/* Unix SMB/CIFS implementation. provide hooks into smbd C calls from ejs scripts Copyright (C) Andrew Tridgell 2005 Copyright (C) Tim Potter 2005 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program; if not, write to the Free Software Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA. */ #include "includes.h" #include "lib/ejs/ejs.h" #include "auth/auth.h" /* return the type of a variable */ static int ejs_typeof(MprVarHandle eid, int argc, struct MprVar **argv) { const struct { MprType type; const char *name; } types[] = { { MPR_TYPE_UNDEFINED, "undefined" }, { MPR_TYPE_NULL, "object" }, { MPR_TYPE_BOOL, "boolean" }, { MPR_TYPE_CFUNCTION, "function" }, { MPR_TYPE_FLOAT, "number" }, { MPR_TYPE_INT, "number" }, { MPR_TYPE_INT64, "number" }, { MPR_TYPE_OBJECT, "object" }, { MPR_TYPE_FUNCTION, "function" }, { MPR_TYPE_STRING, "string" }, { MPR_TYPE_STRING_CFUNCTION, "function" } }; int i; const char *type = NULL; if (argc != 1) return -1; for (i=0;i<ARRAY_SIZE(types);i++) { if (argv[0]->type == types[i].type) { type = types[i].name; break; } } if (type == NULL) return -1; ejsSetReturnString(eid, type); return 0; } /* setup a return of a string list */ void ejs_returnlist(MprVarHandle eid, const char *name, const char **list) { ejsSetReturnValue(eid, mprList(name, list)); } static int ejs_systemAuth(TALLOC_CTX *tmp_ctx, struct MprVar *auth, const char *username, const char *password, const char *domain, const char *remote_host) { struct auth_usersupplied_info *user_info = NULL; struct auth_serversupplied_info *server_info = NULL; struct auth_context *auth_context; const char *auth_unix[] = { "unix", NULL }; NTSTATUS nt_status; DATA_BLOB pw_blob; nt_status = auth_context_create(tmp_ctx, auth_unix, &auth_context); if (!NT_STATUS_IS_OK(nt_status)) { mprSetPropertyValue(auth, "result", mprCreateBoolVar(False)); mprSetPropertyValue(auth, "report", mprCreateStringVar("Auth System Failure", 1)); goto done; } pw_blob = data_blob(password, strlen(password)), make_user_info(tmp_ctx, username, username, domain, domain, remote_host, remote_host, NULL, NULL, NULL, NULL, &pw_blob, False, USER_INFO_CASE_INSENSITIVE_USERNAME | USER_INFO_DONT_CHECK_UNIX_ACCOUNT, &user_info); nt_status = auth_check_password(auth_context, tmp_ctx, user_info, &server_info); if (!NT_STATUS_IS_OK(nt_status)) { mprSetPropertyValue(auth, "result", mprCreateBoolVar(False)); mprSetPropertyValue(auth, "report", mprCreateStringVar("Login Failed", 1)); goto done; } mprSetPropertyValue(auth, "result", mprCreateBoolVar(server_info->authenticated)); mprSetPropertyValue(auth, "username", mprCreateStringVar(server_info->account_name, 1)); mprSetPropertyValue(auth, "domain", mprCreateStringVar(server_info->domain_name, 1)); done: return 0; } /* perform user authentication, returning an array of results syntax: var authinfo = new Object(); authinfo.username = myname; authinfo.password = mypass; authinfo.domain = mydom; authinfo.rhost = request['REMOTE_HOST']; auth = userAuth(authinfo); */ static int ejs_userAuth(MprVarHandle eid, int argc, struct MprVar **argv) { TALLOC_CTX *tmp_ctx; const char *username; const char *password; const char *domain; const char *remote_host; struct MprVar auth; if (argc != 1 || argv[0]->type != MPR_TYPE_OBJECT) { ejsSetErrorMsg(eid, "userAuth invalid arguments, this function requires an object."); return -1; } username = mprToString(mprGetProperty(argv[0], "username", NULL)); password = mprToString(mprGetProperty(argv[0], "password", NULL)); domain = mprToString(mprGetProperty(argv[0], "domain", NULL)); remote_host = mprToString(mprGetProperty(argv[0], "rhost", NULL)); tmp_ctx = talloc_new(mprMemCtx()); auth = mprCreateObjVar("auth", MPR_DEFAULT_HASH_SIZE); if (strcmp("System User", domain) == 0) { ejs_systemAuth(tmp_ctx, &auth, username, password, domain, remote_host); } else { mprSetPropertyValue(&auth, "result", mprCreateBoolVar(False)); mprSetPropertyValue(&auth, "report", mprCreateStringVar("Unknown Domain", 1)); } done: ejsSetReturnValue(eid, auth); talloc_free(tmp_ctx); return 0; } static int ejs_domain_list(MprVarHandle eid, int argc, char **argv) { struct MprVar list; struct MprVar dom; if (argc != 0) { ejsSetErrorMsg(eid, "domList invalid arguments"); return -1; } list = mprCreateObjVar("list", MPR_DEFAULT_HASH_SIZE); dom = mprCreateStringVar("System User", 1); mprCreateProperty(&list, "0", &dom); ejsSetReturnValue(eid, list); return 0; } /* setup C functions that be called from ejs */ void smb_setup_ejs_functions(void) { smb_setup_ejs_config(); smb_setup_ejs_ldb(); smb_setup_ejs_nbt(); ejsDefineCFunction(-1, "typeof", ejs_typeof, NULL, MPR_VAR_SCRIPT_HANDLE); ejsDefineStringCFunction(-1, "getDomainList", ejs_domain_list, NULL, MPR_VAR_SCRIPT_HANDLE); ejsDefineCFunction(-1, "userAuth", ejs_userAuth, NULL, MPR_VAR_SCRIPT_HANDLE); }