2003-08-13 01:53:07 +00:00
/*
Unix SMB / CIFS implementation .
Winbind authentication mechnism
Copyright ( C ) Tim Potter 2000
Copyright ( C ) Andrew Bartlett 2001 - 2002
This program is free software ; you can redistribute it and / or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation ; either version 2 of the License , or
( at your option ) any later version .
This program is distributed in the hope that it will be useful ,
but WITHOUT ANY WARRANTY ; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
GNU General Public License for more details .
You should have received a copy of the GNU General Public License
along with this program ; if not , write to the Free Software
Foundation , Inc . , 675 Mass Ave , Cambridge , MA 0213 9 , USA .
*/
# include "includes.h"
# undef DBGC_CLASS
# define DBGC_CLASS DBGC_AUTH
static NTSTATUS get_info3_from_ndr ( TALLOC_CTX * mem_ctx , struct winbindd_response * response , NET_USER_INFO_3 * info3 )
{
2004-05-25 17:50:17 +00:00
uint8_t * info3_ndr ;
2003-08-13 01:53:07 +00:00
size_t len = response - > length - sizeof ( response ) ;
prs_struct ps ;
if ( len > 0 ) {
info3_ndr = response - > extra_data ;
if ( ! prs_init ( & ps , len , mem_ctx , UNMARSHALL ) ) {
return NT_STATUS_NO_MEMORY ;
}
prs_copy_data_in ( & ps , info3_ndr , len ) ;
prs_set_offset ( & ps , 0 ) ;
if ( ! net_io_user_info3 ( " " , info3 , & ps , 1 , 3 ) ) {
DEBUG ( 2 , ( " get_info3_from_ndr: could not parse info3 struct! \n " ) ) ;
return NT_STATUS_UNSUCCESSFUL ;
}
prs_mem_free ( & ps ) ;
return NT_STATUS_OK ;
} else {
DEBUG ( 2 , ( " get_info3_from_ndr: No info3 struct found! \n " ) ) ;
return NT_STATUS_UNSUCCESSFUL ;
}
}
/* Authenticate a user with a challenge/response */
static NTSTATUS check_winbind_security ( const struct auth_context * auth_context ,
void * my_private_data ,
TALLOC_CTX * mem_ctx ,
const auth_usersupplied_info * user_info ,
auth_serversupplied_info * * server_info )
{
struct winbindd_request request ;
struct winbindd_response response ;
NSS_STATUS result ;
NTSTATUS nt_status ;
NET_USER_INFO_3 info3 ;
if ( ! user_info ) {
return NT_STATUS_INVALID_PARAMETER ;
}
if ( ! auth_context ) {
DEBUG ( 3 , ( " Password for user %s cannot be checked because we have no auth_info to get the challenge from. \n " ,
user_info - > internal_username . str ) ) ;
return NT_STATUS_UNSUCCESSFUL ;
}
/* Send off request */
ZERO_STRUCT ( request ) ;
ZERO_STRUCT ( response ) ;
request . data . auth_crap . flags = WINBIND_PAM_INFO3_NDR ;
push_utf8_fstring ( request . data . auth_crap . user ,
user_info - > smb_name . str ) ;
push_utf8_fstring ( request . data . auth_crap . domain ,
user_info - > domain . str ) ;
push_utf8_fstring ( request . data . auth_crap . workstation ,
user_info - > wksta_name . str ) ;
memcpy ( request . data . auth_crap . chal , auth_context - > challenge . data , sizeof ( request . data . auth_crap . chal ) ) ;
request . data . auth_crap . lm_resp_len = MIN ( user_info - > lm_resp . length ,
sizeof ( request . data . auth_crap . lm_resp ) ) ;
request . data . auth_crap . nt_resp_len = MIN ( user_info - > nt_resp . length ,
sizeof ( request . data . auth_crap . nt_resp ) ) ;
memcpy ( request . data . auth_crap . lm_resp , user_info - > lm_resp . data ,
request . data . auth_crap . lm_resp_len ) ;
memcpy ( request . data . auth_crap . nt_resp , user_info - > nt_resp . data ,
request . data . auth_crap . nt_resp_len ) ;
result = winbindd_request ( WINBINDD_PAM_AUTH_CRAP , & request , & response ) ;
nt_status = NT_STATUS ( response . data . auth . nt_status ) ;
if ( result = = NSS_STATUS_SUCCESS & & response . extra_data ) {
if ( NT_STATUS_IS_OK ( nt_status ) ) {
if ( NT_STATUS_IS_OK ( nt_status = get_info3_from_ndr ( mem_ctx , & response , & info3 ) ) ) {
nt_status =
make_server_info_info3 ( mem_ctx ,
user_info - > internal_username . str ,
user_info - > smb_name . str ,
user_info - > domain . str ,
server_info ,
& info3 ) ;
}
}
} else if ( NT_STATUS_IS_OK ( nt_status ) ) {
nt_status = NT_STATUS_UNSUCCESSFUL ;
}
return nt_status ;
}
/* module initialisation */
NTSTATUS auth_init_winbind ( struct auth_context * auth_context , const char * param , auth_methods * * auth_method )
{
if ( ! make_auth_methods ( auth_context , auth_method ) )
return NT_STATUS_NO_MEMORY ;
( * auth_method ) - > name = " winbind " ;
( * auth_method ) - > auth = check_winbind_security ;
return NT_STATUS_OK ;
}