2 Unix SMB/CIFS implementation.
3 session handling for utmp and PAM
5 Copyright (C) tridge@samba.org 2001
6 Copyright (C) abartlet@samba.org 2001
7 Copyright (C) Gerald (Jerry) Carter 2006
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 2 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program; if not, write to the Free Software
21 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 /* a "session" is claimed when we do a SessionSetupX operation
25 and is yielded when the corresponding vuid is destroyed.
27 sessions are used to populate utmp and PAM session structures
32 /********************************************************************
33 ********************************************************************/
35 static struct db_context
*session_db_ctx(void)
37 static struct db_context
*ctx
;
42 ctx
= db_open(NULL
, lock_path("sessionid.tdb"), 0,
43 TDB_CLEAR_IF_FIRST
|TDB_DEFAULT
,
44 O_RDWR
| O_CREAT
, 0644);
48 BOOL
session_init(void)
50 if (session_db_ctx() == NULL
) {
51 DEBUG(1,("session_init: failed to open sessionid tdb\n"));
58 /********************************************************************
59 called when a session is created
60 ********************************************************************/
62 BOOL
session_claim(user_struct
*vuser
)
67 struct in_addr
*client_ip
;
68 struct sessionid sessionid
;
69 struct server_id pid
= procid_self();
72 struct db_context
*ctx
;
73 struct db_record
*rec
;
76 vuser
->session_keystr
= NULL
;
78 /* don't register sessions for the guest user - its just too
79 expensive to go through pam session code for browsing etc */
84 if (!(ctx
= session_db_ctx())) {
88 ZERO_STRUCT(sessionid
);
95 for (i
=1;i
<MAX_SESSION_ID
;i
++) {
98 * This is very inefficient and needs fixing -- vl
101 struct server_id sess_pid
;
103 snprintf(keystr
, sizeof(keystr
), "ID/%d", i
);
104 key
= string_term_tdb_data(keystr
);
106 rec
= ctx
->fetch_locked(ctx
, NULL
, key
);
109 DEBUG(1, ("Could not lock \"%s\"\n", keystr
));
113 if (rec
->value
.dsize
!= sizeof(sessionid
)) {
114 DEBUG(1, ("Re-using invalid record\n"));
118 sess_pid
= ((struct sessionid
*)rec
->value
.dptr
)->pid
;
120 if (!process_exists(sess_pid
)) {
121 DEBUG(5, ("%s has died -- re-using session\n",
122 procid_str_static(&sess_pid
)));
129 if (i
== MAX_SESSION_ID
) {
130 SMB_ASSERT(rec
== NULL
);
131 DEBUG(1,("session_claim: out of session IDs "
132 "(max is %d)\n", MAX_SESSION_ID
));
136 snprintf(sessionid
.id_str
, sizeof(sessionid
.id_str
),
137 SESSION_UTMP_TEMPLATE
, i
);
140 snprintf(keystr
, sizeof(keystr
), "ID/%s/%u",
141 procid_str_static(&pid
), vuser
->vuid
);
142 key
= string_term_tdb_data(keystr
);
144 rec
= ctx
->fetch_locked(ctx
, NULL
, key
);
147 DEBUG(1, ("Could not lock \"%s\"\n", keystr
));
151 snprintf(sessionid
.id_str
, sizeof(sessionid
.id_str
),
152 SESSION_TEMPLATE
, (long unsigned int)sys_getpid(),
156 SMB_ASSERT(rec
!= NULL
);
158 /* If 'hostname lookup' == yes, then do the DNS lookup. This is
159 needed because utmp and PAM both expect DNS names
161 client_name() handles this case internally.
164 hostname
= client_name();
165 if (strcmp(hostname
, "UNKNOWN") == 0) {
166 hostname
= client_addr();
169 fstrcpy(sessionid
.username
, vuser
->user
.unix_name
);
170 fstrcpy(sessionid
.hostname
, hostname
);
171 sessionid
.id_num
= i
; /* Only valid for utmp sessions */
173 sessionid
.uid
= vuser
->uid
;
174 sessionid
.gid
= vuser
->gid
;
175 fstrcpy(sessionid
.remote_machine
, get_remote_machine_name());
176 fstrcpy(sessionid
.ip_addr
, client_addr());
177 sessionid
.connect_start
= time(NULL
);
179 client_ip
= client_inaddr(&sa
);
181 if (!smb_pam_claim_session(sessionid
.username
, sessionid
.id_str
,
182 sessionid
.hostname
)) {
183 DEBUG(1,("pam_session rejected the session for %s [%s]\n",
184 sessionid
.username
, sessionid
.id_str
));
190 data
.dptr
= (uint8
*)&sessionid
;
191 data
.dsize
= sizeof(sessionid
);
193 status
= rec
->store(rec
, data
, TDB_REPLACE
);
197 if (!NT_STATUS_IS_OK(status
)) {
198 DEBUG(1,("session_claim: unable to create session id "
199 "record: %s\n", nt_errstr(status
)));
204 sys_utmp_claim(sessionid
.username
, sessionid
.hostname
,
206 sessionid
.id_str
, sessionid
.id_num
);
211 vuser
->session_keystr
= talloc_strdup(vuser
, keystr
);
212 if (!vuser
->session_keystr
) {
213 DEBUG(0, ("session_claim: talloc_strdup() failed for "
214 "session_keystr\n"));
220 /********************************************************************
221 called when a session is destroyed
222 ********************************************************************/
224 void session_yield(user_struct
*vuser
)
227 struct sessionid sessionid
;
228 struct in_addr
*client_ip
;
229 struct db_context
*ctx
;
230 struct db_record
*rec
;
232 if (!(ctx
= session_db_ctx())) return;
234 if (!vuser
->session_keystr
) {
238 key
= string_term_tdb_data(vuser
->session_keystr
);
240 if (!(rec
= ctx
->fetch_locked(ctx
, NULL
, key
))) {
244 if (rec
->value
.dsize
!= sizeof(sessionid
))
247 memcpy(&sessionid
, rec
->value
.dptr
, sizeof(sessionid
));
249 client_ip
= interpret_addr2(sessionid
.ip_addr
);
252 sys_utmp_yield(sessionid
.username
, sessionid
.hostname
,
254 sessionid
.id_str
, sessionid
.id_num
);
257 smb_pam_close_session(sessionid
.username
, sessionid
.id_str
,
260 rec
->delete_rec(rec
);
265 /********************************************************************
266 ********************************************************************/
268 static BOOL
session_traverse(int (*fn
)(struct db_record
*db
,
272 struct db_context
*ctx
;
274 if (!(ctx
= session_db_ctx())) {
275 DEBUG(3, ("No tdb opened\n"));
279 ctx
->traverse_read(ctx
, fn
, private_data
);
283 /********************************************************************
284 ********************************************************************/
286 struct session_list
{
289 struct sessionid
*sessions
;
292 static int gather_sessioninfo(struct db_record
*rec
, void *state
)
294 struct session_list
*sesslist
= (struct session_list
*) state
;
295 const struct sessionid
*current
=
296 (const struct sessionid
*) rec
->value
.dptr
;
298 sesslist
->sessions
= TALLOC_REALLOC_ARRAY(
299 sesslist
->mem_ctx
, sesslist
->sessions
, struct sessionid
,
302 if (!sesslist
->sessions
) {
307 memcpy(&sesslist
->sessions
[sesslist
->count
], current
,
308 sizeof(struct sessionid
));
312 DEBUG(7,("gather_sessioninfo session from %s@%s\n",
313 current
->username
, current
->remote_machine
));
318 /********************************************************************
319 ********************************************************************/
321 int list_sessions(TALLOC_CTX
*mem_ctx
, struct sessionid
**session_list
)
323 struct session_list sesslist
;
325 sesslist
.mem_ctx
= mem_ctx
;
327 sesslist
.sessions
= NULL
;
329 if (!session_traverse(gather_sessioninfo
, (void *) &sesslist
)) {
330 DEBUG(3, ("Session traverse failed\n"));
331 SAFE_FREE(sesslist
.sessions
);
332 *session_list
= NULL
;
336 *session_list
= sesslist
.sessions
;
337 return sesslist
.count
;