From dc3c16cd089f6d245afc84aa0560f76346d5e4fe Mon Sep 17 00:00:00 2001

From: Andrew Bartlett <abartlet@samba.org>

Date: Wed, 31 Jul 2019 16:13:38 +1200

Subject: [PATCH 105/187] s4-rpc_server: Remove Heimdal-based BackupKey server

We rely on a modern GnuTLS now.

Signed-off-by: Andrew Bartlett <abartlet@samba.org>

Reviewed-by: Andreas Schneider <asn@samba.org>

(backported from commit 52b91cb33c281aeecc6270824cadac6cefbcb136)

---

 .../backupkey/dcesrv_backupkey_heimdal.c      | 1861 --------------

 source4/rpc_server/wscript_build              |   24 +-

 source4/torture/rpc/backupkey_heimdal.c       | 2160 -----------------

 source4/torture/wscript_build                 |    9 +-

 wscript_configure_system_gnutls               |    6 -

 5 files changed, 8 insertions(+), 4052 deletions(-)

 delete mode 100644 source4/rpc_server/backupkey/dcesrv_backupkey_heimdal.c

 delete mode 100644 source4/torture/rpc/backupkey_heimdal.c

diff --git a/source4/rpc_server/backupkey/dcesrv_backupkey_heimdal.c b/source4/rpc_server/backupkey/dcesrv_backupkey_heimdal.c

deleted file mode 100644

index 806f144a24b..00000000000

--- a/source4/rpc_server/backupkey/dcesrv_backupkey_heimdal.c

+++ /dev/null

@@ -1,1861 +0,0 @@

-/*

-   Unix SMB/CIFS implementation.

-

-   endpoint server for the backupkey interface

-

-   Copyright (C) Matthieu Patou <mat@samba.org> 2010

-

-   This program is free software; you can redistribute it and/or modify

-   it under the terms of the GNU General Public License as published by

-   the Free Software Foundation; either version 3 of the License, or

-   (at your option) any later version.

-

-   This program is distributed in the hope that it will be useful,

-   but WITHOUT ANY WARRANTY; without even the implied warranty of

-   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the

-   GNU General Public License for more details.

-

-   You should have received a copy of the GNU General Public License

-   along with this program.  If not, see <http://www.gnu.org/licenses/>.

-*/

-

-#include "includes.h"

-#include "rpc_server/dcerpc_server.h"

-#include "rpc_server/common/common.h"

-#include "librpc/gen_ndr/ndr_backupkey.h"

-#include "dsdb/common/util.h"

-#include "dsdb/samdb/samdb.h"

-#include "lib/ldb/include/ldb_errors.h"

-#include "../lib/util/util_ldb.h"

-#include "param/param.h"

-#include "auth/session.h"

-#include "system/network.h"

-#include <com_err.h>

-#include <hx509.h>

-#include <hcrypto/rsa.h>

-#include <hcrypto/bn.h>

-#include <hcrypto/sha.h>

-#include <hcrypto/evp.h>

-#include <hcrypto/hmac.h>

-#include <der.h>

-#include "../lib/tsocket/tsocket.h"

-#include "../libcli/security/security.h"

-#include "librpc/gen_ndr/ndr_security.h"

-#include "lib/crypto/arcfour.h"

-#include "libds/common/roles.h"

-#include <gnutls/gnutls.h>

-#include <gnutls/x509.h>

-

-#define DCESRV_INTERFACE_BACKUPKEY_BIND(context, iface) \

-	dcesrv_interface_backupkey_bind(context, iface)

-static NTSTATUS dcesrv_interface_backupkey_bind(struct dcesrv_connection_context *context,

-						const struct dcesrv_interface *iface)

-{

-	return dcesrv_interface_bind_require_privacy(context, iface);

-}

-

-static const unsigned rsa_with_var_num[] = { 1, 2, 840, 113549, 1, 1, 1 };

-/* Equivalent to asn1_oid_id_pkcs1_rsaEncryption*/

-static const AlgorithmIdentifier _hx509_signature_rsa_with_var_num = {

-	{ 7, discard_const_p(unsigned, rsa_with_var_num) }, NULL

-};

-

-static NTSTATUS set_lsa_secret(TALLOC_CTX *mem_ctx,

-			       struct ldb_context *ldb,

-			       const char *name,

-			       const DATA_BLOB *lsa_secret)

-{

-	struct ldb_message *msg;

-	struct ldb_result *res;

-	struct ldb_dn *domain_dn;

-	struct ldb_dn *system_dn;

-	struct ldb_val val;

-	int ret;

-	char *name2;

-	struct timeval now = timeval_current();

-	NTTIME nt_now = timeval_to_nttime(&now;;

-	const char *attrs[] = {

-		NULL

-	};

-

-	domain_dn = ldb_get_default_basedn(ldb);

-	if (!domain_dn) {

-		return NT_STATUS_INTERNAL_ERROR;

-	}

-

-	msg = ldb_msg_new(mem_ctx);

-	if (msg == NULL) {

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	/*

-	 * This function is a lot like dcesrv_lsa_CreateSecret

-	 * in the rpc_server/lsa directory

-	 * The reason why we duplicate the effort here is that:

-	 * * we want to keep the former function static

-	 * * we want to avoid the burden of doing LSA calls

-	 *   when we can just manipulate the secrets directly

-	 * * taillor the function to the particular needs of backup protocol

-	 */

-

-	system_dn = samdb_search_dn(ldb, msg, domain_dn, "(&(objectClass=container)(cn=System))");

-	if (system_dn == NULL) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	name2 = talloc_asprintf(msg, "%s Secret", name);

-	if (name2 == NULL) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	ret = ldb_search(ldb, mem_ctx, &res, system_dn, LDB_SCOPE_SUBTREE, attrs,

-			   "(&(cn=%s)(objectclass=secret))",

-			   ldb_binary_encode_string(mem_ctx, name2));

-

-	if (ret != LDB_SUCCESS ||  res->count != 0 ) {

-		DEBUG(2, ("Secret %s already exists !\n", name2));

-		talloc_free(msg);

-		return NT_STATUS_OBJECT_NAME_COLLISION;

-	}

-

-	/*

-	 * We don't care about previous value as we are

-	 * here only if the key didn't exists before

-	 */

-

-	msg->dn = ldb_dn_copy(mem_ctx, system_dn);

-	if (msg->dn == NULL) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-	if (!ldb_dn_add_child_fmt(msg->dn, "cn=%s", name2)) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	ret = ldb_msg_add_string(msg, "cn", name2);

-	if (ret != LDB_SUCCESS) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-	ret = ldb_msg_add_string(msg, "objectClass", "secret");

-	if (ret != LDB_SUCCESS) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-	ret = samdb_msg_add_uint64(ldb, mem_ctx, msg, "priorSetTime", nt_now);

-	if (ret != LDB_SUCCESS) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-	val.data = lsa_secret->data;

-	val.length = lsa_secret->length;

-	ret = ldb_msg_add_value(msg, "currentValue", &val, NULL);

-	if (ret != LDB_SUCCESS) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-	ret = samdb_msg_add_uint64(ldb, mem_ctx, msg, "lastSetTime", nt_now);

-	if (ret != LDB_SUCCESS) {

-		talloc_free(msg);

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	/*

-	 * create the secret with DSDB_MODIFY_RELAX

-	 * otherwise dsdb/samdb/ldb_modules/objectclass.c forbid

-	 * the create of LSA secret object

-	 */

-	ret = dsdb_add(ldb, msg, DSDB_MODIFY_RELAX);

-	if (ret != LDB_SUCCESS) {

-		DEBUG(2,("Failed to create secret record %s: %s\n",

-			ldb_dn_get_linearized(msg->dn),

-			ldb_errstring(ldb)));

-		talloc_free(msg);

-		return NT_STATUS_ACCESS_DENIED;

-	}

-

-	talloc_free(msg);

-	return NT_STATUS_OK;

-}

-

-/* This function is pretty much like dcesrv_lsa_QuerySecret */

-static NTSTATUS get_lsa_secret(TALLOC_CTX *mem_ctx,

-			       struct ldb_context *ldb,

-			       const char *name,

-			       DATA_BLOB *lsa_secret)

-{

-	TALLOC_CTX *tmp_mem;

-	struct ldb_result *res;

-	struct ldb_dn *domain_dn;

-	struct ldb_dn *system_dn;

-	const struct ldb_val *val;

-	uint8_t *data;

-	const char *attrs[] = {

-		"currentValue",

-		NULL

-	};

-	int ret;

-

-	lsa_secret->data = NULL;

-	lsa_secret->length = 0;

-

-	domain_dn = ldb_get_default_basedn(ldb);

-	if (!domain_dn) {

-		return NT_STATUS_INTERNAL_ERROR;

-	}

-

-	tmp_mem = talloc_new(mem_ctx);

-	if (tmp_mem == NULL) {

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	system_dn = samdb_search_dn(ldb, tmp_mem, domain_dn, "(&(objectClass=container)(cn=System))");

-	if (system_dn == NULL) {

-		talloc_free(tmp_mem);

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	ret = ldb_search(ldb, mem_ctx, &res, system_dn, LDB_SCOPE_SUBTREE, attrs,

-			   "(&(cn=%s Secret)(objectclass=secret))",

-			   ldb_binary_encode_string(tmp_mem, name));

-

-	if (ret != LDB_SUCCESS) {

-		talloc_free(tmp_mem);

-		return NT_STATUS_INTERNAL_DB_CORRUPTION;

-	}

-	if (res->count == 0) {

-		talloc_free(tmp_mem);

-		return NT_STATUS_RESOURCE_NAME_NOT_FOUND;

-	}

-	if (res->count > 1) {

-		DEBUG(2, ("Secret %s collision\n", name));

-		talloc_free(tmp_mem);

-		return NT_STATUS_INTERNAL_DB_CORRUPTION;

-	}

-

-	val = ldb_msg_find_ldb_val(res->msgs[0], "currentValue");

-	if (val == NULL) {

-		/*

-		 * The secret object is here but we don't have the secret value

-		 * The most common case is a RODC

-		 */

-		*lsa_secret = data_blob_null;

-		talloc_free(tmp_mem);

-		return NT_STATUS_OK;

-	}

-

-	data = val->data;

-	lsa_secret->data = talloc_move(mem_ctx, &data);

-	lsa_secret->length = val->length;

-

-	talloc_free(tmp_mem);

-	return NT_STATUS_OK;

-}

-

-static DATA_BLOB *reverse_and_get_blob(TALLOC_CTX *mem_ctx, BIGNUM *bn)

-{

-	DATA_BLOB blob;

-	DATA_BLOB *rev = talloc(mem_ctx, DATA_BLOB);

-	uint32_t i;

-

-	blob.length = BN_num_bytes(bn);

-	blob.data = talloc_array(mem_ctx, uint8_t, blob.length);

-

-	if (blob.data == NULL) {

-		return NULL;

-	}

-

-	BN_bn2bin(bn, blob.data);

-

-	rev->data = talloc_array(mem_ctx, uint8_t, blob.length);

-	if (rev->data == NULL) {

-		return NULL;

-	}

-

-	for(i=0; i < blob.length; i++) {

-		rev->data[i] = blob.data[blob.length - i -1];

-	}

-	rev->length = blob.length;

-	talloc_free(blob.data);

-	return rev;

-}

-

-static BIGNUM *reverse_and_get_bignum(TALLOC_CTX *mem_ctx, DATA_BLOB *blob)

-{

-	BIGNUM *ret;

-	DATA_BLOB rev;

-	uint32_t i;

-

-	rev.data = talloc_array(mem_ctx, uint8_t, blob->length);

-	if (rev.data == NULL) {

-		return NULL;

-	}

-

-	for(i=0; i < blob->length; i++) {

-		rev.data[i] = blob->data[blob->length - i -1];

-	}

-	rev.length = blob->length;

-

-	ret = BN_bin2bn(rev.data, rev.length, NULL);

-	talloc_free(rev.data);

-

-	return ret;

-}

-

-static NTSTATUS get_pk_from_raw_keypair_params(TALLOC_CTX *ctx,

-				struct bkrp_exported_RSA_key_pair *keypair,

-				hx509_private_key *pk)

-{

-	hx509_context hctx;

-	RSA *rsa;

-	struct hx509_private_key_ops *ops;

-	hx509_private_key privkey = NULL;

-

-	hx509_context_init(&hctx);

-	ops = hx509_find_private_alg(&_hx509_signature_rsa_with_var_num.algorithm);

-	if (ops == NULL) {

-		DEBUG(2, ("Not supported algorithm\n"));

-		hx509_context_free(&hctx);

-		return NT_STATUS_INTERNAL_ERROR;

-	}

-

-	if (hx509_private_key_init(&privkey, ops, NULL) != 0) {

-		hx509_context_free(&hctx);

-		return NT_STATUS_NO_MEMORY;

-	}

-

-	rsa = RSA_new();

-	if (rsa ==NULL) {

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-

-	rsa->n = reverse_and_get_bignum(ctx, &(keypair->modulus));

-	if (rsa->n == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-	rsa->d = reverse_and_get_bignum(ctx, &(keypair->private_exponent));

-	if (rsa->d == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-	rsa->p = reverse_and_get_bignum(ctx, &(keypair->prime1));

-	if (rsa->p == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-	rsa->q = reverse_and_get_bignum(ctx, &(keypair->prime2));

-	if (rsa->q == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-	rsa->dmp1 = reverse_and_get_bignum(ctx, &(keypair->exponent1));

-	if (rsa->dmp1 == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-	rsa->dmq1 = reverse_and_get_bignum(ctx, &(keypair->exponent2));

-	if (rsa->dmq1 == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-	rsa->iqmp = reverse_and_get_bignum(ctx, &(keypair->coefficient));

-	if (rsa->iqmp == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-	rsa->e = reverse_and_get_bignum(ctx, &(keypair->public_exponent));

-	if (rsa->e == NULL) {

-		RSA_free(rsa);

-		hx509_private_key_free(&privkey);

-		hx509_context_free(&hctx);

-		return NT_STATUS_INVALID_PARAMETER;

-	}

-

-	*pk = privkey;

-

-	hx509_private_key_assign_rsa(*pk, rsa);

-

-	hx509_context_free(&hctx);

-	return NT_STATUS_OK;

-}

-

-static WERROR get_and_verify_access_check(TALLOC_CTX *sub_ctx,

-					  uint32_t version,

-					  uint8_t *key_and_iv,

-					  uint8_t *access_check,

-					  uint32_t access_check_len,

-					  struct auth_session_info *session_info)

-{

-	heim_octet_string iv;

-	heim_octet_string access_check_os;

-	hx509_crypto crypto;

-

-	DATA_BLOB blob_us;

-	uint32_t key_len;

-	uint32_t iv_len;

-	int res;

-	enum ndr_err_code ndr_err;

-	hx509_context hctx;

-

-	struct dom_sid *access_sid = NULL;

-	struct dom_sid *caller_sid = NULL;

-

-	/* This one should not be freed */

-	const AlgorithmIdentifier *alg;

-

-	switch (version) {

-	case 2:

-		key_len = 24;

-		iv_len = 8;

-		alg = hx509_crypto_des_rsdi_ede3_cbc();

-		break;

-

-	case 3:

-		key_len = 32;

-		iv_len = 16;

-		alg =hx509_crypto_aes256_cbc();

-		break;

-

-	default:

-		return WERR_INVALID_DATA;

-	}

-

-	hx509_context_init(&hctx);

-	res = hx509_crypto_init(hctx, NULL,

-				&(alg->algorithm),

-				&crypto);

-	hx509_context_free(&hctx);

-

-	if (res != 0) {

-		return WERR_INVALID_DATA;

-	}

-

-	res = hx509_crypto_set_key_data(crypto, key_and_iv, key_len);

-

-	iv.data = talloc_memdup(sub_ctx, key_len + key_and_iv, iv_len);

-	iv.length = iv_len;

-

-	if (res != 0) {

-		hx509_crypto_destroy(crypto);

-		return WERR_INVALID_DATA;

-	}

-

-	hx509_crypto_set_padding(crypto, HX509_CRYPTO_PADDING_NONE);

-	res = hx509_crypto_decrypt(crypto,

-		access_check,

-		access_check_len,

-		&iv,

-		&access_check_os);

-

-	if (res != 0) {

-		hx509_crypto_destroy(crypto);

-		return WERR_INVALID_DATA;

-	}

-

-	blob_us.data = access_check_os.data;

-	blob_us.length = access_check_os.length;

-

-	hx509_crypto_destroy(crypto);

-

-	switch (version) {

-	case 2:

-	{

-		uint32_t hash_size = 20;

-		uint8_t hash[hash_size];

-		struct sha sctx;

-		struct bkrp_access_check_v2 uncrypted_accesscheckv2;

-

-		ndr_err = ndr_pull_struct_blob(&blob_us, sub_ctx, &uncrypted_accesscheckv2,

-					(ndr_pull_flags_fn_t)ndr_pull_bkrp_access_check_v2);

-		if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {

-			/* Unable to unmarshall */

-			der_free_octet_string(&access_check_os);

-			return WERR_INVALID_DATA;

-		}

-		if (uncrypted_accesscheckv2.magic != 0x1) {

-			/* wrong magic */

-			der_free_octet_string(&access_check_os);

-			return WERR_INVALID_DATA;

-		}

-

-		SHA1_Init(&sctx);

-		SHA1_Update(&sctx, blob_us.data, blob_us.length - hash_size);

-		SHA1_Final(hash, &sctx);

-		der_free_octet_string(&access_check_os);

-		/*

-		 * We free it after the sha1 calculation because blob.data

-		 * point to the same area

-		 */

-

-		if (memcmp(hash, uncrypted_accesscheckv2.hash, hash_size) != 0) {

-			DEBUG(2, ("Wrong hash value in the access check in backup key remote protocol\n"));

-			return WERR_INVALID_DATA;

-		}

-		access_sid = &(uncrypted_accesscheckv2.sid);

-		break;

-	}

-	case 3:

-	{

-		uint32_t hash_size = 64;

-		uint8_t hash[hash_size];

-		struct hc_sha512state sctx;

-		struct bkrp_access_check_v3 uncrypted_accesscheckv3;

-

-		ndr_err = ndr_pull_struct_blob(&blob_us, sub_ctx, &uncrypted_accesscheckv3,

-					(ndr_pull_flags_fn_t)ndr_pull_bkrp_access_check_v3);

-		if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {

-			/* Unable to unmarshall */

-			der_free_octet_string(&access_check_os);

-			return WERR_INVALID_DATA;

-		}

-		if (uncrypted_accesscheckv3.magic != 0x1) {

-			/* wrong magic */

-			der_free_octet_string(&access_check_os);

-			return WERR_INVALID_DATA;

-		}

-

-		SHA512_Init(&sctx);

-		SHA512_Update(&sctx, blob_us.data, blob_us.length - hash_size);

-		SHA512_Final(hash, &sctx);

-		der_free_octet_string(&access_check_os);

-		/*

-		 * We free it after the sha1 calculation because blob.data

-		 * point to the same area

-		 */

-

-		if (memcmp(hash, uncrypted_accesscheckv3.hash, hash_size) != 0) {

-			DEBUG(2, ("Wrong hash value in the access check in backup key remote protocol\n"));

-			return WERR_INVALID_DATA;

-		}

-		access_sid = &(uncrypted_accesscheckv3.sid);

-		break;

-	}

-	default:

-		/* Never reached normally as we filtered at the switch / case level */

-		return WERR_INVALID_DATA;

-	}

-

-	caller_sid = &session_info->security_token->sids[PRIMARY_USER_SID_INDEX];

-

-	if (!dom_sid_equal(caller_sid, access_sid)) {

-		return WERR_INVALID_ACCESS;

-	}

-	return WERR_OK;

-}

-

-/*

- * We have some data, such as saved website or IMAP passwords that the

- * client has in profile on-disk.  This needs to be decrypted.  This

- * version gives the server the data over the network (protected by

- * the X.509 certificate and public key encryption, and asks that it

- * be decrypted returned for short-term use, protected only by the

- * negotiated transport encryption.

- *

- * The data is NOT stored in the LSA, but a X.509 certificate, public

- * and private keys used to encrypt the data will be stored.  There is

- * only one active encryption key pair and certificate per domain, it

- * is pointed at with G$BCKUPKEY_PREFERRED in the LSA secrets store.

- *

- * The potentially multiple valid decrypting key pairs are in turn

- * stored in the LSA secrets store as G$BCKUPKEY_keyGuidString.

- *

- */

-static WERROR bkrp_client_wrap_decrypt_data(struct dcesrv_call_state *dce_call,

-					    TALLOC_CTX *mem_ctx,

-					    struct bkrp_BackupKey *r,

-					    struct ldb_context *ldb_ctx)

-{

-	struct auth_session_info *session_info =

-		dcesrv_call_session_info(dce_call);

-	struct bkrp_client_side_wrapped uncrypt_request;

-	DATA_BLOB blob;

-	enum ndr_err_code ndr_err;

-	char *guid_string;

-	char *cert_secret_name;

-	DATA_BLOB lsa_secret;

-	DATA_BLOB *uncrypted_data = NULL;

-	NTSTATUS status;

-	uint32_t requested_version;

-

-	blob.data = r->in.data_in;

-	blob.length = r->in.data_in_len;

-

-	if (r->in.data_in_len < 4 || r->in.data_in == NULL) {

-		return WERR_INVALID_PARAMETER;

-	}

-

-	/*

-	 * We check for the version here, so we can actually print the

-	 * message as we are unlikely to parse it with NDR.

-	 */

-	requested_version = IVAL(r->in.data_in, 0);

-	if ((requested_version != BACKUPKEY_CLIENT_WRAP_VERSION2)

-	    && (requested_version != BACKUPKEY_CLIENT_WRAP_VERSION3)) {

-		DEBUG(1, ("Request for unknown BackupKey sub-protocol %d\n", requested_version));

-		return WERR_INVALID_PARAMETER;

-	}

-

-	ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, &uncrypt_request,

-				       (ndr_pull_flags_fn_t)ndr_pull_bkrp_client_side_wrapped);

-	if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {

-		return WERR_INVALID_PARAMETER;

-	}

-

-	if ((uncrypt_request.version != BACKUPKEY_CLIENT_WRAP_VERSION2)

-	    && (uncrypt_request.version != BACKUPKEY_CLIENT_WRAP_VERSION3)) {

-		DEBUG(1, ("Request for unknown BackupKey sub-protocol %d\n", uncrypt_request.version));

-		return WERR_INVALID_PARAMETER;

-	}

-

-	guid_string = GUID_string(mem_ctx, &uncrypt_request.guid);

-	if (guid_string == NULL) {

-		return WERR_NOT_ENOUGH_MEMORY;

-	}

-

-	cert_secret_name = talloc_asprintf(mem_ctx,

-					   "BCKUPKEY_%s",

-					   guid_string);

-	if (cert_secret_name == NULL) {

-		return WERR_NOT_ENOUGH_MEMORY;

-	}

-

-	status = get_lsa_secret(mem_ctx,

-				ldb_ctx,

-				cert_secret_name,

-				&lsa_secret);

-	if (!NT_STATUS_IS_OK(status)) {

-		DEBUG(10, ("Error while fetching secret %s\n", cert_secret_name));

-		return WERR_INVALID_DATA;

-	} else if (lsa_secret.length == 0) {

-		/* we do not have the real secret attribute, like if we are an RODC */

-		return WERR_INVALID_PARAMETER;

-	} else {

-		hx509_context hctx;

-		struct bkrp_exported_RSA_key_pair keypair;

-		hx509_private_key pk;

-		uint32_t i, res;

-		heim_octet_string reversed_secret;

-		heim_octet_string uncrypted_secret;

-		AlgorithmIdentifier alg;

-		DATA_BLOB blob_us;

-		WERROR werr;

-

-		ndr_err = ndr_pull_struct_blob(&lsa_secret, mem_ctx, &keypair, (ndr_pull_flags_fn_t)ndr_pull_bkrp_exported_RSA_key_pair);

-		if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {

-			DEBUG(2, ("Unable to parse the ndr encoded cert in key %s\n", cert_secret_name));

-			return WERR_FILE_NOT_FOUND;

-		}

-

-		status = get_pk_from_raw_keypair_params(mem_ctx, &keypair, &pk;;

-		if (!NT_STATUS_IS_OK(status)) {

-			return WERR_INTERNAL_ERROR;

-		}

-

-		reversed_secret.data = talloc_array(mem_ctx, uint8_t,

-						    uncrypt_request.encrypted_secret_len);

-		if (reversed_secret.data == NULL) {

-			hx509_private_key_free(&pk;;

-			return WERR_NOT_ENOUGH_MEMORY;

-		}

-

-		/* The secret has to be reversed ... */

-		for(i=0; i< uncrypt_request.encrypted_secret_len; i++) {

-			uint8_t *reversed = (uint8_t *)reversed_secret.data;

-			uint8_t *uncrypt = uncrypt_request.encrypted_secret;

-			reversed[i] = uncrypt[uncrypt_request.encrypted_secret_len - 1 - i];

-		}

-		reversed_secret.length = uncrypt_request.encrypted_secret_len;

-

-		/*

-		 * Let's try to decrypt the secret now that

-		 * we have the private key ...