source/nsswitch/winbindd_misc.c

   1 /*
   2    Unix SMB/Netbios implementation.
   3    Version 2.0
   4
   5    Winbind daemon - miscellaneous other functions
   6
   7    Copyright (C) Tim Potter 2000
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 2 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program; if not, write to the Free Software
  21    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  22 */
  23
  24 #include "winbindd.h"
  25
  26 extern pstring global_myname;
  27
  28 /* Some routines to fetch the trust account password from a HEAD
  29    version of Samba.  Yuck.  )-: */
  30
  31 /************************************************************************
  32 form a key for fetching a domain trust password from
  33 ************************************************************************/
  34 static char *trust_keystr(char *domain)
  35 {
  36         static fstring keystr;
  37
  38         snprintf(keystr,sizeof(keystr),"%s/%s", SECRETS_MACHINE_ACCT_PASS,
  39                  domain);
  40
  41         return keystr;
  42 }
  43
  44 /************************************************************************
  45  Routine to get the trust account password for a domain
  46 ************************************************************************/
  47 BOOL _get_trust_account_password(char *domain, unsigned char *ret_pwd,
  48                                         time_t *pass_last_set_time)
  49 {
  50         struct machine_acct_pass *pass;
  51         fstring dos_domain;
  52         size_t size;
  53
  54         fstrcpy(dos_domain, domain);
  55         unix_to_dos(dos_domain, True);
  56
  57         if (!(pass = secrets_fetch(trust_keystr(dos_domain), &size)) ||
  58             size != sizeof(*pass)) return False;
  59
  60         if (pass_last_set_time) *pass_last_set_time = pass->mod_time;
  61         memcpy(ret_pwd, pass->hash, 16);
  62         free(pass);
  63         return True;
  64 }
  65
  66 /* Check the machine account password is valid */
  67
  68 enum winbindd_result winbindd_check_machine_acct(
  69         struct winbindd_cli_state *state)
  70 {
  71         int result = WINBINDD_ERROR;
  72         uchar trust_passwd[16];
  73         struct in_addr *ip_list = NULL;
  74         int count;
  75         uint16 validation_level;
  76         fstring controller, trust_account;
  77
  78         DEBUG(3, ("[%5d]: check machine account\n", state->pid));
  79
  80         /* Get trust account password */
  81
  82         if (!_get_trust_account_password(lp_workgroup(), trust_passwd, NULL)) {
  83                 result = NT_STATUS_INTERNAL_ERROR;
  84                 goto done;
  85         }
  86
  87         /* Get domain controller */
  88
  89         if (!get_dc_list(True, lp_workgroup(), &ip_list, &count) ||
  90             !lookup_pdc_name(global_myname, lp_workgroup(), &ip_list[0],
  91                              controller)) {
  92                 DEBUG(0, ("could not find domain controller for "
  93                           "domain %s\n", lp_workgroup()));
  94                 result = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
  95                 goto done;
  96         }
  97
  98         DEBUG(3, ("contacting controller %s to check secret\n", controller));
  99
 100         /* Contact domain controller to check secret */
 101
 102         slprintf(trust_account, sizeof(trust_account) - 1, "%s$",
 103                  global_myname);
 104
 105 #if 0 /* XXX */
 106         result = cli_nt_setup_creds(controller, lp_workgroup(), global_myname,
 107                                     trust_account, trust_passwd,
 108                                     SEC_CHAN_WKSTA, &validation_level);
 109 #endif
 110
 111         /* Pass back result code - zero for success, other values for
 112            specific failures. */
 113
 114         DEBUG(3, ("secret is %s\n", (result == NT_STATUS_NOPROBLEMO) ?
 115                   "good" : "bad"));
 116
 117  done:
 118         state->response.data.num_entries = result;
 119         return WINBINDD_OK;
 120 }
 121
 122 enum winbindd_result winbindd_list_trusted_domains(struct winbindd_cli_state
 123                                                    *state)
 124 {
 125         struct winbindd_domain *domain;
 126         int total_entries = 0, extra_data_len = 0;
 127         char *extra_data = NULL;
 128
 129         DEBUG(3, ("[%5d]: list trusted domains\n", state->pid));
 130
 131         for(domain = domain_list; domain; domain = domain->next) {
 132
 133                 /* Skip own domain */
 134
 135                 if (strequal(domain->name, lp_workgroup())) continue;
 136
 137                 /* Add domain to list */
 138
 139                 total_entries++;
 140                 extra_data = Realloc(extra_data, sizeof(fstring) *
 141                                      total_entries);
 142
 143                 if (!extra_data) return WINBINDD_ERROR;
 144
 145                 memcpy(&extra_data[extra_data_len], domain->name,
 146                        strlen(domain->name));
 147
 148                 extra_data_len  += strlen(domain->name);
 149                 extra_data[extra_data_len++] = ',';
 150         }
 151
 152         if (extra_data) {
 153                 if (extra_data_len > 1) extra_data[extra_data_len - 1] = '\0';
 154                 state->response.extra_data = extra_data;
 155                 state->response.length += extra_data_len;
 156         }
 157
 158         return WINBINDD_OK;
 159 }