s3-libnet-samsync: pass back sequence number from fetch_sam_entries_keytab.
[samba.git] / source3 / libnet / libnet_samsync_keytab.c
1 /*
2    Unix SMB/CIFS implementation.
3    dump the remote SAM using rpc samsync operations
4
5    Copyright (C) Guenther Deschner 2008.
6
7    This program is free software; you can redistribute it and/or modify
8    it under the terms of the GNU General Public License as published by
9    the Free Software Foundation; either version 3 of the License, or
10    (at your option) any later version.
11
12    This program is distributed in the hope that it will be useful,
13    but WITHOUT ANY WARRANTY; without even the implied warranty of
14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15    GNU General Public License for more details.
16
17    You should have received a copy of the GNU General Public License
18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
19 */
20
21 #include "includes.h"
22 #include "libnet/libnet.h"
23
24 #if defined(HAVE_ADS) && defined(ENCTYPE_ARCFOUR_HMAC)
25
26 /****************************************************************
27 ****************************************************************/
28
29 static NTSTATUS keytab_ad_connect(TALLOC_CTX *mem_ctx,
30                                   const char *domain_name,
31                                   const char *username,
32                                   const char *password,
33                                   struct libnet_keytab_context *ctx)
34 {
35         NTSTATUS status;
36         ADS_STATUS ad_status;
37         ADS_STRUCT *ads;
38         struct netr_DsRGetDCNameInfo *info = NULL;
39         const char *dc;
40
41         status = dsgetdcname(mem_ctx, NULL, domain_name, NULL, NULL, 0, &info);
42         if (!NT_STATUS_IS_OK(status)) {
43                 return status;
44         }
45
46         dc = strip_hostname(info->dc_unc);
47
48         ads = ads_init(NULL, domain_name, dc);
49         NT_STATUS_HAVE_NO_MEMORY(ads);
50
51         if (getenv(KRB5_ENV_CCNAME) == NULL) {
52                 setenv(KRB5_ENV_CCNAME, "MEMORY:libnet_samsync_keytab", 1);
53         }
54
55         ads->auth.user_name = SMB_STRDUP(username);
56         ads->auth.password = SMB_STRDUP(password);
57
58         ad_status = ads_connect_user_creds(ads);
59         if (!ADS_ERR_OK(ad_status)) {
60                 return NT_STATUS_UNSUCCESSFUL;
61         }
62
63         ctx->ads = ads;
64
65         ctx->dns_domain_name = talloc_strdup_upper(mem_ctx, ads->config.realm);
66         NT_STATUS_HAVE_NO_MEMORY(ctx->dns_domain_name);
67
68         return NT_STATUS_OK;
69 }
70
71 /****************************************************************
72 ****************************************************************/
73
74 static NTSTATUS fetch_sam_entry_keytab(TALLOC_CTX *mem_ctx,
75                                        enum netr_SamDatabaseID database_id,
76                                        uint32_t rid,
77                                        struct netr_DELTA_USER *r,
78                                        struct libnet_keytab_context *ctx)
79 {
80         NTSTATUS status;
81         uint32_t kvno = 0;
82         DATA_BLOB blob;
83
84         if (memcmp(r->ntpassword.hash, ctx->zero_buf, 16) == 0) {
85                 return NT_STATUS_OK;
86         }
87
88         kvno = ads_get_kvno(ctx->ads, r->account_name.string);
89         blob = data_blob_const(r->ntpassword.hash, 16);
90
91         status = libnet_keytab_add_to_keytab_entries(mem_ctx, ctx,
92                                                      kvno,
93                                                      r->account_name.string,
94                                                      NULL,
95                                                      ENCTYPE_ARCFOUR_HMAC,
96                                                      blob);
97         if (!NT_STATUS_IS_OK(status)) {
98                 return status;
99         }
100
101         return NT_STATUS_OK;
102 }
103
104 /****************************************************************
105 ****************************************************************/
106
107 static NTSTATUS init_keytab(TALLOC_CTX *mem_ctx,
108                             struct samsync_context *ctx,
109                             enum netr_SamDatabaseID database_id,
110                             uint64_t *sequence_num)
111 {
112         krb5_error_code ret = 0;
113         NTSTATUS status;
114         struct libnet_keytab_context *keytab_ctx;
115
116         ret = libnet_keytab_init(mem_ctx, ctx->output_filename, &keytab_ctx);
117         if (ret) {
118                 return krb5_to_nt_status(ret);
119         }
120
121         keytab_ctx->clean_old_entries = ctx->clean_old_entries;
122         ctx->private_data = keytab_ctx;
123
124         status = keytab_ad_connect(mem_ctx,
125                                    ctx->domain_name,
126                                    ctx->username,
127                                    ctx->password,
128                                    keytab_ctx);
129         if (!NT_STATUS_IS_OK(status)) {
130                 TALLOC_FREE(keytab_ctx);
131                 return status;
132         }
133
134         return status;
135 }
136
137 /****************************************************************
138 ****************************************************************/
139
140 static NTSTATUS fetch_sam_entries_keytab(TALLOC_CTX *mem_ctx,
141                                          enum netr_SamDatabaseID database_id,
142                                          struct netr_DELTA_ENUM_ARRAY *r,
143                                          uint64_t *sequence_num,
144                                          struct samsync_context *ctx)
145 {
146         struct libnet_keytab_context *keytab_ctx =
147                 (struct libnet_keytab_context *)ctx->private_data;
148
149         NTSTATUS status = NT_STATUS_OK;
150         int i;
151
152         for (i = 0; i < r->num_deltas; i++) {
153
154                 switch (r->delta_enum[i].delta_type) {
155                 case NETR_DELTA_USER:
156                         break;
157                 case NETR_DELTA_DOMAIN:
158                         if (sequence_num) {
159                                 *sequence_num =
160                                         r->delta_enum[i].delta_union.domain->sequence_num;
161                         }
162                         continue;
163                 case NETR_DELTA_MODIFY_COUNT:
164                         if (sequence_num) {
165                                 *sequence_num =
166                                         *r->delta_enum[i].delta_union.modified_count;
167                         }
168                         continue;
169                 default:
170                         continue;
171                 }
172
173                 status = fetch_sam_entry_keytab(mem_ctx, database_id,
174                                                 r->delta_enum[i].delta_id_union.rid,
175                                                 r->delta_enum[i].delta_union.user,
176                                                 keytab_ctx);
177                 if (!NT_STATUS_IS_OK(status)) {
178                         goto out;
179                 }
180         }
181  out:
182         return status;
183 }
184
185 /****************************************************************
186 ****************************************************************/
187
188 static NTSTATUS close_keytab(TALLOC_CTX *mem_ctx,
189                              struct samsync_context *ctx,
190                              enum netr_SamDatabaseID database_id,
191                              uint64_t sequence_num)
192 {
193         struct libnet_keytab_context *keytab_ctx =
194                 (struct libnet_keytab_context *)ctx->private_data;
195         krb5_error_code ret;
196         NTSTATUS status;
197
198         ret = libnet_keytab_add(keytab_ctx);
199         if (ret) {
200                 status = krb5_to_nt_status(ret);
201                 ctx->error_message = talloc_asprintf(ctx,
202                         "Failed to add entries to keytab %s: %s",
203                         keytab_ctx->keytab_name, error_message(ret));
204                 TALLOC_FREE(keytab_ctx);
205                 return status;
206         }
207
208         ctx->result_message = talloc_asprintf(ctx,
209                 "Vampired %d accounts to keytab %s",
210                 keytab_ctx->count,
211                 keytab_ctx->keytab_name);
212
213         TALLOC_FREE(keytab_ctx);
214
215         return NT_STATUS_OK;
216 }
217
218 #else
219
220 static NTSTATUS init_keytab(TALLOC_CTX *mem_ctx,
221                             struct samsync_context *ctx,
222                             enum netr_SamDatabaseID database_id,
223                             uint64_t *sequence_num)
224 {
225         return NT_STATUS_NOT_SUPPORTED;
226 }
227
228 static NTSTATUS fetch_sam_entries_keytab(TALLOC_CTX *mem_ctx,
229                                          enum netr_SamDatabaseID database_id,
230                                          struct netr_DELTA_ENUM_ARRAY *r,
231                                          uint64_t *sequence_num,
232                                          struct samsync_context *ctx)
233 {
234         return NT_STATUS_NOT_SUPPORTED;
235 }
236
237 static NTSTATUS close_keytab(TALLOC_CTX *mem_ctx,
238                              struct samsync_context *ctx,
239                              enum netr_SamDatabaseID database_id,
240                              uint64_t sequence_num)
241 {
242         return NT_STATUS_NOT_SUPPORTED;
243 }
244
245 #endif /* defined(HAVE_ADS) && defined(ENCTYPE_ARCFOUR_HMAC) */
246
247 const struct samsync_ops libnet_samsync_keytab_ops = {
248         .startup                = init_keytab,
249         .process_objects        = fetch_sam_entries_keytab,
250         .finish                 = close_keytab
251 };