source3/libsmb/clientgen.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    SMB client generic functions
   4    Copyright (C) Andrew Tridgell 1994-1998
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 2 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program; if not, write to the Free Software
  18    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  19 */
  20
  21 #include "includes.h"
  22
  23 /****************************************************************************
  24  Change the timeout (in milliseconds).
  25 ****************************************************************************/
  26
  27 unsigned int cli_set_timeout(struct cli_state *cli, unsigned int timeout)
  28 {
  29         unsigned int old_timeout = cli->timeout;
  30         cli->timeout = timeout;
  31         return old_timeout;
  32 }
  33
  34 /****************************************************************************
  35  Change the port number used to call on.
  36 ****************************************************************************/
  37
  38 int cli_set_port(struct cli_state *cli, int port)
  39 {
  40         cli->port = port;
  41         return port;
  42 }
  43
  44 /****************************************************************************
  45  Read an smb from a fd ignoring all keepalive packets. Note that the buffer
  46  *MUST* be of size BUFFER_SIZE+SAFETY_MARGIN.
  47  The timeout is in milliseconds
  48
  49  This is exactly the same as receive_smb except that it never returns
  50  a session keepalive packet (just as receive_smb used to do).
  51  receive_smb was changed to return keepalives as the oplock processing means this call
  52  should never go into a blocking read.
  53 ****************************************************************************/
  54
  55 static BOOL client_receive_smb(int fd,char *buffer, unsigned int timeout)
  56 {
  57         BOOL ret;
  58
  59         for(;;) {
  60                 ret = receive_smb_raw(fd, buffer, timeout);
  61
  62                 if (!ret) {
  63                         DEBUG(10,("client_receive_smb failed\n"));
  64                         show_msg(buffer);
  65                         return ret;
  66                 }
  67
  68                 /* Ignore session keepalive packets. */
  69                 if(CVAL(buffer,0) != SMBkeepalive)
  70                         break;
  71         }
  72         show_msg(buffer);
  73         return ret;
  74 }
  75
  76 /****************************************************************************
  77  Recv an smb.
  78 ****************************************************************************/
  79
  80 BOOL cli_receive_smb(struct cli_state *cli)
  81 {
  82         extern int smb_read_error;
  83         BOOL ret;
  84
  85         /* fd == -1 causes segfaults -- Tom (tom@ninja.nl) */
  86         if (cli->fd == -1)
  87                 return False;
  88
  89  again:
  90         ret = client_receive_smb(cli->fd,cli->inbuf,cli->timeout);
  91
  92         if (ret) {
  93                 /* it might be an oplock break request */
  94                 if (!(CVAL(cli->inbuf, smb_flg) & FLAG_REPLY) &&
  95                     CVAL(cli->inbuf,smb_com) == SMBlockingX &&
  96                     SVAL(cli->inbuf,smb_vwv6) == 0 &&
  97                     SVAL(cli->inbuf,smb_vwv7) == 0) {
  98                         if (cli->oplock_handler) {
  99                                 int fnum = SVAL(cli->inbuf,smb_vwv2);
 100                                 unsigned char level = CVAL(cli->inbuf,smb_vwv3+1);
 101                                 if (!cli->oplock_handler(cli, fnum, level)) return False;
 102                         }
 103                         /* try to prevent loops */
 104                         SCVAL(cli->inbuf,smb_com,0xFF);
 105                         goto again;
 106                 }
 107         }
 108
 109         /* If the server is not responding, note that now */
 110
 111         if (!ret) {
 112                 cli->smb_rw_error = smb_read_error;
 113                 close(cli->fd);
 114                 cli->fd = -1;
 115                 return ret;
 116         }
 117
 118         if (!cli_check_sign_mac(cli)) {
 119                 DEBUG(0, ("SMB Signature verification failed on incoming packet!\n"));
 120                 cli->smb_rw_error = READ_BAD_SIG;
 121                 close(cli->fd);
 122                 cli->fd = -1;
 123                 return False;
 124         };
 125         return True;
 126 }
 127
 128 static ssize_t write_socket(int fd, const char *buf, size_t len)
 129 {
 130         ssize_t ret=0;
 131
 132         DEBUG(6,("write_socket(%d,%d)\n",fd,(int)len));
 133         ret = write_data(fd,buf,len);
 134
 135         DEBUG(6,("write_socket(%d,%d) wrote %d\n",fd,(int)len,(int)ret));
 136         if(ret <= 0)
 137                 DEBUG(0,("write_socket: Error writing %d bytes to socket %d: ERRNO = %s\n",
 138                         (int)len, fd, strerror(errno) ));
 139
 140         return(ret);
 141 }
 142
 143 /****************************************************************************
 144  Send an smb to a fd.
 145 ****************************************************************************/
 146
 147 BOOL cli_send_smb(struct cli_state *cli)
 148 {
 149         size_t len;
 150         size_t nwritten=0;
 151         ssize_t ret;
 152
 153         /* fd == -1 causes segfaults -- Tom (tom@ninja.nl) */
 154         if (cli->fd == -1)
 155                 return False;
 156
 157         cli_calculate_sign_mac(cli);
 158
 159         len = smb_len(cli->outbuf) + 4;
 160
 161         while (nwritten < len) {
 162                 ret = write_socket(cli->fd,cli->outbuf+nwritten,len - nwritten);
 163                 if (ret <= 0) {
 164                         close(cli->fd);
 165                         cli->fd = -1;
 166                         cli->smb_rw_error = WRITE_ERROR;
 167                         DEBUG(0,("Error writing %d bytes to client. %d (%s)\n",
 168                                 (int)len,(int)ret, strerror(errno) ));
 169                         return False;
 170                 }
 171                 nwritten += ret;
 172         }
 173         /* Increment the mid so we can tell between responses. */
 174         cli->mid++;
 175         if (!cli->mid)
 176                 cli->mid++;
 177         return True;
 178 }
 179
 180 /****************************************************************************
 181  Setup basics in a outgoing packet.
 182 ****************************************************************************/
 183
 184 void cli_setup_packet(struct cli_state *cli)
 185 {
 186         cli->rap_error = 0;
 187         SSVAL(cli->outbuf,smb_pid,cli->pid);
 188         SSVAL(cli->outbuf,smb_uid,cli->vuid);
 189         SSVAL(cli->outbuf,smb_mid,cli->mid);
 190         if (cli->protocol > PROTOCOL_CORE) {
 191                 uint16 flags2;
 192                 if (cli->case_sensitive) {
 193                         SCVAL(cli->outbuf,smb_flg,0x0);
 194                 } else {
 195                         /* Default setting, case insensitive. */
 196                         SCVAL(cli->outbuf,smb_flg,0x8);
 197                 }
 198                 flags2 = FLAGS2_LONG_PATH_COMPONENTS;
 199                 if (cli->capabilities & CAP_UNICODE)
 200                         flags2 |= FLAGS2_UNICODE_STRINGS;
 201                 if (cli->capabilities & CAP_DFS)
 202                         flags2 |= FLAGS2_DFS_PATHNAMES;
 203                 if (cli->capabilities & CAP_STATUS32)
 204                         flags2 |= FLAGS2_32_BIT_ERROR_CODES;
 205                 if (cli->use_spnego)
 206                         flags2 |= FLAGS2_EXTENDED_SECURITY;
 207                 SSVAL(cli->outbuf,smb_flg2, flags2);
 208         }
 209 }
 210
 211 /****************************************************************************
 212  Setup the bcc length of the packet from a pointer to the end of the data.
 213 ****************************************************************************/
 214
 215 void cli_setup_bcc(struct cli_state *cli, void *p)
 216 {
 217         set_message_bcc(cli->outbuf, PTR_DIFF(p, smb_buf(cli->outbuf)));
 218 }
 219
 220 /****************************************************************************
 221  Initialise credentials of a client structure.
 222 ****************************************************************************/
 223
 224 void cli_init_creds(struct cli_state *cli, const struct ntuser_creds *usr)
 225 {
 226         /* copy_nt_creds(&cli->usr, usr); */
 227         fstrcpy(cli->domain   , usr->domain);
 228         fstrcpy(cli->user_name, usr->user_name);
 229         memcpy(&cli->pwd, &usr->pwd, sizeof(usr->pwd));
 230
 231         DEBUG(10,("cli_init_creds: user %s domain %s\n",
 232                cli->user_name, cli->domain));
 233 }
 234
 235 /****************************************************************************
 236  Set the signing state (used from the command line).
 237 ****************************************************************************/
 238
 239 void cli_setup_signing_state(struct cli_state *cli, int signing_state)
 240 {
 241         if (signing_state == Undefined)
 242                 return;
 243
 244         if (signing_state == False) {
 245                 cli->sign_info.allow_smb_signing = False;
 246                 cli->sign_info.mandatory_signing = False;
 247                 return;
 248         }
 249
 250         cli->sign_info.allow_smb_signing = True;
 251
 252         if (signing_state == Required)
 253                 cli->sign_info.mandatory_signing = True;
 254 }
 255
 256 /****************************************************************************
 257  Initialise a client structure.
 258 ****************************************************************************/
 259
 260 struct cli_state *cli_initialise(struct cli_state *cli)
 261 {
 262         BOOL alloced_cli = False;
 263         int i;
 264
 265         /* Check the effective uid - make sure we are not setuid */
 266         if (is_setuid_root()) {
 267                 DEBUG(0,("libsmb based programs must *NOT* be setuid root.\n"));
 268                 return NULL;
 269         }
 270
 271         if (!cli) {
 272                 cli = SMB_MALLOC_P(struct cli_state);
 273                 if (!cli)
 274                         return NULL;
 275                 ZERO_STRUCTP(cli);
 276                 alloced_cli = True;
 277         }
 278
 279         if (cli->initialised)
 280                 cli_close_connection(cli);
 281
 282         ZERO_STRUCTP(cli);
 283
 284         cli->port = 0;
 285         cli->fd = -1;
 286         cli->cnum = -1;
 287         cli->pid = (uint16)sys_getpid();
 288         cli->mid = 1;
 289         cli->vuid = UID_FIELD_INVALID;
 290         cli->protocol = PROTOCOL_NT1;
 291         cli->timeout = 20000; /* Timeout is in milliseconds. */
 292         cli->bufsize = CLI_BUFFER_SIZE+4;
 293         cli->max_xmit = cli->bufsize;
 294         cli->outbuf = (char *)SMB_MALLOC(cli->bufsize+SAFETY_MARGIN);
 295         cli->inbuf = (char *)SMB_MALLOC(cli->bufsize+SAFETY_MARGIN);
 296         cli->oplock_handler = cli_oplock_ack;
 297         cli->case_sensitive = False;
 298         cli->smb_rw_error = 0;
 299
 300         cli->use_spnego = lp_client_use_spnego();
 301
 302         cli->capabilities = CAP_UNICODE | CAP_STATUS32 | CAP_DFS;
 303
 304         /* Set the CLI_FORCE_DOSERR environment variable to test
 305            client routines using DOS errors instead of STATUS32
 306            ones.  This intended only as a temporary hack. */
 307         if (getenv("CLI_FORCE_DOSERR"))
 308                 cli->force_dos_errors = True;
 309
 310         if (lp_client_signing())
 311                 cli->sign_info.allow_smb_signing = True;
 312
 313         if (lp_client_signing() == Required)
 314                 cli->sign_info.mandatory_signing = True;
 315
 316         if (!cli->outbuf || !cli->inbuf)
 317                 goto error;
 318
 319         if ((cli->mem_ctx = talloc_init("cli based talloc")) == NULL)
 320                 goto error;
 321
 322         memset(cli->outbuf, 0, cli->bufsize);
 323         memset(cli->inbuf, 0, cli->bufsize);
 324
 325
 326 #if defined(DEVELOPER)
 327         /* just because we over-allocate, doesn't mean it's right to use it */
 328         clobber_region(FUNCTION_MACRO, __LINE__, cli->outbuf+cli->bufsize, SAFETY_MARGIN);
 329         clobber_region(FUNCTION_MACRO, __LINE__, cli->inbuf+cli->bufsize, SAFETY_MARGIN);
 330 #endif
 331
 332         /* initialise signing */
 333         cli_null_set_signing(cli);
 334
 335         for (i=0; i<PI_MAX_PIPES; i++)
 336                 cli->pipes[i].fnum = 0;
 337
 338         cli->netlogon_pipe.fnum = 0;
 339
 340         cli->initialised = 1;
 341         cli->allocated = alloced_cli;
 342
 343         cli->pipe_idx = -1;
 344
 345         return cli;
 346
 347         /* Clean up after malloc() error */
 348
 349  error:
 350
 351         SAFE_FREE(cli->inbuf);
 352         SAFE_FREE(cli->outbuf);
 353
 354         if (alloced_cli)
 355                 SAFE_FREE(cli);
 356
 357         return NULL;
 358 }
 359
 360 /****************************************************************************
 361 close the session
 362 ****************************************************************************/
 363
 364 void cli_nt_session_close(struct cli_state *cli)
 365 {
 366         int i;
 367
 368         for (i=0; i<PI_MAX_PIPES; i++) {
 369                 if (cli->pipes[i].pipe_auth_flags & AUTH_PIPE_NTLMSSP) {
 370                         ntlmssp_end(&cli->pipes[i].ntlmssp_pipe_state);
 371                 }
 372
 373                 if (cli->pipes[i].fnum != 0)
 374                         cli_close(cli, cli->pipes[i].fnum);
 375                 cli->pipes[i].fnum = 0;
 376         }
 377         cli->pipe_idx = -1;
 378 }
 379
 380 /****************************************************************************
 381 close the NETLOGON session holding the session key for NETSEC
 382 ****************************************************************************/
 383
 384 void cli_nt_netlogon_netsec_session_close(struct cli_state *cli)
 385 {
 386         if (cli->netlogon_pipe.fnum != 0) {
 387                 cli_close(cli, cli->netlogon_pipe.fnum);
 388                 cli->netlogon_pipe.fnum = 0;
 389         }
 390 }
 391
 392 /****************************************************************************
 393  Close a client connection and free the memory without destroying cli itself.
 394 ****************************************************************************/
 395
 396 void cli_close_connection(struct cli_state *cli)
 397 {
 398         cli_nt_session_close(cli);
 399         cli_nt_netlogon_netsec_session_close(cli);
 400
 401         /*
 402          * tell our peer to free his resources.  Wihtout this, when an
 403          * application attempts to do a graceful shutdown and calls
 404          * smbc_free_context() to clean up all connections, some connections
 405          * can remain active on the peer end, until some (long) timeout period
 406          * later.  This tree disconnect forces the peer to clean up, since the
 407          * connection will be going away.
 408          *
 409          * Also, do not do tree disconnect when cli->smb_rw_error is DO_NOT_DO_TDIS
 410          * the only user for this so far is smbmount which passes opened connection
 411          * down to kernel's smbfs module.
 412          */
 413         if ( (cli->cnum != (uint16)-1) && (cli->smb_rw_error != DO_NOT_DO_TDIS ) )
 414                 cli_tdis(cli);
 415
 416         SAFE_FREE(cli->outbuf);
 417         SAFE_FREE(cli->inbuf);
 418
 419         cli_free_signing_context(cli);
 420         data_blob_free(&cli->secblob);
 421         data_blob_free(&cli->user_session_key);
 422
 423         if (cli->pipes[cli->pipe_idx].pipe_auth_flags & AUTH_PIPE_NTLMSSP)
 424                 ntlmssp_end(&cli->pipes[cli->pipe_idx].ntlmssp_pipe_state);
 425
 426         if (cli->mem_ctx) {
 427                 talloc_destroy(cli->mem_ctx);
 428                 cli->mem_ctx = NULL;
 429         }
 430
 431         if (cli->fd != -1)
 432                 close(cli->fd);
 433         cli->fd = -1;
 434         cli->smb_rw_error = 0;
 435
 436 }
 437
 438 /****************************************************************************
 439  Shutdown a client structure.
 440 ****************************************************************************/
 441
 442 void cli_shutdown(struct cli_state *cli)
 443 {
 444         BOOL allocated = cli->allocated;
 445         cli_close_connection(cli);
 446         ZERO_STRUCTP(cli);
 447         if (allocated)
 448                 free(cli);
 449 }
 450
 451 /****************************************************************************
 452  Set socket options on a open connection.
 453 ****************************************************************************/
 454
 455 void cli_sockopt(struct cli_state *cli, const char *options)
 456 {
 457         set_socket_options(cli->fd, options);
 458 }
 459
 460 /****************************************************************************
 461  Set the PID to use for smb messages. Return the old pid.
 462 ****************************************************************************/
 463
 464 uint16 cli_setpid(struct cli_state *cli, uint16 pid)
 465 {
 466         uint16 ret = cli->pid;
 467         cli->pid = pid;
 468         return ret;
 469 }
 470
 471 /****************************************************************************
 472  Set the case sensitivity flag on the packets. Returns old state.
 473 ****************************************************************************/
 474
 475 BOOL cli_set_case_sensitive(struct cli_state *cli, BOOL case_sensitive)
 476 {
 477         BOOL ret = cli->case_sensitive;
 478         cli->case_sensitive = case_sensitive;
 479         return ret;
 480 }
 481
 482 /****************************************************************************
 483 Send a keepalive packet to the server
 484 ****************************************************************************/
 485 BOOL cli_send_keepalive(struct cli_state *cli)
 486 {
 487         if (cli->fd == -1) {
 488                 DEBUG(3, ("cli_send_keepalive: fd == -1\n"));
 489                 return False;
 490         }
 491         if (!send_keepalive(cli->fd)) {
 492                 close(cli->fd);
 493                 cli->fd = -1;
 494                 DEBUG(0,("Error sending keepalive packet to client.\n"));
 495                 return False;
 496         }
 497         return True;
 498 }