xref: /netbsd/usr.sbin/rpc.pcnfsd/pcnfsd_print.c (revision c4a72b64)
1 /*	$NetBSD: pcnfsd_print.c,v 1.6 2002/09/29 23:23:56 wiz Exp $	*/
2 
3 /* RE_SID: @(%)/usr/dosnfs/shades_SCCS/unix/pcnfsd/v2/src/SCCS/s.pcnfsd_print.c 1.7 92/01/24 19:58:58 SMI */
4 /*
5 **=====================================================================
6 ** Copyright (c) 1986,1987,1988,1989,1990,1991 by Sun Microsystems, Inc.
7 **	@(#)pcnfsd_print.c	1.7	1/24/92
8 **=====================================================================
9 */
10 /*
11 **=====================================================================
12 **             I N C L U D E   F I L E   S E C T I O N                *
13 **                                                                    *
14 ** If your port requires different include files, add a suitable      *
15 ** #define in the customization section, and make the inclusion or    *
16 ** exclusion of the files conditional on this.                        *
17 **=====================================================================
18 */
19 
20 #include <sys/file.h>
21 #include <sys/ioctl.h>
22 #include <sys/stat.h>
23 
24 #include <ctype.h>
25 #include <errno.h>
26 #include <netdb.h>
27 #include <pwd.h>
28 #include <signal.h>
29 #include <stdio.h>
30 #include <stdlib.h>
31 #include <string.h>
32 #include <unistd.h>
33 
34 #ifndef SYSV
35 #include <sys/wait.h>
36 #endif
37 
38 #ifdef ISC_2_0
39 #include <sys/fcntl.h>
40 #endif
41 
42 #ifdef SHADOW_SUPPORT
43 #include <shadow.h>
44 #endif
45 
46 #include "paths.h"
47 
48 #include "common.h"
49 #include "pcnfsd.h"
50 #include "extern.h"
51 
52 /*
53 **---------------------------------------------------------------------
54 ** Other #define's
55 **---------------------------------------------------------------------
56 */
57 #ifndef MAXPATHLEN
58 #define MAXPATHLEN 1024
59 #endif
60 
61 /*
62 ** The following definitions give the maximum time allowed for
63 ** an external command to run (in seconds)
64 */
65 #define MAXTIME_FOR_PRINT	10
66 #define MAXTIME_FOR_QUEUE	10
67 #define MAXTIME_FOR_CANCEL	10
68 #define MAXTIME_FOR_STATUS	10
69 
70 #define QMAX 50
71 
72 /*
73 ** The following is derived from ucb/lpd/displayq.c
74 */
75 #define SIZECOL 62
76 #define FILECOL 24
77 
78 char   *expand_alias __P((char *, char *, char *, char *));
79 pr_list	list_virtual_printers __P((void));
80 char   *map_printer_name __P((char *));
81 void	substitute __P((char *, char *, char *));
82 int	suspicious __P((char *));
83 int	valid_pr __P((char *));
84 
85 /*
86 **---------------------------------------------------------------------
87 **                       Misc. variable definitions
88 **---------------------------------------------------------------------
89 */
90 
91 struct stat statbuf;
92 char    pathname[MAXPATHLEN];
93 char    new_pathname[MAXPATHLEN];
94 char    sp_name[MAXPATHLEN] = SPOOLDIR;
95 char    tempstr[256];
96 char    delims[] = " \t\r\n:()";
97 
98 pr_list printers = NULL;
99 pr_queue queue = NULL;
100 
101 /*
102 **=====================================================================
103 **                      C O D E   S E C T I O N                       *
104 **=====================================================================
105 */
106 
107 /*
108  * This is the latest word on the security check. The following
109  * routine "suspicious()" returns non-zero if the character string
110  * passed to it contains any shell metacharacters.
111  * Callers will typically code
112  *
113  *	if(suspicious(some_parameter)) reject();
114  */
115 
116 int
117 suspicious(s)
118 	char   *s;
119 {
120 	if (strpbrk(s, ";|&<>`'#!?*()[]^/${}\n\r\"\\:") != NULL)
121 		return 1;
122 	return 0;
123 }
124 
125 
126 int
127 valid_pr(pr)
128 	char   *pr;
129 {
130 	char   *p;
131 	pr_list curr;
132 	if (printers == NULL)
133 		build_pr_list();
134 
135 	if (printers == NULL)
136 		return (1);	/* can't tell - assume it's good */
137 
138 	p = map_printer_name(pr);
139 	if (p == NULL)
140 		return (1);	/* must be ok is maps to NULL! */
141 	curr = printers;
142 	while (curr) {
143 		if (!strcmp(p, curr->pn))
144 			return (1);
145 		curr = curr->pr_next;
146 	}
147 
148 	return (0);
149 }
150 /*
151  * get pathname of current directory and return to client
152  *
153  * Note: This runs as root on behalf of a client request.
154  * As described in CERT advisory CA-96.08, be careful about
155  * doing a chmod on something that could be a symlink...
156  */
157 pirstat
158 pr_init(sys, pr, sp)
159 	char   *sys;
160 	char   *pr;
161 	char  **sp;
162 {
163 	int     dir_mode = 0777;
164 	int     rc;
165 	mode_t  oldmask;
166 
167 	*sp = &pathname[0];
168 	pathname[0] = '\0';
169 
170 	if (suspicious(sys) || suspicious(pr))
171 		return (PI_RES_FAIL);
172 
173 	/*
174 	 * Make sure the server spool directory exists.
175 	 * Never create it here - the sysadmin does that.
176 	 */
177 	if (stat(sp_name, &statbuf) || !S_ISDIR(statbuf.st_mode))
178 		goto badspool;
179 
180 	/*
181 	 * Create the client spool directory if needed.
182 	 * Just do the mkdir call and ignore EEXIST.
183 	 * Mode of client directory should be 777.
184 	 */
185 	(void) sprintf(pathname, "%s/%s", sp_name, sys);
186 	oldmask = umask(0);
187 	rc = mkdir(pathname, dir_mode);	/* DON'T ignore this return code */
188 	umask(oldmask);
189 	if ((rc < 0) && (errno != EEXIST))
190 		goto badspool;
191 
192 	/* By this point the client spool dir should exist. */
193 	if (stat(pathname, &statbuf) || !S_ISDIR(statbuf.st_mode)) {
194 		/* No spool directory... */
195 badspool:
196 		(void) sprintf(tempstr,
197 		    "rpc.pcnfsd: unable to set up spool directory %s\n",
198 		    pathname);
199 		msg_out(tempstr);
200 		pathname[0] = '\0';	/* null to tell client bad vibes */
201 		return (PI_RES_FAIL);
202 	}
203 	/* OK, we have a spool directory. */
204 	if (!valid_pr(pr)) {
205 		pathname[0] = '\0';	/* null to tell client bad vibes */
206 		return (PI_RES_NO_SUCH_PRINTER);
207 	}
208 	return (PI_RES_OK);
209 }
210 psrstat
211 pr_start2(system, pr, user, fname, opts, id)
212 	char   *system;
213 	char   *pr;
214 	char   *user;
215 	char   *fname;
216 	char   *opts;
217 	char  **id;
218 {
219 	char    snum[20];
220 	static char req_id[256];
221 	char    cmdbuf[256];
222 	char    resbuf[256];
223 	FILE   *fd;
224 	int     i;
225 	char   *xcmd;
226 	int     failed = 0;
227 
228 #ifdef HACK_FOR_ROTATED_TRANSCRIPT
229 	char    scratch[512];
230 #endif
231 
232 
233 	if (suspicious(system) ||
234 	    suspicious(pr) ||
235 	    suspicious(user) ||
236 	    suspicious(fname))
237 		return (PS_RES_FAIL);
238 
239 	(void) sprintf(pathname, "%s/%s/%s", sp_name,
240 	    system,
241 	    fname);
242 
243 	*id = &req_id[0];
244 	req_id[0] = '\0';
245 
246 	if (stat(pathname, &statbuf)) {
247 		/*
248                 **-----------------------------------------------------------------
249 	        ** We can't stat the file. Let's try appending '.spl' and
250 	        ** see if it's already in progress.
251                 **-----------------------------------------------------------------
252 	        */
253 
254 		(void) strcat(pathname, ".spl");
255 		if (stat(pathname, &statbuf)) {
256 			/*
257 	                **----------------------------------------------------------------
258 		        ** It really doesn't exist.
259 	                **----------------------------------------------------------------
260 		        */
261 
262 
263 			return (PS_RES_NO_FILE);
264 		}
265 		/*
266                 **-------------------------------------------------------------
267 	        ** It is already on the way.
268                 **-------------------------------------------------------------
269 	        */
270 
271 
272 		return (PS_RES_ALREADY);
273 	}
274 	if (statbuf.st_size == 0) {
275 		/*
276                 **-------------------------------------------------------------
277 	        ** Null file - don't print it, just kill it.
278                 **-------------------------------------------------------------
279 	        */
280 		(void) unlink(pathname);
281 
282 		return (PS_RES_NULL);
283 	}
284 	/*
285         **-------------------------------------------------------------
286         ** The file is real, has some data, and is not already going out.
287         ** We rename it by appending '.spl' and exec "lpr" to do the
288         ** actual work.
289         **-------------------------------------------------------------
290         */
291 	(void) strcpy(new_pathname, pathname);
292 	(void) strcat(new_pathname, ".spl");
293 
294 	/*
295         **-------------------------------------------------------------
296 	** See if the new filename exists so as not to overwrite it.
297         **-------------------------------------------------------------
298 	*/
299 
300 
301 	if (!stat(new_pathname, &statbuf)) {
302 		(void) strcpy(new_pathname, pathname);	/* rebuild a new name */
303 		(void) sprintf(snum, "%d", rand());	/* get some number */
304 		(void) strncat(new_pathname, snum, 3);
305 		(void) strcat(new_pathname, ".spl");	/* new spool file */
306 	}
307 	if (rename(pathname, new_pathname)) {
308 		/*
309                 **---------------------------------------------------------------
310 	        ** Should never happen.
311                 **---------------------------------------------------------------
312                 */
313 		(void) sprintf(tempstr, "rpc.pcnfsd: spool file rename (%s->%s) failed.\n",
314 		    pathname, new_pathname);
315 		msg_out(tempstr);
316 		return (PS_RES_FAIL);
317 	}
318 	if (*opts == 'd') {
319 		/*
320 		 **------------------------------------------------------
321 		 ** This is a Diablo print stream. Apply the ps630
322 		 ** filter with the appropriate arguments.
323 		 **------------------------------------------------------
324 		 */
325 #if 0				/* XXX: Temporary fix for CERT advisory
326 				 * CA-96.08 */
327 		(void) run_ps630(new_pathname, opts);
328 #else
329 		(void) sprintf(tempstr,
330 		    "rpc.pcnfsd: ps630 filter disabled for %s\n", pathname);
331 		msg_out(tempstr);
332 		return (PS_RES_FAIL);
333 #endif
334 	}
335 	/*
336 	** Try to match to an aliased printer
337 	*/
338 	xcmd = expand_alias(pr, new_pathname, user, system);
339 	if (!xcmd) {
340 #ifdef	SVR4
341 		/*
342 			 * Use the copy option so we can remove the orignal
343 			 * spooled nfs file from the spool directory.
344 			 */
345 		sprintf(cmdbuf, "/usr/bin/lp -c -d%s %s",
346 		    pr, new_pathname);
347 #else				/* SVR4 */
348 		/* BSD way: lpr */
349 		sprintf(cmdbuf, "%s/lpr -P%s %s",
350 		    LPRDIR, pr, new_pathname);
351 #endif				/* SVR4 */
352 		xcmd = cmdbuf;
353 	}
354 	if ((fd = su_popen(user, xcmd, MAXTIME_FOR_PRINT)) == NULL) {
355 		msg_out("rpc.pcnfsd: su_popen failed");
356 		return (PS_RES_FAIL);
357 	}
358 	req_id[0] = '\0';	/* asume failure */
359 	while (fgets(resbuf, 255, fd) != NULL) {
360 		i = strlen(resbuf);
361 		if (i)
362 			resbuf[i - 1] = '\0';	/* trim NL */
363 		if (!strncmp(resbuf, "request id is ", 14))
364 			/* New - just the first word is needed */
365 			strcpy(req_id, strtok(&resbuf[14], delims));
366 		else
367 			if (strembedded("disabled", resbuf))
368 				failed = 1;
369 	}
370 	if (su_pclose(fd) == 255)
371 		msg_out("rpc.pcnfsd: su_pclose alert");
372 	(void) unlink(new_pathname);
373 	return ((failed | interrupted) ? PS_RES_FAIL : PS_RES_OK);
374 }
375 /*
376  * build_pr_list: determine which printers are valid.
377  * on SVR4 use "lpstat -v"
378  * on BSD use "lpc status"
379  */
380 
381 #ifdef	SVR4
382 /*
383  * In SVR4 the command to determine which printers are
384  * valid is lpstat -v. The output is something like this:
385  *
386  * device for lp: /dev/lp0
387  * system for pcdslw: hinode
388  * system for bletch: hinode (as printer hisname)
389  *
390  * On SunOS using the SysV compatibility package, the output
391  * is more like:
392  *
393  * device for lp is /dev/lp0
394  * device for pcdslw is the remote printer pcdslw on hinode
395  * device for bletch is the remote printer hisname on hinode
396  *
397  * It is fairly simple to create logic that will handle either
398  * possibility:
399  */
400 int
401 build_pr_list()
402 {
403 	pr_list last = NULL;
404 	pr_list curr = NULL;
405 	char    buff[256];
406 	FILE   *p;
407 	char   *cp;
408 	int     saw_system;
409 
410 	p = popen("lpstat -v", "r");
411 	if (p == NULL) {
412 		msg_out("rpc.pcnfsd: unable to popen() lp status");
413 		return (0);
414 	}
415 	while (fgets(buff, 255, p) != NULL) {
416 		cp = strtok(buff, delims);
417 		if (!cp)
418 			continue;
419 		if (!strcmp(cp, "device"))
420 			saw_system = 0;
421 		else
422 			if (!strcmp(cp, "system"))
423 				saw_system = 1;
424 			else
425 				continue;
426 		cp = strtok(NULL, delims);
427 		if (!cp || strcmp(cp, "for"))
428 			continue;
429 		cp = strtok(NULL, delims);
430 		if (!cp)
431 			continue;
432 		curr = (struct pr_list_item *)
433 		    grab(sizeof(struct pr_list_item));
434 
435 		curr->pn = strdup(cp);
436 		curr->device = NULL;
437 		curr->remhost = NULL;
438 		curr->cm = strdup("-");
439 		curr->pr_next = NULL;
440 
441 		cp = strtok(NULL, delims);
442 
443 		if (cp && !strcmp(cp, "is"))
444 			cp = strtok(NULL, delims);
445 
446 		if (!cp) {
447 			free_pr_list_item(curr);
448 			continue;
449 		}
450 		if (saw_system) {
451 			/* "system" OR "system (as printer pname)" */
452 			curr->remhost = strdup(cp);
453 			cp = strtok(NULL, delims);
454 			if (!cp) {
455 				/* simple format */
456 				curr->device = strdup(curr->pn);
457 			} else {
458 				/* "sys (as printer pname)" */
459 				if (strcmp(cp, "as")) {
460 					free_pr_list_item(curr);
461 					continue;
462 				}
463 				cp = strtok(NULL, delims);
464 				if (!cp || strcmp(cp, "printer")) {
465 					free_pr_list_item(curr);
466 					continue;
467 				}
468 				cp = strtok(NULL, delims);
469 				if (!cp) {
470 					free_pr_list_item(curr);
471 					continue;
472 				}
473 				curr->device = strdup(cp);
474 			}
475 		} else
476 			if (!strcmp(cp, "the")) {
477 				/* start of "the remote printer foo on bar" */
478 				cp = strtok(NULL, delims);
479 				if (!cp || strcmp(cp, "remote")) {
480 					free_pr_list_item(curr);
481 					continue;
482 				}
483 				cp = strtok(NULL, delims);
484 				if (!cp || strcmp(cp, "printer")) {
485 					free_pr_list_item(curr);
486 					continue;
487 				}
488 				cp = strtok(NULL, delims);
489 				if (!cp) {
490 					free_pr_list_item(curr);
491 					continue;
492 				}
493 				curr->device = strdup(cp);
494 				cp = strtok(NULL, delims);
495 				if (!cp || strcmp(cp, "on")) {
496 					free_pr_list_item(curr);
497 					continue;
498 				}
499 				cp = strtok(NULL, delims);
500 				if (!cp) {
501 					free_pr_list_item(curr);
502 					continue;
503 				}
504 				curr->remhost = strdup(cp);
505 			} else {
506 				/* the local name */
507 				curr->device = strdup(cp);
508 				curr->remhost = strdup("");
509 			}
510 
511 		if (last == NULL)
512 			printers = curr;
513 		else
514 			last->pr_next = curr;
515 		last = curr;
516 
517 	}
518 	(void) pclose(p);
519 
520 	/*
521 	 ** Now add on the virtual printers, if any
522 	 */
523 	if (last == NULL)
524 		printers = list_virtual_printers();
525 	else
526 		last->pr_next = list_virtual_printers();
527 
528 	return (1);
529 }
530 #else				/* SVR4 */
531 
532 /*
533  * BSD way: lpc stat
534  */
535 int
536 build_pr_list()
537 {
538 	pr_list last = NULL;
539 	pr_list curr = NULL;
540 	char    buff[256];
541 	FILE   *p;
542 	char   *cp;
543 
544 	sprintf(buff, "%s/lpc status", LPCDIR);
545 	p = popen(buff, "r");
546 	if (p == NULL) {
547 		msg_out("rpc.pcnfsd: unable to popen lpc stat");
548 		return (0);
549 	}
550 	while (fgets(buff, 255, p) != NULL) {
551 		if (isspace(buff[0]))
552 			continue;
553 
554 		if ((cp = strtok(buff, delims)) == NULL)
555 			continue;
556 
557 		curr = (struct pr_list_item *)
558 		    grab(sizeof(struct pr_list_item));
559 
560 		/* XXX - Should distinguish remote printers. */
561 		curr->pn = strdup(cp);
562 		curr->device = strdup(cp);
563 		curr->remhost = strdup("");
564 		curr->cm = strdup("-");
565 		curr->pr_next = NULL;
566 
567 		if (last == NULL)
568 			printers = curr;
569 		else
570 			last->pr_next = curr;
571 		last = curr;
572 
573 	}
574 	(void) fclose(p);
575 
576 	/*
577 	 ** Now add on the virtual printers, if any
578 	 */
579 	if (last == NULL)
580 		printers = list_virtual_printers();
581 	else
582 		last->pr_next = list_virtual_printers();
583 
584 	return (1);
585 }
586 #endif				/* SVR4 */
587 
588 void   *
589 grab(n)
590 	int     n;
591 {
592 	void   *p;
593 
594 	p = (void *) malloc(n);
595 	if (p == NULL) {
596 		msg_out("rpc.pcnfsd: malloc failure");
597 		exit(1);
598 	}
599 	return (p);
600 }
601 
602 void
603 free_pr_list_item(curr)
604 	pr_list curr;
605 {
606 	if (curr->pn)
607 		free(curr->pn);
608 	if (curr->device)
609 		free(curr->device);
610 	if (curr->remhost)
611 		free(curr->remhost);
612 	if (curr->cm)
613 		free(curr->cm);
614 	if (curr->pr_next)
615 		free_pr_list_item(curr->pr_next);	/* recurse */
616 	free(curr);
617 }
618 /*
619  * build_pr_queue:  used to show the print queue.
620  *
621  * Note that the first thing we do is to discard any
622  * existing queue.
623  */
624 #ifdef SVR4
625 
626 /*
627 ** In SVR4 the command to list the print jobs for printer
628 ** lp is "lpstat lp" (or, equivalently, "lpstat -p lp").
629 ** The output looks like this:
630 **
631 ** lp-2                    root               939   Jul 10 21:56
632 ** lp-5                    geoff               15   Jul 12 23:23
633 ** lp-6                    geoff               15   Jul 12 23:23
634 **
635 ** If the first job is actually printing the first line
636 ** is modified, as follows:
637 **
638 ** lp-2                    root               939   Jul 10 21:56 on lp
639 **
640 ** I don't yet have any info on what it looks like if the printer
641 ** is remote and we're spooling over the net. However for
642 ** the purposes of rpc.pcnfsd we can simply say that field 1 is the
643 ** job ID, field 2 is the submitter, and field 3 is the size.
644 ** We can check for the presence of the string " on " in the
645 ** first record to determine if we should count it as rank 0 or rank 1,
646 ** but it won't hurt if we get it wrong.
647 **/
648 
649 pirstat
650 build_pr_queue(pn, user, just_mine, p_qlen, p_qshown)
651 	printername pn;
652 	username user;
653 	int     just_mine;
654 	int    *p_qlen;
655 	int    *p_qshown;
656 {
657 	pr_queue last = NULL;
658 	pr_queue curr = NULL;
659 	char    buff[256];
660 	FILE   *p;
661 	char   *owner;
662 	char   *job;
663 	char   *totsize;
664 
665 	if (queue) {
666 		free_pr_queue_item(queue);
667 		queue = NULL;
668 	}
669 	*p_qlen = 0;
670 	*p_qshown = 0;
671 
672 	pn = map_printer_name(pn);
673 	if (pn == NULL || !valid_pr(pn) || suspicious(pn))
674 		return (PI_RES_NO_SUCH_PRINTER);
675 
676 	sprintf(buff, "/usr/bin/lpstat %s", pn);
677 	p = su_popen(user, buff, MAXTIME_FOR_QUEUE);
678 	if (p == NULL) {
679 		msg_out("rpc.pcnfsd: unable to popen() lpstat queue query");
680 		return (PI_RES_FAIL);
681 	}
682 	while (fgets(buff, 255, p) != NULL) {
683 		job = strtok(buff, delims);
684 		if (!job)
685 			continue;
686 
687 		owner = strtok(NULL, delims);
688 		if (!owner)
689 			continue;
690 
691 		totsize = strtok(NULL, delims);
692 		if (!totsize)
693 			continue;
694 
695 		*p_qlen += 1;
696 
697 		if (*p_qshown > QMAX)
698 			continue;
699 
700 		if (just_mine && strcasecmp(owner, user))
701 			continue;
702 
703 		*p_qshown += 1;
704 
705 		curr = (struct pr_queue_item *)
706 		    grab(sizeof(struct pr_queue_item));
707 
708 		curr->position = *p_qlen;
709 		curr->id = strdup(job);
710 		curr->size = strdup(totsize);
711 		curr->status = strdup("");
712 		curr->system = strdup("");
713 		curr->user = strdup(owner);
714 		curr->file = strdup("");
715 		curr->cm = strdup("-");
716 		curr->pr_next = NULL;
717 
718 		if (last == NULL)
719 			queue = curr;
720 		else
721 			last->pr_next = curr;
722 		last = curr;
723 
724 	}
725 	(void) su_pclose(p);
726 	return (PI_RES_OK);
727 }
728 #else				/* SVR4 */
729 
730 pirstat
731 build_pr_queue(pn, user, just_mine, p_qlen, p_qshown)
732 	printername pn;
733 	username user;
734 	int     just_mine;
735 	int    *p_qlen;
736 	int    *p_qshown;
737 {
738 	pr_queue last = NULL;
739 	pr_queue curr = NULL;
740 	char    buff[256];
741 	FILE   *p;
742 	char   *cp;
743 	int     i;
744 	char   *rank;
745 	char   *owner;
746 	char   *job;
747 	char   *files;
748 	char   *totsize;
749 
750 	if (queue) {
751 		free_pr_queue_item(queue);
752 		queue = NULL;
753 	}
754 	*p_qlen = 0;
755 	*p_qshown = 0;
756 	pn = map_printer_name(pn);
757 	if (pn == NULL || suspicious(pn))
758 		return (PI_RES_NO_SUCH_PRINTER);
759 
760 	sprintf(buff, "%s/lpq -P%s", LPRDIR, pn);
761 
762 	p = su_popen(user, buff, MAXTIME_FOR_QUEUE);
763 	if (p == NULL) {
764 		msg_out("rpc.pcnfsd: unable to popen() lpq");
765 		return (PI_RES_FAIL);
766 	}
767 	while (fgets(buff, 255, p) != NULL) {
768 		i = strlen(buff) - 1;
769 		buff[i] = '\0';	/* zap trailing NL */
770 		if (i < SIZECOL)
771 			continue;
772 		if (!strncasecmp(buff, "rank", 4))
773 			continue;
774 
775 		totsize = &buff[SIZECOL - 1];
776 		files = &buff[FILECOL - 1];
777 		cp = totsize;
778 		cp--;
779 		while (cp > files && isspace(*cp))
780 			*cp-- = '\0';
781 
782 		buff[FILECOL - 2] = '\0';
783 
784 		cp = strtok(buff, delims);
785 		if (!cp)
786 			continue;
787 		rank = cp;
788 
789 		cp = strtok(NULL, delims);
790 		if (!cp)
791 			continue;
792 		owner = cp;
793 
794 		cp = strtok(NULL, delims);
795 		if (!cp)
796 			continue;
797 		job = cp;
798 
799 		*p_qlen += 1;
800 
801 		if (*p_qshown > QMAX)
802 			continue;
803 
804 		if (just_mine && strcasecmp(owner, user))
805 			continue;
806 
807 		*p_qshown += 1;
808 
809 		curr = (struct pr_queue_item *)
810 		    grab(sizeof(struct pr_queue_item));
811 
812 		curr->position = atoi(rank);	/* active -> 0 */
813 		curr->id = strdup(job);
814 		curr->size = strdup(totsize);
815 		curr->status = strdup(rank);
816 		curr->system = strdup("");
817 		curr->user = strdup(owner);
818 		curr->file = strdup(files);
819 		curr->cm = strdup("-");
820 		curr->pr_next = NULL;
821 
822 		if (last == NULL)
823 			queue = curr;
824 		else
825 			last->pr_next = curr;
826 		last = curr;
827 
828 	}
829 	(void) su_pclose(p);
830 	return (PI_RES_OK);
831 }
832 #endif				/* SVR4 */
833 
834 void
835 free_pr_queue_item(curr)
836 	pr_queue curr;
837 {
838 	if (curr->id)
839 		free(curr->id);
840 	if (curr->size)
841 		free(curr->size);
842 	if (curr->status)
843 		free(curr->status);
844 	if (curr->system)
845 		free(curr->system);
846 	if (curr->user)
847 		free(curr->user);
848 	if (curr->file)
849 		free(curr->file);
850 	if (curr->cm)
851 		free(curr->cm);
852 	if (curr->pr_next)
853 		free_pr_queue_item(curr->pr_next);	/* recurse */
854 	free(curr);
855 }
856 #ifdef SVR4
857 
858 /*
859 ** New - SVR4 printer status handling.
860 **
861 ** The command we'll use for checking the status of printer "lp"
862 ** is "lpstat -a lp -p lp". Here are some sample outputs:
863 **
864 **
865 ** lp accepting requests since Wed Jul 10 21:49:25 EDT 1991
866 ** printer lp disabled since Thu Feb 21 22:52:36 EST 1991. available.
867 ** 	new printer
868 ** ---
869 ** pcdslw not accepting requests since Fri Jul 12 22:30:00 EDT 1991 -
870 ** 	unknown reason
871 ** printer pcdslw disabled since Fri Jul 12 22:15:37 EDT 1991. available.
872 ** 	new printer
873 ** ---
874 ** lp accepting requests since Wed Jul 10 21:49:25 EDT 1991
875 ** printer lp now printing lp-2. enabled since Sat Jul 13 12:02:17 EDT 1991. available.
876 ** ---
877 ** lp accepting requests since Wed Jul 10 21:49:25 EDT 1991
878 ** printer lp now printing lp-2. enabled since Sat Jul 13 12:02:17 EDT 1991. available.
879 ** ---
880 ** lp accepting requests since Wed Jul 10 21:49:25 EDT 1991
881 ** printer lp disabled since Sat Jul 13 12:05:20 EDT 1991. available.
882 ** 	unknown reason
883 ** ---
884 ** pcdslw not accepting requests since Fri Jul 12 22:30:00 EDT 1991 -
885 ** 	unknown reason
886 ** printer pcdslw is idle. enabled since Sat Jul 13 12:05:28 EDT 1991. available.
887 **
888 ** Note that these are actual outputs. The format (which is totally
889 ** different from the lpstat in SunOS) seems to break down as
890 ** follows:
891 ** (1) The first line has the form "printername [not] accepting requests,,,"
892 **    This is trivial to decode.
893 ** (2) The second line has several forms, all beginning "printer printername":
894 ** (2.1) "... disabled"
895 ** (2.2) "... is idle"
896 ** (2.3) "... now printing jobid"
897 ** The "available" comment seems to be meaningless. The next line
898 ** is the "reason" code which the operator can supply when issuing
899 ** a "disable" or "reject" command.
900 ** Note that there is no way to check the number of entries in the
901 ** queue except to ask for the queue and count them.
902 */
903 
904 pirstat
905 get_pr_status(pn, avail, printing, qlen, needs_operator, status)
906 	printername pn;
907 	bool_t *avail;
908 	bool_t *printing;
909 	int    *qlen;
910 	bool_t *needs_operator;
911 	char   *status;
912 {
913 	char    buff[256];
914 	char    cmd[64];
915 	FILE   *p;
916 	int     n;
917 	pirstat stat = PI_RES_NO_SUCH_PRINTER;
918 
919 	/* assume the worst */
920 	*avail = FALSE;
921 	*printing = FALSE;
922 	*needs_operator = FALSE;
923 	*qlen = 0;
924 	*status = '\0';
925 
926 	pn = map_printer_name(pn);
927 	if (pn == NULL || !valid_pr(pn) || suspicious(pn))
928 		return (PI_RES_NO_SUCH_PRINTER);
929 	n = strlen(pn);
930 
931 	sprintf(cmd, "/usr/bin/lpstat -a %s -p %s", pn, pn);
932 
933 	p = popen(cmd, "r");
934 	if (p == NULL) {
935 		msg_out("rpc.pcnfsd: unable to popen() lp status");
936 		return (PI_RES_FAIL);
937 	}
938 	stat = PI_RES_OK;
939 
940 	while (fgets(buff, 255, p) != NULL) {
941 		if (!strncmp(buff, pn, n)) {
942 			if (!strstr(buff, "not accepting"))
943 				*avail = TRUE;
944 			continue;
945 		}
946 		if (!strncmp(buff, "printer ", 8)) {
947 			if (!strstr(buff, "disabled"))
948 				*printing = TRUE;
949 			if (strstr(buff, "printing"))
950 				strcpy(status, "printing");
951 			else
952 				if (strstr(buff, "idle"))
953 					strcpy(status, "idle");
954 			continue;
955 		}
956 		if (!strncmp(buff, "UX:", 3)) {
957 			stat = PI_RES_NO_SUCH_PRINTER;
958 		}
959 	}
960 	(void) pclose(p);
961 	return (stat);
962 }
963 #else				/* SVR4 */
964 
965 /*
966  * BSD way: lpc status
967  */
968 pirstat
969 get_pr_status(pn, avail, printing, qlen, needs_operator, status)
970 	printername pn;
971 	bool_t *avail;
972 	bool_t *printing;
973 	int    *qlen;
974 	bool_t *needs_operator;
975 	char   *status;
976 {
977 	char    cmd[128];
978 	char    buff[256];
979 	char    buff2[256];
980 	char    pname[64];
981 	FILE   *p;
982 	char   *cp;
983 	char   *cp1;
984 	char   *cp2;
985 	int     n;
986 	pirstat stat = PI_RES_NO_SUCH_PRINTER;
987 
988 	/* assume the worst */
989 	*avail = FALSE;
990 	*printing = FALSE;
991 	*needs_operator = FALSE;
992 	*qlen = 0;
993 	*status = '\0';
994 
995 	pn = map_printer_name(pn);
996 	if (pn == NULL || suspicious(pn))
997 		return (PI_RES_NO_SUCH_PRINTER);
998 
999 	sprintf(pname, "%s:", pn);
1000 	n = strlen(pname);
1001 
1002 	sprintf(cmd, "%s/lpc status %s", LPCDIR, pn);
1003 	p = popen(cmd, "r");
1004 	if (p == NULL) {
1005 		msg_out("rpc.pcnfsd: unable to popen() lp status");
1006 		return (PI_RES_FAIL);
1007 	}
1008 	while (fgets(buff, 255, p) != NULL) {
1009 		if (strncmp(buff, pname, n))
1010 			continue;
1011 /*
1012 ** We have a match. The only failure now is PI_RES_FAIL if
1013 ** lpstat output cannot be decoded
1014 */
1015 		stat = PI_RES_FAIL;
1016 /*
1017 ** The next four lines are usually if the form
1018 **
1019 **     queuing is [enabled|disabled]
1020 **     printing is [enabled|disabled]
1021 **     [no entries | N entr[y|ies] in spool area]
1022 **     <status message, may include the word "attention">
1023 */
1024 		while (fgets(buff, 255, p) != NULL && isspace(buff[0])) {
1025 			cp = buff;
1026 			while (isspace(*cp))
1027 				cp++;
1028 			if (*cp == '\0')
1029 				break;
1030 			cp1 = cp;
1031 			cp2 = buff2;
1032 			while (*cp1 && *cp1 != '\n') {
1033 				*cp2++ = tolower(*cp1);
1034 				cp1++;
1035 			}
1036 			*cp1 = '\0';
1037 			*cp2 = '\0';
1038 /*
1039 ** Now buff2 has a lower-cased copy and cp points at the original;
1040 ** both are null terminated without any newline
1041 */
1042 			if (!strncmp(buff2, "queuing", 7)) {
1043 				*avail = (strstr(buff2, "enabled") != NULL);
1044 				continue;
1045 			}
1046 			if (!strncmp(buff2, "printing", 8)) {
1047 				*printing = (strstr(buff2, "enabled") != NULL);
1048 				continue;
1049 			}
1050 			if (isdigit(buff2[0]) && (strstr(buff2, "entr") != NULL)) {
1051 
1052 				*qlen = atoi(buff2);
1053 				continue;
1054 			}
1055 			if (strstr(buff2, "attention") != NULL ||
1056 			    strstr(buff2, "error") != NULL)
1057 				*needs_operator = TRUE;
1058 			if (*needs_operator || strstr(buff2, "waiting") != NULL)
1059 				strcpy(status, cp);
1060 		}
1061 		stat = PI_RES_OK;
1062 		break;
1063 	}
1064 	(void) pclose(p);
1065 	return (stat);
1066 }
1067 #endif				/* SVR4 */
1068 
1069 /*
1070  * pr_cancel: cancel a print job
1071  */
1072 #ifdef SVR4
1073 
1074 /*
1075 ** For SVR4 we have to be prepared for the following kinds of output:
1076 **
1077 ** # cancel lp-6
1078 ** request "lp-6" cancelled
1079 ** # cancel lp-33
1080 ** UX:cancel: WARNING: Request "lp-33" doesn't exist.
1081 ** # cancel foo-88
1082 ** UX:cancel: WARNING: Request "foo-88" doesn't exist.
1083 ** # cancel foo
1084 ** UX:cancel: WARNING: "foo" is not a request id or a printer.
1085 **             TO FIX: Cancel requests by id or by
1086 **                     name of printer where printing.
1087 ** # su geoff
1088 ** $ cancel lp-2
1089 ** UX:cancel: WARNING: Can't cancel request "lp-2".
1090 **             TO FIX: You are not allowed to cancel
1091 **                     another's request.
1092 **
1093 ** There are probably other variations for remote printers.
1094 ** Basically, if the reply begins with the string
1095 **          "UX:cancel: WARNING: "
1096 ** we can strip this off and look for one of the following
1097 ** (1) 'R' - should be part of "Request "xxxx" doesn't exist."
1098 ** (2) '"' - should be start of ""foo" is not a request id or..."
1099 ** (3) 'C' - should be start of "Can't cancel request..."
1100 **
1101 ** The fly in the ointment: all of this can change if these
1102 ** messages are localized..... :-(
1103 */
1104 pcrstat
1105 pr_cancel(pr, user, id)
1106 	char   *pr;
1107 	char   *user;
1108 	char   *id;
1109 {
1110 	char    cmdbuf[256];
1111 	char    resbuf[256];
1112 	FILE   *fd;
1113 	pcrstat stat = PC_RES_NO_SUCH_JOB;
1114 
1115 	pr = map_printer_name(pr);
1116 	if (pr == NULL || suspicious(pr))
1117 		return (PC_RES_NO_SUCH_PRINTER);
1118 	if (suspicious(id))
1119 		return (PC_RES_NO_SUCH_JOB);
1120 
1121 	sprintf(cmdbuf, "/usr/bin/cancel %s", id);
1122 	if ((fd = su_popen(user, cmdbuf, MAXTIME_FOR_CANCEL)) == NULL) {
1123 		msg_out("rpc.pcnfsd: su_popen failed");
1124 		return (PC_RES_FAIL);
1125 	}
1126 	if (fgets(resbuf, 255, fd) == NULL)
1127 		stat = PC_RES_FAIL;
1128 	else
1129 		if (!strstr(resbuf, "UX:"))
1130 			stat = PC_RES_OK;
1131 		else
1132 			if (strstr(resbuf, "doesn't exist"))
1133 				stat = PC_RES_NO_SUCH_JOB;
1134 			else
1135 				if (strstr(resbuf, "not a request id"))
1136 					stat = PC_RES_NO_SUCH_JOB;
1137 				else
1138 					if (strstr(resbuf, "Can't cancel request"))
1139 						stat = PC_RES_NOT_OWNER;
1140 					else
1141 						stat = PC_RES_FAIL;
1142 
1143 	if (su_pclose(fd) == 255)
1144 		msg_out("rpc.pcnfsd: su_pclose alert");
1145 	return (stat);
1146 }
1147 #else				/* SVR4 */
1148 
1149 /*
1150  * BSD way: lprm
1151  */
1152 pcrstat
1153 pr_cancel(pr, user, id)
1154 	char   *pr;
1155 	char   *user;
1156 	char   *id;
1157 {
1158 	char    cmdbuf[256];
1159 	char    resbuf[256];
1160 	FILE   *fd;
1161 	int     i;
1162 	pcrstat stat = PC_RES_NO_SUCH_JOB;
1163 
1164 	pr = map_printer_name(pr);
1165 	if (pr == NULL || suspicious(pr))
1166 		return (PC_RES_NO_SUCH_PRINTER);
1167 	if (suspicious(id))
1168 		return (PC_RES_NO_SUCH_JOB);
1169 
1170 	sprintf(cmdbuf, "%s/lprm -P%s %s", LPRDIR, pr, id);
1171 	if ((fd = su_popen(user, cmdbuf, MAXTIME_FOR_CANCEL)) == NULL) {
1172 		msg_out("rpc.pcnfsd: su_popen failed");
1173 		return (PC_RES_FAIL);
1174 	}
1175 	while (fgets(resbuf, 255, fd) != NULL) {
1176 		i = strlen(resbuf);
1177 		if (i)
1178 			resbuf[i - 1] = '\0';	/* trim NL */
1179 		if (strstr(resbuf, "dequeued") != NULL)
1180 			stat = PC_RES_OK;
1181 		if (strstr(resbuf, "unknown printer") != NULL)
1182 			stat = PC_RES_NO_SUCH_PRINTER;
1183 		if (strstr(resbuf, "Permission denied") != NULL)
1184 			stat = PC_RES_NOT_OWNER;
1185 	}
1186 	if (su_pclose(fd) == 255)
1187 		msg_out("rpc.pcnfsd: su_pclose alert");
1188 	return (stat);
1189 }
1190 #endif				/* SVR4 */
1191 
1192 /*
1193 ** New subsystem here. We allow the administrator to define
1194 ** up to NPRINTERDEFS aliases for printer names. This is done
1195 ** using the "/etc/pcnfsd.conf" file, which is read at startup.
1196 ** There are three entry points to this subsystem
1197 **
1198 ** void add_printer_alias(char *printer, char *alias_for, char *command)
1199 **
1200 ** This is invoked from "config_from_file()" for each
1201 ** "printer" line. "printer" is the name of a printer; note that
1202 ** it is possible to redefine an existing printer. "alias_for"
1203 ** is the name of the underlying printer, used for queue listing
1204 ** and other control functions. If it is "-", there is no
1205 ** underlying printer, or the administrative functions are
1206 ** not applicable to this printer. "command"
1207 ** is the command which should be run (via "su_popen()") if a
1208 ** job is printed on this printer. The following tokens may be
1209 ** embedded in the command, and are substituted as follows:
1210 **
1211 ** $FILE	-	path to the file containing the print data
1212 ** $USER	-	login of user
1213 ** $HOST	-	hostname from which job originated
1214 **
1215 ** Tokens may occur multiple times. If The command includes no
1216 ** $FILE token, the string " $FILE" is silently appended.
1217 **
1218 ** pr_list list_virtual_printers()
1219 **
1220 ** This is invoked from build_pr_list to generate a list of aliased
1221 ** printers, so that the client that asks for a list of valid printers
1222 ** will see these ones.
1223 **
1224 ** char *map_printer_name(char *printer)
1225 **
1226 ** If "printer" identifies an aliased printer, this function returns
1227 ** the "alias_for" name, or NULL if the "alias_for" was given as "-".
1228 ** Otherwise it returns its argument.
1229 **
1230 ** char *expand_alias(char *printer, char *file, char *user, char *host)
1231 **
1232 ** If "printer" is an aliased printer, this function returns a
1233 ** pointer to a static string in which the corresponding command
1234 ** has been expanded. Otherwise ot returns NULL.
1235 */
1236 #define NPRINTERDEFS	16
1237 int     num_aliases = 0;
1238 struct {
1239 	char   *a_printer;
1240 	char   *a_alias_for;
1241 	char   *a_command;
1242 }       alias[NPRINTERDEFS];
1243 
1244 void
1245 add_printer_alias(printer, alias_for, command)
1246 	char   *printer;
1247 	char   *alias_for;
1248 	char   *command;
1249 {
1250 	if (num_aliases < NPRINTERDEFS) {
1251 		alias[num_aliases].a_printer = strdup(printer);
1252 		alias[num_aliases].a_alias_for =
1253 		    (strcmp(alias_for, "-") ? strdup(alias_for) : NULL);
1254 		if (strstr(command, "$FILE"))
1255 			alias[num_aliases].a_command = strdup(command);
1256 		else {
1257 			alias[num_aliases].a_command = (char *) grab(strlen(command) + 8);
1258 			strcpy(alias[num_aliases].a_command, command);
1259 			strcat(alias[num_aliases].a_command, " $FILE");
1260 		}
1261 		num_aliases++;
1262 	}
1263 }
1264 
1265 pr_list
1266 list_virtual_printers()
1267 {
1268 	pr_list first = NULL;
1269 	pr_list last = NULL;
1270 	pr_list curr = NULL;
1271 	int     i;
1272 
1273 
1274 	if (num_aliases == 0)
1275 		return (NULL);
1276 
1277 	for (i = 0; i < num_aliases; i++) {
1278 		curr = (struct pr_list_item *)
1279 		    grab(sizeof(struct pr_list_item));
1280 
1281 		curr->pn = strdup(alias[i].a_printer);
1282 		if (alias[i].a_alias_for == NULL)
1283 			curr->device = strdup("");
1284 		else
1285 			curr->device = strdup(alias[i].a_alias_for);
1286 		curr->remhost = strdup("");
1287 		curr->cm = strdup("(alias)");
1288 		curr->pr_next = NULL;
1289 		if (last == NULL)
1290 			first = curr;
1291 		else
1292 			last->pr_next = curr;
1293 		last = curr;
1294 
1295 	}
1296 	return (first);
1297 }
1298 
1299 
1300 char   *
1301 map_printer_name(printer)
1302 	char   *printer;
1303 {
1304 	int     i;
1305 	for (i = 0; i < num_aliases; i++) {
1306 		if (!strcmp(printer, alias[i].a_printer))
1307 			return (alias[i].a_alias_for);
1308 	}
1309 	return (printer);
1310 }
1311 
1312 void
1313 substitute(string, token, data)
1314 	char   *string;
1315 	char   *token;
1316 	char   *data;
1317 {
1318 	char    temp[512];
1319 	char   *c;
1320 
1321 	while ((c = strstr(string, token)) != NULL) {
1322 		*c = '\0';
1323 		strcpy(temp, string);
1324 		strcat(temp, data);
1325 		c += strlen(token);
1326 		strcat(temp, c);
1327 		strcpy(string, temp);
1328 	}
1329 }
1330 
1331 char   *
1332 expand_alias(printer, file, user, host)
1333 	char   *printer;
1334 	char   *file;
1335 	char   *user;
1336 	char   *host;
1337 {
1338 	static char expansion[512];
1339 	int     i;
1340 	for (i = 0; i < num_aliases; i++) {
1341 		if (!strcmp(printer, alias[i].a_printer)) {
1342 			strcpy(expansion, alias[i].a_command);
1343 			substitute(expansion, "$FILE", file);
1344 			substitute(expansion, "$USER", user);
1345 			substitute(expansion, "$HOST", host);
1346 			return (expansion);
1347 		}
1348 	}
1349 	return (NULL);
1350 }
1351