--- /dev/null
+/*
+ * Unix SMB/CIFS implementation.
+ *
+ * Winbind rpc backend functions
+ *
+ * Copyright (c) 2000-2003 Tim Potter
+ * Copyright (c) 2001 Andrew Tridgell
+ * Copyright (c) 2005 Volker Lendecke
+ * Copyright (c) 2008 Guenther Deschner (pidl conversion)
+ * Copyright (c) 2010 Andreas Schneider <asn@samba.org>
+ *
+ * This program is free software; you can redistribute it and/or modify
+ * it under the terms of the GNU General Public License as published by
+ * the Free Software Foundation; either version 3 of the License, or
+ * (at your option) any later version.
+ *
+ * This program is distributed in the hope that it will be useful,
+ * but WITHOUT ANY WARRANTY; without even the implied warranty of
+ * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ * GNU General Public License for more details.
+ *
+ * You should have received a copy of the GNU General Public License
+ * along with this program. If not, see <http://www.gnu.org/licenses/>.
+ */
+
+#include "includes.h"
+#include "winbindd.h"
+#include "../librpc/gen_ndr/cli_samr.h"
+#include "rpc_client/cli_samr.h"
+#include "../librpc/gen_ndr/srv_samr.h"
+#include "../librpc/gen_ndr/cli_lsa.h"
+#include "rpc_client/cli_lsarpc.h"
+#include "../librpc/gen_ndr/srv_lsa.h"
+
+#undef DBGC_CLASS
+#define DBGC_CLASS DBGC_WINBIND
+
+static NTSTATUS open_internal_samr_pipe(TALLOC_CTX *mem_ctx,
+ struct rpc_pipe_client **samr_pipe)
+{
+ static struct rpc_pipe_client *cli = NULL;
+ struct auth_serversupplied_info *server_info = NULL;
+ NTSTATUS status;
+
+ if (cli != NULL) {
+ goto done;
+ }
+
+ if (server_info == NULL) {
+ status = make_server_info_system(mem_ctx, &server_info);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(0, ("open_samr_pipe: Could not create auth_serversupplied_info: %s\n",
+ nt_errstr(status)));
+ return status;
+ }
+ }
+
+ /* create a samr connection */
+ status = rpc_pipe_open_internal(talloc_autofree_context(),
+ &ndr_table_samr.syntax_id,
+ rpc_samr_dispatch,
+ server_info,
+ &cli);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(0, ("open_samr_pipe: Could not connect to samr_pipe: %s\n",
+ nt_errstr(status)));
+ return status;
+ }
+
+done:
+ if (samr_pipe) {
+ *samr_pipe = cli;
+ }
+
+ return NT_STATUS_OK;
+}
+
+static NTSTATUS open_internal_samr_conn(TALLOC_CTX *mem_ctx,
+ struct winbindd_domain *domain,
+ struct rpc_pipe_client **samr_pipe,
+ struct policy_handle *samr_domain_hnd)
+{
+ NTSTATUS status;
+ struct policy_handle samr_connect_hnd;
+
+ status = open_internal_samr_pipe(mem_ctx, samr_pipe);
+ if (!NT_STATUS_IS_OK(status)) {
+ return status;
+ }
+
+ status = rpccli_samr_Connect2((*samr_pipe),
+ mem_ctx,
+ (*samr_pipe)->desthost,
+ SEC_FLAG_MAXIMUM_ALLOWED,
+ &samr_connect_hnd);
+ if (!NT_STATUS_IS_OK(status)) {
+ return status;
+ }
+
+ status = rpccli_samr_OpenDomain((*samr_pipe),
+ mem_ctx,
+ &samr_connect_hnd,
+ SEC_FLAG_MAXIMUM_ALLOWED,
+ &domain->sid,
+ samr_domain_hnd);
+
+ return status;
+}
+
+static NTSTATUS open_internal_lsa_pipe(TALLOC_CTX *mem_ctx,
+ struct rpc_pipe_client **lsa_pipe)
+{
+ static struct rpc_pipe_client *cli = NULL;
+ struct auth_serversupplied_info *server_info = NULL;
+ NTSTATUS status;
+
+ if (cli != NULL) {
+ goto done;
+ }
+
+ if (server_info == NULL) {
+ status = make_server_info_system(mem_ctx, &server_info);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(0, ("open_samr_pipe: Could not create auth_serversupplied_info: %s\n",
+ nt_errstr(status)));
+ return status;
+ }
+ }
+
+ /* create a samr connection */
+ status = rpc_pipe_open_internal(talloc_autofree_context(),
+ &ndr_table_lsarpc.syntax_id,
+ rpc_lsarpc_dispatch,
+ server_info,
+ &cli);
+ if (!NT_STATUS_IS_OK(status)) {
+ DEBUG(0, ("open_samr_pipe: Could not connect to samr_pipe: %s\n",
+ nt_errstr(status)));
+ return status;
+ }
+
+done:
+ if (lsa_pipe) {
+ *lsa_pipe = cli;
+ }
+
+ return NT_STATUS_OK;
+}
+
+static NTSTATUS open_internal_lsa_conn(TALLOC_CTX *mem_ctx,
+ struct rpc_pipe_client **lsa_pipe,
+ struct policy_handle *lsa_hnd)
+{
+ NTSTATUS status;
+
+ status = open_internal_lsa_pipe(mem_ctx, lsa_pipe);
+ if (!NT_STATUS_IS_OK(status)) {
+ return status;
+ }
+
+ status = rpccli_lsa_open_policy((*lsa_pipe),
+ mem_ctx,
+ true,
+ SEC_FLAG_MAXIMUM_ALLOWED,
+ lsa_hnd);
+
+ return status;
+}
+
+/*********************************************************************
+ SAM specific functions.
+*********************************************************************/
+
+/* List all domain groups */
+static NTSTATUS sam_enum_dom_groups(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ uint32_t *num_entries,
+ struct acct_info **info)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* Query display info for a domain */
+static NTSTATUS sam_query_user_list(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ uint32_t *num_entries,
+ struct wbint_userinfo **info)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* Lookup user information from a rid or username. */
+static NTSTATUS sam_query_user(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ const struct dom_sid *user_sid,
+ struct wbint_userinfo *user_info)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* get a list of trusted domains - builtin domain */
+static NTSTATUS sam_trusted_domains(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ struct netr_DomainTrustList *trusts)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* Lookup group membership given a rid. */
+static NTSTATUS sam_lookup_groupmem(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ const struct dom_sid *group_sid,
+ enum lsa_SidType type,
+ uint32_t *num_names,
+ struct dom_sid **sid_mem,
+ char ***names,
+ uint32_t **name_types)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/*********************************************************************
+ BUILTIN specific functions.
+*********************************************************************/
+
+/* List all domain groups */
+static NTSTATUS builtin_enum_dom_groups(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ uint32 *num_entries,
+ struct acct_info **info)
+{
+ /* BUILTIN doesn't have domain groups */
+ *num_entries = 0;
+ *info = NULL;
+ return NT_STATUS_OK;
+}
+
+/* Query display info for a domain */
+static NTSTATUS builtin_query_user_list(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ uint32 *num_entries,
+ struct wbint_userinfo **info)
+{
+ /* We don't have users */
+ *num_entries = 0;
+ *info = NULL;
+ return NT_STATUS_OK;
+}
+
+/* Lookup user information from a rid or username. */
+static NTSTATUS builtin_query_user(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ const struct dom_sid *user_sid,
+ struct wbint_userinfo *user_info)
+{
+ return NT_STATUS_NO_SUCH_USER;
+}
+
+/* get a list of trusted domains - builtin domain */
+static NTSTATUS builtin_trusted_domains(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ struct netr_DomainTrustList *trusts)
+{
+ ZERO_STRUCTP(trusts);
+ return NT_STATUS_OK;
+}
+
+/*********************************************************************
+ COMMON functions.
+*********************************************************************/
+
+/* List all local groups (aliases) */
+static NTSTATUS common_enum_local_groups(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ uint32_t *num_entries,
+ struct acct_info **info)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* convert a single name to a sid in a domain */
+static NTSTATUS common_name_to_sid(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ const char *domain_name,
+ const char *name,
+ uint32_t flags,
+ struct dom_sid *sid,
+ enum lsa_SidType *type)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* convert a domain SID to a user or group name */
+static NTSTATUS common_sid_to_name(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ const struct dom_sid *sid,
+ char **domain_name,
+ char **name,
+ enum lsa_SidType *type)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+static NTSTATUS common_rids_to_names(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ const struct dom_sid *sid,
+ uint32 *rids,
+ size_t num_rids,
+ char **domain_name,
+ char ***names,
+ enum lsa_SidType **types)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+static NTSTATUS common_lockout_policy(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ struct samr_DomInfo12 *policy)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+static NTSTATUS common_password_policy(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ struct samr_DomInfo1 *policy)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* Lookup groups a user is a member of. I wish Unix had a call like this! */
+static NTSTATUS common_lookup_usergroups(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ const struct dom_sid *user_sid,
+ uint32_t *num_groups,
+ struct dom_sid **user_gids)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+static NTSTATUS common_lookup_useraliases(struct winbindd_domain *domain,
+ TALLOC_CTX *mem_ctx,
+ uint32_t num_sids,
+ const struct dom_sid *sids,
+ uint32_t *p_num_aliases,
+ uint32_t **rids)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+/* find the sequence number for a domain */
+static NTSTATUS common_sequence_number(struct winbindd_domain *domain,
+ uint32_t *seq)
+{
+ /* TODO FIXME */
+ return NT_STATUS_NOT_IMPLEMENTED;
+}
+
+#if 0
+/* the rpc backend methods are exposed via this structure */
+struct winbindd_methods builtin_passdb_methods = {
+ .consistent = false,
+
+ .query_user_list = builtin_query_user_list,
+ .enum_dom_groups = builtin_enum_dom_groups,
+ .enum_local_groups = common_enum_local_groups,
+ .name_to_sid = common_name_to_sid,
+ .sid_to_name = common_sid_to_name,
+ .rids_to_names = common_rids_to_names,
+ .query_user = builtin_query_user,
+ .lookup_usergroups = common_lookup_usergroups,
+ .lookup_useraliases = common_lookup_useraliases,
+ .lookup_groupmem = sam_lookup_groupmem,
+ .sequence_number = common_sequence_number,
+ .lockout_policy = common_lockout_policy,
+ .password_policy = common_password_policy,
+ .trusted_domains = builtin_trusted_domains
+};
+
+/* the rpc backend methods are exposed via this structure */
+struct winbindd_methods sam_passdb_methods = {
+ .consistent = false,
+
+ .query_user_list = sam_query_user_list,
+ .enum_dom_groups = sam_enum_dom_groups,
+ .enum_local_groups = common_enum_local_groups,
+ .name_to_sid = common_name_to_sid,
+ .sid_to_name = common_sid_to_name,
+ .rids_to_names = common_rids_to_names,
+ .query_user = sam_query_user,
+ .lookup_usergroups = common_lookup_usergroups,
+ .lookup_useraliases = common_lookup_useraliases,
+ .lookup_groupmem = sam_lookup_groupmem,
+ .sequence_number = common_sequence_number,
+ .lockout_policy = common_lockout_policy,
+ .password_policy = common_password_policy,
+ .trusted_domains = sam_trusted_domains
+};
+#endif
git.samba.org / kamenim / samba.git / commitdiff