2 Unix SMB/CIFS implementation.
4 security descriptror utility functions
6 Copyright (C) Andrew Tridgell 2004
7 Copyright (C) Stefan Metzmacher 2005
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "dsdb/samdb/samdb.h"
25 #include "libcli/security/security.h"
26 #include "auth/session.h"
29 return a blank security token
31 struct security_token
*security_token_initialise(TALLOC_CTX
*mem_ctx
)
33 struct security_token
*st
;
35 st
= talloc(mem_ctx
, struct security_token
);
44 st
->privilege_mask
= 0;
49 /****************************************************************************
50 prints a struct security_token to debug output.
51 ****************************************************************************/
52 void security_token_debug(int dbg_lev
, const struct security_token
*token
)
58 DEBUG(dbg_lev
, ("Security token: (NULL)\n"));
62 mem_ctx
= talloc_init("security_token_debug()");
67 DEBUG(dbg_lev
, ("Security token of user %s\n",
68 dom_sid_string(mem_ctx
, token
->user_sid
) ));
69 DEBUGADD(dbg_lev
, (" SIDs (%lu):\n",
70 (unsigned long)token
->num_sids
));
71 for (i
= 0; i
< token
->num_sids
; i
++) {
72 DEBUGADD(dbg_lev
, (" SID[%3lu]: %s\n", (unsigned long)i
,
73 dom_sid_string(mem_ctx
, token
->sids
[i
])));
76 security_token_debug_privileges(dbg_lev
, token
);
81 /* These really should be cheaper... */
83 bool security_token_is_sid(const struct security_token
*token
, const struct dom_sid
*sid
)
85 if (dom_sid_equal(token
->user_sid
, sid
)) {
91 bool security_token_is_sid_string(const struct security_token
*token
, const char *sid_string
)
94 struct dom_sid
*sid
= dom_sid_parse_talloc(NULL
, sid_string
);
95 if (!sid
) return false;
97 ret
= security_token_is_sid(token
, sid
);
103 bool security_token_is_system(const struct security_token
*token
)
105 return security_token_is_sid_string(token
, SID_NT_SYSTEM
);
108 bool security_token_is_anonymous(const struct security_token
*token
)
110 return security_token_is_sid_string(token
, SID_NT_ANONYMOUS
);
113 bool security_token_has_sid(const struct security_token
*token
, const struct dom_sid
*sid
)
116 for (i
= 0; i
< token
->num_sids
; i
++) {
117 if (dom_sid_equal(token
->sids
[i
], sid
)) {
124 bool security_token_has_sid_string(const struct security_token
*token
, const char *sid_string
)
127 struct dom_sid
*sid
= dom_sid_parse_talloc(NULL
, sid_string
);
128 if (!sid
) return false;
130 ret
= security_token_has_sid(token
, sid
);
136 bool security_token_has_builtin_administrators(const struct security_token
*token
)
138 return security_token_has_sid_string(token
, SID_BUILTIN_ADMINISTRATORS
);
141 bool security_token_has_nt_authenticated_users(const struct security_token
*token
)
143 return security_token_has_sid_string(token
, SID_NT_AUTHENTICATED_USERS
);
146 enum security_user_level
security_session_user_level(struct auth_session_info
*session_info
)
149 return SECURITY_ANONYMOUS
;
152 if (security_token_is_system(session_info
->security_token
)) {
153 return SECURITY_SYSTEM
;
156 if (security_token_is_anonymous(session_info
->security_token
)) {
157 return SECURITY_ANONYMOUS
;
160 if (security_token_has_builtin_administrators(session_info
->security_token
)) {
161 return SECURITY_ADMINISTRATOR
;
164 if (security_token_has_nt_authenticated_users(session_info
->security_token
)) {
165 return SECURITY_USER
;
168 return SECURITY_ANONYMOUS
;