diff options
Diffstat (limited to 'source3/winbindd')
| -rw-r--r-- | source3/winbindd/winbindd_samr.c | 411 |
1 files changed, 411 insertions, 0 deletions
diff --git a/source3/winbindd/winbindd_samr.c b/source3/winbindd/winbindd_samr.c new file mode 100644 index 0000000000..6065f3cfb4 --- /dev/null +++ b/source3/winbindd/winbindd_samr.c @@ -0,0 +1,411 @@ +/* + * Unix SMB/CIFS implementation. + * + * Winbind rpc backend functions + * + * Copyright (c) 2000-2003 Tim Potter + * Copyright (c) 2001 Andrew Tridgell + * Copyright (c) 2005 Volker Lendecke + * Copyright (c) 2008 Guenther Deschner (pidl conversion) + * Copyright (c) 2010 Andreas Schneider <asn@samba.org> + * + * This program is free software; you can redistribute it and/or modify + * it under the terms of the GNU General Public License as published by + * the Free Software Foundation; either version 3 of the License, or + * (at your option) any later version. + * + * This program is distributed in the hope that it will be useful, + * but WITHOUT ANY WARRANTY; without even the implied warranty of + * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the + * GNU General Public License for more details. + * + * You should have received a copy of the GNU General Public License + * along with this program. If not, see <http://www.gnu.org/licenses/>. + */ + +#include "includes.h" +#include "winbindd.h" +#include "../librpc/gen_ndr/cli_samr.h" +#include "rpc_client/cli_samr.h" +#include "../librpc/gen_ndr/srv_samr.h" +#include "../librpc/gen_ndr/cli_lsa.h" +#include "rpc_client/cli_lsarpc.h" +#include "../librpc/gen_ndr/srv_lsa.h" + +#undef DBGC_CLASS +#define DBGC_CLASS DBGC_WINBIND + +static NTSTATUS open_internal_samr_pipe(TALLOC_CTX *mem_ctx, + struct rpc_pipe_client **samr_pipe) +{ + static struct rpc_pipe_client *cli = NULL; + struct auth_serversupplied_info *server_info = NULL; + NTSTATUS status; + + if (cli != NULL) { + goto done; + } + + if (server_info == NULL) { + status = make_server_info_system(mem_ctx, &server_info); + if (!NT_STATUS_IS_OK(status)) { + DEBUG(0, ("open_samr_pipe: Could not create auth_serversupplied_info: %s\n", + nt_errstr(status))); + return status; + } + } + + /* create a samr connection */ + status = rpc_pipe_open_internal(talloc_autofree_context(), + &ndr_table_samr.syntax_id, + rpc_samr_dispatch, + server_info, + &cli); + if (!NT_STATUS_IS_OK(status)) { + DEBUG(0, ("open_samr_pipe: Could not connect to samr_pipe: %s\n", + nt_errstr(status))); + return status; + } + +done: + if (samr_pipe) { + *samr_pipe = cli; + } + + return NT_STATUS_OK; +} + +static NTSTATUS open_internal_samr_conn(TALLOC_CTX *mem_ctx, + struct winbindd_domain *domain, + struct rpc_pipe_client **samr_pipe, + struct policy_handle *samr_domain_hnd) +{ + NTSTATUS status; + struct policy_handle samr_connect_hnd; + + status = open_internal_samr_pipe(mem_ctx, samr_pipe); + if (!NT_STATUS_IS_OK(status)) { + return status; + } + + status = rpccli_samr_Connect2((*samr_pipe), + mem_ctx, + (*samr_pipe)->desthost, + SEC_FLAG_MAXIMUM_ALLOWED, + &samr_connect_hnd); + if (!NT_STATUS_IS_OK(status)) { + return status; + } + + status = rpccli_samr_OpenDomain((*samr_pipe), + mem_ctx, + &samr_connect_hnd, + SEC_FLAG_MAXIMUM_ALLOWED, + &domain->sid, + samr_domain_hnd); + + return status; +} + +static NTSTATUS open_internal_lsa_pipe(TALLOC_CTX *mem_ctx, + struct rpc_pipe_client **lsa_pipe) +{ + static struct rpc_pipe_client *cli = NULL; + struct auth_serversupplied_info *server_info = NULL; + NTSTATUS status; + + if (cli != NULL) { + goto done; + } + + if (server_info == NULL) { + status = make_server_info_system(mem_ctx, &server_info); + if (!NT_STATUS_IS_OK(status)) { + DEBUG(0, ("open_samr_pipe: Could not create auth_serversupplied_info: %s\n", + nt_errstr(status))); + return status; + } + } + + /* create a samr connection */ + status = rpc_pipe_open_internal(talloc_autofree_context(), + &ndr_table_lsarpc.syntax_id, + rpc_lsarpc_dispatch, + server_info, + &cli); + if (!NT_STATUS_IS_OK(status)) { + DEBUG(0, ("open_samr_pipe: Could not connect to samr_pipe: %s\n", + nt_errstr(status))); + return status; + } + +done: + if (lsa_pipe) { + *lsa_pipe = cli; + } + + return NT_STATUS_OK; +} + +static NTSTATUS open_internal_lsa_conn(TALLOC_CTX *mem_ctx, + struct rpc_pipe_client **lsa_pipe, + struct policy_handle *lsa_hnd) +{ + NTSTATUS status; + + status = open_internal_lsa_pipe(mem_ctx, lsa_pipe); + if (!NT_STATUS_IS_OK(status)) { + return status; + } + + status = rpccli_lsa_open_policy((*lsa_pipe), + mem_ctx, + true, + SEC_FLAG_MAXIMUM_ALLOWED, + lsa_hnd); + + return status; +} + +/********************************************************************* + SAM specific functions. +*********************************************************************/ + +/* List all domain groups */ +static NTSTATUS sam_enum_dom_groups(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + uint32_t *num_entries, + struct acct_info **info) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* Query display info for a domain */ +static NTSTATUS sam_query_user_list(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + uint32_t *num_entries, + struct wbint_userinfo **info) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* Lookup user information from a rid or username. */ +static NTSTATUS sam_query_user(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + const struct dom_sid *user_sid, + struct wbint_userinfo *user_info) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* get a list of trusted domains - builtin domain */ +static NTSTATUS sam_trusted_domains(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + struct netr_DomainTrustList *trusts) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* Lookup group membership given a rid. */ +static NTSTATUS sam_lookup_groupmem(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + const struct dom_sid *group_sid, + enum lsa_SidType type, + uint32_t *num_names, + struct dom_sid **sid_mem, + char ***names, + uint32_t **name_types) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/********************************************************************* + BUILTIN specific functions. +*********************************************************************/ + +/* List all domain groups */ +static NTSTATUS builtin_enum_dom_groups(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + uint32 *num_entries, + struct acct_info **info) +{ + /* BUILTIN doesn't have domain groups */ + *num_entries = 0; + *info = NULL; + return NT_STATUS_OK; +} + +/* Query display info for a domain */ +static NTSTATUS builtin_query_user_list(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + uint32 *num_entries, + struct wbint_userinfo **info) +{ + /* We don't have users */ + *num_entries = 0; + *info = NULL; + return NT_STATUS_OK; +} + +/* Lookup user information from a rid or username. */ +static NTSTATUS builtin_query_user(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + const struct dom_sid *user_sid, + struct wbint_userinfo *user_info) +{ + return NT_STATUS_NO_SUCH_USER; +} + +/* get a list of trusted domains - builtin domain */ +static NTSTATUS builtin_trusted_domains(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + struct netr_DomainTrustList *trusts) +{ + ZERO_STRUCTP(trusts); + return NT_STATUS_OK; +} + +/********************************************************************* + COMMON functions. +*********************************************************************/ + +/* List all local groups (aliases) */ +static NTSTATUS common_enum_local_groups(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + uint32_t *num_entries, + struct acct_info **info) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* convert a single name to a sid in a domain */ +static NTSTATUS common_name_to_sid(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + const char *domain_name, + const char *name, + uint32_t flags, + struct dom_sid *sid, + enum lsa_SidType *type) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* convert a domain SID to a user or group name */ +static NTSTATUS common_sid_to_name(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + const struct dom_sid *sid, + char **domain_name, + char **name, + enum lsa_SidType *type) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +static NTSTATUS common_rids_to_names(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + const struct dom_sid *sid, + uint32 *rids, + size_t num_rids, + char **domain_name, + char ***names, + enum lsa_SidType **types) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +static NTSTATUS common_lockout_policy(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + struct samr_DomInfo12 *policy) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +static NTSTATUS common_password_policy(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + struct samr_DomInfo1 *policy) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* Lookup groups a user is a member of. I wish Unix had a call like this! */ +static NTSTATUS common_lookup_usergroups(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + const struct dom_sid *user_sid, + uint32_t *num_groups, + struct dom_sid **user_gids) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +static NTSTATUS common_lookup_useraliases(struct winbindd_domain *domain, + TALLOC_CTX *mem_ctx, + uint32_t num_sids, + const struct dom_sid *sids, + uint32_t *p_num_aliases, + uint32_t **rids) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +/* find the sequence number for a domain */ +static NTSTATUS common_sequence_number(struct winbindd_domain *domain, + uint32_t *seq) +{ + /* TODO FIXME */ + return NT_STATUS_NOT_IMPLEMENTED; +} + +#if 0 +/* the rpc backend methods are exposed via this structure */ +struct winbindd_methods builtin_passdb_methods = { + .consistent = false, + + .query_user_list = builtin_query_user_list, + .enum_dom_groups = builtin_enum_dom_groups, + .enum_local_groups = common_enum_local_groups, + .name_to_sid = common_name_to_sid, + .sid_to_name = common_sid_to_name, + .rids_to_names = common_rids_to_names, + .query_user = builtin_query_user, + .lookup_usergroups = common_lookup_usergroups, + .lookup_useraliases = common_lookup_useraliases, + .lookup_groupmem = sam_lookup_groupmem, + .sequence_number = common_sequence_number, + .lockout_policy = common_lockout_policy, + .password_policy = common_password_policy, + .trusted_domains = builtin_trusted_domains +}; + +/* the rpc backend methods are exposed via this structure */ +struct winbindd_methods sam_passdb_methods = { + .consistent = false, + + .query_user_list = sam_query_user_list, + .enum_dom_groups = sam_enum_dom_groups, + .enum_local_groups = common_enum_local_groups, + .name_to_sid = common_name_to_sid, + .sid_to_name = common_sid_to_name, + .rids_to_names = common_rids_to_names, + .query_user = sam_query_user, + .lookup_usergroups = common_lookup_usergroups, + .lookup_useraliases = common_lookup_useraliases, + .lookup_groupmem = sam_lookup_groupmem, + .sequence_number = common_sequence_number, + .lockout_policy = common_lockout_policy, + .password_policy = common_password_policy, + .trusted_domains = sam_trusted_domains +}; +#endif |