mirror of
https://github.com/samba-team/samba.git
synced 2024-12-23 17:34:34 +03:00
cc3d9dd042
The goal is to replace the passdb backend later.
412 lines
11 KiB
C
412 lines
11 KiB
C
/*
|
|
* Unix SMB/CIFS implementation.
|
|
*
|
|
* Winbind rpc backend functions
|
|
*
|
|
* Copyright (c) 2000-2003 Tim Potter
|
|
* Copyright (c) 2001 Andrew Tridgell
|
|
* Copyright (c) 2005 Volker Lendecke
|
|
* Copyright (c) 2008 Guenther Deschner (pidl conversion)
|
|
* Copyright (c) 2010 Andreas Schneider <asn@samba.org>
|
|
*
|
|
* This program is free software; you can redistribute it and/or modify
|
|
* it under the terms of the GNU General Public License as published by
|
|
* the Free Software Foundation; either version 3 of the License, or
|
|
* (at your option) any later version.
|
|
*
|
|
* This program is distributed in the hope that it will be useful,
|
|
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|
* GNU General Public License for more details.
|
|
*
|
|
* You should have received a copy of the GNU General Public License
|
|
* along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|
*/
|
|
|
|
#include "includes.h"
|
|
#include "winbindd.h"
|
|
#include "../librpc/gen_ndr/cli_samr.h"
|
|
#include "rpc_client/cli_samr.h"
|
|
#include "../librpc/gen_ndr/srv_samr.h"
|
|
#include "../librpc/gen_ndr/cli_lsa.h"
|
|
#include "rpc_client/cli_lsarpc.h"
|
|
#include "../librpc/gen_ndr/srv_lsa.h"
|
|
|
|
#undef DBGC_CLASS
|
|
#define DBGC_CLASS DBGC_WINBIND
|
|
|
|
static NTSTATUS open_internal_samr_pipe(TALLOC_CTX *mem_ctx,
|
|
struct rpc_pipe_client **samr_pipe)
|
|
{
|
|
static struct rpc_pipe_client *cli = NULL;
|
|
struct auth_serversupplied_info *server_info = NULL;
|
|
NTSTATUS status;
|
|
|
|
if (cli != NULL) {
|
|
goto done;
|
|
}
|
|
|
|
if (server_info == NULL) {
|
|
status = make_server_info_system(mem_ctx, &server_info);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
DEBUG(0, ("open_samr_pipe: Could not create auth_serversupplied_info: %s\n",
|
|
nt_errstr(status)));
|
|
return status;
|
|
}
|
|
}
|
|
|
|
/* create a samr connection */
|
|
status = rpc_pipe_open_internal(talloc_autofree_context(),
|
|
&ndr_table_samr.syntax_id,
|
|
rpc_samr_dispatch,
|
|
server_info,
|
|
&cli);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
DEBUG(0, ("open_samr_pipe: Could not connect to samr_pipe: %s\n",
|
|
nt_errstr(status)));
|
|
return status;
|
|
}
|
|
|
|
done:
|
|
if (samr_pipe) {
|
|
*samr_pipe = cli;
|
|
}
|
|
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
static NTSTATUS open_internal_samr_conn(TALLOC_CTX *mem_ctx,
|
|
struct winbindd_domain *domain,
|
|
struct rpc_pipe_client **samr_pipe,
|
|
struct policy_handle *samr_domain_hnd)
|
|
{
|
|
NTSTATUS status;
|
|
struct policy_handle samr_connect_hnd;
|
|
|
|
status = open_internal_samr_pipe(mem_ctx, samr_pipe);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
return status;
|
|
}
|
|
|
|
status = rpccli_samr_Connect2((*samr_pipe),
|
|
mem_ctx,
|
|
(*samr_pipe)->desthost,
|
|
SEC_FLAG_MAXIMUM_ALLOWED,
|
|
&samr_connect_hnd);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
return status;
|
|
}
|
|
|
|
status = rpccli_samr_OpenDomain((*samr_pipe),
|
|
mem_ctx,
|
|
&samr_connect_hnd,
|
|
SEC_FLAG_MAXIMUM_ALLOWED,
|
|
&domain->sid,
|
|
samr_domain_hnd);
|
|
|
|
return status;
|
|
}
|
|
|
|
static NTSTATUS open_internal_lsa_pipe(TALLOC_CTX *mem_ctx,
|
|
struct rpc_pipe_client **lsa_pipe)
|
|
{
|
|
static struct rpc_pipe_client *cli = NULL;
|
|
struct auth_serversupplied_info *server_info = NULL;
|
|
NTSTATUS status;
|
|
|
|
if (cli != NULL) {
|
|
goto done;
|
|
}
|
|
|
|
if (server_info == NULL) {
|
|
status = make_server_info_system(mem_ctx, &server_info);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
DEBUG(0, ("open_samr_pipe: Could not create auth_serversupplied_info: %s\n",
|
|
nt_errstr(status)));
|
|
return status;
|
|
}
|
|
}
|
|
|
|
/* create a samr connection */
|
|
status = rpc_pipe_open_internal(talloc_autofree_context(),
|
|
&ndr_table_lsarpc.syntax_id,
|
|
rpc_lsarpc_dispatch,
|
|
server_info,
|
|
&cli);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
DEBUG(0, ("open_samr_pipe: Could not connect to samr_pipe: %s\n",
|
|
nt_errstr(status)));
|
|
return status;
|
|
}
|
|
|
|
done:
|
|
if (lsa_pipe) {
|
|
*lsa_pipe = cli;
|
|
}
|
|
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
static NTSTATUS open_internal_lsa_conn(TALLOC_CTX *mem_ctx,
|
|
struct rpc_pipe_client **lsa_pipe,
|
|
struct policy_handle *lsa_hnd)
|
|
{
|
|
NTSTATUS status;
|
|
|
|
status = open_internal_lsa_pipe(mem_ctx, lsa_pipe);
|
|
if (!NT_STATUS_IS_OK(status)) {
|
|
return status;
|
|
}
|
|
|
|
status = rpccli_lsa_open_policy((*lsa_pipe),
|
|
mem_ctx,
|
|
true,
|
|
SEC_FLAG_MAXIMUM_ALLOWED,
|
|
lsa_hnd);
|
|
|
|
return status;
|
|
}
|
|
|
|
/*********************************************************************
|
|
SAM specific functions.
|
|
*********************************************************************/
|
|
|
|
/* List all domain groups */
|
|
static NTSTATUS sam_enum_dom_groups(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
uint32_t *num_entries,
|
|
struct acct_info **info)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* Query display info for a domain */
|
|
static NTSTATUS sam_query_user_list(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
uint32_t *num_entries,
|
|
struct wbint_userinfo **info)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* Lookup user information from a rid or username. */
|
|
static NTSTATUS sam_query_user(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
const struct dom_sid *user_sid,
|
|
struct wbint_userinfo *user_info)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* get a list of trusted domains - builtin domain */
|
|
static NTSTATUS sam_trusted_domains(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
struct netr_DomainTrustList *trusts)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* Lookup group membership given a rid. */
|
|
static NTSTATUS sam_lookup_groupmem(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
const struct dom_sid *group_sid,
|
|
enum lsa_SidType type,
|
|
uint32_t *num_names,
|
|
struct dom_sid **sid_mem,
|
|
char ***names,
|
|
uint32_t **name_types)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/*********************************************************************
|
|
BUILTIN specific functions.
|
|
*********************************************************************/
|
|
|
|
/* List all domain groups */
|
|
static NTSTATUS builtin_enum_dom_groups(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
uint32 *num_entries,
|
|
struct acct_info **info)
|
|
{
|
|
/* BUILTIN doesn't have domain groups */
|
|
*num_entries = 0;
|
|
*info = NULL;
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
/* Query display info for a domain */
|
|
static NTSTATUS builtin_query_user_list(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
uint32 *num_entries,
|
|
struct wbint_userinfo **info)
|
|
{
|
|
/* We don't have users */
|
|
*num_entries = 0;
|
|
*info = NULL;
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
/* Lookup user information from a rid or username. */
|
|
static NTSTATUS builtin_query_user(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
const struct dom_sid *user_sid,
|
|
struct wbint_userinfo *user_info)
|
|
{
|
|
return NT_STATUS_NO_SUCH_USER;
|
|
}
|
|
|
|
/* get a list of trusted domains - builtin domain */
|
|
static NTSTATUS builtin_trusted_domains(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
struct netr_DomainTrustList *trusts)
|
|
{
|
|
ZERO_STRUCTP(trusts);
|
|
return NT_STATUS_OK;
|
|
}
|
|
|
|
/*********************************************************************
|
|
COMMON functions.
|
|
*********************************************************************/
|
|
|
|
/* List all local groups (aliases) */
|
|
static NTSTATUS common_enum_local_groups(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
uint32_t *num_entries,
|
|
struct acct_info **info)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* convert a single name to a sid in a domain */
|
|
static NTSTATUS common_name_to_sid(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
const char *domain_name,
|
|
const char *name,
|
|
uint32_t flags,
|
|
struct dom_sid *sid,
|
|
enum lsa_SidType *type)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* convert a domain SID to a user or group name */
|
|
static NTSTATUS common_sid_to_name(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
const struct dom_sid *sid,
|
|
char **domain_name,
|
|
char **name,
|
|
enum lsa_SidType *type)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
static NTSTATUS common_rids_to_names(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
const struct dom_sid *sid,
|
|
uint32 *rids,
|
|
size_t num_rids,
|
|
char **domain_name,
|
|
char ***names,
|
|
enum lsa_SidType **types)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
static NTSTATUS common_lockout_policy(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
struct samr_DomInfo12 *policy)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
static NTSTATUS common_password_policy(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
struct samr_DomInfo1 *policy)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* Lookup groups a user is a member of. I wish Unix had a call like this! */
|
|
static NTSTATUS common_lookup_usergroups(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
const struct dom_sid *user_sid,
|
|
uint32_t *num_groups,
|
|
struct dom_sid **user_gids)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
static NTSTATUS common_lookup_useraliases(struct winbindd_domain *domain,
|
|
TALLOC_CTX *mem_ctx,
|
|
uint32_t num_sids,
|
|
const struct dom_sid *sids,
|
|
uint32_t *p_num_aliases,
|
|
uint32_t **rids)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
/* find the sequence number for a domain */
|
|
static NTSTATUS common_sequence_number(struct winbindd_domain *domain,
|
|
uint32_t *seq)
|
|
{
|
|
/* TODO FIXME */
|
|
return NT_STATUS_NOT_IMPLEMENTED;
|
|
}
|
|
|
|
#if 0
|
|
/* the rpc backend methods are exposed via this structure */
|
|
struct winbindd_methods builtin_passdb_methods = {
|
|
.consistent = false,
|
|
|
|
.query_user_list = builtin_query_user_list,
|
|
.enum_dom_groups = builtin_enum_dom_groups,
|
|
.enum_local_groups = common_enum_local_groups,
|
|
.name_to_sid = common_name_to_sid,
|
|
.sid_to_name = common_sid_to_name,
|
|
.rids_to_names = common_rids_to_names,
|
|
.query_user = builtin_query_user,
|
|
.lookup_usergroups = common_lookup_usergroups,
|
|
.lookup_useraliases = common_lookup_useraliases,
|
|
.lookup_groupmem = sam_lookup_groupmem,
|
|
.sequence_number = common_sequence_number,
|
|
.lockout_policy = common_lockout_policy,
|
|
.password_policy = common_password_policy,
|
|
.trusted_domains = builtin_trusted_domains
|
|
};
|
|
|
|
/* the rpc backend methods are exposed via this structure */
|
|
struct winbindd_methods sam_passdb_methods = {
|
|
.consistent = false,
|
|
|
|
.query_user_list = sam_query_user_list,
|
|
.enum_dom_groups = sam_enum_dom_groups,
|
|
.enum_local_groups = common_enum_local_groups,
|
|
.name_to_sid = common_name_to_sid,
|
|
.sid_to_name = common_sid_to_name,
|
|
.rids_to_names = common_rids_to_names,
|
|
.query_user = sam_query_user,
|
|
.lookup_usergroups = common_lookup_usergroups,
|
|
.lookup_useraliases = common_lookup_useraliases,
|
|
.lookup_groupmem = sam_lookup_groupmem,
|
|
.sequence_number = common_sequence_number,
|
|
.lockout_policy = common_lockout_policy,
|
|
.password_policy = common_password_policy,
|
|
.trusted_domains = sam_trusted_domains
|
|
};
|
|
#endif
|