mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
b840dce676
now in pipe struct (where used) rather than user_struct.
Secured machine account password changing in srv_netlog_nt.c - ensure
that only the given machine can change its own password. May need to
free this up later for NT admin tools, but this is a fail-safe secure
position for now.
Jeremy.
(This used to be commit 46b12f2275)
353 lines
7.8 KiB
C
353 lines
7.8 KiB
C
/*
|
|
Unix SMB/Netbios implementation.
|
|
Version 1.9.
|
|
SMB parameters and setup
|
|
Copyright (C) Andrew Tridgell 1992-1997
|
|
Copyright (C) Luke Kenneth Casson Leighton 1996-1997
|
|
Copyright (C) Paul Ashton 1997
|
|
|
|
This program is free software; you can redistribute it and/or modify
|
|
it under the terms of the GNU General Public License as published by
|
|
the Free Software Foundation; either version 2 of the License, or
|
|
(at your option) any later version.
|
|
|
|
This program is distributed in the hope that it will be useful,
|
|
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
GNU General Public License for more details.
|
|
|
|
You should have received a copy of the GNU General Public License
|
|
along with this program; if not, write to the Free Software
|
|
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
|
*/
|
|
|
|
#include "ntdomain.h"
|
|
#include "rpc_dce.h"
|
|
|
|
#ifndef _RPC_MISC_H /* _RPC_MISC_H */
|
|
#define _RPC_MISC_H
|
|
|
|
|
|
|
|
/* well-known RIDs - Relative IDs */
|
|
|
|
/* RIDs - Well-known users ... */
|
|
#define DOMAIN_USER_RID_ADMIN (0x000001F4L)
|
|
#define DOMAIN_USER_RID_GUEST (0x000001F5L)
|
|
|
|
/* RIDs - well-known groups ... */
|
|
#define DOMAIN_GROUP_RID_ADMINS (0x00000200L)
|
|
#define DOMAIN_GROUP_RID_USERS (0x00000201L)
|
|
#define DOMAIN_GROUP_RID_GUESTS (0x00000202L)
|
|
|
|
/* RIDs - well-known aliases ... */
|
|
#define BUILTIN_ALIAS_RID_ADMINS (0x00000220L)
|
|
#define BUILTIN_ALIAS_RID_USERS (0x00000221L)
|
|
#define BUILTIN_ALIAS_RID_GUESTS (0x00000222L)
|
|
#define BUILTIN_ALIAS_RID_POWER_USERS (0x00000223L)
|
|
|
|
#define BUILTIN_ALIAS_RID_ACCOUNT_OPS (0x00000224L)
|
|
#define BUILTIN_ALIAS_RID_SYSTEM_OPS (0x00000225L)
|
|
#define BUILTIN_ALIAS_RID_PRINT_OPS (0x00000226L)
|
|
#define BUILTIN_ALIAS_RID_BACKUP_OPS (0x00000227L)
|
|
|
|
#define BUILTIN_ALIAS_RID_REPLICATOR (0x00000228L)
|
|
|
|
/*
|
|
* Masks for mappings between unix uid and gid types and
|
|
* NT RIDS.
|
|
*/
|
|
|
|
/* Take the bottom bit. */
|
|
#define RID_TYPE_MASK 1
|
|
#define RID_MULTIPLIER 2
|
|
|
|
/* The two common types. */
|
|
#define USER_RID_TYPE 0
|
|
#define GROUP_RID_TYPE 1
|
|
|
|
/* ENUM_HND */
|
|
typedef struct enum_hnd_info
|
|
{
|
|
uint32 ptr_hnd; /* pointer to enumeration handle */
|
|
uint32 handle; /* enumeration handle */
|
|
|
|
} ENUM_HND;
|
|
|
|
/* LOOKUP_LEVEL - switch value */
|
|
typedef struct lookup_level_info
|
|
{
|
|
uint16 value;
|
|
|
|
} LOOKUP_LEVEL;
|
|
|
|
/* DOM_SID2 - security id */
|
|
typedef struct sid_info_2
|
|
{
|
|
uint32 num_auths; /* length, bytes, including length of len :-) */
|
|
|
|
DOM_SID sid;
|
|
|
|
} DOM_SID2;
|
|
|
|
/* STRHDR - string header */
|
|
typedef struct header_info
|
|
{
|
|
uint16 str_str_len;
|
|
uint16 str_max_len;
|
|
uint32 buffer; /* non-zero */
|
|
|
|
} STRHDR;
|
|
|
|
/* UNIHDR - unicode string header */
|
|
typedef struct unihdr_info
|
|
{
|
|
uint16 uni_str_len;
|
|
uint16 uni_max_len;
|
|
uint32 buffer; /* usually has a value of 4 */
|
|
|
|
} UNIHDR;
|
|
|
|
/* UNIHDR2 - unicode string header and undocumented buffer */
|
|
typedef struct unihdr2_info
|
|
{
|
|
UNIHDR unihdr;
|
|
uint32 buffer; /* 32 bit buffer pointer */
|
|
|
|
} UNIHDR2;
|
|
|
|
/* clueless as to what maximum length should be */
|
|
#define MAX_UNISTRLEN 256
|
|
#define MAX_STRINGLEN 256
|
|
#define MAX_BUFFERLEN 512
|
|
|
|
/* UNISTR - unicode string size and buffer */
|
|
typedef struct unistr_info
|
|
{
|
|
/* unicode characters. ***MUST*** be little-endian. ***MUST*** be null-terminated */
|
|
uint16 *buffer;
|
|
} UNISTR;
|
|
|
|
/* BUFHDR - buffer header */
|
|
typedef struct bufhdr_info
|
|
{
|
|
uint32 buf_max_len;
|
|
uint32 buf_len;
|
|
|
|
} BUFHDR;
|
|
|
|
/* BUFFER2 - unicode string, size (in uint8 ascii chars) and buffer */
|
|
/* pathetic. some stupid team of \PIPE\winreg writers got the concept */
|
|
/* of a unicode string different from the other \PIPE\ writers */
|
|
typedef struct buffer2_info
|
|
{
|
|
uint32 buf_max_len;
|
|
uint32 undoc;
|
|
uint32 buf_len;
|
|
/* unicode characters. ***MUST*** be little-endian. **NOT** necessarily null-terminated */
|
|
uint16 *buffer;
|
|
|
|
} BUFFER2;
|
|
|
|
/* BUFFER3 */
|
|
typedef struct buffer3_info
|
|
{
|
|
uint32 buf_max_len;
|
|
uint8 *buffer; /* Data */
|
|
uint32 buf_len;
|
|
|
|
} BUFFER3;
|
|
|
|
/* BUFFER5 */
|
|
typedef struct buffer5_info
|
|
{
|
|
uint32 buf_len;
|
|
uint16 *buffer; /* data */
|
|
} BUFFER5;
|
|
|
|
/* UNISTR2 - unicode string size (in uint16 unicode chars) and buffer */
|
|
typedef struct unistr2_info
|
|
{
|
|
uint32 uni_max_len;
|
|
uint32 undoc;
|
|
uint32 uni_str_len;
|
|
/* unicode characters. ***MUST*** be little-endian.
|
|
**must** be null-terminated and the uni_str_len should include
|
|
the NULL character */
|
|
uint16 *buffer;
|
|
|
|
} UNISTR2;
|
|
|
|
/* STRING2 - string size (in uint8 chars) and buffer */
|
|
typedef struct string2_info
|
|
{
|
|
uint32 str_max_len;
|
|
uint32 undoc;
|
|
uint32 str_str_len;
|
|
uint8 *buffer; /* uint8 characters. **NOT** necessarily null-terminated */
|
|
|
|
} STRING2;
|
|
|
|
/* UNISTR3 - XXXX not sure about this structure */
|
|
typedef struct unistr3_info
|
|
{
|
|
uint32 uni_str_len;
|
|
UNISTR str;
|
|
|
|
} UNISTR3;
|
|
|
|
|
|
/* DOM_RID2 - domain RID structure for ntlsa pipe */
|
|
typedef struct domrid2_info
|
|
{
|
|
uint8 type; /* value is SID_NAME_USE enum */
|
|
uint32 rid;
|
|
uint32 rid_idx; /* referenced domain index */
|
|
|
|
} DOM_RID2;
|
|
|
|
/* DOM_RID3 - domain RID structure for samr pipe */
|
|
typedef struct domrid3_info
|
|
{
|
|
uint32 rid; /* domain-relative (to a SID) id */
|
|
uint32 type1; /* value is 0x1 */
|
|
uint32 ptr_type; /* undocumented pointer */
|
|
uint32 type2; /* value is 0x1 */
|
|
uint32 unk; /* value is 0x2 */
|
|
|
|
} DOM_RID3;
|
|
|
|
/* DOM_RID4 - rid + user attributes */
|
|
typedef struct domrid4_info
|
|
{
|
|
uint32 unknown;
|
|
uint16 attr;
|
|
uint32 rid; /* user RID */
|
|
|
|
} DOM_RID4;
|
|
|
|
/* DOM_CLNT_SRV - client / server names */
|
|
typedef struct clnt_srv_info
|
|
{
|
|
uint32 undoc_buffer; /* undocumented 32 bit buffer pointer */
|
|
UNISTR2 uni_logon_srv; /* logon server name */
|
|
uint32 undoc_buffer2; /* undocumented 32 bit buffer pointer */
|
|
UNISTR2 uni_comp_name; /* client machine name */
|
|
|
|
} DOM_CLNT_SRV;
|
|
|
|
/* DOM_LOG_INFO - login info */
|
|
typedef struct log_info
|
|
{
|
|
uint32 undoc_buffer; /* undocumented 32 bit buffer pointer */
|
|
UNISTR2 uni_logon_srv; /* logon server name */
|
|
UNISTR2 uni_acct_name; /* account name */
|
|
uint16 sec_chan; /* secure channel type */
|
|
UNISTR2 uni_comp_name; /* client machine name */
|
|
|
|
} DOM_LOG_INFO;
|
|
|
|
/* DOM_CHAL - challenge info */
|
|
typedef struct chal_info
|
|
{
|
|
uchar data[8]; /* credentials */
|
|
} DOM_CHAL;
|
|
|
|
/* DOM_CREDs - timestamped client or server credentials */
|
|
typedef struct cred_info
|
|
{
|
|
DOM_CHAL challenge; /* credentials */
|
|
UTIME timestamp; /* credential time-stamp */
|
|
} DOM_CRED;
|
|
|
|
/* DOM_CLNT_INFO - client info */
|
|
typedef struct clnt_info
|
|
{
|
|
DOM_LOG_INFO login;
|
|
DOM_CRED cred;
|
|
|
|
} DOM_CLNT_INFO;
|
|
|
|
/* DOM_CLNT_INFO2 - client info */
|
|
typedef struct clnt_info2
|
|
{
|
|
DOM_CLNT_SRV login;
|
|
uint32 ptr_cred;
|
|
DOM_CRED cred;
|
|
|
|
} DOM_CLNT_INFO2;
|
|
|
|
/* DOM_LOGON_ID - logon id */
|
|
typedef struct logon_info
|
|
{
|
|
uint32 low;
|
|
uint32 high;
|
|
|
|
} DOM_LOGON_ID;
|
|
|
|
/* OWF INFO */
|
|
typedef struct owf_info
|
|
{
|
|
uint8 data[16];
|
|
|
|
} OWF_INFO;
|
|
|
|
|
|
/* DOM_GID - group id + user attributes */
|
|
typedef struct gid_info
|
|
{
|
|
uint32 g_rid; /* a group RID */
|
|
uint32 attr;
|
|
|
|
} DOM_GID;
|
|
|
|
/* POLICY_HND */
|
|
typedef struct lsa_policy_info
|
|
{
|
|
uint32 data1;
|
|
uint32 data2;
|
|
uint16 data3;
|
|
uint16 data4;
|
|
uint8 data5[8];
|
|
} POLICY_HND;
|
|
|
|
/*
|
|
* A client connection's state, pipe name,
|
|
* user credentials, etc...
|
|
*/
|
|
typedef struct _cli_auth_fns cli_auth_fns;
|
|
struct user_creds;
|
|
struct cli_connection {
|
|
|
|
char *srv_name;
|
|
char *pipe_name;
|
|
struct user_creds usr_creds;
|
|
|
|
struct cli_state *pCli_state;
|
|
|
|
cli_auth_fns *auth;
|
|
|
|
void *auth_info;
|
|
void *auth_creds;
|
|
};
|
|
|
|
|
|
/*
|
|
* Associate a POLICY_HND with a cli_connection
|
|
*/
|
|
typedef struct rpc_hnd_node {
|
|
|
|
POLICY_HND hnd;
|
|
struct cli_connection *cli;
|
|
|
|
} RPC_HND_NODE;
|
|
|
|
typedef struct uint64_s
|
|
{
|
|
uint32 low;
|
|
uint32 high;
|
|
} UINT64_S;
|
|
|
|
|
|
#endif /* _RPC_MISC_H */
|