source4/libcli/smb_composite/connect.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    Copyright (C) Andrew Tridgell 2005
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18 */
  19 /*
  20   a composite API for making a full SMB connection
  21 */
  22
  23 #include "includes.h"
  24 #include "libcli/raw/libcliraw.h"
  25 #include "libcli/composite/composite.h"
  26 #include "libcli/smb_composite/smb_composite.h"
  27 #include "lib/events/events.h"
  28 #include "libcli/resolve/resolve.h"
  29 #include "auth/credentials/credentials.h"
  30 #include "librpc/gen_ndr/ndr_nbt.h"
  31 #include "param/param.h"
  32
  33 /* the stages of this call */
  34 enum connect_stage {CONNECT_RESOLVE,
  35                     CONNECT_SOCKET,
  36                     CONNECT_SESSION_REQUEST,
  37                     CONNECT_NEGPROT,
  38                     CONNECT_SESSION_SETUP,
  39                     CONNECT_SESSION_SETUP_ANON,
  40                     CONNECT_TCON};
  41
  42 struct connect_state {
  43         enum connect_stage stage;
  44         struct smbcli_socket *sock;
  45         struct smbcli_transport *transport;
  46         struct smbcli_session *session;
  47         struct smb_composite_connect *io;
  48         union smb_tcon *io_tcon;
  49         struct smb_composite_sesssetup *io_setup;
  50         struct smbcli_request *req;
  51         struct composite_context *creq;
  52 };
  53
  54
  55 static void request_handler(struct smbcli_request *);
  56 static void composite_handler(struct composite_context *);
  57
  58 /*
  59   setup a negprot send
  60 */
  61 static NTSTATUS connect_send_negprot(struct composite_context *c,
  62                                      struct smb_composite_connect *io)
  63 {
  64         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
  65
  66         state->req = smb_raw_negotiate_send(state->transport, io->in.unicode, io->in.max_protocol);
  67         NT_STATUS_HAVE_NO_MEMORY(state->req);
  68
  69         state->req->async.fn = request_handler;
  70         state->req->async.private = c;
  71         state->stage = CONNECT_NEGPROT;
  72
  73         return NT_STATUS_OK;
  74 }
  75
  76
  77 /*
  78   a tree connect request has completed
  79 */
  80 static NTSTATUS connect_tcon(struct composite_context *c,
  81                              struct smb_composite_connect *io)
  82 {
  83         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
  84         NTSTATUS status;
  85
  86         status = smb_raw_tcon_recv(state->req, c, state->io_tcon);
  87         NT_STATUS_NOT_OK_RETURN(status);
  88
  89         io->out.tree->tid = state->io_tcon->tconx.out.tid;
  90         if (state->io_tcon->tconx.out.dev_type) {
  91                 io->out.tree->device = talloc_strdup(io->out.tree,
  92                                                      state->io_tcon->tconx.out.dev_type);
  93         }
  94         if (state->io_tcon->tconx.out.fs_type) {
  95                 io->out.tree->fs_type = talloc_strdup(io->out.tree,
  96                                                       state->io_tcon->tconx.out.fs_type);
  97         }
  98
  99         /* all done! */
 100         c->state = COMPOSITE_STATE_DONE;
 101
 102         return NT_STATUS_OK;
 103 }
 104
 105
 106 /*
 107   a session setup request with anonymous fallback has completed
 108 */
 109 static NTSTATUS connect_session_setup_anon(struct composite_context *c,
 110                                            struct smb_composite_connect *io)
 111 {
 112         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 113         NTSTATUS status;
 114
 115         status = smb_composite_sesssetup_recv(state->creq);
 116         NT_STATUS_NOT_OK_RETURN(status);
 117
 118         io->out.anonymous_fallback_done = true;
 119
 120         state->session->vuid = state->io_setup->out.vuid;
 121
 122         /* setup for a tconx */
 123         io->out.tree = smbcli_tree_init(state->session, state, true);
 124         NT_STATUS_HAVE_NO_MEMORY(io->out.tree);
 125
 126         state->io_tcon = talloc(c, union smb_tcon);
 127         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon);
 128
 129         /* connect to a share using a tree connect */
 130         state->io_tcon->generic.level = RAW_TCON_TCONX;
 131         state->io_tcon->tconx.in.flags = 0;
 132         state->io_tcon->tconx.in.password = data_blob(NULL, 0);
 133
 134         state->io_tcon->tconx.in.path = talloc_asprintf(state->io_tcon,
 135                                                  "\\\\%s\\%s",
 136                                                  io->in.called_name,
 137                                                  io->in.service);
 138         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon->tconx.in.path);
 139         if (!io->in.service_type) {
 140                 state->io_tcon->tconx.in.device = "?????";
 141         } else {
 142                 state->io_tcon->tconx.in.device = io->in.service_type;
 143         }
 144
 145         state->req = smb_raw_tcon_send(io->out.tree, state->io_tcon);
 146         NT_STATUS_HAVE_NO_MEMORY(state->req);
 147         if (state->req->state == SMBCLI_REQUEST_ERROR) {
 148                 return state->req->status;
 149         }
 150
 151         state->req->async.fn = request_handler;
 152         state->req->async.private = c;
 153         state->stage = CONNECT_TCON;
 154
 155         return NT_STATUS_OK;
 156 }
 157
 158 /*
 159   a session setup request has completed
 160 */
 161 static NTSTATUS connect_session_setup(struct composite_context *c,
 162                                       struct smb_composite_connect *io)
 163 {
 164         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 165         NTSTATUS status;
 166
 167         status = smb_composite_sesssetup_recv(state->creq);
 168
 169         if (!NT_STATUS_IS_OK(status) &&
 170             !cli_credentials_is_anonymous(state->io->in.credentials) &&
 171             io->in.fallback_to_anonymous) {
 172
 173                 state->io_setup->in.credentials = cli_credentials_init(state);
 174                 NT_STATUS_HAVE_NO_MEMORY(state->io_setup->in.credentials);
 175                 cli_credentials_set_conf(state->io_setup->in.credentials,
 176                                          global_loadparm);
 177                 cli_credentials_set_anonymous(state->io_setup->in.credentials);
 178
 179                 /* If the preceding attempt was with extended security, we
 180                  * have been given a uid in the NTLMSSP_CHALLENGE reply. This
 181                  * would lead to an invalid uid in the anonymous fallback */
 182                 state->session->vuid = 0;
 183                 data_blob_free(&state->session->user_session_key);
 184                 talloc_free(state->session->gensec);
 185                 state->session->gensec = NULL;
 186
 187                 state->creq = smb_composite_sesssetup_send(state->session,
 188                                                            state->io_setup);
 189                 NT_STATUS_HAVE_NO_MEMORY(state->creq);
 190                 if (state->creq->state == COMPOSITE_STATE_ERROR) {
 191                         return state->creq->status;
 192                 }
 193                 state->creq->async.fn = composite_handler;
 194                 state->creq->async.private_data = c;
 195                 state->stage = CONNECT_SESSION_SETUP_ANON;
 196
 197                 return NT_STATUS_OK;
 198         }
 199
 200         NT_STATUS_NOT_OK_RETURN(status);
 201
 202         state->session->vuid = state->io_setup->out.vuid;
 203
 204         /* setup for a tconx */
 205         io->out.tree = smbcli_tree_init(state->session, state, true);
 206         NT_STATUS_HAVE_NO_MEMORY(io->out.tree);
 207
 208         state->io_tcon = talloc(c, union smb_tcon);
 209         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon);
 210
 211         /* connect to a share using a tree connect */
 212         state->io_tcon->generic.level = RAW_TCON_TCONX;
 213         state->io_tcon->tconx.in.flags = 0;
 214         state->io_tcon->tconx.in.password = data_blob(NULL, 0);
 215
 216         state->io_tcon->tconx.in.path = talloc_asprintf(state->io_tcon,
 217                                                  "\\\\%s\\%s",
 218                                                  io->in.called_name,
 219                                                  io->in.service);
 220         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon->tconx.in.path);
 221         if (!io->in.service_type) {
 222                 state->io_tcon->tconx.in.device = "?????";
 223         } else {
 224                 state->io_tcon->tconx.in.device = io->in.service_type;
 225         }
 226
 227         state->req = smb_raw_tcon_send(io->out.tree, state->io_tcon);
 228         NT_STATUS_HAVE_NO_MEMORY(state->req);
 229         if (state->req->state == SMBCLI_REQUEST_ERROR) {
 230                 return state->req->status;
 231         }
 232
 233         state->req->async.fn = request_handler;
 234         state->req->async.private = c;
 235         state->stage = CONNECT_TCON;
 236
 237         return NT_STATUS_OK;
 238 }
 239
 240 /*
 241   a negprot request has completed
 242 */
 243 static NTSTATUS connect_negprot(struct composite_context *c,
 244                                 struct smb_composite_connect *io)
 245 {
 246         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 247         NTSTATUS status;
 248
 249         status = smb_raw_negotiate_recv(state->req);
 250         NT_STATUS_NOT_OK_RETURN(status);
 251
 252         /* next step is a session setup */
 253         state->session = smbcli_session_init(state->transport, state, true);
 254         NT_STATUS_HAVE_NO_MEMORY(state->session);
 255
 256         state->io_setup = talloc(c, struct smb_composite_sesssetup);
 257         NT_STATUS_HAVE_NO_MEMORY(state->io_setup);
 258
 259         /* prepare a session setup to establish a security context */
 260         state->io_setup->in.sesskey      = state->transport->negotiate.sesskey;
 261         state->io_setup->in.capabilities = state->transport->negotiate.capabilities;
 262         state->io_setup->in.credentials  = io->in.credentials;
 263         state->io_setup->in.workgroup    = io->in.workgroup;
 264
 265         state->creq = smb_composite_sesssetup_send(state->session, state->io_setup);
 266         NT_STATUS_HAVE_NO_MEMORY(state->creq);
 267         if (state->creq->state == COMPOSITE_STATE_ERROR) {
 268                 return state->creq->status;
 269         }
 270
 271         state->creq->async.fn = composite_handler;
 272         state->creq->async.private_data = c;
 273         state->stage = CONNECT_SESSION_SETUP;
 274
 275         return NT_STATUS_OK;
 276 }
 277
 278
 279 /*
 280   a session request operation has completed
 281 */
 282 static NTSTATUS connect_session_request(struct composite_context *c,
 283                                         struct smb_composite_connect *io)
 284 {
 285         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 286         NTSTATUS status;
 287
 288         status = smbcli_transport_connect_recv(state->req);
 289         NT_STATUS_NOT_OK_RETURN(status);
 290
 291         /* next step is a negprot */
 292         return connect_send_negprot(c, io);
 293 }
 294
 295 /*
 296   a socket connection operation has completed
 297 */
 298 static NTSTATUS connect_socket(struct composite_context *c,
 299                                struct smb_composite_connect *io)
 300 {
 301         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 302         NTSTATUS status;
 303         struct nbt_name calling, called;
 304
 305         status = smbcli_sock_connect_recv(state->creq, state, &state->sock);
 306         NT_STATUS_NOT_OK_RETURN(status);
 307
 308         /* the socket is up - we can initialise the smbcli transport layer */
 309         state->transport = smbcli_transport_init(state->sock, state, true,
 310                                                  io->in.max_xmit,
 311                                                  io->in.max_mux,
 312                                                  io->in.use_spnego,
 313                                                  io->in.signing);
 314         NT_STATUS_HAVE_NO_MEMORY(state->transport);
 315
 316         if (is_ipaddress(state->sock->hostname) &&
 317             (state->io->in.called_name != NULL)) {
 318                 /* If connecting to an IP address, we might want the real name
 319                  * of the host for later kerberos. The called name is a better
 320                  * approximation */
 321                 state->sock->hostname =
 322                         talloc_strdup(state->sock, io->in.called_name);
 323                 NT_STATUS_HAVE_NO_MEMORY(state->sock->hostname);
 324         }
 325
 326         make_nbt_name_client(&calling, cli_credentials_get_workstation(io->in.credentials));
 327
 328         nbt_choose_called_name(state, &called, io->in.called_name, NBT_NAME_SERVER);
 329
 330         /* we have a connected socket - next step is a session
 331            request, if needed. Port 445 doesn't need it, so it goes
 332            straight to the negprot */
 333         if (state->sock->port == 445) {
 334                 status = nbt_name_dup(state->transport, &called,
 335                                       &state->transport->called);
 336                 NT_STATUS_NOT_OK_RETURN(status);
 337                 return connect_send_negprot(c, io);
 338         }
 339
 340         state->req = smbcli_transport_connect_send(state->transport, &calling, &called);
 341         NT_STATUS_HAVE_NO_MEMORY(state->req);
 342
 343         state->req->async.fn = request_handler;
 344         state->req->async.private = c;
 345         state->stage = CONNECT_SESSION_REQUEST;
 346
 347         return NT_STATUS_OK;
 348 }
 349
 350
 351 /*
 352   called when name resolution is finished
 353 */
 354 static NTSTATUS connect_resolve(struct composite_context *c,
 355                                 struct smb_composite_connect *io)
 356 {
 357         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 358         NTSTATUS status;
 359         const char *address;
 360
 361         status = resolve_name_recv(state->creq, state, &address);
 362         NT_STATUS_NOT_OK_RETURN(status);
 363
 364         state->creq = smbcli_sock_connect_send(state, address,
 365                                                io->in.dest_ports,
 366                                                io->in.dest_host,
 367                                                NULL, c->event_ctx);
 368         NT_STATUS_HAVE_NO_MEMORY(state->creq);
 369
 370         state->stage = CONNECT_SOCKET;
 371         state->creq->async.private_data = c;
 372         state->creq->async.fn = composite_handler;
 373
 374         return NT_STATUS_OK;
 375 }
 376
 377
 378 /*
 379   handle and dispatch state transitions
 380 */
 381 static void state_handler(struct composite_context *c)
 382 {
 383         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 384
 385         switch (state->stage) {
 386         case CONNECT_RESOLVE:
 387                 c->status = connect_resolve(c, state->io);
 388                 break;
 389         case CONNECT_SOCKET:
 390                 c->status = connect_socket(c, state->io);
 391                 break;
 392         case CONNECT_SESSION_REQUEST:
 393                 c->status = connect_session_request(c, state->io);
 394                 break;
 395         case CONNECT_NEGPROT:
 396                 c->status = connect_negprot(c, state->io);
 397                 break;
 398         case CONNECT_SESSION_SETUP:
 399                 c->status = connect_session_setup(c, state->io);
 400                 break;
 401         case CONNECT_SESSION_SETUP_ANON:
 402                 c->status = connect_session_setup_anon(c, state->io);
 403                 break;
 404         case CONNECT_TCON:
 405                 c->status = connect_tcon(c, state->io);
 406                 break;
 407         }
 408
 409         if (!NT_STATUS_IS_OK(c->status)) {
 410                 c->state = COMPOSITE_STATE_ERROR;
 411         }
 412
 413         if (c->state >= COMPOSITE_STATE_DONE &&
 414             c->async.fn) {
 415                 c->async.fn(c);
 416         }
 417 }
 418
 419
 420 /*
 421   handler for completion of a smbcli_request sub-request
 422 */
 423 static void request_handler(struct smbcli_request *req)
 424 {
 425         struct composite_context *c = talloc_get_type(req->async.private,
 426                                                      struct composite_context);
 427         state_handler(c);
 428 }
 429
 430 /*
 431   handler for completion of a smbcli_composite sub-request
 432 */
 433 static void composite_handler(struct composite_context *creq)
 434 {
 435         struct composite_context *c = talloc_get_type(creq->async.private_data,
 436                                                      struct composite_context);
 437         state_handler(c);
 438 }
 439
 440 /*
 441   a function to establish a smbcli_tree from scratch
 442 */
 443 struct composite_context *smb_composite_connect_send(struct smb_composite_connect *io,
 444                                                      TALLOC_CTX *mem_ctx,
 445                                                      struct resolve_context *resolve_ctx,
 446                                                      struct event_context *event_ctx)
 447 {
 448         struct composite_context *c;
 449         struct connect_state *state;
 450         struct nbt_name name;
 451
 452         c = talloc_zero(mem_ctx, struct composite_context);
 453         if (c == NULL) goto failed;
 454
 455         state = talloc_zero(c, struct connect_state);
 456         if (state == NULL) goto failed;
 457
 458         if (event_ctx == NULL) {
 459                 event_ctx = event_context_init(mem_ctx);
 460         }
 461
 462         state->io = io;
 463
 464         c->state = COMPOSITE_STATE_IN_PROGRESS;
 465         c->event_ctx = talloc_reference(c, event_ctx);
 466         c->private_data = state;
 467
 468         state->stage = CONNECT_RESOLVE;
 469         make_nbt_name_server(&name, io->in.dest_host);
 470         state->creq = resolve_name_send(resolve_ctx, &name, c->event_ctx);
 471
 472         if (state->creq == NULL) goto failed;
 473         state->creq->async.private_data = c;
 474         state->creq->async.fn = composite_handler;
 475
 476         return c;
 477 failed:
 478         talloc_free(c);
 479         return NULL;
 480 }
 481
 482 /*
 483   recv half of async composite connect code
 484 */
 485 NTSTATUS smb_composite_connect_recv(struct composite_context *c, TALLOC_CTX *mem_ctx)
 486 {
 487         NTSTATUS status;
 488
 489         status = composite_wait(c);
 490
 491         if (NT_STATUS_IS_OK(status)) {
 492                 struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 493                 talloc_steal(mem_ctx, state->io->out.tree);
 494         }
 495
 496         talloc_free(c);
 497         return status;
 498 }
 499
 500 /*
 501   sync version of smb_composite_connect
 502 */
 503 NTSTATUS smb_composite_connect(struct smb_composite_connect *io, TALLOC_CTX *mem_ctx,
 504                                struct resolve_context *resolve_ctx,
 505                                struct event_context *ev)
 506 {
 507         struct composite_context *c = smb_composite_connect_send(io, mem_ctx, resolve_ctx, ev);
 508         return smb_composite_connect_recv(c, mem_ctx);
 509 }