2 Unix SMB/CIFS implementation.
3 session handling for utmp and PAM
5 Copyright (C) tridge@samba.org 2001
6 Copyright (C) abartlet@samba.org 2001
7 Copyright (C) Gerald (Jerry) Carter 2006
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 /* a "session" is claimed when we do a SessionSetupX operation
24 and is yielded when the corresponding vuid is destroyed.
26 sessions are used to populate utmp and PAM session structures
30 #include "smbd/smbd.h"
31 #include "smbd/globals.h"
32 #include "dbwrap/dbwrap.h"
35 #include "../lib/tsocket/tsocket.h"
36 #include "../libcli/security/security.h"
39 /********************************************************************
40 called when a session is created
41 ********************************************************************/
43 bool session_claim(struct smbd_server_connection *sconn, user_struct *vuser)
45 struct server_id pid = messaging_server_id(sconn->msg_ctx);
48 struct sessionid sessionid;
50 struct db_record *rec;
54 vuser->session_keystr = NULL;
56 /* don't register sessions for the guest user - its just too
57 expensive to go through pam session code for browsing etc */
58 if (security_session_user_level(vuser->session_info, NULL) < SECURITY_USER) {
62 if (!sessionid_init()) {
66 ZERO_STRUCT(sessionid);
73 for (i=1;i<MAX_SESSION_ID;i++) {
76 * This is very inefficient and needs fixing -- vl
79 struct server_id sess_pid;
82 snprintf(keystr, sizeof(keystr), "ID/%d", i);
84 rec = sessionid_fetch_record(NULL, keystr);
86 DEBUG(1, ("Could not lock \"%s\"\n", keystr));
90 value = dbwrap_record_get_value(rec);
92 if (value.dsize != sizeof(sessionid)) {
93 DEBUG(1, ("Re-using invalid record\n"));
99 + offsetof(struct sessionid, pid),
102 if (!process_exists(sess_pid)) {
103 DEBUG(5, ("%s has died -- re-using session\n",
104 procid_str_static(&sess_pid)));
111 if (i == MAX_SESSION_ID) {
112 SMB_ASSERT(rec == NULL);
113 DEBUG(1,("session_claim: out of session IDs "
114 "(max is %d)\n", MAX_SESSION_ID));
118 snprintf(sessionid.id_str, sizeof(sessionid.id_str),
119 SESSION_UTMP_TEMPLATE, i);
122 snprintf(keystr, sizeof(keystr), "ID/%s/%u",
123 procid_str_static(&pid), vuser->vuid);
125 rec = sessionid_fetch_record(NULL, keystr);
127 DEBUG(1, ("Could not lock \"%s\"\n", keystr));
131 snprintf(sessionid.id_str, sizeof(sessionid.id_str),
132 SESSION_TEMPLATE, (long unsigned int)sys_getpid(),
136 SMB_ASSERT(rec != NULL);
138 raddr = tsocket_address_inet_addr_string(sconn->remote_address,
144 /* Make clear that we require the optional unix_token in the source3 code */
145 SMB_ASSERT(vuser->session_info->unix_token);
147 fstrcpy(sessionid.username, vuser->session_info->unix_info->unix_name);
148 fstrcpy(sessionid.hostname, sconn->remote_hostname);
149 sessionid.id_num = i; /* Only valid for utmp sessions */
151 sessionid.uid = vuser->session_info->unix_token->uid;
152 sessionid.gid = vuser->session_info->unix_token->gid;
153 fstrcpy(sessionid.remote_machine, get_remote_machine_name());
154 fstrcpy(sessionid.ip_addr_str, raddr);
155 sessionid.connect_start = time(NULL);
157 if (!smb_pam_claim_session(sessionid.username, sessionid.id_str,
158 sessionid.hostname)) {
159 DEBUG(1,("pam_session rejected the session for %s [%s]\n",
160 sessionid.username, sessionid.id_str));
166 data.dptr = (uint8 *)&sessionid;
167 data.dsize = sizeof(sessionid);
169 status = dbwrap_record_store(rec, data, TDB_REPLACE);
173 if (!NT_STATUS_IS_OK(status)) {
174 DEBUG(1,("session_claim: unable to create session id "
175 "record: %s\n", nt_errstr(status)));
180 sys_utmp_claim(sessionid.username, sessionid.hostname,
181 sessionid.ip_addr_str,
182 sessionid.id_str, sessionid.id_num);
185 vuser->session_keystr = talloc_strdup(vuser, keystr);
186 if (!vuser->session_keystr) {
187 DEBUG(0, ("session_claim: talloc_strdup() failed for session_keystr\n"));
193 /********************************************************************
194 called when a session is destroyed
195 ********************************************************************/
197 void session_yield(user_struct *vuser)
199 struct sessionid sessionid;
200 struct db_record *rec;
203 if (!vuser->session_keystr) {
207 rec = sessionid_fetch_record(NULL, vuser->session_keystr);
212 value = dbwrap_record_get_value(rec);
214 if (value.dsize != sizeof(sessionid))
217 memcpy(&sessionid, value.dptr, sizeof(sessionid));
220 sys_utmp_yield(sessionid.username, sessionid.hostname,
221 sessionid.ip_addr_str,
222 sessionid.id_str, sessionid.id_num);
225 smb_pam_close_session(sessionid.username, sessionid.id_str,
228 dbwrap_record_delete(rec);
233 /********************************************************************
234 ********************************************************************/
236 struct session_list {
239 struct sessionid *sessions;
242 static int gather_sessioninfo(const char *key, struct sessionid *session,
245 struct session_list *sesslist = (struct session_list *)private_data;
247 sesslist->sessions = talloc_realloc(
248 sesslist->mem_ctx, sesslist->sessions, struct sessionid,
251 if (!sesslist->sessions) {
256 memcpy(&sesslist->sessions[sesslist->count], session,
257 sizeof(struct sessionid));
261 DEBUG(7, ("gather_sessioninfo session from %s@%s\n",
262 session->username, session->remote_machine));
267 /********************************************************************
268 ********************************************************************/
270 int list_sessions(TALLOC_CTX *mem_ctx, struct sessionid **session_list)
272 struct session_list sesslist;
275 sesslist.mem_ctx = mem_ctx;
277 sesslist.sessions = NULL;
279 status = sessionid_traverse_read(gather_sessioninfo, (void *) &sesslist);
280 if (!NT_STATUS_IS_OK(status)) {
281 DEBUG(3, ("Session traverse failed\n"));
282 SAFE_FREE(sesslist.sessions);
283 *session_list = NULL;
287 *session_list = sesslist.sessions;
288 return sesslist.count;