2 Unix SMB/CIFS implementation.
4 Database Glue between Samba and the KDC
6 Copyright (C) Guenther Deschner <gd@samba.org> 2014
7 Copyright (C) Andreas Schneider <asn@samba.org> 2014
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
28 #include "lib/krb5_wrap/krb5_samba.h"
29 #include "kdc/samba_kdc.h"
31 static void sdb_flags_to_hdb_flags(const struct SDBFlags *s,
34 SMB_ASSERT(sizeof(struct SDBFlags) == sizeof(HDBFlags));
36 h->initial = s->initial;
37 h->forwardable = s->forwardable;
38 h->proxiable = s->proxiable;
39 h->renewable = s->renewable;
40 h->postdate = s->postdate;
41 h->server = s->server;
42 h->client = s->client;
43 h->invalid = s->invalid;
44 h->require_preauth = s->require_preauth;
45 h->change_pw = s->change_pw;
46 h->require_hwauth = s->require_hwauth;
47 h->ok_as_delegate = s->ok_as_delegate;
48 h->user_to_user = s->user_to_user;
49 h->immutable = s->immutable;
50 h->trusted_for_delegation = s->trusted_for_delegation;
51 h->allow_kerberos4 = s->allow_kerberos4;
52 h->allow_digest = s->allow_digest;
53 h->locked_out = s->locked_out;
54 h->require_pwchange = s->require_pwchange;
55 h->materialize = s->materialize;
56 h->virtual_keys = s->virtual_keys;
57 h->virtual = s->virtual;
58 h->synthetic = s->synthetic;
59 h->no_auth_data_reqd = s->no_auth_data_reqd;
60 h->_unused24 = s->_unused24;
61 h->_unused25 = s->_unused25;
62 h->_unused26 = s->_unused26;
63 h->_unused27 = s->_unused27;
64 h->_unused28 = s->_unused28;
65 h->_unused29 = s->_unused29;
66 h->force_canonicalize = s->force_canonicalize;
67 h->do_not_store = s->do_not_store;
70 static int sdb_salt_to_Salt(const struct sdb_salt *s, Salt *h)
75 ret = smb_krb5_copy_data_contents(&h->salt, s->salt.data, s->salt.length);
85 static int sdb_key_to_Key(const struct sdb_key *s, Key *h)
89 if (s->mkvno != NULL) {
90 h->mkvno = malloc(sizeof(unsigned int));
91 if (h->mkvno == NULL) {
94 *h->mkvno = *s->mkvno;
99 h->key.keytype = s->key.keytype;
100 rc = smb_krb5_copy_data_contents(&h->key.keyvalue,
101 s->key.keyvalue.data,
102 s->key.keyvalue.length);
107 if (s->salt != NULL) {
108 h->salt = malloc(sizeof(Salt));
109 if (h->salt == NULL) {
113 rc = sdb_salt_to_Salt(s->salt,
129 static int sdb_keys_to_Keys(const struct sdb_keys *s, Keys *h)
134 if (s->val != NULL) {
135 h->val = malloc(h->len * sizeof(Key));
136 if (h->val == NULL) {
139 for (i = 0; i < h->len; i++) {
140 ret = sdb_key_to_Key(&s->val[i],
154 static int sdb_event_to_Event(krb5_context context,
155 const struct sdb_event *s, Event *h)
159 if (s->principal != NULL) {
160 ret = krb5_copy_principal(context,
176 static int sdb_entry_to_hdb_entry(krb5_context context,
177 const struct sdb_entry *s,
183 rc = krb5_copy_principal(context,
192 rc = sdb_keys_to_Keys(&s->keys, &h->keys);
197 rc = sdb_event_to_Event(context,
204 if (s->modified_by) {
205 h->modified_by = malloc(sizeof(Event));
206 if (h->modified_by == NULL) {
211 rc = sdb_event_to_Event(context,
218 h->modified_by = NULL;
221 if (s->valid_start != NULL) {
222 h->valid_start = malloc(sizeof(KerberosTime));
223 if (h->valid_start == NULL) {
227 *h->valid_start = *s->valid_start;
229 h->valid_start = NULL;
232 if (s->valid_end != NULL) {
233 h->valid_end = malloc(sizeof(KerberosTime));
234 if (h->valid_end == NULL) {
238 *h->valid_end = *s->valid_end;
243 if (s->pw_end != NULL) {
244 h->pw_end = malloc(sizeof(KerberosTime));
245 if (h->pw_end == NULL) {
249 *h->pw_end = *s->pw_end;
254 if (s->max_life != NULL) {
255 h->max_life = malloc(sizeof(unsigned int));
256 if (h->max_life == NULL) {
260 *h->max_life = *s->max_life;
265 if (s->max_renew != NULL) {
266 h->max_renew = malloc(sizeof(unsigned int));
267 if (h->max_renew == NULL) {
271 *h->max_renew = *s->max_renew;
276 sdb_flags_to_hdb_flags(&s->flags, &h->flags);
279 if (h->keys.val != NULL) {
280 h->etypes = malloc(sizeof(*h->etypes));
281 if (h->etypes == NULL) {
286 h->etypes->len = s->keys.len;
288 h->etypes->val = calloc(h->etypes->len, sizeof(int));
289 if (h->etypes->val == NULL) {
294 for (i = 0; i < h->etypes->len; i++) {
295 Key k = h->keys.val[i];
297 h->etypes->val[i] = KRB5_KEY_TYPE(&(k.key));
301 h->generation = NULL;
302 h->extensions = NULL; /* really sure ? FIXME */
310 static int samba_kdc_hdb_entry_destructor(struct samba_kdc_entry *p)
312 hdb_entry *entry_ex = p->entry_ex;
313 free_hdb_entry(entry_ex);
318 int sdb_entry_ex_to_hdb_entry_ex(krb5_context context,
319 const struct sdb_entry_ex *s,
322 struct samba_kdc_entry *skdc_entry;
326 if (s->ctx != NULL) {
327 skdc_entry = talloc_get_type(s->ctx, struct samba_kdc_entry);
329 h->context = skdc_entry;
331 talloc_set_destructor(skdc_entry,
332 samba_kdc_hdb_entry_destructor);
335 return sdb_entry_to_hdb_entry(context, &s->entry, h);