/* parser auto-generated by pidl, then hand-modified by abartlet */ #include "includes.h" #include "libcli/netlogon.h" _PUBLIC_ enum ndr_err_code ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags(struct ndr_push *ndr, int ndr_flags, const struct NETLOGON_SAM_LOGON_RESPONSE_EX *r) { { uint32_t _flags_save_STRUCT = ndr->flags; ndr_set_flags(&ndr->flags, LIBNDR_FLAG_NOALIGN); if (ndr_flags & NDR_SCALARS) { NDR_CHECK(ndr_push_align(ndr, 4)); NDR_CHECK(ndr_push_netlogon_command(ndr, NDR_SCALARS, r->command)); NDR_CHECK(ndr_push_uint16(ndr, NDR_SCALARS, r->sbz)); NDR_CHECK(ndr_push_nbt_server_type(ndr, NDR_SCALARS, r->server_type)); NDR_CHECK(ndr_push_GUID(ndr, NDR_SCALARS, &r->domain_uuid)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->forest)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->dns_domain)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->pdc_dns_name)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->domain)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->pdc_name)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->user_name)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->server_site)); NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->client_site)); if (r->nt_version & NETLOGON_NT_VERSION_5EX_WITH_IP) { NDR_CHECK(ndr_push_uint8(ndr, NDR_SCALARS, ndr_size_nbt_sockaddr(&r->sockaddr, ndr->flags))); { struct ndr_push *_ndr_sockaddr; NDR_CHECK(ndr_push_subcontext_start(ndr, &_ndr_sockaddr, 0, ndr_size_nbt_sockaddr(&r->sockaddr, ndr->flags))); NDR_CHECK(ndr_push_nbt_sockaddr(_ndr_sockaddr, NDR_SCALARS|NDR_BUFFERS, &r->sockaddr)); NDR_CHECK(ndr_push_subcontext_end(ndr, _ndr_sockaddr, 0, ndr_size_nbt_sockaddr(&r->sockaddr, ndr->flags))); } } if (r->nt_version & NETLOGON_NT_VERSION_WITH_CLOSEST_SITE) { NDR_CHECK(ndr_push_nbt_string(ndr, NDR_SCALARS, r->next_closest_site)); } NDR_CHECK(ndr_push_netlogon_nt_version_flags(ndr, NDR_SCALARS, r->nt_version)); NDR_CHECK(ndr_push_uint16(ndr, NDR_SCALARS, r->lmnt_token)); NDR_CHECK(ndr_push_uint16(ndr, NDR_SCALARS, r->lm20_token)); } if (ndr_flags & NDR_BUFFERS) { NDR_CHECK(ndr_push_GUID(ndr, NDR_BUFFERS, &r->domain_uuid)); } ndr->flags = _flags_save_STRUCT; } return NDR_ERR_SUCCESS; } static enum ndr_err_code ndr_pull_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags(struct ndr_pull *ndr, int ndr_flags, struct NETLOGON_SAM_LOGON_RESPONSE_EX *r, uint32_t nt_version_flags) { { uint32_t _flags_save_STRUCT = ndr->flags; ZERO_STRUCTP(r); ndr_set_flags(&ndr->flags, LIBNDR_FLAG_NOALIGN); if (ndr_flags & NDR_SCALARS) { NDR_CHECK(ndr_pull_align(ndr, 4)); NDR_CHECK(ndr_pull_netlogon_command(ndr, NDR_SCALARS, &r->command)); NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &r->sbz)); NDR_CHECK(ndr_pull_nbt_server_type(ndr, NDR_SCALARS, &r->server_type)); NDR_CHECK(ndr_pull_GUID(ndr, NDR_SCALARS, &r->domain_uuid)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->forest)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->dns_domain)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->pdc_dns_name)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->domain)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->pdc_name)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->user_name)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->server_site)); NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->client_site)); if (nt_version_flags & NETLOGON_NT_VERSION_5EX_WITH_IP) { NDR_CHECK(ndr_pull_uint8(ndr, NDR_SCALARS, &r->sockaddr_size)); { struct ndr_pull *_ndr_sockaddr; NDR_CHECK(ndr_pull_subcontext_start(ndr, &_ndr_sockaddr, 0, r->sockaddr_size)); NDR_CHECK(ndr_pull_nbt_sockaddr(_ndr_sockaddr, NDR_SCALARS|NDR_BUFFERS, &r->sockaddr)); NDR_CHECK(ndr_pull_subcontext_end(ndr, _ndr_sockaddr, 0, r->sockaddr_size)); } } if (nt_version_flags & NETLOGON_NT_VERSION_WITH_CLOSEST_SITE) { NDR_CHECK(ndr_pull_nbt_string(ndr, NDR_SCALARS, &r->next_closest_site)); } NDR_CHECK(ndr_pull_netlogon_nt_version_flags(ndr, NDR_SCALARS, &r->nt_version)); if (r->nt_version != nt_version_flags) { return NDR_ERR_VALIDATE; } NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &r->lmnt_token)); NDR_CHECK(ndr_pull_uint16(ndr, NDR_SCALARS, &r->lm20_token)); } if (ndr_flags & NDR_BUFFERS) { NDR_CHECK(ndr_pull_GUID(ndr, NDR_BUFFERS, &r->domain_uuid)); } ndr->flags = _flags_save_STRUCT; } return NDR_ERR_SUCCESS; } NTSTATUS push_netlogon_samlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx, struct smb_iconv_convenience *iconv_convenience, struct netlogon_samlogon_response *response) { enum ndr_err_code ndr_err; if (response->ntver == NETLOGON_NT_VERSION_1) { ndr_err = ndr_push_struct_blob(data, mem_ctx, iconv_convenience, &response->nt4, (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE_NT40); } else if (response->ntver & NETLOGON_NT_VERSION_5EX) { ndr_err = ndr_push_struct_blob(data, mem_ctx, iconv_convenience, &response->nt5_ex, (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags); } else if (response->ntver & NETLOGON_NT_VERSION_5) { ndr_err = ndr_push_struct_blob(data, mem_ctx, iconv_convenience, &response->nt5, (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE); } else { DEBUG(0, ("Asked to push unknown netlogon response type 0x%02x\n", response->ntver)); return NT_STATUS_INVALID_PARAMETER; } if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) { DEBUG(2,("failed to push netlogon response of type 0x%02x\n", response->ntver)); return ndr_map_error2ntstatus(ndr_err); } return NT_STATUS_OK; } NTSTATUS pull_netlogon_samlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx, struct smb_iconv_convenience *iconv_convenience, struct netlogon_samlogon_response *response) { uint32_t ntver; enum ndr_err_code ndr_err; if (data->length < 8) { return NT_STATUS_BUFFER_TOO_SMALL; } /* lmnttoken */ if (SVAL(data->data, data->length - 4) != 0xffff) { return NT_STATUS_INVALID_NETWORK_RESPONSE; } /* lm20token */ if (SVAL(data->data, data->length - 2) != 0xffff) { return NT_STATUS_INVALID_NETWORK_RESPONSE; } ntver = IVAL(data->data, data->length - 8); if (ntver == NETLOGON_NT_VERSION_1) { ndr_err = ndr_pull_struct_blob_all(data, mem_ctx, iconv_convenience, &response->nt4, (ndr_pull_flags_fn_t)ndr_pull_NETLOGON_SAM_LOGON_RESPONSE_NT40); response->ntver = NETLOGON_NT_VERSION_1; } else if (ntver & NETLOGON_NT_VERSION_5EX) { struct ndr_pull *ndr; ndr = ndr_pull_init_blob(data, mem_ctx, iconv_convenience); if (!ndr) { return NT_STATUS_NO_MEMORY; } ndr_err = ndr_pull_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags(ndr, NDR_SCALARS|NDR_BUFFERS, &response->nt5_ex, ntver); if (ndr->offset < ndr->data_size) { ndr_err = ndr_pull_error(ndr, NDR_ERR_UNREAD_BYTES, "not all bytes consumed ofs[%u] size[%u]", ndr->offset, ndr->data_size); } response->ntver = NETLOGON_NT_VERSION_5EX; } else if (ntver & NETLOGON_NT_VERSION_5) { ndr_err = ndr_pull_struct_blob_all(data, mem_ctx, iconv_convenience, &response->nt5, (ndr_pull_flags_fn_t)ndr_pull_NETLOGON_SAM_LOGON_RESPONSE); response->ntver = NETLOGON_NT_VERSION_5; } else { DEBUG(2,("failed to parse netlogon response of type 0x%02x - unknown response type\n", ntver)); dump_data(10, data->data, data->length); return NT_STATUS_INVALID_NETWORK_RESPONSE; } if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) { DEBUG(2,("failed to parse netlogon response of type 0x%02x\n", ntver)); dump_data(10, data->data, data->length); return ndr_map_error2ntstatus(ndr_err); } return NT_STATUS_OK; } void map_netlogon_samlogon_response(struct netlogon_samlogon_response *response) { struct NETLOGON_SAM_LOGON_RESPONSE_EX response_5_ex; switch (response->ntver) { case NETLOGON_NT_VERSION_5EX: break; case NETLOGON_NT_VERSION_5: ZERO_STRUCT(response_5_ex); response_5_ex.command = response->nt5.command; response_5_ex.pdc_name = response->nt5.pdc_name; response_5_ex.user_name = response->nt5.user_name; response_5_ex.domain = response->nt5.domain_name; response_5_ex.domain_uuid = response->nt5.domain_uuid; response_5_ex.forest = response->nt5.forest; response_5_ex.dns_domain = response->nt5.dns_domain; response_5_ex.pdc_dns_name = response->nt5.pdc_dns_name; response_5_ex.sockaddr.pdc_ip = response->nt5.pdc_ip; response_5_ex.server_type = response->nt5.server_type; response_5_ex.nt_version = response->nt5.nt_version; response_5_ex.lmnt_token = response->nt5.lmnt_token; response_5_ex.lm20_token = response->nt5.lm20_token; response->ntver = NETLOGON_NT_VERSION_5EX; response->nt5_ex = response_5_ex; break; case NETLOGON_NT_VERSION_1: ZERO_STRUCT(response_5_ex); response_5_ex.command = response->nt4.command; response_5_ex.pdc_name = response->nt4.server; response_5_ex.user_name = response->nt4.user_name; response_5_ex.domain = response->nt4.domain; response_5_ex.nt_version = response->nt4.nt_version; response_5_ex.lmnt_token = response->nt4.lmnt_token; response_5_ex.lm20_token = response->nt4.lm20_token; response->ntver = NETLOGON_NT_VERSION_5EX; response->nt5_ex = response_5_ex; break; } return; } NTSTATUS push_nbt_netlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx, struct smb_iconv_convenience *iconv_convenience, struct nbt_netlogon_response *response) { NTSTATUS status = NT_STATUS_INVALID_NETWORK_RESPONSE; enum ndr_err_code ndr_err; switch (response->response_type) { case NETLOGON_GET_PDC: ndr_err = ndr_push_struct_blob(data, mem_ctx, iconv_convenience, &response->get_pdc, (ndr_push_flags_fn_t)ndr_push_nbt_netlogon_response_from_pdc); if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) { status = ndr_map_error2ntstatus(ndr_err); DEBUG(0,("Failed to parse netlogon packet of length %d: %s\n", (int)data->length, nt_errstr(status))); if (DEBUGLVL(10)) { file_save("netlogon.dat", data->data, data->length); } return status; } status = NT_STATUS_OK; break; case NETLOGON_SAMLOGON: status = push_netlogon_samlogon_response(data, mem_ctx, iconv_convenience, &response->samlogon); break; } return status; } NTSTATUS pull_nbt_netlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx, struct smb_iconv_convenience *iconv_convenience, struct nbt_netlogon_response *response) { NTSTATUS status = NT_STATUS_INVALID_NETWORK_RESPONSE; enum netlogon_command command; enum ndr_err_code ndr_err; if (data->length < 4) { return NT_STATUS_INVALID_NETWORK_RESPONSE; } command = SVAL(data->data, 0); switch (command) { case NETLOGON_RESPONSE_FROM_PDC: ndr_err = ndr_pull_struct_blob_all(data, mem_ctx, iconv_convenience, &response->get_pdc, (ndr_pull_flags_fn_t)ndr_pull_nbt_netlogon_response_from_pdc); if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) { status = ndr_map_error2ntstatus(ndr_err); DEBUG(0,("Failed to parse netlogon packet of length %d: %s\n", (int)data->length, nt_errstr(status))); if (DEBUGLVL(10)) { file_save("netlogon.dat", data->data, data->length); } return status; } status = NT_STATUS_OK; response->response_type = NETLOGON_GET_PDC; break; case LOGON_SAM_LOGON_RESPONSE: case LOGON_SAM_LOGON_PAUSE_RESPONSE: case LOGON_SAM_LOGON_USER_UNKNOWN: case LOGON_SAM_LOGON_RESPONSE_EX: case LOGON_SAM_LOGON_PAUSE_RESPONSE_EX: case LOGON_SAM_LOGON_USER_UNKNOWN_EX: status = pull_netlogon_samlogon_response(data, mem_ctx, iconv_convenience, &response->samlogon); response->response_type = NETLOGON_SAMLOGON; break; /* These levels are queries, not responses */ case LOGON_PRIMARY_QUERY: case NETLOGON_ANNOUNCE_UAS: case LOGON_SAM_LOGON_REQUEST: status = NT_STATUS_INVALID_NETWORK_RESPONSE; } return status; }