2 Unix SMB/CIFS implementation.
3 session handling for utmp and PAM
5 Copyright (C) tridge@samba.org 2001
6 Copyright (C) abartlet@samba.org 2001
7 Copyright (C) Gerald (Jerry) Carter 2006
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 /* a "session" is claimed when we do a SessionSetupX operation
25 and is yielded when the corresponding vuid is destroyed.
27 sessions are used to populate utmp and PAM session structures
32 /********************************************************************
33 ********************************************************************/
35 static struct db_context *session_db_ctx(void)
37 static struct db_context *ctx;
42 ctx = db_open(NULL, lock_path("sessionid.tdb"), 0,
43 TDB_CLEAR_IF_FIRST|TDB_DEFAULT,
44 O_RDWR | O_CREAT, 0644);
48 BOOL session_init(void)
50 if (session_db_ctx() == NULL) {
51 DEBUG(1,("session_init: failed to open sessionid tdb\n"));
58 /********************************************************************
59 called when a session is created
60 ********************************************************************/
62 BOOL session_claim(user_struct *vuser)
67 struct in_addr *client_ip;
68 struct sessionid sessionid;
69 struct server_id pid = procid_self();
72 struct db_context *ctx;
73 struct db_record *rec;
76 vuser->session_keystr = NULL;
78 /* don't register sessions for the guest user - its just too
79 expensive to go through pam session code for browsing etc */
84 if (!(ctx = session_db_ctx())) {
88 ZERO_STRUCT(sessionid);
95 for (i=1;i<MAX_SESSION_ID;i++) {
98 * This is very inefficient and needs fixing -- vl
101 struct server_id sess_pid;
103 snprintf(keystr, sizeof(keystr), "ID/%d", i);
104 key = string_term_tdb_data(keystr);
106 rec = ctx->fetch_locked(ctx, NULL, key);
109 DEBUG(1, ("Could not lock \"%s\"\n", keystr));
113 if (rec->value.dsize != sizeof(sessionid)) {
114 DEBUG(1, ("Re-using invalid record\n"));
118 sess_pid = ((struct sessionid *)rec->value.dptr)->pid;
120 if (!process_exists(sess_pid)) {
121 DEBUG(5, ("%s has died -- re-using session\n",
122 procid_str_static(&sess_pid)));
129 if (i == MAX_SESSION_ID) {
130 SMB_ASSERT(rec == NULL);
131 DEBUG(1,("session_claim: out of session IDs "
132 "(max is %d)\n", MAX_SESSION_ID));
136 snprintf(sessionid.id_str, sizeof(sessionid.id_str),
137 SESSION_UTMP_TEMPLATE, i);
140 snprintf(keystr, sizeof(keystr), "ID/%s/%u",
141 procid_str_static(&pid), vuser->vuid);
142 key = string_term_tdb_data(keystr);
144 rec = ctx->fetch_locked(ctx, NULL, key);
147 DEBUG(1, ("Could not lock \"%s\"\n", keystr));
151 snprintf(sessionid.id_str, sizeof(sessionid.id_str),
152 SESSION_TEMPLATE, (long unsigned int)sys_getpid(),
156 SMB_ASSERT(rec != NULL);
158 /* If 'hostname lookup' == yes, then do the DNS lookup. This is
159 needed because utmp and PAM both expect DNS names
161 client_name() handles this case internally.
164 hostname = client_name();
165 if (strcmp(hostname, "UNKNOWN") == 0) {
166 hostname = client_addr();
169 fstrcpy(sessionid.username, vuser->user.unix_name);
170 fstrcpy(sessionid.hostname, hostname);
171 sessionid.id_num = i; /* Only valid for utmp sessions */
173 sessionid.uid = vuser->uid;
174 sessionid.gid = vuser->gid;
175 fstrcpy(sessionid.remote_machine, get_remote_machine_name());
176 fstrcpy(sessionid.ip_addr, client_addr());
177 sessionid.connect_start = time(NULL);
179 client_ip = client_inaddr(&sa);
181 if (!smb_pam_claim_session(sessionid.username, sessionid.id_str,
182 sessionid.hostname)) {
183 DEBUG(1,("pam_session rejected the session for %s [%s]\n",
184 sessionid.username, sessionid.id_str));
190 data.dptr = (uint8 *)&sessionid;
191 data.dsize = sizeof(sessionid);
193 status = rec->store(rec, data, TDB_REPLACE);
197 if (!NT_STATUS_IS_OK(status)) {
198 DEBUG(1,("session_claim: unable to create session id "
199 "record: %s\n", nt_errstr(status)));
204 sys_utmp_claim(sessionid.username, sessionid.hostname,
206 sessionid.id_str, sessionid.id_num);
211 vuser->session_keystr = talloc_strdup(vuser, keystr);
212 if (!vuser->session_keystr) {
213 DEBUG(0, ("session_claim: talloc_strdup() failed for "
214 "session_keystr\n"));
220 /********************************************************************
221 called when a session is destroyed
222 ********************************************************************/
224 void session_yield(user_struct *vuser)
227 struct sessionid sessionid;
228 struct in_addr *client_ip;
229 struct db_context *ctx;
230 struct db_record *rec;
232 if (!(ctx = session_db_ctx())) return;
234 if (!vuser->session_keystr) {
238 key = string_term_tdb_data(vuser->session_keystr);
240 if (!(rec = ctx->fetch_locked(ctx, NULL, key))) {
244 if (rec->value.dsize != sizeof(sessionid))
247 memcpy(&sessionid, rec->value.dptr, sizeof(sessionid));
249 client_ip = interpret_addr2(sessionid.ip_addr);
252 sys_utmp_yield(sessionid.username, sessionid.hostname,
254 sessionid.id_str, sessionid.id_num);
257 smb_pam_close_session(sessionid.username, sessionid.id_str,
260 rec->delete_rec(rec);
265 /********************************************************************
266 ********************************************************************/
268 static BOOL session_traverse(int (*fn)(struct db_record *db,
272 struct db_context *ctx;
274 if (!(ctx = session_db_ctx())) {
275 DEBUG(3, ("No tdb opened\n"));
279 ctx->traverse_read(ctx, fn, private_data);
283 /********************************************************************
284 ********************************************************************/
286 struct session_list {
289 struct sessionid *sessions;
292 static int gather_sessioninfo(struct db_record *rec, void *state)
294 struct session_list *sesslist = (struct session_list *) state;
295 const struct sessionid *current =
296 (const struct sessionid *) rec->value.dptr;
298 sesslist->sessions = TALLOC_REALLOC_ARRAY(
299 sesslist->mem_ctx, sesslist->sessions, struct sessionid,
302 if (!sesslist->sessions) {
307 memcpy(&sesslist->sessions[sesslist->count], current,
308 sizeof(struct sessionid));
312 DEBUG(7,("gather_sessioninfo session from %s@%s\n",
313 current->username, current->remote_machine));
318 /********************************************************************
319 ********************************************************************/
321 int list_sessions(TALLOC_CTX *mem_ctx, struct sessionid **session_list)
323 struct session_list sesslist;
325 sesslist.mem_ctx = mem_ctx;
327 sesslist.sessions = NULL;
329 if (!session_traverse(gather_sessioninfo, (void *) &sesslist)) {
330 DEBUG(3, ("Session traverse failed\n"));
331 SAFE_FREE(sesslist.sessions);
332 *session_list = NULL;
336 *session_list = sesslist.sessions;
337 return sesslist.count;