source3/include/ntdomain.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3    SMB parameters and setup
   4    Copyright (C) Andrew Tridgell 1992-1997
   5    Copyright (C) Luke Kenneth Casson Leighton 1996-1997
   6    Copyright (C) Paul Ashton 1997
   7    Copyright (C) Jeremy Allison 2000-2004
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #ifndef _NT_DOMAIN_H /* _NT_DOMAIN_H */
  24 #define _NT_DOMAIN_H
  25
  26 /*
  27  * A bunch of stuff that was put into smb.h
  28  * in the NTDOM branch - it didn't belong there.
  29  */
  30
  31 typedef struct _output_data {
  32         /*
  33          * Raw RPC output data. This does not include RPC headers or footers.
  34          */
  35         DATA_BLOB rdata;
  36
  37         /* The amount of data sent from the current rdata struct. */
  38         uint32 data_sent_length;
  39
  40         /*
  41          * The current fragment being returned. This inclues
  42          * headers, data and authentication footer.
  43          */
  44         DATA_BLOB frag;
  45
  46         /* The amount of data sent from the current PDU. */
  47         uint32 current_pdu_sent;
  48 } output_data;
  49
  50 typedef struct _input_data {
  51         /*
  52          * This is the current incoming pdu. The data here
  53          * is collected via multiple writes until a complete
  54          * pdu is seen, then the data is copied into the in_data
  55          * structure. The maximum size of this is 0x1630 (RPC_MAX_PDU_FRAG_LEN).
  56          * If length is zero, then we are at the start of a new
  57          * pdu.
  58          */
  59         DATA_BLOB pdu;
  60
  61         /*
  62          * The amount of data needed to complete the in_pdu.
  63          * If this is zero, then we are at the start of a new
  64          * pdu.
  65          */
  66         uint32 pdu_needed_len;
  67
  68         /*
  69          * This is the collection of input data with all
  70          * the rpc headers and auth footers removed.
  71          * The maximum length of this (1Mb) is strictly enforced.
  72          */
  73         DATA_BLOB data;
  74
  75 } input_data;
  76
  77 struct handle_list;
  78
  79 typedef struct pipe_rpc_fns {
  80
  81         struct pipe_rpc_fns *next, *prev;
  82
  83         /* RPC function table associated with the current rpc_bind (associated by context) */
  84
  85         const struct api_struct *cmds;
  86         int n_cmds;
  87         uint32 context_id;
  88
  89 } PIPE_RPC_FNS;
  90
  91 /*
  92  * Different auth types we support.
  93  * Can't keep in sync with wire values as spnego wraps different auth methods.
  94  */
  95
  96 enum pipe_auth_type { PIPE_AUTH_TYPE_NONE = 0, PIPE_AUTH_TYPE_NTLMSSP, PIPE_AUTH_TYPE_SCHANNEL,
  97                         PIPE_AUTH_TYPE_SPNEGO_NTLMSSP, PIPE_AUTH_TYPE_KRB5, PIPE_AUTH_TYPE_SPNEGO_KRB5 };
  98
  99 /* auth state for krb5. */
 100 struct kerberos_auth_struct {
 101         const char *service_principal;
 102         DATA_BLOB session_key;
 103 };
 104
 105 /* auth state for all bind types. */
 106
 107 struct pipe_auth_data {
 108         enum pipe_auth_type auth_type; /* switch for union below. */
 109         enum dcerpc_AuthLevel auth_level;
 110
 111         union {
 112                 struct schannel_state *schannel_auth;
 113                 struct auth_ntlmssp_state *auth_ntlmssp_state;
 114                 struct kerberos_auth_struct *kerberos_auth; /* Client only for now */
 115         } a_u;
 116
 117         /* Only the client code uses these 3 for now */
 118         char *domain;
 119         char *user_name;
 120         DATA_BLOB user_session_key;
 121
 122         void (*auth_data_free_func)(struct pipe_auth_data *);
 123 };
 124
 125 /*
 126  * DCE/RPC-specific samba-internal-specific handling of data on
 127  * NamedPipes.
 128  */
 129
 130 struct pipes_struct {
 131         struct pipes_struct *next, *prev;
 132
 133         char client_address[INET6_ADDRSTRLEN];
 134
 135         struct auth_serversupplied_info *server_info;
 136
 137         struct ndr_syntax_id syntax;
 138
 139         /* linked list of rpc dispatch tables associated
 140            with the open rpc contexts */
 141
 142         PIPE_RPC_FNS *contexts;
 143
 144         struct pipe_auth_data auth;
 145
 146         /*
 147          * Set to true when an RPC bind has been done on this pipe.
 148          */
 149
 150         bool pipe_bound;
 151
 152         /*
 153          * Set to true when we should return fault PDU's for everything.
 154          */
 155
 156         bool fault_state;
 157
 158         /*
 159          * Set to true when we should return fault PDU's for a bad handle.
 160          */
 161
 162         bool bad_handle_fault_state;
 163
 164         /*
 165          * Set to true when the backend does not support a call.
 166          */
 167
 168         bool rng_fault_state;
 169
 170         /*
 171          * Set to RPC_BIG_ENDIAN when dealing with big-endian PDU's
 172          */
 173
 174         bool endian;
 175
 176         /*
 177          * Struct to deal with multiple pdu inputs.
 178          */
 179
 180         input_data in_data;
 181
 182         /*
 183          * Struct to deal with multiple pdu outputs.
 184          */
 185
 186         output_data out_data;
 187
 188         /* This context is used for PDU data and is freed between each pdu.
 189                 Don't use for pipe state storage. */
 190         TALLOC_CTX *mem_ctx;
 191
 192         /* handle database to use on this pipe. */
 193         struct handle_list *pipe_handles;
 194
 195         /* call id retrieved from the pdu header */
 196         uint32_t call_id;
 197
 198         /* operation number retrieved from the rpc header */
 199         uint16_t opnum;
 200
 201         /* private data for the interface implementation */
 202         void *private_data;
 203
 204 };
 205
 206 struct api_struct {
 207         const char *name;
 208         uint8 opnum;
 209         bool (*fn) (struct pipes_struct *);
 210 };
 211
 212 #endif /* _NT_DOMAIN_H */