source/rpc_client/init_samr.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  RPC Pipe client / server routines
   4  *  Copyright (C) Guenther Deschner                  2008.
   5  *
   6  *  This program is free software; you can redistribute it and/or modify
   7  *  it under the terms of the GNU General Public License as published by
   8  *  the Free Software Foundation; either version 3 of the License, or
   9  *  (at your option) any later version.
  10  *
  11  *  This program is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  *  GNU General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU General Public License
  17  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #include "includes.h"
  21
  22 /*******************************************************************
  23  inits a structure.
  24 ********************************************************************/
  25
  26 void init_samr_DomInfo1(struct samr_DomInfo1 *r,
  27                         uint16_t min_password_length,
  28                         uint16_t password_history_length,
  29                         uint32_t password_properties,
  30                         int64_t max_password_age,
  31                         int64_t min_password_age)
  32 {
  33         r->min_password_length = min_password_length;
  34         r->password_history_length = password_history_length;
  35         r->password_properties = password_properties;
  36         r->max_password_age = max_password_age;
  37         r->min_password_age = min_password_age;
  38 }
  39
  40 /*******************************************************************
  41  inits a structure.
  42 ********************************************************************/
  43
  44 void init_samr_DomInfo2(struct samr_DomInfo2 *r,
  45                         NTTIME force_logoff_time,
  46                         const char *comment,
  47                         const char *domain_name,
  48                         const char *primary,
  49                         uint64_t sequence_num,
  50                         uint32_t unknown2,
  51                         enum samr_Role role,
  52                         uint32_t unknown3,
  53                         uint32_t num_users,
  54                         uint32_t num_groups,
  55                         uint32_t num_aliases)
  56 {
  57         r->force_logoff_time = force_logoff_time;
  58         init_lsa_String(&r->comment, comment);
  59         init_lsa_String(&r->domain_name, domain_name);
  60         init_lsa_String(&r->primary, primary);
  61         r->sequence_num = sequence_num;
  62         r->unknown2 = unknown2;
  63         r->role = role;
  64         r->unknown3 = unknown3;
  65         r->num_users = num_users;
  66         r->num_groups = num_groups;
  67         r->num_aliases = num_aliases;
  68 }
  69
  70 /*******************************************************************
  71  inits a structure.
  72 ********************************************************************/
  73
  74 void init_samr_DomInfo3(struct samr_DomInfo3 *r,
  75                         NTTIME force_logoff_time)
  76 {
  77         r->force_logoff_time = force_logoff_time;
  78 }
  79
  80 /*******************************************************************
  81  inits a structure.
  82 ********************************************************************/
  83
  84 void init_samr_DomInfo4(struct samr_DomInfo4 *r,
  85                         const char *comment)
  86 {
  87         init_lsa_String(&r->comment, comment);
  88 }
  89
  90 /*******************************************************************
  91  inits a structure.
  92 ********************************************************************/
  93
  94 void init_samr_DomInfo5(struct samr_DomInfo5 *r,
  95                         const char *domain_name)
  96 {
  97         init_lsa_String(&r->domain_name, domain_name);
  98 }
  99
 100 /*******************************************************************
 101  inits a structure.
 102 ********************************************************************/
 103
 104 void init_samr_DomInfo6(struct samr_DomInfo6 *r,
 105                         const char *primary)
 106 {
 107         init_lsa_String(&r->primary, primary);
 108 }
 109
 110 /*******************************************************************
 111  inits a structure.
 112 ********************************************************************/
 113
 114 void init_samr_DomInfo7(struct samr_DomInfo7 *r,
 115                         enum samr_Role role)
 116 {
 117         r->role = role;
 118 }
 119
 120 /*******************************************************************
 121  inits a structure.
 122 ********************************************************************/
 123
 124 void init_samr_DomInfo8(struct samr_DomInfo8 *r,
 125                         uint64_t sequence_num,
 126                         NTTIME domain_create_time)
 127 {
 128         r->sequence_num = sequence_num;
 129         r->domain_create_time = domain_create_time;
 130 }
 131
 132 /*******************************************************************
 133  inits a structure.
 134 ********************************************************************/
 135
 136 void init_samr_DomInfo9(struct samr_DomInfo9 *r,
 137                         uint32_t unknown)
 138 {
 139         r->unknown = unknown;
 140 }
 141
 142 /*******************************************************************
 143  inits a structure.
 144 ********************************************************************/
 145
 146 void init_samr_DomInfo12(struct samr_DomInfo12 *r,
 147                          uint64_t lockout_duration,
 148                          uint64_t lockout_window,
 149                          uint16_t lockout_threshold)
 150 {
 151         r->lockout_duration = lockout_duration;
 152         r->lockout_window = lockout_window;
 153         r->lockout_threshold = lockout_threshold;
 154 }
 155
 156 /*******************************************************************
 157  inits a samr_GroupInfoAll structure.
 158 ********************************************************************/
 159
 160 void init_samr_group_info1(struct samr_GroupInfoAll *r,
 161                            const char *name,
 162                            uint32_t attributes,
 163                            uint32_t num_members,
 164                            const char *description)
 165 {
 166         DEBUG(5, ("init_samr_group_info1\n"));
 167
 168         init_lsa_String(&r->name, name);
 169         r->attributes = attributes;
 170         r->num_members = num_members;
 171         init_lsa_String(&r->description, description);
 172 }
 173
 174 /*******************************************************************
 175  inits a lsa_String structure
 176 ********************************************************************/
 177
 178 void init_samr_group_info2(struct lsa_String *r, const char *group_name)
 179 {
 180         DEBUG(5, ("init_samr_group_info2\n"));
 181
 182         init_lsa_String(r, group_name);
 183 }
 184
 185 /*******************************************************************
 186  inits a samr_GroupInfoAttributes structure.
 187 ********************************************************************/
 188
 189 void init_samr_group_info3(struct samr_GroupInfoAttributes *r,
 190                            uint32_t attributes)
 191 {
 192         DEBUG(5, ("init_samr_group_info3\n"));
 193
 194         r->attributes = attributes;
 195 }
 196
 197 /*******************************************************************
 198  inits a lsa_String structure
 199 ********************************************************************/
 200
 201 void init_samr_group_info4(struct lsa_String *r, const char *description)
 202 {
 203         DEBUG(5, ("init_samr_group_info4\n"));
 204
 205         init_lsa_String(r, description);
 206 }
 207
 208 /*******************************************************************
 209  inits a samr_GroupInfoAll structure.
 210 ********************************************************************/
 211
 212 void init_samr_group_info5(struct samr_GroupInfoAll *r,
 213                            const char *name,
 214                            uint32_t attributes,
 215                            uint32_t num_members,
 216                            const char *description)
 217 {
 218         DEBUG(5, ("init_samr_group_info5\n"));
 219
 220         init_lsa_String(&r->name, name);
 221         r->attributes = attributes;
 222         r->num_members = num_members;
 223         init_lsa_String(&r->description, description);
 224 }
 225
 226 /*******************************************************************
 227  inits a samr_AliasInfoAll structure.
 228 ********************************************************************/
 229
 230 void init_samr_alias_info1(struct samr_AliasInfoAll *r,
 231                            const char *name,
 232                            uint32_t num_members,
 233                            const char *description)
 234 {
 235         DEBUG(5, ("init_samr_alias_info1\n"));
 236
 237         init_lsa_String(&r->name, name);
 238         r->num_members = num_members;
 239         init_lsa_String(&r->description, description);
 240 }
 241
 242 /*******************************************************************
 243 inits a lsa_String structure.
 244 ********************************************************************/
 245
 246 void init_samr_alias_info3(struct lsa_String *r,
 247                            const char *description)
 248 {
 249         DEBUG(5, ("init_samr_alias_info3\n"));
 250
 251         init_lsa_String(r, description);
 252 }
 253
 254 /*******************************************************************
 255  inits a samr_UserInfo7 structure.
 256 ********************************************************************/
 257
 258 void init_samr_user_info7(struct samr_UserInfo7 *r,
 259                           const char *account_name)
 260 {
 261         DEBUG(5, ("init_samr_user_info7\n"));
 262
 263         init_lsa_String(&r->account_name, account_name);
 264 }
 265
 266 /*******************************************************************
 267  inits a samr_UserInfo9 structure.
 268 ********************************************************************/
 269
 270 void init_samr_user_info9(struct samr_UserInfo9 *r,
 271                           uint32_t primary_gid)
 272 {
 273         DEBUG(5, ("init_samr_user_info9\n"));
 274
 275         r->primary_gid = primary_gid;
 276 }
 277
 278 /*******************************************************************
 279  inits a SAM_USER_INFO_16 structure.
 280 ********************************************************************/
 281
 282 void init_samr_user_info16(struct samr_UserInfo16 *r,
 283                            uint32_t acct_flags)
 284 {
 285         DEBUG(5, ("init_samr_user_info16\n"));
 286
 287         r->acct_flags = acct_flags;
 288 }
 289
 290 /*******************************************************************
 291  inits a samr_UserInfo18 structure.
 292 ********************************************************************/
 293
 294 void init_samr_user_info18(struct samr_UserInfo18 *r,
 295                            const uint8 lm_pwd[16],
 296                            const uint8 nt_pwd[16])
 297 {
 298         DEBUG(5, ("init_samr_user_info18\n"));
 299
 300         r->lm_pwd_active =
 301                 memcpy(r->lm_pwd.hash, lm_pwd, sizeof(r->lm_pwd.hash)) ? true : false;
 302         r->nt_pwd_active =
 303                 memcpy(r->nt_pwd.hash, nt_pwd, sizeof(r->nt_pwd.hash)) ? true : false;
 304 }
 305
 306 /*******************************************************************
 307  inits a samr_UserInfo20 structure.
 308 ********************************************************************/
 309
 310 void init_samr_user_info20(struct samr_UserInfo20 *r,
 311                            struct lsa_BinaryString *parameters)
 312 {
 313         r->parameters = *parameters;
 314 }
 315
 316 /*************************************************************************
 317  inits a samr_UserInfo21 structure
 318  *************************************************************************/
 319
 320 void init_samr_user_info21(struct samr_UserInfo21 *r,
 321                            NTTIME last_logon,
 322                            NTTIME last_logoff,
 323                            NTTIME last_password_change,
 324                            NTTIME acct_expiry,
 325                            NTTIME allow_password_change,
 326                            NTTIME force_password_change,
 327                            const char *account_name,
 328                            const char *full_name,
 329                            const char *home_directory,
 330                            const char *home_drive,
 331                            const char *logon_script,
 332                            const char *profile_path,
 333                            const char *description,
 334                            const char *workstations,
 335                            const char *comment,
 336                            struct lsa_BinaryString *parameters,
 337                            uint32_t rid,
 338                            uint32_t primary_gid,
 339                            uint32_t acct_flags,
 340                            uint32_t fields_present,
 341                            struct samr_LogonHours logon_hours,
 342                            uint16_t bad_password_count,
 343                            uint16_t logon_count,
 344                            uint16_t country_code,
 345                            uint16_t code_page,
 346                            uint8_t nt_password_set,
 347                            uint8_t lm_password_set,
 348                            uint8_t password_expired)
 349 {
 350         r->last_logon = last_logon;
 351         r->last_logoff = last_logoff;
 352         r->last_password_change = last_password_change;
 353         r->acct_expiry = acct_expiry;
 354         r->allow_password_change = allow_password_change;
 355         r->force_password_change = force_password_change;
 356         init_lsa_String(&r->account_name, account_name);
 357         init_lsa_String(&r->full_name, full_name);
 358         init_lsa_String(&r->home_directory, home_directory);
 359         init_lsa_String(&r->home_drive, home_drive);
 360         init_lsa_String(&r->logon_script, logon_script);
 361         init_lsa_String(&r->profile_path, profile_path);
 362         init_lsa_String(&r->description, description);
 363         init_lsa_String(&r->workstations, workstations);
 364         init_lsa_String(&r->comment, comment);
 365         r->parameters = *parameters;
 366         r->rid = rid;
 367         r->primary_gid = primary_gid;
 368         r->acct_flags = acct_flags;
 369         r->fields_present = fields_present;
 370         r->logon_hours = logon_hours;
 371         r->bad_password_count = bad_password_count;
 372         r->logon_count = logon_count;
 373         r->country_code = country_code;
 374         r->code_page = code_page;
 375         r->nt_password_set = nt_password_set;
 376         r->lm_password_set = lm_password_set;
 377         r->password_expired = password_expired;
 378 }
 379
 380 /*************************************************************************
 381  init_samr_user_info23
 382  *************************************************************************/
 383
 384 void init_samr_user_info23(struct samr_UserInfo23 *r,
 385                            NTTIME last_logon,
 386                            NTTIME last_logoff,
 387                            NTTIME last_password_change,
 388                            NTTIME acct_expiry,
 389                            NTTIME allow_password_change,
 390                            NTTIME force_password_change,
 391                            const char *account_name,
 392                            const char *full_name,
 393                            const char *home_directory,
 394                            const char *home_drive,
 395                            const char *logon_script,
 396                            const char *profile_path,
 397                            const char *description,
 398                            const char *workstations,
 399                            const char *comment,
 400                            struct lsa_BinaryString *parameters,
 401                            uint32_t rid,
 402                            uint32_t primary_gid,
 403                            uint32_t acct_flags,
 404                            uint32_t fields_present,
 405                            struct samr_LogonHours logon_hours,
 406                            uint16_t bad_password_count,
 407                            uint16_t logon_count,
 408                            uint16_t country_code,
 409                            uint16_t code_page,
 410                            uint8_t nt_password_set,
 411                            uint8_t lm_password_set,
 412                            uint8_t password_expired,
 413                            struct samr_CryptPassword *pwd_buf)
 414 {
 415         memset(r, '\0', sizeof(*r));
 416         init_samr_user_info21(&r->info,
 417                               last_logon,
 418                               last_logoff,
 419                               last_password_change,
 420                               acct_expiry,
 421                               allow_password_change,
 422                               force_password_change,
 423                               account_name,
 424                               full_name,
 425                               home_directory,
 426                               home_drive,
 427                               logon_script,
 428                               profile_path,
 429                               description,
 430                               workstations,
 431                               comment,
 432                               parameters,
 433                               rid,
 434                               primary_gid,
 435                               acct_flags,
 436                               fields_present,
 437                               logon_hours,
 438                               bad_password_count,
 439                               logon_count,
 440                               country_code,
 441                               code_page,
 442                               nt_password_set,
 443                               lm_password_set,
 444                               password_expired);
 445
 446         r->password = *pwd_buf;
 447 }
 448
 449 /*************************************************************************
 450  init_samr_user_info24
 451  *************************************************************************/
 452
 453 void init_samr_user_info24(struct samr_UserInfo24 *r,
 454                            struct samr_CryptPassword *pwd_buf,
 455                            uint8_t password_expired)
 456 {
 457         DEBUG(10, ("init_samr_user_info24:\n"));
 458
 459         r->password = *pwd_buf;
 460         r->password_expired = password_expired;
 461 }
 462
 463 /*************************************************************************
 464  init_samr_user_info25
 465  *************************************************************************/
 466
 467 void init_samr_user_info25(struct samr_UserInfo25 *r,
 468                            NTTIME last_logon,
 469                            NTTIME last_logoff,
 470                            NTTIME last_password_change,
 471                            NTTIME acct_expiry,
 472                            NTTIME allow_password_change,
 473                            NTTIME force_password_change,
 474                            const char *account_name,
 475                            const char *full_name,
 476                            const char *home_directory,
 477                            const char *home_drive,
 478                            const char *logon_script,
 479                            const char *profile_path,
 480                            const char *description,
 481                            const char *workstations,
 482                            const char *comment,
 483                            struct lsa_BinaryString *parameters,
 484                            uint32_t rid,
 485                            uint32_t primary_gid,
 486                            uint32_t acct_flags,
 487                            uint32_t fields_present,
 488                            struct samr_LogonHours logon_hours,
 489                            uint16_t bad_password_count,
 490                            uint16_t logon_count,
 491                            uint16_t country_code,
 492                            uint16_t code_page,
 493                            uint8_t nt_password_set,
 494                            uint8_t lm_password_set,
 495                            uint8_t password_expired,
 496                            struct samr_CryptPasswordEx *pwd_buf)
 497 {
 498         DEBUG(10, ("init_samr_user_info25:\n"));
 499
 500         memset(r, '\0', sizeof(*r));
 501         init_samr_user_info21(&r->info,
 502                               last_logon,
 503                               last_logoff,
 504                               last_password_change,
 505                               acct_expiry,
 506                               allow_password_change,
 507                               force_password_change,
 508                               account_name,
 509                               full_name,
 510                               home_directory,
 511                               home_drive,
 512                               logon_script,
 513                               profile_path,
 514                               description,
 515                               workstations,
 516                               comment,
 517                               parameters,
 518                               rid,
 519                               primary_gid,
 520                               acct_flags,
 521                               fields_present,
 522                               logon_hours,
 523                               bad_password_count,
 524                               logon_count,
 525                               country_code,
 526                               code_page,
 527                               nt_password_set,
 528                               lm_password_set,
 529                               password_expired);
 530
 531         r->password = *pwd_buf;
 532 }
 533
 534 /*************************************************************************
 535  init_samr_user_info26
 536  *************************************************************************/
 537
 538 void init_samr_user_info26(struct samr_UserInfo26 *r,
 539                            struct samr_CryptPasswordEx *pwd_buf,
 540                            uint8_t password_expired)
 541 {
 542         DEBUG(10, ("init_samr_user_info26:\n"));
 543
 544         r->password = *pwd_buf;
 545         r->password_expired = password_expired;
 546 }
 547
 548 /*************************************************************************
 549  inits a samr_CryptPasswordEx structure
 550  *************************************************************************/
 551
 552 void init_samr_CryptPasswordEx(const char *pwd,
 553                                DATA_BLOB *session_key,
 554                                struct samr_CryptPasswordEx *pwd_buf)
 555 {
 556         /* samr_CryptPasswordEx */
 557
 558         uchar pwbuf[532];
 559         struct MD5Context md5_ctx;
 560         uint8_t confounder[16];
 561         DATA_BLOB confounded_session_key = data_blob(NULL, 16);
 562
 563         encode_pw_buffer(pwbuf, pwd, STR_UNICODE);
 564
 565         generate_random_buffer((uint8_t *)confounder, 16);
 566
 567         MD5Init(&md5_ctx);
 568         MD5Update(&md5_ctx, confounder, 16);
 569         MD5Update(&md5_ctx, session_key->data,
 570                             session_key->length);
 571         MD5Final(confounded_session_key.data, &md5_ctx);
 572
 573         SamOEMhashBlob(pwbuf, 516, &confounded_session_key);
 574         memcpy(&pwbuf[516], confounder, 16);
 575
 576         memcpy(pwd_buf->data, pwbuf, sizeof(pwbuf));
 577         data_blob_free(&confounded_session_key);
 578 }
 579
 580 /*************************************************************************
 581  inits a samr_CryptPassword structure
 582  *************************************************************************/
 583
 584 void init_samr_CryptPassword(const char *pwd,
 585                              DATA_BLOB *session_key,
 586                              struct samr_CryptPassword *pwd_buf)
 587 {
 588         /* samr_CryptPassword */
 589
 590         encode_pw_buffer(pwd_buf->data, pwd, STR_UNICODE);
 591         SamOEMhashBlob(pwd_buf->data, 516, session_key);
 592 }