2 Unix SMB/CIFS implementation.
4 dcerpc over standard sockets transport
6 Copyright (C) Andrew Tridgell 2003
7 Copyright (C) Jelmer Vernooij 2004
8 Copyright (C) Rafal Szczesniak 2006
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
25 #include "lib/events/events.h"
26 #include "lib/socket/socket.h"
27 #include "lib/stream/packet.h"
28 #include "libcli/composite/composite.h"
29 #include "librpc/rpc/dcerpc.h"
30 #include "libcli/resolve/resolve.h"
31 #include "param/param.h"
33 /* transport private information used by general socket pipe transports */
36 struct socket_context *sock;
39 struct packet_context *packet;
40 uint32_t pending_reads;
47 static void sock_dead(struct dcerpc_connection *p, NTSTATUS status)
49 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
54 packet_recv_disable(sock->packet);
55 packet_set_fde(sock->packet, NULL);
56 packet_set_socket(sock->packet, NULL);
60 talloc_free(sock->fde);
65 talloc_free(sock->sock);
69 if (NT_STATUS_EQUAL(NT_STATUS_UNSUCCESSFUL, status)) {
70 status = NT_STATUS_UNEXPECTED_NETWORK_ERROR;
73 if (NT_STATUS_EQUAL(NT_STATUS_OK, status)) {
74 status = NT_STATUS_END_OF_FILE;
77 if (p->transport.recv_data) {
78 p->transport.recv_data(p, NULL, status);
84 handle socket recv errors
86 static void sock_error_handler(void *private, NTSTATUS status)
88 struct dcerpc_connection *p = talloc_get_type(private,
89 struct dcerpc_connection);
94 check if a blob is a complete packet
96 static NTSTATUS sock_complete_packet(void *private, DATA_BLOB blob, size_t *size)
98 if (blob.length < DCERPC_FRAG_LEN_OFFSET+2) {
99 return STATUS_MORE_ENTRIES;
101 *size = dcerpc_get_frag_length(&blob);
102 if (*size > blob.length) {
103 return STATUS_MORE_ENTRIES;
109 process recv requests
111 static NTSTATUS sock_process_recv(void *private, DATA_BLOB blob)
113 struct dcerpc_connection *p = talloc_get_type(private,
114 struct dcerpc_connection);
115 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
116 sock->pending_reads--;
117 if (sock->pending_reads == 0) {
118 packet_recv_disable(sock->packet);
120 p->transport.recv_data(p, &blob, NT_STATUS_OK);
125 called when a IO is triggered by the events system
127 static void sock_io_handler(struct event_context *ev, struct fd_event *fde,
128 uint16_t flags, void *private)
130 struct dcerpc_connection *p = talloc_get_type(private,
131 struct dcerpc_connection);
132 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
134 if (flags & EVENT_FD_WRITE) {
135 packet_queue_run(sock->packet);
139 if (sock->sock == NULL) {
143 if (flags & EVENT_FD_READ) {
144 packet_recv(sock->packet);
149 initiate a read request - not needed for dcerpc sockets
151 static NTSTATUS sock_send_read(struct dcerpc_connection *p)
153 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
154 sock->pending_reads++;
155 if (sock->pending_reads == 1) {
156 packet_recv_enable(sock->packet);
162 send an initial pdu in a multi-pdu sequence
164 static NTSTATUS sock_send_request(struct dcerpc_connection *p, DATA_BLOB *data,
167 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
171 if (sock->sock == NULL) {
172 return NT_STATUS_CONNECTION_DISCONNECTED;
175 blob = data_blob_talloc(sock->packet, data->data, data->length);
176 if (blob.data == NULL) {
177 return NT_STATUS_NO_MEMORY;
180 status = packet_send(sock->packet, blob);
181 if (!NT_STATUS_IS_OK(status)) {
193 shutdown sock pipe connection
195 static NTSTATUS sock_shutdown_pipe(struct dcerpc_connection *p, NTSTATUS status)
197 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
199 if (sock && sock->sock) {
200 sock_dead(p, status);
207 return sock server name
209 static const char *sock_peer_name(struct dcerpc_connection *p)
211 struct sock_private *sock = talloc_get_type(p->transport.private_data, struct sock_private);
212 return sock->server_name;
216 return remote name we make the actual connection (good for kerberos)
218 static const char *sock_target_hostname(struct dcerpc_connection *p)
220 struct sock_private *sock = talloc_get_type(p->transport.private_data, struct sock_private);
221 return sock->server_name;
225 struct pipe_open_socket_state {
226 struct dcerpc_connection *conn;
227 struct socket_context *socket_ctx;
228 struct sock_private *sock;
229 struct socket_address *server;
230 const char *target_hostname;
231 enum dcerpc_transport_t transport;
235 static void continue_socket_connect(struct composite_context *ctx)
237 struct dcerpc_connection *conn;
238 struct sock_private *sock;
239 struct composite_context *c = talloc_get_type(ctx->async.private_data,
240 struct composite_context);
241 struct pipe_open_socket_state *s = talloc_get_type(c->private_data,
242 struct pipe_open_socket_state);
244 /* make it easier to write a function calls */
248 c->status = socket_connect_recv(ctx);
249 if (!NT_STATUS_IS_OK(c->status)) {
250 DEBUG(0, ("Failed to connect host %s on port %d - %s\n",
251 s->server->addr, s->server->port,
252 nt_errstr(c->status)));
253 composite_error(c, c->status);
258 fill in the transport methods
260 conn->transport.transport = s->transport;
261 conn->transport.private_data = NULL;
263 conn->transport.send_request = sock_send_request;
264 conn->transport.send_read = sock_send_read;
265 conn->transport.recv_data = NULL;
267 conn->transport.shutdown_pipe = sock_shutdown_pipe;
268 conn->transport.peer_name = sock_peer_name;
269 conn->transport.target_hostname = sock_target_hostname;
271 sock->sock = s->socket_ctx;
272 sock->pending_reads = 0;
273 sock->server_name = strupper_talloc(sock, s->target_hostname);
275 sock->fde = event_add_fd(conn->event_ctx, sock->sock, socket_get_fd(sock->sock),
276 EVENT_FD_READ, sock_io_handler, conn);
278 conn->transport.private_data = sock;
280 sock->packet = packet_init(sock);
281 if (sock->packet == NULL) {
282 composite_error(c, NT_STATUS_NO_MEMORY);
287 packet_set_private(sock->packet, conn);
288 packet_set_socket(sock->packet, sock->sock);
289 packet_set_callback(sock->packet, sock_process_recv);
290 packet_set_full_request(sock->packet, sock_complete_packet);
291 packet_set_error_handler(sock->packet, sock_error_handler);
292 packet_set_event_context(sock->packet, conn->event_ctx);
293 packet_set_fde(sock->packet, sock->fde);
294 packet_set_serialise(sock->packet);
295 packet_set_initial_read(sock->packet, 16);
297 /* ensure we don't get SIGPIPE */
298 BlockSignals(true, SIGPIPE);
304 static struct composite_context *dcerpc_pipe_open_socket_send(TALLOC_CTX *mem_ctx,
305 struct dcerpc_connection *cn,
306 struct resolve_context *resolve_context,
307 struct socket_address *server,
308 const char *target_hostname,
309 enum dcerpc_transport_t transport)
311 struct composite_context *c;
312 struct pipe_open_socket_state *s;
313 struct composite_context *conn_req;
315 c = composite_create(mem_ctx, cn->event_ctx);
316 if (c == NULL) return NULL;
318 s = talloc_zero(c, struct pipe_open_socket_state);
319 if (composite_nomem(s, c)) return c;
323 s->transport = transport;
324 s->server = talloc_reference(c, server);
325 if (composite_nomem(s->server, c)) return c;
326 s->target_hostname = talloc_reference(s, target_hostname);
328 s->sock = talloc(cn, struct sock_private);
329 if (composite_nomem(s->sock, c)) return c;
331 c->status = socket_create(server->family, SOCKET_TYPE_STREAM, &s->socket_ctx, 0);
332 if (!composite_is_ok(c)) return c;
334 talloc_steal(s->sock, s->socket_ctx);
336 conn_req = socket_connect_send(s->socket_ctx, NULL, s->server, 0,
339 composite_continue(c, conn_req, continue_socket_connect, c);
344 static NTSTATUS dcerpc_pipe_open_socket_recv(struct composite_context *c)
346 NTSTATUS status = composite_wait(c);
352 struct pipe_tcp_state {
354 const char *target_hostname;
357 struct socket_address *srvaddr;
358 struct resolve_context *resolve_ctx;
359 struct dcerpc_connection *conn;
363 #if 0 /* disabled till we can resolve names to ipv6 addresses */
364 static void continue_ipv6_open_socket(struct composite_context *ctx);
366 static void continue_ipv4_open_socket(struct composite_context *ctx);
367 static void continue_ip_resolve_name(struct composite_context *ctx);
369 static void continue_ip_resolve_name(struct composite_context *ctx)
371 struct composite_context *c = talloc_get_type(ctx->async.private_data,
372 struct composite_context);
373 struct pipe_tcp_state *s = talloc_get_type(c->private_data,
374 struct pipe_tcp_state);
375 struct composite_context *sock_ipv4_req;
377 c->status = resolve_name_recv(ctx, s, &s->address);
378 if (!composite_is_ok(c)) return;
380 /* prepare server address using host ip:port and transport name */
381 s->srvaddr = socket_address_from_strings(s->conn, "ipv4", s->address, s->port);
382 if (composite_nomem(s->srvaddr, c)) return;
384 /* resolve_nbt_name gives only ipv4 ... - send socket open request */
385 sock_ipv4_req = dcerpc_pipe_open_socket_send(c, s->conn,
387 s->srvaddr, s->target_hostname,
389 composite_continue(c, sock_ipv4_req, continue_ipv4_open_socket, c);
393 Stage 2 of dcerpc_pipe_open_tcp_send: receive result of pipe open request
394 on IPv6 and send the request on IPv4 unless IPv6 transport succeeded.
396 #if 0 /* disabled till we can resolve names to ipv6 addresses */
397 static void continue_ipv6_open_socket(struct composite_context *ctx)
399 struct composite_context *c = talloc_get_type(ctx->async.private_data,
400 struct composite_context);
401 struct pipe_tcp_state *s = talloc_get_type(c->private_data,
402 struct pipe_tcp_state);
403 struct composite_context *sock_ipv4_req;
405 /* receive result of socket open request */
406 c->status = dcerpc_pipe_open_socket_recv(ctx);
407 if (NT_STATUS_IS_OK(c->status)) {
412 talloc_free(s->srvaddr);
414 /* prepare server address using host:ip and transport name */
415 s->srvaddr = socket_address_from_strings(s->conn, "ipv4", s->address, s->port);
416 if (composite_nomem(s->srvaddr, c)) return;
418 /* try IPv4 if IPv6 fails */
419 sock_ipv4_req = dcerpc_pipe_open_socket_send(c, s->conn,
420 s->srvaddr, s->target_hostname,
422 composite_continue(c, sock_ipv4_req, continue_ipv4_open_socket, c);
427 Stage 2 of dcerpc_pipe_open_tcp_send: receive result of pipe open request
430 static void continue_ipv4_open_socket(struct composite_context *ctx)
432 struct composite_context *c = talloc_get_type(ctx->async.private_data,
433 struct composite_context);
434 struct pipe_tcp_state *s = talloc_get_type(c->private_data,
435 struct pipe_tcp_state);
437 /* receive result socket open request */
438 c->status = dcerpc_pipe_open_socket_recv(ctx);
439 if (!NT_STATUS_IS_OK(c->status)) {
440 /* something went wrong... */
441 DEBUG(0, ("Failed to connect host %s (%s) on port %d - %s.\n",
442 s->address, s->target_hostname,
443 s->port, nt_errstr(c->status)));
445 composite_error(c, c->status);
454 Send rpc pipe open request to given host:port using
457 struct composite_context* dcerpc_pipe_open_tcp_send(struct dcerpc_connection *conn,
459 const char *target_hostname,
461 struct resolve_context *resolve_ctx)
463 struct composite_context *c;
464 struct pipe_tcp_state *s;
465 struct composite_context *resolve_req;
466 struct nbt_name name;
468 /* composite context allocation and setup */
469 c = composite_create(conn, conn->event_ctx);
470 if (c == NULL) return NULL;
472 s = talloc_zero(c, struct pipe_tcp_state);
473 if (composite_nomem(s, c)) return c;
476 /* store input parameters in state structure */
477 s->server = talloc_strdup(c, server);
478 if (composite_nomem(s->server, c)) return c;
479 if (target_hostname) {
480 s->target_hostname = talloc_strdup(c, target_hostname);
481 if (composite_nomem(s->target_hostname, c)) return c;
485 s->resolve_ctx = resolve_ctx;
487 make_nbt_name_server(&name, server);
488 resolve_req = resolve_name_send(resolve_ctx, &name, c->event_ctx);
489 composite_continue(c, resolve_req, continue_ip_resolve_name, c);
494 Receive result of pipe open request on tcp/ip
496 NTSTATUS dcerpc_pipe_open_tcp_recv(struct composite_context *c)
499 status = composite_wait(c);
506 struct pipe_unix_state {
508 struct socket_address *srvaddr;
509 struct dcerpc_connection *conn;
514 Stage 2 of dcerpc_pipe_open_unix_stream_send: receive result of pipe open
515 request on unix socket.
517 static void continue_unix_open_socket(struct composite_context *ctx)
519 struct composite_context *c = talloc_get_type(ctx->async.private_data,
520 struct composite_context);
522 c->status = dcerpc_pipe_open_socket_recv(ctx);
523 if (NT_STATUS_IS_OK(c->status)) {
528 composite_error(c, c->status);
533 Send pipe open request on unix socket
535 struct composite_context *dcerpc_pipe_open_unix_stream_send(struct dcerpc_connection *conn,
538 struct composite_context *c;
539 struct composite_context *sock_unix_req;
540 struct pipe_unix_state *s;
542 /* composite context allocation and setup */
543 c = composite_create(conn, conn->event_ctx);
544 if (c == NULL) return NULL;
546 s = talloc_zero(c, struct pipe_unix_state);
547 if (composite_nomem(s, c)) return c;
550 /* store parameters in state structure */
551 s->path = talloc_strdup(c, path);
552 if (composite_nomem(s->path, c)) return c;
555 /* prepare server address using socket path and transport name */
556 s->srvaddr = socket_address_from_strings(conn, "unix", s->path, 0);
557 if (composite_nomem(s->srvaddr, c)) return c;
559 /* send socket open request */
560 sock_unix_req = dcerpc_pipe_open_socket_send(c, s->conn,
564 composite_continue(c, sock_unix_req, continue_unix_open_socket, c);
570 Receive result of pipe open request on unix socket
572 NTSTATUS dcerpc_pipe_open_unix_stream_recv(struct composite_context *c)
574 NTSTATUS status = composite_wait(c);
581 struct pipe_np_state {
583 struct socket_address *srvaddr;
584 struct dcerpc_connection *conn;
589 Stage 2 of dcerpc_pipe_open_pipe_send: receive socket open request
591 static void continue_np_open_socket(struct composite_context *ctx)
593 struct composite_context *c = talloc_get_type(ctx->async.private_data,
594 struct composite_context);
596 c->status = dcerpc_pipe_open_socket_recv(ctx);
597 if (!composite_is_ok(c)) return;
604 Send pipe open request on ncalrpc
606 struct composite_context* dcerpc_pipe_open_pipe_send(struct dcerpc_connection *conn,
607 const char *ncalrpc_dir,
608 const char *identifier)
612 struct composite_context *c;
613 struct composite_context *sock_np_req;
614 struct pipe_np_state *s;
616 /* composite context allocation and setup */
617 c = composite_create(conn, conn->event_ctx);
618 if (c == NULL) return NULL;
620 s = talloc_zero(c, struct pipe_np_state);
621 if (composite_nomem(s, c)) return c;
624 /* store parameters in state structure */
625 canon = talloc_strdup(s, identifier);
626 if (composite_nomem(canon, c)) return c;
629 string_replace(canon, '/', '\\');
630 s->full_path = talloc_asprintf(canon, "%s/%s", ncalrpc_dir, canon);
631 if (composite_nomem(s->full_path, c)) return c;
633 /* prepare server address using path and transport name */
634 s->srvaddr = socket_address_from_strings(conn, "unix", s->full_path, 0);
635 if (composite_nomem(s->srvaddr, c)) return c;
637 /* send socket open request */
638 sock_np_req = dcerpc_pipe_open_socket_send(c, s->conn, NULL, s->srvaddr, NULL, NCALRPC);
639 composite_continue(c, sock_np_req, continue_np_open_socket, c);
645 Receive result of pipe open request on ncalrpc
647 NTSTATUS dcerpc_pipe_open_pipe_recv(struct composite_context *c)
649 NTSTATUS status = composite_wait(c);
657 Open a rpc pipe on a named pipe - sync version
659 NTSTATUS dcerpc_pipe_open_pipe(struct dcerpc_connection *conn, const char *ncalrpc_dir, const char *identifier)
661 struct composite_context *c = dcerpc_pipe_open_pipe_send(conn, ncalrpc_dir, identifier);
662 return dcerpc_pipe_open_pipe_recv(c);