zydronium/SMBLibrary
1
0
Fork 0
mirror of https://github.com/TalAloni/SMBLibrary.git synced 2025-08-04 15:01:28 +02:00
Code Issues Projects Releases Packages Wiki Activity

More control over which users are permitted access via the guest user account if the normal authentication process fails

Browse source
This commit is contained in:
Tal Aloni 2017-01-13 15:02:18 +02:00
parent c6ab11526b
commit 14300819ef
4 changed files with 30 additions and 12 deletions
Download patch file Download diff file Expand all files Collapse all files

20
SMBLibrary/Server/INTLMAuthenticationProvider.cs
View file

@ -1,4 +1,4 @@
/* Copyright (C) 2014 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
/* Copyright (C) 2014-2017 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
*
* You can redistribute this program and/or modify it under the terms of
* the GNU Lesser Public License as published by the Free Software Foundation,
@ -21,11 +21,19 @@ namespace SMBLibrary.Server
byte[] GetChallengeMessageBytes(byte[] negotiateMessageBytes);
User Authenticate(byte[] authenticateMessageBytes);
List<string> ListUsers();
/// <summary>
/// Permit access to this user via the guest user account if the normal authentication process fails.
/// </summary>
/// <remarks>
/// Windows will permit fallback when these conditions are met:
/// 1. The guest user account is enabled.
/// 2. The guest user account does not have a password set.
/// 3. The specified account does not exist.
/// OR:
/// The password is correct but 'limitblankpassworduse' is set to 1 (logon over a network is disabled for accounts without a password).
/// </remarks>
bool FallbackToGuest(string userName);
bool EnableGuestLogin
{
get;
}
List<string> ListUsers();
}
}

9
SMBLibrary/Server/IndependentUserCollection.cs
View file

@ -1,4 +1,4 @@
/* Copyright (C) 2014 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
/* Copyright (C) 2014-2017 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
*
* You can redistribute this program and/or modify it under the terms of
* the GNU Lesser Public License as published by the Free Software Foundation,
@ -176,7 +176,12 @@ namespace SMBLibrary.Server
return AuthenticateV1(accountNameToAuth, m_serverChallenge, lmResponse, ntlmResponse);
}
public bool EnableGuestLogin
public bool FallbackToGuest(string userName)
{
return (EnableGuestLogin && (IndexOf(userName) == -1));
}
private bool EnableGuestLogin
{
get
{

4
SMBLibrary/Server/SMB1/SessionSetupHelper.cs
View file

@ -46,7 +46,7 @@ namespace SMBLibrary.Server.SMB1
header.UID = userID.Value;
response.PrimaryDomain = request.PrimaryDomain;
}
else if (users.EnableGuestLogin)
else if (users.FallbackToGuest(user.AccountName))
{
ushort? userID = state.AddConnectedUser("Guest");
if (!userID.HasValue)
@ -132,7 +132,7 @@ namespace SMBLibrary.Server.SMB1
}
header.UID = userID.Value;
}
else if (users.EnableGuestLogin)
else if (users.FallbackToGuest(user.AccountName))
{
ushort? userID = state.AddConnectedUser("Guest");
if (!userID.HasValue)

9
SMBLibrary/Win32/Win32UserCollection.cs
View file

@ -1,4 +1,4 @@
/* Copyright (C) 2014 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
/* Copyright (C) 2014-2017 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
*
* You can redistribute this program and/or modify it under the terms of
* the GNU Lesser Public License as published by the Free Software Foundation,
@ -189,10 +189,15 @@ namespace SMBLibrary.Server.Win32
return false;
}
public bool FallbackToGuest(string userName)
{
return (EnableGuestLogin && (IndexOf(userName) == -1));
}
/// <summary>
/// We immitate Windows, Guest logins are disabled when the guest account has password set
/// </summary>
public bool EnableGuestLogin
private bool EnableGuestLogin
{
get
{