262 lines
4.6 KiB
C
262 lines
4.6 KiB
C
/*++
|
|
|
|
Microsoft Confidential
|
|
Copyright (c) 1992-1997 Microsoft Corporation
|
|
All rights reserved
|
|
|
|
Module Name:
|
|
|
|
sid.c
|
|
|
|
Abstract:
|
|
|
|
SID management functions
|
|
|
|
Author:
|
|
|
|
(davidc) 26-Aug-1992
|
|
|
|
--*/
|
|
// NT base apis
|
|
#include <nt.h>
|
|
#include <ntrtl.h>
|
|
#include <nturtl.h>
|
|
#include <ntdddisk.h>
|
|
|
|
#include "sysdm.h"
|
|
|
|
|
|
LPTSTR
|
|
GetSidString(
|
|
void
|
|
)
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
Allocates and returns a string representing the sid of the current user
|
|
The returned pointer should be freed using DeleteSidString().
|
|
|
|
Arguments:
|
|
|
|
None
|
|
|
|
Return Value:
|
|
|
|
Returns a pointer to the string or NULL on failure.
|
|
|
|
--*/
|
|
{
|
|
NTSTATUS NtStatus;
|
|
PSID UserSid;
|
|
UNICODE_STRING UnicodeString;
|
|
LPTSTR lpEnd;
|
|
|
|
//
|
|
// Get the user sid
|
|
//
|
|
|
|
UserSid = GetUserSid();
|
|
if (UserSid == NULL) {
|
|
return NULL;
|
|
}
|
|
|
|
//
|
|
// Convert user SID to a string.
|
|
//
|
|
|
|
NtStatus = RtlConvertSidToUnicodeString(
|
|
&UnicodeString,
|
|
UserSid,
|
|
(BOOLEAN)TRUE // Allocate
|
|
);
|
|
//
|
|
// We're finished with the user sid
|
|
//
|
|
|
|
DeleteUserSid(UserSid);
|
|
|
|
//
|
|
// See if the conversion to a string worked
|
|
//
|
|
|
|
if (!NT_SUCCESS(NtStatus)) {
|
|
return NULL;
|
|
}
|
|
|
|
return(UnicodeString.Buffer);
|
|
}
|
|
|
|
|
|
VOID
|
|
DeleteSidString(
|
|
IN LPTSTR SidString
|
|
)
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
Frees up a sid string previously returned by GetSidString()
|
|
|
|
Arguments:
|
|
|
|
SidString -
|
|
Supplies string to free
|
|
|
|
Return Value:
|
|
|
|
None
|
|
|
|
--*/
|
|
{
|
|
|
|
UNICODE_STRING String;
|
|
|
|
RtlInitUnicodeString(&String, SidString);
|
|
|
|
RtlFreeUnicodeString(&String);
|
|
}
|
|
|
|
|
|
PSID
|
|
GetUserSid(
|
|
void
|
|
)
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
Allocs space for the user sid, fills it in and returns a pointer. Caller
|
|
The sid should be freed by calling DeleteUserSid.
|
|
|
|
Note the sid returned is the user's real sid, not the per-logon sid.
|
|
|
|
Arguments:
|
|
|
|
None
|
|
|
|
Return Value:
|
|
|
|
Returns pointer to sid or NULL on failure.
|
|
|
|
--*/
|
|
{
|
|
PTOKEN_USER pUser;
|
|
PSID pSid;
|
|
DWORD BytesRequired = 200;
|
|
NTSTATUS status;
|
|
HANDLE UserToken;
|
|
|
|
|
|
if (!OpenProcessToken (GetCurrentProcess(), TOKEN_READ, &UserToken)) {
|
|
return NULL;
|
|
}
|
|
|
|
//
|
|
// Allocate space for the user info
|
|
//
|
|
|
|
pUser = (PTOKEN_USER)LocalAlloc(LMEM_FIXED, BytesRequired);
|
|
|
|
|
|
if (pUser == NULL) {
|
|
CloseHandle (UserToken);
|
|
return NULL;
|
|
}
|
|
|
|
|
|
//
|
|
// Read in the UserInfo
|
|
//
|
|
|
|
status = NtQueryInformationToken(
|
|
UserToken, // Handle
|
|
TokenUser, // TokenInformationClass
|
|
pUser, // TokenInformation
|
|
BytesRequired, // TokenInformationLength
|
|
&BytesRequired // ReturnLength
|
|
);
|
|
|
|
if (status == STATUS_BUFFER_TOO_SMALL) {
|
|
HLOCAL pTemp;
|
|
|
|
//
|
|
// Allocate a bigger buffer and try again.
|
|
//
|
|
|
|
pTemp = LocalReAlloc(pUser, BytesRequired, LMEM_MOVEABLE);
|
|
if (pTemp == NULL) {
|
|
LocalFree((HLOCAL) pUser);
|
|
CloseHandle (UserToken);
|
|
return NULL;
|
|
}
|
|
else
|
|
{
|
|
pUser = (PTOKEN_USER)pTemp;
|
|
}
|
|
|
|
status = NtQueryInformationToken(
|
|
UserToken, // Handle
|
|
TokenUser, // TokenInformationClass
|
|
pUser, // TokenInformation
|
|
BytesRequired, // TokenInformationLength
|
|
&BytesRequired // ReturnLength
|
|
);
|
|
|
|
}
|
|
|
|
if (!NT_SUCCESS(status)) {
|
|
LocalFree(pUser);
|
|
CloseHandle (UserToken);
|
|
return NULL;
|
|
}
|
|
|
|
|
|
BytesRequired = RtlLengthSid(pUser->User.Sid);
|
|
pSid = LocalAlloc(LMEM_FIXED, BytesRequired);
|
|
if (pSid == NULL) {
|
|
LocalFree(pUser);
|
|
CloseHandle (UserToken);
|
|
return NULL;
|
|
}
|
|
|
|
|
|
status = RtlCopySid(BytesRequired, pSid, pUser->User.Sid);
|
|
|
|
LocalFree(pUser);
|
|
|
|
if (!NT_SUCCESS(status)) {
|
|
LocalFree(pSid);
|
|
pSid = NULL;
|
|
}
|
|
|
|
CloseHandle (UserToken);
|
|
|
|
return pSid;
|
|
}
|
|
|
|
|
|
VOID
|
|
DeleteUserSid(
|
|
IN PSID Sid
|
|
)
|
|
/*++
|
|
|
|
Routine Description:
|
|
|
|
Deletes a user sid previously returned by GetUserSid()
|
|
|
|
Arguments:
|
|
|
|
Sid -
|
|
Supplies sid to delete
|
|
|
|
Return Value:
|
|
|
|
None
|
|
|
|
--*/
|
|
{
|
|
LocalFree(Sid);
|
|
}
|