2 Unix SMB/CIFS implementation.
3 Samba utility functions
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Jeremy Allison 2001-2007
6 Copyright (C) Simo Sorce 2001
7 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
8 Copyright (C) James Peach 2006
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
25 #include "auth_info.h"
28 /**************************************************************************n
29 Code to cope with username/password auth options from the commandline.
30 Used mainly in client tools.
31 ****************************************************************************/
33 struct user_auth_info
*user_auth_info_init(TALLOC_CTX
*mem_ctx
)
35 struct user_auth_info
*result
;
37 result
= talloc_zero(mem_ctx
, struct user_auth_info
);
42 result
->signing_state
= SMB_SIGNING_DEFAULT
;
46 const char *get_cmdline_auth_info_username(const struct user_auth_info
*auth_info
)
48 if (!auth_info
->username
) {
51 return auth_info
->username
;
54 void set_cmdline_auth_info_username(struct user_auth_info
*auth_info
,
57 TALLOC_FREE(auth_info
->username
);
58 auth_info
->username
= talloc_strdup(auth_info
, username
);
59 if (!auth_info
->username
) {
64 const char *get_cmdline_auth_info_domain(const struct user_auth_info
*auth_info
)
66 if (!auth_info
->domain
) {
69 return auth_info
->domain
;
72 void set_cmdline_auth_info_domain(struct user_auth_info
*auth_info
,
75 TALLOC_FREE(auth_info
->domain
);
76 auth_info
->domain
= talloc_strdup(auth_info
, domain
);
77 if (!auth_info
->domain
) {
82 const char *get_cmdline_auth_info_password(const struct user_auth_info
*auth_info
)
84 if (!auth_info
->password
) {
87 return auth_info
->password
;
90 void set_cmdline_auth_info_password(struct user_auth_info
*auth_info
,
93 TALLOC_FREE(auth_info
->password
);
94 if (password
== NULL
) {
97 auth_info
->password
= talloc_strdup(auth_info
, password
);
98 if (!auth_info
->password
) {
101 auth_info
->got_pass
= true;
104 bool set_cmdline_auth_info_signing_state(struct user_auth_info
*auth_info
,
107 auth_info
->signing_state
= SMB_SIGNING_DEFAULT
;
108 if (strequal(arg
, "off") || strequal(arg
, "no") ||
109 strequal(arg
, "false")) {
110 auth_info
->signing_state
= SMB_SIGNING_OFF
;
111 } else if (strequal(arg
, "on") || strequal(arg
, "yes") ||
112 strequal(arg
, "if_required") ||
113 strequal(arg
, "true") || strequal(arg
, "auto")) {
114 auth_info
->signing_state
= SMB_SIGNING_IF_REQUIRED
;
115 } else if (strequal(arg
, "force") || strequal(arg
, "required") ||
116 strequal(arg
, "forced")) {
117 auth_info
->signing_state
= SMB_SIGNING_REQUIRED
;
124 int get_cmdline_auth_info_signing_state(const struct user_auth_info
*auth_info
)
126 return auth_info
->signing_state
;
129 void set_cmdline_auth_info_use_ccache(struct user_auth_info
*auth_info
, bool b
)
131 auth_info
->use_ccache
= b
;
134 bool get_cmdline_auth_info_use_ccache(const struct user_auth_info
*auth_info
)
136 return auth_info
->use_ccache
;
139 void set_cmdline_auth_info_use_kerberos(struct user_auth_info
*auth_info
,
142 auth_info
->use_kerberos
= b
;
145 bool get_cmdline_auth_info_use_kerberos(const struct user_auth_info
*auth_info
)
147 return auth_info
->use_kerberos
;
150 void set_cmdline_auth_info_fallback_after_kerberos(struct user_auth_info
*auth_info
,
153 auth_info
->fallback_after_kerberos
= b
;
156 bool get_cmdline_auth_info_fallback_after_kerberos(const struct user_auth_info
*auth_info
)
158 return auth_info
->fallback_after_kerberos
;
161 /* This should only be used by lib/popt_common.c JRA */
162 void set_cmdline_auth_info_use_krb5_ticket(struct user_auth_info
*auth_info
)
164 auth_info
->use_kerberos
= true;
165 auth_info
->got_pass
= true;
168 /* This should only be used by lib/popt_common.c JRA */
169 void set_cmdline_auth_info_smb_encrypt(struct user_auth_info
*auth_info
)
171 auth_info
->smb_encrypt
= true;
174 void set_cmdline_auth_info_use_machine_account(struct user_auth_info
*auth_info
)
176 auth_info
->use_machine_account
= true;
179 bool get_cmdline_auth_info_got_pass(const struct user_auth_info
*auth_info
)
181 return auth_info
->got_pass
;
184 bool get_cmdline_auth_info_smb_encrypt(const struct user_auth_info
*auth_info
)
186 return auth_info
->smb_encrypt
;
189 bool get_cmdline_auth_info_use_machine_account(const struct user_auth_info
*auth_info
)
191 return auth_info
->use_machine_account
;
194 bool set_cmdline_auth_info_machine_account_creds(struct user_auth_info
*auth_info
)
197 char *account
= NULL
;
199 if (!get_cmdline_auth_info_use_machine_account(auth_info
)) {
203 if (!secrets_init()) {
204 d_printf("ERROR: Unable to open secrets database\n");
208 if (asprintf(&account
, "%s$@%s", lp_netbios_name(), lp_realm()) < 0) {
212 pass
= secrets_fetch_machine_password(lp_workgroup(), NULL
, NULL
);
214 d_printf("ERROR: Unable to fetch machine password for "
216 account
, lp_workgroup());
221 set_cmdline_auth_info_username(auth_info
, account
);
222 set_cmdline_auth_info_password(auth_info
, pass
);
230 /****************************************************************************
231 Ensure we have a password if one not given.
232 ****************************************************************************/
234 void set_cmdline_auth_info_getpass(struct user_auth_info
*auth_info
)
240 if (get_cmdline_auth_info_got_pass(auth_info
) ||
241 get_cmdline_auth_info_use_kerberos(auth_info
)) {
242 /* Already got one... */
246 frame
= talloc_stackframe();
247 label
= talloc_asprintf(frame
, "Enter %s's password: ",
248 get_cmdline_auth_info_username(auth_info
));
249 pass
= getpass(label
);
251 set_cmdline_auth_info_password(auth_info
, pass
);