429 lines
9.1 KiB
C++
429 lines
9.1 KiB
C++
#include "StdAfx.h"
|
|
#include "ADMTScript.h"
|
|
#include "SecurityTranslation.h"
|
|
|
|
#include "Error.h"
|
|
#include "VarSetOptions.h"
|
|
#include "VarSetAccountOptions.h"
|
|
#include "VarSetSecurity.h"
|
|
|
|
|
|
//---------------------------------------------------------------------------
|
|
// Security Translation Class
|
|
//---------------------------------------------------------------------------
|
|
|
|
|
|
CSecurityTranslation::CSecurityTranslation() :
|
|
m_lTranslationOption(admtTranslateReplace),
|
|
m_bTranslateFilesAndFolders(false),
|
|
m_bTranslateLocalGroups(false),
|
|
m_bTranslatePrinters(false),
|
|
m_bTranslateRegistry(false),
|
|
m_bTranslateShares(false),
|
|
m_bTranslateUserProfiles(false),
|
|
m_bTranslateUserRights(false)
|
|
{
|
|
}
|
|
|
|
|
|
CSecurityTranslation::~CSecurityTranslation()
|
|
{
|
|
}
|
|
|
|
|
|
// ISecurityTranslation Implementation ----------------------------------------
|
|
|
|
|
|
// TranslationOption Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslationOption(long lOption)
|
|
{
|
|
HRESULT hr = S_OK;
|
|
|
|
if (IsTranslationOptionValid(lOption))
|
|
{
|
|
m_lTranslationOption = lOption;
|
|
}
|
|
else
|
|
{
|
|
hr = AdmtSetError(CLSID_Migration, IID_ISecurityTranslation, E_INVALIDARG, IDS_E_TRANSLATION_OPTION_INVALID);
|
|
}
|
|
|
|
return hr;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslationOption(long* plOption)
|
|
{
|
|
*plOption = m_lTranslationOption;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// TranslateFilesAndFolders Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslateFilesAndFolders(VARIANT_BOOL bTranslate)
|
|
{
|
|
m_bTranslateFilesAndFolders = bTranslate ? true : false;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslateFilesAndFolders(VARIANT_BOOL* pbTranslate)
|
|
{
|
|
*pbTranslate = m_bTranslateFilesAndFolders ? VARIANT_TRUE : VARIANT_FALSE;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// TranslateLocalGroups Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslateLocalGroups(VARIANT_BOOL bTranslate)
|
|
{
|
|
m_bTranslateLocalGroups = bTranslate ? true : false;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslateLocalGroups(VARIANT_BOOL* pbTranslate)
|
|
{
|
|
*pbTranslate = m_bTranslateLocalGroups ? VARIANT_TRUE : VARIANT_FALSE;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// TranslatePrinters Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslatePrinters(VARIANT_BOOL bTranslate)
|
|
{
|
|
m_bTranslatePrinters = bTranslate ? true : false;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslatePrinters(VARIANT_BOOL* pbTranslate)
|
|
{
|
|
*pbTranslate = m_bTranslatePrinters ? VARIANT_TRUE : VARIANT_FALSE;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// TranslateRegistry Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslateRegistry(VARIANT_BOOL bTranslate)
|
|
{
|
|
m_bTranslateRegistry = bTranslate ? true : false;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslateRegistry(VARIANT_BOOL* pbTranslate)
|
|
{
|
|
*pbTranslate = m_bTranslateRegistry ? VARIANT_TRUE : VARIANT_FALSE;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// TranslateShares Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslateShares(VARIANT_BOOL bTranslate)
|
|
{
|
|
m_bTranslateShares = bTranslate ? true : false;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslateShares(VARIANT_BOOL* pbTranslate)
|
|
{
|
|
*pbTranslate = m_bTranslateShares ? VARIANT_TRUE : VARIANT_FALSE;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// TranslateUserProfiles Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslateUserProfiles(VARIANT_BOOL bTranslate)
|
|
{
|
|
m_bTranslateUserProfiles = bTranslate ? true : false;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslateUserProfiles(VARIANT_BOOL* pbTranslate)
|
|
{
|
|
*pbTranslate = m_bTranslateUserProfiles ? VARIANT_TRUE : VARIANT_FALSE;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// TranslateUserRights Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_TranslateUserRights(VARIANT_BOOL bTranslate)
|
|
{
|
|
m_bTranslateUserRights = bTranslate ? true : false;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_TranslateUserRights(VARIANT_BOOL* pbTranslate)
|
|
{
|
|
*pbTranslate = m_bTranslateUserRights ? VARIANT_TRUE : VARIANT_FALSE;
|
|
|
|
return S_OK;
|
|
}
|
|
|
|
|
|
// SidMappingFile Property
|
|
|
|
STDMETHODIMP CSecurityTranslation::put_SidMappingFile(BSTR bstrFile)
|
|
{
|
|
HRESULT hr = S_OK;
|
|
|
|
try
|
|
{
|
|
_bstr_t strFile = bstrFile;
|
|
|
|
if (strFile.length() > 0)
|
|
{
|
|
_TCHAR szPath[_MAX_PATH];
|
|
LPTSTR pszFilePart;
|
|
|
|
DWORD cchPath = GetFullPathName(strFile, _MAX_PATH, szPath, &pszFilePart);
|
|
|
|
if ((cchPath == 0) || (cchPath >= _MAX_PATH))
|
|
{
|
|
AdmtThrowError(
|
|
GUID_NULL,
|
|
GUID_NULL,
|
|
HRESULT_FROM_WIN32(GetLastError()),
|
|
IDS_E_SID_MAPPING_FILE,
|
|
(LPCTSTR)strFile
|
|
);
|
|
}
|
|
|
|
HANDLE hFile = CreateFile(
|
|
szPath,
|
|
GENERIC_READ,
|
|
FILE_SHARE_READ|FILE_SHARE_WRITE,
|
|
NULL,
|
|
OPEN_EXISTING,
|
|
FILE_ATTRIBUTE_NORMAL,
|
|
NULL
|
|
);
|
|
|
|
if (hFile == INVALID_HANDLE_VALUE)
|
|
{
|
|
AdmtThrowError(
|
|
GUID_NULL,
|
|
GUID_NULL,
|
|
HRESULT_FROM_WIN32(GetLastError()),
|
|
IDS_E_SID_MAPPING_FILE,
|
|
(LPCTSTR)strFile
|
|
);
|
|
}
|
|
|
|
CloseHandle(hFile);
|
|
|
|
m_bstrSidMappingFile = szPath;
|
|
}
|
|
else
|
|
{
|
|
m_bstrSidMappingFile = strFile;
|
|
}
|
|
}
|
|
catch (_com_error& ce)
|
|
{
|
|
hr = AdmtSetError(CLSID_Migration, IID_ISecurityTranslation, ce);
|
|
}
|
|
catch (...)
|
|
{
|
|
hr = AdmtSetError(CLSID_Migration, IID_ISecurityTranslation, E_FAIL);
|
|
}
|
|
|
|
return hr;
|
|
}
|
|
|
|
STDMETHODIMP CSecurityTranslation::get_SidMappingFile(BSTR* pbstrFile)
|
|
{
|
|
HRESULT hr = S_OK;
|
|
|
|
try
|
|
{
|
|
*pbstrFile = m_bstrSidMappingFile.copy();
|
|
}
|
|
catch (_com_error& ce)
|
|
{
|
|
hr = AdmtSetError(CLSID_Migration, IID_ISecurityTranslation, ce);
|
|
}
|
|
catch (...)
|
|
{
|
|
hr = AdmtSetError(CLSID_Migration, IID_ISecurityTranslation, E_FAIL);
|
|
}
|
|
|
|
return hr;
|
|
}
|
|
|
|
|
|
// Translate Method
|
|
|
|
STDMETHODIMP CSecurityTranslation::Translate(long lOptions, VARIANT vntInclude, VARIANT vntExclude)
|
|
{
|
|
HRESULT hr = S_OK;
|
|
|
|
MutexWait();
|
|
|
|
bool bLogOpen = _Module.OpenLog();
|
|
|
|
try
|
|
{
|
|
_Module.Log(ErrI, IDS_STARTED_SECURITY_TRANSLATION);
|
|
|
|
InitSourceDomainAndContainer();
|
|
InitTargetDomainAndContainer();
|
|
|
|
DoOption(lOptions, vntInclude, vntExclude);
|
|
}
|
|
catch (_com_error& ce)
|
|
{
|
|
hr = AdmtSetError(CLSID_Migration, IID_ISecurityTranslation, ce, IDS_E_CANT_TRANSLATE_SECURITY);
|
|
}
|
|
catch (...)
|
|
{
|
|
hr = AdmtSetError(CLSID_Migration, IID_ISecurityTranslation, E_FAIL, IDS_E_CANT_TRANSLATE_SECURITY);
|
|
}
|
|
|
|
if (bLogOpen)
|
|
{
|
|
_Module.CloseLog();
|
|
}
|
|
|
|
MutexRelease();
|
|
|
|
return hr;
|
|
}
|
|
|
|
|
|
// Implementation -----------------------------------------------------------
|
|
|
|
|
|
// DoNames Method
|
|
|
|
void CSecurityTranslation::DoNames()
|
|
{
|
|
CDomainAccounts aComputers;
|
|
|
|
m_SourceDomain.QueryComputersAcrossDomains(GetSourceContainer(), true, m_setIncludeNames, m_setExcludeNames, aComputers);
|
|
|
|
DoComputers(aComputers);
|
|
}
|
|
|
|
|
|
// DoDomain Method
|
|
|
|
void CSecurityTranslation::DoDomain()
|
|
{
|
|
DoContainers(GetSourceContainer());
|
|
}
|
|
|
|
|
|
// DoContainers Method
|
|
|
|
void CSecurityTranslation::DoContainers(CContainer& rSource)
|
|
{
|
|
DoComputers(rSource);
|
|
}
|
|
|
|
|
|
// DoComputers Method
|
|
|
|
void CSecurityTranslation::DoComputers(CContainer& rSource)
|
|
{
|
|
CDomainAccounts aComputers;
|
|
|
|
rSource.QueryComputers(true, m_nRecurseMaintain >= 1, m_setExcludeNames, aComputers);
|
|
|
|
DoComputers(aComputers);
|
|
}
|
|
|
|
|
|
// DoComputers Method
|
|
|
|
void CSecurityTranslation::DoComputers(CDomainAccounts& rComputers)
|
|
{
|
|
if (rComputers.size() > 0)
|
|
{
|
|
CVarSet aVarSet;
|
|
|
|
SetOptions(aVarSet);
|
|
SetAccountOptions(aVarSet);
|
|
SetSecurity(aVarSet);
|
|
|
|
FillInVarSetForComputers(rComputers, false, false, false, 0, aVarSet);
|
|
|
|
rComputers.clear();
|
|
|
|
if (m_bTranslateUserProfiles)
|
|
{
|
|
aVarSet.Put(_T("PlugIn.%ld"), 0, _T("{0EB9FBE9-397D-4D09-A65E-ABF1790CC470}"));
|
|
}
|
|
else
|
|
{
|
|
aVarSet.Put(_T("PlugIn.%ld"), 0, _T("None"));
|
|
}
|
|
|
|
PerformMigration(aVarSet);
|
|
|
|
SaveSettings(aVarSet);
|
|
}
|
|
}
|
|
|
|
|
|
// SetOptions Method
|
|
|
|
void CSecurityTranslation::SetOptions(CVarSet& rVarSet)
|
|
{
|
|
CVarSetOptions aOptions(rVarSet);
|
|
|
|
aOptions.SetTest(m_spInternal->TestMigration ? true : false);
|
|
aOptions.SetUndo(false);
|
|
aOptions.SetWizard(_T("security"));
|
|
aOptions.SetIntraForest(m_spInternal->IntraForest ? true : false);
|
|
aOptions.SetSourceDomain(m_SourceDomain.NameFlat(), m_SourceDomain.NameDns());
|
|
aOptions.SetTargetDomain(m_TargetDomain.NameFlat(), m_TargetDomain.NameDns());
|
|
}
|
|
|
|
|
|
// SetAccountOptions Method
|
|
|
|
void CSecurityTranslation::SetAccountOptions(CVarSet& rVarSet)
|
|
{
|
|
CVarSetAccountOptions aOptions(rVarSet);
|
|
|
|
aOptions.SetSecurityTranslationOptions();
|
|
aOptions.SetSecurityMapFile(m_bstrSidMappingFile);
|
|
}
|
|
|
|
|
|
// SetSecurity Method
|
|
|
|
void CSecurityTranslation::SetSecurity(CVarSet& rVarSet)
|
|
{
|
|
CVarSetSecurity aSecurity(rVarSet);
|
|
|
|
aSecurity.SetTranslationOption(m_lTranslationOption);
|
|
aSecurity.SetTranslateContainers(false);
|
|
aSecurity.SetTranslateFiles(m_bTranslateFilesAndFolders);
|
|
aSecurity.SetTranslateLocalGroups(m_bTranslateLocalGroups);
|
|
aSecurity.SetTranslatePrinters(m_bTranslatePrinters);
|
|
aSecurity.SetTranslateRegistry(m_bTranslateRegistry);
|
|
aSecurity.SetTranslateShares(m_bTranslateShares);
|
|
aSecurity.SetTranslateUserProfiles(m_bTranslateUserProfiles);
|
|
aSecurity.SetTranslateUserRights(m_bTranslateUserRights);
|
|
}
|