source: branches/samba-3.3.x/source/rpc_server/srv_samr_util.c@ 221

Last change on this file since 221 was 206, checked in by Herwig Bauernfeind, 17 years ago

Import Samba 3.3 branch at 3.0.0 level (psmedley's port)
File size: 12.1 KB
Line 
1/*
2 Unix SMB/CIFS implementation.
3 SAMR Pipe utility functions.
4
5 Copyright (C) Luke Kenneth Casson Leighton 1996-1998
6 Copyright (C) Gerald (Jerry) Carter 2000-2001
7 Copyright (C) Andrew Bartlett 2001-2002
8 Copyright (C) Stefan (metze) Metzmacher 2002
9 Copyright (C) Guenther Deschner 2008
10
11 This program is free software; you can redistribute it and/or modify
12 it under the terms of the GNU General Public License as published by
13 the Free Software Foundation; either version 3 of the License, or
14 (at your option) any later version.
15
16 This program is distributed in the hope that it will be useful,
17 but WITHOUT ANY WARRANTY; without even the implied warranty of
18 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 GNU General Public License for more details.
20
21 You should have received a copy of the GNU General Public License
22 along with this program. If not, see <http://www.gnu.org/licenses/>.
23*/
24
25#include "includes.h"
26
27#undef DBGC_CLASS
28#define DBGC_CLASS DBGC_RPC_SRV
29
30#define STRING_CHANGED (old_string && !new_string) ||\
31 (!old_string && new_string) ||\
32 (old_string && new_string && (strcmp(old_string, new_string) != 0))
33
34#define STRING_CHANGED_NC(s1,s2) ((s1) && !(s2)) ||\
35 (!(s1) && (s2)) ||\
36 ((s1) && (s2) && (strcmp((s1), (s2)) != 0))
37
38/*************************************************************
39 Copies a struct samr_UserInfo20 to a struct samu
40**************************************************************/
41
42void copy_id20_to_sam_passwd(struct samu *to,
43 struct samr_UserInfo20 *from)
44{
45 const char *old_string;
46 char *new_string;
47 DATA_BLOB mung;
48
49 if (from == NULL || to == NULL) {
50 return;
51 }
52
53 if (from->parameters.array) {
54 old_string = pdb_get_munged_dial(to);
55 mung = data_blob_const(from->parameters.array,
56 from->parameters.length);
57 new_string = (mung.length == 0) ?
58 NULL : base64_encode_data_blob(talloc_tos(), mung);
59 DEBUG(10,("INFO_20 PARAMETERS: %s -> %s\n",
60 old_string, new_string));
61 if (STRING_CHANGED_NC(old_string,new_string)) {
62 pdb_set_munged_dial(to, new_string, PDB_CHANGED);
63 }
64
65 TALLOC_FREE(new_string);
66 }
67}
68
69/*************************************************************
70 Copies a struct samr_UserInfo21 to a struct samu
71**************************************************************/
72
73void copy_id21_to_sam_passwd(const char *log_prefix,
74 struct samu *to,
75 struct samr_UserInfo21 *from)
76{
77 time_t unix_time, stored_time;
78 const char *old_string, *new_string;
79 const char *l;
80
81 if (from == NULL || to == NULL) {
82 return;
83 }
84
85 if (log_prefix) {
86 l = log_prefix;
87 } else {
88 l = "INFO_21";
89 }
90
91 if (from->fields_present & SAMR_FIELD_LAST_LOGON) {
92 unix_time = nt_time_to_unix(from->last_logon);
93 stored_time = pdb_get_logon_time(to);
94 DEBUG(10,("%s SAMR_FIELD_LAST_LOGON: %lu -> %lu\n", l,
95 (long unsigned int)stored_time,
96 (long unsigned int)unix_time));
97 if (stored_time != unix_time) {
98 pdb_set_logon_time(to, unix_time, PDB_CHANGED);
99 }
100 }
101
102 if (from->fields_present & SAMR_FIELD_LAST_LOGOFF) {
103 unix_time = nt_time_to_unix(from->last_logoff);
104 stored_time = pdb_get_logoff_time(to);
105 DEBUG(10,("%s SAMR_FIELD_LAST_LOGOFF: %lu -> %lu\n", l,
106 (long unsigned int)stored_time,
107 (long unsigned int)unix_time));
108 if (stored_time != unix_time) {
109 pdb_set_logoff_time(to, unix_time, PDB_CHANGED);
110 }
111 }
112
113 if (from->fields_present & SAMR_FIELD_ACCT_EXPIRY) {
114 unix_time = nt_time_to_unix(from->acct_expiry);
115 stored_time = pdb_get_kickoff_time(to);
116 DEBUG(10,("%s SAMR_FIELD_ACCT_EXPIRY: %lu -> %lu\n", l,
117 (long unsigned int)stored_time,
118 (long unsigned int)unix_time));
119 if (stored_time != unix_time) {
120 pdb_set_kickoff_time(to, unix_time , PDB_CHANGED);
121 }
122 }
123
124 if (from->fields_present & SAMR_FIELD_LAST_PWD_CHANGE) {
125 unix_time = nt_time_to_unix(from->last_password_change);
126 stored_time = pdb_get_pass_last_set_time(to);
127 DEBUG(10,("%s SAMR_FIELD_LAST_PWD_CHANGE: %lu -> %lu\n", l,
128 (long unsigned int)stored_time,
129 (long unsigned int)unix_time));
130 if (stored_time != unix_time) {
131 pdb_set_pass_last_set_time(to, unix_time, PDB_CHANGED);
132 }
133 }
134
135 if ((from->fields_present & SAMR_FIELD_ACCOUNT_NAME) &&
136 (from->account_name.string)) {
137 old_string = pdb_get_username(to);
138 new_string = from->account_name.string;
139 DEBUG(10,("%s SAMR_FIELD_ACCOUNT_NAME: %s -> %s\n", l,
140 old_string, new_string));
141 if (STRING_CHANGED) {
142 pdb_set_username(to, new_string, PDB_CHANGED);
143 }
144 }
145
146 if ((from->fields_present & SAMR_FIELD_FULL_NAME) &&
147 (from->full_name.string)) {
148 old_string = pdb_get_fullname(to);
149 new_string = from->full_name.string;
150 DEBUG(10,("%s SAMR_FIELD_FULL_NAME: %s -> %s\n", l,
151 old_string, new_string));
152 if (STRING_CHANGED) {
153 pdb_set_fullname(to, new_string, PDB_CHANGED);
154 }
155 }
156
157 if ((from->fields_present & SAMR_FIELD_HOME_DIRECTORY) &&
158 (from->home_directory.string)) {
159 old_string = pdb_get_homedir(to);
160 new_string = from->home_directory.string;
161 DEBUG(10,("%s SAMR_FIELD_HOME_DIRECTORY: %s -> %s\n", l,
162 old_string, new_string));
163 if (STRING_CHANGED) {
164 pdb_set_homedir(to, new_string, PDB_CHANGED);
165 }
166 }
167
168 if ((from->fields_present & SAMR_FIELD_HOME_DRIVE) &&
169 (from->home_drive.string)) {
170 old_string = pdb_get_dir_drive(to);
171 new_string = from->home_drive.string;
172 DEBUG(10,("%s SAMR_FIELD_HOME_DRIVE: %s -> %s\n", l,
173 old_string, new_string));
174 if (STRING_CHANGED) {
175 pdb_set_dir_drive(to, new_string, PDB_CHANGED);
176 }
177 }
178
179 if ((from->fields_present & SAMR_FIELD_LOGON_SCRIPT) &&
180 (from->logon_script.string)) {
181 old_string = pdb_get_logon_script(to);
182 new_string = from->logon_script.string;
183 DEBUG(10,("%s SAMR_FIELD_LOGON_SCRIPT: %s -> %s\n", l,
184 old_string, new_string));
185 if (STRING_CHANGED) {
186 pdb_set_logon_script(to , new_string, PDB_CHANGED);
187 }
188 }
189
190 if ((from->fields_present & SAMR_FIELD_PROFILE_PATH) &&
191 (from->profile_path.string)) {
192 old_string = pdb_get_profile_path(to);
193 new_string = from->profile_path.string;
194 DEBUG(10,("%s SAMR_FIELD_PROFILE_PATH: %s -> %s\n", l,
195 old_string, new_string));
196 if (STRING_CHANGED) {
197 pdb_set_profile_path(to , new_string, PDB_CHANGED);
198 }
199 }
200
201 if ((from->fields_present & SAMR_FIELD_DESCRIPTION) &&
202 (from->description.string)) {
203 old_string = pdb_get_acct_desc(to);
204 new_string = from->description.string;
205 DEBUG(10,("%s SAMR_FIELD_DESCRIPTION: %s -> %s\n", l,
206 old_string, new_string));
207 if (STRING_CHANGED) {
208 pdb_set_acct_desc(to, new_string, PDB_CHANGED);
209 }
210 }
211
212 if ((from->fields_present & SAMR_FIELD_WORKSTATIONS) &&
213 (from->workstations.string)) {
214 old_string = pdb_get_workstations(to);
215 new_string = from->workstations.string;
216 DEBUG(10,("%s SAMR_FIELD_WORKSTATIONS: %s -> %s\n", l,
217 old_string, new_string));
218 if (STRING_CHANGED) {
219 pdb_set_workstations(to , new_string, PDB_CHANGED);
220 }
221 }
222
223 if ((from->fields_present & SAMR_FIELD_COMMENT) &&
224 (from->comment.string)) {
225 old_string = pdb_get_comment(to);
226 new_string = from->comment.string;
227 DEBUG(10,("%s SAMR_FIELD_COMMENT: %s -> %s\n", l,
228 old_string, new_string));
229 if (STRING_CHANGED) {
230 pdb_set_comment(to, new_string, PDB_CHANGED);
231 }
232 }
233
234 if ((from->fields_present & SAMR_FIELD_PARAMETERS) &&
235 (from->parameters.array)) {
236 char *newstr;
237 DATA_BLOB mung;
238 old_string = pdb_get_munged_dial(to);
239
240 mung = data_blob_const(from->parameters.array,
241 from->parameters.length);
242 newstr = (mung.length == 0) ?
243 NULL : base64_encode_data_blob(talloc_tos(), mung);
244 DEBUG(10,("%s SAMR_FIELD_PARAMETERS: %s -> %s\n", l,
245 old_string, newstr));
246 if (STRING_CHANGED_NC(old_string,newstr)) {
247 pdb_set_munged_dial(to, newstr, PDB_CHANGED);
248 }
249
250 TALLOC_FREE(newstr);
251 }
252
253 if (from->fields_present & SAMR_FIELD_RID) {
254 if (from->rid == 0) {
255 DEBUG(10,("%s: Asked to set User RID to 0 !? Skipping change!\n", l));
256 } else if (from->rid != pdb_get_user_rid(to)) {
257 DEBUG(10,("%s SAMR_FIELD_RID: %u -> %u NOT UPDATED!\n", l,
258 pdb_get_user_rid(to), from->rid));
259 }
260 }
261
262 if (from->fields_present & SAMR_FIELD_PRIMARY_GID) {
263 if (from->primary_gid == 0) {
264 DEBUG(10,("%s: Asked to set Group RID to 0 !? Skipping change!\n", l));
265 } else if (from->primary_gid != pdb_get_group_rid(to)) {
266 DEBUG(10,("%s SAMR_FIELD_PRIMARY_GID: %u -> %u\n", l,
267 pdb_get_group_rid(to), from->primary_gid));
268 pdb_set_group_sid_from_rid(to,
269 from->primary_gid, PDB_CHANGED);
270 }
271 }
272
273 if (from->fields_present & SAMR_FIELD_ACCT_FLAGS) {
274 DEBUG(10,("%s SAMR_FIELD_ACCT_FLAGS: %08X -> %08X\n", l,
275 pdb_get_acct_ctrl(to), from->acct_flags));
276 if (from->acct_flags != pdb_get_acct_ctrl(to)) {
277 if (!(from->acct_flags & ACB_AUTOLOCK) &&
278 (pdb_get_acct_ctrl(to) & ACB_AUTOLOCK)) {
279 /* We're unlocking a previously locked user. Reset bad password counts.
280 Patch from Jianliang Lu. <[email protected]> */
281 pdb_set_bad_password_count(to, 0, PDB_CHANGED);
282 pdb_set_bad_password_time(to, 0, PDB_CHANGED);
283 }
284 pdb_set_acct_ctrl(to, from->acct_flags, PDB_CHANGED);
285 }
286 }
287
288 if (from->fields_present & SAMR_FIELD_LOGON_HOURS) {
289 char oldstr[44]; /* hours strings are 42 bytes. */
290 char newstr[44];
291 DEBUG(15,("%s SAMR_FIELD_LOGON_HOURS (units_per_week): %08X -> %08X\n", l,
292 pdb_get_logon_divs(to), from->logon_hours.units_per_week));
293 if (from->logon_hours.units_per_week != pdb_get_logon_divs(to)) {
294 pdb_set_logon_divs(to,
295 from->logon_hours.units_per_week, PDB_CHANGED);
296 }
297
298 DEBUG(15,("%s SAMR_FIELD_LOGON_HOURS (units_per_week/8): %08X -> %08X\n", l,
299 pdb_get_hours_len(to),
300 from->logon_hours.units_per_week/8));
301 if (from->logon_hours.units_per_week/8 != pdb_get_hours_len(to)) {
302 pdb_set_hours_len(to,
303 from->logon_hours.units_per_week/8, PDB_CHANGED);
304 }
305
306 DEBUG(15,("%s SAMR_FIELD_LOGON_HOURS (bits): %s -> %s\n", l,
307 pdb_get_hours(to), from->logon_hours.bits));
308 pdb_sethexhours(oldstr, pdb_get_hours(to));
309 pdb_sethexhours(newstr, from->logon_hours.bits);
310 if (!strequal(oldstr, newstr)) {
311 pdb_set_hours(to, from->logon_hours.bits, PDB_CHANGED);
312 }
313 }
314
315 if (from->fields_present & SAMR_FIELD_BAD_PWD_COUNT) {
316 DEBUG(10,("%s SAMR_FIELD_BAD_PWD_COUNT: %08X -> %08X\n", l,
317 pdb_get_bad_password_count(to), from->bad_password_count));
318 if (from->bad_password_count != pdb_get_bad_password_count(to)) {
319 pdb_set_bad_password_count(to,
320 from->bad_password_count, PDB_CHANGED);
321 }
322 }
323
324 if (from->fields_present & SAMR_FIELD_NUM_LOGONS) {
325 DEBUG(10,("%s SAMR_FIELD_NUM_LOGONS: %08X -> %08X\n", l,
326 pdb_get_logon_count(to), from->logon_count));
327 if (from->logon_count != pdb_get_logon_count(to)) {
328 pdb_set_logon_count(to, from->logon_count, PDB_CHANGED);
329 }
330 }
331
332 /* If the must change flag is set, the last set time goes to zero.
333 the must change and can change fields also do, but they are
334 calculated from policy, not set from the wire */
335
336 if (from->fields_present & SAMR_FIELD_EXPIRED_FLAG) {
337 DEBUG(10,("%s SAMR_FIELD_EXPIRED_FLAG: %02X\n", l,
338 from->password_expired));
339 if (from->password_expired == PASS_MUST_CHANGE_AT_NEXT_LOGON) {
340 pdb_set_pass_last_set_time(to, 0, PDB_CHANGED);
341 } else {
342 /* A subtlety here: some windows commands will
343 clear the expired flag even though it's not
344 set, and we don't want to reset the time
345 in these caess. "net user /dom <user> /active:y"
346 for example, to clear an autolocked acct.
347 We must check to see if it's expired first. jmcd */
348 stored_time = pdb_get_pass_last_set_time(to);
349 if (stored_time == 0)
350 pdb_set_pass_last_set_time(to, time(NULL),PDB_CHANGED);
351 }
352 }
353}
354
355
356/*************************************************************
357 Copies a struct samr_UserInfo23 to a struct samu
358**************************************************************/
359
360void copy_id23_to_sam_passwd(struct samu *to,
361 struct samr_UserInfo23 *from)
362{
363 if (from == NULL || to == NULL) {
364 return;
365 }
366
367 copy_id21_to_sam_passwd("INFO 23", to, &from->info);
368}
369
370/*************************************************************
371 Copies a struct samr_UserInfo25 to a struct samu
372**************************************************************/
373
374void copy_id25_to_sam_passwd(struct samu *to,
375 struct samr_UserInfo25 *from)
376{
377 if (from == NULL || to == NULL) {
378 return;
379 }
380
381 copy_id21_to_sam_passwd("INFO_25", to, &from->info);
382}
Note: See TracBrowser for help on using the repository browser.