wmi-1.3.16 from opsview.com
This commit is contained in:
@@ -0,0 +1,144 @@
|
||||
/*
|
||||
Unix SMB/CIFS implementation.
|
||||
helper mapping functions for the SAMDB server
|
||||
|
||||
Copyright (C) Stefan (metze) Metzmacher 2002
|
||||
Copyright (C) Andrew Tridgell 2004
|
||||
|
||||
This program is free software; you can redistribute it and/or modify
|
||||
it under the terms of the GNU General Public License as published by
|
||||
the Free Software Foundation; either version 2 of the License, or
|
||||
(at your option) any later version.
|
||||
|
||||
This program is distributed in the hope that it will be useful,
|
||||
but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
||||
GNU General Public License for more details.
|
||||
|
||||
You should have received a copy of the GNU General Public License
|
||||
along with this program; if not, write to the Free Software
|
||||
Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
|
||||
*/
|
||||
|
||||
#include "includes.h"
|
||||
#include "librpc/gen_ndr/samr.h"
|
||||
#include "dsdb/common/flags.h"
|
||||
|
||||
/*
|
||||
translated the ACB_CTRL Flags to UserFlags (userAccountControl)
|
||||
*/
|
||||
/* mapping between ADS userAccountControl and SAMR acct_flags */
|
||||
static const struct {
|
||||
uint32_t uf;
|
||||
uint32_t acb;
|
||||
} acct_flags_map[] = {
|
||||
{ UF_ACCOUNTDISABLE, ACB_DISABLED },
|
||||
{ UF_HOMEDIR_REQUIRED, ACB_HOMDIRREQ },
|
||||
{ UF_PASSWD_NOTREQD, ACB_PWNOTREQ },
|
||||
{ UF_TEMP_DUPLICATE_ACCOUNT, ACB_TEMPDUP },
|
||||
{ UF_NORMAL_ACCOUNT, ACB_NORMAL },
|
||||
{ UF_MNS_LOGON_ACCOUNT, ACB_MNS },
|
||||
{ UF_INTERDOMAIN_TRUST_ACCOUNT, ACB_DOMTRUST },
|
||||
{ UF_WORKSTATION_TRUST_ACCOUNT, ACB_WSTRUST },
|
||||
{ UF_SERVER_TRUST_ACCOUNT, ACB_SVRTRUST },
|
||||
{ UF_DONT_EXPIRE_PASSWD, ACB_PWNOEXP },
|
||||
{ UF_LOCKOUT, ACB_AUTOLOCK },
|
||||
{ UF_ENCRYPTED_TEXT_PASSWORD_ALLOWED, ACB_ENC_TXT_PWD_ALLOWED },
|
||||
{ UF_SMARTCARD_REQUIRED, ACB_SMARTCARD_REQUIRED },
|
||||
{ UF_TRUSTED_FOR_DELEGATION, ACB_TRUSTED_FOR_DELEGATION },
|
||||
{ UF_NOT_DELEGATED, ACB_NOT_DELEGATED },
|
||||
{ UF_USE_DES_KEY_ONLY, ACB_USE_DES_KEY_ONLY},
|
||||
{ UF_DONT_REQUIRE_PREAUTH, ACB_DONT_REQUIRE_PREAUTH },
|
||||
{ UF_PASSWORD_EXPIRED, ACB_PW_EXPIRED },
|
||||
{ UF_NO_AUTH_DATA_REQUIRED, ACB_NO_AUTH_DATA_REQD }
|
||||
};
|
||||
|
||||
uint32_t samdb_acb2uf(uint32_t acb)
|
||||
{
|
||||
uint32_t i, ret = 0;
|
||||
for (i=0;i<ARRAY_SIZE(acct_flags_map);i++) {
|
||||
if (acct_flags_map[i].acb & acb) {
|
||||
ret |= acct_flags_map[i].uf;
|
||||
}
|
||||
}
|
||||
return ret;
|
||||
}
|
||||
|
||||
/*
|
||||
translated the UserFlags (userAccountControl) to ACB_CTRL Flags
|
||||
*/
|
||||
uint32_t samdb_uf2acb(uint32_t uf)
|
||||
{
|
||||
uint32_t i;
|
||||
uint32_t ret = 0;
|
||||
for (i=0;i<ARRAY_SIZE(acct_flags_map);i++) {
|
||||
if (acct_flags_map[i].uf & uf) {
|
||||
ret |= acct_flags_map[i].acb;
|
||||
}
|
||||
}
|
||||
return ret;
|
||||
}
|
||||
|
||||
/*
|
||||
get the accountType from the UserFlags
|
||||
*/
|
||||
uint32_t samdb_uf2atype(uint32_t uf)
|
||||
{
|
||||
uint32_t atype = 0x00000000;
|
||||
|
||||
if (uf & UF_NORMAL_ACCOUNT) atype = ATYPE_NORMAL_ACCOUNT;
|
||||
else if (uf & UF_TEMP_DUPLICATE_ACCOUNT) atype = ATYPE_NORMAL_ACCOUNT;
|
||||
else if (uf & UF_SERVER_TRUST_ACCOUNT) atype = ATYPE_WORKSTATION_TRUST;
|
||||
else if (uf & UF_WORKSTATION_TRUST_ACCOUNT) atype = ATYPE_WORKSTATION_TRUST;
|
||||
else if (uf & UF_INTERDOMAIN_TRUST_ACCOUNT) atype = ATYPE_INTERDOMAIN_TRUST;
|
||||
|
||||
return atype;
|
||||
}
|
||||
|
||||
/*
|
||||
get the accountType from the groupType
|
||||
*/
|
||||
uint32_t samdb_gtype2atype(uint32_t gtype)
|
||||
{
|
||||
uint32_t atype = 0x00000000;
|
||||
|
||||
switch(gtype) {
|
||||
case GTYPE_SECURITY_BUILTIN_LOCAL_GROUP:
|
||||
atype = ATYPE_SECURITY_LOCAL_GROUP;
|
||||
break;
|
||||
case GTYPE_SECURITY_DOMAIN_LOCAL_GROUP:
|
||||
atype = ATYPE_SECURITY_LOCAL_GROUP;
|
||||
break;
|
||||
case GTYPE_SECURITY_GLOBAL_GROUP:
|
||||
atype = ATYPE_SECURITY_GLOBAL_GROUP;
|
||||
break;
|
||||
|
||||
case GTYPE_DISTRIBUTION_GLOBAL_GROUP:
|
||||
atype = ATYPE_DISTRIBUTION_GLOBAL_GROUP;
|
||||
break;
|
||||
case GTYPE_DISTRIBUTION_DOMAIN_LOCAL_GROUP:
|
||||
atype = ATYPE_DISTRIBUTION_UNIVERSAL_GROUP;
|
||||
break;
|
||||
case GTYPE_DISTRIBUTION_UNIVERSAL_GROUP:
|
||||
atype = ATYPE_DISTRIBUTION_LOCAL_GROUP;
|
||||
break;
|
||||
}
|
||||
|
||||
return atype;
|
||||
}
|
||||
|
||||
/* turn a sAMAccountType into a SID_NAME_USE */
|
||||
enum lsa_SidType samdb_atype_map(uint32_t atype)
|
||||
{
|
||||
switch (atype & 0xF0000000) {
|
||||
case ATYPE_GLOBAL_GROUP:
|
||||
return SID_NAME_DOM_GRP;
|
||||
case ATYPE_SECURITY_LOCAL_GROUP:
|
||||
return SID_NAME_ALIAS;
|
||||
case ATYPE_ACCOUNT:
|
||||
return SID_NAME_USER;
|
||||
default:
|
||||
DEBUG(1,("hmm, need to map account type 0x%x\n", atype));
|
||||
}
|
||||
return SID_NAME_UNKNOWN;
|
||||
}
|
||||
Reference in New Issue
Block a user