mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
fbb7814f91
Guenther
139 lines
3.9 KiB
C
139 lines
3.9 KiB
C
/*
|
|
Samba Unix/Linux SMB client library
|
|
net ads cldap functions
|
|
Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
|
|
Copyright (C) 2003 Jim McDonough (jmcd@us.ibm.com)
|
|
Copyright (C) 2008 Guenther Deschner (gd@samba.org)
|
|
Copyright (C) 2009 Stefan Metzmacher (metze@samba.org)
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
#include "../libcli/cldap/cldap.h"
|
|
#include "../lib/tsocket/tsocket.h"
|
|
#include "libads/cldap.h"
|
|
|
|
/*******************************************************************
|
|
do a cldap netlogon query. Always 389/udp
|
|
*******************************************************************/
|
|
|
|
bool ads_cldap_netlogon(TALLOC_CTX *mem_ctx,
|
|
const char *server,
|
|
const char *realm,
|
|
uint32_t nt_version,
|
|
struct netlogon_samlogon_response **_reply)
|
|
{
|
|
struct cldap_socket *cldap;
|
|
struct cldap_netlogon io;
|
|
struct netlogon_samlogon_response *reply;
|
|
NTSTATUS status;
|
|
struct sockaddr_storage ss;
|
|
char addrstr[INET6_ADDRSTRLEN];
|
|
const char *dest_str;
|
|
int ret;
|
|
struct tsocket_address *dest_addr;
|
|
|
|
if (!interpret_string_addr_prefer_ipv4(&ss, server, 0)) {
|
|
DEBUG(2,("Failed to resolve[%s] into an address for cldap\n",
|
|
server));
|
|
return false;
|
|
}
|
|
dest_str = print_sockaddr(addrstr, sizeof(addrstr), &ss);
|
|
|
|
ret = tsocket_address_inet_from_strings(mem_ctx, "ip",
|
|
dest_str, LDAP_PORT,
|
|
&dest_addr);
|
|
if (ret != 0) {
|
|
status = map_nt_error_from_unix(errno);
|
|
DEBUG(2,("Failed to create cldap tsocket_address for %s - %s\n",
|
|
dest_str, nt_errstr(status)));
|
|
return false;
|
|
}
|
|
|
|
/*
|
|
* as we use a connected udp socket
|
|
*/
|
|
status = cldap_socket_init(mem_ctx, NULL, NULL, dest_addr, &cldap);
|
|
TALLOC_FREE(dest_addr);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
DEBUG(2,("Failed to create cldap socket to %s: %s\n",
|
|
dest_str, nt_errstr(status)));
|
|
return false;
|
|
}
|
|
|
|
reply = talloc(cldap, struct netlogon_samlogon_response);
|
|
if (!reply) {
|
|
goto failed;
|
|
}
|
|
|
|
/*
|
|
* as we use a connected socket, so we don't need to specify the
|
|
* destination
|
|
*/
|
|
io.in.dest_address = NULL;
|
|
io.in.dest_port = 0;
|
|
io.in.realm = realm;
|
|
io.in.host = NULL;
|
|
io.in.user = NULL;
|
|
io.in.domain_guid = NULL;
|
|
io.in.domain_sid = NULL;
|
|
io.in.acct_control = 0;
|
|
io.in.version = nt_version;
|
|
io.in.map_response = false;
|
|
|
|
status = cldap_netlogon(cldap, reply, &io);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
DEBUG(2,("cldap_netlogon() failed: %s\n", nt_errstr(status)));
|
|
goto failed;
|
|
}
|
|
|
|
*reply = io.out.netlogon;
|
|
*_reply = talloc_move(mem_ctx, &reply);
|
|
TALLOC_FREE(cldap);
|
|
return true;
|
|
failed:
|
|
TALLOC_FREE(cldap);
|
|
return false;
|
|
}
|
|
|
|
/*******************************************************************
|
|
do a cldap netlogon query. Always 389/udp
|
|
*******************************************************************/
|
|
|
|
bool ads_cldap_netlogon_5(TALLOC_CTX *mem_ctx,
|
|
const char *server,
|
|
const char *realm,
|
|
struct NETLOGON_SAM_LOGON_RESPONSE_EX *reply5)
|
|
{
|
|
uint32_t nt_version = NETLOGON_NT_VERSION_5 | NETLOGON_NT_VERSION_5EX;
|
|
struct netlogon_samlogon_response *reply = NULL;
|
|
bool ret;
|
|
|
|
ret = ads_cldap_netlogon(mem_ctx, server, realm, nt_version, &reply);
|
|
if (!ret) {
|
|
return false;
|
|
}
|
|
|
|
if (reply->ntver != NETLOGON_NT_VERSION_5EX) {
|
|
DEBUG(0,("ads_cldap_netlogon_5: nt_version mismatch: 0x%08x\n",
|
|
reply->ntver));
|
|
return false;
|
|
}
|
|
|
|
*reply5 = reply->data.nt5_ex;
|
|
|
|
return true;
|
|
}
|