2 Unix SMB/CIFS implementation.
3 Generic authenticaion types
4 Copyright (C) Andrew Bartlett 2001-2002
5 Copyright (C) Jelmer Vernooij 2002
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program; if not, write to the Free Software
19 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
25 #define DBGC_CLASS DBGC_AUTH
28 * Return a guest logon for guest users (username = "")
30 * Typically used as the first module in the auth chain, this allows
31 * guest logons to be delt with in one place. Non-gust logons 'fail'
32 * and pass onto the next module.
35 static NTSTATUS check_guest_security(const struct auth_context *auth_context,
36 void *my_private_data,
38 const auth_usersupplied_info *user_info,
39 auth_serversupplied_info **server_info)
41 NTSTATUS nt_status = NT_STATUS_LOGON_FAILURE;
43 if (!(user_info->internal_username.str
44 && *user_info->internal_username.str)) {
45 if (make_server_info_guest(server_info)) {
46 nt_status = NT_STATUS_OK;
48 nt_status = NT_STATUS_NO_SUCH_USER;
55 /* Guest modules initialisation */
56 NTSTATUS auth_init_guest(struct auth_context *auth_context, const char *options, auth_methods **auth_method)
58 if (!make_auth_methods(auth_context, auth_method)) {
59 return NT_STATUS_NO_MEMORY;
62 (*auth_method)->auth = check_guest_security;
63 (*auth_method)->name = "guest";
68 * Return an error based on username
70 * This function allows the testing of obsure errors, as well as the generation
71 * of NT_STATUS -> DOS error mapping tables.
73 * This module is of no value to end-users.
75 * The password is ignored.
77 * @return An NTSTATUS value based on the username
80 static NTSTATUS check_name_to_ntstatus_security(const struct auth_context *auth_context,
81 void *my_private_data,
83 const auth_usersupplied_info *user_info,
84 auth_serversupplied_info **server_info)
89 fstrcpy(user, user_info->smb_name.str);
91 if (strncasecmp("NT_STATUS", user, strlen("NT_STATUS")) == 0) {
93 return nt_status_string_to_code(user);
97 error_num = strtoul(user, NULL, 16);
99 DEBUG(5,("Error for user %s was %lx\n", user, error_num));
101 nt_status = NT_STATUS(error_num);
106 /** Module initailisation function */
107 NTSTATUS auth_init_name_to_ntstatus(struct auth_context *auth_context, const char *param, auth_methods **auth_method)
109 if (!make_auth_methods(auth_context, auth_method)) {
110 return NT_STATUS_NO_MEMORY;
113 (*auth_method)->auth = check_name_to_ntstatus_security;
114 (*auth_method)->name = "name_to_ntstatus";
119 * Outsorce an auth module to an external loadable .so
121 * Only works on systems with dlopen() etc.
124 /* Plugin modules initialisation */
125 NTSTATUS auth_init_plugin(struct auth_context *auth_context, const char *param, auth_methods **auth_method)
128 char *plugin_param, *plugin_name, *p;
129 auth_init_function plugin_init;
132 DEBUG(0, ("The plugin module needs an argument!\n"));
133 return NT_STATUS_UNSUCCESSFUL;
136 plugin_name = smb_xstrdup(param);
137 p = strchr(plugin_name, ':');
141 trim_string(plugin_param, " ", " ");
142 } else plugin_param = NULL;
144 trim_string(plugin_name, " ", " ");
146 DEBUG(5, ("Trying to load auth plugin %s\n", plugin_name));
147 dl_handle = sys_dlopen(plugin_name, RTLD_NOW | RTLD_GLOBAL );
149 DEBUG(0, ("Failed to load auth plugin %s using sys_dlopen (%s)\n", plugin_name, sys_dlerror()));
150 return NT_STATUS_UNSUCCESSFUL;
153 plugin_init = sys_dlsym(dl_handle, "auth_init");
155 DEBUG(0, ("Failed to find function 'pdb_init' using sys_dlsym in sam plugin %s (%s)\n", plugin_name, sys_dlerror()));
156 return NT_STATUS_UNSUCCESSFUL;
159 DEBUG(5, ("Starting sam plugin %s with paramater %s\n", plugin_name, plugin_param?plugin_param:"(null)"));
160 return plugin_init(auth_context, plugin_param, auth_method);