mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
6e92c83d52
rafal
(This used to be commit 1258e6cad8
)
380 lines
10 KiB
C
380 lines
10 KiB
C
/*
|
|
Unix SMB/CIFS implementation.
|
|
|
|
Copyright (C) Rafal Szczesniak 2005
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
/*
|
|
a composite function for domain handling on samr pipe
|
|
*/
|
|
|
|
#include "includes.h"
|
|
#include "libcli/composite/composite.h"
|
|
#include "libnet/libnet.h"
|
|
#include "librpc/gen_ndr/ndr_samr_c.h"
|
|
|
|
static void domain_open_handler(struct rpc_request*);
|
|
|
|
enum domain_open_stage { DOMOPEN_CONNECT, DOMOPEN_LOOKUP, DOMOPEN_OPEN,
|
|
DOMOPEN_CLOSE_EXISTING, DOMOPEN_RPC_CONNECT };
|
|
|
|
struct domain_open_state {
|
|
enum domain_open_stage stage;
|
|
struct libnet_context *ctx;
|
|
struct dcerpc_pipe *pipe;
|
|
struct rpc_request *req;
|
|
struct composite_context *rpcconn_req;
|
|
struct samr_Connect connect;
|
|
struct samr_LookupDomain lookup;
|
|
struct samr_OpenDomain open;
|
|
struct samr_Close close;
|
|
struct libnet_RpcConnect rpcconn;
|
|
struct lsa_String domain_name;
|
|
uint32_t access_mask;
|
|
struct policy_handle connect_handle;
|
|
struct policy_handle domain_handle;
|
|
};
|
|
|
|
|
|
/**
|
|
* Stage 0.5 (optional): Connect to samr rpc pipe
|
|
*/
|
|
static void domain_open_rpc_connect(struct composite_context *ctx)
|
|
{
|
|
struct composite_context *c;
|
|
struct domain_open_state *s;
|
|
|
|
c = talloc_get_type(ctx->async.private_data, struct composite_context);
|
|
s = talloc_get_type(c->private_data, struct domain_open_state);
|
|
|
|
c->status = libnet_RpcConnect_recv(ctx, s->ctx, c, &s->rpcconn);
|
|
if (!composite_is_ok(c)) return;
|
|
|
|
s->pipe = s->rpcconn.out.dcerpc_pipe;
|
|
|
|
/* preparing parameters for samr_Connect rpc call */
|
|
s->connect.in.system_name = 0;
|
|
s->connect.in.access_mask = s->access_mask;
|
|
s->connect.out.connect_handle = &s->connect_handle;
|
|
|
|
/* send request */
|
|
s->req = dcerpc_samr_Connect_send(s->pipe, c, &s->connect);
|
|
if (composite_nomem(s->req, c)) return;
|
|
|
|
/* callback handler */
|
|
s->req->async.callback = domain_open_handler;
|
|
s->req->async.private = c;
|
|
s->stage = DOMOPEN_CONNECT;
|
|
}
|
|
|
|
|
|
/**
|
|
* Stage 0.5 (optional): Close existing (in libnet context) domain
|
|
* handle
|
|
*/
|
|
static NTSTATUS domain_open_close(struct composite_context *c,
|
|
struct domain_open_state *s)
|
|
{
|
|
/* receive samr_Close reply */
|
|
c->status = dcerpc_ndr_request_recv(s->req);
|
|
NT_STATUS_NOT_OK_RETURN(c->status);
|
|
|
|
/* reset domain handle and associated data in libnet_context */
|
|
s->ctx->domain.name = NULL;
|
|
s->ctx->domain.access_mask = 0;
|
|
ZERO_STRUCT(s->ctx->domain.handle);
|
|
|
|
/* preparing parameters for samr_Connect rpc call */
|
|
s->connect.in.system_name = 0;
|
|
s->connect.in.access_mask = s->access_mask;
|
|
s->connect.out.connect_handle = &s->connect_handle;
|
|
|
|
/* send request */
|
|
s->req = dcerpc_samr_Connect_send(s->pipe, c, &s->connect);
|
|
if (s->req == NULL) return NT_STATUS_NO_MEMORY;
|
|
|
|
/* callback handler */
|
|
s->req->async.callback = domain_open_handler;
|
|
s->req->async.private = c;
|
|
s->stage = DOMOPEN_CONNECT;
|
|
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
|
|
/**
|
|
* Stage 1: Connect to SAM server.
|
|
*/
|
|
static NTSTATUS domain_open_connect(struct composite_context *c,
|
|
struct domain_open_state *s)
|
|
{
|
|
struct samr_LookupDomain *r = &s->lookup;
|
|
|
|
/* receive samr_Connect reply */
|
|
c->status = dcerpc_ndr_request_recv(s->req);
|
|
NT_STATUS_NOT_OK_RETURN(c->status);
|
|
|
|
/* prepare for samr_LookupDomain call */
|
|
r->in.connect_handle = &s->connect_handle;
|
|
r->in.domain_name = &s->domain_name;
|
|
|
|
s->req = dcerpc_samr_LookupDomain_send(s->pipe, c, r);
|
|
if (s->req == NULL) goto failure;
|
|
|
|
s->req->async.callback = domain_open_handler;
|
|
s->req->async.private = c;
|
|
s->stage = DOMOPEN_LOOKUP;
|
|
|
|
return NT_STATUS_OK;
|
|
|
|
failure:
|
|
return NT_STATUS_UNSUCCESSFUL;
|
|
}
|
|
|
|
|
|
/**
|
|
* Stage 2: Lookup domain by name.
|
|
*/
|
|
static NTSTATUS domain_open_lookup(struct composite_context *c,
|
|
struct domain_open_state *s)
|
|
{
|
|
struct samr_OpenDomain *r = &s->open;
|
|
|
|
/* receive samr_LookupDomain reply */
|
|
c->status = dcerpc_ndr_request_recv(s->req);
|
|
NT_STATUS_NOT_OK_RETURN(c->status);
|
|
|
|
/* prepare for samr_OpenDomain call */
|
|
r->in.connect_handle = &s->connect_handle;
|
|
r->in.access_mask = SEC_FLAG_MAXIMUM_ALLOWED;
|
|
r->in.sid = s->lookup.out.sid;
|
|
r->out.domain_handle = &s->domain_handle;
|
|
|
|
s->req = dcerpc_samr_OpenDomain_send(s->pipe, c, r);
|
|
if (s->req == NULL) goto failure;
|
|
|
|
s->req->async.callback = domain_open_handler;
|
|
s->req->async.private = c;
|
|
s->stage = DOMOPEN_OPEN;
|
|
|
|
return NT_STATUS_OK;
|
|
|
|
failure:
|
|
return NT_STATUS_UNSUCCESSFUL;
|
|
}
|
|
|
|
|
|
/*
|
|
* Stage 3: Open domain.
|
|
*/
|
|
static NTSTATUS domain_open_open(struct composite_context *c,
|
|
struct domain_open_state *s)
|
|
{
|
|
/* receive samr_OpenDomain reply */
|
|
c->status = dcerpc_ndr_request_recv(s->req);
|
|
NT_STATUS_NOT_OK_RETURN(c->status);
|
|
|
|
c->state = COMPOSITE_STATE_DONE;
|
|
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
|
|
/**
|
|
* Event handler for asynchronous request. Handles transition through
|
|
* intermediate stages of the call.
|
|
*
|
|
* @param req rpc call context
|
|
*/
|
|
static void domain_open_handler(struct rpc_request *req)
|
|
{
|
|
struct composite_context *c = req->async.private;
|
|
struct domain_open_state *s = talloc_get_type(c->private_data, struct domain_open_state);
|
|
|
|
/* Stages of the call */
|
|
switch (s->stage) {
|
|
case DOMOPEN_CONNECT:
|
|
c->status = domain_open_connect(c, s);
|
|
break;
|
|
case DOMOPEN_LOOKUP:
|
|
c->status = domain_open_lookup(c, s);
|
|
break;
|
|
case DOMOPEN_OPEN:
|
|
c->status = domain_open_open(c, s);
|
|
break;
|
|
case DOMOPEN_CLOSE_EXISTING:
|
|
c->status = domain_open_close(c, s);
|
|
break;
|
|
case DOMOPEN_RPC_CONNECT:
|
|
/* this state shouldn't be handled here */
|
|
c->status = NT_STATUS_UNSUCCESSFUL;
|
|
break;
|
|
}
|
|
|
|
if (!NT_STATUS_IS_OK(c->status)) {
|
|
c->state = COMPOSITE_STATE_ERROR;
|
|
}
|
|
|
|
if (c->state == COMPOSITE_STATE_DONE) {
|
|
composite_done(c);
|
|
}
|
|
}
|
|
|
|
|
|
/**
|
|
* Sends asynchronous DomainOpen request
|
|
*
|
|
* @param ctx initialised libnet context
|
|
* @param io arguments and results of the call
|
|
* @param monitor pointer to monitor function that is passed monitor message
|
|
*/
|
|
|
|
struct composite_context *libnet_DomainOpen_send(struct libnet_context *ctx,
|
|
struct libnet_DomainOpen *io,
|
|
void (*monitor)(struct monitor_msg*))
|
|
{
|
|
struct composite_context *c;
|
|
struct domain_open_state *s;
|
|
|
|
c = talloc_zero(ctx, struct composite_context);
|
|
if (c == NULL) return NULL;
|
|
|
|
s = talloc_zero(c, struct domain_open_state);
|
|
if (composite_nomem(s, c)) return c;
|
|
|
|
c->state = COMPOSITE_STATE_IN_PROGRESS;
|
|
c->private_data = s;
|
|
c->event_ctx = ctx->event_ctx;
|
|
|
|
s->ctx = ctx;
|
|
s->pipe = ctx->samr_pipe;
|
|
s->access_mask = io->in.access_mask;
|
|
s->domain_name.string = io->in.domain_name;
|
|
|
|
if (ctx->samr_pipe == NULL) {
|
|
s->rpcconn.level = LIBNET_RPC_CONNECT_DC;
|
|
s->rpcconn.in.name = io->in.domain_name;
|
|
s->rpcconn.in.dcerpc_iface = &dcerpc_table_samr;
|
|
|
|
s->rpcconn_req = libnet_RpcConnect_send(ctx, c, &s->rpcconn);
|
|
if (composite_nomem(s->rpcconn_req, c)) return c;
|
|
|
|
s->rpcconn_req->async.fn = domain_open_rpc_connect;
|
|
s->rpcconn_req->async.private_data = c;
|
|
s->stage = DOMOPEN_RPC_CONNECT;
|
|
|
|
return c;
|
|
}
|
|
|
|
/* libnet context's domain handle is not empty, so check out what
|
|
was opened first, before doing anything */
|
|
if (!policy_handle_empty(&ctx->domain.handle)) {
|
|
if (strequal(ctx->domain.name, io->in.domain_name) &&
|
|
ctx->domain.access_mask == io->in.access_mask) {
|
|
|
|
/* this domain is already opened */
|
|
composite_done(c);
|
|
return c;
|
|
|
|
} else {
|
|
/* another domain or access rights have been
|
|
requested - close the existing handle first */
|
|
s->close.in.handle = &ctx->domain.handle;
|
|
|
|
/* send request to close domain handle */
|
|
s->req = dcerpc_samr_Close_send(s->pipe, c, &s->close);
|
|
if (composite_nomem(s->req, c)) return c;
|
|
|
|
/* callback handler */
|
|
s->req->async.callback = domain_open_handler;
|
|
s->req->async.private = c;
|
|
s->stage = DOMOPEN_CLOSE_EXISTING;
|
|
|
|
return c;
|
|
}
|
|
}
|
|
|
|
/* preparing parameters for samr_Connect rpc call */
|
|
s->connect.in.system_name = 0;
|
|
s->connect.in.access_mask = s->access_mask;
|
|
s->connect.out.connect_handle = &s->connect_handle;
|
|
|
|
/* send request */
|
|
s->req = dcerpc_samr_Connect_send(s->pipe, c, &s->connect);
|
|
if (composite_nomem(s->req, c)) return c;
|
|
|
|
/* callback handler */
|
|
s->req->async.callback = domain_open_handler;
|
|
s->req->async.private = c;
|
|
s->stage = DOMOPEN_CONNECT;
|
|
|
|
return c;
|
|
}
|
|
|
|
|
|
/**
|
|
* Waits for and receives result of asynchronous DomainOpen call
|
|
*
|
|
* @param c composite context returned by asynchronous DomainOpen call
|
|
* @param ctx initialised libnet context
|
|
* @param mem_ctx memory context of the call
|
|
* @param io pointer to results (and arguments) of the call
|
|
* @return nt status code of execution
|
|
*/
|
|
|
|
NTSTATUS libnet_DomainOpen_recv(struct composite_context *c, struct libnet_context *ctx,
|
|
TALLOC_CTX *mem_ctx, struct libnet_DomainOpen *io)
|
|
{
|
|
NTSTATUS status;
|
|
struct domain_open_state *s;
|
|
|
|
/* wait for results of sending request */
|
|
status = composite_wait(c);
|
|
|
|
if (NT_STATUS_IS_OK(status) && io) {
|
|
s = talloc_get_type(c->private_data, struct domain_open_state);
|
|
io->out.domain_handle = s->domain_handle;
|
|
|
|
/* store the resulting handle and related data for use by other
|
|
libnet functions */
|
|
ctx->domain.handle = s->domain_handle;
|
|
ctx->domain.name = talloc_strdup(ctx, s->domain_name.string);
|
|
ctx->domain.access_mask = s->access_mask;
|
|
}
|
|
|
|
talloc_free(c);
|
|
return status;
|
|
}
|
|
|
|
|
|
/**
|
|
* Synchronous version of DomainOpen call
|
|
*
|
|
* @param ctx initialised libnet context
|
|
* @param mem_ctx memory context for the call
|
|
* @param io arguments and results of the call
|
|
* @return nt status code of execution
|
|
*/
|
|
|
|
NTSTATUS libnet_DomainOpen(struct libnet_context *ctx,
|
|
TALLOC_CTX *mem_ctx,
|
|
struct libnet_DomainOpen *io)
|
|
{
|
|
struct composite_context *c = libnet_DomainOpen_send(ctx, io, NULL);
|
|
return libnet_DomainOpen_recv(c, ctx, mem_ctx, io);
|
|
}
|