windows-nt/Source/XPSP1/NT/admin/wmi/wbem/policman/provider/policstatus.cpp

338 lines
8.5 KiB
C++
Raw Permalink Normal View History

2020-09-26 03:20:57 -05:00
#include <unk.h>
#include <wbemcli.h>
#include <wbemprov.h>
#include <atlbase.h>
#include <sync.h>
#include <activeds.h>
#include <genlex.h>
#include <objpath.h>
#include <Utility.h>
#include <ql.h>
#include "PolicStatus.h"
#ifdef TIME_TRIALS
#include <StopWatch.h>
#pragma message("!! Including time trial code !!")
StopWatch EvaluateTimer(L"Somfilter Evaluation", L"C:\\Som.Evaluate.log");
#endif
/******************************\
**** POLICY PROVIDER HELPERS ***
\******************************/
#define SOM_RDN L"CN=SOM,CN=WMIPolicy,CN=System"
// returns addref'd pointer back to WinMgmt
CComPtr<IWbemServices>& CPolicyStatus::GetWMIServices()
{
CInCritSec lock(&m_CS);
return m_pWMIMgmt;
}
IADsContainer *CPolicyStatus::GetADServices(wchar_t *pDomain, HRESULT &hres)
{
CInCritSec lock(&m_CS);
IADsContainer *pADsContainer = NULL;
QString
SomDN(SOM_RDN),
DistDomainName,
ObjPath(L"LDAP://");
if(NULL == pDomain) return NULL;
hres = DistNameFromDomainName(QString(pDomain), DistDomainName);
ObjPath << DistDomainName;
hres = ADsGetObject(ObjPath, IID_IADsContainer, (void**) &pADsContainer);
return pADsContainer;
}
IADsContainer *GetADSchemaContainer(wchar_t *pDomain, HRESULT &hres)
{
CComQIPtr<IADs>
pRootDSE;
CComVariant
vSchemaPath;
CComBSTR
bstrSchemaPath(L"LDAP://");
IADsContainer
*pADsContainer = NULL;
if(NULL == pDomain) return NULL;
hres = ADsGetObject(L"LDAP://rootDSE", IID_IADs, (void **)&pRootDSE);
if(FAILED(hres)) return NULL;
hres = pRootDSE->Get(L"schemaNamingContext", &vSchemaPath);
if(FAILED(hres)) return NULL;
bstrSchemaPath.Append(vSchemaPath.bstrVal);
hres = ADsGetObject(bstrSchemaPath, IID_IADsContainer, (void **)&pADsContainer);
if(FAILED(hres)) return NULL;
return pADsContainer;
}
// returns false if services pointer has already been set
bool CPolicyStatus::SetWMIServices(IWbemServices* pServices)
{
CInCritSec lock(&m_CS);
bool bOldOneNull = FALSE;
if (bOldOneNull = (m_pWMIMgmt == NULL))
{
m_pWMIMgmt = pServices;
}
return bOldOneNull;
}
void* CPolicyStatus::GetInterface(REFIID riid)
{
if(riid == IID_IWbemServices)
return &m_XProvider;
else if(riid == IID_IWbemProviderInit)
return &m_XInit;
else return NULL;
}
/*********************************\
*** Specific Implementation ***
\*********************************/
// returns addref'd pointer to class object
IWbemClassObject* CPolicyStatus::GetStatusClass()
{
CInCritSec lock(&m_CS);
if (m_pStatusClassObject == NULL)
{
CComPtr<IWbemServices> pWinMgmt = GetWMIServices();
if (pWinMgmt != NULL)
{
pWinMgmt->GetObject(STATUS_CLASS, WBEM_FLAG_RETURN_WBEM_COMPLETE, NULL, &m_pStatusClassObject, NULL);
}
}
return m_pStatusClassObject;
}
// returns addref'd pointer to emply class instance
IWbemClassObject* CPolicyStatus::GetStatusInstance()
{
CComPtr<IWbemClassObject> pClass;
IWbemClassObject *pObj = NULL;
pClass = GetStatusClass();
if(pClass != NULL)
pClass->SpawnInstance(0, &pObj);
return pObj;
}
/*************************\
*** IWbemProviderInit ***
\*************************/
STDMETHODIMP CPolicyStatus::XInit::Initialize(
LPWSTR, LONG, LPWSTR, LPWSTR, IWbemServices* pServices, IWbemContext* pCtxt,
IWbemProviderInitSink* pSink)
{
HRESULT
hres = WBEM_S_NO_ERROR,
hres2 = WBEM_S_NO_ERROR;
// **** impersonate client for security
hres = CoImpersonateClient();
if(FAILED(hres))
{
ERRORTRACE((LOG_ESS, "POLICMAN: (CoImpersonateClient) could not assume client permissions, 0x%08X\n", hres));
return WBEM_S_ACCESS_DENIED;
}
else
{
// **** save WMI name space pointer
m_pObject->SetWMIServices(pServices);
}
hres2 = pSink->SetStatus(hres, 0);
if(FAILED(hres2))
{
ERRORTRACE((LOG_ESS, "POLICMAN: could not set return status\n"));
if(SUCCEEDED(hres)) hres = hres2;
}
return hres;
}
/*******************\
*** IWbemServices ***
\*******************/
STDMETHODIMP CPolicyStatus::XProvider::GetObjectAsync(
/* [in] */ const BSTR ObjectPath,
/* [in] */ long lFlags,
/* [in] */ IWbemContext __RPC_FAR *pCtx,
/* [in] */ IWbemObjectSink __RPC_FAR *pResponseHandler)
{
HRESULT
hres = WBEM_S_NO_ERROR,
hres2 = WBEM_S_NO_ERROR;
CComPtr<IWbemServices>
pNamespace;
CComPtr<IADsContainer>
pADsSchemaContainer,
pADsContainer;
VARIANT
*vDomain;
// **** impersonate client for security
hres = CoImpersonateClient();
if (FAILED(hres))
{
ERRORTRACE((LOG_ESS, "POLICMAN: (CoImpersonateClient) could not assume callers permissions, 0x%08X\n",hres));
hres = WBEM_E_ACCESS_DENIED;
}
else
{
// **** Check arguments
if(ObjectPath == NULL || pResponseHandler == NULL)
{
ERRORTRACE((LOG_ESS, "POLICMAN: object path and/or return object are NULL\n"));
hres = WBEM_E_INVALID_PARAMETER;
}
else
{
// **** parse object path
CObjectPathParser
ObjPath(e_ParserAcceptRelativeNamespace);
ParsedObjectPath
*pParsedObjectPath = NULL;
if((ObjPath.NoError != ObjPath.Parse(ObjectPath, &pParsedObjectPath)) ||
(0 != _wcsicmp(STATUS_CLASS, pParsedObjectPath->m_pClass)) ||
(1 != pParsedObjectPath->m_dwNumKeys))
{
ERRORTRACE((LOG_ESS, "POLICMAN: Parse error for object: %S\n", ObjectPath));
hres = WBEM_E_INVALID_QUERY;
}
else
{
int x;
for(x = 0; x < pParsedObjectPath->m_dwNumKeys; x++)
{
if(0 == _wcsicmp((*(pParsedObjectPath->m_paKeys + x))->m_pName, g_bstrDomain))
vDomain = &((*(pParsedObjectPath->m_paKeys + x))->m_vValue);
}
if(vDomain->bstrVal == NULL)
hres = WBEM_E_FAILED;
else
{
pNamespace = m_pObject->GetWMIServices();
pADsContainer.Attach(m_pObject->GetADServices(vDomain->bstrVal, hres));
pADsSchemaContainer.Attach(GetADSchemaContainer(vDomain->bstrVal, hres));
}
if((FAILED(hres)) || (pNamespace == NULL) || (pADsContainer == NULL))
{
ERRORTRACE((LOG_ESS, "POLICMAN: WMI and/or AD services not initialized\n"));
hres = ADSIToWMIErrorCodes(hres);
}
else
{
try
{
CComPtr<IWbemClassObject>
pStatusObj;
CComQIPtr<IDispatch, &IID_IDispatch>
pDisp1, pDisp2;
CComQIPtr<IDirectoryObject, &IID_IDirectoryObject>
pDirectoryObj;
VARIANT
vContainerPresent = {VT_BOOL, 0, 0, 0},
vSchemaPresent = {VT_BOOL, 0, 0, 0};
pStatusObj.Attach(m_pObject->GetStatusInstance());
if(pStatusObj != NULL)
{
// **** test for existence of containers
hres = pADsContainer->GetObject(L"Container", L"CN=SOM,CN=WMIPolicy,CN=System", &pDisp1);
if(SUCCEEDED(hres) && (pDisp1.p != NULL)) vContainerPresent.boolVal = -1;
// **** test for existence of schema object
hres = pADsSchemaContainer->GetObject(L"classSchema", L"CN=ms-WMI-Som", &pDisp2);
if(SUCCEEDED(hres) && (pDisp2.p != NULL)) vSchemaPresent.boolVal = -1;
// **** build status object
hres = pStatusObj->Put(L"Domain", 0, vDomain, 0);
hres = pStatusObj->Put(L"ContainerAvailable", 0, &vContainerPresent, 0);
hres = pStatusObj->Put(L"SchemaAvailable", 0, &vSchemaPresent, 0);
hres = pResponseHandler->Indicate(1, &pStatusObj);
}
else
hres = WBEM_E_FAILED;
}
catch(long hret)
{
hres = ADSIToWMIErrorCodes(hret);
ERRORTRACE((LOG_ESS, "POLICMAN: Translation of Policy object from AD to WMI generated HRESULT 0x%08X\n", hres));
}
catch(wchar_t *swErrString)
{
ERRORTRACE((LOG_ESS, "POLICMAN: Caught Exception: %S\n", swErrString));
hres = WBEM_E_FAILED;
}
catch(...)
{
ERRORTRACE((LOG_ESS, "POLICMAN: Caught UNKNOWN Exception\n"));
hres = WBEM_E_FAILED;
}
}
}
ObjPath.Free(pParsedObjectPath);
hres2 = pResponseHandler->SetStatus(0,hres, NULL, NULL);
if(FAILED(hres2))
{
ERRORTRACE((LOG_ESS, "POLICMAN: could not set return status\n"));
if(SUCCEEDED(hres)) hres = hres2;
}
}
CoRevertToSelf();
}
return hres;
}