source3/smbd/pysmbd.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Set NT and POSIX ACLs and other VFS operations from Python
   4
   5    Copyrigyt (C) Andrew Bartlett 2012
   6    Copyright (C) Jeremy Allison 1994-2009.
   7    Copyright (C) Andreas Gruenbacher 2002.
   8    Copyright (C) Simo Sorce <idra@samba.org> 2009.
   9    Copyright (C) Simo Sorce 2002
  10    Copyright (C) Eric Lorimer 2002
  11
  12    This program is free software; you can redistribute it and/or modify
  13    it under the terms of the GNU General Public License as published by
  14    the Free Software Foundation; either version 3 of the License, or
  15    (at your option) any later version.
  16
  17    This program is distributed in the hope that it will be useful,
  18    but WITHOUT ANY WARRANTY; without even the implied warranty of
  19    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  20    GNU General Public License for more details.
  21
  22    You should have received a copy of the GNU General Public License
  23    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  24 */
  25
  26 #include <Python.h>
  27 #include "includes.h"
  28 #include "smbd/smbd.h"
  29 #include "libcli/util/pyerrors.h"
  30 #include "librpc/rpc/pyrpc_util.h"
  31 #include <pytalloc.h>
  32 #include "system/filesys.h"
  33
  34 extern const struct generic_mapping file_generic_mapping;
  35
  36 #undef  DBGC_CLASS
  37 #define DBGC_CLASS DBGC_ACLS
  38
  39 static int conn_free_wrapper(connection_struct *conn)
  40 {
  41         conn_free(conn);
  42         return 0;
  43 };
  44
  45 static connection_struct *get_conn(TALLOC_CTX *mem_ctx, const char *service)
  46 {
  47         connection_struct *conn;
  48         TALLOC_CTX *frame = talloc_stackframe();
  49         int snum = -1;
  50         NTSTATUS status;
  51
  52         if (!posix_locking_init(false)) {
  53                 PyErr_NoMemory();
  54                 TALLOC_FREE(frame);
  55                 return NULL;
  56         }
  57
  58         if (service) {
  59                 snum = lp_servicenumber(service);
  60                 if (snum == -1) {
  61                         TALLOC_FREE(frame);
  62                         PyErr_SetString(PyExc_RuntimeError, "unknown service");
  63                         return NULL;
  64                 }
  65         }
  66
  67         status = create_conn_struct(mem_ctx, NULL, NULL, &conn, snum, "/",
  68                                             NULL);
  69         PyErr_NTSTATUS_IS_ERR_RAISE(status);
  70
  71         TALLOC_FREE(frame);
  72         /* Ignore read-only and share restrictions */
  73         conn->read_only = false;
  74         conn->share_access = SEC_RIGHTS_FILE_ALL;
  75         talloc_set_destructor(conn, conn_free_wrapper);
  76         return conn;
  77 }
  78
  79 static int set_sys_acl_conn(const char *fname,
  80                                  SMB_ACL_TYPE_T acltype,
  81                                  SMB_ACL_T theacl, connection_struct *conn)
  82 {
  83         int ret;
  84         struct smb_filename *smb_fname = NULL;
  85         mode_t saved_umask;
  86
  87         TALLOC_CTX *frame = talloc_stackframe();
  88
  89         /* we want total control over the permissions on created files,
  90            so set our umask to 0 */
  91         saved_umask = umask(0);
  92
  93         smb_fname = synthetic_smb_fname_split(frame,
  94                                         fname,
  95                                         lp_posix_pathnames());
  96         if (smb_fname == NULL) {
  97                 TALLOC_FREE(frame);
  98                 umask(saved_umask);
  99                 return -1;
 100         }
 101
 102         ret = SMB_VFS_SYS_ACL_SET_FILE( conn, smb_fname, acltype, theacl);
 103
 104         umask(saved_umask);
 105
 106         TALLOC_FREE(frame);
 107         return ret;
 108 }
 109
 110 static NTSTATUS set_nt_acl_conn(const char *fname,
 111                                 uint32_t security_info_sent, const struct security_descriptor *sd,
 112                                 connection_struct *conn)
 113 {
 114         TALLOC_CTX *frame = talloc_stackframe();
 115         NTSTATUS status = NT_STATUS_OK;
 116         files_struct *fsp;
 117         struct smb_filename *smb_fname = NULL;
 118         int flags, ret;
 119         mode_t saved_umask;
 120
 121         fsp = talloc_zero(frame, struct files_struct);
 122         if (fsp == NULL) {
 123                 TALLOC_FREE(frame);
 124                 return NT_STATUS_NO_MEMORY;
 125         }
 126         fsp->fh = talloc(fsp, struct fd_handle);
 127         if (fsp->fh == NULL) {
 128                 TALLOC_FREE(frame);
 129                 return NT_STATUS_NO_MEMORY;
 130         }
 131         fsp->conn = conn;
 132
 133         /* we want total control over the permissions on created files,
 134            so set our umask to 0 */
 135         saved_umask = umask(0);
 136
 137         smb_fname = synthetic_smb_fname_split(fsp,
 138                                         fname,
 139                                         lp_posix_pathnames());
 140         if (smb_fname == NULL) {
 141                 TALLOC_FREE(frame);
 142                 umask(saved_umask);
 143                 return NT_STATUS_NO_MEMORY;
 144         }
 145
 146         fsp->fsp_name = smb_fname;
 147
 148 #ifdef O_DIRECTORY
 149         flags = O_RDONLY|O_DIRECTORY;
 150 #else
 151         /* POSIX allows us to open a directory with O_RDONLY. */
 152         flags = O_RDONLY;
 153 #endif
 154
 155         fsp->fh->fd = SMB_VFS_OPEN(conn, smb_fname, fsp, O_RDWR, 00400);
 156         if (fsp->fh->fd == -1 && errno == EISDIR) {
 157                 fsp->fh->fd = SMB_VFS_OPEN(conn, smb_fname, fsp, flags, 00400);
 158         }
 159         if (fsp->fh->fd == -1) {
 160                 printf("open: error=%d (%s)\n", errno, strerror(errno));
 161                 TALLOC_FREE(frame);
 162                 umask(saved_umask);
 163                 return NT_STATUS_UNSUCCESSFUL;
 164         }
 165
 166         ret = SMB_VFS_FSTAT(fsp, &smb_fname->st);
 167         if (ret == -1) {
 168                 /* If we have an fd, this stat should succeed. */
 169                 DEBUG(0,("Error doing fstat on open file %s "
 170                         "(%s)\n",
 171                         smb_fname_str_dbg(smb_fname),
 172                         strerror(errno) ));
 173                 TALLOC_FREE(frame);
 174                 umask(saved_umask);
 175                 return map_nt_error_from_unix(errno);
 176         }
 177
 178         fsp->file_id = vfs_file_id_from_sbuf(conn, &smb_fname->st);
 179         fsp->vuid = UID_FIELD_INVALID;
 180         fsp->file_pid = 0;
 181         fsp->can_lock = True;
 182         fsp->can_read = True;
 183         fsp->can_write = True;
 184         fsp->print_file = NULL;
 185         fsp->modified = False;
 186         fsp->sent_oplock_break = NO_BREAK_SENT;
 187         fsp->is_directory = S_ISDIR(smb_fname->st.st_ex_mode);
 188
 189         status = SMB_VFS_FSET_NT_ACL( fsp, security_info_sent, sd);
 190         if (!NT_STATUS_IS_OK(status)) {
 191                 DEBUG(0,("set_nt_acl_no_snum: fset_nt_acl returned %s.\n", nt_errstr(status)));
 192         }
 193
 194         SMB_VFS_CLOSE(fsp);
 195
 196         conn_free(conn);
 197         TALLOC_FREE(frame);
 198
 199         umask(saved_umask);
 200         return status;
 201 }
 202
 203 static NTSTATUS get_nt_acl_conn(TALLOC_CTX *mem_ctx,
 204                                 const char *fname,
 205                                 connection_struct *conn,
 206                                 uint32_t security_info_wanted,
 207                                 struct security_descriptor **sd)
 208 {
 209         TALLOC_CTX *frame = talloc_stackframe();
 210         NTSTATUS status;
 211         struct smb_filename *smb_fname = synthetic_smb_fname(talloc_tos(),
 212                                         fname,
 213                                         NULL,
 214                                         NULL,
 215                                         lp_posix_pathnames() ?
 216                                                 SMB_FILENAME_POSIX_PATH : 0);
 217
 218         if (smb_fname == NULL) {
 219                 TALLOC_FREE(frame);
 220                 return NT_STATUS_NO_MEMORY;
 221         }
 222
 223         status = SMB_VFS_GET_NT_ACL(conn,
 224                                 smb_fname,
 225                                 security_info_wanted,
 226                                 mem_ctx,
 227                                 sd);
 228         if (!NT_STATUS_IS_OK(status)) {
 229                 DEBUG(0,("get_nt_acl_conn: get_nt_acl returned %s.\n", nt_errstr(status)));
 230         }
 231
 232         TALLOC_FREE(frame);
 233
 234         return status;
 235 }
 236
 237 static int set_acl_entry_perms(SMB_ACL_ENTRY_T entry, mode_t perm_mask)
 238 {
 239         SMB_ACL_PERMSET_T perms = NULL;
 240
 241         if (sys_acl_get_permset(entry, &perms) != 0) {
 242                 return -1;
 243         }
 244
 245         if (sys_acl_clear_perms(perms) != 0) {
 246                 return -1;
 247         }
 248
 249         if ((perm_mask & SMB_ACL_READ) != 0 &&
 250             sys_acl_add_perm(perms, SMB_ACL_READ) != 0) {
 251                 return -1;
 252         }
 253
 254         if ((perm_mask & SMB_ACL_WRITE) != 0 &&
 255             sys_acl_add_perm(perms, SMB_ACL_WRITE) != 0) {
 256                 return -1;
 257         }
 258
 259         if ((perm_mask & SMB_ACL_EXECUTE) != 0 &&
 260             sys_acl_add_perm(perms, SMB_ACL_EXECUTE) != 0) {
 261                 return -1;
 262         }
 263
 264         if (sys_acl_set_permset(entry, perms) != 0) {
 265                 return -1;
 266         }
 267
 268         return 0;
 269 }
 270
 271 static SMB_ACL_T make_simple_acl(gid_t gid, mode_t chmod_mode)
 272 {
 273         TALLOC_CTX *frame = talloc_stackframe();
 274
 275         mode_t mode = SMB_ACL_READ|SMB_ACL_WRITE|SMB_ACL_EXECUTE;
 276
 277         mode_t mode_user = (chmod_mode & 0700) >> 6;
 278         mode_t mode_group = (chmod_mode & 070) >> 3;
 279         mode_t mode_other = chmod_mode &  07;
 280         SMB_ACL_ENTRY_T entry;
 281         SMB_ACL_T acl = sys_acl_init(frame);
 282
 283         if (!acl) {
 284                 return NULL;
 285         }
 286
 287         if (sys_acl_create_entry(&acl, &entry) != 0) {
 288                 TALLOC_FREE(frame);
 289                 return NULL;
 290         }
 291
 292         if (sys_acl_set_tag_type(entry, SMB_ACL_USER_OBJ) != 0) {
 293                 TALLOC_FREE(frame);
 294                 return NULL;
 295         }
 296
 297         if (set_acl_entry_perms(entry, mode_user) != 0) {
 298                 TALLOC_FREE(frame);
 299                 return NULL;
 300         }
 301
 302         if (sys_acl_create_entry(&acl, &entry) != 0) {
 303                 TALLOC_FREE(frame);
 304                 return NULL;
 305         }
 306
 307         if (sys_acl_set_tag_type(entry, SMB_ACL_GROUP_OBJ) != 0) {
 308                 TALLOC_FREE(frame);
 309                 return NULL;
 310         }
 311
 312         if (set_acl_entry_perms(entry, mode_group) != 0) {
 313                 TALLOC_FREE(frame);
 314                 return NULL;
 315         }
 316
 317         if (sys_acl_create_entry(&acl, &entry) != 0) {
 318                 TALLOC_FREE(frame);
 319                 return NULL;
 320         }
 321
 322         if (sys_acl_set_tag_type(entry, SMB_ACL_OTHER) != 0) {
 323                 TALLOC_FREE(frame);
 324                 return NULL;
 325         }
 326
 327         if (set_acl_entry_perms(entry, mode_other) != 0) {
 328                 TALLOC_FREE(frame);
 329                 return NULL;
 330         }
 331
 332         if (gid != -1) {
 333                 if (sys_acl_create_entry(&acl, &entry) != 0) {
 334                         TALLOC_FREE(frame);
 335                         return NULL;
 336                 }
 337
 338                 if (sys_acl_set_tag_type(entry, SMB_ACL_GROUP) != 0) {
 339                         TALLOC_FREE(frame);
 340                         return NULL;
 341                 }
 342
 343                 if (sys_acl_set_qualifier(entry, &gid) != 0) {
 344                         TALLOC_FREE(frame);
 345                         return NULL;
 346                 }
 347
 348                 if (set_acl_entry_perms(entry, mode_group) != 0) {
 349                         TALLOC_FREE(frame);
 350                         return NULL;
 351                 }
 352         }
 353
 354         if (sys_acl_create_entry(&acl, &entry) != 0) {
 355                 TALLOC_FREE(frame);
 356                 return NULL;
 357         }
 358
 359         if (sys_acl_set_tag_type(entry, SMB_ACL_MASK) != 0) {
 360                 TALLOC_FREE(frame);
 361                 return NULL;
 362         }
 363
 364         if (set_acl_entry_perms(entry, mode) != 0) {
 365                 TALLOC_FREE(frame);
 366                 return NULL;
 367         }
 368         return acl;
 369 }
 370
 371 /*
 372   set a simple ACL on a file, as a test
 373  */
 374 static PyObject *py_smbd_set_simple_acl(PyObject *self, PyObject *args, PyObject *kwargs)
 375 {
 376         const char * const kwnames[] = { "fname", "mode", "gid", "service", NULL };
 377         char *fname, *service = NULL;
 378         int ret;
 379         int mode, gid = -1;
 380         SMB_ACL_T acl;
 381         TALLOC_CTX *frame;
 382         connection_struct *conn;
 383
 384         if (!PyArg_ParseTupleAndKeywords(args, kwargs, "si|iz",
 385                                          discard_const_p(char *, kwnames),
 386                                          &fname, &mode, &gid, &service))
 387                 return NULL;
 388
 389         acl = make_simple_acl(gid, mode);
 390
 391         frame = talloc_stackframe();
 392
 393         conn = get_conn(frame, service);
 394         if (!conn) {
 395                 return NULL;
 396         }
 397
 398         ret = set_sys_acl_conn(fname, SMB_ACL_TYPE_ACCESS, acl, conn);
 399         TALLOC_FREE(acl);
 400
 401         if (ret != 0) {
 402                 TALLOC_FREE(frame);
 403                 errno = ret;
 404                 return PyErr_SetFromErrno(PyExc_OSError);
 405         }
 406
 407         TALLOC_FREE(frame);
 408
 409         Py_RETURN_NONE;
 410 }
 411
 412 /*
 413   chown a file
 414  */
 415 static PyObject *py_smbd_chown(PyObject *self, PyObject *args, PyObject *kwargs)
 416 {
 417         const char * const kwnames[] = { "fname", "uid", "gid", "service", NULL };
 418         connection_struct *conn;
 419         int ret;
 420
 421         char *fname, *service = NULL;
 422         int uid, gid;
 423         TALLOC_CTX *frame;
 424         mode_t saved_umask;
 425         struct smb_filename *smb_fname = NULL;
 426
 427         if (!PyArg_ParseTupleAndKeywords(args, kwargs, "sii|z",
 428                                          discard_const_p(char *, kwnames),
 429                                          &fname, &uid, &gid, &service))
 430                 return NULL;
 431
 432         frame = talloc_stackframe();
 433
 434         conn = get_conn(frame, service);
 435         if (!conn) {
 436                 return NULL;
 437         }
 438
 439         /* we want total control over the permissions on created files,
 440            so set our umask to 0 */
 441         saved_umask = umask(0);
 442
 443         smb_fname = synthetic_smb_fname(talloc_tos(),
 444                                         fname,
 445                                         NULL,
 446                                         NULL,
 447                                         lp_posix_pathnames() ?
 448                                                 SMB_FILENAME_POSIX_PATH : 0);
 449         if (smb_fname == NULL) {
 450                 umask(saved_umask);
 451                 TALLOC_FREE(frame);
 452                 errno = ENOMEM;
 453                 return PyErr_SetFromErrno(PyExc_OSError);
 454         }
 455
 456         ret = SMB_VFS_CHOWN(conn, smb_fname, uid, gid);
 457         if (ret != 0) {
 458                 umask(saved_umask);
 459                 TALLOC_FREE(frame);
 460                 errno = ret;
 461                 return PyErr_SetFromErrno(PyExc_OSError);
 462         }
 463
 464         umask(saved_umask);
 465
 466         TALLOC_FREE(frame);
 467
 468         Py_RETURN_NONE;
 469 }
 470
 471 /*
 472   unlink a file
 473  */
 474 static PyObject *py_smbd_unlink(PyObject *self, PyObject *args, PyObject *kwargs)
 475 {
 476         const char * const kwnames[] = { "fname", "service", NULL };
 477         connection_struct *conn;
 478         int ret;
 479         struct smb_filename *smb_fname = NULL;
 480         char *fname, *service = NULL;
 481         TALLOC_CTX *frame;
 482
 483         frame = talloc_stackframe();
 484
 485         if (!PyArg_ParseTupleAndKeywords(args, kwargs, "s|z",
 486                                          discard_const_p(char *, kwnames),
 487                                          &fname, &service)) {
 488                 TALLOC_FREE(frame);
 489                 return NULL;
 490         }
 491
 492         conn = get_conn(frame, service);
 493         if (!conn) {
 494                 TALLOC_FREE(frame);
 495                 return NULL;
 496         }
 497
 498         smb_fname = synthetic_smb_fname_split(frame,
 499                                         fname,
 500                                         lp_posix_pathnames());
 501         if (smb_fname == NULL) {
 502                 TALLOC_FREE(frame);
 503                 return PyErr_NoMemory();
 504         }
 505
 506         ret = SMB_VFS_UNLINK(conn, smb_fname);
 507         if (ret != 0) {
 508                 TALLOC_FREE(frame);
 509                 errno = ret;
 510                 return PyErr_SetFromErrno(PyExc_OSError);
 511         }
 512
 513         TALLOC_FREE(frame);
 514
 515         Py_RETURN_NONE;
 516 }
 517
 518 /*
 519   check if we have ACL support
 520  */
 521 static PyObject *py_smbd_have_posix_acls(PyObject *self)
 522 {
 523 #ifdef HAVE_POSIX_ACLS
 524         return PyBool_FromLong(true);
 525 #else
 526         return PyBool_FromLong(false);
 527 #endif
 528 }
 529
 530 /*
 531   set the NT ACL on a file
 532  */
 533 static PyObject *py_smbd_set_nt_acl(PyObject *self, PyObject *args, PyObject *kwargs)
 534 {
 535         const char * const kwnames[] = { "fname", "security_info_sent", "sd", "service", NULL };
 536         NTSTATUS status;
 537         char *fname, *service = NULL;
 538         int security_info_sent;
 539         PyObject *py_sd;
 540         struct security_descriptor *sd;
 541         connection_struct *conn;
 542         TALLOC_CTX *frame;
 543
 544         frame = talloc_stackframe();
 545
 546         if (!PyArg_ParseTupleAndKeywords(args, kwargs,
 547                                          "siO|z", discard_const_p(char *, kwnames),
 548                                          &fname, &security_info_sent, &py_sd, &service)) {
 549                 TALLOC_FREE(frame);
 550                 return NULL;
 551         }
 552
 553         if (!py_check_dcerpc_type(py_sd, "samba.dcerpc.security", "descriptor")) {
 554                 TALLOC_FREE(frame);
 555                 return NULL;
 556         }
 557
 558         conn = get_conn(frame, service);
 559         if (!conn) {
 560                 TALLOC_FREE(frame);
 561                 return NULL;
 562         }
 563
 564         sd = pytalloc_get_type(py_sd, struct security_descriptor);
 565
 566         status = set_nt_acl_conn(fname, security_info_sent, sd, conn);
 567         TALLOC_FREE(frame);
 568         PyErr_NTSTATUS_IS_ERR_RAISE(status);
 569
 570         Py_RETURN_NONE;
 571 }
 572
 573 /*
 574   Return the NT ACL on a file
 575  */
 576 static PyObject *py_smbd_get_nt_acl(PyObject *self, PyObject *args, PyObject *kwargs)
 577 {
 578         const char * const kwnames[] = { "fname", "security_info_wanted", "service", NULL };
 579         char *fname, *service = NULL;
 580         int security_info_wanted;
 581         PyObject *py_sd;
 582         struct security_descriptor *sd;
 583         TALLOC_CTX *tmp_ctx = talloc_new(NULL);
 584         connection_struct *conn;
 585         NTSTATUS status;
 586
 587         if (!PyArg_ParseTupleAndKeywords(args, kwargs, "si|z", discard_const_p(char *, kwnames),
 588                                          &fname, &security_info_wanted, &service)) {
 589                 TALLOC_FREE(tmp_ctx);
 590                 return NULL;
 591         }
 592
 593         conn = get_conn(tmp_ctx, service);
 594         if (!conn) {
 595                 TALLOC_FREE(tmp_ctx);
 596                 return NULL;
 597         }
 598
 599         status = get_nt_acl_conn(tmp_ctx, fname, conn, security_info_wanted, &sd);
 600         PyErr_NTSTATUS_IS_ERR_RAISE(status);
 601
 602         py_sd = py_return_ndr_struct("samba.dcerpc.security", "descriptor", sd, sd);
 603
 604         TALLOC_FREE(tmp_ctx);
 605
 606         return py_sd;
 607 }
 608
 609 /*
 610   set the posix (or similar) ACL on a file
 611  */
 612 static PyObject *py_smbd_set_sys_acl(PyObject *self, PyObject *args, PyObject *kwargs)
 613 {
 614         const char * const kwnames[] = { "fname", "acl_type", "acl", "service", NULL };
 615         TALLOC_CTX *frame = talloc_stackframe();
 616         int ret;
 617         char *fname, *service = NULL;
 618         PyObject *py_acl;
 619         struct smb_acl_t *acl;
 620         int acl_type;
 621         connection_struct *conn;
 622
 623         if (!PyArg_ParseTupleAndKeywords(args, kwargs, "siO|z",
 624                                          discard_const_p(char *, kwnames),
 625                                          &fname, &acl_type, &py_acl, &service)) {
 626                 TALLOC_FREE(frame);
 627                 return NULL;
 628         }
 629
 630         if (!py_check_dcerpc_type(py_acl, "samba.dcerpc.smb_acl", "t")) {
 631                 TALLOC_FREE(frame);
 632                 return NULL;
 633         }
 634
 635         conn = get_conn(frame, service);
 636         if (!conn) {
 637                 TALLOC_FREE(frame);
 638                 return NULL;
 639         }
 640
 641         acl = pytalloc_get_type(py_acl, struct smb_acl_t);
 642
 643         ret = set_sys_acl_conn(fname, acl_type, acl, conn);
 644         if (ret != 0) {
 645                 TALLOC_FREE(frame);
 646                 errno = ret;
 647                 return PyErr_SetFromErrno(PyExc_OSError);
 648         }
 649
 650         TALLOC_FREE(frame);
 651         Py_RETURN_NONE;
 652 }
 653
 654 /*
 655   Return the posix (or similar) ACL on a file
 656  */
 657 static PyObject *py_smbd_get_sys_acl(PyObject *self, PyObject *args, PyObject *kwargs)
 658 {
 659         const char * const kwnames[] = { "fname", "acl_type", "service", NULL };
 660         char *fname;
 661         PyObject *py_acl;
 662         struct smb_acl_t *acl;
 663         int acl_type;
 664         TALLOC_CTX *frame = talloc_stackframe();
 665         TALLOC_CTX *tmp_ctx = talloc_new(NULL);
 666         connection_struct *conn;
 667         char *service = NULL;
 668         struct smb_filename *smb_fname = NULL;
 669
 670         if (!tmp_ctx) {
 671                 PyErr_NoMemory();
 672                 return NULL;
 673         }
 674
 675         if (!PyArg_ParseTupleAndKeywords(args, kwargs, "si|z",
 676                                          discard_const_p(char *, kwnames),
 677                                          &fname, &acl_type, &service)) {
 678                 TALLOC_FREE(frame);
 679                 TALLOC_FREE(tmp_ctx);
 680                 return NULL;
 681         }
 682
 683         conn = get_conn(frame, service);
 684         if (!conn) {
 685                 TALLOC_FREE(frame);
 686                 TALLOC_FREE(tmp_ctx);
 687                 return NULL;
 688         }
 689
 690         smb_fname = synthetic_smb_fname_split(frame,
 691                                         fname,
 692                                         lp_posix_pathnames());
 693         if (smb_fname == NULL) {
 694                 TALLOC_FREE(frame);
 695                 TALLOC_FREE(tmp_ctx);
 696                 return NULL;
 697         }
 698         acl = SMB_VFS_SYS_ACL_GET_FILE( conn, smb_fname, acl_type, tmp_ctx);
 699         if (!acl) {
 700                 TALLOC_FREE(frame);
 701                 TALLOC_FREE(tmp_ctx);
 702                 return PyErr_SetFromErrno(PyExc_OSError);
 703         }
 704
 705         py_acl = py_return_ndr_struct("samba.dcerpc.smb_acl", "t", acl, acl);
 706
 707         TALLOC_FREE(frame);
 708         TALLOC_FREE(tmp_ctx);
 709
 710         return py_acl;
 711 }
 712
 713 static PyMethodDef py_smbd_methods[] = {
 714         { "have_posix_acls",
 715                 (PyCFunction)py_smbd_have_posix_acls, METH_NOARGS,
 716                 NULL },
 717         { "set_simple_acl",
 718                 (PyCFunction)py_smbd_set_simple_acl, METH_VARARGS|METH_KEYWORDS,
 719                 NULL },
 720         { "set_nt_acl",
 721                 (PyCFunction)py_smbd_set_nt_acl, METH_VARARGS|METH_KEYWORDS,
 722                 NULL },
 723         { "get_nt_acl",
 724                 (PyCFunction)py_smbd_get_nt_acl, METH_VARARGS|METH_KEYWORDS,
 725                 NULL },
 726         { "get_sys_acl",
 727                 (PyCFunction)py_smbd_get_sys_acl, METH_VARARGS|METH_KEYWORDS,
 728                 NULL },
 729         { "set_sys_acl",
 730                 (PyCFunction)py_smbd_set_sys_acl, METH_VARARGS|METH_KEYWORDS,
 731                 NULL },
 732         { "chown",
 733                 (PyCFunction)py_smbd_chown, METH_VARARGS|METH_KEYWORDS,
 734                 NULL },
 735         { "unlink",
 736                 (PyCFunction)py_smbd_unlink, METH_VARARGS|METH_KEYWORDS,
 737                 NULL },
 738         { NULL }
 739 };
 740
 741 void initsmbd(void);
 742 void initsmbd(void)
 743 {
 744         PyObject *m;
 745
 746         m = Py_InitModule3("smbd", py_smbd_methods,
 747                            "Python bindings for the smbd file server.");
 748         if (m == NULL)
 749                 return;
 750
 751 }