rpcclient.1

samba-3.0.22.tar.gz 编译smb服务器的源码

.\"Generated by db2man.xsl. Don't modify this, modify the source.
.de Sh \" Subsection
.br
.if t .Sp
.ne 5
.PP
\fB\\$1\fR
.PP
..
.de Sp \" Vertical space (when we can't use .PP)
.if t .sp .5v
.if n .sp
..
.de Ip \" List item
.br
.ie \\n(.$>=3 .ne \\$3
.el .ne 3
.IP "\\$1" \\$2
..
.TH "RPCCLIENT" 1 "" "" ""
.SH NAME
rpcclient \- tool for executing client side MS-RPC functions
.SH "SYNOPSIS"
.ad l
.hy 0
.HP 10
\fBrpcclient\fR [\-A\ authfile] [\-c\ <command\ string>] [\-d\ debuglevel] [\-h] [\-l\ logdir] [\-N] [\-s\ <smb\ config\ file>] [\-U\ username[%password]] [\-W\ workgroup] [\-N] [\-I\ destinationIP] {server}
.ad
.hy

.SH "DESCRIPTION"

.PP
This tool is part of the \fBsamba\fR(7) suite\&.

.PP
\fBrpcclient\fR is a utility initially developed to test MS\-RPC functionality in Samba itself\&. It has undergone several stages of development and stability\&. Many system administrators have now written scripts around it to manage Windows NT clients from their UNIX workstation\&.

.SH "OPTIONS"

.TP
server
NetBIOS name of Server to which to connect\&. The server can be any SMB/CIFS server\&. The name is resolved using the name resolve order line from \fBsmb\&.conf\fR(5)\&.

.TP
\-c|\-\-command='command string'
execute semicolon separated commands (listed below))

.TP
\-I IP\-address
\fIIP address\fR is the address of the server to connect to\&. It should be specified in standard "a\&.b\&.c\&.d" notation\&.

Normally the client would attempt to locate a named SMB/CIFS server by looking it up via the NetBIOS name resolution mechanism described above in the \fIname resolve order\fR parameter above\&. Using this parameter will force the client to assume that the server is on the machine with the specified IP address and the NetBIOS name component of the resource being connected to will be ignored\&.

There is no default for this parameter\&. If not supplied, it will be determined automatically by the client as described above\&.

.TP
\-V
Prints the program version number\&.

.TP
\-s <configuration file>
The file specified contains the configuration details required by the server\&. The information in this file includes server\-specific information such as what printcap file to use, as well as descriptions of all the services that the server is to provide\&. See \fIsmb\&.conf\fR for more information\&. The default configuration file name is determined at compile time\&.

.TP
\-d|\-\-debuglevel=level
\fIlevel\fR is an integer from 0 to 10\&. The default value if this parameter is not specified is zero\&.

The higher this value, the more detail will be logged to the log files about the activities of the server\&. At level 0, only critical errors and serious warnings will be logged\&. Level 1 is a reasonable level for day\-to\-day running \- it generates a small amount of information about operations carried out\&.

Levels above 1 will generate considerable amounts of log data, and should only be used when investigating a problem\&. Levels above 3 are designed for use only by developers and generate HUGE amounts of log data, most of which is extremely cryptic\&.

Note that specifying this parameter here will override the  parameter in the \fIsmb\&.conf\fR file\&.

.TP
\-l|\-\-logfile=logdirectory
Base directory name for log/debug files\&. The extension \fB"\&.progname"\fR will be appended (e\&.g\&. log\&.smbclient, log\&.smbd, etc\&.\&.\&.)\&. The log file is never removed by the client\&.

.TP
\-N
If specified, this parameter suppresses the normal password prompt from the client to the user\&. This is useful when accessing a service that does not require a password\&.

Unless a password is specified on the command line or this parameter is specified, the client will request a password\&.

.TP
\-k
Try to authenticate with kerberos\&. Only useful in an Active Directory environment\&.

.TP
\-A|\-\-authentication\-file=filename
This option allows you to specify a file from which to read the username and password used in the connection\&. The format of the file is


.nf

username = <value>
password = <value>
domain   = <value>
.fi


Make certain that the permissions on the file restrict access from unwanted users\&.

.TP
\-U|\-\-user=username[%password]
Sets the SMB username or username and password\&.

If %password is not specified, the user will be prompted\&. The client will first check the \fBUSER\fR environment variable, then the \fBLOGNAME\fR variable and if either exists, the string is uppercased\&. If these environmental variables are not found, the username \fBGUEST\fR is used\&.

A third option is to use a credentials file which contains the plaintext of the username and password\&. This option is mainly provided for scripts where the admin does not wish to pass the credentials on the command line or via environment variables\&. If this method is used, make certain that the permissions on the file restrict access from unwanted users\&. See the \fI\-A\fR for more details\&.

Be cautious about including passwords in scripts\&. Also, on many systems the command line of a running process may be seen via the \fBps\fR command\&. To be safe always allow \fBrpcclient\fR to prompt for a password and type it in directly\&.

.TP
\-n <primary NetBIOS name>
This option allows you to override the NetBIOS name that Samba uses for itself\&. This is identical to setting the  parameter in the \fIsmb\&.conf\fR file\&. However, a command line setting will take precedence over settings in \fIsmb\&.conf\fR\&.

.TP
\-i <scope>
This specifies a NetBIOS scope that \fBnmblookup\fR will use to communicate with when generating NetBIOS names\&. For details on the use of NetBIOS scopes, see rfc1001\&.txt and rfc1002\&.txt\&. NetBIOS scopes are \fBvery\fR rarely used, only set this parameter if you are the system administrator in charge of all the NetBIOS systems you communicate with\&.

.TP
\-W|\-\-workgroup=domain
Set the SMB domain of the username\&. This overrides the default domain which is the domain defined in smb\&.conf\&. If the domain specified is the same as the servers NetBIOS name, it causes the client to log on using the servers local SAM (as opposed to the Domain SAM)\&.

.TP
\-O socket options
TCP socket options to set on the client socket\&. See the socket options parameter in the \fIsmb\&.conf\fR manual page for the list of valid options\&.

.TP
\-h|\-\-help
Print a summary of command line options\&.

.SH "COMMANDS"

.SS "LSARPC"

.TP
lsaquery
Query info policy

.TP
lookupsids
Resolve a list of SIDs to usernames\&.

.TP
lookupnames
Resolve a list of usernames to SIDs\&.

.TP
enumtrusts
Enumerate trusted domains

.TP
enumprivs
Enumerate privileges

.TP
getdispname
Get the privilege name

.TP
lsaenumsid
Enumerate the LSA SIDS

.TP
lsaenumprivsaccount
Enumerate the privileges of an SID

.TP
lsaenumacctrights
Enumerate the rights of an SID

.TP
lsaenumacctwithright
Enumerate accounts with a right

.TP
lsaaddacctrights
Add rights to an account

.TP
lsaremoveacctrights
Remove rights from an account

.TP
lsalookupprivvalue
Get a privilege value given its name

.TP
lsaquerysecobj
Query LSA security object

.SS "LSARPC-DS"

.TP
dsroledominfo
Get Primary Domain Information

.PP


.PP
\fBDFS\fR

.TP
dfsexist
Query DFS support

.TP
dfsadd
Add a DFS share

.TP
dfsremove
Remove a DFS share

.TP
dfsgetinfo
Query DFS share info

.TP
dfsenum
Enumerate dfs shares

.SS "REG"

.TP
shutdown
Remote Shutdown

.TP
abortshutdown
Abort Shutdown

.SS "SRVSVC"

.TP
srvinfo
Server query info

.TP
netshareenum
Enumerate shares

.TP
netfileenum
Enumerate open files

.TP
netremotetod
Fetch remote time of day

.SS "SAMR"

.TP
queryuser
Query user info

.TP
querygroup
Query group info