Merge branch 'master' of ssh://git.samba.org/data/git/samba
[tprouty/samba.git] / source3 / smbd / msdfs.c
index 1917eb4d10b1ec0856ced2d5a558f05aeda2bdda..adeaf96bd2d78e7793614cd36dfcd1a9254f7576 100644 (file)
@@ -22,8 +22,7 @@
 
 #define DBGC_CLASS DBGC_MSDFS
 #include "includes.h"
-
-extern uint32 global_client_caps;
+#include "smbd/globals.h"
 
 /**********************************************************************
  Parse a DFS pathname of the form \hostname\service\reqpath
@@ -36,19 +35,24 @@ extern uint32 global_client_caps;
  SVAL(inbuf,smb_flg2) & FLAGS2_DFS_PATHNAMES bit and then
  send a local path, we have to cope with that too....
 
+ If conn != NULL then ensure the provided service is
+ the one pointed to by the connection.
+
  This version does everything using pointers within one copy of the
  pathname string, talloced on the struct dfs_path pointer (which
  must be talloced). This may be too clever to live....
  JRA.
 **********************************************************************/
 
-static NTSTATUS parse_dfs_path(const char *pathname,
-                               BOOL allow_wcards,
+static NTSTATUS parse_dfs_path(connection_struct *conn,
+                               const char *pathname,
+                               bool allow_wcards,
                                struct dfs_path *pdp, /* MUST BE TALLOCED */
-                               BOOL *ppath_contains_wcard)
+                               bool *ppath_contains_wcard)
 {
        char *pathname_local;
        char *p,*temp;
+       char *servicename;
        char *eos_ptr;
        NTSTATUS status = NT_STATUS_OK;
        char sepchar;
@@ -127,13 +131,21 @@ static NTSTATUS parse_dfs_path(const char *pathname,
 
        DEBUG(10,("parse_dfs_path: hostname: %s\n",pdp->hostname));
 
-       /* If we got a hostname, is it ours (or an IP address) ? */
-       if (!is_myname_or_ipaddr(pdp->hostname)) {
-               /* Repair path. */
-               *p = sepchar;
-               DEBUG(10,("parse_dfs_path: hostname %s isn't ours. "
-                       "Try local path from path %s\n",
-                       pdp->hostname, temp));
+       /* Parse out servicename. */
+       servicename = p+1;
+       p = strchr_m(servicename,sepchar);
+       if (p) {
+               *p = '\0';
+       }
+
+       /* Is this really our servicename ? */
+       if (conn && !( strequal(servicename, lp_servicename(SNUM(conn)))
+                       || (strequal(servicename, HOMES_NAME)
+                       && strequal(lp_servicename(SNUM(conn)),
+                               get_current_username()) )) ) {
+               DEBUG(10,("parse_dfs_path: %s is not our servicename\n",
+                       servicename));
+
                /*
                 * Possibly client sent a local path by mistake.
                 * Try and convert to a local path.
@@ -142,6 +154,14 @@ static NTSTATUS parse_dfs_path(const char *pathname,
                pdp->hostname = eos_ptr; /* "" */
                pdp->servicename = eos_ptr; /* "" */
 
+               /* Repair the path - replace the sepchar's
+                  we nulled out */
+               servicename--;
+               *servicename = sepchar;
+               if (p) {
+                       *p = sepchar;
+               }
+
                p = temp;
                DEBUG(10,("parse_dfs_path: trying to convert %s "
                        "to a local path\n",
@@ -149,17 +169,15 @@ static NTSTATUS parse_dfs_path(const char *pathname,
                goto local_path;
        }
 
-       /* Parse out servicename. */
-       temp = p+1;
-       p = strchr_m(temp,sepchar);
+       pdp->servicename = servicename;
+
+       DEBUG(10,("parse_dfs_path: servicename: %s\n",pdp->servicename));
+
        if(p == NULL) {
-               pdp->servicename = temp;
+               /* Client sent self referral \server\share. */
                pdp->reqpath = eos_ptr; /* "" */
                return NT_STATUS_OK;
        }
-       *p = '\0';
-       pdp->servicename = temp;
-       DEBUG(10,("parse_dfs_path: servicename: %s\n",pdp->servicename));
 
        p++;
 
@@ -196,32 +214,55 @@ static NTSTATUS parse_dfs_path(const char *pathname,
  Note this CHANGES CWD !!!! JRA.
 *********************************************************/
 
-static NTSTATUS create_conn_struct(connection_struct *conn,
+NTSTATUS create_conn_struct(TALLOC_CTX *ctx,
+                               connection_struct **pconn,
                                int snum,
-                               const char *path)
+                               const char *path,
+                               struct auth_serversupplied_info *server_info,
+                               char **poldcwd)
 {
-       pstring connpath;
-
-       ZERO_STRUCTP(conn);
+       connection_struct *conn;
+       char *connpath;
+       char *oldcwd;
 
-       pstrcpy(connpath, path);
-       pstring_sub(connpath , "%S", lp_servicename(snum));
-
-       /* needed for smbd_vfs_init() */
+       conn = TALLOC_ZERO_P(ctx, connection_struct);
+       if (conn == NULL) {
+               return NT_STATUS_NO_MEMORY;
+       }
 
-       if ((conn->mem_ctx=talloc_init("connection_struct")) == NULL) {
-               DEBUG(0,("talloc_init(connection_struct) failed!\n"));
+       connpath = talloc_strdup(conn, path);
+       if (!connpath) {
+               TALLOC_FREE(conn);
+               return NT_STATUS_NO_MEMORY;
+       }
+       connpath = talloc_string_sub(conn,
+                               connpath,
+                               "%S",
+                               lp_servicename(snum));
+       if (!connpath) {
+               TALLOC_FREE(conn);
                return NT_STATUS_NO_MEMORY;
        }
 
-       if (!(conn->params = TALLOC_ZERO_P(conn->mem_ctx,
-                                       struct share_params))) {
+       /* needed for smbd_vfs_init() */
+
+       if (!(conn->params = TALLOC_ZERO_P(conn, struct share_params))) {
                DEBUG(0, ("TALLOC failed\n"));
+               TALLOC_FREE(conn);
                return NT_STATUS_NO_MEMORY;
        }
 
        conn->params->service = snum;
 
+       if (server_info != NULL) {
+               conn->server_info = copy_serverinfo(conn, server_info);
+               if (conn->server_info == NULL) {
+                       DEBUG(0, ("copy_serverinfo failed\n"));
+                       TALLOC_FREE(conn);
+                       return NT_STATUS_NO_MEMORY;
+               }
+       }
+
        set_conn_connectpath(conn, connpath);
 
        if (!smbd_vfs_init(conn)) {
@@ -237,6 +278,14 @@ static NTSTATUS create_conn_struct(connection_struct *conn,
         * user we will fail.... WTF ? JRA.
         */
 
+       oldcwd = vfs_GetWd(ctx, conn);
+       if (oldcwd == NULL) {
+               NTSTATUS status = map_nt_error_from_unix(errno);
+               DEBUG(3, ("vfs_GetWd failed: %s\n", strerror(errno)));
+               conn_free_internal(conn);
+               return status;
+       }
+
        if (vfs_ChDir(conn,conn->connectpath) != 0) {
                NTSTATUS status = map_nt_error_from_unix(errno);
                DEBUG(3,("create_conn_struct: Can't ChDir to new conn path %s. "
@@ -246,6 +295,9 @@ static NTSTATUS create_conn_struct(connection_struct *conn,
                return status;
        }
 
+       *pconn = conn;
+       *poldcwd = oldcwd;
+
        return NT_STATUS_OK;
 }
 
@@ -268,7 +320,7 @@ static NTSTATUS create_conn_struct(connection_struct *conn,
  server we're referring to understands posix paths.
  **********************************************************************/
 
-static BOOL parse_msdfs_symlink(TALLOC_CTX *ctx,
+static bool parse_msdfs_symlink(TALLOC_CTX *ctx,
                                const char *target,
                                struct referral **preflist,
                                int *refcount)
@@ -278,12 +330,13 @@ static BOOL parse_msdfs_symlink(TALLOC_CTX *ctx,
        char **alt_path = NULL;
        int count = 0, i;
        struct referral *reflist;
+       char *saveptr;
 
        temp = talloc_strdup(ctx, target);
        if (!temp) {
                return False;
        }
-       prot = strtok(temp,":");
+       prot = strtok_r(temp, ":", &saveptr);
        if (!prot) {
                DEBUG(0,("parse_msdfs_symlink: invalid path !\n"));
                return False;
@@ -296,7 +349,7 @@ static BOOL parse_msdfs_symlink(TALLOC_CTX *ctx,
 
        /* parse out the alternate paths */
        while((count<MAX_REFERRAL_COUNT) &&
-             ((alt_path[count] = strtok(NULL,",")) != NULL)) {
+             ((alt_path[count] = strtok_r(NULL, ",", &saveptr)) != NULL)) {
                count++;
        }
 
@@ -337,9 +390,10 @@ static BOOL parse_msdfs_symlink(TALLOC_CTX *ctx,
                reflist[i].ttl = REFERRAL_TTL;
                DEBUG(10, ("parse_msdfs_symlink: Created alt path: %s\n",
                                        reflist[i].alternate_path));
-               *refcount += 1;
        }
 
+       *refcount = count;
+
        TALLOC_FREE(alt_path);
        return True;
 }
@@ -349,7 +403,7 @@ static BOOL parse_msdfs_symlink(TALLOC_CTX *ctx,
  returns the target string from inside the link.
 **********************************************************************/
 
-static BOOL is_msdfs_link_internal(TALLOC_CTX *ctx,
+static bool is_msdfs_link_internal(TALLOC_CTX *ctx,
                        connection_struct *conn,
                        const char *path,
                        char **pp_link_target,
@@ -418,7 +472,7 @@ static BOOL is_msdfs_link_internal(TALLOC_CTX *ctx,
  Returns true if the unix path is a valid msdfs symlink.
 **********************************************************************/
 
-BOOL is_msdfs_link(connection_struct *conn,
+bool is_msdfs_link(connection_struct *conn,
                const char *path,
                SMB_STRUCT_STAT *sbufp)
 {
@@ -449,7 +503,7 @@ static NTSTATUS dfs_path_lookup(TALLOC_CTX *ctx,
                const char *dfspath, /* Incoming complete dfs path */
                const struct dfs_path *pdp, /* Parsed out
                                               server+share+extrapath. */
-               BOOL search_flag, /* Called from a findfirst ? */
+               bool search_flag, /* Called from a findfirst ? */
                int *consumedcntp,
                char **pp_targetpath)
 {
@@ -471,7 +525,7 @@ static NTSTATUS dfs_path_lookup(TALLOC_CTX *ctx,
         * unix_convert later in the codepath.
         * If we needed to remember what we'd resolved in
         * dp->reqpath (as the original code did) we'd
-        * pstrcpy(localhost, dp->reqpath) on any code
+        * copy (localhost, dp->reqpath) on any code
         * path below that returns True - but I don't
         * think this is needed. JRA.
         */
@@ -587,9 +641,9 @@ static NTSTATUS dfs_path_lookup(TALLOC_CTX *ctx,
 static NTSTATUS dfs_redirect(TALLOC_CTX *ctx,
                        connection_struct *conn,
                        const char *path_in,
-                       BOOL search_wcard_flag,
+                       bool search_wcard_flag,
                        char **pp_path_out,
-                       BOOL *ppath_contains_wcard)
+                       bool *ppath_contains_wcard)
 {
        NTSTATUS status;
        struct dfs_path *pdp = TALLOC_P(ctx, struct dfs_path);
@@ -598,7 +652,7 @@ static NTSTATUS dfs_redirect(TALLOC_CTX *ctx,
                return NT_STATUS_NO_MEMORY;
        }
 
-       status = parse_dfs_path(path_in, search_wcard_flag, pdp,
+       status = parse_dfs_path(conn, path_in, search_wcard_flag, pdp,
                        ppath_contains_wcard);
        if (!NT_STATUS_IS_OK(status)) {
                TALLOC_FREE(pdp);
@@ -642,7 +696,7 @@ static NTSTATUS dfs_redirect(TALLOC_CTX *ctx,
        if (!( strequal(pdp->servicename, lp_servicename(SNUM(conn)))
                        || (strequal(pdp->servicename, HOMES_NAME)
                        && strequal(lp_servicename(SNUM(conn)),
-                               get_current_username()) )) ) {
+                               conn->server_info->sanitized_username) )) ) {
 
                /* The given sharename doesn't match this connection. */
                TALLOC_FREE(pdp);
@@ -687,7 +741,7 @@ static NTSTATUS self_ref(TALLOC_CTX *ctx,
                        const char *dfs_path,
                        struct junction_map *jucn,
                        int *consumedcntp,
-                       BOOL *self_referralp)
+                       bool *self_referralp)
 {
        struct referral *ref;
 
@@ -718,36 +772,27 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
                        const char *dfs_path,
                        struct junction_map *jucn,
                        int *consumedcntp,
-                       BOOL *self_referralp)
+                       bool *self_referralp)
 {
-       struct connection_struct conns;
-       struct connection_struct *conn = &conns;
+       struct connection_struct *conn;
        char *targetpath = NULL;
        int snum;
        NTSTATUS status = NT_STATUS_NOT_FOUND;
-       BOOL dummy;
+       bool dummy;
        struct dfs_path *pdp = TALLOC_P(ctx, struct dfs_path);
+       char *oldpath;
 
        if (!pdp) {
                return NT_STATUS_NO_MEMORY;
        }
 
-       ZERO_STRUCT(conns);
        *self_referralp = False;
 
-       status = parse_dfs_path(dfs_path, False, pdp, &dummy);
+       status = parse_dfs_path(NULL, dfs_path, False, pdp, &dummy);
        if (!NT_STATUS_IS_OK(status)) {
                return status;
        }
 
-       /* Verify hostname in path */
-       if (!is_myname_or_ipaddr(pdp->hostname)) {
-               DEBUG(3, ("get_referred_path: Invalid hostname %s in path %s\n",
-                       pdp->hostname, dfs_path));
-               TALLOC_FREE(pdp);
-               return NT_STATUS_NOT_FOUND;
-       }
-
        jucn->service_name = talloc_strdup(ctx, pdp->servicename);
        jucn->volume_name = talloc_strdup(ctx, pdp->reqpath);
        if (!jucn->service_name || !jucn->volume_name) {
@@ -771,7 +816,7 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
                }
        }
 
-       if (!lp_msdfs_root(snum)) {
+       if (!lp_msdfs_root(snum) && (*lp_msdfs_proxy(snum) == '\0')) {
                DEBUG(3,("get_referred_path: |%s| in dfs path %s is not "
                        "a dfs root.\n",
                        pdp->servicename, dfs_path));
@@ -788,6 +833,7 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
         */
 
        if (pdp->reqpath[0] == '\0') {
+               char *tmp;
                struct referral *ref;
 
                if (*lp_msdfs_proxy(snum) == '\0') {
@@ -810,7 +856,16 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
                        return NT_STATUS_NO_MEMORY;
                }
 
-               ref->alternate_path = talloc_strdup(ctx, lp_msdfs_proxy(snum));
+               if (!(tmp = talloc_strdup(ctx, lp_msdfs_proxy(snum)))) {
+                       TALLOC_FREE(pdp);
+                       return NT_STATUS_NO_MEMORY;
+               }
+
+               trim_string(tmp, "\\", 0);
+
+               ref->alternate_path = talloc_asprintf(ctx, "\\%s", tmp);
+               TALLOC_FREE(tmp);
+
                if (!ref->alternate_path) {
                        TALLOC_FREE(pdp);
                        return NT_STATUS_NO_MEMORY;
@@ -834,7 +889,8 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
                return NT_STATUS_OK;
        }
 
-       status = create_conn_struct(conn, snum, lp_pathname(snum));
+       status = create_conn_struct(ctx, &conn, snum, lp_pathname(snum),
+                                   NULL, &oldpath);
        if (!NT_STATUS_IS_OK(status)) {
                TALLOC_FREE(pdp);
                return status;
@@ -849,6 +905,7 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
        if (!NT_STATUS_EQUAL(status, NT_STATUS_PATH_NOT_COVERED)) {
                DEBUG(3,("get_referred_path: No valid referrals for path %s\n",
                        dfs_path));
+               vfs_ChDir(conn, oldpath);
                conn_free_internal(conn);
                TALLOC_FREE(pdp);
                return status;
@@ -860,11 +917,13 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
                                &jucn->referral_count)) {
                DEBUG(3,("get_referred_path: failed to parse symlink "
                        "target %s\n", targetpath ));
+               vfs_ChDir(conn, oldpath);
                conn_free_internal(conn);
                TALLOC_FREE(pdp);
                return NT_STATUS_NOT_FOUND;
        }
 
+       vfs_ChDir(conn, oldpath);
        conn_free_internal(conn);
        TALLOC_FREE(pdp);
        return NT_STATUS_OK;
@@ -873,12 +932,11 @@ NTSTATUS get_referred_path(TALLOC_CTX *ctx,
 static int setup_ver2_dfs_referral(const char *pathname,
                                char **ppdata,
                                struct junction_map *junction,
-                               int consumedcnt,
-                               BOOL self_referral)
+                               bool self_referral)
 {
        char* pdata = *ppdata;
 
-       unsigned char uni_requestedpath[sizeof(pstring)];
+       smb_ucs2_t *uni_requestedpath = NULL;
        int uni_reqpathoffset1,uni_reqpathoffset2;
        int uni_curroffset;
        int requestedpathlen=0;
@@ -888,12 +946,15 @@ static int setup_ver2_dfs_referral(const char *pathname,
 
        DEBUG(10,("Setting up version2 referral\nRequested path:\n"));
 
-       requestedpathlen = rpcstr_push(uni_requestedpath,
-                                       pathname, sizeof(pstring),
-                                       STR_TERMINATE);
+       requestedpathlen = rpcstr_push_talloc(talloc_tos(),
+                                       &uni_requestedpath, pathname);
+       if (uni_requestedpath == NULL || requestedpathlen == 0) {
+               return -1;
+       }
 
        if (DEBUGLVL(10)) {
-               dump_data(0, uni_requestedpath,requestedpathlen);
+               dump_data(0, (unsigned char *)uni_requestedpath,
+                       requestedpathlen);
        }
 
        DEBUG(10,("ref count = %u\n",junction->referral_count));
@@ -935,7 +996,8 @@ static int setup_ver2_dfs_referral(const char *pathname,
        memcpy(pdata+uni_reqpathoffset2,uni_requestedpath,requestedpathlen);
 
        /* create the header */
-       SSVAL(pdata,0,consumedcnt * 2); /* path consumed */
+       SSVAL(pdata,0,requestedpathlen - 2); /* UCS2 of path consumed minus
+                                               2 byte null */
        /* number of referral in this pkt */
        SSVAL(pdata,2,junction->referral_count);
        if(self_referral) {
@@ -966,8 +1028,10 @@ static int setup_ver2_dfs_referral(const char *pathname,
                SSVAL(pdata,offset+16,uni_reqpathoffset1-offset);
                SSVAL(pdata,offset+18,uni_reqpathoffset2-offset);
                /* copy referred path into current offset */
-               unilen = rpcstr_push(pdata+uni_curroffset, ref->alternate_path,
-                                    sizeof(pstring), STR_UNICODE);
+               unilen = rpcstr_push(pdata+uni_curroffset,
+                                       ref->alternate_path,
+                                       reply_size - uni_curroffset,
+                                       STR_UNICODE);
 
                SSVAL(pdata,offset+20,uni_curroffset-offset);
 
@@ -982,12 +1046,11 @@ static int setup_ver2_dfs_referral(const char *pathname,
 static int setup_ver3_dfs_referral(const char *pathname,
                                char **ppdata,
                                struct junction_map *junction,
-                               int consumedcnt,
-                               BOOL self_referral)
+                               bool self_referral)
 {
        char *pdata = *ppdata;
 
-       unsigned char uni_reqpath[sizeof(pstring)];
+       smb_ucs2_t *uni_reqpath = NULL;
        int uni_reqpathoffset1, uni_reqpathoffset2;
        int uni_curroffset;
        int reply_size = 0;
@@ -997,11 +1060,14 @@ static int setup_ver3_dfs_referral(const char *pathname,
 
        DEBUG(10,("setting up version3 referral\n"));
 
-       reqpathlen = rpcstr_push(uni_reqpath, pathname,
-                       sizeof(pstring), STR_TERMINATE);
+       reqpathlen = rpcstr_push_talloc(talloc_tos(), &uni_reqpath, pathname);
+       if (uni_reqpath == NULL || reqpathlen == 0) {
+               return -1;
+       }
 
        if (DEBUGLVL(10)) {
-               dump_data(0, uni_reqpath,reqpathlen);
+               dump_data(0, (unsigned char *)uni_reqpath,
+                       reqpathlen);
        }
 
        uni_reqpathoffset1 = REFERRAL_HEADER_SIZE +
@@ -1026,7 +1092,8 @@ static int setup_ver3_dfs_referral(const char *pathname,
        *ppdata = pdata;
 
        /* create the header */
-       SSVAL(pdata,0,consumedcnt * 2); /* path consumed */
+       SSVAL(pdata,0,reqpathlen - 2); /* UCS2 of path consumed minus
+                                         2 byte null */
        SSVAL(pdata,2,junction->referral_count); /* number of referral */
        if(self_referral) {
                SIVAL(pdata,4,DFSREF_REFERRAL_SERVER | DFSREF_STORAGE_SERVER);
@@ -1059,8 +1126,8 @@ static int setup_ver3_dfs_referral(const char *pathname,
                SSVAL(pdata,offset+14,uni_reqpathoffset2-offset);
                /* copy referred path into current offset */
                unilen = rpcstr_push(pdata+uni_curroffset,ref->alternate_path,
-                                    sizeof(pstring),
-                                    STR_UNICODE | STR_TERMINATE);
+                                       reply_size - uni_curroffset,
+                                       STR_UNICODE | STR_TERMINATE);
                SSVAL(pdata,offset+16,uni_curroffset-offset);
                /* copy 0x10 bytes of 00's in the ServiceSite GUID */
                memset(pdata+offset+18,'\0',16);
@@ -1085,7 +1152,7 @@ int setup_dfs_referral(connection_struct *orig_conn,
 {
        struct junction_map *junction = NULL;
        int consumedcnt = 0;
-       BOOL self_referral = False;
+       bool self_referral = False;
        int reply_size = 0;
        char *pathnamep = NULL;
        char *local_dfs_path = NULL;
@@ -1166,11 +1233,11 @@ int setup_dfs_referral(connection_struct *orig_conn,
        case 2:
                reply_size = setup_ver2_dfs_referral(pathnamep,
                                        ppdata, junction,
-                                       consumedcnt, self_referral);
+                                       self_referral);
                break;
        case 3:
                reply_size = setup_ver3_dfs_referral(pathnamep, ppdata,
-                                       junction, consumedcnt, self_referral);
+                                       junction, self_referral);
                break;
        default:
                DEBUG(0,("setup_dfs_referral: Invalid dfs referral "
@@ -1199,19 +1266,19 @@ int setup_dfs_referral(connection_struct *orig_conn,
  Creates a junction structure from a DFS pathname
 **********************************************************************/
 
-BOOL create_junction(TALLOC_CTX *ctx,
+bool create_junction(TALLOC_CTX *ctx,
                const char *dfs_path,
                struct junction_map *jucn)
 {
        int snum;
-       BOOL dummy;
+       bool dummy;
        struct dfs_path *pdp = TALLOC_P(ctx,struct dfs_path);
        NTSTATUS status;
 
        if (!pdp) {
                return False;
        }
-       status = parse_dfs_path(dfs_path, False, pdp, &dummy);
+       status = parse_dfs_path(NULL, dfs_path, False, pdp, &dummy);
        if (!NT_STATUS_IS_OK(status)) {
                return False;
        }
@@ -1250,50 +1317,52 @@ BOOL create_junction(TALLOC_CTX *ctx,
  Forms a valid Unix pathname from the junction
  **********************************************************************/
 
-static BOOL junction_to_local_path(const struct junction_map *jucn,
-                               char **pp_path_out,
-                               connection_struct *conn_out)
+static bool junction_to_local_path(const struct junction_map *jucn,
+                                  char **pp_path_out,
+                                  connection_struct **conn_out,
+                                  char **oldpath)
 {
        int snum;
+       NTSTATUS status;
 
        snum = lp_servicenumber(jucn->service_name);
        if(snum < 0) {
                return False;
        }
-       if (!NT_STATUS_IS_OK(create_conn_struct(conn_out, snum,
-                                       lp_pathname(snum)))) {
+       status = create_conn_struct(talloc_tos(), conn_out, snum,
+                                   lp_pathname(snum), NULL, oldpath);
+       if (!NT_STATUS_IS_OK(status)) {
                return False;
        }
 
-       *pp_path_out = talloc_asprintf(conn_out->mem_ctx,
+       *pp_path_out = talloc_asprintf(*conn_out,
                        "%s/%s",
                        lp_pathname(snum),
                        jucn->volume_name);
        if (!*pp_path_out) {
+               vfs_ChDir(*conn_out, *oldpath);
+               conn_free_internal(*conn_out);
                return False;
        }
        return True;
 }
 
-BOOL create_msdfs_link(const struct junction_map *jucn,
-               BOOL exists)
+bool create_msdfs_link(const struct junction_map *jucn)
 {
        char *path = NULL;
+       char *cwd;
        char *msdfs_link = NULL;
-       connection_struct conns;
-       connection_struct *conn = &conns;
+       connection_struct *conn;
        int i=0;
-       BOOL insert_comma = False;
-       BOOL ret = False;
-
-       ZERO_STRUCT(conns);
+       bool insert_comma = False;
+       bool ret = False;
 
-       if(!junction_to_local_path(jucn, &path, conn)) {
+       if(!junction_to_local_path(jucn, &path, &conn, &cwd)) {
                return False;
        }
 
        /* Form the msdfs_link contents */
-       msdfs_link = talloc_strdup(conn->mem_ctx, "msdfs:");
+       msdfs_link = talloc_strdup(conn, "msdfs:");
        if (!msdfs_link) {
                goto out;
        }
@@ -1309,11 +1378,11 @@ BOOL create_msdfs_link(const struct junction_map *jucn,
                        continue;
                }
                if (i > 0 && insert_comma) {
-                       msdfs_link = talloc_asprintf_append(msdfs_link,
+                       msdfs_link = talloc_asprintf_append_buffer(msdfs_link,
                                        ",%s",
                                        refpath);
                } else {
-                       msdfs_link = talloc_asprintf_append(msdfs_link,
+                       msdfs_link = talloc_asprintf_append_buffer(msdfs_link,
                                        "%s",
                                        refpath);
                }
@@ -1329,42 +1398,44 @@ BOOL create_msdfs_link(const struct junction_map *jucn,
        DEBUG(5,("create_msdfs_link: Creating new msdfs link: %s -> %s\n",
                path, msdfs_link));
 
-       if(exists) {
-               if(SMB_VFS_UNLINK(conn,path)!=0) {
+       if(SMB_VFS_SYMLINK(conn, msdfs_link, path) < 0) {
+               if (errno == EEXIST) {
+                       if(SMB_VFS_UNLINK(conn,path)!=0) {
+                               goto out;
+                       }
+               }
+               if (SMB_VFS_SYMLINK(conn, msdfs_link, path) < 0) {
+                       DEBUG(1,("create_msdfs_link: symlink failed "
+                                "%s -> %s\nError: %s\n",
+                                path, msdfs_link, strerror(errno)));
                        goto out;
                }
        }
 
-       if(SMB_VFS_SYMLINK(conn, msdfs_link, path) < 0) {
-               DEBUG(1,("create_msdfs_link: symlink failed "
-                       "%s -> %s\nError: %s\n", 
-                       path, msdfs_link, strerror(errno)));
-               goto out;
-       }
-
        ret = True;
 
 out:
-
+       vfs_ChDir(conn, cwd);
        conn_free_internal(conn);
        return ret;
 }
 
-BOOL remove_msdfs_link(const struct junction_map *jucn)
+bool remove_msdfs_link(const struct junction_map *jucn)
 {
        char *path = NULL;
-       connection_struct conns;
-       connection_struct *conn = &conns;
-       BOOL ret = False;
+       char *cwd;
+       connection_struct *conn;
+       bool ret = False;
 
-       ZERO_STRUCT(conns);
+       if (!junction_to_local_path(jucn, &path, &conn, &cwd)) {
+               return false;
+       }
 
-       if( junction_to_local_path(jucn, &path, conn) ) {
-               if( SMB_VFS_UNLINK(conn, path) == 0 ) {
-                       ret = True;
-               }
+       if( SMB_VFS_UNLINK(conn, path) == 0 ) {
+               ret = True;
        }
 
+       vfs_ChDir(conn, cwd);
        conn_free_internal(conn);
        return ret;
 }
@@ -1380,9 +1451,9 @@ static int count_dfs_links(TALLOC_CTX *ctx, int snum)
        char *dname = NULL;
        const char *connect_path = lp_pathname(snum);
        const char *msdfs_proxy = lp_msdfs_proxy(snum);
-       connection_struct conn;
-
-       ZERO_STRUCT(conn);
+       connection_struct *conn;
+       NTSTATUS status;
+       char *cwd;
 
        if(*connect_path == '\0') {
                return 0;
@@ -1392,7 +1463,11 @@ static int count_dfs_links(TALLOC_CTX *ctx, int snum)
         * Fake up a connection struct for the VFS layer.
         */
 
-       if (!NT_STATUS_IS_OK(create_conn_struct(&conn, snum, connect_path))) {
+       status = create_conn_struct(talloc_tos(), &conn, snum, connect_path,
+                                   NULL, &cwd);
+       if (!NT_STATUS_IS_OK(status)) {
+               DEBUG(3, ("create_conn_struct failed: %s\n",
+                         nt_errstr(status)));
                return 0;
        }
 
@@ -1405,24 +1480,24 @@ static int count_dfs_links(TALLOC_CTX *ctx, int snum)
        }
 
        /* Now enumerate all dfs links */
-       dirp = SMB_VFS_OPENDIR(&conn, ".", NULL, 0);
+       dirp = SMB_VFS_OPENDIR(conn, ".", NULL, 0);
        if(!dirp) {
                goto out;
        }
 
-       while ((dname = vfs_readdirname(&conn, dirp)) != NULL) {
-               if (is_msdfs_link(&conn,
+       while ((dname = vfs_readdirname(conn, dirp)) != NULL) {
+               if (is_msdfs_link(conn,
                                dname,
                                NULL)) {
                        cnt++;
                }
        }
 
-       SMB_VFS_CLOSEDIR(&conn,dirp);
+       SMB_VFS_CLOSEDIR(conn,dirp);
 
 out:
-
-       conn_free_internal(&conn);
+       vfs_ChDir(conn, cwd);
+       conn_free_internal(conn);
        return cnt;
 }
 
@@ -1440,10 +1515,10 @@ static int form_junctions(TALLOC_CTX *ctx,
        const char *connect_path = lp_pathname(snum);
        char *service_name = lp_servicename(snum);
        const char *msdfs_proxy = lp_msdfs_proxy(snum);
-       connection_struct conn;
+       connection_struct *conn;
        struct referral *ref = NULL;
-
-       ZERO_STRUCT(conn);
+       char *cwd;
+       NTSTATUS status;
 
        if (jn_remain == 0) {
                return 0;
@@ -1457,7 +1532,11 @@ static int form_junctions(TALLOC_CTX *ctx,
         * Fake up a connection struct for the VFS layer.
         */
 
-       if (!NT_STATUS_IS_OK(create_conn_struct(&conn, snum, connect_path))) {
+       status = create_conn_struct(ctx, &conn, snum, connect_path, NULL,
+                                   &cwd);
+       if (!NT_STATUS_IS_OK(status)) {
+               DEBUG(3, ("create_conn_struct failed: %s\n",
+                         nt_errstr(status)));
                return 0;
        }
 
@@ -1467,9 +1546,10 @@ static int form_junctions(TALLOC_CTX *ctx,
        */
        jucn[cnt].service_name = talloc_strdup(ctx,service_name);
        jucn[cnt].volume_name = talloc_strdup(ctx, "");
-       if (!jucn[cnt].service_name || jucn[cnt].volume_name) {
+       if (!jucn[cnt].service_name || !jucn[cnt].volume_name) {
                goto out;
        }
+       jucn[cnt].comment = "";
        jucn[cnt].referral_count = 1;
 
        ref = jucn[cnt].referral_list = TALLOC_ZERO_P(ctx, struct referral);
@@ -1500,21 +1580,20 @@ static int form_junctions(TALLOC_CTX *ctx,
        }
 
        /* Now enumerate all dfs links */
-       dirp = SMB_VFS_OPENDIR(&conn, ".", NULL, 0);
+       dirp = SMB_VFS_OPENDIR(conn, ".", NULL, 0);
        if(!dirp) {
                goto out;
        }
 
-       while ((dname = vfs_readdirname(&conn, dirp)) != NULL) {
+       while ((dname = vfs_readdirname(conn, dirp)) != NULL) {
                char *link_target = NULL;
                if (cnt >= jn_remain) {
-                       SMB_VFS_CLOSEDIR(&conn,dirp);
                        DEBUG(2, ("form_junctions: ran out of MSDFS "
                                "junction slots"));
                        goto out;
                }
                if (is_msdfs_link_internal(ctx,
-                                       &conn,
+                                       conn,
                                        dname, &link_target,
                                        NULL)) {
                        if (parse_msdfs_symlink(ctx,
@@ -1530,18 +1609,21 @@ static int form_junctions(TALLOC_CTX *ctx,
                                                !jucn[cnt].volume_name) {
                                        goto out;
                                }
+                               jucn[cnt].comment = "";
                                cnt++;
                        }
+                       TALLOC_FREE(link_target);
                }
        }
 
 out:
 
        if (dirp) {
-               SMB_VFS_CLOSEDIR(&conn,dirp);
+               SMB_VFS_CLOSEDIR(conn,dirp);
        }
 
-       conn_free_internal(&conn);
+       vfs_ChDir(conn, cwd);
+       conn_free_internal(conn);
        return cnt;
 }
 
@@ -1549,7 +1631,7 @@ struct junction_map *enum_msdfs_links(TALLOC_CTX *ctx, size_t *p_num_jn)
 {
        struct junction_map *jn = NULL;
        int i=0;
-       size_t jn_count;
+       size_t jn_count = 0;
        int sharecount = 0;
 
        *p_num_jn = 0;
@@ -1594,12 +1676,12 @@ struct junction_map *enum_msdfs_links(TALLOC_CTX *ctx, size_t *p_num_jn)
 
 NTSTATUS resolve_dfspath(TALLOC_CTX *ctx,
                        connection_struct *conn,
-                       BOOL dfs_pathnames,
+                       bool dfs_pathnames,
                        const char *name_in,
                        char **pp_name_out)
 {
        NTSTATUS status = NT_STATUS_OK;
-       BOOL dummy;
+       bool dummy;
        if (dfs_pathnames) {
                status = dfs_redirect(ctx,
                                        conn,
@@ -1620,17 +1702,17 @@ NTSTATUS resolve_dfspath(TALLOC_CTX *ctx,
 
 /******************************************************************************
  Core function to resolve a dfs pathname possibly containing a wildcard.
- This function is identical to the above except for the BOOL param to
+ This function is identical to the above except for the bool param to
  dfs_redirect but I need this to be separate so it's really clear when
  we're allowing wildcards and when we're not. JRA.
 ******************************************************************************/
 
 NTSTATUS resolve_dfspath_wcard(TALLOC_CTX *ctx,
                                connection_struct *conn,
-                               BOOL dfs_pathnames,
+                               bool dfs_pathnames,
                                const char *name_in,
                                char **pp_name_out,
-                               BOOL *ppath_contains_wcard)
+                               bool *ppath_contains_wcard)
 {
        NTSTATUS status = NT_STATUS_OK;
        if (dfs_pathnames) {