2 Unix SMB/CIFS implementation.
3 Copyright (C) Andrew Tridgell 1992-2001
5 This program is free software; you can redistribute it and/or modify
6 it under the terms of the GNU General Public License as published by
7 the Free Software Foundation; either version 2 of the License, or
8 (at your option) any later version.
10 This program is distributed in the hope that it will be useful,
11 but WITHOUT ANY WARRANTY; without even the implied warranty of
12 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
13 GNU General Public License for more details.
15 You should have received a copy of the GNU General Public License
16 along with this program; if not, write to the Free Software
17 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
20 /* the Samba secrets database stores any generated, private information
21 such as the local SID and machine trust password */
25 static TDB_CONTEXT *tdb;
27 /* open up the secrets database */
28 BOOL secrets_init(void)
35 pstrcpy(fname, lp_private_dir());
36 pstrcat(fname,"/secrets.tdb");
38 tdb = tdb_open_log(fname, 0, TDB_DEFAULT, O_RDWR|O_CREAT, 0600);
41 DEBUG(0,("Failed to open %s\n", fname));
47 /* read a entry from the secrets database - the caller must free the result
48 if size is non-null then the size of the entry is put in there
50 void *secrets_fetch(char *key, size_t *size)
57 kbuf.dsize = strlen(key);
58 dbuf = tdb_fetch(tdb, kbuf);
64 /* store a secrets entry
66 BOOL secrets_store(char *key, void *data, size_t size)
73 kbuf.dsize = strlen(key);
76 return tdb_store(tdb, kbuf, dbuf, TDB_REPLACE) == 0;
80 /* delete a secets database entry
82 BOOL secrets_delete(char *key)
89 kbuf.dsize = strlen(key);
90 return tdb_delete(tdb, kbuf) == 0;
93 BOOL secrets_store_domain_sid(char *domain, DOM_SID *sid)
97 slprintf(key, sizeof(key)-1, "%s/%s", SECRETS_DOMAIN_SID, domain);
98 return secrets_store(key, sid, sizeof(DOM_SID));
101 BOOL secrets_fetch_domain_sid(char *domain, DOM_SID *sid)
107 slprintf(key, sizeof(key)-1, "%s/%s", SECRETS_DOMAIN_SID, domain);
108 dyn_sid = (DOM_SID *)secrets_fetch(key, &size);
113 if (size != sizeof(DOM_SID))
125 /************************************************************************
126 form a key for fetching a domain trust password
127 ************************************************************************/
128 char *trust_keystr(char *domain)
130 static fstring keystr;
132 slprintf(keystr,sizeof(keystr)-1,"%s/%s",
133 SECRETS_MACHINE_ACCT_PASS, domain);
138 /************************************************************************
139 Routine to get the trust account password for a domain.
140 ************************************************************************/
141 BOOL secrets_fetch_trust_account_password(char *domain, uint8 ret_pwd[16],
142 time_t *pass_last_set_time)
144 struct machine_acct_pass *pass;
148 plaintext = secrets_fetch_machine_password();
150 /* we have an ADS password - use that */
151 DEBUG(4,("Using ADS machine password\n"));
152 E_md4hash((uchar *)plaintext, ret_pwd);
153 SAFE_FREE(plaintext);
157 if (!(pass = secrets_fetch(trust_keystr(domain), &size))) {
158 DEBUG(5, ("secrets_fetch failed!\n"));
162 if (size != sizeof(*pass)) {
163 DEBUG(0, ("secrets were of incorrect size!\n"));
167 if (pass_last_set_time) *pass_last_set_time = pass->mod_time;
168 memcpy(ret_pwd, pass->hash, 16);
174 /************************************************************************
175 Routine to set the trust account password for a domain.
176 ************************************************************************/
177 BOOL secrets_store_trust_account_password(char *domain, uint8 new_pwd[16])
179 struct machine_acct_pass pass;
181 pass.mod_time = time(NULL);
182 memcpy(pass.hash, new_pwd, 16);
184 return secrets_store(trust_keystr(domain), (void *)&pass, sizeof(pass));
187 /************************************************************************
188 Routine to set the plaintext machine account password for a realm
189 the password is assumed to be a null terminated ascii string
190 ************************************************************************/
191 BOOL secrets_store_machine_password(char *pass)
193 return secrets_store(SECRETS_MACHINE_PASSWORD, pass, strlen(pass)+1);
197 /************************************************************************
198 Routine to fetch the plaintext machine account password for a realm
199 the password is assumed to be a null terminated ascii string
200 ************************************************************************/
201 char *secrets_fetch_machine_password(void)
203 return (char *)secrets_fetch(SECRETS_MACHINE_PASSWORD, NULL);
208 /************************************************************************
209 Routine to delete the trust account password file for a domain.
210 ************************************************************************/
212 BOOL trust_password_delete(char *domain)
214 return secrets_delete(trust_keystr(domain));
217 /*******************************************************************
218 Reset the 'done' variables so after a client process is created
219 from a fork call these calls will be re-done. This should be
220 expanded if more variables need reseting.
221 ******************************************************************/
223 void reset_globals_after_fork(void)
230 * Increment the global seed value to ensure every smbd starts
231 * with a new random seed.
235 uint32 initial_val = sys_getpid();
236 tdb_change_int32_atomic(tdb, "INFO/random_seed", (int *)&initial_val, 1);
237 set_rand_reseed_data((unsigned char *)&initial_val, sizeof(initial_val));
241 * Re-seed the random crypto generator, so all smbd's
242 * started from the same parent won't generate the same
245 generate_random_buffer( &dummy, 1, True);
248 BOOL secrets_store_ldap_pw(char* dn, char* pw)
255 if (*p == ',') *p = '/';
257 return secrets_store(key, pw, strlen(pw));
260 BOOL fetch_ldap_pw(char *dn, char* pw, int len)
269 if (*p == ',') *p = '/';
271 data=secrets_fetch(key, &size);
273 DEBUG(0,("fetch_ldap_pw: no ldap secret retrieved!\n"));
279 DEBUG(0,("fetch_ldap_pw: ldap secret is too long (%d > %d)!\n", size, len-1));
283 memcpy(pw, data, size);