reactos/dll/win32/samsrv/database.c

616 lines
16 KiB
C

/*
* PROJECT: Local Security Authority Server DLL
* LICENSE: GPL - See COPYING in the top level directory
* FILE: dll/win32/samsrv/database.c
* PURPOSE: SAM object database
* COPYRIGHT: Copyright 2012 Eric Kohl
*/
#include "samsrv.h"
/* GLOBALS *****************************************************************/
static HANDLE SamKeyHandle = NULL;
/* FUNCTIONS ***************************************************************/
NTSTATUS
SampInitDatabase(VOID)
{
NTSTATUS Status;
TRACE("SampInitDatabase()\n");
Status = SampRegOpenKey(NULL,
L"\\Registry\\Machine\\SAM",
KEY_READ | KEY_CREATE_SUB_KEY | KEY_ENUMERATE_SUB_KEYS,
&SamKeyHandle);
if (!NT_SUCCESS(Status))
{
ERR("Failed to open the SAM key (Status: 0x%08lx)\n", Status);
return Status;
}
TRACE("SampInitDatabase() done\n");
return STATUS_SUCCESS;
}
NTSTATUS
SampCreateDbObject(IN PSAM_DB_OBJECT ParentObject,
IN LPWSTR ContainerName,
IN LPWSTR ObjectName,
IN ULONG RelativeId,
IN SAM_DB_OBJECT_TYPE ObjectType,
IN ACCESS_MASK DesiredAccess,
OUT PSAM_DB_OBJECT *DbObject)
{
PSAM_DB_OBJECT NewObject = NULL;
HANDLE ParentKeyHandle;
HANDLE ContainerKeyHandle = NULL;
HANDLE ObjectKeyHandle = NULL;
HANDLE MembersKeyHandle = NULL;
NTSTATUS Status;
if (DbObject == NULL)
return STATUS_INVALID_PARAMETER;
*DbObject = NULL;
if (ParentObject == NULL)
ParentKeyHandle = SamKeyHandle;
else
ParentKeyHandle = ParentObject->KeyHandle;
if (ContainerName != NULL)
{
/* Open the container key */
Status = SampRegOpenKey(ParentKeyHandle,
ContainerName,
KEY_ALL_ACCESS,
&ContainerKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
/* Create the object key */
Status = SampRegCreateKey(ContainerKeyHandle,
ObjectName,
KEY_ALL_ACCESS,
&ObjectKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
if (ObjectType == SamDbAliasObject)
{
/* Create the object key */
Status = SampRegCreateKey(ContainerKeyHandle,
L"Members",
KEY_ALL_ACCESS,
&MembersKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
}
}
else
{
/* Create the object key */
Status = SampRegCreateKey(ParentKeyHandle,
ObjectName,
KEY_ALL_ACCESS,
&ObjectKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
}
NewObject = RtlAllocateHeap(RtlGetProcessHeap(),
HEAP_ZERO_MEMORY,
sizeof(SAM_DB_OBJECT));
if (NewObject == NULL)
{
Status = STATUS_INSUFFICIENT_RESOURCES;
goto done;
}
NewObject->Name = RtlAllocateHeap(RtlGetProcessHeap(),
0,
(wcslen(ObjectName) + 1) * sizeof(WCHAR));
if (NewObject->Name == NULL)
{
Status = STATUS_INSUFFICIENT_RESOURCES;
goto done;
}
wcscpy(NewObject->Name, ObjectName);
NewObject->Signature = SAMP_DB_SIGNATURE;
NewObject->RefCount = 1;
NewObject->ObjectType = ObjectType;
NewObject->Access = DesiredAccess;
NewObject->KeyHandle = ObjectKeyHandle;
NewObject->MembersKeyHandle = MembersKeyHandle;
NewObject->RelativeId = RelativeId;
NewObject->ParentObject = ParentObject;
if (ParentObject != NULL)
NewObject->Trusted = ParentObject->Trusted;
*DbObject = NewObject;
done:
if (!NT_SUCCESS(Status))
{
if (NewObject != NULL)
{
if (NewObject->Name != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject->Name);
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject);
}
SampRegCloseKey(&MembersKeyHandle);
SampRegCloseKey(&ObjectKeyHandle);
}
SampRegCloseKey(&ContainerKeyHandle);
return Status;
}
NTSTATUS
SampOpenDbObject(IN PSAM_DB_OBJECT ParentObject,
IN LPWSTR ContainerName,
IN LPWSTR ObjectName,
IN ULONG RelativeId,
IN SAM_DB_OBJECT_TYPE ObjectType,
IN ACCESS_MASK DesiredAccess,
OUT PSAM_DB_OBJECT *DbObject)
{
PSAM_DB_OBJECT NewObject = NULL;
HANDLE ParentKeyHandle;
HANDLE ContainerKeyHandle = NULL;
HANDLE ObjectKeyHandle = NULL;
HANDLE MembersKeyHandle = NULL;
NTSTATUS Status;
if (DbObject == NULL)
return STATUS_INVALID_PARAMETER;
*DbObject = NULL;
if (ParentObject == NULL)
ParentKeyHandle = SamKeyHandle;
else
ParentKeyHandle = ParentObject->KeyHandle;
if (ContainerName != NULL)
{
/* Open the container key */
Status = SampRegOpenKey(ParentKeyHandle,
ContainerName,
KEY_ALL_ACCESS,
&ContainerKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
/* Open the object key */
Status = SampRegOpenKey(ContainerKeyHandle,
ObjectName,
KEY_ALL_ACCESS,
&ObjectKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
if (ObjectType == SamDbAliasObject)
{
/* Open the object key */
Status = SampRegOpenKey(ContainerKeyHandle,
L"Members",
KEY_ALL_ACCESS,
&MembersKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
}
}
else
{
/* Open the object key */
Status = SampRegOpenKey(ParentKeyHandle,
ObjectName,
KEY_ALL_ACCESS,
&ObjectKeyHandle);
if (!NT_SUCCESS(Status))
{
goto done;
}
}
NewObject = RtlAllocateHeap(RtlGetProcessHeap(),
HEAP_ZERO_MEMORY,
sizeof(SAM_DB_OBJECT));
if (NewObject == NULL)
{
Status = STATUS_INSUFFICIENT_RESOURCES;
goto done;
}
NewObject->Name = RtlAllocateHeap(RtlGetProcessHeap(),
0,
(wcslen(ObjectName) + 1) * sizeof(WCHAR));
if (NewObject->Name == NULL)
{
Status = STATUS_INSUFFICIENT_RESOURCES;
goto done;
}
wcscpy(NewObject->Name, ObjectName);
NewObject->Signature = SAMP_DB_SIGNATURE;
NewObject->RefCount = 1;
NewObject->ObjectType = ObjectType;
NewObject->Access = DesiredAccess;
NewObject->KeyHandle = ObjectKeyHandle;
NewObject->MembersKeyHandle = MembersKeyHandle;
NewObject->RelativeId = RelativeId;
NewObject->ParentObject = ParentObject;
if (ParentObject != NULL)
NewObject->Trusted = ParentObject->Trusted;
*DbObject = NewObject;
done:
if (!NT_SUCCESS(Status))
{
if (NewObject != NULL)
{
if (NewObject->Name != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject->Name);
RtlFreeHeap(RtlGetProcessHeap(), 0, NewObject);
}
SampRegCloseKey(&MembersKeyHandle);
SampRegCloseKey(&ObjectKeyHandle);
}
SampRegCloseKey(&ContainerKeyHandle);
return Status;
}
NTSTATUS
SampValidateDbObject(SAMPR_HANDLE Handle,
SAM_DB_OBJECT_TYPE ObjectType,
ACCESS_MASK DesiredAccess,
PSAM_DB_OBJECT *DbObject)
{
PSAM_DB_OBJECT LocalObject = (PSAM_DB_OBJECT)Handle;
BOOLEAN bValid = FALSE;
_SEH2_TRY
{
if (LocalObject->Signature == SAMP_DB_SIGNATURE)
{
if ((ObjectType == SamDbIgnoreObject) ||
(LocalObject->ObjectType == ObjectType))
bValid = TRUE;
}
}
_SEH2_EXCEPT(EXCEPTION_EXECUTE_HANDLER)
{
bValid = FALSE;
}
_SEH2_END;
if (bValid == FALSE)
return STATUS_INVALID_HANDLE;
if (DesiredAccess != 0)
{
/* Check for granted access rights */
if ((LocalObject->Access & DesiredAccess) != DesiredAccess)
{
ERR("SampValidateDbObject access check failed %08lx %08lx\n",
LocalObject->Access, DesiredAccess);
return STATUS_ACCESS_DENIED;
}
}
if (DbObject != NULL)
*DbObject = LocalObject;
return STATUS_SUCCESS;
}
NTSTATUS
SampCloseDbObject(PSAM_DB_OBJECT DbObject)
{
NTSTATUS Status = STATUS_SUCCESS;
DbObject->RefCount--;
if (DbObject->RefCount > 0)
return STATUS_SUCCESS;
SampRegCloseKey(&DbObject->KeyHandle);
SampRegCloseKey(&DbObject->MembersKeyHandle);
if (DbObject->Name != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject->Name);
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject);
return Status;
}
NTSTATUS
SampDeleteAccountDbObject(PSAM_DB_OBJECT DbObject)
{
LPCWSTR ContainerName;
LPWSTR AccountName = NULL;
HANDLE ContainerKey = NULL;
HANDLE NamesKey = NULL;
ULONG Length = 0;
NTSTATUS Status = STATUS_SUCCESS;
TRACE("(%p)\n", DbObject);
/* Server and Domain objects cannot be deleted */
switch (DbObject->ObjectType)
{
case SamDbAliasObject:
ContainerName = L"Aliases";
break;
case SamDbGroupObject:
ContainerName = L"Groups";
break;
case SamDbUserObject:
ContainerName = L"Users";
break;
default:
return STATUS_INVALID_PARAMETER;
}
/* Get the account name */
Status = SampGetObjectAttribute(DbObject,
L"Name",
NULL,
NULL,
&Length);
if (!NT_SUCCESS(Status) && Status != STATUS_BUFFER_OVERFLOW)
{
TRACE("SampGetObjectAttribute failed (Status 0x%08lx)\n", Status);
goto done;
}
AccountName = RtlAllocateHeap(RtlGetProcessHeap(),
HEAP_ZERO_MEMORY,
Length);
if (AccountName == NULL)
{
Status = STATUS_INSUFFICIENT_RESOURCES;
goto done;
}
Status = SampGetObjectAttribute(DbObject,
L"Name",
NULL,
(PVOID)AccountName,
&Length);
if (!NT_SUCCESS(Status))
{
TRACE("SampGetObjectAttribute failed (Status 0x%08lx)\n", Status);
goto done;
}
SampRegCloseKey(&DbObject->KeyHandle);
if (DbObject->ObjectType == SamDbAliasObject)
{
SampRegCloseKey(&DbObject->MembersKeyHandle);
SampRegDeleteKey(DbObject->KeyHandle,
L"Members");
}
/* Open the domain container key */
Status = SampRegOpenKey(DbObject->ParentObject->KeyHandle,
ContainerName,
DELETE | KEY_SET_VALUE,
&ContainerKey);
if (!NT_SUCCESS(Status))
{
TRACE("SampRegOpenKey failed (Status 0x%08lx)\n", Status);
goto done;
}
/* Open the Names key */
Status = SampRegOpenKey(ContainerKey,
L"Names",
KEY_SET_VALUE,
&NamesKey);
if (!NT_SUCCESS(Status))
{
TRACE("SampRegOpenKey failed (Status 0x%08lx)\n", Status);
goto done;
}
/* Remove the account from the Names key */
Status = SampRegDeleteValue(NamesKey,
AccountName);
if (!NT_SUCCESS(Status))
{
TRACE("SampRegDeleteValue failed (Status 0x%08lx)\n", Status);
goto done;
}
/* Remove the account key from the container */
Status = SampRegDeleteKey(ContainerKey,
DbObject->Name);
if (!NT_SUCCESS(Status))
{
TRACE("SampRegDeleteKey failed (Status 0x%08lx)\n", Status);
goto done;
}
/* Release the database object name */
if (DbObject->Name != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject->Name);
/* Release the database object */
RtlFreeHeap(RtlGetProcessHeap(), 0, DbObject);
Status = STATUS_SUCCESS;
done:
SampRegCloseKey(&NamesKey);
SampRegCloseKey(&ContainerKey);
if (AccountName != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, AccountName);
return Status;
}
NTSTATUS
SampSetObjectAttribute(PSAM_DB_OBJECT DbObject,
LPWSTR AttributeName,
ULONG AttributeType,
LPVOID AttributeData,
ULONG AttributeSize)
{
return SampRegSetValue(DbObject->KeyHandle,
AttributeName,
AttributeType,
AttributeData,
AttributeSize);
}
NTSTATUS
SampGetObjectAttribute(PSAM_DB_OBJECT DbObject,
LPWSTR AttributeName,
PULONG AttributeType,
LPVOID AttributeData,
PULONG AttributeSize)
{
return SampRegQueryValue(DbObject->KeyHandle,
AttributeName,
AttributeType,
AttributeData,
AttributeSize);
}
NTSTATUS
SampGetObjectAttributeString(PSAM_DB_OBJECT DbObject,
LPWSTR AttributeName,
PRPC_UNICODE_STRING String)
{
ULONG Length = 0;
NTSTATUS Status;
Status = SampGetObjectAttribute(DbObject,
AttributeName,
NULL,
NULL,
&Length);
if (!NT_SUCCESS(Status) && Status != STATUS_BUFFER_OVERFLOW)
{
TRACE("Status 0x%08lx\n", Status);
goto done;
}
if (Length == 0)
{
String->Length = 0;
String->MaximumLength = 0;
String->Buffer = NULL;
Status = STATUS_SUCCESS;
goto done;
}
String->Length = (USHORT)(Length - sizeof(WCHAR));
String->MaximumLength = (USHORT)Length;
String->Buffer = midl_user_allocate(Length);
if (String->Buffer == NULL)
{
Status = STATUS_INSUFFICIENT_RESOURCES;
goto done;
}
TRACE("Length: %lu\n", Length);
Status = SampGetObjectAttribute(DbObject,
AttributeName,
NULL,
(PVOID)String->Buffer,
&Length);
if (!NT_SUCCESS(Status))
{
TRACE("Status 0x%08lx\n", Status);
goto done;
}
done:
if (!NT_SUCCESS(Status))
{
if (String->Buffer != NULL)
{
midl_user_free(String->Buffer);
String->Buffer = NULL;
}
}
return Status;
}
NTSTATUS
SampSetObjectAttributeString(PSAM_DB_OBJECT DbObject,
LPWSTR AttributeName,
PRPC_UNICODE_STRING String)
{
PWCHAR Buffer = NULL;
USHORT Length = 0;
if ((String != NULL) && (String->Buffer != NULL))
{
Buffer = String->Buffer;
Length = String->Length + sizeof(WCHAR);
}
return SampSetObjectAttribute(DbObject,
AttributeName,
REG_SZ,
Buffer,
Length);
}
/* EOF */