
461678c
 	free (enroll->os_name);
461678c
 	free (enroll->os_version);
461678c
 	free (enroll->os_service_pack);
461678c
+	free (enroll->samba_data_tool);
461678c
 
461678c
 	free (enroll->user_principal);
461678c
 	_adcli_strv_free (enroll->service_names);
461678c
@@ -2343,3 +2359,19 @@ adcli_enroll_set_computer_password_lifetime (adcli_enroll *enroll,
461678c
 
461678c
 	enroll->computer_password_lifetime_explicit = 1;
461678c
 }
461678c
+
461678c
+void
461678c
+adcli_enroll_set_samba_data_tool (adcli_enroll *enroll, const char *value)
461678c
+{
461678c
+	return_if_fail (enroll != NULL);
461678c
+	if (value != NULL && value[0] != '\0') {
461678c
+		_adcli_str_set (&enroll->samba_data_tool, value);
461678c
+	}
461678c
+}
461678c
+
461678c
+const char *
461678c
+adcli_enroll_get_samba_data_tool (adcli_enroll *enroll)
461678c
+{
461678c
+	return_val_if_fail (enroll != NULL, NULL);
461678c
+	return enroll->samba_data_tool;
461678c
+}
461678c
diff --git a/library/adenroll.h b/library/adenroll.h
461678c
index 32c9764..31ca0bc 100644
461678c
--- a/library/adenroll.h
461678c
+++ b/library/adenroll.h
461678c
@@ -141,4 +141,9 @@ const char *       adcli_enroll_get_os_service_pack     (adcli_enroll *enroll);
461678c
 void               adcli_enroll_set_os_service_pack     (adcli_enroll *enroll,
461678c
                                                          const char *value);
461678c
 
461678c
+void               adcli_enroll_set_samba_data_tool     (adcli_enroll *enroll,
461678c
+                                                         const char *value);
461678c
+
461678c
+const char *       adcli_enroll_get_samba_data_tool     (adcli_enroll *enroll);
461678c
+
461678c
 #endif /* ADENROLL_H_ */
461678c
diff --git a/tools/computer.c b/tools/computer.c
461678c
index fc646f2..f86548b 100644
461678c
--- a/tools/computer.c
461678c
+++ b/tools/computer.c
461678c
@@ -30,6 +30,7 @@
461678c
 #include <err.h>
461678c
 #include <stdio.h>
461678c
 #include <errno.h>
461678c
+#include <unistd.h>
461678c
 
461678c
 static void
461678c
 dump_details (adcli_conn *conn,
461678c
@@ -107,6 +108,7 @@ typedef enum {
461678c
 	opt_user_principal,
461678c
 	opt_computer_password_lifetime,
461678c
 	opt_add_samba_data,
461678c
+	opt_samba_data_tool,
461678c
 } Option;
461678c
 
461678c
 static adcli_tool_desc common_usages[] = {
461678c
@@ -145,6 +147,7 @@ static adcli_tool_desc common_usages[] = {
461678c
 	                     "successful join" },
461678c
 	{ opt_add_samba_data, "add domain SID and computer account password\n"
461678c
 	                      "to the Samba specific configuration database" },
461678c
+	{ opt_samba_data_tool, "Absolute path to the tool used for add-samba-data" },
461678c
 	{ opt_verbose, "show verbose progress and failure messages", },
461678c
 	{ 0 },
461678c
 };
461678c
@@ -160,6 +163,7 @@ parse_option (Option opt,
461678c
 	static int stdin_password = 0;
461678c
 	char *endptr;
461678c
 	unsigned int lifetime;
461678c
+	int ret;
461678c
 
461678c
 	switch (opt) {
461678c
 	case opt_login_ccache:
461678c
@@ -265,6 +269,16 @@ parse_option (Option opt,
461678c
 
461678c
 		adcli_enroll_set_computer_password_lifetime (enroll, lifetime);
461678c
 		return;
461678c
+	case opt_samba_data_tool:
461678c
+		errno = 0;
461678c
+		ret = access (optarg, X_OK);
461678c
+		if (ret != 0) {
461678c
+			ret = errno;
461678c
+			errx (EUSAGE, "Failed to access tool to add Samba data: %s", strerror (ret));
461678c
+		} else {
461678c
+			adcli_enroll_set_samba_data_tool (enroll, optarg);
461678c
+		}
461678c
+		return;
461678c
 	case opt_verbose:
461678c
 		return;
461678c
 
461678c
@@ -331,6 +345,7 @@ adcli_tool_computer_join (adcli_conn *conn,
461678c
 		{ "show-details", no_argument, NULL, opt_show_details },
461678c
 		{ "show-password", no_argument, NULL, opt_show_password },
461678c
 		{ "add-samba-data", no_argument, NULL, opt_add_samba_data },
461678c
+		{ "samba-data-tool", no_argument, NULL, opt_samba_data_tool },
461678c
 		{ "verbose", no_argument, NULL, opt_verbose },
461678c
 		{ "help", no_argument, NULL, 'h' },
461678c
 		{ 0 },
461678c
@@ -434,6 +449,7 @@ adcli_tool_computer_update (adcli_conn *conn,
461678c
 		{ "show-details", no_argument, NULL, opt_show_details },
461678c
 		{ "show-password", no_argument, NULL, opt_show_password },
461678c
 		{ "add-samba-data", no_argument, NULL, opt_add_samba_data },
461678c
+		{ "samba-data-tool", no_argument, NULL, opt_samba_data_tool },
461678c
 		{ "verbose", no_argument, NULL, opt_verbose },
461678c
 		{ "help", no_argument, NULL, 'h' },
461678c
 		{ 0 },
461678c
-- 
461678c
2.14.4
461678c