Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2024-12-29 02:25:17 +00:00
Code Issues Projects Releases Packages Wiki Activity
reactos/dll/win32/lsasrv/authport.c

407 lines
12 KiB
C
Raw Normal View History

- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
/*
* PROJECT: Local Security Authority Server DLL
* LICENSE: GPL - See COPYING in the top level directory
* FILE: dll/win32/lsasrv/authport.c
* PURPOSE: LsaAuthenticationPort server routines
* COPYRIGHT: Copyright 2009 Eric Kohl
*/
#include "lsasrv.h"
[LSASRV] * Remove one time inclusions from the main header and put them back where they belong. CORE-7716 svn path=/trunk/; revision=61775
2014-01-23 17:51:20 +00:00
#include <ndk/lpcfuncs.h>
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
static LIST_ENTRY LsapLogonContextList;
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
static HANDLE PortThreadHandle = NULL;
static HANDLE AuthPortHandle = NULL;
/* FUNCTIONS ***************************************************************/
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
static NTSTATUS
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
LsapDeregisterLogonProcess(PLSA_API_MSG RequestMsg,
PLSAP_LOGON_CONTEXT LogonContext)
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
{
[LSASRV] Add some comments and improve trace messages. svn path=/trunk/; revision=75932
2017-09-23 18:58:39 +00:00
TRACE("LsapDeregisterLogonProcess(%p %p)\n", RequestMsg, LogonContext);
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
RemoveHeadList(&LogonContext->Entry);
NtClose(LogonContext->ClientProcessHandle);
NtClose(LogonContext->ConnectionHandle);
RtlFreeHeap(RtlGetProcessHeap(), 0, LogonContext);
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
return STATUS_SUCCESS;
}
[LSA][SECUR32] Check for untrusted clients Calls to LsapCallAuthenticationPackage are routed to LsaApCallPackageUntrusted instead of LsaApCallPackage for untrusted clients.
2019-09-17 10:58:11 +00:00
static
BOOL
LsapIsTrustedClient(
_In_ HANDLE ProcessHandle)
{
LUID TcbPrivilege = {SE_TCB_PRIVILEGE, 0};
HANDLE TokenHandle = NULL;
PTOKEN_PRIVILEGES Privileges = NULL;
ULONG Size, i;
BOOL Trusted = FALSE;
NTSTATUS Status;
Status = NtOpenProcessToken(ProcessHandle,
TOKEN_QUERY,
&TokenHandle);
if (!NT_SUCCESS(Status))
goto done;
Status = NtQueryInformationToken(TokenHandle,
TokenPrivileges,
NULL,
0,
&Size);
if (!NT_SUCCESS(Status) && Status != STATUS_BUFFER_TOO_SMALL)
goto done;
Privileges = RtlAllocateHeap(RtlGetProcessHeap(), 0, Size);
if (Privileges == NULL)
goto done;
Status = NtQueryInformationToken(TokenHandle,
TokenPrivileges,
Privileges,
Size,
&Size);
if (!NT_SUCCESS(Status))
goto done;
for (i = 0; i < Privileges->PrivilegeCount; i++)
{
if (RtlEqualLuid(&Privileges->Privileges[i].Luid, &TcbPrivilege))
{
Trusted = TRUE;
break;
}
}
done:
if (Privileges != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, Privileges);
if (TokenHandle != NULL)
NtClose(TokenHandle);
return Trusted;
}
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
static NTSTATUS
LsapCheckLogonProcess(PLSA_API_MSG RequestMsg,
PLSAP_LOGON_CONTEXT *LogonContext)
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
{
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
OBJECT_ATTRIBUTES ObjectAttributes;
HANDLE ProcessHandle = NULL;
PLSAP_LOGON_CONTEXT Context = NULL;
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
NTSTATUS Status;
[LSASRV] Add some comments and improve trace messages. svn path=/trunk/; revision=75932
2017-09-23 18:58:39 +00:00
TRACE("LsapCheckLogonProcess(%p)\n", RequestMsg);
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
TRACE("Client ID: %p %p\n", RequestMsg->h.ClientId.UniqueProcess, RequestMsg->h.ClientId.UniqueThread);
InitializeObjectAttributes(&ObjectAttributes,
NULL,
0,
NULL,
NULL);
Status = NtOpenProcess(&ProcessHandle,
[LSA][SECUR32] Check for untrusted clients Calls to LsapCallAuthenticationPackage are routed to LsaApCallPackageUntrusted instead of LsaApCallPackage for untrusted clients.
2019-09-17 10:58:11 +00:00
PROCESS_VM_READ | PROCESS_VM_WRITE | PROCESS_VM_OPERATION | PROCESS_DUP_HANDLE | PROCESS_QUERY_INFORMATION,
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
&ObjectAttributes,
&RequestMsg->h.ClientId);
if (!NT_SUCCESS(Status))
{
TRACE("NtOpenProcess() failed (Status %lx)\n", Status);
return Status;
}
/* Allocate the logon context */
Context = RtlAllocateHeap(RtlGetProcessHeap(),
HEAP_ZERO_MEMORY,
sizeof(LSAP_LOGON_CONTEXT));
if (Context == NULL)
{
NtClose(ProcessHandle);
return STATUS_INSUFFICIENT_RESOURCES;
}
TRACE("New LogonContext: %p\n", Context);
Context->ClientProcessHandle = ProcessHandle;
[LSASRV][SECUR32] Fix the naming mess Rename Untrusted to TrustredCaller in LSA_CONNECTION_INFO and LSAP_LOGON_CONTEXT in order to clarify the meaning of the variable.
2021-02-28 10:03:07 +00:00
Context->TrustedCaller = RequestMsg->ConnectInfo.TrustedCaller;
[LSA][SECUR32] Check for untrusted clients Calls to LsapCallAuthenticationPackage are routed to LsaApCallPackageUntrusted instead of LsaApCallPackage for untrusted clients.
2019-09-17 10:58:11 +00:00
[LSASRV][SECUR32] Fix the naming mess Rename Untrusted to TrustredCaller in LSA_CONNECTION_INFO and LSAP_LOGON_CONTEXT in order to clarify the meaning of the variable.
2021-02-28 10:03:07 +00:00
if (Context->TrustedCaller)
Context->TrustedCaller = LsapIsTrustedClient(ProcessHandle);
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
*LogonContext = Context;
return STATUS_SUCCESS;
}
static NTSTATUS
LsapHandlePortConnection(PLSA_API_MSG RequestMsg)
{
PLSAP_LOGON_CONTEXT LogonContext = NULL;
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
HANDLE ConnectionHandle = NULL;
BOOLEAN Accept;
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
REMOTE_PORT_VIEW RemotePortView;
[SECUR32][LSASRV][LSALIB] - Move the stubs LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification from lsalib to secur32, because these functions are exported by secur32.dll only. - Add new LPC connection code to secur32.dll for use by non-logon related functions. - Implement LsaEnumerateLogonSessions in secur32.dll and LsapEnumLogonSessions in lsasrv.dll. svn path=/trunk/; revision=64266
2014-09-25 12:37:19 +00:00
NTSTATUS Status = STATUS_SUCCESS;
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
[LSASRV] Add some comments and improve trace messages. svn path=/trunk/; revision=75932
2017-09-23 18:58:39 +00:00
TRACE("LsapHandlePortConnection(%p)\n", RequestMsg);
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
TRACE("Logon Process Name: %s\n", RequestMsg->ConnectInfo.LogonProcessNameBuffer);
[REACTOS] Replace comparison against TRUE with comparison against FALSE Based on patch by Love Nystrom svn path=/trunk/; revision=76021
2017-10-01 14:42:04 +00:00
if (RequestMsg->ConnectInfo.CreateContext != FALSE)
[SECUR32][LSASRV][LSALIB] - Move the stubs LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification from lsalib to secur32, because these functions are exported by secur32.dll only. - Add new LPC connection code to secur32.dll for use by non-logon related functions. - Implement LsaEnumerateLogonSessions in secur32.dll and LsapEnumLogonSessions in lsasrv.dll. svn path=/trunk/; revision=64266
2014-09-25 12:37:19 +00:00
{
Status = LsapCheckLogonProcess(RequestMsg,
&LogonContext);
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
[SECUR32][LSASRV][LSALIB] - Move the stubs LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification from lsalib to secur32, because these functions are exported by secur32.dll only. - Add new LPC connection code to secur32.dll for use by non-logon related functions. - Implement LsaEnumerateLogonSessions in secur32.dll and LsapEnumLogonSessions in lsasrv.dll. svn path=/trunk/; revision=64266
2014-09-25 12:37:19 +00:00
RequestMsg->ConnectInfo.OperationalMode = 0x43218765;
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
[SECUR32][LSASRV][LSALIB] - Move the stubs LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification from lsalib to secur32, because these functions are exported by secur32.dll only. - Add new LPC connection code to secur32.dll for use by non-logon related functions. - Implement LsaEnumerateLogonSessions in secur32.dll and LsapEnumLogonSessions in lsasrv.dll. svn path=/trunk/; revision=64266
2014-09-25 12:37:19 +00:00
RequestMsg->ConnectInfo.Status = Status;
}
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
if (NT_SUCCESS(Status))
{
Accept = TRUE;
}
else
{
Accept = FALSE;
}
RemotePortView.Length = sizeof(REMOTE_PORT_VIEW);
Status = NtAcceptConnectPort(&ConnectionHandle,
(PVOID*)LogonContext,
&RequestMsg->h,
Accept,
NULL,
&RemotePortView);
if (!NT_SUCCESS(Status))
{
ERR("NtAcceptConnectPort failed (Status 0x%lx)\n", Status);
return Status;
}
[REACTOS] Replace comparison against TRUE with comparison against FALSE Based on patch by Love Nystrom svn path=/trunk/; revision=76021
2017-10-01 14:42:04 +00:00
if (Accept != FALSE)
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
{
[SECUR32][LSASRV][LSALIB] - Move the stubs LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification from lsalib to secur32, because these functions are exported by secur32.dll only. - Add new LPC connection code to secur32.dll for use by non-logon related functions. - Implement LsaEnumerateLogonSessions in secur32.dll and LsapEnumLogonSessions in lsasrv.dll. svn path=/trunk/; revision=64266
2014-09-25 12:37:19 +00:00
if (LogonContext != NULL)
{
LogonContext->ConnectionHandle = ConnectionHandle;
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
[SECUR32][LSASRV][LSALIB] - Move the stubs LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification from lsalib to secur32, because these functions are exported by secur32.dll only. - Add new LPC connection code to secur32.dll for use by non-logon related functions. - Implement LsaEnumerateLogonSessions in secur32.dll and LsapEnumLogonSessions in lsasrv.dll. svn path=/trunk/; revision=64266
2014-09-25 12:37:19 +00:00
InsertHeadList(&LsapLogonContextList,
&LogonContext->Entry);
}
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
Status = NtCompleteConnectPort(ConnectionHandle);
if (!NT_SUCCESS(Status))
{
ERR("NtCompleteConnectPort failed (Status 0x%lx)\n", Status);
return Status;
}
}
return Status;
}
NTSTATUS WINAPI
AuthPortThreadRoutine(PVOID Param)
{
PLSAP_LOGON_CONTEXT LogonContext;
PLSA_API_MSG ReplyMsg = NULL;
LSA_API_MSG RequestMsg;
NTSTATUS Status;
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
TRACE("AuthPortThreadRoutine() called\n");
Status = STATUS_SUCCESS;
for (;;)
{
[LSASRV] - LsapCheckLogonProcess: Open client process using the PROCESS_DUP_HANDLE access right because we need to duplicate the logon token back into the clients handle table. svn path=/trunk/; revision=59013
2013-05-13 13:05:16 +00:00
TRACE("Reply: %p\n", ReplyMsg);
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
Status = NtReplyWaitReceivePort(AuthPortHandle,
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
(PVOID*)&LogonContext,
[LSASRV] - LsapCheckLogonProcess: Open client process using the PROCESS_DUP_HANDLE access right because we need to duplicate the logon token back into the clients handle table. svn path=/trunk/; revision=59013
2013-05-13 13:05:16 +00:00
(PPORT_MESSAGE)ReplyMsg,
(PPORT_MESSAGE)&RequestMsg);
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
if (!NT_SUCCESS(Status))
{
TRACE("NtReplyWaitReceivePort() failed (Status %lx)\n", Status);
break;
}
TRACE("Received message\n");
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
switch (RequestMsg.h.u2.s2.Type)
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
{
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
case LPC_CONNECTION_REQUEST:
TRACE("Port connection request\n");
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
Status = LsapHandlePortConnection(&RequestMsg);
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
ReplyMsg = NULL;
break;
case LPC_PORT_CLOSED:
TRACE("Port closed\n");
ReplyMsg = NULL;
break;
case LPC_CLIENT_DIED:
TRACE("Client died\n");
ReplyMsg = NULL;
break;
default:
TRACE("Received request (ApiNumber: %lu)\n", RequestMsg.ApiNumber);
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
switch (RequestMsg.ApiNumber)
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
{
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
case LSASS_REQUEST_CALL_AUTHENTICATION_PACKAGE:
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
RequestMsg.Status = LsapCallAuthenticationPackage(&RequestMsg,
LogonContext);
ReplyMsg = &RequestMsg;
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
break;
case LSASS_REQUEST_DEREGISTER_LOGON_PROCESS:
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
ReplyMsg = &RequestMsg;
RequestMsg.Status = STATUS_SUCCESS;
[LSASRV] - LsapCheckLogonProcess: Open client process using the PROCESS_DUP_HANDLE access right because we need to duplicate the logon token back into the clients handle table. svn path=/trunk/; revision=59013
2013-05-13 13:05:16 +00:00
NtReplyPort(AuthPortHandle,
&ReplyMsg->h);
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
LsapDeregisterLogonProcess(&RequestMsg,
LogonContext);
ReplyMsg = NULL;
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
break;
case LSASS_REQUEST_LOGON_USER:
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
RequestMsg.Status = LsapLogonUser(&RequestMsg,
LogonContext);
ReplyMsg = &RequestMsg;
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
break;
case LSASS_REQUEST_LOOKUP_AUTHENTICATION_PACKAGE:
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
RequestMsg.Status = LsapLookupAuthenticationPackage(&RequestMsg,
LogonContext);
ReplyMsg = &RequestMsg;
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
break;
[SECUR32][LSASRV][LSALIB] - Move the stubs LsaEnumerateLogonSessions, LsaGetLogonSessionData, LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification from lsalib to secur32, because these functions are exported by secur32.dll only. - Add new LPC connection code to secur32.dll for use by non-logon related functions. - Implement LsaEnumerateLogonSessions in secur32.dll and LsapEnumLogonSessions in lsasrv.dll. svn path=/trunk/; revision=64266
2014-09-25 12:37:19 +00:00
case LSASS_REQUEST_ENUM_LOGON_SESSIONS:
RequestMsg.Status = LsapEnumLogonSessions(&RequestMsg);
ReplyMsg = &RequestMsg;
break;
[LSASRV][SECUR32] - Implement a first version of LsaGetLogonSessionData. - Add a simple way to disable LsaEnumerateLogonSessions and LsaGetLogonSessionData in case they cause problems. svn path=/trunk/; revision=64384
2014-09-28 23:02:09 +00:00
case LSASS_REQUEST_GET_LOGON_SESSION_DATA:
RequestMsg.Status = LsapGetLogonSessionData(&RequestMsg);
ReplyMsg = &RequestMsg;
break;
[LSASRV][SECUR32] Implement LsaRegisterPolicyChangeNotification and LsaUnregisterPolicyChangeNotification
2018-08-04 20:17:52 +00:00
case LSASS_REQUEST_POLICY_CHANGE_NOTIFY:
RequestMsg.Status = LsapRegisterNotification(&RequestMsg);
ReplyMsg = &RequestMsg;
break;
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
default:
[LSASRV] - LsapCheckLogonProcess: Open client process using the PROCESS_DUP_HANDLE access right because we need to duplicate the logon token back into the clients handle table. svn path=/trunk/; revision=59013
2013-05-13 13:05:16 +00:00
RequestMsg.Status = STATUS_INVALID_SYSTEM_SERVICE;
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
ReplyMsg = &RequestMsg;
[LSALIB/LSASRV] - Add the LSA_CONNECTION_INFO struct to the LSA_API_MSG in order to handle the connection info in an easy way. - Let the connection handler return OperationalMode and Status values. This obsoletes a separate register call to lsasrv.dll, thus remove the register call code entirely. - Add dispatcher code and stubs for the remaining client calls. - Add experimental implementation of LsaCallAuthenticationPackage and LsaLogonUser. svn path=/trunk/; revision=58304
2013-02-10 12:09:21 +00:00
break;
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
}
break;
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
}
}
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
return STATUS_SUCCESS;
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
}
NTSTATUS
StartAuthenticationPort(VOID)
{
OBJECT_ATTRIBUTES ObjectAttributes;
UNICODE_STRING PortName;
DWORD ThreadId;
[LSASRV] Open/Create and set the \\SECURITY\\LSA_AUTHENTICATION_INITIALIZED event after the LsaAuthenticationPort has been created. svn path=/trunk/; revision=72755
2016-09-21 07:27:18 +00:00
UNICODE_STRING EventName;
HANDLE EventHandle;
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
NTSTATUS Status;
[LSASRV] Open/Create and set the \\SECURITY\\LSA_AUTHENTICATION_INITIALIZED event after the LsaAuthenticationPort has been created. svn path=/trunk/; revision=72755
2016-09-21 07:27:18 +00:00
TRACE("StartAuthenticationPort()\n");
[LSASRV] Create a context struct when the client is registered and delete it when the client is deregistered. In the mean time, pass the context to all client authentication functions. The context contains a handle to the client process and a handle to the current connection port. The process handle will later be used to retrieve and return logon data and to pass the toke handle back to the client. svn path=/trunk/; revision=58308
2013-02-10 21:09:28 +00:00
/* Initialize the logon context list */
InitializeListHead(&LsapLogonContextList);
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
RtlInitUnicodeString(&PortName,
L"\\LsaAuthenticationPort");
InitializeObjectAttributes(&ObjectAttributes,
&PortName,
0,
NULL,
NULL);
Status = NtCreatePort(&AuthPortHandle,
&ObjectAttributes,
[LSALIB/LSASRV] Make the call sequence LsaRegisterLogonProcess, LsaLookupAuthenticationPackage, LsaDeregisterLogonProcess work without failures or loss of connection. WIP. svn path=/trunk/; revision=58303
2013-02-09 22:56:26 +00:00
sizeof(LSA_CONNECTION_INFO),
sizeof(LSA_API_MSG),
sizeof(LSA_API_MSG) * 32);
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
if (!NT_SUCCESS(Status))
{
[LSASRV] Open/Create and set the \\SECURITY\\LSA_AUTHENTICATION_INITIALIZED event after the LsaAuthenticationPort has been created. svn path=/trunk/; revision=72755
2016-09-21 07:27:18 +00:00
WARN("NtCreatePort() failed (Status %lx)\n", Status);
return Status;
}
RtlInitUnicodeString(&EventName,
L"\\SECURITY\\LSA_AUTHENTICATION_INITIALIZED");
InitializeObjectAttributes(&ObjectAttributes,
&EventName,
OBJ_CASE_INSENSITIVE | OBJ_PERMANENT,
NULL,
NULL);
Status = NtOpenEvent(&EventHandle,
EVENT_MODIFY_STATE,
&ObjectAttributes);
if (!NT_SUCCESS(Status))
{
TRACE("NtOpenEvent failed (Status 0x%08lx)\n", Status);
Status = NtCreateEvent(&EventHandle,
EVENT_MODIFY_STATE,
&ObjectAttributes,
NotificationEvent,
FALSE);
if (!NT_SUCCESS(Status))
{
WARN("NtCreateEvent failed (Status 0x%08lx)\n", Status);
return Status;
}
}
Status = NtSetEvent(EventHandle, NULL);
NtClose(EventHandle);
if (!NT_SUCCESS(Status))
{
WARN("NtSetEvent failed (Status 0x%08lx)\n", Status);
- Lsasrv: Create the LsaAuthenticationPort and add a basic server loop that listens to incoming requests. - Lsalib: Combine request and reply data of the register request into a connection info struct. My test application can now connect to the LsaAuthenticationPort. svn path=/trunk/; revision=44793
2009-12-28 11:59:20 +00:00
return Status;
}
PortThreadHandle = CreateThread(NULL,
0x1000,
(LPTHREAD_START_ROUTINE)AuthPortThreadRoutine,
NULL,
0,
&ThreadId);
return STATUS_SUCCESS;
}
/* EOF */
Reference in a new issue Copy permalink