xref: /illumos-gate/usr/src/uts/common/smbsrv/netrauth.h (revision 726fad2a65f16c200a03969c29cb5c86c2d427db)
1 /*
2  * CDDL HEADER START
3  *
4  * The contents of this file are subject to the terms of the
5  * Common Development and Distribution License (the "License").
6  * You may not use this file except in compliance with the License.
7  *
8  * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9  * or http://www.opensolaris.org/os/licensing.
10  * See the License for the specific language governing permissions
11  * and limitations under the License.
12  *
13  * When distributing Covered Code, include this CDDL HEADER in each
14  * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15  * If applicable, add the following below this CDDL HEADER, with the
16  * fields enclosed by brackets "[]" replaced with your own identifying
17  * information: Portions Copyright [yyyy] [name of copyright owner]
18  *
19  * CDDL HEADER END
20  */
21 /*
22  * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
23  * Use is subject to license terms.
24  */
25 
26 #ifndef _SMBSRV_NETRAUTH_H
27 #define	_SMBSRV_NETRAUTH_H
28 
29 /*
30  * NETR remote authentication and logon services.
31  */
32 
33 #include <sys/types.h>
34 #include <smbsrv/wintypes.h>
35 #include <smbsrv/netbios.h>
36 #include <smbsrv/smbinfo.h>
37 
38 #ifdef __cplusplus
39 extern "C" {
40 #endif
41 
42 /*
43  * See also netlogon.ndl.
44  */
45 #define	NETR_WKSTA_TRUST_ACCOUNT_TYPE		0x02
46 #define	NETR_DOMAIN_TRUST_ACCOUNT_TYPE		0x04
47 
48 /*
49  * Negotiation flags for challenge/response authentication.
50  */
51 #define	NETR_NEGOTIATE_BASE_FLAGS		0x000001FF
52 #define	NETR_NEGOTIATE_STRONGKEY_FLAG		0x00004000
53 
54 #define	NETR_SESSKEY64_SZ			8
55 #define	NETR_SESSKEY128_SZ			16
56 #define	NETR_SESSKEY_MAXSZ			NETR_SESSKEY128_SZ
57 #define	NETR_CRED_DATA_SZ			8
58 #define	NETR_OWF_PASSWORD_SZ			16
59 
60 /*
61  * SAM logon levels: interactive and network.
62  */
63 #define	NETR_INTERACTIVE_LOGON			0x01
64 #define	NETR_NETWORK_LOGON			0x02
65 
66 /*
67  * SAM logon validation levels.
68  */
69 #define	NETR_VALIDATION_LEVEL3			0x03
70 
71 /*
72  * This is a duplicate of the netr_credential
73  * from netlogon.ndl.
74  */
75 typedef struct netr_cred {
76 	BYTE data[NETR_CRED_DATA_SZ];
77 } netr_cred_t;
78 
79 typedef struct netr_session_key {
80 	BYTE key[NETR_SESSKEY_MAXSZ];
81 	short len;
82 } netr_session_key_t;
83 
84 #define	NETR_FLG_NULL		0x00000001
85 #define	NETR_FLG_VALID		0x00000001
86 #define	NETR_FLG_INIT		0x00000002
87 
88 /*
89  * 120-byte machine account password (null-terminated)
90  */
91 #define	NETR_MACHINE_ACCT_PASSWD_MAX	120 + 1
92 
93 typedef struct netr_info {
94 	DWORD flags;
95 	char server[NETBIOS_NAME_SZ * 2];
96 	char hostname[NETBIOS_NAME_SZ * 2];
97 	netr_cred_t client_challenge;
98 	netr_cred_t server_challenge;
99 	netr_cred_t client_credential;
100 	netr_cred_t server_credential;
101 	netr_session_key_t session_key;
102 	BYTE password[NETR_MACHINE_ACCT_PASSWD_MAX];
103 	time_t timestamp;
104 } netr_info_t;
105 
106 /*
107  * NETLOGON private interface.
108  */
109 int netr_gen_skey64(netr_info_t *);
110 int netr_gen_skey128(netr_info_t *);
111 
112 int netr_gen_credentials(BYTE *, netr_cred_t *, DWORD, netr_cred_t *);
113 
114 
115 #define	NETR_A2H(c) (isdigit(c)) ? ((c) - '0') : ((c) - 'A' + 10)
116 
117 #ifdef __cplusplus
118 }
119 #endif
120 
121 #endif /* _SMBSRV_NETRAUTH_H */
122