2 Unix SMB/CIFS implementation.
4 Copyright (C) Stefan Metzmacher 2012
5 Copyright (C) Michael Adam 2012
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "system/filesys.h"
23 #include "smbd/smbd.h"
24 #include "smbd/globals.h"
25 #include "dbwrap/dbwrap.h"
26 #include "dbwrap/dbwrap_rbt.h"
27 #include "dbwrap/dbwrap_open.h"
28 #include "../libcli/security/security.h"
30 #include "lib/util/util_tdb.h"
31 #include "librpc/gen_ndr/ndr_smbXsrv.h"
34 struct smbXsrv_open_table
{
36 struct db_context
*db_ctx
;
43 struct db_context
*db_ctx
;
47 static struct db_context
*smbXsrv_open_global_db_ctx
= NULL
;
49 NTSTATUS
smbXsrv_open_global_init(void)
51 char *global_path
= NULL
;
52 struct db_context
*db_ctx
= NULL
;
54 if (smbXsrv_open_global_db_ctx
!= NULL
) {
58 global_path
= lock_path("smbXsrv_open_global.tdb");
59 if (global_path
== NULL
) {
60 return NT_STATUS_NO_MEMORY
;
63 db_ctx
= db_open(NULL
, global_path
,
67 TDB_INCOMPATIBLE_HASH
,
68 O_RDWR
| O_CREAT
, 0600,
71 TALLOC_FREE(global_path
);
75 status
= map_nt_error_from_unix_common(errno
);
80 smbXsrv_open_global_db_ctx
= db_ctx
;
87 * We need to store the keys in big endian so that dbwrap_rbt's memcmp
88 * has the same result as integer comparison between the uint32_t
91 * TODO: implement string based key
94 #define SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE sizeof(uint32_t)
96 static TDB_DATA
smbXsrv_open_global_id_to_key(uint32_t id
,
101 RSIVAL(key_buf
, 0, id
);
103 key
= make_tdb_data(key_buf
, SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
);
109 static NTSTATUS
smbXsrv_open_global_key_to_id(TDB_DATA key
, uint32_t *id
)
112 return NT_STATUS_INVALID_PARAMETER
;
115 if (key
.dsize
!= SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
) {
116 return NT_STATUS_INTERNAL_DB_CORRUPTION
;
119 *id
= RIVAL(key
.dptr
, 0);
125 #define SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE sizeof(uint32_t)
127 static TDB_DATA
smbXsrv_open_local_id_to_key(uint32_t id
,
132 RSIVAL(key_buf
, 0, id
);
134 key
= make_tdb_data(key_buf
, SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
);
139 static NTSTATUS
smbXsrv_open_local_key_to_id(TDB_DATA key
, uint32_t *id
)
142 return NT_STATUS_INVALID_PARAMETER
;
145 if (key
.dsize
!= SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
) {
146 return NT_STATUS_INTERNAL_DB_CORRUPTION
;
149 *id
= RIVAL(key
.dptr
, 0);
154 static NTSTATUS
smbXsrv_open_table_init(struct smbXsrv_connection
*conn
,
159 struct smbXsrv_client
*client
= conn
->client
;
160 struct smbXsrv_open_table
*table
;
164 if (lowest_id
> highest_id
) {
165 return NT_STATUS_INTERNAL_ERROR
;
168 max_range
= highest_id
;
169 max_range
-= lowest_id
;
172 if (max_opens
> max_range
) {
173 return NT_STATUS_INTERNAL_ERROR
;
176 table
= talloc_zero(client
, struct smbXsrv_open_table
);
178 return NT_STATUS_NO_MEMORY
;
181 table
->local
.db_ctx
= db_open_rbt(table
);
182 if (table
->local
.db_ctx
== NULL
) {
184 return NT_STATUS_NO_MEMORY
;
186 table
->local
.lowest_id
= lowest_id
;
187 table
->local
.highest_id
= highest_id
;
188 table
->local
.max_opens
= max_opens
;
190 status
= smbXsrv_open_global_init();
191 if (!NT_STATUS_IS_OK(status
)) {
196 table
->global
.db_ctx
= smbXsrv_open_global_db_ctx
;
198 client
->open_table
= table
;
202 struct smbXsrv_open_local_allocate_state
{
203 const uint32_t lowest_id
;
204 const uint32_t highest_id
;
210 static int smbXsrv_open_local_allocate_traverse(struct db_record
*rec
,
213 struct smbXsrv_open_local_allocate_state
*state
=
214 (struct smbXsrv_open_local_allocate_state
*)private_data
;
215 TDB_DATA key
= dbwrap_record_get_key(rec
);
219 status
= smbXsrv_open_local_key_to_id(key
, &id
);
220 if (!NT_STATUS_IS_OK(status
)) {
221 state
->status
= status
;
225 if (id
<= state
->last_id
) {
226 state
->status
= NT_STATUS_INTERNAL_DB_CORRUPTION
;
231 if (id
> state
->useable_id
) {
232 state
->status
= NT_STATUS_OK
;
236 if (state
->useable_id
== state
->highest_id
) {
237 state
->status
= NT_STATUS_INSUFFICIENT_RESOURCES
;
241 state
->useable_id
+=1;
245 static NTSTATUS
smbXsrv_open_local_allocate_id(struct db_context
*db
,
249 struct db_record
**_rec
,
252 struct smbXsrv_open_local_allocate_state state
= {
253 .lowest_id
= lowest_id
,
254 .highest_id
= highest_id
,
256 .useable_id
= lowest_id
,
257 .status
= NT_STATUS_INTERNAL_ERROR
,
267 if (lowest_id
> highest_id
) {
268 return NT_STATUS_INSUFFICIENT_RESOURCES
;
272 * first we try randomly
274 range
= (highest_id
- lowest_id
) + 1;
276 for (i
= 0; i
< (range
/ 2); i
++) {
278 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
281 struct db_record
*rec
= NULL
;
283 id
= generate_random() % range
;
286 if (id
< lowest_id
) {
289 if (id
> highest_id
) {
293 key
= smbXsrv_open_local_id_to_key(id
, key_buf
);
295 rec
= dbwrap_fetch_locked(db
, mem_ctx
, key
);
297 return NT_STATUS_INSUFFICIENT_RESOURCES
;
300 val
= dbwrap_record_get_value(rec
);
301 if (val
.dsize
!= 0) {
312 * if the range is almost full,
313 * we traverse the whole table
314 * (this relies on sorted behavior of dbwrap_rbt)
316 status
= dbwrap_traverse_read(db
, smbXsrv_open_local_allocate_traverse
,
318 if (NT_STATUS_IS_OK(status
)) {
319 if (NT_STATUS_IS_OK(state
.status
)) {
320 return NT_STATUS_INTERNAL_ERROR
;
323 if (!NT_STATUS_EQUAL(state
.status
, NT_STATUS_INTERNAL_ERROR
)) {
327 if (state
.useable_id
<= state
.highest_id
) {
328 state
.status
= NT_STATUS_OK
;
330 return NT_STATUS_INSUFFICIENT_RESOURCES
;
332 } else if (!NT_STATUS_EQUAL(status
, NT_STATUS_INTERNAL_DB_CORRUPTION
)) {
334 * Here we really expect NT_STATUS_INTERNAL_DB_CORRUPTION!
336 * If we get anything else it is an error, because it
337 * means we did not manage to find a free slot in
340 return NT_STATUS_INSUFFICIENT_RESOURCES
;
343 if (NT_STATUS_IS_OK(state
.status
)) {
345 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
348 struct db_record
*rec
= NULL
;
350 id
= state
.useable_id
;
352 key
= smbXsrv_open_local_id_to_key(id
, key_buf
);
354 rec
= dbwrap_fetch_locked(db
, mem_ctx
, key
);
356 return NT_STATUS_INSUFFICIENT_RESOURCES
;
359 val
= dbwrap_record_get_value(rec
);
360 if (val
.dsize
!= 0) {
362 return NT_STATUS_INTERNAL_DB_CORRUPTION
;
373 struct smbXsrv_open_local_fetch_state
{
374 struct smbXsrv_open
*op
;
378 static void smbXsrv_open_local_fetch_parser(TDB_DATA key
, TDB_DATA data
,
381 struct smbXsrv_open_local_fetch_state
*state
=
382 (struct smbXsrv_open_local_fetch_state
*)private_data
;
385 if (data
.dsize
!= sizeof(ptr
)) {
386 state
->status
= NT_STATUS_INTERNAL_DB_ERROR
;
390 memcpy(&ptr
, data
.dptr
, data
.dsize
);
391 state
->op
= talloc_get_type_abort(ptr
, struct smbXsrv_open
);
392 state
->status
= NT_STATUS_OK
;
395 static NTSTATUS
smbXsrv_open_local_lookup(struct smbXsrv_open_table
*table
,
396 uint32_t open_local_id
,
397 uint32_t open_global_id
,
399 struct smbXsrv_open
**_open
)
401 struct smbXsrv_open_local_fetch_state state
= {
403 .status
= NT_STATUS_INTERNAL_ERROR
,
405 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
411 if (open_local_id
== 0) {
412 return NT_STATUS_FILE_CLOSED
;
416 /* this might happen before the end of negprot */
417 return NT_STATUS_FILE_CLOSED
;
420 if (table
->local
.db_ctx
== NULL
) {
421 return NT_STATUS_INTERNAL_ERROR
;
424 key
= smbXsrv_open_local_id_to_key(open_local_id
, key_buf
);
426 status
= dbwrap_parse_record(table
->local
.db_ctx
, key
,
427 smbXsrv_open_local_fetch_parser
,
429 if (NT_STATUS_EQUAL(status
, NT_STATUS_NOT_FOUND
)) {
430 return NT_STATUS_FILE_CLOSED
;
431 } else if (!NT_STATUS_IS_OK(status
)) {
434 if (!NT_STATUS_IS_OK(state
.status
)) {
438 if (NT_STATUS_EQUAL(state
.op
->status
, NT_STATUS_FILE_CLOSED
)) {
439 return NT_STATUS_FILE_CLOSED
;
442 if (open_global_id
== 0) {
443 /* make the global check a no-op for SMB1 */
444 open_global_id
= state
.op
->global
->open_global_id
;
447 if (state
.op
->global
->open_global_id
!= open_global_id
) {
448 return NT_STATUS_FILE_CLOSED
;
452 state
.op
->idle_time
= now
;
456 return state
.op
->status
;
459 static int smbXsrv_open_global_destructor(struct smbXsrv_open_global0
*global
)
464 static void smbXsrv_open_global_verify_record(struct db_record
*db_rec
,
468 struct smbXsrv_open_global0
**_g
);
470 static NTSTATUS
smbXsrv_open_global_allocate(struct db_context
*db
,
472 struct smbXsrv_open_global0
**_global
)
475 struct smbXsrv_open_global0
*global
= NULL
;
476 uint32_t last_free
= 0;
477 const uint32_t min_tries
= 3;
481 global
= talloc_zero(mem_ctx
, struct smbXsrv_open_global0
);
482 if (global
== NULL
) {
483 return NT_STATUS_NO_MEMORY
;
485 talloc_set_destructor(global
, smbXsrv_open_global_destructor
);
488 * Here we just randomly try the whole 32-bit space
490 * We use just 32-bit, because we want to reuse the
493 for (i
= 0; i
< UINT32_MAX
; i
++) {
494 bool is_free
= false;
495 bool was_free
= false;
497 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
500 if (i
>= min_tries
&& last_free
!= 0) {
503 id
= generate_random();
508 if (id
== UINT32_MAX
) {
512 key
= smbXsrv_open_global_id_to_key(id
, key_buf
);
514 global
->db_rec
= dbwrap_fetch_locked(db
, mem_ctx
, key
);
515 if (global
->db_rec
== NULL
) {
517 return NT_STATUS_INSUFFICIENT_RESOURCES
;
520 smbXsrv_open_global_verify_record(global
->db_rec
,
526 TALLOC_FREE(global
->db_rec
);
530 if (!was_free
&& i
< min_tries
) {
532 * The session_id is free now,
533 * but was not free before.
535 * This happens if a smbd crashed
536 * and did not cleanup the record.
538 * If this is one of our first tries,
539 * then we try to find a real free one.
541 if (last_free
== 0) {
544 TALLOC_FREE(global
->db_rec
);
548 global
->open_global_id
= id
;
554 /* should not be reached */
556 return NT_STATUS_INTERNAL_ERROR
;
559 static void smbXsrv_open_global_verify_record(struct db_record
*db_rec
,
563 struct smbXsrv_open_global0
**_g
)
568 struct smbXsrv_open_globalB global_blob
;
569 enum ndr_err_code ndr_err
;
570 struct smbXsrv_open_global0
*global
= NULL
;
572 TALLOC_CTX
*frame
= talloc_stackframe();
583 key
= dbwrap_record_get_key(db_rec
);
585 val
= dbwrap_record_get_value(db_rec
);
586 if (val
.dsize
== 0) {
587 DEBUG(10, ("%s: empty value\n", __func__
));
596 blob
= data_blob_const(val
.dptr
, val
.dsize
);
598 ndr_err
= ndr_pull_struct_blob(&blob
, frame
, &global_blob
,
599 (ndr_pull_flags_fn_t
)ndr_pull_smbXsrv_open_globalB
);
600 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
601 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
602 DEBUG(1,("smbXsrv_open_global_verify_record: "
603 "key '%s' ndr_pull_struct_blob - %s\n",
604 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
610 DEBUG(10,("smbXsrv_open_global_verify_record\n"));
611 if (CHECK_DEBUGLVL(10)) {
612 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
615 if (global_blob
.version
!= SMBXSRV_VERSION_0
) {
616 DEBUG(0,("smbXsrv_open_global_verify_record: "
617 "key '%s' use unsupported version %u\n",
618 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
619 global_blob
.version
));
620 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
625 global
= global_blob
.info
.info0
;
627 if (server_id_is_disconnected(&global
->server_id
)) {
630 exists
= serverid_exists(&global
->server_id
);
633 struct server_id_buf idbuf
;
634 DEBUG(2,("smbXsrv_open_global_verify_record: "
635 "key '%s' server_id %s does not exist.\n",
636 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
637 server_id_str_buf(global
->server_id
, &idbuf
)));
638 if (CHECK_DEBUGLVL(2)) {
639 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
642 dbwrap_record_delete(db_rec
);
648 *_g
= talloc_move(mem_ctx
, &global
);
653 static NTSTATUS
smbXsrv_open_global_store(struct smbXsrv_open_global0
*global
)
655 struct smbXsrv_open_globalB global_blob
;
656 DATA_BLOB blob
= data_blob_null
;
660 enum ndr_err_code ndr_err
;
663 * TODO: if we use other versions than '0'
664 * we would add glue code here, that would be able to
665 * store the information in the old format.
668 if (global
->db_rec
== NULL
) {
669 return NT_STATUS_INTERNAL_ERROR
;
672 key
= dbwrap_record_get_key(global
->db_rec
);
673 val
= dbwrap_record_get_value(global
->db_rec
);
675 ZERO_STRUCT(global_blob
);
676 global_blob
.version
= smbXsrv_version_global_current();
677 if (val
.dsize
>= 8) {
678 global_blob
.seqnum
= IVAL(val
.dptr
, 4);
680 global_blob
.seqnum
+= 1;
681 global_blob
.info
.info0
= global
;
683 ndr_err
= ndr_push_struct_blob(&blob
, global
->db_rec
, &global_blob
,
684 (ndr_push_flags_fn_t
)ndr_push_smbXsrv_open_globalB
);
685 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
686 status
= ndr_map_error2ntstatus(ndr_err
);
687 DEBUG(1,("smbXsrv_open_global_store: key '%s' ndr_push - %s\n",
688 hex_encode_talloc(global
->db_rec
, key
.dptr
, key
.dsize
),
690 TALLOC_FREE(global
->db_rec
);
694 val
= make_tdb_data(blob
.data
, blob
.length
);
695 status
= dbwrap_record_store(global
->db_rec
, val
, TDB_REPLACE
);
696 if (!NT_STATUS_IS_OK(status
)) {
697 DEBUG(1,("smbXsrv_open_global_store: key '%s' store - %s\n",
698 hex_encode_talloc(global
->db_rec
, key
.dptr
, key
.dsize
),
700 TALLOC_FREE(global
->db_rec
);
704 if (CHECK_DEBUGLVL(10)) {
705 DEBUG(10,("smbXsrv_open_global_store: key '%s' stored\n",
706 hex_encode_talloc(global
->db_rec
, key
.dptr
, key
.dsize
)));
707 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
710 TALLOC_FREE(global
->db_rec
);
715 static NTSTATUS
smbXsrv_open_global_lookup(struct smbXsrv_open_table
*table
,
716 uint32_t open_global_id
,
718 struct smbXsrv_open_global0
**_global
)
721 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
722 struct db_record
*global_rec
= NULL
;
723 bool is_free
= false;
727 if (table
->global
.db_ctx
== NULL
) {
728 return NT_STATUS_INTERNAL_ERROR
;
731 key
= smbXsrv_open_global_id_to_key(open_global_id
, key_buf
);
733 global_rec
= dbwrap_fetch_locked(table
->global
.db_ctx
, mem_ctx
, key
);
734 if (global_rec
== NULL
) {
735 DEBUG(0, ("smbXsrv_open_global_lookup(0x%08x): "
736 "Failed to lock global key '%s'\n",
738 hex_encode_talloc(talloc_tos(), key
.dptr
,
740 return NT_STATUS_INTERNAL_DB_ERROR
;
743 smbXsrv_open_global_verify_record(global_rec
,
749 DEBUG(10, ("%s: is_free=true\n", __func__
));
750 talloc_free(global_rec
);
751 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
754 (*_global
)->db_rec
= talloc_move(*_global
, &global_rec
);
756 talloc_set_destructor(*_global
, smbXsrv_open_global_destructor
);
761 static int smbXsrv_open_destructor(struct smbXsrv_open
*op
)
765 status
= smbXsrv_open_close(op
, 0);
766 if (!NT_STATUS_IS_OK(status
)) {
767 DEBUG(0, ("smbXsrv_open_destructor: "
768 "smbXsrv_open_close() failed - %s\n",
772 TALLOC_FREE(op
->global
);
777 NTSTATUS
smbXsrv_open_create(struct smbXsrv_connection
*conn
,
778 struct auth_session_info
*session_info
,
780 struct smbXsrv_open
**_open
)
782 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
783 struct db_record
*local_rec
= NULL
;
784 struct smbXsrv_open
*op
= NULL
;
787 struct smbXsrv_open_global0
*global
= NULL
;
789 struct dom_sid
*current_sid
= NULL
;
790 struct security_token
*current_token
= NULL
;
792 if (session_info
== NULL
) {
793 return NT_STATUS_INVALID_HANDLE
;
795 current_token
= session_info
->security_token
;
797 if (current_token
== NULL
) {
798 return NT_STATUS_INVALID_HANDLE
;
801 if (current_token
->num_sids
> PRIMARY_USER_SID_INDEX
) {
802 current_sid
= ¤t_token
->sids
[PRIMARY_USER_SID_INDEX
];
805 if (current_sid
== NULL
) {
806 return NT_STATUS_INVALID_HANDLE
;
809 if (table
->local
.num_opens
>= table
->local
.max_opens
) {
810 return NT_STATUS_INSUFFICIENT_RESOURCES
;
813 op
= talloc_zero(table
, struct smbXsrv_open
);
815 return NT_STATUS_NO_MEMORY
;
818 op
->status
= NT_STATUS_OK
; /* TODO: start with INTERNAL_ERROR */
821 status
= smbXsrv_open_global_allocate(table
->global
.db_ctx
,
823 if (!NT_STATUS_IS_OK(status
)) {
829 status
= smbXsrv_open_local_allocate_id(table
->local
.db_ctx
,
830 table
->local
.lowest_id
,
831 table
->local
.highest_id
,
835 if (!NT_STATUS_IS_OK(status
)) {
840 global
->open_persistent_id
= global
->open_global_id
;
841 global
->open_volatile_id
= op
->local_id
;
843 global
->server_id
= messaging_server_id(conn
->msg_ctx
);
844 global
->open_time
= now
;
845 global
->open_owner
= *current_sid
;
846 if (conn
->protocol
>= PROTOCOL_SMB2_10
) {
847 global
->client_guid
= conn
->smb2
.client
.guid
;
851 val
= make_tdb_data((uint8_t const *)&ptr
, sizeof(ptr
));
852 status
= dbwrap_record_store(local_rec
, val
, TDB_REPLACE
);
853 TALLOC_FREE(local_rec
);
854 if (!NT_STATUS_IS_OK(status
)) {
858 table
->local
.num_opens
+= 1;
860 talloc_set_destructor(op
, smbXsrv_open_destructor
);
862 status
= smbXsrv_open_global_store(global
);
863 if (!NT_STATUS_IS_OK(status
)) {
864 DEBUG(0,("smbXsrv_open_create: "
865 "global_id (0x%08x) store failed - %s\n",
866 op
->global
->open_global_id
,
872 if (CHECK_DEBUGLVL(10)) {
873 struct smbXsrv_openB open_blob
;
875 ZERO_STRUCT(open_blob
);
876 open_blob
.version
= SMBXSRV_VERSION_0
;
877 open_blob
.info
.info0
= op
;
879 DEBUG(10,("smbXsrv_open_create: global_id (0x%08x) stored\n",
880 op
->global
->open_global_id
));
881 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
888 uint32_t smbXsrv_open_hash(struct smbXsrv_open
*_open
)
894 SBVAL(buf
, 0, _open
->global
->open_persistent_id
);
895 SBVAL(buf
, 8, _open
->global
->open_volatile_id
);
896 SBVAL(buf
, 16, _open
->global
->open_time
);
898 key
= (TDB_DATA
) { .dptr
= buf
, .dsize
= sizeof(buf
) };
899 ret
= tdb_jenkins_hash(&key
);
908 NTSTATUS
smbXsrv_open_update(struct smbXsrv_open
*op
)
910 struct smbXsrv_open_table
*table
= op
->table
;
912 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
915 if (op
->global
->db_rec
!= NULL
) {
916 DEBUG(0, ("smbXsrv_open_update(0x%08x): "
917 "Called with db_rec != NULL'\n",
918 op
->global
->open_global_id
));
919 return NT_STATUS_INTERNAL_ERROR
;
922 key
= smbXsrv_open_global_id_to_key(op
->global
->open_global_id
,
925 op
->global
->db_rec
= dbwrap_fetch_locked(table
->global
.db_ctx
,
927 if (op
->global
->db_rec
== NULL
) {
928 DEBUG(0, ("smbXsrv_open_update(0x%08x): "
929 "Failed to lock global key '%s'\n",
930 op
->global
->open_global_id
,
931 hex_encode_talloc(talloc_tos(), key
.dptr
,
933 return NT_STATUS_INTERNAL_DB_ERROR
;
936 status
= smbXsrv_open_global_store(op
->global
);
937 if (!NT_STATUS_IS_OK(status
)) {
938 DEBUG(0,("smbXsrv_open_update: "
939 "global_id (0x%08x) store failed - %s\n",
940 op
->global
->open_global_id
,
945 if (CHECK_DEBUGLVL(10)) {
946 struct smbXsrv_openB open_blob
;
948 ZERO_STRUCT(open_blob
);
949 open_blob
.version
= SMBXSRV_VERSION_0
;
950 open_blob
.info
.info0
= op
;
952 DEBUG(10,("smbXsrv_open_update: global_id (0x%08x) stored\n",
953 op
->global
->open_global_id
));
954 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
960 NTSTATUS
smbXsrv_open_close(struct smbXsrv_open
*op
, NTTIME now
)
962 struct smbXsrv_open_table
*table
;
963 struct db_record
*local_rec
= NULL
;
964 struct db_record
*global_rec
= NULL
;
966 NTSTATUS error
= NT_STATUS_OK
;
968 if (op
->table
== NULL
) {
975 op
->status
= NT_STATUS_FILE_CLOSED
;
976 op
->global
->disconnect_time
= now
;
977 server_id_set_disconnected(&op
->global
->server_id
);
979 global_rec
= op
->global
->db_rec
;
980 op
->global
->db_rec
= NULL
;
981 if (global_rec
== NULL
) {
982 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
985 key
= smbXsrv_open_global_id_to_key(
986 op
->global
->open_global_id
,
989 global_rec
= dbwrap_fetch_locked(table
->global
.db_ctx
,
991 if (global_rec
== NULL
) {
992 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
993 "Failed to lock global key '%s'\n",
994 op
->global
->open_global_id
,
995 hex_encode_talloc(global_rec
, key
.dptr
,
997 error
= NT_STATUS_INTERNAL_ERROR
;
1001 if (global_rec
!= NULL
&& op
->global
->durable
) {
1003 * If it is a durable open we need to update the global part
1004 * instead of deleting it
1006 op
->global
->db_rec
= global_rec
;
1007 status
= smbXsrv_open_global_store(op
->global
);
1008 if (NT_STATUS_IS_OK(status
)) {
1010 * smbXsrv_open_global_store does the free
1011 * of op->global->db_rec
1015 if (!NT_STATUS_IS_OK(status
)) {
1016 DEBUG(0,("smbXsrv_open_close(0x%08x)"
1017 "smbXsrv_open_global_store() failed - %s\n",
1018 op
->global
->open_global_id
,
1019 nt_errstr(status
)));
1023 if (NT_STATUS_IS_OK(status
) && CHECK_DEBUGLVL(10)) {
1024 struct smbXsrv_openB open_blob
;
1026 ZERO_STRUCT(open_blob
);
1027 open_blob
.version
= SMBXSRV_VERSION_0
;
1028 open_blob
.info
.info0
= op
;
1030 DEBUG(10,("smbXsrv_open_close(0x%08x): "
1031 "stored disconnect\n",
1032 op
->global
->open_global_id
));
1033 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
1037 if (global_rec
!= NULL
) {
1038 status
= dbwrap_record_delete(global_rec
);
1039 if (!NT_STATUS_IS_OK(status
)) {
1040 TDB_DATA key
= dbwrap_record_get_key(global_rec
);
1042 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
1043 "failed to delete global key '%s': %s\n",
1044 op
->global
->open_global_id
,
1045 hex_encode_talloc(global_rec
, key
.dptr
,
1047 nt_errstr(status
)));
1051 TALLOC_FREE(global_rec
);
1053 local_rec
= op
->db_rec
;
1054 if (local_rec
== NULL
) {
1055 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
1058 key
= smbXsrv_open_local_id_to_key(op
->local_id
, key_buf
);
1060 local_rec
= dbwrap_fetch_locked(table
->local
.db_ctx
,
1062 if (local_rec
== NULL
) {
1063 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
1064 "Failed to lock local key '%s'\n",
1065 op
->global
->open_global_id
,
1066 hex_encode_talloc(local_rec
, key
.dptr
,
1068 error
= NT_STATUS_INTERNAL_ERROR
;
1072 if (local_rec
!= NULL
) {
1073 status
= dbwrap_record_delete(local_rec
);
1074 if (!NT_STATUS_IS_OK(status
)) {
1075 TDB_DATA key
= dbwrap_record_get_key(local_rec
);
1077 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
1078 "failed to delete local key '%s': %s\n",
1079 op
->global
->open_global_id
,
1080 hex_encode_talloc(local_rec
, key
.dptr
,
1082 nt_errstr(status
)));
1085 table
->local
.num_opens
-= 1;
1087 if (op
->db_rec
== NULL
) {
1088 TALLOC_FREE(local_rec
);
1093 op
->compat
->op
= NULL
;
1094 file_free(NULL
, op
->compat
);
1101 NTSTATUS
smb1srv_open_table_init(struct smbXsrv_connection
*conn
)
1106 * Allow a range from 1..65534.
1108 * With real_max_open_files possible ids,
1109 * truncated to the SMB1 limit of 16-bit.
1111 * 0 and 0xFFFF are no valid ids.
1113 max_opens
= conn
->client
->sconn
->real_max_open_files
;
1114 max_opens
= MIN(max_opens
, UINT16_MAX
- 1);
1116 return smbXsrv_open_table_init(conn
, 1, UINT16_MAX
- 1, max_opens
);
1119 NTSTATUS
smb1srv_open_lookup(struct smbXsrv_connection
*conn
,
1120 uint16_t fnum
, NTTIME now
,
1121 struct smbXsrv_open
**_open
)
1123 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
1124 uint32_t local_id
= fnum
;
1125 uint32_t global_id
= 0;
1127 return smbXsrv_open_local_lookup(table
, local_id
, global_id
, now
, _open
);
1130 NTSTATUS
smb2srv_open_table_init(struct smbXsrv_connection
*conn
)
1135 * Allow a range from 1..4294967294.
1137 * With real_max_open_files possible ids,
1138 * truncated to 16-bit (the same as SMB1 for now).
1140 * 0 and 0xFFFFFFFF are no valid ids.
1142 * The usage of conn->sconn->real_max_open_files
1143 * is the reason that we use one open table per
1144 * transport connection (as we still have a 1:1 mapping
1145 * between process and transport connection).
1147 max_opens
= conn
->client
->sconn
->real_max_open_files
;
1148 max_opens
= MIN(max_opens
, UINT16_MAX
- 1);
1150 return smbXsrv_open_table_init(conn
, 1, UINT32_MAX
- 1, max_opens
);
1153 NTSTATUS
smb2srv_open_lookup(struct smbXsrv_connection
*conn
,
1154 uint64_t persistent_id
,
1155 uint64_t volatile_id
,
1157 struct smbXsrv_open
**_open
)
1159 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
1160 uint32_t local_id
= volatile_id
& UINT32_MAX
;
1161 uint64_t local_zeros
= volatile_id
& 0xFFFFFFFF00000000LLU
;
1162 uint32_t global_id
= persistent_id
& UINT32_MAX
;
1163 uint64_t global_zeros
= persistent_id
& 0xFFFFFFFF00000000LLU
;
1165 if (local_zeros
!= 0) {
1166 return NT_STATUS_FILE_CLOSED
;
1169 if (global_zeros
!= 0) {
1170 return NT_STATUS_FILE_CLOSED
;
1173 if (global_id
== 0) {
1174 return NT_STATUS_FILE_CLOSED
;
1177 return smbXsrv_open_local_lookup(table
, local_id
, global_id
, now
, _open
);
1180 NTSTATUS
smb2srv_open_recreate(struct smbXsrv_connection
*conn
,
1181 struct auth_session_info
*session_info
,
1182 uint64_t persistent_id
,
1183 const struct GUID
*create_guid
,
1185 struct smbXsrv_open
**_open
)
1187 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
1188 struct db_record
*local_rec
= NULL
;
1189 struct smbXsrv_open
*op
= NULL
;
1192 uint32_t global_id
= persistent_id
& UINT32_MAX
;
1193 uint64_t global_zeros
= persistent_id
& 0xFFFFFFFF00000000LLU
;
1195 struct security_token
*current_token
= NULL
;
1197 if (session_info
== NULL
) {
1198 DEBUG(10, ("session_info=NULL\n"));
1199 return NT_STATUS_INVALID_HANDLE
;
1201 current_token
= session_info
->security_token
;
1203 if (current_token
== NULL
) {
1204 DEBUG(10, ("current_token=NULL\n"));
1205 return NT_STATUS_INVALID_HANDLE
;
1208 if (global_zeros
!= 0) {
1209 DEBUG(10, ("global_zeros!=0\n"));
1210 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1213 op
= talloc_zero(table
, struct smbXsrv_open
);
1215 return NT_STATUS_NO_MEMORY
;
1219 status
= smbXsrv_open_global_lookup(table
, global_id
, op
, &op
->global
);
1220 if (!NT_STATUS_IS_OK(status
)) {
1222 DEBUG(10, ("smbXsrv_open_global_lookup returned %s\n",
1223 nt_errstr(status
)));
1228 * If the provided create_guid is NULL, this means that
1229 * the reconnect request was a v1 request. In that case
1230 * we should skipt the create GUID verification, since
1231 * it is valid to v1-reconnect a v2-opened handle.
1233 if ((create_guid
!= NULL
) &&
1234 !GUID_equal(&op
->global
->create_guid
, create_guid
))
1237 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1240 if (!security_token_is_sid(current_token
, &op
->global
->open_owner
)) {
1242 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1245 if (!op
->global
->durable
) {
1247 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1250 if (table
->local
.num_opens
>= table
->local
.max_opens
) {
1252 return NT_STATUS_INSUFFICIENT_RESOURCES
;
1255 status
= smbXsrv_open_local_allocate_id(table
->local
.db_ctx
,
1256 table
->local
.lowest_id
,
1257 table
->local
.highest_id
,
1261 if (!NT_STATUS_IS_OK(status
)) {
1266 op
->idle_time
= now
;
1267 op
->status
= NT_STATUS_FILE_CLOSED
;
1269 op
->global
->open_volatile_id
= op
->local_id
;
1270 op
->global
->server_id
= messaging_server_id(conn
->msg_ctx
);
1273 val
= make_tdb_data((uint8_t const *)&ptr
, sizeof(ptr
));
1274 status
= dbwrap_record_store(local_rec
, val
, TDB_REPLACE
);
1275 TALLOC_FREE(local_rec
);
1276 if (!NT_STATUS_IS_OK(status
)) {
1280 table
->local
.num_opens
+= 1;
1282 talloc_set_destructor(op
, smbXsrv_open_destructor
);
1284 status
= smbXsrv_open_global_store(op
->global
);
1285 if (!NT_STATUS_IS_OK(status
)) {
1290 if (CHECK_DEBUGLVL(10)) {
1291 struct smbXsrv_openB open_blob
;
1293 ZERO_STRUCT(open_blob
);
1294 open_blob
.version
= 0;
1295 open_blob
.info
.info0
= op
;
1297 DEBUG(10,("smbXsrv_open_recreate: global_id (0x%08x) stored\n",
1298 op
->global
->open_global_id
));
1299 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
1303 return NT_STATUS_OK
;
1307 static NTSTATUS
smbXsrv_open_global_parse_record(TALLOC_CTX
*mem_ctx
,
1308 struct db_record
*rec
,
1309 struct smbXsrv_open_global0
**global
)
1311 TDB_DATA key
= dbwrap_record_get_key(rec
);
1312 TDB_DATA val
= dbwrap_record_get_value(rec
);
1313 DATA_BLOB blob
= data_blob_const(val
.dptr
, val
.dsize
);
1314 struct smbXsrv_open_globalB global_blob
;
1315 enum ndr_err_code ndr_err
;
1317 TALLOC_CTX
*frame
= talloc_stackframe();
1319 ndr_err
= ndr_pull_struct_blob(&blob
, frame
, &global_blob
,
1320 (ndr_pull_flags_fn_t
)ndr_pull_smbXsrv_open_globalB
);
1321 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1322 DEBUG(1,("Invalid record in smbXsrv_open_global.tdb:"
1323 "key '%s' ndr_pull_struct_blob - %s\n",
1324 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
1325 ndr_errstr(ndr_err
)));
1326 status
= ndr_map_error2ntstatus(ndr_err
);
1330 if (global_blob
.version
!= SMBXSRV_VERSION_0
) {
1331 status
= NT_STATUS_INTERNAL_DB_CORRUPTION
;
1332 DEBUG(1,("Invalid record in smbXsrv_open_global.tdb:"
1333 "key '%s' unsuported version - %d - %s\n",
1334 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
1335 (int)global_blob
.version
,
1336 nt_errstr(status
)));
1340 *global
= talloc_move(mem_ctx
, &global_blob
.info
.info0
);
1341 status
= NT_STATUS_OK
;
1347 struct smbXsrv_open_global_traverse_state
{
1348 int (*fn
)(struct smbXsrv_open_global0
*, void *);
1352 static int smbXsrv_open_global_traverse_fn(struct db_record
*rec
, void *data
)
1354 struct smbXsrv_open_global_traverse_state
*state
=
1355 (struct smbXsrv_open_global_traverse_state
*)data
;
1356 struct smbXsrv_open_global0
*global
= NULL
;
1360 status
= smbXsrv_open_global_parse_record(talloc_tos(), rec
, &global
);
1361 if (!NT_STATUS_IS_OK(status
)) {
1365 global
->db_rec
= rec
;
1366 ret
= state
->fn(global
, state
->private_data
);
1367 talloc_free(global
);
1371 NTSTATUS
smbXsrv_open_global_traverse(
1372 int (*fn
)(struct smbXsrv_open_global0
*, void *),
1378 struct smbXsrv_open_global_traverse_state state
= {
1380 .private_data
= private_data
,
1384 status
= smbXsrv_open_global_init();
1385 if (!NT_STATUS_IS_OK(status
)) {
1387 DEBUG(0, ("Failed to initialize open_global: %s\n",
1388 nt_errstr(status
)));
1392 status
= dbwrap_traverse_read(smbXsrv_open_global_db_ctx
,
1393 smbXsrv_open_global_traverse_fn
,
1401 NTSTATUS
smbXsrv_open_cleanup(uint64_t persistent_id
)
1403 NTSTATUS status
= NT_STATUS_OK
;
1404 TALLOC_CTX
*frame
= talloc_stackframe();
1405 struct smbXsrv_open_global0
*op
= NULL
;
1406 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
1409 struct db_record
*rec
;
1410 bool delete_open
= false;
1411 uint32_t global_id
= persistent_id
& UINT32_MAX
;
1413 key
= smbXsrv_open_global_id_to_key(global_id
, key_buf
);
1414 rec
= dbwrap_fetch_locked(smbXsrv_open_global_db_ctx
, frame
, key
);
1416 status
= NT_STATUS_NOT_FOUND
;
1417 DEBUG(1, ("smbXsrv_open_cleanup[global: 0x%08x] "
1418 "failed to fetch record from %s - %s\n",
1419 global_id
, dbwrap_name(smbXsrv_open_global_db_ctx
),
1420 nt_errstr(status
)));
1424 val
= dbwrap_record_get_value(rec
);
1425 if (val
.dsize
== 0) {
1426 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1427 "empty record in %s, skipping...\n",
1428 global_id
, dbwrap_name(smbXsrv_open_global_db_ctx
)));
1432 status
= smbXsrv_open_global_parse_record(talloc_tos(), rec
, &op
);
1433 if (!NT_STATUS_IS_OK(status
)) {
1434 DEBUG(1, ("smbXsrv_open_cleanup[global: 0x%08x] "
1435 "failed to read record: %s\n",
1436 global_id
, nt_errstr(status
)));
1440 if (server_id_is_disconnected(&op
->server_id
)) {
1441 struct timeval now
, disconnect_time
;
1443 now
= timeval_current();
1444 nttime_to_timeval(&disconnect_time
, op
->disconnect_time
);
1445 tdiff
= usec_time_diff(&now
, &disconnect_time
);
1446 delete_open
= (tdiff
>= 1000*op
->durable_timeout_msec
);
1448 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1449 "disconnected at [%s] %us ago with "
1450 "timeout of %us -%s reached\n",
1452 nt_time_string(frame
, op
->disconnect_time
),
1453 (unsigned)(tdiff
/1000000),
1454 op
->durable_timeout_msec
/ 1000,
1455 delete_open
? "" : " not"));
1456 } else if (!serverid_exists(&op
->server_id
)) {
1457 struct server_id_buf idbuf
;
1458 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1459 "server[%s] does not exist\n",
1461 server_id_str_buf(op
->server_id
, &idbuf
)));
1469 status
= dbwrap_record_delete(rec
);
1470 if (!NT_STATUS_IS_OK(status
)) {
1471 DEBUG(1, ("smbXsrv_open_cleanup[global: 0x%08x] "
1472 "failed to delete record"
1473 "from %s: %s\n", global_id
,
1474 dbwrap_name(smbXsrv_open_global_db_ctx
),
1475 nt_errstr(status
)));
1479 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1480 "delete record from %s\n",
1482 dbwrap_name(smbXsrv_open_global_db_ctx
)));