mirror of
https://github.com/samba-team/samba.git
synced 2025-12-05 12:23:50 +03:00
first pass at updating head branch to be to be the same as the SAMBA_2_0 branch
This commit is contained in:
Andrew Tridgell
@@ -22,4 +22,325 @@
|
||||
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
/* retired module */
|
||||
/* this module apparently provides an implementation of DCE/RPC over a
|
||||
* named pipe (IPC$ connection using SMBtrans). details of DCE/RPC
|
||||
* documentation are available (in on-line form) from the X-Open group.
|
||||
*
|
||||
* this module should provide a level of abstraction between SMB
|
||||
* and DCE/RPC, while minimising the amount of mallocs, unnecessary
|
||||
* data copies, and network traffic.
|
||||
*
|
||||
* in this version, which takes a "let's learn what's going on and
|
||||
* get something running" approach, there is additional network
|
||||
* traffic generated, but the code should be easier to understand...
|
||||
*
|
||||
* ... if you read the docs. or stare at packets for weeks on end.
|
||||
*
|
||||
*/
|
||||
|
||||
#include "includes.h"
|
||||
#include "nterr.h"
|
||||
|
||||
extern int DEBUGLEVEL;
|
||||
|
||||
/*
|
||||
* A list of the rids of well known BUILTIN and Domain users
|
||||
* and groups.
|
||||
*/
|
||||
|
||||
rid_name builtin_alias_rids[] =
|
||||
{
|
||||
{ BUILTIN_ALIAS_RID_ADMINS , "Administrators" },
|
||||
{ BUILTIN_ALIAS_RID_USERS , "Users" },
|
||||
{ BUILTIN_ALIAS_RID_GUESTS , "Guests" },
|
||||
{ BUILTIN_ALIAS_RID_POWER_USERS , "Power Users" },
|
||||
|
||||
{ BUILTIN_ALIAS_RID_ACCOUNT_OPS , "Account Operators" },
|
||||
{ BUILTIN_ALIAS_RID_SYSTEM_OPS , "System Operators" },
|
||||
{ BUILTIN_ALIAS_RID_PRINT_OPS , "Print Operators" },
|
||||
{ BUILTIN_ALIAS_RID_BACKUP_OPS , "Backup Operators" },
|
||||
{ BUILTIN_ALIAS_RID_REPLICATOR , "Replicator" },
|
||||
{ 0 , NULL }
|
||||
};
|
||||
|
||||
/* array lookup of well-known Domain RID users. */
|
||||
rid_name domain_user_rids[] =
|
||||
{
|
||||
{ DOMAIN_USER_RID_ADMIN , "Administrator" },
|
||||
{ DOMAIN_USER_RID_GUEST , "Guest" },
|
||||
{ 0 , NULL }
|
||||
};
|
||||
|
||||
/* array lookup of well-known Domain RID groups. */
|
||||
rid_name domain_group_rids[] =
|
||||
{
|
||||
{ DOMAIN_GROUP_RID_ADMINS , "Domain Admins" },
|
||||
{ DOMAIN_GROUP_RID_USERS , "Domain Users" },
|
||||
{ DOMAIN_GROUP_RID_GUESTS , "Domain Guests" },
|
||||
{ 0 , NULL }
|
||||
};
|
||||
|
||||
int make_dom_gids(char *gids_str, DOM_GID **ppgids)
|
||||
{
|
||||
char *ptr;
|
||||
pstring s2;
|
||||
int count;
|
||||
DOM_GID *gids;
|
||||
|
||||
*ppgids = NULL;
|
||||
|
||||
DEBUG(4,("make_dom_gids: %s\n", gids_str));
|
||||
|
||||
if (gids_str == NULL || *gids_str == 0)
|
||||
return 0;
|
||||
|
||||
for (count = 0, ptr = gids_str;
|
||||
next_token(&ptr, s2, NULL, sizeof(s2));
|
||||
count++)
|
||||
;
|
||||
|
||||
gids = (DOM_GID *)malloc( sizeof(DOM_GID) * count );
|
||||
if(!gids)
|
||||
{
|
||||
DEBUG(0,("make_dom_gids: malloc fail !\n"));
|
||||
return 0;
|
||||
}
|
||||
|
||||
for (count = 0, ptr = gids_str;
|
||||
next_token(&ptr, s2, NULL, sizeof(s2)) &&
|
||||
count < LSA_MAX_GROUPS;
|
||||
count++)
|
||||
{
|
||||
/* the entries are of the form GID/ATTR, ATTR being optional.*/
|
||||
char *attr;
|
||||
uint32 rid = 0;
|
||||
int i;
|
||||
|
||||
attr = strchr(s2,'/');
|
||||
if (attr)
|
||||
*attr++ = 0;
|
||||
|
||||
if (!attr || !*attr)
|
||||
attr = "7"; /* default value for attribute is 7 */
|
||||
|
||||
/* look up the RID string and see if we can turn it into a rid number */
|
||||
for (i = 0; builtin_alias_rids[i].name != NULL; i++)
|
||||
{
|
||||
if (strequal(builtin_alias_rids[i].name, s2))
|
||||
{
|
||||
rid = builtin_alias_rids[i].rid;
|
||||
break;
|
||||
}
|
||||
}
|
||||
|
||||
if (rid == 0)
|
||||
rid = atoi(s2);
|
||||
|
||||
if (rid == 0)
|
||||
{
|
||||
DEBUG(1,("make_dom_gids: unknown well-known alias RID %s/%s\n", s2, attr));
|
||||
count--;
|
||||
}
|
||||
else
|
||||
{
|
||||
gids[count].g_rid = rid;
|
||||
gids[count].attr = atoi(attr);
|
||||
|
||||
DEBUG(5,("group id: %d attr: %d\n", gids[count].g_rid, gids[count].attr));
|
||||
}
|
||||
}
|
||||
|
||||
*ppgids = gids;
|
||||
return count;
|
||||
}
|
||||
|
||||
|
||||
/*******************************************************************
|
||||
gets a domain user's groups
|
||||
********************************************************************/
|
||||
void get_domain_user_groups(char *domain_groups, char *user)
|
||||
{
|
||||
pstring tmp;
|
||||
|
||||
if (domain_groups == NULL || user == NULL) return;
|
||||
|
||||
/* any additional groups this user is in. e.g power users */
|
||||
pstrcpy(domain_groups, lp_domain_groups());
|
||||
|
||||
/* can only be a user or a guest. cannot be guest _and_ admin */
|
||||
if (user_in_list(user, lp_domain_guest_group()))
|
||||
{
|
||||
slprintf(tmp, sizeof(tmp) - 1, " %ld/7 ", DOMAIN_GROUP_RID_GUESTS);
|
||||
pstrcat(domain_groups, tmp);
|
||||
|
||||
DEBUG(3,("domain guest group access %s granted\n", tmp));
|
||||
}
|
||||
else
|
||||
{
|
||||
slprintf(tmp, sizeof(tmp) -1, " %ld/7 ", DOMAIN_GROUP_RID_USERS);
|
||||
pstrcat(domain_groups, tmp);
|
||||
|
||||
DEBUG(3,("domain group access %s granted\n", tmp));
|
||||
|
||||
if (user_in_list(user, lp_domain_admin_group()))
|
||||
{
|
||||
slprintf(tmp, sizeof(tmp) - 1, " %ld/7 ", DOMAIN_GROUP_RID_ADMINS);
|
||||
pstrcat(domain_groups, tmp);
|
||||
|
||||
DEBUG(3,("domain admin group access %s granted\n", tmp));
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
/*******************************************************************
|
||||
lookup_group_name
|
||||
********************************************************************/
|
||||
uint32 lookup_group_name(uint32 rid, char *group_name, uint32 *type)
|
||||
{
|
||||
int i = 0;
|
||||
(*type) = SID_NAME_DOM_GRP;
|
||||
|
||||
DEBUG(5,("lookup_group_name: rid: %d", rid));
|
||||
|
||||
while (domain_group_rids[i].rid != rid && domain_group_rids[i].rid != 0)
|
||||
{
|
||||
i++;
|
||||
}
|
||||
|
||||
if (domain_group_rids[i].rid != 0)
|
||||
{
|
||||
fstrcpy(group_name, domain_group_rids[i].name);
|
||||
DEBUG(5,(" = %s\n", group_name));
|
||||
return 0x0;
|
||||
}
|
||||
|
||||
DEBUG(5,(" none mapped\n"));
|
||||
return 0xC0000000 | NT_STATUS_NONE_MAPPED;
|
||||
}
|
||||
|
||||
/*******************************************************************
|
||||
lookup_alias_name
|
||||
********************************************************************/
|
||||
uint32 lookup_alias_name(uint32 rid, char *alias_name, uint32 *type)
|
||||
{
|
||||
int i = 0;
|
||||
(*type) = SID_NAME_WKN_GRP;
|
||||
|
||||
DEBUG(5,("lookup_alias_name: rid: %d", rid));
|
||||
|
||||
while (builtin_alias_rids[i].rid != rid && builtin_alias_rids[i].rid != 0)
|
||||
{
|
||||
i++;
|
||||
}
|
||||
|
||||
if (builtin_alias_rids[i].rid != 0)
|
||||
{
|
||||
fstrcpy(alias_name, builtin_alias_rids[i].name);
|
||||
DEBUG(5,(" = %s\n", alias_name));
|
||||
return 0x0;
|
||||
}
|
||||
|
||||
DEBUG(5,(" none mapped\n"));
|
||||
return 0xC0000000 | NT_STATUS_NONE_MAPPED;
|
||||
}
|
||||
|
||||
/*******************************************************************
|
||||
lookup_user_name
|
||||
********************************************************************/
|
||||
uint32 lookup_user_name(uint32 rid, char *user_name, uint32 *type)
|
||||
{
|
||||
struct sam_disp_info *disp_info;
|
||||
int i = 0;
|
||||
(*type) = SID_NAME_USER;
|
||||
|
||||
DEBUG(5,("lookup_user_name: rid: %d", rid));
|
||||
|
||||
/* look up the well-known domain user rids first */
|
||||
while (domain_user_rids[i].rid != rid && domain_user_rids[i].rid != 0)
|
||||
{
|
||||
i++;
|
||||
}
|
||||
|
||||
if (domain_user_rids[i].rid != 0)
|
||||
{
|
||||
fstrcpy(user_name, domain_user_rids[i].name);
|
||||
DEBUG(5,(" = %s\n", user_name));
|
||||
return 0x0;
|
||||
}
|
||||
|
||||
/* ok, it's a user. find the user account */
|
||||
become_root(True);
|
||||
disp_info = getsamdisprid(rid);
|
||||
unbecome_root(True);
|
||||
|
||||
if (disp_info != NULL)
|
||||
{
|
||||
fstrcpy(user_name, disp_info->smb_name);
|
||||
DEBUG(5,(" = %s\n", user_name));
|
||||
return 0x0;
|
||||
}
|
||||
|
||||
DEBUG(5,(" none mapped\n"));
|
||||
return 0xC0000000 | NT_STATUS_NONE_MAPPED;
|
||||
}
|
||||
|
||||
/*******************************************************************
|
||||
lookup_group_rid
|
||||
********************************************************************/
|
||||
uint32 lookup_group_rid(char *group_name, uint32 *rid)
|
||||
{
|
||||
char *grp_name;
|
||||
int i = -1; /* start do loop at -1 */
|
||||
|
||||
do /* find, if it exists, a group rid for the group name*/
|
||||
{
|
||||
i++;
|
||||
(*rid) = domain_group_rids[i].rid;
|
||||
grp_name = domain_group_rids[i].name;
|
||||
|
||||
} while (grp_name != NULL && !strequal(grp_name, group_name));
|
||||
|
||||
return (grp_name != NULL) ? 0 : 0xC0000000 | NT_STATUS_NONE_MAPPED;
|
||||
}
|
||||
|
||||
/*******************************************************************
|
||||
lookup_alias_rid
|
||||
********************************************************************/
|
||||
uint32 lookup_alias_rid(char *alias_name, uint32 *rid)
|
||||
{
|
||||
char *als_name;
|
||||
int i = -1; /* start do loop at -1 */
|
||||
|
||||
do /* find, if it exists, a alias rid for the alias name*/
|
||||
{
|
||||
i++;
|
||||
(*rid) = builtin_alias_rids[i].rid;
|
||||
als_name = builtin_alias_rids[i].name;
|
||||
|
||||
} while (als_name != NULL && !strequal(als_name, alias_name));
|
||||
|
||||
return (als_name != NULL) ? 0 : 0xC0000000 | NT_STATUS_NONE_MAPPED;
|
||||
}
|
||||
|
||||
/*******************************************************************
|
||||
lookup_user_rid
|
||||
********************************************************************/
|
||||
uint32 lookup_user_rid(char *user_name, uint32 *rid)
|
||||
{
|
||||
struct sam_passwd *sam_pass;
|
||||
(*rid) = 0;
|
||||
|
||||
/* find the user account */
|
||||
become_root(True);
|
||||
sam_pass = getsam21pwnam(user_name);
|
||||
unbecome_root(True);
|
||||
|
||||
if (sam_pass != NULL)
|
||||
{
|
||||
(*rid) = sam_pass->user_rid;
|
||||
return 0x0;
|
||||
}
|
||||
|
||||
return 0xC0000000 | NT_STATUS_NONE_MAPPED;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user