2 Unix SMB/CIFS implementation.
4 Winbind daemon - miscellaneous other functions
6 Copyright (C) Tim Potter 2000
7 Copyright (C) Andrew Bartlett 2002
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
27 #define DBGC_CLASS DBGC_WINBIND
29 /* Check the machine account password is valid */
31 void winbindd_check_machine_acct(struct winbindd_cli_state
*state
)
33 DEBUG(3, ("[%5lu]: check machine account\n",
34 (unsigned long)state
->pid
));
36 sendto_domain(state
, find_our_domain());
39 enum winbindd_result
winbindd_dual_check_machine_acct(struct winbindd_domain
*domain
,
40 struct winbindd_cli_state
*state
)
42 NTSTATUS result
= NT_STATUS_UNSUCCESSFUL
;
44 struct winbindd_domain
*contact_domain
;
46 DEBUG(3, ("[%5lu]: check machine account\n", (unsigned long)state
->pid
));
48 /* Get trust account password */
52 contact_domain
= find_our_domain();
54 /* This call does a cli_nt_setup_creds() which implicitly checks
55 the trust account password. */
57 invalidate_cm_connection(&contact_domain
->conn
);
60 struct rpc_pipe_client
*netlogon_pipe
;
61 result
= cm_connect_netlogon(contact_domain
, &netlogon_pipe
);
64 if (!NT_STATUS_IS_OK(result
)) {
65 DEBUG(3, ("could not open handle to NETLOGON pipe\n"));
69 /* There is a race condition between fetching the trust account
70 password and the periodic machine password change. So it's
71 possible that the trust account password has been changed on us.
72 We are returned NT_STATUS_ACCESS_DENIED if this happens. */
76 if ((num_retries
< MAX_RETRIES
) &&
77 NT_STATUS_V(result
) == NT_STATUS_V(NT_STATUS_ACCESS_DENIED
)) {
82 /* Pass back result code - zero for success, other values for
85 DEBUG(3, ("secret is %s\n", NT_STATUS_IS_OK(result
) ?
89 set_auth_errors(&state
->response
, result
);
91 DEBUG(NT_STATUS_IS_OK(result
) ? 5 : 2, ("Checking the trust account password returned %s\n",
92 state
->response
.data
.auth
.nt_status_string
));
94 return NT_STATUS_IS_OK(result
) ? WINBINDD_OK
: WINBINDD_ERROR
;
97 /* Helpers for listing user and group names */
99 const char *ent_type_strings
[] = {"users",
102 static const char *get_ent_type_string(enum ent_type type
)
104 return ent_type_strings
[type
];
107 struct listent_state
{
109 struct winbindd_cli_state
*cli_state
;
113 uint32_t extra_data_len
;
116 static void listent_recv(void *private_data
, bool success
, fstring dom_name
,
119 /* List domain users/groups without mapping to unix ids */
120 void winbindd_list_ent(struct winbindd_cli_state
*state
, enum ent_type type
)
122 struct winbindd_domain
*domain
;
123 const char *which_domain
;
124 struct listent_state
*ent_state
;
126 DEBUG(3, ("[%5lu]: list %s\n", (unsigned long)state
->pid
,
127 get_ent_type_string(type
)));
129 /* Ensure null termination */
130 state
->request
.domain_name
[sizeof(state
->request
.domain_name
)-1]='\0';
131 which_domain
= state
->request
.domain_name
;
133 /* Initialize listent_state */
134 ent_state
= TALLOC_P(state
->mem_ctx
, struct listent_state
);
135 if (ent_state
== NULL
) {
136 DEBUG(0, ("talloc failed\n"));
137 request_error(state
);
141 ent_state
->mem_ctx
= state
->mem_ctx
;
142 ent_state
->cli_state
= state
;
143 ent_state
->type
= type
;
144 ent_state
->domain_count
= 0;
145 ent_state
->extra_data
= NULL
;
146 ent_state
->extra_data_len
= 0;
148 /* Must count the full list of expected domains before we request data
149 * from any of them. Otherwise it's possible for a connection to the
150 * first domain to fail, call listent_recv(), and return to the
151 * client without checking any other domains. */
152 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
153 /* if we have a domain name restricting the request and this
154 one in the list doesn't match, then just bypass the remainder
156 if ( *which_domain
&& !strequal(which_domain
, domain
->name
) )
159 ent_state
->domain_count
++;
162 /* Make sure we're enumerating at least one domain */
163 if (!ent_state
->domain_count
) {
168 /* Enumerate list of trusted domains and request user/group list from
170 for (domain
= domain_list(); domain
; domain
= domain
->next
) {
171 if ( *which_domain
&& !strequal(which_domain
, domain
->name
) )
174 winbindd_listent_async(state
->mem_ctx
, domain
,
175 listent_recv
, ent_state
, type
);
179 static void listent_recv(void *private_data
, bool success
, fstring dom_name
,
182 /* extra_data comes to us as a '\0' terminated string of comma
183 separated users or groups */
184 struct listent_state
*state
= talloc_get_type_abort(
185 private_data
, struct listent_state
);
187 /* Append users/groups from one domain onto the whole list */
189 DEBUG(5, ("listent_recv: %s returned %s.\n",
190 dom_name
, get_ent_type_string(state
->type
)));
191 if (!state
->extra_data
)
192 state
->extra_data
= talloc_asprintf(state
->mem_ctx
,
195 state
->extra_data
= talloc_asprintf_append(
198 /* Add one for the '\0' and each additional ',' */
199 state
->extra_data_len
+= strlen(extra_data
) + 1;
202 DEBUG(5, ("listent_recv: %s returned no %s.\n",
203 dom_name
, get_ent_type_string(state
->type
)));
206 if (--state
->domain_count
)
207 /* Still waiting for some child domains to return */
210 /* Return list of all users/groups to the client */
211 if (state
->extra_data
) {
212 state
->cli_state
->response
.extra_data
.data
=
213 SMB_STRDUP(state
->extra_data
);
214 state
->cli_state
->response
.length
+= state
->extra_data_len
;
217 request_ok(state
->cli_state
);
220 /* Constants and helper functions for determining domain trust types */
229 const char *trust_type_strings
[] = {"External",
234 static enum trust_type
get_trust_type(struct winbindd_tdc_domain
*domain
)
236 if (domain
->trust_attribs
== NETR_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
)
238 else if (domain
->trust_attribs
== NETR_TRUST_ATTRIBUTE_FOREST_TRANSITIVE
)
240 else if (((domain
->trust_flags
& NETR_TRUST_FLAG_IN_FOREST
) == NETR_TRUST_FLAG_IN_FOREST
) &&
241 ((domain
->trust_flags
& NETR_TRUST_FLAG_PRIMARY
) == 0x0))
246 static const char *get_trust_type_string(struct winbindd_tdc_domain
*domain
)
248 return trust_type_strings
[get_trust_type(domain
)];
251 static bool trust_is_inbound(struct winbindd_tdc_domain
*domain
)
253 return (domain
->trust_flags
== 0x0) ||
254 ((domain
->trust_flags
& NETR_TRUST_FLAG_IN_FOREST
) ==
255 NETR_TRUST_FLAG_IN_FOREST
) ||
256 ((domain
->trust_flags
& NETR_TRUST_FLAG_INBOUND
) ==
257 NETR_TRUST_FLAG_INBOUND
);
260 static bool trust_is_outbound(struct winbindd_tdc_domain
*domain
)
262 return (domain
->trust_flags
== 0x0) ||
263 ((domain
->trust_flags
& NETR_TRUST_FLAG_IN_FOREST
) ==
264 NETR_TRUST_FLAG_IN_FOREST
) ||
265 ((domain
->trust_flags
& NETR_TRUST_FLAG_OUTBOUND
) ==
266 NETR_TRUST_FLAG_OUTBOUND
);
269 static bool trust_is_transitive(struct winbindd_tdc_domain
*domain
)
271 if ((domain
->trust_attribs
== NETR_TRUST_ATTRIBUTE_NON_TRANSITIVE
) ||
272 (domain
->trust_attribs
== NETR_TRUST_ATTRIBUTE_QUARANTINED_DOMAIN
) ||
273 (domain
->trust_attribs
== NETR_TRUST_ATTRIBUTE_TREAT_AS_EXTERNAL
))
278 void winbindd_list_trusted_domains(struct winbindd_cli_state
*state
)
280 struct winbindd_tdc_domain
*dom_list
= NULL
;
281 struct winbindd_tdc_domain
*d
= NULL
;
282 size_t num_domains
= 0;
283 int extra_data_len
= 0;
284 char *extra_data
= NULL
;
287 DEBUG(3, ("[%5lu]: list trusted domains\n",
288 (unsigned long)state
->pid
));
290 if( !wcache_tdc_fetch_list( &dom_list
, &num_domains
)) {
291 request_error(state
);
295 for ( i
= 0; i
< num_domains
; i
++ ) {
296 struct winbindd_domain
*domain
;
297 bool is_online
= true;
300 domain
= find_domain_from_name_noinit(d
->domain_name
);
302 is_online
= domain
->online
;
306 extra_data
= talloc_asprintf(state
->mem_ctx
,
307 "%s\\%s\\%s\\%s\\%s\\%s\\%s\\%s",
309 d
->dns_name
? d
->dns_name
: d
->domain_name
,
310 sid_string_talloc(state
->mem_ctx
, &d
->sid
),
311 get_trust_type_string(d
),
312 trust_is_transitive(d
) ? "Yes" : "No",
313 trust_is_inbound(d
) ? "Yes" : "No",
314 trust_is_outbound(d
) ? "Yes" : "No",
315 is_online
? "Online" : "Offline" );
317 extra_data
= talloc_asprintf(state
->mem_ctx
,
318 "%s\n%s\\%s\\%s\\%s\\%s\\%s\\%s\\%s",
321 d
->dns_name
? d
->dns_name
: d
->domain_name
,
322 sid_string_talloc(state
->mem_ctx
, &d
->sid
),
323 get_trust_type_string(d
),
324 trust_is_transitive(d
) ? "Yes" : "No",
325 trust_is_inbound(d
) ? "Yes" : "No",
326 trust_is_outbound(d
) ? "Yes" : "No",
327 is_online
? "Online" : "Offline" );
332 if (extra_data
!= NULL
) {
333 extra_data_len
= strlen(extra_data
);
336 if (extra_data_len
> 0) {
337 state
->response
.extra_data
.data
= SMB_STRDUP(extra_data
);
338 state
->response
.length
+= extra_data_len
+1;
343 TALLOC_FREE( dom_list
);
344 TALLOC_FREE( extra_data
);
347 enum winbindd_result
winbindd_dual_list_trusted_domains(struct winbindd_domain
*domain
,
348 struct winbindd_cli_state
*state
)
350 uint32 i
, num_domains
;
351 char **names
, **alt_names
;
353 int extra_data_len
= 0;
356 bool have_own_domain
= False
;
358 DEBUG(3, ("[%5lu]: list trusted domains\n",
359 (unsigned long)state
->pid
));
361 result
= domain
->methods
->trusted_domains(domain
, state
->mem_ctx
,
362 &num_domains
, &names
,
365 if (!NT_STATUS_IS_OK(result
)) {
366 DEBUG(3, ("winbindd_dual_list_trusted_domains: trusted_domains returned %s\n",
367 nt_errstr(result
) ));
368 return WINBINDD_ERROR
;
371 extra_data
= talloc_strdup(state
->mem_ctx
, "");
374 extra_data
= talloc_asprintf(
375 state
->mem_ctx
, "%s\\%s\\%s",
376 names
[0], alt_names
[0] ? alt_names
[0] : names
[0],
377 sid_string_talloc(state
->mem_ctx
, &sids
[0]));
379 for (i
=1; i
<num_domains
; i
++)
380 extra_data
= talloc_asprintf(
381 state
->mem_ctx
, "%s\n%s\\%s\\%s",
382 extra_data
, names
[i
],
383 alt_names
[i
] ? alt_names
[i
] : names
[i
],
384 sid_string_talloc(state
->mem_ctx
, &sids
[i
]));
386 /* add our primary domain */
388 for (i
=0; i
<num_domains
; i
++) {
389 if (strequal(names
[i
], domain
->name
)) {
390 have_own_domain
= True
;
395 if (state
->request
.data
.list_all_domains
&& !have_own_domain
) {
396 extra_data
= talloc_asprintf(
397 state
->mem_ctx
, "%s\n%s\\%s\\%s",
398 extra_data
, domain
->name
,
399 domain
->alt_name
? domain
->alt_name
: domain
->name
,
400 sid_string_talloc(state
->mem_ctx
, &domain
->sid
));
403 /* This is a bit excessive, but the extra data sooner or later will be
407 if (extra_data
!= NULL
) {
408 extra_data_len
= strlen(extra_data
);
411 if (extra_data_len
> 0) {
412 state
->response
.extra_data
.data
= SMB_STRDUP(extra_data
);
413 state
->response
.length
+= extra_data_len
+1;
419 void winbindd_getdcname(struct winbindd_cli_state
*state
)
421 struct winbindd_domain
*domain
;
423 state
->request
.domain_name
424 [sizeof(state
->request
.domain_name
)-1] = '\0';
426 DEBUG(3, ("[%5lu]: Get DC name for %s\n", (unsigned long)state
->pid
,
427 state
->request
.domain_name
));
429 domain
= find_domain_from_name_noinit(state
->request
.domain_name
);
430 if (domain
&& domain
->internal
) {
431 fstrcpy(state
->response
.data
.dc_name
, global_myname());
436 sendto_domain(state
, find_our_domain());
439 enum winbindd_result
winbindd_dual_getdcname(struct winbindd_domain
*domain
,
440 struct winbindd_cli_state
*state
)
442 const char *dcname_slash
= NULL
;
444 struct rpc_pipe_client
*netlogon_pipe
;
447 unsigned int orig_timeout
;
448 struct winbindd_domain
*req_domain
;
450 state
->request
.domain_name
451 [sizeof(state
->request
.domain_name
)-1] = '\0';
453 DEBUG(3, ("[%5lu]: Get DC name for %s\n", (unsigned long)state
->pid
,
454 state
->request
.domain_name
));
456 result
= cm_connect_netlogon(domain
, &netlogon_pipe
);
458 if (!NT_STATUS_IS_OK(result
)) {
459 DEBUG(1, ("Can't contact the NETLOGON pipe\n"));
460 return WINBINDD_ERROR
;
463 /* This call can take a long time - allow the server to time out.
464 35 seconds should do it. */
466 orig_timeout
= rpccli_set_timeout(netlogon_pipe
, 35000);
468 req_domain
= find_domain_from_name_noinit(state
->request
.domain_name
);
469 if (req_domain
== domain
) {
470 result
= rpccli_netr_GetDcName(netlogon_pipe
,
473 state
->request
.domain_name
,
477 result
= rpccli_netr_GetAnyDCName(netlogon_pipe
,
480 state
->request
.domain_name
,
484 /* And restore our original timeout. */
485 rpccli_set_timeout(netlogon_pipe
, orig_timeout
);
487 if (!NT_STATUS_IS_OK(result
)) {
488 DEBUG(5,("Error requesting DCname for domain %s: %s\n",
489 state
->request
.domain_name
, nt_errstr(result
)));
490 return WINBINDD_ERROR
;
493 if (!W_ERROR_IS_OK(werr
)) {
494 DEBUG(5, ("Error requesting DCname for domain %s: %s\n",
495 state
->request
.domain_name
, dos_errstr(werr
)));
496 return WINBINDD_ERROR
;
507 fstrcpy(state
->response
.data
.dc_name
, p
);
511 struct sequence_state
{
513 struct winbindd_cli_state
*cli_state
;
514 struct winbindd_domain
*domain
;
515 struct winbindd_request
*request
;
516 struct winbindd_response
*response
;
520 static void sequence_recv(void *private_data
, bool success
);
522 void winbindd_show_sequence(struct winbindd_cli_state
*state
)
524 struct sequence_state
*seq
;
526 /* Ensure null termination */
527 state
->request
.domain_name
[sizeof(state
->request
.domain_name
)-1]='\0';
529 if (strlen(state
->request
.domain_name
) > 0) {
530 struct winbindd_domain
*domain
;
531 domain
= find_domain_from_name_noinit(
532 state
->request
.domain_name
);
533 if (domain
== NULL
) {
534 request_error(state
);
537 sendto_domain(state
, domain
);
541 /* Ask all domains in sequence, collect the results in sequence_recv */
543 seq
= TALLOC_P(state
->mem_ctx
, struct sequence_state
);
545 DEBUG(0, ("talloc failed\n"));
546 request_error(state
);
550 seq
->mem_ctx
= state
->mem_ctx
;
551 seq
->cli_state
= state
;
552 seq
->domain
= domain_list();
553 if (seq
->domain
== NULL
) {
554 DEBUG(0, ("domain list empty\n"));
555 request_error(state
);
558 seq
->request
= TALLOC_ZERO_P(state
->mem_ctx
,
559 struct winbindd_request
);
560 seq
->response
= TALLOC_ZERO_P(state
->mem_ctx
,
561 struct winbindd_response
);
562 seq
->extra_data
= talloc_strdup(state
->mem_ctx
, "");
564 if ((seq
->request
== NULL
) || (seq
->response
== NULL
) ||
565 (seq
->extra_data
== NULL
)) {
566 DEBUG(0, ("talloc failed\n"));
567 request_error(state
);
571 seq
->request
->length
= sizeof(*seq
->request
);
572 seq
->request
->cmd
= WINBINDD_SHOW_SEQUENCE
;
573 fstrcpy(seq
->request
->domain_name
, seq
->domain
->name
);
575 async_domain_request(state
->mem_ctx
, seq
->domain
,
576 seq
->request
, seq
->response
,
580 static void sequence_recv(void *private_data
, bool success
)
582 struct sequence_state
*state
=
583 (struct sequence_state
*)private_data
;
584 uint32 seq
= DOM_SEQUENCE_NONE
;
586 if ((success
) && (state
->response
->result
== WINBINDD_OK
))
587 seq
= state
->response
->data
.sequence_number
;
589 if (seq
== DOM_SEQUENCE_NONE
) {
590 state
->extra_data
= talloc_asprintf(state
->mem_ctx
,
591 "%s%s : DISCONNECTED\n",
593 state
->domain
->name
);
595 state
->extra_data
= talloc_asprintf(state
->mem_ctx
,
598 state
->domain
->name
, seq
);
601 state
->domain
->sequence_number
= seq
;
603 state
->domain
= state
->domain
->next
;
605 if (state
->domain
== NULL
) {
606 struct winbindd_cli_state
*cli_state
= state
->cli_state
;
607 cli_state
->response
.length
=
608 sizeof(cli_state
->response
) +
609 strlen(state
->extra_data
) + 1;
610 cli_state
->response
.extra_data
.data
=
611 SMB_STRDUP(state
->extra_data
);
612 request_ok(cli_state
);
616 /* Ask the next domain */
617 fstrcpy(state
->request
->domain_name
, state
->domain
->name
);
618 async_domain_request(state
->mem_ctx
, state
->domain
,
619 state
->request
, state
->response
,
620 sequence_recv
, state
);
623 /* This is the child-only version of --sequence. It only allows for a single
624 * domain (ie "our" one) to be displayed. */
626 enum winbindd_result
winbindd_dual_show_sequence(struct winbindd_domain
*domain
,
627 struct winbindd_cli_state
*state
)
629 DEBUG(3, ("[%5lu]: show sequence\n", (unsigned long)state
->pid
));
631 /* Ensure null termination */
632 state
->request
.domain_name
[sizeof(state
->request
.domain_name
)-1]='\0';
634 domain
->methods
->sequence_number(domain
, &domain
->sequence_number
);
636 state
->response
.data
.sequence_number
=
637 domain
->sequence_number
;
642 struct domain_info_state
{
643 struct winbindd_domain
*domain
;
644 struct winbindd_cli_state
*cli_state
;
647 static void domain_info_init_recv(void *private_data
, bool success
);
649 void winbindd_domain_info(struct winbindd_cli_state
*state
)
651 struct winbindd_domain
*domain
;
653 DEBUG(3, ("[%5lu]: domain_info [%s]\n", (unsigned long)state
->pid
,
654 state
->request
.domain_name
));
656 domain
= find_domain_from_name_noinit(state
->request
.domain_name
);
658 if (domain
== NULL
) {
659 DEBUG(3, ("Did not find domain [%s]\n",
660 state
->request
.domain_name
));
661 request_error(state
);
665 if (!domain
->initialized
) {
666 struct domain_info_state
*istate
;
668 istate
= TALLOC_P(state
->mem_ctx
, struct domain_info_state
);
669 if (istate
== NULL
) {
670 DEBUG(0, ("talloc failed\n"));
671 request_error(state
);
675 istate
->cli_state
= state
;
676 istate
->domain
= domain
;
678 init_child_connection(domain
, domain_info_init_recv
, istate
);
683 fstrcpy(state
->response
.data
.domain_info
.name
,
685 fstrcpy(state
->response
.data
.domain_info
.alt_name
,
687 sid_to_fstring(state
->response
.data
.domain_info
.sid
, &domain
->sid
);
689 state
->response
.data
.domain_info
.native_mode
=
691 state
->response
.data
.domain_info
.active_directory
=
692 domain
->active_directory
;
693 state
->response
.data
.domain_info
.primary
=
699 static void domain_info_init_recv(void *private_data
, bool success
)
701 struct domain_info_state
*istate
=
702 (struct domain_info_state
*)private_data
;
703 struct winbindd_cli_state
*state
= istate
->cli_state
;
704 struct winbindd_domain
*domain
= istate
->domain
;
706 DEBUG(10, ("Got back from child init: %d\n", success
));
708 if ((!success
) || (!domain
->initialized
)) {
709 DEBUG(5, ("Could not init child for domain %s\n",
711 request_error(state
);
715 fstrcpy(state
->response
.data
.domain_info
.name
,
717 fstrcpy(state
->response
.data
.domain_info
.alt_name
,
719 sid_to_fstring(state
->response
.data
.domain_info
.sid
, &domain
->sid
);
721 state
->response
.data
.domain_info
.native_mode
=
723 state
->response
.data
.domain_info
.active_directory
=
724 domain
->active_directory
;
725 state
->response
.data
.domain_info
.primary
=
731 void winbindd_ping(struct winbindd_cli_state
*state
)
733 DEBUG(3, ("[%5lu]: ping\n", (unsigned long)state
->pid
));
737 /* List various tidbits of information */
739 void winbindd_info(struct winbindd_cli_state
*state
)
742 DEBUG(3, ("[%5lu]: request misc info\n", (unsigned long)state
->pid
));
744 state
->response
.data
.info
.winbind_separator
= *lp_winbind_separator();
745 fstrcpy(state
->response
.data
.info
.samba_version
, SAMBA_VERSION_STRING
);
749 /* Tell the client the current interface version */
751 void winbindd_interface_version(struct winbindd_cli_state
*state
)
753 DEBUG(3, ("[%5lu]: request interface version\n",
754 (unsigned long)state
->pid
));
756 state
->response
.data
.interface_version
= WINBIND_INTERFACE_VERSION
;
760 /* What domain are we a member of? */
762 void winbindd_domain_name(struct winbindd_cli_state
*state
)
764 DEBUG(3, ("[%5lu]: request domain name\n", (unsigned long)state
->pid
));
766 fstrcpy(state
->response
.data
.domain_name
, lp_workgroup());
770 /* What's my name again? */
772 void winbindd_netbios_name(struct winbindd_cli_state
*state
)
774 DEBUG(3, ("[%5lu]: request netbios name\n",
775 (unsigned long)state
->pid
));
777 fstrcpy(state
->response
.data
.netbios_name
, global_myname());
781 /* Where can I find the privilaged pipe? */
783 void winbindd_priv_pipe_dir(struct winbindd_cli_state
*state
)
786 DEBUG(3, ("[%5lu]: request location of privileged pipe\n",
787 (unsigned long)state
->pid
));
789 state
->response
.extra_data
.data
= SMB_STRDUP(get_winbind_priv_pipe_dir());
790 if (!state
->response
.extra_data
.data
) {
791 DEBUG(0, ("malloc failed\n"));
792 request_error(state
);
796 /* must add one to length to copy the 0 for string termination */
797 state
->response
.length
+=
798 strlen((char *)state
->response
.extra_data
.data
) + 1;