2 Unix SMB/CIFS implementation.
3 Generic authentication types
4 Copyright (C) Andrew Bartlett 2001-2002
5 Copyright (C) Jelmer Vernooij 2002
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program; if not, write to the Free Software
19 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
25 #define DBGC_CLASS DBGC_AUTH
28 * Return a guest logon for guest users (username = "")
30 * Typically used as the first module in the auth chain, this allows
31 * guest logons to be dealt with in one place. Non-guest logons 'fail'
32 * and pass onto the next module.
35 static NTSTATUS check_guest_security(const struct auth_context *auth_context,
36 void *my_private_data,
38 const struct auth_usersupplied_info *user_info,
39 struct auth_serversupplied_info **server_info)
41 /* mark this as 'not for me' */
42 NTSTATUS nt_status = NT_STATUS_NOT_IMPLEMENTED;
44 if (!(user_info->internal_username.str
45 && *user_info->internal_username.str)) {
46 nt_status = make_server_info_guest(server_info);
52 /* Guest modules initialisation */
54 static NTSTATUS auth_init_guest(struct auth_context *auth_context,
56 struct auth_methods **auth_method)
58 if (!make_auth_methods(auth_context, auth_method))
59 return NT_STATUS_NO_MEMORY;
61 (*auth_method)->auth = check_guest_security;
62 (*auth_method)->name = "guest";
68 * Return an error based on username
70 * This function allows the testing of obsure errors, as well as the generation
71 * of NT_STATUS -> DOS error mapping tables.
73 * This module is of no value to end-users.
75 * The password is ignored.
77 * @return An NTSTATUS value based on the username
80 static NTSTATUS check_name_to_ntstatus_security(const struct auth_context *auth_context,
81 void *my_private_data,
83 const struct auth_usersupplied_info *user_info,
84 struct auth_serversupplied_info **server_info)
89 fstrcpy(user, user_info->smb_name.str);
91 if (strnequal("NT_STATUS", user, strlen("NT_STATUS"))) {
93 return nt_status_string_to_code(user);
97 error_num = strtoul(user, NULL, 16);
99 DEBUG(5,("check_name_to_ntstatus_security: Error for user %s was %lx\n", user, error_num));
101 nt_status = NT_STATUS(error_num);
106 /** Module initialisation function */
108 static NTSTATUS auth_init_name_to_ntstatus(struct auth_context *auth_context,
110 struct auth_methods **auth_method)
112 if (!make_auth_methods(auth_context, auth_method))
113 return NT_STATUS_NO_MEMORY;
115 (*auth_method)->auth = check_name_to_ntstatus_security;
116 (*auth_method)->name = "name_to_ntstatus";
121 * Return a 'fixed' challenge instead of a variable one.
123 * The idea of this function is to make packet snifs consistant
124 * with a fixed challenge, so as to aid debugging.
126 * This module is of no value to end-users.
128 * This module does not actually authenticate the user, but
129 * just pretenteds to need a specified challenge.
130 * This module removes *all* security from the challenge-response system
132 * @return NT_STATUS_UNSUCCESSFUL
135 static NTSTATUS check_fixed_challenge_security(const struct auth_context *auth_context,
136 void *my_private_data,
138 const struct auth_usersupplied_info *user_info,
139 struct auth_serversupplied_info **server_info)
141 return NT_STATUS_NOT_IMPLEMENTED;
144 /****************************************************************************
145 Get the challenge out of a password server.
146 ****************************************************************************/
148 static DATA_BLOB auth_get_fixed_challenge(const struct auth_context *auth_context,
149 void **my_private_data,
152 const char *challenge = "I am a teapot";
153 return data_blob(challenge, 8);
157 /** Module initailisation function */
159 static NTSTATUS auth_init_fixed_challenge(struct auth_context *auth_context,
161 struct auth_methods **auth_method)
163 if (!make_auth_methods(auth_context, auth_method))
164 return NT_STATUS_NO_MEMORY;
166 (*auth_method)->auth = check_fixed_challenge_security;
167 (*auth_method)->get_chal = auth_get_fixed_challenge;
168 (*auth_method)->name = "fixed_challenge";
171 #endif /* DEVELOPER */
173 NTSTATUS auth_builtin_init(void)
176 struct auth_operations ops;
179 ops.init = auth_init_guest;
180 ret = register_backend("auth", &ops);
181 if (!NT_STATUS_IS_OK(ret)) {
182 DEBUG(0,("Failed to register '%s' auth backend!\n",
188 ops.name = "name_to_ntstatus";
189 ops.init = auth_init_name_to_ntstatus;
190 ret = register_backend("auth", &ops);
191 if (!NT_STATUS_IS_OK(ret)) {
192 DEBUG(0,("Failed to register '%s' auth backend!\n",
197 ops.name = "fixed_challenge";
198 ops.init = auth_init_fixed_challenge;
199 ret = register_backend("auth", &ops);
200 if (!NT_STATUS_IS_OK(ret)) {
201 DEBUG(0,("Failed to register '%s' auth backend!\n",
205 #endif /* DEVELOPER */