s3:smbd: allow anonymous encryption after one authenticated session setup
[Samba.git] / source3 / smbd / smb2_tcon.c
blob20d89670df18a01b3628fdce103addac2a2dba26
1 /*
2 Unix SMB/CIFS implementation.
3 Core SMB2 server
5 Copyright (C) Stefan Metzmacher 2009
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "includes.h"
22 #include "smbd/smbd.h"
23 #include "smbd/globals.h"
24 #include "../libcli/smb/smb_common.h"
25 #include "../libcli/security/security.h"
26 #include "auth.h"
27 #include "lib/param/loadparm.h"
28 #include "../lib/util/tevent_ntstatus.h"
30 #undef DBGC_CLASS
31 #define DBGC_CLASS DBGC_SMB2
33 static struct tevent_req *smbd_smb2_tree_connect_send(TALLOC_CTX *mem_ctx,
34 struct tevent_context *ev,
35 struct smbd_smb2_request *smb2req,
36 uint16_t in_flags,
37 const char *in_path);
38 static NTSTATUS smbd_smb2_tree_connect_recv(struct tevent_req *req,
39 uint8_t *out_share_type,
40 uint32_t *out_share_flags,
41 uint32_t *out_capabilities,
42 uint32_t *out_maximal_access,
43 uint32_t *out_tree_id,
44 bool *disconnect);
46 static void smbd_smb2_request_tcon_done(struct tevent_req *subreq);
48 NTSTATUS smbd_smb2_request_process_tcon(struct smbd_smb2_request *req)
50 struct smbXsrv_connection *xconn = req->xconn;
51 const uint8_t *inbody;
52 uint16_t in_flags;
53 uint16_t in_path_offset;
54 uint16_t in_path_length;
55 DATA_BLOB in_path_buffer;
56 char *in_path_string;
57 size_t in_path_string_size;
58 NTSTATUS status;
59 bool ok;
60 struct tevent_req *subreq;
62 status = smbd_smb2_request_verify_sizes(req, 0x09);
63 if (!NT_STATUS_IS_OK(status)) {
64 return smbd_smb2_request_error(req, status);
66 inbody = SMBD_SMB2_IN_BODY_PTR(req);
68 if (xconn->protocol >= PROTOCOL_SMB3_11) {
69 in_flags = SVAL(inbody, 0x02);
70 } else {
71 in_flags = 0;
73 in_path_offset = SVAL(inbody, 0x04);
74 in_path_length = SVAL(inbody, 0x06);
76 if (in_path_offset != (SMB2_HDR_BODY + SMBD_SMB2_IN_BODY_LEN(req))) {
77 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
80 if (in_path_length > SMBD_SMB2_IN_DYN_LEN(req)) {
81 return smbd_smb2_request_error(req, NT_STATUS_INVALID_PARAMETER);
84 in_path_buffer.data = SMBD_SMB2_IN_DYN_PTR(req);
85 in_path_buffer.length = in_path_length;
87 ok = convert_string_talloc(req, CH_UTF16, CH_UNIX,
88 in_path_buffer.data,
89 in_path_buffer.length,
90 &in_path_string,
91 &in_path_string_size);
92 if (!ok) {
93 return smbd_smb2_request_error(req, NT_STATUS_ILLEGAL_CHARACTER);
96 if (in_path_buffer.length == 0) {
97 in_path_string_size = 0;
100 if (strlen(in_path_string) != in_path_string_size) {
101 return smbd_smb2_request_error(req, NT_STATUS_BAD_NETWORK_NAME);
104 subreq = smbd_smb2_tree_connect_send(req,
105 req->sconn->ev_ctx,
106 req,
107 in_flags,
108 in_path_string);
109 if (subreq == NULL) {
110 return smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
112 tevent_req_set_callback(subreq, smbd_smb2_request_tcon_done, req);
115 * Avoid sending a STATUS_PENDING message, it's very likely
116 * the client won't expect that.
118 return smbd_smb2_request_pending_queue(req, subreq, 0);
121 static void smbd_smb2_request_tcon_done(struct tevent_req *subreq)
123 struct smbd_smb2_request *req =
124 tevent_req_callback_data(subreq,
125 struct smbd_smb2_request);
126 uint8_t *outhdr;
127 DATA_BLOB outbody;
128 uint8_t out_share_type = 0;
129 uint32_t out_share_flags = 0;
130 uint32_t out_capabilities = 0;
131 uint32_t out_maximal_access = 0;
132 uint32_t out_tree_id = 0;
133 bool disconnect = false;
134 NTSTATUS status;
135 NTSTATUS error;
137 status = smbd_smb2_tree_connect_recv(subreq,
138 &out_share_type,
139 &out_share_flags,
140 &out_capabilities,
141 &out_maximal_access,
142 &out_tree_id,
143 &disconnect);
144 TALLOC_FREE(subreq);
145 if (!NT_STATUS_IS_OK(status)) {
146 if (disconnect) {
147 smbd_server_connection_terminate(req->xconn,
148 nt_errstr(status));
149 return;
151 error = smbd_smb2_request_error(req, status);
152 if (!NT_STATUS_IS_OK(error)) {
153 smbd_server_connection_terminate(req->xconn,
154 nt_errstr(error));
155 return;
157 return;
160 outhdr = SMBD_SMB2_OUT_HDR_PTR(req);
162 outbody = smbd_smb2_generate_outbody(req, 0x10);
163 if (outbody.data == NULL) {
164 error = smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
165 if (!NT_STATUS_IS_OK(error)) {
166 smbd_server_connection_terminate(req->xconn,
167 nt_errstr(error));
168 return;
170 return;
173 SIVAL(outhdr, SMB2_HDR_TID, out_tree_id);
175 SSVAL(outbody.data, 0x00, 0x10); /* struct size */
176 SCVAL(outbody.data, 0x02,
177 out_share_type); /* share type */
178 SCVAL(outbody.data, 0x03, 0); /* reserved */
179 SIVAL(outbody.data, 0x04,
180 out_share_flags); /* share flags */
181 SIVAL(outbody.data, 0x08,
182 out_capabilities); /* capabilities */
183 SIVAL(outbody.data, 0x0C,
184 out_maximal_access); /* maximal access */
186 error = smbd_smb2_request_done(req, outbody, NULL);
187 if (!NT_STATUS_IS_OK(error)) {
188 smbd_server_connection_terminate(req->xconn,
189 nt_errstr(error));
190 return;
194 static NTSTATUS smbd_smb2_tree_connect(struct smbd_smb2_request *req,
195 const char *in_path,
196 uint8_t *out_share_type,
197 uint32_t *out_share_flags,
198 uint32_t *out_capabilities,
199 uint32_t *out_maximal_access,
200 uint32_t *out_tree_id,
201 bool *disconnect)
203 const struct loadparm_substitution *lp_sub =
204 loadparm_s3_global_substitution();
205 struct smbXsrv_connection *conn = req->xconn;
206 struct smbXsrv_session *session = req->session;
207 struct auth_session_info *session_info =
208 session->global->auth_session_info;
209 const char *share = in_path;
210 char *service = NULL;
211 int snum = -1;
212 struct smbXsrv_tcon *tcon;
213 NTTIME now = timeval_to_nttime(&req->request_time);
214 connection_struct *compat_conn = NULL;
215 NTSTATUS status;
216 bool encryption_desired = req->session->global->encryption_flags & SMBXSRV_ENCRYPTION_DESIRED;
217 bool encryption_required = req->session->global->encryption_flags & SMBXSRV_ENCRYPTION_REQUIRED;
218 bool guest_session = false;
219 bool require_signed_tcon = false;
220 uint32_t session_global_id;
221 char *share_name = NULL;
222 uint8_t encryption_flags = 0;
224 *disconnect = false;
226 if (strncmp(share, "\\\\", 2) == 0) {
227 const char *p = strchr(share+2, '\\');
228 if (p) {
229 share = p + 1;
233 DEBUG(10,("smbd_smb2_tree_connect: path[%s] share[%s]\n",
234 in_path, share));
236 if (security_session_user_level(session_info, NULL) < SECURITY_USER) {
237 guest_session = true;
240 if (conn->protocol >= PROTOCOL_SMB3_11 && !guest_session) {
241 require_signed_tcon = true;
244 if (require_signed_tcon && !req->do_encryption && !req->do_signing) {
245 DEBUG(1, ("smbd_smb2_tree_connect: reject request to share "
246 "[%s] as '%s\\%s' without encryption or signing. "
247 "Disconnecting.\n",
248 share,
249 req->session->global->auth_session_info->info->domain_name,
250 req->session->global->auth_session_info->info->account_name));
251 *disconnect = true;
252 return NT_STATUS_ACCESS_DENIED;
255 service = talloc_strdup(talloc_tos(), share);
256 if(!service) {
257 return NT_STATUS_NO_MEMORY;
260 if (!strlower_m(service)) {
261 DEBUG(2, ("strlower_m %s failed\n", service));
262 return NT_STATUS_INVALID_PARAMETER;
265 /* TODO: do more things... */
266 if (strequal(service,HOMES_NAME)) {
267 if (session->homes_snum == -1) {
268 DEBUG(2, ("[homes] share not available for "
269 "user %s because it was not found "
270 "or created at session setup "
271 "time\n",
272 session_info->unix_info->unix_name));
273 return NT_STATUS_BAD_NETWORK_NAME;
275 snum = session->homes_snum;
276 } else if ((session->homes_snum != -1)
277 && strequal(service,
278 lp_servicename(talloc_tos(), lp_sub, session->homes_snum))) {
279 snum = session->homes_snum;
280 } else {
281 snum = find_service(talloc_tos(), service, &service);
282 if (!service) {
283 return NT_STATUS_NO_MEMORY;
287 if (snum < 0) {
288 DEBUG(3,("smbd_smb2_tree_connect: couldn't find service %s\n",
289 service));
290 return NT_STATUS_BAD_NETWORK_NAME;
293 /* Handle non-DFS clients attempting connections to msdfs proxy */
294 if (lp_host_msdfs()) {
295 char *proxy = lp_msdfs_proxy(talloc_tos(), lp_sub, snum);
297 if ((proxy != NULL) && (*proxy != '\0')) {
298 DBG_NOTICE("refusing connection to dfs proxy share "
299 "'%s' (pointing to %s)\n",
300 service,
301 proxy);
302 TALLOC_FREE(proxy);
303 return NT_STATUS_BAD_NETWORK_NAME;
305 TALLOC_FREE(proxy);
308 if ((lp_server_smb_encrypt(snum) >= SMB_ENCRYPTION_DESIRED) &&
309 (conn->smb2.server.cipher != 0))
311 encryption_desired = true;
314 if (lp_server_smb_encrypt(snum) == SMB_ENCRYPTION_REQUIRED) {
315 encryption_desired = true;
316 encryption_required = true;
319 if (guest_session && encryption_required) {
320 DEBUG(1,("reject guest as encryption is required for service %s\n",
321 service));
322 return NT_STATUS_ACCESS_DENIED;
325 if (conn->smb2.server.cipher == 0) {
326 if (encryption_required) {
327 DEBUG(1,("reject tcon with dialect[0x%04X] "
328 "as encryption is required for service %s\n",
329 conn->smb2.server.dialect, service));
330 return NT_STATUS_ACCESS_DENIED;
334 if (guest_session) {
335 /* make sure we don't ask for optional encryption */
336 encryption_desired = false;
338 if (encryption_desired) {
339 encryption_flags |= SMBXSRV_ENCRYPTION_DESIRED;
341 if (encryption_required) {
342 encryption_flags |= SMBXSRV_ENCRYPTION_REQUIRED;
345 session_global_id = req->session->global->session_global_id;
346 share_name = lp_servicename(talloc_tos(), lp_sub, snum);
347 if (share_name == NULL) {
348 return NT_STATUS_NO_MEMORY;
351 if ((lp_max_connections(snum) > 0)
352 && (count_current_connections(lp_const_servicename(snum), true) >=
353 lp_max_connections(snum))) {
355 DBG_WARNING("Max connections (%d) exceeded for [%s][%s]\n",
356 lp_max_connections(snum),
357 lp_const_servicename(snum), share_name);
358 TALLOC_FREE(share_name);
359 return NT_STATUS_INSUFFICIENT_RESOURCES;
362 /* create a new tcon as child of the session */
363 status = smb2srv_tcon_create(req->session,
364 session_global_id,
365 encryption_flags,
366 share_name,
367 now, &tcon);
368 TALLOC_FREE(share_name);
369 if (!NT_STATUS_IS_OK(status)) {
370 return status;
373 compat_conn = make_connection_smb2(req,
374 tcon, snum,
375 "???",
376 &status);
377 if (compat_conn == NULL) {
378 TALLOC_FREE(tcon);
379 return status;
382 tcon->compat = talloc_move(tcon, &compat_conn);
384 tcon->status = NT_STATUS_OK;
386 if (IS_PRINT(tcon->compat)) {
387 *out_share_type = SMB2_SHARE_TYPE_PRINT;
388 } else if (IS_IPC(tcon->compat)) {
389 *out_share_type = SMB2_SHARE_TYPE_PIPE;
390 } else {
391 *out_share_type = SMB2_SHARE_TYPE_DISK;
394 *out_share_flags = 0;
396 if (lp_msdfs_root(SNUM(tcon->compat)) && lp_host_msdfs()) {
397 *out_share_flags |= (SMB2_SHAREFLAG_DFS|SMB2_SHAREFLAG_DFS_ROOT);
398 *out_capabilities = SMB2_SHARE_CAP_DFS;
399 } else {
400 *out_capabilities = 0;
403 switch(lp_csc_policy(SNUM(tcon->compat))) {
404 case CSC_POLICY_MANUAL:
405 break;
406 case CSC_POLICY_DOCUMENTS:
407 *out_share_flags |= SMB2_SHAREFLAG_AUTO_CACHING;
408 break;
409 case CSC_POLICY_PROGRAMS:
410 *out_share_flags |= SMB2_SHAREFLAG_VDO_CACHING;
411 break;
412 case CSC_POLICY_DISABLE:
413 *out_share_flags |= SMB2_SHAREFLAG_NO_CACHING;
414 break;
415 default:
416 break;
419 if (lp_hide_unreadable(SNUM(tcon->compat)) ||
420 lp_hide_unwriteable_files(SNUM(tcon->compat))) {
421 *out_share_flags |= SMB2_SHAREFLAG_ACCESS_BASED_DIRECTORY_ENUM;
424 if (encryption_desired) {
425 *out_share_flags |= SMB2_SHAREFLAG_ENCRYPT_DATA;
429 * For disk shares we can change the client
430 * behavior on a cluster...
432 if (conn->protocol >= PROTOCOL_SMB3_00 &&
433 *out_share_type == SMB2_SHARE_TYPE_DISK)
435 bool persistent = false; /* persistent handles not implemented yet */
436 bool cluster = lp_clustering();
437 bool scaleout = cluster;
438 bool witness = cluster && !lp_rpc_start_on_demand_helpers();
439 bool asymmetric = false; /* shares are symmetric by default */
440 bool announce;
443 * In a ctdb cluster shares are continuously available,
444 * but windows clients mix this with the global persistent
445 * handles support.
447 * Persistent handles are requested if
448 * SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY is present
449 * even without SMB2_CAP_PERSISTENT_HANDLES.
451 * And SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY is
452 * required for SMB2_SHARE_CAP_CLUSTER to have
453 * an effect.
455 * So we better don't announce this by default
456 * until we support persistent handles.
458 announce = lp_parm_bool(SNUM(tcon->compat),
459 "smb3 share cap",
460 "CONTINUOUS AVAILABILITY",
461 persistent);
462 if (announce) {
463 *out_capabilities |= SMB2_SHARE_CAP_CONTINUOUS_AVAILABILITY;
467 * ctdb clusters are always scale out...
469 announce = lp_parm_bool(SNUM(tcon->compat),
470 "smb3 share cap",
471 "SCALE OUT",
472 scaleout);
473 if (announce) {
474 *out_capabilities |= SMB2_SHARE_CAP_SCALEOUT;
478 * We support the witness service when ctdb is active
480 announce = lp_parm_bool(SNUM(tcon->compat),
481 "smb3 share cap",
482 "CLUSTER",
483 witness);
484 if (announce) {
485 *out_capabilities |= SMB2_SHARE_CAP_CLUSTER;
489 * Shares in a ctdb cluster are symmetric by design.
491 * But it might be useful to let the client use
492 * an isolated transport and witness registration for the
493 * specific share.
495 if (conn->protocol >= PROTOCOL_SMB3_02) {
496 announce = lp_parm_bool(SNUM(tcon->compat),
497 "smb3 share cap",
498 "ASYMMETRIC",
499 asymmetric);
501 if (announce) {
502 *out_capabilities |= SMB2_SHARE_CAP_ASYMMETRIC;
506 *out_maximal_access = tcon->compat->share_access;
508 *out_tree_id = tcon->global->tcon_wire_id;
509 req->last_tid = tcon->global->tcon_wire_id;
511 return NT_STATUS_OK;
514 struct smbd_smb2_tree_connect_state {
515 const char *in_path;
516 uint8_t out_share_type;
517 uint32_t out_share_flags;
518 uint32_t out_capabilities;
519 uint32_t out_maximal_access;
520 uint32_t out_tree_id;
521 bool disconnect;
524 static struct tevent_req *smbd_smb2_tree_connect_send(TALLOC_CTX *mem_ctx,
525 struct tevent_context *ev,
526 struct smbd_smb2_request *smb2req,
527 uint16_t in_flags,
528 const char *in_path)
530 struct tevent_req *req;
531 struct smbd_smb2_tree_connect_state *state;
532 NTSTATUS status;
534 req = tevent_req_create(mem_ctx, &state,
535 struct smbd_smb2_tree_connect_state);
536 if (req == NULL) {
537 return NULL;
539 state->in_path = in_path;
541 status = smbd_smb2_tree_connect(smb2req,
542 state->in_path,
543 &state->out_share_type,
544 &state->out_share_flags,
545 &state->out_capabilities,
546 &state->out_maximal_access,
547 &state->out_tree_id,
548 &state->disconnect);
549 if (tevent_req_nterror(req, status)) {
550 return tevent_req_post(req, ev);
553 tevent_req_done(req);
554 return tevent_req_post(req, ev);
557 static NTSTATUS smbd_smb2_tree_connect_recv(struct tevent_req *req,
558 uint8_t *out_share_type,
559 uint32_t *out_share_flags,
560 uint32_t *out_capabilities,
561 uint32_t *out_maximal_access,
562 uint32_t *out_tree_id,
563 bool *disconnect)
565 struct smbd_smb2_tree_connect_state *state =
566 tevent_req_data(req,
567 struct smbd_smb2_tree_connect_state);
568 NTSTATUS status;
570 if (tevent_req_is_nterror(req, &status)) {
571 tevent_req_received(req);
572 return status;
575 *out_share_type = state->out_share_type;
576 *out_share_flags = state->out_share_flags;
577 *out_capabilities = state->out_capabilities;
578 *out_maximal_access = state->out_maximal_access;
579 *out_tree_id = state->out_tree_id;
580 *disconnect = state->disconnect;
582 tevent_req_received(req);
583 return NT_STATUS_OK;
586 static struct tevent_req *smbd_smb2_tdis_send(TALLOC_CTX *mem_ctx,
587 struct tevent_context *ev,
588 struct smbd_smb2_request *smb2req);
589 static NTSTATUS smbd_smb2_tdis_recv(struct tevent_req *req);
590 static void smbd_smb2_request_tdis_done(struct tevent_req *subreq);
592 NTSTATUS smbd_smb2_request_process_tdis(struct smbd_smb2_request *req)
594 NTSTATUS status;
595 struct tevent_req *subreq = NULL;
597 status = smbd_smb2_request_verify_sizes(req, 0x04);
598 if (!NT_STATUS_IS_OK(status)) {
599 return smbd_smb2_request_error(req, status);
602 subreq = smbd_smb2_tdis_send(req, req->sconn->ev_ctx, req);
603 if (subreq == NULL) {
604 return smbd_smb2_request_error(req, NT_STATUS_NO_MEMORY);
606 tevent_req_set_callback(subreq, smbd_smb2_request_tdis_done, req);
609 * Avoid sending a STATUS_PENDING message, it's very likely
610 * the client won't expect that.
612 return smbd_smb2_request_pending_queue(req, subreq, 0);
615 static void smbd_smb2_request_tdis_done(struct tevent_req *subreq)
617 struct smbd_smb2_request *smb2req =
618 tevent_req_callback_data(subreq,
619 struct smbd_smb2_request);
620 DATA_BLOB outbody;
621 NTSTATUS status;
622 NTSTATUS error;
624 status = smbd_smb2_tdis_recv(subreq);
625 TALLOC_FREE(subreq);
626 if (!NT_STATUS_IS_OK(status)) {
627 error = smbd_smb2_request_error(smb2req, status);
628 if (!NT_STATUS_IS_OK(error)) {
629 smbd_server_connection_terminate(smb2req->xconn,
630 nt_errstr(error));
631 return;
633 return;
636 outbody = smbd_smb2_generate_outbody(smb2req, 0x04);
637 if (outbody.data == NULL) {
638 error = smbd_smb2_request_error(smb2req, NT_STATUS_NO_MEMORY);
639 if (!NT_STATUS_IS_OK(error)) {
640 smbd_server_connection_terminate(smb2req->xconn,
641 nt_errstr(error));
642 return;
644 return;
647 SSVAL(outbody.data, 0x00, 0x04); /* struct size */
648 SSVAL(outbody.data, 0x02, 0); /* reserved */
650 error = smbd_smb2_request_done(smb2req, outbody, NULL);
651 if (!NT_STATUS_IS_OK(error)) {
652 smbd_server_connection_terminate(smb2req->xconn,
653 nt_errstr(error));
654 return;
658 struct smbd_smb2_tdis_state {
659 struct smbd_smb2_request *smb2req;
660 struct tevent_queue *wait_queue;
663 static void smbd_smb2_tdis_wait_done(struct tevent_req *subreq);
665 static struct tevent_req *smbd_smb2_tdis_send(TALLOC_CTX *mem_ctx,
666 struct tevent_context *ev,
667 struct smbd_smb2_request *smb2req)
669 struct tevent_req *req;
670 struct smbd_smb2_tdis_state *state;
671 struct tevent_req *subreq;
672 struct smbXsrv_connection *xconn = NULL;
674 req = tevent_req_create(mem_ctx, &state,
675 struct smbd_smb2_tdis_state);
676 if (req == NULL) {
677 return NULL;
679 state->smb2req = smb2req;
681 state->wait_queue = tevent_queue_create(state, "tdis_wait_queue");
682 if (tevent_req_nomem(state->wait_queue, req)) {
683 return tevent_req_post(req, ev);
687 * Make sure that no new request will be able to use this tcon.
689 smb2req->tcon->status = NT_STATUS_NETWORK_NAME_DELETED;
691 xconn = smb2req->xconn->client->connections;
692 for (; xconn != NULL; xconn = xconn->next) {
693 struct smbd_smb2_request *preq;
695 for (preq = xconn->smb2.requests; preq != NULL; preq = preq->next) {
696 if (preq == smb2req) {
697 /* Can't cancel current request. */
698 continue;
700 if (preq->tcon != smb2req->tcon) {
701 /* Request on different tcon. */
702 continue;
705 if (preq->subreq != NULL) {
706 tevent_req_cancel(preq->subreq);
710 * Now wait until the request is finished.
712 * We don't set a callback, as we just want to block the
713 * wait queue and the talloc_free() of the request will
714 * remove the item from the wait queue.
716 subreq = tevent_queue_wait_send(preq, ev, state->wait_queue);
717 if (tevent_req_nomem(subreq, req)) {
718 return tevent_req_post(req, ev);
724 * Now we add our own waiter to the end of the queue,
725 * this way we get notified when all pending requests are finished
726 * and send to the socket.
728 subreq = tevent_queue_wait_send(state, ev, state->wait_queue);
729 if (tevent_req_nomem(subreq, req)) {
730 return tevent_req_post(req, ev);
732 tevent_req_set_callback(subreq, smbd_smb2_tdis_wait_done, req);
734 return req;
737 static void smbd_smb2_tdis_wait_done(struct tevent_req *subreq)
739 struct tevent_req *req = tevent_req_callback_data(
740 subreq, struct tevent_req);
741 struct smbd_smb2_tdis_state *state = tevent_req_data(
742 req, struct smbd_smb2_tdis_state);
743 NTSTATUS status;
745 tevent_queue_wait_recv(subreq);
746 TALLOC_FREE(subreq);
749 * As we've been awoken, we may have changed
750 * uid in the meantime. Ensure we're still
751 * root (SMB2_OP_TDIS has .as_root = true).
753 change_to_root_user();
755 status = smbXsrv_tcon_disconnect(state->smb2req->tcon,
756 state->smb2req->tcon->compat->vuid);
757 if (tevent_req_nterror(req, status)) {
758 return;
761 /* We did tear down the tcon. */
762 TALLOC_FREE(state->smb2req->tcon);
763 tevent_req_done(req);
766 static NTSTATUS smbd_smb2_tdis_recv(struct tevent_req *req)
768 return tevent_req_simple_recv_ntstatus(req);