/* mkpasswd.c: Copyright 1997, 1998, 1999, 2000, 2001, 2002, 2003 Red Hat, Inc. This file is part of Cygwin. This software is a copyrighted work licensed under the terms of the Cygwin license. Please consult the file "CYGWIN_LICENSE" for details. */ #include #include #include #include #include #include #include #include #include #include #include #include #include #include static const char version[] = "$Revision$"; SID_IDENTIFIER_AUTHORITY sid_world_auth = {SECURITY_WORLD_SID_AUTHORITY}; SID_IDENTIFIER_AUTHORITY sid_nt_auth = {SECURITY_NT_AUTHORITY}; NET_API_STATUS WINAPI (*netapibufferfree)(PVOID); NET_API_STATUS WINAPI (*netuserenum)(LPWSTR,DWORD,DWORD,PBYTE*,DWORD,PDWORD,PDWORD,PDWORD); NET_API_STATUS WINAPI (*netlocalgroupenum)(LPWSTR,DWORD,PBYTE*,DWORD,PDWORD,PDWORD,PDWORD); NET_API_STATUS WINAPI (*netgetdcname)(LPWSTR,LPWSTR,PBYTE*); NET_API_STATUS WINAPI (*netusergetinfo)(LPWSTR,LPWSTR,DWORD,PBYTE*); #ifndef min #define min(a,b) (((a)<(b))?(a):(b)) #endif BOOL load_netapi () { HANDLE h = LoadLibrary ("netapi32.dll"); if (!h) return FALSE; if (!(netapibufferfree = (void *) GetProcAddress (h, "NetApiBufferFree"))) return FALSE; if (!(netuserenum = (void *) GetProcAddress (h, "NetUserEnum"))) return FALSE; if (!(netlocalgroupenum = (void *) GetProcAddress (h, "NetLocalGroupEnum"))) return FALSE; if (!(netgetdcname = (void *) GetProcAddress (h, "NetGetDCName"))) return FALSE; if (!(netusergetinfo = (void *) GetProcAddress (h, "NetUserGetInfo"))) return FALSE; return TRUE; } char * put_sid (PSID sid) { static char s[512]; char t[32]; DWORD i; strcpy (s, "S-1-"); sprintf(t, "%u", GetSidIdentifierAuthority (sid)->Value[5]); strcat (s, t); for (i = 0; i < *GetSidSubAuthorityCount (sid); ++i) { sprintf(t, "-%lu", *GetSidSubAuthority (sid, i)); strcat (s, t); } return s; } void psx_dir (char *in, char *out) { if (isalpha (in[0]) && in[1] == ':') { sprintf (out, "/cygdrive/%c", in[0]); in += 2; out += strlen (out); } while (*in) { if (*in == '\\') *out = '/'; else *out = *in; in++; out++; } *out = '\0'; } void uni2ansi (LPWSTR wcs, char *mbs, int size) { if (wcs) WideCharToMultiByte (CP_ACP, 0, wcs, -1, mbs, size, NULL, NULL); else *mbs = '\0'; } void print_win_error(DWORD code) { char buf[4096]; if (FormatMessage (FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS, NULL, code, MAKELANGID (LANG_NEUTRAL, SUBLANG_DEFAULT), (LPTSTR) buf, sizeof (buf), NULL)) fprintf (stderr, "mkpasswd: [%lu] %s", code, buf); else fprintf (stderr, "mkpasswd: error %lu", code); } void current_user (int print_sids, int print_cygpath, const char * passed_home_path, int id_offset, const char * disp_username) { char name[UNLEN + 1], *envname, *envdomain; DWORD len; HANDLE ptok; int errpos = 0; struct { PSID psid; int buffer[10]; } tu, tg; if ((!GetUserName (name, (len = sizeof (name), &len)) && (errpos = __LINE__)) || !name[0] || !(envname = getenv("USERNAME")) || strcasecmp (envname, name) || (disp_username && strcasecmp(envname, disp_username)) || (!GetComputerName (name, (len = sizeof (name), &len)) && (errpos = __LINE__)) || !(envdomain = getenv("USERDOMAIN")) || !envdomain[0] || !strcasecmp (envdomain, name) || (!OpenProcessToken (GetCurrentProcess (), TOKEN_QUERY, &ptok) && (errpos = __LINE__)) || (!GetTokenInformation (ptok, TokenUser, &tu, sizeof tu, &len) && (errpos = __LINE__)) || (!GetTokenInformation (ptok, TokenPrimaryGroup, &tg, sizeof tg, &len) && (errpos = __LINE__)) || (!CloseHandle (ptok) && (errpos = __LINE__))) { if (errpos) { print_win_error (GetLastError ()); fprintf(stderr, " on line %d\n", errpos); } return; } int uid = *GetSidSubAuthority (tu.psid, *GetSidSubAuthorityCount(tu.psid) - 1); int gid = *GetSidSubAuthority (tg.psid, *GetSidSubAuthorityCount(tg.psid) - 1); char homedir_psx[MAX_PATH] = {0}, homedir_w32[MAX_PATH] = {0}; char *envhomedrive = getenv ("HOMEDRIVE"); char *envhomepath = getenv ("HOMEPATH"); if (passed_home_path[0] == '\0') { if (envhomepath && envhomepath[0]) { if (envhomedrive) strlcpy (homedir_w32, envhomedrive, sizeof (homedir_w32)); if (envhomepath[0] != '\\') strlcat (homedir_w32, "\\", sizeof (homedir_w32)); strlcat (homedir_w32, envhomepath, sizeof (homedir_w32)); if (print_cygpath) cygwin_conv_to_posix_path (homedir_w32, homedir_psx); else psx_dir (homedir_w32, homedir_psx); } else { strlcpy (homedir_psx, "/home/", sizeof (homedir_psx)); strlcat (homedir_psx, envname, sizeof (homedir_psx)); } } else { strlcpy (homedir_psx, passed_home_path, sizeof (homedir_psx)); strlcat (homedir_psx, envname, sizeof (homedir_psx)); } printf ("%s:unused_by_nt/2000/xp:%u:%u:%s%s%s%s%s%s%s%s:%s:/bin/bash\n", envname, uid + id_offset, gid + id_offset, envname, print_sids ? "," : "", print_sids ? "U-" : "", print_sids ? envdomain : "", print_sids ? "\\" : "", print_sids ? envname : "", print_sids ? "," : "", print_sids ? put_sid (tu.psid) : "", homedir_psx); } int enum_users (LPWSTR servername, int print_sids, int print_cygpath, const char * passed_home_path, int id_offset, char *disp_username) { USER_INFO_3 *buffer; DWORD entriesread = 0; DWORD totalentries = 0; DWORD resume_handle = 0; DWORD rc; char ansi_srvname[256]; WCHAR uni_name[512]; if (servername) uni2ansi (servername, ansi_srvname, sizeof (ansi_srvname)); do { DWORD i; if (disp_username != NULL) { MultiByteToWideChar (CP_ACP, 0, disp_username, -1, uni_name, 512 ); rc = netusergetinfo(servername, (LPWSTR) & uni_name, 3, (LPBYTE *) &buffer ); entriesread=1; } else rc = netuserenum (servername, 3, FILTER_NORMAL_ACCOUNT, (LPBYTE *) & buffer, 1024, &entriesread, &totalentries, &resume_handle); switch (rc) { case ERROR_ACCESS_DENIED: print_win_error(rc); exit (1); case ERROR_MORE_DATA: case ERROR_SUCCESS: break; default: print_win_error(rc); exit (1); } for (i = 0; i < entriesread; i++) { char username[100]; char fullname[100]; char homedir_psx[MAX_PATH]; char homedir_w32[MAX_PATH]; char domain_name[100]; DWORD domname_len = 100; char psid_buffer[1024]; PSID psid = (PSID) psid_buffer; DWORD sid_length = 1024; SID_NAME_USE acc_type; int uid = buffer[i].usri3_user_id; int gid = buffer[i].usri3_primary_group_id; uni2ansi (buffer[i].usri3_name, username, sizeof (username)); uni2ansi (buffer[i].usri3_full_name, fullname, sizeof (fullname)); homedir_w32[0] = homedir_psx[0] = '\0'; if (passed_home_path[0] == '\0') { uni2ansi (buffer[i].usri3_home_dir, homedir_w32, sizeof (homedir_w32)); if (homedir_w32[0] != '\0') { if (print_cygpath) cygwin_conv_to_posix_path (homedir_w32, homedir_psx); else psx_dir (homedir_w32, homedir_psx); } else { strcpy (homedir_psx, "/home/"); strcat (homedir_psx, username); } } else { strcpy (homedir_psx, passed_home_path); strcat (homedir_psx, username); } if (print_sids) { if (!LookupAccountName (servername ? ansi_srvname : NULL, username, psid, &sid_length, domain_name, &domname_len, &acc_type)) { print_win_error(GetLastError ()); continue; } else if (acc_type == SidTypeDomain) { char domname[356]; strcpy (domname, domain_name); strcat (domname, "\\"); strcat (domname, username); sid_length = 1024; domname_len = 100; if (!LookupAccountName (servername ? ansi_srvname : NULL, domname, psid, &sid_length, domain_name, &domname_len, &acc_type)) { print_win_error(GetLastError ()); continue; } } } printf ("%s:unused_by_nt/2000/xp:%u:%u:%s%s%s%s%s%s%s%s:%s:/bin/bash\n", username, uid + id_offset, gid + id_offset, fullname, print_sids && fullname[0] ? "," : "", print_sids ? "U-" : "", print_sids ? domain_name : "", print_sids && domain_name[0] ? "\\" : "", print_sids ? username : "", print_sids ? "," : "", print_sids ? put_sid (psid) : "", homedir_psx); } netapibufferfree (buffer); } while (rc == ERROR_MORE_DATA); return 0; } int enum_local_groups (int print_sids) { LOCALGROUP_INFO_0 *buffer; DWORD entriesread = 0; DWORD totalentries = 0; DWORD resume_handle = 0; DWORD rc ; do { DWORD i; rc = netlocalgroupenum (NULL, 0, (LPBYTE *) & buffer, 1024, &entriesread, &totalentries, &resume_handle); switch (rc) { case ERROR_ACCESS_DENIED: print_win_error(rc); exit (1); case ERROR_MORE_DATA: case ERROR_SUCCESS: break; default: print_win_error(rc); exit (1); } for (i = 0; i < entriesread; i++) { char localgroup_name[100]; char domain_name[100]; DWORD domname_len = 100; char psid_buffer[1024]; PSID psid = (PSID) psid_buffer; DWORD sid_length = 1024; DWORD gid; SID_NAME_USE acc_type; uni2ansi (buffer[i].lgrpi0_name, localgroup_name, sizeof (localgroup_name)); if (!LookupAccountName (NULL, localgroup_name, psid, &sid_length, domain_name, &domname_len, &acc_type)) { print_win_error(GetLastError ()); continue; } else if (acc_type == SidTypeDomain) { char domname[356]; strcpy (domname, domain_name); strcat (domname, "\\"); strcat (domname, localgroup_name); sid_length = 1024; domname_len = 100; if (!LookupAccountName (NULL, domname, psid, &sid_length, domain_name, &domname_len, &acc_type)) { print_win_error(GetLastError ()); continue; } } gid = *GetSidSubAuthority (psid, *GetSidSubAuthorityCount(psid) - 1); printf ("%s:*:%ld:%ld:%s%s::\n", localgroup_name, gid, gid, print_sids ? "," : "", print_sids ? put_sid (psid) : ""); } netapibufferfree (buffer); } while (rc == ERROR_MORE_DATA); return 0; } void print_special (int print_sids, PSID_IDENTIFIER_AUTHORITY auth, BYTE cnt, DWORD sub1, DWORD sub2, DWORD sub3, DWORD sub4, DWORD sub5, DWORD sub6, DWORD sub7, DWORD sub8) { char name[256], dom[256]; DWORD len, len2, rid; PSID sid; SID_NAME_USE use; if (AllocateAndInitializeSid (auth, cnt, sub1, sub2, sub3, sub4, sub5, sub6, sub7, sub8, &sid)) { if (LookupAccountSid (NULL, sid, name, (len = 256, &len), dom, (len2 = 256, &len), &use)) { if (sub8) rid = sub8; else if (sub7) rid = sub7; else if (sub6) rid = sub6; else if (sub5) rid = sub5; else if (sub4) rid = sub4; else if (sub3) rid = sub3; else if (sub2) rid = sub2; else rid = sub1; printf ("%s:*:%lu:%lu:%s%s::\n", name, rid, rid == 18 ? 544 : rid, /* SYSTEM hack */ print_sids ? "," : "", print_sids ? put_sid (sid) : ""); } FreeSid (sid); } } int usage (FILE * stream, int isNT) { fprintf (stream, "Usage: mkpasswd [OPTION]... [domain]...\n\n" "Print /etc/passwd file to stdout\n\n" "Options:\n"); if (isNT) fprintf (stream, " -l,--local print local user accounts\n" " -c,--current print current account, if a domain account\n" " -d,--domain print domain accounts (from current domain\n" " if no domains specified)\n" " -o,--id-offset offset change the default offset (10000) added to uids\n" " in domain accounts.\n" " -g,--local-groups print local group information too\n" " if no domain specified\n" " -m,--no-mount don't use mount points for home dir\n" " -s,--no-sids don't print SIDs in GCOS field\n" " (this affects ntsec)\n"); fprintf (stream, " -p,--path-to-home path use specified path and not user account home dir or /home\n" " -u,--username username only return information for the specified user\n" " -h,--help displays this message\n" " -v,--version version information and exit\n\n"); if (isNT) fprintf (stream, "One of `-l', `-d' or `-g' must be given.\n"); return 1; } struct option longopts[] = { {"local", no_argument, NULL, 'l'}, {"current", no_argument, NULL, 'c'}, {"domain", no_argument, NULL, 'd'}, {"id-offset", required_argument, NULL, 'o'}, {"local-groups", no_argument, NULL, 'g'}, {"no-mount", no_argument, NULL, 'm'}, {"no-sids", no_argument, NULL, 's'}, {"path-to-home", required_argument, NULL, 'p'}, {"username", required_argument, NULL, 'u'}, {"help", no_argument, NULL, 'h'}, {"version", no_argument, NULL, 'v'}, {0, no_argument, NULL, 0} }; char opts[] = "lcdo:gsmhp:u:v"; static void print_version () { const char *v = strchr (version, ':'); int len; if (!v) { v = "?"; len = 1; } else { v += 2; len = strchr (v, ' ') - v; } printf ("\ mkpasswd (cygwin) %.*s\n\ passwd File Generator\n\ Copyright 1997, 1998, 1999, 2000, 2001, 2002 Red Hat, Inc.\n\ Compiled on %s\n\ ", len, v, __DATE__); } int main (int argc, char **argv) { LPWSTR servername = NULL; DWORD rc = ERROR_SUCCESS; WCHAR domain_name[200]; int print_local = 0; int print_current = 0; int print_domain = 0; int print_local_groups = 0; int domain_name_specified = 0; int print_sids = 1; int print_cygpath = 1; int id_offset = 10000; int i; int isNT; char *disp_username = NULL; char name[256], passed_home_path[MAX_PATH]; DWORD len; isNT = (GetVersion () < 0x80000000); passed_home_path[0] = '\0'; if (!isatty (1)) setmode (1, O_BINARY); if (isNT && argc == 1) return usage (stderr, isNT); else { while ((i = getopt_long (argc, argv, opts, longopts, NULL)) != EOF) switch (i) { case 'l': print_local = 1; break; case 'c': print_current = 1; break; case 'd': print_domain = 1; break; case 'o': id_offset = strtol (optarg, NULL, 10); break; case 'g': print_local_groups = 1; break; case 's': print_sids = 0; break; case 'm': print_cygpath = 0; break; case 'p': if (optarg[0] != '/') { fprintf (stderr, "%s: `%s' is not a fully qualified path.\n", argv[0], optarg); return 1; } strcpy (passed_home_path, optarg); if (optarg[strlen (optarg)-1] != '/') strcat (passed_home_path, "/"); break; case 'u': disp_username = optarg; break; case 'h': usage (stdout, isNT); return 0; case 'v': print_version (); return 0; default: fprintf (stderr, "Try `%s --help' for more information.\n", argv[0]); return 1; } } if (!isNT) { /* This takes Windows 9x/ME into account. */ if (passed_home_path[0] == '\0') strcpy (passed_home_path, "/home/"); if (!disp_username) { printf ("admin:use_crypt:%lu:%lu:Administrator:%sadmin:/bin/bash\n", DOMAIN_USER_RID_ADMIN, DOMAIN_ALIAS_RID_ADMINS, passed_home_path); if (GetUserName (name, (len = 256, &len))) disp_username = name; } if (disp_username && disp_username[0]) { /* Create a pseudo random uid */ unsigned long uid = 0, i; for (i = 0; disp_username[i]; i++) uid += toupper (disp_username[i]) << ((6 * i) % 25); uid = (uid % (1000 - DOMAIN_USER_RID_ADMIN - 1)) + DOMAIN_USER_RID_ADMIN + 1; printf ("%s:use_crypt:%lu:%lu:%s:%s%s:/bin/bash\n", disp_username, uid, DOMAIN_ALIAS_RID_ADMINS, disp_username, passed_home_path, disp_username); } return 0; } if (!print_local && !print_domain && !print_local_groups) { fprintf (stderr, "%s: Specify one of `-l', `-d' or `-g'\n", argv[0]); return 1; } if (optind < argc) { if (!print_domain) { fprintf (stderr, "%s: A domain name is only accepted " "when `-d' is given.\n", argv[0]); return 1; } domain_name_specified = 1; } if (!load_netapi ()) { print_win_error(GetLastError ()); return 1; } if (disp_username == NULL) { if (print_local) { #if 0 /* * Get `Everyone' group */ print_special (print_sids, &sid_world_auth, 1, SECURITY_WORLD_RID, 0, 0, 0, 0, 0, 0, 0); #endif /* * Get `system' group */ print_special (print_sids, &sid_nt_auth, 1, SECURITY_LOCAL_SYSTEM_RID, 0, 0, 0, 0, 0, 0, 0); /* * Get `administrators' group */ if (!print_local_groups) print_special (print_sids, &sid_nt_auth, 2, SECURITY_BUILTIN_DOMAIN_RID, DOMAIN_ALIAS_RID_ADMINS, 0, 0, 0, 0, 0, 0); } if (print_local_groups) enum_local_groups (print_sids); } if (print_local) enum_users (NULL, print_sids, print_cygpath, passed_home_path, 0, disp_username); i = 1; if (print_domain) do { if (domain_name_specified) { mbstowcs (domain_name, argv[optind], (strlen (argv[optind]) + 1)); rc = netgetdcname (NULL, domain_name, (LPBYTE *) & servername); } else rc = netgetdcname (NULL, NULL, (LPBYTE *) & servername); if (rc != ERROR_SUCCESS) { print_win_error(rc); return 1; } enum_users (servername, print_sids, print_cygpath, passed_home_path, id_offset * i++, disp_username); netapibufferfree (servername); } while (++optind < argc); if (print_current && !print_domain) current_user(print_sids, print_cygpath, passed_home_path, id_offset, disp_username); return 0; }