source: trunk/server/libcli/netlogon/netlogon.c

Last change on this file was 745, checked in by Silvan Scherrer, 13 years ago

Samba Server: updated trunk to 3.6.0
File size: 9.2 KB
RevLine 
[740]1/*
2 Unix SMB/CIFS implementation.
3
4 CLDAP server structures
5
6 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2008
7
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
12
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
17
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
20*/
21
22#include "includes.h"
23#include "../libcli/netlogon/netlogon.h"
24
25NTSTATUS push_netlogon_samlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
26 struct netlogon_samlogon_response *response)
27{
28 enum ndr_err_code ndr_err;
29 if (response->ntver == NETLOGON_NT_VERSION_1) {
30 ndr_err = ndr_push_struct_blob(data, mem_ctx,
31 &response->data.nt4,
32 (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE_NT40);
33 } else if (response->ntver & NETLOGON_NT_VERSION_5EX) {
34 ndr_err = ndr_push_struct_blob(data, mem_ctx,
35 &response->data.nt5_ex,
36 (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags);
37 } else if (response->ntver & NETLOGON_NT_VERSION_5) {
38 ndr_err = ndr_push_struct_blob(data, mem_ctx,
39 &response->data.nt5,
40 (ndr_push_flags_fn_t)ndr_push_NETLOGON_SAM_LOGON_RESPONSE);
41 } else {
42 DEBUG(0, ("Asked to push unknown netlogon response type 0x%02x\n", response->ntver));
43 return NT_STATUS_INVALID_PARAMETER;
44 }
45 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
46 DEBUG(2,("failed to push netlogon response of type 0x%02x\n",
47 response->ntver));
48 return ndr_map_error2ntstatus(ndr_err);
49 }
50 return NT_STATUS_OK;
51}
52
53NTSTATUS pull_netlogon_samlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
54 struct netlogon_samlogon_response *response)
55{
56 uint32_t ntver;
57 enum ndr_err_code ndr_err;
58
59 if (data->length < 8) {
60 return NT_STATUS_BUFFER_TOO_SMALL;
61 }
62
63 /* lmnttoken */
64 if (SVAL(data->data, data->length - 4) != 0xffff) {
65 return NT_STATUS_INVALID_NETWORK_RESPONSE;
66 }
67 /* lm20token */
68 if (SVAL(data->data, data->length - 2) != 0xffff) {
69 return NT_STATUS_INVALID_NETWORK_RESPONSE;
70 }
71
72 ntver = IVAL(data->data, data->length - 8);
73
74 if (ntver == NETLOGON_NT_VERSION_1) {
75 ndr_err = ndr_pull_struct_blob_all(data, mem_ctx,
76 &response->data.nt4,
77 (ndr_pull_flags_fn_t)ndr_pull_NETLOGON_SAM_LOGON_RESPONSE_NT40);
78 response->ntver = NETLOGON_NT_VERSION_1;
79 if (NDR_ERR_CODE_IS_SUCCESS(ndr_err) && DEBUGLEVEL >= 10) {
80 NDR_PRINT_DEBUG(NETLOGON_SAM_LOGON_RESPONSE_NT40,
81 &response->data.nt4);
82 }
83
84 } else if (ntver & NETLOGON_NT_VERSION_5EX) {
85 struct ndr_pull *ndr;
86 ndr = ndr_pull_init_blob(data, mem_ctx);
87 if (!ndr) {
88 return NT_STATUS_NO_MEMORY;
89 }
90 ndr_err = ndr_pull_NETLOGON_SAM_LOGON_RESPONSE_EX_with_flags(
91 ndr, NDR_SCALARS|NDR_BUFFERS, &response->data.nt5_ex,
92 ntver);
93 if (ndr->offset < ndr->data_size) {
94 ndr_err = ndr_pull_error(ndr, NDR_ERR_UNREAD_BYTES,
95 "not all bytes consumed ofs[%u] size[%u]",
96 ndr->offset, ndr->data_size);
97 }
98 response->ntver = NETLOGON_NT_VERSION_5EX;
99 if (NDR_ERR_CODE_IS_SUCCESS(ndr_err) && DEBUGLEVEL >= 10) {
100 NDR_PRINT_DEBUG(NETLOGON_SAM_LOGON_RESPONSE_EX,
101 &response->data.nt5_ex);
102 }
103
104 } else if (ntver & NETLOGON_NT_VERSION_5) {
105 ndr_err = ndr_pull_struct_blob_all(data, mem_ctx,
106 &response->data.nt5,
107 (ndr_pull_flags_fn_t)ndr_pull_NETLOGON_SAM_LOGON_RESPONSE);
108 response->ntver = NETLOGON_NT_VERSION_5;
109 if (NDR_ERR_CODE_IS_SUCCESS(ndr_err) && DEBUGLEVEL >= 10) {
110 NDR_PRINT_DEBUG(NETLOGON_SAM_LOGON_RESPONSE,
111 &response->data.nt5);
112 }
113 } else {
114 DEBUG(2,("failed to parse netlogon response of type 0x%02x - unknown response type\n",
115 ntver));
116 dump_data(10, data->data, data->length);
117 return NT_STATUS_INVALID_NETWORK_RESPONSE;
118 }
119
120 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
121 DEBUG(2,("failed to parse netlogon response of type 0x%02x\n",
122 ntver));
123 dump_data(10, data->data, data->length);
124 return ndr_map_error2ntstatus(ndr_err);
125 }
126
127 return NT_STATUS_OK;
128}
129
130void map_netlogon_samlogon_response(struct netlogon_samlogon_response *response)
131{
132 struct NETLOGON_SAM_LOGON_RESPONSE_EX response_5_ex;
133 switch (response->ntver) {
134 case NETLOGON_NT_VERSION_5EX:
135 break;
136 case NETLOGON_NT_VERSION_5:
137 ZERO_STRUCT(response_5_ex);
138 response_5_ex.command = response->data.nt5.command;
139 response_5_ex.pdc_name = response->data.nt5.pdc_name;
140 response_5_ex.user_name = response->data.nt5.user_name;
141 response_5_ex.domain_name = response->data.nt5.domain_name;
142 response_5_ex.domain_uuid = response->data.nt5.domain_uuid;
143 response_5_ex.forest = response->data.nt5.forest;
144 response_5_ex.dns_domain = response->data.nt5.dns_domain;
145 response_5_ex.pdc_dns_name = response->data.nt5.pdc_dns_name;
146 response_5_ex.sockaddr.pdc_ip = response->data.nt5.pdc_ip;
147 response_5_ex.server_type = response->data.nt5.server_type;
148 response_5_ex.nt_version = response->data.nt5.nt_version;
149 response_5_ex.lmnt_token = response->data.nt5.lmnt_token;
150 response_5_ex.lm20_token = response->data.nt5.lm20_token;
151 response->ntver = NETLOGON_NT_VERSION_5EX;
152 response->data.nt5_ex = response_5_ex;
153 break;
154
155 case NETLOGON_NT_VERSION_1:
156 ZERO_STRUCT(response_5_ex);
157 response_5_ex.command = response->data.nt4.command;
158 response_5_ex.pdc_name = response->data.nt4.pdc_name;
159 response_5_ex.user_name = response->data.nt4.user_name;
160 response_5_ex.domain_name = response->data.nt4.domain_name;
161 response_5_ex.nt_version = response->data.nt4.nt_version;
162 response_5_ex.lmnt_token = response->data.nt4.lmnt_token;
163 response_5_ex.lm20_token = response->data.nt4.lm20_token;
164 response->ntver = NETLOGON_NT_VERSION_5EX;
165 response->data.nt5_ex = response_5_ex;
166 break;
167 }
168 return;
169}
170
171NTSTATUS push_nbt_netlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
172 struct nbt_netlogon_response *response)
173{
174 NTSTATUS status = NT_STATUS_INVALID_NETWORK_RESPONSE;
175 enum ndr_err_code ndr_err;
176 switch (response->response_type) {
177 case NETLOGON_GET_PDC:
178 ndr_err = ndr_push_struct_blob(data, mem_ctx,
179 &response->data.get_pdc,
180 (ndr_push_flags_fn_t)ndr_push_nbt_netlogon_response_from_pdc);
181 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
182 status = ndr_map_error2ntstatus(ndr_err);
183 DEBUG(0,("Failed to parse netlogon packet of length %d: %s\n",
184 (int)data->length, nt_errstr(status)));
185 if (DEBUGLVL(10)) {
186 file_save("netlogon.dat", data->data, data->length);
187 }
188 return status;
189 }
190 status = NT_STATUS_OK;
191 break;
192 case NETLOGON_SAMLOGON:
193 status = push_netlogon_samlogon_response(
194 data, mem_ctx,
195 &response->data.samlogon);
196 break;
197 case NETLOGON_RESPONSE2:
198 ndr_err = ndr_push_struct_blob(data, mem_ctx,
199 &response->data.response2,
200 (ndr_push_flags_fn_t)ndr_push_nbt_netlogon_response2);
201 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
202 return ndr_map_error2ntstatus(ndr_err);
203 }
204 status = NT_STATUS_OK;
205 break;
206 }
207
208 return status;
209}
210
211
212NTSTATUS pull_nbt_netlogon_response(DATA_BLOB *data, TALLOC_CTX *mem_ctx,
213 struct nbt_netlogon_response *response)
214{
215 NTSTATUS status = NT_STATUS_INVALID_NETWORK_RESPONSE;
216 enum netlogon_command command;
217 enum ndr_err_code ndr_err;
218 if (data->length < 4) {
219 return NT_STATUS_INVALID_NETWORK_RESPONSE;
220 }
221
222 command = SVAL(data->data, 0);
223
224 switch (command) {
225 case NETLOGON_RESPONSE_FROM_PDC:
226 ndr_err = ndr_pull_struct_blob_all(data, mem_ctx,
227 &response->data.get_pdc,
228 (ndr_pull_flags_fn_t)ndr_pull_nbt_netlogon_response_from_pdc);
229 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
230 status = ndr_map_error2ntstatus(ndr_err);
231 DEBUG(0,("Failed to parse netlogon packet of length %d: %s\n",
232 (int)data->length, nt_errstr(status)));
233 if (DEBUGLVL(10)) {
234 file_save("netlogon.dat", data->data, data->length);
235 }
236 return status;
237 }
238 status = NT_STATUS_OK;
239 response->response_type = NETLOGON_GET_PDC;
240 break;
241 case LOGON_RESPONSE2:
242 ndr_err = ndr_pull_struct_blob(data, mem_ctx, &response->data.response2,
243 (ndr_pull_flags_fn_t)ndr_pull_nbt_netlogon_response2);
244 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
245 return ndr_map_error2ntstatus(ndr_err);
246 }
247 status = NT_STATUS_OK;
248 response->response_type = NETLOGON_RESPONSE2;
249 break;
250 case LOGON_SAM_LOGON_RESPONSE:
251 case LOGON_SAM_LOGON_PAUSE_RESPONSE:
252 case LOGON_SAM_LOGON_USER_UNKNOWN:
253 case LOGON_SAM_LOGON_RESPONSE_EX:
254 case LOGON_SAM_LOGON_PAUSE_RESPONSE_EX:
255 case LOGON_SAM_LOGON_USER_UNKNOWN_EX:
256 status = pull_netlogon_samlogon_response(
257 data, mem_ctx,
258 &response->data.samlogon);
259 response->response_type = NETLOGON_SAMLOGON;
260 break;
261
262 /* These levels are queries, not responses */
263 case LOGON_PRIMARY_QUERY:
264 case LOGON_REQUEST:
265 case NETLOGON_ANNOUNCE_UAS:
266 case LOGON_SAM_LOGON_REQUEST:
267 status = NT_STATUS_INVALID_NETWORK_RESPONSE;
268 }
269
270 return status;
271
272}
Note: See TracBrowser for help on using the repository browser.