2 Unix SMB/CIFS implementation.
4 Copyright (C) Volker Lendecke 2005
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
21 a composite API for finding a DC and its name
25 #include "libcli/composite/composite.h"
26 #include "libcli/smb_composite/smb_composite.h"
27 #include "winbind/wb_async_helpers.h"
28 #include "winbind/wb_server.h"
29 #include "smbd/service_stream.h"
31 #include "librpc/gen_ndr/nbt.h"
32 #include "librpc/gen_ndr/samr.h"
33 #include "lib/messaging/irpc.h"
34 #include "librpc/gen_ndr/irpc.h"
35 #include "librpc/gen_ndr/ndr_irpc.h"
36 #include "libcli/raw/libcliraw.h"
37 #include "librpc/gen_ndr/ndr_netlogon.h"
38 #include "librpc/gen_ndr/ndr_lsa.h"
39 #include "libcli/auth/credentials.h"
41 struct finddcs_state {
42 struct composite_context *ctx;
43 struct messaging_context *msg_ctx;
45 const char *domain_name;
46 const struct dom_sid *domain_sid;
48 struct nbtd_getdcname r;
51 struct nbt_dc_name *dcs;
54 static void finddcs_resolve(struct composite_context *ctx);
55 static void finddcs_getdc(struct irpc_request *ireq);
57 struct composite_context *wb_finddcs_send(const char *domain_name,
58 const struct dom_sid *domain_sid,
59 struct event_context *event_ctx,
60 struct messaging_context *msg_ctx)
62 struct composite_context *result, *ctx;
63 struct finddcs_state *state;
66 result = talloc_zero(NULL, struct composite_context);
67 if (result == NULL) goto failed;
68 result->state = COMPOSITE_STATE_IN_PROGRESS;
69 result->event_ctx = event_ctx;
71 state = talloc(result, struct finddcs_state);
72 if (state == NULL) goto failed;
74 result->private_data = state;
76 state->domain_name = talloc_strdup(state, domain_name);
77 if (state->domain_name == NULL) goto failed;
78 state->domain_sid = dom_sid_dup(state, domain_sid);
79 if (state->domain_sid == NULL) goto failed;
80 state->msg_ctx = msg_ctx;
82 make_nbt_name(&name, state->domain_name, 0x1c);
83 ctx = resolve_name_send(&name, result->event_ctx,
84 lp_name_resolve_order());
86 if (ctx == NULL) goto failed;
87 ctx->async.fn = finddcs_resolve;
88 ctx->async.private_data = state;
97 static void finddcs_resolve(struct composite_context *ctx)
99 struct finddcs_state *state =
100 talloc_get_type(ctx->async.private_data, struct finddcs_state);
101 struct irpc_request *ireq;
102 uint32_t *nbt_servers;
105 state->ctx->status = resolve_name_recv(ctx, state, &address);
106 if (!composite_is_ok(state->ctx)) return;
109 state->dcs = talloc_array(state, struct nbt_dc_name, state->num_dcs);
110 if (composite_nomem(state->dcs, state->ctx)) return;
112 state->dcs[0].address = talloc_steal(state->dcs, address);
114 nbt_servers = irpc_servers_byname(state->msg_ctx, "nbt_server");
115 if ((nbt_servers == NULL) || (nbt_servers[0] == 0)) {
116 composite_error(state->ctx, NT_STATUS_NO_LOGON_SERVERS);
120 state->r.in.domainname = state->domain_name;
121 state->r.in.ip_address = state->dcs[0].address;
122 state->r.in.my_computername = lp_netbios_name();
123 state->r.in.my_accountname = talloc_asprintf(state, "%s$",
125 if (composite_nomem(state->r.in.my_accountname, state->ctx)) return;
126 state->r.in.account_control = ACB_WSTRUST;
127 state->r.in.domain_sid = dom_sid_dup(state, state->domain_sid);
128 if (composite_nomem(state->r.in.domain_sid, state->ctx)) return;
130 ireq = irpc_call_send(state->msg_ctx, nbt_servers[0],
131 &dcerpc_table_irpc, DCERPC_NBTD_GETDCNAME,
133 composite_continue_irpc(state->ctx, ireq, finddcs_getdc, state);
136 static void finddcs_getdc(struct irpc_request *ireq)
138 struct finddcs_state *state =
139 talloc_get_type(ireq->async.private, struct finddcs_state);
141 state->ctx->status = irpc_call_recv(ireq);
143 if (!composite_is_ok(state->ctx)) return;
145 state->dcs[0].name = talloc_steal(state->dcs, state->r.out.dcname);
146 composite_done(state->ctx);
149 NTSTATUS wb_finddcs_recv(struct composite_context *c, TALLOC_CTX *mem_ctx,
150 int *num_dcs, struct nbt_dc_name **dcs)
152 NTSTATUS status =composite_wait(c);
153 if (NT_STATUS_IS_OK(status)) {
154 struct finddcs_state *state =
155 talloc_get_type(c->private_data, struct finddcs_state);
156 *num_dcs = state->num_dcs;
157 *dcs = talloc_steal(mem_ctx, state->dcs);
163 NTSTATUS wb_finddcs(const char *domain_name, const struct dom_sid *domain_sid,
164 struct event_context *event_ctx,
165 struct messaging_context *msg_ctx,
167 int *num_dcs, struct nbt_dc_name **dcs)
169 struct composite_context *c = wb_finddcs_send(domain_name, domain_sid,
171 return wb_finddcs_recv(c, mem_ctx, num_dcs, dcs);
174 struct get_schannel_creds_state {
175 struct composite_context *ctx;
176 struct cli_credentials *wks_creds;
177 struct dcerpc_pipe *p;
178 struct netr_ServerReqChallenge r;
180 struct creds_CredentialState *creds_state;
181 struct netr_Credential netr_cred;
182 uint32_t negotiate_flags;
183 struct netr_ServerAuthenticate2 a;
186 static void get_schannel_creds_recv_auth(struct rpc_request *req);
187 static void get_schannel_creds_recv_chal(struct rpc_request *req);
188 static void get_schannel_creds_recv_pipe(struct composite_context *ctx);
190 struct composite_context *wb_get_schannel_creds_send(struct cli_credentials *wks_creds,
191 struct smbcli_tree *tree,
192 struct event_context *ev)
194 struct composite_context *result, *ctx;
195 struct get_schannel_creds_state *state;
197 result = talloc_zero(NULL, struct composite_context);
198 if (result == NULL) goto failed;
199 result->state = COMPOSITE_STATE_IN_PROGRESS;
200 result->event_ctx = ev;
202 state = talloc(result, struct get_schannel_creds_state);
203 if (state == NULL) goto failed;
204 result->private_data = state;
207 state->wks_creds = wks_creds;
209 state->p = dcerpc_pipe_init(state, ev);
210 if (state->p == NULL) goto failed;
212 ctx = dcerpc_pipe_open_smb_send(state->p->conn, tree, "\\netlogon");
213 if (ctx == NULL) goto failed;
215 ctx->async.fn = get_schannel_creds_recv_pipe;
216 ctx->async.private_data = state;
224 static void get_schannel_creds_recv_pipe(struct composite_context *ctx)
226 struct get_schannel_creds_state *state =
227 talloc_get_type(ctx->async.private_data,
228 struct get_schannel_creds_state);
229 struct rpc_request *req;
231 state->ctx->status = dcerpc_pipe_open_smb_recv(ctx);
232 if (!composite_is_ok(state->ctx)) return;
234 state->ctx->status = dcerpc_bind_auth_none(state->p,
235 DCERPC_NETLOGON_UUID,
236 DCERPC_NETLOGON_VERSION);
237 if (!composite_is_ok(state->ctx)) return;
239 state->r.in.computer_name =
240 cli_credentials_get_workstation(state->wks_creds);
241 state->r.in.server_name =
242 talloc_asprintf(state, "\\\\%s",
243 dcerpc_server_name(state->p));
244 if (composite_nomem(state->r.in.server_name, state->ctx)) return;
246 state->r.in.credentials = talloc(state, struct netr_Credential);
247 if (composite_nomem(state->r.in.credentials, state->ctx)) return;
249 state->r.out.credentials = talloc(state, struct netr_Credential);
250 if (composite_nomem(state->r.out.credentials, state->ctx)) return;
252 generate_random_buffer(state->r.in.credentials->data,
253 sizeof(state->r.in.credentials->data));
255 req = dcerpc_netr_ServerReqChallenge_send(state->p, state, &state->r);
256 composite_continue_rpc(state->ctx, req,
257 get_schannel_creds_recv_chal, state);
260 static void get_schannel_creds_recv_chal(struct rpc_request *req)
262 struct get_schannel_creds_state *state =
263 talloc_get_type(req->async.private,
264 struct get_schannel_creds_state);
265 const struct samr_Password *mach_pwd;
267 state->ctx->status = dcerpc_ndr_request_recv(req);
268 if (!composite_is_ok(state->ctx)) return;
269 state->ctx->status = state->r.out.result;
270 if (!composite_is_ok(state->ctx)) return;
272 state->creds_state = talloc(state, struct creds_CredentialState);
273 if (composite_nomem(state->creds_state, state->ctx)) return;
275 mach_pwd = cli_credentials_get_nt_hash(state->wks_creds, state);
276 if (composite_nomem(mach_pwd, state->ctx)) return;
278 state->negotiate_flags = NETLOGON_NEG_AUTH2_FLAGS;
280 creds_client_init(state->creds_state, state->r.in.credentials,
281 state->r.out.credentials, mach_pwd,
282 &state->netr_cred, state->negotiate_flags);
284 state->a.in.server_name =
285 talloc_reference(state, state->r.in.server_name);
286 state->a.in.account_name =
287 cli_credentials_get_username(state->wks_creds);
288 state->a.in.secure_channel_type =
289 cli_credentials_get_secure_channel_type(state->wks_creds);
290 state->a.in.computer_name =
291 cli_credentials_get_workstation(state->wks_creds);
292 state->a.in.negotiate_flags = &state->negotiate_flags;
293 state->a.out.negotiate_flags = &state->negotiate_flags;
294 state->a.in.credentials = &state->netr_cred;
295 state->a.out.credentials = &state->netr_cred;
297 req = dcerpc_netr_ServerAuthenticate2_send(state->p, state, &state->a);
298 composite_continue_rpc(state->ctx, req,
299 get_schannel_creds_recv_auth, state);
302 static void get_schannel_creds_recv_auth(struct rpc_request *req)
304 struct get_schannel_creds_state *state =
305 talloc_get_type(req->async.private,
306 struct get_schannel_creds_state);
308 state->ctx->status = dcerpc_ndr_request_recv(req);
309 if (!NT_STATUS_IS_OK(state->ctx->status)) goto done;
310 state->ctx->status = state->a.out.result;
311 if (!NT_STATUS_IS_OK(state->ctx->status)) goto done;
313 if (!creds_client_check(state->creds_state,
314 state->a.out.credentials)) {
315 DEBUG(5, ("Server got us invalid creds\n"));
316 state->ctx->status = NT_STATUS_UNSUCCESSFUL;
320 cli_credentials_set_netlogon_creds(state->wks_creds,
323 state->ctx->state = COMPOSITE_STATE_DONE;
326 if (!NT_STATUS_IS_OK(state->ctx->status)) {
327 state->ctx->state = COMPOSITE_STATE_ERROR;
329 if ((state->ctx->state >= COMPOSITE_STATE_DONE) &&
330 (state->ctx->async.fn != NULL)) {
331 state->ctx->async.fn(state->ctx);
335 NTSTATUS wb_get_schannel_creds_recv(struct composite_context *c,
337 struct dcerpc_pipe **netlogon_pipe)
339 NTSTATUS status = composite_wait(c);
340 if (NT_STATUS_IS_OK(status)) {
341 struct get_schannel_creds_state *state =
342 talloc_get_type(c->private_data,
343 struct get_schannel_creds_state);
344 *netlogon_pipe = talloc_steal(mem_ctx, state->p);
350 NTSTATUS wb_get_schannel_creds(struct cli_credentials *wks_creds,
351 struct smbcli_tree *tree,
352 struct event_context *event_ctx,
354 struct dcerpc_pipe **netlogon_pipe)
356 struct composite_context *c =
357 wb_get_schannel_creds_send(wks_creds, tree, event_ctx);
358 return wb_get_schannel_creds_recv(c, mem_ctx, netlogon_pipe);
361 struct lsa_lookupnames_state {
362 struct composite_context *ctx;
364 struct lsa_LookupNames r;
365 struct lsa_TransSidArray sids;
367 struct wb_sid_object **result;
370 static void lsa_lookupnames_recv_sids(struct rpc_request *req);
372 struct composite_context *wb_lsa_lookupnames_send(struct dcerpc_pipe *lsa_pipe,
373 struct policy_handle *handle,
377 struct composite_context *result;
378 struct rpc_request *req;
379 struct lsa_lookupnames_state *state;
381 struct lsa_String *lsa_names;
384 result = talloc_zero(NULL, struct composite_context);
385 if (result == NULL) goto failed;
386 result->state = COMPOSITE_STATE_IN_PROGRESS;
387 result->event_ctx = lsa_pipe->conn->event_ctx;
389 state = talloc(result, struct lsa_lookupnames_state);
390 if (state == NULL) goto failed;
391 result->private_data = state;
394 state->sids.count = 0;
395 state->sids.sids = NULL;
396 state->num_names = num_names;
399 lsa_names = talloc_array(state, struct lsa_String, num_names);
400 if (lsa_names == NULL) goto failed;
402 for (i=0; i<num_names; i++) {
403 lsa_names[i].string = names[i];
406 state->r.in.handle = handle;
407 state->r.in.num_names = num_names;
408 state->r.in.names = lsa_names;
409 state->r.in.sids = &state->sids;
410 state->r.in.level = 1;
411 state->r.in.count = &state->count;
412 state->r.out.count = &state->count;
413 state->r.out.sids = &state->sids;
415 req = dcerpc_lsa_LookupNames_send(lsa_pipe, state, &state->r);
416 if (req == NULL) goto failed;
418 req->async.callback = lsa_lookupnames_recv_sids;
419 req->async.private = state;
427 static void lsa_lookupnames_recv_sids(struct rpc_request *req)
429 struct lsa_lookupnames_state *state =
430 talloc_get_type(req->async.private,
431 struct lsa_lookupnames_state);
434 state->ctx->status = dcerpc_ndr_request_recv(req);
435 if (!composite_is_ok(state->ctx)) return;
436 state->ctx->status = state->r.out.result;
437 if (!NT_STATUS_IS_OK(state->ctx->status) &&
438 !NT_STATUS_EQUAL(state->ctx->status, STATUS_SOME_UNMAPPED)) {
439 composite_error(state->ctx, state->ctx->status);
443 state->result = talloc_array(state, struct wb_sid_object *,
445 if (composite_nomem(state->result, state->ctx)) return;
447 for (i=0; i<state->num_names; i++) {
448 struct lsa_TranslatedSid *sid = &state->r.out.sids->sids[i];
449 struct lsa_TrustInformation *dom;
451 state->result[i] = talloc_zero(state->result,
452 struct wb_sid_object);
453 if (composite_nomem(state->result[i], state->ctx)) return;
455 state->result[i]->type = sid->sid_type;
456 if (state->result[i]->type == SID_NAME_UNKNOWN) {
460 if (sid->sid_index >= state->r.out.domains->count) {
461 composite_error(state->ctx,
462 NT_STATUS_INVALID_PARAMETER);
466 dom = &state->r.out.domains->domains[sid->sid_index];
468 state->result[i]->sid = dom_sid_add_rid(state->result[i],
472 composite_done(state->ctx);
475 NTSTATUS wb_lsa_lookupnames_recv(struct composite_context *c,
477 struct wb_sid_object ***sids)
479 NTSTATUS status = composite_wait(c);
480 if (NT_STATUS_IS_OK(status)) {
481 struct lsa_lookupnames_state *state =
482 talloc_get_type(c->private_data,
483 struct lsa_lookupnames_state);
484 *sids = talloc_steal(mem_ctx, state->result);
490 NTSTATUS wb_lsa_lookupnames(struct dcerpc_pipe *lsa_pipe,
491 struct policy_handle *handle,
492 int num_names, const char **names,
494 struct wb_sid_object ***sids)
496 struct composite_context *c =
497 wb_lsa_lookupnames_send(lsa_pipe, handle, num_names, names);
498 return wb_lsa_lookupnames_recv(c, mem_ctx, sids);
501 struct cmd_lookupname_state {
502 struct composite_context *ctx;
503 struct wbsrv_call *call;
504 struct wbsrv_domain *domain;
506 struct wb_sid_object *result;
509 static void cmd_lookupname_recv_init(struct composite_context *ctx);
510 static void cmd_lookupname_recv_sid(struct composite_context *ctx);
512 struct composite_context *wb_cmd_lookupname_send(struct wbsrv_call *call,
515 struct composite_context *result, *ctx;
516 struct cmd_lookupname_state *state;
517 struct wbsrv_service *service = call->wbconn->listen_socket->service;
519 result = talloc_zero(call, struct composite_context);
520 if (result == NULL) goto failed;
521 result->state = COMPOSITE_STATE_IN_PROGRESS;
522 result->event_ctx = call->event_ctx;
524 state = talloc(result, struct cmd_lookupname_state);
525 if (state == NULL) goto failed;
527 result->private_data = state;
530 state->name = talloc_strdup(state, name);
532 state->domain = service->domains;
534 if (state->domain->initialized) {
535 ctx = wb_lsa_lookupnames_send(state->domain->lsa_pipe,
536 state->domain->lsa_policy,
538 if (ctx == NULL) goto failed;
539 ctx->async.fn = cmd_lookupname_recv_sid;
540 ctx->async.private_data = state;
544 ctx = wb_init_domain_send(state->domain,
546 call->wbconn->conn->msg_ctx);
547 if (ctx == NULL) goto failed;
548 ctx->async.fn = cmd_lookupname_recv_init;
549 ctx->async.private_data = state;
557 static void cmd_lookupname_recv_init(struct composite_context *ctx)
559 struct cmd_lookupname_state *state =
560 talloc_get_type(ctx->async.private_data,
561 struct cmd_lookupname_state);
563 state->ctx->status = wb_init_domain_recv(ctx);
564 if (!composite_is_ok(state->ctx)) return;
566 ctx = wb_lsa_lookupnames_send(state->domain->lsa_pipe,
567 state->domain->lsa_policy,
569 composite_continue(state->ctx, ctx, cmd_lookupname_recv_sid, state);
572 static void cmd_lookupname_recv_sid(struct composite_context *ctx)
574 struct cmd_lookupname_state *state =
575 talloc_get_type(ctx->async.private_data,
576 struct cmd_lookupname_state);
577 struct wb_sid_object **sids;
579 state->ctx->status = wb_lsa_lookupnames_recv(ctx, state, &sids);
580 if (!composite_is_ok(state->ctx)) return;
581 state->result = sids[0];
582 composite_done(state->ctx);
585 NTSTATUS wb_cmd_lookupname_recv(struct composite_context *c,
587 struct wb_sid_object **sid)
589 NTSTATUS status = composite_wait(c);
590 if (NT_STATUS_IS_OK(status)) {
591 struct cmd_lookupname_state *state =
592 talloc_get_type(c->private_data,
593 struct cmd_lookupname_state);
594 *sid = talloc_steal(mem_ctx, state->result);
600 NTSTATUS wb_cmd_lookupname(struct wbsrv_call *call, const char *name,
601 TALLOC_CTX *mem_ctx, struct wb_sid_object **sid)
603 struct composite_context *c =
604 wb_cmd_lookupname_send(call, name);
605 return wb_cmd_lookupname_recv(c, mem_ctx, sid);
608 struct cmd_checkmachacc_state {
609 struct composite_context *ctx;
610 struct wbsrv_call *call;
611 struct wbsrv_domain *domain;
614 static void cmd_checkmachacc_recv_init(struct composite_context *ctx);
616 struct composite_context *wb_cmd_checkmachacc_send(struct wbsrv_call *call)
618 struct composite_context *result, *ctx;
619 struct cmd_checkmachacc_state *state;
620 struct wbsrv_service *service = call->wbconn->listen_socket->service;
622 result = talloc(call, struct composite_context);
623 if (result == NULL) goto failed;
624 result->state = COMPOSITE_STATE_IN_PROGRESS;
625 result->event_ctx = call->event_ctx;
627 state = talloc(result, struct cmd_checkmachacc_state);
628 if (state == NULL) goto failed;
630 result->private_data = state;
633 state->domain = service->domains;
635 ctx = wb_init_domain_send(state->domain, result->event_ctx,
636 call->wbconn->conn->msg_ctx);
637 if (ctx == NULL) goto failed;
638 ctx->async.fn = cmd_checkmachacc_recv_init;
639 ctx->async.private_data = state;
648 static void cmd_checkmachacc_recv_init(struct composite_context *ctx)
650 struct cmd_checkmachacc_state *state =
651 talloc_get_type(ctx->async.private_data,
652 struct cmd_checkmachacc_state);
654 state->ctx->status = wb_init_domain_recv(ctx);
655 if (!composite_is_ok(state->ctx)) return;
657 composite_done(state->ctx);
660 NTSTATUS wb_cmd_checkmachacc_recv(struct composite_context *c)
662 NTSTATUS status = composite_wait(c);
667 NTSTATUS wb_cmd_checkmachacc(struct wbsrv_call *call)
669 struct composite_context *c = wb_cmd_checkmachacc_send(call);
670 return wb_cmd_checkmachacc_recv(c);