389 lines
18 KiB
C++
389 lines
18 KiB
C++
|
//#pragma title ("SidCache.hpp -- Cache, Tree of SIDs")
|
||
|
|
/*
|
||
|
|
Copyright (c) 1995-1998, Mission Critical Software, Inc. All rights reserved.
|
||
|
|
===============================================================================
|
||
|
|
Module - sidcache.hpp
|
||
|
|
System - SDResolve
|
||
|
|
Author - Christy Boles
|
||
|
|
Created - 97/06/27
|
||
|
|
Description - Cache of SIDs. Implemented using TNode derived classes, Cache is
|
||
|
|
organized as a tree, sorted by Domain B RID. Each node contains
|
||
|
|
Domain A RID, Domain B RID, Account Name, and counters for stats.
|
||
|
|
Updates -
|
||
|
|
===============================================================================
|
||
|
|
*/
|
||
|
|
#ifndef TSIDCACHE_HEADER
|
||
|
|
#define TSIDCACHE_HEADER
|
||
|
|
|
||
|
|
#ifndef TNODEINCLUDED
|
||
|
|
#include "Tnode.hpp"
|
||
|
|
#define TNODEINCLUDED
|
||
|
|
#endif
|
||
|
|
|
||
|
|
//#import "\bin\McsVarSetMin.tlb" no_namespace
|
||
|
|
//#import "VarSet.tlb" no_namespace rename("property", "aproperty")//#imported below via sdstat.hpp
|
||
|
|
|
||
|
|
#include "DCTStat.h"
|
||
|
|
#include "WorkObj.h"
|
||
|
|
#include "sdstat.hpp"
|
||
|
|
|
||
|
|
#ifndef IStatusObjPtr
|
||
|
|
_COM_SMARTPTR_TYPEDEF(IStatusObj, __uuidof(IStatusObj));
|
||
|
|
#endif
|
||
|
|
|
||
|
|
//#define ACCOUNT_NAME_LENGTH 256
|
||
|
|
#define NUM_IN_BUF 5000 /* the number of accounts to get at one time NetQueryDisplayInfo()*/
|
||
|
|
#define BUFSIZE 100000 /* preferred max size of buffer for receiving accounts NetQueryDisplayInfo()*/
|
||
|
|
#define DEFAULT_SID_SIZE 500
|
||
|
|
|
||
|
|
|
||
|
|
#define EALB_OCX_LOCAL_USER 13
|
||
|
|
#define EALB_OCX_GLOBAL_USER 14
|
||
|
|
#define EALB_OCX_LOCAL_GROUP 16
|
||
|
|
#define EALB_OCX_GLOBAL_GROUP 17
|
||
|
|
|
||
|
|
|
||
|
|
|
||
|
|
#define FST_CACHE_SOME_SOURCE 1
|
||
|
|
#define FST_CACHE_NO_TARGET 2
|
||
|
|
#define FST_CACHE_SOME_TARGET 4
|
||
|
|
#define FST_CACHE_NO_DOMAIN 8
|
||
|
|
|
||
|
|
class TAcctNode:public TNode
|
||
|
|
{
|
||
|
|
|
||
|
|
protected:
|
||
|
|
DWORD owner_changes; // Stats for each node
|
||
|
|
DWORD group_changes;
|
||
|
|
DWORD ace_changes;
|
||
|
|
DWORD sace_changes;
|
||
|
|
|
||
|
|
public:
|
||
|
|
TAcctNode();
|
||
|
|
virtual WCHAR * GetAcctName() = 0;
|
||
|
|
virtual bool IsValidOnTgt() const = 0;
|
||
|
|
|
||
|
|
virtual void AddOwnerChange(objectType type) { owner_changes++; } // Stats functions
|
||
|
|
virtual void AddGroupChange(objectType type) { group_changes++; }
|
||
|
|
virtual void AddAceChange(objectType type) { ace_changes++; }
|
||
|
|
virtual void AddSaceChange(objectType type) { sace_changes++; }
|
||
|
|
virtual void DisplayStats() const;
|
||
|
|
DWORD OwnerChanges() { return owner_changes; }
|
||
|
|
DWORD GroupChanges() { return group_changes; }
|
||
|
|
DWORD DACEChanges() { return ace_changes; }
|
||
|
|
DWORD SACEChanges() { return sace_changes; }
|
||
|
|
BOOL ReportToVarSet(IVarSet * pVarSet, DWORD n);
|
||
|
|
};
|
||
|
|
class TRidNode:public TAcctNode
|
||
|
|
{
|
||
|
|
protected:
|
||
|
|
DWORD srcRid; // RID for domain A
|
||
|
|
DWORD tgtRid; // RID for domain B
|
||
|
|
bool tgtRidIsValid;
|
||
|
|
short acct_type;
|
||
|
|
int acct_len; // length of account name
|
||
|
|
WCHAR srcDomSid[MAX_PATH]; // source domain sid
|
||
|
|
WCHAR tgtDomSid[MAX_PATH]; // target domain sid
|
||
|
|
WCHAR srcDomName[MAX_PATH]; // source domain name
|
||
|
|
WCHAR tgtDomName[MAX_PATH]; // target domain name
|
||
|
|
WCHAR acct_name[1]; // source account name \0 target account name
|
||
|
|
|
||
|
|
public:
|
||
|
|
void * operator new(size_t sz,const LPWSTR name1,const LPWSTR name2);
|
||
|
|
TRidNode(const LPWSTR oldacctname, const LPWSTR newacctname);
|
||
|
|
~TRidNode();
|
||
|
|
WCHAR * GetAcctName() { return acct_name; } // member "Get" functions
|
||
|
|
WCHAR * GetTargetAcctName() { return acct_name + acct_len + 1; }
|
||
|
|
DWORD SrcRid() const { return srcRid; }
|
||
|
|
DWORD TgtRid() const { return tgtRid; }
|
||
|
|
bool IsValidOnTgt() const { return tgtRidIsValid; }
|
||
|
|
short Type() { return acct_type; }
|
||
|
|
void Type(short newtype) { acct_type = newtype; }
|
||
|
|
void MarkInvalidOnTgt() { tgtRidIsValid = false; }
|
||
|
|
void SrcRid(DWORD const val) { srcRid=val; } // member "Set" functions
|
||
|
|
void TgtRid(DWORD const val) { tgtRid=val; tgtRidIsValid=true;}
|
||
|
|
void DisplayStats() const;
|
||
|
|
void DisplaySidInfo() const;
|
||
|
|
WCHAR * GetSrcDomSid() { return srcDomSid; } // member "Get" function
|
||
|
|
WCHAR * GetTgtDomSid() { return tgtDomSid; } // member "Get" function
|
||
|
|
void SrcDomSid(const LPWSTR sSid) { wcscpy(srcDomSid,sSid); } // member "Set" function
|
||
|
|
void TgtDomSid(const LPWSTR sSid) { wcscpy(tgtDomSid,sSid); } // member "Set" function
|
||
|
|
WCHAR * GetSrcDomName() { return srcDomName; } // member "Get" function
|
||
|
|
WCHAR * GetTgtDomName() { return tgtDomName; } // member "Get" function
|
||
|
|
void SrcDomName(const LPWSTR sName) { wcscpy(srcDomName,sName); } // member "Set" function
|
||
|
|
void TgtDomName(const LPWSTR sName) { wcscpy(tgtDomName,sName); } // member "Set" function
|
||
|
|
|
||
|
|
protected:
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
class TGeneralSidNode:public TAcctNode
|
||
|
|
{
|
||
|
|
protected:
|
||
|
|
LPWSTR src_acct_name;
|
||
|
|
LPWSTR tgt_acct_name;
|
||
|
|
PSID src_sid;
|
||
|
|
PSID tgt_sid;
|
||
|
|
UCHAR src_nsubs;
|
||
|
|
UCHAR tgt_nsubs;
|
||
|
|
WCHAR * src_domain;
|
||
|
|
WCHAR * tgt_domain;
|
||
|
|
DWORD sizediff;
|
||
|
|
TSDFileDirCell ownerStats;
|
||
|
|
TSDFileDirCell groupStats;
|
||
|
|
TSDFileDirCell daclStats;
|
||
|
|
TSDFileDirCell saclStats;
|
||
|
|
|
||
|
|
public:
|
||
|
|
TGeneralSidNode(const LPWSTR name1, const LPWSTR name2);
|
||
|
|
TGeneralSidNode(const PSID pSid1, const PSID pSid2);
|
||
|
|
~TGeneralSidNode();
|
||
|
|
LPWSTR GetAcctName() { return src_acct_name; }
|
||
|
|
PSID SrcSid() { return src_sid; }
|
||
|
|
PSID TgtSid() { return src_sid; /* this is a hack to allow for counting all references to accounts */ }
|
||
|
|
|
||
|
|
bool IsValidOnTgt() const { return TRUE;/*tgt_sid != NULL;*/ }
|
||
|
|
void DisplaySidInfo() const;
|
||
|
|
DWORD SizeDiff() const { return 0; }
|
||
|
|
TSDFileDirCell * GetOwnerStats() { return &ownerStats; }
|
||
|
|
TSDFileDirCell * GetGroupStats() { return &groupStats; }
|
||
|
|
TSDFileDirCell * GetDaclStats() { return &daclStats; }
|
||
|
|
TSDFileDirCell * GetSaclStats() { return &saclStats; }
|
||
|
|
virtual void AddOwnerChange(objectType type)
|
||
|
|
{
|
||
|
|
switch (type)
|
||
|
|
{
|
||
|
|
case file: ownerStats.file++; break;
|
||
|
|
case directory: ownerStats.dir++; break;
|
||
|
|
case mailbox: ownerStats.mailbox++; break;
|
||
|
|
case container: ownerStats.container++; break;
|
||
|
|
case share: ownerStats.share++; break;
|
||
|
|
case groupmember: ownerStats.member++; break;
|
||
|
|
case userright: ownerStats.userright++; break;
|
||
|
|
case regkey: ownerStats.regkey++; break;
|
||
|
|
case printer: ownerStats.printer++; break;
|
||
|
|
default:
|
||
|
|
break;
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|
||
|
|
virtual void AddGroupChange(objectType type)
|
||
|
|
{
|
||
|
|
switch (type)
|
||
|
|
{
|
||
|
|
case file: groupStats.file++; break;
|
||
|
|
case directory: groupStats.dir++; break;
|
||
|
|
case mailbox: groupStats.mailbox++; break;
|
||
|
|
case container: groupStats.container++; break;
|
||
|
|
case share: groupStats.share++; break;
|
||
|
|
case groupmember: groupStats.member++; break;
|
||
|
|
case userright: groupStats.userright++; break;
|
||
|
|
case regkey: groupStats.regkey++; break;
|
||
|
|
case printer: groupStats.printer++; break;
|
||
|
|
default:
|
||
|
|
break;
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|
||
|
|
virtual void AddAceChange(objectType type)
|
||
|
|
{
|
||
|
|
switch (type)
|
||
|
|
{
|
||
|
|
case file: daclStats.file++; break;
|
||
|
|
case directory: daclStats.dir++; break;
|
||
|
|
case mailbox: daclStats.mailbox++; break;
|
||
|
|
case container: daclStats.container++; break;
|
||
|
|
case share: daclStats.share++; break;
|
||
|
|
case groupmember: daclStats.member++; break;
|
||
|
|
case userright: daclStats.userright++; break;
|
||
|
|
case regkey: daclStats.regkey++; break;
|
||
|
|
case printer: daclStats.printer++; break;
|
||
|
|
default:
|
||
|
|
break;
|
||
|
|
};
|
||
|
|
}
|
||
|
|
virtual void AddSaceChange(objectType type)
|
||
|
|
{
|
||
|
|
switch (type)
|
||
|
|
{
|
||
|
|
case file: saclStats.file++; break;
|
||
|
|
case directory: saclStats.dir++; break;
|
||
|
|
case mailbox: saclStats.mailbox++; break;
|
||
|
|
case container: saclStats.container++; break;
|
||
|
|
case share: saclStats.share++; break;
|
||
|
|
case groupmember: saclStats.member++; break;
|
||
|
|
case userright: saclStats.userright++; break;
|
||
|
|
case regkey: saclStats.regkey++; break;
|
||
|
|
case printer: saclStats.printer++; break;
|
||
|
|
default:
|
||
|
|
break;
|
||
|
|
};
|
||
|
|
}
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
|
||
|
|
/**************************************************************************************************/
|
||
|
|
/* TSidCache: Cache for SIDs.
|
||
|
|
|
||
|
|
The cache is filled by calling FillCache(name_of_domain_A, name_of_domain_B)
|
||
|
|
|
||
|
|
Lookup, and GetName search the tree for a domain B SID value.
|
||
|
|
Lookup returns a pointer to the node, while GetName returns the account
|
||
|
|
name for the node.
|
||
|
|
|
||
|
|
GetSidB( tsidnode *) builds and returns the domain B SID for the node (the node contains only the RID)
|
||
|
|
|
||
|
|
SizeDiff() returns the answer to "How much bigger are domain B sids than domain A sids?"
|
||
|
|
this information is needed when allocating space for ACES.
|
||
|
|
|
||
|
|
/**************************************************************************************************/
|
||
|
|
|
||
|
|
class TAccountCache: public TNodeListSortable
|
||
|
|
{
|
||
|
|
IStatusObjPtr m_pStatus;
|
||
|
|
public:
|
||
|
|
|
||
|
|
TAccountCache() { m_cancelled = false; m_bAddIfNotFound = FALSE; }
|
||
|
|
~TAccountCache() {}
|
||
|
|
virtual TAcctNode * Lookup(const PSID psid) = 0; // sid lookup functions
|
||
|
|
virtual LPWSTR GetName(const PSID psid) = 0;
|
||
|
|
//virtual BOOL Insert(const LPWSTR acctname,DWORD srcSid, DWORD tgtSid) = 0;
|
||
|
|
virtual PSID GetTgtSid(const TAcctNode* tnode) = 0;
|
||
|
|
virtual DWORD SizeDiff(const TAcctNode *tnode) const = 0; // returns max( 0 , (length(to_sid) - length(from_sid)) )
|
||
|
|
bool IsCancelled()
|
||
|
|
{
|
||
|
|
if ( m_pStatus )
|
||
|
|
{
|
||
|
|
LONG status = 0;
|
||
|
|
// HRESULT hr = m_pStatus->get_Status(&status);
|
||
|
|
m_pStatus->get_Status(&status);
|
||
|
|
|
||
|
|
return (status == DCT_STATUS_ABORTING);
|
||
|
|
}
|
||
|
|
else
|
||
|
|
{
|
||
|
|
return m_cancelled;
|
||
|
|
}
|
||
|
|
}
|
||
|
|
void Cancel() { m_cancelled = true; if ( m_pStatus ) m_pStatus->put_Status(DCT_STATUS_ABORTING); }
|
||
|
|
void UnCancel() { m_cancelled = false; }
|
||
|
|
void AddIfNotFound(BOOL val) { m_bAddIfNotFound = val; }
|
||
|
|
BOOL AddIfNotFound() { return m_bAddIfNotFound; }
|
||
|
|
void SetStatusObject(IStatusObj * pS) { m_pStatus = pS; }
|
||
|
|
protected:
|
||
|
|
bool m_cancelled;
|
||
|
|
BOOL m_bAddIfNotFound;
|
||
|
|
};
|
||
|
|
|
||
|
|
class TGeneralCache;
|
||
|
|
|
||
|
|
class TSDRidCache: public TAccountCache
|
||
|
|
{
|
||
|
|
protected:
|
||
|
|
WCHAR from_domain[MAX_PATH + 1]; // domain names
|
||
|
|
WCHAR to_domain[MAX_PATH + 1];
|
||
|
|
WCHAR from_dc[MAX_PATH + 1]; // domain controller (machine) names
|
||
|
|
WCHAR to_dc[MAX_PATH + 1];
|
||
|
|
PSID from_sid; // domain sids (dynamically allocated)
|
||
|
|
PSID to_sid;
|
||
|
|
UCHAR from_nsubs; // # subauthorities in domain sids
|
||
|
|
UCHAR to_nsubs;
|
||
|
|
DWORD accts; // statistical stuff
|
||
|
|
DWORD accts_resolved;
|
||
|
|
TGeneralCache * m_otherAccounts;
|
||
|
|
|
||
|
|
public:
|
||
|
|
TSDRidCache();
|
||
|
|
~TSDRidCache();
|
||
|
|
// filling methods
|
||
|
|
WCHAR const * GetSourceDomainName() { return from_domain; }
|
||
|
|
WCHAR const * GetTargetDomainName() { return to_domain; }
|
||
|
|
WCHAR const * GetSourceDCName() { return from_dc; }
|
||
|
|
WCHAR const * GetTargetDCName() { return to_dc; }
|
||
|
|
void InsertLast(const LPWSTR acctname,DWORD rida, const LPWSTR newname, DWORD ridb, short type = 0)
|
||
|
|
{ TRidNode * tn = new (acctname,newname) TRidNode(acctname,newname); if (tn){tn->SrcRid(rida); tn->TgtRid(ridb);
|
||
|
|
tn->Type(type); if ( ridb == 0 ) tn->MarkInvalidOnTgt(); else accts_resolved++; accts++; TNodeListSortable::InsertBottom((TNode *)tn); }}
|
||
|
|
void InsertLastWithSid(const LPWSTR acctname, const LPWSTR srcdomainsid, const LPWSTR srcdomainname, DWORD rida, const LPWSTR newname,
|
||
|
|
const LPWSTR tgtdomainsid, const LPWSTR tgtdomainname, DWORD ridb, short type = 0)
|
||
|
|
{ TRidNode * tn = new (acctname,newname) TRidNode(acctname,newname); if (tn){tn->SrcRid(rida); tn->TgtRid(ridb);
|
||
|
|
tn->SrcDomSid(srcdomainsid); tn->TgtDomSid(tgtdomainsid); tn->SrcDomName(srcdomainname); tn->TgtDomName(tgtdomainname);
|
||
|
|
tn->Type(type); if ( ridb == 0 ) tn->MarkInvalidOnTgt(); else accts_resolved++; accts++; TNodeListSortable::InsertBottom((TNode *)tn); }}
|
||
|
|
|
||
|
|
TAcctNode * Lookup(const PSID psid); // sid lookup functions
|
||
|
|
TAcctNode * LookupWODomain(const PSID psid); // sid lookup functions
|
||
|
|
LPWSTR GetName(const PSID psid);
|
||
|
|
|
||
|
|
// helper methods
|
||
|
|
PSID GetTgtSid(TAcctNode const * tnode) ; // "Get" functions
|
||
|
|
DWORD SizeDiff(const TAcctNode *tnode) const ; // returns max( 0 , (length(to_sid) - length(from_sid)) )
|
||
|
|
void Display(bool summary, bool detail);
|
||
|
|
void ReportToVarSet(IVarSet * pVarSet,bool summary, bool detail);
|
||
|
|
PSID GetTgtSid(const PSID psid) { return GetTgtSid(Lookup(psid)); }
|
||
|
|
void CopyDomainInfo( TSDRidCache const * other);
|
||
|
|
PSID GetTgtSidWODomain(TAcctNode const * tnode); // "Get" functions
|
||
|
|
PSID GetTgtSidWODomain(const PSID psid) { return GetTgtSid(LookupWODomain(psid)); } // "Get" functions
|
||
|
|
|
||
|
|
DWORD GetNumAccts() const {return accts; }
|
||
|
|
DWORD GetNumResolvedAccts() const { return accts_resolved; }
|
||
|
|
void Clear();
|
||
|
|
void SetSourceAndTargetDomains(WCHAR const * src, WCHAR const * tgt) { SetDomainInfo(src,true); SetDomainInfo(tgt,false); }
|
||
|
|
void SetSourceAndTargetDomainsWithSids(WCHAR const * src, WCHAR const * srcSid, WCHAR const * tgt,WCHAR const * tgtSid)
|
||
|
|
{ SetDomainInfoWithSid(src,srcSid,true); SetDomainInfoWithSid(tgt,tgtSid,false); }
|
||
|
|
void ReportAccountReferences(WCHAR const * filename);
|
||
|
|
BOOL IsInitialized() { return from_sid!=NULL && to_sid!=NULL; }
|
||
|
|
|
||
|
|
protected:
|
||
|
|
int SetDomainInfo(WCHAR const * domname, bool firstdom);
|
||
|
|
int SetDomainInfoWithSid(WCHAR const * domainName, WCHAR const * domainSid, bool firstdom);
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
class TGeneralCache : public TAccountCache
|
||
|
|
{
|
||
|
|
protected:
|
||
|
|
DWORD accts; // statistical stuff
|
||
|
|
DWORD accts_resolved;
|
||
|
|
public:
|
||
|
|
TGeneralCache();
|
||
|
|
~TGeneralCache();
|
||
|
|
TAcctNode * Lookup(const PSID psid) ; // sid lookup functions
|
||
|
|
LPWSTR GetName(const PSID psid) ;
|
||
|
|
BOOL Insert(const LPWSTR acctname1,const LPWSTR acctname2,PSID sid1, PSID sid2);
|
||
|
|
PSID GetTgtSid(const TAcctNode* tnode) { return ((TGeneralSidNode *)tnode)->TgtSid(); }
|
||
|
|
DWORD SizeDiff(const TAcctNode *tnode) const { return ((TGeneralSidNode *)tnode)->SizeDiff(); } // returns max( 0 , (length(to_sid) - length(from_sid)) )
|
||
|
|
|
||
|
|
};
|
||
|
|
|
||
|
|
// Global Functions
|
||
|
|
struct SDRDomainInfo
|
||
|
|
{
|
||
|
|
bool valid;
|
||
|
|
PSID domain_sid;
|
||
|
|
WCHAR domain_name[80];
|
||
|
|
WCHAR dc_name[80];
|
||
|
|
UCHAR nsubs;
|
||
|
|
};
|
||
|
|
int vRidComp(const TNode * tn, const void * v1);
|
||
|
|
int vNameComp(const TNode * tn, const void * v1);
|
||
|
|
int vTargetNameComp(const TNode * tn, const void * v1);
|
||
|
|
int RidComp(const TNode * n1, const TNode * n2);
|
||
|
|
int CompN(const TNode * n1, const TNode * n2);
|
||
|
|
int CompTargetN(const TNode * n1, const TNode * n2);
|
||
|
|
|
||
|
|
void DisplaySid(const PSID); // displays the contents of a SID
|
||
|
|
void DisplaySid(const PSID,TAccountCache *); // displays the acct name if in cache, or
|
||
|
|
void
|
||
|
|
SetDomainInfoStruct(
|
||
|
|
WCHAR const * domname, // in -name of domain
|
||
|
|
SDRDomainInfo * info // in -struct to put info into
|
||
|
|
);
|
||
|
|
|
||
|
|
void
|
||
|
|
SetDomainInfoStructFromSid(
|
||
|
|
PSID pSid, // in -sid for domain
|
||
|
|
SDRDomainInfo * info // in -struct to put info into
|
||
|
|
);
|
||
|
|
|
||
|
|
PSID DomainizeSid(PSID psid,BOOL freeOldSid);
|
||
|
|
#endif
|