2 Unix SMB/CIFS implementation.
3 Password and authentication handling
4 Copyright (C) Andrew Tridgell 1992-2000
5 Copyright (C) Luke Kenneth Casson Leighton 1996-2000
6 Copyright (C) Andrew Bartlett 2001-2003
7 Copyright (C) Gerald Carter 2003
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "../libcli/auth/libcli_auth.h"
27 #define DBGC_CLASS DBGC_AUTH
29 static NTSTATUS
auth_sam_ignoredomain_auth(const struct auth_context
*auth_context
,
30 void *my_private_data
,
32 const struct auth_usersupplied_info
*user_info
,
33 struct auth_serversupplied_info
**server_info
)
35 if (!user_info
|| !auth_context
) {
36 return NT_STATUS_UNSUCCESSFUL
;
38 return check_sam_security(&auth_context
->challenge
, mem_ctx
,
39 user_info
, server_info
);
42 /* module initialisation */
43 static NTSTATUS
auth_init_sam_ignoredomain(struct auth_context
*auth_context
, const char *param
, auth_methods
**auth_method
)
45 struct auth_methods
*result
;
47 result
= TALLOC_ZERO_P(auth_context
, struct auth_methods
);
49 return NT_STATUS_NO_MEMORY
;
51 result
->auth
= auth_sam_ignoredomain_auth
;
52 result
->name
= "sam_ignoredomain";
54 *auth_method
= result
;
59 /****************************************************************************
60 Check SAM security (above) but with a few extra checks.
61 ****************************************************************************/
63 static NTSTATUS
auth_samstrict_auth(const struct auth_context
*auth_context
,
64 void *my_private_data
,
66 const struct auth_usersupplied_info
*user_info
,
67 struct auth_serversupplied_info
**server_info
)
69 bool is_local_name
, is_my_domain
;
71 if (!user_info
|| !auth_context
) {
72 return NT_STATUS_LOGON_FAILURE
;
75 is_local_name
= is_myname(user_info
->domain
);
76 is_my_domain
= strequal(user_info
->domain
, lp_workgroup());
78 /* check whether or not we service this domain/workgroup name */
80 switch ( lp_server_role() ) {
82 case ROLE_DOMAIN_MEMBER
:
83 if ( !is_local_name
) {
84 DEBUG(6,("check_samstrict_security: %s is not one of my local names (%s)\n",
85 user_info
->domain
, (lp_server_role() == ROLE_DOMAIN_MEMBER
86 ? "ROLE_DOMAIN_MEMBER" : "ROLE_STANDALONE") ));
87 return NT_STATUS_NOT_IMPLEMENTED
;
91 if ( !is_local_name
&& !is_my_domain
) {
92 DEBUG(6,("check_samstrict_security: %s is not one of my local names or domain name (DC)\n",
94 return NT_STATUS_NOT_IMPLEMENTED
;
96 default: /* name is ok */
100 return check_sam_security(&auth_context
->challenge
, mem_ctx
,
101 user_info
, server_info
);
104 /* module initialisation */
105 static NTSTATUS
auth_init_sam(struct auth_context
*auth_context
, const char *param
, auth_methods
**auth_method
)
107 struct auth_methods
*result
;
109 result
= TALLOC_ZERO_P(auth_context
, struct auth_methods
);
110 if (result
== NULL
) {
111 return NT_STATUS_NO_MEMORY
;
113 result
->auth
= auth_samstrict_auth
;
114 result
->name
= "sam";
116 *auth_method
= result
;
120 NTSTATUS
auth_sam_init(void)
122 smb_register_auth(AUTH_INTERFACE_VERSION
, "sam", auth_init_sam
);
123 smb_register_auth(AUTH_INTERFACE_VERSION
, "sam_ignoredomain", auth_init_sam_ignoredomain
);