1 /*
   2  * CDDL HEADER START
   3  *
   4  * The contents of this file are subject to the terms of the
   5  * Common Development and Distribution License (the "License").
   6  * You may not use this file except in compliance with the License.
   7  *
   8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
   9  * or http://www.opensolaris.org/os/licensing.
  10  * See the License for the specific language governing permissions
  11  * and limitations under the License.
  12  *
  13  * When distributing Covered Code, include this CDDL HEADER in each
  14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
  15  * If applicable, add the following below this CDDL HEADER, with the
  16  * fields enclosed by brackets "[]" replaced with your own identifying
  17  * information: Portions Copyright [yyyy] [name of copyright owner]
  18  *
  19  * CDDL HEADER END
  20  */
  21 /*
  22  * Copyright (c) 2007, 2010, Oracle and/or its affiliates. All rights reserved.
  23  * Copyright 2019 Nexenta Systems, Inc.  All rights reserved.
  24  */
  25 
  26 #ifndef _LIBMLSVC_H
  27 #define _LIBMLSVC_H
  28 
  29 #include <sys/param.h>
  30 #include <sys/types.h>
  31 #include <sys/uio.h>
  32 #include <sys/ksynch.h>
  33 #include <uuid/uuid.h>
  34 
  35 #include <time.h>
  36 #include <stdio.h>
  37 #include <string.h>
  38 #include <syslog.h>
  39 #include <netdb.h>
  40 #include <libuutil.h>
  41 
  42 #include <smb/wintypes.h>
  43 #include <libmlrpc/libmlrpc.h>
  44 
  45 #include <smbsrv/hash_table.h>
  46 #include <smbsrv/smb_token.h>
  47 #include <smbsrv/smb_privilege.h>
  48 #include <smbsrv/smb_share.h>
  49 #include <smbsrv/smb_xdr.h>
  50 #include <smbsrv/smb_dfs.h>
  51 #include <smbsrv/libsmb.h>
  52 
  53 /*
  54  * XXX: Some temporary left-overs from the old ntstatus.h
  55  * Should eliminate uses of these macros when convenient.
  56  */
  57 /* This used to OR in the severity bits. */
  58 #define NT_SC_ERROR(S)          (S)
  59 /* This used to mask off the severity bits. */
  60 #define NT_SC_VALUE(S)          (S)
  61 /* XXX end of temporary left-overs. */
  62 
  63 #ifdef  __cplusplus
  64 extern "C" {
  65 #endif
  66 
  67 uint32_t lsa_lookup_name(char *, uint16_t, smb_account_t *);
  68 uint32_t lsa_lookup_lname(char *, uint16_t, smb_account_t *);
  69 uint32_t lsa_lookup_sid(smb_sid_t *, smb_account_t *);
  70 uint32_t lsa_lookup_lsid(smb_sid_t *, smb_account_t *);
  71 
  72 /*
  73  * SMB domain API to discover a domain controller and obtain domain
  74  * information.
  75  */
  76 
  77 extern boolean_t smb_locate_dc(char *, smb_domainex_t *);
  78 uint32_t smb_ddiscover_dns(char *, smb_domainex_t *);
  79 extern void smb_ddiscover_bad_dc(char *);
  80 extern void smb_ddiscover_refresh(void);
  81 
  82 extern int dssetup_check_service(void);
  83 extern void dssetup_clear_domain_info(void);
  84 extern void mlsvc_disconnect(const char *);
  85 extern int mlsvc_init(void);
  86 extern void mlsvc_fini(void);
  87 extern DWORD mlsvc_netlogon(char *, char *);
  88 extern void mlsvc_join(smb_joininfo_t *, smb_joinres_t *);
  89 
  90 extern void smb_logon_domain(smb_logon_t *, smb_token_t *);
  91 extern uint32_t smb_decode_krb5_pac(smb_token_t *, char *, uint_t);
  92 extern boolean_t smb_token_setup_common(smb_token_t *);
  93 
  94 
  95 /*
  96  * The maximum number of domains (NT limit).
  97  */
  98 #define MLSVC_DOMAIN_MAX                32
  99 
 100 #define MLSVC_ANON_USER                 "IPC$"
 101 
 102 char *mlsvc_ipc_name(int ipc_type, char *username);
 103 
 104 /*
 105  * Passthrough negotiation and authentication interface.
 106  *
 107  * NT supports two forms of password: a Lanman (case-insensitive)
 108  * password and an NT (case-sensitive) password. If either of the
 109  * passwords is not available its pointer and length should be set
 110  * to zero. The session key and vc number are required to validate
 111  * the encrypted passwords.
 112  */
 113 
 114 void mlsvc_nt_password_hash(char *result, char *password);
 115 int mlsvc_encrypt_nt_password(char *password, char *key, int keylen, char *out,
 116     int outmax);
 117 
 118 #define SMB_AUTOHOME_FILE       "smbautohome"
 119 #define SMB_AUTOHOME_PATH       "/etc"
 120 
 121 typedef struct smb_autohome {
 122         struct smb_autohome *ah_next;
 123         uint32_t ah_hits;
 124         time_t ah_timestamp;
 125         char *ah_name;          /* User account name */
 126         char *ah_path;          /* Home directory path */
 127         char *ah_container;     /* ADS container distinguished name */
 128 } smb_autohome_t;
 129 
 130 extern void smb_autohome_add(const smb_token_t *);
 131 extern void smb_autohome_remove(const char *);
 132 
 133 /*
 134  * A local unique id (LUID) is an opaque id used by servers to identify
 135  * local resources, such as privileges.  A client will use lookup
 136  * functions to translate the LUID to a more general, machine independent
 137  * form; such as a string.
 138  */
 139 typedef struct ms_luid {
 140         uint32_t low_part;
 141         uint32_t high_part;
 142 } ms_luid_t;
 143 
 144 /*
 145  * A client_t is created while binding a client connection to hold the
 146  * context for calls made using that connection.
 147  *
 148  * Handles are RPC call specific and we use an inheritance mechanism to
 149  * ensure that each handle has a pointer to the client_t.  When the top
 150  * level (bind) handle is released, we close the connection.
 151  */
 152 typedef struct mlrpc_handle mlsvc_handle_t;
 153 
 154 /* mlsvc_client.c */
 155 void ndr_rpc_init(void);
 156 void ndr_rpc_fini(void);
 157 uint32_t ndr_rpc_bind(mlsvc_handle_t *, char *, char *, char *, const char *);
 158 void ndr_rpc_unbind(mlsvc_handle_t *);
 159 void ndr_rpc_status(mlsvc_handle_t *, int, uint32_t);
 160 
 161 /* These three get info about the connected client. */
 162 boolean_t ndr_is_admin(ndr_xa_t *);
 163 boolean_t ndr_is_poweruser(ndr_xa_t *);
 164 int32_t ndr_native_os(ndr_xa_t *);
 165 
 166 /* SRVSVC */
 167 int srvsvc_net_remote_tod(char *, char *, struct timeval *, struct tm *);
 168 
 169 /* SVCCTL service */
 170 /*
 171  * Calculate the wide-char equivalent string length required to
 172  * store a string - including the terminating null wide-char.
 173  */
 174 #define SVCCTL_WNSTRLEN(S)      ((strlen((S)) + 1) * sizeof (smb_wchar_t))
 175 
 176 /* An AVL-storable node representing each service in the SCM database. */
 177 typedef struct svcctl_svc_node {
 178         uu_avl_node_t           sn_node;
 179         char                    *sn_name;       /* Service Name (Key) */
 180         char                    *sn_fmri;       /* Display Name (FMRI) */
 181         char                    *sn_desc;       /* Description */
 182         char                    *sn_state;      /* State */
 183 } svcctl_svc_node_t;
 184 
 185 /* This structure provides context for each svcctl_s_OpenManager call. */
 186 typedef struct svcctl_manager_context {
 187         scf_handle_t            *mc_scf_hdl;      /* SCF handle */
 188         scf_propertygroup_t     *mc_scf_gpg;      /* Property group */
 189         scf_property_t          *mc_scf_gprop;    /* Property */
 190         scf_value_t             *mc_scf_gval;     /* Value */
 191         uint32_t                mc_scf_numsvcs;   /* Number of SMF services */
 192         ssize_t                 mc_scf_max_fmri_len;  /* Max FMRI length */
 193         ssize_t                 mc_scf_max_value_len; /* Max Value length */
 194         uint32_t                mc_bytes_needed;  /* Number of bytes needed */
 195         uu_avl_pool_t           *mc_svcs_pool;    /* AVL pool */
 196         uu_avl_t                *mc_svcs;         /* AVL tree of SMF services */
 197 } svcctl_manager_context_t;
 198 
 199 /* This structure provides context for each svcctl_s_OpenService call. */
 200 typedef struct svcctl_service_context {
 201         ndr_hdid_t              *sc_mgrid;      /* Manager ID */
 202         char                    *sc_svcname;    /* Service Name */
 203 } svcctl_service_context_t;
 204 
 205 typedef enum {
 206         SVCCTL_MANAGER_CONTEXT = 0,
 207         SVCCTL_SERVICE_CONTEXT
 208 } svcctl_context_type_t;
 209 
 210 /* This structure provides abstraction for service and manager context call. */
 211 typedef struct svcctl_context {
 212         svcctl_context_type_t   c_type;
 213         union {
 214                 svcctl_manager_context_t *uc_mgr;
 215                 svcctl_service_context_t *uc_svc;
 216                 void *uc_cp;
 217         } c_ctx;
 218 } svcctl_context_t;
 219 
 220 /* Service Control Manager (SCM) functions */
 221 void svcctl_init(void);
 222 void svcctl_fini(void);
 223 int svcctl_scm_init(svcctl_manager_context_t *);
 224 void svcctl_scm_fini(svcctl_manager_context_t *);
 225 int svcctl_scm_scf_handle_init(svcctl_manager_context_t *);
 226 void svcctl_scm_scf_handle_fini(svcctl_manager_context_t *);
 227 int svcctl_scm_refresh(svcctl_manager_context_t *);
 228 uint32_t svcctl_scm_enum_services(svcctl_manager_context_t *, uint8_t *,
 229     size_t, uint32_t *, boolean_t);
 230 uint32_t svcctl_scm_validate_service(svcctl_manager_context_t *, char *);
 231 svcctl_svc_node_t *svcctl_scm_find_service(svcctl_manager_context_t *, char *);
 232 uint32_t svcctl_scm_map_status(const char *);
 233 
 234 /* LOGR service */
 235 #define LOGR_APPLICATION_LOG            "Application"
 236 #define LOGR_SECURITY_LOG               "Security"
 237 #define LOGR_SYSTEM_LOG                 "System"
 238 #define LOGR_NMSGMASK                   1023
 239 #define LOGR_MAXMSGLEN                  800
 240 
 241 typedef struct logr_entry {
 242         struct timeval  le_timestamp;                   /* Time of log entry */
 243         int             le_pri;                         /* Message priority */
 244         char            le_hostname[MAXHOSTNAMELEN];    /* Log hostname */
 245         char            le_msg[LOGR_MAXMSGLEN];         /* Log message text */
 246 } logr_entry_t;
 247 
 248 typedef struct logr_info {
 249         logr_entry_t    li_entry[LOGR_NMSGMASK+1];      /* Array of log entry */
 250         int             li_idx;                         /* Index */
 251 } logr_info_t;
 252 
 253 typedef struct logr_read_data {
 254         int             rd_tot_recnum;          /* Total no. of record read */
 255         int             rd_last_sentrec;        /* Last sentence read */
 256         char            rd_first_read;          /* First sentence read */
 257         logr_info_t     *rd_log;                /* Log information read */
 258 } logr_read_data_t;
 259 
 260 /* This structure provides the context for eventlog calls from clients. */
 261 typedef struct logr_context {
 262         logr_read_data_t *lc_cached_read_data;
 263         char *lc_source_name;
 264 } logr_context_t;
 265 
 266 void logr_init(void);
 267 void logr_fini(void);
 268 boolean_t logr_is_supported(char *);
 269 int logr_get_snapshot(logr_context_t *);
 270 
 271 /* User and Group quotas */
 272 uint32_t smb_quota_query(smb_quota_query_t *, smb_quota_response_t *);
 273 uint32_t smb_quota_set(smb_quota_set_t *);
 274 void smb_quota_free(smb_quota_response_t *);
 275 
 276 uint32_t dfs_get_referrals(const char *, dfs_reftype_t, dfs_info_t *);
 277 void dfs_info_free(dfs_info_t *);
 278 
 279 /*
 280  * The spoolss installable copyfile API.
 281  */
 282 typedef void (*spoolss_copyfile_t)(smb_inaddr_t *, char *, char *, char *);
 283 void spoolss_register_copyfile(spoolss_copyfile_t);
 284 
 285 #ifdef  __cplusplus
 286 }
 287 #endif
 288 
 289 #endif  /* _LIBMLSVC_H */