1998-03-12 00:11:04 +03:00
/*
* Unix SMB / Netbios implementation .
* Version 1.9 .
* RPC Pipe client / server routines
* Copyright ( C ) Andrew Tridgell 1992 - 1997 ,
* Copyright ( C ) Luke Kenneth Casson Leighton 1996 - 1997 ,
* Copyright ( C ) Paul Ashton 1997.
*
* This program is free software ; you can redistribute it and / or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation ; either version 2 of the License , or
* ( at your option ) any later version .
*
* This program is distributed in the hope that it will be useful ,
* but WITHOUT ANY WARRANTY ; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
* GNU General Public License for more details .
*
* You should have received a copy of the GNU General Public License
* along with this program ; if not , write to the Free Software
* Foundation , Inc . , 675 Mass Ave , Cambridge , MA 0213 9 , USA .
*/
# include "includes.h"
# include "nterr.h"
extern int DEBUGLEVEL ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
extern fstring global_sam_name ;
1998-10-22 01:11:16 +04:00
extern pstring global_myname ;
1998-10-22 02:36:26 +04:00
extern DOM_SID global_sam_sid ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
extern DOM_SID global_sid_S_1_1 ;
extern DOM_SID global_sid_S_1_5_20 ;
1998-05-14 07:32:21 +04:00
1998-03-12 00:11:04 +03:00
/*******************************************************************
This next function should be replaced with something that
dynamically returns the correct user info . . . . . JRA .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-05-07 22:19:05 +04:00
static BOOL get_sampwd_entries ( SAM_USER_INFO_21 * pw_buf ,
1998-10-21 22:06:46 +04:00
int start_idx ,
1998-03-12 00:11:04 +03:00
int * total_entries , int * num_entries ,
int max_num_entries ,
uint16 acb_mask )
{
1998-04-14 04:41:59 +04:00
void * vp = NULL ;
1998-09-25 00:02:56 +04:00
struct sam_passwd * pwd = NULL ;
1998-05-06 21:43:44 +04:00
( * num_entries ) = 0 ;
( * total_entries ) = 0 ;
if ( pw_buf = = NULL ) return False ;
1998-05-19 01:30:57 +04:00
vp = startsmbpwent ( False ) ;
1998-05-06 21:43:44 +04:00
if ( ! vp )
{
1998-05-19 01:30:57 +04:00
DEBUG ( 0 , ( " get_sampwd_entries: Unable to open SMB password database. \n " ) ) ;
1998-05-06 21:43:44 +04:00
return False ;
}
1998-09-25 00:02:56 +04:00
while ( ( ( pwd = getsam21pwent ( vp ) ) ! = NULL ) & & ( * num_entries ) < max_num_entries )
1998-05-06 21:43:44 +04:00
{
1998-10-21 22:06:46 +04:00
int user_name_len ;
if ( start_idx > 0 )
{
/* skip the requested number of entries.
not very efficient , but hey . . .
*/
1999-01-30 00:22:08 +03:00
if ( acb_mask = = 0 | | IS_BITS_SET_SOME ( pwd - > acct_ctrl , acb_mask ) )
{
start_idx - - ;
}
1998-10-21 22:06:46 +04:00
continue ;
}
1998-11-29 23:03:33 +03:00
user_name_len = strlen ( pwd - > nt_name ) ;
make_unistr2 ( & ( pw_buf [ ( * num_entries ) ] . uni_user_name ) , pwd - > nt_name , user_name_len ) ;
1999-03-24 20:26:08 +03:00
make_uni_hdr ( & ( pw_buf [ ( * num_entries ) ] . hdr_user_name ) , user_name_len ) ;
1998-09-25 00:02:56 +04:00
pw_buf [ ( * num_entries ) ] . user_rid = pwd - > user_rid ;
1998-05-06 21:43:44 +04:00
bzero ( pw_buf [ ( * num_entries ) ] . nt_pwd , 16 ) ;
/* Now check if the NT compatible password is available. */
if ( pwd - > smb_nt_passwd ! = NULL )
{
memcpy ( pw_buf [ ( * num_entries ) ] . nt_pwd , pwd - > smb_nt_passwd , 16 ) ;
}
pw_buf [ ( * num_entries ) ] . acb_info = ( uint16 ) pwd - > acct_ctrl ;
1998-09-25 00:02:56 +04:00
DEBUG ( 5 , ( " entry idx: %d user %s, rid 0x%x, acb %x " ,
1998-11-29 23:03:33 +03:00
( * num_entries ) , pwd - > nt_name ,
1998-10-15 09:47:29 +04:00
pwd - > user_rid , pwd - > acct_ctrl ) ) ;
1998-05-06 21:43:44 +04:00
if ( acb_mask = = 0 | | IS_BITS_SET_SOME ( pwd - > acct_ctrl , acb_mask ) )
{
DEBUG ( 5 , ( " acb_mask %x accepts \n " , acb_mask ) ) ;
( * num_entries ) + + ;
}
else
{
DEBUG ( 5 , ( " acb_mask %x rejects \n " , acb_mask ) ) ;
}
( * total_entries ) + + ;
}
1998-05-19 01:30:57 +04:00
endsmbpwent ( vp ) ;
1998-05-06 21:43:44 +04:00
return ( * num_entries ) > 0 ;
1998-03-12 00:11:04 +03:00
}
/*******************************************************************
samr_reply_unknown_1
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_close_hnd ( SAMR_Q_CLOSE_HND * q_u ,
prs_struct * rdata )
{
SAMR_R_CLOSE_HND r_u ;
/* set up the SAMR unknown_1 response */
1998-05-21 16:18:52 +04:00
bzero ( r_u . pol . data , POL_HND_SIZE ) ;
1998-03-12 00:11:04 +03:00
/* close the policy handle */
if ( close_lsa_policy_hnd ( & ( q_u - > pol ) ) )
{
r_u . status = 0 ;
}
else
{
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_INVALID ;
}
DEBUG ( 5 , ( " samr_reply_close_hnd: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_close_hnd ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_reply_close_hnd: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_close_hnd
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_close_hnd ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_CLOSE_HND q_u ;
samr_io_q_close_hnd ( " " , & q_u , data , 0 ) ;
samr_reply_close_hnd ( & q_u , rdata ) ;
}
/*******************************************************************
samr_reply_open_domain
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_open_domain ( SAMR_Q_OPEN_DOMAIN * q_u ,
prs_struct * rdata )
{
SAMR_R_OPEN_DOMAIN r_u ;
BOOL pol_open = False ;
r_u . status = 0x0 ;
/* find the connection policy handle. */
1998-09-29 01:43:48 +04:00
if ( r_u . status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > connect_pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
r_u . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* get a (unique) handle. open a policy on it. */
if ( r_u . status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( & ( r_u . domain_pol ) ) ) )
{
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
/* associate the domain SID with the (unique) handle. */
if ( r_u . status = = 0x0 & & ! set_lsa_policy_samr_sid ( & ( r_u . domain_pol ) , & ( q_u - > dom_sid . sid ) ) )
{
/* oh, whoops. don't know what error message to return, here */
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
if ( r_u . status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( & ( r_u . domain_pol ) ) ;
}
DEBUG ( 5 , ( " samr_open_domain: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_open_domain ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_open_domain: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_open_domain
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_open_domain ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_OPEN_DOMAIN q_u ;
samr_io_q_open_domain ( " " , & q_u , data , 0 ) ;
samr_reply_open_domain ( & q_u , rdata ) ;
}
1998-10-22 01:11:16 +04:00
/*******************************************************************
samr_reply_unknown_2c
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_unknown_2c ( SAMR_Q_UNKNOWN_2C * q_u ,
prs_struct * rdata )
{
SAMR_R_UNKNOWN_2C r_u ;
uint32 status = 0x0 ;
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > user_pol ) ) = = - 1 ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* find the user's rid */
1998-10-22 20:55:03 +04:00
if ( ( status = = 0x0 ) & & ( get_lsa_policy_samr_rid ( & ( q_u - > user_pol ) ) = = 0xffffffff ) )
1998-10-22 01:11:16 +04:00
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
1998-10-22 01:11:16 +04:00
}
make_samr_r_unknown_2c ( & r_u , status ) ;
DEBUG ( 5 , ( " samr_unknown_2c: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_unknown_2c ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_unknown_2c: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_unknown_2c
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_unknown_2c ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-10-22 01:11:16 +04:00
{
SAMR_Q_UNKNOWN_2C q_u ;
samr_io_q_unknown_2c ( " " , & q_u , data , 0 ) ;
samr_reply_unknown_2c ( & q_u , rdata ) ;
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
samr_reply_unknown_3
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_unknown_3 ( SAMR_Q_UNKNOWN_3 * q_u ,
prs_struct * rdata )
{
SAMR_R_UNKNOWN_3 r_u ;
DOM_SID3 sid [ MAX_SAM_SIDS ] ;
uint32 rid ;
uint32 status ;
status = 0x0 ;
/* find the policy handle. open a policy on it. */
1998-09-29 01:43:48 +04:00
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > user_pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* find the user's rid */
if ( status = = 0x0 & & ( rid = get_lsa_policy_samr_rid ( & ( q_u - > user_pol ) ) ) = = 0xffffffff )
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
1998-03-12 00:11:04 +03:00
}
if ( status = = 0x0 )
{
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
DOM_SID usr_sid ;
1998-05-15 01:10:49 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
usr_sid = global_sam_sid ;
1998-08-22 06:54:21 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
SMB_ASSERT_ARRAY ( usr_sid . sub_auths , usr_sid . num_auths + 1 ) ;
1998-08-22 06:54:21 +04:00
1998-10-22 01:11:16 +04:00
/*
* Add the user RID .
*/
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
sid_append_rid ( & usr_sid , rid ) ;
1998-10-22 01:11:16 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
/* maybe need another 1 or 2 (S-1-5-0x20-0x220 and S-1-5-20-0x224) */
/* these two are DOMAIN_ADMIN and DOMAIN_ACCT_OP group RIDs */
make_dom_sid3 ( & ( sid [ 0 ] ) , 0x035b , 0x0002 , & global_sid_S_1_1 ) ;
make_dom_sid3 ( & ( sid [ 1 ] ) , 0x0044 , 0x0002 , & usr_sid ) ;
1998-03-12 00:11:04 +03:00
}
make_samr_r_unknown_3 ( & r_u ,
0x0001 , 0x8004 ,
0x00000014 , 0x0002 , 0x0070 ,
2 , sid , status ) ;
DEBUG ( 5 , ( " samr_unknown_3: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_unknown_3 ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_unknown_3: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_unknown_3
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_unknown_3 ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_UNKNOWN_3 q_u ;
samr_io_q_unknown_3 ( " " , & q_u , data , 0 ) ;
samr_reply_unknown_3 ( & q_u , rdata ) ;
}
/*******************************************************************
samr_reply_enum_dom_users
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_enum_dom_users ( SAMR_Q_ENUM_DOM_USERS * q_u ,
prs_struct * rdata )
{
SAMR_R_ENUM_DOM_USERS r_e ;
SAM_USER_INFO_21 pass [ MAX_SAM_ENTRIES ] ;
int num_entries ;
int total_entries ;
r_e . status = 0x0 ;
/* find the policy handle. open a policy on it. */
1998-09-29 01:43:48 +04:00
if ( r_e . status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
DEBUG ( 5 , ( " samr_reply_enum_dom_users: %d \n " , __LINE__ ) ) ;
become_root ( True ) ;
1999-01-30 00:22:08 +03:00
get_sampwd_entries ( pass , q_u - > start_idx , & total_entries , & num_entries ,
MAX_SAM_ENTRIES , q_u - > acb_mask ) ;
1998-03-12 00:11:04 +03:00
unbecome_root ( True ) ;
1998-12-05 00:48:06 +03:00
make_samr_r_enum_dom_users ( & r_e ,
1999-01-30 00:22:08 +03:00
q_u - > start_idx + num_entries , num_entries ,
1998-03-12 00:11:04 +03:00
pass , r_e . status ) ;
/* store the response in the SMB stream */
samr_io_r_enum_dom_users ( " " , & r_e , rdata , 0 ) ;
1999-03-23 23:43:44 +03:00
if ( r_e . sam ! = NULL )
{
free ( r_e . sam ) ;
}
if ( r_e . uni_acct_name ! = NULL )
{
free ( r_e . uni_acct_name ) ;
}
1998-03-12 00:11:04 +03:00
DEBUG ( 5 , ( " samr_enum_dom_users: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_enum_dom_users
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_enum_dom_users ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_ENUM_DOM_USERS q_e ;
samr_io_q_enum_dom_users ( " " , & q_e , data , 0 ) ;
samr_reply_enum_dom_users ( & q_e , rdata ) ;
}
/*******************************************************************
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
samr_reply_add_groupmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_add_groupmem ( SAMR_Q_ADD_GROUPMEM * q_u ,
prs_struct * rdata )
{
SAMR_R_ADD_GROUPMEM r_e ;
DOM_SID group_sid ;
uint32 group_rid ;
fstring group_sid_str ;
r_e . status = 0x0 ;
/* find the policy handle. open a policy on it. */
if ( r_e . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & group_sid ) )
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( group_sid_str , & group_sid ) ;
sid_split_rid ( & group_sid , & group_rid ) ;
}
if ( r_e . status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , group_sid_str ) ) ;
if ( sid_equal ( & group_sid , & global_sam_sid ) )
{
DEBUG ( 10 , ( " lookup on Domain SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
r_e . status = add_group_member ( group_rid , q_u - > rid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
else
{
r_e . status = 0xC0000000 | NT_STATUS_NO_SUCH_GROUP ;
}
}
/* store the response in the SMB stream */
samr_io_r_add_groupmem ( " " , & r_e , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_add_groupmem: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_add_groupmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_add_groupmem ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_ADD_GROUPMEM q_e ;
samr_io_q_add_groupmem ( " " , & q_e , data , 0 ) ;
samr_reply_add_groupmem ( & q_e , rdata ) ;
}
/*******************************************************************
samr_reply_del_groupmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_del_groupmem ( SAMR_Q_DEL_GROUPMEM * q_u ,
prs_struct * rdata )
{
SAMR_R_DEL_GROUPMEM r_e ;
DOM_SID group_sid ;
uint32 group_rid ;
fstring group_sid_str ;
r_e . status = 0x0 ;
/* find the policy handle. open a policy on it. */
if ( r_e . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & group_sid ) )
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( group_sid_str , & group_sid ) ;
sid_split_rid ( & group_sid , & group_rid ) ;
}
if ( r_e . status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , group_sid_str ) ) ;
if ( sid_equal ( & group_sid , & global_sam_sid ) )
{
DEBUG ( 10 , ( " lookup on Domain SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
r_e . status = del_group_member ( group_rid , q_u - > rid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
else
{
r_e . status = 0xC0000000 | NT_STATUS_NO_SUCH_GROUP ;
}
}
/* store the response in the SMB stream */
samr_io_r_del_groupmem ( " " , & r_e , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_del_groupmem: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_del_groupmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_del_groupmem ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_DEL_GROUPMEM q_e ;
samr_io_q_del_groupmem ( " " , & q_e , data , 0 ) ;
samr_reply_del_groupmem ( & q_e , rdata ) ;
}
/*******************************************************************
samr_reply_add_aliasmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_add_aliasmem ( SAMR_Q_ADD_ALIASMEM * q_u ,
prs_struct * rdata )
{
SAMR_R_ADD_ALIASMEM r_e ;
DOM_SID alias_sid ;
uint32 alias_rid ;
fstring alias_sid_str ;
r_e . status = 0x0 ;
/* find the policy handle. open a policy on it. */
if ( r_e . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > alias_pol , & alias_sid ) )
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( alias_sid_str , & alias_sid ) ;
sid_split_rid ( & alias_sid , & alias_rid ) ;
}
if ( r_e . status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , alias_sid_str ) ) ;
if ( sid_equal ( & alias_sid , & global_sam_sid ) )
{
DEBUG ( 10 , ( " add member on Domain SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
r_e . status = add_alias_member ( alias_rid , & q_u - > sid . sid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
else if ( sid_equal ( & alias_sid , & global_sid_S_1_5_20 ) )
{
DEBUG ( 10 , ( " add member on BUILTIN SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
r_e . status = add_builtin_member ( alias_rid , & q_u - > sid . sid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
else
{
r_e . status = 0xC0000000 | NT_STATUS_NO_SUCH_ALIAS ;
}
}
/* store the response in the SMB stream */
samr_io_r_add_aliasmem ( " " , & r_e , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_add_aliasmem: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_add_aliasmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_add_aliasmem ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_ADD_ALIASMEM q_e ;
samr_io_q_add_aliasmem ( " " , & q_e , data , 0 ) ;
samr_reply_add_aliasmem ( & q_e , rdata ) ;
}
/*******************************************************************
samr_reply_del_aliasmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_del_aliasmem ( SAMR_Q_DEL_ALIASMEM * q_u ,
prs_struct * rdata )
{
SAMR_R_DEL_ALIASMEM r_e ;
DOM_SID alias_sid ;
uint32 alias_rid ;
fstring alias_sid_str ;
r_e . status = 0x0 ;
/* find the policy handle. open a policy on it. */
if ( r_e . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > alias_pol , & alias_sid ) )
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( alias_sid_str , & alias_sid ) ;
sid_split_rid ( & alias_sid , & alias_rid ) ;
}
if ( r_e . status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , alias_sid_str ) ) ;
if ( sid_equal ( & alias_sid , & global_sam_sid ) )
{
DEBUG ( 10 , ( " del member on Domain SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
r_e . status = del_alias_member ( alias_rid , & q_u - > sid . sid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
else if ( sid_equal ( & alias_sid , & global_sid_S_1_5_20 ) )
{
DEBUG ( 10 , ( " del member on BUILTIN SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
r_e . status = del_builtin_member ( alias_rid , & q_u - > sid . sid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
else
{
r_e . status = 0xC0000000 | NT_STATUS_NO_SUCH_ALIAS ;
}
}
/* store the response in the SMB stream */
samr_io_r_del_aliasmem ( " " , & r_e , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_del_aliasmem: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_del_aliasmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_del_aliasmem ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_DEL_ALIASMEM q_e ;
samr_io_q_del_aliasmem ( " " , & q_e , data , 0 ) ;
samr_reply_del_aliasmem ( & q_e , rdata ) ;
}
1999-11-16 02:46:27 +03:00
/*******************************************************************
samr_reply_enum_domains
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_enum_domains ( SAMR_Q_ENUM_DOMAINS * q_u ,
prs_struct * rdata )
{
SAMR_R_ENUM_DOMAINS r_e ;
char * * doms = NULL ;
uint32 num_entries = 0 ;
r_e . status = 0x0 ;
r_e . num_entries2 = 0 ;
ZERO_STRUCT ( r_e ) ;
r_e . status = 0x0 ;
/* find the connection policy handle. */
if ( r_e . status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
DEBUG ( 5 , ( " samr_reply_enum_domains: \n " ) ) ;
if ( ! enumdomains ( & doms , & num_entries ) )
{
r_e . status = 0xC0000000 | NT_STATUS_NO_MEMORY ;
}
if ( r_e . status = = 0x0 )
{
make_samr_r_enum_domains ( & r_e ,
q_u - > start_idx + num_entries ,
num_entries , doms , r_e . status ) ;
}
/* store the response in the SMB stream */
samr_io_r_enum_domains ( " " , & r_e , rdata , 0 ) ;
free_char_array ( num_entries , doms ) ;
if ( r_e . sam ! = NULL )
{
free ( r_e . sam ) ;
}
if ( r_e . uni_dom_name ! = NULL )
{
free ( r_e . uni_dom_name ) ;
}
DEBUG ( 5 , ( " samr_enum_domains: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_enum_domains
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void api_samr_enum_domains ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
{
SAMR_Q_ENUM_DOMAINS q_e ;
/* grab the samr open */
samr_io_q_enum_domains ( " " , & q_e , data , 0 ) ;
/* construct reply. */
samr_reply_enum_domains ( & q_e , rdata ) ;
}
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
/*******************************************************************
1999-02-24 04:52:30 +03:00
samr_reply_enum_dom_groups
1998-03-12 00:11:04 +03:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_enum_dom_groups ( SAMR_Q_ENUM_DOM_GROUPS * q_u ,
prs_struct * rdata )
{
SAMR_R_ENUM_DOM_GROUPS r_e ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
DOMAIN_GRP * grps = NULL ;
int num_entries = 0 ;
DOM_SID sid ;
fstring sid_str ;
1998-03-12 00:11:04 +03:00
r_e . status = 0x0 ;
1999-10-25 20:22:08 +04:00
r_e . num_entries2 = 0 ;
1998-03-12 00:11:04 +03:00
/* find the policy handle. open a policy on it. */
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( r_e . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & sid ) )
1998-03-12 00:11:04 +03:00
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
sid_to_string ( sid_str , & sid ) ;
DEBUG ( 5 , ( " samr_reply_enum_dom_groups: sid %s \n " , sid_str ) ) ;
1998-11-29 23:03:33 +03:00
if ( sid_equal ( & sid , & global_sam_sid ) )
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
{
1998-11-29 23:03:33 +03:00
BOOL ret ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
1998-11-29 23:03:33 +03:00
become_root ( True ) ;
ret = enumdomgroups ( & grps , & num_entries ) ;
unbecome_root ( True ) ;
if ( ! ret )
{
r_e . status = 0xC0000000 | NT_STATUS_NO_MEMORY ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
}
}
1998-11-29 23:03:33 +03:00
1999-02-24 04:52:30 +03:00
if ( r_e . status = = 0x0 )
1998-03-12 00:11:04 +03:00
{
1999-10-25 20:22:08 +04:00
make_samr_r_enum_dom_groups ( & r_e ,
q_u - > start_idx + num_entries ,
num_entries , grps , r_e . status ) ;
1998-03-12 00:11:04 +03:00
}
/* store the response in the SMB stream */
samr_io_r_enum_dom_groups ( " " , & r_e , rdata , 0 ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( grps ! = NULL )
{
free ( grps ) ;
}
1998-03-12 00:11:04 +03:00
1999-11-03 02:32:16 +03:00
if ( r_e . sam ! = NULL )
{
free ( r_e . sam ) ;
}
if ( r_e . uni_grp_name ! = NULL )
{
free ( r_e . uni_grp_name ) ;
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
DEBUG ( 5 , ( " samr_enum_dom_groups: %d \n " , __LINE__ ) ) ;
1998-03-12 00:11:04 +03:00
}
/*******************************************************************
1999-11-16 02:46:27 +03:00
api_samr_enum_dom_groups
1998-03-12 00:11:04 +03:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_enum_dom_groups ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_ENUM_DOM_GROUPS q_e ;
1999-02-24 04:52:30 +03:00
/* grab the samr open */
1998-03-12 00:11:04 +03:00
samr_io_q_enum_dom_groups ( " " , & q_e , data , 0 ) ;
1999-02-24 04:52:30 +03:00
/* construct reply. */
1998-03-12 00:11:04 +03:00
samr_reply_enum_dom_groups ( & q_e , rdata ) ;
}
/*******************************************************************
samr_reply_enum_dom_aliases
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_enum_dom_aliases ( SAMR_Q_ENUM_DOM_ALIASES * q_u ,
prs_struct * rdata )
{
SAMR_R_ENUM_DOM_ALIASES r_e ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
LOCAL_GRP * alss = NULL ;
1998-10-22 22:15:23 +04:00
int num_entries = 0 ;
1998-10-22 02:36:26 +04:00
DOM_SID sid ;
fstring sid_str ;
1998-03-12 00:11:04 +03:00
r_e . status = 0x0 ;
1999-10-25 20:22:08 +04:00
r_e . num_entries2 = 0 ;
1998-03-12 00:11:04 +03:00
/* find the policy handle. open a policy on it. */
1998-10-22 02:36:26 +04:00
if ( r_e . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & sid ) )
1998-03-12 00:11:04 +03:00
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
1998-10-22 02:36:26 +04:00
sid_to_string ( sid_str , & sid ) ;
1998-03-12 00:11:04 +03:00
1998-10-22 02:36:26 +04:00
DEBUG ( 5 , ( " samr_reply_enum_dom_aliases: sid %s \n " , sid_str ) ) ;
1998-03-12 00:11:04 +03:00
1998-10-22 02:36:26 +04:00
/* well-known aliases */
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( sid_equal ( & sid , & global_sid_S_1_5_20 ) )
1998-03-12 00:11:04 +03:00
{
1999-02-10 00:56:06 +03:00
BOOL ret ;
/* builtin aliases */
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
1999-02-10 00:56:06 +03:00
become_root ( True ) ;
ret = enumdombuiltins ( & alss , & num_entries ) ;
unbecome_root ( True ) ;
if ( ! ret )
1998-10-22 02:36:26 +04:00
{
1999-02-10 00:56:06 +03:00
r_e . status = 0xC0000000 | NT_STATUS_NO_MEMORY ;
1998-10-22 02:36:26 +04:00
}
1998-03-12 00:11:04 +03:00
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
else if ( sid_equal ( & sid , & global_sam_sid ) )
1998-10-22 02:36:26 +04:00
{
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
BOOL ret ;
1998-10-22 02:36:26 +04:00
/* local aliases */
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
become_root ( True ) ;
ret = enumdomaliases ( & alss , & num_entries ) ;
unbecome_root ( True ) ;
if ( ! ret )
{
r_e . status = 0xC0000000 | NT_STATUS_NO_MEMORY ;
}
1998-10-22 02:36:26 +04:00
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( r_e . status = = 0x0 )
{
1999-10-25 20:22:08 +04:00
make_samr_r_enum_dom_aliases ( & r_e ,
q_u - > start_idx + num_entries ,
num_entries , alss , r_e . status ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
}
1998-03-12 00:11:04 +03:00
/* store the response in the SMB stream */
samr_io_r_enum_dom_aliases ( " " , & r_e , rdata , 0 ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( alss ! = NULL )
{
free ( alss ) ;
}
1999-11-03 02:32:16 +03:00
if ( r_e . sam ! = NULL )
{
free ( r_e . sam ) ;
}
if ( r_e . uni_grp_name ! = NULL )
{
free ( r_e . uni_grp_name ) ;
}
1998-03-12 00:11:04 +03:00
DEBUG ( 5 , ( " samr_enum_dom_aliases: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_enum_dom_aliases
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_enum_dom_aliases ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_ENUM_DOM_ALIASES q_e ;
/* grab the samr open */
samr_io_q_enum_dom_aliases ( " " , & q_e , data , 0 ) ;
/* construct reply. */
samr_reply_enum_dom_aliases ( & q_e , rdata ) ;
}
/*******************************************************************
samr_reply_query_dispinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_query_dispinfo ( SAMR_Q_QUERY_DISPINFO * q_u ,
prs_struct * rdata )
{
SAMR_R_QUERY_DISPINFO r_e ;
1999-02-24 04:52:30 +03:00
SAM_DISPINFO_CTR ctr ;
1998-03-12 00:11:04 +03:00
SAM_USER_INFO_21 pass [ MAX_SAM_ENTRIES ] ;
1999-02-24 04:52:30 +03:00
DOMAIN_GRP * grps = NULL ;
DOMAIN_GRP * sam_grps = NULL ;
uint32 data_size = 0 ;
uint32 status = 0x0 ;
uint16 acb_mask = ACB_NORMAL ;
int num_sam_entries = 0 ;
1998-10-15 09:47:29 +04:00
int num_entries = 0 ;
1999-02-24 04:52:30 +03:00
int total_entries ;
1998-03-12 00:11:04 +03:00
1998-10-15 09:47:29 +04:00
DEBUG ( 5 , ( " samr_reply_query_dispinfo: %d \n " , __LINE__ ) ) ;
1998-03-12 00:11:04 +03:00
/* find the policy handle. open a policy on it. */
1999-02-24 04:52:30 +03:00
if ( find_lsa_policy_by_hnd ( & ( q_u - > domain_pol ) ) = = - 1 )
1998-03-12 00:11:04 +03:00
{
1999-02-24 04:52:30 +03:00
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
1998-10-15 09:47:29 +04:00
DEBUG ( 5 , ( " samr_reply_query_dispinfo: invalid handle \n " ) ) ;
1998-03-12 00:11:04 +03:00
}
1999-02-24 04:52:30 +03:00
if ( status = = 0x0 )
1998-03-12 00:11:04 +03:00
{
1998-10-15 09:47:29 +04:00
become_root ( True ) ;
1999-02-24 04:52:30 +03:00
/* Get what we need from the password database */
1998-10-15 09:47:29 +04:00
switch ( q_u - > switch_level )
1998-03-12 00:11:04 +03:00
{
1999-02-24 04:52:30 +03:00
case 0x2 :
{
acb_mask = ACB_WSTRUST ;
/* Fall through */
}
1998-10-15 09:47:29 +04:00
case 0x1 :
1999-02-24 04:52:30 +03:00
case 0x4 :
{
get_sampwd_entries ( pass , q_u - > start_idx ,
& total_entries , & num_sam_entries ,
MAX_SAM_ENTRIES , acb_mask ) ;
break ;
}
case 0x3 :
case 0x5 :
1998-10-15 09:47:29 +04:00
{
1999-02-24 04:52:30 +03:00
enumdomgroups ( & sam_grps , & num_sam_entries ) ;
if ( q_u - > start_idx < num_sam_entries ) {
grps = sam_grps + q_u - > start_idx ;
num_sam_entries - = q_u - > start_idx ;
} else {
num_sam_entries = 0 ;
}
break ;
}
}
unbecome_root ( True ) ;
num_entries = num_sam_entries ;
if ( num_entries > q_u - > max_entries )
{
num_entries = q_u - > max_entries ;
}
if ( num_entries > MAX_SAM_ENTRIES )
{
num_entries = MAX_SAM_ENTRIES ;
DEBUG ( 5 , ( " limiting number of entries to %d \n " ,
num_entries ) ) ;
}
1998-03-12 00:11:04 +03:00
1999-02-24 04:52:30 +03:00
data_size = q_u - > max_size ;
1998-03-12 00:11:04 +03:00
1999-02-24 04:52:30 +03:00
/* Now create reply structure */
switch ( q_u - > switch_level )
{
case 0x1 :
{
ctr . sam . info1 = malloc ( sizeof ( SAM_DISPINFO_1 ) ) ;
make_sam_dispinfo_1 ( ctr . sam . info1 ,
& num_entries , & data_size ,
q_u - > start_idx , pass ) ;
1998-10-15 09:47:29 +04:00
break ;
}
case 0x2 :
{
1999-02-24 04:52:30 +03:00
ctr . sam . info2 = malloc ( sizeof ( SAM_DISPINFO_2 ) ) ;
make_sam_dispinfo_2 ( ctr . sam . info2 ,
& num_entries , & data_size ,
q_u - > start_idx , pass ) ;
break ;
}
case 0x3 :
{
ctr . sam . info3 = malloc ( sizeof ( SAM_DISPINFO_3 ) ) ;
make_sam_dispinfo_3 ( ctr . sam . info3 ,
& num_entries , & data_size ,
q_u - > start_idx , grps ) ;
break ;
}
case 0x4 :
{
ctr . sam . info4 = malloc ( sizeof ( SAM_DISPINFO_4 ) ) ;
make_sam_dispinfo_4 ( ctr . sam . info4 ,
& num_entries , & data_size ,
q_u - > start_idx , pass ) ;
break ;
}
case 0x5 :
{
ctr . sam . info5 = malloc ( sizeof ( SAM_DISPINFO_5 ) ) ;
make_sam_dispinfo_5 ( ctr . sam . info5 ,
& num_entries , & data_size ,
q_u - > start_idx , grps ) ;
break ;
}
default :
{
ctr . sam . info = NULL ;
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
1998-10-15 09:47:29 +04:00
break ;
}
1998-03-12 00:11:04 +03:00
}
}
1999-02-24 04:52:30 +03:00
if ( ( status = = 0 ) & & ( num_entries < num_sam_entries ) )
1998-03-12 00:11:04 +03:00
{
1999-10-25 20:22:08 +04:00
status = STATUS_MORE_ENTRIES ;
1998-03-12 00:11:04 +03:00
}
1999-02-24 04:52:30 +03:00
make_samr_r_query_dispinfo ( & r_e , num_entries , data_size ,
q_u - > switch_level , & ctr , status ) ;
1998-03-12 00:11:04 +03:00
/* store the response in the SMB stream */
samr_io_r_query_dispinfo ( " " , & r_e , rdata , 0 ) ;
1999-02-24 04:52:30 +03:00
/* free malloc'd areas */
if ( sam_grps ! = NULL )
{
free ( sam_grps ) ;
}
1998-03-12 00:11:04 +03:00
1999-02-24 04:52:30 +03:00
if ( ctr . sam . info ! = NULL )
{
free ( ctr . sam . info ) ;
}
DEBUG ( 5 , ( " samr_reply_query_dispinfo: %d \n " , __LINE__ ) ) ;
1998-03-12 00:11:04 +03:00
}
/*******************************************************************
api_samr_query_dispinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_dispinfo ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_QUERY_DISPINFO q_e ;
samr_io_q_query_dispinfo ( " " , & q_e , data , 0 ) ;
samr_reply_query_dispinfo ( & q_e , rdata ) ;
}
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
/*******************************************************************
samr_reply_delete_dom_group
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_delete_dom_group ( SAMR_Q_DELETE_DOM_GROUP * q_u ,
prs_struct * rdata )
{
uint32 status = 0 ;
DOM_SID group_sid ;
uint32 group_rid ;
fstring group_sid_str ;
SAMR_R_DELETE_DOM_GROUP r_u ;
DEBUG ( 5 , ( " samr_delete_dom_group: %d \n " , __LINE__ ) ) ;
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > group_pol , & group_sid ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( group_sid_str , & group_sid ) ;
sid_split_rid ( & group_sid , & group_rid ) ;
}
if ( status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , group_sid_str ) ) ;
if ( sid_equal ( & group_sid , & global_sam_sid ) )
{
DEBUG ( 10 , ( " lookup on Domain SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
status = del_group_entry ( group_rid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_NO_SUCH_GROUP ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
else
{
1999-01-29 00:10:38 +03:00
status = 0xC0000000 | NT_STATUS_NO_SUCH_GROUP ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
}
}
make_samr_r_delete_dom_group ( & r_u , status ) ;
/* store the response in the SMB stream */
samr_io_r_delete_dom_group ( " " , & r_u , rdata , 0 ) ;
}
/*******************************************************************
api_samr_delete_dom_group
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_delete_dom_group ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_DELETE_DOM_GROUP q_u ;
samr_io_q_delete_dom_group ( " " , & q_u , data , 0 ) ;
samr_reply_delete_dom_group ( & q_u , rdata ) ;
}
1998-12-02 04:13:02 +03:00
/*******************************************************************
samr_reply_query_groupmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_query_groupmem ( SAMR_Q_QUERY_GROUPMEM * q_u ,
prs_struct * rdata )
{
uint32 status = 0 ;
DOMAIN_GRP_MEMBER * mem_grp = NULL ;
uint32 * rid = NULL ;
uint32 * attr = NULL ;
int num_rids = 0 ;
DOM_SID group_sid ;
uint32 group_rid ;
fstring group_sid_str ;
SAMR_R_QUERY_GROUPMEM r_u ;
DEBUG ( 5 , ( " samr_query_groupmem: %d \n " , __LINE__ ) ) ;
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > group_pol , & group_sid ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( group_sid_str , & group_sid ) ;
sid_split_rid ( & group_sid , & group_rid ) ;
}
if ( status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , group_sid_str ) ) ;
if ( sid_equal ( & group_sid , & global_sam_sid ) )
{
DEBUG ( 10 , ( " lookup on Domain SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
status = getgrouprid ( group_rid , & mem_grp , & num_rids ) ! = NULL ? 0x0 : ( 0xC0000000 | NT_STATUS_NO_SUCH_GROUP ) ;
1998-12-02 04:13:02 +03:00
unbecome_root ( True ) ;
}
else
{
1999-01-29 00:10:38 +03:00
status = 0xC0000000 | NT_STATUS_NO_SUCH_GROUP ;
1998-12-02 04:13:02 +03:00
}
}
if ( status = = 0x0 & & num_rids > 0 )
{
rid = malloc ( num_rids * sizeof ( uint32 ) ) ;
attr = malloc ( num_rids * sizeof ( uint32 ) ) ;
if ( mem_grp ! = NULL & & rid ! = NULL & & attr ! = NULL )
{
int i ;
for ( i = 0 ; i < num_rids ; i + + )
{
rid [ i ] = mem_grp [ i ] . rid ;
attr [ i ] = mem_grp [ i ] . attr ;
}
free ( mem_grp ) ;
}
}
make_samr_r_query_groupmem ( & r_u , num_rids , rid , attr , status ) ;
/* store the response in the SMB stream */
samr_io_r_query_groupmem ( " " , & r_u , rdata , 0 ) ;
1998-12-03 01:05:56 +03:00
if ( rid ! = NULL )
1998-12-02 04:13:02 +03:00
{
1998-12-03 01:05:56 +03:00
free ( rid ) ;
}
if ( attr ! = NULL )
{
free ( attr ) ;
1998-12-02 04:13:02 +03:00
}
DEBUG ( 5 , ( " samr_query_groupmem: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_query_groupmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_groupmem ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-12-02 04:13:02 +03:00
{
SAMR_Q_QUERY_GROUPMEM q_u ;
samr_io_q_query_groupmem ( " " , & q_u , data , 0 ) ;
samr_reply_query_groupmem ( & q_u , rdata ) ;
}
/*******************************************************************
samr_reply_query_groupinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_query_groupinfo ( SAMR_Q_QUERY_GROUPINFO * q_u ,
prs_struct * rdata )
{
SAMR_R_QUERY_GROUPINFO r_e ;
GROUP_INFO_CTR ctr ;
uint32 status = 0x0 ;
r_e . ptr = 0 ;
/* find the policy handle. open a policy on it. */
if ( r_e . status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
DEBUG ( 5 , ( " samr_reply_query_groupinfo: %d \n " , __LINE__ ) ) ;
if ( status = = 0x0 )
{
if ( q_u - > switch_level = = 1 )
{
r_e . ptr = 1 ;
1998-12-03 23:50:33 +03:00
ctr . switch_value1 = 1 ;
1999-08-30 21:15:59 +04:00
make_samr_group_info1 ( & ctr . group . info1 ,
1999-10-29 21:37:27 +04:00
" fake account name " ,
" fake account description " , 2 ) ;
1998-12-02 04:13:02 +03:00
}
else if ( q_u - > switch_level = = 4 )
{
r_e . ptr = 1 ;
1998-12-03 23:50:33 +03:00
ctr . switch_value1 = 4 ;
1999-08-30 21:15:59 +04:00
make_samr_group_info4 ( & ctr . group . info4 ,
1999-10-29 21:37:27 +04:00
" fake account description " ) ;
1998-12-02 04:13:02 +03:00
}
else
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
1998-12-02 04:13:02 +03:00
}
}
make_samr_r_query_groupinfo ( & r_e , status = = 0 ? & ctr : NULL , status ) ;
/* store the response in the SMB stream */
samr_io_r_query_groupinfo ( " " , & r_e , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_query_groupinfo: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_query_groupinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_groupinfo ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-12-02 04:13:02 +03:00
{
SAMR_Q_QUERY_GROUPINFO q_e ;
samr_io_q_query_groupinfo ( " " , & q_e , data , 0 ) ;
samr_reply_query_groupinfo ( & q_e , rdata ) ;
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
samr_reply_query_aliasinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_query_aliasinfo ( SAMR_Q_QUERY_ALIASINFO * q_u ,
prs_struct * rdata )
{
SAMR_R_QUERY_ALIASINFO r_e ;
1998-12-01 19:04:24 +03:00
ALIAS_INFO_CTR ctr ;
uint32 status = 0x0 ;
1998-03-12 00:11:04 +03:00
r_e . ptr = 0 ;
/* find the policy handle. open a policy on it. */
1998-09-29 01:43:48 +04:00
if ( r_e . status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
r_e . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
DEBUG ( 5 , ( " samr_reply_query_aliasinfo: %d \n " , __LINE__ ) ) ;
1998-12-01 19:04:24 +03:00
if ( status = = 0x0 )
1998-03-12 00:11:04 +03:00
{
1998-12-01 19:04:24 +03:00
if ( q_u - > switch_level = = 3 )
1998-03-12 00:11:04 +03:00
{
1998-12-01 19:04:24 +03:00
r_e . ptr = 1 ;
1998-12-04 01:20:30 +03:00
ctr . switch_value1 = 3 ;
1999-10-29 21:37:27 +04:00
make_samr_alias_info3 ( & ctr . alias . info3 , " <fake account description> " ) ;
1998-03-12 00:11:04 +03:00
}
1998-12-01 22:10:44 +03:00
else
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
1998-12-01 22:10:44 +03:00
}
1998-03-12 00:11:04 +03:00
}
1998-12-01 19:04:24 +03:00
make_samr_r_query_aliasinfo ( & r_e , status = = 0 ? & ctr : NULL , status ) ;
1998-03-12 00:11:04 +03:00
/* store the response in the SMB stream */
samr_io_r_query_aliasinfo ( " " , & r_e , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_query_aliasinfo: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_query_aliasinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_aliasinfo ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_QUERY_ALIASINFO q_e ;
samr_io_q_query_aliasinfo ( " " , & q_e , data , 0 ) ;
samr_reply_query_aliasinfo ( & q_e , rdata ) ;
}
/*******************************************************************
1998-11-26 02:54:30 +03:00
samr_reply_query_useraliases
1998-03-12 00:11:04 +03:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-11-26 02:54:30 +03:00
static void samr_reply_query_useraliases ( SAMR_Q_QUERY_USERALIASES * q_u ,
1998-03-12 00:11:04 +03:00
prs_struct * rdata )
{
1998-11-29 23:03:33 +03:00
uint32 status = 0 ;
1998-11-30 18:08:58 +03:00
LOCAL_GRP * mem_grp = NULL ;
1998-11-29 23:03:33 +03:00
uint32 * rid = NULL ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
int num_rids = 0 ;
struct sam_passwd * sam_pass ;
DOM_SID usr_sid ;
DOM_SID dom_sid ;
uint32 user_rid ;
fstring sam_sid_str ;
fstring dom_sid_str ;
fstring usr_sid_str ;
1998-03-12 00:11:04 +03:00
1998-11-26 02:54:30 +03:00
SAMR_R_QUERY_USERALIASES r_u ;
1999-10-21 23:02:57 +04:00
ZERO_STRUCT ( r_u ) ;
1998-03-12 00:11:04 +03:00
1998-11-26 02:54:30 +03:00
DEBUG ( 5 , ( " samr_query_useraliases: %d \n " , __LINE__ ) ) ;
1998-03-12 00:11:04 +03:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & dom_sid ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( dom_sid_str , & dom_sid ) ;
sid_to_string ( sam_sid_str , & global_sam_sid ) ;
}
if ( status = = 0x0 )
1998-03-12 00:11:04 +03:00
{
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
usr_sid = q_u - > sid [ 0 ] . sid ;
sid_split_rid ( & usr_sid , & user_rid ) ;
sid_to_string ( usr_sid_str , & usr_sid ) ;
1998-08-22 06:54:21 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
}
1998-03-12 00:11:04 +03:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( status = = 0x0 )
{
1998-03-12 00:11:04 +03:00
/* find the user account */
become_root ( True ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
sam_pass = getsam21pwrid ( user_rid ) ;
1998-03-12 00:11:04 +03:00
unbecome_root ( True ) ;
1998-09-25 00:02:56 +04:00
if ( sam_pass = = NULL )
1998-03-12 00:11:04 +03:00
{
status = 0xC0000000 | NT_STATUS_NO_SUCH_USER ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
num_rids = 0 ;
}
}
if ( status = = 0x0 )
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
DEBUG ( 10 , ( " sid is %s \n " , dom_sid_str ) ) ;
if ( sid_equal ( & dom_sid , & global_sid_S_1_5_20 ) )
{
DEBUG ( 10 , ( " lookup on S-1-5-20 \n " ) ) ;
become_root ( True ) ;
getuserbuiltinntnam ( sam_pass - > nt_name , & mem_grp , & num_rids ) ;
unbecome_root ( True ) ;
}
else if ( sid_equal ( & dom_sid , & usr_sid ) )
{
DEBUG ( 10 , ( " lookup on Domain SID \n " ) ) ;
become_root ( True ) ;
getuseraliasntnam ( sam_pass - > nt_name , & mem_grp , & num_rids ) ;
unbecome_root ( True ) ;
}
else
{
status = 0xC0000000 | NT_STATUS_NO_SUCH_USER ;
}
}
if ( status = = 0x0 & & num_rids > 0 )
{
1999-01-29 00:10:38 +03:00
rid = malloc ( num_rids * sizeof ( uint32 ) ) ;
if ( mem_grp ! = NULL & & rid ! = NULL )
{
int i ;
for ( i = 0 ; i < num_rids ; i + + )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
1999-01-29 00:10:38 +03:00
rid [ i ] = mem_grp [ i ] . rid ;
}
free ( mem_grp ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
}
}
make_samr_r_query_useraliases ( & r_u , num_rids , rid , status ) ;
/* store the response in the SMB stream */
samr_io_r_query_useraliases ( " " , & r_u , rdata , 0 ) ;
if ( rid ! = NULL )
{
free ( rid ) ;
}
DEBUG ( 5 , ( " samr_query_useraliases: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_query_useraliases
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_useraliases ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_QUERY_USERALIASES q_u ;
samr_io_q_query_useraliases ( " " , & q_u , data , 0 ) ;
samr_reply_query_useraliases ( & q_u , rdata ) ;
1999-10-21 23:02:57 +04:00
samr_free_q_query_useraliases ( & q_u ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
}
/*******************************************************************
samr_reply_delete_dom_alias
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_delete_dom_alias ( SAMR_Q_DELETE_DOM_ALIAS * q_u ,
prs_struct * rdata )
{
uint32 status = 0 ;
DOM_SID alias_sid ;
uint32 alias_rid ;
fstring alias_sid_str ;
SAMR_R_DELETE_DOM_ALIAS r_u ;
DEBUG ( 5 , ( " samr_delete_dom_alias: %d \n " , __LINE__ ) ) ;
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > alias_pol , & alias_sid ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( alias_sid_str , & alias_sid ) ;
sid_split_rid ( & alias_sid , & alias_rid ) ;
}
if ( status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , alias_sid_str ) ) ;
1998-11-30 18:08:58 +03:00
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
if ( sid_equal ( & alias_sid , & global_sam_sid ) )
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
{
1998-11-26 02:54:30 +03:00
DEBUG ( 10 , ( " lookup on Domain SID \n " ) ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
status = del_alias_entry ( alias_rid ) ? 0x0 : ( 0xC0000000 | NT_STATUS_NO_SUCH_ALIAS ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
unbecome_root ( True ) ;
1998-11-30 18:08:58 +03:00
}
else
{
1999-01-29 00:10:38 +03:00
status = 0xC0000000 | NT_STATUS_NO_SUCH_ALIAS ;
1998-11-30 18:08:58 +03:00
}
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
make_samr_r_delete_dom_alias ( & r_u , status ) ;
1998-03-12 00:11:04 +03:00
/* store the response in the SMB stream */
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
samr_io_r_delete_dom_alias ( " " , & r_u , rdata , 0 ) ;
1998-03-12 00:11:04 +03:00
}
/*******************************************************************
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
api_samr_delete_dom_alias
1998-03-12 00:11:04 +03:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_delete_dom_alias ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
SAMR_Q_DELETE_DOM_ALIAS q_u ;
samr_io_q_delete_dom_alias ( " " , & q_u , data , 0 ) ;
samr_reply_delete_dom_alias ( & q_u , rdata ) ;
1998-03-12 00:11:04 +03:00
}
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
1998-12-01 22:10:44 +03:00
/*******************************************************************
samr_reply_query_aliasmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_query_aliasmem ( SAMR_Q_QUERY_ALIASMEM * q_u ,
prs_struct * rdata )
{
uint32 status = 0 ;
LOCAL_GRP_MEMBER * mem_grp = NULL ;
1998-12-02 01:18:48 +03:00
DOM_SID2 * sid = NULL ;
1998-12-01 22:10:44 +03:00
int num_sids = 0 ;
DOM_SID alias_sid ;
uint32 alias_rid ;
fstring alias_sid_str ;
SAMR_R_QUERY_ALIASMEM r_u ;
DEBUG ( 5 , ( " samr_query_aliasmem: %d \n " , __LINE__ ) ) ;
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > alias_pol , & alias_sid ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
sid_to_string ( alias_sid_str , & alias_sid ) ;
sid_split_rid ( & alias_sid , & alias_rid ) ;
}
if ( status = = 0x0 )
{
DEBUG ( 10 , ( " sid is %s \n " , alias_sid_str ) ) ;
if ( sid_equal ( & alias_sid , & global_sid_S_1_5_20 ) )
{
DEBUG ( 10 , ( " lookup on S-1-5-20 \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
status = getbuiltinrid ( alias_rid , & mem_grp , & num_sids ) ! = NULL ? 0x0 : 0xC0000000 | NT_STATUS_NO_SUCH_ALIAS ;
1998-12-01 22:10:44 +03:00
unbecome_root ( True ) ;
}
else if ( sid_equal ( & alias_sid , & global_sam_sid ) )
{
DEBUG ( 10 , ( " lookup on Domain SID \n " ) ) ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
status = getaliasrid ( alias_rid , & mem_grp , & num_sids ) ! = NULL ? 0x0 : 0xC0000000 | NT_STATUS_NO_SUCH_ALIAS ;
1998-12-01 22:10:44 +03:00
unbecome_root ( True ) ;
}
else
{
1999-01-29 00:10:38 +03:00
status = 0xC0000000 | NT_STATUS_NO_SUCH_ALIAS ;
1998-12-01 22:10:44 +03:00
}
}
if ( status = = 0x0 & & num_sids > 0 )
{
sid = malloc ( num_sids * sizeof ( DOM_SID ) ) ;
if ( mem_grp ! = NULL & & sid ! = NULL )
{
int i ;
for ( i = 0 ; i < num_sids ; i + + )
{
1998-12-02 01:18:48 +03:00
make_dom_sid2 ( & sid [ i ] , & mem_grp [ i ] . sid ) ;
1998-12-01 22:10:44 +03:00
}
free ( mem_grp ) ;
}
}
make_samr_r_query_aliasmem ( & r_u , num_sids , sid , status ) ;
/* store the response in the SMB stream */
samr_io_r_query_aliasmem ( " " , & r_u , rdata , 0 ) ;
if ( sid ! = NULL )
{
free ( sid ) ;
}
DEBUG ( 5 , ( " samr_query_aliasmem: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_query_aliasmem
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_aliasmem ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-12-01 22:10:44 +03:00
{
SAMR_Q_QUERY_ALIASMEM q_u ;
samr_io_q_query_aliasmem ( " " , & q_u , data , 0 ) ;
samr_reply_query_aliasmem ( & q_u , rdata ) ;
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
samr_reply_lookup_names
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_lookup_names ( SAMR_Q_LOOKUP_NAMES * q_u ,
prs_struct * rdata )
{
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
uint32 rid [ MAX_SAM_ENTRIES ] ;
uint8 type [ MAX_SAM_ENTRIES ] ;
1998-03-12 00:11:04 +03:00
uint32 status = 0 ;
int i ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
int num_rids = q_u - > num_names1 ;
DOM_SID pol_sid ;
1998-03-12 00:11:04 +03:00
SAMR_R_LOOKUP_NAMES r_u ;
DEBUG ( 5 , ( " samr_lookup_names: %d \n " , __LINE__ ) ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & pol_sid ) )
{
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
}
1998-03-12 00:11:04 +03:00
if ( num_rids > MAX_SAM_ENTRIES )
{
num_rids = MAX_SAM_ENTRIES ;
DEBUG ( 5 , ( " samr_lookup_names: truncating entries to %d \n " , num_rids ) ) ;
}
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
SMB_ASSERT_ARRAY ( q_u - > uni_name , num_rids ) ;
1998-08-22 06:54:21 +04:00
1998-03-12 00:11:04 +03:00
for ( i = 0 ; i < num_rids & & status = = 0 ; i + + )
{
1998-11-24 00:51:05 +03:00
DOM_SID sid ;
1998-03-12 00:11:04 +03:00
fstring name ;
1999-02-15 08:33:30 +03:00
unistr2_to_ascii ( name , & q_u - > uni_name [ i ] , sizeof ( name ) - 1 ) ;
1998-03-12 00:11:04 +03:00
1998-11-24 00:51:05 +03:00
status = lookup_name ( name , & sid , & ( type [ i ] ) ) ;
if ( status = = 0x0 )
{
sid_split_rid ( & sid , & rid [ i ] ) ;
}
else
{
type [ i ] = SID_NAME_UNKNOWN ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
rid [ i ] = 0xffffffff ;
}
if ( ! sid_equal ( & pol_sid , & sid ) )
{
rid [ i ] = 0xffffffff ;
type [ i ] = SID_NAME_UNKNOWN ;
1998-11-24 00:51:05 +03:00
}
1998-03-12 00:11:04 +03:00
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
make_samr_r_lookup_names ( & r_u , num_rids , rid , type , status ) ;
1998-03-12 00:11:04 +03:00
/* store the response in the SMB stream */
samr_io_r_lookup_names ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_lookup_names: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_lookup_names
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_lookup_names ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_LOOKUP_NAMES q_u ;
samr_io_q_lookup_names ( " " , & q_u , data , 0 ) ;
samr_reply_lookup_names ( & q_u , rdata ) ;
}
1998-10-17 03:40:59 +04:00
/*******************************************************************
samr_reply_chgpasswd_user
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_chgpasswd_user ( SAMR_Q_CHGPASSWD_USER * q_u ,
prs_struct * rdata )
{
SAMR_R_CHGPASSWD_USER r_u ;
uint32 status = 0x0 ;
fstring user_name ;
fstring wks ;
1999-02-15 08:33:30 +03:00
unistr2_to_ascii ( user_name , & q_u - > uni_user_name , sizeof ( user_name ) - 1 ) ;
unistr2_to_ascii ( wks , & q_u - > uni_dest_host , sizeof ( wks ) - 1 ) ;
1998-10-17 03:40:59 +04:00
DEBUG ( 5 , ( " samr_chgpasswd_user: user: %s wks: %s \n " , user_name , wks ) ) ;
1998-10-19 21:32:10 +04:00
if ( ! pass_oem_change ( user_name ,
q_u - > lm_newpass . pass , q_u - > lm_oldhash . hash ,
q_u - > nt_newpass . pass , q_u - > nt_oldhash . hash ) )
{
status = 0xC0000000 | NT_STATUS_WRONG_PASSWORD ;
}
1998-10-17 03:40:59 +04:00
make_samr_r_chgpasswd_user ( & r_u , status ) ;
/* store the response in the SMB stream */
samr_io_r_chgpasswd_user ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_chgpasswd_user: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_chgpasswd_user
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_chgpasswd_user ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-10-17 03:40:59 +04:00
{
SAMR_Q_CHGPASSWD_USER q_u ;
samr_io_q_chgpasswd_user ( " " , & q_u , data , 0 ) ;
samr_reply_chgpasswd_user ( & q_u , rdata ) ;
}
/*******************************************************************
samr_reply_unknown_38
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_unknown_38 ( SAMR_Q_UNKNOWN_38 * q_u ,
prs_struct * rdata )
{
SAMR_R_UNKNOWN_38 r_u ;
DEBUG ( 5 , ( " samr_unknown_38: %d \n " , __LINE__ ) ) ;
make_samr_r_unknown_38 ( & r_u ) ;
/* store the response in the SMB stream */
samr_io_r_unknown_38 ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_unknown_38: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_unknown_38
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_unknown_38 ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-10-17 03:40:59 +04:00
{
SAMR_Q_UNKNOWN_38 q_u ;
samr_io_q_unknown_38 ( " " , & q_u , data , 0 ) ;
samr_reply_unknown_38 ( & q_u , rdata ) ;
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
1998-12-04 19:30:00 +03:00
samr_reply_lookup_rids
1998-03-12 00:11:04 +03:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-12-04 19:30:00 +03:00
static void samr_reply_lookup_rids ( SAMR_Q_LOOKUP_RIDS * q_u ,
1998-03-12 00:11:04 +03:00
prs_struct * rdata )
{
fstring group_names [ MAX_SAM_ENTRIES ] ;
1998-11-24 00:51:05 +03:00
uint8 group_attrs [ MAX_SAM_ENTRIES ] ;
1998-03-12 00:11:04 +03:00
uint32 status = 0 ;
1998-12-04 19:30:00 +03:00
int num_rids = q_u - > num_rids1 ;
1998-11-24 00:51:05 +03:00
DOM_SID pol_sid ;
1998-03-12 00:11:04 +03:00
1998-12-04 19:30:00 +03:00
SAMR_R_LOOKUP_RIDS r_u ;
1999-10-21 20:53:50 +04:00
ZERO_STRUCT ( r_u ) ;
1998-03-12 00:11:04 +03:00
1998-12-04 19:30:00 +03:00
DEBUG ( 5 , ( " samr_lookup_rids: %d \n " , __LINE__ ) ) ;
1998-03-12 00:11:04 +03:00
/* find the policy handle. open a policy on it. */
1998-09-29 01:43:48 +04:00
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
1998-11-24 00:51:05 +03:00
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & pol_sid ) )
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
1998-11-24 00:51:05 +03:00
}
1998-03-12 00:11:04 +03:00
if ( status = = 0x0 )
{
int i ;
1998-12-04 19:30:00 +03:00
if ( num_rids > MAX_SAM_ENTRIES )
1998-03-12 00:11:04 +03:00
{
1998-12-04 19:30:00 +03:00
num_rids = MAX_SAM_ENTRIES ;
DEBUG ( 5 , ( " samr_lookup_rids: truncating entries to %d \n " , num_rids ) ) ;
1998-03-12 00:11:04 +03:00
}
1998-12-04 19:30:00 +03:00
for ( i = 0 ; i < num_rids & & status = = 0 ; i + + )
1998-03-12 00:11:04 +03:00
{
1998-11-24 00:51:05 +03:00
DOM_SID sid ;
sid_copy ( & sid , & pol_sid ) ;
1998-12-04 19:30:00 +03:00
sid_append_rid ( & sid , q_u - > rid [ i ] ) ;
1998-11-24 00:51:05 +03:00
lookup_sid ( & sid , group_names [ i ] , & group_attrs [ i ] ) ;
1998-03-12 00:11:04 +03:00
}
}
1998-12-04 19:30:00 +03:00
make_samr_r_lookup_rids ( & r_u , num_rids , group_names , group_attrs , status ) ;
1998-03-12 00:11:04 +03:00
/* store the response in the SMB stream */
1998-12-04 19:30:00 +03:00
samr_io_r_lookup_rids ( " " , & r_u , rdata , 0 ) ;
1998-03-12 00:11:04 +03:00
1998-12-04 19:30:00 +03:00
DEBUG ( 5 , ( " samr_lookup_rids: %d \n " , __LINE__ ) ) ;
1998-03-12 00:11:04 +03:00
}
/*******************************************************************
1998-12-04 19:30:00 +03:00
api_samr_lookup_rids
1998-03-12 00:11:04 +03:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_lookup_rids ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
1998-12-04 19:30:00 +03:00
SAMR_Q_LOOKUP_RIDS q_u ;
samr_io_q_lookup_rids ( " " , & q_u , data , 0 ) ;
samr_reply_lookup_rids ( & q_u , rdata ) ;
1999-10-21 23:02:57 +04:00
samr_free_q_lookup_rids ( & q_u ) ;
1998-03-12 00:11:04 +03:00
}
/*******************************************************************
samr_reply_open_user
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_open_user ( SAMR_Q_OPEN_USER * q_u ,
prs_struct * rdata ,
int status )
{
SAMR_R_OPEN_USER r_u ;
1998-09-25 00:02:56 +04:00
struct sam_passwd * sam_pass ;
1998-03-12 00:11:04 +03:00
BOOL pol_open = False ;
/* set up the SAMR open_user response */
1998-05-21 16:18:52 +04:00
bzero ( r_u . user_pol . data , POL_HND_SIZE ) ;
1998-03-12 00:11:04 +03:00
r_u . status = 0x0 ;
/* find the policy handle. open a policy on it. */
1998-09-29 01:43:48 +04:00
if ( r_u . status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > domain_pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
r_u . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* get a (unique) handle. open a policy on it. */
if ( r_u . status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( & ( r_u . user_pol ) ) ) )
{
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
become_root ( True ) ;
1998-09-25 00:02:56 +04:00
sam_pass = getsam21pwrid ( q_u - > user_rid ) ;
1998-03-12 00:11:04 +03:00
unbecome_root ( True ) ;
/* check that the RID exists in our domain. */
1998-09-25 00:02:56 +04:00
if ( r_u . status = = 0x0 & & sam_pass = = NULL )
1998-03-12 00:11:04 +03:00
{
r_u . status = 0xC0000000 | NT_STATUS_NO_SUCH_USER ;
}
/* associate the RID with the (unique) handle. */
if ( r_u . status = = 0x0 & & ! set_lsa_policy_samr_rid ( & ( r_u . user_pol ) , q_u - > user_rid ) )
{
/* oh, whoops. don't know what error message to return, here */
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
if ( r_u . status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( & ( r_u . user_pol ) ) ;
}
DEBUG ( 5 , ( " samr_open_user: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_open_user ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_open_user: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_open_user
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_open_user ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_OPEN_USER q_u ;
samr_io_q_open_user ( " " , & q_u , data , 0 ) ;
samr_reply_open_user ( & q_u , rdata , 0x0 ) ;
}
1998-10-22 01:11:16 +04:00
/*************************************************************************
get_user_info_10
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static BOOL get_user_info_10 ( SAM_USER_INFO_10 * id10 , uint32 user_rid )
{
1998-11-29 23:03:33 +03:00
struct sam_passwd * sam_pass ;
1998-10-22 01:11:16 +04:00
become_root ( True ) ;
1998-11-29 23:03:33 +03:00
sam_pass = getsam21pwrid ( user_rid ) ;
1998-10-22 01:11:16 +04:00
unbecome_root ( True ) ;
1998-11-29 23:03:33 +03:00
if ( sam_pass = = NULL )
1998-10-22 01:11:16 +04:00
{
DEBUG ( 4 , ( " User 0x%x not found \n " , user_rid ) ) ;
return False ;
}
1998-11-29 23:03:33 +03:00
DEBUG ( 3 , ( " User:[%s] \n " , sam_pass - > nt_name ) ) ;
1998-10-22 01:11:16 +04:00
1998-11-29 23:03:33 +03:00
make_sam_user_info10 ( id10 , sam_pass - > acct_ctrl ) ;
1998-10-22 01:11:16 +04:00
return True ;
}
1998-03-12 00:11:04 +03:00
/*************************************************************************
get_user_info_21
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
ldap.c :
- added support for some of the new passdb_ops functions.
- removed functions that are supported "indirectly" through passdb.c
nisppass.c :
- modified make_nisname_from_xxx() functions to take a "file" arg.
- turned getnisp21pwuid() into getnisp21pwrid(). getnisp21pwuid()
functionality is available through "indirect" support in passdb.c
- removed functions that are supported "indirectly" through passdb.c
- added support for some of the new passdb_ops functions.
passdb.c :
- created getsam21pwrid() function to go alongside getsam21pwuid.
it is not expected that getsam21pwuid ever be used, certainly
not from the lib/rpc code.
- created getsamdisprid() and getsamdispent(). these are primarily
for support of SamrQueryDisplayInfo, however given that they
[struct sam_disp_info] return username, rid and fullname, there may
be further instances where these functions will be useful.
- added support where either the get/add/mod-smb or get/add/mod-sam21
functions are optional. this can be done very easily by checking
whether the struct passdb_ops table functions are NULL or not.
documented this capability in the notes at the top of the module.
- where unix uid was referenced, use uid_t.
- where unix gid was referenced, use gid_t.
smb.h :
- added sam_disp_info functions to passdb_ops.
- added getsam21pwrid() function.
smbpass.c :
- added reference to iterate_getsam21pwrid().
lib/rpc/server/srv_samr.c :
- removed group rid code added to get_user_info_21() code: this
had been added in the wrong place. the client / server should
already know whether it wants to do a lookup by user rid or
by group rid.
the test of whether the rid is a user or group rid has been left
in because this may become useful consistency-check code.
- converted back to getsam21pwrid() not
getsam21pwuid(pdb_user_rid_to_uid()).
this is because the unix uid to user rid mapping can be non-monotonic
in some password database systems, and monotonic in others. imposing
the restriction by converting immediately from rid to uid at this
point is inadviseable, and will place this potential restriction on
_all_ password database systems, not just some which, for whatever
reason, do not support user rids.
it should be up to the individual password database writer to
convert from user rid to unix uid, should that module not support
rids.
lib/rpc/server/srv_util.c :
- got lookup_user_name() to call getsamdisprid() not getsmbpwuid().
a bug was introduced (or at least the bug already there was not
fixed) whereby the nt user rid was converted to a unix uid, and
then not used.
(This used to be commit 0193dd21c3c44e0611add742c6f92b92474de6b8)
1998-05-19 21:48:40 +04:00
static BOOL get_user_info_21 ( SAM_USER_INFO_21 * id21 , uint32 user_rid )
1998-03-12 00:11:04 +03:00
{
1998-05-11 22:03:01 +04:00
struct sam_passwd * sam_pass ;
1998-03-12 00:11:04 +03:00
LOGON_HRS hrs ;
int i ;
ldap.c :
- added support for some of the new passdb_ops functions.
- removed functions that are supported "indirectly" through passdb.c
nisppass.c :
- modified make_nisname_from_xxx() functions to take a "file" arg.
- turned getnisp21pwuid() into getnisp21pwrid(). getnisp21pwuid()
functionality is available through "indirect" support in passdb.c
- removed functions that are supported "indirectly" through passdb.c
- added support for some of the new passdb_ops functions.
passdb.c :
- created getsam21pwrid() function to go alongside getsam21pwuid.
it is not expected that getsam21pwuid ever be used, certainly
not from the lib/rpc code.
- created getsamdisprid() and getsamdispent(). these are primarily
for support of SamrQueryDisplayInfo, however given that they
[struct sam_disp_info] return username, rid and fullname, there may
be further instances where these functions will be useful.
- added support where either the get/add/mod-smb or get/add/mod-sam21
functions are optional. this can be done very easily by checking
whether the struct passdb_ops table functions are NULL or not.
documented this capability in the notes at the top of the module.
- where unix uid was referenced, use uid_t.
- where unix gid was referenced, use gid_t.
smb.h :
- added sam_disp_info functions to passdb_ops.
- added getsam21pwrid() function.
smbpass.c :
- added reference to iterate_getsam21pwrid().
lib/rpc/server/srv_samr.c :
- removed group rid code added to get_user_info_21() code: this
had been added in the wrong place. the client / server should
already know whether it wants to do a lookup by user rid or
by group rid.
the test of whether the rid is a user or group rid has been left
in because this may become useful consistency-check code.
- converted back to getsam21pwrid() not
getsam21pwuid(pdb_user_rid_to_uid()).
this is because the unix uid to user rid mapping can be non-monotonic
in some password database systems, and monotonic in others. imposing
the restriction by converting immediately from rid to uid at this
point is inadviseable, and will place this potential restriction on
_all_ password database systems, not just some which, for whatever
reason, do not support user rids.
it should be up to the individual password database writer to
convert from user rid to unix uid, should that module not support
rids.
lib/rpc/server/srv_util.c :
- got lookup_user_name() to call getsamdisprid() not getsmbpwuid().
a bug was introduced (or at least the bug already there was not
fixed) whereby the nt user rid was converted to a unix uid, and
then not used.
(This used to be commit 0193dd21c3c44e0611add742c6f92b92474de6b8)
1998-05-19 21:48:40 +04:00
become_root ( True ) ;
sam_pass = getsam21pwrid ( user_rid ) ;
unbecome_root ( True ) ;
1998-03-12 00:11:04 +03:00
1998-05-11 22:03:01 +04:00
if ( sam_pass = = NULL )
1998-03-12 00:11:04 +03:00
{
1998-09-25 00:02:56 +04:00
DEBUG ( 4 , ( " User 0x%x not found \n " , user_rid ) ) ;
1998-03-12 00:11:04 +03:00
return False ;
}
1998-11-29 23:03:33 +03:00
DEBUG ( 3 , ( " User:[%s] \n " , sam_pass - > nt_name ) ) ;
1998-03-12 00:11:04 +03:00
1998-05-11 22:03:01 +04:00
/* create a LOGON_HRS structure */
hrs . len = sam_pass - > hours_len ;
1998-08-25 01:49:10 +04:00
SMB_ASSERT_ARRAY ( hrs . hours , hrs . len ) ;
1998-03-12 00:11:04 +03:00
for ( i = 0 ; i < hrs . len ; i + + )
{
1998-05-11 22:03:01 +04:00
hrs . hours [ i ] = sam_pass - > hours [ i ] ;
1998-03-12 00:11:04 +03:00
}
1998-05-11 22:03:01 +04:00
1998-03-12 00:11:04 +03:00
make_sam_user_info21 ( id21 ,
1998-11-29 23:03:33 +03:00
& sam_pass - > logon_time ,
& sam_pass - > logoff_time ,
& sam_pass - > kickoff_time ,
& sam_pass - > pass_last_set_time ,
& sam_pass - > pass_can_change_time ,
& sam_pass - > pass_must_change_time ,
1998-03-12 00:11:04 +03:00
1998-11-29 23:03:33 +03:00
sam_pass - > nt_name , /* user_name */
1998-05-11 22:03:01 +04:00
sam_pass - > full_name , /* full_name */
sam_pass - > home_dir , /* home_dir */
sam_pass - > dir_drive , /* dir_drive */
sam_pass - > logon_script , /* logon_script */
sam_pass - > profile_path , /* profile_path */
sam_pass - > acct_desc , /* description */
sam_pass - > workstations , /* workstations user can log in from */
sam_pass - > unknown_str , /* don't know, yet */
sam_pass - > munged_dial , /* dialin info. contains dialin path and tel no */
sam_pass - > user_rid , /* RID user_id */
sam_pass - > group_rid , /* RID group_id */
1998-11-29 23:03:33 +03:00
sam_pass - > acct_ctrl ,
1998-05-11 22:03:01 +04:00
1998-11-29 23:03:33 +03:00
sam_pass - > unknown_3 , /* unknown_3 */
sam_pass - > logon_divs , /* divisions per week */
& hrs , /* logon hours */
sam_pass - > unknown_5 ,
sam_pass - > unknown_6 ) ;
1998-03-12 00:11:04 +03:00
return True ;
}
/*******************************************************************
samr_reply_query_userinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_query_userinfo ( SAMR_Q_QUERY_USERINFO * q_u ,
prs_struct * rdata )
{
SAMR_R_QUERY_USERINFO r_u ;
#if 0
SAM_USER_INFO_11 id11 ;
# endif
1998-10-22 01:11:16 +04:00
SAM_USER_INFO_10 id10 ;
1998-03-12 00:11:04 +03:00
SAM_USER_INFO_21 id21 ;
void * info = NULL ;
uint32 status = 0x0 ;
1998-09-26 04:41:20 +04:00
uint32 rid = 0x0 ;
1998-03-12 00:11:04 +03:00
DEBUG ( 5 , ( " samr_reply_query_userinfo: %d \n " , __LINE__ ) ) ;
/* search for the handle */
1998-09-29 01:43:48 +04:00
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
1998-03-12 00:11:04 +03:00
}
/* find the user's rid */
if ( status = = 0x0 & & ( rid = get_lsa_policy_samr_rid ( & ( q_u - > pol ) ) ) = = 0xffffffff )
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
1998-03-12 00:11:04 +03:00
}
1998-09-25 00:02:56 +04:00
DEBUG ( 5 , ( " samr_reply_query_userinfo: rid:0x%x \n " , rid ) ) ;
1998-03-12 00:11:04 +03:00
/* ok! user info levels (there are lots: see MSDEV help), off we go... */
if ( status = = 0x0 )
{
switch ( q_u - > switch_value )
{
1998-10-22 01:11:16 +04:00
case 0x10 :
{
info = ( void * ) & id10 ;
1999-01-29 00:10:38 +03:00
status = get_user_info_10 ( & id10 , rid ) ? 0 : ( 0xC0000000 | NT_STATUS_NO_SUCH_USER ) ;
1998-10-22 01:11:16 +04:00
break ;
}
1998-03-12 00:11:04 +03:00
#if 0
/* whoops - got this wrong. i think. or don't understand what's happening. */
case 0x11 :
{
NTTIME expire ;
info = ( void * ) & id11 ;
expire . low = 0xffffffff ;
expire . high = 0x7fffffff ;
make_sam_user_info11 ( & id11 , & expire , " BROOKFIELDS$ " , 0x03ef , 0x201 , 0x0080 ) ;
break ;
}
# endif
case 21 :
{
info = ( void * ) & id21 ;
1999-01-29 00:10:38 +03:00
status = get_user_info_21 ( & id21 , rid ) ? 0 : ( 0xC0000000 | NT_STATUS_NO_SUCH_USER ) ;
1998-03-12 00:11:04 +03:00
break ;
}
default :
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
1998-03-12 00:11:04 +03:00
break ;
}
}
}
make_samr_r_query_userinfo ( & r_u , q_u - > switch_value , info , status ) ;
/* store the response in the SMB stream */
samr_io_r_query_userinfo ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_reply_query_userinfo: %d \n " , __LINE__ ) ) ;
}
1999-03-25 18:14:30 +03:00
/*******************************************************************
set_user_info_24
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static BOOL set_user_info_24 ( SAM_USER_INFO_24 * id24 , uint32 rid )
{
1999-03-25 23:56:28 +03:00
struct sam_passwd * pwd = getsam21pwrid ( rid ) ;
struct sam_passwd new_pwd ;
static uchar nt_hash [ 16 ] ;
static uchar lm_hash [ 16 ] ;
pstring new_pw ;
if ( pwd = = NULL )
{
return False ;
}
pwdb_init_sam ( & new_pwd ) ;
copy_sam_passwd ( & new_pwd , pwd ) ;
1999-03-25 18:14:30 +03:00
if ( ! decode_pw_buffer ( id24 - > pass , new_pw , sizeof ( new_pw ) , True ) )
{
return False ;
}
1999-03-25 23:56:28 +03:00
1999-03-25 18:14:30 +03:00
# ifdef DEBUG_PASSWORD
DEBUG ( 0 , ( " New Password: %s \n " , new_pw ) ) ;
# endif
1999-03-25 23:56:28 +03:00
nt_lm_owf_gen ( new_pw , nt_hash , lm_hash ) ;
new_pwd . smb_passwd = lm_hash ;
new_pwd . smb_nt_passwd = nt_hash ;
return mod_sam21pwd_entry ( & new_pwd , True ) ;
1999-03-25 18:14:30 +03:00
}
1999-03-25 16:54:31 +03:00
/*******************************************************************
set_user_info_23
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static BOOL set_user_info_23 ( SAM_USER_INFO_23 * id23 , uint32 rid )
{
1999-03-26 00:32:04 +03:00
struct sam_passwd * pwd = getsam21pwrid ( rid ) ;
struct sam_passwd new_pwd ;
static uchar nt_hash [ 16 ] ;
static uchar lm_hash [ 16 ] ;
pstring new_pw ;
1999-11-17 00:14:53 +03:00
if ( id23 = = NULL )
{
DEBUG ( 5 , ( " set_user_info_23: NULL id23 \n " ) ) ;
return False ;
}
1999-03-26 00:32:04 +03:00
if ( pwd = = NULL )
{
return False ;
}
pwdb_init_sam ( & new_pwd ) ;
copy_sam_passwd ( & new_pwd , pwd ) ;
copy_id23_to_sam_passwd ( & new_pwd , id23 ) ;
1999-03-25 16:54:31 +03:00
if ( ! decode_pw_buffer ( id23 - > pass , new_pw , sizeof ( new_pw ) , True ) )
{
return False ;
}
1999-03-26 00:32:04 +03:00
1999-03-25 16:54:31 +03:00
# ifdef DEBUG_PASSWORD
DEBUG ( 0 , ( " New Password: %s \n " , new_pw ) ) ;
# endif
1999-03-26 00:32:04 +03:00
nt_lm_owf_gen ( new_pw , nt_hash , lm_hash ) ;
new_pwd . smb_passwd = lm_hash ;
new_pwd . smb_nt_passwd = nt_hash ;
return mod_sam21pwd_entry ( & new_pwd , True ) ;
1999-03-25 16:54:31 +03:00
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
api_samr_query_userinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_userinfo ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_QUERY_USERINFO q_u ;
samr_io_q_query_userinfo ( " " , & q_u , data , 0 ) ;
samr_reply_query_userinfo ( & q_u , rdata ) ;
}
1999-03-25 16:54:31 +03:00
/*******************************************************************
samr_reply_set_userinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_set_userinfo ( SAMR_Q_SET_USERINFO * q_u ,
prs_struct * rdata , uchar user_sess_key [ 16 ] )
{
SAMR_R_SET_USERINFO r_u ;
uint32 status = 0x0 ;
uint32 rid = 0x0 ;
DEBUG ( 5 , ( " samr_reply_set_userinfo: %d \n " , __LINE__ ) ) ;
/* search for the handle */
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* find the user's rid */
if ( status = = 0x0 & & ( rid = get_lsa_policy_samr_rid ( & ( q_u - > pol ) ) ) = = 0xffffffff )
{
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
}
DEBUG ( 5 , ( " samr_reply_set_userinfo: rid:0x%x \n " , rid ) ) ;
/* ok! user info levels (there are lots: see MSDEV help), off we go... */
1999-11-17 00:14:53 +03:00
if ( status = = 0x0 & & q_u - > info . id = = NULL )
{
DEBUG ( 5 , ( " samr_reply_set_userinfo: NULL info level \n " ) ) ;
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
}
1999-03-25 16:54:31 +03:00
if ( status = = 0x0 )
{
switch ( q_u - > switch_value )
{
1999-03-25 18:14:30 +03:00
case 24 :
{
SAM_USER_INFO_24 * id24 = q_u - > info . id24 ;
SamOEMhash ( id24 - > pass , user_sess_key , True ) ;
status = set_user_info_24 ( id24 , rid ) ? 0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
break ;
}
1999-03-25 16:54:31 +03:00
case 23 :
{
SAM_USER_INFO_23 * id23 = q_u - > info . id23 ;
1999-11-17 00:14:53 +03:00
SamOEMhash ( id23 - > pass , user_sess_key , 1 ) ;
# if DEBUG_PASSWORD
DEBUG ( 100 , ( " pass buff: \n " ) ) ;
dump_data ( 100 , id23 - > pass , sizeof ( id23 - > pass ) ) ;
# endif
dbgflush ( ) ;
1999-03-25 16:54:31 +03:00
status = set_user_info_23 ( id23 , rid ) ? 0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
break ;
}
default :
{
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
break ;
}
}
}
make_samr_r_set_userinfo ( & r_u , status ) ;
/* store the response in the SMB stream */
samr_io_r_set_userinfo ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_reply_set_userinfo: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_set_userinfo
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_set_userinfo ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1999-03-25 16:54:31 +03:00
{
1999-05-04 02:04:02 +04:00
user_struct * vuser = get_valid_user_struct ( p - > vuid ) ;
1999-03-25 16:54:31 +03:00
SAMR_Q_SET_USERINFO q_u ;
ZERO_STRUCT ( q_u ) ;
# ifdef DEBUG_PASSWORD
DEBUG ( 100 , ( " set user info: sess_key: " ) ) ;
dump_data ( 100 , vuser - > dc . user_sess_key , 16 ) ;
# endif
samr_io_q_set_userinfo ( " " , & q_u , data , 0 ) ;
samr_reply_set_userinfo ( & q_u , rdata , vuser - > dc . user_sess_key ) ;
if ( q_u . info . id ! = NULL )
{
free ( q_u . info . id ) ;
}
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
samr_reply_query_usergroups
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_query_usergroups ( SAMR_Q_QUERY_USERGROUPS * q_u ,
prs_struct * rdata )
{
SAMR_R_QUERY_USERGROUPS r_u ;
uint32 status = 0x0 ;
1998-09-25 00:02:56 +04:00
struct sam_passwd * sam_pass ;
1998-05-14 05:30:40 +04:00
DOM_GID * gids = NULL ;
1998-03-12 00:11:04 +03:00
int num_groups = 0 ;
uint32 rid ;
DEBUG ( 5 , ( " samr_query_usergroups: %d \n " , __LINE__ ) ) ;
/* find the policy handle. open a policy on it. */
1998-09-29 01:43:48 +04:00
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
1998-03-12 00:11:04 +03:00
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* find the user's rid */
if ( status = = 0x0 & & ( rid = get_lsa_policy_samr_rid ( & ( q_u - > pol ) ) ) = = 0xffffffff )
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
1998-03-12 00:11:04 +03:00
}
if ( status = = 0x0 )
{
become_root ( True ) ;
1998-09-25 00:02:56 +04:00
sam_pass = getsam21pwrid ( rid ) ;
1998-03-12 00:11:04 +03:00
unbecome_root ( True ) ;
1998-09-25 00:02:56 +04:00
if ( sam_pass = = NULL )
1998-03-12 00:11:04 +03:00
{
status = 0xC0000000 | NT_STATUS_NO_SUCH_USER ;
}
}
if ( status = = 0x0 )
{
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
DOMAIN_GRP * mem_grp = NULL ;
become_root ( True ) ;
1998-11-29 23:03:33 +03:00
getusergroupsntnam ( sam_pass - > nt_name , & mem_grp , & num_groups ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
unbecome_root ( True ) ;
1998-05-14 05:30:40 +04:00
gids = NULL ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
num_groups = make_dom_gids ( mem_grp , num_groups , & gids ) ;
if ( mem_grp ! = NULL )
{
free ( mem_grp ) ;
}
1998-03-12 00:11:04 +03:00
}
/* construct the response. lkclXXXX: gids are not copied! */
make_samr_r_query_usergroups ( & r_u , num_groups , gids , status ) ;
/* store the response in the SMB stream */
samr_io_r_query_usergroups ( " " , & r_u , rdata , 0 ) ;
1998-09-25 00:02:56 +04:00
if ( gids )
{
free ( ( char * ) gids ) ;
}
1998-03-12 00:11:04 +03:00
DEBUG ( 5 , ( " samr_query_usergroups: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_query_usergroups
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_usergroups ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_QUERY_USERGROUPS q_u ;
samr_io_q_query_usergroups ( " " , & q_u , data , 0 ) ;
samr_reply_query_usergroups ( & q_u , rdata ) ;
}
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
/*******************************************************************
opens a samr alias by rid , returns a policy handle .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static uint32 open_samr_alias ( DOM_SID * sid , POLICY_HND * alias_pol ,
uint32 alias_rid )
{
BOOL pol_open = False ;
uint32 status = 0x0 ;
/* get a (unique) handle. open a policy on it. */
if ( status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( alias_pol ) ) )
{
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
DEBUG ( 0 , ( " TODO: verify that the alias rid exists \n " ) ) ;
/* associate a RID with the (unique) handle. */
if ( status = = 0x0 & & ! set_lsa_policy_samr_rid ( alias_pol , alias_rid ) )
{
/* oh, whoops. don't know what error message to return, here */
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
sid_append_rid ( sid , alias_rid ) ;
/* associate an alias SID with the (unique) handle. */
if ( status = = 0x0 & & ! set_lsa_policy_samr_sid ( alias_pol , sid ) )
{
/* oh, whoops. don't know what error message to return, here */
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
if ( status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( alias_pol ) ;
}
return status ;
}
/*******************************************************************
samr_reply_create_dom_alias
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_create_dom_alias ( SAMR_Q_CREATE_DOM_ALIAS * q_u ,
prs_struct * rdata )
{
SAMR_R_CREATE_DOM_ALIAS r_u ;
DOM_SID dom_sid ;
LOCAL_GRP grp ;
POLICY_HND alias_pol ;
uint32 status = 0x0 ;
bzero ( & alias_pol , sizeof ( alias_pol ) ) ;
DEBUG ( 5 , ( " samr_create_dom_alias: %d \n " , __LINE__ ) ) ;
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > dom_pol ) ) = = - 1 ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* find the domain sid */
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > dom_pol , & dom_sid ) )
{
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
}
if ( ! sid_equal ( & dom_sid , & global_sam_sid ) )
{
status = 0xC0000000 | NT_STATUS_ACCESS_DENIED ;
}
if ( status = = 0x0 )
{
1999-02-15 08:33:30 +03:00
unistr2_to_ascii ( grp . name , & q_u - > uni_acct_desc , sizeof ( grp . name ) - 1 ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
fstrcpy ( grp . comment , " " ) ;
grp . rid = 0xffffffff ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
status = add_alias_entry ( & grp ) ? 0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
if ( status = = 0x0 )
{
status = open_samr_alias ( & dom_sid , & alias_pol , grp . rid ) ;
}
/* construct the response. */
make_samr_r_create_dom_alias ( & r_u , & alias_pol , grp . rid , status ) ;
/* store the response in the SMB stream */
samr_io_r_create_dom_alias ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_create_dom_alias: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_create_dom_alias
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_create_dom_alias ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_CREATE_DOM_ALIAS q_u ;
samr_io_q_create_dom_alias ( " " , & q_u , data , 0 ) ;
samr_reply_create_dom_alias ( & q_u , rdata ) ;
}
/*******************************************************************
opens a samr group by rid , returns a policy handle .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static uint32 open_samr_group ( DOM_SID * sid , POLICY_HND * group_pol ,
uint32 group_rid )
{
BOOL pol_open = False ;
uint32 status = 0x0 ;
/* get a (unique) handle. open a policy on it. */
if ( status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( group_pol ) ) )
{
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
DEBUG ( 0 , ( " TODO: verify that the group rid exists \n " ) ) ;
/* associate a RID with the (unique) handle. */
if ( status = = 0x0 & & ! set_lsa_policy_samr_rid ( group_pol , group_rid ) )
{
/* oh, whoops. don't know what error message to return, here */
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
sid_append_rid ( sid , group_rid ) ;
/* associate an group SID with the (unique) handle. */
if ( status = = 0x0 & & ! set_lsa_policy_samr_sid ( group_pol , sid ) )
{
/* oh, whoops. don't know what error message to return, here */
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
if ( status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( group_pol ) ;
}
return status ;
}
/*******************************************************************
samr_reply_create_dom_group
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_create_dom_group ( SAMR_Q_CREATE_DOM_GROUP * q_u ,
prs_struct * rdata )
{
SAMR_R_CREATE_DOM_GROUP r_u ;
DOM_SID dom_sid ;
DOMAIN_GRP grp ;
POLICY_HND group_pol ;
uint32 status = 0x0 ;
bzero ( & group_pol , sizeof ( group_pol ) ) ;
DEBUG ( 5 , ( " samr_create_dom_group: %d \n " , __LINE__ ) ) ;
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > pol ) ) = = - 1 ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
/* find the domain sid */
if ( status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > pol , & dom_sid ) )
{
status = 0xC0000000 | NT_STATUS_OBJECT_TYPE_MISMATCH ;
}
if ( ! sid_equal ( & dom_sid , & global_sam_sid ) )
{
status = 0xC0000000 | NT_STATUS_ACCESS_DENIED ;
}
if ( status = = 0x0 )
{
1999-02-15 08:33:30 +03:00
unistr2_to_ascii ( grp . name , & q_u - > uni_acct_desc , sizeof ( grp . name ) - 1 ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
fstrcpy ( grp . comment , " " ) ;
grp . rid = 0xffffffff ;
grp . attr = 0x07 ;
become_root ( True ) ;
1999-01-29 00:10:38 +03:00
status = add_group_entry ( & grp ) ? 0x0 : ( 0xC0000000 | NT_STATUS_ACCESS_DENIED ) ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
unbecome_root ( True ) ;
}
if ( status = = 0x0 )
{
status = open_samr_group ( & dom_sid , & group_pol , grp . rid ) ;
}
/* construct the response. */
make_samr_r_create_dom_group ( & r_u , & group_pol , grp . rid , status ) ;
/* store the response in the SMB stream */
samr_io_r_create_dom_group ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_create_dom_group: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_create_dom_group
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_create_dom_group ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{
SAMR_Q_CREATE_DOM_GROUP q_u ;
samr_io_q_create_dom_group ( " " , & q_u , data , 0 ) ;
samr_reply_create_dom_group ( & q_u , rdata ) ;
}
1998-10-22 01:11:16 +04:00
/*******************************************************************
1998-10-22 02:36:26 +04:00
samr_reply_query_dom_info
1998-10-22 01:11:16 +04:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-10-22 02:36:26 +04:00
static void samr_reply_query_dom_info ( SAMR_Q_QUERY_DOMAIN_INFO * q_u ,
1998-10-22 01:11:16 +04:00
prs_struct * rdata )
{
1998-10-22 02:36:26 +04:00
SAMR_R_QUERY_DOMAIN_INFO r_u ;
1998-10-22 01:11:16 +04:00
SAM_UNK_CTR ctr ;
uint16 switch_value = 0x0 ;
uint32 status = 0x0 ;
ZERO_STRUCT ( r_u ) ;
ZERO_STRUCT ( ctr ) ;
r_u . ctr = & ctr ;
1998-10-22 02:36:26 +04:00
DEBUG ( 5 , ( " samr_reply_query_dom_info: %d \n " , __LINE__ ) ) ;
1998-10-22 01:11:16 +04:00
/* find the policy handle. open a policy on it. */
if ( r_u . status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > domain_pol ) ) = = - 1 ) )
{
r_u . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
1998-10-22 02:36:26 +04:00
DEBUG ( 5 , ( " samr_reply_query_dom_info: invalid handle \n " ) ) ;
1998-10-22 01:11:16 +04:00
}
if ( status = = 0x0 )
{
switch ( q_u - > switch_value )
{
1999-03-29 21:24:46 +04:00
case 0x07 :
{
switch_value = 0x7 ;
make_unk_info7 ( & ctr . info . inf7 ) ;
break ;
}
1998-12-08 03:25:04 +03:00
case 0x06 :
{
switch_value = 0x6 ;
make_unk_info6 ( & ctr . info . inf6 ) ;
break ;
}
1999-03-29 21:24:46 +04:00
case 0x03 :
1998-12-08 03:25:04 +03:00
{
1999-03-29 21:24:46 +04:00
switch_value = 0x3 ;
make_unk_info3 ( & ctr . info . inf3 ) ;
1998-12-08 03:25:04 +03:00
break ;
}
1998-10-22 01:11:16 +04:00
case 0x02 :
{
switch_value = 0x2 ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
make_unk_info2 ( & ctr . info . inf2 , global_sam_name , global_myname ) ;
1998-10-22 01:11:16 +04:00
break ;
}
1999-03-25 16:54:31 +03:00
case 0x01 :
{
switch_value = 0x1 ;
make_unk_info1 ( & ctr . info . inf1 ) ;
break ;
}
1998-10-22 01:11:16 +04:00
default :
{
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
break ;
}
}
}
1998-10-22 02:36:26 +04:00
make_samr_r_query_dom_info ( & r_u , switch_value , & ctr , status ) ;
1998-10-22 01:11:16 +04:00
/* store the response in the SMB stream */
1998-10-22 02:36:26 +04:00
samr_io_r_query_dom_info ( " " , & r_u , rdata , 0 ) ;
1998-10-22 01:11:16 +04:00
1998-10-22 02:36:26 +04:00
DEBUG ( 5 , ( " samr_query_dom_info: %d \n " , __LINE__ ) ) ;
1998-10-22 01:11:16 +04:00
}
/*******************************************************************
1998-10-22 02:36:26 +04:00
api_samr_query_dom_info
1998-10-22 01:11:16 +04:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_query_dom_info ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-10-22 01:11:16 +04:00
{
1998-10-22 02:36:26 +04:00
SAMR_Q_QUERY_DOMAIN_INFO q_e ;
samr_io_q_query_dom_info ( " " , & q_e , data , 0 ) ;
samr_reply_query_dom_info ( & q_e , rdata ) ;
1998-10-22 01:11:16 +04:00
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
1999-03-25 16:54:31 +03:00
samr_reply_create_user
1998-03-12 00:11:04 +03:00
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-03-25 16:54:31 +03:00
static void samr_reply_create_user ( SAMR_Q_CREATE_USER * q_u ,
prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
1998-09-25 00:02:56 +04:00
struct sam_passwd * sam_pass ;
1999-03-25 16:54:31 +03:00
fstring user_name ;
1998-03-12 00:11:04 +03:00
1999-03-25 16:54:31 +03:00
SAMR_R_CREATE_USER r_u ;
POLICY_HND pol ;
uint32 status = 0x0 ;
uint32 user_rid = 0xffffffff ;
BOOL pol_open = False ;
1998-03-12 00:11:04 +03:00
/* find the machine account: tell the caller if it exists.
lkclXXXX i have * no * idea if this is a problem or not
or even if you are supposed to construct a different
reply if the account already exists . . .
*/
1999-03-25 16:54:31 +03:00
/* find the policy handle. open a policy on it. */
if ( status = = 0x0 & & ( find_lsa_policy_by_hnd ( & ( q_u - > domain_pol ) ) = = - 1 ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
1998-03-12 00:11:04 +03:00
1999-03-25 16:54:31 +03:00
/* get a (unique) handle. open a policy on it. */
if ( status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( & pol ) ) )
{
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
unistr2_to_ascii ( user_name , & q_u - > uni_name , sizeof ( user_name ) - 1 ) ;
sam_pass = getsam21pwntnam ( user_name ) ;
1998-03-12 00:11:04 +03:00
1998-09-25 00:02:56 +04:00
if ( sam_pass ! = NULL )
1998-03-12 00:11:04 +03:00
{
1999-03-25 16:54:31 +03:00
/* account exists: say so */
1998-03-12 00:11:04 +03:00
status = 0xC0000000 | NT_STATUS_USER_EXISTS ;
}
else
{
1999-03-25 16:54:31 +03:00
pstring err_str ;
pstring msg_str ;
if ( ! local_password_change ( user_name , True ,
1999-11-17 00:14:53 +03:00
q_u - > acb_info | ACB_DISABLED , 0xffff ,
1999-03-25 16:54:31 +03:00
NULL ,
err_str , sizeof ( err_str ) ,
msg_str , sizeof ( msg_str ) ) )
{
DEBUG ( 0 , ( " %s \n " , err_str ) ) ;
status = 0xC0000000 | NT_STATUS_ACCESS_DENIED ;
}
else
{
sam_pass = getsam21pwntnam ( user_name ) ;
if ( sam_pass = = NULL )
{
/* account doesn't exist: say so */
status = 0xC0000000 | NT_STATUS_ACCESS_DENIED ;
}
else
{
user_rid = sam_pass - > user_rid ;
}
}
}
/* associate the RID with the (unique) handle. */
if ( status = = 0x0 & & ! set_lsa_policy_samr_rid ( & pol , user_rid ) )
{
/* oh, whoops. don't know what error message to return, here */
status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
if ( status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( & pol ) ;
1998-03-12 00:11:04 +03:00
}
1999-03-25 16:54:31 +03:00
DEBUG ( 5 , ( " samr_create_user: %d \n " , __LINE__ ) ) ;
make_samr_r_create_user ( & r_u , & pol , 0x000703ff , user_rid , status ) ;
/* store the response in the SMB stream */
samr_io_r_create_user ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_create_user: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_create_user
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_create_user ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1999-03-25 16:54:31 +03:00
{
SAMR_Q_CREATE_USER q_u ;
/* grab the samr unknown 32 */
samr_io_q_create_user ( " " , & q_u , data , 0 ) ;
1998-03-12 00:11:04 +03:00
/* construct reply. */
1999-03-25 16:54:31 +03:00
samr_reply_create_user ( & q_u , rdata ) ;
1998-03-12 00:11:04 +03:00
}
1998-10-15 09:47:29 +04:00
/*******************************************************************
samr_reply_connect_anon
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_connect_anon ( SAMR_Q_CONNECT_ANON * q_u ,
prs_struct * rdata )
{
SAMR_R_CONNECT_ANON r_u ;
BOOL pol_open = False ;
/* set up the SAMR connect_anon response */
r_u . status = 0x0 ;
/* get a (unique) handle. open a policy on it. */
if ( r_u . status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( & ( r_u . connect_pol ) ) ) )
{
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
/* associate the domain SID with the (unique) handle. */
if ( r_u . status = = 0x0 & & ! set_lsa_policy_samr_pol_status ( & ( r_u . connect_pol ) , q_u - > unknown_0 ) )
{
/* oh, whoops. don't know what error message to return, here */
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
if ( r_u . status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( & ( r_u . connect_pol ) ) ;
}
DEBUG ( 5 , ( " samr_connect_anon: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_connect_anon ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_connect_anon: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_connect_anon
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_connect_anon ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-10-15 09:47:29 +04:00
{
SAMR_Q_CONNECT_ANON q_u ;
samr_io_q_connect_anon ( " " , & q_u , data , 0 ) ;
samr_reply_connect_anon ( & q_u , rdata ) ;
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
samr_reply_connect
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_connect ( SAMR_Q_CONNECT * q_u ,
prs_struct * rdata )
{
SAMR_R_CONNECT r_u ;
BOOL pol_open = False ;
/* set up the SAMR connect response */
r_u . status = 0x0 ;
/* get a (unique) handle. open a policy on it. */
if ( r_u . status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( & ( r_u . connect_pol ) ) ) )
{
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
/* associate the domain SID with the (unique) handle. */
if ( r_u . status = = 0x0 & & ! set_lsa_policy_samr_pol_status ( & ( r_u . connect_pol ) , q_u - > unknown_0 ) )
{
/* oh, whoops. don't know what error message to return, here */
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
if ( r_u . status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( & ( r_u . connect_pol ) ) ;
}
DEBUG ( 5 , ( " samr_connect: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_connect ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_connect: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_connect
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_connect ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_CONNECT q_u ;
samr_io_q_connect ( " " , & q_u , data , 0 ) ;
samr_reply_connect ( & q_u , rdata ) ;
}
/*******************************************************************
samr_reply_open_alias
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_open_alias ( SAMR_Q_OPEN_ALIAS * q_u ,
prs_struct * rdata )
{
SAMR_R_OPEN_ALIAS r_u ;
1998-12-01 22:10:44 +03:00
DOM_SID sid ;
1998-03-12 00:11:04 +03:00
BOOL pol_open = False ;
/* set up the SAMR open_alias response */
r_u . status = 0x0 ;
1998-12-02 01:18:48 +03:00
if ( r_u . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > dom_pol , & sid ) )
{
r_u . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
1998-03-12 00:11:04 +03:00
/* get a (unique) handle. open a policy on it. */
if ( r_u . status = = 0x0 & & ! ( pol_open = open_lsa_policy_hnd ( & ( r_u . pol ) ) ) )
{
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
1998-12-02 04:13:02 +03:00
DEBUG ( 0 , ( " TODO: verify that the alias rid exists \n " ) ) ;
1998-03-12 00:11:04 +03:00
/* associate a RID with the (unique) handle. */
if ( r_u . status = = 0x0 & & ! set_lsa_policy_samr_rid ( & ( r_u . pol ) , q_u - > rid_alias ) )
{
/* oh, whoops. don't know what error message to return, here */
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
1998-12-01 22:10:44 +03:00
sid_append_rid ( & sid , q_u - > rid_alias ) ;
/* associate an alias SID with the (unique) handle. */
if ( r_u . status = = 0x0 & & ! set_lsa_policy_samr_sid ( & ( r_u . pol ) , & sid ) )
{
/* oh, whoops. don't know what error message to return, here */
r_u . status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND ;
}
1998-03-12 00:11:04 +03:00
if ( r_u . status ! = 0 & & pol_open )
{
close_lsa_policy_hnd ( & ( r_u . pol ) ) ;
}
DEBUG ( 5 , ( " samr_open_alias: %d \n " , __LINE__ ) ) ;
/* store the response in the SMB stream */
samr_io_r_open_alias ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_open_alias: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_open_alias
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_open_alias ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-03-12 00:11:04 +03:00
{
SAMR_Q_OPEN_ALIAS q_u ;
samr_io_q_open_alias ( " " , & q_u , data , 0 ) ;
samr_reply_open_alias ( & q_u , rdata ) ;
}
1998-12-02 04:13:02 +03:00
/*******************************************************************
samr_reply_open_group
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_open_group ( SAMR_Q_OPEN_GROUP * q_u ,
prs_struct * rdata )
{
SAMR_R_OPEN_GROUP r_u ;
DOM_SID sid ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
DEBUG ( 5 , ( " samr_open_group: %d \n " , __LINE__ ) ) ;
1998-12-02 04:13:02 +03:00
r_u . status = 0x0 ;
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
/* find the domain sid associated with the policy handle */
1998-12-02 04:13:02 +03:00
if ( r_u . status = = 0x0 & & ! get_lsa_policy_samr_sid ( & q_u - > domain_pol , & sid ) )
{
r_u . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
if ( r_u . status = = 0x0 & & ! sid_equal ( & sid , & global_sam_sid ) )
1998-12-02 04:13:02 +03:00
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
r_u . status = 0xC0000000 | NT_STATUS_ACCESS_DENIED ;
1998-12-02 04:13:02 +03:00
}
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
if ( r_u . status = = 0x0 )
1998-12-02 04:13:02 +03:00
{
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
r_u . status = open_samr_group ( & sid , & r_u . pol , q_u - > rid_group ) ;
1998-12-02 04:13:02 +03:00
}
/* store the response in the SMB stream */
samr_io_r_open_group ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_open_group: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_open_group
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_open_group ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1998-12-02 04:13:02 +03:00
{
SAMR_Q_OPEN_GROUP q_u ;
samr_io_q_open_group ( " " , & q_u , data , 0 ) ;
samr_reply_open_group ( & q_u , rdata ) ;
}
1999-02-24 04:52:30 +03:00
/*******************************************************************
samr_reply_lookup_domain
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void samr_reply_lookup_domain ( SAMR_Q_LOOKUP_DOMAIN * q_u ,
prs_struct * rdata )
{
SAMR_R_LOOKUP_DOMAIN r_u ;
fstring domain ;
DEBUG ( 5 , ( " samr_lookup_domain: %d \n " , __LINE__ ) ) ;
r_u . ptr_sid = 0 ;
r_u . status = 0x0 ;
/* find the connection policy handle */
if ( find_lsa_policy_by_hnd ( & ( q_u - > connect_pol ) ) = = - 1 )
{
r_u . status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
if ( r_u . status = = 0x0 )
{
unistr2_to_ascii ( domain , & ( q_u - > uni_domain ) , sizeof ( domain ) ) ;
DEBUG ( 5 , ( " Lookup Domain: %s \n " , domain ) ) ;
/* check it's one of ours */
if ( strequal ( domain , global_sam_name ) )
{
make_dom_sid2 ( & ( r_u . dom_sid ) , & global_sam_sid ) ;
r_u . ptr_sid = 1 ;
}
else if ( strequal ( domain , " BUILTIN " ) )
{
make_dom_sid2 ( & ( r_u . dom_sid ) , & global_sid_S_1_5_20 ) ;
r_u . ptr_sid = 1 ;
}
else
{
r_u . status = 0xC0000000 | NT_STATUS_NO_SUCH_DOMAIN ;
}
}
/* store the response in the SMB stream */
samr_io_r_lookup_domain ( " " , & r_u , rdata , 0 ) ;
DEBUG ( 5 , ( " samr_lookup_domain: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
api_samr_lookup_domain
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1999-05-04 02:04:02 +04:00
static void api_samr_lookup_domain ( pipes_struct * p , prs_struct * data , prs_struct * rdata )
1999-02-24 04:52:30 +03:00
{
SAMR_Q_LOOKUP_DOMAIN q_u ;
samr_io_q_lookup_domain ( " " , & q_u , data , 0 ) ;
samr_reply_lookup_domain ( & q_u , rdata ) ;
}
1998-03-12 00:11:04 +03:00
/*******************************************************************
array of \ PIPE \ samr operations
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static struct api_struct api_samr_cmds [ ] =
{
{ " SAMR_CLOSE_HND " , SAMR_CLOSE_HND , api_samr_close_hnd } ,
{ " SAMR_CONNECT " , SAMR_CONNECT , api_samr_connect } ,
1998-10-15 09:47:29 +04:00
{ " SAMR_CONNECT_ANON " , SAMR_CONNECT_ANON , api_samr_connect_anon } ,
1999-11-16 02:46:27 +03:00
{ " SAMR_ENUM_DOMAINS " , SAMR_ENUM_DOMAINS , api_samr_enum_domains } ,
1998-03-12 00:11:04 +03:00
{ " SAMR_ENUM_DOM_USERS " , SAMR_ENUM_DOM_USERS , api_samr_enum_dom_users } ,
{ " SAMR_ENUM_DOM_GROUPS " , SAMR_ENUM_DOM_GROUPS , api_samr_enum_dom_groups } ,
{ " SAMR_ENUM_DOM_ALIASES " , SAMR_ENUM_DOM_ALIASES , api_samr_enum_dom_aliases } ,
1998-11-26 02:54:30 +03:00
{ " SAMR_QUERY_USERALIASES " , SAMR_QUERY_USERALIASES , api_samr_query_useraliases } ,
1998-12-01 22:10:44 +03:00
{ " SAMR_QUERY_ALIASMEM " , SAMR_QUERY_ALIASMEM , api_samr_query_aliasmem } ,
1998-12-03 01:05:56 +03:00
{ " SAMR_QUERY_GROUPMEM " , SAMR_QUERY_GROUPMEM , api_samr_query_groupmem } ,
1999-01-15 08:02:41 +03:00
{ " SAMR_ADD_ALIASMEM " , SAMR_ADD_ALIASMEM , api_samr_add_aliasmem } ,
{ " SAMR_DEL_ALIASMEM " , SAMR_DEL_ALIASMEM , api_samr_del_aliasmem } ,
{ " SAMR_ADD_GROUPMEM " , SAMR_ADD_GROUPMEM , api_samr_add_groupmem } ,
{ " SAMR_DEL_GROUPMEM " , SAMR_DEL_GROUPMEM , api_samr_del_groupmem } ,
- lib/unix_sec_ctxt.c
attempt at taking lib/uid.c and getting a unix security context
change module that is independent of "cnums" and "snums".
a security context is needed for pipes, not just IPC$ or other
services.
- group database API
added add_group/alias_member, del_group/alias_member,
del_group/alias_entry functions. del_builtin_entry() is
deliberately set to NULL to cause an exception, you cannot
delete builtin aliases.
- parse_lsa.c srv_lsa.c
fixed lookup_names code, it was a load of trash and didn't do
anything.
- cmd_samr.c rpcclient.c srv_samr.c
added "deletegroup", "deletealias", "delaliasmem", "delgroupmem",
"addgroupmem", "addaliasmem", "createalias", "creategroup", to
both client and server code.
server code calls into unix stubs right now, which don't actually
do anything. the only instance where they are expected to do
anything is in appliance mode NOT even in the ldap code or anything.
client code modified to call samr_lookup_names() for group code
(because we can) and lsa_lookup_names() for alias code (because
we have to).
- srv_lookup.c
oops, lookup on unsplit name, we got lookup on DOMAIN, DOMAIN\name
instead of DOMAIN, name.
(This used to be commit b8175702ef61b8b37b078f38e81452c00a5e2986)
1998-12-07 20:23:48 +03:00
{ " SAMR_DELETE_DOM_GROUP " , SAMR_DELETE_DOM_GROUP , api_samr_delete_dom_group } ,
{ " SAMR_DELETE_DOM_ALIAS " , SAMR_DELETE_DOM_ALIAS , api_samr_delete_dom_alias } ,
{ " SAMR_CREATE_DOM_GROUP " , SAMR_CREATE_DOM_GROUP , api_samr_create_dom_group } ,
{ " SAMR_CREATE_DOM_ALIAS " , SAMR_CREATE_DOM_ALIAS , api_samr_create_dom_alias } ,
1998-03-12 00:11:04 +03:00
{ " SAMR_LOOKUP_NAMES " , SAMR_LOOKUP_NAMES , api_samr_lookup_names } ,
{ " SAMR_OPEN_USER " , SAMR_OPEN_USER , api_samr_open_user } ,
{ " SAMR_QUERY_USERINFO " , SAMR_QUERY_USERINFO , api_samr_query_userinfo } ,
1999-03-25 16:54:31 +03:00
{ " SAMR_SET_USERINFO " , SAMR_SET_USERINFO , api_samr_set_userinfo } ,
1998-11-26 02:54:30 +03:00
{ " SAMR_QUERY_DOMAIN_INFO " , SAMR_QUERY_DOMAIN_INFO , api_samr_query_dom_info } ,
1998-03-12 00:11:04 +03:00
{ " SAMR_QUERY_USERGROUPS " , SAMR_QUERY_USERGROUPS , api_samr_query_usergroups } ,
{ " SAMR_QUERY_DISPINFO " , SAMR_QUERY_DISPINFO , api_samr_query_dispinfo } ,
1999-02-24 04:52:30 +03:00
{ " SAMR_QUERY_DISPINFO3 " , SAMR_QUERY_DISPINFO3 , api_samr_query_dispinfo } ,
{ " SAMR_QUERY_DISPINFO4 " , SAMR_QUERY_DISPINFO4 , api_samr_query_dispinfo } ,
1998-03-12 00:11:04 +03:00
{ " SAMR_QUERY_ALIASINFO " , SAMR_QUERY_ALIASINFO , api_samr_query_aliasinfo } ,
1998-12-02 04:13:02 +03:00
{ " SAMR_QUERY_GROUPINFO " , SAMR_QUERY_GROUPINFO , api_samr_query_groupinfo } ,
1999-03-25 16:54:31 +03:00
{ " SAMR_CREATE_USER " , SAMR_CREATE_USER , api_samr_create_user } ,
1998-12-04 19:30:00 +03:00
{ " SAMR_LOOKUP_RIDS " , SAMR_LOOKUP_RIDS , api_samr_lookup_rids } ,
1999-08-31 17:19:55 +04:00
{ " SAMR_GET_DOM_PWINFO " , SAMR_GET_DOM_PWINFO , api_samr_unknown_38 } ,
1998-10-17 03:40:59 +04:00
{ " SAMR_CHGPASSWD_USER " , SAMR_CHGPASSWD_USER , api_samr_chgpasswd_user } ,
1998-03-12 00:11:04 +03:00
{ " SAMR_OPEN_ALIAS " , SAMR_OPEN_ALIAS , api_samr_open_alias } ,
1998-12-02 04:13:02 +03:00
{ " SAMR_OPEN_GROUP " , SAMR_OPEN_GROUP , api_samr_open_group } ,
1998-03-12 00:11:04 +03:00
{ " SAMR_OPEN_DOMAIN " , SAMR_OPEN_DOMAIN , api_samr_open_domain } ,
1999-02-24 04:52:30 +03:00
{ " SAMR_LOOKUP_DOMAIN " , SAMR_LOOKUP_DOMAIN , api_samr_lookup_domain } ,
1999-08-31 17:19:55 +04:00
{ " SAMR_QUERY_SEC_OBJECT " , SAMR_QUERY_SEC_OBJECT , api_samr_unknown_3 } ,
{ " SAMR_GET_USRDOM_PWINFO " , SAMR_GET_USRDOM_PWINFO , api_samr_unknown_2c } ,
1998-10-02 22:45:07 +04:00
{ NULL , 0 , NULL }
1998-03-12 00:11:04 +03:00
} ;
/*******************************************************************
receives a samr pipe and responds .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
BOOL api_samr_rpc ( pipes_struct * p , prs_struct * data )
{
return api_rpcTNP ( p , " api_samr_rpc " , api_samr_cmds , data ) ;
}
