source3/auth/auth_sam.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Password and authentication handling
   4    Copyright (C) Andrew Tridgell              1992-2000
   5    Copyright (C) Luke Kenneth Casson Leighton 1996-2000
   6    Copyright (C) Andrew Bartlett              2001-2003
   7    Copyright (C) Gerald Carter                2003
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #include "includes.h"
  24 #include "../libcli/auth/libcli_auth.h"
  25
  26 #undef DBGC_CLASS
  27 #define DBGC_CLASS DBGC_AUTH
  28
  29 static NTSTATUS auth_sam_ignoredomain_auth(const struct auth_context *auth_context,
  30                                            void *my_private_data,
  31                                            TALLOC_CTX *mem_ctx,
  32                                            const struct auth_usersupplied_info *user_info,
  33                                            struct auth_serversupplied_info **server_info)
  34 {
  35         if (!user_info || !auth_context) {
  36                 return NT_STATUS_UNSUCCESSFUL;
  37         }
  38         return check_sam_security(&auth_context->challenge, mem_ctx,
  39                                   user_info, server_info);
  40 }
  41
  42 /* module initialisation */
  43 static NTSTATUS auth_init_sam_ignoredomain(struct auth_context *auth_context, const char *param, auth_methods **auth_method)
  44 {
  45         struct auth_methods *result;
  46
  47         result = TALLOC_ZERO_P(auth_context, struct auth_methods);
  48         if (result == NULL) {
  49                 return NT_STATUS_NO_MEMORY;
  50         }
  51         result->auth = auth_sam_ignoredomain_auth;
  52         result->name = "sam_ignoredomain";
  53
  54         *auth_method = result;
  55         return NT_STATUS_OK;
  56 }
  57
  58
  59 /****************************************************************************
  60 Check SAM security (above) but with a few extra checks.
  61 ****************************************************************************/
  62
  63 static NTSTATUS auth_samstrict_auth(const struct auth_context *auth_context,
  64                                     void *my_private_data,
  65                                     TALLOC_CTX *mem_ctx,
  66                                     const struct auth_usersupplied_info *user_info,
  67                                     struct auth_serversupplied_info **server_info)
  68 {
  69         bool is_local_name, is_my_domain;
  70
  71         if (!user_info || !auth_context) {
  72                 return NT_STATUS_LOGON_FAILURE;
  73         }
  74
  75         is_local_name = is_myname(user_info->domain);
  76         is_my_domain  = strequal(user_info->domain, lp_workgroup());
  77
  78         /* check whether or not we service this domain/workgroup name */
  79
  80         switch ( lp_server_role() ) {
  81                 case ROLE_STANDALONE:
  82                 case ROLE_DOMAIN_MEMBER:
  83                         if ( !is_local_name ) {
  84                                 DEBUG(6,("check_samstrict_security: %s is not one of my local names (%s)\n",
  85                                         user_info->domain, (lp_server_role() == ROLE_DOMAIN_MEMBER
  86                                         ? "ROLE_DOMAIN_MEMBER" : "ROLE_STANDALONE") ));
  87                                 return NT_STATUS_NOT_IMPLEMENTED;
  88                         }
  89                 case ROLE_DOMAIN_PDC:
  90                 case ROLE_DOMAIN_BDC:
  91                         if ( !is_local_name && !is_my_domain ) {
  92                                 DEBUG(6,("check_samstrict_security: %s is not one of my local names or domain name (DC)\n",
  93                                         user_info->domain));
  94                                 return NT_STATUS_NOT_IMPLEMENTED;
  95                         }
  96                 default: /* name is ok */
  97                         break;
  98         }
  99
 100         return check_sam_security(&auth_context->challenge, mem_ctx,
 101                                   user_info, server_info);
 102 }
 103
 104 /* module initialisation */
 105 static NTSTATUS auth_init_sam(struct auth_context *auth_context, const char *param, auth_methods **auth_method)
 106 {
 107         struct auth_methods *result;
 108
 109         result = TALLOC_ZERO_P(auth_context, struct auth_methods);
 110         if (result == NULL) {
 111                 return NT_STATUS_NO_MEMORY;
 112         }
 113         result->auth = auth_samstrict_auth;
 114         result->name = "sam";
 115
 116         *auth_method = result;
 117         return NT_STATUS_OK;
 118 }
 119
 120 NTSTATUS auth_sam_init(void)
 121 {
 122         smb_register_auth(AUTH_INTERFACE_VERSION, "sam", auth_init_sam);
 123         smb_register_auth(AUTH_INTERFACE_VERSION, "sam_ignoredomain", auth_init_sam_ignoredomain);
 124         return NT_STATUS_OK;
 125 }