build: a more portable way of finding waf in makefiles
[sfrench/samba-autobuild/.git] / libcli / netlogon.c
1 /*
2    Unix SMB/CIFS implementation.
3
4    CLDAP server structures
5
6    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008
7
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License as published by
10    the Free Software Foundation; either version 3 of the License, or
11    (at your option) any later version.
12
13    This program is distributed in the hope that it will be useful,
14    but WITHOUT ANY WARRANTY; without even the implied warranty of
15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16    GNU General Public License for more details.
17
18    You should have received a copy of the GNU General Public License
19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #include "includes.h"
23 #include "../libcli/netlogon.h"
24
25 NTSTATUS push_netlogon_samlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
26                                          struct netlogon_samlogon_response *response)
27 {
28         enum ndr_err_code ndr_err;
29         if (response->ntver == NETLOGON_NT_VERSION_1) {
30                 ndr_err = ndr_push_struct_blob(data, mem_ctx,
31                                                &response->data.nt4,
32                                                (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE_NT40);
33         } else if (response->ntver & NETLOGON_NT_VERSION_5EX) {
34                 ndr_err = ndr_push_struct_blob(data, mem_ctx,
35                                                &response->data.nt5_ex,
36                                                (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags);
37         } else if (response->ntver & NETLOGON_NT_VERSION_5) {
38                 ndr_err = ndr_push_struct_blob(data, mem_ctx,
39                                                &response->data.nt5,
40                                                (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE);
41         } else {
42                 DEBUG(0, ("Asked to push unknown netlogon response type 0x%02x\n", response->ntver));
43                 return NT_STATUS_INVALID_PARAMETER;
44         }
45         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
46                 DEBUG(2,("failed to push netlogon response of type 0x%02x\n",
47                          response->ntver));
48                 return ndr_map_error2ntstatus(ndr_err);
49         }
50         return NT_STATUS_OK;
51 }
52
53 NTSTATUS pull_netlogon_samlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
54                                          struct netlogon_samlogon_response *response)
55 {
56         uint32_t ntver;
57         enum ndr_err_code ndr_err;
58
59         if (data->length < 8) {
60                 return NT_STATUS_BUFFER_TOO_SMALL;
61         }
62
63         /* lmnttoken */
64         if (SVAL(data->data, data->length - 4) != 0xffff) {
65                 return NT_STATUS_INVALID_NETWORK_RESPONSE;
66         }
67         /* lm20token */
68         if (SVAL(data->data, data->length - 2) != 0xffff) {
69                 return NT_STATUS_INVALID_NETWORK_RESPONSE;
70         }
71
72         ntver = IVAL(data->data, data->length - 8);
73
74         if (ntver == NETLOGON_NT_VERSION_1) {
75                 ndr_err = ndr_pull_struct_blob_all(data, mem_ctx,
76                                                    &response->data.nt4,
77                                                    (ndr_pull_flags_fn_t)ndr_pull_NETLOGON_SAM_LOGON_RESPONSE_NT40);
78                 response->ntver = NETLOGON_NT_VERSION_1;
79                 if (NDR_ERR_CODE_IS_SUCCESS(ndr_err) && DEBUGLEVEL >= 10) {
80                         NDR_PRINT_DEBUG(NETLOGON_SAM_LOGON_RESPONSE_NT40,
81                                         &response->data.nt4);
82                 }
83
84         } else if (ntver & NETLOGON_NT_VERSION_5EX) {
85                 struct ndr_pull *ndr;
86                 ndr = ndr_pull_init_blob(data, mem_ctx);
87                 if (!ndr) {
88                         return NT_STATUS_NO_MEMORY;
89                 }
90                 ndr_err = ndr_pull_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags(
91                         ndr, NDR_SCALARS|NDR_BUFFERS, &response->data.nt5_ex,
92                         ntver);
93                 if (ndr->offset < ndr->data_size) {
94                         ndr_err = ndr_pull_error(ndr, NDR_ERR_UNREAD_BYTES,
95                                                  "not all bytes consumed ofs[%u] size[%u]",
96                                                  ndr->offset, ndr->data_size);
97                 }
98                 response->ntver = NETLOGON_NT_VERSION_5EX;
99                 if (NDR_ERR_CODE_IS_SUCCESS(ndr_err) && DEBUGLEVEL >= 10) {
100                         NDR_PRINT_DEBUG(NETLOGON_SAM_LOGON_RESPONSE_EX,
101                                         &response->data.nt5_ex);
102                 }
103
104         } else if (ntver & NETLOGON_NT_VERSION_5) {
105                 ndr_err = ndr_pull_struct_blob_all(data, mem_ctx,
106                                                    &response->data.nt5,
107                                                    (ndr_pull_flags_fn_t)ndr_pull_NETLOGON_SAM_LOGON_RESPONSE);
108                 response->ntver = NETLOGON_NT_VERSION_5;
109                 if (NDR_ERR_CODE_IS_SUCCESS(ndr_err) && DEBUGLEVEL >= 10) {
110                         NDR_PRINT_DEBUG(NETLOGON_SAM_LOGON_RESPONSE,
111                                         &response->data.nt5);
112                 }
113         } else {
114                 DEBUG(2,("failed to parse netlogon response of type 0x%02x - unknown response type\n",
115                          ntver));
116                 dump_data(10, data->data, data->length);
117                 return NT_STATUS_INVALID_NETWORK_RESPONSE;
118         }
119
120         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
121                 DEBUG(2,("failed to parse netlogon response of type 0x%02x\n",
122                          ntver));
123                 dump_data(10, data->data, data->length);
124                 return ndr_map_error2ntstatus(ndr_err);
125         }
126
127         return NT_STATUS_OK;
128 }
129
130 void map_netlogon_samlogon_response(struct netlogon_samlogon_response *response)
131 {
132         struct NETLOGON_SAM_LOGON_RESPONSE_EX response_5_ex;
133         switch (response->ntver) {
134         case NETLOGON_NT_VERSION_5EX:
135                 break;
136         case NETLOGON_NT_VERSION_5:
137                 ZERO_STRUCT(response_5_ex);
138                 response_5_ex.command = response->data.nt5.command;
139                 response_5_ex.pdc_name = response->data.nt5.pdc_name;
140                 response_5_ex.user_name = response->data.nt5.user_name;
141                 response_5_ex.domain_name = response->data.nt5.domain_name;
142                 response_5_ex.domain_uuid = response->data.nt5.domain_uuid;
143                 response_5_ex.forest = response->data.nt5.forest;
144                 response_5_ex.dns_domain = response->data.nt5.dns_domain;
145                 response_5_ex.pdc_dns_name = response->data.nt5.pdc_dns_name;
146                 response_5_ex.sockaddr.pdc_ip = response->data.nt5.pdc_ip;
147                 response_5_ex.server_type = response->data.nt5.server_type;
148                 response_5_ex.nt_version = response->data.nt5.nt_version;
149                 response_5_ex.lmnt_token = response->data.nt5.lmnt_token;
150                 response_5_ex.lm20_token = response->data.nt5.lm20_token;
151                 response->ntver = NETLOGON_NT_VERSION_5EX;
152                 response->data.nt5_ex = response_5_ex;
153                 break;
154
155         case NETLOGON_NT_VERSION_1:
156                 ZERO_STRUCT(response_5_ex);
157                 response_5_ex.command = response->data.nt4.command;
158                 response_5_ex.pdc_name = response->data.nt4.pdc_name;
159                 response_5_ex.user_name = response->data.nt4.user_name;
160                 response_5_ex.domain_name = response->data.nt4.domain_name;
161                 response_5_ex.nt_version = response->data.nt4.nt_version;
162                 response_5_ex.lmnt_token = response->data.nt4.lmnt_token;
163                 response_5_ex.lm20_token = response->data.nt4.lm20_token;
164                 response->ntver = NETLOGON_NT_VERSION_5EX;
165                 response->data.nt5_ex = response_5_ex;
166                 break;
167         }
168         return;
169 }
170
171 NTSTATUS push_nbt_netlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
172                                     struct nbt_netlogon_response *response)
173 {
174         NTSTATUS status = NT_STATUS_INVALID_NETWORK_RESPONSE;
175         enum ndr_err_code ndr_err;
176         switch (response->response_type) {
177         case NETLOGON_GET_PDC:
178                 ndr_err = ndr_push_struct_blob(data, mem_ctx,
179                                                &response->data.get_pdc,
180                                                (ndr_push_flags_fn_t)ndr_push_nbt_netlogon_response_from_pdc);
181                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
182                         status = ndr_map_error2ntstatus(ndr_err);
183                         DEBUG(0,("Failed to parse netlogon packet of length %d: %s\n",
184                                  (int)data->length, nt_errstr(status)));
185                         if (DEBUGLVL(10)) {
186                                 file_save("netlogon.dat", data->data, data->length);
187                         }
188                         return status;
189                 }
190                 status = NT_STATUS_OK;
191                 break;
192         case NETLOGON_SAMLOGON:
193                 status = push_netlogon_samlogon_response(
194                         data, mem_ctx, 
195                         &response->data.samlogon);
196                 break;
197         case NETLOGON_RESPONSE2:
198                 ndr_err = ndr_push_struct_blob(data, mem_ctx,
199                                                &response->data.response2,
200                                                (ndr_push_flags_fn_t)ndr_push_nbt_netlogon_response2);
201                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
202                         return ndr_map_error2ntstatus(ndr_err);
203                 }
204                 status = NT_STATUS_OK;
205                 break;
206         }
207
208         return status;
209 }
210
211
212 NTSTATUS pull_nbt_netlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
213                                          struct nbt_netlogon_response *response)
214 {
215         NTSTATUS status = NT_STATUS_INVALID_NETWORK_RESPONSE;
216         enum netlogon_command command;
217         enum ndr_err_code ndr_err;
218         if (data->length < 4) {
219                 return NT_STATUS_INVALID_NETWORK_RESPONSE;
220         }
221
222         command = SVAL(data->data, 0);
223
224         switch (command) {
225         case NETLOGON_RESPONSE_FROM_PDC:
226                 ndr_err = ndr_pull_struct_blob_all(data, mem_ctx,
227                                                    &response->data.get_pdc,
228                                                    (ndr_pull_flags_fn_t)ndr_pull_nbt_netlogon_response_from_pdc);
229                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
230                         status = ndr_map_error2ntstatus(ndr_err);
231                         DEBUG(0,("Failed to parse netlogon packet of length %d: %s\n",
232                                  (int)data->length, nt_errstr(status)));
233                         if (DEBUGLVL(10)) {
234                                 file_save("netlogon.dat", data->data, data->length);
235                         }
236                         return status;
237                 }
238                 status = NT_STATUS_OK;
239                 response->response_type = NETLOGON_GET_PDC;
240                 break;
241         case LOGON_RESPONSE2:
242                 ndr_err = ndr_pull_struct_blob(data, mem_ctx, &response->data.response2,
243                         (ndr_pull_flags_fn_t)ndr_pull_nbt_netlogon_response2);
244                 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
245                         return ndr_map_error2ntstatus(ndr_err);
246                 }
247                 status = NT_STATUS_OK;
248                 response->response_type = NETLOGON_RESPONSE2;
249                 break;
250         case LOGON_SAM_LOGON_RESPONSE:
251         case LOGON_SAM_LOGON_PAUSE_RESPONSE:
252         case LOGON_SAM_LOGON_USER_UNKNOWN:
253         case LOGON_SAM_LOGON_RESPONSE_EX:
254         case LOGON_SAM_LOGON_PAUSE_RESPONSE_EX:
255         case LOGON_SAM_LOGON_USER_UNKNOWN_EX:
256                 status = pull_netlogon_samlogon_response(
257                         data, mem_ctx, 
258                         &response->data.samlogon);
259                 response->response_type = NETLOGON_SAMLOGON;
260                 break;
261
262         /* These levels are queries, not responses */
263         case LOGON_PRIMARY_QUERY:
264         case LOGON_REQUEST:
265         case NETLOGON_ANNOUNCE_UAS:
266         case LOGON_SAM_LOGON_REQUEST:
267                 status = NT_STATUS_INVALID_NETWORK_RESPONSE;
268         }
269
270         return status;
271
272 }