4 Copyright (C) Andrew Tridgell 2001
5 Copyright (C) Andrew Bartlett 2001-2003,2011
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "auth/ntlmssp/ntlmssp.h"
23 #include "auth_generic.h"
24 #include "auth/gensec/gensec.h"
25 #include "auth/credentials/credentials.h"
26 #include "librpc/rpc/dcerpc.h"
27 #include "lib/param/param.h"
28 #include "librpc/crypto/gse.h"
30 NTSTATUS
auth_generic_set_username(struct auth_generic_state
*ans
,
33 cli_credentials_set_username(ans
->credentials
, user
, CRED_SPECIFIED
);
37 NTSTATUS
auth_generic_set_domain(struct auth_generic_state
*ans
,
40 cli_credentials_set_domain(ans
->credentials
, domain
, CRED_SPECIFIED
);
44 NTSTATUS
auth_generic_set_password(struct auth_generic_state
*ans
,
47 cli_credentials_set_password(ans
->credentials
, password
, CRED_SPECIFIED
);
51 NTSTATUS
auth_generic_client_prepare(TALLOC_CTX
*mem_ctx
, struct auth_generic_state
**auth_generic_state
)
53 struct auth_generic_state
*ans
;
56 struct gensec_settings
*gensec_settings
;
57 const struct gensec_security_ops
**backends
= NULL
;
58 struct loadparm_context
*lp_ctx
;
60 ans
= talloc_zero(mem_ctx
, struct auth_generic_state
);
62 DEBUG(0,("auth_generic_start: talloc failed!\n"));
63 return NT_STATUS_NO_MEMORY
;
66 lp_ctx
= loadparm_init_s3(ans
, loadparm_s3_helpers());
68 DEBUG(10, ("loadparm_init_s3 failed\n"));
70 return NT_STATUS_INVALID_SERVER_STATE
;
73 gensec_settings
= lpcfg_gensec_settings(ans
, lp_ctx
);
75 DEBUG(10, ("lpcfg_gensec_settings failed\n"));
77 return NT_STATUS_NO_MEMORY
;
80 backends
= talloc_zero_array(gensec_settings
,
81 const struct gensec_security_ops
*, 5);
82 if (backends
== NULL
) {
84 return NT_STATUS_NO_MEMORY
;
86 gensec_settings
->backends
= backends
;
90 /* These need to be in priority order, krb5 before NTLMSSP */
91 #if defined(HAVE_KRB5)
92 backends
[idx
++] = &gensec_gse_krb5_security_ops
;
95 backends
[idx
++] = &gensec_ntlmssp3_client_ops
;
97 backends
[idx
++] = gensec_security_by_oid(NULL
, GENSEC_OID_SPNEGO
);
98 backends
[idx
++] = gensec_security_by_auth_type(NULL
, DCERPC_AUTH_TYPE_SCHANNEL
);
100 nt_status
= gensec_client_start(ans
, &ans
->gensec_security
, gensec_settings
);
102 if (!NT_STATUS_IS_OK(nt_status
)) {
107 ans
->credentials
= cli_credentials_init(ans
);
108 if (!ans
->credentials
) {
110 return NT_STATUS_NO_MEMORY
;
113 cli_credentials_guess(ans
->credentials
, lp_ctx
);
115 talloc_unlink(ans
, lp_ctx
);
116 talloc_unlink(ans
, gensec_settings
);
118 *auth_generic_state
= ans
;
122 NTSTATUS
auth_generic_client_start(struct auth_generic_state
*ans
, const char *oid
)
126 /* Transfer the credentials to gensec */
127 status
= gensec_set_credentials(ans
->gensec_security
, ans
->credentials
);
128 if (!NT_STATUS_IS_OK(status
)) {
129 DEBUG(1, ("Failed to set GENSEC credentials: %s\n",
133 talloc_unlink(ans
, ans
->credentials
);
134 ans
->credentials
= NULL
;
136 status
= gensec_start_mech_by_oid(ans
->gensec_security
,
138 if (!NT_STATUS_IS_OK(status
)) {
145 NTSTATUS
auth_generic_client_start_by_authtype(struct auth_generic_state
*ans
,
151 /* Transfer the credentials to gensec */
152 status
= gensec_set_credentials(ans
->gensec_security
, ans
->credentials
);
153 if (!NT_STATUS_IS_OK(status
)) {
154 DEBUG(1, ("Failed to set GENSEC credentials: %s\n",
158 talloc_unlink(ans
, ans
->credentials
);
159 ans
->credentials
= NULL
;
161 status
= gensec_start_mech_by_authtype(ans
->gensec_security
,
162 auth_type
, auth_level
);
163 if (!NT_STATUS_IS_OK(status
)) {