?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
dsdb-tests: Add new test samba4.user_account_control.python
[Samba.git] / source3 / smbd / smbXsrv_tcon.c
blob89a25e8bee782c49c817ad4aa85db836c1fa9a6a
1 /*
2 Unix SMB/CIFS implementation.
3
4 Copyright (C) Stefan Metzmacher 2011-2012
5 Copyright (C) Michael Adam 2012
6
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
11
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
16
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
19 */
20
21 #include "includes.h"
22 #include "system/filesys.h"
23 #include "smbd/smbd.h"
24 #include "smbd/globals.h"
25 #include "dbwrap/dbwrap.h"
26 #include "dbwrap/dbwrap_rbt.h"
27 #include "dbwrap/dbwrap_open.h"
28 #include "messages.h"
29 #include "lib/util/util_tdb.h"
30 #include "librpc/gen_ndr/ndr_smbXsrv.h"
31 #include "serverid.h"
32
33 struct smbXsrv_tcon_table {
34 struct {
35 struct db_context *db_ctx;
36 uint32_t lowest_id;
37 uint32_t highest_id;
38 uint32_t max_tcons;
39 uint32_t num_tcons;
40 } local;
41 struct {
42 struct db_context *db_ctx;
43 } global;
44 };
45
46 static struct db_context *smbXsrv_tcon_global_db_ctx = NULL;
47
48 NTSTATUS smbXsrv_tcon_global_init(void)
49 {
50 char *global_path = NULL;
51 struct db_context *db_ctx = NULL;
52
53 if (smbXsrv_tcon_global_db_ctx != NULL) {
54 return NT_STATUS_OK;
55 }
56
57 global_path = lock_path("smbXsrv_tcon_global.tdb");
58 if (global_path == NULL) {
59 return NT_STATUS_NO_MEMORY;
60 }
61
62 db_ctx = db_open(NULL, global_path,
63 0, /* hash_size */
64 TDB_DEFAULT |
65 TDB_CLEAR_IF_FIRST |
66 TDB_INCOMPATIBLE_HASH,
67 O_RDWR | O_CREAT, 0600,
68 DBWRAP_LOCK_ORDER_1,
69 DBWRAP_FLAG_NONE);
70 TALLOC_FREE(global_path);
71 if (db_ctx == NULL) {
72 NTSTATUS status;
73
74 status = map_nt_error_from_unix_common(errno);
75
76 return status;
77 }
78
79 smbXsrv_tcon_global_db_ctx = db_ctx;
80
81 return NT_STATUS_OK;
82 }
83
84 /*
85 * NOTE:
86 * We need to store the keys in big endian so that dbwrap_rbt's memcmp
87 * has the same result as integer comparison between the uint32_t
88 * values.
89 *
90 * TODO: implement string based key
91 */
92
93 #define SMBXSRV_TCON_GLOBAL_TDB_KEY_SIZE sizeof(uint32_t)
94
95 static TDB_DATA smbXsrv_tcon_global_id_to_key(uint32_t id,
96 uint8_t *key_buf)
97 {
98 TDB_DATA key;
99
100 RSIVAL(key_buf, 0, id);
101
102 key = make_tdb_data(key_buf, SMBXSRV_TCON_GLOBAL_TDB_KEY_SIZE);
103
104 return key;
105 }
106
107 #if 0
108 static NTSTATUS smbXsrv_tcon_global_key_to_id(TDB_DATA key, uint32_t *id)
109 {
110 if (id == NULL) {
111 return NT_STATUS_INVALID_PARAMETER;
112 }
113
114 if (key.dsize != SMBXSRV_TCON_GLOBAL_TDB_KEY_SIZE) {
115 return NT_STATUS_INTERNAL_DB_CORRUPTION;
116 }
117
118 *id = RIVAL(key.dptr, 0);
119
120 return NT_STATUS_OK;
121 }
122 #endif
123
124 #define SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE sizeof(uint32_t)
125
126 static TDB_DATA smbXsrv_tcon_local_id_to_key(uint32_t id,
127 uint8_t *key_buf)
128 {
129 TDB_DATA key;
130
131 RSIVAL(key_buf, 0, id);
132
133 key = make_tdb_data(key_buf, SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE);
134
135 return key;
136 }
137
138 static NTSTATUS smbXsrv_tcon_local_key_to_id(TDB_DATA key, uint32_t *id)
139 {
140 if (id == NULL) {
141 return NT_STATUS_INVALID_PARAMETER;
142 }
143
144 if (key.dsize != SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE) {
145 return NT_STATUS_INTERNAL_DB_CORRUPTION;
146 }
147
148 *id = RIVAL(key.dptr, 0);
149
150 return NT_STATUS_OK;
151 }
152
153 static NTSTATUS smbXsrv_tcon_table_init(TALLOC_CTX *mem_ctx,
154 struct smbXsrv_tcon_table *table,
155 uint32_t lowest_id,
156 uint32_t highest_id,
157 uint32_t max_tcons)
158 {
159 NTSTATUS status;
160 uint64_t max_range;
161
162 if (lowest_id > highest_id) {
163 return NT_STATUS_INTERNAL_ERROR;
164 }
165
166 max_range = highest_id;
167 max_range -= lowest_id;
168 max_range += 1;
169
170 if (max_tcons > max_range) {
171 return NT_STATUS_INTERNAL_ERROR;
172 }
173
174 ZERO_STRUCTP(table);
175 table->local.db_ctx = db_open_rbt(table);
176 if (table->local.db_ctx == NULL) {
177 return NT_STATUS_NO_MEMORY;
178 }
179 table->local.lowest_id = lowest_id;
180 table->local.highest_id = highest_id;
181 table->local.max_tcons = max_tcons;
182
183 status = smbXsrv_tcon_global_init();
184 if (!NT_STATUS_IS_OK(status)) {
185 return status;
186 }
187
188 table->global.db_ctx = smbXsrv_tcon_global_db_ctx;
189
190 return NT_STATUS_OK;
191 }
192
193 struct smb1srv_tcon_local_allocate_state {
194 const uint32_t lowest_id;
195 const uint32_t highest_id;
196 uint32_t last_id;
197 uint32_t useable_id;
198 NTSTATUS status;
199 };
200
201 static int smb1srv_tcon_local_allocate_traverse(struct db_record *rec,
202 void *private_data)
203 {
204 struct smb1srv_tcon_local_allocate_state *state =
205 (struct smb1srv_tcon_local_allocate_state *)private_data;
206 TDB_DATA key = dbwrap_record_get_key(rec);
207 uint32_t id = 0;
208 NTSTATUS status;
209
210 status = smbXsrv_tcon_local_key_to_id(key, &id);
211 if (!NT_STATUS_IS_OK(status)) {
212 state->status = status;
213 return -1;
214 }
215
216 if (id <= state->last_id) {
217 state->status = NT_STATUS_INTERNAL_DB_CORRUPTION;
218 return -1;
219 }
220 state->last_id = id;
221
222 if (id > state->useable_id) {
223 state->status = NT_STATUS_OK;
224 return -1;
225 }
226
227 if (state->useable_id == state->highest_id) {
228 state->status = NT_STATUS_INSUFFICIENT_RESOURCES;
229 return -1;
230 }
231
232 state->useable_id +=1;
233 return 0;
234 }
235
236 static NTSTATUS smb1srv_tcon_local_allocate_id(struct db_context *db,
237 uint32_t lowest_id,
238 uint32_t highest_id,
239 TALLOC_CTX *mem_ctx,
240 struct db_record **_rec,
241 uint32_t *_id)
242 {
243 struct smb1srv_tcon_local_allocate_state state = {
244 .lowest_id = lowest_id,
245 .highest_id = highest_id,
246 .last_id = 0,
247 .useable_id = lowest_id,
248 .status = NT_STATUS_INTERNAL_ERROR,
249 };
250 uint32_t i;
251 uint32_t range;
252 NTSTATUS status;
253 int count = 0;
254
255 *_rec = NULL;
256 *_id = 0;
257
258 if (lowest_id > highest_id) {
259 return NT_STATUS_INSUFFICIENT_RESOURCES;
260 }
261
262 /*
263 * first we try randomly
264 */
265 range = (highest_id - lowest_id) + 1;
266
267 for (i = 0; i < (range / 2); i++) {
268 uint32_t id;
269 uint8_t key_buf[SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE];
270 TDB_DATA key;
271 TDB_DATA val;
272 struct db_record *rec = NULL;
273
274 id = generate_random() % range;
275 id += lowest_id;
276
277 if (id < lowest_id) {
278 id = lowest_id;
279 }
280 if (id > highest_id) {
281 id = highest_id;
282 }
283
284 key = smbXsrv_tcon_local_id_to_key(id, key_buf);
285
286 rec = dbwrap_fetch_locked(db, mem_ctx, key);
287 if (rec == NULL) {
288 return NT_STATUS_INSUFFICIENT_RESOURCES;
289 }
290
291 val = dbwrap_record_get_value(rec);
292 if (val.dsize != 0) {
293 TALLOC_FREE(rec);
294 continue;
295 }
296
297 *_rec = rec;
298 *_id = id;
299 return NT_STATUS_OK;
300 }
301
302 /*
303 * if the range is almost full,
304 * we traverse the whole table
305 * (this relies on sorted behavior of dbwrap_rbt)
306 */
307 status = dbwrap_traverse_read(db, smb1srv_tcon_local_allocate_traverse,
308 &state, &count);
309 if (NT_STATUS_IS_OK(status)) {
310 if (NT_STATUS_IS_OK(state.status)) {
311 return NT_STATUS_INTERNAL_ERROR;
312 }
313
314 if (!NT_STATUS_EQUAL(state.status, NT_STATUS_INTERNAL_ERROR)) {
315 return state.status;
316 }
317
318 if (state.useable_id <= state.highest_id) {
319 state.status = NT_STATUS_OK;
320 } else {
321 return NT_STATUS_INSUFFICIENT_RESOURCES;
322 }
323 } else if (!NT_STATUS_EQUAL(status, NT_STATUS_INTERNAL_DB_CORRUPTION)) {
324 /*
325 * Here we really expect NT_STATUS_INTERNAL_DB_CORRUPTION!
326 *
327 * If we get anything else it is an error, because it
328 * means we did not manage to find a free slot in
329 * the db.
330 */
331 return NT_STATUS_INSUFFICIENT_RESOURCES;
332 }
333
334 if (NT_STATUS_IS_OK(state.status)) {
335 uint32_t id;
336 uint8_t key_buf[SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE];
337 TDB_DATA key;
338 TDB_DATA val;
339 struct db_record *rec = NULL;
340
341 id = state.useable_id;
342
343 key = smbXsrv_tcon_local_id_to_key(id, key_buf);
344
345 rec = dbwrap_fetch_locked(db, mem_ctx, key);
346 if (rec == NULL) {
347 return NT_STATUS_INSUFFICIENT_RESOURCES;
348 }
349
350 val = dbwrap_record_get_value(rec);
351 if (val.dsize != 0) {
352 TALLOC_FREE(rec);
353 return NT_STATUS_INTERNAL_DB_CORRUPTION;
354 }
355
356 *_rec = rec;
357 *_id = id;
358 return NT_STATUS_OK;
359 }
360
361 return state.status;
362 }
363
364 struct smbXsrv_tcon_local_fetch_state {
365 struct smbXsrv_tcon *tcon;
366 NTSTATUS status;
367 };
368
369 static void smbXsrv_tcon_local_fetch_parser(TDB_DATA key, TDB_DATA data,
370 void *private_data)
371 {
372 struct smbXsrv_tcon_local_fetch_state *state =
373 (struct smbXsrv_tcon_local_fetch_state *)private_data;
374 void *ptr;
375
376 if (data.dsize != sizeof(ptr)) {
377 state->status = NT_STATUS_INTERNAL_DB_ERROR;
378 return;
379 }
380
381 memcpy(&ptr, data.dptr, data.dsize);
382 state->tcon = talloc_get_type_abort(ptr, struct smbXsrv_tcon);
383 state->status = NT_STATUS_OK;
384 }
385
386 static NTSTATUS smbXsrv_tcon_local_lookup(struct smbXsrv_tcon_table *table,
387 uint32_t tcon_local_id,
388 NTTIME now,
389 struct smbXsrv_tcon **_tcon)
390 {
391 struct smbXsrv_tcon_local_fetch_state state = {
392 .tcon = NULL,
393 .status = NT_STATUS_INTERNAL_ERROR,
394 };
395 uint8_t key_buf[SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE];
396 TDB_DATA key;
397 NTSTATUS status;
398
399 *_tcon = NULL;
400
401 if (tcon_local_id == 0) {
402 return NT_STATUS_NETWORK_NAME_DELETED;
403 }
404
405 if (table == NULL) {
406 /* this might happen before the end of negprot */
407 return NT_STATUS_NETWORK_NAME_DELETED;
408 }
409
410 if (table->local.db_ctx == NULL) {
411 return NT_STATUS_INTERNAL_ERROR;
412 }
413
414 key = smbXsrv_tcon_local_id_to_key(tcon_local_id, key_buf);
415
416 status = dbwrap_parse_record(table->local.db_ctx, key,
417 smbXsrv_tcon_local_fetch_parser,
418 &state);
419 if (NT_STATUS_EQUAL(status, NT_STATUS_NOT_FOUND)) {
420 return NT_STATUS_NETWORK_NAME_DELETED;
421 } else if (!NT_STATUS_IS_OK(status)) {
422 return status;
423 }
424 if (!NT_STATUS_IS_OK(state.status)) {
425 return state.status;
426 }
427
428 if (NT_STATUS_EQUAL(state.tcon->status, NT_STATUS_NETWORK_NAME_DELETED)) {
429 return NT_STATUS_NETWORK_NAME_DELETED;
430 }
431
432 state.tcon->idle_time = now;
433
434 *_tcon = state.tcon;
435 return state.tcon->status;
436 }
437
438 static int smbXsrv_tcon_global_destructor(struct smbXsrv_tcon_global0 *global)
439 {
440 return 0;
441 }
442
443 static void smbXsrv_tcon_global_verify_record(struct db_record *db_rec,
444 bool *is_free,
445 bool *was_free,
446 TALLOC_CTX *mem_ctx,
447 struct smbXsrv_tcon_global0 **_g);
448
449 static NTSTATUS smbXsrv_tcon_global_allocate(struct db_context *db,
450 TALLOC_CTX *mem_ctx,
451 struct smbXsrv_tcon_global0 **_global)
452 {
453 uint32_t i;
454 struct smbXsrv_tcon_global0 *global = NULL;
455 uint32_t last_free = 0;
456 const uint32_t min_tries = 3;
457
458 *_global = NULL;
459
460 global = talloc_zero(mem_ctx, struct smbXsrv_tcon_global0);
461 if (global == NULL) {
462 return NT_STATUS_NO_MEMORY;
463 }
464 talloc_set_destructor(global, smbXsrv_tcon_global_destructor);
465
466 /*
467 * Here we just randomly try the whole 32-bit space
468 *
469 * We use just 32-bit, because we want to reuse the
470 * ID for SRVSVC.
471 */
472 for (i = 0; i < UINT32_MAX; i++) {
473 bool is_free = false;
474 bool was_free = false;
475 uint32_t id;
476 uint8_t key_buf[SMBXSRV_TCON_GLOBAL_TDB_KEY_SIZE];
477 TDB_DATA key;
478
479 if (i >= min_tries && last_free != 0) {
480 id = last_free;
481 } else {
482 id = generate_random();
483 }
484 if (id == 0) {
485 id++;
486 }
487 if (id == UINT32_MAX) {
488 id--;
489 }
490
491 key = smbXsrv_tcon_global_id_to_key(id, key_buf);
492
493 global->db_rec = dbwrap_fetch_locked(db, mem_ctx, key);
494 if (global->db_rec == NULL) {
495 talloc_free(global);
496 return NT_STATUS_INSUFFICIENT_RESOURCES;
497 }
498
499 smbXsrv_tcon_global_verify_record(global->db_rec,
500 &is_free,
501 &was_free,
502 NULL, NULL);
503
504 if (!is_free) {
505 TALLOC_FREE(global->db_rec);
506 continue;
507 }
508
509 if (!was_free && i < min_tries) {
510 /*
511 * The session_id is free now,
512 * but was not free before.
513 *
514 * This happens if a smbd crashed
515 * and did not cleanup the record.
516 *
517 * If this is one of our first tries,
518 * then we try to find a real free one.
519 */
520 if (last_free == 0) {
521 last_free = id;
522 }
523 TALLOC_FREE(global->db_rec);
524 continue;
525 }
526
527 global->tcon_global_id = id;
528
529 *_global = global;
530 return NT_STATUS_OK;
531 }
532
533 /* should not be reached */
534 talloc_free(global);
535 return NT_STATUS_INTERNAL_ERROR;
536 }
537
538 static void smbXsrv_tcon_global_verify_record(struct db_record *db_rec,
539 bool *is_free,
540 bool *was_free,
541 TALLOC_CTX *mem_ctx,
542 struct smbXsrv_tcon_global0 **_g)
543 {
544 TDB_DATA key;
545 TDB_DATA val;
546 DATA_BLOB blob;
547 struct smbXsrv_tcon_globalB global_blob;
548 enum ndr_err_code ndr_err;
549 struct smbXsrv_tcon_global0 *global = NULL;
550 bool exists;
551 TALLOC_CTX *frame = talloc_stackframe();
552
553 *is_free = false;
554
555 if (was_free) {
556 *was_free = false;
557 }
558 if (_g) {
559 *_g = NULL;
560 }
561
562 key = dbwrap_record_get_key(db_rec);
563
564 val = dbwrap_record_get_value(db_rec);
565 if (val.dsize == 0) {
566 TALLOC_FREE(frame);
567 *is_free = true;
568 if (was_free) {
569 *was_free = true;
570 }
571 return;
572 }
573
574 blob = data_blob_const(val.dptr, val.dsize);
575
576 ndr_err = ndr_pull_struct_blob(&blob, frame, &global_blob,
577 (ndr_pull_flags_fn_t)ndr_pull_smbXsrv_tcon_globalB);
578 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
579 NTSTATUS status = ndr_map_error2ntstatus(ndr_err);
580 DEBUG(1,("smbXsrv_tcon_global_verify_record: "
581 "key '%s' ndr_pull_struct_blob - %s\n",
582 hex_encode_talloc(frame, key.dptr, key.dsize),
583 nt_errstr(status)));
584 TALLOC_FREE(frame);
585 return;
586 }
587
588 DEBUG(10,("smbXsrv_tcon_global_verify_record\n"));
589 if (DEBUGLVL(10)) {
590 NDR_PRINT_DEBUG(smbXsrv_tcon_globalB, &global_blob);
591 }
592
593 if (global_blob.version != SMBXSRV_VERSION_0) {
594 DEBUG(0,("smbXsrv_tcon_global_verify_record: "
595 "key '%s' use unsupported version %u\n",
596 hex_encode_talloc(frame, key.dptr, key.dsize),
597 global_blob.version));
598 NDR_PRINT_DEBUG(smbXsrv_tcon_globalB, &global_blob);
599 TALLOC_FREE(frame);
600 return;
601 }
602
603 global = global_blob.info.info0;
604
605 exists = serverid_exists(&global->server_id);
606 if (!exists) {
607 DEBUG(2,("smbXsrv_tcon_global_verify_record: "
608 "key '%s' server_id %s does not exist.\n",
609 hex_encode_talloc(frame, key.dptr, key.dsize),
610 server_id_str(frame, &global->server_id)));
611 if (DEBUGLVL(2)) {
612 NDR_PRINT_DEBUG(smbXsrv_tcon_globalB, &global_blob);
613 }
614 TALLOC_FREE(frame);
615 dbwrap_record_delete(db_rec);
616 *is_free = true;
617 return;
618 }
619
620 if (_g) {
621 *_g = talloc_move(mem_ctx, &global);
622 }
623 TALLOC_FREE(frame);
624 }
625
626 static NTSTATUS smbXsrv_tcon_global_store(struct smbXsrv_tcon_global0 *global)
627 {
628 struct smbXsrv_tcon_globalB global_blob;
629 DATA_BLOB blob = data_blob_null;
630 TDB_DATA key;
631 TDB_DATA val;
632 NTSTATUS status;
633 enum ndr_err_code ndr_err;
634
635 /*
636 * TODO: if we use other versions than '0'
637 * we would add glue code here, that would be able to
638 * store the information in the old format.
639 */
640
641 if (global->db_rec == NULL) {
642 return NT_STATUS_INTERNAL_ERROR;
643 }
644
645 key = dbwrap_record_get_key(global->db_rec);
646 val = dbwrap_record_get_value(global->db_rec);
647
648 ZERO_STRUCT(global_blob);
649 global_blob.version = smbXsrv_version_global_current();
650 if (val.dsize >= 8) {
651 global_blob.seqnum = IVAL(val.dptr, 4);
652 }
653 global_blob.seqnum += 1;
654 global_blob.info.info0 = global;
655
656 ndr_err = ndr_push_struct_blob(&blob, global->db_rec, &global_blob,
657 (ndr_push_flags_fn_t)ndr_push_smbXsrv_tcon_globalB);
658 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
659 status = ndr_map_error2ntstatus(ndr_err);
660 DEBUG(1,("smbXsrv_tcon_global_store: key '%s' ndr_push - %s\n",
661 hex_encode_talloc(global->db_rec, key.dptr, key.dsize),
662 nt_errstr(status)));
663 TALLOC_FREE(global->db_rec);
664 return status;
665 }
666
667 val = make_tdb_data(blob.data, blob.length);
668 status = dbwrap_record_store(global->db_rec, val, TDB_REPLACE);
669 if (!NT_STATUS_IS_OK(status)) {
670 DEBUG(1,("smbXsrv_tcon_global_store: key '%s' store - %s\n",
671 hex_encode_talloc(global->db_rec, key.dptr, key.dsize),
672 nt_errstr(status)));
673 TALLOC_FREE(global->db_rec);
674 return status;
675 }
676
677 if (DEBUGLVL(10)) {
678 DEBUG(10,("smbXsrv_tcon_global_store: key '%s' stored\n",
679 hex_encode_talloc(global->db_rec, key.dptr, key.dsize)));
680 NDR_PRINT_DEBUG(smbXsrv_tcon_globalB, &global_blob);
681 }
682
683 TALLOC_FREE(global->db_rec);
684
685 return NT_STATUS_OK;
686 }
687
688 static int smbXsrv_tcon_destructor(struct smbXsrv_tcon *tcon)
689 {
690 NTSTATUS status;
691
692 status = smbXsrv_tcon_disconnect(tcon, 0);
693 if (!NT_STATUS_IS_OK(status)) {
694 DEBUG(0, ("smbXsrv_tcon_destructor: "
695 "smbXsrv_tcon_disconnect() failed - %s\n",
696 nt_errstr(status)));
697 }
698
699 TALLOC_FREE(tcon->global);
700
701 return 0;
702 }
703
704 static NTSTATUS smbXsrv_tcon_create(struct smbXsrv_tcon_table *table,
705 enum protocol_types protocol,
706 struct server_id server_id,
707 NTTIME now,
708 struct smbXsrv_tcon **_tcon)
709 {
710 struct db_record *local_rec = NULL;
711 struct smbXsrv_tcon *tcon = NULL;
712 void *ptr = NULL;
713 TDB_DATA val;
714 struct smbXsrv_tcon_global0 *global = NULL;
715 NTSTATUS status;
716
717 if (table->local.num_tcons >= table->local.max_tcons) {
718 return NT_STATUS_INSUFFICIENT_RESOURCES;
719 }
720
721 tcon = talloc_zero(table, struct smbXsrv_tcon);
722 if (tcon == NULL) {
723 return NT_STATUS_NO_MEMORY;
724 }
725 tcon->table = table;
726 tcon->status = NT_STATUS_INTERNAL_ERROR;
727 tcon->idle_time = now;
728
729 status = smbXsrv_tcon_global_allocate(table->global.db_ctx,
730 tcon, &global);
731 if (!NT_STATUS_IS_OK(status)) {
732 TALLOC_FREE(tcon);
733 return status;
734 }
735 tcon->global = global;
736
737 if (protocol >= PROTOCOL_SMB2_02) {
738 uint64_t id = global->tcon_global_id;
739 uint8_t key_buf[SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE];
740 TDB_DATA key;
741
742 global->tcon_wire_id = id;
743
744 tcon->local_id = global->tcon_global_id;
745
746 key = smbXsrv_tcon_local_id_to_key(tcon->local_id, key_buf);
747
748 local_rec = dbwrap_fetch_locked(table->local.db_ctx,
749 tcon, key);
750 if (local_rec == NULL) {
751 TALLOC_FREE(tcon);
752 return NT_STATUS_NO_MEMORY;
753 }
754
755 val = dbwrap_record_get_value(local_rec);
756 if (val.dsize != 0) {
757 TALLOC_FREE(tcon);
758 return NT_STATUS_INTERNAL_DB_CORRUPTION;
759 }
760 } else {
761
762 status = smb1srv_tcon_local_allocate_id(table->local.db_ctx,
763 table->local.lowest_id,
764 table->local.highest_id,
765 tcon,
766 &local_rec,
767 &tcon->local_id);
768 if (!NT_STATUS_IS_OK(status)) {
769 TALLOC_FREE(tcon);
770 return status;
771 }
772
773 global->tcon_wire_id = tcon->local_id;
774 }
775
776 global->creation_time = now;
777
778 global->server_id = server_id;
779
780 ptr = tcon;
781 val = make_tdb_data((uint8_t const *)&ptr, sizeof(ptr));
782 status = dbwrap_record_store(local_rec, val, TDB_REPLACE);
783 TALLOC_FREE(local_rec);
784 if (!NT_STATUS_IS_OK(status)) {
785 TALLOC_FREE(tcon);
786 return status;
787 }
788 table->local.num_tcons += 1;
789
790 talloc_set_destructor(tcon, smbXsrv_tcon_destructor);
791
792 status = smbXsrv_tcon_global_store(global);
793 if (!NT_STATUS_IS_OK(status)) {
794 DEBUG(0,("smbXsrv_tcon_create: "
795 "global_id (0x%08x) store failed - %s\n",
796 tcon->global->tcon_global_id,
797 nt_errstr(status)));
798 TALLOC_FREE(tcon);
799 return status;
800 }
801
802 if (DEBUGLVL(10)) {
803 struct smbXsrv_tconB tcon_blob;
804
805 ZERO_STRUCT(tcon_blob);
806 tcon_blob.version = SMBXSRV_VERSION_0;
807 tcon_blob.info.info0 = tcon;
808
809 DEBUG(10,("smbXsrv_tcon_create: global_id (0x%08x) stored\n",
810 tcon->global->tcon_global_id));
811 NDR_PRINT_DEBUG(smbXsrv_tconB, &tcon_blob);
812 }
813
814 *_tcon = tcon;
815 return NT_STATUS_OK;
816 }
817
818 NTSTATUS smbXsrv_tcon_update(struct smbXsrv_tcon *tcon)
819 {
820 struct smbXsrv_tcon_table *table = tcon->table;
821 NTSTATUS status;
822 uint8_t key_buf[SMBXSRV_TCON_GLOBAL_TDB_KEY_SIZE];
823 TDB_DATA key;
824
825 if (tcon->global->db_rec != NULL) {
826 DEBUG(0, ("smbXsrv_tcon_update(0x%08x): "
827 "Called with db_rec != NULL'\n",
828 tcon->global->tcon_global_id));
829 return NT_STATUS_INTERNAL_ERROR;
830 }
831
832 key = smbXsrv_tcon_global_id_to_key(tcon->global->tcon_global_id,
833 key_buf);
834
835 tcon->global->db_rec = dbwrap_fetch_locked(table->global.db_ctx,
836 tcon->global, key);
837 if (tcon->global->db_rec == NULL) {
838 DEBUG(0, ("smbXsrv_tcon_update(0x%08x): "
839 "Failed to lock global key '%s'\n",
840 tcon->global->tcon_global_id,
841 hex_encode_talloc(talloc_tos(), key.dptr,
842 key.dsize)));
843 return NT_STATUS_INTERNAL_DB_ERROR;
844 }
845
846 status = smbXsrv_tcon_global_store(tcon->global);
847 if (!NT_STATUS_IS_OK(status)) {
848 DEBUG(0,("smbXsrv_tcon_update: "
849 "global_id (0x%08x) store failed - %s\n",
850 tcon->global->tcon_global_id,
851 nt_errstr(status)));
852 return status;
853 }
854
855 if (DEBUGLVL(10)) {
856 struct smbXsrv_tconB tcon_blob;
857
858 ZERO_STRUCT(tcon_blob);
859 tcon_blob.version = SMBXSRV_VERSION_0;
860 tcon_blob.info.info0 = tcon;
861
862 DEBUG(10,("smbXsrv_tcon_update: global_id (0x%08x) stored\n",
863 tcon->global->tcon_global_id));
864 NDR_PRINT_DEBUG(smbXsrv_tconB, &tcon_blob);
865 }
866
867 return NT_STATUS_OK;
868 }
869
870 NTSTATUS smbXsrv_tcon_disconnect(struct smbXsrv_tcon *tcon, uint64_t vuid)
871 {
872 struct smbXsrv_tcon_table *table;
873 struct db_record *local_rec = NULL;
874 struct db_record *global_rec = NULL;
875 NTSTATUS status;
876 NTSTATUS error = NT_STATUS_OK;
877
878 if (tcon->table == NULL) {
879 return NT_STATUS_OK;
880 }
881
882 table = tcon->table;
883 tcon->table = NULL;
884
885 tcon->status = NT_STATUS_NETWORK_NAME_DELETED;
886
887 global_rec = tcon->global->db_rec;
888 tcon->global->db_rec = NULL;
889 if (global_rec == NULL) {
890 uint8_t key_buf[SMBXSRV_TCON_GLOBAL_TDB_KEY_SIZE];
891 TDB_DATA key;
892
893 key = smbXsrv_tcon_global_id_to_key(
894 tcon->global->tcon_global_id,
895 key_buf);
896
897 global_rec = dbwrap_fetch_locked(table->global.db_ctx,
898 tcon->global, key);
899 if (global_rec == NULL) {
900 DEBUG(0, ("smbXsrv_tcon_disconnect(0x%08x, '%s'): "
901 "Failed to lock global key '%s'\n",
902 tcon->global->tcon_global_id,
903 tcon->global->share_name,
904 hex_encode_talloc(global_rec, key.dptr,
905 key.dsize)));
906 error = NT_STATUS_INTERNAL_ERROR;
907 }
908 }
909
910 if (global_rec != NULL) {
911 status = dbwrap_record_delete(global_rec);
912 if (!NT_STATUS_IS_OK(status)) {
913 TDB_DATA key = dbwrap_record_get_key(global_rec);
914
915 DEBUG(0, ("smbXsrv_tcon_disconnect(0x%08x, '%s'): "
916 "failed to delete global key '%s': %s\n",
917 tcon->global->tcon_global_id,
918 tcon->global->share_name,
919 hex_encode_talloc(global_rec, key.dptr,
920 key.dsize),
921 nt_errstr(status)));
922 error = status;
923 }
924 }
925 TALLOC_FREE(global_rec);
926
927 local_rec = tcon->db_rec;
928 if (local_rec == NULL) {
929 uint8_t key_buf[SMBXSRV_TCON_LOCAL_TDB_KEY_SIZE];
930 TDB_DATA key;
931
932 key = smbXsrv_tcon_local_id_to_key(tcon->local_id, key_buf);
933
934 local_rec = dbwrap_fetch_locked(table->local.db_ctx,
935 tcon, key);
936 if (local_rec == NULL) {
937 DEBUG(0, ("smbXsrv_tcon_disconnect(0x%08x, '%s'): "
938 "Failed to lock local key '%s'\n",
939 tcon->global->tcon_global_id,
940 tcon->global->share_name,
941 hex_encode_talloc(local_rec, key.dptr,
942 key.dsize)));
943 error = NT_STATUS_INTERNAL_ERROR;
944 }
945 }
946
947 if (local_rec != NULL) {
948 status = dbwrap_record_delete(local_rec);
949 if (!NT_STATUS_IS_OK(status)) {
950 TDB_DATA key = dbwrap_record_get_key(local_rec);
951
952 DEBUG(0, ("smbXsrv_tcon_disconnect(0x%08x, '%s'): "
953 "failed to delete local key '%s': %s\n",
954 tcon->global->tcon_global_id,
955 tcon->global->share_name,
956 hex_encode_talloc(local_rec, key.dptr,
957 key.dsize),
958 nt_errstr(status)));
959 error = status;
960 }
961 table->local.num_tcons -= 1;
962 }
963 if (tcon->db_rec == NULL) {
964 TALLOC_FREE(local_rec);
965 }
966 tcon->db_rec = NULL;
967
968 if (tcon->compat) {
969 bool ok;
970
971 ok = set_current_service(tcon->compat, 0, true);
972 if (!ok) {
973 status = NT_STATUS_INTERNAL_ERROR;
974 DEBUG(0, ("smbXsrv_tcon_disconnect(0x%08x, '%s'): "
975 "set_current_service() failed: %s\n",
976 tcon->global->tcon_global_id,
977 tcon->global->share_name,
978 nt_errstr(status)));
979 tcon->compat = NULL;
980 return status;
981 }
982
983 close_cnum(tcon->compat, vuid);
984 tcon->compat = NULL;
985 }
986
987 return error;
988 }
989
990 struct smbXsrv_tcon_disconnect_all_state {
991 uint64_t vuid;
992 NTSTATUS first_status;
993 int errors;
994 };
995
996 static int smbXsrv_tcon_disconnect_all_callback(struct db_record *local_rec,
997 void *private_data);
998
999 static NTSTATUS smbXsrv_tcon_disconnect_all(struct smbXsrv_tcon_table *table,
1000 uint64_t vuid)
1001 {
1002 struct smbXsrv_tcon_disconnect_all_state state;
1003 NTSTATUS status;
1004 int count = 0;
1005
1006 if (table == NULL) {
1007 return NT_STATUS_OK;
1008 }
1009
1010 ZERO_STRUCT(state);
1011 state.vuid = vuid;
1012
1013 status = dbwrap_traverse(table->local.db_ctx,
1014 smbXsrv_tcon_disconnect_all_callback,
1015 &state, &count);
1016 if (!NT_STATUS_IS_OK(status)) {
1017 DEBUG(0, ("smbXsrv_tcon_disconnect_all: "
1018 "dbwrap_traverse() failed: %s\n",
1019 nt_errstr(status)));
1020 return status;
1021 }
1022
1023 if (!NT_STATUS_IS_OK(state.first_status)) {
1024 DEBUG(0, ("smbXsrv_tcon_disconnect_all: "
1025 "count[%d] errors[%d] first[%s]\n",
1026 count, state.errors,
1027 nt_errstr(state.first_status)));
1028 return state.first_status;
1029 }
1030
1031 return NT_STATUS_OK;
1032 }
1033
1034 static int smbXsrv_tcon_disconnect_all_callback(struct db_record *local_rec,
1035 void *private_data)
1036 {
1037 struct smbXsrv_tcon_disconnect_all_state *state =
1038 (struct smbXsrv_tcon_disconnect_all_state *)private_data;
1039 TDB_DATA val;
1040 void *ptr = NULL;
1041 struct smbXsrv_tcon *tcon = NULL;
1042 uint64_t vuid;
1043 NTSTATUS status;
1044
1045 val = dbwrap_record_get_value(local_rec);
1046 if (val.dsize != sizeof(ptr)) {
1047 status = NT_STATUS_INTERNAL_ERROR;
1048 if (NT_STATUS_IS_OK(state->first_status)) {
1049 state->first_status = status;
1050 }
1051 state->errors++;
1052 return 0;
1053 }
1054
1055 memcpy(&ptr, val.dptr, val.dsize);
1056 tcon = talloc_get_type_abort(ptr, struct smbXsrv_tcon);
1057
1058 vuid = state->vuid;
1059 if (vuid == 0 && tcon->compat) {
1060 vuid = tcon->compat->vuid;
1061 }
1062
1063 tcon->db_rec = local_rec;
1064 status = smbXsrv_tcon_disconnect(tcon, vuid);
1065 if (!NT_STATUS_IS_OK(status)) {
1066 if (NT_STATUS_IS_OK(state->first_status)) {
1067 state->first_status = status;
1068 }
1069 state->errors++;
1070 return 0;
1071 }
1072
1073 return 0;
1074 }
1075
1076 NTSTATUS smb1srv_tcon_table_init(struct smbXsrv_connection *conn)
1077 {
1078 struct smbXsrv_client *client = conn->client;
1079
1080 /*
1081 * Allow a range from 1..65534 with 65534 values.
1082 */
1083 client->tcon_table = talloc_zero(client, struct smbXsrv_tcon_table);
1084 if (client->tcon_table == NULL) {
1085 return NT_STATUS_NO_MEMORY;
1086 }
1087
1088 return smbXsrv_tcon_table_init(client, client->tcon_table,
1089 1, UINT16_MAX - 1,
1090 UINT16_MAX - 1);
1091 }
1092
1093 NTSTATUS smb1srv_tcon_create(struct smbXsrv_connection *conn,
1094 NTTIME now,
1095 struct smbXsrv_tcon **_tcon)
1096 {
1097 struct server_id id = messaging_server_id(conn->msg_ctx);
1098
1099 return smbXsrv_tcon_create(conn->client->tcon_table,
1100 conn->protocol,
1101 id, now, _tcon);
1102 }
1103
1104 NTSTATUS smb1srv_tcon_lookup(struct smbXsrv_connection *conn,
1105 uint16_t tree_id, NTTIME now,
1106 struct smbXsrv_tcon **tcon)
1107 {
1108 uint32_t local_id = tree_id;
1109
1110 return smbXsrv_tcon_local_lookup(conn->client->tcon_table,
1111 local_id, now, tcon);
1112 }
1113
1114 NTSTATUS smb1srv_tcon_disconnect_all(struct smbXsrv_connection *conn)
1115 {
1116 struct smbXsrv_client *client = conn->client;
1117
1118 /*
1119 * We do not pass a vuid here,
1120 * which means the vuid is taken from
1121 * the tcon->compat->vuid.
1122 *
1123 * NOTE: that tcon->compat->vuid may point to
1124 * a none existing vuid (or the wrong one)
1125 * as the tcon can exist without a session
1126 * in SMB1.
1127 *
1128 * This matches the old behavior of
1129 * conn_close_all(), but we should think
1130 * about how to fix this in future.
1131 */
1132 return smbXsrv_tcon_disconnect_all(client->tcon_table, 0);
1133 }
1134
1135 NTSTATUS smb2srv_tcon_table_init(struct smbXsrv_session *session)
1136 {
1137 /*
1138 * Allow a range from 1..4294967294 with 65534 (same as SMB1) values.
1139 */
1140 session->tcon_table = talloc_zero(session, struct smbXsrv_tcon_table);
1141 if (session->tcon_table == NULL) {
1142 return NT_STATUS_NO_MEMORY;
1143 }
1144
1145 return smbXsrv_tcon_table_init(session, session->tcon_table,
1146 1, UINT32_MAX - 1,
1147 UINT16_MAX - 1);
1148 }
1149
1150 NTSTATUS smb2srv_tcon_create(struct smbXsrv_session *session,
1151 NTTIME now,
1152 struct smbXsrv_tcon **_tcon)
1153 {
1154 struct server_id id = messaging_server_id(session->client->msg_ctx);
1155
1156 return smbXsrv_tcon_create(session->tcon_table,
1157 PROTOCOL_SMB2_02,
1158 id, now, _tcon);
1159 }
1160
1161 NTSTATUS smb2srv_tcon_lookup(struct smbXsrv_session *session,
1162 uint32_t tree_id, NTTIME now,
1163 struct smbXsrv_tcon **tcon)
1164 {
1165 uint32_t local_id = tree_id;
1166
1167 return smbXsrv_tcon_local_lookup(session->tcon_table,
1168 local_id, now, tcon);
1169 }
1170
1171 NTSTATUS smb2srv_tcon_disconnect_all(struct smbXsrv_session *session)
1172 {
1173 uint64_t vuid;
1174
1175 if (session->compat) {
1176 vuid = session->compat->vuid;
1177 } else {
1178 vuid = 0;
1179 }
1180
1181 return smbXsrv_tcon_disconnect_all(session->tcon_table, vuid);
1182 }
1183
1184 struct smbXsrv_tcon_global_traverse_state {
1185 int (*fn)(struct smbXsrv_tcon_global0 *, void *);
1186 void *private_data;
1187 };
1188
1189 static int smbXsrv_tcon_global_traverse_fn(struct db_record *rec, void *data)
1190 {
1191 int ret = -1;
1192 struct smbXsrv_tcon_global_traverse_state *state =
1193 (struct smbXsrv_tcon_global_traverse_state*)data;
1194 TDB_DATA key = dbwrap_record_get_key(rec);
1195 TDB_DATA val = dbwrap_record_get_value(rec);
1196 DATA_BLOB blob = data_blob_const(val.dptr, val.dsize);
1197 struct smbXsrv_tcon_globalB global_blob;
1198 enum ndr_err_code ndr_err;
1199 TALLOC_CTX *frame = talloc_stackframe();
1200
1201 ndr_err = ndr_pull_struct_blob(&blob, frame, &global_blob,
1202 (ndr_pull_flags_fn_t)ndr_pull_smbXsrv_tcon_globalB);
1203 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1204 DEBUG(1,("Invalid record in smbXsrv_tcon_global.tdb:"
1205 "key '%s' ndr_pull_struct_blob - %s\n",
1206 hex_encode_talloc(frame, key.dptr, key.dsize),
1207 ndr_errstr(ndr_err)));
1208 goto done;
1209 }
1210
1211 if (global_blob.version != SMBXSRV_VERSION_0) {
1212 DEBUG(1,("Invalid record in smbXsrv_tcon_global.tdb:"
1213 "key '%s' unsuported version - %d\n",
1214 hex_encode_talloc(frame, key.dptr, key.dsize),
1215 (int)global_blob.version));
1216 goto done;
1217 }
1218
1219 global_blob.info.info0->db_rec = rec;
1220 ret = state->fn(global_blob.info.info0, state->private_data);
1221 done:
1222 TALLOC_FREE(frame);
1223 return ret;
1224 }
1225
1226 NTSTATUS smbXsrv_tcon_global_traverse(
1227 int (*fn)(struct smbXsrv_tcon_global0 *, void *),
1228 void *private_data)
1229 {
1230 NTSTATUS status;
1231 int count = 0;
1232 struct smbXsrv_tcon_global_traverse_state state = {
1233 .fn = fn,
1234 .private_data = private_data,
1235 };
1236
1237 become_root();
1238 status = smbXsrv_tcon_global_init();
1239 if (!NT_STATUS_IS_OK(status)) {
1240 unbecome_root();
1241 DEBUG(0, ("Failed to initialize tcon_global: %s\n",
1242 nt_errstr(status)));
1243 return status;
1244 }
1245
1246 status = dbwrap_traverse_read(smbXsrv_tcon_global_db_ctx,
1247 smbXsrv_tcon_global_traverse_fn,
1248 &state,
1249 &count);
1250 unbecome_root();
1251
1252 return status;
1253 }
Samba GIT mirror