2 Unix SMB/CIFS implementation.
3 SAM_ACCOUNT access routines
4 Copyright (C) Jeremy Allison 1996-2001
5 Copyright (C) Luke Kenneth Casson Leighton 1996-1998
6 Copyright (C) Gerald (Jerry) Carter 2000-2001
7 Copyright (C) Andrew Bartlett 2001-2002
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
27 * @todo Redefine this to NULL, but this changes the API becouse
28 * much of samba assumes that the pdb_get...() funtions
29 * return pstrings. (ie not null-pointers).
30 * See also pdb_fill_default_sam().
33 #define PDB_NOT_QUITE_NULL ""
35 /*********************************************************************
36 Collection of get...() functions for SAM_ACCOUNT_INFO.
37 ********************************************************************/
39 uint16 pdb_get_acct_ctrl (const SAM_ACCOUNT *sampass)
42 return (sampass->private.acct_ctrl);
44 return (ACB_DISABLED);
47 time_t pdb_get_logon_time (const SAM_ACCOUNT *sampass)
50 return (sampass->private.logon_time);
55 time_t pdb_get_logoff_time (const SAM_ACCOUNT *sampass)
58 return (sampass->private.logoff_time);
63 time_t pdb_get_kickoff_time (const SAM_ACCOUNT *sampass)
66 return (sampass->private.kickoff_time);
71 time_t pdb_get_pass_last_set_time (const SAM_ACCOUNT *sampass)
74 return (sampass->private.pass_last_set_time);
79 time_t pdb_get_pass_can_change_time (const SAM_ACCOUNT *sampass)
82 return (sampass->private.pass_can_change_time);
87 time_t pdb_get_pass_must_change_time (const SAM_ACCOUNT *sampass)
90 return (sampass->private.pass_must_change_time);
95 uint16 pdb_get_logon_divs (const SAM_ACCOUNT *sampass)
98 return (sampass->private.logon_divs);
103 uint32 pdb_get_hours_len (const SAM_ACCOUNT *sampass)
106 return (sampass->private.hours_len);
111 const uint8* pdb_get_hours (const SAM_ACCOUNT *sampass)
114 return (sampass->private.hours);
119 const uint8* pdb_get_nt_passwd (const SAM_ACCOUNT *sampass)
122 SMB_ASSERT((!sampass->private.nt_pw.data)
123 || sampass->private.nt_pw.length == NT_HASH_LEN);
124 return ((uint8*)sampass->private.nt_pw.data);
130 const uint8* pdb_get_lanman_passwd (const SAM_ACCOUNT *sampass)
133 SMB_ASSERT((!sampass->private.lm_pw.data)
134 || sampass->private.lm_pw.length == LM_HASH_LEN);
135 return ((uint8*)sampass->private.lm_pw.data);
141 uint32 pdb_get_user_rid (const SAM_ACCOUNT *sampass)
144 return (sampass->private.user_rid);
149 uint32 pdb_get_group_rid (const SAM_ACCOUNT *sampass)
152 return (sampass->private.group_rid);
158 * Get flags showing what is initalised in the SAM_ACCOUNT
159 * @param sampass the SAM_ACCOUNT in question
160 * @return the flags indicating the members initialised in the struct.
163 uint32 pdb_get_init_flag (const SAM_ACCOUNT *sampass)
166 return sampass->private.init_flag;
168 return FLAG_SAM_UNINIT;
171 uid_t pdb_get_uid (const SAM_ACCOUNT *sampass)
174 return (sampass->private.uid);
179 gid_t pdb_get_gid (const SAM_ACCOUNT *sampass)
182 return (sampass->private.gid);
187 const char* pdb_get_username (const SAM_ACCOUNT *sampass)
190 return (sampass->private.username);
195 const char* pdb_get_domain (const SAM_ACCOUNT *sampass)
198 return (sampass->private.domain);
203 const char* pdb_get_nt_username (const SAM_ACCOUNT *sampass)
206 return (sampass->private.nt_username);
211 const char* pdb_get_fullname (const SAM_ACCOUNT *sampass)
214 return (sampass->private.full_name);
219 const char* pdb_get_homedir (const SAM_ACCOUNT *sampass)
222 return (sampass->private.home_dir);
227 const char* pdb_get_dirdrive (const SAM_ACCOUNT *sampass)
230 return (sampass->private.dir_drive);
235 const char* pdb_get_logon_script (const SAM_ACCOUNT *sampass)
238 return (sampass->private.logon_script);
243 const char* pdb_get_profile_path (const SAM_ACCOUNT *sampass)
246 return (sampass->private.profile_path);
251 const char* pdb_get_acct_desc (const SAM_ACCOUNT *sampass)
254 return (sampass->private.acct_desc);
259 const char* pdb_get_workstations (const SAM_ACCOUNT *sampass)
262 return (sampass->private.workstations);
267 const char* pdb_get_unknown_str (const SAM_ACCOUNT *sampass)
270 return (sampass->private.unknown_str);
275 const char* pdb_get_munged_dial (const SAM_ACCOUNT *sampass)
278 return (sampass->private.munged_dial);
283 uint32 pdb_get_unknown3 (const SAM_ACCOUNT *sampass)
286 return (sampass->private.unknown_3);
291 uint32 pdb_get_unknown5 (const SAM_ACCOUNT *sampass)
294 return (sampass->private.unknown_5);
299 uint32 pdb_get_unknown6 (const SAM_ACCOUNT *sampass)
302 return (sampass->private.unknown_6);
307 /*********************************************************************
308 Collection of set...() functions for SAM_ACCOUNT_INFO.
309 ********************************************************************/
311 BOOL pdb_set_acct_ctrl (SAM_ACCOUNT *sampass, uint16 flags)
317 sampass->private.acct_ctrl = flags;
324 BOOL pdb_set_logon_time (SAM_ACCOUNT *sampass, time_t mytime, BOOL store)
329 sampass->private.logon_time = mytime;
332 pdb_set_init_flag(sampass, FLAG_SAM_LOGONTIME);
337 BOOL pdb_set_logoff_time (SAM_ACCOUNT *sampass, time_t mytime, BOOL store)
342 sampass->private.logoff_time = mytime;
345 pdb_set_init_flag(sampass, FLAG_SAM_LOGOFFTIME);
350 BOOL pdb_set_kickoff_time (SAM_ACCOUNT *sampass, time_t mytime, BOOL store)
355 sampass->private.kickoff_time = mytime;
358 pdb_set_init_flag(sampass, FLAG_SAM_KICKOFFTIME);
363 BOOL pdb_set_pass_can_change_time (SAM_ACCOUNT *sampass, time_t mytime, BOOL store)
368 sampass->private.pass_can_change_time = mytime;
371 pdb_set_init_flag(sampass, FLAG_SAM_CANCHANGETIME);
376 BOOL pdb_set_pass_must_change_time (SAM_ACCOUNT *sampass, time_t mytime, BOOL store)
381 sampass->private.pass_must_change_time = mytime;
384 pdb_set_init_flag(sampass, FLAG_SAM_MUSTCHANGETIME);
389 BOOL pdb_set_pass_last_set_time (SAM_ACCOUNT *sampass, time_t mytime)
394 sampass->private.pass_last_set_time = mytime;
399 BOOL pdb_set_hours_len (SAM_ACCOUNT *sampass, uint32 len)
404 sampass->private.hours_len = len;
408 BOOL pdb_set_logon_divs (SAM_ACCOUNT *sampass, uint16 hours)
413 sampass->private.logon_divs = hours;
418 * Set flags showing what is initalised in the SAM_ACCOUNT
419 * @param sampass the SAM_ACCOUNT in question
420 * @param flag The *new* flag to be set. Old flags preserved
421 * this flag is only added.
424 BOOL pdb_set_init_flag (SAM_ACCOUNT *sampass, uint32 flag)
429 sampass->private.init_flag |= flag;
434 BOOL pdb_set_uid (SAM_ACCOUNT *sampass, const uid_t uid)
439 DEBUG(10, ("pdb_set_uid: setting uid %d, was %d\n",
440 (int)uid, (int)sampass->private.uid));
442 sampass->private.uid = uid;
443 pdb_set_init_flag(sampass, FLAG_SAM_UID);
449 BOOL pdb_set_gid (SAM_ACCOUNT *sampass, const gid_t gid)
454 DEBUG(10, ("pdb_set_gid: setting gid %d, was %d\n",
455 (int)gid, (int)sampass->private.gid));
457 sampass->private.gid = gid;
458 pdb_set_init_flag(sampass, FLAG_SAM_GID);
464 BOOL pdb_set_user_rid (SAM_ACCOUNT *sampass, uint32 rid)
469 DEBUG(10, ("pdb_set_rid: setting user rid %d, was %d\n",
470 rid, sampass->private.user_rid));
472 sampass->private.user_rid = rid;
476 BOOL pdb_set_group_rid (SAM_ACCOUNT *sampass, uint32 grid)
481 DEBUG(10, ("pdb_set_group_rid: setting group rid %d, was %d\n",
482 grid, sampass->private.group_rid));
484 sampass->private.group_rid = grid;
488 /*********************************************************************
489 Set the user's UNIX name.
490 ********************************************************************/
492 BOOL pdb_set_username(SAM_ACCOUNT *sampass, const char *username)
498 DEBUG(10, ("pdb_set_username: setting username %s, was %s\n", username,
499 (sampass->private.username)?(sampass->private.username):"NULL"));
501 sampass->private.username = talloc_strdup(sampass->mem_ctx, username);
503 if (!sampass->private.username) {
504 DEBUG(0, ("pdb_set_username: talloc_strdup() failed!\n"));
509 sampass->private.username = PDB_NOT_QUITE_NULL;
515 /*********************************************************************
517 ********************************************************************/
519 BOOL pdb_set_domain(SAM_ACCOUNT *sampass, const char *domain)
525 DEBUG(10, ("pdb_set_domain: setting domain %s, was %s\n", domain,
526 (sampass->private.domain)?(sampass->private.domain):"NULL"));
528 sampass->private.domain = talloc_strdup(sampass->mem_ctx, domain);
530 if (!sampass->private.domain) {
531 DEBUG(0, ("pdb_set_domain: talloc_strdup() failed!\n"));
536 sampass->private.domain = PDB_NOT_QUITE_NULL;
542 /*********************************************************************
543 Set the user's NT name.
544 ********************************************************************/
546 BOOL pdb_set_nt_username(SAM_ACCOUNT *sampass, const char *nt_username)
552 DEBUG(10, ("pdb_set_nt_username: setting nt username %s, was %s\n", nt_username,
553 (sampass->private.nt_username)?(sampass->private.nt_username):"NULL"));
555 sampass->private.nt_username = talloc_strdup(sampass->mem_ctx, nt_username);
557 if (!sampass->private.nt_username) {
558 DEBUG(0, ("pdb_set_nt_username: talloc_strdup() failed!\n"));
563 sampass->private.nt_username = PDB_NOT_QUITE_NULL;
569 /*********************************************************************
570 Set the user's full name.
571 ********************************************************************/
573 BOOL pdb_set_fullname(SAM_ACCOUNT *sampass, const char *full_name)
579 DEBUG(10, ("pdb_set_full_name: setting full name %s, was %s\n", full_name,
580 (sampass->private.full_name)?(sampass->private.full_name):"NULL"));
582 sampass->private.full_name = talloc_strdup(sampass->mem_ctx, full_name);
584 if (!sampass->private.full_name) {
585 DEBUG(0, ("pdb_set_fullname: talloc_strdup() failed!\n"));
590 sampass->private.full_name = PDB_NOT_QUITE_NULL;
596 /*********************************************************************
597 Set the user's logon script.
598 ********************************************************************/
600 BOOL pdb_set_logon_script(SAM_ACCOUNT *sampass, const char *logon_script, BOOL store)
606 DEBUG(10, ("pdb_set_logon_script: setting logon script %s, was %s\n", logon_script,
607 (sampass->private.logon_script)?(sampass->private.logon_script):"NULL"));
609 sampass->private.logon_script = talloc_strdup(sampass->mem_ctx, logon_script);
611 if (!sampass->private.logon_script) {
612 DEBUG(0, ("pdb_set_logon_script: talloc_strdup() failed!\n"));
617 sampass->private.logon_script = PDB_NOT_QUITE_NULL;
621 DEBUG(10, ("pdb_set_logon_script: setting logon script sam flag!"));
622 pdb_set_init_flag(sampass, FLAG_SAM_LOGONSCRIPT);
628 /*********************************************************************
629 Set the user's profile path.
630 ********************************************************************/
632 BOOL pdb_set_profile_path (SAM_ACCOUNT *sampass, const char *profile_path, BOOL store)
638 DEBUG(10, ("pdb_set_profile_path: setting profile path %s, was %s\n", profile_path,
639 (sampass->private.profile_path)?(sampass->private.profile_path):"NULL"));
641 sampass->private.profile_path = talloc_strdup(sampass->mem_ctx, profile_path);
643 if (!sampass->private.profile_path) {
644 DEBUG(0, ("pdb_set_profile_path: talloc_strdup() failed!\n"));
649 sampass->private.profile_path = PDB_NOT_QUITE_NULL;
653 DEBUG(10, ("pdb_set_profile_path: setting profile path sam flag!"));
654 pdb_set_init_flag(sampass, FLAG_SAM_PROFILE);
660 /*********************************************************************
661 Set the user's directory drive.
662 ********************************************************************/
664 BOOL pdb_set_dir_drive (SAM_ACCOUNT *sampass, const char *dir_drive, BOOL store)
670 DEBUG(10, ("pdb_set_dir_drive: setting dir drive %s, was %s\n", dir_drive,
671 (sampass->private.dir_drive)?(sampass->private.dir_drive):"NULL"));
673 sampass->private.dir_drive = talloc_strdup(sampass->mem_ctx, dir_drive);
675 if (!sampass->private.dir_drive) {
676 DEBUG(0, ("pdb_set_dir_drive: talloc_strdup() failed!\n"));
681 sampass->private.dir_drive = PDB_NOT_QUITE_NULL;
685 DEBUG(10, ("pdb_set_dir_drive: setting dir drive sam flag!"));
686 pdb_set_init_flag(sampass, FLAG_SAM_DRIVE);
692 /*********************************************************************
693 Set the user's home directory.
694 ********************************************************************/
696 BOOL pdb_set_homedir (SAM_ACCOUNT *sampass, const char *home_dir, BOOL store)
702 DEBUG(10, ("pdb_set_homedir: setting home dir %s, was %s\n", home_dir,
703 (sampass->private.home_dir)?(sampass->private.home_dir):"NULL"));
705 sampass->private.home_dir = talloc_strdup(sampass->mem_ctx, home_dir);
707 if (!sampass->private.home_dir) {
708 DEBUG(0, ("pdb_set_home_dir: talloc_strdup() failed!\n"));
713 sampass->private.home_dir = PDB_NOT_QUITE_NULL;
717 DEBUG(10, ("pdb_set_homedir: setting home dir sam flag!"));
718 pdb_set_init_flag(sampass, FLAG_SAM_SMBHOME);
724 /*********************************************************************
725 Set the user's account description.
726 ********************************************************************/
728 BOOL pdb_set_acct_desc (SAM_ACCOUNT *sampass, const char *acct_desc)
734 sampass->private.acct_desc = talloc_strdup(sampass->mem_ctx, acct_desc);
736 if (!sampass->private.acct_desc) {
737 DEBUG(0, ("pdb_set_acct_desc: talloc_strdup() failed!\n"));
742 sampass->private.acct_desc = PDB_NOT_QUITE_NULL;
748 /*********************************************************************
749 Set the user's workstation allowed list.
750 ********************************************************************/
752 BOOL pdb_set_workstations (SAM_ACCOUNT *sampass, const char *workstations)
758 DEBUG(10, ("pdb_set_workstations: setting workstations %s, was %s\n", workstations,
759 (sampass->private.workstations)?(sampass->private.workstations):"NULL"));
761 sampass->private.workstations = talloc_strdup(sampass->mem_ctx, workstations);
763 if (!sampass->private.workstations) {
764 DEBUG(0, ("pdb_set_workstations: talloc_strdup() failed!\n"));
769 sampass->private.workstations = PDB_NOT_QUITE_NULL;
775 /*********************************************************************
776 Set the user's 'unknown_str', whatever the heck this actually is...
777 ********************************************************************/
779 BOOL pdb_set_unknown_str (SAM_ACCOUNT *sampass, const char *unknown_str)
785 sampass->private.unknown_str = talloc_strdup(sampass->mem_ctx, unknown_str);
787 if (!sampass->private.unknown_str) {
788 DEBUG(0, ("pdb_set_unknown_str: talloc_strdup() failed!\n"));
793 sampass->private.unknown_str = PDB_NOT_QUITE_NULL;
799 /*********************************************************************
800 Set the user's dial string.
801 ********************************************************************/
803 BOOL pdb_set_munged_dial (SAM_ACCOUNT *sampass, const char *munged_dial)
809 sampass->private.munged_dial = talloc_strdup(sampass->mem_ctx, munged_dial);
811 if (!sampass->private.munged_dial) {
812 DEBUG(0, ("pdb_set_munged_dial: talloc_strdup() failed!\n"));
817 sampass->private.munged_dial = PDB_NOT_QUITE_NULL;
823 /*********************************************************************
824 Set the user's NT hash.
825 ********************************************************************/
827 BOOL pdb_set_nt_passwd (SAM_ACCOUNT *sampass, const uint8 *pwd)
832 data_blob_clear_free(&sampass->private.nt_pw);
834 sampass->private.nt_pw = data_blob(pwd, NT_HASH_LEN);
839 /*********************************************************************
840 Set the user's LM hash.
841 ********************************************************************/
843 BOOL pdb_set_lanman_passwd (SAM_ACCOUNT *sampass, const uint8 *pwd)
848 data_blob_clear_free(&sampass->private.lm_pw);
850 sampass->private.lm_pw = data_blob(pwd, LM_HASH_LEN);
855 BOOL pdb_set_unknown_3 (SAM_ACCOUNT *sampass, uint32 unkn)
860 sampass->private.unknown_3 = unkn;
864 BOOL pdb_set_unknown_5 (SAM_ACCOUNT *sampass, uint32 unkn)
869 sampass->private.unknown_5 = unkn;
873 BOOL pdb_set_unknown_6 (SAM_ACCOUNT *sampass, uint32 unkn)
878 sampass->private.unknown_6 = unkn;
882 BOOL pdb_set_hours (SAM_ACCOUNT *sampass, const uint8 *hours)
888 memset ((char *)sampass->private.hours, 0, MAX_HOURS_LEN);
892 memcpy (sampass->private.hours, hours, MAX_HOURS_LEN);
898 /* Helpful interfaces to the above */
900 /*********************************************************************
901 Sets the last changed times and must change times for a normal
903 ********************************************************************/
905 BOOL pdb_set_pass_changed_now (SAM_ACCOUNT *sampass)
912 if (!pdb_set_pass_last_set_time (sampass, time(NULL)))
915 account_policy_get(AP_MAX_PASSWORD_AGE, &expire);
917 if (expire==(uint32)-1) {
918 if (!pdb_set_pass_must_change_time (sampass, get_time_t_max(), False))
921 if (!pdb_set_pass_must_change_time (sampass,
922 pdb_get_pass_last_set_time(sampass)
930 /*********************************************************************
931 Set the user's PLAINTEXT password. Used as an interface to the above.
932 Also sets the last change time to NOW.
933 ********************************************************************/
935 BOOL pdb_set_plaintext_passwd (SAM_ACCOUNT *sampass, const char *plaintext)
937 uchar new_lanman_p16[16];
938 uchar new_nt_p16[16];
940 if (!sampass || !plaintext)
943 nt_lm_owf_gen (plaintext, new_nt_p16, new_lanman_p16);
945 if (!pdb_set_nt_passwd (sampass, new_nt_p16))
948 if (!pdb_set_lanman_passwd (sampass, new_lanman_p16))
951 if (!pdb_set_pass_changed_now (sampass))