2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2009
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "system/kerberos.h"
22 #include "auth/kerberos/kerberos.h"
24 #include "kdc/samba_kdc.h"
25 #include "libnet/libnet_export_keytab.h"
27 NTSTATUS
libnet_export_keytab(struct libnet_context
*ctx
, TALLOC_CTX
*mem_ctx
, struct libnet_export_keytab
*r
)
30 struct smb_krb5_context
*smb_krb5_context
;
31 const char *from_keytab
;
33 /* Register hdb-samba4 hooks for use as a keytab */
35 struct samba_kdc_base_context
*base_ctx
= talloc_zero(mem_ctx
, struct samba_kdc_base_context
);
37 return NT_STATUS_NO_MEMORY
;
40 base_ctx
->ev_ctx
= ctx
->event_ctx
;
41 base_ctx
->lp_ctx
= ctx
->lp_ctx
;
43 from_keytab
= talloc_asprintf(base_ctx
, "HDB:samba4&%p", base_ctx
);
45 return NT_STATUS_NO_MEMORY
;
48 ret
= smb_krb5_init_context(ctx
, ctx
->event_ctx
, ctx
->lp_ctx
, &smb_krb5_context
);
50 return NT_STATUS_NO_MEMORY
;
53 ret
= krb5_plugin_register(smb_krb5_context
->krb5_context
,
54 PLUGIN_TYPE_DATA
, "hdb",
55 &hdb_samba4_interface
);
57 return NT_STATUS_NO_MEMORY
;
60 ret
= krb5_kt_register(smb_krb5_context
->krb5_context
, &hdb_kt_ops
);
62 return NT_STATUS_NO_MEMORY
;
65 if (r
->in
.principal
) {
66 /* TODO: Find a way not to have to use a fixed list */
67 krb5_enctype enctypes
[] = {
68 KRB5_ENCTYPE_DES_CBC_CRC
,
69 KRB5_ENCTYPE_DES_CBC_MD5
,
70 KRB5_ENCTYPE_AES128_CTS_HMAC_SHA1_96
,
71 KRB5_ENCTYPE_AES256_CTS_HMAC_SHA1_96
,
72 KRB5_ENCTYPE_ARCFOUR_HMAC_MD5
,
75 ret
= kt_copy_one_principal(smb_krb5_context
->krb5_context
, from_keytab
, r
->in
.keytab_name
, r
->in
.principal
, 0, enctypes
);
77 unlink(r
->in
.keytab_name
);
78 ret
= kt_copy(smb_krb5_context
->krb5_context
, from_keytab
, r
->in
.keytab_name
);
82 r
->out
.error_string
= smb_get_krb5_error_message(smb_krb5_context
->krb5_context
,
84 if (ret
== KRB5_KT_NOTFOUND
) {
85 return NT_STATUS_NO_SUCH_USER
;
87 return NT_STATUS_UNSUCCESSFUL
;