mirror of
https://github.com/samba-team/samba.git
synced 2024-12-27 03:21:53 +03:00
da4345a8d1
The session key we want here (the only one that is availble to the
encryption layer) is the one obtained by cli_get_session_key(), as
NTLMSSP creates a per-session session key via key exchange and NTLMv2
negotiation.
The key was never directly the NT hash anyway (this is simply a
mistake, the extra MD4() was lost during my previous cleanup
f28f113d8e in 2008), but was MD4(NT
hash) in early implementations of NTLMSSP.
However, regardless this call is not available on domain trusts
between AD domains and Windows 2003 R2, making this less useful.
Andrew Bartlett
Signed-off-by: Andrew Tridgell <tridge@samba.org>
161 lines
5.4 KiB
C
161 lines
5.4 KiB
C
/*
|
|
* Unix SMB/CIFS implementation.
|
|
*
|
|
* RPC Pipe client routines
|
|
*
|
|
* Copyright (c) 2005 Jeremy Allison
|
|
* Copyright (c) 2010 Simo Sorce
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#ifndef _CLI_PIPE_H
|
|
#define _CLI_PIPE_H
|
|
|
|
#include "rpc_client/rpc_client.h"
|
|
|
|
/* The following definitions come from rpc_client/cli_pipe.c */
|
|
|
|
struct tevent_req *rpc_api_pipe_req_send(TALLOC_CTX *mem_ctx,
|
|
struct event_context *ev,
|
|
struct rpc_pipe_client *cli,
|
|
uint8_t op_num,
|
|
DATA_BLOB *req_data);
|
|
|
|
NTSTATUS rpc_api_pipe_req_recv(struct tevent_req *req,
|
|
TALLOC_CTX *mem_ctx,
|
|
DATA_BLOB *reply_pdu);
|
|
|
|
struct tevent_req *rpc_pipe_bind_send(TALLOC_CTX *mem_ctx,
|
|
struct event_context *ev,
|
|
struct rpc_pipe_client *cli,
|
|
struct pipe_auth_data *auth);
|
|
|
|
NTSTATUS rpc_pipe_bind_recv(struct tevent_req *req);
|
|
|
|
NTSTATUS rpc_pipe_bind(struct rpc_pipe_client *cli,
|
|
struct pipe_auth_data *auth);
|
|
|
|
unsigned int rpccli_set_timeout(struct rpc_pipe_client *cli,
|
|
unsigned int timeout);
|
|
|
|
bool rpccli_is_connected(struct rpc_pipe_client *rpc_cli);
|
|
|
|
NTSTATUS rpccli_ncalrpc_bind_data(TALLOC_CTX *mem_ctx,
|
|
struct pipe_auth_data **presult);
|
|
|
|
NTSTATUS rpccli_anon_bind_data(TALLOC_CTX *mem_ctx,
|
|
struct pipe_auth_data **presult);
|
|
|
|
NTSTATUS rpccli_schannel_bind_data(TALLOC_CTX *mem_ctx,
|
|
const char *domain,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
struct netlogon_creds_CredentialState *creds,
|
|
struct pipe_auth_data **presult);
|
|
|
|
NTSTATUS rpc_pipe_open_tcp(TALLOC_CTX *mem_ctx,
|
|
const char *host,
|
|
const struct ndr_syntax_id *abstract_syntax,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS rpc_pipe_open_ncalrpc(TALLOC_CTX *mem_ctx, const char *socket_path,
|
|
const struct ndr_syntax_id *abstract_syntax,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
struct dcerpc_binding_handle *rpccli_bh_create(struct rpc_pipe_client *c);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_noauth(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_noauth_transport(struct cli_state *cli,
|
|
enum dcerpc_transport_t transport,
|
|
const struct ndr_syntax_id *interface,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_ntlmssp(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
enum dcerpc_transport_t transport,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
const char *domain,
|
|
const char *username,
|
|
const char *password,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_spnego_ntlmssp(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
enum dcerpc_transport_t transport,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
const char *domain,
|
|
const char *username,
|
|
const char *password,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_schannel_with_key(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
enum dcerpc_transport_t transport,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
const char *domain,
|
|
struct netlogon_creds_CredentialState **pdc,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_ntlmssp_auth_schannel(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
enum dcerpc_transport_t transport,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
const char *domain,
|
|
const char *username,
|
|
const char *password,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_schannel(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
enum dcerpc_transport_t transport,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
const char *domain,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_krb5(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
enum dcerpc_transport_t transport,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
const char *service_princ,
|
|
const char *username,
|
|
const char *password,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_rpc_pipe_open_spnego_krb5(struct cli_state *cli,
|
|
const struct ndr_syntax_id *interface,
|
|
enum dcerpc_transport_t transport,
|
|
enum dcerpc_AuthLevel auth_level,
|
|
const char *server,
|
|
const char *username,
|
|
const char *password,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
NTSTATUS cli_get_session_key(TALLOC_CTX *mem_ctx,
|
|
struct rpc_pipe_client *cli,
|
|
DATA_BLOB *session_key);
|
|
|
|
/* The following definitions come from rpc_client/cli_pipe_schannel.c */
|
|
|
|
NTSTATUS get_schannel_session_key(struct cli_state *cli,
|
|
const char *domain,
|
|
uint32 *pneg_flags,
|
|
struct rpc_pipe_client **presult);
|
|
|
|
#endif /* _CLI_PIPE_H */
|
|
|
|
/* vim: set ts=8 sw=8 noet cindent ft=c.doxygen: */
|