Intravision/reactos
1
0
Fork 0
mirror of https://github.com/reactos/reactos.git synced 2025-01-01 03:54:02 +00:00
Code Issues Projects Releases Packages Wiki Activity

[LSASRV]

Browse source 
LsapLogonUser: Copy the local groups SID array from the clients adress space the servers adress space.

svn path=/trunk/; revision=61284
This commit is contained in:
Eric Kohl 2013-12-17 20:56:52 +00:00
parent 69f7494d47
commit a740935f27
1 changed files with 69 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

69
reactos/dll/win32/lsasrv/authpackage.c
View file

@ -539,6 +539,54 @@ LsapCallAuthenticationPackage(PLSA_API_MSG RequestMsg,
} }
static
NTSTATUS
LsapCopyLocalGroups(
IN PLSAP_LOGON_CONTEXT LogonContext,
IN PTOKEN_GROUPS ClientGroups,
IN ULONG ClientGroupsCount,
OUT PTOKEN_GROUPS *TokenGroups)
{
ULONG LocalGroupsLength = 0;
PTOKEN_GROUPS LocalGroups = NULL;
NTSTATUS Status;
LocalGroupsLength = sizeof(TOKEN_GROUPS) +
(ClientGroupsCount - ANYSIZE_ARRAY) * sizeof(SID_AND_ATTRIBUTES);
LocalGroups = RtlAllocateHeap(RtlGetProcessHeap(),
HEAP_ZERO_MEMORY,
LocalGroupsLength);
if (LocalGroups == NULL)
{
TRACE("RtlAllocateHeap() failed\n");
return STATUS_INSUFFICIENT_RESOURCES;
}
Status = NtReadVirtualMemory(LogonContext->ClientProcessHandle,
ClientGroups,
LocalGroups,
LocalGroupsLength,
NULL);
if (!NT_SUCCESS(Status))
goto done;
*TokenGroups = LocalGroups;
done:
if (!NT_SUCCESS(Status))
{
if (LocalGroups != NULL)
{
RtlFreeHeap(RtlGetProcessHeap(),
0,
LocalGroups);
}
}
return Status;
}
NTSTATUS NTSTATUS
LsapLogonUser(PLSA_API_MSG RequestMsg, LsapLogonUser(PLSA_API_MSG RequestMsg,
PLSAP_LOGON_CONTEXT LogonContext) PLSAP_LOGON_CONTEXT LogonContext)
@ -553,6 +601,7 @@ LsapLogonUser(PLSA_API_MSG RequestMsg,
PUNICODE_STRING AuthenticatingAuthority = NULL; PUNICODE_STRING AuthenticatingAuthority = NULL;
PUNICODE_STRING MachineName = NULL; PUNICODE_STRING MachineName = NULL;
PVOID LocalAuthInfo = NULL; PVOID LocalAuthInfo = NULL;
PTOKEN_GROUPS LocalGroups = NULL;
HANDLE TokenHandle = NULL; HANDLE TokenHandle = NULL;
ULONG i; ULONG i;
ULONG PackageId; ULONG PackageId;
@ -596,6 +645,18 @@ LsapLogonUser(PLSA_API_MSG RequestMsg,
} }
} }
if (RequestMsg->LogonUser.Request.LocalGroupsCount > 0)
{
Status = LsapCopyLocalGroups(LogonContext,
RequestMsg->LogonUser.Request.LocalGroups,
RequestMsg->LogonUser.Request.LocalGroupsCount,
&LocalGroups);
if (!NT_SUCCESS(Status))
goto done;
TRACE("GroupCount: %lu\n", LocalGroups->GroupCount);
}
if (Package->LsaApLogonUserEx2 != NULL) if (Package->LsaApLogonUserEx2 != NULL)
{ {
Status = Package->LsaApLogonUserEx2((PLSA_CLIENT_REQUEST)LogonContext, Status = Package->LsaApLogonUserEx2((PLSA_CLIENT_REQUEST)LogonContext,
@ -721,6 +782,12 @@ done:
NtClose(TokenHandle); NtClose(TokenHandle);
} }
/* Free the local groups */
if (LocalGroups != NULL)
{
RtlFreeHeap(RtlGetProcessHeap(), 0, LocalGroups);
}
/* Free the local authentication info buffer */ /* Free the local authentication info buffer */
if (LocalAuthInfo != NULL) if (LocalAuthInfo != NULL)
RtlFreeHeap(RtlGetProcessHeap(), 0, LocalAuthInfo); RtlFreeHeap(RtlGetProcessHeap(), 0, LocalAuthInfo);
@ -796,6 +863,8 @@ done:
LsapFreeHeap(MachineName); LsapFreeHeap(MachineName);
} }
TRACE("LsapLogonUser done (Status 0x%08lx)\n", Status);
return Status; return Status;
} }