xref: /illumos-gate/usr/src/common/smbsrv/smb_token.c (revision e0731422366620894c16c1ee6515551c5f00733d)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 /*
27  * NT Token library (kernel/user)
28  */
29 
30 #ifdef _KERNEL
31 #include <sys/types.h>
32 #include <sys/cmn_err.h>
33 #include <sys/kmem.h>
34 #else /* _KERNEL */
35 #include <stdlib.h>
36 #include <strings.h>
37 #include <syslog.h>
38 #endif /* _KERNEL */
39 
40 #include <smbsrv/string.h>
41 #include <smbsrv/smb_token.h>
42 #include <smbsrv/smb_xdr.h>
43 
44 /*
45  * smb_token_query_privilege
46  *
47  * Find out if the specified privilege is enable in the given
48  * access token.
49  */
50 int
51 smb_token_query_privilege(smb_token_t *token, int priv_id)
52 {
53 	smb_privset_t *privset;
54 	int i;
55 
56 	if ((token == NULL) || (token->tkn_privileges == NULL))
57 		return (0);
58 
59 	privset = token->tkn_privileges;
60 	for (i = 0; privset->priv_cnt; i++) {
61 		if (privset->priv[i].luid.lo_part == priv_id) {
62 			if (privset->priv[i].attrs == SE_PRIVILEGE_ENABLED)
63 				return (1);
64 			else
65 				return (0);
66 		}
67 	}
68 
69 	return (0);
70 }
71 
72 /*
73  * Basic sanity check on a token.
74  */
75 boolean_t
76 smb_token_valid(smb_token_t *token)
77 {
78 	if (token == NULL)
79 		return (B_FALSE);
80 
81 	if ((token->tkn_user.i_sid == NULL) ||
82 	    (token->tkn_owner.i_sid == NULL) ||
83 	    (token->tkn_primary_grp.i_sid == NULL) ||
84 	    (token->tkn_account_name == NULL) ||
85 	    (token->tkn_domain_name == NULL) ||
86 	    (token->tkn_posix_grps == NULL))
87 		return (B_FALSE);
88 
89 	if ((token->tkn_win_grps.i_cnt != 0) &&
90 	    (token->tkn_win_grps.i_ids == NULL))
91 		return (B_FALSE);
92 
93 	return (B_TRUE);
94 }
95 
96 #ifndef _KERNEL
97 /*
98  * Encode: structure -> flat buffer (buffer size)
99  * Pre-condition: obj is non-null.
100  */
101 uint8_t *
102 smb_token_encode(smb_token_t *obj, uint32_t *len)
103 {
104 	uint8_t *buf;
105 	XDR xdrs;
106 
107 	if (!obj) {
108 		syslog(LOG_ERR, "smb_token_encode: invalid parameter");
109 		return (NULL);
110 	}
111 
112 	*len = xdr_sizeof(smb_token_xdr, obj);
113 	buf = (uint8_t *)malloc(*len);
114 	if (!buf) {
115 		syslog(LOG_ERR, "smb_token_encode: %m");
116 		return (NULL);
117 	}
118 
119 	xdrmem_create(&xdrs, (const caddr_t)buf, *len, XDR_ENCODE);
120 
121 	if (!smb_token_xdr(&xdrs, obj)) {
122 		syslog(LOG_ERR, "smb_token_encode: XDR encode error");
123 		*len = 0;
124 		free(buf);
125 		buf = NULL;
126 	}
127 
128 	xdr_destroy(&xdrs);
129 	return (buf);
130 }
131 
132 /*
133  * Decode: flat buffer -> structure
134  */
135 smb_logon_t *
136 smb_logon_decode(uint8_t *buf, uint32_t len)
137 {
138 	smb_logon_t	*obj;
139 	XDR		xdrs;
140 
141 	xdrmem_create(&xdrs, (const caddr_t)buf, len, XDR_DECODE);
142 
143 	if ((obj = malloc(sizeof (smb_logon_t))) == NULL) {
144 		syslog(LOG_ERR, "smb_logon_decode: %m");
145 		xdr_destroy(&xdrs);
146 		return (NULL);
147 	}
148 
149 	bzero(obj, sizeof (smb_logon_t));
150 	if (!smb_logon_xdr(&xdrs, obj)) {
151 		syslog(LOG_ERR, "smb_logon_decode: XDR decode error");
152 		free(obj);
153 		obj = NULL;
154 	}
155 
156 	xdr_destroy(&xdrs);
157 	return (obj);
158 }
159 
160 void
161 smb_logon_free(smb_logon_t *obj)
162 {
163 	xdr_free(smb_logon_xdr, (char *)obj);
164 	free(obj);
165 }
166 #else /* _KERNEL */
167 /*
168  * Tokens are allocated in the kernel via XDR.
169  * Call xdr_free before freeing the token structure.
170  */
171 void
172 smb_token_free(smb_token_t *token)
173 {
174 	if (token != NULL) {
175 		xdr_free(smb_token_xdr, (char *)token);
176 		kmem_free(token, sizeof (smb_token_t));
177 	}
178 }
179 #endif /* _KERNEL */
180