2 Unix SMB/CIFS implementation.
5 Copyright (C) Stefan Metzmacher 2009
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "smbd/smbd.h"
23 #include "smbd/globals.h"
24 #include "../libcli/smb/smb_common.h"
25 #include "../libcli/security/security.h"
27 #include "lib/param/loadparm.h"
28 #include "../lib/util/tevent_ntstatus.h"
31 #define DBGC_CLASS DBGC_SMB2
33 static struct tevent_req
*smbd_smb2_tree_connect_send(TALLOC_CTX
*mem_ctx
,
34 struct tevent_context
*ev
,
35 struct smbd_smb2_request
*smb2req
,
38 static NTSTATUS
smbd_smb2_tree_connect_recv(struct tevent_req
*req
,
39 uint8_t *out_share_type
,
40 uint32_t *out_share_flags
,
41 uint32_t *out_capabilities
,
42 uint32_t *out_maximal_access
,
43 uint32_t *out_tree_id
,
46 static void smbd_smb2_request_tcon_done(struct tevent_req
*subreq
);
48 NTSTATUS
smbd_smb2_request_process_tcon(struct smbd_smb2_request
*req
)
50 struct smbXsrv_connection
*xconn
= req
->xconn
;
51 const uint8_t *inbody
;
53 uint16_t in_path_offset
;
54 uint16_t in_path_length
;
55 DATA_BLOB in_path_buffer
;
57 size_t in_path_string_size
;
60 struct tevent_req
*subreq
;
62 status
= smbd_smb2_request_verify_sizes(req
, 0x09);
63 if (!NT_STATUS_IS_OK(status
)) {
64 return smbd_smb2_request_error(req
, status
);
66 inbody
= SMBD_SMB2_IN_BODY_PTR(req
);
68 if (xconn
->protocol
>= PROTOCOL_SMB3_11
) {
69 in_flags
= SVAL(inbody
, 0x02);
73 in_path_offset
= SVAL(inbody
, 0x04);
74 in_path_length
= SVAL(inbody
, 0x06);
76 if (in_path_offset
!= (SMB2_HDR_BODY
+ SMBD_SMB2_IN_BODY_LEN(req
))) {
77 return smbd_smb2_request_error(req
, NT_STATUS_INVALID_PARAMETER
);
80 if (in_path_length
> SMBD_SMB2_IN_DYN_LEN(req
)) {
81 return smbd_smb2_request_error(req
, NT_STATUS_INVALID_PARAMETER
);
84 in_path_buffer
.data
= SMBD_SMB2_IN_DYN_PTR(req
);
85 in_path_buffer
.length
= in_path_length
;
87 ok
= convert_string_talloc(req
, CH_UTF16
, CH_UNIX
,
89 in_path_buffer
.length
,
91 &in_path_string_size
);
93 return smbd_smb2_request_error(req
, NT_STATUS_ILLEGAL_CHARACTER
);
96 if (in_path_buffer
.length
== 0) {
97 in_path_string_size
= 0;
100 if (strlen(in_path_string
) != in_path_string_size
) {
101 return smbd_smb2_request_error(req
, NT_STATUS_BAD_NETWORK_NAME
);
104 subreq
= smbd_smb2_tree_connect_send(req
,
109 if (subreq
== NULL
) {
110 return smbd_smb2_request_error(req
, NT_STATUS_NO_MEMORY
);
112 tevent_req_set_callback(subreq
, smbd_smb2_request_tcon_done
, req
);
115 * Avoid sending a STATUS_PENDING message, it's very likely
116 * the client won't expect that.
118 return smbd_smb2_request_pending_queue(req
, subreq
, 0);
121 static void smbd_smb2_request_tcon_done(struct tevent_req
*subreq
)
123 struct smbd_smb2_request
*req
=
124 tevent_req_callback_data(subreq
,
125 struct smbd_smb2_request
);
128 uint8_t out_share_type
= 0;
129 uint32_t out_share_flags
= 0;
130 uint32_t out_capabilities
= 0;
131 uint32_t out_maximal_access
= 0;
132 uint32_t out_tree_id
= 0;
133 bool disconnect
= false;
137 status
= smbd_smb2_tree_connect_recv(subreq
,
145 if (!NT_STATUS_IS_OK(status
)) {
147 smbd_server_connection_terminate(req
->xconn
,
151 error
= smbd_smb2_request_error(req
, status
);
152 if (!NT_STATUS_IS_OK(error
)) {
153 smbd_server_connection_terminate(req
->xconn
,
160 outhdr
= SMBD_SMB2_OUT_HDR_PTR(req
);
162 outbody
= smbd_smb2_generate_outbody(req
, 0x10);
163 if (outbody
.data
== NULL
) {
164 error
= smbd_smb2_request_error(req
, NT_STATUS_NO_MEMORY
);
165 if (!NT_STATUS_IS_OK(error
)) {
166 smbd_server_connection_terminate(req
->xconn
,
173 SIVAL(outhdr
, SMB2_HDR_TID
, out_tree_id
);
175 SSVAL(outbody
.data
, 0x00, 0x10); /* struct size */
176 SCVAL(outbody
.data
, 0x02,
177 out_share_type
); /* share type */
178 SCVAL(outbody
.data
, 0x03, 0); /* reserved */
179 SIVAL(outbody
.data
, 0x04,
180 out_share_flags
); /* share flags */
181 SIVAL(outbody
.data
, 0x08,
182 out_capabilities
); /* capabilities */
183 SIVAL(outbody
.data
, 0x0C,
184 out_maximal_access
); /* maximal access */
186 error
= smbd_smb2_request_done(req
, outbody
, NULL
);
187 if (!NT_STATUS_IS_OK(error
)) {
188 smbd_server_connection_terminate(req
->xconn
,
194 static NTSTATUS
smbd_smb2_tree_connect(struct smbd_smb2_request
*req
,
196 uint8_t *out_share_type
,
197 uint32_t *out_share_flags
,
198 uint32_t *out_capabilities
,
199 uint32_t *out_maximal_access
,
200 uint32_t *out_tree_id
,
203 const struct loadparm_substitution
*lp_sub
=
204 loadparm_s3_global_substitution();
205 struct smbXsrv_connection
*conn
= req
->xconn
;
206 struct smbXsrv_session
*session
= req
->session
;
207 struct auth_session_info
*session_info
=
208 session
->global
->auth_session_info
;
209 const char *share
= in_path
;
210 char *service
= NULL
;
212 struct smbXsrv_tcon
*tcon
;
213 NTTIME now
= timeval_to_nttime(&req
->request_time
);
214 connection_struct
*compat_conn
= NULL
;
216 bool encryption_desired
= req
->session
->global
->encryption_flags
& SMBXSRV_ENCRYPTION_DESIRED
;
217 bool encryption_required
= req
->session
->global
->encryption_flags
& SMBXSRV_ENCRYPTION_REQUIRED
;
218 bool guest_session
= false;
219 bool require_signed_tcon
= false;
220 uint32_t session_global_id
;
221 char *share_name
= NULL
;
222 uint8_t encryption_flags
= 0;
226 if (strncmp(share
, "\\\\", 2) == 0) {
227 const char *p
= strchr(share
+2, '\\');
233 DEBUG(10,("smbd_smb2_tree_connect: path[%s] share[%s]\n",
236 if (security_session_user_level(session_info
, NULL
) < SECURITY_USER
) {
237 guest_session
= true;
240 if (conn
->protocol
>= PROTOCOL_SMB3_11
&& !guest_session
) {
241 require_signed_tcon
= true;
244 if (require_signed_tcon
&& !req
->do_encryption
&& !req
->do_signing
) {
245 DEBUG(1, ("smbd_smb2_tree_connect: reject request to share "
246 "[%s] as '%s\\%s' without encryption or signing. "
249 req
->session
->global
->auth_session_info
->info
->domain_name
,
250 req
->session
->global
->auth_session_info
->info
->account_name
));
252 return NT_STATUS_ACCESS_DENIED
;
255 service
= talloc_strdup(talloc_tos(), share
);
257 return NT_STATUS_NO_MEMORY
;
260 if (!strlower_m(service
)) {
261 DEBUG(2, ("strlower_m %s failed\n", service
));
262 return NT_STATUS_INVALID_PARAMETER
;
265 /* TODO: do more things... */
266 if (strequal(service
,HOMES_NAME
)) {
267 if (session
->homes_snum
== -1) {
268 DEBUG(2, ("[homes] share not available for "
269 "user %s because it was not found "
270 "or created at session setup "
272 session_info
->unix_info
->unix_name
));
273 return NT_STATUS_BAD_NETWORK_NAME
;
275 snum
= session
->homes_snum
;
276 } else if ((session
->homes_snum
!= -1)
278 lp_servicename(talloc_tos(), lp_sub
, session
->homes_snum
))) {
279 snum
= session
->homes_snum
;
281 snum
= find_service(talloc_tos(), service
, &service
);
283 return NT_STATUS_NO_MEMORY
;
288 DEBUG(3,("smbd_smb2_tree_connect: couldn't find service %s\n",
290 return NT_STATUS_BAD_NETWORK_NAME
;
293 /* Handle non-DFS clients attempting connections to msdfs proxy */
294 if (lp_host_msdfs()) {
295 char *proxy
= lp_msdfs_proxy(talloc_tos(), lp_sub
, snum
);
297 if ((proxy
!= NULL
) && (*proxy
!= '\0')) {
298 DBG_NOTICE("refusing connection to dfs proxy share "
299 "'%s' (pointing to %s)\n",
303 return NT_STATUS_BAD_NETWORK_NAME
;
308 if ((lp_server_smb_encrypt(snum
) >= SMB_ENCRYPTION_DESIRED
) &&
309 (conn
->smb2
.server
.cipher
!= 0))
311 encryption_desired
= true;
314 if (lp_server_smb_encrypt(snum
) == SMB_ENCRYPTION_REQUIRED
) {
315 encryption_desired
= true;
316 encryption_required
= true;
319 if (guest_session
&& encryption_required
) {
320 DEBUG(1,("reject guest as encryption is required for service %s\n",
322 return NT_STATUS_ACCESS_DENIED
;
325 if (conn
->smb2
.server
.cipher
== 0) {
326 if (encryption_required
) {
327 DEBUG(1,("reject tcon with dialect[0x%04X] "
328 "as encryption is required for service %s\n",
329 conn
->smb2
.server
.dialect
, service
));
330 return NT_STATUS_ACCESS_DENIED
;
335 /* make sure we don't ask for optional encryption */
336 encryption_desired
= false;
338 if (encryption_desired
) {
339 encryption_flags
|= SMBXSRV_ENCRYPTION_DESIRED
;
341 if (encryption_required
) {
342 encryption_flags
|= SMBXSRV_ENCRYPTION_REQUIRED
;
345 session_global_id
= req
->session
->global
->session_global_id
;
346 share_name
= lp_servicename(talloc_tos(), lp_sub
, snum
);
347 if (share_name
== NULL
) {
348 return NT_STATUS_NO_MEMORY
;
351 if ((lp_max_connections(snum
) > 0)
352 && (count_current_connections(lp_const_servicename(snum
), true) >=
353 lp_max_connections(snum
))) {
355 DBG_WARNING("Max connections (%d) exceeded for [%s][%s]\n",
356 lp_max_connections(snum
),
357 lp_const_servicename(snum
), share_name
);
358 TALLOC_FREE(share_name
);
359 return NT_STATUS_INSUFFICIENT_RESOURCES
;
362 /* create a new tcon as child of the session */
363 status
= smb2srv_tcon_create(req
->session
,
368 TALLOC_FREE(share_name
);
369 if (!NT_STATUS_IS_OK(status
)) {
373 compat_conn
= make_connection_smb2(req
,
377 if (compat_conn
== NULL
) {
382 tcon
->compat
= talloc_move(tcon
, &compat_conn
);
384 tcon
->status
= NT_STATUS_OK
;
386 if (IS_PRINT(tcon
->compat
)) {
387 *out_share_type
= SMB2_SHARE_TYPE_PRINT
;
388 } else if (IS_IPC(tcon
->compat
)) {
389 *out_share_type
= SMB2_SHARE_TYPE_PIPE
;
391 *out_share_type
= SMB2_SHARE_TYPE_DISK
;
394 *out_share_flags
= 0;
396 if (lp_msdfs_root(SNUM(tcon
->compat
)) && lp_host_msdfs()) {
397 *out_share_flags
|= (SMB2_SHAREFLAG_DFS
|SMB2_SHAREFLAG_DFS_ROOT
);
398 *out_capabilities
= SMB2_SHARE_CAP_DFS
;
400 *out_capabilities
= 0;
403 switch(lp_csc_policy(SNUM(tcon
->compat
))) {
404 case CSC_POLICY_MANUAL
:
406 case CSC_POLICY_DOCUMENTS
:
407 *out_share_flags
|= SMB2_SHAREFLAG_AUTO_CACHING
;
409 case CSC_POLICY_PROGRAMS
:
410 *out_share_flags
|= SMB2_SHAREFLAG_VDO_CACHING
;
412 case CSC_POLICY_DISABLE
:
413 *out_share_flags
|= SMB2_SHAREFLAG_NO_CACHING
;
419 if (lp_hide_unreadable(SNUM(tcon
->compat
)) ||
420 lp_hide_unwriteable_files(SNUM(tcon
->compat
))) {
421 *out_share_flags
|= SMB2_SHAREFLAG_ACCESS_BASED_DIRECTORY_ENUM
;
424 if (encryption_desired
) {
425 *out_share_flags
|= SMB2_SHAREFLAG_ENCRYPT_DATA
;
429 * For disk shares we can change the client
430 * behavior on a cluster...
432 if (conn
->protocol
>= PROTOCOL_SMB3_00
&&
433 *out_share_type
== SMB2_SHARE_TYPE_DISK
)
435 bool persistent
= false; /* persistent handles not implemented yet */
436 bool cluster
= lp_clustering();
437 bool scaleout
= cluster
;
438 bool witness
= cluster
&& !lp_rpc_start_on_demand_helpers();
439 bool asymmetric
= false; /* shares are symmetric by default */
443 * In a ctdb cluster shares are continuously available,
444 * but windows clients mix this with the global persistent
447 * Persistent handles are requested if
448 * SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY is present
449 * even without SMB2_CAP_PERSISTENT_HANDLES.
451 * And SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY is
452 * required for SMB2_SHARE_CAP_CLUSTER to have
455 * So we better don't announce this by default
456 * until we support persistent handles.
458 announce
= lp_parm_bool(SNUM(tcon
->compat
),
460 "CONTINUOUS AVAILABILITY",
463 *out_capabilities
|= SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY
;
467 * ctdb clusters are always scale out...
469 announce
= lp_parm_bool(SNUM(tcon
->compat
),
474 *out_capabilities
|= SMB2_SHARE_CAP_SCALEOUT
;
478 * We support the witness service when ctdb is active
480 announce
= lp_parm_bool(SNUM(tcon
->compat
),
485 *out_capabilities
|= SMB2_SHARE_CAP_CLUSTER
;
489 * Shares in a ctdb cluster are symmetric by design.
491 * But it might be useful to let the client use
492 * an isolated transport and witness registration for the
495 if (conn
->protocol
>= PROTOCOL_SMB3_02
) {
496 announce
= lp_parm_bool(SNUM(tcon
->compat
),
502 *out_capabilities
|= SMB2_SHARE_CAP_ASYMMETRIC
;
506 *out_maximal_access
= tcon
->compat
->share_access
;
508 *out_tree_id
= tcon
->global
->tcon_wire_id
;
509 req
->last_tid
= tcon
->global
->tcon_wire_id
;
514 struct smbd_smb2_tree_connect_state
{
516 uint8_t out_share_type
;
517 uint32_t out_share_flags
;
518 uint32_t out_capabilities
;
519 uint32_t out_maximal_access
;
520 uint32_t out_tree_id
;
524 static struct tevent_req
*smbd_smb2_tree_connect_send(TALLOC_CTX
*mem_ctx
,
525 struct tevent_context
*ev
,
526 struct smbd_smb2_request
*smb2req
,
530 struct tevent_req
*req
;
531 struct smbd_smb2_tree_connect_state
*state
;
534 req
= tevent_req_create(mem_ctx
, &state
,
535 struct smbd_smb2_tree_connect_state
);
539 state
->in_path
= in_path
;
541 status
= smbd_smb2_tree_connect(smb2req
,
543 &state
->out_share_type
,
544 &state
->out_share_flags
,
545 &state
->out_capabilities
,
546 &state
->out_maximal_access
,
549 if (tevent_req_nterror(req
, status
)) {
550 return tevent_req_post(req
, ev
);
553 tevent_req_done(req
);
554 return tevent_req_post(req
, ev
);
557 static NTSTATUS
smbd_smb2_tree_connect_recv(struct tevent_req
*req
,
558 uint8_t *out_share_type
,
559 uint32_t *out_share_flags
,
560 uint32_t *out_capabilities
,
561 uint32_t *out_maximal_access
,
562 uint32_t *out_tree_id
,
565 struct smbd_smb2_tree_connect_state
*state
=
567 struct smbd_smb2_tree_connect_state
);
570 if (tevent_req_is_nterror(req
, &status
)) {
571 tevent_req_received(req
);
575 *out_share_type
= state
->out_share_type
;
576 *out_share_flags
= state
->out_share_flags
;
577 *out_capabilities
= state
->out_capabilities
;
578 *out_maximal_access
= state
->out_maximal_access
;
579 *out_tree_id
= state
->out_tree_id
;
580 *disconnect
= state
->disconnect
;
582 tevent_req_received(req
);
586 static struct tevent_req
*smbd_smb2_tdis_send(TALLOC_CTX
*mem_ctx
,
587 struct tevent_context
*ev
,
588 struct smbd_smb2_request
*smb2req
);
589 static NTSTATUS
smbd_smb2_tdis_recv(struct tevent_req
*req
);
590 static void smbd_smb2_request_tdis_done(struct tevent_req
*subreq
);
592 NTSTATUS
smbd_smb2_request_process_tdis(struct smbd_smb2_request
*req
)
595 struct tevent_req
*subreq
= NULL
;
597 status
= smbd_smb2_request_verify_sizes(req
, 0x04);
598 if (!NT_STATUS_IS_OK(status
)) {
599 return smbd_smb2_request_error(req
, status
);
602 subreq
= smbd_smb2_tdis_send(req
, req
->sconn
->ev_ctx
, req
);
603 if (subreq
== NULL
) {
604 return smbd_smb2_request_error(req
, NT_STATUS_NO_MEMORY
);
606 tevent_req_set_callback(subreq
, smbd_smb2_request_tdis_done
, req
);
609 * Avoid sending a STATUS_PENDING message, it's very likely
610 * the client won't expect that.
612 return smbd_smb2_request_pending_queue(req
, subreq
, 0);
615 static void smbd_smb2_request_tdis_done(struct tevent_req
*subreq
)
617 struct smbd_smb2_request
*smb2req
=
618 tevent_req_callback_data(subreq
,
619 struct smbd_smb2_request
);
624 status
= smbd_smb2_tdis_recv(subreq
);
626 if (!NT_STATUS_IS_OK(status
)) {
627 error
= smbd_smb2_request_error(smb2req
, status
);
628 if (!NT_STATUS_IS_OK(error
)) {
629 smbd_server_connection_terminate(smb2req
->xconn
,
636 outbody
= smbd_smb2_generate_outbody(smb2req
, 0x04);
637 if (outbody
.data
== NULL
) {
638 error
= smbd_smb2_request_error(smb2req
, NT_STATUS_NO_MEMORY
);
639 if (!NT_STATUS_IS_OK(error
)) {
640 smbd_server_connection_terminate(smb2req
->xconn
,
647 SSVAL(outbody
.data
, 0x00, 0x04); /* struct size */
648 SSVAL(outbody
.data
, 0x02, 0); /* reserved */
650 error
= smbd_smb2_request_done(smb2req
, outbody
, NULL
);
651 if (!NT_STATUS_IS_OK(error
)) {
652 smbd_server_connection_terminate(smb2req
->xconn
,
658 struct smbd_smb2_tdis_state
{
659 struct smbd_smb2_request
*smb2req
;
660 struct tevent_queue
*wait_queue
;
663 static void smbd_smb2_tdis_wait_done(struct tevent_req
*subreq
);
665 static struct tevent_req
*smbd_smb2_tdis_send(TALLOC_CTX
*mem_ctx
,
666 struct tevent_context
*ev
,
667 struct smbd_smb2_request
*smb2req
)
669 struct tevent_req
*req
;
670 struct smbd_smb2_tdis_state
*state
;
671 struct tevent_req
*subreq
;
672 struct smbXsrv_connection
*xconn
= NULL
;
674 req
= tevent_req_create(mem_ctx
, &state
,
675 struct smbd_smb2_tdis_state
);
679 state
->smb2req
= smb2req
;
681 state
->wait_queue
= tevent_queue_create(state
, "tdis_wait_queue");
682 if (tevent_req_nomem(state
->wait_queue
, req
)) {
683 return tevent_req_post(req
, ev
);
687 * Make sure that no new request will be able to use this tcon.
689 smb2req
->tcon
->status
= NT_STATUS_NETWORK_NAME_DELETED
;
691 xconn
= smb2req
->xconn
->client
->connections
;
692 for (; xconn
!= NULL
; xconn
= xconn
->next
) {
693 struct smbd_smb2_request
*preq
;
695 for (preq
= xconn
->smb2
.requests
; preq
!= NULL
; preq
= preq
->next
) {
696 if (preq
== smb2req
) {
697 /* Can't cancel current request. */
700 if (preq
->tcon
!= smb2req
->tcon
) {
701 /* Request on different tcon. */
705 if (preq
->subreq
!= NULL
) {
706 tevent_req_cancel(preq
->subreq
);
710 * Now wait until the request is finished.
712 * We don't set a callback, as we just want to block the
713 * wait queue and the talloc_free() of the request will
714 * remove the item from the wait queue.
716 subreq
= tevent_queue_wait_send(preq
, ev
, state
->wait_queue
);
717 if (tevent_req_nomem(subreq
, req
)) {
718 return tevent_req_post(req
, ev
);
724 * Now we add our own waiter to the end of the queue,
725 * this way we get notified when all pending requests are finished
726 * and send to the socket.
728 subreq
= tevent_queue_wait_send(state
, ev
, state
->wait_queue
);
729 if (tevent_req_nomem(subreq
, req
)) {
730 return tevent_req_post(req
, ev
);
732 tevent_req_set_callback(subreq
, smbd_smb2_tdis_wait_done
, req
);
737 static void smbd_smb2_tdis_wait_done(struct tevent_req
*subreq
)
739 struct tevent_req
*req
= tevent_req_callback_data(
740 subreq
, struct tevent_req
);
741 struct smbd_smb2_tdis_state
*state
= tevent_req_data(
742 req
, struct smbd_smb2_tdis_state
);
745 tevent_queue_wait_recv(subreq
);
749 * As we've been awoken, we may have changed
750 * uid in the meantime. Ensure we're still
751 * root (SMB2_OP_TDIS has .as_root = true).
753 change_to_root_user();
755 status
= smbXsrv_tcon_disconnect(state
->smb2req
->tcon
,
756 state
->smb2req
->tcon
->compat
->vuid
);
757 if (tevent_req_nterror(req
, status
)) {
761 /* We did tear down the tcon. */
762 TALLOC_FREE(state
->smb2req
->tcon
);
763 tevent_req_done(req
);
766 static NTSTATUS
smbd_smb2_tdis_recv(struct tevent_req
*req
)
768 return tevent_req_simple_recv_ntstatus(req
);