+++ /dev/null
-/*
- * PROJECT: Local Security Authority Server DLL
- * LICENSE: GPL - See COPYING in the top level directory
- * FILE: dll/win32/lsasrv/authport.c
- * PURPOSE: LsaAuthenticationPort server routines
- * COPYRIGHT: Copyright 2009 Eric Kohl
- */
-
-#include "lsasrv.h"
-
-#include <ndk/lpcfuncs.h>
-
-static LIST_ENTRY LsapLogonContextList;
-
-static HANDLE PortThreadHandle = NULL;
-static HANDLE AuthPortHandle = NULL;
-
-
-/* FUNCTIONS ***************************************************************/
-
-static NTSTATUS
-LsapDeregisterLogonProcess(PLSA_API_MSG RequestMsg,
- PLSAP_LOGON_CONTEXT LogonContext)
-{
- TRACE("LsapDeregisterLogonProcess(%p %p)\n", RequestMsg, LogonContext);
-
- RemoveHeadList(&LogonContext->Entry);
-
- NtClose(LogonContext->ClientProcessHandle);
- NtClose(LogonContext->ConnectionHandle);
-
- RtlFreeHeap(RtlGetProcessHeap(), 0, LogonContext);
-
- return STATUS_SUCCESS;
-}
-
-
-static NTSTATUS
-LsapCheckLogonProcess(PLSA_API_MSG RequestMsg,
- PLSAP_LOGON_CONTEXT *LogonContext)
-{
- OBJECT_ATTRIBUTES ObjectAttributes;
- HANDLE ProcessHandle = NULL;
- PLSAP_LOGON_CONTEXT Context = NULL;
- NTSTATUS Status;
-
- TRACE("LsapCheckLogonProcess(%p)\n", RequestMsg);
-
- TRACE("Client ID: %p %p\n", RequestMsg->h.ClientId.UniqueProcess, RequestMsg->h.ClientId.UniqueThread);
-
- InitializeObjectAttributes(&ObjectAttributes,
- NULL,
- 0,
- NULL,
- NULL);
-
- Status = NtOpenProcess(&ProcessHandle,
- PROCESS_VM_READ | PROCESS_VM_WRITE | PROCESS_VM_OPERATION | PROCESS_DUP_HANDLE,
- &ObjectAttributes,
- &RequestMsg->h.ClientId);
- if (!NT_SUCCESS(Status))
- {
- TRACE("NtOpenProcess() failed (Status %lx)\n", Status);
- return Status;
- }
-
- /* Allocate the logon context */
- Context = RtlAllocateHeap(RtlGetProcessHeap(),
- HEAP_ZERO_MEMORY,
- sizeof(LSAP_LOGON_CONTEXT));
- if (Context == NULL)
- {
- NtClose(ProcessHandle);
- return STATUS_INSUFFICIENT_RESOURCES;
- }
-
- TRACE("New LogonContext: %p\n", Context);
-
- Context->ClientProcessHandle = ProcessHandle;
-
- *LogonContext = Context;
-
- return STATUS_SUCCESS;
-}
-
-
-static NTSTATUS
-LsapHandlePortConnection(PLSA_API_MSG RequestMsg)
-{
- PLSAP_LOGON_CONTEXT LogonContext = NULL;
- HANDLE ConnectionHandle = NULL;
- BOOLEAN Accept;
- REMOTE_PORT_VIEW RemotePortView;
- NTSTATUS Status = STATUS_SUCCESS;
-
- TRACE("LsapHandlePortConnection(%p)\n", RequestMsg);
-
- TRACE("Logon Process Name: %s\n", RequestMsg->ConnectInfo.LogonProcessNameBuffer);
-
- if (RequestMsg->ConnectInfo.CreateContext != FALSE)
- {
- Status = LsapCheckLogonProcess(RequestMsg,
- &LogonContext);
-
- RequestMsg->ConnectInfo.OperationalMode = 0x43218765;
-
- RequestMsg->ConnectInfo.Status = Status;
- }
-
- if (NT_SUCCESS(Status))
- {
- Accept = TRUE;
- }
- else
- {
- Accept = FALSE;
- }
-
- RemotePortView.Length = sizeof(REMOTE_PORT_VIEW);
- Status = NtAcceptConnectPort(&ConnectionHandle,
- (PVOID*)LogonContext,
- &RequestMsg->h,
- Accept,
- NULL,
- &RemotePortView);
- if (!NT_SUCCESS(Status))
- {
- ERR("NtAcceptConnectPort failed (Status 0x%lx)\n", Status);
- return Status;
- }
-
- if (Accept != FALSE)
- {
- if (LogonContext != NULL)
- {
- LogonContext->ConnectionHandle = ConnectionHandle;
-
- InsertHeadList(&LsapLogonContextList,
- &LogonContext->Entry);
- }
-
- Status = NtCompleteConnectPort(ConnectionHandle);
- if (!NT_SUCCESS(Status))
- {
- ERR("NtCompleteConnectPort failed (Status 0x%lx)\n", Status);
- return Status;
- }
- }
-
- return Status;
-}
-
-
-NTSTATUS WINAPI
-AuthPortThreadRoutine(PVOID Param)
-{
- PLSAP_LOGON_CONTEXT LogonContext;
- PLSA_API_MSG ReplyMsg = NULL;
- LSA_API_MSG RequestMsg;
- NTSTATUS Status;
-
- TRACE("AuthPortThreadRoutine() called\n");
-
- Status = STATUS_SUCCESS;
-
- for (;;)
- {
- TRACE("Reply: %p\n", ReplyMsg);
- Status = NtReplyWaitReceivePort(AuthPortHandle,
- (PVOID*)&LogonContext,
- (PPORT_MESSAGE)ReplyMsg,
- (PPORT_MESSAGE)&RequestMsg);
- if (!NT_SUCCESS(Status))
- {
- TRACE("NtReplyWaitReceivePort() failed (Status %lx)\n", Status);
- break;
- }
-
- TRACE("Received message\n");
-
- switch (RequestMsg.h.u2.s2.Type)
- {
- case LPC_CONNECTION_REQUEST:
- TRACE("Port connection request\n");
- Status = LsapHandlePortConnection(&RequestMsg);
- ReplyMsg = NULL;
- break;
-
- case LPC_PORT_CLOSED:
- TRACE("Port closed\n");
- ReplyMsg = NULL;
- break;
-
- case LPC_CLIENT_DIED:
- TRACE("Client died\n");
- ReplyMsg = NULL;
- break;
-
- default:
- TRACE("Received request (ApiNumber: %lu)\n", RequestMsg.ApiNumber);
-
- switch (RequestMsg.ApiNumber)
- {
- case LSASS_REQUEST_CALL_AUTHENTICATION_PACKAGE:
- RequestMsg.Status = LsapCallAuthenticationPackage(&RequestMsg,
- LogonContext);
- ReplyMsg = &RequestMsg;
- break;
-
- case LSASS_REQUEST_DEREGISTER_LOGON_PROCESS:
-
- ReplyMsg = &RequestMsg;
- RequestMsg.Status = STATUS_SUCCESS;
- NtReplyPort(AuthPortHandle,
- &ReplyMsg->h);
-
- LsapDeregisterLogonProcess(&RequestMsg,
- LogonContext);
-
- ReplyMsg = NULL;
- break;
-
- case LSASS_REQUEST_LOGON_USER:
- RequestMsg.Status = LsapLogonUser(&RequestMsg,
- LogonContext);
- ReplyMsg = &RequestMsg;
- break;
-
- case LSASS_REQUEST_LOOKUP_AUTHENTICATION_PACKAGE:
- RequestMsg.Status = LsapLookupAuthenticationPackage(&RequestMsg,
- LogonContext);
- ReplyMsg = &RequestMsg;
- break;
-
- case LSASS_REQUEST_ENUM_LOGON_SESSIONS:
- RequestMsg.Status = LsapEnumLogonSessions(&RequestMsg);
- ReplyMsg = &RequestMsg;
- break;
-
- case LSASS_REQUEST_GET_LOGON_SESSION_DATA:
- RequestMsg.Status = LsapGetLogonSessionData(&RequestMsg);
- ReplyMsg = &RequestMsg;
- break;
-
- default:
- RequestMsg.Status = STATUS_INVALID_SYSTEM_SERVICE;
- ReplyMsg = &RequestMsg;
- break;
- }
-
- break;
- }
- }
-
- return STATUS_SUCCESS;
-}
-
-
-NTSTATUS
-StartAuthenticationPort(VOID)
-{
- OBJECT_ATTRIBUTES ObjectAttributes;
- UNICODE_STRING PortName;
- DWORD ThreadId;
- UNICODE_STRING EventName;
- HANDLE EventHandle;
- NTSTATUS Status;
-
- TRACE("StartAuthenticationPort()\n");
-
- /* Initialize the logon context list */
- InitializeListHead(&LsapLogonContextList);
-
- RtlInitUnicodeString(&PortName,
- L"\\LsaAuthenticationPort");
-
- InitializeObjectAttributes(&ObjectAttributes,
- &PortName,
- 0,
- NULL,
- NULL);
-
- Status = NtCreatePort(&AuthPortHandle,
- &ObjectAttributes,
- sizeof(LSA_CONNECTION_INFO),
- sizeof(LSA_API_MSG),
- sizeof(LSA_API_MSG) * 32);
- if (!NT_SUCCESS(Status))
- {
- WARN("NtCreatePort() failed (Status %lx)\n", Status);
- return Status;
- }
-
- RtlInitUnicodeString(&EventName,
- L"\\SECURITY\\LSA_AUTHENTICATION_INITIALIZED");
- InitializeObjectAttributes(&ObjectAttributes,
- &EventName,
- OBJ_CASE_INSENSITIVE | OBJ_PERMANENT,
- NULL,
- NULL);
- Status = NtOpenEvent(&EventHandle,
- EVENT_MODIFY_STATE,
- &ObjectAttributes);
- if (!NT_SUCCESS(Status))
- {
- TRACE("NtOpenEvent failed (Status 0x%08lx)\n", Status);
-
- Status = NtCreateEvent(&EventHandle,
- EVENT_MODIFY_STATE,
- &ObjectAttributes,
- NotificationEvent,
- FALSE);
- if (!NT_SUCCESS(Status))
- {
- WARN("NtCreateEvent failed (Status 0x%08lx)\n", Status);
- return Status;
- }
- }
-
- Status = NtSetEvent(EventHandle, NULL);
- NtClose(EventHandle);
- if (!NT_SUCCESS(Status))
- {
- WARN("NtSetEvent failed (Status 0x%08lx)\n", Status);
- return Status;
- }
-
- PortThreadHandle = CreateThread(NULL,
- 0x1000,
- (LPTHREAD_START_ROUTINE)AuthPortThreadRoutine,
- NULL,
- 0,
- &ThreadId);
-
-
- return STATUS_SUCCESS;
-}
-
-/* EOF */
projects / reactos.git / blobdiff