Print this page
1575 untangle libmlrpc from SMB server
Reviewed by: Matt Barden <matt.barden@nexenta.com>
Reviewed by: Evan Layton <evan.layton@nexenta.com>
Reviewed by: Toomas Soome <tsoome@me.com>
Approved by: Richard Lowe <richlowe@richlowe.net>
NEX-4272 Allow authenticating computer accounts
Reviewed by: Gordon Ross <gwr@nexenta.com>
Reviewed by: Kevin Crowe <kevin.crowe@nexenta.com>
NEX-2225 Unable to join NexentaStor to 2008 AD
| Split |
Close |
| Expand all |
| Collapse all |
--- old/usr/src/uts/common/smbsrv/netrauth.h
+++ new/usr/src/uts/common/smbsrv/netrauth.h
1 1 /*
2 2 * CDDL HEADER START
3 3 *
4 4 * The contents of this file are subject to the terms of the
5 5 * Common Development and Distribution License (the "License").
6 6 * You may not use this file except in compliance with the License.
7 7 *
8 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 9 * or http://www.opensolaris.org/os/licensing.
10 10 * See the License for the specific language governing permissions
11 11 * and limitations under the License.
12 12 *
13 13 * When distributing Covered Code, include this CDDL HEADER in each
14 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 15 * If applicable, add the following below this CDDL HEADER, with the
16 16 * fields enclosed by brackets "[]" replaced with your own identifying
17 17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 18 *
19 19 * CDDL HEADER END
20 20 */
21 21 /*
22 22 * Copyright 2010 Sun Microsystems, Inc. All rights reserved.
23 23 * Use is subject to license terms.
24 24 *
25 25 * Copyright 2015 Nexenta Systems, Inc. All rights reserved.
|
↓ open down ↓ |
25 lines elided |
↑ open up ↑ |
26 26 */
27 27
28 28 #ifndef _SMBSRV_NETRAUTH_H
29 29 #define _SMBSRV_NETRAUTH_H
30 30
31 31 /*
32 32 * NETR remote authentication and logon services.
33 33 */
34 34
35 35 #include <sys/types.h>
36 -#include <smbsrv/wintypes.h>
36 +#include <smb/wintypes.h>
37 37 #include <smbsrv/netbios.h>
38 38 #include <smbsrv/smbinfo.h>
39 39 #include <netdb.h>
40 40
41 41 #ifdef __cplusplus
42 42 extern "C" {
43 43 #endif
44 44
45 45 /*
46 46 * See also netlogon.ndl.
47 47 */
48 48 #define NETR_WKSTA_TRUST_ACCOUNT_TYPE 0x02
49 49 #define NETR_DOMAIN_TRUST_ACCOUNT_TYPE 0x04
50 50
51 51 /*
52 52 * Negotiation flags for challenge/response authentication.
53 53 */
54 54 #define NETR_NEGOTIATE_BASE_FLAGS 0x000001FF
55 55 #define NETR_NEGOTIATE_STRONGKEY_FLAG 0x00004000
56 56
57 57 #define NETR_SESSKEY64_SZ 8
58 58 #define NETR_SESSKEY128_SZ 16
59 59 #define NETR_SESSKEY_MAXSZ NETR_SESSKEY128_SZ
60 60 #define NETR_CRED_DATA_SZ 8
61 61 #define NETR_OWF_PASSWORD_SZ 16
62 62
63 63 /*
64 64 * SAM logon levels: interactive and network.
65 65 */
66 66 #define NETR_INTERACTIVE_LOGON 0x01
67 67 #define NETR_NETWORK_LOGON 0x02
68 68
69 69 /*
70 70 * SAM logon validation levels.
71 71 */
72 72 #define NETR_VALIDATION_LEVEL3 0x03
73 73
74 74 /*
75 75 * Most of these are from: "MSV1_0_LM20_LOGON structure"
76 76 * http://msdn.microsoft.com/en-us/library/windows/desktop/aa378762
77 77 * and a few are from the ntddk (ntmsv1_0.h) found many places.
78 78 */
79 79 #define MSV1_0_CLEARTEXT_PASSWORD_ALLOWED 0x00000002
80 80 #define MSV1_0_UPDATE_LOGON_STATISTICS 0x00000004
81 81 #define MSV1_0_RETURN_USER_PARAMETERS 0x00000008
82 82 #define MSV1_0_DONT_TRY_GUEST_ACCOUNT 0x00000010
83 83 #define MSV1_0_ALLOW_SERVER_TRUST_ACCOUNT 0x00000020
84 84 #define MSV1_0_RETURN_PASSWORD_EXPIRY 0x00000040
85 85 /*
86 86 * MSV1_0_USE_CLIENT_CHALLENGE means the LM response field contains the
87 87 * "client challenge" in the first 8 bytes instead of the LM response.
88 88 */
89 89 #define MSV1_0_USE_CLIENT_CHALLENGE 0x00000080
90 90 #define MSV1_0_TRY_GUEST_ACCOUNT_ONLY 0x00000100
91 91 #define MSV1_0_RETURN_PROFILE_PATH 0x00000200
92 92 #define MSV1_0_TRY_SPECIFIED_DOMAIN_ONLY 0x00000400
93 93 #define MSV1_0_ALLOW_WORKSTATION_TRUST_ACCOUNT 0x00000800
94 94 #define MSV1_0_DISABLE_PERSONAL_FALLBACK 0x00001000
95 95 #define MSV1_0_ALLOW_FORCE_GUEST 0x00002000
96 96 #define MSV1_0_CLEARTEXT_PASSWORD_SUPPLIED 0x00004000
97 97 #define MSV1_0_USE_DOMAIN_FOR_ROUTING_ONLY 0x00008000
98 98 #define MSV1_0_SUBAUTHENTICATION_DLL_EX 0x00100000
99 99
100 100 /*
101 101 * This is a duplicate of the netr_credential
102 102 * from netlogon.ndl.
103 103 */
104 104 typedef struct netr_cred {
105 105 BYTE data[NETR_CRED_DATA_SZ];
106 106 } netr_cred_t;
107 107
108 108 typedef struct netr_session_key {
109 109 BYTE key[NETR_SESSKEY_MAXSZ];
110 110 short len;
111 111 } netr_session_key_t;
112 112
113 113 #define NETR_FLG_NULL 0x00000001
114 114 #define NETR_FLG_VALID 0x00000001
115 115 #define NETR_FLG_INIT 0x00000002
116 116
117 117 /*
118 118 * 120-byte machine account password (null-terminated)
119 119 */
120 120 #define NETR_MACHINE_ACCT_PASSWD_MAX 120 + 1
121 121
122 122 typedef struct netr_info {
123 123 DWORD flags;
124 124 char server[MAXHOSTNAMELEN]; /* Current DC, FQDN */
125 125 char hostname[NETBIOS_NAME_SZ * 2]; /* local "flat" name */
126 126 netr_cred_t client_challenge;
127 127 netr_cred_t server_challenge;
128 128 netr_cred_t client_credential;
129 129 netr_cred_t server_credential;
130 130 netr_session_key_t session_key;
131 131 BYTE password[NETR_MACHINE_ACCT_PASSWD_MAX];
132 132 time_t timestamp;
133 133 } netr_info_t;
134 134
135 135 /*
136 136 * NETLOGON private interface.
137 137 */
138 138 int netr_gen_skey64(netr_info_t *);
139 139 int netr_gen_skey128(netr_info_t *);
140 140
141 141 int netr_gen_credentials(BYTE *, netr_cred_t *, DWORD, netr_cred_t *);
142 142
143 143
144 144 #define NETR_A2H(c) (isdigit(c)) ? ((c) - '0') : ((c) - 'A' + 10)
145 145
146 146 #ifdef __cplusplus
147 147 }
148 148 #endif
149 149
150 150 #endif /* _SMBSRV_NETRAUTH_H */
|
↓ open down ↓ |
104 lines elided |
↑ open up ↑ |
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX