In security=user mode we must allow cli_connect_serverlist to connect to our
[samba.git] / source3 / libsmb / clientgen.c
index fc4c7f1d5db660c9fe58fe3378a64db8aed3bbf9..e269011402d07cbc968a76f9061a28fa512cc256 100644 (file)
@@ -39,18 +39,27 @@ static BOOL cli_receive_smb(struct cli_state *cli)
 /****************************************************************************
   send an smb to a fd and re-establish if necessary
 ****************************************************************************/
-static BOOL cli_send_smb(struct cli_state *cli)
+static BOOL cli_send_smb(struct cli_state *cli, BOOL show)
 {
        size_t len;
        size_t nwritten=0;
        ssize_t ret;
        BOOL reestablished=False;
 
+       if (show)
+       {
+               show_msg(cli->outbuf);
+       }
+
        len = smb_len(cli->outbuf) + 4;
 
        while (nwritten < len) {
                ret = write_socket(cli->fd,cli->outbuf+nwritten,len - nwritten);
-               if (ret <= 0 && errno == EPIPE && !reestablished) {
+               if (ret <= 0 && errno == EPIPE && !reestablished)
+               {
+                       DEBUG(5,("cli_send_smb: write error (%s) - reconnecting\n",
+                                 strerror(errno)));
+       
                        if (cli_reestablish_connection(cli)) {
                                reestablished = True;
                                nwritten=0;
@@ -60,8 +69,7 @@ static BOOL cli_send_smb(struct cli_state *cli)
                if (ret <= 0) {
                        DEBUG(0,("Error writing %d bytes to client. %d. Exiting\n",
                                 len,ret));
-                       close_sockets();
-                       exit(1);
+                       return False;
                }
                nwritten += ret;
        }
@@ -259,8 +267,7 @@ static BOOL cli_send_trans(struct cli_state *cli, int trans,
        set_message(cli->outbuf,14+lsetup,              /* wcnt, bcc */
                    PTR_DIFF(outdata+this_ldata,smb_buf(cli->outbuf)),False);
 
-       show_msg(cli->outbuf);
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
 
        if (this_ldata < ldata || this_lparam < lparam) {
                /* receive interim response */
@@ -300,8 +307,7 @@ static BOOL cli_send_trans(struct cli_state *cli, int trans,
                        set_message(cli->outbuf,trans==SMBtrans?8:9, /* wcnt, bcc */
                                    PTR_DIFF(outdata+this_ldata,smb_buf(cli->outbuf)),False);
                        
-                       show_msg(cli->outbuf);
-                       cli_send_smb(cli);
+                       cli_send_smb(cli, True);
                        
                        tot_data += this_ldata;
                        tot_param += this_lparam;
@@ -322,14 +328,14 @@ static BOOL cli_receive_trans(struct cli_state *cli,int trans,
        int total_data=0;
        int total_param=0;
        int this_data,this_param;
+       uint8 eclass;
+       uint32 num;
        
        *data_len = *param_len = 0;
 
        if (!cli_receive_smb(cli))
                return False;
 
-       show_msg(cli->inbuf);
-       
        /* sanity check */
        if (CVAL(cli->inbuf,smb_com) != trans) {
                DEBUG(0,("Expected %s response, got command 0x%02x\n",
@@ -338,7 +344,8 @@ static BOOL cli_receive_trans(struct cli_state *cli,int trans,
                return(False);
        }
 
-       if (cli_error(cli, NULL, NULL))
+       /* DOS error "more data" is an acceptable error code */
+       if (cli_error(cli, &eclass, &num) && !(eclass == ERRDOS && num == ERRmoredata))
        {
                return(False);
        }
@@ -382,8 +389,6 @@ static BOOL cli_receive_trans(struct cli_state *cli,int trans,
                if (!cli_receive_smb(cli))
                        return False;
 
-               show_msg(cli->inbuf);
-               
                /* sanity check */
                if (CVAL(cli->inbuf,smb_com) != trans) {
                        DEBUG(0,("Expected %s response, got command 0x%02x\n",
@@ -391,7 +396,8 @@ static BOOL cli_receive_trans(struct cli_state *cli,int trans,
                                 CVAL(cli->inbuf,smb_com)));
                        return(False);
                }
-               if (cli_error(cli, NULL, NULL))
+               /* DOS error "more data" is an acceptable error code */
+               if (cli_error(cli, &eclass, &num) && eclass != ERRDOS && num != ERRmoredata)
                {
                        return(False);
                }
@@ -759,11 +765,12 @@ BOOL cli_session_setup(struct cli_state *cli,
                set_message(cli->outbuf,13,PTR_DIFF(p,smb_buf(cli->outbuf)),False);
        }
 
-      cli_send_smb(cli);
+      cli_send_smb(cli, True);
       if (!cli_receive_smb(cli))
+       {
+               DEBUG(10,("cli_session_setup: receive smb failed\n"));
              return False;
-
-      show_msg(cli->inbuf);
+       }
 
       if (CVAL(cli->inbuf,smb_rcls) != 0) {
              return False;
@@ -772,6 +779,20 @@ BOOL cli_session_setup(struct cli_state *cli,
       /* use the returned vuid from now on */
       cli->vuid = SVAL(cli->inbuf,smb_uid);
 
+      if (cli->protocol >= PROTOCOL_NT1) {
+        /*
+         * Save off some of the connected server
+         * info.
+         */
+        char *server_domain,*server_os,*server_type;
+        server_os = smb_buf(cli->inbuf);
+        server_type = skip_string(server_os,1);
+        server_domain = skip_string(server_type,1);
+        fstrcpy(cli->server_os, server_os);
+        fstrcpy(cli->server_type, server_type);
+        fstrcpy(cli->server_domain, server_domain);
+      }
+
       fstrcpy(cli->user_name, user);
 
       return True;
@@ -790,7 +811,7 @@ BOOL cli_ulogoff(struct cli_state *cli)
        SSVAL(cli->outbuf,smb_vwv0,0xFF);
        SSVAL(cli->outbuf,smb_vwv2,0);  /* no additional info */
 
-        cli_send_smb(cli);
+        cli_send_smb(cli, True);
         if (!cli_receive_smb(cli))
                 return False;
 
@@ -825,6 +846,7 @@ BOOL cli_send_tconX(struct cli_state *cli,
 
        slprintf(fullshare, sizeof(fullshare)-1,
                 "\\\\%s\\%s", cli->desthost, share);
+       strupper(fullshare);
 
        set_message(cli->outbuf,4,
                    2 + strlen(fullshare) + passlen + strlen(dev),True);
@@ -843,7 +865,7 @@ BOOL cli_send_tconX(struct cli_state *cli,
 
        SCVAL(cli->inbuf,smb_rcls, 1);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli))
                return False;
 
@@ -884,7 +906,7 @@ BOOL cli_tdis(struct cli_state *cli)
        SSVAL(cli->outbuf,smb_tid,cli->cnum);
        cli_setup_packet(cli);
        
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli))
                return False;
        
@@ -916,7 +938,7 @@ BOOL cli_rename(struct cli_state *cli, char *fname_src, char *fname_dst)
         *p++ = 4;
         pstrcpy(p,fname_dst);
 
-        cli_send_smb(cli);
+        cli_send_smb(cli, True);
         if (!cli_receive_smb(cli)) {
                 return False;
         }
@@ -950,7 +972,7 @@ BOOL cli_unlink(struct cli_state *cli, char *fname)
        *p++ = 4;      
        pstrcpy(p,fname);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -982,7 +1004,7 @@ BOOL cli_mkdir(struct cli_state *cli, char *dname)
        *p++ = 4;      
        pstrcpy(p,dname);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -1014,7 +1036,7 @@ BOOL cli_rmdir(struct cli_state *cli, char *dname)
        *p++ = 4;      
        pstrcpy(p,dname);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -1059,7 +1081,7 @@ int cli_nt_create(struct cli_state *cli, char *fname)
        pstrcpy(p,fname);
        p = skip_string(p,1);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return -1;
        }
@@ -1130,7 +1152,7 @@ int cli_open(struct cli_state *cli, char *fname, int flags, int share_mode)
        pstrcpy(p,fname);
        p = skip_string(p,1);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return -1;
        }
@@ -1162,7 +1184,7 @@ BOOL cli_close(struct cli_state *cli, int fnum)
        SSVAL(cli->outbuf,smb_vwv0,fnum);
        SIVALS(cli->outbuf,smb_vwv1,-1);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -1203,7 +1225,7 @@ BOOL cli_lock(struct cli_state *cli, int fnum, uint32 offset, uint32 len, int ti
        SSVAL(p, 0, cli->pid);
        SIVAL(p, 2, offset);
        SIVAL(p, 6, len);
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
 
         cli->timeout = (timeout == -1) ? 0x7FFFFFFF : timeout;
 
@@ -1249,7 +1271,7 @@ BOOL cli_unlock(struct cli_state *cli, int fnum, uint32 offset, uint32 len, int
        SIVAL(p, 2, offset);
        SIVAL(p, 6, len);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -1285,7 +1307,7 @@ static void cli_issue_read(struct cli_state *cli, int fnum, off_t offset,
        SSVAL(cli->outbuf,smb_vwv6,size);
        SSVAL(cli->outbuf,smb_mid,cli->mid + i);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
 }
 
 /****************************************************************************
@@ -1391,8 +1413,7 @@ static void cli_issue_write(struct cli_state *cli, int fnum, off_t offset, uint1
 
        SSVAL(cli->outbuf,smb_mid,cli->mid + i);
        
-       show_msg(cli->outbuf);
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
 }
 
 /****************************************************************************
@@ -1480,7 +1501,7 @@ BOOL cli_getattrE(struct cli_state *cli, int fd,
 
        SSVAL(cli->outbuf,smb_vwv0,fd);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -1534,7 +1555,7 @@ BOOL cli_getatr(struct cli_state *cli, char *fname,
        *p = 4;
        pstrcpy(p+1, fname);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -1585,7 +1606,7 @@ BOOL cli_setatr(struct cli_state *cli, char *fname, uint16 attr, time_t t)
        p = skip_string(p,1);
        *p = 4;
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -2087,8 +2108,8 @@ int cli_list(struct cli_state *cli,const char *Mask,uint16 attribute,
 Send a SamOEMChangePassword command
 ****************************************************************************/
 
-BOOL cli_oem_change_password(struct cli_state *cli, char *user, char *new_password,
-                             char *old_password)
+BOOL cli_oem_change_password(struct cli_state *cli, const char *user, const char *new_password,
+                             const char *old_password)
 {
   char param[16+sizeof(fstring)];
   char data[532];
@@ -2148,13 +2169,14 @@ BOOL cli_oem_change_password(struct cli_state *cli, char *user, char *new_passwo
 
   data_len = 532;
     
-  if (cli_send_trans(cli,SMBtrans,
+  if (!cli_send_trans(cli,SMBtrans,
                     PIPE_LANMAN,strlen(PIPE_LANMAN),      /* name, length */
                     0,0,                                  /* fid, flags */
                     NULL,0,0,                             /* setup, length, max */
                     param,param_len,2,                    /* param, length, max */
                     data,data_len,0                       /* data, length, max */
-                   ) == False) {
+                   ))
+  {
     DEBUG(0,("cli_oem_change_password: Failed to send password change for user %s\n",
               user ));
     return False;
@@ -2208,11 +2230,11 @@ BOOL cli_negprot(struct cli_state *cli)
 
        CVAL(smb_buf(cli->outbuf),0) = 2;
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli))
+       {
                return False;
-
-       show_msg(cli->inbuf);
+       }
 
        if (CVAL(cli->inbuf,smb_rcls) != 0 || 
            ((int)SVAL(cli->inbuf,smb_vwv0) >= numprots)) {
@@ -2290,7 +2312,7 @@ BOOL cli_session_request(struct cli_state *cli,
 retry:
 #endif /* WITH_SSL */
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, False);
        DEBUG(5,("Sent session request\n"));
 
        if (!cli_receive_smb(cli))
@@ -2317,7 +2339,7 @@ retry:
 /****************************************************************************
 open the client sockets
 ****************************************************************************/
-BOOL cli_connect(struct cli_state *cli, char *host, struct in_addr *ip)
+BOOL cli_connect(struct cli_state *cli, const char *host, struct in_addr *ip)
 {
        extern struct in_addr ipzero;
 
@@ -2349,7 +2371,9 @@ struct cli_state *cli_initialise(struct cli_state *cli)
 {
        if (!cli) {
                cli = (struct cli_state *)malloc(sizeof(*cli));
-               if (!cli) return NULL;
+               if (!cli)
+                       return NULL;
+               ZERO_STRUCTP(cli);
        }
 
        if (cli->initialised) {
@@ -2384,6 +2408,7 @@ shutdown a client structure
 ****************************************************************************/
 void cli_shutdown(struct cli_state *cli)
 {
+       DEBUG(10,("cli_shutdown\n"));
        if (cli->outbuf)
        {
                free(cli->outbuf);
@@ -2397,7 +2422,9 @@ void cli_shutdown(struct cli_state *cli)
       sslutil_disconnect(cli->fd);
 #endif /* WITH_SSL */
        if (cli->fd != -1) 
-      close(cli->fd);
+       {
+               close(cli->fd);
+       }
        memset(cli, 0, sizeof(*cli));
 }
 
@@ -2412,10 +2439,18 @@ void cli_shutdown(struct cli_state *cli)
 ****************************************************************************/
 int cli_error(struct cli_state *cli, uint8 *eclass, uint32 *num)
 {
-       int  flgs2 = SVAL(cli->inbuf,smb_flg2);
+       int  flgs2;
        char rcls;
        int code;
 
+       if (!cli->initialised)
+       {
+               DEBUG(0,("cli_error: client state uninitialised!\n"));
+               return EINVAL;
+       }
+
+       flgs2 = SVAL(cli->inbuf,smb_flg2);
+
        if (eclass) *eclass = 0;
        if (num   ) *num = 0;
 
@@ -2525,7 +2560,7 @@ BOOL cli_reestablish_connection(struct cli_state *cli)
        fstrcpy(dest_host, cli->full_dest_host_name);
 
        DEBUG(5,("cli_reestablish_connection: %s connecting to %s (ip %s) - %s [%s]\n",
-                namestr(&calling), namestr(&called), 
+                nmb_namestr(&calling), nmb_namestr(&called), 
                 inet_ntoa(cli->dest_ip),
                 cli->user_name, cli->domain));
 
@@ -2555,7 +2590,7 @@ BOOL cli_establish_connection(struct cli_state *cli,
                                BOOL do_shutdown, BOOL do_tcon)
 {
        DEBUG(5,("cli_establish_connection: %s connecting to %s (%s) - %s [%s]\n",
-                         namestr(calling), namestr(called), inet_ntoa(*dest_ip),
+                         nmb_namestr(calling), nmb_namestr(called), inet_ntoa(*dest_ip),
                      cli->user_name, cli->domain));
 
        /* establish connection */
@@ -2570,7 +2605,7 @@ BOOL cli_establish_connection(struct cli_state *cli,
                if (!cli_connect(cli, dest_host, dest_ip))
                {
                        DEBUG(1,("cli_establish_connection: failed to connect to %s (%s)\n",
-                                         namestr(calling), inet_ntoa(*dest_ip)));
+                                         nmb_namestr(calling), inet_ntoa(*dest_ip)));
                        return False;
                }
        }
@@ -2654,7 +2689,9 @@ BOOL cli_establish_connection(struct cli_state *cli,
                {
                        DEBUG(1,("failed session setup\n"));
                        if (do_shutdown)
-              cli_shutdown(cli);
+                       {
+                               cli_shutdown(cli);
+                       }
                        return False;
                }
 
@@ -2665,19 +2702,113 @@ BOOL cli_establish_connection(struct cli_state *cli,
                        {
                                DEBUG(1,("failed tcon_X\n"));
                                if (do_shutdown)
-                  cli_shutdown(cli);
+                               {
+                                       cli_shutdown(cli);
+                               }
                                return False;
                        }
                }
        }
 
        if (do_shutdown)
-      cli_shutdown(cli);
+       {
+               cli_shutdown(cli);
+       }
 
        return True;
 }
 
 
+/****************************************************************************
+ connect to one of multiple servers: don't care which
+****************************************************************************/
+BOOL cli_connect_serverlist(struct cli_state *cli, char *p)
+{
+       extern pstring global_myname;
+       extern pstring scope;
+       fstring remote_machine;
+       struct in_addr dest_ip;
+       struct nmb_name calling, called, stupid_smbserver_called;
+       BOOL connected_ok = False;
+
+       /*
+       * Treat each name in the 'password server =' line as a potential
+       * PDC/BDC. Contact each in turn and try and authenticate.
+       */
+
+       while(p && next_token(&p,remote_machine,LIST_SEP,sizeof(remote_machine)))
+       {
+               ZERO_STRUCTP(cli);
+
+               if (!cli_initialise(cli))
+               {
+                       DEBUG(0,("cli_connect_serverlist: unable to initialize client connection.\n"));
+                       return False;
+               }
+
+               standard_sub_basic(remote_machine);
+               strupper(remote_machine);
+
+               if (!resolve_name( remote_machine, &dest_ip, 0x20))
+               {
+                       DEBUG(1,("cli_connect_serverlist: Can't resolve address for %s\n", remote_machine));
+                       continue;
+               }   
+
+               if ((lp_security() != SEC_USER) && (ismyip(dest_ip)))
+               {
+                       DEBUG(1,("cli_connect_serverlist: Password server loop - not using password server %s\n", remote_machine));
+                       continue;
+               }
+
+               make_nmb_name(&calling, global_myname , 0x0 , scope);
+               make_nmb_name(&called , remote_machine, 0x20, scope);
+               /* stupid microsoft destruction of the ability of netbios
+                * to provide multiple netbios servers on one host.
+                */
+               make_nmb_name(&stupid_smbserver_called , "*SMBSERVER", 0x20, scope);
+
+               pwd_set_nullpwd(&cli->pwd);
+
+               if (!cli_establish_connection(cli, remote_machine, &dest_ip,
+                                             &calling, &called,
+                                             "IPC$", "IPC", 
+                                             False, True) &&
+                   !cli_establish_connection(cli, remote_machine, &dest_ip,
+                                             &calling, &stupid_smbserver_called,
+                                             "IPC$", "IPC", 
+                                             False, True))
+               {
+                       cli_shutdown(cli);
+                       continue;
+               }      
+
+               if (cli->protocol < PROTOCOL_LANMAN2 ||
+                   !IS_BITS_SET_ALL(cli->sec_mode, 1))
+               {
+                       DEBUG(1,("cli_connect_serverlist: machine %s isn't in user level security mode\n",
+                                 remote_machine));
+                       cli_shutdown(cli);
+                       continue;
+               }
+
+               /*
+                * We have an anonymous connection to IPC$.
+                */
+
+               connected_ok = True;
+               break;
+       }
+
+       if (!connected_ok)
+       {
+               DEBUG(0,("cli_connect_serverlist: Domain password server not available.\n"));
+               cli_shutdown(cli);
+       }
+
+       return connected_ok;
+}
+
 /****************************************************************************
   cancel a print job
   ****************************************************************************/
@@ -2809,7 +2940,7 @@ BOOL cli_chkpath(struct cli_state *cli, char *path)
        *p++ = 4;
        fstrcpy(p,path2);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }
@@ -2845,7 +2976,7 @@ BOOL cli_message_start(struct cli_state *cli, char *host, char *username,
        
        set_message(cli->outbuf,0,PTR_DIFF(p,smb_buf(cli->outbuf)),False);
        
-       cli_send_smb(cli);      
+       cli_send_smb(cli, True);        
        
        if (!cli_receive_smb(cli)) {
                return False;
@@ -2878,7 +3009,7 @@ BOOL cli_message_text(struct cli_state *cli, char *msg, int len, int grp)
        *p = 1;
        SSVAL(p,1,len);
        memcpy(p+3,msg,len);
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
 
        if (!cli_receive_smb(cli)) {
                return False;
@@ -2903,7 +3034,7 @@ BOOL cli_message_end(struct cli_state *cli, int grp)
 
        cli_setup_packet(cli);
        
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
 
        if (!cli_receive_smb(cli)) {
                return False;
@@ -2926,7 +3057,7 @@ BOOL cli_dskattr(struct cli_state *cli, int *bsize, int *total, int *avail)
        SSVAL(cli->outbuf,smb_tid,cli->cnum);
        cli_setup_packet(cli);
 
-       cli_send_smb(cli);
+       cli_send_smb(cli, True);
        if (!cli_receive_smb(cli)) {
                return False;
        }