2 Unix SMB/CIFS implementation.
3 service (connection) opening and closing
4 Copyright (C) Andrew Tridgell 1992-1998
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
23 extern struct timeval smb_last_time;
24 extern userdom_struct current_user_info;
27 /****************************************************************************
28 Load parameters specific to a connection/service.
29 ****************************************************************************/
31 BOOL set_current_service(connection_struct *conn,BOOL do_chdir)
33 extern char magic_char;
34 static connection_struct *last_conn;
42 conn->lastused = smb_last_time.tv_sec;
47 vfs_ChDir(conn,conn->connectpath) != 0 &&
48 vfs_ChDir(conn,conn->origpath) != 0) {
49 DEBUG(0,("chdir (%s) failed\n",
54 if (conn == last_conn)
59 magic_char = lp_magicchar(snum);
63 /****************************************************************************
64 Add a home service. Returns the new service number or -1 if fail.
65 ****************************************************************************/
67 int add_home_service(const char *service, const char *username, const char *homedir)
71 if (!service || !homedir)
74 if ((iHomeService = lp_servicenumber(HOMES_NAME)) < 0)
78 * If this is a winbindd provided username, remove
79 * the domain component before adding the service.
80 * Log a warning if the "path=" parameter does not
85 const char *p = strchr(service,*lp_winbind_separator());
87 /* We only want the 'user' part of the string */
93 if (!lp_add_home(service, iHomeService, username, homedir)) {
97 return lp_servicenumber(service);
103 * Find a service entry.
105 * @param service is modified (to canonical form??)
108 int find_service(fstring service)
112 all_string_sub(service,"\\","/",0);
114 iService = lp_servicenumber(service);
116 /* now handle the special case of a home directory */
118 char *phome_dir = get_user_home_dir(service);
122 * Try mapping the servicename, it may
123 * be a Windows to unix mapped user name.
125 if(map_username(service))
126 phome_dir = get_user_home_dir(service);
129 DEBUG(3,("checking for home directory %s gave %s\n",service,
130 phome_dir?phome_dir:"(NULL)"));
132 iService = add_home_service(service,service /* 'username' */, phome_dir);
135 /* If we still don't have a service, attempt to add it as a printer. */
139 if ((iPrinterService = lp_servicenumber(PRINTERS_NAME)) >= 0) {
142 DEBUG(3,("checking whether %s is a valid printer name...\n", service));
143 pszTemp = lp_printcapname();
144 if ((pszTemp != NULL) && pcap_printername_ok(service, pszTemp)) {
145 DEBUG(3,("%s is a valid printer name\n", service));
146 DEBUG(3,("adding %s as a printer service\n", service));
147 lp_add_printer(service, iPrinterService);
148 iService = lp_servicenumber(service);
150 DEBUG(0,("failed to add %s as a printer service!\n", service));
153 DEBUG(3,("%s is not a valid printer name\n", service));
158 /* Check for default vfs service? Unsure whether to implement this */
162 /* just possibly it's a default service? */
164 char *pdefservice = lp_defaultservice();
165 if (pdefservice && *pdefservice && !strequal(pdefservice,service) && !strstr_m(service,"..")) {
167 * We need to do a local copy here as lp_defaultservice()
168 * returns one of the rotating lp_string buffers that
169 * could get overwritten by the recursive find_service() call
170 * below. Fix from Josef Hinteregger <joehtg@joehtg.co.at>.
173 pstrcpy(defservice, pdefservice);
174 iService = find_service(defservice);
176 all_string_sub(service, "_","/",0);
177 iService = lp_add_service(service, iService);
183 if (!VALID_SNUM(iService)) {
184 DEBUG(0,("Invalid snum %d for %s\n",iService, service));
190 DEBUG(3,("find_service() failed to find service %s\n", service));
196 /****************************************************************************
197 do some basic sainity checks on the share.
198 This function modifies dev, ecode.
199 ****************************************************************************/
201 static NTSTATUS share_sanity_checks(int snum, fstring dev)
204 if (!lp_snum_ok(snum) ||
205 !check_access(smbd_server_fd(),
206 lp_hostsallow(snum), lp_hostsdeny(snum))) {
207 return NT_STATUS_ACCESS_DENIED;
210 if (dev[0] == '?' || !dev[0]) {
211 if (lp_print_ok(snum)) {
212 fstrcpy(dev,"LPT1:");
213 } else if (strequal(lp_fstype(snum), "IPC")) {
222 if (lp_print_ok(snum)) {
223 if (!strequal(dev, "LPT1:")) {
224 return NT_STATUS_BAD_DEVICE_TYPE;
226 } else if (strequal(lp_fstype(snum), "IPC")) {
227 if (!strequal(dev, "IPC")) {
228 return NT_STATUS_BAD_DEVICE_TYPE;
230 } else if (!strequal(dev, "A:")) {
231 return NT_STATUS_BAD_DEVICE_TYPE;
234 /* Behave as a printer if we are supposed to */
235 if (lp_print_ok(snum) && (strcmp(dev, "A:") == 0)) {
236 fstrcpy(dev, "LPT1:");
242 /****************************************************************************
243 Make a connection, given the snum to connect to, and the vuser of the
244 connecting user if appropriate.
245 ****************************************************************************/
247 static connection_struct *make_connection_snum(int snum, user_struct *vuser,
249 const char *pdev, NTSTATUS *status)
251 struct passwd *pass = NULL;
253 connection_struct *conn;
261 if (NT_STATUS_IS_ERR(*status = share_sanity_checks(snum, dev))) {
267 DEBUG(0,("Couldn't find free connection.\n"));
268 *status = NT_STATUS_INSUFFICIENT_RESOURCES;
272 if (lp_guest_only(snum)) {
273 const char *guestname = lp_guestaccount();
275 pass = getpwnam_alloc(guestname);
277 DEBUG(0,("make_connection_snum: Invalid guest account %s??\n",guestname));
279 *status = NT_STATUS_NO_SUCH_USER;
282 fstrcpy(user,pass->pw_name);
283 conn->force_user = True;
284 conn->uid = pass->pw_uid;
285 conn->gid = pass->pw_gid;
286 string_set(&conn->user,pass->pw_name);
288 DEBUG(3,("Guest only user %s\n",user));
291 if (!lp_guest_ok(snum)) {
292 DEBUG(2, ("guest user (from session setup) not permitted to access this share (%s)\n", lp_servicename(snum)));
294 *status = NT_STATUS_ACCESS_DENIED;
298 if (!user_ok(vuser->user.unix_name, snum, vuser->groups, vuser->n_groups)) {
299 DEBUG(2, ("user '%s' (from session setup) not permitted to access this share (%s)\n", vuser->user.unix_name, lp_servicename(snum)));
301 *status = NT_STATUS_ACCESS_DENIED;
305 conn->vuid = vuser->vuid;
306 conn->uid = vuser->uid;
307 conn->gid = vuser->gid;
308 string_set(&conn->user,vuser->user.unix_name);
309 fstrcpy(user,vuser->user.unix_name);
310 guest = vuser->guest;
311 } else if (lp_security() == SEC_SHARE) {
312 /* add it as a possible user name if we
313 are in share mode security */
314 add_session_user(lp_servicename(snum));
315 /* shall we let them in? */
316 if (!authorise_login(snum,user,password,&guest)) {
317 DEBUG( 2, ( "Invalid username/password for [%s]\n",
318 lp_servicename(snum)) );
320 *status = NT_STATUS_WRONG_PASSWORD;
323 pass = Get_Pwnam(user);
324 conn->force_user = True;
325 conn->uid = pass->pw_uid;
326 conn->gid = pass->pw_gid;
327 string_set(&conn->user, pass->pw_name);
328 fstrcpy(user, pass->pw_name);
331 DEBUG(0, ("invalid VUID (vuser) but not in security=share\n"));
333 *status = NT_STATUS_ACCESS_DENIED;
337 add_session_user(user);
339 safe_strcpy(conn->client_address, client_addr(),
340 sizeof(conn->client_address)-1);
341 conn->num_files_open = 0;
342 conn->lastused = time(NULL);
343 conn->service = snum;
345 conn->printer = (strncmp(dev,"LPT",3) == 0);
346 conn->ipc = ((strncmp(dev,"IPC",3) == 0) || strequal(dev,"ADMIN$"));
349 /* Case options for the share. */
350 conn->case_sensitive = lp_casesensitive(snum);
351 conn->case_preserve = lp_preservecase(snum);
352 conn->short_case_preserve = lp_shortpreservecase(snum);
354 conn->veto_list = NULL;
355 conn->hide_list = NULL;
356 conn->veto_oplock_list = NULL;
357 string_set(&conn->dirpath,"");
358 string_set(&conn->user,user);
359 conn->nt_user_token = NULL;
361 conn->read_only = lp_readonly(conn->service);
362 conn->admin_user = False;
365 * If force user is true, then store the
366 * given userid and also the groups
367 * of the user we're forcing.
370 if (*lp_force_user(snum)) {
371 struct passwd *pass2;
373 pstrcpy(fuser,lp_force_user(snum));
375 /* Allow %S to be used by force user. */
376 pstring_sub(fuser,"%S",lp_servicename(snum));
378 pass2 = (struct passwd *)Get_Pwnam(fuser);
380 conn->uid = pass2->pw_uid;
381 conn->gid = pass2->pw_gid;
382 string_set(&conn->user,pass2->pw_name);
383 fstrcpy(user,pass2->pw_name);
384 conn->force_user = True;
385 DEBUG(3,("Forced user %s\n",user));
387 DEBUG(1,("Couldn't find user %s\n",fuser));
389 *status = NT_STATUS_NO_SUCH_USER;
396 * If force group is true, then override
397 * any groupid stored for the connecting user.
400 if (*lp_force_group(snum)) {
404 BOOL user_must_be_member = False;
406 pstrcpy(tmp_gname,lp_force_group(snum));
408 if (tmp_gname[0] == '+') {
409 user_must_be_member = True;
410 /* even now, tmp_gname is null terminated */
411 pstrcpy(gname,&tmp_gname[1]);
413 pstrcpy(gname,tmp_gname);
415 /* default service may be a group name */
416 pstring_sub(gname,"%S",lp_servicename(snum));
417 gid = nametogid(gname);
419 if (gid != (gid_t)-1) {
422 * If the user has been forced and the forced group starts
423 * with a '+', then we only set the group to be the forced
424 * group if the forced user is a member of that group.
425 * Otherwise, the meaning of the '+' would be ignored.
427 if (conn->force_user && user_must_be_member) {
428 if (user_in_group_list( user, gname, NULL, 0)) {
430 DEBUG(3,("Forced group %s for member %s\n",gname,user));
434 DEBUG(3,("Forced group %s\n",gname));
436 conn->force_group = True;
438 DEBUG(1,("Couldn't find group %s\n",gname));
440 *status = NT_STATUS_NO_SUCH_GROUP;
444 #endif /* HAVE_GETGRNAM */
448 pstrcpy(s,lp_pathname(snum));
449 standard_sub_conn(conn,s,sizeof(s));
450 string_set(&conn->connectpath,s);
451 DEBUG(3,("Connect path is '%s' for service [%s]\n",s, lp_servicename(snum)));
454 if (conn->force_user || conn->force_group) {
456 /* groups stuff added by ih */
460 /* Find all the groups this uid is in and
461 store them. Used by change_to_user() */
462 initialise_groups(conn->user, conn->uid, conn->gid);
463 get_current_groups(conn->gid, &conn->ngroups,&conn->groups);
465 conn->nt_user_token = create_nt_token(conn->uid, conn->gid,
466 conn->ngroups, conn->groups,
471 * New code to check if there's a share security descripter
472 * added from NT server manager. This is done after the
473 * smb.conf checks are done as we need a uid and token. JRA.
478 BOOL can_write = share_access_check(conn, snum, vuser, FILE_WRITE_DATA);
481 if (!share_access_check(conn, snum, vuser, FILE_READ_DATA)) {
482 /* No access, read or write. */
483 DEBUG(0,( "make_connection: connection to %s denied due to security descriptor.\n",
484 lp_servicename(snum)));
486 *status = NT_STATUS_ACCESS_DENIED;
489 conn->read_only = True;
493 /* Initialise VFS function pointers */
495 if (!smbd_vfs_init(conn)) {
496 DEBUG(0, ("vfs_init failed for service %s\n", lp_servicename(SNUM(conn))));
498 *status = NT_STATUS_BAD_NETWORK_NAME;
502 /* ROOT Activities: */
503 /* check number of connections */
504 if (!claim_connection(conn,
505 lp_servicename(SNUM(conn)),
506 lp_max_connections(SNUM(conn)),
508 DEBUG(1,("too many connections - rejected\n"));
510 *status = NT_STATUS_INSUFFICIENT_RESOURCES;
514 /* Preexecs are done here as they might make the dir we are to ChDir to below */
515 /* execute any "root preexec = " line */
516 if (*lp_rootpreexec(SNUM(conn))) {
519 pstrcpy(cmd,lp_rootpreexec(SNUM(conn)));
520 standard_sub_conn(conn,cmd,sizeof(cmd));
521 DEBUG(5,("cmd=%s\n",cmd));
522 ret = smbrun(cmd,NULL);
523 if (ret != 0 && lp_rootpreexec_close(SNUM(conn))) {
524 DEBUG(1,("root preexec gave %d - failing connection\n", ret));
525 yield_connection(conn, lp_servicename(SNUM(conn)));
527 *status = NT_STATUS_ACCESS_DENIED;
532 /* USER Activites: */
533 if (!change_to_user(conn, conn->vuid)) {
534 /* No point continuing if they fail the basic checks */
535 DEBUG(0,("Can't become connected user!\n"));
537 *status = NT_STATUS_LOGON_FAILURE;
541 /* Remember that a different vuid can connect later without these checks... */
543 /* Preexecs are done here as they might make the dir we are to ChDir to below */
544 /* execute any "preexec = " line */
545 if (*lp_preexec(SNUM(conn))) {
548 pstrcpy(cmd,lp_preexec(SNUM(conn)));
549 standard_sub_conn(conn,cmd,sizeof(cmd));
550 ret = smbrun(cmd,NULL);
551 if (ret != 0 && lp_preexec_close(SNUM(conn))) {
552 DEBUG(1,("preexec gave %d - failing connection\n", ret));
553 change_to_root_user();
554 yield_connection(conn, lp_servicename(SNUM(conn)));
556 *status = NT_STATUS_ACCESS_DENIED;
561 #ifdef WITH_FAKE_KASERVER
562 if (lp_afs_share(SNUM(conn))) {
567 #if CHECK_PATH_ON_TCONX
568 /* win2000 does not check the permissions on the directory
569 during the tree connect, instead relying on permission
570 check during individual operations. To match this behaviour
571 I have disabled this chdir check (tridge) */
572 if (vfs_ChDir(conn,conn->connectpath) != 0) {
573 DEBUG(0,("%s (%s) Can't change directory to %s (%s)\n",
574 get_remote_machine_name(), conn->client_address,
575 conn->connectpath,strerror(errno)));
576 change_to_root_user();
577 yield_connection(conn, lp_servicename(SNUM(conn)));
579 *status = NT_STATUS_BAD_NETWORK_NAME;
583 /* the alternative is just to check the directory exists */
584 if (stat(conn->connectpath, &st) != 0 || !S_ISDIR(st.st_mode)) {
585 DEBUG(0,("'%s' does not exist or is not a directory, when connecting to [%s]\n", conn->connectpath, lp_servicename(SNUM(conn))));
586 change_to_root_user();
587 yield_connection(conn, lp_servicename(SNUM(conn)));
589 *status = NT_STATUS_BAD_NETWORK_NAME;
594 string_set(&conn->origpath,conn->connectpath);
596 #if SOFTLINK_OPTIMISATION
597 /* resolve any soft links early if possible */
598 if (vfs_ChDir(conn,conn->connectpath) == 0) {
600 pstrcpy(s,conn->connectpath);
602 string_set(&conn->connectpath,s);
603 vfs_ChDir(conn,conn->connectpath);
608 * Print out the 'connected as' stuff here as we need
609 * to know the effective uid and gid we will be using
610 * (at least initially).
613 if( DEBUGLVL( IS_IPC(conn) ? 3 : 1 ) ) {
614 dbgtext( "%s (%s) ", get_remote_machine_name(), conn->client_address );
615 dbgtext( "%s", srv_is_signing_active() ? "signed " : "");
616 dbgtext( "connect to service %s ", lp_servicename(SNUM(conn)) );
617 dbgtext( "initially as user %s ", user );
618 dbgtext( "(uid=%d, gid=%d) ", (int)geteuid(), (int)getegid() );
619 dbgtext( "(pid %d)\n", (int)sys_getpid() );
622 /* Add veto/hide lists */
623 if (!IS_IPC(conn) && !IS_PRINT(conn)) {
624 set_namearray( &conn->veto_list, lp_veto_files(SNUM(conn)));
625 set_namearray( &conn->hide_list, lp_hide_files(SNUM(conn)));
626 set_namearray( &conn->veto_oplock_list, lp_veto_oplocks(SNUM(conn)));
629 /* Invoke VFS make connection hook */
631 if (SMB_VFS_CONNECT(conn, lp_servicename(snum), user) < 0) {
632 DEBUG(0,("make_connection: VFS make connection failed!\n"));
633 change_to_root_user();
635 *status = NT_STATUS_UNSUCCESSFUL;
639 /* we've finished with the user stuff - go back to root */
640 change_to_root_user();
645 /***************************************************************************************
646 Simple wrapper function for make_connection() to include a call to
648 **************************************************************************************/
650 connection_struct *make_connection_with_chdir(const char *service_in, DATA_BLOB password,
651 const char *dev, uint16 vuid, NTSTATUS *status)
653 connection_struct *conn = NULL;
655 conn = make_connection(service_in, password, dev, vuid, status);
658 * make_connection() does not change the directory for us any more
659 * so we have to do it as a separate step --jerry
662 if ( conn && vfs_ChDir(conn,conn->connectpath) != 0 ) {
663 DEBUG(0,("move_driver_to_download_area: Can't change directory to %s for [print$] (%s)\n",
664 conn->connectpath,strerror(errno)));
665 yield_connection(conn, lp_servicename(SNUM(conn)));
667 *status = NT_STATUS_UNSUCCESSFUL;
674 /****************************************************************************
675 Make a connection to a service.
678 ****************************************************************************/
680 connection_struct *make_connection(const char *service_in, DATA_BLOB password,
681 const char *pdev, uint16 vuid, NTSTATUS *status)
684 user_struct *vuser = NULL;
691 /* This must ONLY BE CALLED AS ROOT. As it exits this function as root. */
692 if (!non_root_mode() && (euid = geteuid()) != 0) {
693 DEBUG(0,("make_connection: PANIC ERROR. Called as nonroot (%u)\n", (unsigned int)euid ));
694 smb_panic("make_connection: PANIC ERROR. Called as nonroot\n");
697 if(lp_security() != SEC_SHARE) {
698 vuser = get_valid_user_struct(vuid);
700 DEBUG(1,("make_connection: refusing to connect with no session setup\n"));
701 *status = NT_STATUS_ACCESS_DENIED;
706 /* Logic to try and connect to the correct [homes] share, preferably without too many
707 getpwnam() lookups. This is particulary nasty for winbind usernames, where the
708 share name isn't the same as unix username.
710 The snum of the homes share is stored on the vuser at session setup time.
713 if (strequal(service_in,HOMES_NAME)) {
714 if(lp_security() != SEC_SHARE) {
715 DATA_BLOB no_pw = data_blob(NULL, 0);
716 if (vuser->homes_snum == -1) {
717 DEBUG(2, ("[homes] share not available for this user because it was not found or created at session setup time\n"));
718 *status = NT_STATUS_BAD_NETWORK_NAME;
721 DEBUG(5, ("making a connection to [homes] service created at session setup time\n"));
722 return make_connection_snum(vuser->homes_snum,
726 /* Security = share. Try with current_user_info.smb_name
727 * as the username. */
728 if (*current_user_info.smb_name) {
729 fstring unix_username;
730 fstrcpy(unix_username,
731 current_user_info.smb_name);
732 map_username(unix_username);
733 snum = find_service(unix_username);
736 DEBUG(5, ("making a connection to 'homes' service %s based on security=share\n", service_in));
737 return make_connection_snum(snum, NULL,
742 } else if ((lp_security() != SEC_SHARE) && (vuser->homes_snum != -1)
743 && strequal(service_in, lp_servicename(vuser->homes_snum))) {
744 DATA_BLOB no_pw = data_blob(NULL, 0);
745 DEBUG(5, ("making a connection to 'homes' service [%s] created at session setup time\n", service_in));
746 return make_connection_snum(vuser->homes_snum,
751 fstrcpy(service, service_in);
755 snum = find_service(service);
758 if (strequal(service,"IPC$") || strequal(service,"ADMIN$")) {
759 DEBUG(3,("refusing IPC connection to %s\n", service));
760 *status = NT_STATUS_ACCESS_DENIED;
764 DEBUG(0,("%s (%s) couldn't find service %s\n",
765 get_remote_machine_name(), client_addr(), service));
766 *status = NT_STATUS_BAD_NETWORK_NAME;
770 /* Handle non-Dfs clients attempting connections to msdfs proxy */
771 if (lp_host_msdfs() && (*lp_msdfs_proxy(snum) != '\0')) {
772 DEBUG(3, ("refusing connection to dfs proxy '%s'\n", service));
773 *status = NT_STATUS_BAD_NETWORK_NAME;
777 DEBUG(5, ("making a connection to 'normal' service %s\n", service));
779 return make_connection_snum(snum, vuser,
784 /****************************************************************************
786 ****************************************************************************/
787 void close_cnum(connection_struct *conn, uint16 vuid)
789 DirCacheFlush(SNUM(conn));
791 change_to_root_user();
793 DEBUG(IS_IPC(conn)?3:1, ("%s (%s) closed connection to service %s\n",
794 get_remote_machine_name(),conn->client_address,
795 lp_servicename(SNUM(conn))));
797 /* Call VFS disconnect hook */
798 SMB_VFS_DISCONNECT(conn);
800 yield_connection(conn, lp_servicename(SNUM(conn)));
802 file_close_conn(conn);
803 dptr_closecnum(conn);
805 /* make sure we leave the directory available for unmount */
806 vfs_ChDir(conn, "/");
808 /* execute any "postexec = " line */
809 if (*lp_postexec(SNUM(conn)) &&
810 change_to_user(conn, vuid)) {
812 pstrcpy(cmd,lp_postexec(SNUM(conn)));
813 standard_sub_conn(conn,cmd,sizeof(cmd));
815 change_to_root_user();
818 change_to_root_user();
819 /* execute any "root postexec = " line */
820 if (*lp_rootpostexec(SNUM(conn))) {
822 pstrcpy(cmd,lp_rootpostexec(SNUM(conn)));
823 standard_sub_conn(conn,cmd,sizeof(cmd));