2 Unix SMB/CIFS implementation.
4 dcerpc over standard sockets transport
6 Copyright (C) Andrew Tridgell 2003
7 Copyright (C) Jelmer Vernooij 2004
8 Copyright (C) Rafal Szczesniak 2006
10 This program is free software; you can redistribute it and/or modify
11 it under the terms of the GNU General Public License as published by
12 the Free Software Foundation; either version 3 of the License, or
13 (at your option) any later version.
15 This program is distributed in the hope that it will be useful,
16 but WITHOUT ANY WARRANTY; without even the implied warranty of
17 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
18 GNU General Public License for more details.
20 You should have received a copy of the GNU General Public License
21 along with this program. If not, see <http://www.gnu.org/licenses/>.
25 #include "lib/events/events.h"
26 #include "lib/socket/socket.h"
27 #include "lib/stream/packet.h"
28 #include "libcli/composite/composite.h"
29 #include "librpc/rpc/dcerpc.h"
30 #include "libcli/resolve/resolve.h"
32 /* transport private information used by general socket pipe transports */
35 struct socket_context *sock;
38 struct packet_context *packet;
39 uint32_t pending_reads;
46 static void sock_dead(struct dcerpc_connection *p, NTSTATUS status)
48 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
53 packet_recv_disable(sock->packet);
54 packet_set_fde(sock->packet, NULL);
55 packet_set_socket(sock->packet, NULL);
59 talloc_free(sock->fde);
64 talloc_free(sock->sock);
68 if (NT_STATUS_EQUAL(NT_STATUS_UNSUCCESSFUL, status)) {
69 status = NT_STATUS_UNEXPECTED_NETWORK_ERROR;
72 if (NT_STATUS_EQUAL(NT_STATUS_OK, status)) {
73 status = NT_STATUS_END_OF_FILE;
76 if (p->transport.recv_data) {
77 p->transport.recv_data(p, NULL, status);
83 handle socket recv errors
85 static void sock_error_handler(void *private, NTSTATUS status)
87 struct dcerpc_connection *p = talloc_get_type(private,
88 struct dcerpc_connection);
93 check if a blob is a complete packet
95 static NTSTATUS sock_complete_packet(void *private, DATA_BLOB blob, size_t *size)
97 if (blob.length < DCERPC_FRAG_LEN_OFFSET+2) {
98 return STATUS_MORE_ENTRIES;
100 *size = dcerpc_get_frag_length(&blob);
101 if (*size > blob.length) {
102 return STATUS_MORE_ENTRIES;
108 process recv requests
110 static NTSTATUS sock_process_recv(void *private, DATA_BLOB blob)
112 struct dcerpc_connection *p = talloc_get_type(private,
113 struct dcerpc_connection);
114 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
115 sock->pending_reads--;
116 if (sock->pending_reads == 0) {
117 packet_recv_disable(sock->packet);
119 p->transport.recv_data(p, &blob, NT_STATUS_OK);
124 called when a IO is triggered by the events system
126 static void sock_io_handler(struct event_context *ev, struct fd_event *fde,
127 uint16_t flags, void *private)
129 struct dcerpc_connection *p = talloc_get_type(private,
130 struct dcerpc_connection);
131 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
133 if (flags & EVENT_FD_WRITE) {
134 packet_queue_run(sock->packet);
138 if (sock->sock == NULL) {
142 if (flags & EVENT_FD_READ) {
143 packet_recv(sock->packet);
148 initiate a read request - not needed for dcerpc sockets
150 static NTSTATUS sock_send_read(struct dcerpc_connection *p)
152 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
153 sock->pending_reads++;
154 if (sock->pending_reads == 1) {
155 packet_recv_enable(sock->packet);
161 send an initial pdu in a multi-pdu sequence
163 static NTSTATUS sock_send_request(struct dcerpc_connection *p, DATA_BLOB *data,
166 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
170 if (sock->sock == NULL) {
171 return NT_STATUS_CONNECTION_DISCONNECTED;
174 blob = data_blob_talloc(sock->packet, data->data, data->length);
175 if (blob.data == NULL) {
176 return NT_STATUS_NO_MEMORY;
179 status = packet_send(sock->packet, blob);
180 if (!NT_STATUS_IS_OK(status)) {
192 shutdown sock pipe connection
194 static NTSTATUS sock_shutdown_pipe(struct dcerpc_connection *p, NTSTATUS status)
196 struct sock_private *sock = (struct sock_private *)p->transport.private_data;
198 if (sock && sock->sock) {
199 sock_dead(p, status);
206 return sock server name
208 static const char *sock_peer_name(struct dcerpc_connection *p)
210 struct sock_private *sock = talloc_get_type(p->transport.private_data, struct sock_private);
211 return sock->server_name;
215 return remote name we make the actual connection (good for kerberos)
217 static const char *sock_target_hostname(struct dcerpc_connection *p)
219 struct sock_private *sock = talloc_get_type(p->transport.private_data, struct sock_private);
220 return sock->server_name;
224 struct pipe_open_socket_state {
225 struct dcerpc_connection *conn;
226 struct socket_context *socket_ctx;
227 struct sock_private *sock;
228 struct socket_address *server;
229 const char *target_hostname;
230 enum dcerpc_transport_t transport;
234 static void continue_socket_connect(struct composite_context *ctx)
236 struct dcerpc_connection *conn;
237 struct sock_private *sock;
238 struct composite_context *c = talloc_get_type(ctx->async.private_data,
239 struct composite_context);
240 struct pipe_open_socket_state *s = talloc_get_type(c->private_data,
241 struct pipe_open_socket_state);
243 /* make it easier to write a function calls */
247 c->status = socket_connect_recv(ctx);
248 if (!NT_STATUS_IS_OK(c->status)) {
249 DEBUG(0, ("Failed to connect host %s on port %d - %s\n",
250 s->server->addr, s->server->port,
251 nt_errstr(c->status)));
252 composite_error(c, c->status);
257 fill in the transport methods
259 conn->transport.transport = s->transport;
260 conn->transport.private_data = NULL;
262 conn->transport.send_request = sock_send_request;
263 conn->transport.send_read = sock_send_read;
264 conn->transport.recv_data = NULL;
266 conn->transport.shutdown_pipe = sock_shutdown_pipe;
267 conn->transport.peer_name = sock_peer_name;
268 conn->transport.target_hostname = sock_target_hostname;
270 sock->sock = s->socket_ctx;
271 sock->pending_reads = 0;
272 sock->server_name = strupper_talloc(sock, s->target_hostname);
274 sock->fde = event_add_fd(conn->event_ctx, sock->sock, socket_get_fd(sock->sock),
275 EVENT_FD_READ, sock_io_handler, conn);
277 conn->transport.private_data = sock;
279 sock->packet = packet_init(sock);
280 if (sock->packet == NULL) {
281 composite_error(c, NT_STATUS_NO_MEMORY);
286 packet_set_private(sock->packet, conn);
287 packet_set_socket(sock->packet, sock->sock);
288 packet_set_callback(sock->packet, sock_process_recv);
289 packet_set_full_request(sock->packet, sock_complete_packet);
290 packet_set_error_handler(sock->packet, sock_error_handler);
291 packet_set_event_context(sock->packet, conn->event_ctx);
292 packet_set_fde(sock->packet, sock->fde);
293 packet_set_serialise(sock->packet);
294 packet_set_initial_read(sock->packet, 16);
296 /* ensure we don't get SIGPIPE */
297 BlockSignals(True,SIGPIPE);
303 static struct composite_context *dcerpc_pipe_open_socket_send(TALLOC_CTX *mem_ctx,
304 struct dcerpc_connection *cn,
305 struct socket_address *server,
306 const char *target_hostname,
307 enum dcerpc_transport_t transport)
309 struct composite_context *c;
310 struct pipe_open_socket_state *s;
311 struct composite_context *conn_req;
313 c = composite_create(mem_ctx, cn->event_ctx);
314 if (c == NULL) return NULL;
316 s = talloc_zero(c, struct pipe_open_socket_state);
317 if (composite_nomem(s, c)) return c;
321 s->transport = transport;
322 s->server = talloc_reference(c, server);
323 if (composite_nomem(s->server, c)) return c;
324 s->target_hostname = talloc_reference(s, target_hostname);
326 s->sock = talloc(cn, struct sock_private);
327 if (composite_nomem(s->sock, c)) return c;
329 c->status = socket_create(server->family, SOCKET_TYPE_STREAM, &s->socket_ctx, 0);
330 if (!composite_is_ok(c)) return c;
332 talloc_steal(s->sock, s->socket_ctx);
334 conn_req = socket_connect_send(s->socket_ctx, NULL, s->server, 0, c->event_ctx);
335 composite_continue(c, conn_req, continue_socket_connect, c);
340 static NTSTATUS dcerpc_pipe_open_socket_recv(struct composite_context *c)
342 NTSTATUS status = composite_wait(c);
348 struct pipe_tcp_state {
350 const char *target_hostname;
353 struct socket_address *srvaddr;
354 struct dcerpc_connection *conn;
358 #if 0 /* disabled till we can resolve names to ipv6 addresses */
359 static void continue_ipv6_open_socket(struct composite_context *ctx);
361 static void continue_ipv4_open_socket(struct composite_context *ctx);
362 static void continue_ip_resolve_name(struct composite_context *ctx);
364 static void continue_ip_resolve_name(struct composite_context *ctx)
366 struct composite_context *c = talloc_get_type(ctx->async.private_data,
367 struct composite_context);
368 struct pipe_tcp_state *s = talloc_get_type(c->private_data,
369 struct pipe_tcp_state);
370 struct composite_context *sock_ipv4_req;
372 c->status = resolve_name_recv(ctx, s, &s->address);
373 if (!composite_is_ok(c)) return;
375 /* prepare server address using host ip:port and transport name */
376 s->srvaddr = socket_address_from_strings(s->conn, "ipv4", s->address, s->port);
377 if (composite_nomem(s->srvaddr, c)) return;
379 /* resolve_nbt_name gives only ipv4 ... - send socket open request */
380 sock_ipv4_req = dcerpc_pipe_open_socket_send(c, s->conn,
381 s->srvaddr, s->target_hostname,
383 composite_continue(c, sock_ipv4_req, continue_ipv4_open_socket, c);
387 Stage 2 of dcerpc_pipe_open_tcp_send: receive result of pipe open request
388 on IPv6 and send the request on IPv4 unless IPv6 transport succeeded.
390 #if 0 /* disabled till we can resolve names to ipv6 addresses */
391 static void continue_ipv6_open_socket(struct composite_context *ctx)
393 struct composite_context *c = talloc_get_type(ctx->async.private_data,
394 struct composite_context);
395 struct pipe_tcp_state *s = talloc_get_type(c->private_data,
396 struct pipe_tcp_state);
397 struct composite_context *sock_ipv4_req;
399 /* receive result of socket open request */
400 c->status = dcerpc_pipe_open_socket_recv(ctx);
401 if (NT_STATUS_IS_OK(c->status)) {
406 talloc_free(s->srvaddr);
408 /* prepare server address using host:ip and transport name */
409 s->srvaddr = socket_address_from_strings(s->conn, "ipv4", s->address, s->port);
410 if (composite_nomem(s->srvaddr, c)) return;
412 /* try IPv4 if IPv6 fails */
413 sock_ipv4_req = dcerpc_pipe_open_socket_send(c, s->conn,
414 s->srvaddr, s->target_hostname,
416 composite_continue(c, sock_ipv4_req, continue_ipv4_open_socket, c);
421 Stage 2 of dcerpc_pipe_open_tcp_send: receive result of pipe open request
424 static void continue_ipv4_open_socket(struct composite_context *ctx)
426 struct composite_context *c = talloc_get_type(ctx->async.private_data,
427 struct composite_context);
428 struct pipe_tcp_state *s = talloc_get_type(c->private_data,
429 struct pipe_tcp_state);
431 /* receive result socket open request */
432 c->status = dcerpc_pipe_open_socket_recv(ctx);
433 if (!NT_STATUS_IS_OK(c->status)) {
434 /* something went wrong... */
435 DEBUG(0, ("Failed to connect host %s (%s) on port %d - %s.\n",
436 s->address, s->target_hostname,
437 s->port, nt_errstr(c->status)));
439 composite_error(c, c->status);
448 Send rpc pipe open request to given host:port using
451 struct composite_context* dcerpc_pipe_open_tcp_send(struct dcerpc_connection *conn,
453 const char *target_hostname,
456 struct composite_context *c;
457 struct pipe_tcp_state *s;
458 struct composite_context *resolve_req;
459 struct nbt_name name;
461 /* composite context allocation and setup */
462 c = composite_create(conn, conn->event_ctx);
463 if (c == NULL) return NULL;
465 s = talloc_zero(c, struct pipe_tcp_state);
466 if (composite_nomem(s, c)) return c;
469 /* store input parameters in state structure */
470 s->server = talloc_strdup(c, server);
471 if (composite_nomem(s->server, c)) return c;
472 if (target_hostname) {
473 s->target_hostname = talloc_strdup(c, target_hostname);
474 if (composite_nomem(s->target_hostname, c)) return c;
479 make_nbt_name_server(&name, server);
480 resolve_req = resolve_name_send(&name, c->event_ctx, lp_name_resolve_order());
481 composite_continue(c, resolve_req, continue_ip_resolve_name, c);
486 Receive result of pipe open request on tcp/ip
488 NTSTATUS dcerpc_pipe_open_tcp_recv(struct composite_context *c)
491 status = composite_wait(c);
498 struct pipe_unix_state {
500 struct socket_address *srvaddr;
501 struct dcerpc_connection *conn;
506 Stage 2 of dcerpc_pipe_open_unix_stream_send: receive result of pipe open
507 request on unix socket.
509 static void continue_unix_open_socket(struct composite_context *ctx)
511 struct composite_context *c = talloc_get_type(ctx->async.private_data,
512 struct composite_context);
514 c->status = dcerpc_pipe_open_socket_recv(ctx);
515 if (NT_STATUS_IS_OK(c->status)) {
520 composite_error(c, c->status);
525 Send pipe open request on unix socket
527 struct composite_context *dcerpc_pipe_open_unix_stream_send(struct dcerpc_connection *conn,
530 struct composite_context *c;
531 struct composite_context *sock_unix_req;
532 struct pipe_unix_state *s;
534 /* composite context allocation and setup */
535 c = composite_create(conn, conn->event_ctx);
536 if (c == NULL) return NULL;
538 s = talloc_zero(c, struct pipe_unix_state);
539 if (composite_nomem(s, c)) return c;
542 /* store parameters in state structure */
543 s->path = talloc_strdup(c, path);
544 if (composite_nomem(s->path, c)) return c;
547 /* prepare server address using socket path and transport name */
548 s->srvaddr = socket_address_from_strings(conn, "unix", s->path, 0);
549 if (composite_nomem(s->srvaddr, c)) return c;
551 /* send socket open request */
552 sock_unix_req = dcerpc_pipe_open_socket_send(c, s->conn,
555 composite_continue(c, sock_unix_req, continue_unix_open_socket, c);
561 Receive result of pipe open request on unix socket
563 NTSTATUS dcerpc_pipe_open_unix_stream_recv(struct composite_context *c)
565 NTSTATUS status = composite_wait(c);
572 struct pipe_np_state {
574 struct socket_address *srvaddr;
575 struct dcerpc_connection *conn;
580 Stage 2 of dcerpc_pipe_open_pipe_send: receive socket open request
582 static void continue_np_open_socket(struct composite_context *ctx)
584 struct composite_context *c = talloc_get_type(ctx->async.private_data,
585 struct composite_context);
587 c->status = dcerpc_pipe_open_socket_recv(ctx);
588 if (!composite_is_ok(c)) return;
595 Send pipe open request on ncalrpc
597 struct composite_context* dcerpc_pipe_open_pipe_send(struct dcerpc_connection *conn,
598 const char *identifier)
602 struct composite_context *c;
603 struct composite_context *sock_np_req;
604 struct pipe_np_state *s;
606 /* composite context allocation and setup */
607 c = composite_create(conn, conn->event_ctx);
608 if (c == NULL) return NULL;
610 s = talloc_zero(c, struct pipe_np_state);
611 if (composite_nomem(s, c)) return c;
614 /* store parameters in state structure */
615 canon = talloc_strdup(s, identifier);
616 if (composite_nomem(canon, c)) return c;
619 string_replace(canon, '/', '\\');
620 s->full_path = talloc_asprintf(canon, "%s/%s", lp_ncalrpc_dir(), canon);
621 if (composite_nomem(s->full_path, c)) return c;
623 /* prepare server address using path and transport name */
624 s->srvaddr = socket_address_from_strings(conn, "unix", s->full_path, 0);
625 if (composite_nomem(s->srvaddr, c)) return c;
627 /* send socket open request */
628 sock_np_req = dcerpc_pipe_open_socket_send(c, s->conn, s->srvaddr, NULL, NCALRPC);
629 composite_continue(c, sock_np_req, continue_np_open_socket, c);
635 Receive result of pipe open request on ncalrpc
637 NTSTATUS dcerpc_pipe_open_pipe_recv(struct composite_context *c)
639 NTSTATUS status = composite_wait(c);
647 Open a rpc pipe on a named pipe - sync version
649 NTSTATUS dcerpc_pipe_open_pipe(struct dcerpc_connection *conn, const char *identifier)
651 struct composite_context *c = dcerpc_pipe_open_pipe_send(conn, identifier);
652 return dcerpc_pipe_open_pipe_recv(c);