1998-03-12 00:11:04 +03:00
/*
* Unix SMB / Netbios implementation .
* Version 1.9 .
* RPC Pipe client / server routines
* Copyright ( C ) Andrew Tridgell 1992 - 1997 ,
* Copyright ( C ) Luke Kenneth Casson Leighton 1996 - 1997 ,
* Copyright ( C ) Paul Ashton 1997.
1998-05-14 05:30:40 +04:00
* Copyright ( C ) Jeremy Allison 1998.
*
1998-03-12 00:11:04 +03:00
* This program is free software ; you can redistribute it and / or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation ; either version 2 of the License , or
* ( at your option ) any later version .
*
* This program is distributed in the hope that it will be useful ,
* but WITHOUT ANY WARRANTY ; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE . See the
* GNU General Public License for more details .
*
* You should have received a copy of the GNU General Public License
* along with this program ; if not , write to the Free Software
* Foundation , Inc . , 675 Mass Ave , Cambridge , MA 0213 9 , USA .
*/
# include "includes.h"
# include "nterr.h"
extern int DEBUGLEVEL ;
1998-04-25 05:12:08 +04:00
extern pstring global_myname ;
1998-10-22 02:36:26 +04:00
extern DOM_SID global_sam_sid ;
1998-11-29 23:03:33 +03:00
extern fstring global_sam_name ;
1998-03-12 00:11:04 +03:00
/*************************************************************************
make_net_r_req_chal :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void make_net_r_req_chal ( NET_R_REQ_CHAL * r_c ,
DOM_CHAL * srv_chal , int status )
{
DEBUG ( 6 , ( " make_net_r_req_chal: %d \n " , __LINE__ ) ) ;
memcpy ( r_c - > srv_chal . data , srv_chal - > data , sizeof ( srv_chal - > data ) ) ;
r_c - > status = status ;
}
/*************************************************************************
net_reply_req_chal :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void net_reply_req_chal ( NET_Q_REQ_CHAL * q_c , prs_struct * rdata ,
DOM_CHAL * srv_chal , uint32 srv_time )
{
NET_R_REQ_CHAL r_c ;
DEBUG ( 6 , ( " net_reply_req_chal: %d \n " , __LINE__ ) ) ;
/* set up the LSA REQUEST CHALLENGE response */
make_net_r_req_chal ( & r_c , srv_chal , srv_time ) ;
/* store the response in the SMB stream */
net_io_r_req_chal ( " " , & r_c , rdata , 0 ) ;
DEBUG ( 6 , ( " net_reply_req_chal: %d \n " , __LINE__ ) ) ;
}
/*************************************************************************
net_reply_logon_ctrl2 :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void net_reply_logon_ctrl2 ( NET_Q_LOGON_CTRL2 * q_l , prs_struct * rdata ,
uint32 flags , uint32 pdc_status , uint32 logon_attempts ,
uint32 tc_status , char * trust_domain_name )
{
NET_R_LOGON_CTRL2 r_l ;
DEBUG ( 6 , ( " net_reply_logon_ctrl2: %d \n " , __LINE__ ) ) ;
/* set up the Logon Control2 response */
make_r_logon_ctrl2 ( & r_l , q_l - > query_level ,
flags , pdc_status , logon_attempts ,
tc_status , trust_domain_name ) ;
/* store the response in the SMB stream */
net_io_r_logon_ctrl2 ( " " , & r_l , rdata , 0 ) ;
DEBUG ( 6 , ( " net_reply_logon_ctrl2: %d \n " , __LINE__ ) ) ;
}
/*************************************************************************
net_reply_trust_dom_list :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void net_reply_trust_dom_list ( NET_Q_TRUST_DOM_LIST * q_t , prs_struct * rdata ,
uint32 num_trust_domains , char * trust_domain_name )
{
NET_R_TRUST_DOM_LIST r_t ;
DEBUG ( 6 , ( " net_reply_trust_dom_list: %d \n " , __LINE__ ) ) ;
/* set up the Trusted Domain List response */
make_r_trust_dom ( & r_t , num_trust_domains , trust_domain_name ) ;
/* store the response in the SMB stream */
net_io_r_trust_dom ( " " , & r_t , rdata , 0 ) ;
DEBUG ( 6 , ( " net_reply_trust_dom_listlogon_ctrl2: %d \n " , __LINE__ ) ) ;
}
/*************************************************************************
make_net_r_auth_2 :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void make_net_r_auth_2 ( NET_R_AUTH_2 * r_a ,
DOM_CHAL * resp_cred , NEG_FLAGS * flgs , int status )
{
memcpy ( r_a - > srv_chal . data , resp_cred - > data , sizeof ( resp_cred - > data ) ) ;
memcpy ( & ( r_a - > srv_flgs ) , flgs , sizeof ( r_a - > srv_flgs ) ) ;
r_a - > status = status ;
}
/*************************************************************************
net_reply_auth_2 :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void net_reply_auth_2 ( NET_Q_AUTH_2 * q_a , prs_struct * rdata ,
DOM_CHAL * resp_cred , int status )
{
NET_R_AUTH_2 r_a ;
1998-10-23 21:22:21 +04:00
NEG_FLAGS srv_flgs ;
srv_flgs . neg_flags = 0x000001ff ;
1998-03-12 00:11:04 +03:00
/* set up the LSA AUTH 2 response */
1998-10-23 21:22:21 +04:00
make_net_r_auth_2 ( & r_a , resp_cred , & srv_flgs , status ) ;
1998-03-12 00:11:04 +03:00
/* store the response in the SMB stream */
net_io_r_auth_2 ( " " , & r_a , rdata , 0 ) ;
}
/***********************************************************************************
make_net_r_srv_pwset :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void make_net_r_srv_pwset ( NET_R_SRV_PWSET * r_s ,
DOM_CRED * srv_cred , int status )
{
DEBUG ( 5 , ( " make_net_r_srv_pwset: %d \n " , __LINE__ ) ) ;
memcpy ( & ( r_s - > srv_cred ) , srv_cred , sizeof ( r_s - > srv_cred ) ) ;
r_s - > status = status ;
DEBUG ( 5 , ( " make_net_r_srv_pwset: %d \n " , __LINE__ ) ) ;
}
/*************************************************************************
net_reply_srv_pwset :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void net_reply_srv_pwset ( NET_Q_SRV_PWSET * q_s , prs_struct * rdata ,
DOM_CRED * srv_cred , int status )
{
NET_R_SRV_PWSET r_s ;
DEBUG ( 5 , ( " net_srv_pwset: %d \n " , __LINE__ ) ) ;
/* set up the LSA Server Password Set response */
make_net_r_srv_pwset ( & r_s , srv_cred , status ) ;
/* store the response in the SMB stream */
net_io_r_srv_pwset ( " " , & r_s , rdata , 0 ) ;
DEBUG ( 5 , ( " net_srv_pwset: %d \n " , __LINE__ ) ) ;
}
/*************************************************************************
net_reply_sam_logon :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void net_reply_sam_logon ( NET_Q_SAM_LOGON * q_s , prs_struct * rdata ,
DOM_CRED * srv_cred , NET_USER_INFO_3 * user_info ,
uint32 status )
{
NET_R_SAM_LOGON r_s ;
/* XXXX maybe we want to say 'no', reject the client's credentials */
r_s . buffer_creds = 1 ; /* yes, we have valid server credentials */
memcpy ( & ( r_s . srv_creds ) , srv_cred , sizeof ( r_s . srv_creds ) ) ;
/* store the user information, if there is any. */
r_s . user = user_info ;
if ( status = = 0x0 & & user_info ! = NULL & & user_info - > ptr_user_info ! = 0 )
{
r_s . switch_value = 3 ; /* indicates type of validation user info */
}
else
{
r_s . switch_value = 0 ; /* indicates no info */
}
r_s . status = status ;
r_s . auth_resp = 1 ; /* authoritative response */
/* store the response in the SMB stream */
net_io_r_sam_logon ( " " , & r_s , rdata , 0 ) ;
}
/*************************************************************************
net_reply_sam_logoff :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static void net_reply_sam_logoff ( NET_Q_SAM_LOGOFF * q_s , prs_struct * rdata ,
DOM_CRED * srv_cred ,
uint32 status )
{
NET_R_SAM_LOGOFF r_s ;
/* XXXX maybe we want to say 'no', reject the client's credentials */
r_s . buffer_creds = 1 ; /* yes, we have valid server credentials */
memcpy ( & ( r_s . srv_creds ) , srv_cred , sizeof ( r_s . srv_creds ) ) ;
r_s . status = status ;
/* store the response in the SMB stream */
net_io_r_sam_logoff ( " " , & r_s , rdata , 0 ) ;
}
/******************************************************************
gets a machine password entry . checks access rights of the host .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static BOOL get_md4pw ( char * md4pw , char * mach_name , char * mach_acct )
{
1998-03-17 15:31:43 +03:00
struct smb_passwd * smb_pass ;
1998-06-06 00:46:05 +04:00
#if 0
/*
* Currently this code is redundent as we already have a filter
* by hostname list . What this code really needs to do is to
* get a hosts allowed / hosts denied list from the SAM database
* on a per user basis , and make the access decision there .
* I will leave this code here for now as a reminder to implement
* this at a later date . JRA .
*/
1998-03-12 00:11:04 +03:00
if ( ! allow_access ( lp_domain_hostsdeny ( ) , lp_domain_hostsallow ( ) ,
1998-03-17 15:31:43 +03:00
client_name ( Client ) , client_addr ( Client ) ) )
1998-03-12 00:11:04 +03:00
{
DEBUG ( 0 , ( " get_md4pw: Workstation %s denied access to domain \n " , mach_acct ) ) ;
return False ;
}
1998-06-06 00:46:05 +04:00
# endif /* 0 */
1998-03-12 00:11:04 +03:00
become_root ( True ) ;
1998-05-19 01:30:57 +04:00
smb_pass = getsmbpwnam ( mach_acct ) ;
1998-03-12 00:11:04 +03:00
unbecome_root ( True ) ;
1998-06-30 02:50:49 +04:00
if ( ( smb_pass ) ! = NULL & & ! ( smb_pass - > acct_ctrl & ACB_DISABLED ) & &
( smb_pass - > smb_nt_passwd ! = NULL ) )
1998-03-12 00:11:04 +03:00
{
memcpy ( md4pw , smb_pass - > smb_nt_passwd , 16 ) ;
dump_data ( 5 , md4pw , 16 ) ;
return True ;
}
DEBUG ( 0 , ( " get_md4pw: Workstation %s: no account in domain \n " , mach_acct ) ) ;
return False ;
}
/*************************************************************************
api_net_req_chal :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-09-30 00:24:17 +04:00
static void api_net_req_chal ( uint16 vuid ,
1998-03-12 00:11:04 +03:00
prs_struct * data ,
prs_struct * rdata )
{
NET_Q_REQ_CHAL q_r ;
uint32 status = 0x0 ;
fstring mach_acct ;
fstring mach_name ;
user_struct * vuser ;
1998-09-30 00:24:17 +04:00
DEBUG ( 5 , ( " api_net_req_chal(%d): vuid %d \n " , __LINE__ , ( int ) vuid ) ) ;
1998-03-12 00:11:04 +03:00
1998-09-30 00:24:17 +04:00
if ( ( vuser = get_valid_user_struct ( vuid ) ) = = NULL )
return ;
1998-03-12 00:11:04 +03:00
/* grab the challenge... */
net_io_q_req_chal ( " " , & q_r , data , 0 ) ;
fstrcpy ( mach_acct , unistrn2 ( q_r . uni_logon_clnt . buffer ,
q_r . uni_logon_clnt . uni_str_len ) ) ;
fstrcpy ( mach_name , mach_acct ) ;
strlower ( mach_name ) ;
1998-05-12 04:55:32 +04:00
fstrcat ( mach_acct , " $ " ) ;
1998-03-12 00:11:04 +03:00
1998-05-11 10:38:36 +04:00
if ( get_md4pw ( ( char * ) vuser - > dc . md4pw , mach_name , mach_acct ) )
1998-03-12 00:11:04 +03:00
{
/* copy the client credentials */
memcpy ( vuser - > dc . clnt_chal . data , q_r . clnt_chal . data , sizeof ( q_r . clnt_chal . data ) ) ;
memcpy ( vuser - > dc . clnt_cred . challenge . data , q_r . clnt_chal . data , sizeof ( q_r . clnt_chal . data ) ) ;
/* create a server challenge for the client */
1998-04-21 03:57:29 +04:00
/* Set these to random values. */
generate_random_buffer ( vuser - > dc . srv_chal . data , 8 , False ) ;
1998-03-12 00:11:04 +03:00
memcpy ( vuser - > dc . srv_cred . challenge . data , vuser - > dc . srv_chal . data , 8 ) ;
bzero ( vuser - > dc . sess_key , sizeof ( vuser - > dc . sess_key ) ) ;
/* from client / server challenges and md4 password, generate sess key */
cred_session_key ( & ( vuser - > dc . clnt_chal ) , & ( vuser - > dc . srv_chal ) ,
1998-05-11 10:38:36 +04:00
( char * ) vuser - > dc . md4pw , vuser - > dc . sess_key ) ;
1998-03-12 00:11:04 +03:00
}
else
{
/* lkclXXXX take a guess at a good error message to return :-) */
status = 0xC0000000 | NT_STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT ;
}
/* construct reply. */
net_reply_req_chal ( & q_r , rdata ,
& ( vuser - > dc . srv_chal ) , status ) ;
}
/*************************************************************************
api_net_auth_2 :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-09-30 00:24:17 +04:00
static void api_net_auth_2 ( uint16 vuid ,
1998-03-12 00:11:04 +03:00
prs_struct * data ,
prs_struct * rdata )
{
NET_Q_AUTH_2 q_a ;
uint32 status = 0x0 ;
DOM_CHAL srv_cred ;
UTIME srv_time ;
user_struct * vuser ;
1998-09-30 00:24:17 +04:00
if ( ( vuser = get_valid_user_struct ( vuid ) ) = = NULL )
return ;
1998-03-12 00:11:04 +03:00
srv_time . time = 0 ;
/* grab the challenge... */
net_io_q_auth_2 ( " " , & q_a , data , 0 ) ;
/* check that the client credentials are valid */
if ( cred_assert ( & ( q_a . clnt_chal ) , vuser - > dc . sess_key ,
& ( vuser - > dc . clnt_cred . challenge ) , srv_time ) )
{
/* create server challenge for inclusion in the reply */
cred_create ( vuser - > dc . sess_key , & ( vuser - > dc . srv_cred . challenge ) , srv_time , & srv_cred ) ;
/* copy the received client credentials for use next time */
1998-05-24 17:36:43 +04:00
memcpy ( vuser - > dc . clnt_cred . challenge . data , q_a . clnt_chal . data , sizeof ( q_a . clnt_chal . data ) ) ;
memcpy ( vuser - > dc . srv_cred . challenge . data , q_a . clnt_chal . data , sizeof ( q_a . clnt_chal . data ) ) ;
1998-03-12 00:11:04 +03:00
}
else
{
status = NT_STATUS_ACCESS_DENIED | 0xC0000000 ;
}
/* construct reply. */
net_reply_auth_2 ( & q_a , rdata , & srv_cred , status ) ;
}
/*************************************************************************
api_net_srv_pwset :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-09-30 00:24:17 +04:00
static void api_net_srv_pwset ( uint16 vuid ,
1998-03-12 00:11:04 +03:00
prs_struct * data ,
prs_struct * rdata )
{
NET_Q_SRV_PWSET q_a ;
uint32 status = NT_STATUS_WRONG_PASSWORD | 0xC0000000 ;
DOM_CRED srv_cred ;
1998-04-01 23:12:35 +04:00
pstring mach_acct ;
1998-03-12 00:11:04 +03:00
struct smb_passwd * smb_pass ;
BOOL ret ;
user_struct * vuser ;
1998-09-30 00:24:17 +04:00
if ( ( vuser = get_valid_user_struct ( vuid ) ) = = NULL )
return ;
1998-03-12 00:11:04 +03:00
/* grab the challenge and encrypted password ... */
net_io_q_srv_pwset ( " " , & q_a , data , 0 ) ;
/* checks and updates credentials. creates reply credentials */
if ( deal_with_creds ( vuser - > dc . sess_key , & ( vuser - > dc . clnt_cred ) ,
1998-05-07 22:19:05 +04:00
& ( q_a . clnt_id . cred ) , & srv_cred ) )
1998-03-12 00:11:04 +03:00
{
memcpy ( & ( vuser - > dc . srv_cred ) , & ( vuser - > dc . clnt_cred ) , sizeof ( vuser - > dc . clnt_cred ) ) ;
DEBUG ( 5 , ( " api_net_srv_pwset: %d \n " , __LINE__ ) ) ;
1998-05-07 22:19:05 +04:00
pstrcpy ( mach_acct , unistrn2 ( q_a . clnt_id . login . uni_acct_name . buffer ,
q_a . clnt_id . login . uni_acct_name . uni_str_len ) ) ;
1998-03-12 00:11:04 +03:00
1998-05-07 22:19:05 +04:00
DEBUG ( 3 , ( " Server Password Set Wksta:[%s] \n " , mach_acct ) ) ;
1998-03-12 00:11:04 +03:00
1998-05-07 22:19:05 +04:00
become_root ( True ) ;
1998-05-19 01:30:57 +04:00
smb_pass = getsmbpwnam ( mach_acct ) ;
1998-05-07 22:19:05 +04:00
unbecome_root ( True ) ;
1998-03-12 00:11:04 +03:00
if ( smb_pass ! = NULL )
{
1998-05-07 22:19:05 +04:00
unsigned char pwd [ 16 ] ;
int i ;
1998-04-17 23:29:51 +04:00
1998-05-07 22:19:05 +04:00
DEBUG ( 100 , ( " Server password set : new given value was : \n " ) ) ;
for ( i = 0 ; i < 16 ; i + + )
{
DEBUG ( 100 , ( " %02X " , q_a . pwd [ i ] ) ) ;
}
DEBUG ( 100 , ( " \n " ) ) ;
1998-04-17 23:29:51 +04:00
1998-05-07 22:19:05 +04:00
cred_hash3 ( pwd , q_a . pwd , vuser - > dc . sess_key , 0 ) ;
1998-04-17 23:29:51 +04:00
1998-05-07 22:19:05 +04:00
/* lies! nt and lm passwords are _not_ the same: don't care */
smb_pass - > smb_passwd = pwd ;
smb_pass - > smb_nt_passwd = pwd ;
smb_pass - > acct_ctrl = ACB_WSTRUST ;
1998-04-17 23:29:51 +04:00
1998-05-07 22:19:05 +04:00
become_root ( True ) ;
1998-05-19 01:30:57 +04:00
ret = mod_smbpwd_entry ( smb_pass , False ) ;
1998-05-07 22:19:05 +04:00
unbecome_root ( True ) ;
1998-04-17 23:29:51 +04:00
1998-05-07 22:19:05 +04:00
if ( ret )
{
/* hooray! */
status = 0x0 ;
}
}
1998-03-12 00:11:04 +03:00
DEBUG ( 5 , ( " api_net_srv_pwset: %d \n " , __LINE__ ) ) ;
}
else
{
/* lkclXXXX take a guess at a sensible error code to return... */
status = 0xC0000000 | NT_STATUS_NETWORK_CREDENTIAL_CONFLICT ;
}
1998-04-17 23:29:51 +04:00
/* Construct reply. */
net_reply_srv_pwset ( & q_a , rdata , & srv_cred , status ) ;
1998-03-12 00:11:04 +03:00
}
/*************************************************************************
api_net_sam_logoff :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-09-30 00:24:17 +04:00
static void api_net_sam_logoff ( uint16 vuid ,
1998-03-12 00:11:04 +03:00
prs_struct * data ,
prs_struct * rdata )
{
NET_Q_SAM_LOGOFF q_l ;
NET_ID_INFO_CTR ctr ;
DOM_CRED srv_cred ;
user_struct * vuser ;
1998-09-30 00:24:17 +04:00
if ( ( vuser = get_valid_user_struct ( vuid ) ) = = NULL )
return ;
1998-03-12 00:11:04 +03:00
/* the DOM_ID_INFO_1 structure is a bit big. plus we might want to
dynamically allocate it inside net_io_q_sam_logon , at some point */
q_l . sam_id . ctr = & ctr ;
/* grab the challenge... */
net_io_q_sam_logoff ( " " , & q_l , data , 0 ) ;
/* checks and updates credentials. creates reply credentials */
deal_with_creds ( vuser - > dc . sess_key , & ( vuser - > dc . clnt_cred ) ,
& ( q_l . sam_id . client . cred ) , & srv_cred ) ;
memcpy ( & ( vuser - > dc . srv_cred ) , & ( vuser - > dc . clnt_cred ) , sizeof ( vuser - > dc . clnt_cred ) ) ;
/* construct reply. always indicate success */
net_reply_sam_logoff ( & q_l , rdata ,
& srv_cred ,
0x0 ) ;
}
/*************************************************************************
net_login_interactive :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static uint32 net_login_interactive ( NET_ID_INFO_1 * id1 ,
1998-11-29 23:03:33 +03:00
struct sam_passwd * smb_pass ,
1998-03-12 00:11:04 +03:00
user_struct * vuser )
{
uint32 status = 0x0 ;
char nt_pwd [ 16 ] ;
char lm_pwd [ 16 ] ;
1998-03-24 03:37:53 +03:00
unsigned char key [ 16 ] ;
cli_login.c :
start to create the calls needed for client-side of "network" logins,
which will be used for domain version of pass-through authentication.
unfortunately, none of this code is called in the main branch, because
smbclient BRANCH_NTDOM code isn't in use, yet!
srv_netlog.c :
fixed a problem with static net_login_network() which was being
stubborn: the if() statement looked horrendous, so i split it into
two if() statements, one to deal with the lm password; the other to
deal with the nt password.
the smb_password_check() functions should _not_ be called here, in
case we decide to disable lm hashes for security reasons, just like
nt does.
so, we now get a response to the SAM_LOGON "network" call, but the
connection is still dropped. a trace is needed from an nt server,
which is why i started on the client-side code. see above, which
is why i'm calling it a day :-)
(This used to be commit 2c29a7d9cf2d8b35e4b6e37e5d24caa91af3a9be)
1998-04-02 01:31:06 +04:00
1998-03-24 03:37:53 +03:00
memset ( key , 0 , 16 ) ;
memcpy ( key , vuser - > dc . sess_key , 8 ) ;
1998-03-12 00:11:04 +03:00
cli_login.c :
start to create the calls needed for client-side of "network" logins,
which will be used for domain version of pass-through authentication.
unfortunately, none of this code is called in the main branch, because
smbclient BRANCH_NTDOM code isn't in use, yet!
srv_netlog.c :
fixed a problem with static net_login_network() which was being
stubborn: the if() statement looked horrendous, so i split it into
two if() statements, one to deal with the lm password; the other to
deal with the nt password.
the smb_password_check() functions should _not_ be called here, in
case we decide to disable lm hashes for security reasons, just like
nt does.
so, we now get a response to the SAM_LOGON "network" call, but the
connection is still dropped. a trace is needed from an nt server,
which is why i started on the client-side code. see above, which
is why i'm calling it a day :-)
(This used to be commit 2c29a7d9cf2d8b35e4b6e37e5d24caa91af3a9be)
1998-04-02 01:31:06 +04:00
memcpy ( lm_pwd , id1 - > lm_owf . data , 16 ) ;
memcpy ( nt_pwd , id1 - > nt_owf . data , 16 ) ;
1998-10-16 04:59:22 +04:00
# ifdef DEBUG_PASSWORD
DEBUG ( 100 , ( " key: " ) ) ;
dump_data ( 100 , key , 16 ) ;
DEBUG ( 100 , ( " lm owf password: " ) ) ;
dump_data ( 100 , lm_pwd , 16 ) ;
DEBUG ( 100 , ( " nt owf password: " ) ) ;
dump_data ( 100 , nt_pwd , 16 ) ;
# endif
1998-05-11 10:38:36 +04:00
SamOEMhash ( ( uchar * ) lm_pwd , key , False ) ;
SamOEMhash ( ( uchar * ) nt_pwd , key , False ) ;
1998-03-12 00:11:04 +03:00
# ifdef DEBUG_PASSWORD
1998-03-24 03:37:53 +03:00
DEBUG ( 100 , ( " decrypt of lm owf password: " ) ) ;
1998-03-12 00:11:04 +03:00
dump_data ( 100 , lm_pwd , 16 ) ;
1998-03-24 03:37:53 +03:00
DEBUG ( 100 , ( " decrypt of nt owf password: " ) ) ;
1998-03-12 00:11:04 +03:00
dump_data ( 100 , nt_pwd , 16 ) ;
# endif
if ( memcmp ( smb_pass - > smb_passwd , lm_pwd , 16 ) ! = 0 & &
1998-10-16 04:59:22 +04:00
memcmp ( smb_pass - > smb_nt_passwd , nt_pwd , 16 ) ! = 0 )
1998-03-12 00:11:04 +03:00
{
status = 0xC0000000 | NT_STATUS_WRONG_PASSWORD ;
}
return status ;
}
/*************************************************************************
net_login_network :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static uint32 net_login_network ( NET_ID_INFO_2 * id2 ,
1998-11-29 23:03:33 +03:00
struct sam_passwd * smb_pass ,
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
user_struct * vuser )
1998-03-12 00:11:04 +03:00
{
cli_login.c :
start to create the calls needed for client-side of "network" logins,
which will be used for domain version of pass-through authentication.
unfortunately, none of this code is called in the main branch, because
smbclient BRANCH_NTDOM code isn't in use, yet!
srv_netlog.c :
fixed a problem with static net_login_network() which was being
stubborn: the if() statement looked horrendous, so i split it into
two if() statements, one to deal with the lm password; the other to
deal with the nt password.
the smb_password_check() functions should _not_ be called here, in
case we decide to disable lm hashes for security reasons, just like
nt does.
so, we now get a response to the SAM_LOGON "network" call, but the
connection is still dropped. a trace is needed from an nt server,
which is why i started on the client-side code. see above, which
is why i'm calling it a day :-)
(This used to be commit 2c29a7d9cf2d8b35e4b6e37e5d24caa91af3a9be)
1998-04-02 01:31:06 +04:00
DEBUG ( 5 , ( " net_login_network: lm_len: %d nt_len: %d \n " ,
1998-04-29 04:02:57 +04:00
id2 - > hdr_lm_chal_resp . str_str_len ,
id2 - > hdr_nt_chal_resp . str_str_len ) ) ;
cli_login.c :
start to create the calls needed for client-side of "network" logins,
which will be used for domain version of pass-through authentication.
unfortunately, none of this code is called in the main branch, because
smbclient BRANCH_NTDOM code isn't in use, yet!
srv_netlog.c :
fixed a problem with static net_login_network() which was being
stubborn: the if() statement looked horrendous, so i split it into
two if() statements, one to deal with the lm password; the other to
deal with the nt password.
the smb_password_check() functions should _not_ be called here, in
case we decide to disable lm hashes for security reasons, just like
nt does.
so, we now get a response to the SAM_LOGON "network" call, but the
connection is still dropped. a trace is needed from an nt server,
which is why i started on the client-side code. see above, which
is why i'm calling it a day :-)
(This used to be commit 2c29a7d9cf2d8b35e4b6e37e5d24caa91af3a9be)
1998-04-02 01:31:06 +04:00
1998-04-02 05:07:53 +04:00
/* JRA. Check the NT password first if it exists - this is a higher quality
password , if it exists and it doesn ' t match - fail . */
1998-04-29 04:02:57 +04:00
if ( id2 - > hdr_nt_chal_resp . str_str_len = = 24 & &
1998-04-02 05:07:53 +04:00
smb_pass - > smb_nt_passwd ! = NULL )
{
1998-05-11 10:38:36 +04:00
if ( smb_password_check ( ( char * ) id2 - > nt_chal_resp . buffer ,
1998-04-02 05:07:53 +04:00
smb_pass - > smb_nt_passwd ,
id2 - > lm_chal ) )
return 0x0 ;
else
return 0xC0000000 | NT_STATUS_WRONG_PASSWORD ;
}
cli_login.c :
start to create the calls needed for client-side of "network" logins,
which will be used for domain version of pass-through authentication.
unfortunately, none of this code is called in the main branch, because
smbclient BRANCH_NTDOM code isn't in use, yet!
srv_netlog.c :
fixed a problem with static net_login_network() which was being
stubborn: the if() statement looked horrendous, so i split it into
two if() statements, one to deal with the lm password; the other to
deal with the nt password.
the smb_password_check() functions should _not_ be called here, in
case we decide to disable lm hashes for security reasons, just like
nt does.
so, we now get a response to the SAM_LOGON "network" call, but the
connection is still dropped. a trace is needed from an nt server,
which is why i started on the client-side code. see above, which
is why i'm calling it a day :-)
(This used to be commit 2c29a7d9cf2d8b35e4b6e37e5d24caa91af3a9be)
1998-04-02 01:31:06 +04:00
/* lkclXXXX this is not a good place to put disabling of LM hashes in.
if that is to be done , first move this entire function into a
library routine that calls the two smb_password_check ( ) functions .
if disabling LM hashes ( which nt can do for security reasons ) then
an attempt should be made to disable them everywhere ( which nt does
not do , for various security - hole reasons ) .
*/
1998-04-29 04:02:57 +04:00
if ( id2 - > hdr_lm_chal_resp . str_str_len = = 24 & &
1998-05-11 10:38:36 +04:00
smb_password_check ( ( char * ) id2 - > lm_chal_resp . buffer ,
cli_login.c :
start to create the calls needed for client-side of "network" logins,
which will be used for domain version of pass-through authentication.
unfortunately, none of this code is called in the main branch, because
smbclient BRANCH_NTDOM code isn't in use, yet!
srv_netlog.c :
fixed a problem with static net_login_network() which was being
stubborn: the if() statement looked horrendous, so i split it into
two if() statements, one to deal with the lm password; the other to
deal with the nt password.
the smb_password_check() functions should _not_ be called here, in
case we decide to disable lm hashes for security reasons, just like
nt does.
so, we now get a response to the SAM_LOGON "network" call, but the
connection is still dropped. a trace is needed from an nt server,
which is why i started on the client-side code. see above, which
is why i'm calling it a day :-)
(This used to be commit 2c29a7d9cf2d8b35e4b6e37e5d24caa91af3a9be)
1998-04-02 01:31:06 +04:00
smb_pass - > smb_passwd ,
id2 - > lm_chal ) )
{
return 0x0 ;
}
/* oops! neither password check succeeded */
1998-03-12 00:11:04 +03:00
return 0xC0000000 | NT_STATUS_WRONG_PASSWORD ;
}
/*************************************************************************
api_net_sam_logon :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-09-30 00:24:17 +04:00
static void api_net_sam_logon ( uint16 vuid ,
1998-03-12 00:11:04 +03:00
prs_struct * data ,
prs_struct * rdata )
{
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
NET_Q_SAM_LOGON q_l ;
NET_ID_INFO_CTR ctr ;
NET_USER_INFO_3 usr_info ;
uint32 status = 0x0 ;
DOM_CRED srv_cred ;
1998-11-29 23:03:33 +03:00
struct sam_passwd * sam_pass = NULL ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
UNISTR2 * uni_samlogon_user = NULL ;
1998-12-01 01:42:13 +03:00
UNISTR2 * uni_domain = NULL ;
1998-11-26 02:11:25 +03:00
fstring nt_username ;
1998-05-14 05:30:40 +04:00
1998-12-01 01:42:13 +03:00
NTTIME logon_time ;
NTTIME logoff_time ;
NTTIME kickoff_time ;
NTTIME pass_last_set_time ;
NTTIME pass_can_change_time ;
NTTIME pass_must_change_time ;
fstring full_name ;
fstring logon_script ;
fstring profile_path ;
fstring home_dir ;
fstring dir_drive ;
uint32 user_rid ;
uint32 group_rid ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
user_struct * vuser = NULL ;
1998-06-10 23:45:13 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( ( vuser = get_valid_user_struct ( vuid ) ) = = NULL )
return ;
1998-05-14 05:30:40 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
q_l . sam_id . ctr = & ctr ;
1998-05-14 05:30:40 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
net_io_q_sam_logon ( " " , & q_l , data , 0 ) ;
1998-05-14 05:30:40 +04:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
/* checks and updates credentials. creates reply credentials */
if ( ! deal_with_creds ( vuser - > dc . sess_key , & ( vuser - > dc . clnt_cred ) ,
& ( q_l . sam_id . client . cred ) , & srv_cred ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_HANDLE ;
}
else
{
memcpy ( & ( vuser - > dc . srv_cred ) , & ( vuser - > dc . clnt_cred ) , sizeof ( vuser - > dc . clnt_cred ) ) ;
}
/* find the username */
if ( status = = 0 )
{
switch ( q_l . sam_id . logon_level )
{
case INTERACTIVE_LOGON_TYPE :
{
uni_samlogon_user = & ( q_l . sam_id . ctr - > auth . id1 . uni_user_name ) ;
1998-12-01 01:42:13 +03:00
uni_domain = & ( q_l . sam_id . ctr - > auth . id1 . uni_domain_name ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
1998-11-29 23:03:33 +03:00
DEBUG ( 3 , ( " SAM Logon (Interactive). Domain:[%s]. " , global_sam_name ) ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
break ;
}
case NET_LOGON_TYPE :
{
uni_samlogon_user = & ( q_l . sam_id . ctr - > auth . id2 . uni_user_name ) ;
1998-12-01 01:42:13 +03:00
uni_domain = & ( q_l . sam_id . ctr - > auth . id2 . uni_domain_name ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
1998-11-29 23:03:33 +03:00
DEBUG ( 3 , ( " SAM Logon (Network). Domain:[%s]. " , global_sam_name ) ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
break ;
}
default :
{
DEBUG ( 2 , ( " SAM Logon: unsupported switch value \n " ) ) ;
status = 0xC0000000 | NT_STATUS_INVALID_INFO_CLASS ;
break ;
}
} /* end switch */
} /* end if status == 0 */
/* check username exists */
if ( status = = 0 )
{
1998-12-01 01:42:13 +03:00
fstrcpy ( nt_username , unistr2_to_str ( uni_samlogon_user ) ) ;
#if 0
slprintf ( nt_username , sizeof ( nt_username ) , " %s \\ %s " ,
unistr2_to_str ( uni_domain ) ,
unistr2_to_str ( uni_samlogon_user ) ) ;
# endif
1998-11-26 02:11:25 +03:00
DEBUG ( 3 , ( " User:[%s] \n " , nt_username ) ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
become_root ( True ) ;
1998-11-29 23:03:33 +03:00
sam_pass = getsam21pwntnam ( nt_username ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
unbecome_root ( True ) ;
1998-11-29 23:03:33 +03:00
if ( sam_pass = = NULL )
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
{
status = 0xC0000000 | NT_STATUS_NO_SUCH_USER ;
}
1998-11-29 23:03:33 +03:00
else if ( IS_BITS_SET_ALL ( sam_pass - > acct_ctrl , ACB_DISABLED ) & &
IS_BITS_CLR_ALL ( sam_pass - > acct_ctrl , ACB_PWNOTREQ ) )
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
{
status = 0xC0000000 | NT_STATUS_ACCOUNT_DISABLED ;
}
}
1998-12-01 01:42:13 +03:00
if ( status = = 0x0 )
{
logon_time = sam_pass - > logon_time ;
logoff_time = sam_pass - > logoff_time ;
kickoff_time = sam_pass - > kickoff_time ;
pass_last_set_time = sam_pass - > pass_last_set_time ;
pass_can_change_time = sam_pass - > pass_can_change_time ;
pass_must_change_time = sam_pass - > pass_must_change_time ;
fstrcpy ( full_name , sam_pass - > full_name ) ;
fstrcpy ( logon_script , sam_pass - > logon_script ) ;
fstrcpy ( profile_path , sam_pass - > profile_path ) ;
fstrcpy ( home_dir , sam_pass - > home_dir ) ;
fstrcpy ( dir_drive , sam_pass - > dir_drive ) ;
user_rid = sam_pass - > user_rid ;
group_rid = sam_pass - > group_rid ;
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
/* validate password - if required */
1998-11-29 23:03:33 +03:00
if ( status = = 0 & & ! ( IS_BITS_SET_ALL ( sam_pass - > acct_ctrl , ACB_PWNOTREQ ) ) )
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
{
switch ( q_l . sam_id . logon_level )
{
case INTERACTIVE_LOGON_TYPE :
{
/* interactive login. */
1998-11-29 23:03:33 +03:00
status = net_login_interactive ( & q_l . sam_id . ctr - > auth . id1 , sam_pass , vuser ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
break ;
}
case NET_LOGON_TYPE :
{
/* network login. lm challenge and 24 byte responses */
1998-11-29 23:03:33 +03:00
status = net_login_network ( & q_l . sam_id . ctr - > auth . id2 , sam_pass , vuser ) ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
break ;
}
}
}
/* lkclXXXX this is the point at which, if the login was
successful , that the SAM Local Security Authority should
record that the user is logged in to the domain .
*/
/* return the profile plus other bits :-) */
if ( status = = 0 )
{
int num_gids = 0 ;
1998-12-01 01:42:13 +03:00
DOMAIN_GRP * grp_mem = NULL ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
/* set up pointer indicating user/password failed to be found */
usr_info . ptr_user_info = 0 ;
1998-11-29 23:03:33 +03:00
if ( ! getusergroupsntnam ( nt_username , & grp_mem , & num_gids ) )
{
status = 0xC0000000 | NT_STATUS_INVALID_PRIMARY_GROUP ;
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
if ( status = = 0x0 )
{
1998-11-29 23:03:33 +03:00
DOM_GID * gids = NULL ;
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
num_gids = make_dom_gids ( grp_mem , num_gids , & gids ) ;
make_net_user_info3 ( & usr_info ,
1998-12-01 01:42:13 +03:00
& logon_time ,
& logoff_time ,
& kickoff_time ,
& pass_last_set_time ,
& pass_can_change_time ,
& pass_must_change_time ,
1999-02-09 06:57:10 +03:00
nt_username , /* user_name */
1998-12-01 01:42:13 +03:00
full_name , /* full_name */
logon_script , /* logon_script */
profile_path , /* profile_path */
home_dir , /* home_dir */
dir_drive , /* dir_drive */
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
0 , /* logon_count */
0 , /* bad_pw_count */
1998-12-01 01:42:13 +03:00
user_rid , /* RID user_id */
group_rid , /* RID group_id */
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
num_gids , /* uint32 num_groups */
gids , /* DOM_GID *gids */
0x20 , /* uint32 user_flgs (?) */
NULL , /* char sess_key[16] */
1998-11-29 23:03:33 +03:00
global_myname , /* char *logon_srv */
global_sam_name , /* char *logon_dom */
& global_sam_sid , /* DOM_SID *dom_sid */
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
NULL ) ; /* char *other_sids */
1998-11-29 23:03:33 +03:00
/* Free any allocated groups array. */
if ( gids )
{
free ( ( char * ) gids ) ;
}
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
}
1998-11-29 23:03:33 +03:00
- group database API. oops and oh dear, the threat has been carried out:
the pre-alpha "domain group" etc parameters have disappeared.
- interactive debug detection
- re-added mem_man (andrew's memory management, detects memory corruption)
- american spellings of "initialise" replaced with english spelling of
"initialise".
- started on "lookup_name()" and "lookup_sid()" functions. proper ones.
- moved lots of functions around. created some modules of commonly used
code. e.g the password file locking code, which is used in groupfile.c
and aliasfile.c and smbpass.c
- moved RID_TYPE_MASK up another bit. this is really unfortunate, but
there is no other "fast" way to identify users from groups from aliases.
i do not believe that this code saves us anything (the multipliers)
and puts us at a disadvantage (reduces the useable rid space).
the designers of NT aren't silly: if they can get away with a user-
interface-speed LsaLookupNames / LsaLookupSids, then so can we. i
spoke with isaac at the cifs conference, the only time for example that
they do a security context check is on file create. certainly not on
individual file reads / writes, which would drastically hit their
performance and ours, too.
- renamed myworkgroup to global_sam_name, amongst other things, when used
in the rpc code. there is also a global_member_name, as we are always
responsible for a SAM database, the scope of which is limited by the role
of the machine (e.g if a member of a workgroup, your SAM is for _local_
logins only, and its name is the name of your server. you even still
have a SID. see LsaQueryInfoPolicy, levels 3 and 5).
- updated functionality of groupname.c to be able to cope with names
like DOMAIN\group and SERVER\alias. used this code to be able to
do aliases as well as groups. this code may actually be better
off being used in username mapping, too.
- created a connect to serverlist function in clientgen.c and used it
in password.c
- initialisation in server.c depends on the role of the server. well,
it does now.
- rpctorture. smbtorture. EXERCISE EXTREME CAUTION.
(This used to be commit 0d21e1e6090b933f396c764af535ca3388a562db)
1998-11-17 19:19:04 +03:00
}
net_reply_sam_logon ( & q_l , rdata , & srv_cred , & usr_info , status ) ;
1998-03-12 00:11:04 +03:00
}
/*************************************************************************
api_net_trust_dom_list :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-09-30 00:24:17 +04:00
static void api_net_trust_dom_list ( uint16 vuid ,
1998-03-12 00:11:04 +03:00
prs_struct * data ,
prs_struct * rdata )
{
NET_Q_TRUST_DOM_LIST q_t ;
char * trusted_domain = " test_domain " ;
DEBUG ( 6 , ( " api_net_trust_dom_list: %d \n " , __LINE__ ) ) ;
/* grab the lsa trusted domain list query... */
net_io_q_trust_dom ( " " , & q_t , data , 0 ) ;
/* construct reply. */
net_reply_trust_dom_list ( & q_t , rdata ,
1 , trusted_domain ) ;
DEBUG ( 6 , ( " api_net_trust_dom_list: %d \n " , __LINE__ ) ) ;
}
/*************************************************************************
error messages cropping up when using nltest . exe . . .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
# define ERROR_NO_SUCH_DOMAIN 0x54b
# define ERROR_NO_LOGON_SERVERS 0x51f
/*************************************************************************
api_net_logon_ctrl2 :
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
1998-09-30 00:24:17 +04:00
static void api_net_logon_ctrl2 ( uint16 vuid ,
1998-03-12 00:11:04 +03:00
prs_struct * data ,
prs_struct * rdata )
{
NET_Q_LOGON_CTRL2 q_l ;
/* lkclXXXX - guess what - absolutely no idea what these are! */
uint32 flags = 0x0 ;
uint32 pdc_connection_status = 0x0 ;
uint32 logon_attempts = 0x0 ;
uint32 tc_status = ERROR_NO_LOGON_SERVERS ;
char * trusted_domain = " test_domain " ;
DEBUG ( 6 , ( " api_net_logon_ctrl2: %d \n " , __LINE__ ) ) ;
/* grab the lsa netlogon ctrl2 query... */
net_io_q_logon_ctrl2 ( " " , & q_l , data , 0 ) ;
/* construct reply. */
net_reply_logon_ctrl2 ( & q_l , rdata ,
flags , pdc_connection_status , logon_attempts ,
tc_status , trusted_domain ) ;
DEBUG ( 6 , ( " api_net_logon_ctrl2: %d \n " , __LINE__ ) ) ;
}
/*******************************************************************
array of \ PIPE \ NETLOGON operations
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
static struct api_struct api_net_cmds [ ] =
{
{ " NET_REQCHAL " , NET_REQCHAL , api_net_req_chal } ,
{ " NET_AUTH2 " , NET_AUTH2 , api_net_auth_2 } ,
{ " NET_SRVPWSET " , NET_SRVPWSET , api_net_srv_pwset } ,
{ " NET_SAMLOGON " , NET_SAMLOGON , api_net_sam_logon } ,
{ " NET_SAMLOGOFF " , NET_SAMLOGOFF , api_net_sam_logoff } ,
{ " NET_LOGON_CTRL2 " , NET_LOGON_CTRL2 , api_net_logon_ctrl2 } ,
{ " NET_TRUST_DOM_LIST " , NET_TRUST_DOM_LIST , api_net_trust_dom_list } ,
{ NULL , 0 , NULL }
} ;
/*******************************************************************
receives a netlogon pipe and responds .
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * */
BOOL api_netlog_rpc ( pipes_struct * p , prs_struct * data )
{
return api_rpcTNP ( p , " api_netlog_rpc " , api_net_cmds , data ) ;
}
