ldapauth9x.cpp

远程控制软件UltraVNC

//ldapAuth9x.cpp
/////////////////////////////////////////////////////////////////////////////
//  Copyright (C) 2002 Ultr@VNC Team Members. All Rights Reserved.
//
//  This program is free software; you can redistribute it and/or modify
//  it under the terms of the GNU General Public License as published by
//  the Free Software Foundation; either version 2 of the License, or
//  (at your option) any later version.
//
//  This program is distributed in the hope that it will be useful,
//  but WITHOUT ANY WARRANTY; without even the implied warranty of
//  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
//  GNU General Public License for more details.
//
//  You should have received a copy of the GNU General Public License
//  along with this program; if not, write to the Free Software
//  Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA  02111-1307,
//  USA.
//
// If the source code for the program is not available from the place from
// which you received this file, check 
// http://ultravnc.sourceforge.net/
// /macine-vnc Greg Wood ([e-mail])


#include "ldapauth9x.h"

/////////////////////////

BOOL APIENTRY DllMain( HANDLE hModule, 
                       DWORD  ul_reason_for_call, 
                       LPVOID lpReserved
                                         )
{
    switch (ul_reason_for_call)
        {
                case DLL_PROCESS_ATTACH:
                case DLL_THREAD_ATTACH:
                case DLL_THREAD_DETACH:
                case DLL_PROCESS_DETACH:
                        break;
    }
    return TRUE;
}




LDAPAUTH9X_API
BOOL CUGP(char * userin,char *password,char *machine, char * groupin,int locdom)
{
        OSVERSIONINFO ovi = { sizeof ovi };
        GetVersionEx( &ovi );
        //if (ovi.dwPlatformId == VER_PLATFORM_WIN32_NT &&
    //  ovi.dwMajorVersion >= 5 )
        if ( 5 >= 5 )
        {
        //Handle the command line arguments.
        LPOLESTR pszBuffer = new OLECHAR[MAX_PATH*2];
        LPOLESTR pszBuffer2 = new OLECHAR[MAX_PATH*2];
        LPOLESTR pszBuffer3 = new OLECHAR[MAX_PATH*2];
        LPOLESTR pszBuffer4 = new OLECHAR[MAX_PATH*2];
        mbstowcs( (wchar_t *) pszBuffer, userin, MAX_PATH );
        mbstowcs( (wchar_t *) pszBuffer2, password, MAX_PATH );
        mbstowcs( (wchar_t *) pszBuffer3, machine, MAX_PATH );
        mbstowcs( (wchar_t *) pszBuffer4, groupin, MAX_PATH );
        HRESULT hr = S_OK;
        //Get rootDSE and the domain container's DN.
        IADs *pObject = NULL;
        IADs *pObjectUser = NULL;
        IADs *pObjectGroup = NULL;
        IDirectorySearch *pDS = NULL;
        LPOLESTR szPath = new OLECHAR[MAX_PATH];
        LPOLESTR myPath = new OLECHAR[MAX_PATH];
        
        wcscpy(szPath,L"LDAP://dc1.ad.local/dc=ad,dc=local"); //set to root of domain or search path
        wprintf(szPath);
        wprintf(L"\n");
        //VariantClear(&var);
        if (pObject)
                {
                        pObject->Release();
                        pObject = NULL;
                }
        wprintf( szPath);
        wprintf(L"\n");
        //Bind to the root of the current domain.
        hr = ADsOpenObject(szPath,pszBuffer,pszBuffer2,
                         ADS_SECURE_AUTHENTICATION,IID_IDirectorySearch,(void**)&pDS);
        if (SUCCEEDED(hr))
                {
                        if (SUCCEEDED(hr))
                                {
                                        hr =  FindUserByName(pDS, pszBuffer, pszBuffer, pszBuffer2, &pObjectUser);
                                        if (FAILED(hr))
                                                {
                                                        wprintf(L"User not found %i\n",hr);
                                                        delete [] pszBuffer;
                                                        delete [] pszBuffer2;
                                                        delete [] pszBuffer3;
                                                        delete [] szPath;
                                                        delete [] myPath;
                                                        if (pDS) pDS->Release();
                                                        if (pObjectUser) pObjectUser->Release();
                                                        return false;
                                                }
                                        if (pObjectUser) pObjectUser->Release();
                                        ///////////////////// VNCACCESS
                                        hr =  FindGroup(pDS, pszBuffer, pszBuffer, pszBuffer2, &pObjectGroup,pszBuffer4);
                                        if (pObjectGroup)
                                                                {
                                                                        pObjectGroup->Release();
                                                                        pObjectGroup = NULL;
                                                                }
                                        if (FAILED(hr)) wprintf(L"group not found\n");
                                        if (SUCCEEDED(hr))
                                                {
                                                        wprintf(L"Group found OK\n");
                                                        IADsGroup *     pIADsG;
                                                        hr = ADsOpenObject( gbsGroup,pszBuffer, pszBuffer2, 
                                                                        ADS_SECURE_AUTHENTICATION,IID_IADsGroup, (void**) &pIADsG);
                                                        if (SUCCEEDED(hr))
                                                                {
                                                                        VARIANT_BOOL bMember = FALSE;  
                                                                        hr = pIADsG->IsMember(gbsMember,&bMember);
                                                                        if (SUCCEEDED(hr))
                                                                                {
                                                                                        if (bMember == -1)
                                                                                                {
                                                                                                        wprintf(L"Object \n\n%s\n\n IS a member of the following Group:\n\n%s\n\n",gbsMember,gbsGroup);
                                                                                                        delete [] pszBuffer;
                                                                                                        delete [] pszBuffer2;
                                                                                                        delete [] pszBuffer3;
                                                                                                        delete [] szPath;
                                                                                                        delete [] myPath;
                                                                                                        if (pDS) pDS->Release();
                                                                                                        return true;
                                                                                                }
                                                                                        else
                                                                                                {
                                                                                                        BSTR bsMemberGUID = NULL;
                                                                                                        IDirectoryObject * pDOMember = NULL;
                                                                                                        hr = ADsOpenObject( gbsMember,pszBuffer, pszBuffer2, 
                                                                                                                        ADS_SECURE_AUTHENTICATION,IID_IDirectoryObject, (void**) &pDOMember);
                                                                                                        if (SUCCEEDED(hr))
                                                                                                                {
                                                                                                                        hr = GetObjectGuid(pDOMember,bsMemberGUID);
                                                                                                                        pDOMember->Release();
                                                                                                                        pDOMember  = NULL;
                                                                                                                        if (RecursiveIsMember(pIADsG,bsMemberGUID,gbsMember,true, pszBuffer, pszBuffer2))
                                                                                                                                {
                                                                                                                                        delete [] pszBuffer;
                                                                                                                                        delete [] pszBuffer2;
                                                                                                                                        delete [] pszBuffer3;
                                                                                                                                        delete [] szPath;
                                                                                                                                        delete [] myPath;
                                                                                                                                        if (pDS) pDS->Release();
                                                                                                                                        return true;
                                                                                                                                }
                                                                                                                }
                                                                                        }//else bmember
                                                                        }//ismember
                                                        }//iadsgroup 
                                        }//Findgroup
                                        wprintf(L"USER not found in group\n");
                                        
                                }//user
                }
        if (pDS) pDS->Release();

                /*LOGFAILED(pszBuffer3,pszBuffer);*/
                delete [] pszBuffer;
                delete [] pszBuffer2;
                delete [] pszBuffer3;
                delete [] szPath;
                delete [] myPath;
                return false;
        }
        return false;
}

HRESULT FindUserByName(IDirectorySearch *pSearchBase, //Container to search
                                           LPOLESTR szFindUser, LPOLESTR  pwszUser, LPOLESTR pwszPassword, //Name of user to find.
                                           IADs **ppUser) //Return a pointer to the user
{
    HRESULT hrObj = E_FAIL;
    HRESULT hr = E_FAIL;
        if ((!pSearchBase)||(!szFindUser))
                return E_INVALIDARG;
        //Create search filter
        LPOLESTR pszSearchFilter = new OLECHAR[MAX_PATH];
        LPOLESTR szADsPath = new OLECHAR[MAX_PATH];
        wcscpy(pszSearchFilter, L"(&(objectClass=user)(samAccountName=");
        wcscat(pszSearchFilter, szFindUser);
        wcscat(pszSearchFilter, L"))");
    //Search entire subtree from root.
        ADS_SEARCHPREF_INFO SearchPrefs;
        SearchPrefs.dwSearchPref = ADS_SEARCHPREF_SEARCH_SCOPE;
        SearchPrefs.vValue.dwType = ADSTYPE_INTEGER;
        SearchPrefs.vValue.Integer = ADS_SCOPE_SUBTREE;
    DWORD dwNumPrefs = 1;
        // COL for iterations
    ADS_SEARCH_COLUMN col;
    // Handle used for searching
    ADS_SEARCH_HANDLE hSearch;