| 1 | /* 
 | 
|---|
| 2 |    Samba Unix/Linux SMB client library 
 | 
|---|
| 3 |    net ads cldap functions 
 | 
|---|
| 4 |    Copyright (C) 2001 Andrew Tridgell (tridge@samba.org)
 | 
|---|
| 5 |    Copyright (C) 2003 Jim McDonough (jmcd@us.ibm.com)
 | 
|---|
| 6 |    Copyright (C) 2008 Guenther Deschner (gd@samba.org)
 | 
|---|
| 7 |    Copyright (C) 2009 Stefan Metzmacher (metze@samba.org)
 | 
|---|
| 8 | 
 | 
|---|
| 9 |    This program is free software; you can redistribute it and/or modify
 | 
|---|
| 10 |    it under the terms of the GNU General Public License as published by
 | 
|---|
| 11 |    the Free Software Foundation; either version 3 of the License, or
 | 
|---|
| 12 |    (at your option) any later version.
 | 
|---|
| 13 | 
 | 
|---|
| 14 |    This program is distributed in the hope that it will be useful,
 | 
|---|
| 15 |    but WITHOUT ANY WARRANTY; without even the implied warranty of
 | 
|---|
| 16 |    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 | 
|---|
| 17 |    GNU General Public License for more details.
 | 
|---|
| 18 | 
 | 
|---|
| 19 |    You should have received a copy of the GNU General Public License
 | 
|---|
| 20 |    along with this program.  If not, see <http://www.gnu.org/licenses/>.  
 | 
|---|
| 21 | */
 | 
|---|
| 22 | 
 | 
|---|
| 23 | #include "includes.h"
 | 
|---|
| 24 | #include "../libcli/cldap/cldap.h"
 | 
|---|
| 25 | #include "../lib/tsocket/tsocket.h"
 | 
|---|
| 26 | 
 | 
|---|
| 27 | /*******************************************************************
 | 
|---|
| 28 |   do a cldap netlogon query.  Always 389/udp
 | 
|---|
| 29 | *******************************************************************/
 | 
|---|
| 30 | 
 | 
|---|
| 31 | bool ads_cldap_netlogon(TALLOC_CTX *mem_ctx,
 | 
|---|
| 32 |                         const char *server,
 | 
|---|
| 33 |                         const char *realm,
 | 
|---|
| 34 |                         uint32_t nt_version,
 | 
|---|
| 35 |                         struct netlogon_samlogon_response **_reply)
 | 
|---|
| 36 | {
 | 
|---|
| 37 |         struct cldap_socket *cldap;
 | 
|---|
| 38 |         struct cldap_netlogon io;
 | 
|---|
| 39 |         struct netlogon_samlogon_response *reply;
 | 
|---|
| 40 |         NTSTATUS status;
 | 
|---|
| 41 |         struct sockaddr_storage ss;
 | 
|---|
| 42 |         char addrstr[INET6_ADDRSTRLEN];
 | 
|---|
| 43 |         const char *dest_str;
 | 
|---|
| 44 |         int ret;
 | 
|---|
| 45 |         struct tsocket_address *dest_addr;
 | 
|---|
| 46 | 
 | 
|---|
| 47 |         if (!interpret_string_addr_prefer_ipv4(&ss, server, 0)) {
 | 
|---|
| 48 |                 DEBUG(2,("Failed to resolve[%s] into an address for cldap\n",
 | 
|---|
| 49 |                         server));
 | 
|---|
| 50 |                 return false;
 | 
|---|
| 51 |         }
 | 
|---|
| 52 |         dest_str = print_sockaddr(addrstr, sizeof(addrstr), &ss);
 | 
|---|
| 53 | 
 | 
|---|
| 54 |         ret = tsocket_address_inet_from_strings(mem_ctx, "ip",
 | 
|---|
| 55 |                                                 dest_str, LDAP_PORT,
 | 
|---|
| 56 |                                                 &dest_addr);
 | 
|---|
| 57 |         if (ret != 0) {
 | 
|---|
| 58 |                 status = map_nt_error_from_unix(errno);
 | 
|---|
| 59 |                 DEBUG(2,("Failed to create cldap tsocket_address for %s - %s\n",
 | 
|---|
| 60 |                          dest_str, nt_errstr(status)));
 | 
|---|
| 61 |                 return false;
 | 
|---|
| 62 |         }
 | 
|---|
| 63 | 
 | 
|---|
| 64 |         /*
 | 
|---|
| 65 |          * as we use a connected udp socket
 | 
|---|
| 66 |          */
 | 
|---|
| 67 |         status = cldap_socket_init(mem_ctx, NULL, NULL, dest_addr, &cldap);
 | 
|---|
| 68 |         TALLOC_FREE(dest_addr);
 | 
|---|
| 69 |         if (!NT_STATUS_IS_OK(status)) {
 | 
|---|
| 70 |                 DEBUG(2,("Failed to create cldap socket to %s: %s\n",
 | 
|---|
| 71 |                          dest_str, nt_errstr(status)));
 | 
|---|
| 72 |                 return false;
 | 
|---|
| 73 |         }
 | 
|---|
| 74 | 
 | 
|---|
| 75 |         reply = talloc(cldap, struct netlogon_samlogon_response);
 | 
|---|
| 76 |         if (!reply) {
 | 
|---|
| 77 |                 goto failed;
 | 
|---|
| 78 |         }
 | 
|---|
| 79 | 
 | 
|---|
| 80 |         /*
 | 
|---|
| 81 |          * as we use a connected socket, so we don't need to specify the
 | 
|---|
| 82 |          * destination
 | 
|---|
| 83 |          */
 | 
|---|
| 84 |         io.in.dest_address      = NULL;
 | 
|---|
| 85 |         io.in.dest_port         = 0;
 | 
|---|
| 86 |         io.in.realm             = realm;
 | 
|---|
| 87 |         io.in.host              = NULL;
 | 
|---|
| 88 |         io.in.user              = NULL;
 | 
|---|
| 89 |         io.in.domain_guid       = NULL;
 | 
|---|
| 90 |         io.in.domain_sid        = NULL;
 | 
|---|
| 91 |         io.in.acct_control      = 0;
 | 
|---|
| 92 |         io.in.version           = nt_version;
 | 
|---|
| 93 |         io.in.map_response      = false;
 | 
|---|
| 94 | 
 | 
|---|
| 95 |         status = cldap_netlogon(cldap, NULL, reply, &io);
 | 
|---|
| 96 |         if (!NT_STATUS_IS_OK(status)) {
 | 
|---|
| 97 |                 DEBUG(2,("cldap_netlogon() failed: %s\n", nt_errstr(status)));
 | 
|---|
| 98 |                 goto failed;
 | 
|---|
| 99 |         }
 | 
|---|
| 100 | 
 | 
|---|
| 101 |         *reply = io.out.netlogon;
 | 
|---|
| 102 |         *_reply = talloc_move(mem_ctx, &reply);
 | 
|---|
| 103 |         TALLOC_FREE(cldap);
 | 
|---|
| 104 |         return true;
 | 
|---|
| 105 | failed:
 | 
|---|
| 106 |         TALLOC_FREE(cldap);
 | 
|---|
| 107 |         return false;
 | 
|---|
| 108 | }
 | 
|---|
| 109 | 
 | 
|---|
| 110 | /*******************************************************************
 | 
|---|
| 111 |   do a cldap netlogon query.  Always 389/udp
 | 
|---|
| 112 | *******************************************************************/
 | 
|---|
| 113 | 
 | 
|---|
| 114 | bool ads_cldap_netlogon_5(TALLOC_CTX *mem_ctx,
 | 
|---|
| 115 |                           const char *server,
 | 
|---|
| 116 |                           const char *realm,
 | 
|---|
| 117 |                           struct NETLOGON_SAM_LOGON_RESPONSE_EX *reply5)
 | 
|---|
| 118 | {
 | 
|---|
| 119 |         uint32_t nt_version = NETLOGON_NT_VERSION_5 | NETLOGON_NT_VERSION_5EX;
 | 
|---|
| 120 |         struct netlogon_samlogon_response *reply = NULL;
 | 
|---|
| 121 |         bool ret;
 | 
|---|
| 122 | 
 | 
|---|
| 123 |         ret = ads_cldap_netlogon(mem_ctx, server, realm, nt_version, &reply);
 | 
|---|
| 124 |         if (!ret) {
 | 
|---|
| 125 |                 return false;
 | 
|---|
| 126 |         }
 | 
|---|
| 127 | 
 | 
|---|
| 128 |         if (reply->ntver != NETLOGON_NT_VERSION_5EX) {
 | 
|---|
| 129 |                 DEBUG(0,("ads_cldap_netlogon_5: nt_version mismatch: 0x%08x\n",
 | 
|---|
| 130 |                         reply->ntver));
 | 
|---|
| 131 |                 return false;
 | 
|---|
| 132 |         }
 | 
|---|
| 133 | 
 | 
|---|
| 134 |         *reply5 = reply->data.nt5_ex;
 | 
|---|
| 135 | 
 | 
|---|
| 136 |         return true;
 | 
|---|
| 137 | }
 | 
|---|