source/include/smb.h

   1 /*
   2    Unix SMB/CIFS implementation.
   3    SMB parameters and setup, plus a whole lot more.
   4
   5    Copyright (C) Andrew Tridgell              1992-2000
   6    Copyright (C) John H Terpstra              1996-2000
   7    Copyright (C) Luke Kenneth Casson Leighton 1996-2000
   8    Copyright (C) Paul Ashton                  1998-2000
   9    Copyright (C) Simo Sorce                   2001-2002
  10    Copyright (C) Martin Pool                  2002
  11
  12    This program is free software; you can redistribute it and/or modify
  13    it under the terms of the GNU General Public License as published by
  14    the Free Software Foundation; either version 2 of the License, or
  15    (at your option) any later version.
  16
  17    This program is distributed in the hope that it will be useful,
  18    but WITHOUT ANY WARRANTY; without even the implied warranty of
  19    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  20    GNU General Public License for more details.
  21
  22    You should have received a copy of the GNU General Public License
  23    along with this program; if not, write to the Free Software
  24    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  25 */
  26
  27 #ifndef _SMB_H
  28 #define _SMB_H
  29
  30 #if defined(LARGE_SMB_OFF_T)
  31 #define BUFFER_SIZE (128*1024)
  32 #else /* no large readwrite possible */
  33 #define BUFFER_SIZE (0xFFFF)
  34 #endif
  35
  36 #define SAFETY_MARGIN 1024
  37 #define LARGE_WRITEX_HDR_SIZE 65
  38
  39 #define NMB_PORT 137
  40 #define DGRAM_PORT 138
  41 #define SMB_PORT1 445
  42 #define SMB_PORT2 139
  43 #define SMB_PORTS "445 139"
  44
  45 #define False (0)
  46 #define True (1)
  47 #define Auto (2)
  48
  49 #ifndef _BOOL
  50 typedef int BOOL;
  51 #define _BOOL       /* So we don't typedef BOOL again in vfs.h */
  52 #endif
  53
  54 /* limiting size of ipc replies */
  55 #define REALLOC(ptr,size) Realloc(ptr,MAX((size),4*1024))
  56
  57 #define SIZEOFWORD 2
  58
  59 #ifndef DEF_CREATE_MASK
  60 #define DEF_CREATE_MASK (0755)
  61 #endif
  62
  63 /* string manipulation flags - see clistr.c and srvstr.c */
  64 #define STR_TERMINATE 1
  65 #define STR_UPPER 2
  66 #define STR_ASCII 4
  67 #define STR_UNICODE 8
  68 #define STR_NOALIGN 16
  69
  70 /* how long to wait for secondary SMB packets (milli-seconds) */
  71 #define SMB_SECONDARY_WAIT (60*1000)
  72
  73 /* Debugging stuff */
  74 #include "debug.h"
  75
  76 /* this defines the error codes that receive_smb can put in smb_read_error */
  77 #define READ_TIMEOUT 1
  78 #define READ_EOF 2
  79 #define READ_ERROR 3
  80
  81 #define DIR_STRUCT_SIZE 43
  82
  83 /* these define the attribute byte as seen by DOS */
  84 #define aRONLY (1L<<0)          /* 0x01 */
  85 #define aHIDDEN (1L<<1)         /* 0x02 */
  86 #define aSYSTEM (1L<<2)         /* 0x04 */
  87 #define aVOLID (1L<<3)          /* 0x08 */
  88 #define aDIR (1L<<4)            /* 0x10 */
  89 #define aARCH (1L<<5)           /* 0x20 */
  90
  91 /* deny modes */
  92 #define DENY_DOS 0
  93 #define DENY_ALL 1
  94 #define DENY_WRITE 2
  95 #define DENY_READ 3
  96 #define DENY_NONE 4
  97 #define DENY_FCB 7
  98
  99 /* open modes */
 100 #define DOS_OPEN_RDONLY 0
 101 #define DOS_OPEN_WRONLY 1
 102 #define DOS_OPEN_RDWR 2
 103 #define DOS_OPEN_FCB 0xF
 104
 105 /* define shifts and masks for share and open modes. */
 106 #define OPEN_MODE_MASK 0xF
 107 #define SHARE_MODE_SHIFT 4
 108 #define SHARE_MODE_MASK 0x7
 109 #define GET_OPEN_MODE(x) ((x) & OPEN_MODE_MASK)
 110 #define SET_OPEN_MODE(x) ((x) & OPEN_MODE_MASK)
 111 #define GET_DENY_MODE(x) (((x)>>SHARE_MODE_SHIFT) & SHARE_MODE_MASK)
 112 #define SET_DENY_MODE(x) (((x) & SHARE_MODE_MASK) <<SHARE_MODE_SHIFT)
 113
 114 /* Sync on open file (not sure if used anymore... ?) */
 115 #define FILE_SYNC_OPENMODE (1<<14)
 116 #define GET_FILE_SYNC_OPENMODE(x) (((x) & FILE_SYNC_OPENMODE) ? True : False)
 117
 118 /* allow delete on open file mode (used by NT SMB's). */
 119 #define ALLOW_SHARE_DELETE (1<<15)
 120 #define GET_ALLOW_SHARE_DELETE(x) (((x) & ALLOW_SHARE_DELETE) ? True : False)
 121 #define SET_ALLOW_SHARE_DELETE(x) ((x) ? ALLOW_SHARE_DELETE : 0)
 122
 123 /* delete on close flag (used by NT SMB's). */
 124 #define DELETE_ON_CLOSE_FLAG (1<<16)
 125 #define GET_DELETE_ON_CLOSE_FLAG(x) (((x) & DELETE_ON_CLOSE_FLAG) ? True : False)
 126 #define SET_DELETE_ON_CLOSE_FLAG(x) ((x) ? DELETE_ON_CLOSE_FLAG : 0)
 127
 128 /* open disposition values */
 129 #define FILE_EXISTS_FAIL 0
 130 #define FILE_EXISTS_OPEN 1
 131 #define FILE_EXISTS_TRUNCATE 2
 132
 133 /* mask for open disposition. */
 134 #define FILE_OPEN_MASK 0x3
 135
 136 #define GET_FILE_OPEN_DISPOSITION(x) ((x) & FILE_OPEN_MASK)
 137 #define SET_FILE_OPEN_DISPOSITION(x) ((x) & FILE_OPEN_MASK)
 138
 139 /* The above can be OR'ed with... */
 140 #define FILE_CREATE_IF_NOT_EXIST 0x10
 141 #define FILE_FAIL_IF_NOT_EXIST 0
 142
 143 #define GET_FILE_CREATE_DISPOSITION(x) ((x) & (FILE_CREATE_IF_NOT_EXIST|FILE_FAIL_IF_NOT_EXIST))
 144
 145 /* share types */
 146 #define STYPE_DISKTREE  0       /* Disk drive */
 147 #define STYPE_PRINTQ    1       /* Spooler queue */
 148 #define STYPE_DEVICE    2       /* Serial device */
 149 #define STYPE_IPC       3       /* Interprocess communication (IPC) */
 150 #define STYPE_HIDDEN    0x80000000 /* share is a hidden one (ends with $) */
 151
 152 #include "doserr.h"
 153
 154 /*
 155  * SMB UCS2 (16-bit unicode) internal type.
 156  */
 157
 158 typedef uint16 smb_ucs2_t;
 159
 160 /* ucs2 string types. */
 161 typedef smb_ucs2_t wpstring[PSTRING_LEN];
 162 typedef smb_ucs2_t wfstring[FSTRING_LEN];
 163
 164
 165 #ifdef WORDS_BIGENDIAN
 166 #define UCS2_SHIFT 8
 167 #else
 168 #define UCS2_SHIFT 0
 169 #endif
 170
 171 /* turn a 7 bit character into a ucs2 character */
 172 #define UCS2_CHAR(c) ((c) << UCS2_SHIFT)
 173
 174 /* pipe string names */
 175 #define PIPE_LANMAN   "\\PIPE\\LANMAN"
 176 #define PIPE_SRVSVC   "\\PIPE\\srvsvc"
 177 #define PIPE_SAMR     "\\PIPE\\samr"
 178 #define PIPE_WINREG   "\\PIPE\\winreg"
 179 #define PIPE_WKSSVC   "\\PIPE\\wkssvc"
 180 #define PIPE_NETLOGON "\\PIPE\\NETLOGON"
 181 #define PIPE_NTLSA    "\\PIPE\\ntlsa"
 182 #define PIPE_NTSVCS   "\\PIPE\\ntsvcs"
 183 #define PIPE_LSASS    "\\PIPE\\lsass"
 184 #define PIPE_LSARPC   "\\PIPE\\lsarpc"
 185 #define PIPE_SPOOLSS  "\\PIPE\\spoolss"
 186 #define PIPE_NETDFS   "\\PIPE\\netdfs"
 187
 188 /* 64 bit time (100usec) since ????? - cifs6.txt, section 3.5, page 30 */
 189 typedef struct nttime_info
 190 {
 191   uint32 low;
 192   uint32 high;
 193 } NTTIME;
 194
 195
 196 /* The Splint code analysis tool doesn't like immediate structures. */
 197
 198 #ifdef _SPLINT_                      /* http://www.splint.org */
 199 #undef HAVE_IMMEDIATE_STRUCTURES
 200 #endif
 201
 202 /* the following rather strange looking definitions of NTSTATUS and WERROR
 203    and there in order to catch common coding errors where different error types
 204    are mixed up. This is especially important as we slowly convert Samba
 205    from using BOOL for internal functions
 206 */
 207
 208 #if defined(HAVE_IMMEDIATE_STRUCTURES)
 209 typedef struct {uint32 v;} NTSTATUS;
 210 #define NT_STATUS(x) ((NTSTATUS) { x })
 211 #define NT_STATUS_V(x) ((x).v)
 212 #else
 213 typedef uint32 NTSTATUS;
 214 #define NT_STATUS(x) (x)
 215 #define NT_STATUS_V(x) (x)
 216 #endif
 217
 218 #if defined(HAVE_IMMEDIATE_STRUCTURES)
 219 typedef struct {uint32 v;} WERROR;
 220 #define W_ERROR(x) ((WERROR) { x })
 221 #define W_ERROR_V(x) ((x).v)
 222 #else
 223 typedef uint32 WERROR;
 224 #define W_ERROR(x) (x)
 225 #define W_ERROR_V(x) (x)
 226 #endif
 227
 228 #define NT_STATUS_IS_OK(x) (NT_STATUS_V(x) == 0)
 229 #define NT_STATUS_IS_ERR(x) ((NT_STATUS_V(x) & 0xc0000000) == 0xc0000000)
 230 #define NT_STATUS_EQUAL(x,y) (NT_STATUS_V(x) == NT_STATUS_V(y))
 231 #define W_ERROR_IS_OK(x) (W_ERROR_V(x) == 0)
 232
 233
 234 /* Allowable account control bits */
 235 #define ACB_DISABLED   0x0001  /* 1 = User account disabled */
 236 #define ACB_HOMDIRREQ  0x0002  /* 1 = Home directory required */
 237 #define ACB_PWNOTREQ   0x0004  /* 1 = User password not required */
 238 #define ACB_TEMPDUP    0x0008  /* 1 = Temporary duplicate account */
 239 #define ACB_NORMAL     0x0010  /* 1 = Normal user account */
 240 #define ACB_MNS        0x0020  /* 1 = MNS logon user account */
 241 #define ACB_DOMTRUST   0x0040  /* 1 = Interdomain trust account */
 242 #define ACB_WSTRUST    0x0080  /* 1 = Workstation trust account */
 243 #define ACB_SVRTRUST   0x0100  /* 1 = Server trust account */
 244 #define ACB_PWNOEXP    0x0200  /* 1 = User password does not expire */
 245 #define ACB_AUTOLOCK   0x0400  /* 1 = Account auto locked */
 246
 247 #define MAX_HOURS_LEN 32
 248
 249 #ifndef MAXSUBAUTHS
 250 #define MAXSUBAUTHS 15 /* max sub authorities in a SID */
 251 #endif
 252
 253 /* SID Types */
 254 enum SID_NAME_USE
 255 {
 256         SID_NAME_USE_NONE = 0,/* NOTUSED */
 257         SID_NAME_USER    = 1, /* user */
 258         SID_NAME_DOM_GRP = 2, /* domain group */
 259         SID_NAME_DOMAIN  = 3, /* domain: don't know what this is */
 260         SID_NAME_ALIAS   = 4, /* local group */
 261         SID_NAME_WKN_GRP = 5, /* well-known group */
 262         SID_NAME_DELETED = 6, /* deleted account: needed for c2 rating */
 263         SID_NAME_INVALID = 7, /* invalid account */
 264         SID_NAME_UNKNOWN = 8  /* oops. */
 265 };
 266
 267 /**
 268  * @brief Security Identifier
 269  *
 270  * @sa http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/accctrl_38yn.asp
 271  **/
 272 typedef struct sid_info
 273 {
 274   uint8  sid_rev_num;             /**< SID revision number */
 275   uint8  num_auths;               /**< Number of sub-authorities */
 276   uint8  id_auth[6];              /**< Identifier Authority */
 277   /*
 278    *  Pointer to sub-authorities.
 279    *
 280    * @note The values in these uint32's are in *native* byteorder, not
 281    * neccessarily little-endian...... JRA.
 282    */
 283   uint32 sub_auths[MAXSUBAUTHS];
 284
 285 } DOM_SID;
 286
 287 /*
 288  * The complete list of SIDS belonging to this user.
 289  * Created when a vuid is registered.
 290  * The definition of the user_sids array is as follows :
 291  *
 292  * token->user_sids[0] = primary user SID.
 293  * token->user_sids[1] = primary group SID.
 294  * token->user_sids[2..num_sids] = supplementary group SIDS.
 295  */
 296
 297 #define PRIMARY_USER_SID_INDEX 0
 298 #define PRIMARY_GROUP_SID_INDEX 1
 299
 300 typedef struct _nt_user_token {
 301         size_t num_sids;
 302         DOM_SID *user_sids;
 303 } NT_USER_TOKEN;
 304
 305 /*** query a local group, get a list of these: shows who is in that group ***/
 306
 307 /* local group member info */
 308 typedef struct local_grp_member_info
 309 {
 310         DOM_SID sid    ; /* matches with name */
 311         uint8   sid_use; /* usr=1 grp=2 dom=3 alias=4 wkng=5 del=6 inv=7 unk=8 */
 312         fstring name   ; /* matches with sid: must be of the form "DOMAIN\account" */
 313
 314 } LOCAL_GRP_MEMBER;
 315
 316 /* enumerate these to get list of local groups */
 317
 318 /* local group info */
 319 typedef struct local_grp_info
 320 {
 321         fstring name;
 322         fstring comment;
 323
 324 } LOCAL_GRP;
 325
 326 /*** enumerate these to get list of domain groups ***/
 327
 328 /* domain group member info */
 329 typedef struct domain_grp_info
 330 {
 331         fstring name;
 332         fstring comment;
 333         uint32  rid; /* group rid */
 334         uint8   attr; /* attributes forced to be set to 0x7: SE_GROUP_xxx */
 335
 336 } DOMAIN_GRP;
 337
 338 /*** query a domain group, get a list of these: shows who is in that group ***/
 339
 340 /* domain group info */
 341 typedef struct domain_grp_member_info
 342 {
 343         fstring name;
 344         uint8   attr; /* attributes forced to be set to 0x7: SE_GROUP_xxx */
 345
 346 } DOMAIN_GRP_MEMBER;
 347
 348 /* 32 bit time (sec) since 01jan1970 - cifs6.txt, section 3.5, page 30 */
 349 typedef struct time_info
 350 {
 351   uint32 time;
 352 } UTIME;
 353
 354 /* Structure used when SMBwritebmpx is active */
 355 typedef struct
 356 {
 357   size_t wr_total_written; /* So we know when to discard this */
 358   int32 wr_timeout;
 359   int32 wr_errclass;
 360   int32 wr_error; /* Cached errors */
 361   BOOL  wr_mode; /* write through mode) */
 362   BOOL  wr_discard; /* discard all further data */
 363 } write_bmpx_struct;
 364
 365 typedef struct write_cache
 366 {
 367     SMB_OFF_T file_size;
 368     SMB_OFF_T offset;
 369     size_t alloc_size;
 370     size_t data_size;
 371     char *data;
 372 } write_cache;
 373
 374 typedef struct
 375 {
 376         smb_ucs2_t *origname;
 377         smb_ucs2_t *filename;
 378         SMB_STRUCT_STAT *statinfo;
 379 } smb_filename;
 380
 381
 382 typedef struct files_struct
 383 {
 384         struct files_struct *next, *prev;
 385         int fnum;
 386         struct connection_struct *conn;
 387         int fd;
 388         uint32 print_jobid;
 389         SMB_DEV_T dev;
 390         SMB_INO_T inode;
 391         BOOL delete_on_close;
 392         SMB_OFF_T pos;
 393         SMB_OFF_T size;
 394         mode_t mode;
 395         uint16 vuid;
 396         write_bmpx_struct *wbmpx_ptr;
 397         write_cache *wcp;
 398         struct timeval open_time;
 399         int share_mode;
 400         uint32 desired_access;
 401         time_t pending_modtime;
 402         int oplock_type;
 403         int sent_oplock_break;
 404         unsigned long file_id;
 405         BOOL can_lock;
 406         BOOL can_read;
 407         BOOL can_write;
 408         BOOL print_file;
 409         BOOL modified;
 410         BOOL is_directory;
 411         BOOL directory_delete_on_close;
 412         char *fsp_name;
 413 } files_struct;
 414
 415 /* used to hold an arbitrary blob of data */
 416 typedef struct data_blob {
 417         uint8 *data;
 418         size_t length;
 419         void (*free)(struct data_blob *data_blob);
 420 } DATA_BLOB;
 421
 422 /*
 423  * Structure used to keep directory state information around.
 424  * Used in NT change-notify code.
 425  */
 426
 427 typedef struct
 428 {
 429   time_t modify_time;
 430   time_t status_time;
 431 } dir_status_struct;
 432
 433 struct uid_cache {
 434   int entries;
 435   uid_t list[UID_CACHE_SIZE];
 436 };
 437
 438 typedef struct
 439 {
 440   char *name;
 441   BOOL is_wild;
 442 } name_compare_entry;
 443
 444 /* Include VFS stuff */
 445
 446 #include "smb_acls.h"
 447 #include "vfs.h"
 448
 449 typedef struct smb_vfs_handle_struct
 450 {
 451     void *data;
 452     /* Handle on dlopen() call */
 453     void *handle;
 454     struct smb_vfs_handle_struct  *next, *prev;
 455
 456 } smb_vfs_handle_struct;
 457
 458 typedef struct connection_struct
 459 {
 460         struct connection_struct *next, *prev;
 461         unsigned cnum; /* an index passed over the wire */
 462         int service;
 463         BOOL force_user;
 464         struct uid_cache uid_cache;
 465         void *dirptr;
 466         BOOL printer;
 467         BOOL ipc;
 468         BOOL read_only;
 469         BOOL admin_user;
 470         char *dirpath;
 471         char *connectpath;
 472         char *origpath;
 473
 474         struct vfs_ops vfs_ops;                   /* Filesystem operations */
 475         struct smb_vfs_handle_struct *vfs_private;
 476
 477         char *user; /* name of user who *opened* this connection */
 478         uid_t uid; /* uid of user who *opened* this connection */
 479         gid_t gid; /* gid of user who *opened* this connection */
 480         char client_address[18]; /* String version of client IP address. */
 481
 482         uint16 vuid; /* vuid of user who *opened* this connection, or UID_FIELD_INVALID */
 483
 484         /* following groups stuff added by ih */
 485
 486         /* This groups info is valid for the user that *opened* the connection */
 487         int ngroups;
 488         gid_t *groups;
 489         NT_USER_TOKEN *nt_user_token;
 490
 491         time_t lastused;
 492         BOOL used;
 493         int num_files_open;
 494         name_compare_entry *hide_list; /* Per-share list of files to return as hidden. */
 495         name_compare_entry *veto_list; /* Per-share list of files to veto (never show). */
 496         name_compare_entry *veto_oplock_list; /* Per-share list of files to refuse oplocks on. */
 497
 498 } connection_struct;
 499
 500 struct current_user
 501 {
 502         connection_struct *conn;
 503         uint16 vuid;
 504         uid_t uid;
 505         gid_t gid;
 506         int ngroups;
 507         gid_t *groups;
 508         NT_USER_TOKEN *nt_user_token;
 509 };
 510
 511 /* Defines for the sent_oplock_break field above. */
 512 #define NO_BREAK_SENT 0
 513 #define EXCLUSIVE_BREAK_SENT 1
 514 #define LEVEL_II_BREAK_SENT 2
 515
 516 typedef struct {
 517         fstring smb_name; /* user name from the client */
 518         fstring unix_name; /* unix user name of a validated user */
 519         fstring full_name; /* to store full name (such as "Joe Bloggs") from gecos field of password file */
 520         fstring domain; /* domain that the client specified */
 521 } userdom_struct;
 522
 523 /* Extra fields above "LPQ_PRINTING" are used to map extra NT status codes. */
 524
 525 enum {LPQ_QUEUED=0,LPQ_PAUSED,LPQ_SPOOLING,LPQ_PRINTING,LPQ_ERROR,LPQ_DELETING,
 526       LPQ_OFFLINE,LPQ_PAPEROUT,LPQ_PRINTED,LPQ_DELETED,LPQ_BLOCKED,LPQ_USER_INTERVENTION};
 527
 528 typedef struct _print_queue_struct
 529 {
 530   int job;
 531   int size;
 532   int page_count;
 533   int status;
 534   int priority;
 535   time_t time;
 536   fstring fs_user;
 537   fstring fs_file;
 538 } print_queue_struct;
 539
 540 enum {LPSTAT_OK, LPSTAT_STOPPED, LPSTAT_ERROR};
 541
 542 typedef struct
 543 {
 544   fstring message;
 545   int qcount;
 546   int status;
 547 }  print_status_struct;
 548
 549 /* used for server information: client, nameserv and ipc */
 550 struct server_info_struct
 551 {
 552   fstring name;
 553   uint32 type;
 554   fstring comment;
 555   fstring domain; /* used ONLY in ipc.c NOT namework.c */
 556   BOOL server_added; /* used ONLY in ipc.c NOT namework.c */
 557 };
 558
 559
 560 /* used for network interfaces */
 561 struct interface
 562 {
 563         struct interface *next, *prev;
 564         struct in_addr ip;
 565         struct in_addr bcast;
 566         struct in_addr nmask;
 567 };
 568
 569 /* struct returned by get_share_modes */
 570 typedef struct {
 571         pid_t pid;
 572         uint16 op_port;
 573         uint16 op_type;
 574         int share_mode;
 575         uint32 desired_access;
 576         struct timeval time;
 577         SMB_DEV_T dev;
 578         SMB_INO_T inode;
 579         unsigned long share_file_id;
 580 } share_mode_entry;
 581
 582
 583 #define SHAREMODE_FN_CAST() \
 584         void (*)(share_mode_entry *, char*)
 585
 586 #define SHAREMODE_FN(fn) \
 587         void (*fn)(share_mode_entry *, char*)
 588
 589 #define NT_HASH_LEN 16
 590 #define LM_HASH_LEN 16
 591
 592 /*
 593  * bit flags representing initialized fields in SAM_ACCOUNT
 594  */
 595 #define FLAG_SAM_UNINIT         0x00000000
 596 #define FLAG_SAM_UID            0x00000001
 597 #define FLAG_SAM_GID            0x00000002
 598 #define FLAG_SAM_SMBHOME        0x00000004
 599 #define FLAG_SAM_PROFILE        0x00000008
 600 #define FLAG_SAM_DRIVE          0x00000010
 601 #define FLAG_SAM_LOGONSCRIPT    0x00000020
 602 #define FLAG_SAM_LOGONTIME      0x00000040
 603 #define FLAG_SAM_LOGOFFTIME     0x00000080
 604 #define FLAG_SAM_KICKOFFTIME    0x00000100
 605 #define FLAG_SAM_CANCHANGETIME  0x00000200
 606 #define FLAG_SAM_MUSTCHANGETIME 0x00000400
 607 #define FLAG_SAM_PLAINTEXT_PW   0x00000800
 608
 609 #define IS_SAM_UNIX_USER(x) \
 610         ((pdb_get_init_flag(x) & FLAG_SAM_UID) \
 611          && (pdb_get_init_flag(x) & FLAG_SAM_GID))
 612
 613 #define IS_SAM_SET(x, flag)     ((x)->private.init_flag & (flag))
 614
 615 typedef struct sam_passwd
 616 {
 617         TALLOC_CTX *mem_ctx;
 618
 619         void (*free_fn)(struct sam_passwd **);
 620
 621         struct pdb_methods *methods;
 622
 623         struct user_data {
 624                 /* initiailization flags */
 625                 uint32 init_flag;
 626
 627                 time_t logon_time;            /* logon time */
 628                 time_t logoff_time;           /* logoff time */
 629                 time_t kickoff_time;          /* kickoff time */
 630                 time_t pass_last_set_time;    /* password last set time */
 631                 time_t pass_can_change_time;  /* password can change time */
 632                 time_t pass_must_change_time; /* password must change time */
 633
 634                 char * username;     /* UNIX username string */
 635                 char * domain;       /* Windows Domain name */
 636                 char * nt_username;  /* Windows username string */
 637                 char * full_name;    /* user's full name string */
 638                 char * unix_home_dir;     /* UNIX home directory string */
 639                 char * home_dir;     /* home directory string */
 640                 char * dir_drive;    /* home directory drive string */
 641                 char * logon_script; /* logon script string */
 642                 char * profile_path; /* profile path string */
 643                 char * acct_desc  ;  /* user description string */
 644                 char * workstations; /* login from workstations string */
 645                 char * unknown_str ; /* don't know what this is, yet. */
 646                 char * munged_dial ; /* munged path name and dial-back tel number */
 647
 648                 uid_t uid;          /* this is a unix uid_t */
 649                 gid_t gid;          /* this is a unix gid_t */
 650                 DOM_SID user_sid;    /* Primary User SID */
 651                 DOM_SID group_sid;   /* Primary Group SID */
 652
 653                 DATA_BLOB lm_pw; /* .data is Null if no password */
 654                 DATA_BLOB nt_pw; /* .data is Null if no password */
 655                 DATA_BLOB plaintext_pw; /* .data is Null if not available */
 656
 657                 uint16 acct_ctrl; /* account info (ACB_xxxx bit-mask) */
 658                 uint32 unknown_3; /* 0x00ff ffff */
 659
 660                 uint16 logon_divs; /* 168 - number of hours in a week */
 661                 uint32 hours_len; /* normally 21 bytes */
 662                 uint8 hours[MAX_HOURS_LEN];
 663
 664                 uint32 unknown_5; /* 0x0002 0000 */
 665                 uint32 unknown_6; /* 0x0000 04ec */
 666         } private;
 667
 668         /* Lets see if the remaining code can get the hint that you
 669            are meant to use the pdb_...() functions. */
 670
 671 } SAM_ACCOUNT;
 672
 673 /*
 674  * Flags for account policy.
 675  */
 676 #define AP_MIN_PASSWORD_LEN             1
 677 #define AP_PASSWORD_HISTORY             2
 678 #define AP_USER_MUST_LOGON_TO_CHG_PASS  3
 679 #define AP_MAX_PASSWORD_AGE             4
 680 #define AP_MIN_PASSWORD_AGE             5
 681 #define AP_LOCK_ACCOUNT_DURATION        6
 682 #define AP_RESET_COUNT_TIME             7
 683 #define AP_BAD_ATTEMPT_LOCKOUT          8
 684 #define AP_TIME_TO_LOGOUT               9
 685
 686
 687 /*
 688  * Flags for local user manipulation.
 689  */
 690
 691 #define LOCAL_ADD_USER 0x1
 692 #define LOCAL_DELETE_USER 0x2
 693 #define LOCAL_DISABLE_USER 0x4
 694 #define LOCAL_ENABLE_USER 0x8
 695 #define LOCAL_TRUST_ACCOUNT 0x10
 696 #define LOCAL_SET_NO_PASSWORD 0x20
 697 #define LOCAL_SET_PASSWORD 0x40
 698 #define LOCAL_SET_LDAP_ADMIN_PW 0x80
 699 #define LOCAL_INTERDOM_ACCOUNT 0x100
 700 #define LOCAL_AM_ROOT 0x200  /* Act as root */
 701
 702 /* key and data in the connections database - used in smbstatus and smbd */
 703 struct connections_key {
 704         pid_t pid;
 705         int cnum;
 706         fstring name;
 707 };
 708
 709 struct connections_data {
 710         int magic;
 711         pid_t pid;
 712         int cnum;
 713         uid_t uid;
 714         gid_t gid;
 715         char name[24];
 716         char addr[24];
 717         char machine[FSTRING_LEN];
 718         time_t start;
 719 };
 720
 721
 722 /* key and data records in the tdb locking database */
 723 struct locking_key {
 724         SMB_DEV_T dev;
 725         SMB_INO_T inode;
 726 };
 727
 728 struct locking_data {
 729         union {
 730                 int num_share_mode_entries;
 731                 share_mode_entry dummy; /* Needed for alignment. */
 732         } u;
 733         /* the following two entries are implicit
 734            share_mode_entry modes[num_share_mode_entries];
 735            char file_name[];
 736         */
 737 };
 738
 739
 740 /* the following are used by loadparm for option lists */
 741 typedef enum
 742 {
 743   P_BOOL,P_BOOLREV,P_CHAR,P_INTEGER,P_OCTAL,P_LIST,
 744   P_STRING,P_USTRING,P_GSTRING,P_UGSTRING,P_ENUM,P_SEP
 745 } parm_type;
 746
 747 typedef enum
 748 {
 749   P_LOCAL,P_GLOBAL,P_SEPARATOR,P_NONE
 750 } parm_class;
 751
 752 /* passed to br lock code */
 753 enum brl_type {READ_LOCK, WRITE_LOCK};
 754
 755 struct enum_list {
 756         int value;
 757         char *name;
 758 };
 759
 760 #define BRLOCK_FN_CAST() \
 761         void (*)(SMB_DEV_T dev, SMB_INO_T ino, int pid, \
 762                                  enum brl_type lock_type, \
 763                                  br_off start, br_off size)
 764 #define BRLOCK_FN(fn) \
 765         void (*fn)(SMB_DEV_T dev, SMB_INO_T ino, int pid, \
 766                                  enum brl_type lock_type, \
 767                                  br_off start, br_off size)
 768 struct parm_struct
 769 {
 770         char *label;
 771         parm_type type;
 772         parm_class class;
 773         void *ptr;
 774         BOOL (*special)(char *, char **);
 775         struct enum_list *enum_list;
 776         unsigned flags;
 777         union {
 778                 BOOL bvalue;
 779                 int ivalue;
 780                 char *svalue;
 781                 char cvalue;
 782                 char **lvalue;
 783         } def;
 784 };
 785
 786 struct bitmap {
 787         uint32 *b;
 788         int n;
 789 };
 790
 791 #define FLAG_BASIC      0x01 /* fundamental options */
 792 #define FLAG_SHARE      0x02 /* file sharing options */
 793 #define FLAG_PRINT      0x04 /* printing options */
 794 #define FLAG_GLOBAL     0x08 /* local options that should be globally settable in SWAT */
 795 #define FLAG_DEPRECATED 0x10 /* options that should no longer be used */
 796 #define FLAG_HIDE       0x20 /* options that should be hidden in SWAT */
 797
 798 #ifndef LOCKING_VERSION
 799 #define LOCKING_VERSION 4
 800 #endif /* LOCKING_VERSION */
 801
 802
 803 /* the basic packet size, assuming no words or bytes */
 804 #define smb_size 39
 805
 806 /* offsets into message for common items */
 807 #define smb_com 8
 808 #define smb_rcls 9
 809 #define smb_reh 10
 810 #define smb_err 11
 811 #define smb_flg 13
 812 #define smb_flg2 14
 813 #define smb_pidhigh 16
 814 #define smb_ss_field 18
 815 #define smb_tid 28
 816 #define smb_pid 30
 817 #define smb_uid 32
 818 #define smb_mid 34
 819 #define smb_wct 36
 820 #define smb_vwv 37
 821 #define smb_vwv0 37
 822 #define smb_vwv1 39
 823 #define smb_vwv2 41
 824 #define smb_vwv3 43
 825 #define smb_vwv4 45
 826 #define smb_vwv5 47
 827 #define smb_vwv6 49
 828 #define smb_vwv7 51
 829 #define smb_vwv8 53
 830 #define smb_vwv9 55
 831 #define smb_vwv10 57
 832 #define smb_vwv11 59
 833 #define smb_vwv12 61
 834 #define smb_vwv13 63
 835 #define smb_vwv14 65
 836 #define smb_vwv15 67
 837 #define smb_vwv16 69
 838 #define smb_vwv17 71
 839
 840 /* flag defines. CIFS spec 3.1.1 */
 841 #define FLAG_SUPPORT_LOCKREAD       0x01
 842 #define FLAG_CLIENT_BUF_AVAIL       0x02
 843 #define FLAG_RESERVED               0x04
 844 #define FLAG_CASELESS_PATHNAMES     0x08
 845 #define FLAG_CANONICAL_PATHNAMES    0x10
 846 #define FLAG_REQUEST_OPLOCK         0x20
 847 #define FLAG_REQUEST_BATCH_OPLOCK   0x40
 848 #define FLAG_REPLY                  0x80
 849
 850 /* the complete */
 851 #define SMBmkdir      0x00   /* create directory */
 852 #define SMBrmdir      0x01   /* delete directory */
 853 #define SMBopen       0x02   /* open file */
 854 #define SMBcreate     0x03   /* create file */
 855 #define SMBclose      0x04   /* close file */
 856 #define SMBflush      0x05   /* flush file */
 857 #define SMBunlink     0x06   /* delete file */
 858 #define SMBmv         0x07   /* rename file */
 859 #define SMBgetatr     0x08   /* get file attributes */
 860 #define SMBsetatr     0x09   /* set file attributes */
 861 #define SMBread       0x0A   /* read from file */
 862 #define SMBwrite      0x0B   /* write to file */
 863 #define SMBlock       0x0C   /* lock byte range */
 864 #define SMBunlock     0x0D   /* unlock byte range */
 865 #define SMBctemp      0x0E   /* create temporary file */
 866 #define SMBmknew      0x0F   /* make new file */
 867 #define SMBchkpth     0x10   /* check directory path */
 868 #define SMBexit       0x11   /* process exit */
 869 #define SMBlseek      0x12   /* seek */
 870 #define SMBtcon       0x70   /* tree connect */
 871 #define SMBtconX      0x75   /* tree connect and X*/
 872 #define SMBtdis       0x71   /* tree disconnect */
 873 #define SMBnegprot    0x72   /* negotiate protocol */
 874 #define SMBdskattr    0x80   /* get disk attributes */
 875 #define SMBsearch     0x81   /* search directory */
 876 #define SMBsplopen    0xC0   /* open print spool file */
 877 #define SMBsplwr      0xC1   /* write to print spool file */
 878 #define SMBsplclose   0xC2   /* close print spool file */
 879 #define SMBsplretq    0xC3   /* return print queue */
 880 #define SMBsends      0xD0   /* send single block message */
 881 #define SMBsendb      0xD1   /* send broadcast message */
 882 #define SMBfwdname    0xD2   /* forward user name */
 883 #define SMBcancelf    0xD3   /* cancel forward */
 884 #define SMBgetmac     0xD4   /* get machine name */
 885 #define SMBsendstrt   0xD5   /* send start of multi-block message */
 886 #define SMBsendend    0xD6   /* send end of multi-block message */
 887 #define SMBsendtxt    0xD7   /* send text of multi-block message */
 888
 889 /* Core+ protocol */
 890 #define SMBlockread       0x13   /* Lock a range and read */
 891 #define SMBwriteunlock 0x14 /* Unlock a range then write */
 892 #define SMBreadbraw   0x1a  /* read a block of data with no smb header */
 893 #define SMBwritebraw  0x1d  /* write a block of data with no smb header */
 894 #define SMBwritec     0x20  /* secondary write request */
 895 #define SMBwriteclose 0x2c  /* write a file then close it */
 896
 897 /* dos extended protocol */
 898 #define SMBreadBraw      0x1A   /* read block raw */
 899 #define SMBreadBmpx      0x1B   /* read block multiplexed */
 900 #define SMBreadBs        0x1C   /* read block (secondary response) */
 901 #define SMBwriteBraw     0x1D   /* write block raw */
 902 #define SMBwriteBmpx     0x1E   /* write block multiplexed */
 903 #define SMBwriteBs       0x1F   /* write block (secondary request) */
 904 #define SMBwriteC        0x20   /* write complete response */
 905 #define SMBsetattrE      0x22   /* set file attributes expanded */
 906 #define SMBgetattrE      0x23   /* get file attributes expanded */
 907 #define SMBlockingX      0x24   /* lock/unlock byte ranges and X */
 908 #define SMBtrans         0x25   /* transaction - name, bytes in/out */
 909 #define SMBtranss        0x26   /* transaction (secondary request/response) */
 910 #define SMBioctl         0x27   /* IOCTL */
 911 #define SMBioctls        0x28   /* IOCTL  (secondary request/response) */
 912 #define SMBcopy          0x29   /* copy */
 913 #define SMBmove          0x2A   /* move */
 914 #define SMBecho          0x2B   /* echo */
 915 #define SMBopenX         0x2D   /* open and X */
 916 #define SMBreadX         0x2E   /* read and X */
 917 #define SMBwriteX        0x2F   /* write and X */
 918 #define SMBsesssetupX    0x73   /* Session Set Up & X (including User Logon) */
 919 #define SMBffirst        0x82   /* find first */
 920 #define SMBfunique       0x83   /* find unique */
 921 #define SMBfclose        0x84   /* find close */
 922 #define SMBkeepalive     0x85   /* keepalive */
 923 #define SMBinvalid       0xFE   /* invalid command */
 924
 925 /* Extended 2.0 protocol */
 926 #define SMBtrans2        0x32   /* TRANS2 protocol set */
 927 #define SMBtranss2       0x33   /* TRANS2 protocol set, secondary command */
 928 #define SMBfindclose     0x34   /* Terminate a TRANSACT2_FINDFIRST */
 929 #define SMBfindnclose    0x35   /* Terminate a TRANSACT2_FINDNOTIFYFIRST */
 930 #define SMBulogoffX      0x74   /* user logoff */
 931
 932 /* NT SMB extensions. */
 933 #define SMBnttrans       0xA0   /* NT transact */
 934 #define SMBnttranss      0xA1   /* NT transact secondary */
 935 #define SMBntcreateX     0xA2   /* NT create and X */
 936 #define SMBntcancel      0xA4   /* NT cancel */
 937
 938 /* These are the TRANS2 sub commands */
 939 #define TRANSACT2_OPEN                        0
 940 #define TRANSACT2_FINDFIRST                   1
 941 #define TRANSACT2_FINDNEXT                    2
 942 #define TRANSACT2_QFSINFO                     3
 943 #define TRANSACT2_SETFSINFO                   4
 944 #define TRANSACT2_QPATHINFO                   5
 945 #define TRANSACT2_SETPATHINFO                 6
 946 #define TRANSACT2_QFILEINFO                   7
 947 #define TRANSACT2_SETFILEINFO                 8
 948 #define TRANSACT2_FSCTL                       9
 949 #define TRANSACT2_IOCTL                     0xA
 950 #define TRANSACT2_FINDNOTIFYFIRST           0xB
 951 #define TRANSACT2_FINDNOTIFYNEXT            0xC
 952 #define TRANSACT2_MKDIR                     0xD
 953 #define TRANSACT2_SESSION_SETUP             0xE
 954 #define TRANSACT2_GET_DFS_REFERRAL         0x10
 955 #define TRANSACT2_REPORT_DFS_INCONSISTANCY 0x11
 956
 957 /* These are the NT transact sub commands. */
 958 #define NT_TRANSACT_CREATE                1
 959 #define NT_TRANSACT_IOCTL                 2
 960 #define NT_TRANSACT_SET_SECURITY_DESC     3
 961 #define NT_TRANSACT_NOTIFY_CHANGE         4
 962 #define NT_TRANSACT_RENAME                5
 963 #define NT_TRANSACT_QUERY_SECURITY_DESC   6
 964
 965 /* Relevant IOCTL codes */
 966 #define IOCTL_QUERY_JOB_INFO      0x530060
 967
 968 /* these are the trans2 sub fields for primary requests */
 969 #define smb_tpscnt smb_vwv0
 970 #define smb_tdscnt smb_vwv1
 971 #define smb_mprcnt smb_vwv2
 972 #define smb_mdrcnt smb_vwv3
 973 #define smb_msrcnt smb_vwv4
 974 #define smb_flags smb_vwv5
 975 #define smb_timeout smb_vwv6
 976 #define smb_pscnt smb_vwv9
 977 #define smb_psoff smb_vwv10
 978 #define smb_dscnt smb_vwv11
 979 #define smb_dsoff smb_vwv12
 980 #define smb_suwcnt smb_vwv13
 981 #define smb_setup smb_vwv14
 982 #define smb_setup0 smb_setup
 983 #define smb_setup1 (smb_setup+2)
 984 #define smb_setup2 (smb_setup+4)
 985
 986 /* these are for the secondary requests */
 987 #define smb_spscnt smb_vwv2
 988 #define smb_spsoff smb_vwv3
 989 #define smb_spsdisp smb_vwv4
 990 #define smb_sdscnt smb_vwv5
 991 #define smb_sdsoff smb_vwv6
 992 #define smb_sdsdisp smb_vwv7
 993 #define smb_sfid smb_vwv8
 994
 995 /* and these for responses */
 996 #define smb_tprcnt smb_vwv0
 997 #define smb_tdrcnt smb_vwv1
 998 #define smb_prcnt smb_vwv3
 999 #define smb_proff smb_vwv4
1000 #define smb_prdisp smb_vwv5
1001 #define smb_drcnt smb_vwv6
1002 #define smb_droff smb_vwv7
1003 #define smb_drdisp smb_vwv8
1004
1005 /* these are for the NT trans primary request. */
1006 #define smb_nt_MaxSetupCount smb_vwv0
1007 #define smb_nt_Flags (smb_vwv0 + 1)
1008 #define smb_nt_TotalParameterCount (smb_vwv0 + 3)
1009 #define smb_nt_TotalDataCount (smb_vwv0 + 7)
1010 #define smb_nt_MaxParameterCount (smb_vwv0 + 11)
1011 #define smb_nt_MaxDataCount (smb_vwv0 + 15)
1012 #define smb_nt_ParameterCount (smb_vwv0 + 19)
1013 #define smb_nt_ParameterOffset (smb_vwv0 + 23)
1014 #define smb_nt_DataCount (smb_vwv0 + 27)
1015 #define smb_nt_DataOffset (smb_vwv0 + 31)
1016 #define smb_nt_SetupCount (smb_vwv0 + 35)
1017 #define smb_nt_Function (smb_vwv0 + 36)
1018 #define smb_nt_SetupStart (smb_vwv0 + 38)
1019
1020 /* these are for the NT trans secondary request. */
1021 #define smb_nts_TotalParameterCount (smb_vwv0 + 3)
1022 #define smb_nts_TotalDataCount (smb_vwv0 + 7)
1023 #define smb_nts_ParameterCount (smb_vwv0 + 11)
1024 #define smb_nts_ParameterOffset (smb_vwv0 + 15)
1025 #define smb_nts_ParameterDisplacement (smb_vwv0 + 19)
1026 #define smb_nts_DataCount (smb_vwv0 + 23)
1027 #define smb_nts_DataOffset (smb_vwv0 + 27)
1028 #define smb_nts_DataDisplacement (smb_vwv0 + 31)
1029
1030 /* these are for the NT trans reply. */
1031 #define smb_ntr_TotalParameterCount (smb_vwv0 + 3)
1032 #define smb_ntr_TotalDataCount (smb_vwv0 + 7)
1033 #define smb_ntr_ParameterCount (smb_vwv0 + 11)
1034 #define smb_ntr_ParameterOffset (smb_vwv0 + 15)
1035 #define smb_ntr_ParameterDisplacement (smb_vwv0 + 19)
1036 #define smb_ntr_DataCount (smb_vwv0 + 23)
1037 #define smb_ntr_DataOffset (smb_vwv0 + 27)
1038 #define smb_ntr_DataDisplacement (smb_vwv0 + 31)
1039
1040 /* these are for the NT create_and_X */
1041 #define smb_ntcreate_NameLength (smb_vwv0 + 5)
1042 #define smb_ntcreate_Flags (smb_vwv0 + 7)
1043 #define smb_ntcreate_RootDirectoryFid (smb_vwv0 + 11)
1044 #define smb_ntcreate_DesiredAccess (smb_vwv0 + 15)
1045 #define smb_ntcreate_AllocationSize (smb_vwv0 + 19)
1046 #define smb_ntcreate_FileAttributes (smb_vwv0 + 27)
1047 #define smb_ntcreate_ShareAccess (smb_vwv0 + 31)
1048 #define smb_ntcreate_CreateDisposition (smb_vwv0 + 35)
1049 #define smb_ntcreate_CreateOptions (smb_vwv0 + 39)
1050 #define smb_ntcreate_ImpersonationLevel (smb_vwv0 + 43)
1051 #define smb_ntcreate_SecurityFlags (smb_vwv0 + 47)
1052
1053 /* this is used on a TConX. I'm not sure the name is very helpful though */
1054 #define SMB_SUPPORT_SEARCH_BITS        0x0001
1055 #define SMB_SHARE_IN_DFS               0x0002
1056
1057 /* Named pipe write mode flags. Used in writeX calls. */
1058 #define PIPE_RAW_MODE 0x4
1059 #define PIPE_START_MESSAGE 0x8
1060
1061 /* these are the constants used in the above call. */
1062 /* DesiredAccess */
1063 /* File Specific access rights. */
1064 #define FILE_READ_DATA        0x001
1065 #define FILE_WRITE_DATA       0x002
1066 #define FILE_APPEND_DATA      0x004
1067 #define FILE_READ_EA          0x008
1068 #define FILE_WRITE_EA         0x010
1069 #define FILE_EXECUTE          0x020
1070 #define FILE_DELETE_CHILD     0x040
1071 #define FILE_READ_ATTRIBUTES  0x080
1072 #define FILE_WRITE_ATTRIBUTES 0x100
1073
1074 #define FILE_ALL_ACCESS       0x1FF
1075
1076 /* the desired access to use when opening a pipe */
1077 #define DESIRED_ACCESS_PIPE 0x2019f
1078
1079 /* Generic access masks & rights. */
1080 #define SPECIFIC_RIGHTS_MASK 0x00FFFFL
1081 #define STANDARD_RIGHTS_MASK 0xFF0000L
1082 #define DELETE_ACCESS        (1L<<16) /* 0x00010000 */
1083 #define READ_CONTROL_ACCESS  (1L<<17) /* 0x00020000 */
1084 #define WRITE_DAC_ACCESS     (1L<<18) /* 0x00040000 */
1085 #define WRITE_OWNER_ACCESS   (1L<<19) /* 0x00080000 */
1086 #define SYNCHRONIZE_ACCESS   (1L<<20) /* 0x00100000 */
1087
1088 /* Combinations of standard masks. */
1089 #define STANDARD_RIGHTS_ALL_ACCESS (DELETE_ACCESS|READ_CONTROL_ACCESS|WRITE_DAC_ACCESS|WRITE_OWNER_ACCESS|SYNCHRONIZE_ACCESS) /* 0x001f0000 */
1090 #define STANDARD_RIGHTS_EXECUTE_ACCESS (READ_CONTROL_ACCESS) /* 0x00020000 */
1091 #define STANDARD_RIGHTS_READ_ACCESS (READ_CONTROL_ACCESS) /* 0x00200000 */
1092 #define STANDARD_RIGHTS_REQUIRED_ACCESS (DELETE_ACCESS|READ_CONTROL_ACCESS|WRITE_DAC_ACCESS|WRITE_OWNER_ACCESS) /* 0x000f0000 */
1093 #define STANDARD_RIGHTS_WRITE_ACCESS (READ_CONTROL_ACCESS) /* 0x00020000 */
1094
1095 #define SYSTEM_SECURITY_ACCESS (1L<<24)           /* 0x01000000 */
1096 #define MAXIMUM_ALLOWED_ACCESS (1L<<25)           /* 0x02000000 */
1097 #define GENERIC_ALL_ACCESS     (1<<28)            /* 0x10000000 */
1098 #define GENERIC_EXECUTE_ACCESS (1<<29)            /* 0x20000000 */
1099 #define GENERIC_WRITE_ACCESS   (1<<30)            /* 0x40000000 */
1100 #define GENERIC_READ_ACCESS   (((unsigned)1)<<31) /* 0x80000000 */
1101
1102 /* Mapping of generic access rights for files to specific rights. */
1103
1104 #define FILE_GENERIC_ALL (STANDARD_RIGHTS_REQUIRED_ACCESS| SYNCHRONIZE_ACCESS|FILE_ALL_ACCESS)
1105
1106 #define FILE_GENERIC_READ (STANDARD_RIGHTS_READ_ACCESS|FILE_READ_DATA|FILE_READ_ATTRIBUTES|\
1107                                                         FILE_READ_EA|SYNCHRONIZE_ACCESS)
1108
1109 #define FILE_GENERIC_WRITE (STANDARD_RIGHTS_WRITE_ACCESS|FILE_WRITE_DATA|FILE_WRITE_ATTRIBUTES|\
1110                                                         FILE_WRITE_EA|FILE_APPEND_DATA|SYNCHRONIZE_ACCESS)
1111
1112 #define FILE_GENERIC_EXECUTE (STANDARD_RIGHTS_EXECUTE_ACCESS|FILE_READ_ATTRIBUTES|\
1113                                                                 FILE_EXECUTE|SYNCHRONIZE_ACCESS)
1114
1115 /* Mapping of access rights to UNIX perms. */
1116 #define UNIX_ACCESS_RWX         FILE_GENERIC_ALL
1117 #define UNIX_ACCESS_R           FILE_GENERIC_READ
1118 #define UNIX_ACCESS_W           FILE_GENERIC_WRITE
1119 #define UNIX_ACCESS_X           FILE_GENERIC_EXECUTE
1120
1121 #if 0
1122 /*
1123  * This is the old mapping we used to use. To get W2KSP2 profiles
1124  * working we need to map to the canonical file perms.
1125  */
1126 #define UNIX_ACCESS_RWX (UNIX_ACCESS_R|UNIX_ACCESS_W|UNIX_ACCESS_X)
1127 #define UNIX_ACCESS_R (READ_CONTROL_ACCESS|SYNCHRONIZE_ACCESS|\
1128                         FILE_READ_ATTRIBUTES|FILE_READ_EA|FILE_READ_DATA)
1129 #define UNIX_ACCESS_W (READ_CONTROL_ACCESS|SYNCHRONIZE_ACCESS|\
1130                         FILE_WRITE_ATTRIBUTES|FILE_WRITE_EA|\
1131                         FILE_APPEND_DATA|FILE_WRITE_DATA)
1132 #define UNIX_ACCESS_X (READ_CONTROL_ACCESS|SYNCHRONIZE_ACCESS|\
1133                         FILE_EXECUTE|FILE_READ_ATTRIBUTES)
1134 #endif
1135
1136 #define UNIX_ACCESS_NONE (WRITE_OWNER_ACCESS)
1137
1138 /* Flags field. */
1139 #define REQUEST_OPLOCK 2
1140 #define REQUEST_BATCH_OPLOCK 4
1141 #define OPEN_DIRECTORY 8
1142
1143 /* ShareAccess field. */
1144 #define FILE_SHARE_NONE 0 /* Cannot be used in bitmask. */
1145 #define FILE_SHARE_READ 1
1146 #define FILE_SHARE_WRITE 2
1147 #define FILE_SHARE_DELETE 4
1148
1149 /* FileAttributesField */
1150 #define FILE_ATTRIBUTE_READONLY aRONLY
1151 #define FILE_ATTRIBUTE_HIDDEN aHIDDEN
1152 #define FILE_ATTRIBUTE_SYSTEM aSYSTEM
1153 #define FILE_ATTRIBUTE_DIRECTORY aDIR
1154 #define FILE_ATTRIBUTE_ARCHIVE aARCH
1155 #define FILE_ATTRIBUTE_NORMAL 0x80L
1156 #define FILE_ATTRIBUTE_TEMPORARY 0x100L
1157 #define FILE_ATTRIBUTE_SPARSE 0x200L
1158 #define FILE_ATTRIBUTE_COMPRESSED 0x800L
1159 #define FILE_ATTRIBUTE_NONINDEXED 0x2000L
1160 #define SAMBA_ATTRIBUTES_MASK 0x7F
1161
1162 /* Flags - combined with attributes. */
1163 #define FILE_FLAG_WRITE_THROUGH    0x80000000L
1164 #define FILE_FLAG_NO_BUFFERING     0x20000000L
1165 #define FILE_FLAG_RANDOM_ACCESS    0x10000000L
1166 #define FILE_FLAG_SEQUENTIAL_SCAN  0x08000000L
1167 #define FILE_FLAG_DELETE_ON_CLOSE  0x04000000L
1168 #define FILE_FLAG_BACKUP_SEMANTICS 0x02000000L
1169 #define FILE_FLAG_POSIX_SEMANTICS  0x01000000L
1170
1171 /* CreateDisposition field. */
1172 #define FILE_SUPERSEDE 0
1173 #define FILE_OPEN 1
1174 #define FILE_CREATE 2
1175 #define FILE_OPEN_IF 3
1176 #define FILE_OVERWRITE 4
1177 #define FILE_OVERWRITE_IF 5
1178
1179 /* CreateOptions field. */
1180 #define FILE_DIRECTORY_FILE       0x0001
1181 #define FILE_WRITE_THROUGH        0x0002
1182 #define FILE_SEQUENTIAL_ONLY      0x0004
1183 #define FILE_NON_DIRECTORY_FILE   0x0040
1184 #define FILE_NO_EA_KNOWLEDGE      0x0200
1185 #define FILE_EIGHT_DOT_THREE_ONLY 0x0400
1186 #define FILE_RANDOM_ACCESS        0x0800
1187 #define FILE_DELETE_ON_CLOSE      0x1000
1188
1189 /* Responses when opening a file. */
1190 #define FILE_WAS_OPENED 1
1191 #define FILE_WAS_CREATED 2
1192 #define FILE_WAS_OVERWRITTEN 3
1193
1194 /* File type flags */
1195 #define FILE_TYPE_DISK  0
1196 #define FILE_TYPE_BYTE_MODE_PIPE 1
1197 #define FILE_TYPE_MESSAGE_MODE_PIPE 2
1198 #define FILE_TYPE_PRINTER 3
1199 #define FILE_TYPE_COMM_DEVICE 4
1200 #define FILE_TYPE_UNKNOWN 0xFFFF
1201
1202 /* Flag for NT transact rename call. */
1203 #define RENAME_REPLACE_IF_EXISTS 1
1204
1205 /* Filesystem Attributes. */
1206 #define FILE_CASE_SENSITIVE_SEARCH 0x01
1207 #define FILE_CASE_PRESERVED_NAMES 0x02
1208 #define FILE_UNICODE_ON_DISK 0x04
1209 /* According to cifs9f, this is 4, not 8 */
1210 /* Acconding to testing, this actually sets the security attribute! */
1211 #define FILE_PERSISTENT_ACLS 0x08
1212 /* These entries added from cifs9f --tsb */
1213 #define FILE_FILE_COMPRESSION 0x10
1214 #define FILE_VOLUME_QUOTAS 0x20
1215 /* I think this is wrong. JRA #define FILE_DEVICE_IS_MOUNTED 0x20 */
1216 #define FILE_VOLUME_SPARSE_FILE 0x40
1217 #define FILE_VOLUME_IS_COMPRESSED 0x8000
1218
1219 /* ChangeNotify flags. */
1220 #define FILE_NOTIFY_CHANGE_FILE        0x001
1221 #define FILE_NOTIFY_CHANGE_DIR_NAME    0x002
1222 #define FILE_NOTIFY_CHANGE_ATTRIBUTES  0x004
1223 #define FILE_NOTIFY_CHANGE_SIZE        0x008
1224 #define FILE_NOTIFY_CHANGE_LAST_WRITE  0x010
1225 #define FILE_NOTIFY_CHANGE_LAST_ACCESS 0x020
1226 #define FILE_NOTIFY_CHANGE_CREATION    0x040
1227 #define FILE_NOTIFY_CHANGE_EA          0x080
1228 #define FILE_NOTIFY_CHANGE_SECURITY    0x100
1229 #define FILE_NOTIFY_CHANGE_FILE_NAME   0x200
1230
1231 /* where to find the base of the SMB packet proper */
1232 #define smb_base(buf) (((char *)(buf))+4)
1233
1234 /* we don't allow server strings to be longer than 48 characters as
1235    otherwise NT will not honour the announce packets */
1236 #define MAX_SERVER_STRING_LENGTH 48
1237
1238
1239 #define SMB_SUCCESS 0  /* The request was successful. */
1240
1241 #ifdef WITH_DFS
1242 void dfs_unlogin(void);
1243 extern int dcelogin_atmost_once;
1244 #endif
1245
1246 #ifdef NOSTRDUP
1247 char *strdup(char *s);
1248 #endif
1249
1250 #ifndef SIGNAL_CAST
1251 #define SIGNAL_CAST (RETSIGTYPE (*)(int))
1252 #endif
1253
1254 #ifndef SELECT_CAST
1255 #define SELECT_CAST
1256 #endif
1257
1258 /* these are used in NetServerEnum to choose what to receive */
1259 #define SV_TYPE_WORKSTATION         0x00000001
1260 #define SV_TYPE_SERVER              0x00000002
1261 #define SV_TYPE_SQLSERVER           0x00000004
1262 #define SV_TYPE_DOMAIN_CTRL         0x00000008
1263 #define SV_TYPE_DOMAIN_BAKCTRL      0x00000010
1264 #define SV_TYPE_TIME_SOURCE         0x00000020
1265 #define SV_TYPE_AFP                 0x00000040
1266 #define SV_TYPE_NOVELL              0x00000080
1267 #define SV_TYPE_DOMAIN_MEMBER       0x00000100
1268 #define SV_TYPE_PRINTQ_SERVER       0x00000200
1269 #define SV_TYPE_DIALIN_SERVER       0x00000400
1270 #define SV_TYPE_SERVER_UNIX         0x00000800
1271 #define SV_TYPE_NT                  0x00001000
1272 #define SV_TYPE_WFW                 0x00002000
1273 #define SV_TYPE_SERVER_MFPN         0x00004000
1274 #define SV_TYPE_SERVER_NT           0x00008000
1275 #define SV_TYPE_POTENTIAL_BROWSER   0x00010000
1276 #define SV_TYPE_BACKUP_BROWSER      0x00020000
1277 #define SV_TYPE_MASTER_BROWSER      0x00040000
1278 #define SV_TYPE_DOMAIN_MASTER       0x00080000
1279 #define SV_TYPE_SERVER_OSF          0x00100000
1280 #define SV_TYPE_SERVER_VMS          0x00200000
1281 #define SV_TYPE_WIN95_PLUS          0x00400000
1282 #define SV_TYPE_DFS_SERVER          0x00800000
1283 #define SV_TYPE_ALTERNATE_XPORT     0x20000000
1284 #define SV_TYPE_LOCAL_LIST_ONLY     0x40000000
1285 #define SV_TYPE_DOMAIN_ENUM         0x80000000
1286 #define SV_TYPE_ALL                 0xFFFFFFFF
1287
1288 /* This was set by JHT in liaison with Jeremy Allison early 1997
1289  * History:
1290  * Version 4.0 - never made public
1291  * Version 4.10 - New to 1.9.16p2, lost in space 1.9.16p3 to 1.9.16p9
1292  *              - Reappeared in 1.9.16p11 with fixed smbd services
1293  * Version 4.20 - To indicate that nmbd and browsing now works better
1294  * Version 4.50 - Set at release of samba-2.2.0 by JHT
1295  *
1296  *  Note: In the presence of NT4.X do not set above 4.9
1297  *        Setting this above 4.9 can have undesired side-effects.
1298  *        This may change again in Samba-3.0 after further testing. JHT
1299  */
1300
1301 #define DEFAULT_MAJOR_VERSION 0x04
1302 #define DEFAULT_MINOR_VERSION 0x05
1303
1304 /* Browser Election Values */
1305 #define BROWSER_ELECTION_VERSION        0x010f
1306 #define BROWSER_CONSTANT        0xaa55
1307
1308 /* Sercurity mode bits. */
1309 #define NEGOTIATE_SECURITY_USER_LEVEL           0x01
1310 #define NEGOTIATE_SECURITY_CHALLENGE_RESPONSE   0x02
1311 #define NEGOTIATE_SECURITY_SIGNATURES_ENABLED   0x04
1312 #define NEGOTIATE_SECURITY_SIGNATURES_REQUIRED  0x08
1313
1314 /* NT Flags2 bits - cifs6.txt section 3.1.2 */
1315
1316 #define FLAGS2_LONG_PATH_COMPONENTS    0x0001
1317 #define FLAGS2_EXTENDED_ATTRIBUTES     0x0002
1318 #define FLAGS2_SMB_SECURITY_SIGNATURES 0x0004
1319 #define FLAGS2_IS_LONG_NAME            0x0040
1320 #define FLAGS2_EXTENDED_SECURITY       0x0800
1321 #define FLAGS2_DFS_PATHNAMES           0x1000
1322 #define FLAGS2_READ_PERMIT_NO_EXECUTE  0x2000
1323 #define FLAGS2_32_BIT_ERROR_CODES      0x4000
1324 #define FLAGS2_UNICODE_STRINGS         0x8000
1325
1326 #define FLAGS2_WIN2K_SIGNATURE         0xC852 /* Hack alert ! For now... JRA. */
1327
1328 /* Capabilities.  see ftp.microsoft.com/developr/drg/cifs/cifs/cifs4.txt */
1329
1330 #define CAP_RAW_MODE         0x0001
1331 #define CAP_MPX_MODE         0x0002
1332 #define CAP_UNICODE          0x0004
1333 #define CAP_LARGE_FILES      0x0008
1334 #define CAP_NT_SMBS          0x0010
1335 #define CAP_RPC_REMOTE_APIS  0x0020
1336 #define CAP_STATUS32         0x0040
1337 #define CAP_LEVEL_II_OPLOCKS 0x0080
1338 #define CAP_LOCK_AND_READ    0x0100
1339 #define CAP_NT_FIND          0x0200
1340 #define CAP_DFS              0x1000
1341 #define CAP_W2K_SMBS         0x2000
1342 #define CAP_LARGE_READX      0x4000
1343 #define CAP_LARGE_WRITEX     0x8000
1344 #define CAP_UNIX             0x800000 /* Capabilities for UNIX extensions. Created by HP. */
1345 #define CAP_EXTENDED_SECURITY 0x80000000
1346
1347 /* protocol types. It assumes that higher protocols include lower protocols
1348    as subsets */
1349 enum protocol_types {PROTOCOL_NONE,PROTOCOL_CORE,PROTOCOL_COREPLUS,PROTOCOL_LANMAN1,PROTOCOL_LANMAN2,PROTOCOL_NT1};
1350
1351 /* security levels */
1352 enum security_types {SEC_SHARE,SEC_USER,SEC_SERVER,SEC_DOMAIN,SEC_ADS};
1353
1354 /* server roles */
1355 enum server_types
1356 {
1357         ROLE_STANDALONE,
1358         ROLE_DOMAIN_MEMBER,
1359         ROLE_DOMAIN_BDC,
1360         ROLE_DOMAIN_PDC
1361 };
1362
1363 /* printing types */
1364 enum printing_types {PRINT_BSD,PRINT_SYSV,PRINT_AIX,PRINT_HPUX,
1365                      PRINT_QNX,PRINT_PLP,PRINT_LPRNG,PRINT_SOFTQ,
1366                      PRINT_CUPS,PRINT_LPRNT,PRINT_LPROS2
1367 #ifdef DEVELOPER
1368 ,PRINT_TEST,PRINT_VLP
1369 #endif /* DEVELOPER */
1370 };
1371
1372 /* LDAP schema types */
1373 enum schema_types {SCHEMA_COMPAT, SCHEMA_AD, SCHEMA_SAMBA};
1374
1375 /* LDAP SSL options */
1376 enum ldap_ssl_types {LDAP_SSL_ON, LDAP_SSL_OFF, LDAP_SSL_START_TLS};
1377
1378 /* Remote architectures we know about. */
1379 enum remote_arch_types {RA_UNKNOWN, RA_WFWG, RA_OS2, RA_WIN95, RA_WINNT, RA_WIN2K, RA_SAMBA};
1380
1381 /* case handling */
1382 enum case_handling {CASE_LOWER,CASE_UPPER};
1383
1384 /*
1385  * Global value meaing that the smb_uid field should be
1386  * ingored (in share level security and protocol level == CORE)
1387  */
1388
1389 #define UID_FIELD_INVALID 0
1390 #define VUID_OFFSET 100 /* Amount to bias returned vuid numbers */
1391
1392 /*
1393  * Size of buffer to use when moving files across filesystems.
1394  */
1395 #define COPYBUF_SIZE (8*1024)
1396
1397 /*
1398  * Values used to override error codes.
1399  */
1400 extern int unix_ERR_class;
1401 extern int unix_ERR_code;
1402
1403 /*
1404  * Used in chaining code.
1405  */
1406 extern int chain_size;
1407
1408 /*
1409  * Map the Core and Extended Oplock requesst bits down
1410  * to common bits (EXCLUSIVE_OPLOCK & BATCH_OPLOCK).
1411  */
1412
1413 /*
1414  * Core protocol.
1415  */
1416 #define CORE_OPLOCK_REQUEST(inbuf) \
1417     ((CVAL(inbuf,smb_flg)&(FLAG_REQUEST_OPLOCK|FLAG_REQUEST_BATCH_OPLOCK))>>5)
1418
1419 /*
1420  * Extended protocol.
1421  */
1422 #define EXTENDED_OPLOCK_REQUEST(inbuf) ((SVAL(inbuf,smb_vwv2)&((1<<1)|(1<<2)))>>1)
1423
1424 /* Lock types. */
1425 #define LOCKING_ANDX_SHARED_LOCK 0x1
1426 #define LOCKING_ANDX_OPLOCK_RELEASE 0x2
1427 #define LOCKING_ANDX_CHANGE_LOCKTYPE 0x4
1428 #define LOCKING_ANDX_CANCEL_LOCK 0x8
1429 #define LOCKING_ANDX_LARGE_FILES 0x10
1430
1431 /* Oplock levels */
1432 #define OPLOCKLEVEL_NONE 0
1433 #define OPLOCKLEVEL_II 1
1434
1435 /*
1436  * Bits we test with.
1437  */
1438
1439 #define NO_OPLOCK 0
1440 #define EXCLUSIVE_OPLOCK 1
1441 #define BATCH_OPLOCK 2
1442 #define LEVEL_II_OPLOCK 4
1443
1444 #define EXCLUSIVE_OPLOCK_TYPE(lck) ((lck) & (EXCLUSIVE_OPLOCK|BATCH_OPLOCK))
1445 #define BATCH_OPLOCK_TYPE(lck) ((lck) & BATCH_OPLOCK)
1446 #define LEVEL_II_OPLOCK_TYPE(lck) ((lck) & LEVEL_II_OPLOCK)
1447
1448 #define CORE_OPLOCK_GRANTED (1<<5)
1449 #define EXTENDED_OPLOCK_GRANTED (1<<15)
1450
1451 /*
1452  * Return values for oplock types.
1453  */
1454
1455 #define NO_OPLOCK_RETURN 0
1456 #define EXCLUSIVE_OPLOCK_RETURN 1
1457 #define BATCH_OPLOCK_RETURN 2
1458 #define LEVEL_II_OPLOCK_RETURN 3
1459
1460 /*
1461  * Loopback command offsets.
1462  */
1463
1464 #define OPBRK_CMD_LEN_OFFSET 0
1465 #define OPBRK_CMD_PORT_OFFSET 4
1466 #define OPBRK_CMD_HEADER_LEN 6
1467
1468 #define OPBRK_MESSAGE_CMD_OFFSET 0
1469
1470 /*
1471  * Oplock break command code to send over the udp socket.
1472  * The same message is sent for both exlusive and level II breaks.
1473  *
1474  * The form of this is :
1475  *
1476  *  0     2       2+pid   2+pid+dev 2+pid+dev+ino
1477  *  +----+--------+-------+--------+---------+
1478  *  | cmd| pid    | dev   |  inode | fileid  |
1479  *  +----+--------+-------+--------+---------+
1480  */
1481
1482 #define OPLOCK_BREAK_CMD 0x1
1483 #define OPLOCK_BREAK_PID_OFFSET 2
1484 #define OPLOCK_BREAK_DEV_OFFSET (OPLOCK_BREAK_PID_OFFSET + sizeof(pid_t))
1485 #define OPLOCK_BREAK_INODE_OFFSET (OPLOCK_BREAK_DEV_OFFSET + sizeof(SMB_DEV_T))
1486 #define OPLOCK_BREAK_FILEID_OFFSET (OPLOCK_BREAK_INODE_OFFSET + sizeof(SMB_INO_T))
1487 #define OPLOCK_BREAK_MSG_LEN (OPLOCK_BREAK_FILEID_OFFSET + sizeof(unsigned long))
1488
1489 #define KERNEL_OPLOCK_BREAK_CMD 0x2
1490 #define LEVEL_II_OPLOCK_BREAK_CMD 0x3
1491
1492 /*
1493  * Capabilities abstracted for different systems.
1494  */
1495
1496 #define KERNEL_OPLOCK_CAPABILITY 0x1
1497
1498 /*
1499  * Oplock break command code sent via the kernel interface (if it exists).
1500  *
1501  * Form of this is :
1502  *
1503  *  0     2       2+devsize 2+devsize+inodesize
1504  *  +----+--------+--------+----------+
1505  *  | cmd| dev    |  inode |  fileid  |
1506  *  +----+--------+--------+----------+
1507  */
1508 #define KERNEL_OPLOCK_BREAK_DEV_OFFSET 2
1509 #define KERNEL_OPLOCK_BREAK_INODE_OFFSET (KERNEL_OPLOCK_BREAK_DEV_OFFSET + sizeof(SMB_DEV_T))
1510 #define KERNEL_OPLOCK_BREAK_FILEID_OFFSET (KERNEL_OPLOCK_BREAK_INODE_OFFSET + sizeof(SMB_INO_T))
1511 #define KERNEL_OPLOCK_BREAK_MSG_LEN (KERNEL_OPLOCK_BREAK_FILEID_OFFSET + sizeof(unsigned long))
1512
1513
1514 /* if a kernel does support oplocks then a structure of the following
1515    typee is used to describe how to interact with the kernel */
1516 struct kernel_oplocks {
1517         BOOL (*receive_message)(fd_set *fds, char *buffer, int buffer_len);
1518         BOOL (*set_oplock)(files_struct *fsp, int oplock_type);
1519         void (*release_oplock)(files_struct *fsp);
1520         BOOL (*parse_message)(char *msg_start, int msg_len, SMB_INO_T *inode, SMB_DEV_T *dev, unsigned long *file_id);
1521         BOOL (*msg_waiting)(fd_set *fds);
1522         int notification_fd;
1523 };
1524
1525
1526 #define CMD_REPLY 0x8000
1527
1528 /* this structure defines the functions for doing change notify in
1529    various implementations */
1530 struct cnotify_fns {
1531         void * (*register_notify)(connection_struct *conn, char *path, uint32 flags);
1532         BOOL (*check_notify)(connection_struct *conn, uint16 vuid, char *path, uint32 flags, void *data, time_t t);
1533         void (*remove_notify)(void *data);
1534         int select_time;
1535 };
1536
1537
1538
1539 #include "smb_macros.h"
1540
1541 /* A netbios name structure. */
1542 struct nmb_name {
1543   char         name[17];
1544   char         scope[64];
1545   unsigned int name_type;
1546 };
1547
1548
1549 /* A netbios node status array element. */
1550 struct node_status {
1551         char name[16];
1552         unsigned char type;
1553         unsigned char flags;
1554 };
1555
1556 struct pwd_info
1557 {
1558         BOOL null_pwd;
1559         BOOL cleartext;
1560         BOOL crypted;
1561
1562         fstring password;
1563
1564         uchar smb_lm_pwd[16];
1565         uchar smb_nt_pwd[16];
1566
1567         uchar smb_lm_owf[24];
1568         uchar smb_nt_owf[128];
1569         size_t nt_owf_len;
1570
1571         uchar lm_cli_chal[8];
1572         uchar nt_cli_chal[128];
1573         size_t nt_cli_chal_len;
1574
1575         uchar sess_key[16];
1576 };
1577
1578 #include "rpc_creds.h"
1579 #include "rpc_misc.h"
1580 #include "rpc_secdes.h"
1581 #include "nt_printing.h"
1582
1583 typedef struct user_struct
1584 {
1585         struct user_struct *next, *prev;
1586         uint16 vuid; /* Tag for this entry. */
1587         uid_t uid; /* uid of a validated user */
1588         gid_t gid; /* gid of a validated user */
1589
1590         userdom_struct user;
1591         char *homedir;
1592         char *unix_homedir;
1593         char *logon_script;
1594
1595         BOOL guest;
1596
1597         /* following groups stuff added by ih */
1598         /* This groups info is needed for when we become_user() for this uid */
1599         int n_groups;
1600         gid_t *groups;
1601
1602         NT_USER_TOKEN *nt_user_token;
1603
1604         uint8 session_key[16];
1605
1606         char *session_keystr; /* used by utmp and pam session code.
1607                                  TDB key string */
1608         int homes_snum;
1609
1610 } user_struct;
1611
1612
1613 struct unix_error_map {
1614         int unix_error;
1615         int dos_class;
1616         int dos_code;
1617         NTSTATUS nt_error;
1618 };
1619
1620 #include "ntdomain.h"
1621
1622 #include "client.h"
1623
1624 /*
1625  * Size of new password account encoding string.  This is enough space to
1626  * hold 11 ACB characters, plus the surrounding [] and a terminating null.
1627  * Do not change unless you are adding new ACB bits!
1628  */
1629
1630 #define NEW_PW_FORMAT_SPACE_PADDED_LEN 14
1631
1632 /*
1633    Do you want session setups at user level security with a invalid
1634    password to be rejected or allowed in as guest? WinNT rejects them
1635    but it can be a pain as it means "net view" needs to use a password
1636
1637    You have 3 choices in the setting of map_to_guest:
1638
1639    "NEVER_MAP_TO_GUEST" means session setups with an invalid password
1640    are rejected. This is the default.
1641
1642    "MAP_TO_GUEST_ON_BAD_USER" means session setups with an invalid password
1643    are rejected, unless the username does not exist, in which case it
1644    is treated as a guest login
1645
1646    "MAP_TO_GUEST_ON_BAD_PASSWORD" means session setups with an invalid password
1647    are treated as a guest login
1648
1649    Note that map_to_guest only has an effect in user or server
1650    level security.
1651 */
1652
1653 #define NEVER_MAP_TO_GUEST 0
1654 #define MAP_TO_GUEST_ON_BAD_USER 1
1655 #define MAP_TO_GUEST_ON_BAD_PASSWORD 2
1656
1657 #define SAFE_NETBIOS_CHARS ". -_"
1658
1659 #include "nsswitch/winbindd_nss.h"
1660
1661 /* generic iconv conversion structure */
1662 typedef struct {
1663         size_t (*direct)(void *cd, char **inbuf, size_t *inbytesleft,
1664                          char **outbuf, size_t *outbytesleft);
1665         size_t (*pull)(void *cd, char **inbuf, size_t *inbytesleft,
1666                        char **outbuf, size_t *outbytesleft);
1667         size_t (*push)(void *cd, char **inbuf, size_t *inbytesleft,
1668                        char **outbuf, size_t *outbytesleft);
1669         void *cd_direct, *cd_pull, *cd_push;
1670         char *from_name, *to_name;
1671 } *smb_iconv_t;
1672
1673 /* The maximum length of a trust account password.
1674    Used when we randomly create it, 15 char passwords
1675    exceed NT4's max password length */
1676
1677 #define DEFAULT_TRUST_ACCOUNT_PASSWORD_LENGTH 14
1678
1679 /* Common popt structures */
1680
1681 extern struct poptOption popt_common_debug[];
1682
1683 #endif /* _SMB_H */