2 Unix SMB/CIFS implementation.
4 Copyright (C) Stefan Metzmacher 2012
5 Copyright (C) Michael Adam 2012
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "system/filesys.h"
23 #include "smbd/smbd.h"
24 #include "smbd/globals.h"
25 #include "dbwrap/dbwrap.h"
26 #include "dbwrap/dbwrap_rbt.h"
27 #include "dbwrap/dbwrap_open.h"
28 #include "../libcli/security/security.h"
30 #include "lib/util/util_tdb.h"
31 #include "librpc/gen_ndr/ndr_smbXsrv.h"
32 #include <ccan/hash/hash.h>
35 struct smbXsrv_open_table
{
37 struct db_context
*db_ctx
;
44 struct db_context
*db_ctx
;
48 static struct db_context
*smbXsrv_open_global_db_ctx
= NULL
;
50 NTSTATUS
smbXsrv_open_global_init(void)
52 char *global_path
= NULL
;
53 struct db_context
*db_ctx
= NULL
;
55 if (smbXsrv_open_global_db_ctx
!= NULL
) {
59 global_path
= lock_path("smbXsrv_open_global.tdb");
60 if (global_path
== NULL
) {
61 return NT_STATUS_NO_MEMORY
;
64 db_ctx
= db_open(NULL
, global_path
,
68 TDB_INCOMPATIBLE_HASH
,
69 O_RDWR
| O_CREAT
, 0600,
72 TALLOC_FREE(global_path
);
76 status
= map_nt_error_from_unix_common(errno
);
81 smbXsrv_open_global_db_ctx
= db_ctx
;
88 * We need to store the keys in big endian so that dbwrap_rbt's memcmp
89 * has the same result as integer comparison between the uint32_t
92 * TODO: implement string based key
95 #define SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE sizeof(uint32_t)
97 static TDB_DATA
smbXsrv_open_global_id_to_key(uint32_t id
,
102 RSIVAL(key_buf
, 0, id
);
104 key
= make_tdb_data(key_buf
, SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
);
110 static NTSTATUS
smbXsrv_open_global_key_to_id(TDB_DATA key
, uint32_t *id
)
113 return NT_STATUS_INVALID_PARAMETER
;
116 if (key
.dsize
!= SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
) {
117 return NT_STATUS_INTERNAL_DB_CORRUPTION
;
120 *id
= RIVAL(key
.dptr
, 0);
126 #define SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE sizeof(uint32_t)
128 static TDB_DATA
smbXsrv_open_local_id_to_key(uint32_t id
,
133 RSIVAL(key_buf
, 0, id
);
135 key
= make_tdb_data(key_buf
, SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
);
140 static NTSTATUS
smbXsrv_open_local_key_to_id(TDB_DATA key
, uint32_t *id
)
143 return NT_STATUS_INVALID_PARAMETER
;
146 if (key
.dsize
!= SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
) {
147 return NT_STATUS_INTERNAL_DB_CORRUPTION
;
150 *id
= RIVAL(key
.dptr
, 0);
155 static NTSTATUS
smbXsrv_open_table_init(struct smbXsrv_connection
*conn
,
160 struct smbXsrv_client
*client
= conn
->client
;
161 struct smbXsrv_open_table
*table
;
165 if (lowest_id
> highest_id
) {
166 return NT_STATUS_INTERNAL_ERROR
;
169 max_range
= highest_id
;
170 max_range
-= lowest_id
;
173 if (max_opens
> max_range
) {
174 return NT_STATUS_INTERNAL_ERROR
;
177 table
= talloc_zero(client
, struct smbXsrv_open_table
);
179 return NT_STATUS_NO_MEMORY
;
182 table
->local
.db_ctx
= db_open_rbt(table
);
183 if (table
->local
.db_ctx
== NULL
) {
185 return NT_STATUS_NO_MEMORY
;
187 table
->local
.lowest_id
= lowest_id
;
188 table
->local
.highest_id
= highest_id
;
189 table
->local
.max_opens
= max_opens
;
191 status
= smbXsrv_open_global_init();
192 if (!NT_STATUS_IS_OK(status
)) {
197 table
->global
.db_ctx
= smbXsrv_open_global_db_ctx
;
199 client
->open_table
= table
;
203 struct smbXsrv_open_local_allocate_state
{
204 const uint32_t lowest_id
;
205 const uint32_t highest_id
;
211 static int smbXsrv_open_local_allocate_traverse(struct db_record
*rec
,
214 struct smbXsrv_open_local_allocate_state
*state
=
215 (struct smbXsrv_open_local_allocate_state
*)private_data
;
216 TDB_DATA key
= dbwrap_record_get_key(rec
);
220 status
= smbXsrv_open_local_key_to_id(key
, &id
);
221 if (!NT_STATUS_IS_OK(status
)) {
222 state
->status
= status
;
226 if (id
<= state
->last_id
) {
227 state
->status
= NT_STATUS_INTERNAL_DB_CORRUPTION
;
232 if (id
> state
->useable_id
) {
233 state
->status
= NT_STATUS_OK
;
237 if (state
->useable_id
== state
->highest_id
) {
238 state
->status
= NT_STATUS_INSUFFICIENT_RESOURCES
;
242 state
->useable_id
+=1;
246 static NTSTATUS
smbXsrv_open_local_allocate_id(struct db_context
*db
,
250 struct db_record
**_rec
,
253 struct smbXsrv_open_local_allocate_state state
= {
254 .lowest_id
= lowest_id
,
255 .highest_id
= highest_id
,
257 .useable_id
= lowest_id
,
258 .status
= NT_STATUS_INTERNAL_ERROR
,
268 if (lowest_id
> highest_id
) {
269 return NT_STATUS_INSUFFICIENT_RESOURCES
;
273 * first we try randomly
275 range
= (highest_id
- lowest_id
) + 1;
277 for (i
= 0; i
< (range
/ 2); i
++) {
279 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
282 struct db_record
*rec
= NULL
;
284 id
= generate_random() % range
;
287 if (id
< lowest_id
) {
290 if (id
> highest_id
) {
294 key
= smbXsrv_open_local_id_to_key(id
, key_buf
);
296 rec
= dbwrap_fetch_locked(db
, mem_ctx
, key
);
298 return NT_STATUS_INSUFFICIENT_RESOURCES
;
301 val
= dbwrap_record_get_value(rec
);
302 if (val
.dsize
!= 0) {
313 * if the range is almost full,
314 * we traverse the whole table
315 * (this relies on sorted behavior of dbwrap_rbt)
317 status
= dbwrap_traverse_read(db
, smbXsrv_open_local_allocate_traverse
,
319 if (NT_STATUS_IS_OK(status
)) {
320 if (NT_STATUS_IS_OK(state
.status
)) {
321 return NT_STATUS_INTERNAL_ERROR
;
324 if (!NT_STATUS_EQUAL(state
.status
, NT_STATUS_INTERNAL_ERROR
)) {
328 if (state
.useable_id
<= state
.highest_id
) {
329 state
.status
= NT_STATUS_OK
;
331 return NT_STATUS_INSUFFICIENT_RESOURCES
;
333 } else if (!NT_STATUS_EQUAL(status
, NT_STATUS_INTERNAL_DB_CORRUPTION
)) {
335 * Here we really expect NT_STATUS_INTERNAL_DB_CORRUPTION!
337 * If we get anything else it is an error, because it
338 * means we did not manage to find a free slot in
341 return NT_STATUS_INSUFFICIENT_RESOURCES
;
344 if (NT_STATUS_IS_OK(state
.status
)) {
346 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
349 struct db_record
*rec
= NULL
;
351 id
= state
.useable_id
;
353 key
= smbXsrv_open_local_id_to_key(id
, key_buf
);
355 rec
= dbwrap_fetch_locked(db
, mem_ctx
, key
);
357 return NT_STATUS_INSUFFICIENT_RESOURCES
;
360 val
= dbwrap_record_get_value(rec
);
361 if (val
.dsize
!= 0) {
363 return NT_STATUS_INTERNAL_DB_CORRUPTION
;
374 struct smbXsrv_open_local_fetch_state
{
375 struct smbXsrv_open
*op
;
379 static void smbXsrv_open_local_fetch_parser(TDB_DATA key
, TDB_DATA data
,
382 struct smbXsrv_open_local_fetch_state
*state
=
383 (struct smbXsrv_open_local_fetch_state
*)private_data
;
386 if (data
.dsize
!= sizeof(ptr
)) {
387 state
->status
= NT_STATUS_INTERNAL_DB_ERROR
;
391 memcpy(&ptr
, data
.dptr
, data
.dsize
);
392 state
->op
= talloc_get_type_abort(ptr
, struct smbXsrv_open
);
393 state
->status
= NT_STATUS_OK
;
396 static NTSTATUS
smbXsrv_open_local_lookup(struct smbXsrv_open_table
*table
,
397 uint32_t open_local_id
,
398 uint32_t open_global_id
,
400 struct smbXsrv_open
**_open
)
402 struct smbXsrv_open_local_fetch_state state
= {
404 .status
= NT_STATUS_INTERNAL_ERROR
,
406 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
412 if (open_local_id
== 0) {
413 return NT_STATUS_FILE_CLOSED
;
417 /* this might happen before the end of negprot */
418 return NT_STATUS_FILE_CLOSED
;
421 if (table
->local
.db_ctx
== NULL
) {
422 return NT_STATUS_INTERNAL_ERROR
;
425 key
= smbXsrv_open_local_id_to_key(open_local_id
, key_buf
);
427 status
= dbwrap_parse_record(table
->local
.db_ctx
, key
,
428 smbXsrv_open_local_fetch_parser
,
430 if (NT_STATUS_EQUAL(status
, NT_STATUS_NOT_FOUND
)) {
431 return NT_STATUS_FILE_CLOSED
;
432 } else if (!NT_STATUS_IS_OK(status
)) {
435 if (!NT_STATUS_IS_OK(state
.status
)) {
439 if (NT_STATUS_EQUAL(state
.op
->status
, NT_STATUS_FILE_CLOSED
)) {
440 return NT_STATUS_FILE_CLOSED
;
443 if (open_global_id
== 0) {
444 /* make the global check a no-op for SMB1 */
445 open_global_id
= state
.op
->global
->open_global_id
;
448 if (state
.op
->global
->open_global_id
!= open_global_id
) {
449 return NT_STATUS_FILE_CLOSED
;
453 state
.op
->idle_time
= now
;
457 return state
.op
->status
;
460 static int smbXsrv_open_global_destructor(struct smbXsrv_open_global0
*global
)
465 static void smbXsrv_open_global_verify_record(struct db_record
*db_rec
,
469 struct smbXsrv_open_global0
**_g
);
471 static NTSTATUS
smbXsrv_open_global_allocate(struct db_context
*db
,
473 struct smbXsrv_open_global0
**_global
)
476 struct smbXsrv_open_global0
*global
= NULL
;
477 uint32_t last_free
= 0;
478 const uint32_t min_tries
= 3;
482 global
= talloc_zero(mem_ctx
, struct smbXsrv_open_global0
);
483 if (global
== NULL
) {
484 return NT_STATUS_NO_MEMORY
;
486 talloc_set_destructor(global
, smbXsrv_open_global_destructor
);
489 * Here we just randomly try the whole 32-bit space
491 * We use just 32-bit, because we want to reuse the
494 for (i
= 0; i
< UINT32_MAX
; i
++) {
495 bool is_free
= false;
496 bool was_free
= false;
498 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
501 if (i
>= min_tries
&& last_free
!= 0) {
504 id
= generate_random();
509 if (id
== UINT32_MAX
) {
513 key
= smbXsrv_open_global_id_to_key(id
, key_buf
);
515 global
->db_rec
= dbwrap_fetch_locked(db
, mem_ctx
, key
);
516 if (global
->db_rec
== NULL
) {
518 return NT_STATUS_INSUFFICIENT_RESOURCES
;
521 smbXsrv_open_global_verify_record(global
->db_rec
,
527 TALLOC_FREE(global
->db_rec
);
531 if (!was_free
&& i
< min_tries
) {
533 * The session_id is free now,
534 * but was not free before.
536 * This happens if a smbd crashed
537 * and did not cleanup the record.
539 * If this is one of our first tries,
540 * then we try to find a real free one.
542 if (last_free
== 0) {
545 TALLOC_FREE(global
->db_rec
);
549 global
->open_global_id
= id
;
555 /* should not be reached */
557 return NT_STATUS_INTERNAL_ERROR
;
560 static void smbXsrv_open_global_verify_record(struct db_record
*db_rec
,
564 struct smbXsrv_open_global0
**_g
)
569 struct smbXsrv_open_globalB global_blob
;
570 enum ndr_err_code ndr_err
;
571 struct smbXsrv_open_global0
*global
= NULL
;
573 TALLOC_CTX
*frame
= talloc_stackframe();
584 key
= dbwrap_record_get_key(db_rec
);
586 val
= dbwrap_record_get_value(db_rec
);
587 if (val
.dsize
== 0) {
588 DEBUG(10, ("%s: empty value\n", __func__
));
597 blob
= data_blob_const(val
.dptr
, val
.dsize
);
599 ndr_err
= ndr_pull_struct_blob(&blob
, frame
, &global_blob
,
600 (ndr_pull_flags_fn_t
)ndr_pull_smbXsrv_open_globalB
);
601 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
602 NTSTATUS status
= ndr_map_error2ntstatus(ndr_err
);
603 DEBUG(1,("smbXsrv_open_global_verify_record: "
604 "key '%s' ndr_pull_struct_blob - %s\n",
605 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
611 DEBUG(10,("smbXsrv_open_global_verify_record\n"));
612 if (CHECK_DEBUGLVL(10)) {
613 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
616 if (global_blob
.version
!= SMBXSRV_VERSION_0
) {
617 DEBUG(0,("smbXsrv_open_global_verify_record: "
618 "key '%s' use unsupported version %u\n",
619 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
620 global_blob
.version
));
621 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
626 global
= global_blob
.info
.info0
;
628 if (server_id_is_disconnected(&global
->server_id
)) {
631 exists
= serverid_exists(&global
->server_id
);
634 DEBUG(2,("smbXsrv_open_global_verify_record: "
635 "key '%s' server_id %s does not exist.\n",
636 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
637 server_id_str(frame
, &global
->server_id
)));
638 if (CHECK_DEBUGLVL(2)) {
639 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
642 dbwrap_record_delete(db_rec
);
648 *_g
= talloc_move(mem_ctx
, &global
);
653 static NTSTATUS
smbXsrv_open_global_store(struct smbXsrv_open_global0
*global
)
655 struct smbXsrv_open_globalB global_blob
;
656 DATA_BLOB blob
= data_blob_null
;
660 enum ndr_err_code ndr_err
;
663 * TODO: if we use other versions than '0'
664 * we would add glue code here, that would be able to
665 * store the information in the old format.
668 if (global
->db_rec
== NULL
) {
669 return NT_STATUS_INTERNAL_ERROR
;
672 key
= dbwrap_record_get_key(global
->db_rec
);
673 val
= dbwrap_record_get_value(global
->db_rec
);
675 ZERO_STRUCT(global_blob
);
676 global_blob
.version
= smbXsrv_version_global_current();
677 if (val
.dsize
>= 8) {
678 global_blob
.seqnum
= IVAL(val
.dptr
, 4);
680 global_blob
.seqnum
+= 1;
681 global_blob
.info
.info0
= global
;
683 ndr_err
= ndr_push_struct_blob(&blob
, global
->db_rec
, &global_blob
,
684 (ndr_push_flags_fn_t
)ndr_push_smbXsrv_open_globalB
);
685 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
686 status
= ndr_map_error2ntstatus(ndr_err
);
687 DEBUG(1,("smbXsrv_open_global_store: key '%s' ndr_push - %s\n",
688 hex_encode_talloc(global
->db_rec
, key
.dptr
, key
.dsize
),
690 TALLOC_FREE(global
->db_rec
);
694 val
= make_tdb_data(blob
.data
, blob
.length
);
695 status
= dbwrap_record_store(global
->db_rec
, val
, TDB_REPLACE
);
696 if (!NT_STATUS_IS_OK(status
)) {
697 DEBUG(1,("smbXsrv_open_global_store: key '%s' store - %s\n",
698 hex_encode_talloc(global
->db_rec
, key
.dptr
, key
.dsize
),
700 TALLOC_FREE(global
->db_rec
);
704 if (CHECK_DEBUGLVL(10)) {
705 DEBUG(10,("smbXsrv_open_global_store: key '%s' stored\n",
706 hex_encode_talloc(global
->db_rec
, key
.dptr
, key
.dsize
)));
707 NDR_PRINT_DEBUG(smbXsrv_open_globalB
, &global_blob
);
710 TALLOC_FREE(global
->db_rec
);
715 static NTSTATUS
smbXsrv_open_global_lookup(struct smbXsrv_open_table
*table
,
716 uint32_t open_global_id
,
718 struct smbXsrv_open_global0
**_global
)
721 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
722 struct db_record
*global_rec
= NULL
;
723 bool is_free
= false;
727 if (table
->global
.db_ctx
== NULL
) {
728 return NT_STATUS_INTERNAL_ERROR
;
731 key
= smbXsrv_open_global_id_to_key(open_global_id
, key_buf
);
733 global_rec
= dbwrap_fetch_locked(table
->global
.db_ctx
, mem_ctx
, key
);
734 if (global_rec
== NULL
) {
735 DEBUG(0, ("smbXsrv_open_global_lookup(0x%08x): "
736 "Failed to lock global key '%s'\n",
738 hex_encode_talloc(talloc_tos(), key
.dptr
,
740 return NT_STATUS_INTERNAL_DB_ERROR
;
743 smbXsrv_open_global_verify_record(global_rec
,
749 DEBUG(10, ("%s: is_free=true\n", __func__
));
750 talloc_free(global_rec
);
751 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
754 (*_global
)->db_rec
= talloc_move(*_global
, &global_rec
);
756 talloc_set_destructor(*_global
, smbXsrv_open_global_destructor
);
761 static int smbXsrv_open_destructor(struct smbXsrv_open
*op
)
765 status
= smbXsrv_open_close(op
, 0);
766 if (!NT_STATUS_IS_OK(status
)) {
767 DEBUG(0, ("smbXsrv_open_destructor: "
768 "smbXsrv_open_close() failed - %s\n",
772 TALLOC_FREE(op
->global
);
777 NTSTATUS
smbXsrv_open_create(struct smbXsrv_connection
*conn
,
778 struct auth_session_info
*session_info
,
780 struct smbXsrv_open
**_open
)
782 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
783 struct db_record
*local_rec
= NULL
;
784 struct smbXsrv_open
*op
= NULL
;
787 struct smbXsrv_open_global0
*global
= NULL
;
789 struct dom_sid
*current_sid
= NULL
;
790 struct security_token
*current_token
= NULL
;
792 if (session_info
== NULL
) {
793 return NT_STATUS_INVALID_HANDLE
;
795 current_token
= session_info
->security_token
;
797 if (current_token
== NULL
) {
798 return NT_STATUS_INVALID_HANDLE
;
801 if (current_token
->num_sids
> PRIMARY_USER_SID_INDEX
) {
802 current_sid
= ¤t_token
->sids
[PRIMARY_USER_SID_INDEX
];
805 if (current_sid
== NULL
) {
806 return NT_STATUS_INVALID_HANDLE
;
809 if (table
->local
.num_opens
>= table
->local
.max_opens
) {
810 return NT_STATUS_INSUFFICIENT_RESOURCES
;
813 op
= talloc_zero(table
, struct smbXsrv_open
);
815 return NT_STATUS_NO_MEMORY
;
818 op
->status
= NT_STATUS_OK
; /* TODO: start with INTERNAL_ERROR */
821 status
= smbXsrv_open_global_allocate(table
->global
.db_ctx
,
823 if (!NT_STATUS_IS_OK(status
)) {
829 status
= smbXsrv_open_local_allocate_id(table
->local
.db_ctx
,
830 table
->local
.lowest_id
,
831 table
->local
.highest_id
,
835 if (!NT_STATUS_IS_OK(status
)) {
840 global
->open_persistent_id
= global
->open_global_id
;
841 global
->open_volatile_id
= op
->local_id
;
843 global
->server_id
= messaging_server_id(conn
->msg_ctx
);
844 global
->open_time
= now
;
845 global
->open_owner
= *current_sid
;
846 if (conn
->protocol
>= PROTOCOL_SMB2_10
) {
847 global
->client_guid
= conn
->smb2
.client
.guid
;
851 val
= make_tdb_data((uint8_t const *)&ptr
, sizeof(ptr
));
852 status
= dbwrap_record_store(local_rec
, val
, TDB_REPLACE
);
853 TALLOC_FREE(local_rec
);
854 if (!NT_STATUS_IS_OK(status
)) {
858 table
->local
.num_opens
+= 1;
860 talloc_set_destructor(op
, smbXsrv_open_destructor
);
862 status
= smbXsrv_open_global_store(global
);
863 if (!NT_STATUS_IS_OK(status
)) {
864 DEBUG(0,("smbXsrv_open_create: "
865 "global_id (0x%08x) store failed - %s\n",
866 op
->global
->open_global_id
,
872 if (CHECK_DEBUGLVL(10)) {
873 struct smbXsrv_openB open_blob
;
875 ZERO_STRUCT(open_blob
);
876 open_blob
.version
= SMBXSRV_VERSION_0
;
877 open_blob
.info
.info0
= op
;
879 DEBUG(10,("smbXsrv_open_create: global_id (0x%08x) stored\n",
880 op
->global
->open_global_id
));
881 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
888 uint32_t smbXsrv_open_hash(struct smbXsrv_open
*_open
)
893 SBVAL(buf
, 0, _open
->global
->open_persistent_id
);
894 SBVAL(buf
, 8, _open
->global
->open_volatile_id
);
895 SBVAL(buf
, 16, _open
->global
->open_time
);
897 ret
= hash(buf
, sizeof(buf
), 0);
906 NTSTATUS
smbXsrv_open_update(struct smbXsrv_open
*op
)
908 struct smbXsrv_open_table
*table
= op
->table
;
910 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
913 if (op
->global
->db_rec
!= NULL
) {
914 DEBUG(0, ("smbXsrv_open_update(0x%08x): "
915 "Called with db_rec != NULL'\n",
916 op
->global
->open_global_id
));
917 return NT_STATUS_INTERNAL_ERROR
;
920 key
= smbXsrv_open_global_id_to_key(op
->global
->open_global_id
,
923 op
->global
->db_rec
= dbwrap_fetch_locked(table
->global
.db_ctx
,
925 if (op
->global
->db_rec
== NULL
) {
926 DEBUG(0, ("smbXsrv_open_update(0x%08x): "
927 "Failed to lock global key '%s'\n",
928 op
->global
->open_global_id
,
929 hex_encode_talloc(talloc_tos(), key
.dptr
,
931 return NT_STATUS_INTERNAL_DB_ERROR
;
934 status
= smbXsrv_open_global_store(op
->global
);
935 if (!NT_STATUS_IS_OK(status
)) {
936 DEBUG(0,("smbXsrv_open_update: "
937 "global_id (0x%08x) store failed - %s\n",
938 op
->global
->open_global_id
,
943 if (CHECK_DEBUGLVL(10)) {
944 struct smbXsrv_openB open_blob
;
946 ZERO_STRUCT(open_blob
);
947 open_blob
.version
= SMBXSRV_VERSION_0
;
948 open_blob
.info
.info0
= op
;
950 DEBUG(10,("smbXsrv_open_update: global_id (0x%08x) stored\n",
951 op
->global
->open_global_id
));
952 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
958 NTSTATUS
smbXsrv_open_close(struct smbXsrv_open
*op
, NTTIME now
)
960 struct smbXsrv_open_table
*table
;
961 struct db_record
*local_rec
= NULL
;
962 struct db_record
*global_rec
= NULL
;
964 NTSTATUS error
= NT_STATUS_OK
;
966 if (op
->table
== NULL
) {
973 op
->status
= NT_STATUS_FILE_CLOSED
;
974 op
->global
->disconnect_time
= now
;
975 server_id_set_disconnected(&op
->global
->server_id
);
977 global_rec
= op
->global
->db_rec
;
978 op
->global
->db_rec
= NULL
;
979 if (global_rec
== NULL
) {
980 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
983 key
= smbXsrv_open_global_id_to_key(
984 op
->global
->open_global_id
,
987 global_rec
= dbwrap_fetch_locked(table
->global
.db_ctx
,
989 if (global_rec
== NULL
) {
990 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
991 "Failed to lock global key '%s'\n",
992 op
->global
->open_global_id
,
993 hex_encode_talloc(global_rec
, key
.dptr
,
995 error
= NT_STATUS_INTERNAL_ERROR
;
999 if (global_rec
!= NULL
&& op
->global
->durable
) {
1001 * If it is a durable open we need to update the global part
1002 * instead of deleting it
1004 op
->global
->db_rec
= global_rec
;
1005 status
= smbXsrv_open_global_store(op
->global
);
1006 if (NT_STATUS_IS_OK(status
)) {
1008 * smbXsrv_open_global_store does the free
1009 * of op->global->db_rec
1013 if (!NT_STATUS_IS_OK(status
)) {
1014 DEBUG(0,("smbXsrv_open_close(0x%08x)"
1015 "smbXsrv_open_global_store() failed - %s\n",
1016 op
->global
->open_global_id
,
1017 nt_errstr(status
)));
1021 if (NT_STATUS_IS_OK(status
) && CHECK_DEBUGLVL(10)) {
1022 struct smbXsrv_openB open_blob
;
1024 ZERO_STRUCT(open_blob
);
1025 open_blob
.version
= SMBXSRV_VERSION_0
;
1026 open_blob
.info
.info0
= op
;
1028 DEBUG(10,("smbXsrv_open_close(0x%08x): "
1029 "stored disconnect\n",
1030 op
->global
->open_global_id
));
1031 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
1035 if (global_rec
!= NULL
) {
1036 status
= dbwrap_record_delete(global_rec
);
1037 if (!NT_STATUS_IS_OK(status
)) {
1038 TDB_DATA key
= dbwrap_record_get_key(global_rec
);
1040 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
1041 "failed to delete global key '%s': %s\n",
1042 op
->global
->open_global_id
,
1043 hex_encode_talloc(global_rec
, key
.dptr
,
1045 nt_errstr(status
)));
1049 TALLOC_FREE(global_rec
);
1051 local_rec
= op
->db_rec
;
1052 if (local_rec
== NULL
) {
1053 uint8_t key_buf
[SMBXSRV_OPEN_LOCAL_TDB_KEY_SIZE
];
1056 key
= smbXsrv_open_local_id_to_key(op
->local_id
, key_buf
);
1058 local_rec
= dbwrap_fetch_locked(table
->local
.db_ctx
,
1060 if (local_rec
== NULL
) {
1061 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
1062 "Failed to lock local key '%s'\n",
1063 op
->global
->open_global_id
,
1064 hex_encode_talloc(local_rec
, key
.dptr
,
1066 error
= NT_STATUS_INTERNAL_ERROR
;
1070 if (local_rec
!= NULL
) {
1071 status
= dbwrap_record_delete(local_rec
);
1072 if (!NT_STATUS_IS_OK(status
)) {
1073 TDB_DATA key
= dbwrap_record_get_key(local_rec
);
1075 DEBUG(0, ("smbXsrv_open_close(0x%08x): "
1076 "failed to delete local key '%s': %s\n",
1077 op
->global
->open_global_id
,
1078 hex_encode_talloc(local_rec
, key
.dptr
,
1080 nt_errstr(status
)));
1083 table
->local
.num_opens
-= 1;
1085 if (op
->db_rec
== NULL
) {
1086 TALLOC_FREE(local_rec
);
1091 op
->compat
->op
= NULL
;
1092 file_free(NULL
, op
->compat
);
1099 NTSTATUS
smb1srv_open_table_init(struct smbXsrv_connection
*conn
)
1104 * Allow a range from 1..65534.
1106 * With real_max_open_files possible ids,
1107 * truncated to the SMB1 limit of 16-bit.
1109 * 0 and 0xFFFF are no valid ids.
1111 max_opens
= conn
->client
->sconn
->real_max_open_files
;
1112 max_opens
= MIN(max_opens
, UINT16_MAX
- 1);
1114 return smbXsrv_open_table_init(conn
, 1, UINT16_MAX
- 1, max_opens
);
1117 NTSTATUS
smb1srv_open_lookup(struct smbXsrv_connection
*conn
,
1118 uint16_t fnum
, NTTIME now
,
1119 struct smbXsrv_open
**_open
)
1121 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
1122 uint32_t local_id
= fnum
;
1123 uint32_t global_id
= 0;
1125 return smbXsrv_open_local_lookup(table
, local_id
, global_id
, now
, _open
);
1128 NTSTATUS
smb2srv_open_table_init(struct smbXsrv_connection
*conn
)
1133 * Allow a range from 1..4294967294.
1135 * With real_max_open_files possible ids,
1136 * truncated to 16-bit (the same as SMB1 for now).
1138 * 0 and 0xFFFFFFFF are no valid ids.
1140 * The usage of conn->sconn->real_max_open_files
1141 * is the reason that we use one open table per
1142 * transport connection (as we still have a 1:1 mapping
1143 * between process and transport connection).
1145 max_opens
= conn
->client
->sconn
->real_max_open_files
;
1146 max_opens
= MIN(max_opens
, UINT16_MAX
- 1);
1148 return smbXsrv_open_table_init(conn
, 1, UINT32_MAX
- 1, max_opens
);
1151 NTSTATUS
smb2srv_open_lookup(struct smbXsrv_connection
*conn
,
1152 uint64_t persistent_id
,
1153 uint64_t volatile_id
,
1155 struct smbXsrv_open
**_open
)
1157 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
1158 uint32_t local_id
= volatile_id
& UINT32_MAX
;
1159 uint64_t local_zeros
= volatile_id
& 0xFFFFFFFF00000000LLU
;
1160 uint32_t global_id
= persistent_id
& UINT32_MAX
;
1161 uint64_t global_zeros
= persistent_id
& 0xFFFFFFFF00000000LLU
;
1163 if (local_zeros
!= 0) {
1164 return NT_STATUS_FILE_CLOSED
;
1167 if (global_zeros
!= 0) {
1168 return NT_STATUS_FILE_CLOSED
;
1171 if (global_id
== 0) {
1172 return NT_STATUS_FILE_CLOSED
;
1175 return smbXsrv_open_local_lookup(table
, local_id
, global_id
, now
, _open
);
1178 NTSTATUS
smb2srv_open_recreate(struct smbXsrv_connection
*conn
,
1179 struct auth_session_info
*session_info
,
1180 uint64_t persistent_id
,
1181 const struct GUID
*create_guid
,
1183 struct smbXsrv_open
**_open
)
1185 struct smbXsrv_open_table
*table
= conn
->client
->open_table
;
1186 struct db_record
*local_rec
= NULL
;
1187 struct smbXsrv_open
*op
= NULL
;
1190 uint32_t global_id
= persistent_id
& UINT32_MAX
;
1191 uint64_t global_zeros
= persistent_id
& 0xFFFFFFFF00000000LLU
;
1193 struct security_token
*current_token
= NULL
;
1195 if (session_info
== NULL
) {
1196 DEBUG(10, ("session_info=NULL\n"));
1197 return NT_STATUS_INVALID_HANDLE
;
1199 current_token
= session_info
->security_token
;
1201 if (current_token
== NULL
) {
1202 DEBUG(10, ("current_token=NULL\n"));
1203 return NT_STATUS_INVALID_HANDLE
;
1206 if (global_zeros
!= 0) {
1207 DEBUG(10, ("global_zeros!=0\n"));
1208 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1211 op
= talloc_zero(table
, struct smbXsrv_open
);
1213 return NT_STATUS_NO_MEMORY
;
1217 status
= smbXsrv_open_global_lookup(table
, global_id
, op
, &op
->global
);
1218 if (!NT_STATUS_IS_OK(status
)) {
1220 DEBUG(10, ("smbXsrv_open_global_lookup returned %s\n",
1221 nt_errstr(status
)));
1226 * If the provided create_guid is NULL, this means that
1227 * the reconnect request was a v1 request. In that case
1228 * we should skipt the create GUID verification, since
1229 * it is valid to v1-reconnect a v2-opened handle.
1231 if ((create_guid
!= NULL
) &&
1232 !GUID_equal(&op
->global
->create_guid
, create_guid
))
1235 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1238 if (!security_token_is_sid(current_token
, &op
->global
->open_owner
)) {
1240 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1243 if (!op
->global
->durable
) {
1245 return NT_STATUS_OBJECT_NAME_NOT_FOUND
;
1248 if (table
->local
.num_opens
>= table
->local
.max_opens
) {
1250 return NT_STATUS_INSUFFICIENT_RESOURCES
;
1253 status
= smbXsrv_open_local_allocate_id(table
->local
.db_ctx
,
1254 table
->local
.lowest_id
,
1255 table
->local
.highest_id
,
1259 if (!NT_STATUS_IS_OK(status
)) {
1264 op
->idle_time
= now
;
1265 op
->status
= NT_STATUS_FILE_CLOSED
;
1267 op
->global
->open_volatile_id
= op
->local_id
;
1268 op
->global
->server_id
= messaging_server_id(conn
->msg_ctx
);
1271 val
= make_tdb_data((uint8_t const *)&ptr
, sizeof(ptr
));
1272 status
= dbwrap_record_store(local_rec
, val
, TDB_REPLACE
);
1273 TALLOC_FREE(local_rec
);
1274 if (!NT_STATUS_IS_OK(status
)) {
1278 table
->local
.num_opens
+= 1;
1280 talloc_set_destructor(op
, smbXsrv_open_destructor
);
1282 status
= smbXsrv_open_global_store(op
->global
);
1283 if (!NT_STATUS_IS_OK(status
)) {
1288 if (CHECK_DEBUGLVL(10)) {
1289 struct smbXsrv_openB open_blob
;
1291 ZERO_STRUCT(open_blob
);
1292 open_blob
.version
= 0;
1293 open_blob
.info
.info0
= op
;
1295 DEBUG(10,("smbXsrv_open_recreate: global_id (0x%08x) stored\n",
1296 op
->global
->open_global_id
));
1297 NDR_PRINT_DEBUG(smbXsrv_openB
, &open_blob
);
1301 return NT_STATUS_OK
;
1305 static NTSTATUS
smbXsrv_open_global_parse_record(TALLOC_CTX
*mem_ctx
,
1306 struct db_record
*rec
,
1307 struct smbXsrv_open_global0
**global
)
1309 TDB_DATA key
= dbwrap_record_get_key(rec
);
1310 TDB_DATA val
= dbwrap_record_get_value(rec
);
1311 DATA_BLOB blob
= data_blob_const(val
.dptr
, val
.dsize
);
1312 struct smbXsrv_open_globalB global_blob
;
1313 enum ndr_err_code ndr_err
;
1315 TALLOC_CTX
*frame
= talloc_stackframe();
1317 ndr_err
= ndr_pull_struct_blob(&blob
, frame
, &global_blob
,
1318 (ndr_pull_flags_fn_t
)ndr_pull_smbXsrv_open_globalB
);
1319 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1320 DEBUG(1,("Invalid record in smbXsrv_open_global.tdb:"
1321 "key '%s' ndr_pull_struct_blob - %s\n",
1322 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
1323 ndr_errstr(ndr_err
)));
1324 status
= ndr_map_error2ntstatus(ndr_err
);
1328 if (global_blob
.version
!= SMBXSRV_VERSION_0
) {
1329 status
= NT_STATUS_INTERNAL_DB_CORRUPTION
;
1330 DEBUG(1,("Invalid record in smbXsrv_open_global.tdb:"
1331 "key '%s' unsuported version - %d - %s\n",
1332 hex_encode_talloc(frame
, key
.dptr
, key
.dsize
),
1333 (int)global_blob
.version
,
1334 nt_errstr(status
)));
1338 *global
= talloc_move(mem_ctx
, &global_blob
.info
.info0
);
1339 status
= NT_STATUS_OK
;
1345 struct smbXsrv_open_global_traverse_state
{
1346 int (*fn
)(struct smbXsrv_open_global0
*, void *);
1350 static int smbXsrv_open_global_traverse_fn(struct db_record
*rec
, void *data
)
1352 struct smbXsrv_open_global_traverse_state
*state
=
1353 (struct smbXsrv_open_global_traverse_state
*)data
;
1354 struct smbXsrv_open_global0
*global
= NULL
;
1358 status
= smbXsrv_open_global_parse_record(talloc_tos(), rec
, &global
);
1359 if (!NT_STATUS_IS_OK(status
)) {
1363 global
->db_rec
= rec
;
1364 ret
= state
->fn(global
, state
->private_data
);
1365 talloc_free(global
);
1369 NTSTATUS
smbXsrv_open_global_traverse(
1370 int (*fn
)(struct smbXsrv_open_global0
*, void *),
1376 struct smbXsrv_open_global_traverse_state state
= {
1378 .private_data
= private_data
,
1382 status
= smbXsrv_open_global_init();
1383 if (!NT_STATUS_IS_OK(status
)) {
1385 DEBUG(0, ("Failed to initialize open_global: %s\n",
1386 nt_errstr(status
)));
1390 status
= dbwrap_traverse_read(smbXsrv_open_global_db_ctx
,
1391 smbXsrv_open_global_traverse_fn
,
1399 NTSTATUS
smbXsrv_open_cleanup(uint64_t persistent_id
)
1401 NTSTATUS status
= NT_STATUS_OK
;
1402 TALLOC_CTX
*frame
= talloc_stackframe();
1403 struct smbXsrv_open_global0
*op
= NULL
;
1404 uint8_t key_buf
[SMBXSRV_OPEN_GLOBAL_TDB_KEY_SIZE
];
1407 struct db_record
*rec
;
1408 bool delete_open
= false;
1409 uint32_t global_id
= persistent_id
& UINT32_MAX
;
1411 key
= smbXsrv_open_global_id_to_key(global_id
, key_buf
);
1412 rec
= dbwrap_fetch_locked(smbXsrv_open_global_db_ctx
, frame
, key
);
1414 status
= NT_STATUS_NOT_FOUND
;
1415 DEBUG(1, ("smbXsrv_open_cleanup[global: 0x%08x] "
1416 "failed to fetch record from %s - %s\n",
1417 global_id
, dbwrap_name(smbXsrv_open_global_db_ctx
),
1418 nt_errstr(status
)));
1422 val
= dbwrap_record_get_value(rec
);
1423 if (val
.dsize
== 0) {
1424 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1425 "empty record in %s, skipping...\n",
1426 global_id
, dbwrap_name(smbXsrv_open_global_db_ctx
)));
1430 status
= smbXsrv_open_global_parse_record(talloc_tos(), rec
, &op
);
1431 if (!NT_STATUS_IS_OK(status
)) {
1432 DEBUG(1, ("smbXsrv_open_cleanup[global: 0x%08x] "
1433 "failed to read record: %s\n",
1434 global_id
, nt_errstr(status
)));
1438 if (server_id_is_disconnected(&op
->server_id
)) {
1439 struct timeval now
, disconnect_time
;
1441 now
= timeval_current();
1442 nttime_to_timeval(&disconnect_time
, op
->disconnect_time
);
1443 tdiff
= usec_time_diff(&now
, &disconnect_time
);
1444 delete_open
= (tdiff
>= 1000*op
->durable_timeout_msec
);
1446 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1447 "disconnected at [%s] %us ago with "
1448 "timeout of %us -%s reached\n",
1450 nt_time_string(frame
, op
->disconnect_time
),
1451 (unsigned)(tdiff
/1000000),
1452 op
->durable_timeout_msec
/ 1000,
1453 delete_open
? "" : " not"));
1454 } else if (!serverid_exists(&op
->server_id
)) {
1455 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1456 "server[%s] does not exist\n",
1457 global_id
, server_id_str(frame
, &op
->server_id
)));
1465 status
= dbwrap_record_delete(rec
);
1466 if (!NT_STATUS_IS_OK(status
)) {
1467 DEBUG(1, ("smbXsrv_open_cleanup[global: 0x%08x] "
1468 "failed to delete record"
1469 "from %s: %s\n", global_id
,
1470 dbwrap_name(smbXsrv_open_global_db_ctx
),
1471 nt_errstr(status
)));
1475 DEBUG(10, ("smbXsrv_open_cleanup[global: 0x%08x] "
1476 "delete record from %s\n",
1478 dbwrap_name(smbXsrv_open_global_db_ctx
)));