e9626f31fe1652c0d117b5a6327aebcf3d4da47a
[nivanova/samba-autobuild/.git] / source3 / lib / util_sock.c
1 /*
2    Unix SMB/CIFS implementation.
3    Samba utility functions
4    Copyright (C) Andrew Tridgell 1992-1998
5    Copyright (C) Tim Potter      2000-2001
6    Copyright (C) Jeremy Allison  1992-2007
7
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License as published by
10    the Free Software Foundation; either version 3 of the License, or
11    (at your option) any later version.
12
13    This program is distributed in the hope that it will be useful,
14    but WITHOUT ANY WARRANTY; without even the implied warranty of
15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16    GNU General Public License for more details.
17
18    You should have received a copy of the GNU General Public License
19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #include "includes.h"
23
24 /****************************************************************************
25  Get a port number in host byte order from a sockaddr_storage.
26 ****************************************************************************/
27
28 uint16_t get_sockaddr_port(const struct sockaddr_storage *pss)
29 {
30         uint16_t port = 0;
31
32         if (pss->ss_family != AF_INET) {
33 #if defined(HAVE_IPV6)
34                 /* IPv6 */
35                 const struct sockaddr_in6 *sa6 =
36                         (const struct sockaddr_in6 *)pss;
37                 port = ntohs(sa6->sin6_port);
38 #endif
39         } else {
40                 const struct sockaddr_in *sa =
41                         (const struct sockaddr_in *)pss;
42                 port = ntohs(sa->sin_port);
43         }
44         return port;
45 }
46
47 /****************************************************************************
48  Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
49 ****************************************************************************/
50
51 static char *print_sockaddr_len(char *dest,
52                         size_t destlen,
53                         const struct sockaddr *psa,
54                         socklen_t psalen)
55 {
56         if (destlen > 0) {
57                 dest[0] = '\0';
58         }
59         (void)sys_getnameinfo(psa,
60                         psalen,
61                         dest, destlen,
62                         NULL, 0,
63                         NI_NUMERICHOST);
64         return dest;
65 }
66
67 /****************************************************************************
68  Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
69 ****************************************************************************/
70
71 char *print_sockaddr(char *dest,
72                         size_t destlen,
73                         const struct sockaddr_storage *psa)
74 {
75         return print_sockaddr_len(dest, destlen, (struct sockaddr *)psa,
76                         sizeof(struct sockaddr_storage));
77 }
78
79 /****************************************************************************
80  Print out a canonical IPv4 or IPv6 address from a struct sockaddr_storage.
81 ****************************************************************************/
82
83 char *print_canonical_sockaddr(TALLOC_CTX *ctx,
84                         const struct sockaddr_storage *pss)
85 {
86         char addr[INET6_ADDRSTRLEN];
87         char *dest = NULL;
88         int ret;
89
90         /* Linux getnameinfo() man pages says port is unitialized if
91            service name is NULL. */
92
93         ret = sys_getnameinfo((const struct sockaddr *)pss,
94                         sizeof(struct sockaddr_storage),
95                         addr, sizeof(addr),
96                         NULL, 0,
97                         NI_NUMERICHOST);
98         if (ret != 0) {
99                 return NULL;
100         }
101
102         if (pss->ss_family != AF_INET) {
103 #if defined(HAVE_IPV6)
104                 dest = talloc_asprintf(ctx, "[%s]", addr);
105 #else
106                 return NULL;
107 #endif
108         } else {
109                 dest = talloc_asprintf(ctx, "%s", addr);
110         }
111         
112         return dest;
113 }
114
115 /****************************************************************************
116  Return the string of an IP address (IPv4 or IPv6).
117 ****************************************************************************/
118
119 static const char *get_socket_addr(int fd, char *addr_buf, size_t addr_len)
120 {
121         struct sockaddr_storage sa;
122         socklen_t length = sizeof(sa);
123
124         /* Ok, returning a hard coded IPv4 address
125          * is bogus, but it's just as bogus as a
126          * zero IPv6 address. No good choice here.
127          */
128
129         strlcpy(addr_buf, "0.0.0.0", addr_len);
130
131         if (fd == -1) {
132                 return addr_buf;
133         }
134
135         if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
136                 DEBUG(0,("getsockname failed. Error was %s\n",
137                         strerror(errno) ));
138                 return addr_buf;
139         }
140
141         return print_sockaddr_len(addr_buf, addr_len, (struct sockaddr *)&sa, length);
142 }
143
144 /****************************************************************************
145  Return the port number we've bound to on a socket.
146 ****************************************************************************/
147
148 int get_socket_port(int fd)
149 {
150         struct sockaddr_storage sa;
151         socklen_t length = sizeof(sa);
152
153         if (fd == -1) {
154                 return -1;
155         }
156
157         if (getsockname(fd, (struct sockaddr *)&sa, &length) < 0) {
158                 int level = (errno == ENOTCONN) ? 2 : 0;
159                 DEBUG(level, ("getpeername failed. Error was %s\n",
160                                strerror(errno)));
161                 return -1;
162         }
163
164 #if defined(HAVE_IPV6)
165         if (sa.ss_family == AF_INET6) {
166                 return ntohs(((struct sockaddr_in6 *)&sa)->sin6_port);
167         }
168 #endif
169         if (sa.ss_family == AF_INET) {
170                 return ntohs(((struct sockaddr_in *)&sa)->sin_port);
171         }
172         return -1;
173 }
174
175 const char *client_name(int fd)
176 {
177         return get_peer_name(fd,false);
178 }
179
180 const char *client_addr(int fd, char *addr, size_t addrlen)
181 {
182         return get_peer_addr(fd,addr,addrlen);
183 }
184
185 const char *client_socket_addr(int fd, char *addr, size_t addr_len)
186 {
187         return get_socket_addr(fd, addr, addr_len);
188 }
189
190 #if 0
191 /* Not currently used. JRA. */
192 int client_socket_port(int fd)
193 {
194         return get_socket_port(fd);
195 }
196 #endif
197
198 /****************************************************************************
199  Accessor functions to make thread-safe code easier later...
200 ****************************************************************************/
201
202 void set_smb_read_error(enum smb_read_errors *pre,
203                         enum smb_read_errors newerr)
204 {
205         if (pre) {
206                 *pre = newerr;
207         }
208 }
209
210 void cond_set_smb_read_error(enum smb_read_errors *pre,
211                         enum smb_read_errors newerr)
212 {
213         if (pre && *pre == SMB_READ_OK) {
214                 *pre = newerr;
215         }
216 }
217
218 /****************************************************************************
219  Determine if a file descriptor is in fact a socket.
220 ****************************************************************************/
221
222 bool is_a_socket(int fd)
223 {
224         int v;
225         socklen_t l;
226         l = sizeof(int);
227         return(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&v, &l) == 0);
228 }
229
230 enum SOCK_OPT_TYPES {OPT_BOOL,OPT_INT,OPT_ON};
231
232 typedef struct smb_socket_option {
233         const char *name;
234         int level;
235         int option;
236         int value;
237         int opttype;
238 } smb_socket_option;
239
240 static const smb_socket_option socket_options[] = {
241   {"SO_KEEPALIVE", SOL_SOCKET, SO_KEEPALIVE, 0, OPT_BOOL},
242   {"SO_REUSEADDR", SOL_SOCKET, SO_REUSEADDR, 0, OPT_BOOL},
243   {"SO_BROADCAST", SOL_SOCKET, SO_BROADCAST, 0, OPT_BOOL},
244 #ifdef TCP_NODELAY
245   {"TCP_NODELAY", IPPROTO_TCP, TCP_NODELAY, 0, OPT_BOOL},
246 #endif
247 #ifdef TCP_KEEPCNT
248   {"TCP_KEEPCNT", IPPROTO_TCP, TCP_KEEPCNT, 0, OPT_INT},
249 #endif
250 #ifdef TCP_KEEPIDLE
251   {"TCP_KEEPIDLE", IPPROTO_TCP, TCP_KEEPIDLE, 0, OPT_INT},
252 #endif
253 #ifdef TCP_KEEPINTVL
254   {"TCP_KEEPINTVL", IPPROTO_TCP, TCP_KEEPINTVL, 0, OPT_INT},
255 #endif
256 #ifdef IPTOS_LOWDELAY
257   {"IPTOS_LOWDELAY", IPPROTO_IP, IP_TOS, IPTOS_LOWDELAY, OPT_ON},
258 #endif
259 #ifdef IPTOS_THROUGHPUT
260   {"IPTOS_THROUGHPUT", IPPROTO_IP, IP_TOS, IPTOS_THROUGHPUT, OPT_ON},
261 #endif
262 #ifdef SO_REUSEPORT
263   {"SO_REUSEPORT", SOL_SOCKET, SO_REUSEPORT, 0, OPT_BOOL},
264 #endif
265 #ifdef SO_SNDBUF
266   {"SO_SNDBUF", SOL_SOCKET, SO_SNDBUF, 0, OPT_INT},
267 #endif
268 #ifdef SO_RCVBUF
269   {"SO_RCVBUF", SOL_SOCKET, SO_RCVBUF, 0, OPT_INT},
270 #endif
271 #ifdef SO_SNDLOWAT
272   {"SO_SNDLOWAT", SOL_SOCKET, SO_SNDLOWAT, 0, OPT_INT},
273 #endif
274 #ifdef SO_RCVLOWAT
275   {"SO_RCVLOWAT", SOL_SOCKET, SO_RCVLOWAT, 0, OPT_INT},
276 #endif
277 #ifdef SO_SNDTIMEO
278   {"SO_SNDTIMEO", SOL_SOCKET, SO_SNDTIMEO, 0, OPT_INT},
279 #endif
280 #ifdef SO_RCVTIMEO
281   {"SO_RCVTIMEO", SOL_SOCKET, SO_RCVTIMEO, 0, OPT_INT},
282 #endif
283 #ifdef TCP_FASTACK
284   {"TCP_FASTACK", IPPROTO_TCP, TCP_FASTACK, 0, OPT_INT},
285 #endif
286 #ifdef TCP_QUICKACK
287   {"TCP_QUICKACK", IPPROTO_TCP, TCP_QUICKACK, 0, OPT_BOOL},
288 #endif
289   {NULL,0,0,0,0}};
290
291 /****************************************************************************
292  Print socket options.
293 ****************************************************************************/
294
295 static void print_socket_options(int s)
296 {
297         int value;
298         socklen_t vlen = 4;
299         const smb_socket_option *p = &socket_options[0];
300
301         /* wrapped in if statement to prevent streams
302          * leak in SCO Openserver 5.0 */
303         /* reported on samba-technical  --jerry */
304         if ( DEBUGLEVEL >= 5 ) {
305                 DEBUG(5,("Socket options:\n"));
306                 for (; p->name != NULL; p++) {
307                         if (getsockopt(s, p->level, p->option,
308                                                 (void *)&value, &vlen) == -1) {
309                                 DEBUGADD(5,("\tCould not test socket option %s.\n",
310                                                         p->name));
311                         } else {
312                                 DEBUGADD(5,("\t%s = %d\n",
313                                                         p->name,value));
314                         }
315                 }
316         }
317  }
318
319 /****************************************************************************
320  Set user socket options.
321 ****************************************************************************/
322
323 void set_socket_options(int fd, const char *options)
324 {
325         TALLOC_CTX *ctx = talloc_stackframe();
326         char *tok;
327
328         while (next_token_talloc(ctx, &options, &tok," \t,")) {
329                 int ret=0,i;
330                 int value = 1;
331                 char *p;
332                 bool got_value = false;
333
334                 if ((p = strchr_m(tok,'='))) {
335                         *p = 0;
336                         value = atoi(p+1);
337                         got_value = true;
338                 }
339
340                 for (i=0;socket_options[i].name;i++)
341                         if (strequal(socket_options[i].name,tok))
342                                 break;
343
344                 if (!socket_options[i].name) {
345                         DEBUG(0,("Unknown socket option %s\n",tok));
346                         continue;
347                 }
348
349                 switch (socket_options[i].opttype) {
350                 case OPT_BOOL:
351                 case OPT_INT:
352                         ret = setsockopt(fd,socket_options[i].level,
353                                         socket_options[i].option,
354                                         (char *)&value,sizeof(int));
355                         break;
356
357                 case OPT_ON:
358                         if (got_value)
359                                 DEBUG(0,("syntax error - %s "
360                                         "does not take a value\n",tok));
361
362                         {
363                                 int on = socket_options[i].value;
364                                 ret = setsockopt(fd,socket_options[i].level,
365                                         socket_options[i].option,
366                                         (char *)&on,sizeof(int));
367                         }
368                         break;
369                 }
370
371                 if (ret != 0) {
372                         /* be aware that some systems like Solaris return
373                          * EINVAL to a setsockopt() call when the client
374                          * sent a RST previously - no need to worry */
375                         DEBUG(2,("Failed to set socket option %s (Error %s)\n",
376                                 tok, strerror(errno) ));
377                 }
378         }
379
380         TALLOC_FREE(ctx);
381         print_socket_options(fd);
382 }
383
384 /****************************************************************************
385  Read from a socket.
386 ****************************************************************************/
387
388 ssize_t read_udp_v4_socket(int fd,
389                         char *buf,
390                         size_t len,
391                         struct sockaddr_storage *psa)
392 {
393         ssize_t ret;
394         socklen_t socklen = sizeof(*psa);
395         struct sockaddr_in *si = (struct sockaddr_in *)psa;
396
397         memset((char *)psa,'\0',socklen);
398
399         ret = (ssize_t)sys_recvfrom(fd,buf,len,0,
400                         (struct sockaddr *)psa,&socklen);
401         if (ret <= 0) {
402                 /* Don't print a low debug error for a non-blocking socket. */
403                 if (errno == EAGAIN) {
404                         DEBUG(10,("read_udp_v4_socket: returned EAGAIN\n"));
405                 } else {
406                         DEBUG(2,("read_udp_v4_socket: failed. errno=%s\n",
407                                 strerror(errno)));
408                 }
409                 return 0;
410         }
411
412         if (psa->ss_family != AF_INET) {
413                 DEBUG(2,("read_udp_v4_socket: invalid address family %d "
414                         "(not IPv4)\n", (int)psa->ss_family));
415                 return 0;
416         }
417
418         DEBUG(10,("read_udp_v4_socket: ip %s port %d read: %lu\n",
419                         inet_ntoa(si->sin_addr),
420                         si->sin_port,
421                         (unsigned long)ret));
422
423         return ret;
424 }
425
426 /****************************************************************************
427  Read data from a file descriptor with a timout in msec.
428  mincount = if timeout, minimum to read before returning
429  maxcount = number to be read.
430  time_out = timeout in milliseconds
431  NB. This can be called with a non-socket fd, don't change
432  sys_read() to sys_recv() or other socket call.
433 ****************************************************************************/
434
435 NTSTATUS read_fd_with_timeout(int fd, char *buf,
436                                   size_t mincnt, size_t maxcnt,
437                                   unsigned int time_out,
438                                   size_t *size_ret)
439 {
440         fd_set fds;
441         int selrtn;
442         ssize_t readret;
443         size_t nread = 0;
444         struct timeval timeout;
445
446         /* just checking .... */
447         if (maxcnt <= 0)
448                 return NT_STATUS_OK;
449
450         /* Blocking read */
451         if (time_out == 0) {
452                 if (mincnt == 0) {
453                         mincnt = maxcnt;
454                 }
455
456                 while (nread < mincnt) {
457                         readret = sys_read(fd, buf + nread, maxcnt - nread);
458
459                         if (readret == 0) {
460                                 DEBUG(5,("read_fd_with_timeout: "
461                                         "blocking read. EOF from client.\n"));
462                                 return NT_STATUS_END_OF_FILE;
463                         }
464
465                         if (readret == -1) {
466                                 return map_nt_error_from_unix(errno);
467                         }
468                         nread += readret;
469                 }
470                 goto done;
471         }
472
473         /* Most difficult - timeout read */
474         /* If this is ever called on a disk file and
475            mincnt is greater then the filesize then
476            system performance will suffer severely as
477            select always returns true on disk files */
478
479         /* Set initial timeout */
480         timeout.tv_sec = (time_t)(time_out / 1000);
481         timeout.tv_usec = (long)(1000 * (time_out % 1000));
482
483         for (nread=0; nread < mincnt; ) {
484                 FD_ZERO(&fds);
485                 FD_SET(fd,&fds);
486
487                 selrtn = sys_select_intr(fd+1,&fds,NULL,NULL,&timeout);
488
489                 /* Check if error */
490                 if (selrtn == -1) {
491                         return map_nt_error_from_unix(errno);
492                 }
493
494                 /* Did we timeout ? */
495                 if (selrtn == 0) {
496                         DEBUG(10,("read_fd_with_timeout: timeout read. "
497                                 "select timed out.\n"));
498                         return NT_STATUS_IO_TIMEOUT;
499                 }
500
501                 readret = sys_read(fd, buf+nread, maxcnt-nread);
502
503                 if (readret == 0) {
504                         /* we got EOF on the file descriptor */
505                         DEBUG(5,("read_fd_with_timeout: timeout read. "
506                                 "EOF from client.\n"));
507                         return NT_STATUS_END_OF_FILE;
508                 }
509
510                 if (readret == -1) {
511                         return map_nt_error_from_unix(errno);
512                 }
513
514                 nread += readret;
515         }
516
517  done:
518         /* Return the number we got */
519         if (size_ret) {
520                 *size_ret = nread;
521         }
522         return NT_STATUS_OK;
523 }
524
525 /****************************************************************************
526  Read data from an fd, reading exactly N bytes.
527  NB. This can be called with a non-socket fd, don't add dependencies
528  on socket calls.
529 ****************************************************************************/
530
531 NTSTATUS read_data(int fd, char *buffer, size_t N)
532 {
533         return read_fd_with_timeout(fd, buffer, N, N, 0, NULL);
534 }
535
536 /****************************************************************************
537  Write all data from an iov array
538  NB. This can be called with a non-socket fd, don't add dependencies
539  on socket calls.
540 ****************************************************************************/
541
542 ssize_t write_data_iov(int fd, const struct iovec *orig_iov, int iovcnt)
543 {
544         int i;
545         size_t to_send;
546         ssize_t thistime;
547         size_t sent;
548         struct iovec *iov_copy, *iov;
549
550         to_send = 0;
551         for (i=0; i<iovcnt; i++) {
552                 to_send += orig_iov[i].iov_len;
553         }
554
555         thistime = sys_writev(fd, orig_iov, iovcnt);
556         if ((thistime <= 0) || (thistime == to_send)) {
557                 return thistime;
558         }
559         sent = thistime;
560
561         /*
562          * We could not send everything in one call. Make a copy of iov that
563          * we can mess with. We keep a copy of the array start in iov_copy for
564          * the TALLOC_FREE, because we're going to modify iov later on,
565          * discarding elements.
566          */
567
568         iov_copy = (struct iovec *)TALLOC_MEMDUP(
569                 talloc_tos(), orig_iov, sizeof(struct iovec) * iovcnt);
570
571         if (iov_copy == NULL) {
572                 errno = ENOMEM;
573                 return -1;
574         }
575         iov = iov_copy;
576
577         while (sent < to_send) {
578                 /*
579                  * We have to discard "thistime" bytes from the beginning
580                  * iov array, "thistime" contains the number of bytes sent
581                  * via writev last.
582                  */
583                 while (thistime > 0) {
584                         if (thistime < iov[0].iov_len) {
585                                 char *new_base =
586                                         (char *)iov[0].iov_base + thistime;
587                                 iov[0].iov_base = (void *)new_base;
588                                 iov[0].iov_len -= thistime;
589                                 break;
590                         }
591                         thistime -= iov[0].iov_len;
592                         iov += 1;
593                         iovcnt -= 1;
594                 }
595
596                 thistime = sys_writev(fd, iov, iovcnt);
597                 if (thistime <= 0) {
598                         break;
599                 }
600                 sent += thistime;
601         }
602
603         TALLOC_FREE(iov_copy);
604         return sent;
605 }
606
607 /****************************************************************************
608  Write data to a fd.
609  NB. This can be called with a non-socket fd, don't add dependencies
610  on socket calls.
611 ****************************************************************************/
612
613 ssize_t write_data(int fd, const char *buffer, size_t N)
614 {
615         struct iovec iov;
616
617         iov.iov_base = CONST_DISCARD(void *, buffer);
618         iov.iov_len = N;
619         return write_data_iov(fd, &iov, 1);
620 }
621
622 /****************************************************************************
623  Send a keepalive packet (rfc1002).
624 ****************************************************************************/
625
626 bool send_keepalive(int client)
627 {
628         unsigned char buf[4];
629
630         buf[0] = SMBkeepalive;
631         buf[1] = buf[2] = buf[3] = 0;
632
633         return(write_data(client,(char *)buf,4) == 4);
634 }
635
636 /****************************************************************************
637  Read 4 bytes of a smb packet and return the smb length of the packet.
638  Store the result in the buffer.
639  This version of the function will return a length of zero on receiving
640  a keepalive packet.
641  Timeout is in milliseconds.
642 ****************************************************************************/
643
644 NTSTATUS read_smb_length_return_keepalive(int fd, char *inbuf,
645                                           unsigned int timeout,
646                                           size_t *len)
647 {
648         int msg_type;
649         NTSTATUS status;
650
651         status = read_fd_with_timeout(fd, inbuf, 4, 4, timeout, NULL);
652
653         if (!NT_STATUS_IS_OK(status)) {
654                 return status;
655         }
656
657         *len = smb_len(inbuf);
658         msg_type = CVAL(inbuf,0);
659
660         if (msg_type == SMBkeepalive) {
661                 DEBUG(5,("Got keepalive packet\n"));
662         }
663
664         DEBUG(10,("got smb length of %lu\n",(unsigned long)(*len)));
665
666         return NT_STATUS_OK;
667 }
668
669 /****************************************************************************
670  Read an smb from a fd.
671  The timeout is in milliseconds.
672  This function will return on receipt of a session keepalive packet.
673  maxlen is the max number of bytes to return, not including the 4 byte
674  length. If zero it means buflen limit.
675  Doesn't check the MAC on signed packets.
676 ****************************************************************************/
677
678 NTSTATUS receive_smb_raw(int fd, char *buffer, size_t buflen, unsigned int timeout,
679                          size_t maxlen, size_t *p_len)
680 {
681         size_t len;
682         NTSTATUS status;
683
684         status = read_smb_length_return_keepalive(fd,buffer,timeout,&len);
685
686         if (!NT_STATUS_IS_OK(status)) {
687                 DEBUG(0, ("read_fd_with_timeout failed, read "
688                           "error = %s.\n", nt_errstr(status)));
689                 return status;
690         }
691
692         if (len > buflen) {
693                 DEBUG(0,("Invalid packet length! (%lu bytes).\n",
694                                         (unsigned long)len));
695                 return NT_STATUS_INVALID_PARAMETER;
696         }
697
698         if(len > 0) {
699                 if (maxlen) {
700                         len = MIN(len,maxlen);
701                 }
702
703                 status = read_fd_with_timeout(
704                         fd, buffer+4, len, len, timeout, &len);
705
706                 if (!NT_STATUS_IS_OK(status)) {
707                         DEBUG(0, ("read_fd_with_timeout failed, read error = "
708                                   "%s.\n", nt_errstr(status)));
709                         return status;
710                 }
711
712                 /* not all of samba3 properly checks for packet-termination
713                  * of strings. This ensures that we don't run off into
714                  * empty space. */
715                 SSVAL(buffer+4,len, 0);
716         }
717
718         *p_len = len;
719         return NT_STATUS_OK;
720 }
721
722 /****************************************************************************
723  Open a socket of the specified type, port, and address for incoming data.
724 ****************************************************************************/
725
726 int open_socket_in(int type,
727                 uint16_t port,
728                 int dlevel,
729                 const struct sockaddr_storage *psock,
730                 bool rebind)
731 {
732         struct sockaddr_storage sock;
733         int res;
734         socklen_t slen = sizeof(struct sockaddr_in);
735
736         sock = *psock;
737
738 #if defined(HAVE_IPV6)
739         if (sock.ss_family == AF_INET6) {
740                 ((struct sockaddr_in6 *)&sock)->sin6_port = htons(port);
741                 slen = sizeof(struct sockaddr_in6);
742         }
743 #endif
744         if (sock.ss_family == AF_INET) {
745                 ((struct sockaddr_in *)&sock)->sin_port = htons(port);
746         }
747
748         res = socket(sock.ss_family, type, 0 );
749         if( res == -1 ) {
750                 if( DEBUGLVL(0) ) {
751                         dbgtext( "open_socket_in(): socket() call failed: " );
752                         dbgtext( "%s\n", strerror( errno ) );
753                 }
754                 return -1;
755         }
756
757         /* This block sets/clears the SO_REUSEADDR and possibly SO_REUSEPORT. */
758         {
759                 int val = rebind ? 1 : 0;
760                 if( setsockopt(res,SOL_SOCKET,SO_REUSEADDR,
761                                         (char *)&val,sizeof(val)) == -1 ) {
762                         if( DEBUGLVL( dlevel ) ) {
763                                 dbgtext( "open_socket_in(): setsockopt: " );
764                                 dbgtext( "SO_REUSEADDR = %s ",
765                                                 val?"true":"false" );
766                                 dbgtext( "on port %d failed ", port );
767                                 dbgtext( "with error = %s\n", strerror(errno) );
768                         }
769                 }
770 #ifdef SO_REUSEPORT
771                 if( setsockopt(res,SOL_SOCKET,SO_REUSEPORT,
772                                         (char *)&val,sizeof(val)) == -1 ) {
773                         if( DEBUGLVL( dlevel ) ) {
774                                 dbgtext( "open_socket_in(): setsockopt: ");
775                                 dbgtext( "SO_REUSEPORT = %s ",
776                                                 val?"true":"false");
777                                 dbgtext( "on port %d failed ", port);
778                                 dbgtext( "with error = %s\n", strerror(errno));
779                         }
780                 }
781 #endif /* SO_REUSEPORT */
782         }
783
784         /* now we've got a socket - we need to bind it */
785         if (bind(res, (struct sockaddr *)&sock, slen) == -1 ) {
786                 if( DEBUGLVL(dlevel) && (port == SMB_PORT1 ||
787                                 port == SMB_PORT2 || port == NMB_PORT) ) {
788                         char addr[INET6_ADDRSTRLEN];
789                         print_sockaddr(addr, sizeof(addr),
790                                         &sock);
791                         dbgtext( "bind failed on port %d ", port);
792                         dbgtext( "socket_addr = %s.\n", addr);
793                         dbgtext( "Error = %s\n", strerror(errno));
794                 }
795                 close(res);
796                 return -1;
797         }
798
799         DEBUG( 10, ( "bind succeeded on port %d\n", port ) );
800         return( res );
801  }
802
803 struct open_socket_out_state {
804         int fd;
805         struct event_context *ev;
806         struct sockaddr_storage ss;
807         socklen_t salen;
808         uint16_t port;
809         int wait_nsec;
810 };
811
812 static void open_socket_out_connected(struct tevent_req *subreq);
813
814 static int open_socket_out_state_destructor(struct open_socket_out_state *s)
815 {
816         if (s->fd != -1) {
817                 close(s->fd);
818         }
819         return 0;
820 }
821
822 /****************************************************************************
823  Create an outgoing socket. timeout is in milliseconds.
824 **************************************************************************/
825
826 struct tevent_req *open_socket_out_send(TALLOC_CTX *mem_ctx,
827                                         struct event_context *ev,
828                                         const struct sockaddr_storage *pss,
829                                         uint16_t port,
830                                         int timeout)
831 {
832         char addr[INET6_ADDRSTRLEN];
833         struct tevent_req *result, *subreq;
834         struct open_socket_out_state *state;
835         NTSTATUS status;
836
837         result = tevent_req_create(mem_ctx, &state,
838                                    struct open_socket_out_state);
839         if (result == NULL) {
840                 return NULL;
841         }
842         state->ev = ev;
843         state->ss = *pss;
844         state->port = port;
845         state->wait_nsec = 10000;
846         state->salen = -1;
847
848         state->fd = socket(state->ss.ss_family, SOCK_STREAM, 0);
849         if (state->fd == -1) {
850                 status = map_nt_error_from_unix(errno);
851                 goto post_status;
852         }
853         talloc_set_destructor(state, open_socket_out_state_destructor);
854
855         if (!tevent_req_set_endtime(
856                     result, ev, timeval_current_ofs(0, timeout*1000))) {
857                 goto fail;
858         }
859
860 #if defined(HAVE_IPV6)
861         if (pss->ss_family == AF_INET6) {
862                 struct sockaddr_in6 *psa6;
863                 psa6 = (struct sockaddr_in6 *)&state->ss;
864                 psa6->sin6_port = htons(port);
865                 if (psa6->sin6_scope_id == 0
866                     && IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
867                         setup_linklocal_scope_id(
868                                 (struct sockaddr *)&(state->ss));
869                 }
870                 state->salen = sizeof(struct sockaddr_in6);
871         }
872 #endif
873         if (pss->ss_family == AF_INET) {
874                 struct sockaddr_in *psa;
875                 psa = (struct sockaddr_in *)&state->ss;
876                 psa->sin_port = htons(port);
877                 state->salen = sizeof(struct sockaddr_in);
878         }
879
880         if (pss->ss_family == AF_UNIX) {
881                 state->salen = sizeof(struct sockaddr_un);
882         }
883
884         print_sockaddr(addr, sizeof(addr), &state->ss);
885         DEBUG(3,("Connecting to %s at port %u\n", addr, (unsigned int)port));
886
887         subreq = async_connect_send(state, state->ev, state->fd,
888                                     (struct sockaddr *)&state->ss,
889                                     state->salen);
890         if ((subreq == NULL)
891             || !tevent_req_set_endtime(
892                     subreq, state->ev,
893                     timeval_current_ofs(0, state->wait_nsec))) {
894                 goto fail;
895         }
896         tevent_req_set_callback(subreq, open_socket_out_connected, result);
897         return result;
898
899  post_status:
900         tevent_req_nterror(result, status);
901         return tevent_req_post(result, ev);
902  fail:
903         TALLOC_FREE(result);
904         return NULL;
905 }
906
907 static void open_socket_out_connected(struct tevent_req *subreq)
908 {
909         struct tevent_req *req =
910                 tevent_req_callback_data(subreq, struct tevent_req);
911         struct open_socket_out_state *state =
912                 tevent_req_data(req, struct open_socket_out_state);
913         int ret;
914         int sys_errno;
915
916         ret = async_connect_recv(subreq, &sys_errno);
917         TALLOC_FREE(subreq);
918         if (ret == 0) {
919                 tevent_req_done(req);
920                 return;
921         }
922
923         if (
924 #ifdef ETIMEDOUT
925                 (sys_errno == ETIMEDOUT) ||
926 #endif
927                 (sys_errno == EINPROGRESS) ||
928                 (sys_errno == EALREADY) ||
929                 (sys_errno == EAGAIN)) {
930
931                 /*
932                  * retry
933                  */
934
935                 if (state->wait_nsec < 250000) {
936                         state->wait_nsec *= 1.5;
937                 }
938
939                 subreq = async_connect_send(state, state->ev, state->fd,
940                                             (struct sockaddr *)&state->ss,
941                                             state->salen);
942                 if (tevent_req_nomem(subreq, req)) {
943                         return;
944                 }
945                 if (!tevent_req_set_endtime(
946                             subreq, state->ev,
947                             timeval_current_ofs(0, state->wait_nsec))) {
948                         tevent_req_nterror(req, NT_STATUS_NO_MEMORY);
949                         return;
950                 }
951                 tevent_req_set_callback(subreq, open_socket_out_connected, req);
952                 return;
953         }
954
955 #ifdef EISCONN
956         if (sys_errno == EISCONN) {
957                 tevent_req_done(req);
958                 return;
959         }
960 #endif
961
962         /* real error */
963         tevent_req_nterror(req, map_nt_error_from_unix(sys_errno));
964 }
965
966 NTSTATUS open_socket_out_recv(struct tevent_req *req, int *pfd)
967 {
968         struct open_socket_out_state *state =
969                 tevent_req_data(req, struct open_socket_out_state);
970         NTSTATUS status;
971
972         if (tevent_req_is_nterror(req, &status)) {
973                 return status;
974         }
975         *pfd = state->fd;
976         state->fd = -1;
977         return NT_STATUS_OK;
978 }
979
980 NTSTATUS open_socket_out(const struct sockaddr_storage *pss, uint16_t port,
981                          int timeout, int *pfd)
982 {
983         TALLOC_CTX *frame = talloc_stackframe();
984         struct event_context *ev;
985         struct tevent_req *req;
986         NTSTATUS status = NT_STATUS_NO_MEMORY;
987
988         ev = event_context_init(frame);
989         if (ev == NULL) {
990                 goto fail;
991         }
992
993         req = open_socket_out_send(frame, ev, pss, port, timeout);
994         if (req == NULL) {
995                 goto fail;
996         }
997         if (!tevent_req_poll(req, ev)) {
998                 status = NT_STATUS_INTERNAL_ERROR;
999                 goto fail;
1000         }
1001         status = open_socket_out_recv(req, pfd);
1002  fail:
1003         TALLOC_FREE(frame);
1004         return status;
1005 }
1006
1007 struct open_socket_out_defer_state {
1008         struct event_context *ev;
1009         struct sockaddr_storage ss;
1010         uint16_t port;
1011         int timeout;
1012         int fd;
1013 };
1014
1015 static void open_socket_out_defer_waited(struct tevent_req *subreq);
1016 static void open_socket_out_defer_connected(struct tevent_req *subreq);
1017
1018 struct tevent_req *open_socket_out_defer_send(TALLOC_CTX *mem_ctx,
1019                                               struct event_context *ev,
1020                                               struct timeval wait_time,
1021                                               const struct sockaddr_storage *pss,
1022                                               uint16_t port,
1023                                               int timeout)
1024 {
1025         struct tevent_req *req, *subreq;
1026         struct open_socket_out_defer_state *state;
1027
1028         req = tevent_req_create(mem_ctx, &state,
1029                                 struct open_socket_out_defer_state);
1030         if (req == NULL) {
1031                 return NULL;
1032         }
1033         state->ev = ev;
1034         state->ss = *pss;
1035         state->port = port;
1036         state->timeout = timeout;
1037
1038         subreq = tevent_wakeup_send(
1039                 state, ev,
1040                 timeval_current_ofs(wait_time.tv_sec, wait_time.tv_usec));
1041         if (subreq == NULL) {
1042                 goto fail;
1043         }
1044         tevent_req_set_callback(subreq, open_socket_out_defer_waited, req);
1045         return req;
1046  fail:
1047         TALLOC_FREE(req);
1048         return NULL;
1049 }
1050
1051 static void open_socket_out_defer_waited(struct tevent_req *subreq)
1052 {
1053         struct tevent_req *req = tevent_req_callback_data(
1054                 subreq, struct tevent_req);
1055         struct open_socket_out_defer_state *state = tevent_req_data(
1056                 req, struct open_socket_out_defer_state);
1057         bool ret;
1058
1059         ret = tevent_wakeup_recv(subreq);
1060         TALLOC_FREE(subreq);
1061         if (!ret) {
1062                 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
1063                 return;
1064         }
1065
1066         subreq = open_socket_out_send(state, state->ev, &state->ss,
1067                                       state->port, state->timeout);
1068         if (tevent_req_nomem(subreq, req)) {
1069                 return;
1070         }
1071         tevent_req_set_callback(subreq, open_socket_out_defer_connected, req);
1072 }
1073
1074 static void open_socket_out_defer_connected(struct tevent_req *subreq)
1075 {
1076         struct tevent_req *req = tevent_req_callback_data(
1077                 subreq, struct tevent_req);
1078         struct open_socket_out_defer_state *state = tevent_req_data(
1079                 req, struct open_socket_out_defer_state);
1080         NTSTATUS status;
1081
1082         status = open_socket_out_recv(subreq, &state->fd);
1083         TALLOC_FREE(subreq);
1084         if (!NT_STATUS_IS_OK(status)) {
1085                 tevent_req_nterror(req, status);
1086                 return;
1087         }
1088         tevent_req_done(req);
1089 }
1090
1091 NTSTATUS open_socket_out_defer_recv(struct tevent_req *req, int *pfd)
1092 {
1093         struct open_socket_out_defer_state *state = tevent_req_data(
1094                 req, struct open_socket_out_defer_state);
1095         NTSTATUS status;
1096
1097         if (tevent_req_is_nterror(req, &status)) {
1098                 return status;
1099         }
1100         *pfd = state->fd;
1101         state->fd = -1;
1102         return NT_STATUS_OK;
1103 }
1104
1105 /*******************************************************************
1106  Create an outgoing TCP socket to the first addr that connects.
1107
1108  This is for simultaneous connection attempts to port 445 and 139 of a host
1109  or for simultatneous connection attempts to multiple DCs at once.  We return
1110  a socket fd of the first successful connection.
1111
1112  @param[in] addrs list of Internet addresses and ports to connect to
1113  @param[in] num_addrs number of address/port pairs in the addrs list
1114  @param[in] timeout time after which we stop waiting for a socket connection
1115             to succeed, given in milliseconds
1116  @param[out] fd_index the entry in addrs which we successfully connected to
1117  @param[out] fd fd of the open and connected socket
1118  @return true on a successful connection, false if all connection attempts
1119          failed or we timed out
1120 *******************************************************************/
1121
1122 bool open_any_socket_out(struct sockaddr_storage *addrs, int num_addrs,
1123                          int timeout, int *fd_index, int *fd)
1124 {
1125         int i, resulting_index, res;
1126         int *sockets;
1127         bool good_connect;
1128
1129         fd_set r_fds, wr_fds;
1130         struct timeval tv;
1131         int maxfd;
1132
1133         int connect_loop = 10000; /* 10 milliseconds */
1134
1135         timeout *= 1000;        /* convert to microseconds */
1136
1137         sockets = SMB_MALLOC_ARRAY(int, num_addrs);
1138
1139         if (sockets == NULL)
1140                 return false;
1141
1142         resulting_index = -1;
1143
1144         for (i=0; i<num_addrs; i++)
1145                 sockets[i] = -1;
1146
1147         for (i=0; i<num_addrs; i++) {
1148                 sockets[i] = socket(addrs[i].ss_family, SOCK_STREAM, 0);
1149                 if (sockets[i] < 0)
1150                         goto done;
1151                 set_blocking(sockets[i], false);
1152         }
1153
1154  connect_again:
1155         good_connect = false;
1156
1157         for (i=0; i<num_addrs; i++) {
1158                 const struct sockaddr * a = 
1159                     (const struct sockaddr *)&(addrs[i]);
1160
1161                 if (sockets[i] == -1)
1162                         continue;
1163
1164                 if (sys_connect(sockets[i], a) == 0) {
1165                         /* Rather unlikely as we are non-blocking, but it
1166                          * might actually happen. */
1167                         resulting_index = i;
1168                         goto done;
1169                 }
1170
1171                 if (errno == EINPROGRESS || errno == EALREADY ||
1172 #ifdef EISCONN
1173                         errno == EISCONN ||
1174 #endif
1175                     errno == EAGAIN || errno == EINTR) {
1176                         /* These are the error messages that something is
1177                            progressing. */
1178                         good_connect = true;
1179                 } else if (errno != 0) {
1180                         /* There was a direct error */
1181                         close(sockets[i]);
1182                         sockets[i] = -1;
1183                 }
1184         }
1185
1186         if (!good_connect) {
1187                 /* All of the connect's resulted in real error conditions */
1188                 goto done;
1189         }
1190
1191         /* Lets see if any of the connect attempts succeeded */
1192
1193         maxfd = 0;
1194         FD_ZERO(&wr_fds);
1195         FD_ZERO(&r_fds);
1196
1197         for (i=0; i<num_addrs; i++) {
1198                 if (sockets[i] == -1)
1199                         continue;
1200                 FD_SET(sockets[i], &wr_fds);
1201                 FD_SET(sockets[i], &r_fds);
1202                 if (sockets[i]>maxfd)
1203                         maxfd = sockets[i];
1204         }
1205
1206         tv.tv_sec = 0;
1207         tv.tv_usec = connect_loop;
1208
1209         res = sys_select_intr(maxfd+1, &r_fds, &wr_fds, NULL, &tv);
1210
1211         if (res < 0)
1212                 goto done;
1213
1214         if (res == 0)
1215                 goto next_round;
1216
1217         for (i=0; i<num_addrs; i++) {
1218
1219                 if (sockets[i] == -1)
1220                         continue;
1221
1222                 /* Stevens, Network Programming says that if there's a
1223                  * successful connect, the socket is only writable. Upon an
1224                  * error, it's both readable and writable. */
1225
1226                 if (FD_ISSET(sockets[i], &r_fds) &&
1227                     FD_ISSET(sockets[i], &wr_fds)) {
1228                         /* readable and writable, so it's an error */
1229                         close(sockets[i]);
1230                         sockets[i] = -1;
1231                         continue;
1232                 }
1233
1234                 if (!FD_ISSET(sockets[i], &r_fds) &&
1235                     FD_ISSET(sockets[i], &wr_fds)) {
1236                         /* Only writable, so it's connected */
1237                         resulting_index = i;
1238                         goto done;
1239                 }
1240         }
1241
1242  next_round:
1243
1244         timeout -= connect_loop;
1245         if (timeout <= 0)
1246                 goto done;
1247         connect_loop *= 1.5;
1248         if (connect_loop > timeout)
1249                 connect_loop = timeout;
1250         goto connect_again;
1251
1252  done:
1253         for (i=0; i<num_addrs; i++) {
1254                 if (i == resulting_index)
1255                         continue;
1256                 if (sockets[i] >= 0)
1257                         close(sockets[i]);
1258         }
1259
1260         if (resulting_index >= 0) {
1261                 *fd_index = resulting_index;
1262                 *fd = sockets[*fd_index];
1263                 set_blocking(*fd, true);
1264         }
1265
1266         free(sockets);
1267
1268         return (resulting_index >= 0);
1269 }
1270 /****************************************************************************
1271  Open a connected UDP socket to host on port
1272 **************************************************************************/
1273
1274 int open_udp_socket(const char *host, int port)
1275 {
1276         struct sockaddr_storage ss;
1277         int res;
1278
1279         if (!interpret_string_addr(&ss, host, 0)) {
1280                 DEBUG(10,("open_udp_socket: can't resolve name %s\n",
1281                         host));
1282                 return -1;
1283         }
1284
1285         res = socket(ss.ss_family, SOCK_DGRAM, 0);
1286         if (res == -1) {
1287                 return -1;
1288         }
1289
1290 #if defined(HAVE_IPV6)
1291         if (ss.ss_family == AF_INET6) {
1292                 struct sockaddr_in6 *psa6;
1293                 psa6 = (struct sockaddr_in6 *)&ss;
1294                 psa6->sin6_port = htons(port);
1295                 if (psa6->sin6_scope_id == 0
1296                                 && IN6_IS_ADDR_LINKLOCAL(&psa6->sin6_addr)) {
1297                         setup_linklocal_scope_id(
1298                                 (struct sockaddr *)&ss);
1299                 }
1300         }
1301 #endif
1302         if (ss.ss_family == AF_INET) {
1303                 struct sockaddr_in *psa;
1304                 psa = (struct sockaddr_in *)&ss;
1305                 psa->sin_port = htons(port);
1306         }
1307
1308         if (sys_connect(res,(struct sockaddr *)&ss)) {
1309                 close(res);
1310                 return -1;
1311         }
1312
1313         return res;
1314 }
1315
1316 /*******************************************************************
1317  Return the IP addr of the remote end of a socket as a string.
1318  Optionally return the struct sockaddr_storage.
1319  ******************************************************************/
1320
1321 static const char *get_peer_addr_internal(int fd,
1322                                 char *addr_buf,
1323                                 size_t addr_buf_len,
1324                                 struct sockaddr *pss,
1325                                 socklen_t *plength)
1326 {
1327         struct sockaddr_storage ss;
1328         socklen_t length = sizeof(ss);
1329
1330         strlcpy(addr_buf,"0.0.0.0",addr_buf_len);
1331
1332         if (fd == -1) {
1333                 return addr_buf;
1334         }
1335
1336         if (pss == NULL) {
1337                 pss = (struct sockaddr *)&ss;
1338                 plength = &length;
1339         }
1340
1341         if (getpeername(fd, (struct sockaddr *)pss, plength) < 0) {
1342                 int level = (errno == ENOTCONN) ? 2 : 0;
1343                 DEBUG(level, ("getpeername failed. Error was %s\n",
1344                                strerror(errno)));
1345                 return addr_buf;
1346         }
1347
1348         print_sockaddr_len(addr_buf,
1349                         addr_buf_len,
1350                         pss,
1351                         *plength);
1352         return addr_buf;
1353 }
1354
1355 /*******************************************************************
1356  Matchname - determine if host name matches IP address. Used to
1357  confirm a hostname lookup to prevent spoof attacks.
1358 ******************************************************************/
1359
1360 static bool matchname(const char *remotehost,
1361                 const struct sockaddr *pss,
1362                 socklen_t len)
1363 {
1364         struct addrinfo *res = NULL;
1365         struct addrinfo *ailist = NULL;
1366         char addr_buf[INET6_ADDRSTRLEN];
1367         bool ret = interpret_string_addr_internal(&ailist,
1368                         remotehost,
1369                         AI_ADDRCONFIG|AI_CANONNAME);
1370
1371         if (!ret || ailist == NULL) {
1372                 DEBUG(3,("matchname: getaddrinfo failed for "
1373                         "name %s [%s]\n",
1374                         remotehost,
1375                         gai_strerror(ret) ));
1376                 return false;
1377         }
1378
1379         /*
1380          * Make sure that getaddrinfo() returns the "correct" host name.
1381          */
1382
1383         if (ailist->ai_canonname == NULL ||
1384                 (!strequal(remotehost, ailist->ai_canonname) &&
1385                  !strequal(remotehost, "localhost"))) {
1386                 DEBUG(0,("matchname: host name/name mismatch: %s != %s\n",
1387                          remotehost,
1388                          ailist->ai_canonname ?
1389                                  ailist->ai_canonname : "(NULL)"));
1390                 freeaddrinfo(ailist);
1391                 return false;
1392         }
1393
1394         /* Look up the host address in the address list we just got. */
1395         for (res = ailist; res; res = res->ai_next) {
1396                 if (!res->ai_addr) {
1397                         continue;
1398                 }
1399                 if (sockaddr_equal((const struct sockaddr *)res->ai_addr,
1400                                         (struct sockaddr *)pss)) {
1401                         freeaddrinfo(ailist);
1402                         return true;
1403                 }
1404         }
1405
1406         /*
1407          * The host name does not map to the original host address. Perhaps
1408          * someone has compromised a name server. More likely someone botched
1409          * it, but that could be dangerous, too.
1410          */
1411
1412         DEBUG(0,("matchname: host name/address mismatch: %s != %s\n",
1413                 print_sockaddr_len(addr_buf,
1414                         sizeof(addr_buf),
1415                         pss,
1416                         len),
1417                  ailist->ai_canonname ? ailist->ai_canonname : "(NULL)"));
1418
1419         if (ailist) {
1420                 freeaddrinfo(ailist);
1421         }
1422         return false;
1423 }
1424
1425 /*******************************************************************
1426  Deal with the singleton cache.
1427 ******************************************************************/
1428
1429 struct name_addr_pair {
1430         struct sockaddr_storage ss;
1431         const char *name;
1432 };
1433
1434 /*******************************************************************
1435  Lookup a name/addr pair. Returns memory allocated from memcache.
1436 ******************************************************************/
1437
1438 static bool lookup_nc(struct name_addr_pair *nc)
1439 {
1440         DATA_BLOB tmp;
1441
1442         ZERO_STRUCTP(nc);
1443
1444         if (!memcache_lookup(
1445                         NULL, SINGLETON_CACHE,
1446                         data_blob_string_const_null("get_peer_name"),
1447                         &tmp)) {
1448                 return false;
1449         }
1450
1451         memcpy(&nc->ss, tmp.data, sizeof(nc->ss));
1452         nc->name = (const char *)tmp.data + sizeof(nc->ss);
1453         return true;
1454 }
1455
1456 /*******************************************************************
1457  Save a name/addr pair.
1458 ******************************************************************/
1459
1460 static void store_nc(const struct name_addr_pair *nc)
1461 {
1462         DATA_BLOB tmp;
1463         size_t namelen = strlen(nc->name);
1464
1465         tmp = data_blob(NULL, sizeof(nc->ss) + namelen + 1);
1466         if (!tmp.data) {
1467                 return;
1468         }
1469         memcpy(tmp.data, &nc->ss, sizeof(nc->ss));
1470         memcpy(tmp.data+sizeof(nc->ss), nc->name, namelen+1);
1471
1472         memcache_add(NULL, SINGLETON_CACHE,
1473                         data_blob_string_const_null("get_peer_name"),
1474                         tmp);
1475         data_blob_free(&tmp);
1476 }
1477
1478 /*******************************************************************
1479  Return the DNS name of the remote end of a socket.
1480 ******************************************************************/
1481
1482 const char *get_peer_name(int fd, bool force_lookup)
1483 {
1484         struct name_addr_pair nc;
1485         char addr_buf[INET6_ADDRSTRLEN];
1486         struct sockaddr_storage ss;
1487         socklen_t length = sizeof(ss);
1488         const char *p;
1489         int ret;
1490         char name_buf[MAX_DNS_NAME_LENGTH];
1491         char tmp_name[MAX_DNS_NAME_LENGTH];
1492
1493         /* reverse lookups can be *very* expensive, and in many
1494            situations won't work because many networks don't link dhcp
1495            with dns. To avoid the delay we avoid the lookup if
1496            possible */
1497         if (!lp_hostname_lookups() && (force_lookup == false)) {
1498                 length = sizeof(nc.ss);
1499                 nc.name = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf),
1500                         (struct sockaddr *)&nc.ss, &length);
1501                 store_nc(&nc);
1502                 lookup_nc(&nc);
1503                 return nc.name ? nc.name : "UNKNOWN";
1504         }
1505
1506         lookup_nc(&nc);
1507
1508         memset(&ss, '\0', sizeof(ss));
1509         p = get_peer_addr_internal(fd, addr_buf, sizeof(addr_buf), (struct sockaddr *)&ss, &length);
1510
1511         /* it might be the same as the last one - save some DNS work */
1512         if (sockaddr_equal((struct sockaddr *)&ss, (struct sockaddr *)&nc.ss)) {
1513                 return nc.name ? nc.name : "UNKNOWN";
1514         }
1515
1516         /* Not the same. We need to lookup. */
1517         if (fd == -1) {
1518                 return "UNKNOWN";
1519         }
1520
1521         /* Look up the remote host name. */
1522         ret = sys_getnameinfo((struct sockaddr *)&ss,
1523                         length,
1524                         name_buf,
1525                         sizeof(name_buf),
1526                         NULL,
1527                         0,
1528                         0);
1529
1530         if (ret) {
1531                 DEBUG(1,("get_peer_name: getnameinfo failed "
1532                         "for %s with error %s\n",
1533                         p,
1534                         gai_strerror(ret)));
1535                 strlcpy(name_buf, p, sizeof(name_buf));
1536         } else {
1537                 if (!matchname(name_buf, (struct sockaddr *)&ss, length)) {
1538                         DEBUG(0,("Matchname failed on %s %s\n",name_buf,p));
1539                         strlcpy(name_buf,"UNKNOWN",sizeof(name_buf));
1540                 }
1541         }
1542
1543         /* can't pass the same source and dest strings in when you
1544            use --enable-developer or the clobber_region() call will
1545            get you */
1546
1547         strlcpy(tmp_name, name_buf, sizeof(tmp_name));
1548         alpha_strcpy(name_buf, tmp_name, "_-.", sizeof(name_buf));
1549         if (strstr(name_buf,"..")) {
1550                 strlcpy(name_buf, "UNKNOWN", sizeof(name_buf));
1551         }
1552
1553         nc.name = name_buf;
1554         nc.ss = ss;
1555
1556         store_nc(&nc);
1557         lookup_nc(&nc);
1558         return nc.name ? nc.name : "UNKNOWN";
1559 }
1560
1561 /*******************************************************************
1562  Return the IP addr of the remote end of a socket as a string.
1563  ******************************************************************/
1564
1565 const char *get_peer_addr(int fd, char *addr, size_t addr_len)
1566 {
1567         return get_peer_addr_internal(fd, addr, addr_len, NULL, NULL);
1568 }
1569
1570 /*******************************************************************
1571  Create protected unix domain socket.
1572
1573  Some unixes cannot set permissions on a ux-dom-sock, so we
1574  have to make sure that the directory contains the protection
1575  permissions instead.
1576  ******************************************************************/
1577
1578 int create_pipe_sock(const char *socket_dir,
1579                      const char *socket_name,
1580                      mode_t dir_perms)
1581 {
1582 #ifdef HAVE_UNIXSOCKET
1583         struct sockaddr_un sunaddr;
1584         struct stat st;
1585         int sock;
1586         mode_t old_umask;
1587         char *path = NULL;
1588
1589         old_umask = umask(0);
1590
1591         /* Create the socket directory or reuse the existing one */
1592
1593         if (lstat(socket_dir, &st) == -1) {
1594                 if (errno == ENOENT) {
1595                         /* Create directory */
1596                         if (mkdir(socket_dir, dir_perms) == -1) {
1597                                 DEBUG(0, ("error creating socket directory "
1598                                         "%s: %s\n", socket_dir,
1599                                         strerror(errno)));
1600                                 goto out_umask;
1601                         }
1602                 } else {
1603                         DEBUG(0, ("lstat failed on socket directory %s: %s\n",
1604                                 socket_dir, strerror(errno)));
1605                         goto out_umask;
1606                 }
1607         } else {
1608                 /* Check ownership and permission on existing directory */
1609                 if (!S_ISDIR(st.st_mode)) {
1610                         DEBUG(0, ("socket directory %s isn't a directory\n",
1611                                 socket_dir));
1612                         goto out_umask;
1613                 }
1614                 if ((st.st_uid != sec_initial_uid()) ||
1615                                 ((st.st_mode & 0777) != dir_perms)) {
1616                         DEBUG(0, ("invalid permissions on socket directory "
1617                                 "%s\n", socket_dir));
1618                         goto out_umask;
1619                 }
1620         }
1621
1622         /* Create the socket file */
1623
1624         sock = socket(AF_UNIX, SOCK_STREAM, 0);
1625
1626         if (sock == -1) {
1627                 DEBUG(0, ("create_pipe_sock: socket error %s\n",
1628                         strerror(errno) ));
1629                 goto out_close;
1630         }
1631
1632         if (asprintf(&path, "%s/%s", socket_dir, socket_name) == -1) {
1633                 goto out_close;
1634         }
1635
1636         unlink(path);
1637         memset(&sunaddr, 0, sizeof(sunaddr));
1638         sunaddr.sun_family = AF_UNIX;
1639         strlcpy(sunaddr.sun_path, path, sizeof(sunaddr.sun_path));
1640
1641         if (bind(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) == -1) {
1642                 DEBUG(0, ("bind failed on pipe socket %s: %s\n", path,
1643                         strerror(errno)));
1644                 goto out_close;
1645         }
1646
1647         if (listen(sock, 5) == -1) {
1648                 DEBUG(0, ("listen failed on pipe socket %s: %s\n", path,
1649                         strerror(errno)));
1650                 goto out_close;
1651         }
1652
1653         SAFE_FREE(path);
1654
1655         umask(old_umask);
1656         return sock;
1657
1658 out_close:
1659         SAFE_FREE(path);
1660         if (sock != -1)
1661                 close(sock);
1662
1663 out_umask:
1664         umask(old_umask);
1665         return -1;
1666
1667 #else
1668         DEBUG(0, ("create_pipe_sock: No Unix sockets on this system\n"));
1669         return -1;
1670 #endif /* HAVE_UNIXSOCKET */
1671 }
1672
1673 /****************************************************************************
1674  Get my own canonical name, including domain.
1675 ****************************************************************************/
1676
1677 const char *get_mydnsfullname(void)
1678 {
1679         struct addrinfo *res = NULL;
1680         char my_hostname[HOST_NAME_MAX];
1681         bool ret;
1682         DATA_BLOB tmp;
1683
1684         if (memcache_lookup(NULL, SINGLETON_CACHE,
1685                         data_blob_string_const_null("get_mydnsfullname"),
1686                         &tmp)) {
1687                 SMB_ASSERT(tmp.length > 0);
1688                 return (const char *)tmp.data;
1689         }
1690
1691         /* get my host name */
1692         if (gethostname(my_hostname, sizeof(my_hostname)) == -1) {
1693                 DEBUG(0,("get_mydnsfullname: gethostname failed\n"));
1694                 return NULL;
1695         }
1696
1697         /* Ensure null termination. */
1698         my_hostname[sizeof(my_hostname)-1] = '\0';
1699
1700         ret = interpret_string_addr_internal(&res,
1701                                 my_hostname,
1702                                 AI_ADDRCONFIG|AI_CANONNAME);
1703
1704         if (!ret || res == NULL) {
1705                 DEBUG(3,("get_mydnsfullname: getaddrinfo failed for "
1706                         "name %s [%s]\n",
1707                         my_hostname,
1708                         gai_strerror(ret) ));
1709                 return NULL;
1710         }
1711
1712         /*
1713          * Make sure that getaddrinfo() returns the "correct" host name.
1714          */
1715
1716         if (res->ai_canonname == NULL) {
1717                 DEBUG(3,("get_mydnsfullname: failed to get "
1718                         "canonical name for %s\n",
1719                         my_hostname));
1720                 freeaddrinfo(res);
1721                 return NULL;
1722         }
1723
1724         /* This copies the data, so we must do a lookup
1725          * afterwards to find the value to return.
1726          */
1727
1728         memcache_add(NULL, SINGLETON_CACHE,
1729                         data_blob_string_const_null("get_mydnsfullname"),
1730                         data_blob_string_const_null(res->ai_canonname));
1731
1732         if (!memcache_lookup(NULL, SINGLETON_CACHE,
1733                         data_blob_string_const_null("get_mydnsfullname"),
1734                         &tmp)) {
1735                 tmp = data_blob_talloc(talloc_tos(), res->ai_canonname,
1736                                 strlen(res->ai_canonname) + 1);
1737         }
1738
1739         freeaddrinfo(res);
1740
1741         return (const char *)tmp.data;
1742 }
1743
1744 /************************************************************
1745  Is this my name ?
1746 ************************************************************/
1747
1748 bool is_myname_or_ipaddr(const char *s)
1749 {
1750         TALLOC_CTX *ctx = talloc_tos();
1751         char addr[INET6_ADDRSTRLEN];
1752         char *name = NULL;
1753         const char *dnsname;
1754         char *servername = NULL;
1755
1756         if (!s) {
1757                 return false;
1758         }
1759
1760         /* Santize the string from '\\name' */
1761         name = talloc_strdup(ctx, s);
1762         if (!name) {
1763                 return false;
1764         }
1765
1766         servername = strrchr_m(name, '\\' );
1767         if (!servername) {
1768                 servername = name;
1769         } else {
1770                 servername++;
1771         }
1772
1773         /* Optimize for the common case */
1774         if (strequal(servername, global_myname())) {
1775                 return true;
1776         }
1777
1778         /* Check for an alias */
1779         if (is_myname(servername)) {
1780                 return true;
1781         }
1782
1783         /* Check for loopback */
1784         if (strequal(servername, "127.0.0.1") ||
1785                         strequal(servername, "::1")) {
1786                 return true;
1787         }
1788
1789         if (strequal(servername, "localhost")) {
1790                 return true;
1791         }
1792
1793         /* Maybe it's my dns name */
1794         dnsname = get_mydnsfullname();
1795         if (dnsname && strequal(servername, dnsname)) {
1796                 return true;
1797         }
1798
1799         /* Handle possible CNAME records - convert to an IP addr. */
1800         if (!is_ipaddress(servername)) {
1801                 /* Use DNS to resolve the name, but only the first address */
1802                 struct sockaddr_storage ss;
1803                 if (interpret_string_addr(&ss, servername, 0)) {
1804                         print_sockaddr(addr,
1805                                         sizeof(addr),
1806                                         &ss);
1807                         servername = addr;
1808                 }
1809         }
1810
1811         /* Maybe its an IP address? */
1812         if (is_ipaddress(servername)) {
1813                 struct sockaddr_storage ss;
1814                 struct iface_struct *nics;
1815                 int i, n;
1816
1817                 if (!interpret_string_addr(&ss, servername, AI_NUMERICHOST)) {
1818                         return false;
1819                 }
1820
1821                 if (ismyaddr((struct sockaddr *)&ss)) {
1822                         return true;
1823                 }
1824
1825                 if (is_zero_addr((struct sockaddr *)&ss) || 
1826                         is_loopback_addr((struct sockaddr *)&ss)) {
1827                         return false;
1828                 }
1829
1830                 n = get_interfaces(talloc_tos(), &nics);
1831                 for (i=0; i<n; i++) {
1832                         if (sockaddr_equal((struct sockaddr *)&nics[i].ip, (struct sockaddr *)&ss)) {
1833                                 TALLOC_FREE(nics);
1834                                 return true;
1835                         }
1836                 }
1837                 TALLOC_FREE(nics);
1838         }
1839
1840         /* No match */
1841         return false;
1842 }
1843
1844 struct getaddrinfo_state {
1845         const char *node;
1846         const char *service;
1847         const struct addrinfo *hints;
1848         struct addrinfo *res;
1849         int ret;
1850 };
1851
1852 static void getaddrinfo_do(void *private_data);
1853 static void getaddrinfo_done(struct tevent_req *subreq);
1854
1855 struct tevent_req *getaddrinfo_send(TALLOC_CTX *mem_ctx,
1856                                     struct tevent_context *ev,
1857                                     struct fncall_context *ctx,
1858                                     const char *node,
1859                                     const char *service,
1860                                     const struct addrinfo *hints)
1861 {
1862         struct tevent_req *req, *subreq;
1863         struct getaddrinfo_state *state;
1864
1865         req = tevent_req_create(mem_ctx, &state, struct getaddrinfo_state);
1866         if (req == NULL) {
1867                 return NULL;
1868         }
1869
1870         state->node = node;
1871         state->service = service;
1872         state->hints = hints;
1873
1874         subreq = fncall_send(state, ev, ctx, getaddrinfo_do, state);
1875         if (tevent_req_nomem(subreq, req)) {
1876                 return tevent_req_post(req, ev);
1877         }
1878         tevent_req_set_callback(subreq, getaddrinfo_done, req);
1879         return req;
1880 }
1881
1882 static void getaddrinfo_do(void *private_data)
1883 {
1884         struct getaddrinfo_state *state =
1885                 (struct getaddrinfo_state *)private_data;
1886
1887         state->ret = getaddrinfo(state->node, state->service, state->hints,
1888                                  &state->res);
1889 }
1890
1891 static void getaddrinfo_done(struct tevent_req *subreq)
1892 {
1893         struct tevent_req *req = tevent_req_callback_data(
1894                 subreq, struct tevent_req);
1895         int ret, err;
1896
1897         ret = fncall_recv(subreq, &err);
1898         TALLOC_FREE(subreq);
1899         if (ret == -1) {
1900                 tevent_req_error(req, err);
1901                 return;
1902         }
1903         tevent_req_done(req);
1904 }
1905
1906 int getaddrinfo_recv(struct tevent_req *req, struct addrinfo **res)
1907 {
1908         struct getaddrinfo_state *state = tevent_req_data(
1909                 req, struct getaddrinfo_state);
1910         int err;
1911
1912         if (tevent_req_is_unix_error(req, &err)) {
1913                 switch(err) {
1914                 case ENOMEM:
1915                         return EAI_MEMORY;
1916                 default:
1917                         return EAI_FAIL;
1918                 }
1919         }
1920         if (state->ret == 0) {
1921                 *res = state->res;
1922         }
1923         return state->ret;
1924 }