s4-drs: implement more of DsUpdateRefs

[nivanova/samba-autobuild/.git] / source4 / rpc_server / handles.c

diff --git a/source4/rpc_server/handles.c b/source4/rpc_server/handles.c
index 6b7d42226786a755b9cbcbac216b1435cfe22bee..085703b3d4f02a37204abfc7af9f8c8918de32b7 100644 (file)
--- a/source4/rpc_server/handles.c
+++ b/source4/rpc_server/handles.c
@@ -7,7 +7,7 @@
    
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
+   the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.
    
    This program is distributed in the hope that it will be useful,
@@ -16,74 +16,96 @@
    GNU General Public License for more details.
    
    You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 
 #include "includes.h"
+#include "../lib/util/dlinklist.h"
+#include "rpc_server/dcerpc_server.h"
+#include "libcli/security/dom_sid.h"
+#include "auth/session.h"
+
+/*
+  destroy a rpc handle
+*/
+static int dcesrv_handle_destructor(struct dcesrv_handle *h)
+{
+       DLIST_REMOVE(h->assoc_group->handles, h);
+       return 0;
+}
+
 
 /*
   allocate a new rpc handle
 */
-struct dcesrv_handle *dcesrv_handle_new(struct dcesrv_state *dce, 
-                                       uint8 handle_type)
+_PUBLIC_ struct dcesrv_handle *dcesrv_handle_new(struct dcesrv_connection_context *context, 
+                                                uint8_t handle_type)
 {
-       TALLOC_CTX *mem_ctx;
        struct dcesrv_handle *h;
+       struct dom_sid *sid;
 
-       mem_ctx = talloc_init("rpc handle type %d\n", handle_type);
-       if (!mem_ctx) {
-               return NULL;
-       }
-       h = talloc(mem_ctx, sizeof(*h));
+       sid = context->conn->auth_state.session_info->security_token->user_sid;
+
+       h = talloc(context->assoc_group, struct dcesrv_handle);
        if (!h) {
-               talloc_destroy(mem_ctx);
                return NULL;
        }
-       h->mem_ctx = mem_ctx;
        h->data = NULL;
-
-       memset(h->wire_handle.data, 'H', sizeof(h->wire_handle.data));
-       strncpy(h->wire_handle.data, dce->ndr->name, 11);
-       h->wire_handle.data[11] = handle_type;
+       h->sid = dom_sid_dup(h, sid);
+       if (h->sid == NULL) {
+               talloc_free(h);
+               return NULL;
+       }
+       h->assoc_group = context->assoc_group;
+       h->iface = context->iface;
+       h->wire_handle.handle_type = handle_type;
+       h->wire_handle.uuid = GUID_random();
        
-       /* TODO: check for wraparound here */
-       SIVAL(&h->wire_handle.data, 12, random());
-       dce->next_handle++;     
-       SIVAL(&h->wire_handle.data, 16, dce->next_handle);
+       DLIST_ADD(context->assoc_group->handles, h);
 
-       DLIST_ADD(dce->handles, h);
+       talloc_set_destructor(h, dcesrv_handle_destructor);
 
        return h;
 }
 
-/*
-  destroy a rpc handle
-*/
-void dcesrv_handle_destroy(struct dcesrv_state *dce, 
-                          struct dcesrv_handle *h)
-{
-       DLIST_REMOVE(dce->handles, h);
-       talloc_destroy(h->mem_ctx);
-}
-
-
-/*
+/**
   find an internal handle given a wire handle. If the wire handle is NULL then
   allocate a new handle
 */
-struct dcesrv_handle *dcesrv_handle_fetch(struct dcesrv_state *dce, 
+_PUBLIC_ struct dcesrv_handle *dcesrv_handle_fetch(
+                                         struct dcesrv_connection_context *context, 
                                          struct policy_handle *p,
-                                         uint8 handle_type)
+                                         uint8_t handle_type)
 {
        struct dcesrv_handle *h;
+       struct dom_sid *sid;
+
+       sid = context->conn->auth_state.session_info->security_token->user_sid;
 
-       if (all_zero(p->data, sizeof(p->data))) {
-               return dcesrv_handle_new(dce, handle_type);
+       if (policy_handle_empty(p)) {
+               /* TODO: we should probably return a NULL handle here */
+               return dcesrv_handle_new(context, handle_type);
        }
 
-       for (h=dce->handles; h; h=h->next) {
-               if (memcmp(h->wire_handle.data, p->data, sizeof(p->data)) == 0) {
+       for (h=context->assoc_group->handles; h; h=h->next) {
+               if (h->wire_handle.handle_type == p->handle_type &&
+                   GUID_equal(&p->uuid, &h->wire_handle.uuid)) {
+                       if (handle_type != DCESRV_HANDLE_ANY &&
+                           p->handle_type != handle_type) {
+                               DEBUG(0,("client gave us the wrong handle type (%d should be %d)\n",
+                                        p->handle_type, handle_type));
+                               return NULL;
+                       }
+                       if (!dom_sid_equal(h->sid, sid)) {
+                               DEBUG(0,(__location__ ": Attempt to use invalid sid %s - %s\n",
+                                        dom_sid_string(context, h->sid),
+                                        dom_sid_string(context, sid)));
+                               return NULL;
+                       }
+                       if (h->iface != context->iface) {
+                               DEBUG(0,(__location__ ": Attempt to use invalid iface\n"));
+                               return NULL;
+                       }
                        return h;
                }
        }