sdk/lib/lsalib/lsa.c

   1 /*
   2  * COPYRIGHT:       See COPYING in the top level directory
   3  * PROJECT:         ReactOS system libraries
   4  * FILE:            lib/lsalib/lsa.c
   5  * PURPOSE:         Client-side LSA functions
   6  * UPDATE HISTORY:
   7  *                  Created 05/08/00
   8  */
   9
  10 /* INCLUDES ******************************************************************/
  11
  12 #include <ndk/exfuncs.h>
  13 #include <ndk/lpctypes.h>
  14 #include <ndk/lpcfuncs.h>
  15 #include <ndk/mmfuncs.h>
  16 #include <ndk/rtlfuncs.h>
  17 #include <ndk/obfuncs.h>
  18 #include <lsass/lsass.h>
  19
  20 #define NDEBUG
  21 #include <debug.h>
  22
  23 /* FUNCTIONS *****************************************************************/
  24
  25 /*
  26  * @implemented
  27  */
  28 NTSTATUS
  29 NTAPI
  30 LsaCallAuthenticationPackage(IN HANDLE LsaHandle,
  31                              IN ULONG AuthenticationPackage,
  32                              IN PVOID ProtocolSubmitBuffer,
  33                              IN ULONG SubmitBufferLength,
  34                              OUT PVOID *ProtocolReturnBuffer,
  35                              OUT PULONG ReturnBufferLength,
  36                              OUT PNTSTATUS ProtocolStatus)
  37 {
  38     LSA_API_MSG ApiMessage;
  39     NTSTATUS Status;
  40
  41     DPRINT1("LsaCallAuthenticationPackage()\n");
  42
  43     ApiMessage.ApiNumber = LSASS_REQUEST_CALL_AUTHENTICATION_PACKAGE;
  44     ApiMessage.h.u1.s1.DataLength = LSA_PORT_DATA_SIZE(ApiMessage.CallAuthenticationPackage);
  45     ApiMessage.h.u1.s1.TotalLength = LSA_PORT_MESSAGE_SIZE;
  46     ApiMessage.h.u2.ZeroInit = 0;
  47
  48     ApiMessage.CallAuthenticationPackage.Request.AuthenticationPackage = AuthenticationPackage;
  49     ApiMessage.CallAuthenticationPackage.Request.ProtocolSubmitBuffer = ProtocolSubmitBuffer;
  50     ApiMessage.CallAuthenticationPackage.Request.SubmitBufferLength = SubmitBufferLength;
  51
  52     Status = ZwRequestWaitReplyPort(LsaHandle,
  53                                     (PPORT_MESSAGE)&ApiMessage,
  54                                     (PPORT_MESSAGE)&ApiMessage);
  55     if (!NT_SUCCESS(Status))
  56     {
  57         DPRINT1("ZwRequestWaitReplyPort() failed (Status 0x%08lx)\n", Status);
  58         return Status;
  59     }
  60
  61     if (!NT_SUCCESS(ApiMessage.Status))
  62     {
  63         DPRINT1("ZwRequestWaitReplyPort() failed (ApiMessage.Status 0x%08lx)\n", ApiMessage.Status);
  64         return ApiMessage.Status;
  65     }
  66
  67     *ProtocolReturnBuffer = ApiMessage.CallAuthenticationPackage.Reply.ProtocolReturnBuffer;
  68     *ReturnBufferLength = ApiMessage.CallAuthenticationPackage.Reply.ReturnBufferLength;
  69     *ProtocolStatus = ApiMessage.CallAuthenticationPackage.Reply.ProtocolStatus;
  70
  71     return Status;
  72 }
  73
  74
  75 /*
  76  * @implemented
  77  */
  78 NTSTATUS
  79 NTAPI
  80 LsaDeregisterLogonProcess(IN HANDLE LsaHandle)
  81 {
  82     LSA_API_MSG ApiMessage;
  83     NTSTATUS Status;
  84
  85     DPRINT("LsaDeregisterLogonProcess()\n");
  86
  87     ApiMessage.ApiNumber = LSASS_REQUEST_DEREGISTER_LOGON_PROCESS;
  88     ApiMessage.h.u1.s1.DataLength = LSA_PORT_DATA_SIZE(ApiMessage.DeregisterLogonProcess);
  89     ApiMessage.h.u1.s1.TotalLength = LSA_PORT_MESSAGE_SIZE;
  90     ApiMessage.h.u2.ZeroInit = 0;
  91
  92     Status = ZwRequestWaitReplyPort(LsaHandle,
  93                                     (PPORT_MESSAGE)&ApiMessage,
  94                                     (PPORT_MESSAGE)&ApiMessage);
  95     if (!NT_SUCCESS(Status))
  96     {
  97         DPRINT1("ZwRequestWaitReplyPort() failed (Status 0x%08lx)\n", Status);
  98         return Status;
  99     }
 100
 101     if (!NT_SUCCESS(ApiMessage.Status))
 102     {
 103         DPRINT1("ZwRequestWaitReplyPort() failed (ApiMessage.Status 0x%08lx)\n", ApiMessage.Status);
 104         return ApiMessage.Status;
 105     }
 106
 107     ZwClose(LsaHandle);
 108
 109     DPRINT("LsaDeregisterLogonProcess() done (Status 0x%08lx)\n", Status);
 110
 111     return Status;
 112 }
 113
 114
 115 /*
 116  * @implemented
 117  */
 118 NTSTATUS
 119 NTAPI
 120 LsaFreeReturnBuffer(IN PVOID Buffer)
 121 {
 122     SIZE_T Size = 0;
 123
 124     return ZwFreeVirtualMemory(NtCurrentProcess(),
 125                                &Buffer,
 126                                &Size,
 127                                MEM_RELEASE);
 128 }
 129
 130
 131 /*
 132  * @implemented
 133  */
 134 NTSTATUS
 135 NTAPI
 136 LsaLookupAuthenticationPackage(IN HANDLE LsaHandle,
 137                                IN PLSA_STRING PackageName,
 138                                OUT PULONG AuthenticationPackage)
 139 {
 140     LSA_API_MSG ApiMessage;
 141     NTSTATUS Status;
 142
 143     /* Check the package name length */
 144     if (PackageName->Length > LSASS_MAX_PACKAGE_NAME_LENGTH)
 145     {
 146         return STATUS_NAME_TOO_LONG;
 147     }
 148
 149     ApiMessage.ApiNumber = LSASS_REQUEST_LOOKUP_AUTHENTICATION_PACKAGE;
 150     ApiMessage.h.u1.s1.DataLength = LSA_PORT_DATA_SIZE(ApiMessage.LookupAuthenticationPackage);
 151     ApiMessage.h.u1.s1.TotalLength = LSA_PORT_MESSAGE_SIZE;
 152     ApiMessage.h.u2.ZeroInit = 0;
 153
 154     ApiMessage.LookupAuthenticationPackage.Request.PackageNameLength = PackageName->Length;
 155     strncpy(ApiMessage.LookupAuthenticationPackage.Request.PackageName,
 156             PackageName->Buffer,
 157             ApiMessage.LookupAuthenticationPackage.Request.PackageNameLength);
 158     ApiMessage.LookupAuthenticationPackage.Request.PackageName[ApiMessage.LookupAuthenticationPackage.Request.PackageNameLength] = ANSI_NULL;
 159
 160     Status = ZwRequestWaitReplyPort(LsaHandle,
 161                                     (PPORT_MESSAGE)&ApiMessage,
 162                                     (PPORT_MESSAGE)&ApiMessage);
 163     if (!NT_SUCCESS(Status))
 164     {
 165         return Status;
 166     }
 167
 168     if (!NT_SUCCESS(ApiMessage.Status))
 169     {
 170         return ApiMessage.Status;
 171     }
 172
 173     *AuthenticationPackage = ApiMessage.LookupAuthenticationPackage.Reply.Package;
 174
 175     return Status;
 176 }
 177
 178
 179 /*
 180  * @implemented
 181  */
 182 NTSTATUS
 183 NTAPI
 184 LsaLogonUser(IN HANDLE LsaHandle,
 185              IN PLSA_STRING OriginName,
 186              IN SECURITY_LOGON_TYPE LogonType,
 187              IN ULONG AuthenticationPackage,
 188              IN PVOID AuthenticationInformation,
 189              IN ULONG AuthenticationInformationLength,
 190              IN PTOKEN_GROUPS LocalGroups OPTIONAL,
 191              IN PTOKEN_SOURCE SourceContext,
 192              OUT PVOID *ProfileBuffer,
 193              OUT PULONG ProfileBufferLength,
 194              OUT PLUID LogonId,
 195              OUT PHANDLE Token,
 196              OUT PQUOTA_LIMITS Quotas,
 197              OUT PNTSTATUS SubStatus)
 198 {
 199     LSA_API_MSG ApiMessage;
 200     NTSTATUS Status;
 201
 202     ApiMessage.ApiNumber = LSASS_REQUEST_LOGON_USER;
 203     ApiMessage.h.u1.s1.DataLength = LSA_PORT_DATA_SIZE(ApiMessage.LogonUser);
 204     ApiMessage.h.u1.s1.TotalLength = LSA_PORT_MESSAGE_SIZE;
 205     ApiMessage.h.u2.ZeroInit = 0;
 206
 207     ApiMessage.LogonUser.Request.OriginName = *OriginName;
 208     ApiMessage.LogonUser.Request.LogonType = LogonType;
 209     ApiMessage.LogonUser.Request.AuthenticationPackage = AuthenticationPackage;
 210     ApiMessage.LogonUser.Request.AuthenticationInformation = AuthenticationInformation;
 211     ApiMessage.LogonUser.Request.AuthenticationInformationLength = AuthenticationInformationLength;
 212     ApiMessage.LogonUser.Request.LocalGroups = LocalGroups;
 213     if (LocalGroups != NULL)
 214         ApiMessage.LogonUser.Request.LocalGroupsCount = LocalGroups->GroupCount;
 215     else
 216         ApiMessage.LogonUser.Request.LocalGroupsCount = 0;
 217     ApiMessage.LogonUser.Request.SourceContext = *SourceContext;
 218
 219     Status = ZwRequestWaitReplyPort(LsaHandle,
 220                                     (PPORT_MESSAGE)&ApiMessage,
 221                                     (PPORT_MESSAGE)&ApiMessage);
 222     if (!NT_SUCCESS(Status))
 223     {
 224         return Status;
 225     }
 226
 227     *SubStatus = ApiMessage.LogonUser.Reply.SubStatus;
 228
 229     if (!NT_SUCCESS(ApiMessage.Status))
 230     {
 231         return ApiMessage.Status;
 232     }
 233
 234     *ProfileBuffer = ApiMessage.LogonUser.Reply.ProfileBuffer;
 235     *ProfileBufferLength = ApiMessage.LogonUser.Reply.ProfileBufferLength;
 236     *LogonId = ApiMessage.LogonUser.Reply.LogonId;
 237     *Token = ApiMessage.LogonUser.Reply.Token;
 238     *Quotas = ApiMessage.LogonUser.Reply.Quotas;
 239
 240     return Status;
 241 }
 242
 243
 244 /*
 245  * @implemented
 246  */
 247 NTSTATUS
 248 NTAPI
 249 LsaRegisterLogonProcess(IN PLSA_STRING LogonProcessName,
 250                         OUT PHANDLE LsaHandle,
 251                         OUT PLSA_OPERATIONAL_MODE OperationalMode)
 252 {
 253     SECURITY_QUALITY_OF_SERVICE SecurityQos;
 254     LSA_CONNECTION_INFO ConnectInfo;
 255     ULONG ConnectInfoLength = sizeof(ConnectInfo);
 256     UNICODE_STRING PortName;
 257     OBJECT_ATTRIBUTES ObjectAttributes;
 258     UNICODE_STRING EventName;
 259     HANDLE EventHandle;
 260     NTSTATUS Status;
 261
 262     DPRINT("LsaRegisterLogonProcess()\n");
 263
 264     /* Check the logon process name length */
 265     if (LogonProcessName->Length > LSASS_MAX_LOGON_PROCESS_NAME_LENGTH)
 266         return STATUS_NAME_TOO_LONG;
 267
 268     /* Wait for the LSA authentication thread */
 269     RtlInitUnicodeString(&EventName,
 270                          L"\\SECURITY\\LSA_AUTHENTICATION_INITIALIZED");
 271     InitializeObjectAttributes(&ObjectAttributes,
 272                                &EventName,
 273                                OBJ_CASE_INSENSITIVE | OBJ_PERMANENT,
 274                                NULL,
 275                                NULL);
 276     Status = ZwOpenEvent(&EventHandle,
 277                          SYNCHRONIZE,
 278                          &ObjectAttributes);
 279     if (!NT_SUCCESS(Status))
 280     {
 281         DPRINT("ZwOpenEvent failed (Status 0x%08lx)\n", Status);
 282
 283         Status = ZwCreateEvent(&EventHandle,
 284                                SYNCHRONIZE,
 285                                &ObjectAttributes,
 286                                NotificationEvent,
 287                                FALSE);
 288         if (!NT_SUCCESS(Status))
 289         {
 290             DPRINT1("ZwCreateEvent failed (Status 0x%08lx)\n", Status);
 291             return Status;
 292         }
 293     }
 294
 295     Status = ZwWaitForSingleObject(EventHandle,
 296                                    TRUE,
 297                                    NULL);
 298     ZwClose(EventHandle);
 299     if (!NT_SUCCESS(Status))
 300     {
 301         DPRINT1("ZwWaitForSingleObject failed (Status 0x%08lx)\n", Status);
 302         return Status;
 303     }
 304
 305     /* Establish the connection */
 306     RtlInitUnicodeString(&PortName,
 307                          L"\\LsaAuthenticationPort");
 308
 309     SecurityQos.Length              = sizeof(SecurityQos);
 310     SecurityQos.ImpersonationLevel  = SecurityIdentification;
 311     SecurityQos.ContextTrackingMode = SECURITY_DYNAMIC_TRACKING;
 312     SecurityQos.EffectiveOnly       = TRUE;
 313
 314     strncpy(ConnectInfo.LogonProcessNameBuffer,
 315             LogonProcessName->Buffer,
 316             LogonProcessName->Length);
 317     ConnectInfo.Length = LogonProcessName->Length;
 318     ConnectInfo.LogonProcessNameBuffer[ConnectInfo.Length] = ANSI_NULL;
 319     ConnectInfo.CreateContext = TRUE;
 320
 321     Status = ZwConnectPort(LsaHandle,
 322                            &PortName,
 323                            &SecurityQos,
 324                            NULL,
 325                            NULL,
 326                            NULL,
 327                            &ConnectInfo,
 328                            &ConnectInfoLength);
 329     if (!NT_SUCCESS(Status))
 330     {
 331         DPRINT1("ZwConnectPort failed (Status 0x%08lx)\n", Status);
 332         return Status;
 333     }
 334
 335     DPRINT("ConnectInfo.OperationalMode: 0x%08lx\n", ConnectInfo.OperationalMode);
 336     *OperationalMode = ConnectInfo.OperationalMode;
 337
 338     if (!NT_SUCCESS(ConnectInfo.Status))
 339     {
 340         DPRINT1("ConnectInfo.Status: 0x%08lx\n", ConnectInfo.Status);
 341     }
 342
 343     return ConnectInfo.Status;
 344 }