source3/rpc_client/rpc_transport_smbd.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *  RPC client transport over named pipes to a child smbd
   4  *  Copyright (C) Volker Lendecke 2009
   5  *
   6  *  This program is free software; you can redistribute it and/or modify
   7  *  it under the terms of the GNU General Public License as published by
   8  *  the Free Software Foundation; either version 3 of the License, or
   9  *  (at your option) any later version.
  10  *
  11  *  This program is distributed in the hope that it will be useful,
  12  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  13  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14  *  GNU General Public License for more details.
  15  *
  16  *  You should have received a copy of the GNU General Public License
  17  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  18  */
  19
  20 #include "includes.h"
  21
  22 #undef DBGC_CLASS
  23 #define DBGC_CLASS DBGC_RPC_CLI
  24
  25 /**
  26  * struct rpc_cli_smbd_conn represents a forked smbd. This structure should
  27  * exist only once per process which does the rpc calls.
  28  *
  29  * RPC pipe handles can be attached to this smbd connection with
  30  * rpc_pipe_open_local().
  31  *
  32  * For this to work right, we can not use rpc_transport_np directly, because
  33  * the child smbd wants to write its DEBUG output somewhere. We redirect the
  34  * child's output to rpc_cli_smbd_conn->stdout_fd. While the RPC calls are
  35  * active, we have an event context available and attach a fd event to the
  36  * stdout_df.
  37  */
  38
  39 struct rpc_cli_smbd_conn {
  40         /**
  41          * The smb connection to handle the named pipe traffic over
  42          */
  43         struct cli_state *cli;
  44
  45         /**
  46          * Attached to stdout in the forked smbd, this is where smbd will
  47          * print its DEBUG.
  48          */
  49         int stdout_fd;
  50
  51         /**
  52          * Custom callback provided by the owner of the
  53          * rpc_cli_smbd_conn. Here we send the smbd DEBUG output. Can be NULL.
  54          */
  55         struct {
  56                 void (*fn)(char *buf, size_t len, void *priv);
  57                 void *priv;
  58         } stdout_callback ;
  59 };
  60
  61 /**
  62  * Event handler to be called whenever the forked smbd prints debugging
  63  * output.
  64  */
  65
  66 static void rpc_cli_smbd_stdout_reader(struct event_context *ev,
  67                                        struct fd_event *fde,
  68                                        uint16_t flags, void *priv)
  69 {
  70         struct rpc_cli_smbd_conn *conn = talloc_get_type_abort(
  71                 priv, struct rpc_cli_smbd_conn);
  72         char buf[1024];
  73         ssize_t nread;
  74
  75         if ((flags & EVENT_FD_READ) == 0) {
  76                 return;
  77         }
  78
  79         nread = read(conn->stdout_fd, buf, sizeof(buf)-1);
  80         if (nread < 0) {
  81                 DEBUG(0, ("Could not read from smbd stdout: %s\n",
  82                           strerror(errno)));
  83                 TALLOC_FREE(fde);
  84                 return;
  85         }
  86         if (nread == 0) {
  87                 DEBUG(0, ("EOF from smbd stdout\n"));
  88                 TALLOC_FREE(fde);
  89                 return;
  90         }
  91         buf[nread] = '\0';
  92
  93         if (conn->stdout_callback.fn != NULL) {
  94                 conn->stdout_callback.fn(buf, nread,
  95                                          conn->stdout_callback.priv);
  96         }
  97 }
  98
  99 /**
 100  * struct rpc_transport_smbd_state is the link from a struct rpc_pipe_client
 101  * to the rpc_cli_smbd_conn. We use a named pipe transport as a subtransport.
 102  */
 103
 104 struct rpc_transport_smbd_state {
 105         struct rpc_cli_smbd_conn *conn;
 106         struct rpc_cli_transport *sub_transp;
 107 };
 108
 109 static int rpc_cli_smbd_conn_destructor(struct rpc_cli_smbd_conn *conn)
 110 {
 111         if (conn->cli != NULL) {
 112                 cli_shutdown(conn->cli);
 113                 conn->cli = NULL;
 114         }
 115         if (conn->stdout_fd != -1) {
 116                 close(conn->stdout_fd);
 117                 conn->stdout_fd = -1;
 118         }
 119         return 0;
 120 }
 121
 122 /*
 123  * Do the negprot/sesssetup/tcon to an anonymous ipc$ connection
 124  */
 125
 126 struct get_anon_ipc_state {
 127         struct event_context *ev;
 128         struct cli_state *cli;
 129 };
 130
 131 static void get_anon_ipc_negprot_done(struct async_req *subreq);
 132 static void get_anon_ipc_sesssetup_done(struct async_req *subreq);
 133 static void get_anon_ipc_tcon_done(struct async_req *subreq);
 134
 135 static struct async_req *get_anon_ipc_send(TALLOC_CTX *mem_ctx,
 136                                            struct event_context *ev,
 137                                            struct cli_state *cli)
 138 {
 139         struct async_req *result, *subreq;
 140         struct get_anon_ipc_state *state;
 141
 142         if (!async_req_setup(mem_ctx, &result, &state,
 143                              struct get_anon_ipc_state)) {
 144                 return NULL;
 145         }
 146
 147         state->ev = ev;
 148         state->cli = cli;
 149
 150         subreq = cli_negprot_send(state, ev, cli);
 151         if (subreq == NULL) {
 152                 goto fail;
 153         }
 154         subreq->async.fn = get_anon_ipc_negprot_done;
 155         subreq->async.priv = result;
 156         return result;
 157  fail:
 158         TALLOC_FREE(result);
 159         return NULL;
 160 }
 161
 162 static void get_anon_ipc_negprot_done(struct async_req *subreq)
 163 {
 164         struct async_req *req = talloc_get_type_abort(
 165                 subreq->async.priv, struct async_req);
 166         struct get_anon_ipc_state *state = talloc_get_type_abort(
 167                 req->private_data, struct get_anon_ipc_state);
 168         NTSTATUS status;
 169
 170         status = cli_negprot_recv(subreq);
 171         TALLOC_FREE(subreq);
 172         if (!NT_STATUS_IS_OK(status)) {
 173                 async_req_nterror(req, status);
 174                 return;
 175         }
 176
 177         subreq = cli_session_setup_guest_send(state, state->ev, state->cli);
 178         if (async_req_nomem(subreq, req)) {
 179                 return;
 180         }
 181         subreq->async.fn = get_anon_ipc_sesssetup_done;
 182         subreq->async.priv = req;
 183 }
 184
 185 static void get_anon_ipc_sesssetup_done(struct async_req *subreq)
 186 {
 187         struct async_req *req = talloc_get_type_abort(
 188                 subreq->async.priv, struct async_req);
 189         struct get_anon_ipc_state *state = talloc_get_type_abort(
 190                 req->private_data, struct get_anon_ipc_state);
 191         NTSTATUS status;
 192
 193         status = cli_session_setup_guest_recv(subreq);
 194         TALLOC_FREE(subreq);
 195         if (!NT_STATUS_IS_OK(status)) {
 196                 async_req_nterror(req, status);
 197                 return;
 198         }
 199
 200         subreq = cli_tcon_andx_send(state, state->ev, state->cli,
 201                                     "IPC$", "IPC", NULL, 0);
 202         if (async_req_nomem(subreq, req)) {
 203                 return;
 204         }
 205         subreq->async.fn = get_anon_ipc_tcon_done;
 206         subreq->async.priv = req;
 207 }
 208
 209 static void get_anon_ipc_tcon_done(struct async_req *subreq)
 210 {
 211         struct async_req *req = talloc_get_type_abort(
 212                 subreq->async.priv, struct async_req);
 213         NTSTATUS status;
 214
 215         status = cli_tcon_andx_recv(subreq);
 216         TALLOC_FREE(subreq);
 217         if (!NT_STATUS_IS_OK(status)) {
 218                 async_req_nterror(req, status);
 219                 return;
 220         }
 221         async_req_done(req);
 222 }
 223
 224 static NTSTATUS get_anon_ipc_recv(struct async_req *req)
 225 {
 226         return async_req_simple_recv_ntstatus(req);
 227 }
 228
 229 struct rpc_cli_smbd_conn_init_state {
 230         struct event_context *ev;
 231         struct rpc_cli_smbd_conn *conn;
 232 };
 233
 234 static void rpc_cli_smbd_conn_init_done(struct async_req *subreq);
 235
 236 struct async_req *rpc_cli_smbd_conn_init_send(TALLOC_CTX *mem_ctx,
 237                                               struct event_context *ev,
 238                                               void (*stdout_callback)(char *buf,
 239                                                                       size_t len,
 240                                                                       void *priv),
 241                                               void *priv)
 242 {
 243         struct async_req *result, *subreq;
 244         struct rpc_cli_smbd_conn_init_state *state;
 245         int smb_sock[2];
 246         int stdout_pipe[2];
 247         NTSTATUS status;
 248         pid_t pid;
 249         int ret;
 250
 251         smb_sock[0] = smb_sock[1] = stdout_pipe[0] = stdout_pipe[1] = -1;
 252
 253         if (!async_req_setup(mem_ctx, &result, &state,
 254                              struct rpc_cli_smbd_conn_init_state)) {
 255                 return NULL;
 256         }
 257         state->ev = ev;
 258
 259         state->conn = talloc(state, struct rpc_cli_smbd_conn);
 260         if (state->conn == NULL) {
 261                 goto nomem;
 262         }
 263
 264         state->conn->cli = cli_initialise();
 265         if (state->conn->cli == NULL) {
 266                 goto nomem;
 267         }
 268         state->conn->stdout_fd = -1;
 269         state->conn->stdout_callback.fn = stdout_callback;
 270         state->conn->stdout_callback.priv = priv;
 271         talloc_set_destructor(state->conn, rpc_cli_smbd_conn_destructor);
 272
 273         ret = socketpair(AF_UNIX, SOCK_STREAM, 0, smb_sock);
 274         if (ret == -1) {
 275                 status = map_nt_error_from_unix(errno);
 276                 goto post_status;
 277         }
 278         ret = pipe(stdout_pipe);
 279         if (ret == -1) {
 280                 status = map_nt_error_from_unix(errno);
 281                 goto post_status;
 282         }
 283
 284         pid = sys_fork();
 285         if (pid == -1) {
 286                 status = map_nt_error_from_unix(errno);
 287                 goto post_status;
 288         }
 289         if (pid == 0) {
 290                 char *smbd_cmd;
 291
 292                 close(smb_sock[0]);
 293                 close(stdout_pipe[0]);
 294                 close(0);
 295                 if (dup(smb_sock[1]) == -1) {
 296                         exit(1);
 297                 }
 298                 close(smb_sock[1]);
 299                 close(1);
 300                 if (dup(stdout_pipe[1]) == -1) {
 301                         exit(1);
 302                 }
 303                 close(stdout_pipe[1]);
 304
 305                 smbd_cmd = getenv("SMB_PATH");
 306
 307                 if ((smbd_cmd == NULL)
 308                     && (asprintf(&smbd_cmd, "%s/smbd", get_dyn_SBINDIR())
 309                         == -1)) {
 310                         printf("no memory");
 311                         exit(1);
 312                 }
 313                 if (asprintf(&smbd_cmd, "%s -F -S -d %d", smbd_cmd,
 314                              DEBUGLEVEL) == -1) {
 315                         printf("no memory");
 316                         exit(1);
 317                 }
 318
 319                 exit(system(smbd_cmd));
 320         }
 321
 322         state->conn->cli->fd = smb_sock[0];
 323         smb_sock[0] = -1;
 324         close(smb_sock[1]);
 325         smb_sock[1] = -1;
 326
 327         state->conn->stdout_fd = stdout_pipe[0];
 328         stdout_pipe[0] = -1;
 329         close(stdout_pipe[1]);
 330         stdout_pipe[1] = -1;
 331
 332         subreq = get_anon_ipc_send(state, ev, state->conn->cli);
 333         if (subreq == NULL) {
 334                 goto nomem;
 335         }
 336
 337         if (event_add_fd(ev, state, state->conn->stdout_fd, EVENT_FD_READ,
 338                          rpc_cli_smbd_stdout_reader, state->conn) == NULL) {
 339                 goto nomem;
 340         }
 341
 342         subreq->async.fn = rpc_cli_smbd_conn_init_done;
 343         subreq->async.priv = result;
 344         return result;
 345
 346  nomem:
 347         status = NT_STATUS_NO_MEMORY;
 348  post_status:
 349         if (smb_sock[0] != -1) {
 350                 close(smb_sock[0]);
 351         }
 352         if (smb_sock[1] != -1) {
 353                 close(smb_sock[1]);
 354         }
 355         if (stdout_pipe[0] != -1) {
 356                 close(stdout_pipe[0]);
 357         }
 358         if (stdout_pipe[1] != -1) {
 359                 close(stdout_pipe[1]);
 360         }
 361         if (async_post_ntstatus(result, ev, status)) {
 362                 return result;
 363         }
 364         TALLOC_FREE(result);
 365         return NULL;
 366 }
 367
 368 static void rpc_cli_smbd_conn_init_done(struct async_req *subreq)
 369 {
 370         struct async_req *req = talloc_get_type_abort(
 371                 subreq->async.priv, struct async_req);
 372         NTSTATUS status;
 373
 374         status = get_anon_ipc_recv(subreq);
 375         TALLOC_FREE(subreq);
 376         if (!NT_STATUS_IS_OK(status)) {
 377                 async_req_nterror(req, status);
 378                 return;
 379         }
 380         async_req_done(req);
 381 }
 382
 383 NTSTATUS rpc_cli_smbd_conn_init_recv(struct async_req *req,
 384                                      TALLOC_CTX *mem_ctx,
 385                                      struct rpc_cli_smbd_conn **pconn)
 386 {
 387         struct rpc_cli_smbd_conn_init_state *state = talloc_get_type_abort(
 388                 req->private_data, struct rpc_cli_smbd_conn_init_state);
 389         NTSTATUS status;
 390
 391         if (async_req_is_nterror(req, &status)) {
 392                 return status;
 393         }
 394         *pconn = talloc_move(mem_ctx, &state->conn);
 395         return NT_STATUS_OK;
 396 }
 397
 398 NTSTATUS rpc_cli_smbd_conn_init(TALLOC_CTX *mem_ctx,
 399                                 struct rpc_cli_smbd_conn **pconn,
 400                                 void (*stdout_callback)(char *buf,
 401                                                         size_t len,
 402                                                         void *priv),
 403                                 void *priv)
 404 {
 405         TALLOC_CTX *frame = talloc_stackframe();
 406         struct event_context *ev;
 407         struct async_req *req;
 408         NTSTATUS status;
 409
 410         ev = event_context_init(frame);
 411         if (ev == NULL) {
 412                 status = NT_STATUS_NO_MEMORY;
 413                 goto fail;
 414         }
 415
 416         req = rpc_cli_smbd_conn_init_send(frame, ev, stdout_callback, priv);
 417         if (req == NULL) {
 418                 status = NT_STATUS_NO_MEMORY;
 419                 goto fail;
 420         }
 421
 422         while (req->state < ASYNC_REQ_DONE) {
 423                 event_loop_once(ev);
 424         }
 425
 426         status = rpc_cli_smbd_conn_init_recv(req, mem_ctx, pconn);
 427  fail:
 428         TALLOC_FREE(frame);
 429         return status;
 430 }
 431
 432 static void rpc_smbd_disconnect(struct rpc_transport_smbd_state *transp)
 433 {
 434         if (transp == NULL) {
 435                 return;
 436         }
 437
 438         if (transp->conn == NULL) {
 439                 return;
 440         }
 441
 442         if (transp->conn->cli == NULL) {
 443                 return;
 444         }
 445
 446         if (transp->conn->cli->fd != -1) {
 447                 close(transp->conn->cli->fd);
 448                 transp->conn->cli->fd = -1;
 449         }
 450
 451         transp->conn = NULL;
 452 }
 453
 454 static bool rpc_smbd_is_connected(void *priv)
 455 {
 456         struct rpc_transport_smbd_state *transp = talloc_get_type_abort(
 457                 priv, struct rpc_transport_smbd_state);
 458         bool ok;
 459
 460         if (transp->conn == NULL) {
 461                 return false;
 462         }
 463
 464         if (transp->sub_transp == NULL) {
 465                 return false;
 466         }
 467
 468         ok = transp->sub_transp->is_connected(transp->sub_transp->priv);
 469         if (!ok) {
 470                 rpc_smbd_disconnect(transp);
 471                 return false;
 472         }
 473
 474         return true;
 475 }
 476
 477 static unsigned int rpc_smbd_set_timeout(void *priv, unsigned int timeout)
 478 {
 479         struct rpc_transport_smbd_state *transp = talloc_get_type_abort(
 480                 priv, struct rpc_transport_smbd_state);
 481         bool ok;
 482
 483         ok = rpc_smbd_is_connected(transp);
 484         if (!ok) {
 485                 return 0;
 486         }
 487
 488         if (transp->sub_transp->set_timeout == NULL) {
 489                 return 0;
 490         }
 491
 492         return transp->sub_transp->set_timeout(transp->sub_transp->priv, timeout);
 493 }
 494
 495 struct rpc_smbd_write_state {
 496         struct rpc_transport_smbd_state *transp;
 497         ssize_t written;
 498 };
 499
 500 static void rpc_smbd_write_done(struct async_req *subreq);
 501
 502 static struct async_req *rpc_smbd_write_send(TALLOC_CTX *mem_ctx,
 503                                              struct event_context *ev,
 504                                              const uint8_t *data, size_t size,
 505                                              void *priv)
 506 {
 507         struct rpc_transport_smbd_state *transp = talloc_get_type_abort(
 508                 priv, struct rpc_transport_smbd_state);
 509         struct async_req *result, *subreq;
 510         struct rpc_smbd_write_state *state;
 511         bool ok;
 512
 513         if (!async_req_setup(mem_ctx, &result, &state,
 514                              struct rpc_smbd_write_state)) {
 515                 return NULL;
 516         }
 517
 518         ok = rpc_smbd_is_connected(transp);
 519         if (!ok) {
 520                 ok = async_post_ntstatus(result, ev, NT_STATUS_CONNECTION_INVALID);
 521                 if (!ok) {
 522                         goto fail;
 523                 }
 524                 return result;
 525         }
 526
 527         state->transp = transp;
 528
 529         subreq = transp->sub_transp->write_send(state, ev, data, size,
 530                                                 transp->sub_transp->priv);
 531         if (subreq == NULL) {
 532                 goto fail;
 533         }
 534
 535         if (event_add_fd(ev, state, transp->conn->stdout_fd, EVENT_FD_READ,
 536                          rpc_cli_smbd_stdout_reader, transp->conn) == NULL) {
 537                 goto fail;
 538         }
 539
 540         subreq->async.fn = rpc_smbd_write_done;
 541         subreq->async.priv = result;
 542         return result;
 543
 544  fail:
 545         TALLOC_FREE(result);
 546         return NULL;
 547 }
 548
 549 static void rpc_smbd_write_done(struct async_req *subreq)
 550 {
 551         struct async_req *req = talloc_get_type_abort(
 552                 subreq->async.priv, struct async_req);
 553         struct rpc_smbd_write_state *state = talloc_get_type_abort(
 554                 req->private_data, struct rpc_smbd_write_state);
 555         NTSTATUS status;
 556
 557         status = state->transp->sub_transp->write_recv(subreq, &state->written);
 558         TALLOC_FREE(subreq);
 559         if (!NT_STATUS_IS_OK(status)) {
 560                 rpc_smbd_disconnect(state->transp);
 561                 async_req_nterror(req, status);
 562                 return;
 563         }
 564         async_req_done(req);
 565 }
 566
 567 static NTSTATUS rpc_smbd_write_recv(struct async_req *req, ssize_t *pwritten)
 568 {
 569         struct rpc_smbd_write_state *state = talloc_get_type_abort(
 570                 req->private_data, struct rpc_smbd_write_state);
 571         NTSTATUS status;
 572
 573         if (async_req_is_nterror(req, &status)) {
 574                 return status;
 575         }
 576         *pwritten = state->written;
 577         return NT_STATUS_OK;
 578 }
 579
 580 struct rpc_smbd_read_state {
 581         struct rpc_transport_smbd_state *transp;
 582         ssize_t received;
 583 };
 584
 585 static void rpc_smbd_read_done(struct async_req *subreq);
 586
 587 static struct async_req *rpc_smbd_read_send(TALLOC_CTX *mem_ctx,
 588                                             struct event_context *ev,
 589                                             uint8_t *data, size_t size,
 590                                             void *priv)
 591 {
 592         struct rpc_transport_smbd_state *transp = talloc_get_type_abort(
 593                 priv, struct rpc_transport_smbd_state);
 594         struct async_req *result, *subreq;
 595         struct rpc_smbd_read_state *state;
 596         bool ok;
 597
 598         if (!async_req_setup(mem_ctx, &result, &state,
 599                              struct rpc_smbd_read_state)) {
 600                 return NULL;
 601         }
 602
 603         ok = rpc_smbd_is_connected(transp);
 604         if (!ok) {
 605                 ok = async_post_ntstatus(result, ev, NT_STATUS_CONNECTION_INVALID);
 606                 if (!ok) {
 607                         goto fail;
 608                 }
 609                 return result;
 610         }
 611
 612         state->transp = transp;
 613
 614         subreq = transp->sub_transp->read_send(state, ev, data, size,
 615                                                 transp->sub_transp->priv);
 616         if (subreq == NULL) {
 617                 goto fail;
 618         }
 619
 620         if (event_add_fd(ev, state, transp->conn->stdout_fd, EVENT_FD_READ,
 621                          rpc_cli_smbd_stdout_reader, transp->conn) == NULL) {
 622                 goto fail;
 623         }
 624
 625         subreq->async.fn = rpc_smbd_read_done;
 626         subreq->async.priv = result;
 627         return result;
 628
 629  fail:
 630         TALLOC_FREE(result);
 631         return NULL;
 632 }
 633
 634 static void rpc_smbd_read_done(struct async_req *subreq)
 635 {
 636         struct async_req *req = talloc_get_type_abort(
 637                 subreq->async.priv, struct async_req);
 638         struct rpc_smbd_read_state *state = talloc_get_type_abort(
 639                 req->private_data, struct rpc_smbd_read_state);
 640         NTSTATUS status;
 641
 642         status = state->transp->sub_transp->read_recv(subreq, &state->received);
 643         TALLOC_FREE(subreq);
 644         if (!NT_STATUS_IS_OK(status)) {
 645                 rpc_smbd_disconnect(state->transp);
 646                 async_req_nterror(req, status);
 647                 return;
 648         }
 649         async_req_done(req);
 650 }
 651
 652 static NTSTATUS rpc_smbd_read_recv(struct async_req *req, ssize_t *preceived)
 653 {
 654         struct rpc_smbd_read_state *state = talloc_get_type_abort(
 655                 req->private_data, struct rpc_smbd_read_state);
 656         NTSTATUS status;
 657
 658         if (async_req_is_nterror(req, &status)) {
 659                 return status;
 660         }
 661         *preceived = state->received;
 662         return NT_STATUS_OK;
 663 }
 664
 665 struct rpc_transport_smbd_init_state {
 666         struct rpc_cli_transport *transport;
 667         struct rpc_transport_smbd_state *transport_smbd;
 668 };
 669
 670 static void rpc_transport_smbd_init_done(struct async_req *subreq);
 671
 672 struct async_req *rpc_transport_smbd_init_send(TALLOC_CTX *mem_ctx,
 673                                                struct event_context *ev,
 674                                                struct rpc_cli_smbd_conn *conn,
 675                                                const struct ndr_syntax_id *abstract_syntax)
 676 {
 677         struct async_req *result, *subreq;
 678         struct rpc_transport_smbd_init_state *state;
 679
 680         if (!async_req_setup(mem_ctx, &result, &state,
 681                              struct rpc_transport_smbd_init_state)) {
 682                 return NULL;
 683         }
 684
 685         state->transport = talloc(state, struct rpc_cli_transport);
 686         if (state->transport == NULL) {
 687                 goto fail;
 688         }
 689         state->transport_smbd = talloc(state->transport,
 690                                        struct rpc_transport_smbd_state);
 691         if (state->transport_smbd == NULL) {
 692                 goto fail;
 693         }
 694         state->transport_smbd->conn = conn;
 695         state->transport->priv = state->transport_smbd;
 696
 697         if (event_add_fd(ev, state, conn->stdout_fd, EVENT_FD_READ,
 698                          rpc_cli_smbd_stdout_reader, conn) == NULL) {
 699                 goto fail;
 700         }
 701
 702         subreq = rpc_transport_np_init_send(state, ev, conn->cli,
 703                                             abstract_syntax);
 704         if (subreq == NULL) {
 705                 goto fail;
 706         }
 707         subreq->async.fn = rpc_transport_smbd_init_done;
 708         subreq->async.priv = result;
 709         return result;
 710
 711  fail:
 712         TALLOC_FREE(result);
 713         return NULL;
 714 }
 715
 716 static void rpc_transport_smbd_init_done(struct async_req *subreq)
 717 {
 718         struct async_req *req = talloc_get_type_abort(
 719                 subreq->async.priv, struct async_req);
 720         struct rpc_transport_smbd_init_state *state = talloc_get_type_abort(
 721                 req->private_data, struct rpc_transport_smbd_init_state);
 722         NTSTATUS status;
 723
 724         status = rpc_transport_np_init_recv(
 725                 subreq, state->transport_smbd,
 726                 &state->transport_smbd->sub_transp);
 727         TALLOC_FREE(subreq);
 728         if (!NT_STATUS_IS_OK(status)) {
 729                 async_req_nterror(req, status);
 730                 return;
 731         }
 732         async_req_done(req);
 733 }
 734
 735 NTSTATUS rpc_transport_smbd_init_recv(struct async_req *req,
 736                                       TALLOC_CTX *mem_ctx,
 737                                       struct rpc_cli_transport **presult)
 738 {
 739         struct rpc_transport_smbd_init_state *state = talloc_get_type_abort(
 740                 req->private_data, struct rpc_transport_smbd_init_state);
 741         NTSTATUS status;
 742
 743         if (async_req_is_nterror(req, &status)) {
 744                 return status;
 745         }
 746
 747         state->transport->write_send = rpc_smbd_write_send;
 748         state->transport->write_recv = rpc_smbd_write_recv;
 749         state->transport->read_send = rpc_smbd_read_send;
 750         state->transport->read_recv = rpc_smbd_read_recv;
 751         state->transport->trans_send = NULL;
 752         state->transport->trans_recv = NULL;
 753         state->transport->is_connected = rpc_smbd_is_connected;
 754         state->transport->set_timeout = rpc_smbd_set_timeout;
 755
 756         *presult = talloc_move(mem_ctx, &state->transport);
 757         return NT_STATUS_OK;
 758 }
 759
 760 NTSTATUS rpc_transport_smbd_init(TALLOC_CTX *mem_ctx,
 761                                  struct rpc_cli_smbd_conn *conn,
 762                                  const struct ndr_syntax_id *abstract_syntax,
 763                                  struct rpc_cli_transport **presult)
 764 {
 765         TALLOC_CTX *frame = talloc_stackframe();
 766         struct event_context *ev;
 767         struct async_req *req;
 768         NTSTATUS status;
 769
 770         ev = event_context_init(frame);
 771         if (ev == NULL) {
 772                 status = NT_STATUS_NO_MEMORY;
 773                 goto fail;
 774         }
 775
 776         req = rpc_transport_smbd_init_send(frame, ev, conn, abstract_syntax);
 777         if (req == NULL) {
 778                 status = NT_STATUS_NO_MEMORY;
 779                 goto fail;
 780         }
 781
 782         while (req->state < ASYNC_REQ_DONE) {
 783                 event_loop_once(ev);
 784         }
 785
 786         status = rpc_transport_smbd_init_recv(req, mem_ctx, presult);
 787  fail:
 788         TALLOC_FREE(frame);
 789         return status;
 790 }