1/*
2 * CDDL HEADER START
3 *
4 * The contents of this file are subject to the terms of the
5 * Common Development and Distribution License (the "License").
6 * You may not use this file except in compliance with the License.
7 *
8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
9 * or http://www.opensolaris.org/os/licensing.
10 * See the License for the specific language governing permissions
11 * and limitations under the License.
12 *
13 * When distributing Covered Code, include this CDDL HEADER in each
14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE.
15 * If applicable, add the following below this CDDL HEADER, with the
16 * fields enclosed by brackets "[]" replaced with your own identifying
17 * information: Portions Copyright [yyyy] [name of copyright owner]
18 *
19 * CDDL HEADER END
20 */
21/*
22 * Copyright 2010 Sun Microsystems, Inc.  All rights reserved.
23 * Use is subject to license terms.
24 */
25
26#ifndef _SMBSRV_NETRAUTH_H
27#define	_SMBSRV_NETRAUTH_H
28
29/*
30 * NETR remote authentication and logon services.
31 */
32
33#include <sys/types.h>
34#include <smbsrv/wintypes.h>
35#include <smbsrv/netbios.h>
36#include <smbsrv/smbinfo.h>
37
38#ifdef __cplusplus
39extern "C" {
40#endif
41
42/*
43 * See also netlogon.ndl.
44 */
45#define	NETR_WKSTA_TRUST_ACCOUNT_TYPE		0x02
46#define	NETR_DOMAIN_TRUST_ACCOUNT_TYPE		0x04
47
48/*
49 * Negotiation flags for challenge/response authentication.
50 */
51#define	NETR_NEGOTIATE_BASE_FLAGS		0x000001FF
52#define	NETR_NEGOTIATE_STRONGKEY_FLAG		0x00004000
53
54#define	NETR_SESSKEY64_SZ			8
55#define	NETR_SESSKEY128_SZ			16
56#define	NETR_SESSKEY_MAXSZ			NETR_SESSKEY128_SZ
57#define	NETR_CRED_DATA_SZ			8
58#define	NETR_OWF_PASSWORD_SZ			16
59
60/*
61 * SAM logon levels: interactive and network.
62 */
63#define	NETR_INTERACTIVE_LOGON			0x01
64#define	NETR_NETWORK_LOGON			0x02
65
66/*
67 * SAM logon validation levels.
68 */
69#define	NETR_VALIDATION_LEVEL3			0x03
70
71/*
72 * This is a duplicate of the netr_credential
73 * from netlogon.ndl.
74 */
75typedef struct netr_cred {
76	BYTE data[NETR_CRED_DATA_SZ];
77} netr_cred_t;
78
79typedef struct netr_session_key {
80	BYTE key[NETR_SESSKEY_MAXSZ];
81	short len;
82} netr_session_key_t;
83
84#define	NETR_FLG_NULL		0x00000001
85#define	NETR_FLG_VALID		0x00000001
86#define	NETR_FLG_INIT		0x00000002
87
88/*
89 * 120-byte machine account password (null-terminated)
90 */
91#define	NETR_MACHINE_ACCT_PASSWD_MAX	120 + 1
92
93typedef struct netr_info {
94	DWORD flags;
95	char server[NETBIOS_NAME_SZ * 2];
96	char hostname[NETBIOS_NAME_SZ * 2];
97	netr_cred_t client_challenge;
98	netr_cred_t server_challenge;
99	netr_cred_t client_credential;
100	netr_cred_t server_credential;
101	netr_session_key_t session_key;
102	BYTE password[NETR_MACHINE_ACCT_PASSWD_MAX];
103	time_t timestamp;
104} netr_info_t;
105
106/*
107 * NETLOGON private interface.
108 */
109int netr_gen_skey64(netr_info_t *);
110int netr_gen_skey128(netr_info_t *);
111
112int netr_gen_credentials(BYTE *, netr_cred_t *, DWORD, netr_cred_t *);
113
114
115#define	NETR_A2H(c) (isdigit(c)) ? ((c) - '0') : ((c) - 'A' + 10)
116
117#ifdef __cplusplus
118}
119#endif
120
121#endif /* _SMBSRV_NETRAUTH_H */
122