2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Tridgell 1994-1998
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 12 aug 96: Erik.Devriendt@te6.siemens.be
22 added support for shared memory implementation of share mode locking
24 21-Jul-1998: rsharpe@ns.aus.com (Richard Sharpe)
25 Added -L (locks only) -S (shares only) flags and code
30 * This program reports current SMB connections
34 #include "smbd/globals.h"
35 #include "system/filesys.h"
36 #include "popt_common.h"
37 #include "dbwrap/dbwrap.h"
38 #include "dbwrap/dbwrap_open.h"
39 #include "../libcli/security/security.h"
41 #include "locking/proto.h"
43 #include "librpc/gen_ndr/open_files.h"
44 #include "smbd/smbd.h"
45 #include "librpc/gen_ndr/notify.h"
46 #include "lib/conn_tdb.h"
48 #include "status_profile.h"
49 #include "smbd/notifyd/notifyd.h"
51 #define SMB_MAXPIDS 2048
52 static uid_t Ucrit_uid
= 0; /* added by OH */
53 static struct server_id Ucrit_pid
[SMB_MAXPIDS
]; /* Ugly !!! */ /* added by OH */
54 static int Ucrit_MaxPid
=0; /* added by OH */
55 static unsigned int Ucrit_IsActive
= 0; /* added by OH */
57 static bool verbose
, brief
;
58 static bool shares_only
; /* Added by RJS */
59 static bool locks_only
; /* Added by RJS */
60 static bool processes_only
;
62 static bool numeric_only
;
63 static bool do_checks
= true;
65 const char *username
= NULL
;
68 static void Ucrit_addUid(uid_t uid
)
74 static unsigned int Ucrit_checkUid(uid_t uid
)
76 if ( !Ucrit_IsActive
)
79 if ( uid
== Ucrit_uid
)
85 static unsigned int Ucrit_checkPid(struct server_id pid
)
89 if ( !Ucrit_IsActive
)
92 for (i
=0;i
<Ucrit_MaxPid
;i
++) {
93 if (serverid_equal(&pid
, &Ucrit_pid
[i
])) {
101 static bool Ucrit_addPid( struct server_id pid
)
103 if ( !Ucrit_IsActive
)
106 if ( Ucrit_MaxPid
>= SMB_MAXPIDS
) {
107 d_printf("ERROR: More than %d pids for user %s!\n",
108 SMB_MAXPIDS
, uidtoname(Ucrit_uid
));
113 Ucrit_pid
[Ucrit_MaxPid
++] = pid
;
118 static int print_share_mode(const struct share_mode_entry
*e
,
119 const char *sharepath
,
126 if (do_checks
&& !is_valid_share_mode_entry(e
)) {
131 d_printf("Locked files:\n");
132 d_printf("Pid Uid DenyMode Access R/W Oplock SharePath Name Time\n");
133 d_printf("--------------------------------------------------------------------------------------------------\n");
137 if (do_checks
&& !serverid_exists(&e
->pid
)) {
138 /* the process for this entry does not exist any more */
142 if (Ucrit_checkPid(e
->pid
)) {
143 struct server_id_buf tmp
;
144 d_printf("%-11s ", server_id_str_buf(e
->pid
, &tmp
));
145 d_printf("%-9u ", (unsigned int)e
->uid
);
146 switch (map_share_mode_to_deny_mode(e
->share_access
,
147 e
->private_options
)) {
148 case DENY_NONE
: d_printf("DENY_NONE "); break;
149 case DENY_ALL
: d_printf("DENY_ALL "); break;
150 case DENY_DOS
: d_printf("DENY_DOS "); break;
151 case DENY_READ
: d_printf("DENY_READ "); break;
152 case DENY_WRITE
:printf("DENY_WRITE "); break;
153 case DENY_FCB
: d_printf("DENY_FCB "); break;
155 d_printf("unknown-please report ! "
156 "e->share_access = 0x%x, "
157 "e->private_options = 0x%x\n",
158 (unsigned int)e
->share_access
,
159 (unsigned int)e
->private_options
);
163 d_printf("0x%-8x ",(unsigned int)e
->access_mask
);
164 if ((e
->access_mask
& (FILE_READ_DATA
|FILE_WRITE_DATA
))==
165 (FILE_READ_DATA
|FILE_WRITE_DATA
)) {
167 } else if (e
->access_mask
& FILE_WRITE_DATA
) {
173 if((e
->op_type
& (EXCLUSIVE_OPLOCK
|BATCH_OPLOCK
)) ==
174 (EXCLUSIVE_OPLOCK
|BATCH_OPLOCK
)) {
175 d_printf("EXCLUSIVE+BATCH ");
176 } else if (e
->op_type
& EXCLUSIVE_OPLOCK
) {
177 d_printf("EXCLUSIVE ");
178 } else if (e
->op_type
& BATCH_OPLOCK
) {
180 } else if (e
->op_type
& LEVEL_II_OPLOCK
) {
181 d_printf("LEVEL_II ");
182 } else if (e
->op_type
== LEASE_OPLOCK
) {
183 uint32_t lstate
= e
->lease
->current_state
;
184 d_printf("LEASE(%s%s%s)%s%s%s ",
185 (lstate
& SMB2_LEASE_READ
)?"R":"",
186 (lstate
& SMB2_LEASE_WRITE
)?"W":"",
187 (lstate
& SMB2_LEASE_HANDLE
)?"H":"",
188 (lstate
& SMB2_LEASE_READ
)?"":" ",
189 (lstate
& SMB2_LEASE_WRITE
)?"":" ",
190 (lstate
& SMB2_LEASE_HANDLE
)?"":" ");
195 d_printf(" %s %s%s %s",
198 time_to_asc((time_t)e
->time
.tv_sec
));
204 static void print_brl(struct file_id id
,
205 struct server_id pid
,
206 enum brl_type lock_type
,
207 enum brl_flavour lock_flav
,
214 static const struct {
215 enum brl_type lock_type
;
220 { PENDING_READ_LOCK
, "PR" },
221 { PENDING_WRITE_LOCK
, "PW" },
224 const char *desc
="X";
225 const char *sharepath
= "";
227 struct share_mode_lock
*share_mode
;
228 struct server_id_buf tmp
;
231 d_printf("Byte range locks:\n");
232 d_printf("Pid dev:inode R/W start size SharePath Name\n");
233 d_printf("--------------------------------------------------------------------------------\n");
237 share_mode
= fetch_share_mode_unlocked(NULL
, id
);
239 bool has_stream
= share_mode
->data
->stream_name
!= NULL
;
241 fname
= talloc_asprintf(NULL
, "%s%s%s",
242 share_mode
->data
->base_name
,
243 has_stream
? ":" : "",
245 share_mode
->data
->stream_name
:
248 fname
= talloc_strdup(NULL
, "");
254 for (i
=0;i
<ARRAY_SIZE(lock_types
);i
++) {
255 if (lock_type
== lock_types
[i
].lock_type
) {
256 desc
= lock_types
[i
].desc
;
260 d_printf("%-10s %-15s %-4s %-9jd %-9jd %-24s %-24s\n",
261 server_id_str_buf(pid
, &tmp
), file_id_string_tos(&id
),
263 (intmax_t)start
, (intmax_t)size
,
267 TALLOC_FREE(share_mode
);
270 static const char *session_dialect_str(uint16_t dialect
)
272 static fstring unkown_dialect
;
275 case SMB2_DIALECT_REVISION_000
:
277 case SMB2_DIALECT_REVISION_202
:
279 case SMB2_DIALECT_REVISION_210
:
281 case SMB2_DIALECT_REVISION_222
:
283 case SMB2_DIALECT_REVISION_224
:
285 case SMB3_DIALECT_REVISION_300
:
287 case SMB3_DIALECT_REVISION_302
:
289 case SMB3_DIALECT_REVISION_310
:
291 case SMB3_DIALECT_REVISION_311
:
295 fstr_sprintf(unkown_dialect
, "Unknown (0x%04x)", dialect
);
296 return unkown_dialect
;
299 static int traverse_connections(const struct connections_key
*key
,
300 const struct connections_data
*crec
,
303 TALLOC_CTX
*mem_ctx
= (TALLOC_CTX
*)private_data
;
304 struct server_id_buf tmp
;
305 char *timestr
= NULL
;
307 const char *encryption
= "-";
308 const char *signing
= "-";
310 if (crec
->cnum
== TID_FIELD_INVALID
)
314 (!process_exists(crec
->pid
) || !Ucrit_checkUid(crec
->uid
))) {
318 timestr
= timestring(mem_ctx
, crec
->start
);
319 if (timestr
== NULL
) {
323 if (smbXsrv_is_encrypted(crec
->encryption_flags
)) {
324 switch (crec
->cipher
) {
325 case SMB_ENCRYPTION_GSSAPI
:
326 encryption
= "GSSAPI";
328 case SMB2_ENCRYPTION_AES128_CCM
:
329 encryption
= "AES-128-CCM";
331 case SMB2_ENCRYPTION_AES128_GCM
:
332 encryption
= "AES-128-GCM";
341 if (smbXsrv_is_signed(crec
->signing_flags
)) {
342 if (crec
->dialect
>= SMB3_DIALECT_REVISION_302
) {
343 signing
= "AES-128-CMAC";
344 } else if (crec
->dialect
>= SMB2_DIALECT_REVISION_202
) {
345 signing
= "HMAC-SHA256";
347 signing
= "HMAC-MD5";
351 d_printf("%-12s %-7s %-13s %-32s %-12s %-12s\n",
352 crec
->servicename
, server_id_str_buf(crec
->pid
, &tmp
),
358 TALLOC_FREE(timestr
);
363 static int traverse_sessionid(const char *key
, struct sessionid
*session
,
366 TALLOC_CTX
*mem_ctx
= (TALLOC_CTX
*)private_data
;
367 fstring uid_str
, gid_str
;
368 struct server_id_buf tmp
;
369 char *machine_hostname
= NULL
;
371 const char *encryption
= "-";
372 const char *signing
= "-";
375 (!process_exists(session
->pid
) ||
376 !Ucrit_checkUid(session
->uid
))) {
380 Ucrit_addPid(session
->pid
);
382 fstrcpy(uid_str
, "-1");
384 if (session
->uid
!= -1) {
386 fstr_sprintf(uid_str
, "%u", (unsigned int)session
->uid
);
388 fstrcpy(uid_str
, uidtoname(session
->uid
));
392 fstrcpy(gid_str
, "-1");
394 if (session
->gid
!= -1) {
396 fstr_sprintf(gid_str
, "%u", (unsigned int)session
->gid
);
398 fstrcpy(gid_str
, gidtoname(session
->gid
));
402 machine_hostname
= talloc_asprintf(mem_ctx
, "%s (%s)",
403 session
->remote_machine
,
405 if (machine_hostname
== NULL
) {
409 if (smbXsrv_is_encrypted(session
->encryption_flags
)) {
410 switch (session
->cipher
) {
411 case SMB2_ENCRYPTION_AES128_CCM
:
412 encryption
= "AES-128-CCM";
414 case SMB2_ENCRYPTION_AES128_GCM
:
415 encryption
= "AES-128-GCM";
422 } else if (smbXsrv_is_partially_encrypted(session
->encryption_flags
)) {
423 switch (session
->cipher
) {
424 case SMB_ENCRYPTION_GSSAPI
:
425 encryption
= "partial(GSSAPI)";
427 case SMB2_ENCRYPTION_AES128_CCM
:
428 encryption
= "partial(AES-128-CCM)";
430 case SMB2_ENCRYPTION_AES128_GCM
:
431 encryption
= "partial(AES-128-GCM)";
440 if (smbXsrv_is_signed(session
->signing_flags
)) {
441 if (session
->connection_dialect
>= SMB3_DIALECT_REVISION_302
) {
442 signing
= "AES-128-CMAC";
443 } else if (session
->connection_dialect
>= SMB2_DIALECT_REVISION_202
) {
444 signing
= "HMAC-SHA256";
446 signing
= "HMAC-MD5";
448 } else if (smbXsrv_is_partially_signed(session
->signing_flags
)) {
449 if (session
->connection_dialect
>= SMB3_DIALECT_REVISION_302
) {
450 signing
= "partial(AES-128-CMAC)";
451 } else if (session
->connection_dialect
>= SMB2_DIALECT_REVISION_202
) {
452 signing
= "partial(HMAC-SHA256)";
454 signing
= "partial(HMAC-MD5)";
459 d_printf("%-7s %-12s %-12s %-41s %-17s %-20s %-21s\n",
460 server_id_str_buf(session
->pid
, &tmp
),
463 session_dialect_str(session
->connection_dialect
),
467 TALLOC_FREE(machine_hostname
);
473 static bool print_notify_rec(const char *path
, struct server_id server
,
474 const struct notify_instance
*instance
,
477 struct server_id_buf idbuf
;
479 d_printf("%s\\%s\\%x\\%x\n", path
, server_id_str_buf(server
, &idbuf
),
480 (unsigned)instance
->filter
,
481 (unsigned)instance
->subdir_filter
);
486 int main(int argc
, const char *argv
[])
489 int profile_only
= 0;
490 bool show_processes
, show_locks
, show_shares
;
491 bool show_notify
= false;
493 struct poptOption long_options
[] = {
495 {"processes", 'p', POPT_ARG_NONE
, NULL
, 'p', "Show processes only" },
496 {"verbose", 'v', POPT_ARG_NONE
, NULL
, 'v', "Be verbose" },
497 {"locks", 'L', POPT_ARG_NONE
, NULL
, 'L', "Show locks only" },
498 {"shares", 'S', POPT_ARG_NONE
, NULL
, 'S', "Show shares only" },
499 {"notify", 'N', POPT_ARG_NONE
, NULL
, 'N', "Show notifies" },
500 {"user", 'u', POPT_ARG_STRING
, &username
, 'u', "Switch to user" },
501 {"brief", 'b', POPT_ARG_NONE
, NULL
, 'b', "Be brief" },
502 {"profile", 'P', POPT_ARG_NONE
, NULL
, 'P', "Do profiling" },
503 {"profile-rates", 'R', POPT_ARG_NONE
, NULL
, 'R', "Show call rates" },
504 {"byterange", 'B', POPT_ARG_NONE
, NULL
, 'B', "Include byte range locks"},
505 {"numeric", 'n', POPT_ARG_NONE
, NULL
, 'n', "Numeric uid/gid"},
506 {"fast", 'f', POPT_ARG_NONE
, NULL
, 'f', "Skip checks if processes still exist"},
510 TALLOC_CTX
*frame
= talloc_stackframe();
512 struct messaging_context
*msg_ctx
= NULL
;
519 setup_logging(argv
[0], DEBUG_STDERR
);
520 lp_set_cmdline("log level", "0");
522 if (getuid() != geteuid()) {
523 d_printf("smbstatus should not be run setuid\n");
529 d_printf("smbstatus only works as root!\n");
535 pc
= poptGetContext(NULL
, argc
, argv
, long_options
,
536 POPT_CONTEXT_KEEP_FIRST
);
538 while ((c
= poptGetNextOpt(pc
)) != -1) {
541 processes_only
= true;
559 Ucrit_addUid(nametouid(poptGetOptArg(pc
)));
577 /* setup the flags based on the possible combincations */
579 show_processes
= !(shares_only
|| locks_only
|| profile_only
) || processes_only
;
580 show_locks
= !(shares_only
|| processes_only
|| profile_only
) || locks_only
;
581 show_shares
= !(processes_only
|| locks_only
|| profile_only
) || shares_only
;
584 Ucrit_addUid( nametouid(username
) );
587 d_printf("using configfile = %s\n", get_dyn_CONFIGFILE());
590 if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
591 fprintf(stderr
, "Can't load %s - run testparm to debug it\n",
592 get_dyn_CONFIGFILE());
599 * This implicitly initializes the global ctdbd connection,
600 * usable by the db_open() calls further down.
602 msg_ctx
= messaging_init(NULL
, samba_tevent_context_init(NULL
));
603 if (msg_ctx
== NULL
) {
604 fprintf(stderr
, "messaging_init failed\n");
609 if (!lp_load_global(get_dyn_CONFIGFILE())) {
610 fprintf(stderr
, "Can't load %s - run testparm to debug it\n",
611 get_dyn_CONFIGFILE());
616 switch (profile_only
) {
618 /* Dump profile data */
619 ok
= status_profile_dump(verbose
);
622 /* Continuously display rate-converted data */
623 ok
= status_profile_rates(verbose
);
629 if ( show_processes
) {
630 d_printf("\nSamba version %s\n",samba_version_string());
631 d_printf("%-7s %-12s %-12s %-41s %-17s %-20s %-21s\n", "PID", "Username", "Group", "Machine", "Protocol Version", "Encryption", "Signing");
632 d_printf("----------------------------------------------------------------------------------------------------------------------------------------\n");
634 sessionid_traverse_read(traverse_sessionid
, frame
);
636 if (processes_only
) {
646 d_printf("\n%-12s %-7s %-13s %-32s %-12s %-12s\n", "Service", "pid", "Machine", "Connected at", "Encryption", "Signing");
647 d_printf("---------------------------------------------------------------------------------------------\n");
649 connections_forall_read(traverse_connections
, frame
);
660 struct db_context
*db
;
662 db_path
= lock_path("locking.tdb");
663 if (db_path
== NULL
) {
664 d_printf("Out of memory - exiting\n");
669 db
= db_open(NULL
, db_path
, 0,
670 TDB_CLEAR_IF_FIRST
|TDB_INCOMPATIBLE_HASH
, O_RDONLY
, 0,
671 DBWRAP_LOCK_ORDER_1
, DBWRAP_FLAG_NONE
);
674 d_printf("%s not initialised\n", db_path
);
675 d_printf("This is normal if an SMB client has never "
676 "connected to your server.\n");
677 TALLOC_FREE(db_path
);
681 TALLOC_FREE(db_path
);
684 if (!locking_init_readonly()) {
685 d_printf("Can't initialise locking module - exiting\n");
690 result
= share_entry_forall(print_share_mode
, NULL
);
693 d_printf("No locked files\n");
694 } else if (result
< 0) {
695 d_printf("locked file list truncated\n");
701 brl_forall(print_brl
, NULL
);
708 struct notify_context
*n
;
710 n
= notify_init(talloc_tos(), msg_ctx
,
711 messaging_tevent_context(msg_ctx
));
715 notify_walk(n
, print_notify_rec
, NULL
);