ReactOS 0.4.16-dev-21-g2af6fd4
domain.c
Go to the documentation of this file.
1/*
2 * PROJECT: Local Security Authority Server DLL
3 * LICENSE: GPL - See COPYING in the top level directory
4 * FILE: dll/win32/samsrv/domain.c
5 * PURPOSE: Domain specific helper functions
6 * COPYRIGHT: Copyright 2013 Eric Kohl
7 */
8
9#include "samsrv.h"
10
11/* FUNCTIONS ***************************************************************/
12
13NTSTATUS
14SampSetAccountNameInDomain(IN PSAM_DB_OBJECT DomainObject,
15 IN LPCWSTR lpContainerName,
16 IN LPCWSTR lpAccountName,
17 IN ULONG ulRelativeId)
18{
19 HANDLE ContainerKeyHandle = NULL;
20 HANDLE NamesKeyHandle = NULL;
21 NTSTATUS Status;
22
23 TRACE("SampSetAccountNameInDomain()\n");
24
25 /* Open the container key */
26 Status = SampRegOpenKey(DomainObject->KeyHandle,
27 lpContainerName,
28 KEY_ALL_ACCESS,
29 &ContainerKeyHandle);
30 if (!NT_SUCCESS(Status))
31 return Status;
32
33 /* Open the 'Names' key */
34 Status = SampRegOpenKey(ContainerKeyHandle,
35 L"Names",
36 KEY_ALL_ACCESS,
37 &NamesKeyHandle);
38 if (!NT_SUCCESS(Status))
39 goto done;
40
41 /* Set the alias value */
42 Status = SampRegSetValue(NamesKeyHandle,
43 lpAccountName,
44 REG_DWORD,
45 (LPVOID)&ulRelativeId,
46 sizeof(ULONG));
47
48done:
49 SampRegCloseKey(&NamesKeyHandle);
50 SampRegCloseKey(&ContainerKeyHandle);
51
52 return Status;
53}
54
55
56NTSTATUS
57SampRemoveAccountNameFromDomain(IN PSAM_DB_OBJECT DomainObject,
58 IN LPCWSTR lpContainerName,
59 IN LPCWSTR lpAccountName)
60{
61 HANDLE ContainerKeyHandle = NULL;
62 HANDLE NamesKeyHandle = NULL;
63 NTSTATUS Status;
64
65 TRACE("(%S %S)\n", lpContainerName, lpAccountName);
66
67 /* Open the container key */
68 Status = SampRegOpenKey(DomainObject->KeyHandle,
69 lpContainerName,
70 KEY_ALL_ACCESS,
71 &ContainerKeyHandle);
72 if (!NT_SUCCESS(Status))
73 return Status;
74
75 /* Open the 'Names' key */
76 Status = SampRegOpenKey(ContainerKeyHandle,
77 L"Names",
78 KEY_SET_VALUE,
79 &NamesKeyHandle);
80 if (!NT_SUCCESS(Status))
81 goto done;
82
83 /* Delete the account name value */
84 Status = SampRegDeleteValue(NamesKeyHandle,
85 lpAccountName);
86
87done:
88 SampRegCloseKey(&NamesKeyHandle);
89 SampRegCloseKey(&ContainerKeyHandle);
90
91 return Status;
92}
93
94
95NTSTATUS
96SampCheckAccountNameInDomain(IN PSAM_DB_OBJECT DomainObject,
97 IN LPCWSTR lpAccountName)
98{
99 HANDLE AccountKey = NULL;
100 HANDLE NamesKey = NULL;
101 NTSTATUS Status;
102
103 TRACE("SampCheckAccountNameInDomain()\n");
104
105 Status = SampRegOpenKey(DomainObject->KeyHandle,
106 L"Aliases",
107 KEY_READ,
108 &AccountKey);
109 if (NT_SUCCESS(Status))
110 {
111 Status = SampRegOpenKey(AccountKey,
112 L"Names",
113 KEY_READ,
114 &NamesKey);
115 if (NT_SUCCESS(Status))
116 {
117 Status = SampRegQueryValue(NamesKey,
118 lpAccountName,
119 NULL,
120 NULL,
121 NULL);
122 if (Status == STATUS_SUCCESS)
123 {
124 SampRegCloseKey(&NamesKey);
125 Status = STATUS_ALIAS_EXISTS;
126 }
127 else if (Status == STATUS_OBJECT_NAME_NOT_FOUND)
128 Status = STATUS_SUCCESS;
129 }
130
131 SampRegCloseKey(&AccountKey);
132 }
133
134 if (!NT_SUCCESS(Status))
135 {
136 TRACE("Checking for alias account failed (Status 0x%08lx)\n", Status);
137 return Status;
138 }
139
140 Status = SampRegOpenKey(DomainObject->KeyHandle,
141 L"Groups",
142 KEY_READ,
143 &AccountKey);
144 if (NT_SUCCESS(Status))
145 {
146 Status = SampRegOpenKey(AccountKey,
147 L"Names",
148 KEY_READ,
149 &NamesKey);
150 if (NT_SUCCESS(Status))
151 {
152 Status = SampRegQueryValue(NamesKey,
153 lpAccountName,
154 NULL,
155 NULL,
156 NULL);
157 if (Status == STATUS_SUCCESS)
158 {
159 SampRegCloseKey(&NamesKey);
160 Status = STATUS_GROUP_EXISTS;
161 }
162 else if (Status == STATUS_OBJECT_NAME_NOT_FOUND)
163 Status = STATUS_SUCCESS;
164 }
165
166 SampRegCloseKey(&AccountKey);
167 }
168
169 if (!NT_SUCCESS(Status))
170 {
171 TRACE("Checking for group account failed (Status 0x%08lx)\n", Status);
172 return Status;
173 }
174
175 Status = SampRegOpenKey(DomainObject->KeyHandle,
176 L"Users",
177 KEY_READ,
178 &AccountKey);
179 if (NT_SUCCESS(Status))
180 {
181 Status = SampRegOpenKey(AccountKey,
182 L"Names",
183 KEY_READ,
184 &NamesKey);
185 if (NT_SUCCESS(Status))
186 {
187 Status = SampRegQueryValue(NamesKey,
188 lpAccountName,
189 NULL,
190 NULL,
191 NULL);
192 if (Status == STATUS_SUCCESS)
193 {
194 SampRegCloseKey(&NamesKey);
195 Status = STATUS_USER_EXISTS;
196 }
197 else if (Status == STATUS_OBJECT_NAME_NOT_FOUND)
198 Status = STATUS_SUCCESS;
199 }
200
201 SampRegCloseKey(&AccountKey);
202 }
203
204 if (!NT_SUCCESS(Status))
205 {
206 TRACE("Checking for user account failed (Status 0x%08lx)\n", Status);
207 }
208
209 return Status;
210}
211
212
213NTSTATUS
214SampRemoveMemberFromAllAliases(IN PSAM_DB_OBJECT DomainObject,
215 IN PRPC_SID MemberSid)
216{
217 WCHAR AliasKeyName[64];
218 LPWSTR MemberSidString = NULL;
219 HANDLE AliasesKey = NULL;
220 HANDLE MembersKey = NULL;
221 HANDLE AliasKey = NULL;
222 ULONG Index;
223 NTSTATUS Status;
224
225 TRACE("(%p %p)\n", DomainObject, MemberSid);
226
227 ConvertSidToStringSidW(MemberSid, &MemberSidString);
228 TRACE("Member SID: %S\n", MemberSidString);
229
230 Status = SampRegOpenKey(DomainObject->KeyHandle,
231 L"Aliases",
232 KEY_READ,
233 &AliasesKey);
234 if (NT_SUCCESS(Status))
235 {
236 Index = 0;
237 while (TRUE)
238 {
239 Status = SampRegEnumerateSubKey(AliasesKey,
240 Index,
241 64,
242 AliasKeyName);
243 if (!NT_SUCCESS(Status))
244 {
245 if (Status == STATUS_NO_MORE_ENTRIES)
246 Status = STATUS_SUCCESS;
247 break;
248 }
249
250 TRACE("Alias key name: %S\n", AliasKeyName);
251
252 Status = SampRegOpenKey(AliasesKey,
253 AliasKeyName,
254 KEY_READ,
255 &AliasKey);
256 if (NT_SUCCESS(Status))
257 {
258 Status = SampRegOpenKey(AliasKey,
259 L"Members",
260 KEY_WRITE,
261 &MembersKey);
262 if (NT_SUCCESS(Status))
263 {
264 Status = SampRegDeleteValue(AliasKey,
265 MemberSidString);
266
267 SampRegCloseKey(&MembersKey);
268 }
269 else if (Status == STATUS_OBJECT_NAME_NOT_FOUND)
270 Status = STATUS_SUCCESS;
271
272 SampRegCloseKey(&AliasKey);
273 }
274
275 Index++;
276 }
277
278 Status = SampRegOpenKey(AliasesKey,
279 L"Members",
280 KEY_WRITE,
281 &MembersKey);
282 if (NT_SUCCESS(Status))
283 {
284 Status = SampRegDeleteKey(MembersKey,
285 MemberSidString);
286 if (Status == STATUS_OBJECT_NAME_NOT_FOUND)
287 Status = STATUS_SUCCESS;
288
289 SampRegCloseKey(&MembersKey);
290 }
291
292 SampRegCloseKey(&AliasesKey);
293 }
294
295 if (MemberSidString != NULL)
296 LocalFree(MemberSidString);
297
298 return Status;
299}
300
301
302NTSTATUS
303SampCreateAccountSid(IN PSAM_DB_OBJECT DomainObject,
304 IN ULONG ulRelativeId,
305 IN OUT PSID *AccountSid)
306{
307 PSID DomainSid = NULL;
308 ULONG Length = 0;
309 NTSTATUS Status;
310
311 Status = SampGetObjectAttribute(DomainObject,
312 L"SID",
313 NULL,
314 NULL,
315 &Length);
316 if (!NT_SUCCESS(Status) && Status != STATUS_BUFFER_OVERFLOW)
317 {
318 TRACE("Status 0x%08lx\n", Status);
319 goto done;
320 }
321
322 TRACE("Length: %lu\n", Length);
323
324 DomainSid = RtlAllocateHeap(RtlGetProcessHeap(), 0, Length);
325 if (DomainSid == NULL)
326 {
327 Status = STATUS_INSUFFICIENT_RESOURCES;
328 goto done;
329 }
330
331 Status = SampGetObjectAttribute(DomainObject,
332 L"SID",
333 NULL,
334 DomainSid,
335 &Length);
336 if (!NT_SUCCESS(Status))
337 {
338 TRACE("Status 0x%08lx\n", Status);
339 goto done;
340 }
341
342 *AccountSid = AppendRidToSid(DomainSid,
343 ulRelativeId);
344
345done:
346 if (DomainSid != NULL)
347 RtlFreeHeap(RtlGetProcessHeap(), 0, DomainSid);
348
349 return Status;
350}
351
352/* EOF */
NTSTATUS
LONG NTSTATUS
Definition: precomp.h:26
RtlAllocateHeap
PVOID NTAPI RtlAllocateHeap(IN PVOID HeapHandle, IN ULONG Flags, IN SIZE_T Size)
Definition: heap.c:590
RtlFreeHeap
BOOLEAN NTAPI RtlFreeHeap(IN PVOID HeapHandle, IN ULONG Flags, IN PVOID HeapBase)
Definition: heap.c:608
NULL
#define NULL
Definition: types.h:112
TRUE
#define TRUE
Definition: types.h:120
NT_SUCCESS
#define NT_SUCCESS(StatCode)
Definition: apphelp.c:33
ConvertSidToStringSidW
BOOL WINAPI ConvertSidToStringSidW(PSID Sid, LPWSTR *StringSid)
Definition: security.c:3583
SampGetObjectAttribute
NTSTATUS SampGetObjectAttribute(PSAM_DB_OBJECT DbObject, LPWSTR AttributeName, PULONG AttributeType, LPVOID AttributeData, PULONG AttributeSize)
Definition: database.c:516
SampSetAccountNameInDomain
NTSTATUS SampSetAccountNameInDomain(IN PSAM_DB_OBJECT DomainObject, IN LPCWSTR lpContainerName, IN LPCWSTR lpAccountName, IN ULONG ulRelativeId)
Definition: domain.c:14
SampRemoveAccountNameFromDomain
NTSTATUS SampRemoveAccountNameFromDomain(IN PSAM_DB_OBJECT DomainObject, IN LPCWSTR lpContainerName, IN LPCWSTR lpAccountName)
Definition: domain.c:57
SampCheckAccountNameInDomain
NTSTATUS SampCheckAccountNameInDomain(IN PSAM_DB_OBJECT DomainObject, IN LPCWSTR lpAccountName)
Definition: domain.c:96
SampCreateAccountSid
NTSTATUS SampCreateAccountSid(IN PSAM_DB_OBJECT DomainObject, IN ULONG ulRelativeId, IN OUT PSID *AccountSid)
Definition: domain.c:303
SampRemoveMemberFromAllAliases
NTSTATUS SampRemoveMemberFromAllAliases(IN PSAM_DB_OBJECT DomainObject, IN PRPC_SID MemberSid)
Definition: domain.c:214
SampRegQueryValue
NTSTATUS SampRegQueryValue(IN HANDLE KeyHandle, IN LPCWSTR ValueName, OUT PULONG Type OPTIONAL, OUT PVOID Data OPTIONAL, IN OUT PULONG DataLength OPTIONAL)
Definition: registry.c:332
SampRegCloseKey
NTSTATUS SampRegCloseKey(IN OUT PHANDLE KeyHandle)
Definition: registry.c:26
SampRegSetValue
NTSTATUS SampRegSetValue(HANDLE KeyHandle, LPCWSTR ValueName, ULONG Type, LPVOID Data, ULONG DataLength)
Definition: registry.c:402
SampRegDeleteKey
NTSTATUS SampRegDeleteKey(IN HANDLE ParentKeyHandle, IN LPCWSTR KeyName)
Definition: registry.c:71
SampRegOpenKey
NTSTATUS SampRegOpenKey(IN HANDLE ParentKeyHandle, IN LPCWSTR KeyName, IN ACCESS_MASK DesiredAccess, OUT PHANDLE KeyHandle)
Definition: registry.c:158
SampRegDeleteValue
NTSTATUS SampRegDeleteValue(IN HANDLE KeyHandle, IN LPCWSTR ValueName)
Definition: registry.c:212
SampRegEnumerateSubKey
NTSTATUS SampRegEnumerateSubKey(IN HANDLE KeyHandle, IN ULONG Index, IN ULONG Length, OUT LPWSTR Buffer)
Definition: registry.c:101
Status
Status
Definition: gdiplustypes.h:25
LocalFree
HLOCAL NTAPI LocalFree(HLOCAL hMem)
Definition: heapmem.c:1594
AppendRidToSid
static PSID AppendRidToSid(PSID SrcSid, ULONG Rid)
Definition: msv1_0.c:280
KEY_ALL_ACCESS
#define KEY_ALL_ACCESS
Definition: nt_native.h:1041
KEY_READ
#define KEY_READ
Definition: nt_native.h:1023
KEY_WRITE
#define KEY_WRITE
Definition: nt_native.h:1031
KEY_SET_VALUE
#define KEY_SET_VALUE
Definition: nt_native.h:1017
Length
_In_ ULONG _In_ ULONG _In_ ULONG Length
Definition: ntddpcm.h:102
STATUS_ALIAS_EXISTS
#define STATUS_ALIAS_EXISTS
Definition: ntstatus.h:576
STATUS_NO_MORE_ENTRIES
#define STATUS_NO_MORE_ENTRIES
Definition: ntstatus.h:205
STATUS_USER_EXISTS
#define STATUS_USER_EXISTS
Definition: ntstatus.h:335
STATUS_GROUP_EXISTS
#define STATUS_GROUP_EXISTS
Definition: ntstatus.h:337
L
#define L(x)
Definition: ntvdm.h:50
REG_DWORD
#define REG_DWORD
Definition: sdbapi.c:596
STATUS_SUCCESS
#define STATUS_SUCCESS
Definition: shellext.h:65
STATUS_BUFFER_OVERFLOW
#define STATUS_BUFFER_OVERFLOW
Definition: shellext.h:66
TRACE
#define TRACE(s)
Definition: solgame.cpp:4
_RPC_SID
Definition: msv1_0.h:13
_SAM_DB_OBJECT
Definition: samsrv.h:46
_SID
Definition: ms-dtyp.idl:198
IN
#define IN
Definition: typedefs.h:39
ULONG
uint32_t ULONG
Definition: typedefs.h:59
OUT
#define OUT
Definition: typedefs.h:40
STATUS_INSUFFICIENT_RESOURCES
#define STATUS_INSUFFICIENT_RESOURCES
Definition: udferr_usr.h:158
STATUS_OBJECT_NAME_NOT_FOUND
#define STATUS_OBJECT_NAME_NOT_FOUND
Definition: udferr_usr.h:149
Index
_In_ WDFCOLLECTION _In_ ULONG Index
Definition: wdfcollection.h:182
lpAccountName
_In_ LPCSTR lpAccountName
Definition: winbase.h:2741
WCHAR
__wchar_t WCHAR
Definition: xmlstorage.h:180
LPWSTR
WCHAR * LPWSTR
Definition: xmlstorage.h:184
LPCWSTR
const WCHAR * LPCWSTR
Definition: xmlstorage.h:185