source4/librpc/rpc/dcerpc_sock.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    dcerpc over standard sockets transport
   5
   6    Copyright (C) Andrew Tridgell 2003
   7    Copyright (C) Jelmer Vernooij 2004
   8    Copyright (C) Rafal Szczesniak 2006
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22 */
  23
  24 #include "includes.h"
  25 #include "lib/events/events.h"
  26 #include "lib/socket/socket.h"
  27 #include "lib/stream/packet.h"
  28 #include "libcli/composite/composite.h"
  29 #include "librpc/rpc/dcerpc.h"
  30 #include "librpc/rpc/dcerpc_proto.h"
  31 #include "libcli/resolve/resolve.h"
  32 #include "librpc/rpc/rpc_common.h"
  33
  34 /* transport private information used by general socket pipe transports */
  35 struct sock_private {
  36         struct tevent_fd *fde;
  37         struct socket_context *sock;
  38         char *server_name;
  39
  40         struct packet_context *packet;
  41         uint32_t pending_reads;
  42
  43         const char *path; /* For ncacn_unix_sock and ncalrpc */
  44 };
  45
  46
  47 /*
  48   mark the socket dead
  49 */
  50 static void sock_dead(struct dcecli_connection *p, NTSTATUS status)
  51 {
  52         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
  53
  54         if (!sock) return;
  55
  56         if (sock->packet) {
  57                 packet_recv_disable(sock->packet);
  58                 packet_set_fde(sock->packet, NULL);
  59                 packet_set_socket(sock->packet, NULL);
  60         }
  61
  62         if (sock->fde) {
  63                 talloc_free(sock->fde);
  64                 sock->fde = NULL;
  65         }
  66
  67         if (sock->sock) {
  68                 talloc_free(sock->sock);
  69                 sock->sock = NULL;
  70         }
  71
  72         if (NT_STATUS_EQUAL(NT_STATUS_UNSUCCESSFUL, status)) {
  73                 status = NT_STATUS_UNEXPECTED_NETWORK_ERROR;
  74         }
  75
  76         if (NT_STATUS_EQUAL(NT_STATUS_OK, status)) {
  77                 status = NT_STATUS_END_OF_FILE;
  78         }
  79
  80         if (p->transport.recv_data) {
  81                 p->transport.recv_data(p, NULL, status);
  82         }
  83 }
  84
  85
  86 /*
  87   handle socket recv errors
  88 */
  89 static void sock_error_handler(void *private_data, NTSTATUS status)
  90 {
  91         struct dcecli_connection *p = talloc_get_type(private_data,
  92                                                       struct dcecli_connection);
  93         sock_dead(p, status);
  94 }
  95
  96 /*
  97   check if a blob is a complete packet
  98 */
  99 static NTSTATUS sock_complete_packet(void *private_data, DATA_BLOB blob, size_t *size)
 100 {
 101         if (blob.length < DCERPC_FRAG_LEN_OFFSET+2) {
 102                 return STATUS_MORE_ENTRIES;
 103         }
 104         *size = dcerpc_get_frag_length(&blob);
 105         if (*size < blob.length) {
 106                 /*
 107                  * something is wrong, let the caller deal with it
 108                  */
 109                 *size = blob.length;
 110         }
 111         if (*size > blob.length) {
 112                 return STATUS_MORE_ENTRIES;
 113         }
 114         return NT_STATUS_OK;
 115 }
 116
 117 /*
 118   process recv requests
 119 */
 120 static NTSTATUS sock_process_recv(void *private_data, DATA_BLOB blob)
 121 {
 122         struct dcecli_connection *p = talloc_get_type(private_data,
 123                                                       struct dcecli_connection);
 124         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
 125         sock->pending_reads--;
 126         if (sock->pending_reads == 0) {
 127                 packet_recv_disable(sock->packet);
 128         }
 129         p->transport.recv_data(p, &blob, NT_STATUS_OK);
 130         return NT_STATUS_OK;
 131 }
 132
 133 /*
 134   called when a IO is triggered by the events system
 135 */
 136 static void sock_io_handler(struct tevent_context *ev, struct tevent_fd *fde,
 137                             uint16_t flags, void *private_data)
 138 {
 139         struct dcecli_connection *p = talloc_get_type(private_data,
 140                                                       struct dcecli_connection);
 141         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
 142
 143         if (flags & TEVENT_FD_WRITE) {
 144                 packet_queue_run(sock->packet);
 145                 return;
 146         }
 147
 148         if (sock->sock == NULL) {
 149                 return;
 150         }
 151
 152         if (flags & TEVENT_FD_READ) {
 153                 packet_recv(sock->packet);
 154         }
 155 }
 156
 157 /*
 158    initiate a read request - not needed for dcerpc sockets
 159 */
 160 static NTSTATUS sock_send_read(struct dcecli_connection *p)
 161 {
 162         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
 163         sock->pending_reads++;
 164         if (sock->pending_reads == 1) {
 165                 packet_recv_enable(sock->packet);
 166         }
 167         return NT_STATUS_OK;
 168 }
 169
 170 /*
 171    send an initial pdu in a multi-pdu sequence
 172 */
 173 static NTSTATUS sock_send_request(struct dcecli_connection *p, DATA_BLOB *data,
 174                                   bool trigger_read)
 175 {
 176         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
 177         DATA_BLOB blob;
 178         NTSTATUS status;
 179
 180         if (sock->sock == NULL) {
 181                 return NT_STATUS_CONNECTION_DISCONNECTED;
 182         }
 183
 184         blob = data_blob_talloc(sock->packet, data->data, data->length);
 185         if (blob.data == NULL) {
 186                 return NT_STATUS_NO_MEMORY;
 187         }
 188
 189         status = packet_send(sock->packet, blob);
 190         if (!NT_STATUS_IS_OK(status)) {
 191                 return status;
 192         }
 193
 194         if (trigger_read) {
 195                 sock_send_read(p);
 196         }
 197
 198         return NT_STATUS_OK;
 199 }
 200
 201 /*
 202    shutdown sock pipe connection
 203 */
 204 static NTSTATUS sock_shutdown_pipe(struct dcecli_connection *p, NTSTATUS status)
 205 {
 206         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
 207
 208         if (sock && sock->sock) {
 209                 sock_dead(p, status);
 210         }
 211
 212         return status;
 213 }
 214
 215 /*
 216   return sock server name
 217 */
 218 static const char *sock_peer_name(struct dcecli_connection *p)
 219 {
 220         struct sock_private *sock = talloc_get_type(p->transport.private_data, struct sock_private);
 221         return sock->server_name;
 222 }
 223
 224 /*
 225   return remote name we make the actual connection (good for kerberos)
 226 */
 227 static const char *sock_target_hostname(struct dcecli_connection *p)
 228 {
 229         struct sock_private *sock = talloc_get_type(p->transport.private_data, struct sock_private);
 230         return sock->server_name;
 231 }
 232
 233
 234 struct pipe_open_socket_state {
 235         struct dcecli_connection *conn;
 236         struct socket_context *socket_ctx;
 237         struct sock_private *sock;
 238         struct socket_address *localaddr;
 239         struct socket_address *server;
 240         const char *target_hostname;
 241         enum dcerpc_transport_t transport;
 242 };
 243
 244
 245 static void continue_socket_connect(struct composite_context *ctx)
 246 {
 247         struct dcecli_connection *conn;
 248         struct sock_private *sock;
 249         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 250                                                       struct composite_context);
 251         struct pipe_open_socket_state *s = talloc_get_type(c->private_data,
 252                                                            struct pipe_open_socket_state);
 253
 254         /* make it easier to write a function calls */
 255         conn = s->conn;
 256         sock = s->sock;
 257
 258         c->status = socket_connect_recv(ctx);
 259         if (!NT_STATUS_IS_OK(c->status)) {
 260                 DEBUG(0, ("Failed to connect host %s on port %d - %s\n",
 261                           s->server->addr, s->server->port,
 262                           nt_errstr(c->status)));
 263                 composite_error(c, c->status);
 264                 return;
 265         }
 266
 267         /*
 268           fill in the transport methods
 269         */
 270         conn->transport.transport       = s->transport;
 271         conn->transport.private_data    = NULL;
 272
 273         conn->transport.send_request    = sock_send_request;
 274         conn->transport.send_read       = sock_send_read;
 275         conn->transport.recv_data       = NULL;
 276
 277         conn->transport.shutdown_pipe   = sock_shutdown_pipe;
 278         conn->transport.peer_name       = sock_peer_name;
 279         conn->transport.target_hostname = sock_target_hostname;
 280
 281         sock->sock          = s->socket_ctx;
 282         sock->pending_reads = 0;
 283         sock->server_name   = strupper_talloc(sock, s->target_hostname);
 284
 285         sock->fde = tevent_add_fd(conn->event_ctx, sock->sock, socket_get_fd(sock->sock),
 286                                  TEVENT_FD_READ, sock_io_handler, conn);
 287
 288         conn->transport.private_data = sock;
 289
 290         sock->packet = packet_init(sock);
 291         if (sock->packet == NULL) {
 292                 talloc_free(sock);
 293                 composite_error(c, NT_STATUS_NO_MEMORY);
 294                 return;
 295         }
 296
 297         packet_set_private(sock->packet, conn);
 298         packet_set_socket(sock->packet, sock->sock);
 299         packet_set_callback(sock->packet, sock_process_recv);
 300         packet_set_full_request(sock->packet, sock_complete_packet);
 301         packet_set_error_handler(sock->packet, sock_error_handler);
 302         packet_set_event_context(sock->packet, conn->event_ctx);
 303         packet_set_fde(sock->packet, sock->fde);
 304         packet_set_serialise(sock->packet);
 305         packet_set_initial_read(sock->packet, 16);
 306
 307         /* ensure we don't get SIGPIPE */
 308         BlockSignals(true, SIGPIPE);
 309
 310         composite_done(c);
 311 }
 312
 313
 314 static struct composite_context *dcerpc_pipe_open_socket_send(TALLOC_CTX *mem_ctx,
 315                                                        struct dcecli_connection *cn,
 316                                                        struct socket_address *localaddr,
 317                                                        struct socket_address *server,
 318                                                        const char *target_hostname,
 319                                                        const char *full_path,
 320                                                        enum dcerpc_transport_t transport)
 321 {
 322         struct composite_context *c;
 323         struct pipe_open_socket_state *s;
 324         struct composite_context *conn_req;
 325
 326         c = composite_create(mem_ctx, cn->event_ctx);
 327         if (c == NULL) return NULL;
 328
 329         s = talloc_zero(c, struct pipe_open_socket_state);
 330         if (composite_nomem(s, c)) return c;
 331         c->private_data = s;
 332
 333         s->conn      = cn;
 334         s->transport = transport;
 335         if (localaddr) {
 336                 s->localaddr = talloc_reference(c, localaddr);
 337                 if (composite_nomem(s->localaddr, c)) return c;
 338         }
 339         s->server    = talloc_reference(c, server);
 340         if (composite_nomem(s->server, c)) return c;
 341         s->target_hostname = talloc_reference(s, target_hostname);
 342
 343         s->sock = talloc(cn, struct sock_private);
 344         if (composite_nomem(s->sock, c)) return c;
 345
 346         c->status = socket_create(server->family, SOCKET_TYPE_STREAM, &s->socket_ctx, 0);
 347         if (!composite_is_ok(c)) return c;
 348
 349         talloc_steal(s->sock, s->socket_ctx);
 350
 351         s->sock->path = talloc_reference(s->sock, full_path);
 352
 353         conn_req = socket_connect_send(s->socket_ctx, s->localaddr, s->server, 0,
 354                                        c->event_ctx);
 355         composite_continue(c, conn_req, continue_socket_connect, c);
 356         return c;
 357 }
 358
 359
 360 static NTSTATUS dcerpc_pipe_open_socket_recv(struct composite_context *c)
 361 {
 362         NTSTATUS status = composite_wait(c);
 363
 364         talloc_free(c);
 365         return status;
 366 }
 367
 368 struct pipe_tcp_state {
 369         const char *server;
 370         const char *target_hostname;
 371         const char **addresses;
 372         uint32_t index;
 373         uint32_t port;
 374         struct socket_address *localaddr;
 375         struct socket_address *srvaddr;
 376         struct resolve_context *resolve_ctx;
 377         struct dcecli_connection *conn;
 378 };
 379
 380
 381 static void continue_ip_open_socket(struct composite_context *ctx);
 382 static void continue_ip_resolve_name(struct composite_context *ctx);
 383
 384 static void continue_ip_resolve_name(struct composite_context *ctx)
 385 {
 386         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 387                                                       struct composite_context);
 388         struct pipe_tcp_state *s = talloc_get_type(c->private_data,
 389                                                    struct pipe_tcp_state);
 390         struct composite_context *sock_ip_req;
 391
 392         c->status = resolve_name_multiple_recv(ctx, s, &s->addresses);
 393         if (!composite_is_ok(c)) return;
 394
 395         /* prepare server address using host ip:port and transport name */
 396         s->srvaddr = socket_address_from_strings(s->conn, "ip", s->addresses[s->index], s->port);
 397         s->index++;
 398         if (composite_nomem(s->srvaddr, c)) return;
 399
 400         sock_ip_req = dcerpc_pipe_open_socket_send(c, s->conn, s->localaddr,
 401                                                      s->srvaddr, s->target_hostname,
 402                                                      NULL,
 403                                                      NCACN_IP_TCP);
 404         composite_continue(c, sock_ip_req, continue_ip_open_socket, c);
 405 }
 406
 407
 408 /*
 409   Stage 2 of dcerpc_pipe_open_tcp_send: receive result of pipe open request
 410   on IP transport.
 411 */
 412 static void continue_ip_open_socket(struct composite_context *ctx)
 413 {
 414         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 415                                                       struct composite_context);
 416         struct pipe_tcp_state *s = talloc_get_type(c->private_data,
 417                                                    struct pipe_tcp_state);
 418
 419         /* receive result socket open request */
 420         c->status = dcerpc_pipe_open_socket_recv(ctx);
 421         if (!NT_STATUS_IS_OK(c->status)) {
 422                 /* something went wrong... */
 423                 DEBUG(0, ("Failed to connect host %s (%s) on port %d - %s.\n",
 424                           s->addresses[s->index - 1], s->target_hostname,
 425                           s->port, nt_errstr(c->status)));
 426                 if (s->addresses[s->index]) {
 427                         struct composite_context *sock_ip_req;
 428                         talloc_free(s->srvaddr);
 429                         /* prepare server address using host ip:port and transport name */
 430                         s->srvaddr = socket_address_from_strings(s->conn, "ip", s->addresses[s->index], s->port);
 431                         s->index++;
 432                         if (composite_nomem(s->srvaddr, c)) return;
 433
 434                         sock_ip_req = dcerpc_pipe_open_socket_send(c, s->conn, s->localaddr,
 435                                                                 s->srvaddr, s->target_hostname,
 436                                                                 NULL,
 437                                                                 NCACN_IP_TCP);
 438                         composite_continue(c, sock_ip_req, continue_ip_open_socket, c);
 439
 440                         return;
 441                 } else {
 442                         composite_error(c, c->status);
 443                         return;
 444                 }
 445         }
 446
 447         composite_done(c);
 448 }
 449
 450 /*
 451   Send rpc pipe open request to given host:port using
 452   tcp/ip transport
 453 */
 454 struct composite_context* dcerpc_pipe_open_tcp_send(struct dcecli_connection *conn,
 455                                                     const char *localaddr,
 456                                                     const char *server,
 457                                                     const char *target_hostname,
 458                                                     uint32_t port,
 459                                                     struct resolve_context *resolve_ctx)
 460 {
 461         struct composite_context *c;
 462         struct pipe_tcp_state *s;
 463         struct composite_context *resolve_req;
 464         struct nbt_name name;
 465
 466         /* composite context allocation and setup */
 467         c = composite_create(conn, conn->event_ctx);
 468         if (c == NULL) return NULL;
 469
 470         s = talloc_zero(c, struct pipe_tcp_state);
 471         if (composite_nomem(s, c)) return c;
 472         c->private_data = s;
 473
 474         /* store input parameters in state structure */
 475         s->server          = talloc_strdup(c, server);
 476         if (composite_nomem(s->server, c)) return c;
 477         if (target_hostname) {
 478                 s->target_hostname = talloc_strdup(c, target_hostname);
 479                 if (composite_nomem(s->target_hostname, c)) return c;
 480         }
 481         s->port            = port;
 482         s->conn            = conn;
 483         s->resolve_ctx     = resolve_ctx;
 484         if (localaddr) {
 485                 s->localaddr = socket_address_from_strings(s, "ip", localaddr, 0);
 486                 /* if there is no localaddr, we pass NULL for
 487                    s->localaddr, which is handled by the socket libraries as
 488                    meaning no local binding address specified */
 489         }
 490
 491         make_nbt_name_server(&name, server);
 492         resolve_req = resolve_name_send(resolve_ctx, s, &name, c->event_ctx);
 493         composite_continue(c, resolve_req, continue_ip_resolve_name, c);
 494         return c;
 495 }
 496
 497 /*
 498   Receive result of pipe open request on tcp/ip
 499 */
 500 NTSTATUS dcerpc_pipe_open_tcp_recv(struct composite_context *c)
 501 {
 502         NTSTATUS status;
 503         status = composite_wait(c);
 504
 505         talloc_free(c);
 506         return status;
 507 }
 508
 509
 510 struct pipe_unix_state {
 511         const char *path;
 512         struct socket_address *srvaddr;
 513         struct dcecli_connection *conn;
 514 };
 515
 516
 517 /*
 518   Stage 2 of dcerpc_pipe_open_unix_stream_send: receive result of pipe open
 519   request on unix socket.
 520 */
 521 static void continue_unix_open_socket(struct composite_context *ctx)
 522 {
 523         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 524                                                       struct composite_context);
 525
 526         c->status = dcerpc_pipe_open_socket_recv(ctx);
 527         if (NT_STATUS_IS_OK(c->status)) {
 528                 composite_done(c);
 529                 return;
 530         }
 531
 532         composite_error(c, c->status);
 533 }
 534
 535
 536 /*
 537   Send pipe open request on unix socket
 538 */
 539 struct composite_context *dcerpc_pipe_open_unix_stream_send(struct dcecli_connection *conn,
 540                                                             const char *path)
 541 {
 542         struct composite_context *c;
 543         struct composite_context *sock_unix_req;
 544         struct pipe_unix_state *s;
 545
 546         /* composite context allocation and setup */
 547         c = composite_create(conn, conn->event_ctx);
 548         if (c == NULL) return NULL;
 549
 550         s = talloc_zero(c, struct pipe_unix_state);
 551         if (composite_nomem(s, c)) return c;
 552         c->private_data = s;
 553
 554         /* store parameters in state structure */
 555         s->path = talloc_strdup(c, path);
 556         if (composite_nomem(s->path, c)) return c;
 557         s->conn = conn;
 558
 559         /* prepare server address using socket path and transport name */
 560         s->srvaddr = socket_address_from_strings(conn, "unix", s->path, 0);
 561         if (composite_nomem(s->srvaddr, c)) return c;
 562
 563         /* send socket open request */
 564         sock_unix_req = dcerpc_pipe_open_socket_send(c, s->conn, NULL,
 565                                                      s->srvaddr, NULL,
 566                                                      s->path,
 567                                                      NCALRPC);
 568         composite_continue(c, sock_unix_req, continue_unix_open_socket, c);
 569         return c;
 570 }
 571
 572
 573 /*
 574   Receive result of pipe open request on unix socket
 575 */
 576 NTSTATUS dcerpc_pipe_open_unix_stream_recv(struct composite_context *c)
 577 {
 578         NTSTATUS status = composite_wait(c);
 579
 580         talloc_free(c);
 581         return status;
 582 }
 583
 584
 585 /*
 586   Stage 2 of dcerpc_pipe_open_pipe_send: receive socket open request
 587 */
 588 static void continue_np_open_socket(struct composite_context *ctx)
 589 {
 590         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 591                                                       struct composite_context);
 592
 593         c->status = dcerpc_pipe_open_socket_recv(ctx);
 594         if (!composite_is_ok(c)) return;
 595
 596         composite_done(c);
 597 }
 598
 599
 600 /*
 601   Send pipe open request on ncalrpc
 602 */
 603 struct composite_context* dcerpc_pipe_open_pipe_send(struct dcecli_connection *conn,
 604                                                      const char *ncalrpc_dir,
 605                                                      const char *identifier)
 606 {
 607         char *canon = NULL;
 608
 609         struct composite_context *c;
 610         struct composite_context *sock_np_req;
 611         struct pipe_unix_state *s;
 612
 613         /* composite context allocation and setup */
 614         c = composite_create(conn, conn->event_ctx);
 615         if (c == NULL) return NULL;
 616
 617         s = talloc_zero(c, struct pipe_unix_state);
 618         if (composite_nomem(s, c)) return c;
 619         c->private_data = s;
 620
 621         /* store parameters in state structure */
 622         canon = talloc_strdup(s, identifier);
 623         if (composite_nomem(canon, c)) return c;
 624         s->conn = conn;
 625
 626         string_replace(canon, '/', '\\');
 627         s->path = talloc_asprintf(canon, "%s/%s", ncalrpc_dir, canon);
 628         if (composite_nomem(s->path, c)) return c;
 629
 630         /* prepare server address using path and transport name */
 631         s->srvaddr = socket_address_from_strings(conn, "unix", s->path, 0);
 632         if (composite_nomem(s->srvaddr, c)) return c;
 633
 634         /* send socket open request */
 635         sock_np_req = dcerpc_pipe_open_socket_send(c, s->conn, NULL, s->srvaddr, NULL, s->path, NCALRPC);
 636         composite_continue(c, sock_np_req, continue_np_open_socket, c);
 637         return c;
 638 }
 639
 640
 641 /*
 642   Receive result of pipe open request on ncalrpc
 643 */
 644 NTSTATUS dcerpc_pipe_open_pipe_recv(struct composite_context *c)
 645 {
 646         NTSTATUS status = composite_wait(c);
 647
 648         talloc_free(c);
 649         return status;
 650 }
 651
 652
 653 /*
 654   Open a rpc pipe on a named pipe - sync version
 655 */
 656 NTSTATUS dcerpc_pipe_open_pipe(struct dcecli_connection *conn, const char *ncalrpc_dir, const char *identifier)
 657 {
 658         struct composite_context *c = dcerpc_pipe_open_pipe_send(conn, ncalrpc_dir, identifier);
 659         return dcerpc_pipe_open_pipe_recv(c);
 660 }
 661
 662 const char *dcerpc_unix_socket_path(struct dcecli_connection *p)
 663 {
 664         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
 665         return sock->path;
 666 }
 667
 668 struct socket_address *dcerpc_socket_peer_addr(struct dcecli_connection *p, TALLOC_CTX *mem_ctx)
 669 {
 670         struct sock_private *sock = (struct sock_private *)p->transport.private_data;
 671         return socket_get_peer_addr(sock->sock, mem_ctx);
 672 }
 673