415 lines
8.3 KiB
C++
415 lines
8.3 KiB
C++
///////////////////////////////////////////////////////////////////////////////
|
|
//
|
|
// Copyright (c) 1998, Microsoft Corp. All rights reserved.
|
|
//
|
|
// FILE
|
|
//
|
|
// blob.h
|
|
//
|
|
// SYNOPSIS
|
|
//
|
|
// This file declares structs for extracting blobs from IAS_OCTET_STRING's.
|
|
//
|
|
// MODIFICATION HISTORY
|
|
//
|
|
// 08/24/1998 Original version.
|
|
// 11/10/1998 Added isLmPresent().
|
|
// 01/25/1999 MS-CHAP v2
|
|
// 05/21/1999 Remove MSChapChallenge.
|
|
//
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
|
|
#ifndef _BLOB_H_
|
|
#define _BLOB_H_
|
|
|
|
#include <iaspolcy.h>
|
|
#include <iaslsa.h>
|
|
#include <iastlutl.h>
|
|
#include <iasutil.h>
|
|
|
|
using namespace IASTL;
|
|
|
|
// nonstandard extension used : zero-sized array in struct/union
|
|
#pragma warning(disable:4200)
|
|
|
|
//////////
|
|
// Safely extracts a blob from an IASATTRIBUTE.
|
|
//////////
|
|
template <class T>
|
|
T& blob_cast(PIASATTRIBUTE a)
|
|
{
|
|
T& blob = (T&)(a->Value.OctetString);
|
|
|
|
if (a->Value.itType != IASTYPE_OCTET_STRING || !blob.isValid())
|
|
{
|
|
_com_issue_error(IAS_MALFORMED_REQUEST);
|
|
}
|
|
|
|
return blob;
|
|
}
|
|
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
//
|
|
// STRUCT
|
|
//
|
|
// (BLOB)
|
|
//
|
|
// DESCRIPTION
|
|
//
|
|
// Each blob struct inherits from IAS_OCTET_STRING. It in turn has a nested
|
|
// struct called 'Layout' which defines the wire format of the bytes. It
|
|
// also defines an isValid method that tests whether the IAS_OCTET_STRING
|
|
// can be safely downcast.
|
|
//
|
|
///////////////////////////////////////////////////////////////////////////////
|
|
|
|
struct MSChapResponse : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE ident;
|
|
BYTE flags;
|
|
BYTE lmResponse[_LM_RESPONSE_LENGTH];
|
|
BYTE ntResponse[_NT_RESPONSE_LENGTH];
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return dwLength == sizeof(Layout);
|
|
}
|
|
|
|
bool isLmPresent() const throw ();
|
|
|
|
bool isNtPresent() const throw ()
|
|
{
|
|
return (get().flags & 0x1) != 0;
|
|
}
|
|
};
|
|
|
|
struct MSChapCPW1 : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE code;
|
|
BYTE ident;
|
|
BYTE lmOldPwd[_ENCRYPTED_LM_OWF_PASSWORD_LENGTH];
|
|
BYTE lmNewPwd[_ENCRYPTED_LM_OWF_PASSWORD_LENGTH];
|
|
BYTE ntOldPwd[_ENCRYPTED_NT_OWF_PASSWORD_LENGTH];
|
|
BYTE ntNewPwd[_ENCRYPTED_NT_OWF_PASSWORD_LENGTH];
|
|
BYTE newLmPwdLen[2];
|
|
BYTE flags[2];
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return (dwLength == sizeof(Layout)) && (get().code == 5);
|
|
}
|
|
|
|
WORD getNewLmPwdLen() const throw ()
|
|
{
|
|
return IASExtractWORD(get().newLmPwdLen);
|
|
}
|
|
|
|
bool isNtPresent() const throw ()
|
|
{
|
|
return (get().flags[1] & 0x1) != 0;
|
|
}
|
|
};
|
|
|
|
struct MSChapCPW2 : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE code;
|
|
BYTE ident;
|
|
BYTE oldNtHash[_ENCRYPTED_NT_OWF_PASSWORD_LENGTH];
|
|
BYTE oldLmHash[_ENCRYPTED_LM_OWF_PASSWORD_LENGTH];
|
|
BYTE lmResponse[_LM_RESPONSE_LENGTH];
|
|
BYTE ntResponse[_NT_RESPONSE_LENGTH];
|
|
BYTE flags[2];
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return (dwLength == sizeof(Layout)) && (get().code == 6);
|
|
}
|
|
|
|
bool isLmPresent() const throw ();
|
|
|
|
bool isLmHashValid() const throw ()
|
|
{
|
|
return (get().flags[1] & 0x2) != 0;
|
|
}
|
|
|
|
bool isNtResponseValid() const throw ()
|
|
{
|
|
return (get().flags[1] & 0x1) != 0;
|
|
}
|
|
};
|
|
|
|
struct MSChapEncPW : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE code;
|
|
BYTE ident;
|
|
BYTE sequence[2];
|
|
BYTE string[0];
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return (dwLength >= sizeof(Layout)) && (get().code == 6);
|
|
}
|
|
|
|
DWORD getStringLength() const throw ()
|
|
{
|
|
return dwLength - FIELD_OFFSET(Layout, string);
|
|
}
|
|
|
|
WORD getSequence() const throw ()
|
|
{
|
|
return IASExtractWORD(get().sequence);
|
|
}
|
|
|
|
bool operator<(const MSChapEncPW& pw) const throw ()
|
|
{
|
|
return getSequence() < pw.getSequence();
|
|
}
|
|
static BOOL getEncryptedPassword(
|
|
IASRequest& request,
|
|
DWORD dwId,
|
|
PBYTE buf
|
|
);
|
|
};
|
|
|
|
struct MSChapDomain : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE ident;
|
|
BYTE string[0];
|
|
};
|
|
|
|
static void insert(
|
|
IASRequest& request,
|
|
BYTE ident,
|
|
PCWSTR domain
|
|
);
|
|
};
|
|
|
|
struct MSChapError : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE ident;
|
|
BYTE string[0];
|
|
};
|
|
|
|
static void insert(
|
|
IASRequest& request,
|
|
BYTE ident,
|
|
DWORD errorCode
|
|
);
|
|
};
|
|
|
|
struct MSChapMPPEKeys : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE lmKey[8];
|
|
BYTE ntKey[16];
|
|
BYTE challenge[8];
|
|
};
|
|
|
|
static void insert(
|
|
IASRequest& request,
|
|
PBYTE lmKey,
|
|
PBYTE ntKey,
|
|
PBYTE challenge
|
|
);
|
|
};
|
|
|
|
struct MSChap2Response : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE ident;
|
|
BYTE flags;
|
|
BYTE peerChallenge[16];
|
|
BYTE reserved[8];
|
|
BYTE response[_NT_RESPONSE_LENGTH];
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return dwLength == sizeof(Layout);
|
|
}
|
|
};
|
|
|
|
struct MSChap2Success : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE ident;
|
|
BYTE string[42];
|
|
};
|
|
|
|
static void insert(
|
|
IASRequest& request,
|
|
BYTE ident,
|
|
PBYTE authenticatorResponse
|
|
);
|
|
};
|
|
|
|
struct MSMPPEKey : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE salt[2];
|
|
BYTE keyLength;
|
|
BYTE key[0];
|
|
};
|
|
|
|
static void insert(
|
|
IASRequest& request,
|
|
ULONG keyLength,
|
|
PBYTE key,
|
|
BOOL isSendKey
|
|
);
|
|
};
|
|
|
|
struct MSChap2CPW : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE code;
|
|
BYTE ident;
|
|
BYTE encryptedHash[_ENCRYPTED_NT_OWF_PASSWORD_LENGTH];
|
|
BYTE peerChallenge[16];
|
|
BYTE reserved[8];
|
|
BYTE response[_NT_RESPONSE_LENGTH];
|
|
BYTE flags[2];
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return (dwLength == sizeof(Layout)) && (get().code == 7);
|
|
}
|
|
};
|
|
|
|
struct ArapChallenge : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
DWORD ntChallenge1;
|
|
DWORD ntChallenge2;
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return dwLength == sizeof(Layout);
|
|
}
|
|
|
|
};
|
|
|
|
struct ArapPassword : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
DWORD macChallenge1;
|
|
DWORD macChallenge2;
|
|
DWORD macResponse1;
|
|
DWORD macResponse2;
|
|
};
|
|
|
|
Layout& get() throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
const Layout& get() const throw ()
|
|
{ return *(Layout*)lpValue; }
|
|
|
|
bool isValid() const throw ()
|
|
{
|
|
return dwLength == sizeof(Layout);
|
|
}
|
|
};
|
|
|
|
struct ArapChallengeResponse : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE ntResponse1[4];
|
|
BYTE ntResponse2[4];
|
|
};
|
|
|
|
static void insert(
|
|
IASRequest& request,
|
|
DWORD NTResponse1,
|
|
DWORD NTResponse2
|
|
);
|
|
};
|
|
|
|
struct ArapFeatures : IAS_OCTET_STRING
|
|
{
|
|
struct Layout
|
|
{
|
|
BYTE changePasswordAllowed;
|
|
BYTE minPasswordLength;
|
|
BYTE pwdCreationDate[4];
|
|
BYTE pwdExpiryDelta[4];
|
|
BYTE currentTime[4];
|
|
};
|
|
|
|
static void insert(
|
|
IASRequest& request,
|
|
DWORD PwdCreationDate,
|
|
DWORD PwdExpiryDelta,
|
|
DWORD CurrentTime
|
|
);
|
|
};
|
|
|
|
#endif // _BLOB_H_
|