ntdsextract2 1.4.15

use std::path::Path;
use std::str::FromStr;

use anyhow::Result;
use clap::Parser;
use libesedb::EseDb;
use libntdsextract2::cli::{
    AclCommand, Args, Commands, EntrySearchField, OutputOptions, SdDisplayOption,
};
use libntdsextract2::{
    use_member_of_attribute, CDatabase, CsvSerialization, EntryId, EsedbInfo, Guid,
    JsonSerialization,
};
use sddl::{AccessMaskFlag, Contains};
use simplelog::{Config, TermLogger};

mod progress_bar;

use cap::Cap;
use std::alloc;
use uuid::uuid;

macro_rules! do_with_serialization {
    ($cmd: expr, $db: expr, $function: ident, $options: expr) => {
        if $cmd.flat_serialization() {
            $db.$function::<CsvSerialization>($options)
        } else {
            $db.$function::<JsonSerialization>($options)
        }
    };
}

#[global_allocator]
static ALLOCATOR: Cap<alloc::System> = Cap::new(alloc::System, usize::MAX);

fn main() -> Result<()> {
    ALLOCATOR.set_limit(4096 * 1024 * 1024).unwrap();

    let cli = Args::parse();
    let _ = TermLogger::init(
        cli.verbose().log_level_filter(),
        Config::default(),
        simplelog::TerminalMode::Stderr,
        simplelog::ColorChoice::Auto,
    );

    let ntds_path = Path::new(cli.ntds_file());
    if !(ntds_path.exists() && ntds_path.is_file()) {
        eprintln!("unable to open '{}'", cli.ntds_file());
        std::process::exit(-1);
    }

    let esedb = EseDb::open(cli.ntds_file())?;

    if matches!(cli.command(), Commands::Info {}) {
        EsedbInfo::print_metainfo(&esedb)?;
        return Ok(());
    }

    let info = EsedbInfo::try_from(&esedb)?;

    // always load sd_table if the user wants to show security desriptors
    // or if any acl subcommand is being used
    let database = CDatabase::new(
        &info,
        cli.command().show_security_descriptor() != SdDisplayOption::Hide
            || matches!(cli.command(), Commands::Acl { .. }),
    )?;

    let mut options = OutputOptions::default();
    options.set_display_all_attributes(cli.command().display_all_attributes());
    options.set_flat_serialization(cli.command().flat_serialization());
    options.set_format(cli.command().format());
    options.set_include_dn(cli.command().include_dn());
    options.set_show_security_descriptor(cli.command().show_security_descriptor());

    use_member_of_attribute(cli.command().member_of_attribute());

    match cli.command() {
        Commands::Group { .. } => {
            do_with_serialization!(cli.command(), database, show_groups, &options)
        }
        Commands::User { .. } => {
            do_with_serialization!(cli.command(), database, show_users, &options)
        }
        Commands::Computer { .. } => {
            do_with_serialization!(cli.command(), database, show_computers, &options)
        }
        Commands::Types { .. } => {
            do_with_serialization!(cli.command(), database, show_type_names, &options)
        }
        Commands::Timeline {
            all_objects,
            include_deleted,
            format,
        } => {
            options.set_show_all_objects(*all_objects);
            database.show_timeline(&options, *include_deleted, format)
        }
        Commands::Tree { max_depth } => Ok(database.show_tree(*max_depth)?),
        Commands::Entry {
            search_field,
            id,
            entry_format,
        } => {
            let entry_id = match search_field {
                EntrySearchField::EntryId => EntryId::Id(id.parse::<i32>()?.into()),
                EntrySearchField::Sid => EntryId::Rid(id.parse::<u32>()?),
                EntrySearchField::Guid => EntryId::Guid(Guid::from_str(id)?),
            };
            Ok(database.show_entry(entry_id, *entry_format)?)
        }
        Commands::Search { regex, ignore_case } => {
            let regex = if *ignore_case {
                format!("(?i:{regex})")
            } else {
                regex.to_owned()
            };
            database.search_entries(&regex)
        }
        Commands::Acl { acl_command } => {
            match acl_command {
                AclCommand::GA { format, include_dn } => {
                    database.show_objects_by_permission(*include_dn, format, |ace| {
                        if ace.header().mask().contains(AccessMaskFlag::GENERIC_ALL)
                                                    //
                                                    // the following flags are set by AD
                                                    // when you grant GA to some user
                                                        | ace.header().mask().contains(
                                                            AccessMaskFlag::WRITE_OWNER
                                                                | AccessMaskFlag::WRITE_DACL
                                                                | AccessMaskFlag::READ_CONTROL
                                                                | AccessMaskFlag::STANDARD_DELETE
                                                                | AccessMaskFlag::CONTROL_ACCESS
                                                                | AccessMaskFlag::LIST_OBJECT
                                                                | AccessMaskFlag::DELETE_TREE
                                                                | AccessMaskFlag::WRITE_PROPERTY
                                                                | AccessMaskFlag::READ_PROPERTY
                                                                | AccessMaskFlag::SELF_WRITE
                                                                | AccessMaskFlag::LIST_CHILDREN
                                                                | AccessMaskFlag::DELETE_CHILD
                                                                | AccessMaskFlag::CREATE_CHILD,
                                                        )
                        {
                            Some(ace.sid())
                        } else {
                            None
                        }
                    })
                }
                AclCommand::AllCr { format, include_dn } => {
                    database.show_objects_by_permission(*include_dn, format, |ace| {
                        if ace.header().mask().contains(AccessMaskFlag::CONTROL_ACCESS)
                            && ace.can_have_object_type()
                            && ace.object_type().is_none()
                        {
                            return Some(ace.sid());
                        }
                        None
                    })
                }
                AclCommand::DCSync { format, include_dn } => {
                    database.show_objects_by_permission(*include_dn, format, |ace| {
                        if ace.header().mask().contains(AccessMaskFlag::CONTROL_ACCESS) {
                            if let Some(object_guid) = ace.object_type() {
                                if object_guid
                                    == &sddl::Guid::from(uuid!(
                                        "89e95b76-444d-4c62-991a-0facbeda640c"
                                    ))
                                {
                                    return Some(ace.sid());
                                }
                            }
                        }
                        None
                    })
                }
                //AclCommand::ExtendedRights {} => database.show_extended_rights(),
            }
        }
        Commands::Info {} => Ok(()),
    }
}