source/passdb/smbpassfile.c

   1 /*
   2  * Unix SMB/Netbios implementation. Version 1.9. SMB parameters and setup
   3  * Copyright (C) Andrew Tridgell 1992-1998 Modified by Jeremy Allison 1995.
   4  *
   5  * This program is free software; you can redistribute it and/or modify it under
   6  * the terms of the GNU General Public License as published by the Free
   7  * Software Foundation; either version 2 of the License, or (at your option)
   8  * any later version.
   9  *
  10  * This program is distributed in the hope that it will be useful, but WITHOUT
  11  * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or
  12  * FITNESS FOR A PARTICULAR PURPOSE.  See the GNU General Public License for
  13  * more details.
  14  *
  15  * You should have received a copy of the GNU General Public License along with
  16  * this program; if not, write to the Free Software Foundation, Inc., 675
  17  * Mass Ave, Cambridge, MA 02139, USA.
  18  */
  19
  20 /*
  21  * This file also contains migration code to move from an old
  22  * trust account password file stored in the file :
  23  * ${SAMBA_HOME}/private/{domain}.{netbiosname}.mac
  24  * into a record stored in the tdb ${SAMBA_HOME}/private/secrets.tdb
  25  * database. JRA.
  26  */
  27
  28 #include "includes.h"
  29
  30 extern int DEBUGLEVEL;
  31 extern pstring global_myname;
  32
  33 BOOL global_machine_password_needs_changing = False;
  34
  35
  36 static int mach_passwd_lock_depth;
  37 static FILE *mach_passwd_fp;
  38
  39 /***************************************************************
  40  Lock an fd. Abandon after waitsecs seconds.
  41 ****************************************************************/
  42
  43 static BOOL pw_file_lock(int fd, int type, int secs, int *plock_depth)
  44 {
  45   if (fd < 0)
  46     return False;
  47
  48   if(*plock_depth == 0) {
  49     if (!do_file_lock(fd, secs, type)) {
  50       DEBUG(10,("pw_file_lock: locking file failed, error = %s.\n",
  51                  strerror(errno)));
  52       return False;
  53     }
  54   }
  55
  56   (*plock_depth)++;
  57
  58   return True;
  59 }
  60
  61 /***************************************************************
  62  Unlock an fd. Abandon after waitsecs seconds.
  63 ****************************************************************/
  64
  65 static BOOL pw_file_unlock(int fd, int *plock_depth)
  66 {
  67   BOOL ret=True;
  68
  69   if(*plock_depth == 1)
  70     ret = do_file_lock(fd, 5, F_UNLCK);
  71
  72   if (*plock_depth > 0)
  73     (*plock_depth)--;
  74
  75   if(!ret)
  76     DEBUG(10,("pw_file_unlock: unlocking file failed, error = %s.\n",
  77                  strerror(errno)));
  78   return ret;
  79 }
  80
  81 /************************************************************************
  82  Routine to get the name for an old trust account file.
  83 ************************************************************************/
  84
  85 static void get_trust_account_file_name( char *domain, char *name, char *mac_file)
  86 {
  87   unsigned int mac_file_len;
  88   char *p;
  89
  90   pstrcpy(mac_file, lp_smb_passwd_file());
  91   p = strrchr(mac_file, '/');
  92   if(p != NULL)
  93     *++p = '\0';
  94
  95   mac_file_len = strlen(mac_file);
  96
  97   if ((int)(sizeof(pstring) - mac_file_len - strlen(domain) - strlen(name) - 6) < 0)
  98   {
  99     DEBUG(0,("trust_password_lock: path %s too long to add trust details.\n",
 100               mac_file));
 101     return;
 102   }
 103
 104   pstrcat(mac_file, domain);
 105   pstrcat(mac_file, ".");
 106   pstrcat(mac_file, name);
 107   pstrcat(mac_file, ".mac");
 108 }
 109
 110 /************************************************************************
 111  Routine to lock the old trust account password file for a domain.
 112  As this is a function to migrate to the new secrets.tdb, we never
 113  create the file here, only open it.
 114 ************************************************************************/
 115
 116 static BOOL trust_password_file_lock(char *domain, char *name)
 117 {
 118   pstring mac_file;
 119
 120   if(mach_passwd_lock_depth == 0) {
 121     int fd;
 122
 123     get_trust_account_file_name( domain, name, mac_file);
 124
 125     if ((fd = sys_open(mac_file, O_RDWR, 0)) == -1)
 126       return False;
 127
 128     if((mach_passwd_fp = fdopen(fd, "w+b")) == NULL) {
 129         DEBUG(0,("trust_password_lock: cannot open file %s - Error was %s.\n",
 130               mac_file, strerror(errno) ));
 131         return False;
 132     }
 133
 134     if(!pw_file_lock(fileno(mach_passwd_fp), F_WRLCK, 60, &mach_passwd_lock_depth)) {
 135       DEBUG(0,("trust_password_lock: cannot lock file %s\n", mac_file));
 136       fclose(mach_passwd_fp);
 137       return False;
 138     }
 139
 140   }
 141
 142   return True;
 143 }
 144
 145 /************************************************************************
 146  Routine to unlock the old trust account password file for a domain.
 147 ************************************************************************/
 148
 149 static BOOL trust_password_file_unlock(void)
 150 {
 151   BOOL ret = pw_file_unlock(fileno(mach_passwd_fp), &mach_passwd_lock_depth);
 152   if(mach_passwd_lock_depth == 0)
 153     fclose(mach_passwd_fp);
 154   return ret;
 155 }
 156
 157 /************************************************************************
 158  Routine to delete the old trust account password file for a domain.
 159  Note that this file must be locked as it is truncated before the
 160  delete. This is to ensure it only gets deleted by one smbd.
 161 ************************************************************************/
 162
 163 static BOOL trust_password_file_delete( char *domain, char *name )
 164 {
 165   pstring mac_file;
 166   int ret;
 167
 168   get_trust_account_file_name( domain, name, mac_file);
 169   if(sys_ftruncate(fileno(mach_passwd_fp),(SMB_OFF_T)0) == -1) {
 170     DEBUG(0,("trust_password_file_delete: Failed to truncate file %s (%s)\n",
 171         mac_file, strerror(errno) ));
 172   }
 173   ret = unlink( mac_file );
 174   return (ret != -1);
 175 }
 176
 177 /************************************************************************
 178  Routine to get the old trust account password for a domain - to convert
 179  to the new secrets.tdb entry.
 180  The user of this function must have locked the trust password file.
 181 ************************************************************************/
 182
 183 static BOOL get_trust_account_password_from_file( unsigned char *ret_pwd, time_t *pass_last_set_time)
 184 {
 185   char linebuf[256];
 186   char *p;
 187   int i;
 188   SMB_STRUCT_STAT st;
 189   linebuf[0] = '\0';
 190
 191   *pass_last_set_time = (time_t)0;
 192   memset(ret_pwd, '\0', 16);
 193
 194   if(sys_fstat(fileno(mach_passwd_fp), &st) == -1) {
 195     DEBUG(0,("get_trust_account_password: Failed to stat file. Error was %s.\n",
 196               strerror(errno) ));
 197     return False;
 198   }
 199
 200   /*
 201    * If size is zero, another smbd has migrated this file
 202    * to the secrets.tdb file, and we are in a race condition.
 203    * Just ignore the file.
 204    */
 205
 206   if (st.st_size == 0)
 207     return False;
 208
 209   if(sys_fseek( mach_passwd_fp, (SMB_OFF_T)0, SEEK_SET) == -1) {
 210     DEBUG(0,("get_trust_account_password: Failed to seek to start of file. Error was %s.\n",
 211               strerror(errno) ));
 212     return False;
 213   }
 214
 215   fgets(linebuf, sizeof(linebuf), mach_passwd_fp);
 216   if(ferror(mach_passwd_fp)) {
 217     DEBUG(0,("get_trust_account_password: Failed to read password. Error was %s.\n",
 218               strerror(errno) ));
 219     return False;
 220   }
 221
 222   if(linebuf[strlen(linebuf)-1] == '\n')
 223     linebuf[strlen(linebuf)-1] = '\0';
 224
 225   /*
 226    * The length of the line read
 227    * must be 45 bytes ( <---XXXX 32 bytes-->:TLC-12345678
 228    */
 229
 230   if(strlen(linebuf) != 45) {
 231     DEBUG(0,("get_trust_account_password: Malformed trust password file (wrong length \
 232 - was %d, should be 45).\n", (int)strlen(linebuf)));
 233 #ifdef DEBUG_PASSWORD
 234     DEBUG(100,("get_trust_account_password: line = |%s|\n", linebuf));
 235 #endif
 236     return False;
 237   }
 238
 239   /*
 240    * Get the hex password.
 241    */
 242
 243   if (!pdb_gethexpwd((char *)linebuf, ret_pwd) || linebuf[32] != ':' ||
 244          strncmp(&linebuf[33], "TLC-", 4)) {
 245     DEBUG(0,("get_trust_account_password: Malformed trust password file (incorrect format).\n"));
 246 #ifdef DEBUG_PASSWORD
 247     DEBUG(100,("get_trust_account_password: line = |%s|\n", linebuf));
 248 #endif
 249     return False;
 250   }
 251
 252   /*
 253    * Get the last changed time.
 254    */
 255   p = &linebuf[37];
 256
 257   for(i = 0; i < 8; i++) {
 258     if(p[i] == '\0' || !isxdigit((int)p[i])) {
 259       DEBUG(0,("get_trust_account_password: Malformed trust password file (no timestamp).\n"));
 260 #ifdef DEBUG_PASSWORD
 261       DEBUG(100,("get_trust_account_password: line = |%s|\n", linebuf));
 262 #endif
 263       return False;
 264     }
 265   }
 266
 267   /*
 268    * p points at 8 characters of hex digits -
 269    * read into a time_t as the seconds since
 270    * 1970 that the password was last changed.
 271    */
 272
 273   *pass_last_set_time = (time_t)strtol(p, NULL, 16);
 274
 275   return True;
 276 }
 277
 278 /************************************************************************
 279 form a key for fetching a domain trust password
 280 ************************************************************************/
 281
 282 static char *trust_keystr(char *domain)
 283 {
 284         static fstring keystr;
 285         slprintf(keystr,sizeof(keystr),"%s/%s", SECRETS_MACHINE_ACCT_PASS, domain);
 286         return keystr;
 287 }
 288
 289 /************************************************************************
 290  Migrate an old DOMAIN.MACINE.mac password file to the tdb secrets db.
 291 ************************************************************************/
 292
 293 static void migrate_from_old_password_file(char *domain)
 294 {
 295         struct machine_acct_pass pass;
 296
 297         if (!trust_password_file_lock(domain, global_myname))
 298                 return;
 299
 300         if (!get_trust_account_password_from_file( pass.hash, &pass.mod_time)) {
 301                 trust_password_file_unlock();
 302                 return;
 303         }
 304
 305         trust_password_file_delete(domain, global_myname);
 306
 307         secrets_store(trust_keystr(domain), (void *)&pass, sizeof(pass));
 308
 309         trust_password_file_unlock();
 310         return;
 311 }
 312
 313 /************************************************************************
 314  Routine to delete the trust account password file for a domain.
 315 ************************************************************************/
 316
 317 BOOL trust_password_delete(char *domain)
 318 {
 319         return secrets_delete(trust_keystr(domain));
 320 }
 321