Line data    Source code

       1             : /*
       2             :    Unix SMB/CIFS implementation.
       3             :    async implementation of WINBINDD_PAM_CHNG_PSWD_AUTH_CRAP
       4             :    Copyright (C) Volker Lendecke 2010
       5             : 
       6             :    This program is free software; you can redistribute it and/or modify
       7             :    it under the terms of the GNU General Public License as published by
       8             :    the Free Software Foundation; either version 3 of the License, or
       9             :    (at your option) any later version.
      10             : 
      11             :    This program is distributed in the hope that it will be useful,
      12             :    but WITHOUT ANY WARRANTY; without even the implied warranty of
      13             :    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
      14             :    GNU General Public License for more details.
      15             : 
      16             :    You should have received a copy of the GNU General Public License
      17             :    along with this program.  If not, see <http://www.gnu.org/licenses/>.
      18             : */
      19             : 
      20             : #include "includes.h"
      21             : #include "winbindd.h"
      22             : #include "lib/global_contexts.h"
      23             : #include "librpc/gen_ndr/ndr_winbind_c.h"
      24             : 
      25             : struct winbindd_pam_chng_pswd_auth_crap_state {
      26             :         struct wbint_PamAuthCrapChangePassword r;
      27             : };
      28             : 
      29             : static void winbindd_pam_chng_pswd_auth_crap_done(struct tevent_req *subreq);
      30             : 
      31           2 : struct tevent_req *winbindd_pam_chng_pswd_auth_crap_send(
      32             :         TALLOC_CTX *mem_ctx,
      33             :         struct tevent_context *ev,
      34             :         struct winbindd_cli_state *cli,
      35             :         struct winbindd_request *request)
      36             : {
      37           0 :         struct tevent_req *req, *subreq;
      38           0 :         struct winbindd_pam_chng_pswd_auth_crap_state *state;
      39           0 :         struct winbindd_domain *domain;
      40           0 :         const char *domain_name;
      41             : 
      42           2 :         req = tevent_req_create(mem_ctx, &state,
      43             :                                 struct winbindd_pam_chng_pswd_auth_crap_state);
      44           2 :         if (req == NULL) {
      45           0 :                 return NULL;
      46             :         }
      47             : 
      48             :         /* Ensure null termination */
      49           0 :         request->data.chng_pswd_auth_crap.user[
      50           2 :                 sizeof(request->data.chng_pswd_auth_crap.user)-1]='\0';
      51           0 :         request->data.chng_pswd_auth_crap.domain[
      52           2 :                 sizeof(request->data.chng_pswd_auth_crap.domain)-1]=0;
      53             : 
      54           2 :         DEBUG(3, ("[%5lu]: pam change pswd auth crap domain: %s user: %s\n",
      55             :                   (unsigned long)cli->pid,
      56             :                   request->data.chng_pswd_auth_crap.domain,
      57             :                   request->data.chng_pswd_auth_crap.user));
      58             : 
      59           2 :         domain_name = NULL;
      60           2 :         if (*request->data.chng_pswd_auth_crap.domain != '\0') {
      61           2 :                 domain_name = request->data.chng_pswd_auth_crap.domain;
      62           0 :         } else if (lp_winbind_use_default_domain()) {
      63           0 :                 domain_name = lp_workgroup();
      64             :         }
      65             : 
      66           2 :         domain = NULL;
      67           2 :         if (domain_name != NULL) {
      68           2 :                 domain = find_domain_from_name(domain_name);
      69             :         }
      70             : 
      71           2 :         if (domain == NULL) {
      72           0 :                 tevent_req_nterror(req, NT_STATUS_NO_SUCH_USER);
      73           0 :                 return tevent_req_post(req, ev);
      74             :         }
      75             : 
      76           2 :         state->r.in.client_pid = request->pid;
      77           2 :         state->r.in.client_name = talloc_strdup(state, request->client_name);
      78           2 :         if (tevent_req_nomem(state->r.in.client_name, req)) {
      79           0 :                 return tevent_req_post(req, ev);
      80             :         }
      81             : 
      82           2 :         state->r.in.domain = talloc_strdup(state, domain_name);
      83           2 :         if (tevent_req_nomem(state->r.in.domain, req)) {
      84           0 :                 return tevent_req_post(req, ev);
      85             :         }
      86           4 :         state->r.in.user = talloc_strdup(state,
      87           2 :                 request->data.chng_pswd_auth_crap.user);
      88           2 :         if (tevent_req_nomem(state->r.in.user, req)) {
      89           0 :                 return tevent_req_post(req, ev);
      90             :         }
      91             : 
      92           2 :         state->r.in.new_nt_pswd = data_blob_talloc(state,
      93             :                 request->data.chng_pswd_auth_crap.new_nt_pswd,
      94             :                 request->data.chng_pswd_auth_crap.new_nt_pswd_len);
      95           2 :         if (tevent_req_nomem(state->r.in.new_nt_pswd.data, req)) {
      96           0 :                 return tevent_req_post(req, ev);
      97             :         }
      98             : 
      99           2 :         state->r.in.old_nt_hash_enc = data_blob_talloc(state,
     100             :                 request->data.chng_pswd_auth_crap.old_nt_hash_enc,
     101             :                 request->data.chng_pswd_auth_crap.old_nt_hash_enc_len);
     102           2 :         if (tevent_req_nomem(state->r.in.old_nt_hash_enc.data, req)) {
     103           0 :                 return tevent_req_post(req, ev);
     104             :         }
     105             : 
     106           2 :         if (request->data.chng_pswd_auth_crap.new_lm_pswd_len > 0) {
     107           0 :                 state->r.in.new_lm_pswd = data_blob_talloc(state,
     108             :                         request->data.chng_pswd_auth_crap.new_lm_pswd,
     109             :                         request->data.chng_pswd_auth_crap.new_lm_pswd_len);
     110           0 :                 if (tevent_req_nomem(state->r.in.new_lm_pswd.data, req)) {
     111           0 :                         return tevent_req_post(req, ev);
     112             :                 }
     113             : 
     114           0 :                 state->r.in.old_lm_hash_enc = data_blob_talloc(state,
     115             :                         request->data.chng_pswd_auth_crap.old_lm_hash_enc,
     116             :                         request->data.chng_pswd_auth_crap.old_lm_hash_enc_len);
     117           0 :                 if (tevent_req_nomem(state->r.in.old_lm_hash_enc.data, req)) {
     118           0 :                         return tevent_req_post(req, ev);
     119             :                 }
     120             :         } else {
     121           2 :                 state->r.in.new_lm_pswd = data_blob_null;
     122           2 :                 state->r.in.old_lm_hash_enc = data_blob_null;
     123             :         }
     124             : 
     125           2 :         subreq = dcerpc_wbint_PamAuthCrapChangePassword_r_send(state,
     126             :                                                 global_event_context(),
     127             :                                                 dom_child_handle(domain),
     128           2 :                                                 &state->r);
     129           2 :         if (tevent_req_nomem(subreq, req)) {
     130           0 :                 return tevent_req_post(req, ev);
     131             :         }
     132           2 :         tevent_req_set_callback(subreq, winbindd_pam_chng_pswd_auth_crap_done,
     133             :                                 req);
     134           2 :         return req;
     135             : }
     136             : 
     137           2 : static void winbindd_pam_chng_pswd_auth_crap_done(struct tevent_req *subreq)
     138             : {
     139           2 :         struct tevent_req *req = tevent_req_callback_data(
     140             :                 subreq, struct tevent_req);
     141           2 :         struct winbindd_pam_chng_pswd_auth_crap_state *state = tevent_req_data(
     142             :                 req, struct winbindd_pam_chng_pswd_auth_crap_state);
     143           0 :         NTSTATUS status;
     144             : 
     145           2 :         status = dcerpc_wbint_PamAuthCrapChangePassword_r_recv(subreq, state);
     146           2 :         TALLOC_FREE(subreq);
     147           2 :         if (tevent_req_nterror(req, status)) {
     148           0 :                 return;
     149             :         }
     150             : 
     151           2 :         tevent_req_done(req);
     152             : }
     153             : 
     154           2 : NTSTATUS winbindd_pam_chng_pswd_auth_crap_recv(
     155             :         struct tevent_req *req,
     156             :         struct winbindd_response *response)
     157             : {
     158           2 :         struct winbindd_pam_chng_pswd_auth_crap_state *state = tevent_req_data(
     159             :                 req, struct winbindd_pam_chng_pswd_auth_crap_state);
     160           2 :         NTSTATUS status = NT_STATUS_OK;
     161             : 
     162           2 :         if (tevent_req_is_nterror(req, &status)) {
     163           0 :                 set_auth_errors(response, status);
     164           0 :                 return status;
     165             :         }
     166             : 
     167           2 :         response->result = WINBINDD_PENDING;
     168           2 :         set_auth_errors(response, state->r.out.result);
     169             : 
     170           2 :         return NT_STATUS(response->data.auth.nt_status);
     171             : }