mirror of
https://github.com/reactos/reactos.git
synced 2024-12-18 16:43:27 +08:00
616 lines
16 KiB
C
616 lines
16 KiB
C
/*
|
|
* PROJECT: Local Security Authority Server DLL
|
|
* LICENSE: GPL - See COPYING in the top level directory
|
|
* FILE: dll/win32/samsrv/database.c
|
|
* PURPOSE: SAM object database
|
|
* COPYRIGHT: Copyright 2012 Eric Kohl
|
|
*/
|
|
|
|
#include "samsrv.h"
|
|
|
|
/* GLOBALS *****************************************************************/
|
|
|
|
static HANDLE SamKeyHandle = NULL;
|
|
|
|
|
|
/* FUNCTIONS ***************************************************************/
|
|
|
|
NTSTATUS
|
|
SampInitDatabase(VOID)
|
|
{
|
|
NTSTATUS Status;
|
|
|
|
TRACE("SampInitDatabase()\n");
|
|
|
|
Status = SampRegOpenKey(NULL,
|
|
L"\\Registry\\Machine\\SAM",
|
|
KEY_READ | KEY_CREATE_SUB_KEY | KEY_ENUMERATE_SUB_KEYS,
|
|
&SamKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
ERR("Failed to open the SAM key (Status: 0x%08lx)\n", Status);
|
|
return Status;
|
|
}
|
|
|
|
TRACE("SampInitDatabase() done\n");
|
|
|
|
return STATUS_SUCCESS;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampCreateDbObject(IN PSAM_DB_OBJECT ParentObject,
|
|
IN LPWSTR ContainerName,
|
|
IN LPWSTR ObjectName,
|
|
IN ULONG RelativeId,
|
|
IN SAM_DB_OBJECT_TYPE ObjectType,
|
|
IN ACCESS_MASK DesiredAccess,
|
|
OUT PSAM_DB_OBJECT *DbObject)
|
|
{
|
|
PSAM_DB_OBJECT NewObject = NULL;
|
|
HANDLE ParentKeyHandle;
|
|
HANDLE ContainerKeyHandle = NULL;
|
|
HANDLE ObjectKeyHandle = NULL;
|
|
HANDLE MembersKeyHandle = NULL;
|
|
NTSTATUS Status;
|
|
|
|
if (DbObject == NULL)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
*DbObject = NULL;
|
|
|
|
if (ParentObject == NULL)
|
|
ParentKeyHandle = SamKeyHandle;
|
|
else
|
|
ParentKeyHandle = ParentObject->KeyHandle;
|
|
|
|
if (ContainerName != NULL)
|
|
{
|
|
/* Open the container key */
|
|
Status = SampRegOpenKey(ParentKeyHandle,
|
|
ContainerName,
|
|
KEY_ALL_ACCESS,
|
|
&ContainerKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
|
|
/* Create the object key */
|
|
Status = SampRegCreateKey(ContainerKeyHandle,
|
|
ObjectName,
|
|
KEY_ALL_ACCESS,
|
|
&ObjectKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
|
|
if (ObjectType == SamDbAliasObject)
|
|
{
|
|
/* Create the object key */
|
|
Status = SampRegCreateKey(ContainerKeyHandle,
|
|
L"Members",
|
|
KEY_ALL_ACCESS,
|
|
&MembersKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
/* Create the object key */
|
|
Status = SampRegCreateKey(ParentKeyHandle,
|
|
ObjectName,
|
|
KEY_ALL_ACCESS,
|
|
&ObjectKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
}
|
|
|
|
NewObject = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
HEAP_ZERO_MEMORY,
|
|
sizeof(SAM_DB_OBJECT));
|
|
if (NewObject == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
NewObject->Name = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
0,
|
|
(wcslen(ObjectName) + 1) * sizeof(WCHAR));
|
|
if (NewObject->Name == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
wcscpy(NewObject->Name, ObjectName);
|
|
|
|
NewObject->Signature = SAMP_DB_SIGNATURE;
|
|
NewObject->RefCount = 1;
|
|
NewObject->ObjectType = ObjectType;
|
|
NewObject->Access = DesiredAccess;
|
|
NewObject->KeyHandle = ObjectKeyHandle;
|
|
NewObject->MembersKeyHandle = MembersKeyHandle;
|
|
NewObject->RelativeId = RelativeId;
|
|
NewObject->ParentObject = ParentObject;
|
|
|
|
if (ParentObject != NULL)
|
|
NewObject->Trusted = ParentObject->Trusted;
|
|
|
|
*DbObject = NewObject;
|
|
|
|
done:
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
if (NewObject != NULL)
|
|
{
|
|
if (NewObject->Name != NULL)
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject->Name);
|
|
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject);
|
|
}
|
|
|
|
SampRegCloseKey(&MembersKeyHandle);
|
|
SampRegCloseKey(&ObjectKeyHandle);
|
|
}
|
|
|
|
SampRegCloseKey(&ContainerKeyHandle);
|
|
|
|
return Status;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampOpenDbObject(IN PSAM_DB_OBJECT ParentObject,
|
|
IN LPWSTR ContainerName,
|
|
IN LPWSTR ObjectName,
|
|
IN ULONG RelativeId,
|
|
IN SAM_DB_OBJECT_TYPE ObjectType,
|
|
IN ACCESS_MASK DesiredAccess,
|
|
OUT PSAM_DB_OBJECT *DbObject)
|
|
{
|
|
PSAM_DB_OBJECT NewObject = NULL;
|
|
HANDLE ParentKeyHandle;
|
|
HANDLE ContainerKeyHandle = NULL;
|
|
HANDLE ObjectKeyHandle = NULL;
|
|
HANDLE MembersKeyHandle = NULL;
|
|
NTSTATUS Status;
|
|
|
|
if (DbObject == NULL)
|
|
return STATUS_INVALID_PARAMETER;
|
|
|
|
*DbObject = NULL;
|
|
|
|
if (ParentObject == NULL)
|
|
ParentKeyHandle = SamKeyHandle;
|
|
else
|
|
ParentKeyHandle = ParentObject->KeyHandle;
|
|
|
|
if (ContainerName != NULL)
|
|
{
|
|
/* Open the container key */
|
|
Status = SampRegOpenKey(ParentKeyHandle,
|
|
ContainerName,
|
|
KEY_ALL_ACCESS,
|
|
&ContainerKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
|
|
/* Open the object key */
|
|
Status = SampRegOpenKey(ContainerKeyHandle,
|
|
ObjectName,
|
|
KEY_ALL_ACCESS,
|
|
&ObjectKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
|
|
if (ObjectType == SamDbAliasObject)
|
|
{
|
|
/* Open the object key */
|
|
Status = SampRegOpenKey(ContainerKeyHandle,
|
|
L"Members",
|
|
KEY_ALL_ACCESS,
|
|
&MembersKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
}
|
|
}
|
|
else
|
|
{
|
|
/* Open the object key */
|
|
Status = SampRegOpenKey(ParentKeyHandle,
|
|
ObjectName,
|
|
KEY_ALL_ACCESS,
|
|
&ObjectKeyHandle);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
goto done;
|
|
}
|
|
}
|
|
|
|
NewObject = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
HEAP_ZERO_MEMORY,
|
|
sizeof(SAM_DB_OBJECT));
|
|
if (NewObject == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
NewObject->Name = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
0,
|
|
(wcslen(ObjectName) + 1) * sizeof(WCHAR));
|
|
if (NewObject->Name == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
wcscpy(NewObject->Name, ObjectName);
|
|
NewObject->Signature = SAMP_DB_SIGNATURE;
|
|
NewObject->RefCount = 1;
|
|
NewObject->ObjectType = ObjectType;
|
|
NewObject->Access = DesiredAccess;
|
|
NewObject->KeyHandle = ObjectKeyHandle;
|
|
NewObject->MembersKeyHandle = MembersKeyHandle;
|
|
NewObject->RelativeId = RelativeId;
|
|
NewObject->ParentObject = ParentObject;
|
|
|
|
if (ParentObject != NULL)
|
|
NewObject->Trusted = ParentObject->Trusted;
|
|
|
|
*DbObject = NewObject;
|
|
|
|
done:
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
if (NewObject != NULL)
|
|
{
|
|
if (NewObject->Name != NULL)
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject->Name);
|
|
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject);
|
|
}
|
|
|
|
SampRegCloseKey(&MembersKeyHandle);
|
|
SampRegCloseKey(&ObjectKeyHandle);
|
|
}
|
|
|
|
SampRegCloseKey(&ContainerKeyHandle);
|
|
|
|
return Status;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampValidateDbObject(SAMPR_HANDLE Handle,
|
|
SAM_DB_OBJECT_TYPE ObjectType,
|
|
ACCESS_MASK DesiredAccess,
|
|
PSAM_DB_OBJECT *DbObject)
|
|
{
|
|
PSAM_DB_OBJECT LocalObject = (PSAM_DB_OBJECT)Handle;
|
|
BOOLEAN bValid = FALSE;
|
|
|
|
_SEH2_TRY
|
|
{
|
|
if (LocalObject->Signature == SAMP_DB_SIGNATURE)
|
|
{
|
|
if ((ObjectType == SamDbIgnoreObject) ||
|
|
(LocalObject->ObjectType == ObjectType))
|
|
bValid = TRUE;
|
|
}
|
|
}
|
|
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
|
|
{
|
|
bValid = FALSE;
|
|
}
|
|
_SEH2_END;
|
|
|
|
if (bValid == FALSE)
|
|
return STATUS_INVALID_HANDLE;
|
|
|
|
if (DesiredAccess != 0)
|
|
{
|
|
/* Check for granted access rights */
|
|
if ((LocalObject->Access & DesiredAccess) != DesiredAccess)
|
|
{
|
|
ERR("SampValidateDbObject access check failed %08lx %08lx\n",
|
|
LocalObject->Access, DesiredAccess);
|
|
return STATUS_ACCESS_DENIED;
|
|
}
|
|
}
|
|
|
|
if (DbObject != NULL)
|
|
*DbObject = LocalObject;
|
|
|
|
return STATUS_SUCCESS;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampCloseDbObject(PSAM_DB_OBJECT DbObject)
|
|
{
|
|
NTSTATUS Status = STATUS_SUCCESS;
|
|
|
|
DbObject->RefCount--;
|
|
|
|
if (DbObject->RefCount > 0)
|
|
return STATUS_SUCCESS;
|
|
|
|
SampRegCloseKey(&DbObject->KeyHandle);
|
|
SampRegCloseKey(&DbObject->MembersKeyHandle);
|
|
|
|
if (DbObject->Name != NULL)
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject->Name);
|
|
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject);
|
|
|
|
return Status;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampDeleteAccountDbObject(PSAM_DB_OBJECT DbObject)
|
|
{
|
|
LPCWSTR ContainerName;
|
|
LPWSTR AccountName = NULL;
|
|
HANDLE ContainerKey = NULL;
|
|
HANDLE NamesKey = NULL;
|
|
ULONG Length = 0;
|
|
NTSTATUS Status = STATUS_SUCCESS;
|
|
|
|
TRACE("(%p)\n", DbObject);
|
|
|
|
/* Server and Domain objects cannot be deleted */
|
|
switch (DbObject->ObjectType)
|
|
{
|
|
case SamDbAliasObject:
|
|
ContainerName = L"Aliases";
|
|
break;
|
|
|
|
case SamDbGroupObject:
|
|
ContainerName = L"Groups";
|
|
break;
|
|
|
|
case SamDbUserObject:
|
|
ContainerName = L"Users";
|
|
break;
|
|
|
|
default:
|
|
return STATUS_INVALID_PARAMETER;
|
|
}
|
|
|
|
/* Get the account name */
|
|
Status = SampGetObjectAttribute(DbObject,
|
|
L"Name",
|
|
NULL,
|
|
NULL,
|
|
&Length);
|
|
if (!NT_SUCCESS(Status) && Status != STATUS_BUFFER_OVERFLOW)
|
|
{
|
|
TRACE("SampGetObjectAttribute failed (Status 0x%08lx)\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
AccountName = RtlAllocateHeap(RtlGetProcessHeap(),
|
|
HEAP_ZERO_MEMORY,
|
|
Length);
|
|
if (AccountName == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
Status = SampGetObjectAttribute(DbObject,
|
|
L"Name",
|
|
NULL,
|
|
(PVOID)AccountName,
|
|
&Length);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
TRACE("SampGetObjectAttribute failed (Status 0x%08lx)\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
SampRegCloseKey(&DbObject->KeyHandle);
|
|
|
|
if (DbObject->ObjectType == SamDbAliasObject)
|
|
{
|
|
SampRegCloseKey(&DbObject->MembersKeyHandle);
|
|
|
|
SampRegDeleteKey(DbObject->KeyHandle,
|
|
L"Members");
|
|
}
|
|
|
|
/* Open the domain container key */
|
|
Status = SampRegOpenKey(DbObject->ParentObject->KeyHandle,
|
|
ContainerName,
|
|
DELETE | KEY_SET_VALUE,
|
|
&ContainerKey);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
TRACE("SampRegOpenKey failed (Status 0x%08lx)\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
/* Open the Names key */
|
|
Status = SampRegOpenKey(ContainerKey,
|
|
L"Names",
|
|
KEY_SET_VALUE,
|
|
&NamesKey);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
TRACE("SampRegOpenKey failed (Status 0x%08lx)\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
/* Remove the account from the Names key */
|
|
Status = SampRegDeleteValue(NamesKey,
|
|
AccountName);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
TRACE("SampRegDeleteValue failed (Status 0x%08lx)\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
/* Remove the account key from the container */
|
|
Status = SampRegDeleteKey(ContainerKey,
|
|
DbObject->Name);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
TRACE("SampRegDeleteKey failed (Status 0x%08lx)\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
/* Release the database object name */
|
|
if (DbObject->Name != NULL)
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject->Name);
|
|
|
|
/* Release the database object */
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject);
|
|
|
|
Status = STATUS_SUCCESS;
|
|
|
|
done:
|
|
SampRegCloseKey(&NamesKey);
|
|
SampRegCloseKey(&ContainerKey);
|
|
|
|
if (AccountName != NULL)
|
|
RtlFreeHeap(RtlGetProcessHeap(), 0, AccountName);
|
|
|
|
return Status;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampSetObjectAttribute(PSAM_DB_OBJECT DbObject,
|
|
LPWSTR AttributeName,
|
|
ULONG AttributeType,
|
|
LPVOID AttributeData,
|
|
ULONG AttributeSize)
|
|
{
|
|
return SampRegSetValue(DbObject->KeyHandle,
|
|
AttributeName,
|
|
AttributeType,
|
|
AttributeData,
|
|
AttributeSize);
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampGetObjectAttribute(PSAM_DB_OBJECT DbObject,
|
|
LPWSTR AttributeName,
|
|
PULONG AttributeType,
|
|
LPVOID AttributeData,
|
|
PULONG AttributeSize)
|
|
{
|
|
return SampRegQueryValue(DbObject->KeyHandle,
|
|
AttributeName,
|
|
AttributeType,
|
|
AttributeData,
|
|
AttributeSize);
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampGetObjectAttributeString(PSAM_DB_OBJECT DbObject,
|
|
LPWSTR AttributeName,
|
|
PRPC_UNICODE_STRING String)
|
|
{
|
|
ULONG Length = 0;
|
|
NTSTATUS Status;
|
|
|
|
Status = SampGetObjectAttribute(DbObject,
|
|
AttributeName,
|
|
NULL,
|
|
NULL,
|
|
&Length);
|
|
if (!NT_SUCCESS(Status) && Status != STATUS_BUFFER_OVERFLOW)
|
|
{
|
|
TRACE("Status 0x%08lx\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
if (Length == 0)
|
|
{
|
|
String->Length = 0;
|
|
String->MaximumLength = 0;
|
|
String->Buffer = NULL;
|
|
|
|
Status = STATUS_SUCCESS;
|
|
goto done;
|
|
}
|
|
|
|
String->Length = (USHORT)(Length - sizeof(WCHAR));
|
|
String->MaximumLength = (USHORT)Length;
|
|
String->Buffer = midl_user_allocate(Length);
|
|
if (String->Buffer == NULL)
|
|
{
|
|
Status = STATUS_INSUFFICIENT_RESOURCES;
|
|
goto done;
|
|
}
|
|
|
|
TRACE("Length: %lu\n", Length);
|
|
Status = SampGetObjectAttribute(DbObject,
|
|
AttributeName,
|
|
NULL,
|
|
(PVOID)String->Buffer,
|
|
&Length);
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
TRACE("Status 0x%08lx\n", Status);
|
|
goto done;
|
|
}
|
|
|
|
done:
|
|
if (!NT_SUCCESS(Status))
|
|
{
|
|
if (String->Buffer != NULL)
|
|
{
|
|
midl_user_free(String->Buffer);
|
|
String->Buffer = NULL;
|
|
}
|
|
}
|
|
|
|
return Status;
|
|
}
|
|
|
|
|
|
NTSTATUS
|
|
SampSetObjectAttributeString(PSAM_DB_OBJECT DbObject,
|
|
LPWSTR AttributeName,
|
|
PRPC_UNICODE_STRING String)
|
|
{
|
|
PWCHAR Buffer = NULL;
|
|
USHORT Length = 0;
|
|
|
|
if ((String != NULL) && (String->Buffer != NULL))
|
|
{
|
|
Buffer = String->Buffer;
|
|
Length = String->Length + sizeof(WCHAR);
|
|
}
|
|
|
|
return SampSetObjectAttribute(DbObject,
|
|
AttributeName,
|
|
REG_SZ,
|
|
Buffer,
|
|
Length);
|
|
}
|
|
|
|
|
|
/* EOF */
|
|
|