s3: only include smb profiling where needed.
[nivanova/samba-autobuild/.git] / source3 / smbd / reply.c
index 0355cb708333bbf3c21074ad7f90eff65a22c478..96595223a60ad2b08f6a5b77d43d873bff3ef359 100644 (file)
 */
 
 #include "includes.h"
+#include "system/filesys.h"
+#include "printing.h"
+#include "smbd/smbd.h"
 #include "smbd/globals.h"
+#include "fake_file.h"
+#include "rpc_client/rpc_client.h"
+#include "../librpc/gen_ndr/ndr_spoolss_c.h"
+#include "rpc_client/cli_spoolss.h"
+#include "rpc_client/init_spoolss.h"
+#include "rpc_server/rpc_ncacn_np.h"
+#include "libcli/security/security.h"
+#include "libsmb/nmblib.h"
+#include "auth.h"
+#include "smbprofile.h"
 
 /****************************************************************************
  Ensure we check the path in *exactly* the same way as W2K for a findfirst/findnext
@@ -322,11 +335,11 @@ size_t srvstr_get_path_req(TALLOC_CTX *mem_ctx, struct smb_request *req,
 bool check_fsp_open(connection_struct *conn, struct smb_request *req,
                    files_struct *fsp)
 {
-       if (!(fsp) || !(conn)) {
+       if ((fsp == NULL) || (conn == NULL)) {
                reply_nterror(req, NT_STATUS_INVALID_HANDLE);
                return False;
        }
-       if (((conn) != (fsp)->conn) || req->vuid != (fsp)->vuid) {
+       if ((conn != fsp->conn) || (req->vuid != fsp->vuid)) {
                reply_nterror(req, NT_STATUS_INVALID_HANDLE);
                return False;
        }
@@ -343,15 +356,15 @@ bool check_fsp(connection_struct *conn, struct smb_request *req,
        if (!check_fsp_open(conn, req, fsp)) {
                return False;
        }
-       if ((fsp)->is_directory) {
+       if (fsp->is_directory) {
                reply_nterror(req, NT_STATUS_INVALID_DEVICE_REQUEST);
                return False;
        }
-       if ((fsp)->fh->fd == -1) {
+       if (fsp->fh->fd == -1) {
                reply_nterror(req, NT_STATUS_ACCESS_DENIED);
                return False;
        }
-       (fsp)->num_smb_operations++;
+       fsp->num_smb_operations++;
        return True;
 }
 
@@ -386,23 +399,8 @@ bool check_fsp_ntquota_handle(connection_struct *conn, struct smb_request *req,
        return true;
 }
 
-/****************************************************************************
- Check if we have a correct fsp. Replacement for the FSP_BELONGS_CONN macro
-****************************************************************************/
-
-bool fsp_belongs_conn(connection_struct *conn, struct smb_request *req,
-                     files_struct *fsp)
-{
-       if ((fsp) && (conn) && ((conn)==(fsp)->conn)
-           && (req->vuid == (fsp)->vuid)) {
-               return True;
-       }
-
-       reply_nterror(req, NT_STATUS_INVALID_HANDLE);
-       return False;
-}
-
-static bool netbios_session_retarget(const char *name, int name_type)
+static bool netbios_session_retarget(struct smbd_server_connection *sconn,
+                                    const char *name, int name_type)
 {
        char *trim_name;
        char *trim_name_type;
@@ -416,7 +414,7 @@ static bool netbios_session_retarget(const char *name, int name_type)
        bool ret = false;
        uint8_t outbuf[10];
 
-       if (get_socket_port(smbd_server_fd()) != 139) {
+       if (get_socket_port(sconn->sock) != 139) {
                return false;
        }
 
@@ -479,7 +477,7 @@ static bool netbios_session_retarget(const char *name, int name_type)
        *(uint32_t *)(outbuf+4) = in_addr->sin_addr.s_addr;
        *(uint16_t *)(outbuf+8) = htons(retarget_port);
 
-       if (!srv_send_smb(smbd_server_fd(), (char *)outbuf, false, 0, false,
+       if (!srv_send_smb(sconn, (char *)outbuf, false, 0, false,
                          NULL)) {
                exit_server_cleanly("netbios_session_regarget: srv_send_smb "
                                    "failed.");
@@ -492,17 +490,13 @@ static bool netbios_session_retarget(const char *name, int name_type)
 }
 
 /****************************************************************************
- Reply to a (netbios-level) special message.
+ Reply to a (netbios-level) special message. 
 ****************************************************************************/
 
-void reply_special(char *inbuf)
+void reply_special(struct smbd_server_connection *sconn, char *inbuf, size_t inbuf_size)
 {
        int msg_type = CVAL(inbuf,0);
        int msg_flags = CVAL(inbuf,1);
-       fstring name1,name2;
-       char name_type1, name_type2;
-       struct smbd_server_connection *sconn = smbd_server_conn;
-
        /*
         * We only really use 4 bytes of the outbuf, but for the smb_setlen
         * calculation & friends (srv_send_smb uses that) we need the full smb
@@ -510,14 +504,19 @@ void reply_special(char *inbuf)
         */
        char outbuf[smb_size];
 
-       *name1 = *name2 = 0;
-
        memset(outbuf, '\0', sizeof(outbuf));
 
        smb_setlen(outbuf,0);
 
        switch (msg_type) {
        case 0x81: /* session request */
+       {
+               /* inbuf_size is guarenteed to be at least 4. */
+               fstring name1,name2;
+               int name_type1, name_type2;
+               int name_len1, name_len2;
+
+               *name1 = *name2 = 0;
 
                if (sconn->nbt.got_session) {
                        exit_server_cleanly("multiple session request not permitted");
@@ -525,20 +524,45 @@ void reply_special(char *inbuf)
 
                SCVAL(outbuf,0,0x82);
                SCVAL(outbuf,3,0);
-               if (name_len(inbuf+4) > 50 || 
-                   name_len(inbuf+4 + name_len(inbuf + 4)) > 50) {
+
+               /* inbuf_size is guaranteed to be at least 4. */
+               name_len1 = name_len((unsigned char *)(inbuf+4),inbuf_size - 4);
+               if (name_len1 <= 0 || name_len1 > inbuf_size - 4) {
                        DEBUG(0,("Invalid name length in session request\n"));
-                       return;
+                       break;
+               }
+               name_len2 = name_len((unsigned char *)(inbuf+4+name_len1),inbuf_size - 4 - name_len1);
+               if (name_len2 <= 0 || name_len2 > inbuf_size - 4 - name_len1) {
+                       DEBUG(0,("Invalid name length in session request\n"));
+                       break;
+               }
+
+               name_type1 = name_extract((unsigned char *)inbuf,
+                               inbuf_size,(unsigned int)4,name1);
+               name_type2 = name_extract((unsigned char *)inbuf,
+                               inbuf_size,(unsigned int)(4 + name_len1),name2);
+
+               if (name_type1 == -1 || name_type2 == -1) {
+                       DEBUG(0,("Invalid name type in session request\n"));
+                       break;
                }
-               name_type1 = name_extract(inbuf,4,name1);
-               name_type2 = name_extract(inbuf,4 + name_len(inbuf + 4),name2);
+
                DEBUG(2,("netbios connect: name1=%s0x%x name2=%s0x%x\n",
                         name1, name_type1, name2, name_type2));
 
-               if (netbios_session_retarget(name1, name_type1)) {
+               if (netbios_session_retarget(sconn, name1, name_type1)) {
                        exit_server_cleanly("retargeted client");
                }
 
+               /*
+                * Windows NT/2k uses "*SMBSERVER" and XP uses
+                * "*SMBSERV" arrggg!!!
+                */
+               if (strequal(name1, "*SMBSERVER     ")
+                   || strequal(name1, "*SMBSERV       "))  {
+                       fstrcpy(name1, sconn->client_id.addr);
+               }
+
                set_local_machine_name(name1, True);
                set_remote_machine_name(name2, True);
 
@@ -560,11 +584,12 @@ void reply_special(char *inbuf)
                        add_session_user(sconn, get_remote_machine_name());
                }
 
-               reload_services(True);
+               reload_services(sconn->msg_ctx, sconn->sock, True);
                reopen_logs();
 
                sconn->nbt.got_session = true;
                break;
+       }
 
        case 0x89: /* session keepalive request 
                      (some old clients produce this?) */
@@ -586,7 +611,7 @@ void reply_special(char *inbuf)
        DEBUG(5,("init msg_type=0x%x msg_flags=0x%x\n",
                    msg_type, msg_flags));
 
-       srv_send_smb(smbd_server_fd(), outbuf, false, 0, false, NULL);
+       srv_send_smb(sconn, outbuf, false, 0, false, NULL);
        return;
 }
 
@@ -607,7 +632,7 @@ void reply_tcon(struct smb_request *req)
        const char *p;
        DATA_BLOB password_blob;
        TALLOC_CTX *ctx = talloc_tos();
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        START_PROFILE(SMBtcon);
 
@@ -683,7 +708,7 @@ void reply_tcon_and_X(struct smb_request *req)
        char *path = NULL;
        const char *p, *q;
        uint16 tcon_flags;
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        START_PROFILE(SMBtconX);
 
@@ -924,7 +949,12 @@ void reply_ioctl(struct smb_request *req)
                                END_PROFILE(SMBioctl);
                                return;
                        }
-                       SSVAL(p,0,fsp->rap_print_jobid);             /* Job number */
+                       /* Job number */
+                       if (fsp->print_file) {
+                               SSVAL(p, 0, fsp->print_file->rap_jobid);
+                       } else {
+                               SSVAL(p, 0, 0);
+                       }
                        srvstr_push((char *)req->outbuf, req->flags2, p+2,
                                    global_myname(), 15,
                                    STR_TERMINATE|STR_ASCII);
@@ -1117,7 +1147,7 @@ void reply_getatr(struct smb_request *req)
 
                        ZERO_STRUCT(write_time_ts);
                        fileid = vfs_file_id_from_sbuf(conn, &smb_fname->st);
-                       get_file_infos(fileid, NULL, &write_time_ts);
+                       get_file_infos(fileid, 0, NULL, &write_time_ts);
                        if (!null_timespec(write_time_ts)) {
                                update_stat_ex_mtime(&smb_fname->st, write_time_ts);
                        }
@@ -1362,7 +1392,7 @@ void reply_search(struct smb_request *req)
        TALLOC_CTX *ctx = talloc_tos();
        bool ask_sharemode = lp_parm_bool(SNUM(conn), "smbd", "search ask sharemode", true);
        struct dptr_struct *dirptr = NULL;
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        START_PROFILE(SMBsearch);
 
@@ -1436,6 +1466,7 @@ void reply_search(struct smb_request *req)
                SCVAL(status,0,(dirtype & 0x1F));
 
                nt_status = dptr_create(conn,
+                                       NULL, /* fsp */
                                        directory,
                                        True,
                                        expect_close,
@@ -1629,7 +1660,7 @@ void reply_fclose(struct smb_request *req)
        NTSTATUS err;
        bool path_contains_wcard = False;
        TALLOC_CTX *ctx = talloc_tos();
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        START_PROFILE(SMBfclose);
 
@@ -1779,7 +1810,7 @@ void reply_open(struct smb_request *req)
                struct timespec write_time_ts;
 
                ZERO_STRUCT(write_time_ts);
-               get_file_infos(fsp->file_id, NULL, &write_time_ts);
+               get_file_infos(fsp->file_id, 0, NULL, &write_time_ts);
                if (!null_timespec(write_time_ts)) {
                        update_stat_ex_mtime(&smb_fname->st, write_time_ts);
                }
@@ -1961,12 +1992,16 @@ void reply_open_and_X(struct smb_request *req)
                        reply_nterror(req, NT_STATUS_DISK_FULL);
                        goto out;
                }
-               smb_fname->st.st_ex_size =
-                   SMB_VFS_GET_ALLOC_SIZE(conn, fsp, &smb_fname->st);
+               status = vfs_stat_fsp(fsp);
+               if (!NT_STATUS_IS_OK(status)) {
+                       close_file(req, fsp, ERROR_CLOSE);
+                       reply_nterror(req, status);
+                       goto out;
+               }
        }
 
-       fattr = dos_mode(conn, smb_fname);
-       mtime = convert_timespec_to_time_t(smb_fname->st.st_ex_mtime);
+       fattr = dos_mode(conn, fsp->fsp_name);
+       mtime = convert_timespec_to_time_t(fsp->fsp_name->st.st_ex_mtime);
        if (fattr & aDIR) {
                close_file(req, fsp, ERROR_CLOSE);
                reply_nterror(req, NT_STATUS_ACCESS_DENIED);
@@ -2014,12 +2049,12 @@ void reply_open_and_X(struct smb_request *req)
        } else {
                srv_put_dos_date3((char *)req->outbuf,smb_vwv4,mtime);
        }
-       SIVAL(req->outbuf,smb_vwv6,(uint32)smb_fname->st.st_ex_size);
+       SIVAL(req->outbuf,smb_vwv6,(uint32)fsp->fsp_name->st.st_ex_size);
        SSVAL(req->outbuf,smb_vwv8,GET_OPENX_MODE(deny_mode));
        SSVAL(req->outbuf,smb_vwv11,smb_action);
 
        if (open_flags & EXTENDED_RESPONSE_REQUIRED) {
-               SIVAL(req->outbuf, smb_vwv15, STD_RIGHT_ALL_ACCESS);
+               SIVAL(req->outbuf, smb_vwv15, SEC_STD_ALL);
        }
 
        chain_reply(req);
@@ -2035,7 +2070,7 @@ void reply_open_and_X(struct smb_request *req)
 
 void reply_ulogoffX(struct smb_request *req)
 {
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
        user_struct *vuser;
 
        START_PROFILE(SMBulogoffX);
@@ -2050,7 +2085,7 @@ void reply_ulogoffX(struct smb_request *req)
        /* in user level security we are supposed to close any files
                open by this user */
        if ((vuser != NULL) && (lp_security() != SEC_SHARE)) {
-               file_close_user(req->vuid);
+               file_close_user(sconn, req->vuid);
        }
 
        invalidate_vuid(sconn, req->vuid);
@@ -2502,7 +2537,7 @@ static NTSTATUS do_unlink(connection_struct *conn,
        }
 
        /* The set is across all open files on this dev/inode pair. */
-       if (!set_delete_on_close(fsp, True, &conn->server_info->utok)) {
+       if (!set_delete_on_close(fsp, True, &conn->session_info->utok)) {
                close_file(req, fsp, NORMAL_CLOSE);
                return NT_STATUS_ACCESS_DENIED;
        }
@@ -2559,10 +2594,17 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                 * onto the directory.
                 */
                TALLOC_FREE(smb_fname->base_name);
-               smb_fname->base_name = talloc_asprintf(smb_fname,
-                                                      "%s/%s",
-                                                      fname_dir,
-                                                      fname_mask);
+               if (ISDOT(fname_dir)) {
+                       /* Ensure we use canonical names on open. */
+                       smb_fname->base_name = talloc_asprintf(smb_fname,
+                                                       "%s",
+                                                       fname_mask);
+               } else {
+                       smb_fname->base_name = talloc_asprintf(smb_fname,
+                                                       "%s/%s",
+                                                       fname_dir,
+                                                       fname_mask);
+               }
                if (!smb_fname->base_name) {
                        status = NT_STATUS_NO_MEMORY;
                        goto out;
@@ -2647,9 +2689,16 @@ NTSTATUS unlink_internals(connection_struct *conn, struct smb_request *req,
                        }
 
                        TALLOC_FREE(smb_fname->base_name);
-                       smb_fname->base_name =
-                           talloc_asprintf(smb_fname, "%s/%s",
-                                           fname_dir, dname);
+                       if (ISDOT(fname_dir)) {
+                               /* Ensure we use canonical names on open. */
+                               smb_fname->base_name =
+                                       talloc_asprintf(smb_fname, "%s",
+                                               dname);
+                       } else {
+                               smb_fname->base_name =
+                                       talloc_asprintf(smb_fname, "%s/%s",
+                                               fname_dir, dname);
+                       }
 
                        if (!smb_fname->base_name) {
                                TALLOC_FREE(dir_hnd);
@@ -2780,8 +2829,7 @@ static void fail_readraw(void)
  Fake (read/write) sendfile. Returns -1 on read or write fail.
 ****************************************************************************/
 
-static ssize_t fake_sendfile(files_struct *fsp, SMB_OFF_T startpos,
-                            size_t nread)
+ssize_t fake_sendfile(files_struct *fsp, SMB_OFF_T startpos, size_t nread)
 {
        size_t bufsize;
        size_t tosend = nread;
@@ -2817,7 +2865,18 @@ static ssize_t fake_sendfile(files_struct *fsp, SMB_OFF_T startpos,
                        memset(buf + ret, '\0', cur_read - ret);
                }
 
-               if (write_data(smbd_server_fd(),buf,cur_read) != cur_read) {
+               if (write_data(fsp->conn->sconn->sock, buf, cur_read)
+                   != cur_read) {
+                       char addr[INET6_ADDRSTRLEN];
+                       /*
+                        * Try and give an error message saying what
+                        * client failed.
+                        */
+                       DEBUG(0, ("write_data failed for client %s. "
+                                 "Error %s\n",
+                                 get_peer_addr(fsp->conn->sconn->sock, addr,
+                                               sizeof(addr)),
+                                 strerror(errno)));
                        SAFE_FREE(buf);
                        return -1;
                }
@@ -2829,13 +2888,12 @@ static ssize_t fake_sendfile(files_struct *fsp, SMB_OFF_T startpos,
        return (ssize_t)nread;
 }
 
-#if defined(WITH_SENDFILE)
 /****************************************************************************
  Deal with the case of sendfile reading less bytes from the file than
  requested. Fill with zeros (all we can do).
 ****************************************************************************/
 
-static void sendfile_short_send(files_struct *fsp,
+void sendfile_short_send(files_struct *fsp,
                                ssize_t nread,
                                size_t headersize,
                                size_t smb_maxcnt)
@@ -2878,32 +2936,53 @@ static void sendfile_short_send(files_struct *fsp,
                        size_t to_write;
 
                        to_write = MIN(SHORT_SEND_BUFSIZE, smb_maxcnt - nread);
-                       if (write_data(smbd_server_fd(), buf, to_write) != to_write) {
+                       if (write_data(fsp->conn->sconn->sock, buf, to_write)
+                           != to_write) {
+                               char addr[INET6_ADDRSTRLEN];
+                               /*
+                                * Try and give an error message saying what
+                                * client failed.
+                                */
+                               DEBUG(0, ("write_data failed for client %s. "
+                                         "Error %s\n",
+                                         get_peer_addr(
+                                                 fsp->conn->sconn->sock, addr,
+                                                 sizeof(addr)),
+                                         strerror(errno)));
                                exit_server_cleanly("sendfile_short_send: "
-                                       "write_data failed");
+                                                   "write_data failed");
                        }
                        nread += to_write;
                }
                SAFE_FREE(buf);
        }
 }
-#endif /* defined WITH_SENDFILE */
 
 /****************************************************************************
  Return a readbraw error (4 bytes of zero).
 ****************************************************************************/
 
-static void reply_readbraw_error(void)
+static void reply_readbraw_error(struct smbd_server_connection *sconn)
 {
        char header[4];
 
        SIVAL(header,0,0);
 
-       smbd_lock_socket(smbd_server_conn);
-       if (write_data(smbd_server_fd(),header,4) != 4) {
+       smbd_lock_socket(sconn);
+       if (write_data(sconn->sock,header,4) != 4) {
+               char addr[INET6_ADDRSTRLEN];
+               /*
+                * Try and give an error message saying what
+                * client failed.
+                */
+               DEBUG(0, ("write_data failed for client %s. "
+                         "Error %s\n",
+                         get_peer_addr(sconn->sock, addr, sizeof(addr)),
+                         strerror(errno)));
+
                fail_readraw();
        }
-       smbd_unlock_socket(smbd_server_conn);
+       smbd_unlock_socket(sconn);
 }
 
 /****************************************************************************
@@ -2917,10 +2996,10 @@ static void send_file_readbraw(connection_struct *conn,
                               size_t nread,
                               ssize_t mincount)
 {
+       struct smbd_server_connection *sconn = req->sconn;
        char *outbuf = NULL;
        ssize_t ret=0;
 
-#if defined(WITH_SENDFILE)
        /*
         * We can only use sendfile on a non-chained packet 
         * but we can use on a non-oplocked file. tridge proved this
@@ -2930,7 +3009,7 @@ static void send_file_readbraw(connection_struct *conn,
 
        if ( !req_is_in_chain(req) && (nread > 0) && (fsp->base_fsp == NULL) &&
            (fsp->wcp == NULL) &&
-           lp_use_sendfile(SNUM(conn), smbd_server_conn->smb1.signing_state) ) {
+           lp_use_sendfile(SNUM(conn), req->sconn->smb1.signing_state) ) {
                ssize_t sendfile_read = -1;
                char header[4];
                DATA_BLOB header_blob;
@@ -2938,8 +3017,10 @@ static void send_file_readbraw(connection_struct *conn,
                _smb_setlen(header,nread);
                header_blob = data_blob_const(header, 4);
 
-               if ((sendfile_read = SMB_VFS_SENDFILE(smbd_server_fd(), fsp,
-                               &header_blob, startpos, nread)) == -1) {
+               sendfile_read = SMB_VFS_SENDFILE(sconn->sock, fsp,
+                                                &header_blob, startpos,
+                                                nread);
+               if (sendfile_read == -1) {
                        /* Returning ENOSYS means no data at all was sent.
                         * Do this as a normal read. */
                        if (errno == ENOSYS) {
@@ -2993,13 +3074,12 @@ static void send_file_readbraw(connection_struct *conn,
        }
 
 normal_readbraw:
-#endif
 
        outbuf = TALLOC_ARRAY(NULL, char, nread+4);
        if (!outbuf) {
                DEBUG(0,("send_file_readbraw: TALLOC_ARRAY failed for size %u.\n",
                        (unsigned)(nread+4)));
-               reply_readbraw_error();
+               reply_readbraw_error(sconn);
                return;
        }
 
@@ -3015,8 +3095,20 @@ normal_readbraw:
        }
 
        _smb_setlen(outbuf,ret);
-       if (write_data(smbd_server_fd(),outbuf,4+ret) != 4+ret)
+       if (write_data(sconn->sock, outbuf, 4+ret) != 4+ret) {
+               char addr[INET6_ADDRSTRLEN];
+               /*
+                * Try and give an error message saying what
+                * client failed.
+                */
+               DEBUG(0, ("write_data failed for client %s. "
+                         "Error %s\n",
+                         get_peer_addr(fsp->conn->sconn->sock, addr,
+                                       sizeof(addr)),
+                         strerror(errno)));
+
                fail_readraw();
+       }
 
        TALLOC_FREE(outbuf);
 }
@@ -3028,6 +3120,7 @@ normal_readbraw:
 void reply_readbraw(struct smb_request *req)
 {
        connection_struct *conn = req->conn;
+       struct smbd_server_connection *sconn = req->sconn;
        ssize_t maxcount,mincount;
        size_t nread = 0;
        SMB_OFF_T startpos;
@@ -3037,22 +3130,22 @@ void reply_readbraw(struct smb_request *req)
 
        START_PROFILE(SMBreadbraw);
 
-       if (srv_is_signing_active(smbd_server_conn) ||
+       if (srv_is_signing_active(sconn) ||
            is_encrypted_packet(req->inbuf)) {
                exit_server_cleanly("reply_readbraw: SMB signing/sealing is active - "
                        "raw reads/writes are disallowed.");
        }
 
        if (req->wct < 8) {
-               reply_readbraw_error();
+               reply_readbraw_error(sconn);
                END_PROFILE(SMBreadbraw);
                return;
        }
 
-       if (smbd_server_conn->smb1.echo_handler.trusted_fde) {
-               DEBUG(2,("SMBreadbraw rejected with NOT_SUPPORTED because of"
-                        "'fork echo handler = yes'\n"));
-               reply_readbraw_error();
+       if (sconn->smb1.echo_handler.trusted_fde) {
+               DEBUG(2,("SMBreadbraw rejected with NOT_SUPPORTED because of "
+                        "'async smb echo handler = yes'\n"));
+               reply_readbraw_error(sconn);
                END_PROFILE(SMBreadbraw);
                return;
        }
@@ -3080,7 +3173,7 @@ void reply_readbraw(struct smb_request *req)
                DEBUG(3,("reply_readbraw: fnum %d not valid "
                        "- cache prime?\n",
                        (int)SVAL(req->vwv+0, 0)));
-               reply_readbraw_error();
+               reply_readbraw_error(sconn);
                END_PROFILE(SMBreadbraw);
                return;
        }
@@ -3091,7 +3184,7 @@ void reply_readbraw(struct smb_request *req)
                                (fsp->access_mask & FILE_EXECUTE)))) {
                DEBUG(3,("reply_readbraw: fnum %d not readable.\n",
                                (int)SVAL(req->vwv+0, 0)));
-               reply_readbraw_error();
+               reply_readbraw_error(sconn);
                END_PROFILE(SMBreadbraw);
                return;
        }
@@ -3129,7 +3222,7 @@ void reply_readbraw(struct smb_request *req)
                        DEBUG(0,("reply_readbraw: negative 64 bit "
                                "readraw offset (%.0f) !\n",
                                (double)startpos ));
-                       reply_readbraw_error();
+                       reply_readbraw_error(sconn);
                        END_PROFILE(SMBreadbraw);
                        return;
                }
@@ -3141,12 +3234,12 @@ void reply_readbraw(struct smb_request *req)
        /* ensure we don't overrun the packet size */
        maxcount = MIN(65535,maxcount);
 
-       init_strict_lock_struct(fsp, (uint32)req->smbpid,
+       init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
            (uint64_t)startpos, (uint64_t)maxcount, READ_LOCK,
            &lock);
 
        if (!SMB_VFS_STRICT_LOCK(conn, fsp, &lock)) {
-               reply_readbraw_error();
+               reply_readbraw_error(sconn);
                END_PROFILE(SMBreadbraw);
                return;
        }
@@ -3201,7 +3294,7 @@ void reply_lockread(struct smb_request *req)
        files_struct *fsp;
        struct byte_range_lock *br_lck = NULL;
        char *p = NULL;
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        START_PROFILE(SMBlockread);
 
@@ -3241,9 +3334,9 @@ void reply_lockread(struct smb_request *req)
         * Note that the requested lock size is unaffected by max_recv.
         */
 
-       br_lck = do_lock(smbd_messaging_context(),
+       br_lck = do_lock(req->sconn->msg_ctx,
                        fsp,
-                       req->smbpid,
+                       (uint64_t)req->smbpid,
                        (uint64_t)numtoread,
                        (uint64_t)startpos,
                        WRITE_LOCK,
@@ -3311,7 +3404,7 @@ void reply_read(struct smb_request *req)
        int outsize = 0;
        files_struct *fsp;
        struct lock_struct lock;
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        START_PROFILE(SMBread);
 
@@ -3354,7 +3447,7 @@ Returning short read of maximum allowed for compatibility with Windows 2000.\n",
 
        data = smb_buf(req->outbuf) + 3;
 
-       init_strict_lock_struct(fsp, (uint32)req->smbpid,
+       init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
            (uint64_t)startpos, (uint64_t)numtoread, READ_LOCK,
            &lock);
 
@@ -3436,7 +3529,7 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
                return;
        }
 
-       init_strict_lock_struct(fsp, (uint32)req->smbpid,
+       init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
            (uint64_t)startpos, (uint64_t)smb_maxcnt, READ_LOCK,
            &lock);
 
@@ -3455,7 +3548,6 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
                goto nosendfile_read;
        }
 
-#if defined(WITH_SENDFILE)
        /*
         * We can only use sendfile on a non-chained packet
         * but we can use on a non-oplocked file. tridge proved this
@@ -3465,7 +3557,7 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
        if (!req_is_in_chain(req) &&
            !is_encrypted_packet(req->inbuf) && (fsp->base_fsp == NULL) &&
            (fsp->wcp == NULL) &&
-           lp_use_sendfile(SNUM(conn), smbd_server_conn->smb1.signing_state) ) {
+           lp_use_sendfile(SNUM(conn), req->sconn->smb1.signing_state) ) {
                uint8 headerbuf[smb_size + 12 * 2];
                DATA_BLOB header;
 
@@ -3480,7 +3572,9 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
                construct_reply_common_req(req, (char *)headerbuf);
                setup_readX_header(req, (char *)headerbuf, smb_maxcnt);
 
-               if ((nread = SMB_VFS_SENDFILE(smbd_server_fd(), fsp, &header, startpos, smb_maxcnt)) == -1) {
+               nread = SMB_VFS_SENDFILE(req->sconn->sock, fsp, &header,
+                                        startpos, smb_maxcnt);
+               if (nread == -1) {
                        /* Returning ENOSYS means no data at all was sent.
                           Do this as a normal read. */
                        if (errno == ENOSYS) {
@@ -3546,8 +3640,6 @@ static void send_file_readX(connection_struct *conn, struct smb_request *req,
 
 normal_read:
 
-#endif
-
        if ((smb_maxcnt & 0xFF0000) > 0x10000) {
                uint8 headerbuf[smb_size + 2*12];
 
@@ -3555,8 +3647,20 @@ normal_read:
                setup_readX_header(req, (char *)headerbuf, smb_maxcnt);
 
                /* Send out the header. */
-               if (write_data(smbd_server_fd(), (char *)headerbuf,
+               if (write_data(req->sconn->sock, (char *)headerbuf,
                               sizeof(headerbuf)) != sizeof(headerbuf)) {
+
+                       char addr[INET6_ADDRSTRLEN];
+                       /*
+                        * Try and give an error message saying what
+                        * client failed.
+                        */
+                       DEBUG(0, ("write_data failed for client %s. "
+                                 "Error %s\n",
+                                 get_peer_addr(req->sconn->sock, addr,
+                                               sizeof(addr)),
+                                 strerror(errno)));
+
                        DEBUG(0,("send_file_readX: write_data failed for file "
                                 "%s (%s). Terminating\n", fsp_str_dbg(fsp),
                                 strerror(errno)));
@@ -3655,7 +3759,7 @@ void reply_read_and_X(struct smb_request *req)
                                return;
                        }
                        /* We currently don't do this on signed or sealed data. */
-                       if (srv_is_signing_active(smbd_server_conn) ||
+                       if (srv_is_signing_active(req->sconn) ||
                            is_encrypted_packet(req->inbuf)) {
                                reply_nterror(req, NT_STATUS_NOT_SUPPORTED);
                                END_PROFILE(SMBreadX);
@@ -3717,9 +3821,9 @@ void reply_read_and_X(struct smb_request *req)
                /* NT_STATUS_RETRY - fall back to sync read. */
        }
 
-       smbd_lock_socket(smbd_server_conn);
+       smbd_lock_socket(req->sconn);
        send_file_readX(conn, req, fsp, startpos, smb_maxcnt);
-       smbd_unlock_socket(smbd_server_conn);
+       smbd_unlock_socket(req->sconn);
 
  out:
        END_PROFILE(SMBreadX);
@@ -3740,6 +3844,43 @@ void error_to_writebrawerr(struct smb_request *req)
        TALLOC_FREE(old_outbuf);
 }
 
+/****************************************************************************
+ Read 4 bytes of a smb packet and return the smb length of the packet.
+ Store the result in the buffer. This version of the function will
+ never return a session keepalive (length of zero).
+ Timeout is in milliseconds.
+****************************************************************************/
+
+static NTSTATUS read_smb_length(int fd, char *inbuf, unsigned int timeout,
+                               size_t *len)
+{
+       uint8_t msgtype = SMBkeepalive;
+
+       while (msgtype == SMBkeepalive) {
+               NTSTATUS status;
+
+               status = read_smb_length_return_keepalive(fd, inbuf, timeout,
+                                                         len);
+               if (!NT_STATUS_IS_OK(status)) {
+                       char addr[INET6_ADDRSTRLEN];
+                       /* Try and give an error message
+                        * saying what client failed. */
+                       DEBUG(0, ("read_fd_with_timeout failed for "
+                                 "client %s read error = %s.\n",
+                                 get_peer_addr(fd,addr,sizeof(addr)),
+                                 nt_errstr(status)));
+                       return status;
+               }
+
+               msgtype = CVAL(inbuf, 0);
+       }
+
+       DEBUG(10,("read_smb_length: got smb length of %lu\n",
+                 (unsigned long)len));
+
+       return NT_STATUS_OK;
+}
+
 /****************************************************************************
  Reply to a writebraw (core+ or LANMAN1.0 protocol).
 ****************************************************************************/
@@ -3768,7 +3909,7 @@ void reply_writebraw(struct smb_request *req)
         */
        SCVAL(req->inbuf,smb_com,SMBwritec);
 
-       if (srv_is_signing_active(smbd_server_conn)) {
+       if (srv_is_signing_active(req->sconn)) {
                END_PROFILE(SMBwritebraw);
                exit_server_cleanly("reply_writebraw: SMB signing is active - "
                                "raw reads/writes are disallowed.");
@@ -3781,9 +3922,9 @@ void reply_writebraw(struct smb_request *req)
                return;
        }
 
-       if (smbd_server_conn->smb1.echo_handler.trusted_fde) {
-               DEBUG(2,("SMBwritebraw rejected with NOT_SUPPORTED because of"
-                        "'fork echo handler = yes'\n"));
+       if (req->sconn->smb1.echo_handler.trusted_fde) {
+               DEBUG(2,("SMBwritebraw rejected with NOT_SUPPORTED because of "
+                        "'async smb echo handler = yes'\n"));
                reply_nterror(req, NT_STATUS_NOT_SUPPORTED);
                error_to_writebrawerr(req);
                END_PROFILE(SMBwritebraw);
@@ -3827,10 +3968,8 @@ void reply_writebraw(struct smb_request *req)
                return;
        }
 
-       if (fsp->print_file) {
-               startpos = printfile_offset(fsp, startpos);
-       } else {
-               init_strict_lock_struct(fsp, (uint32)req->smbpid,
+       if (!fsp->print_file) {
+               init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
                    (uint64_t)startpos, (uint64_t)tcount, WRITE_LOCK,
                    &lock);
 
@@ -3875,7 +4014,7 @@ void reply_writebraw(struct smb_request *req)
        SCVAL(buf,smb_com,SMBwritebraw);
        SSVALS(buf,smb_vwv0,0xFFFF);
        show_msg(buf);
-       if (!srv_send_smb(smbd_server_fd(),
+       if (!srv_send_smb(req->sconn,
                          buf,
                          false, 0, /* no signing */
                          IS_CONN_ENCRYPTED(conn),
@@ -3885,7 +4024,7 @@ void reply_writebraw(struct smb_request *req)
        }
 
        /* Now read the raw data into the buffer and write it */
-       status = read_smb_length(smbd_server_fd(), buf, SMB_SECONDARY_WAIT,
+       status = read_smb_length(req->sconn->sock, buf, SMB_SECONDARY_WAIT,
                                 &numtowrite);
        if (!NT_STATUS_IS_OK(status)) {
                exit_server_cleanly("secondary writebraw failed");
@@ -3909,12 +4048,17 @@ void reply_writebraw(struct smb_request *req)
                                (int)tcount,(int)nwritten,(int)numtowrite));
                }
 
-               status = read_data(smbd_server_fd(), buf+4, numtowrite);
+               status = read_data(req->sconn->sock, buf+4, numtowrite);
 
                if (!NT_STATUS_IS_OK(status)) {
-                       DEBUG(0,("reply_writebraw: Oversize secondary write "
-                                "raw read failed (%s). Terminating\n",
-                                nt_errstr(status)));
+                       char addr[INET6_ADDRSTRLEN];
+                       /* Try and give an error message
+                        * saying what client failed. */
+                       DEBUG(0, ("reply_writebraw: Oversize secondary write "
+                                 "raw read failed (%s) for client %s. "
+                                 "Terminating\n", nt_errstr(status),
+                                 get_peer_addr(req->sconn->sock, addr,
+                                               sizeof(addr))));
                        exit_server_cleanly("secondary writebraw failed");
                }
 
@@ -3969,7 +4113,7 @@ void reply_writebraw(struct smb_request *req)
                 * sending a SMBkeepalive. Thanks to DaveCB at Sun for this.
                 * JRA.
                 */
-               if (!send_keepalive(smbd_server_fd())) {
+               if (!send_keepalive(req->sconn->sock)) {
                        exit_server_cleanly("reply_writebraw: send of "
                                "keepalive failed");
                }
@@ -4031,10 +4175,8 @@ void reply_writeunlock(struct smb_request *req)
        startpos = IVAL_TO_SMB_OFF_T(req->vwv+2, 0);
        data = (const char *)req->buf + 3;
 
-       if (fsp->print_file) {
-               startpos = printfile_offset(fsp, startpos);
-       } else if (numtowrite) {
-               init_strict_lock_struct(fsp, (uint32)req->smbpid,
+       if (!fsp->print_file && numtowrite > 0) {
+               init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
                    (uint64_t)startpos, (uint64_t)numtowrite, WRITE_LOCK,
                    &lock);
 
@@ -4074,9 +4216,9 @@ void reply_writeunlock(struct smb_request *req)
        }
 
        if (numtowrite && !fsp->print_file) {
-               status = do_unlock(smbd_messaging_context(),
+               status = do_unlock(req->sconn->msg_ctx,
                                fsp,
-                               req->smbpid,
+                               (uint64_t)req->smbpid,
                                (uint64_t)numtowrite, 
                                (uint64_t)startpos,
                                WINDOWS_LOCK);
@@ -4154,10 +4296,8 @@ void reply_write(struct smb_request *req)
        startpos = IVAL_TO_SMB_OFF_T(req->vwv+2, 0);
        data = (const char *)req->buf + 3;
 
-       if (fsp->print_file) {
-               startpos = printfile_offset(fsp, startpos);
-       } else {
-               init_strict_lock_struct(fsp, (uint32)req->smbpid,
+       if (!fsp->print_file) {
+               init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
                        (uint64_t)startpos, (uint64_t)numtowrite, WRITE_LOCK,
                        &lock);
 
@@ -4239,13 +4379,13 @@ strict_unlock:
                                                (2*14) + /* word count (including bcc) */ \
                                                1 /* pad byte */)
 
-bool is_valid_writeX_buffer(const uint8_t *inbuf)
+bool is_valid_writeX_buffer(struct smbd_server_connection *sconn,
+                           const uint8_t *inbuf)
 {
        size_t numtowrite;
        connection_struct *conn = NULL;
        unsigned int doff = 0;
        size_t len = smb_len_large(inbuf);
-       struct smbd_server_connection *sconn = smbd_server_conn;
 
        if (is_encrypted_packet(inbuf)) {
                /* Can't do this on encrypted
@@ -4457,7 +4597,7 @@ void reply_write_and_X(struct smb_request *req)
                        /* NT_STATUS_RETRY - fall through to sync write. */
                }
 
-               init_strict_lock_struct(fsp, (uint32)req->smbpid,
+               init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
                    (uint64_t)startpos, (uint64_t)numtowrite, WRITE_LOCK,
                    &lock);
 
@@ -4651,7 +4791,7 @@ void reply_exit(struct smb_request *req)
 {
        START_PROFILE(SMBexit);
 
-       file_close_pid(req->smbpid, req->vuid);
+       file_close_pid(req->sconn, req->smbpid, req->vuid);
 
        reply_outbuf(req, 0, 0);
 
@@ -4684,7 +4824,7 @@ void reply_close(struct smb_request *req)
         * We can only use check_fsp if we know it's not a directory.
         */
 
-       if(!fsp || (fsp->conn != conn) || (fsp->vuid != req->vuid)) {
+       if (!check_fsp_open(conn, req, fsp)) {
                reply_nterror(req, NT_STATUS_INVALID_HANDLE);
                END_PROFILE(SMBclose);
                return;
@@ -4774,10 +4914,8 @@ void reply_writeclose(struct smb_request *req)
        mtime = convert_time_t_to_timespec(srv_make_unix_date3(req->vwv+4));
        data = (const char *)req->buf + 1;
 
-       if (fsp->print_file) {
-               startpos = printfile_offset(fsp, startpos);
-       } else if (numtowrite) {
-               init_strict_lock_struct(fsp, (uint32)req->smbpid,
+       if (!fsp->print_file) {
+               init_strict_lock_struct(fsp, (uint64_t)req->smbpid,
                    (uint64_t)startpos, (uint64_t)numtowrite, WRITE_LOCK,
                    &lock);
 
@@ -4866,9 +5004,9 @@ void reply_lock(struct smb_request *req)
        DEBUG(3,("lock fd=%d fnum=%d offset=%.0f count=%.0f\n",
                 fsp->fh->fd, fsp->fnum, (double)offset, (double)count));
 
-       br_lck = do_lock(smbd_messaging_context(),
+       br_lck = do_lock(req->sconn->msg_ctx,
                        fsp,
-                       req->smbpid,
+                       (uint64_t)req->smbpid,
                        count,
                        offset,
                        WRITE_LOCK,
@@ -4921,9 +5059,9 @@ void reply_unlock(struct smb_request *req)
        count = (uint64_t)IVAL(req->vwv+1, 0);
        offset = (uint64_t)IVAL(req->vwv+3, 0);
 
-       status = do_unlock(smbd_messaging_context(),
+       status = do_unlock(req->sconn->msg_ctx,
                        fsp,
-                       req->smbpid,
+                       (uint64_t)req->smbpid,
                        count,
                        offset,
                        WINDOWS_LOCK);
@@ -5023,7 +5161,7 @@ void reply_echo(struct smb_request *req)
                SSVAL(req->outbuf,smb_vwv0,seq_num);
 
                show_msg((char *)req->outbuf);
-               if (!srv_send_smb(smbd_server_fd(),
+               if (!srv_send_smb(req->sconn,
                                (char *)req->outbuf,
                                true, req->seqnum+1,
                                IS_CONN_ENCRYPTED(conn)||req->encrypted,
@@ -5071,7 +5209,7 @@ void reply_printopen(struct smb_request *req)
        }
 
        /* Open for exclusive use, write only. */
-       status = print_fsp_open(req, conn, NULL, req->vuid, fsp);
+       status = print_spool_open(fsp, NULL, req->vuid);
 
        if (!NT_STATUS_IS_OK(status)) {
                file_free(req, fsp);
@@ -5179,38 +5317,107 @@ void reply_printqueue(struct smb_request *req)
                 start_index, max_count));
 
        {
-               print_queue_struct *queue = NULL;
-               print_status_struct status;
-               int count = print_queue_status(SNUM(conn), &queue, &status);
-               int num_to_get = ABS(max_count);
-               int first = (max_count>0?start_index:start_index+max_count+1);
-               int i;
-
-               if (first >= count)
-                       num_to_get = 0;
-               else
-                       num_to_get = MIN(num_to_get,count-first);
+               TALLOC_CTX *mem_ctx = talloc_tos();
+               NTSTATUS status;
+               WERROR werr;
+               const char *sharename = lp_servicename(SNUM(conn));
+               struct rpc_pipe_client *cli = NULL;
+               struct dcerpc_binding_handle *b = NULL;
+               struct policy_handle handle;
+               struct spoolss_DevmodeContainer devmode_ctr;
+               union spoolss_JobInfo *info;
+               uint32_t count;
+               uint32_t num_to_get;
+               uint32_t first;
+               uint32_t i;
+
+               ZERO_STRUCT(handle);
+
+               status = rpc_pipe_open_interface(conn,
+                                                &ndr_table_spoolss.syntax_id,
+                                                conn->session_info,
+                                                &conn->sconn->client_id,
+                                                conn->sconn->msg_ctx,
+                                                &cli);
+               if (!NT_STATUS_IS_OK(status)) {
+                       DEBUG(0, ("reply_printqueue: "
+                                 "could not connect to spoolss: %s\n",
+                                 nt_errstr(status)));
+                       reply_nterror(req, status);
+                       goto out;
+               }
+               b = cli->binding_handle;
 
+               ZERO_STRUCT(devmode_ctr);
 
-               for (i=first;i<first+num_to_get;i++) {
+               status = dcerpc_spoolss_OpenPrinter(b, mem_ctx,
+                                               sharename,
+                                               NULL, devmode_ctr,
+                                               SEC_FLAG_MAXIMUM_ALLOWED,
+                                               &handle,
+                                               &werr);
+               if (!NT_STATUS_IS_OK(status)) {
+                       reply_nterror(req, status);
+                       goto out;
+               }
+               if (!W_ERROR_IS_OK(werr)) {
+                       reply_nterror(req, werror_to_ntstatus(werr));
+                       goto out;
+               }
+
+               werr = rpccli_spoolss_enumjobs(cli, mem_ctx,
+                                              &handle,
+                                              0, /* firstjob */
+                                              0xff, /* numjobs */
+                                              2, /* level */
+                                              0, /* offered */
+                                              &count,
+                                              &info);
+               if (!W_ERROR_IS_OK(werr)) {
+                       reply_nterror(req, werror_to_ntstatus(werr));
+                       goto out;
+               }
+
+               if (max_count > 0) {
+                       first = start_index;
+               } else {
+                       first = start_index + max_count + 1;
+               }
+
+               if (first >= count) {
+                       num_to_get = first;
+               } else {
+                       num_to_get = first + MIN(ABS(max_count), count - first);
+               }
+
+               for (i = first; i < num_to_get; i++) {
                        char blob[28];
                        char *p = blob;
+                       time_t qtime = spoolss_Time_to_time_t(&info[i].info2.submitted);
+                       int qstatus;
+                       uint16_t qrapjobid = pjobid_to_rap(sharename,
+                                                       info[i].info2.job_id);
+
+                       if (info[i].info2.status == JOB_STATUS_PRINTING) {
+                               qstatus = 2;
+                       } else {
+                               qstatus = 3;
+                       }
 
-                       srv_put_dos_date2(p,0,queue[i].time);
-                       SCVAL(p,4,(queue[i].status==LPQ_PRINTING?2:3));
-                       SSVAL(p,5, queue[i].job);
-                       SIVAL(p,7,queue[i].size);
-                       SCVAL(p,11,0);
+                       srv_put_dos_date2(p, 0, qtime);
+                       SCVAL(p, 4, qstatus);
+                       SSVAL(p, 5, qrapjobid);
+                       SIVAL(p, 7, info[i].info2.size);
+                       SCVAL(p, 11, 0);
                        srvstr_push(blob, req->flags2, p+12,
-                                   queue[i].fs_user, 16, STR_ASCII);
+                                   info[i].info2.notify_name, 16, STR_ASCII);
 
                        if (message_push_blob(
                                    &req->outbuf,
                                    data_blob_const(
                                            blob, sizeof(blob))) == -1) {
                                reply_nterror(req, NT_STATUS_NO_MEMORY);
-                               END_PROFILE(SMBsplretq);
-                               return;
+                               goto out;
                        }
                }
 
@@ -5222,9 +5429,15 @@ void reply_printqueue(struct smb_request *req)
                        SSVAL(smb_buf(req->outbuf),1,28*count);
                }
 
-               SAFE_FREE(queue);
 
-               DEBUG(3,("%d entries returned in queue\n",count));
+               DEBUG(3, ("%u entries returned in queue\n",
+                         (unsigned)count));
+
+out:
+               if (b && is_valid_policy_hnd(&handle)) {
+                       dcerpc_spoolss_ClosePrinter(b, mem_ctx, &handle, &werr);
+               }
+
        }
 
        END_PROFILE(SMBsplretq);
@@ -5257,7 +5470,7 @@ void reply_printwrite(struct smb_request *req)
                 return;
         }
 
-       if (!CAN_PRINT(conn)) {
+       if (!fsp->print_file) {
                reply_nterror(req, NT_STATUS_ACCESS_DENIED);
                END_PROFILE(SMBsplwr);
                return;
@@ -5371,7 +5584,7 @@ void reply_rmdir(struct smb_request *req)
        TALLOC_CTX *ctx = talloc_tos();
        files_struct *fsp = NULL;
        int info = 0;
-       struct smbd_server_connection *sconn = smbd_server_conn;
+       struct smbd_server_connection *sconn = req->sconn;
 
        START_PROFILE(SMBrmdir);
 
@@ -5438,7 +5651,7 @@ void reply_rmdir(struct smb_request *req)
                goto out;
        }
 
-       if (!set_delete_on_close(fsp, true, &conn->server_info->utok)) {
+       if (!set_delete_on_close(fsp, true, &conn->session_info->utok)) {
                close_file(req, fsp, ERROR_CLOSE);
                reply_nterror(req, NT_STATUS_ACCESS_DENIED);
                goto out;
@@ -5594,13 +5807,15 @@ static bool resolve_wildcards(TALLOC_CTX *ctx,
 
 static void rename_open_files(connection_struct *conn,
                              struct share_mode_lock *lck,
+                             uint32_t orig_name_hash,
                              const struct smb_filename *smb_fname_dst)
 {
        files_struct *fsp;
        bool did_rename = False;
        NTSTATUS status;
+       uint32_t new_name_hash;
 
-       for(fsp = file_find_di_first(lck->id); fsp;
+       for(fsp = file_find_di_first(conn->sconn, lck->id); fsp;
            fsp = file_find_di_next(fsp)) {
                /* fsp_name is a relative path under the fsp. To change this for other
                   sharepaths we need to manipulate relative paths. */
@@ -5609,6 +5824,9 @@ static void rename_open_files(connection_struct *conn,
                if (!strequal(fsp->conn->connectpath, conn->connectpath)) {
                        continue;
                }
+               if (fsp->name_hash != orig_name_hash) {
+                       continue;
+               }
                DEBUG(10, ("rename_open_files: renaming file fnum %d "
                           "(file_id %s) from %s -> %s\n", fsp->fnum,
                           file_id_string_tos(&fsp->file_id), fsp_str_dbg(fsp),
@@ -5617,6 +5835,7 @@ static void rename_open_files(connection_struct *conn,
                status = fsp_set_smb_fname(fsp, smb_fname_dst);
                if (NT_STATUS_IS_OK(status)) {
                        did_rename = True;
+                       new_name_hash = fsp->name_hash;
                }
        }
 
@@ -5627,7 +5846,8 @@ static void rename_open_files(connection_struct *conn,
        }
 
        /* Send messages to all smbd's (not ourself) that the name has changed. */
-       rename_share_filename(smbd_messaging_context(), lck, conn->connectpath,
+       rename_share_filename(conn->sconn->msg_ctx, lck, conn->connectpath,
+                             orig_name_hash, new_name_hash,
                              smb_fname_dst);
 
 }
@@ -5739,19 +5959,6 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
                goto out;
        }
 
-       /* Ensure the dst smb_fname contains a '/' */
-       if(strrchr_m(smb_fname_dst->base_name,'/') == 0) {
-               char * tmp;
-               tmp = talloc_asprintf(smb_fname_dst, "./%s",
-                                     smb_fname_dst->base_name);
-               if (!tmp) {
-                       status = NT_STATUS_NO_MEMORY;
-                       goto out;
-               }
-               TALLOC_FREE(smb_fname_dst->base_name);
-               smb_fname_dst->base_name = tmp;
-       }
-
        /*
         * Check for special case with case preserving and not
         * case sensitive. If the old last component differs from the original
@@ -5767,12 +5974,14 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
                struct smb_filename *smb_fname_orig_lcomp = NULL;
 
                /*
-                * Get the last component of the destination name.  Note that
-                * we guarantee that destination name contains a '/' character
-                * above.
+                * Get the last component of the destination name.
                 */
                last_slash = strrchr_m(smb_fname_dst->base_name, '/');
-               fname_dst_lcomp_base_mod = talloc_strdup(ctx, last_slash + 1);
+               if (last_slash) {
+                       fname_dst_lcomp_base_mod = talloc_strdup(ctx, last_slash + 1);
+               } else {
+                       fname_dst_lcomp_base_mod = talloc_strdup(ctx, smb_fname_dst->base_name);
+               }
                if (!fname_dst_lcomp_base_mod) {
                        status = NT_STATUS_NO_MEMORY;
                        goto out;
@@ -5798,11 +6007,17 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
                         * Replace the modified last component with the
                         * original.
                         */
-                       *last_slash = '\0'; /* Truncate at the '/' */
-                       tmp = talloc_asprintf(smb_fname_dst,
+                       if (last_slash) {
+                               *last_slash = '\0'; /* Truncate at the '/' */
+                               tmp = talloc_asprintf(smb_fname_dst,
                                        "%s/%s",
                                        smb_fname_dst->base_name,
                                        smb_fname_orig_lcomp->base_name);
+                       } else {
+                               tmp = talloc_asprintf(smb_fname_dst,
+                                       "%s",
+                                       smb_fname_orig_lcomp->base_name);
+                       }
                        if (tmp == NULL) {
                                status = NT_STATUS_NO_MEMORY;
                                TALLOC_FREE(fname_dst_lcomp_base_mod);
@@ -5875,7 +6090,8 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
        if (dst_exists) {
                struct file_id fileid = vfs_file_id_from_sbuf(conn,
                    &smb_fname_dst->st);
-               files_struct *dst_fsp = file_find_di_first(fileid);
+               files_struct *dst_fsp = file_find_di_first(conn->sconn,
+                                                          fileid);
                /* The file can be open when renaming a stream */
                if (dst_fsp && !new_is_stream) {
                        DEBUG(3, ("rename_internals_fsp: Target file open\n"));
@@ -5922,8 +6138,9 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
                          "%s -> %s\n", smb_fname_str_dbg(fsp->fsp_name),
                          smb_fname_str_dbg(smb_fname_dst)));
 
-               if (lp_map_archive(SNUM(conn)) ||
-                   lp_store_dos_attributes(SNUM(conn))) {
+               if (!lp_posix_pathnames() &&
+                   (lp_map_archive(SNUM(conn)) ||
+                   lp_store_dos_attributes(SNUM(conn)))) {
                        /* We must set the archive bit on the newly
                           renamed file. */
                        if (SMB_VFS_STAT(conn, smb_fname_dst) == 0) {
@@ -5940,7 +6157,7 @@ NTSTATUS rename_internals_fsp(connection_struct *conn,
                notify_rename(conn, fsp->is_directory, fsp->fsp_name,
                              smb_fname_dst);
 
-               rename_open_files(conn, lck, smb_fname_dst);
+               rename_open_files(conn, lck, fsp->name_hash, smb_fname_dst);
 
                /*
                 * A rename acts as a new file create w.r.t. allowing an initial delete
@@ -6055,28 +6272,22 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                 * onto the directory.
                 */
                TALLOC_FREE(smb_fname_src->base_name);
-               smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
-                                                          "%s/%s",
-                                                          fname_src_dir,
-                                                          fname_src_mask);
+               if (ISDOT(fname_src_dir)) {
+                       /* Ensure we use canonical names on open. */
+                       smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                       "%s",
+                                                       fname_src_mask);
+               } else {
+                       smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                       "%s/%s",
+                                                       fname_src_dir,
+                                                       fname_src_mask);
+               }
                if (!smb_fname_src->base_name) {
                        status = NT_STATUS_NO_MEMORY;
                        goto out;
                }
 
-               /* Ensure dst fname contains a '/' also */
-               if(strrchr_m(smb_fname_dst->base_name, '/') == 0) {
-                       char *tmp;
-                       tmp = talloc_asprintf(smb_fname_dst, "./%s",
-                                             smb_fname_dst->base_name);
-                       if (!tmp) {
-                               status = NT_STATUS_NO_MEMORY;
-                               goto out;
-                       }
-                       TALLOC_FREE(smb_fname_dst->base_name);
-                       smb_fname_dst->base_name = tmp;
-               }
-
                DEBUG(3, ("rename_internals: case_sensitive = %d, "
                          "case_preserve = %d, short case preserve = %d, "
                          "directory = %s, newname = %s, "
@@ -6217,10 +6428,17 @@ NTSTATUS rename_internals(TALLOC_CTX *ctx,
                }
 
                TALLOC_FREE(smb_fname_src->base_name);
-               smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
-                                                          "%s/%s",
-                                                          fname_src_dir,
-                                                          dname);
+               if (ISDOT(fname_src_dir)) {
+                       /* Ensure we use canonical names on open. */
+                       smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                       "%s",
+                                                       dname);
+               } else {
+                       smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                       "%s/%s",
+                                                       fname_src_dir,
+                                                       dname);
+               }
                if (!smb_fname_src->base_name) {
                        status = NT_STATUS_NO_MEMORY;
                        goto out;
@@ -6340,6 +6558,7 @@ void reply_mv(struct smb_request *req)
        TALLOC_CTX *ctx = talloc_tos();
        struct smb_filename *smb_fname_src = NULL;
        struct smb_filename *smb_fname_dst = NULL;
+       bool stream_rename = false;
 
        START_PROFILE(SMBmv);
 
@@ -6365,6 +6584,18 @@ void reply_mv(struct smb_request *req)
                goto out;
        }
 
+       if (!lp_posix_pathnames()) {
+               /* The newname must begin with a ':' if the
+                  name contains a ':'. */
+               if (strchr_m(name, ':')) {
+                       if (newname[0] != ':') {
+                               reply_nterror(req, NT_STATUS_INVALID_PARAMETER);
+                               goto out;
+                       }
+                       stream_rename = true;
+               }
+        }
+
        status = filename_convert(ctx,
                                  conn,
                                  req->flags2 & FLAGS2_DFS_PATHNAMES,
@@ -6401,6 +6632,18 @@ void reply_mv(struct smb_request *req)
                goto out;
        }
 
+       if (stream_rename) {
+               /* smb_fname_dst->base_name must be the same as
+                  smb_fname_src->base_name. */
+               TALLOC_FREE(smb_fname_dst->base_name);
+               smb_fname_dst->base_name = talloc_strdup(smb_fname_dst,
+                                               smb_fname_src->base_name);
+               if (!smb_fname_dst->base_name) {
+                       reply_nterror(req, NT_STATUS_NO_MEMORY);
+                       goto out;
+               }
+       }
+
        DEBUG(3,("reply_mv : %s -> %s\n", smb_fname_str_dbg(smb_fname_src),
                 smb_fname_str_dbg(smb_fname_dst)));
 
@@ -6549,20 +6792,23 @@ NTSTATUS copy_file(TALLOC_CTX *ctx,
                goto out;
        }
 
-       if ((ofun&3) == 1) {
-               if(SMB_VFS_LSEEK(fsp2,0,SEEK_END) == -1) {
-                       DEBUG(0,("copy_file: error - vfs lseek returned error %s\n", strerror(errno) ));
-                       /*
-                        * Stop the copy from occurring.
-                        */
-                       ret = -1;
-                       smb_fname_src->st.st_ex_size = 0;
+       if (ofun & OPENX_FILE_EXISTS_OPEN) {
+               ret = SMB_VFS_LSEEK(fsp2, 0, SEEK_END);
+               if (ret == -1) {
+                       DEBUG(0, ("error - vfs lseek returned error %s\n",
+                               strerror(errno)));
+                       status = map_nt_error_from_unix(errno);
+                       close_file(NULL, fsp1, ERROR_CLOSE);
+                       close_file(NULL, fsp2, ERROR_CLOSE);
+                       goto out;
                }
        }
 
        /* Do the actual copy. */
        if (smb_fname_src->st.st_ex_size) {
                ret = vfs_transfer_file(fsp1, fsp2, smb_fname_src->st.st_ex_size);
+       } else {
+               ret = 0;
        }
 
        close_file(NULL, fsp1, NORMAL_CLOSE);
@@ -6740,10 +6986,17 @@ void reply_copy(struct smb_request *req)
                 * the directory.
                 */
                TALLOC_FREE(smb_fname_src->base_name);
-               smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
-                                                          "%s/%s",
-                                                          fname_src_dir,
-                                                          fname_src_mask);
+               if (ISDOT(fname_src_dir)) {
+                       /* Ensure we use canonical names on open. */
+                       smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                       "%s",
+                                                       fname_src_mask);
+               } else {
+                       smb_fname_src->base_name = talloc_asprintf(smb_fname_src,
+                                                       "%s/%s",
+                                                       fname_src_dir,
+                                                       fname_src_mask);
+               }
                if (!smb_fname_src->base_name) {
                        reply_nterror(req, NT_STATUS_NO_MEMORY);
                        goto out;
@@ -6851,9 +7104,16 @@ void reply_copy(struct smb_request *req)
 
                        /* Get the src smb_fname struct setup. */
                        TALLOC_FREE(smb_fname_src->base_name);
-                       smb_fname_src->base_name =
-                           talloc_asprintf(smb_fname_src, "%s/%s",
-                                           fname_src_dir, dname);
+                       if (ISDOT(fname_src_dir)) {
+                               /* Ensure we use canonical names on open. */
+                               smb_fname_src->base_name =
+                                       talloc_asprintf(smb_fname_src, "%s",
+                                               dname);
+                       } else {
+                               smb_fname_src->base_name =
+                                       talloc_asprintf(smb_fname_src, "%s/%s",
+                                               fname_src_dir, dname);
+                       }
 
                        if (!smb_fname_src->base_name) {
                                TALLOC_FREE(dir_hnd);
@@ -6936,13 +7196,13 @@ void reply_copy(struct smb_request *req)
  Get a lock pid, dealing with large count requests.
 ****************************************************************************/
 
-uint32 get_lock_pid(const uint8_t *data, int data_offset,
+uint64_t get_lock_pid(const uint8_t *data, int data_offset,
                    bool large_file_format)
 {
        if(!large_file_format)
-               return (uint32)SVAL(data,SMB_LPID_OFFSET(data_offset));
+               return (uint64_t)SVAL(data,SMB_LPID_OFFSET(data_offset));
        else
-               return (uint32)SVAL(data,SMB_LARGE_LPID_OFFSET(data_offset));
+               return (uint64_t)SVAL(data,SMB_LARGE_LPID_OFFSET(data_offset));
 }
 
 /****************************************************************************
@@ -7093,7 +7353,7 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                          "pid %u, file %s\n",
                          (double)e->offset,
                          (double)e->count,
-                         (unsigned int)e->smbpid,
+                         (unsigned int)e->smblctx,
                          fsp_str_dbg(fsp)));
 
                if (e->brltype != UNLOCK_LOCK) {
@@ -7101,9 +7361,9 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                        return NT_STATUS_INVALID_PARAMETER;
                }
 
-               status = do_unlock(smbd_messaging_context(),
+               status = do_unlock(req->sconn->msg_ctx,
                                fsp,
-                               e->smbpid,
+                               e->smblctx,
                                e->count,
                                e->offset,
                                WINDOWS_LOCK);
@@ -7128,11 +7388,11 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
        for(i = 0; i < (int)num_locks; i++) {
                struct smbd_lock_element *e = &locks[i];
 
-               DEBUG(10,("smbd_do_locking: lock start=%.0f, len=%.0f for pid "
-                         "%u, file %s timeout = %d\n",
+               DEBUG(10,("smbd_do_locking: lock start=%.0f, len=%.0f for smblctx "
+                         "%llu, file %s timeout = %d\n",
                          (double)e->offset,
                          (double)e->count,
-                         (unsigned int)e->smbpid,
+                         (unsigned long long)e->smblctx,
                          fsp_str_dbg(fsp),
                          (int)timeout));
 
@@ -7169,8 +7429,8 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                                   remove the blocking lock record and
                                   return the right error. */
 
-                               blr = blocking_lock_cancel(fsp,
-                                               e->smbpid,
+                               blr = blocking_lock_cancel_smb1(fsp,
+                                               e->smblctx,
                                                e->offset,
                                                e->count,
                                                WINDOWS_LOCK,
@@ -7184,7 +7444,7 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                        }
                        /* Remove a matching pending lock. */
                        status = do_lock_cancel(fsp,
-                                               e->smbpid,
+                                               e->smblctx,
                                                e->count,
                                                e->offset,
                                                WINDOWS_LOCK,
@@ -7193,18 +7453,18 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                        bool blocking_lock = timeout ? true : false;
                        bool defer_lock = false;
                        struct byte_range_lock *br_lck;
-                       uint32_t block_smbpid;
+                       uint64_t block_smblctx;
 
-                       br_lck = do_lock(smbd_messaging_context(),
+                       br_lck = do_lock(req->sconn->msg_ctx,
                                        fsp,
-                                       e->smbpid,
+                                       e->smblctx,
                                        e->count,
                                        e->offset, 
                                        e->brltype,
                                        WINDOWS_LOCK,
                                        blocking_lock,
                                        &status,
-                                       &block_smbpid,
+                                       &block_smblctx,
                                        NULL);
 
                        if (br_lck && blocking_lock && ERROR_WAS_LOCK_DENIED(status)) {
@@ -7227,7 +7487,8 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                         *
                         * Replacement for do_lock_spin(). JRA. */
 
-                       if (br_lck && lp_blocking_locks(SNUM(conn)) &&
+                       if (!req->sconn->using_smb2 &&
+                           br_lck && lp_blocking_locks(SNUM(conn)) &&
                            lp_lock_spin_time() && !blocking_lock &&
                            NT_STATUS_EQUAL((status),
                                NT_STATUS_FILE_LOCK_CONFLICT))
@@ -7247,12 +7508,12 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                                                        fsp,
                                                        timeout,
                                                        i,
-                                                       e->smbpid,
+                                                       e->smblctx,
                                                        e->brltype,
                                                        WINDOWS_LOCK,
                                                        e->offset,
                                                        e->count,
-                                                       block_smbpid)) {
+                                                       block_smblctx)) {
                                        TALLOC_FREE(br_lck);
                                        *async = true;
                                        return NT_STATUS_OK;
@@ -7284,9 +7545,9 @@ NTSTATUS smbd_do_locking(struct smb_request *req,
                for(i--; i >= 0; i--) {
                        struct smbd_lock_element *e = &locks[i];
 
-                       do_unlock(smbd_messaging_context(),
+                       do_unlock(req->sconn->msg_ctx,
                                fsp,
-                               e->smbpid,
+                               e->smblctx,
                                e->count,
                                e->offset,
                                WINDOWS_LOCK);
@@ -7451,7 +7712,7 @@ void reply_lockingX(struct smb_request *req)
        /* Data now points at the beginning of the list
           of smb_unlkrng structs */
        for(i = 0; i < (int)num_ulocks; i++) {
-               ulocks[i].smbpid = get_lock_pid(data, i, large_file_format);
+               ulocks[i].smblctx = get_lock_pid(data, i, large_file_format);
                ulocks[i].count = get_lock_count(data, i, large_file_format);
                ulocks[i].offset = get_lock_offset(data, i, large_file_format, &err);
                ulocks[i].brltype = UNLOCK_LOCK;
@@ -7473,7 +7734,7 @@ void reply_lockingX(struct smb_request *req)
           of smb_lkrng structs */
 
        for(i = 0; i < (int)num_locks; i++) {
-               locks[i].smbpid = get_lock_pid(data, i, large_file_format);
+               locks[i].smblctx = get_lock_pid(data, i, large_file_format);
                locks[i].count = get_lock_count(data, i, large_file_format);
                locks[i].offset = get_lock_offset(data, i, large_file_format, &err);