s3-librpc Call SPENGO/GSSAPI via the auth_generic layer and gensec
[kai/samba.git] / source3 / rpc_server / rpc_handles.c
index 32e98f3644ffdebda15ddec25c0b985683b909ca..d547f18dc1e5ccb053b7570198f235d89ee60d3e 100644 (file)
  */
 
 #include "includes.h"
+#include "system/passwd.h" /* uid_wrapper */
 #include "../librpc/gen_ndr/ndr_lsa.h"
 #include "../librpc/gen_ndr/ndr_samr.h"
 #include "auth.h"
-#include "ntdomain.h"
-#include "rpc_server/rpc_ncacn_np.h"
+#include "rpc_server/rpc_pipes.h"
+#include "../libcli/security/security.h"
+#include "lib/tsocket/tsocket.h"
 
 #undef DBGC_CLASS
 #define DBGC_CLASS DBGC_RPC_SRV
 
+static struct pipes_struct *InternalPipes;
+
+/* TODO
+ * the following prototypes are declared here to avoid
+ * code being moved about too much for a patch to be
+ * disrupted / less obvious.
+ *
+ * these functions, and associated functions that they
+ * call, should be moved behind a .so module-loading
+ * system _anyway_.  so that's the next step...
+ */
+
+int make_base_pipes_struct(TALLOC_CTX *mem_ctx,
+                          struct messaging_context *msg_ctx,
+                          const char *pipe_name,
+                          enum dcerpc_transport_t transport,
+                          bool endian, bool ncalrpc_as_system,
+                          const struct tsocket_address *remote_address,
+                          const struct tsocket_address *local_address,
+                          struct pipes_struct **_p)
+{
+       struct pipes_struct *p;
+
+       p = talloc_zero(mem_ctx, struct pipes_struct);
+       if (!p) {
+               return ENOMEM;
+       }
+
+       p->mem_ctx = talloc_named(p, 0, "pipe %s %p", pipe_name, p);
+       if (!p->mem_ctx) {
+               talloc_free(p);
+               return ENOMEM;
+       }
+
+       p->msg_ctx = msg_ctx;
+       p->transport = transport;
+       p->endian = endian;
+       p->ncalrpc_as_system = ncalrpc_as_system;
+
+       p->remote_address = tsocket_address_copy(remote_address, p);
+       if (p->remote_address == NULL) {
+               talloc_free(p);
+               return ENOMEM;
+       }
+
+       if (local_address) {
+               p->local_address = tsocket_address_copy(local_address, p);
+               if (p->local_address == NULL) {
+                       talloc_free(p);
+                       return ENOMEM;
+               }
+       }
+
+       DLIST_ADD(InternalPipes, p);
+       talloc_set_destructor(p, close_internal_rpc_pipe_hnd);
+
+       *_p = p;
+       return 0;
+}
+
+
+bool check_open_pipes(void)
+{
+       struct pipes_struct *p;
+
+       for (p = InternalPipes; p != NULL; p = p->next) {
+               if (num_pipe_handles(p) != 0) {
+                       return true;
+               }
+       }
+       return false;
+}
+
+/****************************************************************************
+ Close an rpc pipe.
+****************************************************************************/
+
+int close_internal_rpc_pipe_hnd(struct pipes_struct *p)
+{
+       if (!p) {
+               DEBUG(0,("Invalid pipe in close_internal_rpc_pipe_hnd\n"));
+               return False;
+       }
+
+       /* Free the handles database. */
+       close_policy_by_pipe(p);
+
+       DLIST_REMOVE(InternalPipes, p);
+
+       return 0;
+}
+
 /*
  * Handle database - stored per pipe.
  */
@@ -81,9 +175,7 @@ bool init_pipe_handles(struct pipes_struct *p, const struct ndr_syntax_id *synta
        struct pipes_struct *plist;
        struct handle_list *hl;
 
-       for (plist = get_first_internal_pipe();
-            plist;
-            plist = get_next_internal_pipe(plist)) {
+       for (plist = InternalPipes; plist; plist = plist->next) {
                struct pipe_rpc_fns *p_ctx;
                bool stop = false;
 
@@ -307,6 +399,10 @@ bool close_policy_hnd(struct pipes_struct *p, struct policy_handle *hnd)
 
 void close_policy_by_pipe(struct pipes_struct *p)
 {
+       if (p->pipe_handles == NULL) {
+               return;
+       }
+
        p->pipe_handles->pipe_ref_count--;
 
        if (p->pipe_handles->pipe_ref_count == 0) {
@@ -315,9 +411,9 @@ void close_policy_by_pipe(struct pipes_struct *p)
                 */
                TALLOC_FREE(p->pipe_handles);
 
-               DEBUG(10,("close_policy_by_pipe: deleted handle list for "
-                         "pipe %s\n",
-                         get_pipe_name_from_syntax(talloc_tos(), &p->syntax)));
+               DEBUG(10,("Deleted handle list for RPC connection %s\n",
+                         get_pipe_name_from_syntax(talloc_tos(),
+                                                   &p->contexts->syntax)));
        }
 }
 
@@ -342,7 +438,7 @@ bool pipe_access_check(struct pipes_struct *p)
                        return True;
                }
 
-               if (p->session_info->guest) {
+               if (security_session_user_level(p->session_info, NULL) < SECURITY_USER) {
                        return False;
                }
        }
@@ -358,9 +454,10 @@ void *_policy_handle_create(struct pipes_struct *p, struct policy_handle *hnd,
        void *data;
 
        if (p->pipe_handles->count > MAX_OPEN_POLS) {
-               DEBUG(0, ("policy_handle_create: ERROR: too many handles (%d) "
-                         "on pipe %s.\n", (int)p->pipe_handles->count,
-                         get_pipe_name_from_syntax(talloc_tos(), &p->syntax)));
+               DEBUG(0, ("ERROR: Too many handles (%d) for RPC connection %s\n",
+                         (int) p->pipe_handles->count,
+                         get_pipe_name_from_syntax(talloc_tos(),
+                                                   &p->contexts->syntax)));
                *pstatus = NT_STATUS_INSUFFICIENT_RESOURCES;
                return NULL;
        }