913 lines
20 KiB
C++
913 lines
20 KiB
C++
|
//+---------------------------------------------------------------------------
|
||
|
|
//
|
||
|
|
// Microsoft Windows
|
||
|
|
// Copyright (C) Microsoft Corporation, 1992 - 1996.
|
||
|
|
//
|
||
|
|
// File: ldapc.hxx
|
||
|
|
//
|
||
|
|
// Contents:
|
||
|
|
//
|
||
|
|
// History: 06-16-96 yihsins Created.
|
||
|
|
//
|
||
|
|
//----------------------------------------------------------------------------
|
||
|
|
#include "ldapc.hxx"
|
||
|
|
#pragma hdrstop
|
||
|
|
|
||
|
|
CRITICAL_SECTION g_DomainDnsCache;
|
||
|
|
|
||
|
|
#define ENTER_DOMAINDNS_CRITSECT() EnterCriticalSection(&g_DomainDnsCache)
|
||
|
|
#define LEAVE_DOMAINDNS_CRITSECT() LeaveCriticalSection(&g_DomainDnsCache)
|
||
|
|
|
||
|
|
BOOL g_fDllsLoaded = FALSE;
|
||
|
|
HANDLE g_hDllNetApi32 = NULL;
|
||
|
|
HANDLE g_hDllSecur32 = NULL;
|
||
|
|
|
||
|
|
extern "C" {
|
||
|
|
|
||
|
|
typedef struct _WKSTA_USER_INFO_1A {
|
||
|
|
LPSTR wkui1_username;
|
||
|
|
LPSTR wkui1_logon_domain;
|
||
|
|
LPSTR wkui1_oth_domains;
|
||
|
|
LPSTR wkui1_logon_server;
|
||
|
|
}WKSTA_USER_INFO_1A, *PWKSTA_USER_INFO_1A, *LPWKSTA_USER_INFO_1A;
|
||
|
|
|
||
|
|
|
||
|
|
NET_API_STATUS NET_API_FUNCTION
|
||
|
|
NetWkstaUserGetInfoA (
|
||
|
|
IN LPSTR reserved,
|
||
|
|
IN DWORD level,
|
||
|
|
OUT LPBYTE *bufptr
|
||
|
|
);
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
int
|
||
|
|
AnsiToUnicodeString(
|
||
|
|
LPSTR pAnsi,
|
||
|
|
LPWSTR pUnicode,
|
||
|
|
DWORD StringLength
|
||
|
|
);
|
||
|
|
|
||
|
|
//
|
||
|
|
// Binds to all the dll's that we need to load dynamically.
|
||
|
|
// The list is
|
||
|
|
// netapi32.dll
|
||
|
|
// secur32.dll
|
||
|
|
//
|
||
|
|
// The global flag g_fDllsLoaded is updated appropriately.
|
||
|
|
//
|
||
|
|
void BindToDlls()
|
||
|
|
{
|
||
|
|
if (g_fDllsLoaded) {
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// Use the domaindns critical section to control access.
|
||
|
|
// There is no real need to define another CS for this as this
|
||
|
|
// will utmost be called once.
|
||
|
|
//
|
||
|
|
DWORD dwLastErr = 0;
|
||
|
|
ENTER_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
//
|
||
|
|
// In case someones came in when we were loading the dll's.
|
||
|
|
//
|
||
|
|
if (g_fDllsLoaded) {
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// Load dll's - each load lib could have set an error if it fails.
|
||
|
|
//
|
||
|
|
|
||
|
|
if (!(g_hDllNetApi32 = LoadLibrary(L"NETAPI32.DLL"))) {
|
||
|
|
dwLastErr = GetLastError();
|
||
|
|
}
|
||
|
|
|
||
|
|
g_hDllSecur32 = LoadLibrary(L"SECUR32.DLL");
|
||
|
|
|
||
|
|
//
|
||
|
|
// We need to set this as the last error since one of the
|
||
|
|
// loads failed. This will not work as we add more dll's
|
||
|
|
// but for now should be ok. This may not even be needed
|
||
|
|
// cause finally we are interested in the actual functions
|
||
|
|
// not just the ability to load/unload the dll.
|
||
|
|
//
|
||
|
|
if (dwLastErr) {
|
||
|
|
SetLastError (dwLastErr);
|
||
|
|
}
|
||
|
|
|
||
|
|
g_fDllsLoaded = TRUE;
|
||
|
|
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
return;
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// LoadNetApi32Function
|
||
|
|
//
|
||
|
|
// Args:
|
||
|
|
// Function to load.
|
||
|
|
//
|
||
|
|
// Returns: function pointer if successfully loads the function from
|
||
|
|
// NETAPI32.DLL. Returns NULL otherwise.
|
||
|
|
//
|
||
|
|
//
|
||
|
|
PVOID LoadNetApi32Function(CHAR *function)
|
||
|
|
{
|
||
|
|
if (!g_fDllsLoaded) {
|
||
|
|
BindToDlls();
|
||
|
|
}
|
||
|
|
|
||
|
|
if (g_hDllNetApi32) {
|
||
|
|
return ((PVOID) GetProcAddress((HMODULE)g_hDllNetApi32, function));
|
||
|
|
}
|
||
|
|
|
||
|
|
return NULL;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
//
|
||
|
|
// LoadSecur32Function
|
||
|
|
//
|
||
|
|
// Args:
|
||
|
|
// Function to load.
|
||
|
|
//
|
||
|
|
// Returns: function pointer if successfully loads the function from
|
||
|
|
// secur32.DLL. Returns NULL otherwise.
|
||
|
|
//
|
||
|
|
//
|
||
|
|
PVOID LoadSecur32Function(CHAR *function)
|
||
|
|
{
|
||
|
|
if (!g_fDllsLoaded) {
|
||
|
|
BindToDlls();
|
||
|
|
}
|
||
|
|
|
||
|
|
if (g_hDllSecur32) {
|
||
|
|
return ((PVOID) GetProcAddress((HMODULE)g_hDllSecur32, function));
|
||
|
|
}
|
||
|
|
|
||
|
|
return NULL;
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// Definition for DsGetDcName
|
||
|
|
//
|
||
|
|
typedef DWORD (*PF_DsGetDcName) (
|
||
|
|
IN LPCWSTR ComputerName OPTIONAL,
|
||
|
|
IN LPCWSTR DomainName OPTIONAL,
|
||
|
|
IN GUID *DomainGuid OPTIONAL,
|
||
|
|
IN LPCWSTR SiteName OPTIONAL,
|
||
|
|
IN ULONG Flags,
|
||
|
|
OUT PDOMAIN_CONTROLLER_INFO *DomainControllerInfo
|
||
|
|
);
|
||
|
|
|
||
|
|
//
|
||
|
|
// Definition for LsaConnectUntrusted()
|
||
|
|
//
|
||
|
|
typedef DWORD (*PF_LsaConnectUntrusted) (
|
||
|
|
OUT PHANDLE LsaHandle
|
||
|
|
);
|
||
|
|
|
||
|
|
//
|
||
|
|
// For LsaCallAuthenticationPackage
|
||
|
|
//
|
||
|
|
typedef DWORD (*PF_LsaCallAuthenticationPackage) (
|
||
|
|
IN HANDLE LsaHandle,
|
||
|
|
IN ULONG AuthenticationPackage,
|
||
|
|
IN PVOID ProtocolSubmitBuffer,
|
||
|
|
IN ULONG SubmitBufferLength,
|
||
|
|
OUT PVOID *ProtocolReturnBuffer,
|
||
|
|
OUT PULONG ReturnBufferLength,
|
||
|
|
OUT PNTSTATUS ProtocolStatus
|
||
|
|
);
|
||
|
|
|
||
|
|
//
|
||
|
|
// For LsaDeregisterLogonProcess
|
||
|
|
//
|
||
|
|
typedef DWORD (*PF_LsaDeregisterLogonProcess) (
|
||
|
|
IN HANDLE LsaHandle
|
||
|
|
);
|
||
|
|
|
||
|
|
//
|
||
|
|
// For LsaFreeReturnBuffer
|
||
|
|
//
|
||
|
|
typedef DWORD (*PF_LsaFreeReturnBuffer) (
|
||
|
|
IN PVOID Buffer
|
||
|
|
);
|
||
|
|
|
||
|
|
#ifdef UNICODE
|
||
|
|
#define GETDCNAME_API "DsGetDcNameW"
|
||
|
|
#else
|
||
|
|
#define GETDCNAME_API "DsGetDcNameA"
|
||
|
|
#endif
|
||
|
|
|
||
|
|
//
|
||
|
|
// These are same for all entry points
|
||
|
|
//
|
||
|
|
#define LSACONNECT_UNTRUSTED "LsaConnectUntrusted"
|
||
|
|
#define LSACALL_AUTH_PACAKAGE "LsaCallAuthenticationPackage"
|
||
|
|
#define LSA_DEREG_LOGON_PROC "LsaDeregisterLogonProcess"
|
||
|
|
#define LSAFREE_RET_BUFFER "LsaFreeReturnBuffer"
|
||
|
|
|
||
|
|
|
||
|
|
//
|
||
|
|
// We will always dynamically laod the dsgetdc api so that
|
||
|
|
// we can have single binary for NT4.0 and NT5.0
|
||
|
|
//
|
||
|
|
DWORD
|
||
|
|
DsGetDcNameWrapper(
|
||
|
|
IN LPCWSTR ComputerName OPTIONAL,
|
||
|
|
IN LPCWSTR DomainName OPTIONAL,
|
||
|
|
IN GUID *DomainGuid OPTIONAL,
|
||
|
|
IN LPCWSTR SiteName OPTIONAL,
|
||
|
|
IN ULONG Flags,
|
||
|
|
OUT PDOMAIN_CONTROLLER_INFO *DomainControllerInfo
|
||
|
|
)
|
||
|
|
{
|
||
|
|
static PF_DsGetDcName pfDsGetDcName = NULL ;
|
||
|
|
static BOOL f_LoadAttempted = FALSE;
|
||
|
|
|
||
|
|
//
|
||
|
|
// Load the function if necessary and only once.
|
||
|
|
//
|
||
|
|
if (pfDsGetDcName == NULL && !f_LoadAttempted) {
|
||
|
|
pfDsGetDcName =
|
||
|
|
(PF_DsGetDcName) LoadNetApi32Function(GETDCNAME_API) ;
|
||
|
|
f_LoadAttempted = TRUE;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pfDsGetDcName != NULL) {
|
||
|
|
|
||
|
|
return ((*pfDsGetDcName)(
|
||
|
|
ComputerName,
|
||
|
|
DomainName,
|
||
|
|
DomainGuid,
|
||
|
|
SiteName,
|
||
|
|
Flags,
|
||
|
|
DomainControllerInfo
|
||
|
|
)
|
||
|
|
);
|
||
|
|
} else {
|
||
|
|
//
|
||
|
|
// Could not load library
|
||
|
|
//
|
||
|
|
return (ERROR_GEN_FAILURE);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// Wrapper function for LsaConnectUntrusted.
|
||
|
|
//
|
||
|
|
DWORD
|
||
|
|
LsaConnectUntrustedWrapper(
|
||
|
|
OUT PHANDLE LsaHandle
|
||
|
|
)
|
||
|
|
{
|
||
|
|
static PF_LsaConnectUntrusted pfLsaConnectUntrusted = NULL ;
|
||
|
|
static BOOL f_LoadAttempted = FALSE;
|
||
|
|
|
||
|
|
//
|
||
|
|
// Load the function if necessary and only once.
|
||
|
|
//
|
||
|
|
if (pfLsaConnectUntrusted == NULL && !f_LoadAttempted) {
|
||
|
|
pfLsaConnectUntrusted =
|
||
|
|
(PF_LsaConnectUntrusted) LoadSecur32Function(LSACONNECT_UNTRUSTED);
|
||
|
|
f_LoadAttempted = TRUE;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pfLsaConnectUntrusted != NULL) {
|
||
|
|
|
||
|
|
return ((*pfLsaConnectUntrusted)(
|
||
|
|
LsaHandle
|
||
|
|
)
|
||
|
|
);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
//
|
||
|
|
// Could not load library
|
||
|
|
//
|
||
|
|
return (ERROR_GEN_FAILURE);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
//
|
||
|
|
// Wrapper function for LsaCallAuthenticationPackage.
|
||
|
|
//
|
||
|
|
DWORD
|
||
|
|
LsaCallAuthenticationPackageWrapper(
|
||
|
|
IN HANDLE LsaHandle,
|
||
|
|
IN ULONG AuthenticationPackage,
|
||
|
|
IN PVOID ProtocolSubmitBuffer,
|
||
|
|
IN ULONG SubmitBufferLength,
|
||
|
|
OUT PVOID *ProtocolReturnBuffer,
|
||
|
|
OUT PULONG ReturnBufferLength,
|
||
|
|
OUT PNTSTATUS ProtocolStatus
|
||
|
|
)
|
||
|
|
{
|
||
|
|
static PF_LsaCallAuthenticationPackage pfLsaCallAuthPackage = NULL;
|
||
|
|
static BOOL f_LoadAttempted = FALSE;
|
||
|
|
|
||
|
|
//
|
||
|
|
// Load the function if necessary and only once.
|
||
|
|
//
|
||
|
|
if (pfLsaCallAuthPackage == NULL && !f_LoadAttempted) {
|
||
|
|
pfLsaCallAuthPackage =
|
||
|
|
(PF_LsaCallAuthenticationPackage) LoadSecur32Function(
|
||
|
|
LSACALL_AUTH_PACAKAGE
|
||
|
|
);
|
||
|
|
f_LoadAttempted = TRUE;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pfLsaCallAuthPackage != NULL) {
|
||
|
|
|
||
|
|
return ((*pfLsaCallAuthPackage)(
|
||
|
|
LsaHandle,
|
||
|
|
AuthenticationPackage,
|
||
|
|
ProtocolSubmitBuffer,
|
||
|
|
SubmitBufferLength,
|
||
|
|
ProtocolReturnBuffer,
|
||
|
|
ReturnBufferLength,
|
||
|
|
ProtocolStatus
|
||
|
|
)
|
||
|
|
);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
//
|
||
|
|
// Could not load library
|
||
|
|
//
|
||
|
|
return (ERROR_GEN_FAILURE);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
//
|
||
|
|
// Wrapper function for LsaDeregisterLogonProcess.
|
||
|
|
//
|
||
|
|
DWORD
|
||
|
|
LsaDeregisterLogonProcessWrapper(
|
||
|
|
IN HANDLE LsaHandle
|
||
|
|
)
|
||
|
|
{
|
||
|
|
static PF_LsaDeregisterLogonProcess pfLsaDerefLgnProc = NULL;
|
||
|
|
static BOOL f_LoadAttempted = FALSE;
|
||
|
|
|
||
|
|
//
|
||
|
|
// Load the function if necessary and only once.
|
||
|
|
//
|
||
|
|
if (pfLsaDerefLgnProc == NULL && !f_LoadAttempted) {
|
||
|
|
pfLsaDerefLgnProc =
|
||
|
|
(PF_LsaDeregisterLogonProcess) LoadSecur32Function(LSA_DEREG_LOGON_PROC);
|
||
|
|
f_LoadAttempted = TRUE;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pfLsaDerefLgnProc != NULL) {
|
||
|
|
|
||
|
|
return ((*pfLsaDerefLgnProc)(
|
||
|
|
LsaHandle
|
||
|
|
)
|
||
|
|
);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
//
|
||
|
|
// Could not load library
|
||
|
|
//
|
||
|
|
return (ERROR_GEN_FAILURE);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// Wrapper function for LsaFreeReturnBuffer.
|
||
|
|
//
|
||
|
|
DWORD
|
||
|
|
LsaFreeReturnBufferWrapper(
|
||
|
|
IN PVOID Buffer
|
||
|
|
)
|
||
|
|
{
|
||
|
|
static PF_LsaFreeReturnBuffer pfLsaFreeRetBuffer = NULL;
|
||
|
|
static BOOL f_LoadAttempted = FALSE;
|
||
|
|
|
||
|
|
//
|
||
|
|
// Load the function if necessary and only once.
|
||
|
|
//
|
||
|
|
if (pfLsaFreeRetBuffer == NULL && !f_LoadAttempted) {
|
||
|
|
pfLsaFreeRetBuffer =
|
||
|
|
(PF_LsaFreeReturnBuffer) LoadSecur32Function(LSAFREE_RET_BUFFER);
|
||
|
|
f_LoadAttempted = TRUE;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pfLsaFreeRetBuffer != NULL) {
|
||
|
|
|
||
|
|
return ((*pfLsaFreeRetBuffer)(
|
||
|
|
Buffer
|
||
|
|
)
|
||
|
|
);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
//
|
||
|
|
// Could not load library
|
||
|
|
//
|
||
|
|
return (ERROR_GEN_FAILURE);
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
HANDLE g_hLsa = INVALID_HANDLE_VALUE;
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
GetUserDomainFlatName(
|
||
|
|
LPWSTR pszUserName,
|
||
|
|
LPWSTR pszDomainFlatName
|
||
|
|
)
|
||
|
|
{
|
||
|
|
|
||
|
|
NTSTATUS dwStatus = NO_ERROR, dwSubStatus = NO_ERROR;
|
||
|
|
|
||
|
|
CHAR pszDomainFlatNameA[MAX_PATH];
|
||
|
|
CHAR pszUserNameA[MAX_PATH];
|
||
|
|
|
||
|
|
PWKSTA_USER_INFO_1 pNetWkstaUserInfo = NULL;
|
||
|
|
|
||
|
|
PWKSTA_USER_INFO_1A pNetWkstaUserInfoA = NULL;
|
||
|
|
|
||
|
|
PWKSTA_INFO_100 pNetWkstaInfo = NULL;
|
||
|
|
|
||
|
|
NEGOTIATE_CALLER_NAME_REQUEST Req;
|
||
|
|
PNEGOTIATE_CALLER_NAME_RESPONSE pResp = NULL;
|
||
|
|
DWORD dwSize = 0;
|
||
|
|
LPWSTR pszTempUserName = NULL;
|
||
|
|
|
||
|
|
PLSA_UNICODE_STRING pLsaStrUserNameTemp = NULL;
|
||
|
|
PLSA_UNICODE_STRING pLsaStrDomainNameTemp = NULL;
|
||
|
|
|
||
|
|
|
||
|
|
#if (defined WIN95)
|
||
|
|
dwStatus = NetWkstaUserGetInfoA(
|
||
|
|
NULL,
|
||
|
|
1,
|
||
|
|
(LPBYTE *)&pNetWkstaUserInfoA
|
||
|
|
);
|
||
|
|
|
||
|
|
if (dwStatus != NO_ERROR && dwStatus != ERROR_NO_SUCH_LOGON_SESSION) {
|
||
|
|
goto error;
|
||
|
|
}
|
||
|
|
|
||
|
|
if (dwStatus == NO_ERROR) {
|
||
|
|
AnsiToUnicodeString(
|
||
|
|
pNetWkstaUserInfoA->wkui1_logon_domain,
|
||
|
|
pszDomainFlatName,
|
||
|
|
0
|
||
|
|
);
|
||
|
|
AnsiToUnicodeString(
|
||
|
|
pNetWkstaUserInfoA->wkui1_username,
|
||
|
|
pszUserName,
|
||
|
|
0
|
||
|
|
);
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
#else
|
||
|
|
|
||
|
|
ENTER_DOMAINDNS_CRITSECT();
|
||
|
|
if (g_hLsa == INVALID_HANDLE_VALUE) {
|
||
|
|
dwStatus = LsaConnectUntrustedWrapper(&g_hLsa);
|
||
|
|
}
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
if (dwStatus == 0) {
|
||
|
|
|
||
|
|
memset(&Req, 0, sizeof(Req));
|
||
|
|
Req.MessageType = NegGetCallerName;
|
||
|
|
|
||
|
|
dwStatus = LsaCallAuthenticationPackageWrapper(
|
||
|
|
g_hLsa,
|
||
|
|
0,
|
||
|
|
&Req,
|
||
|
|
sizeof(Req),
|
||
|
|
(void **)&pResp,
|
||
|
|
&dwSize,
|
||
|
|
&dwSubStatus
|
||
|
|
);
|
||
|
|
|
||
|
|
if ((dwStatus == 0)
|
||
|
|
&& (dwSubStatus == 0)) {
|
||
|
|
|
||
|
|
dwStatus = NO_ERROR;
|
||
|
|
pszTempUserName = wcschr(pResp->CallerName, L'\\');
|
||
|
|
if (!pszTempUserName) {
|
||
|
|
//
|
||
|
|
// Looks like there was no domain default to machine then
|
||
|
|
//
|
||
|
|
dwStatus = ERROR_NO_SUCH_LOGON_SESSION;
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
//
|
||
|
|
// Copy over the relevant information
|
||
|
|
//
|
||
|
|
*pszTempUserName = L'\0';
|
||
|
|
wcscpy(pszDomainFlatName, pResp->CallerName);
|
||
|
|
*pszTempUserName = L'\\';
|
||
|
|
pszTempUserName++;
|
||
|
|
wcscpy(pszUserName, pszTempUserName);
|
||
|
|
LsaFreeReturnBufferWrapper(pResp);
|
||
|
|
}
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
if (!dwStatus)
|
||
|
|
dwStatus = dwSubStatus;
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if (dwStatus != NO_ERROR) {
|
||
|
|
//
|
||
|
|
// Call LsaGetUserName when there is a failure with the above.
|
||
|
|
//
|
||
|
|
dwStatus = LsaGetUserName(
|
||
|
|
&pLsaStrUserNameTemp,
|
||
|
|
&pLsaStrDomainNameTemp
|
||
|
|
);
|
||
|
|
|
||
|
|
if (dwStatus == NO_ERROR) {
|
||
|
|
//
|
||
|
|
// Unicode string may not be NULL terminated.
|
||
|
|
//
|
||
|
|
memcpy(
|
||
|
|
pszDomainFlatName,
|
||
|
|
pLsaStrDomainNameTemp->Buffer,
|
||
|
|
pLsaStrDomainNameTemp->Length
|
||
|
|
);
|
||
|
|
pszDomainFlatName[pLsaStrDomainNameTemp->Length / sizeof(WCHAR)]
|
||
|
|
= L'\0';
|
||
|
|
|
||
|
|
memcpy(
|
||
|
|
pszUserName,
|
||
|
|
pLsaStrUserNameTemp->Buffer,
|
||
|
|
pLsaStrUserNameTemp->Length
|
||
|
|
);
|
||
|
|
pszUserName[pLsaStrUserNameTemp->Length / sizeof(WCHAR)] = L'\0';
|
||
|
|
|
||
|
|
//
|
||
|
|
// Can cleanup the LsaGetUserName mem
|
||
|
|
//
|
||
|
|
LsaFreeMemory(pLsaStrUserNameTemp->Buffer);
|
||
|
|
LsaFreeMemory(pLsaStrUserNameTemp);
|
||
|
|
LsaFreeMemory(pLsaStrDomainNameTemp->Buffer);
|
||
|
|
LsaFreeMemory(pLsaStrDomainNameTemp);
|
||
|
|
}
|
||
|
|
else if (dwStatus != ERROR_NO_SUCH_LOGON_SESSION){
|
||
|
|
goto error;
|
||
|
|
}
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// Make sure this is not NT AUTHORITY
|
||
|
|
//
|
||
|
|
if (dwStatus == NO_ERROR
|
||
|
|
&& !_wcsicmp(g_szNT_Authority, pszDomainFlatName)
|
||
|
|
)
|
||
|
|
{
|
||
|
|
//
|
||
|
|
// Force fallback to NetWkstaGetInfo as we want machine domain
|
||
|
|
//
|
||
|
|
dwStatus = ERROR_NO_SUCH_LOGON_SESSION;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
if (dwStatus == NO_ERROR) {
|
||
|
|
|
||
|
|
//
|
||
|
|
// Do nothing here, we need the else clause already have data.
|
||
|
|
//
|
||
|
|
}
|
||
|
|
|
||
|
|
#endif
|
||
|
|
|
||
|
|
else {
|
||
|
|
|
||
|
|
|
||
|
|
dwStatus = NetWkstaGetInfo(
|
||
|
|
NULL,
|
||
|
|
100,
|
||
|
|
(LPBYTE *)&pNetWkstaInfo
|
||
|
|
);
|
||
|
|
if (dwStatus) {
|
||
|
|
goto error;
|
||
|
|
}
|
||
|
|
|
||
|
|
wcscpy(pszDomainFlatName, pNetWkstaInfo->wki100_langroup);
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
error:
|
||
|
|
|
||
|
|
|
||
|
|
if (pNetWkstaUserInfoA) {
|
||
|
|
|
||
|
|
NetApiBufferFree(pNetWkstaUserInfoA);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pNetWkstaUserInfo) {
|
||
|
|
|
||
|
|
NetApiBufferFree(pNetWkstaUserInfo);
|
||
|
|
}
|
||
|
|
|
||
|
|
if (pNetWkstaInfo) {
|
||
|
|
|
||
|
|
NetApiBufferFree(pNetWkstaInfo);
|
||
|
|
}
|
||
|
|
|
||
|
|
return(dwStatus);
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
GetDomainDNSNameForDomain(
|
||
|
|
LPWSTR pszDomainFlatName,
|
||
|
|
BOOL fVerify,
|
||
|
|
BOOL fWriteable,
|
||
|
|
LPWSTR pszServerName,
|
||
|
|
LPWSTR pszDomainDNSName
|
||
|
|
)
|
||
|
|
{
|
||
|
|
PDOMAIN_CONTROLLER_INFO pDomainControllerInfo = NULL;
|
||
|
|
DWORD dwStatus = 0;
|
||
|
|
DWORD Flags = DS_DIRECTORY_SERVICE_REQUIRED | DS_RETURN_DNS_NAME;
|
||
|
|
|
||
|
|
if (fVerify)
|
||
|
|
Flags |= DS_FORCE_REDISCOVERY ;
|
||
|
|
|
||
|
|
if (fWriteable)
|
||
|
|
Flags |= DS_WRITABLE_REQUIRED ;
|
||
|
|
|
||
|
|
dwStatus = DsGetDcNameWrapper(
|
||
|
|
NULL,
|
||
|
|
pszDomainFlatName,
|
||
|
|
NULL,
|
||
|
|
NULL,
|
||
|
|
Flags,
|
||
|
|
&pDomainControllerInfo
|
||
|
|
) ;
|
||
|
|
|
||
|
|
if (dwStatus == NO_ERROR) {
|
||
|
|
|
||
|
|
wcscpy(pszServerName,pDomainControllerInfo->DomainControllerName+2);
|
||
|
|
|
||
|
|
wcscpy(pszDomainDNSName,pDomainControllerInfo->DomainName);
|
||
|
|
|
||
|
|
(void) NetApiBufferFree(pDomainControllerInfo) ;
|
||
|
|
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
return(dwStatus);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
typedef struct _domaindnslist {
|
||
|
|
LPWSTR pszUserName;
|
||
|
|
LPWSTR pszUserDomainName;
|
||
|
|
LPWSTR pszDomainDns;
|
||
|
|
LPWSTR pszServer;
|
||
|
|
struct _domaindnslist *pNext;
|
||
|
|
} DOMAINDNSLIST, *PDOMAINDNSLIST;
|
||
|
|
|
||
|
|
PDOMAINDNSLIST gpDomainDnsList = NULL;
|
||
|
|
|
||
|
|
BOOL
|
||
|
|
EquivalentDomains(
|
||
|
|
PDOMAINDNSLIST pTemp,
|
||
|
|
LPWSTR pszUserDomainName
|
||
|
|
);
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
GetDefaultDomainName(
|
||
|
|
LPWSTR szDomainDnsName,
|
||
|
|
LPWSTR szServerName,
|
||
|
|
BOOL fWriteable,
|
||
|
|
BOOL fVerify
|
||
|
|
)
|
||
|
|
{
|
||
|
|
|
||
|
|
DWORD dwStatus = 0;
|
||
|
|
WCHAR szUserDomainName[MAX_PATH];
|
||
|
|
WCHAR szUserName[MAX_PATH];
|
||
|
|
|
||
|
|
PDOMAINDNSLIST pTemp = NULL;
|
||
|
|
PDOMAINDNSLIST pNewNode = NULL;
|
||
|
|
|
||
|
|
|
||
|
|
dwStatus = GetUserDomainFlatName(
|
||
|
|
szUserName,
|
||
|
|
szUserDomainName
|
||
|
|
);
|
||
|
|
if (dwStatus) {
|
||
|
|
goto error;
|
||
|
|
}
|
||
|
|
|
||
|
|
// We want do a DsGetDc if the fVerify flags is specified
|
||
|
|
// so we do not want to look at our list if that is the case.
|
||
|
|
|
||
|
|
if (!fVerify) {
|
||
|
|
|
||
|
|
ENTER_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
pTemp = gpDomainDnsList;
|
||
|
|
|
||
|
|
while (pTemp) {
|
||
|
|
|
||
|
|
if (EquivalentDomains(pTemp, szUserDomainName)){
|
||
|
|
|
||
|
|
wcscpy(szDomainDnsName,pTemp->pszDomainDns);
|
||
|
|
wcscpy(szServerName,pTemp->pszServer);
|
||
|
|
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
return(NO_ERROR);
|
||
|
|
}
|
||
|
|
|
||
|
|
pTemp = pTemp->pNext;
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
}
|
||
|
|
|
||
|
|
// We will hit this block if either fVerify == TRUE or if
|
||
|
|
// we did not find a match in our list above.
|
||
|
|
|
||
|
|
dwStatus = GetDomainDNSNameForDomain(
|
||
|
|
szUserDomainName,
|
||
|
|
fVerify,
|
||
|
|
fWriteable,
|
||
|
|
szServerName,
|
||
|
|
szDomainDnsName
|
||
|
|
);
|
||
|
|
if (dwStatus) {
|
||
|
|
goto error;
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
ENTER_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
pTemp = gpDomainDnsList;
|
||
|
|
|
||
|
|
while (pTemp) {
|
||
|
|
|
||
|
|
if (EquivalentDomains(pTemp, szUserDomainName)) {
|
||
|
|
//
|
||
|
|
// Found a match -looks like someone has come in before us
|
||
|
|
//
|
||
|
|
|
||
|
|
wcscpy(szDomainDnsName, pTemp->pszDomainDns);
|
||
|
|
wcscpy(szServerName,pTemp->pszServer);
|
||
|
|
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
return(NO_ERROR);
|
||
|
|
}
|
||
|
|
|
||
|
|
pTemp = pTemp->pNext;
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
pNewNode = (PDOMAINDNSLIST)AllocADsMem(sizeof(DOMAINDNSLIST));
|
||
|
|
|
||
|
|
if (!pNewNode) {
|
||
|
|
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
return(dwStatus = (DWORD) E_OUTOFMEMORY);
|
||
|
|
}
|
||
|
|
|
||
|
|
pNewNode->pNext = gpDomainDnsList;
|
||
|
|
|
||
|
|
|
||
|
|
pNewNode->pszUserName = AllocADsStr(szUserName);
|
||
|
|
pNewNode->pszUserDomainName = AllocADsStr(szUserDomainName);
|
||
|
|
pNewNode->pszDomainDns = AllocADsStr(szDomainDnsName);
|
||
|
|
pNewNode->pszServer = AllocADsStr(szServerName);
|
||
|
|
|
||
|
|
gpDomainDnsList = pNewNode;
|
||
|
|
|
||
|
|
LEAVE_DOMAINDNS_CRITSECT();
|
||
|
|
|
||
|
|
|
||
|
|
error:
|
||
|
|
|
||
|
|
return(dwStatus);
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
GetGCDomainName(
|
||
|
|
LPWSTR pszDomainDNSName,
|
||
|
|
LPWSTR pszServerName
|
||
|
|
)
|
||
|
|
{
|
||
|
|
PDOMAIN_CONTROLLER_INFO pDomainControllerInfo = NULL;
|
||
|
|
DWORD dwStatus = 0;
|
||
|
|
DWORD Flags = DS_GC_SERVER_REQUIRED | DS_RETURN_DNS_NAME;
|
||
|
|
|
||
|
|
/*
|
||
|
|
Flags |= DS_FORCE_REDISCOVERY ;
|
||
|
|
Flags |= DS_WRITABLE_REQUIRED ;
|
||
|
|
*/
|
||
|
|
|
||
|
|
dwStatus = DsGetDcNameWrapper(
|
||
|
|
NULL,
|
||
|
|
NULL,
|
||
|
|
NULL,
|
||
|
|
NULL,
|
||
|
|
Flags,
|
||
|
|
&pDomainControllerInfo
|
||
|
|
) ;
|
||
|
|
|
||
|
|
if (dwStatus == NO_ERROR) {
|
||
|
|
|
||
|
|
wcscpy(pszServerName,pDomainControllerInfo->DomainControllerName+2);
|
||
|
|
|
||
|
|
wcscpy(pszDomainDNSName,pDomainControllerInfo->DnsForestName);
|
||
|
|
|
||
|
|
(void) NetApiBufferFree(pDomainControllerInfo) ;
|
||
|
|
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
return(dwStatus);
|
||
|
|
}
|
||
|
|
|
||
|
|
DWORD
|
||
|
|
GetDefaultServer(
|
||
|
|
DWORD dwPort,
|
||
|
|
BOOL fVerify,
|
||
|
|
LPWSTR szDomainDnsName,
|
||
|
|
LPWSTR szServerName,
|
||
|
|
BOOL fWriteable
|
||
|
|
)
|
||
|
|
{
|
||
|
|
LPWSTR pszAddresses[5];
|
||
|
|
DWORD dwStatus = NO_ERROR;
|
||
|
|
|
||
|
|
if (dwPort == USE_DEFAULT_GC_PORT) {
|
||
|
|
dwStatus = GetGCDomainName(
|
||
|
|
szDomainDnsName,
|
||
|
|
szServerName);
|
||
|
|
}
|
||
|
|
else {
|
||
|
|
dwStatus = GetDefaultDomainName(
|
||
|
|
szDomainDnsName,
|
||
|
|
szServerName,
|
||
|
|
fWriteable,
|
||
|
|
fVerify
|
||
|
|
);
|
||
|
|
}
|
||
|
|
|
||
|
|
return(dwStatus);
|
||
|
|
|
||
|
|
}
|
||
|
|
|
||
|
|
//
|
||
|
|
// Helper to see if we can use the cache for an domain DNS name
|
||
|
|
// given a domain flat name.
|
||
|
|
//
|
||
|
|
BOOL
|
||
|
|
EquivalentDomains(
|
||
|
|
PDOMAINDNSLIST pTemp,
|
||
|
|
LPWSTR pszUserDomainName
|
||
|
|
)
|
||
|
|
{
|
||
|
|
|
||
|
|
if (!pszUserDomainName || !*pszUserDomainName) {
|
||
|
|
return(FALSE);
|
||
|
|
}
|
||
|
|
|
||
|
|
#ifdef WIN95
|
||
|
|
if (!_wcsicmp(pszUserDomainName, pTemp->pszUserDomainName)) {
|
||
|
|
#else
|
||
|
|
if (CompareStringW(
|
||
|
|
LOCALE_SYSTEM_DEFAULT,
|
||
|
|
NORM_IGNORECASE,
|
||
|
|
pszUserDomainName,
|
||
|
|
-1,
|
||
|
|
pTemp->pszUserDomainName,
|
||
|
|
-1
|
||
|
|
) == CSTR_EQUAL ) {
|
||
|
|
#endif
|
||
|
|
return(TRUE);
|
||
|
|
|
||
|
|
}
|
||
|
|
return(FALSE);
|
||
|
|
}
|