#include "includes.h"
extern BOOL sam_logon_in_ssb;
extern pstring samlogon_user;
extern pstring global_myname;
extern DOM_SID global_sam_sid;
static void init_net_r_req_chal(NET_R_REQ_CHAL *r_c,
DOM_CHAL *srv_chal, NTSTATUS status)
{
DEBUG(6,("init_net_r_req_chal: %d\n", __LINE__));
memcpy(r_c->srv_chal.data, srv_chal->data, sizeof(srv_chal->data));
r_c->status = status;
}
#define ERROR_NO_SUCH_DOMAIN 0x54b
#define ERROR_NO_LOGON_SERVERS 0x51f
#define LOGON_CTRL_IN_SYNC 0x00
#define LOGON_CTRL_REPL_NEEDED 0x01
#define LOGON_CTRL_REPL_IN_PROGRESS 0x02
NTSTATUS _net_logon_ctrl(pipes_struct *p, NET_Q_LOGON_CTRL *q_u,
NET_R_LOGON_CTRL *r_u)
{
uint32 flags = 0x0;
uint32 pdc_connection_status = 0x00;
init_net_r_logon_ctrl(r_u, q_u->query_level, flags,
pdc_connection_status);
return r_u->status;
}
NTSTATUS _net_logon_ctrl2(pipes_struct *p, NET_Q_LOGON_CTRL2 *q_u, NET_R_LOGON_CTRL2 *r_u)
{
uint32 flags = 0x0;
uint32 pdc_connection_status = 0x0;
uint32 logon_attempts = 0x0;
uint32 tc_status = ERROR_NO_LOGON_SERVERS;
char *trusted_domain = "test_domain";
DEBUG(0, ("*** net long ctrl2 %d, %d, %d\n",
q_u->function_code, q_u->query_level, q_u->switch_value));
DEBUG(6,("_net_logon_ctrl2: %d\n", __LINE__));
init_net_r_logon_ctrl2(r_u, q_u->query_level,
flags, pdc_connection_status, logon_attempts,
tc_status, trusted_domain);
DEBUG(6,("_net_logon_ctrl2: %d\n", __LINE__));
return r_u->status;
}
NTSTATUS _net_trust_dom_list(pipes_struct *p, NET_Q_TRUST_DOM_LIST *q_u, NET_R_TRUST_DOM_LIST *r_u)
{
char *trusted_domain = "test_domain";
uint32 num_trust_domains = 1;
DEBUG(6,("_net_trust_dom_list: %d\n", __LINE__));
init_r_trust_dom(r_u, num_trust_domains, trusted_domain);
DEBUG(6,("_net_trust_dom_list: %d\n", __LINE__));
return r_u->status;
}
static void init_net_r_srv_pwset(NET_R_SRV_PWSET *r_s,
DOM_CRED *srv_cred, NTSTATUS status)
{
DEBUG(5,("init_net_r_srv_pwset: %d\n", __LINE__));
memcpy(&r_s->srv_cred, srv_cred, sizeof(r_s->srv_cred));
r_s->status = status;
DEBUG(5,("init_net_r_srv_pwset: %d\n", __LINE__));
}
static BOOL get_md4pw(char *md4pw, char *mach_acct)
{
SAM_ACCOUNT *sampass = NULL;
uint8 *pass;
BOOL ret;
#if 0
if (!allow_access(lp_domain_hostsdeny(), lp_domain_hostsallow(),
client_name(), client_addr()))
{
DEBUG(0,("get_md4pw: Workstation %s denied access to domain\n", mach_acct));
return False;
}
#endif
if(!pdb_init_sam(&sampass))
return False;
become_root();
ret=pdb_getsampwnam(sampass, mach_acct);
unbecome_root();
if (ret==False) {
DEBUG(0,("get_md4pw: Workstation %s: no account in domain\n", mach_acct));
pdb_free_sam(sampass);
return False;
}
if (!(pdb_get_acct_ctrl(sampass) & ACB_DISABLED) && ((pass=pdb_get_nt_passwd(sampass)) != NULL)) {
memcpy(md4pw, pass, 16);
dump_data(5, md4pw, 16);
pdb_free_sam(sampass);
return True;
}
DEBUG(0,("get_md4pw: Workstation %s: no account in domain\n", mach_acct));
pdb_free_sam(sampass);
return False;
}
NTSTATUS _net_req_chal(pipes_struct *p, NET_Q_REQ_CHAL *q_u, NET_R_REQ_CHAL *r_u)
{
NTSTATUS status = NT_STATUS_OK;
fstring mach_acct;
if (!get_valid_user_struct(p->vuid))
return NT_STATUS_NO_SUCH_USER;
fstrcpy(mach_acct, dos_unistrn2(q_u->uni_logon_clnt.buffer,
q_u->uni_logon_clnt.uni_str_len));
strlower(mach_acct);
fstrcat(mach_acct, "$");
if (get_md4pw((char *)p->dc.md4pw, mach_acct)) {
memcpy(p->dc.clnt_chal.data , q_u->clnt_chal.data, sizeof(q_u->clnt_chal.data));
memcpy(p->dc.clnt_cred.challenge.data, q_u->clnt_chal.data, sizeof(q_u->clnt_chal.data));
generate_random_buffer(p->dc.srv_chal.data, 8, False);
memcpy(p->dc.srv_cred.challenge.data, p->dc.srv_chal.data, 8);
memset((char *)p->dc.sess_key, '\0', sizeof(p->dc.sess_key));
cred_session_key(&p->dc.clnt_chal, &p->dc.srv_chal,
(char *)p->dc.md4pw, p->dc.sess_key);
fstrcpy(p->dc.mach_acct, mach_acct);
} else {
status = NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT;
}
init_net_r_req_chal(r_u, &p->dc.srv_chal, status);
return r_u->status;
}
static void init_net_r_auth(NET_R_AUTH *r_a, DOM_CHAL *resp_cred, NTSTATUS status)
{
memcpy(r_a->srv_chal.data, resp_cred->data, sizeof(resp_cred->data));
r_a->status = status;
}
NTSTATUS _net_auth(pipes_struct *p, NET_Q_AUTH *q_u, NET_R_AUTH *r_u)
{
NTSTATUS status = NT_STATUS_OK;
DOM_CHAL srv_cred;
UTIME srv_time;
if (!get_valid_user_struct(p->vuid))
return NT_STATUS_NO_SUCH_USER;
srv_time.time = 0;
if (cred_assert(&q_u->clnt_chal, p->dc.sess_key, &p->dc.clnt_cred.challenge, srv_time)) {
cred_create(p->dc.sess_key, &p->dc.srv_cred.challenge, srv_time, &srv_cred);
memcpy(p->dc.clnt_cred.challenge.data, q_u->clnt_chal.data, sizeof(q_u->clnt_chal.data));
memcpy(p->dc.srv_cred .challenge.data, q_u->clnt_chal.data, sizeof(q_u->clnt_chal.data));
} else {
status = NT_STATUS_ACCESS_DENIED;
}
init_net_r_auth(r_u, &srv_cred, status);
return r_u->status;
}
static void init_net_r_auth_2(NET_R_AUTH_2 *r_a,
DOM_CHAL *resp_cred, NEG_FLAGS *flgs, NTSTATUS status)
{
memcpy(r_a->srv_chal.data, resp_cred->data, sizeof(resp_cred->data));
memcpy(&r_a->srv_flgs, flgs, sizeof(r_a->srv_flgs));
r_a->status = status;
}
NTSTATUS _net_auth_2(pipes_struct *p, NET_Q_AUTH_2 *q_u, NET_R_AUTH_2 *r_u)
{
NTSTATUS status = NT_STATUS_OK;
DOM_CHAL srv_cred;
UTIME srv_time;
NEG_FLAGS srv_flgs;
if (!get_valid_user_struct(p->vuid))
return NT_STATUS_NO_SUCH_USER;
srv_time.time = 0;
if (cred_assert(&q_u->clnt_chal, p->dc.sess_key, &p->dc.clnt_cred.challenge, srv_time)) {
cred_create(p->dc.sess_key, &p->dc.srv_cred.challenge, srv_time, &srv_cred);
memcpy(p->dc.clnt_cred.challenge.data, q_u->clnt_chal.data, sizeof(q_u->clnt_chal.data));
memcpy(p->dc.srv_cred .challenge.data, q_u->clnt_chal.data, sizeof(q_u->clnt_chal.data));
} else {
status = NT_STATUS_ACCESS_DENIED;
}
srv_flgs.neg_flags = 0x000001ff;
init_net_r_auth_2(r_u, &srv_cred, &srv_flgs, status);
return r_u->status;
}
NTSTATUS _net_srv_pwset(pipes_struct *p, NET_Q_SRV_PWSET *q_u, NET_R_SRV_PWSET *r_u)
{
NTSTATUS status = NT_STATUS_WRONG_PASSWORD;
DOM_CRED srv_cred;
pstring mach_acct;
SAM_ACCOUNT *sampass=NULL;
BOOL ret=False;
unsigned char pwd[16];
int i;
if (!get_valid_user_struct(p->vuid))
return NT_STATUS_NO_SUCH_USER;
if (!deal_with_creds(p->dc.sess_key, &p->dc.clnt_cred, &q_u->clnt_id.cred, &srv_cred))
return NT_STATUS_INVALID_HANDLE;
memcpy(&p->dc.srv_cred, &p->dc.clnt_cred, sizeof(p->dc.clnt_cred));
DEBUG(5,("_net_srv_pwset: %d\n", __LINE__));
pstrcpy(mach_acct, dos_unistrn2(q_u->clnt_id.login.uni_acct_name.buffer,
q_u->clnt_id.login.uni_acct_name.uni_str_len));
DEBUG(3,("Server Password Set Wksta:[%s]\n", mach_acct));
if (!strequal(mach_acct, p->dc.mach_acct)) {
return NT_STATUS_ACCESS_DENIED;
}
pdb_init_sam(&sampass);
become_root();
ret=pdb_getsampwnam(sampass, mach_acct);
unbecome_root();
if (ret==False || !(pdb_get_acct_ctrl(sampass) & ACB_WSTRUST)) {
pdb_free_sam(sampass);
return NT_STATUS_NO_SUCH_USER;
}
DEBUG(100,("Server password set : new given value was :\n"));
for(i = 0; i < 16; i++)
DEBUG(100,("%02X ", q_u->pwd[i]));
DEBUG(100,("\n"));
cred_hash3( pwd, q_u->pwd, p->dc.sess_key, 0);
if (!pdb_set_lanman_passwd (sampass, pwd)) {
pdb_free_sam(sampass);
return NT_STATUS_NO_MEMORY;
}
if (!pdb_set_nt_passwd(sampass, pwd)) {
pdb_free_sam(sampass);
return NT_STATUS_NO_MEMORY;
}
pdb_set_acct_ctrl (sampass, ACB_WSTRUST);
become_root();
ret = pdb_update_sam_account (sampass,False);
unbecome_root();
if (ret)
status = NT_STATUS_OK;
init_net_r_srv_pwset(r_u, &srv_cred, status);
pdb_free_sam(sampass);
return r_u->status;
}
NTSTATUS _net_sam_logoff(pipes_struct *p, NET_Q_SAM_LOGOFF *q_u, NET_R_SAM_LOGOFF *r_u)
{
DOM_CRED srv_cred;
if (!get_valid_user_struct(p->vuid))
return NT_STATUS_NO_SUCH_USER;
if (!deal_with_creds(p->dc.sess_key, &p->dc.clnt_cred,
&q_u->sam_id.client.cred, &srv_cred))
return NT_STATUS_INVALID_HANDLE;
memcpy(&p->dc.srv_cred, &p->dc.clnt_cred, sizeof(p->dc.clnt_cred));
r_u->buffer_creds = 1;
memcpy(&r_u->srv_creds, &srv_cred, sizeof(r_u->srv_creds));
r_u->status = NT_STATUS_OK;
return r_u->status;
}
static NTSTATUS net_login_interactive(NET_ID_INFO_1 *id1, SAM_ACCOUNT *sampass, pipes_struct *p)
{
uint8 *stored_nt_pwd, *stored_lanman_pwd;
char nt_pwd[16];
char lm_pwd[16];
unsigned char key[16];
memset(key, 0, 16);
memcpy(key, p->dc.sess_key, 8);
memcpy(lm_pwd, id1->lm_owf.data, 16);
memcpy(nt_pwd, id1->nt_owf.data, 16);
#ifdef DEBUG_PASSWORD
DEBUG(100,("key:"));
dump_data(100, (char *)key, 16);
DEBUG(100,("lm owf password:"));
dump_data(100, lm_pwd, 16);
DEBUG(100,("nt owf password:"));
dump_data(100, nt_pwd, 16);
#endif
SamOEMhash((uchar *)lm_pwd, key, 16);
SamOEMhash((uchar *)nt_pwd, key, 16);
#ifdef DEBUG_PASSWORD
DEBUG(100,("decrypt of lm owf password:"));
dump_data(100, lm_pwd, 16);
DEBUG(100,("decrypt of nt owf password:"));
dump_data(100, nt_pwd, 16);
#endif
stored_nt_pwd = pdb_get_nt_passwd(sampass);
if (stored_nt_pwd) {
if (memcmp(stored_nt_pwd, nt_pwd, 16) != 0) {
DEBUG(10,("net_login_interactive: NT password for user %s doesn't match.\n",
sampass->username));
return NT_STATUS_WRONG_PASSWORD;
} else
return NT_STATUS_OK;
}
stored_lanman_pwd = pdb_get_lanman_passwd(sampass);
if (stored_lanman_pwd && lp_lanman_auth()) {
if (memcmp(stored_lanman_pwd, lm_pwd, 16) != 0) {
DEBUG(10,("net_login_interactive: lanman password for user %s doesn't match.\n",
sampass->username));
return NT_STATUS_WRONG_PASSWORD;
} else
return NT_STATUS_OK;
}
return NT_STATUS_WRONG_PASSWORD;
}
static NTSTATUS net_login_network(NET_ID_INFO_2 *id2, SAM_ACCOUNT *sampass)
{
uint8 *nt_pwd, *lanman_pwd;
DEBUG(5,("net_login_network: lm_len: %d nt_len: %d\n",
id2->hdr_lm_chal_resp.str_str_len,
id2->hdr_nt_chal_resp.str_str_len));
nt_pwd = pdb_get_nt_passwd(sampass);
lanman_pwd = pdb_get_lanman_passwd(sampass);
if (id2->hdr_nt_chal_resp.str_str_len == 24 && nt_pwd != NULL) {
if(smb_password_check((char *)id2->nt_chal_resp.buffer, nt_pwd, id2->lm_chal))
return NT_STATUS_OK;
else
return NT_STATUS_WRONG_PASSWORD;
}
if (lp_lanman_auth() && id2->hdr_lm_chal_resp.str_str_len == 24 &&
smb_password_check((char *)id2->lm_chal_resp.buffer,
lanman_pwd, id2->lm_chal))
{
return NT_STATUS_OK;
}
return NT_STATUS_WRONG_PASSWORD;
}
NTSTATUS _net_sam_logon(pipes_struct *p, NET_Q_SAM_LOGON *q_u, NET_R_SAM_LOGON *r_u)
{
NTSTATUS status = NT_STATUS_OK;
NET_USER_INFO_3 *usr_info = NULL;
DOM_CRED srv_cred;
SAM_ACCOUNT *sampass = NULL;
UNISTR2 *uni_samlogon_user = NULL;
fstring nt_username;
BOOL ret;
uint16 acct_ctrl;
usr_info = (NET_USER_INFO_3 *)talloc(p->mem_ctx, sizeof(NET_USER_INFO_3));
if (!usr_info)
return NT_STATUS_NO_MEMORY;
ZERO_STRUCTP(usr_info);
if (!get_valid_user_struct(p->vuid))
return NT_STATUS_NO_SUCH_USER;
if (!deal_with_creds(p->dc.sess_key, &p->dc.clnt_cred, &q_u->sam_id.client.cred, &srv_cred))
return NT_STATUS_INVALID_HANDLE;
else
memcpy(&p->dc.srv_cred, &p->dc.clnt_cred, sizeof(p->dc.clnt_cred));
r_u->buffer_creds = 1;
memcpy(&r_u->srv_creds, &srv_cred, sizeof(r_u->srv_creds));
r_u->user = usr_info;
r_u->switch_value = 0;
r_u->auth_resp = 1;
r_u->switch_value = 3;
switch (q_u->sam_id.logon_level) {
case INTERACTIVE_LOGON_TYPE:
uni_samlogon_user = &q_u->sam_id.ctr->auth.id1.uni_user_name;
DEBUG(3,("SAM Logon (Interactive). Domain:[%s]. ", lp_workgroup()));
break;
case NET_LOGON_TYPE:
uni_samlogon_user = &q_u->sam_id.ctr->auth.id2.uni_user_name;
DEBUG(3,("SAM Logon (Network). Domain:[%s]. ", lp_workgroup()));
break;
default:
DEBUG(2,("SAM Logon: unsupported switch value\n"));
return NT_STATUS_INVALID_INFO_CLASS;
}
pstrcpy(nt_username, dos_unistrn2(uni_samlogon_user->buffer, uni_samlogon_user->uni_str_len));
DEBUG(3,("User:[%s]\n", nt_username));
map_username(nt_username);
pdb_init_sam(&sampass);
become_root();
ret = pdb_getsampwnam(sampass, nt_username);
unbecome_root();
if (!ret)
{
pdb_free_sam(sampass);
return NT_STATUS_NO_SUCH_USER;
}
acct_ctrl = pdb_get_acct_ctrl(sampass);
if (!(acct_ctrl & ACB_PWNOTREQ)) {
switch (q_u->sam_id.logon_level) {
case INTERACTIVE_LOGON_TYPE:
status = net_login_interactive(&q_u->sam_id.ctr->auth.id1, sampass, p);
break;
case NET_LOGON_TYPE:
status = net_login_network(&q_u->sam_id.ctr->auth.id2, sampass);
break;
}
}
if (!NT_STATUS_IS_OK(status)) {
pdb_free_sam(sampass);
return status;
}
#ifdef WITH_PAM
become_root();
status = smb_pam_accountcheck(pdb_get_username(sampass));
unbecome_root();
if (!NT_STATUS_IS_OK(status)) {
pdb_free_sam(sampass);
return status;
}
#endif
if (acct_ctrl & ACB_DISABLED) {
pdb_free_sam(sampass);
return NT_STATUS_ACCOUNT_DISABLED;
}
{
DOM_GID *gids = NULL;
int num_gids = 0;
pstring my_name;
pstring my_workgroup;
pstring domain_groups;
usr_info->ptr_user_info = 0;
pstrcpy(my_workgroup, lp_workgroup());
pstrcpy(my_name, global_myname);
strupper(my_name);
get_domain_user_groups(domain_groups, nt_username);
gids = NULL;
num_gids = make_dom_gids(p->mem_ctx, domain_groups, &gids);
init_net_user_info3(p->mem_ctx, usr_info, sampass,
0,
0,
num_gids,
gids ,
0x20 ,
NULL,
my_name ,
my_workgroup,
&global_sam_sid,
NULL);
}
pdb_free_sam(sampass);
return status;
}