2 Unix SMB/CIFS implementation.
3 Lookup routines for well-known SIDs
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Luke Kenneth Caseson Leighton 1998-1999
6 Copyright (C) Jeremy Allison 1999
7 Copyright (C) Volker Lendecke 2005
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
30 struct sid_name_map_info
34 const struct rid_name_map
*known_users
;
37 static const struct rid_name_map everyone_users
[] = {
41 static const struct rid_name_map creator_owner_users
[] = {
42 { 0, "Creator Owner" },
43 { 1, "Creator Group" },
46 static const struct rid_name_map nt_authority_users
[] = {
52 { 7, "AnonymousLogon"},
56 { 11, "Authenticated Users"},
58 { 13, "Terminal Server User"},
59 { 14, "Remote Interactive Logon"},
60 { 15, "This Organization"},
62 { 19, "Local Service"},
63 { 20, "Network Service"},
66 static struct sid_name_map_info special_domains
[] = {
67 { &global_sid_World_Domain
, "", everyone_users
},
68 { &global_sid_Creator_Owner_Domain
, "", creator_owner_users
},
69 { &global_sid_NT_Authority
, "NT Authority", nt_authority_users
},
70 { NULL
, NULL
, NULL
}};
72 BOOL
sid_check_is_wellknown_domain(const DOM_SID
*sid
, const char **name
)
76 for (i
=0; special_domains
[i
].sid
!= NULL
; i
++) {
77 if (sid_equal(sid
, special_domains
[i
].sid
)) {
79 *name
= special_domains
[i
].name
;
87 BOOL
sid_check_is_in_wellknown_domain(const DOM_SID
*sid
)
92 sid_copy(&dom_sid
, sid
);
93 sid_split_rid(&dom_sid
, &rid
);
95 return sid_check_is_wellknown_domain(&dom_sid
, NULL
);
98 /**************************************************************************
99 Looks up a known username from one of the known domains.
100 ***************************************************************************/
102 BOOL
lookup_wellknown_sid(TALLOC_CTX
*mem_ctx
, const DOM_SID
*sid
,
103 const char **domain
, const char **name
)
108 const struct rid_name_map
*users
= NULL
;
110 sid_copy(&dom_sid
, sid
);
111 if (!sid_split_rid(&dom_sid
, &rid
)) {
112 DEBUG(2, ("Could not split rid from SID\n"));
116 for (i
=0; special_domains
[i
].sid
!= NULL
; i
++) {
117 if (sid_equal(&dom_sid
, special_domains
[i
].sid
)) {
118 *domain
= talloc_strdup(mem_ctx
,
119 special_domains
[i
].name
);
120 users
= special_domains
[i
].known_users
;
126 DEBUG(10, ("SID %s is no special sid\n",
127 sid_string_static(sid
)));
131 for (i
=0; users
[i
].name
!= NULL
; i
++) {
132 if (rid
== users
[i
].rid
) {
133 *name
= talloc_strdup(mem_ctx
, users
[i
].name
);
138 DEBUG(10, ("RID of special SID %s not found\n",
139 sid_string_static(sid
)));
144 /**************************************************************************
145 Try and map a name to one of the well known SIDs.
146 ***************************************************************************/
148 BOOL
lookup_wellknown_name(TALLOC_CTX
*mem_ctx
, const char *name
,
149 DOM_SID
*sid
, const char **domain
)
153 DEBUG(10,("map_name_to_wellknown_sid: looking up %s\n", name
));
155 for (i
=0; special_domains
[i
].sid
!= NULL
; i
++) {
156 const struct rid_name_map
*users
=
157 special_domains
[i
].known_users
;
162 for (j
=0; users
[j
].name
!= NULL
; j
++) {
163 if ( strequal(users
[j
].name
, name
) ) {
164 sid_copy(sid
, special_domains
[i
].sid
);
165 sid_append_rid(sid
, users
[j
].rid
);
166 *domain
= talloc_strdup(
167 mem_ctx
, special_domains
[i
].name
);