1 | /*
|
---|
2 | Unix SMB/CIFS implementation.
|
---|
3 |
|
---|
4 | auth functions
|
---|
5 |
|
---|
6 | Copyright (C) Simo Sorce 2005
|
---|
7 | Copyright (C) Andrew Tridgell 2005
|
---|
8 | Copyright (C) Andrew Bartlett 2005
|
---|
9 |
|
---|
10 | This program is free software; you can redistribute it and/or modify
|
---|
11 | it under the terms of the GNU General Public License as published by
|
---|
12 | the Free Software Foundation; either version 3 of the License, or
|
---|
13 | (at your option) any later version.
|
---|
14 |
|
---|
15 | This program is distributed in the hope that it will be useful,
|
---|
16 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
17 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
18 | GNU General Public License for more details.
|
---|
19 |
|
---|
20 | You should have received a copy of the GNU General Public License
|
---|
21 | along with this program. If not, see <http://www.gnu.org/licenses/>.
|
---|
22 | */
|
---|
23 |
|
---|
24 | #include "includes.h"
|
---|
25 | #include "auth/auth.h"
|
---|
26 |
|
---|
27 | /*
|
---|
28 | It's allowed to pass NULL as session_info,
|
---|
29 | when the caller doesn't need a session_info
|
---|
30 | */
|
---|
31 | _PUBLIC_ NTSTATUS authenticate_username_pw(TALLOC_CTX *mem_ctx,
|
---|
32 | struct tevent_context *ev,
|
---|
33 | struct messaging_context *msg,
|
---|
34 | struct loadparm_context *lp_ctx,
|
---|
35 | const char *nt4_domain,
|
---|
36 | const char *nt4_username,
|
---|
37 | const char *password,
|
---|
38 | const uint32_t logon_parameters,
|
---|
39 | struct auth_session_info **session_info)
|
---|
40 | {
|
---|
41 | struct auth_context *auth_context;
|
---|
42 | struct auth_usersupplied_info *user_info;
|
---|
43 | struct auth_user_info_dc *user_info_dc;
|
---|
44 | NTSTATUS nt_status;
|
---|
45 | TALLOC_CTX *tmp_ctx = talloc_new(mem_ctx);
|
---|
46 |
|
---|
47 | if (!tmp_ctx) {
|
---|
48 | return NT_STATUS_NO_MEMORY;
|
---|
49 | }
|
---|
50 |
|
---|
51 | nt_status = auth_context_create(tmp_ctx,
|
---|
52 | ev, msg,
|
---|
53 | lp_ctx,
|
---|
54 | &auth_context);
|
---|
55 | if (!NT_STATUS_IS_OK(nt_status)) {
|
---|
56 | talloc_free(tmp_ctx);
|
---|
57 | return nt_status;
|
---|
58 | }
|
---|
59 |
|
---|
60 | user_info = talloc_zero(tmp_ctx, struct auth_usersupplied_info);
|
---|
61 | if (!user_info) {
|
---|
62 | talloc_free(tmp_ctx);
|
---|
63 | return NT_STATUS_NO_MEMORY;
|
---|
64 | }
|
---|
65 |
|
---|
66 | user_info->mapped_state = true;
|
---|
67 | user_info->client.account_name = nt4_username;
|
---|
68 | user_info->mapped.account_name = nt4_username;
|
---|
69 | user_info->client.domain_name = nt4_domain;
|
---|
70 | user_info->mapped.domain_name = nt4_domain;
|
---|
71 |
|
---|
72 | user_info->workstation_name = NULL;
|
---|
73 |
|
---|
74 | user_info->remote_host = NULL;
|
---|
75 |
|
---|
76 | user_info->password_state = AUTH_PASSWORD_PLAIN;
|
---|
77 | user_info->password.plaintext = talloc_strdup(user_info, password);
|
---|
78 |
|
---|
79 | user_info->flags = USER_INFO_CASE_INSENSITIVE_USERNAME |
|
---|
80 | USER_INFO_DONT_CHECK_UNIX_ACCOUNT;
|
---|
81 |
|
---|
82 | user_info->logon_parameters = logon_parameters |
|
---|
83 | MSV1_0_CLEARTEXT_PASSWORD_ALLOWED |
|
---|
84 | MSV1_0_CLEARTEXT_PASSWORD_SUPPLIED;
|
---|
85 |
|
---|
86 | nt_status = auth_check_password(auth_context, tmp_ctx, user_info, &user_info_dc);
|
---|
87 | if (!NT_STATUS_IS_OK(nt_status)) {
|
---|
88 | talloc_free(tmp_ctx);
|
---|
89 | return nt_status;
|
---|
90 | }
|
---|
91 |
|
---|
92 | if (session_info) {
|
---|
93 | uint32_t flags = AUTH_SESSION_INFO_DEFAULT_GROUPS;
|
---|
94 | if (user_info_dc->info->authenticated) {
|
---|
95 | flags |= AUTH_SESSION_INFO_AUTHENTICATED;
|
---|
96 | }
|
---|
97 | nt_status = auth_context->generate_session_info(tmp_ctx, auth_context,
|
---|
98 | user_info_dc,
|
---|
99 | flags,
|
---|
100 | session_info);
|
---|
101 |
|
---|
102 | if (NT_STATUS_IS_OK(nt_status)) {
|
---|
103 | talloc_steal(mem_ctx, *session_info);
|
---|
104 | }
|
---|
105 | }
|
---|
106 |
|
---|
107 | talloc_free(tmp_ctx);
|
---|
108 | return nt_status;
|
---|
109 | }
|
---|
110 |
|
---|