diff options
| -rw-r--r-- | source3/pwd_validate.c | 276 |
1 files changed, 0 insertions, 276 deletions
diff --git a/source3/pwd_validate.c b/source3/pwd_validate.c deleted file mode 100644 index 2eefa1e5f0..0000000000 --- a/source3/pwd_validate.c +++ /dev/null @@ -1,276 +0,0 @@ -/* - Unix SMB/Netbios implementation. - Version 1.9. - Password and authentication handling - Copyright (C) Andrew Tridgell 1992-1997 - - This program is free software; you can redistribute it and/or modify - it under the terms of the GNU General Public License as published by - the Free Software Foundation; either version 2 of the License, or - (at your option) any later version. - - This program is distributed in the hope that it will be useful, - but WITHOUT ANY WARRANTY; without even the implied warranty of - MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the - GNU General Public License for more details. - - You should have received a copy of the GNU General Public License - along with this program; if not, write to the Free Software - Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. -*/ - -#include "includes.h" - -extern int DEBUGLEVEL; -extern int Protocol; - - -/**************************************************************************** -initiates a connection to a user-level server. -****************************************************************************/ -BOOL server_connect_init(struct cli_state *clnt, char my_netbios_name[16], - struct in_addr dest_ip, char *desthost) -{ - DEBUG(5,("password server connection requested: %s [%s]\n", - desthost, inet_ntoa(dest_ip))); - - if (clnt == NULL || !clnt->initialised) - { - DEBUG(1,("password server client state not initialised\n", desthost)); - return(False); - } - - if (!cli_connect(clnt, desthost, &dest_ip)) - { - DEBUG(3,("connected to password server %s\n", desthost)); - return False; - } - - if (!cli_session_request(clnt, desthost, 0x20, my_netbios_name, 0x0)) - { - DEBUG(1,("%s rejected the session\n", desthost)); - return False; - } - - DEBUG(3,("got session\n")); - - if (!cli_negprot(clnt)) - { - DEBUG(1,("%s rejected the negprot\n", desthost)); - return False; - } - - if (clnt->protocol < PROTOCOL_LANMAN2 || !(clnt->sec_mode & 1)) - { - DEBUG(1,("%s isn't in user level security mode\n", desthost)); - return False; - } - - DEBUG(3,("password server OK\n")); - - return True; -} - -/**************************************************************************** -support for server level security -****************************************************************************/ -BOOL server_cryptkey(struct cli_state *clnt, char my_netbios_name[16]) -{ - fstring desthost; - struct in_addr dest_ip; - char *p; - BOOL connection_found = False; - - if (clnt == NULL || !cli_initialise(clnt)) - { - DEBUG(1,("server_cryptkey: failed to initialise client state\n")); - return False; - } - - for (p = strtok(lp_passwordserver(),LIST_SEP); p && !connection_found; p = strtok(NULL,LIST_SEP)) - { - fstrcpy(desthost,p); - standard_sub_basic(desthost); - strupper(desthost); - - dest_ip = *interpret_addr2(desthost); - - if (zero_ip(dest_ip)) - { - DEBUG(1,("Can't resolve address for %s\n",p)); - continue; - } - - if (ismyip(dest_ip)) - { - DEBUG(1,("Password server loop - disabling password server %s\n", p)); - continue; - } - - connection_found = server_connect_init(clnt, my_netbios_name, dest_ip, desthost); - } - - if (!p && !connection_found) - { - DEBUG(1,("password server not available\n")); - cli_shutdown(clnt); - return False; - } - - DEBUG(3,("password server OK\n")); - - return True; -} - -/**************************************************************************** -validate a password -****************************************************************************/ -BOOL server_validate2(struct cli_state *clnt, char *user, char *domain, - char *pass, int passlen, - char *ntpass, int ntpasslen) -{ - BOOL pwd_ok = False; - - DEBUG(4,("server_validate2: user:[%s] domain:[%s]\n", user, domain)); - - if (clnt == NULL) - { - DEBUG(1,("server_validate2: NULL client_state. cannot validate\n")); - return(False); - } - - if (pass == NULL && ntpass == NULL) - { - DEBUG(1,("server_validate2: both lm and nt passwords are NULL. cannot validate\n")); - return(False); - } - - if (!clnt->initialised) - { - DEBUG(1,("server %s is not connected\n", clnt->full_dest_host_name)); - return(False); - } - - if (!cli_session_setup(clnt, user, pass, passlen, ntpass, ntpasslen, domain)) { - DEBUG(1,("server %s rejected the password\n", clnt->full_dest_host_name)); - return False; - } - - /* if logged in as guest then reject */ - if ((SVAL(clnt->inbuf,smb_vwv2) & 1) != 0) { - DEBUG(1,("server %s gave us guest only\n", clnt->full_dest_host_name)); - return(False); - } - - pwd_ok = False; - - if (!pwd_ok) - { - pwd_ok = pass != NULL && !cli_send_tconX(clnt, "IPC$", "IPC", pass, passlen); - } - - if (!pwd_ok) - { - DEBUG(1,("server %s refused IPC$ connect with LM password\n", clnt->full_dest_host_name)); - } - - if (!pwd_ok) - { - pwd_ok = ntpass != NULL && !cli_send_tconX(clnt, "IPC$", "IPC", ntpass, ntpasslen); - } - - if (!pwd_ok) - { - DEBUG(1,("server %s refused IPC$ connect with NT password\n", clnt->full_dest_host_name)); - return False; - } - - if (!pwd_ok) - { - DEBUG(3,("server %s rejected the password\n", clnt->full_dest_host_name)); - } - else - { - DEBUG(3,("server %s accepted the password\n", clnt->full_dest_host_name)); - } - - cli_tdis(clnt); - - return(True); -} - - -/**************************************************************************** -validate a password with the password server. here's some good code to go -into an SMB pam, by the way... -****************************************************************************/ -BOOL server_validate(struct cli_state *clnt, char *user, char *domain, - char *pass, int passlen, - char *ntpass, int ntpasslen) -{ - if (clnt == NULL) - { - DEBUG(1,("server_validate: NULL client_state. cannot validate\n")); - return(False); - } - - if (!clnt->initialised) { - DEBUG(1,("password server %s is not connected\n", clnt->full_dest_host_name)); - return(False); - } - - if (!cli_session_setup(clnt, user, pass, passlen, ntpass, ntpasslen, domain)) { - DEBUG(1,("password server %s rejected the password\n", clnt->full_dest_host_name)); - return False; - } - - /* if logged in as guest then reject */ - if ((SVAL(clnt->inbuf,smb_vwv2) & 1) != 0) { - DEBUG(1,("password server %s gave us guest only\n", clnt->full_dest_host_name)); - return(False); - } - - - if (!cli_send_tconX(clnt, "IPC$", "IPC", "", 1)) - { - DEBUG(1,("password server %s refused IPC$ connect\n", clnt->full_dest_host_name)); - return False; - } - - - if (!cli_send_tconX(clnt, "IPC$", "IPC", "", 1)) { - DEBUG(1,("password server %s refused IPC$ connect\n", clnt->full_dest_host_name)); - return False; - } - - - if (!cli_NetWkstaUserLogon(clnt, user, clnt->called_netbios_name)) - { - DEBUG(1,("password server %s failed NetWkstaUserLogon\n", clnt->full_dest_host_name)); - cli_tdis(clnt); - return False; - } - - if (clnt->privileges == 0) - { - DEBUG(1,("password server %s gave guest privilages\n", clnt->full_dest_host_name)); - cli_tdis(clnt); - return False; - } - - if (!strequal(clnt->eff_name, user)) { - DEBUG(1,("password server %s gave different username %s\n", - clnt->full_dest_host_name, - clnt->eff_name)); - cli_tdis(clnt); - return False; - } - - DEBUG(3,("password server %s accepted the password\n", clnt->full_dest_host_name)); - - cli_tdis(clnt); - - return(True); -} - - |