BINDCHK.C

/*
Source: bindchk.c - Attach to a server and verify bindery security
By    : George Milliken
Date  : 02/17/94
Version 1.00
*/

#include <stdlib.h>
#include <stdio.h>
#include <string.h>
#include <conio.h>
#include <time.h>
#include <assert.h>

#ifndef FAR
   #define FAR far
#endif

#ifdef __cplusplus
extern "C" {
#endif

#include <nwalias.h>
#include <nwserver.h>
#include <nwcalls.h>
#include <nwbindry.h>
#include <nwcaldef.h>
#include <nwconnec.h>
#include <nwmisc.h>

#ifdef __cplusplus
}
#endif

static WORD connHandle;               // global for atexit()
static FILE *log_file;                // global log file pointer
static int bLoginFlag = 0;            // signals if logged in for atexit()
static int bAttachFlag = 0;           // signals if attached for atexit()

void done(void);                      // atexit() routine to drop LAN connections
void err_msg(char *msg);              // std error message printer
void GetLoginName(char* szLoginName); // whoami in C
int getsne(char *string);             // get string no echo (for passwords)


int main()
{
   WORD wNWError;                     // error return code
   char szTargetServerName[48];
   char szTargetUserId[48];
   char szTargetUserNewPassword[48];
   char szHelpDeskUserId[48];
   char szHelpDeskPassword[48];
   char szRealUserId[48];

   WORD connNumber;                   // connection number
   char objname[48];                  // misc vars
   WORD ObjectType;
   DWORD objID;
   BYTE logintime[7];
   BYTE bMoreFlag;
   int iDoneEditing = 0;              // signals to end data entry
   int ch = 'Y';                      // to recover keystrokes
   char szLogFilePath[256];
   char szLogFileName[256];
   int iFileTryCount = 0;

   char szSearchObjectName[48];
   NWOBJ_TYPE iSearchObjectType;
   NWOBJ_ID LastSearchObjectID = -1;
   char szFoundObjectName[48];
   NWOBJ_TYPE iFoundObjectType;
   NWFLAGS FoundObjectHasProperties;
   NWFLAGS FoundObjectFlag;
   NWFLAGS FoundObjectSecurity;

   struct {                           // LOGIN_CONTROL data struct
       BYTE bAccountExpirationDate[3];
       BYTE bAccountDisabledFlag;
       BYTE bPasswordExpirationDate[3];
       BYTE bGraceLogin;
       WORD wPasswordExpirationIntervals;
       BYTE bGraceLoginReset;
       BYTE bMinPwdLen;
       WORD wMaxConnections;
       BYTE bAllowedLoginBitMap[42];
       BYTE bLastLoginDateTime[6];
       BYTE bRestrictionFlags;
       BYTE bReserved;
       LONG lMaxDiskUsage;
       WORD wBadLoginCount;
       LONG lNextResetTime;
       BYTE bBadLoginAddress[12];
  } stLoginControl;


   // register an atexit() to ensure we disconnect from server
   atexit(done);

   // set control break checking off
   setcbrk(0);

   clrscr();

   printf("\nBindery Security Checker v1.00");


// clean up before printing to screen
   memset(szTargetServerName, 0x00, sizeof(szTargetServerName));
   memset(szTargetUserId, 0x00, sizeof(szTargetUserId));
   memset(szTargetUserNewPassword, 0x00, sizeof(szTargetUserNewPassword));
   memset(szHelpDeskUserId, 0x00, sizeof(szHelpDeskUserId));
   memset(szHelpDeskPassword, 0x00, sizeof(szHelpDeskPassword));

   while(!iDoneEditing) {

      gotoxy(10, 10);
      printf("Enter the Server Name         : ");

      gotoxy(10, 19);
      printf("Is the above correct (Y/N) ?  : ");

      gotoxy(42, 10);
      clreol();
      gets(szTargetServerName);
      assert(strlen(szTargetServerName) < sizeof(szTargetServerName));

      gotoxy(42, 19);
      clreol();
      ch = getch();

      iDoneEditing = (tolower(ch) == 'y' ? 1 : 0);

      if (!szTargetServerName[0]) {
         err_msg("You must enter a value in ALL fields");
         iDoneEditing = 0;
      }

   }

   // upper case so Netware won't have a cow...
   strupr(szTargetServerName);
   strupr(szHelpDeskPassword);
   strupr(szTargetUserId);
   strupr(szTargetUserNewPassword);


   // hard coded values
   strcpy(szLogFileName, "bindchk.log");


   /* init the NW system */
   if (wNWError = NWCallsInit(NULL, NULL)){
      err_msg("NWCallsInit: failed");
      exit(1);
   }


   /* recycle connection handle if there, else attach a new one */
   if (wNWError = NWGetConnectionHandle(szTargetServerName, 0, &connHandle, NULL)) {
      if (wNWError = NWAttachToFileServer(szTargetServerName, 0, &connHandle)) {
          err_msg("NWAttach failed");
          exit(1);
      }
   }

   bAttachFlag = 1;                       // so we don't loose orig connection

   // loop & get object names

   // *****************************************

   strcpy(szSearchObjectName, "*");
   iSearchObjectType = OT_WILD;
   LastSearchObjectID = -1;
   szSearchObjectName[0] = 0x00;

   while (!NWScanObject(connHandle, szSearchObjectName, iSearchObjectType, &LastSearchObjectID,
                       szFoundObjectName, &iFoundObjectType, &FoundObjectHasProperties,
                        &FoundObjectFlag, &FoundObjectSecurity) ) {

         tindex = -1;

         switch (NWWordSwap(objectType)) {
         case 0x0000: tindex = 0; break;
         case 0x0001: tindex = 1; break;
         case 0x0002: tindex = 2; break;
         case 0x0003: tindex = 3; break;
         case 0x0004: tindex = 4; break;
         case 0x0005: tindex = 5; break;
         case 0x0006: tindex = 6; break;
         case 0x0007: tindex = 7; break;
         case 0x0008: tindex = 8; break;
         case 0x0009: tindex = 9; break;
         case 0x000A: tindex = 10; break;
         case 0x000B: tindex = 11; break;
         case 0xffff: strcpy(buff,"Unknown"); break;
         case 0x0024: strcpy(buff,"Remote Bridge Server"); break;
         case 0x0047: strcpy(buff,"Advertising Pserver"); break;
         default:     strcpy(buff,"Unrecognized"); break;
         } /* switch */

     printf("\nObject: %s [%lx] <%s> - type %04x",
            objectName, objectID,
            (tindex == -1 ? buff : otype_msg[tindex]),
            NWWordSwap(objectType));

     printf("\n\tSecurity: <Scan by '%s': Add by '%s'>",
        security_msg[objectSecurity & 0x0f],
        security_msg[(objectSecurity & 0xf0) >> 4]);

     if (objectHasProperties) {

           /* get the access security for Scanning and Added
           ** to the Bindery */

        printf("\n\nProperties:");

        sequenceNumber = -1;
        strcpy(searchPropertyName,"*");
        while (! NWScanProperty(connHandle,
                                objectName,
                                objectType,
                                searchPropertyName,
                                &sequenceNumber,
                                propertyName,
                                &propertyFlags,
                                &propertySecurity,
                                &propertyHasValue,
                                &moreProperties)) {
           printf("\n\t%s",propertyName);
           printf("\n\tSecurity: <Scan by '%s': Add by '%s'>",
              security_msg[propertySecurity & 0x0f],
              security_msg[(propertySecurity & 0xf0) >> 4]);

           if (propertyHasValue) {
              dataSetIndex = 1;
              do {
                 if (! (rc = NWReadPropertyValue(connHandle,
                                           objectName,
                                           objectType,
                                           propertyName,
                                           dataSetIndex,
                                           propertyValue,
                                           &moreSegments,
                                           &propertyFlags)) ) {
                    if (dataSetIndex == 1) {
                       printf("\n\t\tValues <%s-%s>:",
                          ((propertyFlags & 1) ? "dynamic":"static"),
                          ((propertyFlags & 2) ? "Set"    :"Item"  ));
                       }

                    printf("\n\t\t");

                    if ((strcmp(propertyName,"IDENTIFICATION") == 0) ||
                        (strcmp(propertyName,"HOMEDIRPATH") == 0) )
                       printf(propertyValue);
                    else if (propertyFlags & 2) {
                       for (J = 0, I = 0; I < 32; I++) {
                          id2 = *(long *)&propertyValue[I * 4];
                          if (id2) {
                             if (rc = NWGetObjectName(connHandle,
                                                      id2,
                                                      buff,
                                                      &tmpType)) {
                                printf(buff,
                                   "NWGetObjectName:failed %04x\n",rc);
                                buff[0]= NULL;
                                }

                             printf("%-20.20s ",buff);
                             if (++J > 2) {
                                J = 0;
                                printf("\n\t\t");
                                } /* if */
                             } /* if */
                          } /* for */
                       }
                    else {
                       for (J = 0, I = 0; I < 128; I++) {
                          printf("%02x ",propertyValue[I]);
                          if (++J > 15) {
                             J = 0;
                             printf("\n\t\t");
                             }
                          } /* for */
                       }
                   dataSetIndex++;    // advance for next set
                   } /* if */

                 } /* do */
              while (moreSegments && !rc);
              } /* if */
           } /* while */
        } /* if */
        printf("\n--------------------------------------------------");
     } /* while */
   // *****************************************



   // get logged in as the Help Desk super-object
   if (wNWError = NWLoginToFileServer(connHandle, szHelpDeskUserId, ObjectType, szHelpDeskPassword)) {
      err_msg("NWLogin failed!");
      exit(1);
   }
   else {
      bLoginFlag = 1;                       // so we don't loose orig connection
      if (wNWError = NWGetConnectionNumber(connHandle, &connNumber)) {
         err_msg("NWGetConnectionNumber failed");
         exit(1);
      }

      if (wNWError = NWGetConnectionInformation(connHandle, connNumber, (char FAR *)objname, (WORD FAR *)&ObjectType, (DWORD FAR *)&objID, (BYTE FAR *)logintime)) {
         err_msg("NWGetConnectionInformation failed");
         exit(1);
      }

      // map a temp dir handle to log file, upper for Netware
      strupr(szLogFilePath);
      if (wNWError = NWSetDriveBase(MAP_DRIVE, connHandle, 0, szLogFilePath, 0)) {
         err_msg("NWSetDriveBase failed");
         exit(1);
      }

      // check for contention on log, try 20 times

      log_file = NULL;
      iFileTryCount = 0;

      while (iFileTryCount < 20 && log_file == NULL) {
         log_file = fopen(szLogFileName, "a+");
         sleep(2);
         iFileTryCount++;
      }

      if (log_file == NULL) {
         err_msg("Log file open failed");
         exit(1);
      }

      // read login control property
      if (wNWError = NWReadPropertyValue(connHandle, szTargetUserId, OT_USER, "LOGIN_CONTROL", 1, &stLoginControl, &bMoreFlag, NULL)) {
         err_msg("NWReadPropertyValue failed LOGIN_CONTROL");
         exit(1);
      }

      // verify the lock status of user before resetting
      if (stLoginControl.bGraceLogin > 1 || stLoginControl.lNextResetTime == 0 || stLoginControl.wBadLoginCount == 0) {
         fprintf(log_file, "%02.2d/%02.2d/%02.2d - %02.2d:%02.2d:%02.2d %s %10.10s %10.10s %10.10s\n", (int)logintime[1], (int)logintime[2], (int)logintime[0], (int)logintime[3], (int)logintime[4], (int)logintime[5], "BAD RESET", szTargetServerName, szTargetUserId, szRealUserId);
         err_msg("This user does not need to be reset!");
      }
      else {

           // set lock out minutes to 0
           stLoginControl.lNextResetTime = 0;

           // set bad login attempts to 0
           stLoginControl.wBadLoginCount = 0;

           // set password expiration to 0
           memset(stLoginControl.bPasswordExpirationDate, 0x01, 3);

           if (wNWError = NWWritePropertyValue(connHandle, szTargetUserId, OT_USER, "LOGIN_CONTROL", 1, &stLoginControl, 0x00)) {
              err_msg("NWWritePropertyValue failed");
              exit(5);
           }

           // change the password on the target user

           if (wNWError = NWChangeObjectPassword(connHandle, szTargetUserId, OT_USER, "", szTargetUserNewPassword)) {
              err_msg("Password change error code");
              exit(1);
           }

           // log the event to file
           fprintf(log_file, "%02.2d/%02.2d/%02.2d - %02.2d:%02.2d:%02.2d %s %20.20s %48.48s %48.48s\n", (int)logintime[1], (int)logintime[2], (int)logintime[0], (int)logintime[3], (int)logintime[4], (int)logintime[5],"RESET PWD", szTargetServerName, szTargetUserId, szRealUserId);
           gotoxy(1,23);
           printf("Password successfully changed to [%s]\n", szTargetUserNewPassword);
           printf("User successfully reset! Press any key");
           getch();
           gotoxy(1,23);
           clreol();

      }
   }

   return(0);
}


void done(void)
{
   if (log_file) {
      fclose(log_file);
   }

   if (bLoginFlag) {
      NWLogoutFromFileServer(connHandle);
   }

   if (bAttachFlag) {
      NWDetachFromFileServer(connHandle);
   }
}

void err_msg(char *msg)
{
    gotoxy(1,23);
    printf("\a\a\a%s.  Press any key", msg);
    getch();
    gotoxy(1,23);
    clreol();
}

void GetLoginName(char* szLoginName)
{

   WORD wNWError;
   WORD tmpConnHandle;              // global for atexit()
   WORD tmpConnNumber;
   static char  objname[48];
   WORD  objtype;
   DWORD objID;
   BYTE  logintime[7];

   if (wNWError = NWGetDefaultConnectionID(&tmpConnHandle)) {
      err_msg("NWGetDefaultConnectionID failed");
      exit(1);
   }

   if (wNWError = NWGetConnectionNumber(tmpConnHandle, &tmpConnNumber)) {
      err_msg("NWGetConnectionNumber failed");
      exit(1);
   }

   if (wNWError = NWGetConnectionInformation(tmpConnHandle, tmpConnNumber, (char FAR *)objname, (WORD FAR *)&objtype, (DWORD FAR *)&objID, (BYTE FAR *)logintime)) {
      err_msg("NWGetConnectionInformation failed");
      exit(1);
   }

   strcpy(szLoginName, objname);    // return value
}

int getsne(char *string)
{
    int ch;
    char *tmpptr;

    tmpptr = string;

    while ((ch = getch()) != '\r') {

      *tmpptr = ch;

      if (ch != '\b') {
         tmpptr++;
      }

    }

    tmpptr = 0x00;
    return(strlen(string));
}