2 Unix SMB/Netbios implementation.
4 NT Domain Authentication SMB / MSRPC client
5 Copyright (C) Andrew Tridgell 1994-1997
6 Copyright (C) Luke Kenneth Casson Leighton 1996-1997
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 2 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program; if not, write to the Free Software
20 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
31 extern int DEBUGLEVEL;
35 extern struct cli_state *smb_cli;
40 /****************************************************************************
41 experimental nt login.
42 ****************************************************************************/
43 void cmd_netlogon_login_test(struct client_info *info)
45 extern BOOL global_machine_password_needs_changing;
51 unsigned char trust_passwd[16];
54 /* machine account passwords */
61 if (!next_token(NULL, nt_user_name, NULL, sizeof(nt_user_name)))
63 fstrcpy(nt_user_name, smb_cli->user_name);
64 if (nt_user_name[0] == 0)
66 fprintf(out_hnd,"ntlogin: must specify username with anonymous connection\n");
71 if (next_token(NULL, password, NULL, sizeof(password)))
73 nt_password = password;
77 nt_password = getpass("Enter NT Login password:");
80 DEBUG(5,("do_nt_login_test: username %s\n", nt_user_name));
82 res = res ? secrets_fetch_trust_account_password(smb_cli->domain,
83 trust_passwd, NULL) : False;
86 /* check whether the user wants to change their machine password */
87 res = res ? trust_account_check(info->dest_ip, info->dest_host,
88 info->myhostname, smb_cli->domain,
89 info->mach_acct, new_mach_pwd) : False;
91 /* open NETLOGON session. negotiate credentials */
92 res = res ? cli_nt_session_open(smb_cli, PIPE_NETLOGON) : False;
94 res = res ? cli_nt_setup_creds(smb_cli, trust_passwd) : False;
97 /* change the machine password? */
98 if (global_machine_password_needs_changing)
100 unsigned char new_trust_passwd[16];
101 generate_random_buffer(new_trust_passwd, 16, True);
102 res = res ? cli_nt_srv_pwset(smb_cli, new_trust_passwd) : False;
106 global_machine_password_needs_changing = !set_trust_account_password(smb_cli->domain,
110 memset(new_trust_passwd, 0, 16);
114 memset(trust_passwd, 0, 16);
117 res = res ? cli_nt_login_interactive(smb_cli,
118 smb_cli->domain, nt_user_name,
119 getuid(), nt_password,
120 &info->dom.ctr, &info->dom.user_info3) : False;
122 /*** clear out the password ***/
123 memset(password, 0, sizeof(password));
125 /* ok! you're logged in! do anything you like, then... */
127 /* do an NT logout */
128 res = res ? cli_nt_logoff(smb_cli, &info->dom.ctr) : False;
130 /* close the session */
131 cli_nt_session_close(smb_cli);
133 fprintf(out_hnd,"cmd_nt_login: login (%s) test succeeded: %s\n",
134 nt_user_name, BOOLSTR(res));