2 Unix SMB/CIFS implementation.
3 Samba utility functions
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Tim Potter 2000-2001
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program; if not, write to the Free Software
19 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 /* the last IP received from */
25 struct in_addr lastip;
27 /* the last port received from */
30 int smb_read_error = 0;
32 static char *get_socket_addr(int fd)
35 struct sockaddr_in *sockin = (struct sockaddr_in *) (&sa);
36 socklen_t length = sizeof(sa);
37 static fstring addr_buf;
39 fstrcpy(addr_buf,"0.0.0.0");
45 if (getsockname(fd, &sa, &length) < 0) {
46 DEBUG(0,("getsockname failed. Error was %s\n", strerror(errno) ));
50 fstrcpy(addr_buf,(char *)inet_ntoa(sockin->sin_addr));
55 static int get_socket_port(int fd)
58 struct sockaddr_in *sockin = (struct sockaddr_in *) (&sa);
59 socklen_t length = sizeof(sa);
64 if (getsockname(fd, &sa, &length) < 0) {
65 DEBUG(0,("getpeername failed. Error was %s\n", strerror(errno) ));
69 return ntohs(sockin->sin_port);
72 /****************************************************************************
73 Determine if a file descriptor is in fact a socket.
74 ****************************************************************************/
76 BOOL is_a_socket(int fd)
81 return(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&v, &l) == 0);
84 enum SOCK_OPT_TYPES {OPT_BOOL,OPT_INT,OPT_ON};
86 typedef struct smb_socket_option {
94 static const smb_socket_option socket_options[] = {
95 {"SO_KEEPALIVE", SOL_SOCKET, SO_KEEPALIVE, 0, OPT_BOOL},
96 {"SO_REUSEADDR", SOL_SOCKET, SO_REUSEADDR, 0, OPT_BOOL},
97 {"SO_BROADCAST", SOL_SOCKET, SO_BROADCAST, 0, OPT_BOOL},
99 {"TCP_NODELAY", IPPROTO_TCP, TCP_NODELAY, 0, OPT_BOOL},
102 {"TCP_KEEPCNT", IPPROTO_TCP, TCP_KEEPCNT, 0, OPT_INT},
105 {"TCP_KEEPIDLE", IPPROTO_TCP, TCP_KEEPIDLE, 0, OPT_INT},
108 {"TCP_KEEPINTVL", IPPROTO_TCP, TCP_KEEPINTVL, 0, OPT_INT},
110 #ifdef IPTOS_LOWDELAY
111 {"IPTOS_LOWDELAY", IPPROTO_IP, IP_TOS, IPTOS_LOWDELAY, OPT_ON},
113 #ifdef IPTOS_THROUGHPUT
114 {"IPTOS_THROUGHPUT", IPPROTO_IP, IP_TOS, IPTOS_THROUGHPUT, OPT_ON},
117 {"SO_REUSEPORT", SOL_SOCKET, SO_REUSEPORT, 0, OPT_BOOL},
120 {"SO_SNDBUF", SOL_SOCKET, SO_SNDBUF, 0, OPT_INT},
123 {"SO_RCVBUF", SOL_SOCKET, SO_RCVBUF, 0, OPT_INT},
126 {"SO_SNDLOWAT", SOL_SOCKET, SO_SNDLOWAT, 0, OPT_INT},
129 {"SO_RCVLOWAT", SOL_SOCKET, SO_RCVLOWAT, 0, OPT_INT},
132 {"SO_SNDTIMEO", SOL_SOCKET, SO_SNDTIMEO, 0, OPT_INT},
135 {"SO_RCVTIMEO", SOL_SOCKET, SO_RCVTIMEO, 0, OPT_INT},
139 /****************************************************************************
140 Print socket options.
141 ****************************************************************************/
143 static void print_socket_options(int s)
147 const smb_socket_option *p = &socket_options[0];
149 /* wrapped in if statement to prevent streams leak in SCO Openserver 5.0 */
150 /* reported on samba-technical --jerry */
151 if ( DEBUGLEVEL >= 5 ) {
152 for (; p->name != NULL; p++) {
153 if (getsockopt(s, p->level, p->option, (void *)&value, &vlen) == -1) {
154 DEBUG(5,("Could not test socket option %s.\n", p->name));
156 DEBUG(5,("socket option %s = %d\n",p->name,value));
162 /****************************************************************************
163 Set user socket options.
164 ****************************************************************************/
166 void set_socket_options(int fd, const char *options)
170 while (next_token(&options,tok," \t,", sizeof(tok))) {
174 BOOL got_value = False;
176 if ((p = strchr_m(tok,'='))) {
182 for (i=0;socket_options[i].name;i++)
183 if (strequal(socket_options[i].name,tok))
186 if (!socket_options[i].name) {
187 DEBUG(0,("Unknown socket option %s\n",tok));
191 switch (socket_options[i].opttype) {
194 ret = setsockopt(fd,socket_options[i].level,
195 socket_options[i].option,(char *)&value,sizeof(int));
200 DEBUG(0,("syntax error - %s does not take a value\n",tok));
203 int on = socket_options[i].value;
204 ret = setsockopt(fd,socket_options[i].level,
205 socket_options[i].option,(char *)&on,sizeof(int));
211 DEBUG(0,("Failed to set socket option %s (Error %s)\n",tok, strerror(errno) ));
214 print_socket_options(fd);
217 /****************************************************************************
219 ****************************************************************************/
221 ssize_t read_udp_socket(int fd,char *buf,size_t len)
224 struct sockaddr_in sock;
225 socklen_t socklen = sizeof(sock);
227 memset((char *)&sock,'\0',socklen);
228 memset((char *)&lastip,'\0',sizeof(lastip));
229 ret = (ssize_t)sys_recvfrom(fd,buf,len,0,(struct sockaddr *)&sock,&socklen);
231 DEBUG(2,("read socket failed. ERRNO=%s\n",strerror(errno)));
235 lastip = sock.sin_addr;
236 lastport = ntohs(sock.sin_port);
238 DEBUG(10,("read_udp_socket: lastip %s lastport %d read: %lu\n",
239 inet_ntoa(lastip), lastport, (unsigned long)ret));
244 /****************************************************************************
245 Read data from a socket with a timout in msec.
246 mincount = if timeout, minimum to read before returning
247 maxcount = number to be read.
248 time_out = timeout in milliseconds
249 ****************************************************************************/
251 ssize_t read_socket_with_timeout(int fd,char *buf,size_t mincnt,size_t maxcnt,unsigned int time_out)
257 struct timeval timeout;
259 /* just checking .... */
267 if (mincnt == 0) mincnt = maxcnt;
269 while (nread < mincnt) {
270 readret = sys_read(fd, buf + nread, maxcnt - nread);
273 DEBUG(5,("read_socket_with_timeout: blocking read. EOF from client.\n"));
274 smb_read_error = READ_EOF;
279 DEBUG(0,("read_socket_with_timeout: read error = %s.\n", strerror(errno) ));
280 smb_read_error = READ_ERROR;
285 return((ssize_t)nread);
288 /* Most difficult - timeout read */
289 /* If this is ever called on a disk file and
290 mincnt is greater then the filesize then
291 system performance will suffer severely as
292 select always returns true on disk files */
294 /* Set initial timeout */
295 timeout.tv_sec = (time_t)(time_out / 1000);
296 timeout.tv_usec = (long)(1000 * (time_out % 1000));
298 for (nread=0; nread < mincnt; ) {
302 selrtn = sys_select_intr(fd+1,&fds,NULL,NULL,&timeout);
306 /* something is wrong. Maybe the socket is dead? */
307 DEBUG(0,("read_socket_with_timeout: timeout read. select error = %s.\n", strerror(errno) ));
308 smb_read_error = READ_ERROR;
312 /* Did we timeout ? */
314 DEBUG(10,("read_socket_with_timeout: timeout read. select timed out.\n"));
315 smb_read_error = READ_TIMEOUT;
319 readret = sys_read(fd, buf+nread, maxcnt-nread);
322 /* we got EOF on the file descriptor */
323 DEBUG(5,("read_socket_with_timeout: timeout read. EOF from client.\n"));
324 smb_read_error = READ_EOF;
329 /* the descriptor is probably dead */
330 DEBUG(0,("read_socket_with_timeout: timeout read. read error = %s.\n", strerror(errno) ));
331 smb_read_error = READ_ERROR;
338 /* Return the number we got */
339 return (ssize_t)nread;
342 /****************************************************************************
343 Read data from the client, reading exactly N bytes.
344 ****************************************************************************/
346 ssize_t read_data(int fd,char *buffer,size_t N)
354 ret = sys_read(fd,buffer + total,N - total);
357 DEBUG(10,("read_data: read of %d returned 0. Error = %s\n", (int)(N - total), strerror(errno) ));
358 smb_read_error = READ_EOF;
363 DEBUG(0,("read_data: read failure for %d. Error = %s\n", (int)(N - total), strerror(errno) ));
364 smb_read_error = READ_ERROR;
369 return (ssize_t)total;
372 /****************************************************************************
373 Read data from a socket, reading exactly N bytes.
374 ****************************************************************************/
376 static ssize_t read_socket_data(int fd,char *buffer,size_t N)
384 ret = sys_read(fd,buffer + total,N - total);
387 DEBUG(10,("read_socket_data: recv of %d returned 0. Error = %s\n", (int)(N - total), strerror(errno) ));
388 smb_read_error = READ_EOF;
393 DEBUG(0,("read_socket_data: recv failure for %d. Error = %s\n", (int)(N - total), strerror(errno) ));
394 smb_read_error = READ_ERROR;
399 return (ssize_t)total;
402 /****************************************************************************
404 ****************************************************************************/
406 ssize_t write_data(int fd, const char *buffer, size_t N)
412 ret = sys_write(fd,buffer + total,N - total);
415 DEBUG(0,("write_data: write failure. Error = %s\n", strerror(errno) ));
423 return (ssize_t)total;
426 /****************************************************************************
427 Write data to a socket - use send rather than write.
428 ****************************************************************************/
430 static ssize_t write_socket_data(int fd, const char *buffer, size_t N)
436 ret = sys_send(fd,buffer + total,N - total,0);
439 DEBUG(0,("write_socket_data: write failure. Error = %s\n", strerror(errno) ));
447 return (ssize_t)total;
450 /****************************************************************************
452 ****************************************************************************/
454 ssize_t write_socket(int fd, const char *buf, size_t len)
458 DEBUG(6,("write_socket(%d,%d)\n",fd,(int)len));
459 ret = write_socket_data(fd,buf,len);
461 DEBUG(6,("write_socket(%d,%d) wrote %d\n",fd,(int)len,(int)ret));
463 DEBUG(0,("write_socket: Error writing %d bytes to socket %d: ERRNO = %s\n",
464 (int)len, fd, strerror(errno) ));
469 /****************************************************************************
470 Send a keepalive packet (rfc1002).
471 ****************************************************************************/
473 BOOL send_keepalive(int client)
475 unsigned char buf[4];
477 buf[0] = SMBkeepalive;
478 buf[1] = buf[2] = buf[3] = 0;
480 return(write_socket_data(client,(char *)buf,4) == 4);
484 /****************************************************************************
485 Read 4 bytes of a smb packet and return the smb length of the packet.
486 Store the result in the buffer.
487 This version of the function will return a length of zero on receiving
489 Timeout is in milliseconds.
490 ****************************************************************************/
492 static ssize_t read_smb_length_return_keepalive(int fd, char *inbuf, unsigned int timeout)
500 ok = (read_socket_with_timeout(fd,inbuf,4,4,timeout) == 4);
502 ok = (read_socket_data(fd,inbuf,4) == 4);
507 len = smb_len(inbuf);
508 msg_type = CVAL(inbuf,0);
510 if (msg_type == SMBkeepalive)
511 DEBUG(5,("Got keepalive packet\n"));
514 DEBUG(10,("got smb length of %lu\n",(unsigned long)len));
519 /****************************************************************************
520 Read 4 bytes of a smb packet and return the smb length of the packet.
521 Store the result in the buffer. This version of the function will
522 never return a session keepalive (length of zero).
523 Timeout is in milliseconds.
524 ****************************************************************************/
526 ssize_t read_smb_length(int fd, char *inbuf, unsigned int timeout)
531 len = read_smb_length_return_keepalive(fd, inbuf, timeout);
536 /* Ignore session keepalives. */
537 if(CVAL(inbuf,0) != SMBkeepalive)
541 DEBUG(10,("read_smb_length: got smb length of %lu\n",
542 (unsigned long)len));
547 /****************************************************************************
548 Read an smb from a fd. Note that the buffer *MUST* be of size
549 BUFFER_SIZE+SAFETY_MARGIN.
550 The timeout is in milliseconds.
551 This function will return on receipt of a session keepalive packet.
552 Doesn't check the MAC on signed packets.
553 ****************************************************************************/
555 BOOL receive_smb_raw(int fd, char *buffer, unsigned int timeout)
558 ssize_t n_remaining, n_read, len, ret;
562 memset(buffer,'\0',smb_size + 100);
564 len = read_smb_length_return_keepalive(fd,buffer,timeout);
566 DEBUG(10,("receive_smb_raw: length < 0!\n"));
569 * Correct fix. smb_read_error may have already been
570 * set. Only set it here if not already set. Global
571 * variables still suck :-). JRA.
574 if (smb_read_error == 0) {
575 smb_read_error = READ_ERROR;
581 * A WRITEX with CAP_LARGE_WRITEX can be 64k worth of data plus 65
582 * bytes of header. Don't print the error if this fits.... JRA.
585 if (len > (BUFFER_SIZE + LARGE_WRITEX_HDR_SIZE)) {
586 DEBUG(0,("Invalid packet length! (%lu bytes).\n",
587 (unsigned long)len));
588 if (len > BUFFER_SIZE + (SAFETY_MARGIN/2)) {
591 * Correct fix. smb_read_error may have already been
592 * set. Only set it here if not already set. Global
593 * variables still suck :-). JRA.
596 if (smb_read_error == 0) {
597 smb_read_error = READ_ERROR;
605 * Read the remainder of the data. Don't use a timeout since
606 * the overhead of it is not usually necessary.
608 p = buffer + 4; /* initial read buffer pointer */
609 n_remaining = len; /* initial length to be read */
610 n_read = 0; /* initialize number of bytes read */
612 ret = read_socket_data(fd, p, n_remaining);
614 if ((ret < 0 && errno == EAGAIN) ||
615 (ret > 0 && ret < n_remaining)) {
617 * We were able to read the length earlier, but all of
618 * the remainder of the data is not yet available to
619 * us (as indicated by EAGAIN if we got nothing, or by
620 * the amount of just-read data not matching the
621 * packet length). Read again, this time awaiting the
622 * data to arrive for a short period of time.
625 /* If partial read occurred... */
627 /* ... then update buffer pointer and counts */
633 ret = read_socket_with_timeout(fd, p, n_remaining,
643 if (smb_read_error == 0) {
644 smb_read_error = READ_ERROR;
650 * not all of samba3 properly checks for packet-termination of
651 * strings. This ensures that we don't run off into empty
654 SSVAL(buffer+4, len, 0);
660 /****************************************************************************
661 Wrapper for receive_smb_raw().
662 Checks the MAC on signed packets.
663 ****************************************************************************/
665 BOOL receive_smb(int fd, char *buffer, unsigned int timeout)
667 if (!receive_smb_raw(fd, buffer, timeout)) {
671 /* Check the incoming SMB signature. */
672 if (!srv_check_sign_mac(buffer, True)) {
673 DEBUG(0, ("receive_smb: SMB Signature verification failed on incoming packet!\n"));
674 if (smb_read_error == 0)
675 smb_read_error = READ_BAD_SIG;
682 /****************************************************************************
684 ****************************************************************************/
686 BOOL send_smb(int fd, char *buffer)
692 /* Sign the outgoing packet if required. */
693 srv_calculate_sign_mac(buffer);
695 len = smb_len(buffer) + 4;
697 while (nwritten < len) {
698 ret = write_socket(fd,buffer+nwritten,len - nwritten);
700 DEBUG(0,("Error writing %d bytes to client. %d. (%s)\n",
701 (int)len,(int)ret, strerror(errno) ));
710 /****************************************************************************
711 Open a socket of the specified type, port, and address for incoming data.
712 ****************************************************************************/
714 int open_socket_in( int type, int port, int dlevel, uint32 socket_addr, BOOL rebind )
716 struct sockaddr_in sock;
719 memset( (char *)&sock, '\0', sizeof(sock) );
721 #ifdef HAVE_SOCK_SIN_LEN
722 sock.sin_len = sizeof(sock);
724 sock.sin_port = htons( port );
725 sock.sin_family = AF_INET;
726 sock.sin_addr.s_addr = socket_addr;
728 res = socket( AF_INET, type, 0 );
731 dbgtext( "open_socket_in(): socket() call failed: " );
732 dbgtext( "%s\n", strerror( errno ) );
737 /* This block sets/clears the SO_REUSEADDR and possibly SO_REUSEPORT. */
739 int val = rebind ? 1 : 0;
740 if( setsockopt(res,SOL_SOCKET,SO_REUSEADDR,(char *)&val,sizeof(val)) == -1 ) {
741 if( DEBUGLVL( dlevel ) ) {
742 dbgtext( "open_socket_in(): setsockopt: " );
743 dbgtext( "SO_REUSEADDR = %s ", val?"True":"False" );
744 dbgtext( "on port %d failed ", port );
745 dbgtext( "with error = %s\n", strerror(errno) );
749 if( setsockopt(res,SOL_SOCKET,SO_REUSEPORT,(char *)&val,sizeof(val)) == -1 ) {
750 if( DEBUGLVL( dlevel ) ) {
751 dbgtext( "open_socket_in(): setsockopt: ");
752 dbgtext( "SO_REUSEPORT = %s ", val?"True":"False" );
753 dbgtext( "on port %d failed ", port );
754 dbgtext( "with error = %s\n", strerror(errno) );
757 #endif /* SO_REUSEPORT */
760 /* now we've got a socket - we need to bind it */
761 if( bind( res, (struct sockaddr *)&sock, sizeof(sock) ) == -1 ) {
762 if( DEBUGLVL(dlevel) && (port == SMB_PORT1 || port == SMB_PORT2 || port == NMB_PORT) ) {
763 dbgtext( "bind failed on port %d ", port );
764 dbgtext( "socket_addr = %s.\n", inet_ntoa( sock.sin_addr ) );
765 dbgtext( "Error = %s\n", strerror(errno) );
771 DEBUG( 10, ( "bind succeeded on port %d\n", port ) );
776 /****************************************************************************
777 Create an outgoing socket. timeout is in milliseconds.
778 **************************************************************************/
780 int open_socket_out(int type, struct in_addr *addr, int port ,int timeout)
782 struct sockaddr_in sock_out;
784 int connect_loop = 10;
787 /* create a socket to write to */
788 res = socket(PF_INET, type, 0);
790 DEBUG(0,("socket error (%s)\n", strerror(errno)));
794 if (type != SOCK_STREAM)
797 memset((char *)&sock_out,'\0',sizeof(sock_out));
798 putip((char *)&sock_out.sin_addr,(char *)addr);
800 sock_out.sin_port = htons( port );
801 sock_out.sin_family = PF_INET;
803 /* set it non-blocking */
804 set_blocking(res,False);
806 DEBUG(3,("Connecting to %s at port %d\n",inet_ntoa(*addr),port));
808 /* and connect it to the destination */
811 ret = connect(res,(struct sockaddr *)&sock_out,sizeof(sock_out));
813 /* Some systems return EAGAIN when they mean EINPROGRESS */
814 if (ret < 0 && (errno == EINPROGRESS || errno == EALREADY ||
815 errno == EAGAIN) && (connect_loop < timeout) ) {
816 smb_msleep(connect_loop);
817 timeout -= connect_loop;
818 connect_loop += increment;
819 if (increment < 250) {
820 /* After 8 rounds we end up at a max of 255 msec */
826 if (ret < 0 && (errno == EINPROGRESS || errno == EALREADY ||
828 DEBUG(1,("timeout connecting to %s:%d\n",inet_ntoa(*addr),port));
835 if (ret < 0 && errno == EISCONN) {
842 DEBUG(2,("error connecting to %s:%d (%s)\n",
843 inet_ntoa(*addr),port,strerror(errno)));
848 /* set it blocking again */
849 set_blocking(res,True);
854 /****************************************************************************
855 Create an outgoing TCP socket to any of the addrs. This is for
856 simultaneous connects to port 445 and 139 of a host or even a variety
857 of DC's all of which are equivalent for our purposes.
858 **************************************************************************/
860 BOOL open_any_socket_out(struct sockaddr_in *addrs, int num_addrs,
861 int timeout, int *fd_index, int *fd)
863 int i, resulting_index, res;
867 fd_set r_fds, wr_fds;
871 int connect_loop = 10000; /* 10 milliseconds */
873 timeout *= 1000; /* convert to microseconds */
875 sockets = SMB_MALLOC_ARRAY(int, num_addrs);
880 resulting_index = -1;
882 for (i=0; i<num_addrs; i++)
885 for (i=0; i<num_addrs; i++) {
886 sockets[i] = socket(PF_INET, SOCK_STREAM, 0);
889 set_blocking(sockets[i], False);
893 good_connect = False;
895 for (i=0; i<num_addrs; i++) {
897 if (sockets[i] == -1)
900 if (connect(sockets[i], (struct sockaddr *)&(addrs[i]),
901 sizeof(*addrs)) == 0) {
902 /* Rather unlikely as we are non-blocking, but it
903 * might actually happen. */
908 if (errno == EINPROGRESS || errno == EALREADY ||
910 /* These are the error messages that something is
913 } else if (errno != 0) {
914 /* There was a direct error */
921 /* All of the connect's resulted in real error conditions */
925 /* Lets see if any of the connect attempts succeeded */
931 for (i=0; i<num_addrs; i++) {
932 if (sockets[i] == -1)
934 FD_SET(sockets[i], &wr_fds);
935 FD_SET(sockets[i], &r_fds);
936 if (sockets[i]>maxfd)
941 tv.tv_usec = connect_loop;
943 res = sys_select(maxfd+1, &r_fds, &wr_fds, NULL, &tv);
951 for (i=0; i<num_addrs; i++) {
953 if (sockets[i] == -1)
956 /* Stevens, Network Programming says that if there's a
957 * successful connect, the socket is only writable. Upon an
958 * error, it's both readable and writable. */
960 if (FD_ISSET(sockets[i], &r_fds) &&
961 FD_ISSET(sockets[i], &wr_fds)) {
962 /* readable and writable, so it's an error */
968 if (!FD_ISSET(sockets[i], &r_fds) &&
969 FD_ISSET(sockets[i], &wr_fds)) {
970 /* Only writable, so it's connected */
978 timeout -= connect_loop;
982 if (connect_loop > timeout)
983 connect_loop = timeout;
987 for (i=0; i<num_addrs; i++) {
988 if (i == resulting_index)
994 if (resulting_index >= 0) {
995 *fd_index = resulting_index;
996 *fd = sockets[*fd_index];
997 set_blocking(*fd, True);
1002 return (resulting_index >= 0);
1004 /****************************************************************************
1005 Open a connected UDP socket to host on port
1006 **************************************************************************/
1008 int open_udp_socket(const char *host, int port)
1010 int type = SOCK_DGRAM;
1011 struct sockaddr_in sock_out;
1013 struct in_addr *addr;
1015 addr = interpret_addr2(host);
1017 res = socket(PF_INET, type, 0);
1022 memset((char *)&sock_out,'\0',sizeof(sock_out));
1023 putip((char *)&sock_out.sin_addr,(char *)addr);
1024 sock_out.sin_port = htons(port);
1025 sock_out.sin_family = PF_INET;
1027 if (connect(res,(struct sockaddr *)&sock_out,sizeof(sock_out))) {
1036 /* the following 3 client_*() functions are nasty ways of allowing
1037 some generic functions to get info that really should be hidden in
1038 particular modules */
1039 static int client_fd = -1;
1041 void client_setfd(int fd)
1046 char *client_name(void)
1048 return get_peer_name(client_fd,False);
1051 char *client_addr(void)
1053 return get_peer_addr(client_fd);
1056 char *client_socket_addr(void)
1058 return get_socket_addr(client_fd);
1061 int client_socket_port(void)
1063 return get_socket_port(client_fd);
1066 struct in_addr *client_inaddr(struct sockaddr *sa)
1068 struct sockaddr_in *sockin = (struct sockaddr_in *) (sa);
1069 socklen_t length = sizeof(*sa);
1071 if (getpeername(client_fd, sa, &length) < 0) {
1072 DEBUG(0,("getpeername failed. Error was %s\n", strerror(errno) ));
1076 return &sockin->sin_addr;
1079 /*******************************************************************
1080 Matchname - determine if host name matches IP address. Used to
1081 confirm a hostname lookup to prevent spoof attacks.
1082 ******************************************************************/
1084 static BOOL matchname(char *remotehost,struct in_addr addr)
1089 if ((hp = sys_gethostbyname(remotehost)) == 0) {
1090 DEBUG(0,("sys_gethostbyname(%s): lookup failure.\n", remotehost));
1095 * Make sure that gethostbyname() returns the "correct" host name.
1096 * Unfortunately, gethostbyname("localhost") sometimes yields
1097 * "localhost.domain". Since the latter host name comes from the
1098 * local DNS, we just have to trust it (all bets are off if the local
1099 * DNS is perverted). We always check the address list, though.
1102 if (!strequal(remotehost, hp->h_name)
1103 && !strequal(remotehost, "localhost")) {
1104 DEBUG(0,("host name/name mismatch: %s != %s\n",
1105 remotehost, hp->h_name));
1109 /* Look up the host address in the address list we just got. */
1110 for (i = 0; hp->h_addr_list[i]; i++) {
1111 if (memcmp(hp->h_addr_list[i], (char *) & addr, sizeof(addr)) == 0)
1116 * The host name does not map to the original host address. Perhaps
1117 * someone has compromised a name server. More likely someone botched
1118 * it, but that could be dangerous, too.
1121 DEBUG(0,("host name/address mismatch: %s != %s\n",
1122 inet_ntoa(addr), hp->h_name));
1126 /*******************************************************************
1127 Return the DNS name of the remote end of a socket.
1128 ******************************************************************/
1130 char *get_peer_name(int fd, BOOL force_lookup)
1132 static pstring name_buf;
1134 static fstring addr_buf;
1136 struct in_addr addr;
1139 /* reverse lookups can be *very* expensive, and in many
1140 situations won't work because many networks don't link dhcp
1141 with dns. To avoid the delay we avoid the lookup if
1143 if (!lp_hostname_lookups() && (force_lookup == False)) {
1144 return get_peer_addr(fd);
1147 p = get_peer_addr(fd);
1149 /* it might be the same as the last one - save some DNS work */
1150 if (strcmp(p, addr_buf) == 0)
1153 pstrcpy(name_buf,"UNKNOWN");
1157 fstrcpy(addr_buf, p);
1159 addr = *interpret_addr2(p);
1161 /* Look up the remote host name. */
1162 if ((hp = gethostbyaddr((char *)&addr.s_addr, sizeof(addr.s_addr), AF_INET)) == 0) {
1163 DEBUG(1,("Gethostbyaddr failed for %s\n",p));
1164 pstrcpy(name_buf, p);
1166 pstrcpy(name_buf,(char *)hp->h_name);
1167 if (!matchname(name_buf, addr)) {
1168 DEBUG(0,("Matchname failed on %s %s\n",name_buf,p));
1169 pstrcpy(name_buf,"UNKNOWN");
1173 /* can't pass the same source and dest strings in when you
1174 use --enable-developer or the clobber_region() call will
1177 pstrcpy( tmp_name, name_buf );
1178 alpha_strcpy(name_buf, tmp_name, "_-.", sizeof(name_buf));
1179 if (strstr(name_buf,"..")) {
1180 pstrcpy(name_buf, "UNKNOWN");
1186 /*******************************************************************
1187 Return the IP addr of the remote end of a socket as a string.
1188 ******************************************************************/
1190 char *get_peer_addr(int fd)
1193 struct sockaddr_in *sockin = (struct sockaddr_in *) (&sa);
1194 socklen_t length = sizeof(sa);
1195 static fstring addr_buf;
1197 fstrcpy(addr_buf,"0.0.0.0");
1203 if (getpeername(fd, &sa, &length) < 0) {
1204 DEBUG(0,("getpeername failed. Error was %s\n", strerror(errno) ));
1208 fstrcpy(addr_buf,(char *)inet_ntoa(sockin->sin_addr));
1213 /*******************************************************************
1214 Create protected unix domain socket.
1216 Some unixes cannot set permissions on a ux-dom-sock, so we
1217 have to make sure that the directory contains the protection
1218 permissions instead.
1219 ******************************************************************/
1221 int create_pipe_sock(const char *socket_dir,
1222 const char *socket_name,
1225 #ifdef HAVE_UNIXSOCKET
1226 struct sockaddr_un sunaddr;
1232 old_umask = umask(0);
1234 /* Create the socket directory or reuse the existing one */
1236 if (lstat(socket_dir, &st) == -1) {
1237 if (errno == ENOENT) {
1238 /* Create directory */
1239 if (mkdir(socket_dir, dir_perms) == -1) {
1240 DEBUG(0, ("error creating socket directory "
1241 "%s: %s\n", socket_dir,
1246 DEBUG(0, ("lstat failed on socket directory %s: %s\n",
1247 socket_dir, strerror(errno)));
1251 /* Check ownership and permission on existing directory */
1252 if (!S_ISDIR(st.st_mode)) {
1253 DEBUG(0, ("socket directory %s isn't a directory\n",
1257 if ((st.st_uid != sec_initial_uid()) ||
1258 ((st.st_mode & 0777) != dir_perms)) {
1259 DEBUG(0, ("invalid permissions on socket directory "
1260 "%s\n", socket_dir));
1265 /* Create the socket file */
1267 sock = socket(AF_UNIX, SOCK_STREAM, 0);
1274 pstr_sprintf(path, "%s/%s", socket_dir, socket_name);
1277 memset(&sunaddr, 0, sizeof(sunaddr));
1278 sunaddr.sun_family = AF_UNIX;
1279 safe_strcpy(sunaddr.sun_path, path, sizeof(sunaddr.sun_path)-1);
1281 if (bind(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) == -1) {
1282 DEBUG(0, ("bind failed on pipe socket %s: %s\n", path,
1287 if (listen(sock, 5) == -1) {
1288 DEBUG(0, ("listen failed on pipe socket %s: %s\n", path,
1304 DEBUG(0, ("create_pipe_sock: No Unix sockets on this system\n"));
1306 #endif /* HAVE_UNIXSOCKET */