|
|
//#pragma title ("SidCache.hpp -- Cache, Tree of SIDs")
/*
Copyright (c) 1995-1998, Mission Critical Software, Inc. All rights reserved. =============================================================================== Module - sidcache.hpp System - SDResolve Author - Christy Boles Created - 97/06/27 Description - Cache of SIDs. Implemented using TNode derived classes, Cache is organized as a tree, sorted by Domain B RID. Each node contains Domain A RID, Domain B RID, Account Name, and counters for stats. Updates - =============================================================================== */ #ifndef TSIDCACHE_HEADER
#define TSIDCACHE_HEADER
#ifndef TNODEINCLUDED
#include "Tnode.hpp"
#define TNODEINCLUDED
#endif
//#import "\bin\McsVarSetMin.tlb" no_namespace
//#import "VarSet.tlb" no_namespace rename("property", "aproperty")//#imported below via sdstat.hpp
#include "DCTStat.h"
#include "WorkObj.h"
#include "sdstat.hpp"
#ifndef IStatusObjPtr
_COM_SMARTPTR_TYPEDEF(IStatusObj, __uuidof(IStatusObj)); #endif
//#define ACCOUNT_NAME_LENGTH 256
#define NUM_IN_BUF 5000 /* the number of accounts to get at one time NetQueryDisplayInfo()*/
#define BUFSIZE 100000 /* preferred max size of buffer for receiving accounts NetQueryDisplayInfo()*/
#define DEFAULT_SID_SIZE 500
#define EALB_OCX_LOCAL_USER 13
#define EALB_OCX_GLOBAL_USER 14
#define EALB_OCX_LOCAL_GROUP 16
#define EALB_OCX_GLOBAL_GROUP 17
#define FST_CACHE_SOME_SOURCE 1
#define FST_CACHE_NO_TARGET 2
#define FST_CACHE_SOME_TARGET 4
#define FST_CACHE_NO_DOMAIN 8
class TAcctNode:public TNode {
protected: DWORD owner_changes; // Stats for each node
DWORD group_changes; DWORD ace_changes; DWORD sace_changes; public: TAcctNode(); virtual WCHAR * GetAcctName() = 0; virtual bool IsValidOnTgt() const = 0; virtual void AddOwnerChange(objectType type) { owner_changes++; } // Stats functions
virtual void AddGroupChange(objectType type) { group_changes++; } virtual void AddAceChange(objectType type) { ace_changes++; } virtual void AddSaceChange(objectType type) { sace_changes++; } virtual void DisplayStats() const; DWORD OwnerChanges() { return owner_changes; } DWORD GroupChanges() { return group_changes; } DWORD DACEChanges() { return ace_changes; } DWORD SACEChanges() { return sace_changes; } BOOL ReportToVarSet(IVarSet * pVarSet, DWORD n); }; class TRidNode:public TAcctNode { protected: DWORD srcRid; // RID for domain A
DWORD tgtRid; // RID for domain B
bool tgtRidIsValid; short acct_type; int acct_len; // length of account name
WCHAR srcDomSid[MAX_PATH]; // source domain sid
WCHAR tgtDomSid[MAX_PATH]; // target domain sid
WCHAR srcDomName[MAX_PATH]; // source domain name
WCHAR tgtDomName[MAX_PATH]; // target domain name
WCHAR acct_name[1]; // source account name \0 target account name
public: void * operator new(size_t sz,const LPWSTR name1,const LPWSTR name2); TRidNode(const LPWSTR oldacctname, const LPWSTR newacctname); ~TRidNode(); WCHAR * GetAcctName() { return acct_name; } // member "Get" functions
WCHAR * GetTargetAcctName() { return acct_name + acct_len + 1; } DWORD SrcRid() const { return srcRid; } DWORD TgtRid() const { return tgtRid; } bool IsValidOnTgt() const { return tgtRidIsValid; } short Type() { return acct_type; } void Type(short newtype) { acct_type = newtype; } void MarkInvalidOnTgt() { tgtRidIsValid = false; } void SrcRid(DWORD const val) { srcRid=val; } // member "Set" functions
void TgtRid(DWORD const val) { tgtRid=val; tgtRidIsValid=true;} void DisplayStats() const; void DisplaySidInfo() const; WCHAR * GetSrcDomSid() { return srcDomSid; } // member "Get" function
WCHAR * GetTgtDomSid() { return tgtDomSid; } // member "Get" function
void SrcDomSid(const LPWSTR sSid) { wcscpy(srcDomSid,sSid); } // member "Set" function
void TgtDomSid(const LPWSTR sSid) { wcscpy(tgtDomSid,sSid); } // member "Set" function
WCHAR * GetSrcDomName() { return srcDomName; } // member "Get" function
WCHAR * GetTgtDomName() { return tgtDomName; } // member "Get" function
void SrcDomName(const LPWSTR sName) { wcscpy(srcDomName,sName); } // member "Set" function
void TgtDomName(const LPWSTR sName) { wcscpy(tgtDomName,sName); } // member "Set" function
protected: };
class TGeneralSidNode:public TAcctNode { protected: LPWSTR src_acct_name; LPWSTR tgt_acct_name; PSID src_sid; PSID tgt_sid; UCHAR src_nsubs; UCHAR tgt_nsubs; WCHAR * src_domain; WCHAR * tgt_domain; DWORD sizediff; TSDFileDirCell ownerStats; TSDFileDirCell groupStats; TSDFileDirCell daclStats; TSDFileDirCell saclStats;
public: TGeneralSidNode(const LPWSTR name1, const LPWSTR name2); TGeneralSidNode(const PSID pSid1, const PSID pSid2); ~TGeneralSidNode(); LPWSTR GetAcctName() { return src_acct_name; } PSID SrcSid() { return src_sid; } PSID TgtSid() { return src_sid; /* this is a hack to allow for counting all references to accounts */ } bool IsValidOnTgt() const { return TRUE;/*tgt_sid != NULL;*/ } void DisplaySidInfo() const; DWORD SizeDiff() const { return 0; } TSDFileDirCell * GetOwnerStats() { return &ownerStats; } TSDFileDirCell * GetGroupStats() { return &groupStats; } TSDFileDirCell * GetDaclStats() { return &daclStats; } TSDFileDirCell * GetSaclStats() { return &saclStats; } virtual void AddOwnerChange(objectType type) { switch (type) { case file: ownerStats.file++; break; case directory: ownerStats.dir++; break; case mailbox: ownerStats.mailbox++; break; case container: ownerStats.container++; break; case share: ownerStats.share++; break; case groupmember: ownerStats.member++; break; case userright: ownerStats.userright++; break; case regkey: ownerStats.regkey++; break; case printer: ownerStats.printer++; break; default: break; }; } virtual void AddGroupChange(objectType type) { switch (type) { case file: groupStats.file++; break; case directory: groupStats.dir++; break; case mailbox: groupStats.mailbox++; break; case container: groupStats.container++; break; case share: groupStats.share++; break; case groupmember: groupStats.member++; break; case userright: groupStats.userright++; break; case regkey: groupStats.regkey++; break; case printer: groupStats.printer++; break; default: break; }; }
virtual void AddAceChange(objectType type) { switch (type) { case file: daclStats.file++; break; case directory: daclStats.dir++; break; case mailbox: daclStats.mailbox++; break; case container: daclStats.container++; break; case share: daclStats.share++; break; case groupmember: daclStats.member++; break; case userright: daclStats.userright++; break; case regkey: daclStats.regkey++; break; case printer: daclStats.printer++; break; default: break; }; } virtual void AddSaceChange(objectType type) { switch (type) { case file: saclStats.file++; break; case directory: saclStats.dir++; break; case mailbox: saclStats.mailbox++; break; case container: saclStats.container++; break; case share: saclStats.share++; break; case groupmember: saclStats.member++; break; case userright: saclStats.userright++; break; case regkey: saclStats.regkey++; break; case printer: saclStats.printer++; break; default: break; }; } };
/**************************************************************************************************/ /* TSidCache: Cache for SIDs.
The cache is filled by calling FillCache(name_of_domain_A, name_of_domain_B) Lookup, and GetName search the tree for a domain B SID value. Lookup returns a pointer to the node, while GetName returns the account name for the node. GetSidB( tsidnode *) builds and returns the domain B SID for the node (the node contains only the RID)
SizeDiff() returns the answer to "How much bigger are domain B sids than domain A sids?" this information is needed when allocating space for ACES. /**************************************************************************************************/
class TAccountCache: public TNodeListSortable { IStatusObjPtr m_pStatus; public: TAccountCache() { m_cancelled = false; m_bAddIfNotFound = FALSE; } ~TAccountCache() {} virtual TAcctNode * Lookup(const PSID psid) = 0; // sid lookup functions
virtual LPWSTR GetName(const PSID psid) = 0; //virtual BOOL Insert(const LPWSTR acctname,DWORD srcSid, DWORD tgtSid) = 0;
virtual PSID GetTgtSid(const TAcctNode* tnode) = 0; virtual DWORD SizeDiff(const TAcctNode *tnode) const = 0; // returns max( 0 , (length(to_sid) - length(from_sid)) )
bool IsCancelled() { if ( m_pStatus ) { LONG status = 0; // HRESULT hr = m_pStatus->get_Status(&status);
m_pStatus->get_Status(&status);
return (status == DCT_STATUS_ABORTING); } else { return m_cancelled; } } void Cancel() { m_cancelled = true; if ( m_pStatus ) m_pStatus->put_Status(DCT_STATUS_ABORTING); } void UnCancel() { m_cancelled = false; } void AddIfNotFound(BOOL val) { m_bAddIfNotFound = val; } BOOL AddIfNotFound() { return m_bAddIfNotFound; } void SetStatusObject(IStatusObj * pS) { m_pStatus = pS; } protected: bool m_cancelled; BOOL m_bAddIfNotFound; };
class TGeneralCache;
class TSDRidCache: public TAccountCache { protected: WCHAR from_domain[MAX_PATH + 1]; // domain names
WCHAR to_domain[MAX_PATH + 1]; WCHAR from_dc[MAX_PATH + 1]; // domain controller (machine) names
WCHAR to_dc[MAX_PATH + 1]; PSID from_sid; // domain sids (dynamically allocated)
PSID to_sid; UCHAR from_nsubs; // # subauthorities in domain sids
UCHAR to_nsubs; DWORD accts; // statistical stuff
DWORD accts_resolved; TGeneralCache * m_otherAccounts; public: TSDRidCache(); ~TSDRidCache(); // filling methods
WCHAR const * GetSourceDomainName() { return from_domain; } WCHAR const * GetTargetDomainName() { return to_domain; } WCHAR const * GetSourceDCName() { return from_dc; } WCHAR const * GetTargetDCName() { return to_dc; } void InsertLast(const LPWSTR acctname,DWORD rida, const LPWSTR newname, DWORD ridb, short type = 0) { TRidNode * tn = new (acctname,newname) TRidNode(acctname,newname); if (tn){tn->SrcRid(rida); tn->TgtRid(ridb); tn->Type(type); if ( ridb == 0 ) tn->MarkInvalidOnTgt(); else accts_resolved++; accts++; TNodeListSortable::InsertBottom((TNode *)tn); }} void InsertLastWithSid(const LPWSTR acctname, const LPWSTR srcdomainsid, const LPWSTR srcdomainname, DWORD rida, const LPWSTR newname, const LPWSTR tgtdomainsid, const LPWSTR tgtdomainname, DWORD ridb, short type = 0) { TRidNode * tn = new (acctname,newname) TRidNode(acctname,newname); if (tn){tn->SrcRid(rida); tn->TgtRid(ridb); tn->SrcDomSid(srcdomainsid); tn->TgtDomSid(tgtdomainsid); tn->SrcDomName(srcdomainname); tn->TgtDomName(tgtdomainname); tn->Type(type); if ( ridb == 0 ) tn->MarkInvalidOnTgt(); else accts_resolved++; accts++; TNodeListSortable::InsertBottom((TNode *)tn); }} TAcctNode * Lookup(const PSID psid); // sid lookup functions
TAcctNode * LookupWODomain(const PSID psid); // sid lookup functions
LPWSTR GetName(const PSID psid); // helper methods
PSID GetTgtSid(TAcctNode const * tnode) ; // "Get" functions
DWORD SizeDiff(const TAcctNode *tnode) const ; // returns max( 0 , (length(to_sid) - length(from_sid)) )
void Display(bool summary, bool detail); void ReportToVarSet(IVarSet * pVarSet,bool summary, bool detail); PSID GetTgtSid(const PSID psid) { return GetTgtSid(Lookup(psid)); } void CopyDomainInfo( TSDRidCache const * other); PSID GetTgtSidWODomain(TAcctNode const * tnode); // "Get" functions
PSID GetTgtSidWODomain(const PSID psid) { return GetTgtSid(LookupWODomain(psid)); } // "Get" functions
DWORD GetNumAccts() const {return accts; } DWORD GetNumResolvedAccts() const { return accts_resolved; } void Clear(); void SetSourceAndTargetDomains(WCHAR const * src, WCHAR const * tgt) { SetDomainInfo(src,true); SetDomainInfo(tgt,false); } void SetSourceAndTargetDomainsWithSids(WCHAR const * src, WCHAR const * srcSid, WCHAR const * tgt,WCHAR const * tgtSid) { SetDomainInfoWithSid(src,srcSid,true); SetDomainInfoWithSid(tgt,tgtSid,false); } void ReportAccountReferences(WCHAR const * filename); BOOL IsInitialized() { return from_sid!=NULL && to_sid!=NULL; } protected: int SetDomainInfo(WCHAR const * domname, bool firstdom); int SetDomainInfoWithSid(WCHAR const * domainName, WCHAR const * domainSid, bool firstdom); };
class TGeneralCache : public TAccountCache { protected: DWORD accts; // statistical stuff
DWORD accts_resolved; public: TGeneralCache(); ~TGeneralCache(); TAcctNode * Lookup(const PSID psid) ; // sid lookup functions
LPWSTR GetName(const PSID psid) ; BOOL Insert(const LPWSTR acctname1,const LPWSTR acctname2,PSID sid1, PSID sid2); PSID GetTgtSid(const TAcctNode* tnode) { return ((TGeneralSidNode *)tnode)->TgtSid(); } DWORD SizeDiff(const TAcctNode *tnode) const { return ((TGeneralSidNode *)tnode)->SizeDiff(); } // returns max( 0 , (length(to_sid) - length(from_sid)) )
};
// Global Functions
struct SDRDomainInfo { bool valid; PSID domain_sid; WCHAR domain_name[80]; WCHAR dc_name[80]; UCHAR nsubs; }; int vRidComp(const TNode * tn, const void * v1); int vNameComp(const TNode * tn, const void * v1); int vTargetNameComp(const TNode * tn, const void * v1); int RidComp(const TNode * n1, const TNode * n2); int CompN(const TNode * n1, const TNode * n2); int CompTargetN(const TNode * n1, const TNode * n2);
void DisplaySid(const PSID); // displays the contents of a SID
void DisplaySid(const PSID,TAccountCache *); // displays the acct name if in cache, or
void SetDomainInfoStruct( WCHAR const * domname, // in -name of domain
SDRDomainInfo * info // in -struct to put info into
);
void SetDomainInfoStructFromSid( PSID pSid, // in -sid for domain
SDRDomainInfo * info // in -struct to put info into
);
PSID DomainizeSid(PSID psid,BOOL freeOldSid); #endif
|