mirror of
https://github.com/samba-team/samba.git
synced 2024-12-24 21:34:56 +03:00
84ae92da6b
This hopefully fixes the flakey autobuild. metze Autobuild-User: Stefan Metzmacher <metze@samba.org> Autobuild-Date: Tue Apr 24 16:43:03 CEST 2012 on sn-devel-104
377 lines
11 KiB
C
377 lines
11 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
|
|
Copyright (C) Rafal Szczesniak 2005
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 3 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
/*
|
|
a composite function for getting user information via samr pipe
|
|
*/
|
|
|
|
#include "includes.h"
|
|
#include "libcli/composite/composite.h"
|
|
#include "librpc/gen_ndr/security.h"
|
|
#include "libcli/security/security.h"
|
|
#include "libnet/libnet.h"
|
|
#include "librpc/gen_ndr/ndr_samr_c.h"
|
|
|
|
|
|
struct userinfo_state {
|
|
struct dcerpc_pipe *pipe;
|
|
struct policy_handle domain_handle;
|
|
struct policy_handle user_handle;
|
|
uint16_t level;
|
|
struct samr_LookupNames lookup;
|
|
struct samr_OpenUser openuser;
|
|
struct samr_QueryUserInfo queryuserinfo;
|
|
struct samr_Close samrclose;
|
|
union samr_UserInfo *info;
|
|
|
|
/* information about the progress */
|
|
void (*monitor_fn)(struct monitor_msg *);
|
|
};
|
|
|
|
|
|
static void continue_userinfo_lookup(struct tevent_req *subreq);
|
|
static void continue_userinfo_openuser(struct tevent_req *subreq);
|
|
static void continue_userinfo_getuser(struct tevent_req *subreq);
|
|
static void continue_userinfo_closeuser(struct tevent_req *subreq);
|
|
|
|
|
|
/**
|
|
* Stage 1 (optional): Look for a username in SAM server.
|
|
*/
|
|
static void continue_userinfo_lookup(struct tevent_req *subreq)
|
|
{
|
|
struct composite_context *c;
|
|
struct userinfo_state *s;
|
|
struct monitor_msg msg;
|
|
struct msg_rpc_lookup_name *msg_lookup;
|
|
|
|
c = tevent_req_callback_data(subreq, struct composite_context);
|
|
s = talloc_get_type_abort(c->private_data, struct userinfo_state);
|
|
|
|
/* receive samr_Lookup reply */
|
|
c->status = dcerpc_samr_LookupNames_r_recv(subreq, s);
|
|
TALLOC_FREE(subreq);
|
|
if (!composite_is_ok(c)) return;
|
|
|
|
/* there could be a problem with name resolving itself */
|
|
if (!NT_STATUS_IS_OK(s->lookup.out.result)) {
|
|
composite_error(c, s->lookup.out.result);
|
|
return;
|
|
}
|
|
|
|
/* issue a monitor message */
|
|
if (s->monitor_fn) {
|
|
msg.type = mon_SamrLookupName;
|
|
msg_lookup = talloc(s, struct msg_rpc_lookup_name);
|
|
msg_lookup->rid = s->lookup.out.rids->ids;
|
|
msg_lookup->count = s->lookup.out.rids->count;
|
|
msg.data = (void*)msg_lookup;
|
|
msg.data_size = sizeof(*msg_lookup);
|
|
|
|
s->monitor_fn(&msg);
|
|
}
|
|
|
|
|
|
/* have we actually got name resolved
|
|
- we're looking for only one at the moment */
|
|
if (s->lookup.out.rids->count == 0) {
|
|
composite_error(c, NT_STATUS_NO_SUCH_USER);
|
|
return;
|
|
}
|
|
|
|
/* TODO: find proper status code for more than one rid found */
|
|
|
|
/* prepare parameters for LookupNames */
|
|
s->openuser.in.domain_handle = &s->domain_handle;
|
|
s->openuser.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
|
|
s->openuser.in.rid = s->lookup.out.rids->ids[0];
|
|
s->openuser.out.user_handle = &s->user_handle;
|
|
|
|
/* send request */
|
|
subreq = dcerpc_samr_OpenUser_r_send(s, c->event_ctx,
|
|
s->pipe->binding_handle,
|
|
&s->openuser);
|
|
if (composite_nomem(subreq, c)) return;
|
|
|
|
tevent_req_set_callback(subreq, continue_userinfo_openuser, c);
|
|
}
|
|
|
|
|
|
/**
|
|
* Stage 2: Open user policy handle.
|
|
*/
|
|
static void continue_userinfo_openuser(struct tevent_req *subreq)
|
|
{
|
|
struct composite_context *c;
|
|
struct userinfo_state *s;
|
|
struct monitor_msg msg;
|
|
struct msg_rpc_open_user *msg_open;
|
|
|
|
c = tevent_req_callback_data(subreq, struct composite_context);
|
|
s = talloc_get_type_abort(c->private_data, struct userinfo_state);
|
|
|
|
/* receive samr_OpenUser reply */
|
|
c->status = dcerpc_samr_OpenUser_r_recv(subreq, s);
|
|
TALLOC_FREE(subreq);
|
|
if (!composite_is_ok(c)) return;
|
|
|
|
if (!NT_STATUS_IS_OK(s->openuser.out.result)) {
|
|
composite_error(c, s->openuser.out.result);
|
|
return;
|
|
}
|
|
|
|
/* issue a monitor message */
|
|
if (s->monitor_fn) {
|
|
msg.type = mon_SamrOpenUser;
|
|
msg_open = talloc(s, struct msg_rpc_open_user);
|
|
msg_open->rid = s->openuser.in.rid;
|
|
msg_open->access_mask = s->openuser.in.access_mask;
|
|
msg.data = (void*)msg_open;
|
|
msg.data_size = sizeof(*msg_open);
|
|
|
|
s->monitor_fn(&msg);
|
|
}
|
|
|
|
/* prepare parameters for QueryUserInfo call */
|
|
s->queryuserinfo.in.user_handle = &s->user_handle;
|
|
s->queryuserinfo.in.level = s->level;
|
|
s->queryuserinfo.out.info = talloc(s, union samr_UserInfo *);
|
|
if (composite_nomem(s->queryuserinfo.out.info, c)) return;
|
|
|
|
/* queue rpc call, set event handling and new state */
|
|
subreq = dcerpc_samr_QueryUserInfo_r_send(s, c->event_ctx,
|
|
s->pipe->binding_handle,
|
|
&s->queryuserinfo);
|
|
if (composite_nomem(subreq, c)) return;
|
|
|
|
tevent_req_set_callback(subreq, continue_userinfo_getuser, c);
|
|
}
|
|
|
|
|
|
/**
|
|
* Stage 3: Get requested user information.
|
|
*/
|
|
static void continue_userinfo_getuser(struct tevent_req *subreq)
|
|
{
|
|
struct composite_context *c;
|
|
struct userinfo_state *s;
|
|
struct monitor_msg msg;
|
|
struct msg_rpc_query_user *msg_query;
|
|
|
|
c = tevent_req_callback_data(subreq, struct composite_context);
|
|
s = talloc_get_type_abort(c->private_data, struct userinfo_state);
|
|
|
|
/* receive samr_QueryUserInfo reply */
|
|
c->status = dcerpc_samr_QueryUserInfo_r_recv(subreq, s);
|
|
TALLOC_FREE(subreq);
|
|
if (!composite_is_ok(c)) return;
|
|
|
|
/* check if queryuser itself went ok */
|
|
if (!NT_STATUS_IS_OK(s->queryuserinfo.out.result)) {
|
|
composite_error(c, s->queryuserinfo.out.result);
|
|
return;
|
|
}
|
|
|
|
s->info = talloc_steal(s, *(s->queryuserinfo.out.info));
|
|
|
|
/* issue a monitor message */
|
|
if (s->monitor_fn) {
|
|
msg.type = mon_SamrQueryUser;
|
|
msg_query = talloc(s, struct msg_rpc_query_user);
|
|
msg_query->level = s->queryuserinfo.in.level;
|
|
msg.data = (void*)msg_query;
|
|
msg.data_size = sizeof(*msg_query);
|
|
|
|
s->monitor_fn(&msg);
|
|
}
|
|
|
|
/* prepare arguments for Close call */
|
|
s->samrclose.in.handle = &s->user_handle;
|
|
s->samrclose.out.handle = &s->user_handle;
|
|
|
|
/* queue rpc call, set event handling and new state */
|
|
subreq = dcerpc_samr_Close_r_send(s, c->event_ctx,
|
|
s->pipe->binding_handle,
|
|
&s->samrclose);
|
|
if (composite_nomem(subreq, c)) return;
|
|
|
|
tevent_req_set_callback(subreq, continue_userinfo_closeuser, c);
|
|
}
|
|
|
|
|
|
/**
|
|
* Stage 4: Close policy handle associated with opened user.
|
|
*/
|
|
static void continue_userinfo_closeuser(struct tevent_req *subreq)
|
|
{
|
|
struct composite_context *c;
|
|
struct userinfo_state *s;
|
|
struct monitor_msg msg;
|
|
struct msg_rpc_close_user *msg_close;
|
|
|
|
c = tevent_req_callback_data(subreq, struct composite_context);
|
|
s = talloc_get_type_abort(c->private_data, struct userinfo_state);
|
|
|
|
/* receive samr_Close reply */
|
|
c->status = dcerpc_samr_Close_r_recv(subreq, s);
|
|
TALLOC_FREE(subreq);
|
|
if (!composite_is_ok(c)) return;
|
|
|
|
if (!NT_STATUS_IS_OK(s->samrclose.out.result)) {
|
|
composite_error(c, s->samrclose.out.result);
|
|
return;
|
|
}
|
|
|
|
/* issue a monitor message */
|
|
if (s->monitor_fn) {
|
|
msg.type = mon_SamrClose;
|
|
msg_close = talloc(s, struct msg_rpc_close_user);
|
|
msg_close->rid = s->openuser.in.rid;
|
|
msg.data = (void*)msg_close;
|
|
msg.data_size = sizeof(*msg_close);
|
|
|
|
s->monitor_fn(&msg);
|
|
}
|
|
|
|
composite_done(c);
|
|
}
|
|
|
|
|
|
/**
|
|
* Sends asynchronous userinfo request
|
|
*
|
|
* @param p dce/rpc call pipe
|
|
* @param io arguments and results of the call
|
|
*/
|
|
struct composite_context *libnet_rpc_userinfo_send(struct dcerpc_pipe *p,
|
|
TALLOC_CTX *mem_ctx,
|
|
struct libnet_rpc_userinfo *io,
|
|
void (*monitor)(struct monitor_msg*))
|
|
{
|
|
struct composite_context *c;
|
|
struct userinfo_state *s;
|
|
struct dom_sid *sid;
|
|
struct tevent_req *subreq;
|
|
|
|
if (!p || !io) return NULL;
|
|
|
|
c = composite_create(mem_ctx, dcerpc_event_context(p));
|
|
if (c == NULL) return c;
|
|
|
|
s = talloc_zero(c, struct userinfo_state);
|
|
if (composite_nomem(s, c)) return c;
|
|
|
|
c->private_data = s;
|
|
|
|
s->level = io->in.level;
|
|
s->pipe = p;
|
|
s->domain_handle = io->in.domain_handle;
|
|
s->monitor_fn = monitor;
|
|
|
|
if (io->in.sid) {
|
|
sid = dom_sid_parse_talloc(s, io->in.sid);
|
|
if (composite_nomem(sid, c)) return c;
|
|
|
|
s->openuser.in.domain_handle = &s->domain_handle;
|
|
s->openuser.in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
|
|
s->openuser.in.rid = sid->sub_auths[sid->num_auths - 1];
|
|
s->openuser.out.user_handle = &s->user_handle;
|
|
|
|
/* send request */
|
|
subreq = dcerpc_samr_OpenUser_r_send(s, c->event_ctx,
|
|
p->binding_handle,
|
|
&s->openuser);
|
|
if (composite_nomem(subreq, c)) return c;
|
|
|
|
tevent_req_set_callback(subreq, continue_userinfo_openuser, c);
|
|
|
|
} else {
|
|
/* preparing parameters to send rpc request */
|
|
s->lookup.in.domain_handle = &s->domain_handle;
|
|
s->lookup.in.num_names = 1;
|
|
s->lookup.in.names = talloc_array(s, struct lsa_String, 1);
|
|
if (composite_nomem(s->lookup.in.names, c)) return c;
|
|
s->lookup.out.rids = talloc_zero(s, struct samr_Ids);
|
|
s->lookup.out.types = talloc_zero(s, struct samr_Ids);
|
|
if (composite_nomem(s->lookup.out.rids, c)) return c;
|
|
if (composite_nomem(s->lookup.out.types, c)) return c;
|
|
|
|
s->lookup.in.names[0].string = talloc_strdup(s, io->in.username);
|
|
if (composite_nomem(s->lookup.in.names[0].string, c)) return c;
|
|
|
|
/* send request */
|
|
subreq = dcerpc_samr_LookupNames_r_send(s, c->event_ctx,
|
|
p->binding_handle,
|
|
&s->lookup);
|
|
if (composite_nomem(subreq, c)) return c;
|
|
|
|
tevent_req_set_callback(subreq, continue_userinfo_lookup, c);
|
|
}
|
|
|
|
return c;
|
|
}
|
|
|
|
|
|
/**
|
|
* Waits for and receives result of asynchronous userinfo call
|
|
*
|
|
* @param c composite context returned by asynchronous userinfo call
|
|
* @param mem_ctx memory context of the call
|
|
* @param io pointer to results (and arguments) of the call
|
|
* @return nt status code of execution
|
|
*/
|
|
|
|
NTSTATUS libnet_rpc_userinfo_recv(struct composite_context *c, TALLOC_CTX *mem_ctx,
|
|
struct libnet_rpc_userinfo *io)
|
|
{
|
|
NTSTATUS status;
|
|
struct userinfo_state *s;
|
|
|
|
/* wait for results of sending request */
|
|
status = composite_wait(c);
|
|
|
|
if (NT_STATUS_IS_OK(status) && io) {
|
|
s = talloc_get_type_abort(c->private_data, struct userinfo_state);
|
|
talloc_steal(mem_ctx, s->info);
|
|
io->out.info = *s->info;
|
|
}
|
|
|
|
/* memory context associated to composite context is no longer needed */
|
|
talloc_free(c);
|
|
return status;
|
|
}
|
|
|
|
|
|
/**
|
|
* Synchronous version of userinfo call
|
|
*
|
|
* @param pipe dce/rpc call pipe
|
|
* @param mem_ctx memory context for the call
|
|
* @param io arguments and results of the call
|
|
* @return nt status code of execution
|
|
*/
|
|
|
|
NTSTATUS libnet_rpc_userinfo(struct dcerpc_pipe *p,
|
|
TALLOC_CTX *mem_ctx,
|
|
struct libnet_rpc_userinfo *io)
|
|
{
|
|
struct composite_context *c = libnet_rpc_userinfo_send(p, mem_ctx, io, NULL);
|
|
return libnet_rpc_userinfo_recv(c, mem_ctx, io);
|
|
}
|