Merge branch 'master' of ssh://git.samba.org/data/git/samba into wmi
[samba.git] / source3 / libnet / libnet_samsync_keytab.c
1 /*
2    Unix SMB/CIFS implementation.
3    dump the remote SAM using rpc samsync operations
4
5    Copyright (C) Guenther Deschner 2008.
6
7    This program is free software; you can redistribute it and/or modify
8    it under the terms of the GNU General Public License as published by
9    the Free Software Foundation; either version 3 of the License, or
10    (at your option) any later version.
11
12    This program is distributed in the hope that it will be useful,
13    but WITHOUT ANY WARRANTY; without even the implied warranty of
14    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
15    GNU General Public License for more details.
16
17    You should have received a copy of the GNU General Public License
18    along with this program.  If not, see <http://www.gnu.org/licenses/>.
19 */
20
21 #include "includes.h"
22 #include "libnet/libnet.h"
23
24 #if defined(HAVE_ADS) && defined(ENCTYPE_ARCFOUR_HMAC)
25
26 /****************************************************************
27 ****************************************************************/
28
29 static NTSTATUS keytab_ad_connect(TALLOC_CTX *mem_ctx,
30                                   const char *domain_name,
31                                   const char *username,
32                                   const char *password,
33                                   struct libnet_keytab_context *ctx)
34 {
35         NTSTATUS status;
36         ADS_STATUS ad_status;
37         ADS_STRUCT *ads;
38         struct netr_DsRGetDCNameInfo *info = NULL;
39         const char *dc;
40
41         status = dsgetdcname(mem_ctx, NULL, domain_name, NULL, NULL, 0, &info);
42         if (!NT_STATUS_IS_OK(status)) {
43                 return status;
44         }
45
46         dc = strip_hostname(info->dc_unc);
47
48         ads = ads_init(NULL, domain_name, dc);
49         NT_STATUS_HAVE_NO_MEMORY(ads);
50
51         if (getenv(KRB5_ENV_CCNAME) == NULL) {
52                 setenv(KRB5_ENV_CCNAME, "MEMORY:libnet_samsync_keytab", 1);
53         }
54
55         ads->auth.user_name = SMB_STRDUP(username);
56         ads->auth.password = SMB_STRDUP(password);
57
58         ad_status = ads_connect_user_creds(ads);
59         if (!ADS_ERR_OK(ad_status)) {
60                 return NT_STATUS_UNSUCCESSFUL;
61         }
62
63         ctx->ads = ads;
64
65         ctx->dns_domain_name = talloc_strdup_upper(mem_ctx, ads->config.realm);
66         NT_STATUS_HAVE_NO_MEMORY(ctx->dns_domain_name);
67
68         return NT_STATUS_OK;
69 }
70
71 /****************************************************************
72 ****************************************************************/
73
74 static NTSTATUS fetch_sam_entry_keytab(TALLOC_CTX *mem_ctx,
75                                        enum netr_SamDatabaseID database_id,
76                                        uint32_t rid,
77                                        struct netr_DELTA_USER *r,
78                                        bool last_query,
79                                        struct libnet_keytab_context *ctx)
80 {
81         uchar nt_passwd[16];
82         struct libnet_keytab_entry entry;
83
84         if (memcmp(r->ntpassword.hash, ctx->zero_buf, 16) == 0) {
85                 return NT_STATUS_OK;
86         }
87
88         sam_pwd_hash(rid, r->ntpassword.hash, nt_passwd, 0);
89
90         entry.name = talloc_strdup(mem_ctx, r->account_name.string);
91         entry.principal = talloc_asprintf(mem_ctx, "%s@%s",
92                                           r->account_name.string,
93                                           ctx->dns_domain_name);
94         entry.password = data_blob_talloc(mem_ctx, nt_passwd, 16);
95         entry.kvno = ads_get_kvno(ctx->ads, entry.name);
96         entry.enctype = ENCTYPE_NULL;
97
98         NT_STATUS_HAVE_NO_MEMORY(entry.name);
99         NT_STATUS_HAVE_NO_MEMORY(entry.principal);
100         NT_STATUS_HAVE_NO_MEMORY(entry.password.data);
101
102
103         ADD_TO_ARRAY(mem_ctx, struct libnet_keytab_entry, entry,
104                      &ctx->entries, &ctx->count);
105
106         return NT_STATUS_OK;
107 }
108
109 /****************************************************************
110 ****************************************************************/
111
112 NTSTATUS fetch_sam_entries_keytab(TALLOC_CTX *mem_ctx,
113                                   enum netr_SamDatabaseID database_id,
114                                   struct netr_DELTA_ENUM_ARRAY *r,
115                                   bool last_query,
116                                   struct samsync_context *ctx)
117 {
118         NTSTATUS status = NT_STATUS_OK;
119         krb5_error_code ret = 0;
120         static struct libnet_keytab_context *keytab_ctx = NULL;
121         int i;
122
123         if (!keytab_ctx) {
124                 ret = libnet_keytab_init(mem_ctx, ctx->output_filename,
125                                          &keytab_ctx);
126                 if (ret) {
127                         status = krb5_to_nt_status(ret);
128                         goto out;
129                 }
130         }
131
132         status = keytab_ad_connect(mem_ctx,
133                                    ctx->domain_name,
134                                    ctx->username,
135                                    ctx->password,
136                                    keytab_ctx);
137         if (!NT_STATUS_IS_OK(status)) {
138                 goto out;
139         }
140
141         for (i = 0; i < r->num_deltas; i++) {
142
143                 if (r->delta_enum[i].delta_type != NETR_DELTA_USER) {
144                         continue;
145                 }
146
147                 status = fetch_sam_entry_keytab(mem_ctx, database_id,
148                                                 r->delta_enum[i].delta_id_union.rid,
149                                                 r->delta_enum[i].delta_union.user,
150                                                 last_query,
151                                                 keytab_ctx);
152                 if (!NT_STATUS_IS_OK(status)) {
153                         goto out;
154                 }
155         }
156
157         if (last_query) {
158
159                 ret = libnet_keytab_add(keytab_ctx);
160                 if (ret) {
161                         status = krb5_to_nt_status(ret);
162                         ctx->error_message = talloc_asprintf(mem_ctx,
163                                 "Failed to add entries to keytab %s: %s",
164                                 keytab_ctx->keytab_name, error_message(ret));
165                         goto out;
166                 }
167
168                 ctx->result_message = talloc_asprintf(mem_ctx,
169                         "Vampired %d accounts to keytab %s",
170                         keytab_ctx->count,
171                         keytab_ctx->keytab_name);
172
173                 TALLOC_FREE(keytab_ctx);
174         }
175
176         return NT_STATUS_OK;
177  out:
178         TALLOC_FREE(keytab_ctx);
179
180         return status;
181 }
182
183 #else
184
185 NTSTATUS fetch_sam_entries_keytab(TALLOC_CTX *mem_ctx,
186                                   enum netr_SamDatabaseID database_id,
187                                   struct netr_DELTA_ENUM_ARRAY *r,
188                                   bool last_query,
189                                   struct samsync_context *ctx)
190 {
191         return NT_STATUS_NOT_SUPPORTED;
192 }
193
194 #endif /* defined(HAVE_ADS) && defined(ENCTYPE_ARCFOUR_HMAC) */