path: root/source3/rpc_server/srv_lookup.c

/* 
 *  Unix SMB/Netbios implementation.
 *  Version 1.9.
 *  RPC Pipe client / server routines
 *  Copyright (C) Andrew Tridgell              1992-1998
 *  Copyright (C) Luke Kenneth Casson Leighton 1996-1998,
 *  Copyright (C) Paul Ashton                  1997-1998.
 *  
 *  This program is free software; you can redistribute it and/or modify
 *  it under the terms of the GNU General Public License as published by
 *  the Free Software Foundation; either version 2 of the License, or
 *  (at your option) any later version.
 *  
 *  This program is distributed in the hope that it will be useful,
 *  but WITHOUT ANY WARRANTY; without even the implied warranty of
 *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 *  GNU General Public License for more details.
 *  
 *  You should have received a copy of the GNU General Public License
 *  along with this program; if not, write to the Free Software
 *  Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
 */

/*
 *
 *

 this module provides nt user / nt rid lookup functions.
 users, local groups, domain groups.

 no unix / samba functions should be called in this module:
 it should purely provide a gateway to the password database API,
 the local group database API or the domain group database API,
 but first checking built-in rids.

 did i say rids?  oops, what about "S-1-1" the "Everyone" group
 and other such well-known sids...

 speed is not of the essence: no particular optimisation is in place.

 *
 *
 */

#include "includes.h"
#include "nterr.h"

extern int DEBUGLEVEL;

extern fstring global_sam_name;
extern DOM_SID global_sam_sid;
extern DOM_SID global_sid_S_1_5_20;

extern rid_name builtin_alias_rids[];
extern rid_name domain_user_rids[];
extern rid_name domain_group_rids[];

int make_dom_gids(DOMAIN_GRP *mem, int num_members, DOM_GID **ppgids)
{
	int count;
	int i;
	DOM_GID *gids = NULL;

	*ppgids = NULL;

	DEBUG(4,("make_dom_gids: %d\n", num_members));

	if (mem == NULL || num_members == 0)
	{
		return 0;
	}

	for (i = 0, count = 0; i < num_members && count < LSA_MAX_GROUPS; i++) 
	{
		uint32 status;

		uint32 rid;
		DOM_SID sid;
		uint8  type;

		uint8  attr  = mem[count].attr;
		char   *name = mem[count].name;

		become_root(True);
		status = lookup_name(name, &sid, &type);
		unbecome_root(True);

		if (status == 0x0 && !sid_front_equal(&global_sam_sid, &sid))
		{
			fstring sid_str;
			sid_to_string(sid_str, &sid);
			DEBUG(1,("make_dom_gids: unknown sid %s for groupname %s\n",
			          sid_str, name));
		}
		else if (status == 0x0)
		{
			sid_split_rid(&sid, &rid);

			gids = (DOM_GID *)Realloc( gids, sizeof(DOM_GID) * (count+1) );

			if (gids == NULL)
			{
				DEBUG(0,("make_dom_gids: Realloc fail !\n"));
				return 0;
			}

			gids[count].g_rid = rid;
			gids[count].attr  = attr;

			DEBUG(5,("group name: %s rid: %d attr: %d\n",
			          name, rid, attr));
			count++;
		}
		else
		{
			DEBUG(1,("make_dom_gids: unknown groupname %s\n", name));
		}
	}

	*ppgids = gids;
	return count;
}

/*******************************************************************
 gets a domain user's groups
 ********************************************************************/
int get_domain_user_groups(DOMAIN_GRP_MEMBER **grp_members, uint32 group_rid)
{
	DOMAIN_GRP *grp;
	int num_mem;

	if (grp_members == NULL) return 0;

	grp = getgrouprid(group_rid, grp_members, &num_mem);

	if (grp == NULL)
	{
		return 0;
	}

	return num_mem;
}


/*******************************************************************
 lookup_builtin_sid
 ********************************************************************/
uint32 lookup_builtin_sid(DOM_SID *sid, char *name, uint8 *type)
{
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;

	status = (status != 0x0) ? lookup_wk_user_sid (sid, name, type) : status;
	status = (status != 0x0) ? lookup_wk_group_sid(sid, name, type) : status;
	status = (status != 0x0) ? lookup_wk_alias_sid(sid, name, type) : status;

	return status;
}


/*******************************************************************
 lookup_added_sid - names that have been added to the SAM database by admins.
 ********************************************************************/
uint32 lookup_added_sid(DOM_SID *sid, char *name, uint8 *type)
{
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;

	status = (status != 0x0) ? lookup_user_sid (sid, name, type) : status;
	status = (status != 0x0) ? lookup_group_sid(sid, name, type) : status;
	status = (status != 0x0) ? lookup_alias_sid(sid, name, type) : status;

	return status;
}


/*******************************************************************
 lookup_sid
 ********************************************************************/
uint32 lookup_sid(DOM_SID *sid, char *name, uint8 *type)
{
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;

	status = (status != 0x0) ? lookup_builtin_sid(sid, name, type) : status;
	status = (status != 0x0) ? lookup_added_sid   (sid, name, type) : status;

	return status;
}


/*******************************************************************
 lookup_wk_group_sid
 ********************************************************************/
uint32 lookup_wk_group_sid(DOM_SID *sid, char *group_name, uint8 *type)
{
	int i = 0; 
	uint32 rid;
	DOM_SID tmp;

	(*type) = SID_NAME_WKN_GRP;

	sid_copy(&tmp, sid);
	sid_split_rid(&tmp, &rid);

	if (!sid_equal(&global_sid_S_1_5_20, &tmp))
	{
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	DEBUG(5,("lookup_wk_group_sid: rid: %d", rid));

	while (domain_group_rids[i].rid != rid && domain_group_rids[i].rid != 0)
	{
		i++;
	}

	if (domain_group_rids[i].rid != 0)
	{
		fstrcpy(group_name, domain_group_rids[i].name);
		DEBUG(5,(" = %s\n", group_name));
		return 0x0;
	}

	DEBUG(5,(" none mapped\n"));
	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup_group_sid
 ********************************************************************/
uint32 lookup_group_sid(DOM_SID *sid, char *group_name, uint8 *type)
{
	pstring sid_str;
	uint32 rid;
	DOM_SID tmp;
	DOMAIN_GRP *grp = NULL;
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;

	(*type) = SID_NAME_DOM_GRP;

	sid_to_string(sid_str, sid);
	DEBUG(5,("lookup_group_sid: sid: %s", sid_str));

	sid_copy(&tmp, sid);
	sid_split_rid(&tmp, &rid);

	if (!sid_equal(&global_sam_sid, &tmp))
	{
		DEBUG(5,("not our SID\n"));
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	grp = getgrouprid(rid, NULL, NULL);

	if (grp != NULL)
	{
		fstrcpy(group_name, grp->name);
		DEBUG(5,(" = %s\n", group_name));
		return 0x0;
	}

	DEBUG(5,(" none mapped\n"));
	return status;
}

/*******************************************************************
 lookup_wk_alias_sid
 ********************************************************************/
uint32 lookup_wk_alias_sid(DOM_SID *sid, char *alias_name, uint8 *type)
{
	int i = 0; 
	uint32 rid;
	DOM_SID tmp;

	(*type) = SID_NAME_ALIAS;

	sid_copy(&tmp, sid);
	sid_split_rid(&tmp, &rid);

	if (!sid_equal(&global_sid_S_1_5_20, &tmp))
	{
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	DEBUG(5,("lookup_wk_alias_sid: rid: %d", rid));

	while (builtin_alias_rids[i].rid != rid && builtin_alias_rids[i].rid != 0)
	{
		i++;
	}

	if (builtin_alias_rids[i].rid != 0)
	{
		fstrcpy(alias_name, builtin_alias_rids[i].name);
		DEBUG(5,(" = %s\n", alias_name));
		return 0x0;
	}

	DEBUG(5,(" none mapped\n"));
	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup_alias_sid
 ********************************************************************/
uint32 lookup_alias_sid(DOM_SID *sid, char *alias_name, uint8 *type)
{
	pstring sid_str;
	uint32 rid;
	DOM_SID tmp;
	LOCAL_GRP *als = NULL;
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;

	(*type) = SID_NAME_ALIAS;

	sid_to_string(sid_str, sid);
	DEBUG(5,("lookup_alias_sid: sid: %s", sid_str));

	sid_copy(&tmp, sid);
	sid_split_rid(&tmp, &rid);

	if (!sid_equal(&global_sam_sid, &tmp))
	{
		DEBUG(5,("not our SID\n"));
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	als = getaliasrid(rid, NULL, NULL);

	if (als != NULL)
	{
		fstrcpy(alias_name, als->name);
		DEBUG(5,(" = %s\n", alias_name));
		return 0x0;
	}

	DEBUG(5,(" none mapped\n"));
	return status;
}

/*******************************************************************
 lookup well-known user name
 ********************************************************************/
uint32 lookup_wk_user_sid(DOM_SID *sid, char *user_name, uint8 *type)
{
	int i = 0;
	uint32 rid;
	DOM_SID tmp;

	(*type) = SID_NAME_USER;

	sid_copy(&tmp, sid);
	sid_split_rid(&tmp, &rid);

	if (!sid_equal(&global_sid_S_1_5_20, &tmp))
	{
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	DEBUG(5,("lookup_wk_user_sid: rid: %d", rid));

	/* look up the well-known domain user rids first */
	while (domain_user_rids[i].rid != rid && domain_user_rids[i].rid != 0)
	{
		i++;
	}

	if (domain_user_rids[i].rid != 0)
	{
		fstrcpy(user_name, domain_user_rids[i].name);
		DEBUG(5,(" = %s\n", user_name));
		return 0x0;
	}

	DEBUG(5,(" none mapped\n"));
	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup user name
 ********************************************************************/
uint32 lookup_user_sid(DOM_SID *sid, char *user_name, uint8 *type)
{
	struct sam_disp_info *disp_info;
	uint32 rid;
	DOM_SID tmp;

	(*type) = SID_NAME_USER;

	sid_copy(&tmp, sid);
	sid_split_rid(&tmp, &rid);

	if (sid_equal(&global_sam_sid, &tmp))
	{
		DEBUG(5,("lookup_user_sid in SAM %s: rid: %d",
		          global_sam_name, rid));

		/* find the user account */
		become_root(True);
		disp_info = getsamdisprid(rid);
		unbecome_root(True);

		if (disp_info != NULL)
		{
			fstrcpy(user_name, disp_info->nt_name);
			DEBUG(5,(" = %s\n", user_name));
			return 0x0;
		}

		DEBUG(5,(" none mapped\n"));
	}

	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup_group_rid
 ********************************************************************/
uint32 lookup_added_group_name(const char *grp_name, const char *domain,
				DOM_SID *sid, uint8 *type)
{
	DOMAIN_GRP *grp = NULL;
	(*type) = SID_NAME_DOM_GRP;

	DEBUG(5,("lookup_added_group_name: name: %s", grp_name));

	if (!strequal(domain, global_sam_name))
	{
		DEBUG(5,(" not our domain\n"));
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	grp = getgroupntnam(grp_name, NULL, NULL);

	if (grp != NULL)
	{
		sid_copy(sid, &global_sam_sid);
		sid_append_rid(sid, grp->rid);

		DEBUG(5,(" = 0x%x\n", grp->rid));
		return 0x0;
	}

	DEBUG(5,(" none mapped\n"));
	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup_added_alias_name
 ********************************************************************/
uint32 lookup_added_alias_name(const char *als_name, const char *domain,
				DOM_SID *sid, uint8 *type)
{
	LOCAL_GRP *als = NULL;
	(*type) = SID_NAME_ALIAS;

	DEBUG(5,("lookup_added_alias_name: name: %s\\%s", domain, als_name));

	if (!strequal(domain, global_sam_name))
	{
		DEBUG(5,(" not our domain\n"));
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	als = getaliasntnam(als_name, NULL, NULL);

	if (als != NULL)
	{
		sid_copy(sid, &global_sam_sid);
		sid_append_rid(sid, als->rid);

		DEBUG(5,(" = 0x%x\n", als->rid));
		return 0x0;
	}

	DEBUG(5,(" none mapped\n"));
	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup_added_user_rid
 ********************************************************************/
uint32 lookup_added_user_rids(char *nt_name,
		uint32 *usr_rid, uint32 *grp_rid)
{
	struct sam_passwd *sam_pass;
	(*usr_rid) = 0;
	(*grp_rid) = 0;

	/* find the user account */
	become_root(True);
	sam_pass = getsam21pwntnam(nt_name);
	unbecome_root(True);

	if (sam_pass != NULL)
	{
		(*usr_rid) = sam_pass->user_rid ;
		(*grp_rid) = sam_pass->group_rid;
		return 0x0;
	}

	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup_added_user_name
 ********************************************************************/
static uint32 lookup_added_user_name(const char *nt_name, const char *domain,
				DOM_SID *sid, uint8 *type)
{
	struct sam_passwd *sam_pass;
	(*type) = SID_NAME_USER;

	if (!strequal(domain, global_sam_name))
	{
		return 0xC0000000 | NT_STATUS_NONE_MAPPED;
	}

	/* find the user account */
	become_root(True);
	sam_pass = getsam21pwntnam(nt_name);
	unbecome_root(True);

	if (sam_pass != NULL)
	{
		sid_copy(sid, &global_sam_sid);
		sid_append_rid(sid, sam_pass->user_rid);

		return 0x0;
	}

	return 0xC0000000 | NT_STATUS_NONE_MAPPED;
}

/*******************************************************************
 lookup_grp_name
 ********************************************************************/
static uint32 lookup_grp_name(const char *name, const char *domain,
				DOM_SID *sid, uint8 *type)
{
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;

	status = (status != 0x0) ? lookup_wk_group_name     (name, domain, sid, type) : status;
	status = (status != 0x0) ? lookup_builtin_alias_name(name, domain, sid, type) : status;
	status = (status != 0x0) ? lookup_added_group_name  (name, domain, sid, type) : status;
	status = (status != 0x0) ? lookup_added_alias_name  (name, domain, sid, type) : status;

	return status;
}

/*******************************************************************
 lookup_user_name
 ********************************************************************/
static uint32 lookup_user_name(const char *name, const char *domain,
				DOM_SID *sid, uint8 *type)
{
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;

	status = (status != 0x0) ? lookup_wk_user_name   (name, domain, sid, type) : status;
	status = (status != 0x0) ? lookup_added_user_name(name, domain, sid, type) : status;

	return status;
}

/*******************************************************************
 lookup_name
 ********************************************************************/
uint32 lookup_name(char *name, DOM_SID *sid, uint8 *type)
{
	uint32 status = 0xC0000000 | NT_STATUS_NONE_MAPPED;
	fstring domain;
	fstring user;
	
	split_domain_name(name, domain, user);

	if (!strequal(domain, global_sam_name))
	{
		DEBUG(0,("lookup_name: remote domain %s not supported\n", domain));
		return status;
	}

	status = (status != 0x0) ? lookup_user_name    (name, domain, sid, type) : status;
	status = (status != 0x0) ? lookup_grp_name     (name, domain, sid, type) : status;
#if 0
	status = (status != 0x0) ? lookup_domain_name  (domain, sid, type) : status;
#endif

	return status;
}