mirror of
https://github.com/samba-team/samba.git
synced 2025-12-16 00:23:52 +03:00
Reverse-engineered the sam replication protocol from staring at hex dumps for a while. It's pretty similar to the sam sync protocol with a couple of different delta header types. I wasn't able to figure out the format of the privilege stuff - needs more time and a whiteboard. (-: The impressive bit is that the sam sync stuff from tng basically just worked thanks mainly to Luke Leighton's efforts in this area.
-
219 lines
5.6 KiB
C
219 lines
5.6 KiB
C
/*
|
|
Unix SMB/Netbios implementation.
|
|
Version 1.9.
|
|
NT Domain Authentication SMB / MSRPC client
|
|
Copyright (C) Andrew Tridgell 1994-2000
|
|
Copyright (C) Luke Kenneth Casson Leighton 1996-2000
|
|
Copyright (C) Tim Potter 2001
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
|
|
/* Opens a SMB connection to the netlogon pipe */
|
|
|
|
struct cli_state *cli_netlogon_initialise(struct cli_state *cli,
|
|
char *system_name,
|
|
struct ntuser_creds *creds)
|
|
{
|
|
return cli_pipe_initialise(cli, system_name, PIPE_NETLOGON, creds);
|
|
}
|
|
|
|
/* Logon Control 2 */
|
|
|
|
NTSTATUS cli_netlogon_logon_ctrl2(struct cli_state *cli, TALLOC_CTX *mem_ctx,
|
|
uint32 query_level)
|
|
{
|
|
prs_struct qbuf, rbuf;
|
|
NET_Q_LOGON_CTRL2 q;
|
|
NET_R_LOGON_CTRL2 r;
|
|
NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
|
|
|
|
ZERO_STRUCT(q);
|
|
ZERO_STRUCT(r);
|
|
|
|
/* Initialise parse structures */
|
|
|
|
prs_init(&qbuf, MAX_PDU_FRAG_LEN, mem_ctx, MARSHALL);
|
|
prs_init(&rbuf, 0, mem_ctx, UNMARSHALL);
|
|
|
|
/* Initialise input parameters */
|
|
|
|
init_net_q_logon_ctrl2(&q, cli->srv_name_slash, query_level);
|
|
|
|
/* Marshall data and send request */
|
|
|
|
if (!net_io_q_logon_ctrl2("", &q, &qbuf, 0) ||
|
|
!rpc_api_pipe_req(cli, NET_LOGON_CTRL2, &qbuf, &rbuf)) {
|
|
result = NT_STATUS_UNSUCCESSFUL;
|
|
goto done;
|
|
}
|
|
|
|
/* Unmarshall response */
|
|
|
|
if (!net_io_r_logon_ctrl2("", &r, &rbuf, 0)) {
|
|
result = NT_STATUS_UNSUCCESSFUL;
|
|
goto done;
|
|
}
|
|
|
|
result = r.status;
|
|
|
|
done:
|
|
prs_mem_free(&qbuf);
|
|
prs_mem_free(&rbuf);
|
|
|
|
return result;
|
|
}
|
|
|
|
/****************************************************************************
|
|
Generate the next creds to use. Yuck - this is a cut&paste from another
|
|
file. They should be combined at some stage. )-:
|
|
****************************************************************************/
|
|
|
|
static void gen_next_creds( struct cli_state *cli, DOM_CRED *new_clnt_cred)
|
|
{
|
|
/*
|
|
* Create the new client credentials.
|
|
*/
|
|
|
|
cli->clnt_cred.timestamp.time = time(NULL);
|
|
|
|
memcpy(new_clnt_cred, &cli->clnt_cred, sizeof(*new_clnt_cred));
|
|
|
|
/* Calculate the new credentials. */
|
|
cred_create(cli->sess_key, &(cli->clnt_cred.challenge),
|
|
new_clnt_cred->timestamp, &(new_clnt_cred->challenge));
|
|
|
|
}
|
|
|
|
/* Sam synchronisation */
|
|
|
|
NTSTATUS cli_netlogon_sam_sync(struct cli_state *cli, TALLOC_CTX *mem_ctx,
|
|
uint32 database_id, uint32 *num_deltas,
|
|
SAM_DELTA_HDR **hdr_deltas,
|
|
SAM_DELTA_CTR **deltas)
|
|
{
|
|
prs_struct qbuf, rbuf;
|
|
NET_Q_SAM_SYNC q;
|
|
NET_R_SAM_SYNC r;
|
|
NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
|
|
DOM_CRED clnt_creds;
|
|
char sess_key[16];
|
|
|
|
ZERO_STRUCT(q);
|
|
ZERO_STRUCT(r);
|
|
|
|
/* Initialise parse structures */
|
|
|
|
prs_init(&qbuf, MAX_PDU_FRAG_LEN, mem_ctx, MARSHALL);
|
|
prs_init(&rbuf, 0, mem_ctx, UNMARSHALL);
|
|
|
|
/* Initialise input parameters */
|
|
|
|
gen_next_creds(cli, &clnt_creds);
|
|
|
|
init_net_q_sam_sync(&q, cli->srv_name_slash, cli->clnt_name_slash + 2,
|
|
&clnt_creds, database_id);
|
|
|
|
/* Marshall data and send request */
|
|
|
|
if (!net_io_q_sam_sync("", &q, &qbuf, 0) ||
|
|
!rpc_api_pipe_req(cli, NET_SAM_SYNC, &qbuf, &rbuf)) {
|
|
result = NT_STATUS_UNSUCCESSFUL;
|
|
goto done;
|
|
}
|
|
|
|
/* Unmarshall response */
|
|
|
|
if (!net_io_r_sam_sync("", sess_key, &r, &rbuf, 0)) {
|
|
result = NT_STATUS_UNSUCCESSFUL;
|
|
goto done;
|
|
}
|
|
|
|
/* Return results */
|
|
|
|
result = r.status;
|
|
*num_deltas = r.num_deltas2;
|
|
*hdr_deltas = r.hdr_deltas;
|
|
*deltas = r.deltas;
|
|
|
|
done:
|
|
prs_mem_free(&qbuf);
|
|
prs_mem_free(&rbuf);
|
|
|
|
return result;
|
|
}
|
|
|
|
/* Sam synchronisation */
|
|
|
|
NTSTATUS cli_netlogon_sam_deltas(struct cli_state *cli, TALLOC_CTX *mem_ctx,
|
|
uint32 database_id, UINT64_S seqnum,
|
|
uint32 *num_deltas,
|
|
SAM_DELTA_HDR **hdr_deltas,
|
|
SAM_DELTA_CTR **deltas)
|
|
{
|
|
prs_struct qbuf, rbuf;
|
|
NET_Q_SAM_DELTAS q;
|
|
NET_R_SAM_DELTAS r;
|
|
NTSTATUS result = NT_STATUS_UNSUCCESSFUL;
|
|
DOM_CRED clnt_creds;
|
|
char sess_key[16];
|
|
|
|
ZERO_STRUCT(q);
|
|
ZERO_STRUCT(r);
|
|
|
|
/* Initialise parse structures */
|
|
|
|
prs_init(&qbuf, MAX_PDU_FRAG_LEN, mem_ctx, MARSHALL);
|
|
prs_init(&rbuf, 0, mem_ctx, UNMARSHALL);
|
|
|
|
/* Initialise input parameters */
|
|
|
|
gen_next_creds(cli, &clnt_creds);
|
|
|
|
init_net_q_sam_deltas(&q, cli->srv_name_slash,
|
|
cli->clnt_name_slash + 2, &clnt_creds,
|
|
database_id, seqnum);
|
|
|
|
/* Marshall data and send request */
|
|
|
|
if (!net_io_q_sam_deltas("", &q, &qbuf, 0) ||
|
|
!rpc_api_pipe_req(cli, NET_SAM_DELTAS, &qbuf, &rbuf)) {
|
|
result = NT_STATUS_UNSUCCESSFUL;
|
|
goto done;
|
|
}
|
|
|
|
/* Unmarshall response */
|
|
|
|
if (!net_io_r_sam_deltas("", sess_key, &r, &rbuf, 0)) {
|
|
result = NT_STATUS_UNSUCCESSFUL;
|
|
goto done;
|
|
}
|
|
|
|
/* Return results */
|
|
|
|
result = r.status;
|
|
*num_deltas = r.num_deltas2;
|
|
*hdr_deltas = r.hdr_deltas;
|
|
*deltas = r.deltas;
|
|
|
|
done:
|
|
prs_mem_free(&qbuf);
|
|
prs_mem_free(&rbuf);
|
|
|
|
return result;
|
|
}
|