Netlogon.java

/**
 * Copyright (c) 2000-present Liferay, Inc. All rights reserved.
 *
 * This library is free software; you can redistribute it and/or modify it under
 * the terms of the GNU Lesser General Public License as published by the Free
 * Software Foundation; either version 2.1 of the License, or (at your option)
 * any later version.
 *
 * This library is distributed in the hope that it will be useful, but WITHOUT
 * ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS
 * FOR A PARTICULAR PURPOSE. See the GNU Lesser General Public License for more
 * details.
 */

package com.liferay.portal.security.sso.ntlm.internal;

import com.liferay.portal.kernel.log.Log;
import com.liferay.portal.kernel.log.LogFactoryUtil;
import com.liferay.portal.security.sso.ntlm.internal.msrpc.NetlogonAuthenticator;
import com.liferay.portal.security.sso.ntlm.internal.msrpc.NetlogonIdentityInfo;
import com.liferay.portal.security.sso.ntlm.internal.msrpc.NetlogonNetworkInfo;
import com.liferay.portal.security.sso.ntlm.internal.msrpc.NetlogonValidationSamInfo;
import com.liferay.portal.security.sso.ntlm.internal.msrpc.NetrLogonSamLogon;

import java.io.IOException;

import java.security.NoSuchAlgorithmException;

import jcifs.dcerpc.DcerpcBinding;
import jcifs.dcerpc.DcerpcHandle;
import jcifs.dcerpc.UnicodeString;

import jcifs.smb.SmbException;

/**
 * @author Marcellus Tavares
 * @author Michael C. Han
 */
public class Netlogon {

	public Netlogon(
		String domainController, String domainControllerName,
		NetlogonConnectionManager netlogonConnectionManager,
		NtlmServiceAccount ntlmServiceAccount) {

		_domainController = domainController;
		_domainControllerName = domainControllerName;
		_netlogonConnectionManager = netlogonConnectionManager;
		_ntlmServiceAccount = ntlmServiceAccount;
	}

	public NtlmUserAccount logon(
			String domain, String userName, String workstation,
			byte[] serverChallenge, byte[] ntResponse, byte[] lmResponse)
		throws NtlmLogonException {

		NetlogonConnection netlogonConnection = null;

		try {
			netlogonConnection = _netlogonConnectionManager.connect(
				_domainController, _domainControllerName, _ntlmServiceAccount);

			NetlogonAuthenticator netlogonAuthenticator =
				netlogonConnection.computeNetlogonAuthenticator();

			NetlogonIdentityInfo netlogonIdentityInfo =
				new NetlogonIdentityInfo(
					domain, 0x00000820, 0, 0, userName, workstation);

			NetlogonNetworkInfo netlogonNetworkInfo = new NetlogonNetworkInfo(
				netlogonIdentityInfo, serverChallenge, ntResponse, lmResponse);

			NetrLogonSamLogon netrLogonSamLogon = new NetrLogonSamLogon(
				_domainControllerName, _ntlmServiceAccount.getComputerName(),
				netlogonAuthenticator, new NetlogonAuthenticator(), 2,
				netlogonNetworkInfo, 2, new NetlogonValidationSamInfo(), 0);

			DcerpcHandle dcerpcHandle = netlogonConnection.getDcerpcHandle();

			dcerpcHandle.sendrecv(netrLogonSamLogon);

			if (netrLogonSamLogon.getStatus() == 0) {
				NetlogonValidationSamInfo netlogonValidationSamInfo =
					netrLogonSamLogon.getNetlogonValidationSamInfo();

				UnicodeString name = new UnicodeString(
					netlogonValidationSamInfo.getEffectiveName(), false);

				return new NtlmUserAccount(name.toString());
			}

			SmbException smbe = new SmbException(
				netrLogonSamLogon.getStatus(), false);

			throw new NtlmLogonException(
				"Unable to authenticate user: " + smbe.getMessage());
		}
		catch (NoSuchAlgorithmException nsae) {
			throw new NtlmLogonException(
				"Unable to authenticate due to invalid encryption algorithm",
				nsae);
		}
		catch (IOException ioe) {
			throw new NtlmLogonException(
				"Unable to authenticate due to communication failure with " +
					"server",
				ioe);
		}
		finally {
			try {
				if (netlogonConnection != null) {
					netlogonConnection.disconnect();
				}
			}
			catch (Exception e) {
				_log.error("Unable to disconnect Netlogon connection", e);
			}
		}
	}

	private static final Log _log = LogFactoryUtil.getLog(Netlogon.class);

	static {
		DcerpcBinding.addInterface(
			"netlogon", "12345678-1234-abcd-ef00-01234567cffb:1.0");
	}

	private final String _domainController;
	private final String _domainControllerName;
	private final NetlogonConnectionManager _netlogonConnectionManager;
	private final NtlmServiceAccount _ntlmServiceAccount;

}