2 Unix SMB/CIFS implementation.
3 dump the remote SAM using rpc samsync operations
5 Copyright (C) Guenther Deschner 2008.
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "libnet/libnet.h"
24 #if defined(HAVE_ADS) && defined(ENCTYPE_ARCFOUR_HMAC)
26 /****************************************************************
27 ****************************************************************/
29 static NTSTATUS
keytab_ad_connect(TALLOC_CTX
*mem_ctx
,
30 const char *domain_name
,
33 struct libnet_keytab_context
*ctx
)
38 struct netr_DsRGetDCNameInfo
*info
= NULL
;
41 status
= dsgetdcname(mem_ctx
, NULL
, domain_name
, NULL
, NULL
, 0, &info
);
42 if (!NT_STATUS_IS_OK(status
)) {
46 dc
= strip_hostname(info
->dc_unc
);
48 ads
= ads_init(NULL
, domain_name
, dc
);
49 NT_STATUS_HAVE_NO_MEMORY(ads
);
51 if (getenv(KRB5_ENV_CCNAME
) == NULL
) {
52 setenv(KRB5_ENV_CCNAME
, "MEMORY:libnet_samsync_keytab", 1);
55 ads
->auth
.user_name
= SMB_STRDUP(username
);
56 ads
->auth
.password
= SMB_STRDUP(password
);
58 ad_status
= ads_connect_user_creds(ads
);
59 if (!ADS_ERR_OK(ad_status
)) {
60 return NT_STATUS_UNSUCCESSFUL
;
65 ctx
->dns_domain_name
= talloc_strdup_upper(mem_ctx
, ads
->config
.realm
);
66 NT_STATUS_HAVE_NO_MEMORY(ctx
->dns_domain_name
);
71 /****************************************************************
72 ****************************************************************/
74 static NTSTATUS
fetch_sam_entry_keytab(TALLOC_CTX
*mem_ctx
,
75 enum netr_SamDatabaseID database_id
,
77 struct netr_DELTA_USER
*r
,
79 struct libnet_keytab_context
*ctx
)
85 if (memcmp(r
->ntpassword
.hash
, ctx
->zero_buf
, 16) == 0) {
89 kvno
= ads_get_kvno(ctx
->ads
, r
->account_name
.string
);
90 blob
= data_blob_const(r
->ntpassword
.hash
, 16);
92 status
= libnet_keytab_add_to_keytab_entries(mem_ctx
, ctx
,
94 r
->account_name
.string
,
98 if (!NT_STATUS_IS_OK(status
)) {
105 /****************************************************************
106 ****************************************************************/
108 static NTSTATUS
fetch_sam_entries_keytab(TALLOC_CTX
*mem_ctx
,
109 enum netr_SamDatabaseID database_id
,
110 struct netr_DELTA_ENUM_ARRAY
*r
,
112 struct samsync_context
*ctx
)
114 NTSTATUS status
= NT_STATUS_OK
;
115 krb5_error_code ret
= 0;
116 static struct libnet_keytab_context
*keytab_ctx
= NULL
;
120 ret
= libnet_keytab_init(mem_ctx
, ctx
->output_filename
,
123 status
= krb5_to_nt_status(ret
);
128 status
= keytab_ad_connect(mem_ctx
,
133 if (!NT_STATUS_IS_OK(status
)) {
137 for (i
= 0; i
< r
->num_deltas
; i
++) {
139 if (r
->delta_enum
[i
].delta_type
!= NETR_DELTA_USER
) {
143 status
= fetch_sam_entry_keytab(mem_ctx
, database_id
,
144 r
->delta_enum
[i
].delta_id_union
.rid
,
145 r
->delta_enum
[i
].delta_union
.user
,
148 if (!NT_STATUS_IS_OK(status
)) {
155 ret
= libnet_keytab_add(keytab_ctx
);
157 status
= krb5_to_nt_status(ret
);
158 ctx
->error_message
= talloc_asprintf(mem_ctx
,
159 "Failed to add entries to keytab %s: %s",
160 keytab_ctx
->keytab_name
, error_message(ret
));
164 ctx
->result_message
= talloc_asprintf(mem_ctx
,
165 "Vampired %d accounts to keytab %s",
167 keytab_ctx
->keytab_name
);
169 TALLOC_FREE(keytab_ctx
);
174 TALLOC_FREE(keytab_ctx
);
181 static NTSTATUS
fetch_sam_entries_keytab(TALLOC_CTX
*mem_ctx
,
182 enum netr_SamDatabaseID database_id
,
183 struct netr_DELTA_ENUM_ARRAY
*r
,
185 struct samsync_context
*ctx
)
187 return NT_STATUS_NOT_SUPPORTED
;
190 #endif /* defined(HAVE_ADS) && defined(ENCTYPE_ARCFOUR_HMAC) */
192 const struct samsync_ops libnet_samsync_keytab_ops
= {
193 .process_objects
= fetch_sam_entries_keytab
,