2 Unix SMB/CIFS implementation.
3 SMB backend for the Common UNIX Printing System ("CUPS")
4 Copyright 1999 by Easy Software Products
5 Copyright Andrew Tridgell 1994-1998
6 Copyright Andrew Bartlett 2002
7 Copyright Rodrigo Fernandez-Vizarra 2005
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
25 #define TICKET_CC_DIR "/tmp"
26 #define CC_PREFIX "krb5cc_" /* prefix of the ticket cache */
27 #define CC_MAX_FILE_LEN 24
28 #define CC_MAX_FILE_PATH_LEN (sizeof(TICKET_CC_DIR)-1)+ CC_MAX_FILE_LEN+2
30 #define KRB5CCNAME "KRB5CCNAME"
31 #define MAX_RETRY_CONNECT 3
44 static void list_devices(void);
45 static struct cli_state
*smb_complete_connection(const char *, const char *,int , const char *, const char *, const char *, const char *, int);
46 static struct cli_state
*smb_connect(const char *, const char *, int, const char *, const char *, const char *, const char *);
47 static int smb_print(struct cli_state
*, char *, FILE *);
48 static char * uri_unescape_alloc(const char *);
50 static bool smb_encrypt
;
54 * 'main()' - Main entry for SMB backend.
57 int /* O - Exit status */
58 main(int argc
, /* I - Number of command-line arguments */
59 char *argv
[]) /* I - Command-line arguments */
61 int i
; /* Looping var */
62 int copies
; /* Number of copies */
63 int port
; /* Port number */
64 char uri
[1024], /* URI */
65 *sep
, /* Pointer to separator */
66 *tmp
, *tmp2
, /* Temp pointers to do escaping */
67 *password
; /* Password */
68 char *username
, /* Username */
69 *server
, /* Server name */
70 *printer
; /* Printer name */
71 const char *workgroup
; /* Workgroup */
72 FILE *fp
; /* File to print */
73 int status
=1; /* Status of LPD job */
74 struct cli_state
*cli
; /* SMB interface */
78 TALLOC_CTX
*frame
= talloc_stackframe();
82 /* we expect the URI in argv[0]. Detect the case where it is in argv[1] and cope */
83 if (argc
> 2 && strncmp(argv
[0],"smb://", 6) && !strncmp(argv
[1],"smb://", 6)) {
91 * NEW! In CUPS 1.1 the backends are run with no arguments to list the
92 * available devices. These can be devices served by this backend
93 * or any other backends (i.e. you can have an SNMP backend that
94 * is only used to enumerate the available network printers... :)
102 if (argc
< 6 || argc
> 7)
104 fprintf(stderr
, "Usage: %s [DEVICE_URI] job-id user title copies options [file]\n",
106 fputs(" The DEVICE_URI environment variable can also contain the\n", stderr
);
107 fputs(" destination printer:\n", stderr
);
109 fputs(" smb://[username:password@][workgroup/]server[:port]/printer\n", stderr
);
114 * If we have 7 arguments, print the file named on the command-line.
115 * Otherwise, print data from stdin...
122 * Print from Copy stdin to a temporary file...
128 else if ((fp
= fopen(argv
[6], "rb")) == NULL
)
130 perror("ERROR: Unable to open print file");
134 copies
= atoi(argv
[4]);
140 dev_uri
= getenv("DEVICE_URI");
142 strncpy(uri
, dev_uri
, sizeof(uri
) - 1);
143 else if (strncmp(argv
[0], "smb://", 6) == 0)
144 strncpy(uri
, argv
[0], sizeof(uri
) - 1);
147 fputs("ERROR: No device URI found in DEVICE_URI environment variable or argv[0] !\n", stderr
);
151 uri
[sizeof(uri
) - 1] = '\0';
154 * Extract the destination from the URI...
157 if ((sep
= strrchr_m(uri
, '@')) != NULL
)
162 /* username is in tmp */
167 * Extract password as needed...
170 if ((tmp2
= strchr_m(tmp
, ':')) != NULL
) {
172 password
= uri_unescape_alloc(tmp2
);
176 username
= uri_unescape_alloc(tmp
);
187 if ((sep
= strchr_m(tmp
, '/')) == NULL
)
189 fputs("ERROR: Bad URI - need printer name!\n", stderr
);
196 if ((sep
= strchr_m(tmp2
, '/')) != NULL
)
199 * Convert to smb://[username:password@]workgroup/server/printer...
204 workgroup
= uri_unescape_alloc(tmp
);
205 server
= uri_unescape_alloc(tmp2
);
206 printer
= uri_unescape_alloc(sep
);
210 server
= uri_unescape_alloc(tmp
);
211 printer
= uri_unescape_alloc(tmp2
);
214 if ((sep
= strrchr_m(server
, ':')) != NULL
)
225 * Setup the SAMBA server state...
228 setup_logging("smbspool", True
);
230 lp_set_in_client(True
); /* Make sure that we tell lp_load we are */
234 if (!lp_load(get_dyn_CONFIGFILE(), True
, False
, False
, True
))
236 fprintf(stderr
, "ERROR: Can't load %s - run testparm to debug it\n", get_dyn_CONFIGFILE());
240 if (workgroup
== NULL
)
241 workgroup
= lp_workgroup();
247 if ((cli
= smb_connect(workgroup
, server
, port
, printer
, username
, password
, argv
[2])) == NULL
)
249 if (getenv("CLASS") == NULL
)
251 fprintf(stderr
, "ERROR: Unable to connect to CIFS host, will retry in 60 seconds...\n");
252 sleep (60); /* should just waiting and retrying fix authentication ??? */
257 fprintf(stderr
, "ERROR: Unable to connect to CIFS host, trying next printer...\n");
262 while ((cli
== NULL
) && (tries
< MAX_RETRY_CONNECT
));
265 fprintf(stderr
, "ERROR: Unable to connect to CIFS host after (tried %d times)\n", tries
);
270 * Now that we are connected to the server, ignore SIGTERM so that we
271 * can finish out any page data the driver sends (e.g. to eject the
272 * current page... Only ignore SIGTERM if we are printing data from
273 * stdin (otherwise you can't cancel raw jobs...)
277 CatchSignal(SIGTERM
, SIG_IGN
);
283 for (i
= 0; i
< copies
; i
++)
284 if ((status
= smb_print(cli
, argv
[3] /* title */, fp
)) != 0)
290 * Return the queue status...
301 * 'list_devices()' - List the available printers seen on the network...
308 * Eventually, search the local workgroup for available hosts and printers.
311 puts("network smb \"Unknown\" \"Windows Printer via SAMBA\"");
316 * get the name of the newest ticket cache for the uid user.
317 * pam_krb5 defines a non default ticket cache for each user
320 char * get_ticket_cache( uid_t uid
)
322 char *ticket_file
= NULL
;
323 SMB_STRUCT_DIR
*tcdir
; /* directory where ticket caches are stored */
324 SMB_STRUCT_DIRENT
*dirent
; /* directory entry */
325 char *filename
= NULL
; /* holds file names on the tmp directory */
327 char user_cache_prefix
[CC_MAX_FILE_LEN
];
328 char file_path
[CC_MAX_FILE_PATH_LEN
];
331 snprintf(user_cache_prefix
, CC_MAX_FILE_LEN
, "%s%d", CC_PREFIX
, uid
);
332 tcdir
= sys_opendir( TICKET_CC_DIR
);
336 while ( (dirent
= sys_readdir( tcdir
) ) )
338 filename
= dirent
->d_name
;
339 snprintf(file_path
, CC_MAX_FILE_PATH_LEN
,"%s/%s", TICKET_CC_DIR
, filename
);
340 if (sys_stat(file_path
, &buf
) == 0 )
342 if ( ( buf
.st_uid
== uid
) && ( S_ISREG(buf
.st_mode
) ) )
345 * check the user id of the file to prevent denial of
346 * service attacks by creating fake ticket caches for the
349 if ( strstr( filename
, user_cache_prefix
) )
351 if ( buf
.st_mtime
> t
)
354 * a newer ticket cache found
357 ticket_file
=SMB_STRDUP(file_path
);
367 if ( ticket_file
== NULL
)
369 /* no ticket cache found */
370 fprintf(stderr
, "ERROR: No ticket cache found for userid=%d\n", uid
);
377 static struct cli_state
378 *smb_complete_connection(const char *myname
,
381 const char *username
,
382 const char *password
,
383 const char *workgroup
,
387 struct cli_state
*cli
; /* New connection */
390 /* Start the SMB connection */
391 nt_status
= cli_start_connection( &cli
, myname
, server
, NULL
, port
,
392 Undefined
, flags
, NULL
);
393 if (!NT_STATUS_IS_OK(nt_status
))
398 /* We pretty much guarentee password must be valid or a pointer
404 if ( (username
) && (*username
) &&
405 (strlen(password
) == 0 ) &&
406 (cli
->use_kerberos
) )
408 /* Use kerberos authentication */
413 if ( !(pw
= sys_getpwnam(username
)) ) {
414 fprintf(stderr
,"ERROR Can not get %s uid\n", username
);
420 * Get the ticket cache of the user to set KRB5CCNAME env
423 cache_file
= get_ticket_cache( pw
->pw_uid
);
424 if ( cache_file
== NULL
)
426 fprintf(stderr
, "ERROR: Can not get the ticket cache for %s\n", username
);
431 if ( setenv(KRB5CCNAME
, cache_file
, OVERWRITE
) < 0 )
433 fprintf(stderr
, "ERROR: Can not add KRB5CCNAME to the environment");
441 * Change the UID of the process to be able to read the kerberos
449 if (!NT_STATUS_IS_OK(cli_session_setup(cli
, username
,
450 password
, strlen(password
)+1,
451 password
, strlen(password
)+1,
454 fprintf(stderr
,"ERROR: Session setup failed: %s\n", cli_errstr(cli
));
455 if (NT_STATUS_V(cli_nt_error(cli
)) ==
456 NT_STATUS_V(NT_STATUS_MORE_PROCESSING_REQUIRED
))
458 fprintf(stderr
, "did you forget to run kinit?\n");
465 if (!cli_send_tconX(cli
, share
, "?????", password
, strlen(password
)+1))
467 fprintf(stderr
, "ERROR: Tree connect failed (%s)\n", cli_errstr(cli
));
473 /* Need to work out how to specify this on the URL. */
476 if (!cli_cm_force_encryption(cli
,
482 fprintf(stderr
, "ERROR: encryption setup failed\n");
493 * 'smb_connect()' - Return a connection to a server.
496 static struct cli_state
* /* O - SMB connection */
497 smb_connect(const char *workgroup
, /* I - Workgroup */
498 const char *server
, /* I - Server */
499 const int port
, /* I - Port */
500 const char *share
, /* I - Printer */
501 const char *username
, /* I - Username */
502 const char *password
, /* I - Password */
503 const char *jobusername
) /* I - User who issued the print job */
505 struct cli_state
*cli
; /* New connection */
506 char *myname
= NULL
; /* Client name */
510 * Get the names and addresses of the client and server...
513 myname
= get_myname(talloc_tos());
518 /* See if we have a username first. This is for backwards compatible
519 behavior with 3.0.14a */
521 if ( username
&& *username
)
523 cli
= smb_complete_connection(myname
, server
, port
, username
,
524 password
, workgroup
, share
, 0 );
530 * Try to use the user kerberos credentials (if any) to authenticate
532 cli
= smb_complete_connection(myname
, server
, port
, jobusername
, "",
534 CLI_FULL_CONNECTION_USE_KERBEROS
);
536 if (cli
) { return cli
; }
538 /* give a chance for a passwordless NTLMSSP session setup */
540 pwd
= getpwuid(geteuid());
545 cli
= smb_complete_connection(myname
, server
, port
, pwd
->pw_name
, "",
546 workgroup
, share
, 0);
548 if (cli
) { return cli
; }
551 * last try. Use anonymous authentication
554 cli
= smb_complete_connection(myname
, server
, port
, "", "",
555 workgroup
, share
, 0);
557 * Return the new connection...
565 * 'smb_print()' - Queue a job for printing using the SMB protocol.
568 static int /* O - 0 = success, non-0 = failure */
569 smb_print(struct cli_state
*cli
, /* I - SMB connection */
570 char *title
, /* I - Title/job name */
571 FILE *fp
) /* I - File to print */
573 int fnum
; /* File number */
574 int nbytes
, /* Number of bytes read */
575 tbytes
; /* Total bytes read */
576 char buffer
[8192], /* Buffer for copy */
577 *ptr
; /* Pointer into tile */
581 * Sanitize the title...
584 for (ptr
= title
; *ptr
; ptr
++)
585 if (!isalnum((int)*ptr
) && !isspace((int)*ptr
))
589 * Open the printer device...
592 if ((fnum
= cli_open(cli
, title
, O_RDWR
| O_CREAT
| O_TRUNC
, DENY_NONE
)) == -1)
594 fprintf(stderr
, "ERROR: %s opening remote spool %s\n",
595 cli_errstr(cli
), title
);
600 * Copy the file to the printer...
608 while ((nbytes
= fread(buffer
, 1, sizeof(buffer
), fp
)) > 0)
610 if (cli_write(cli
, fnum
, 0, buffer
, tbytes
, nbytes
) != nbytes
)
612 fprintf(stderr
, "ERROR: Error writing spool: %s\n", cli_errstr(cli
));
619 if (!cli_close(cli
, fnum
))
621 fprintf(stderr
, "ERROR: %s closing remote spool %s\n",
622 cli_errstr(cli
), title
);
629 static char *uri_unescape_alloc(const char *uritok
)
633 ret
= (char *)SMB_STRDUP(uritok
);
634 if (!ret
) return NULL
;
636 rfc1738_unescape(ret
);