libcli/auth/ntlm_check.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Password and authentication handling
   4    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2001-2004
   5    Copyright (C) Gerald Carter                             2003
   6    Copyright (C) Luke Kenneth Casson Leighton         1996-2000
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18    You should have received a copy of the GNU General Public License
  19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  20 */
  21
  22
  23 /**
  24  * Compare password hashes against those from the SAM
  25  *
  26  * @param mem_ctx talloc context
  27  * @param client_lanman LANMAN password hash, as supplied by the client
  28  * @param client_nt NT (MD4) password hash, as supplied by the client
  29  * @param username internal Samba username, for log messages
  30  * @param client_username username the client used
  31  * @param client_domain domain name the client used (may be mapped)
  32  * @param stored_lanman LANMAN password hash, as stored on the SAM
  33  * @param stored_nt NT (MD4) password hash, as stored on the SAM
  34  * @param user_sess_key User session key
  35  * @param lm_sess_key LM session key (first 8 bytes of the LM hash)
  36  */
  37
  38 NTSTATUS hash_password_check(TALLOC_CTX *mem_ctx,
  39                                  bool lanman_auth,
  40                              const struct samr_Password *client_lanman,
  41                              const struct samr_Password *client_nt,
  42                              const char *username,
  43                              const struct samr_Password *stored_lanman,
  44                              const struct samr_Password *stored_nt);
  45
  46 /**
  47  * Check a challenge-response password against the value of the NT or
  48  * LM password hash.
  49  *
  50  * @param mem_ctx talloc context
  51  * @param challenge 8-byte challenge.  If all zero, forces plaintext comparison
  52  * @param nt_response 'unicode' NT response to the challenge, or unicode password
  53  * @param lm_response ASCII or LANMAN response to the challenge, or password in DOS code page
  54  * @param username internal Samba username, for log messages
  55  * @param client_username username the client used
  56  * @param client_domain domain name the client used (may be mapped)
  57  * @param stored_lanman LANMAN ASCII password from our passdb or similar
  58  * @param stored_nt MD4 unicode password from our passdb or similar
  59  * @param user_sess_key User session key
  60  * @param lm_sess_key LM session key (first 8 bytes of the LM hash)
  61  */
  62
  63 NTSTATUS ntlm_password_check(TALLOC_CTX *mem_ctx,
  64                                  bool lanman_auth,
  65                                  bool ntlm_auth,
  66                              uint32_t logon_parameters,
  67                              const DATA_BLOB *challenge,
  68                              const DATA_BLOB *lm_response,
  69                              const DATA_BLOB *nt_response,
  70                              const char *username,
  71                              const char *client_username,
  72                              const char *client_domain,
  73                              const struct samr_Password *stored_lanman,
  74                              const struct samr_Password *stored_nt,
  75                              DATA_BLOB *user_sess_key,
  76                              DATA_BLOB *lm_sess_key);