2 Unix SMB/CIFS implementation.
3 service (connection) opening and closing
4 Copyright (C) Andrew Tridgell 1992-1998
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "system/filesys.h"
22 #include "system/passwd.h" /* uid_wrapper */
23 #include "../lib/tsocket/tsocket.h"
24 #include "smbd/smbd.h"
25 #include "smbd/globals.h"
26 #include "../librpc/gen_ndr/netlogon.h"
27 #include "../libcli/security/security.h"
28 #include "printing/pcap.h"
29 #include "passdb/lookup_sid.h"
31 #include "lib/param/loadparm.h"
34 static bool canonicalize_connect_path(connection_struct
*conn
)
37 char *resolved_name
= SMB_VFS_REALPATH(conn
,conn
->connectpath
);
41 ret
= set_conn_connectpath(conn
,resolved_name
);
42 SAFE_FREE(resolved_name
);
46 /****************************************************************************
47 Ensure when setting connectpath it is a canonicalized (no ./ // or ../)
48 absolute path stating in / and not ending in /.
49 Observent people will notice a similarity between this and check_path_syntax :-).
50 ****************************************************************************/
52 bool set_conn_connectpath(connection_struct
*conn
, const char *connectpath
)
56 const char *s
= connectpath
;
57 bool start_of_name_component
= true;
59 if (connectpath
== NULL
|| connectpath
[0] == '\0') {
63 /* Allocate for strlen + '\0' + possible leading '/' */
64 destname
= (char *)talloc_size(conn
, strlen(connectpath
) + 2);
70 *d
++ = '/'; /* Always start with root. */
74 /* Eat multiple '/' */
78 if ((d
> destname
+ 1) && (*s
!= '\0')) {
81 start_of_name_component
= True
;
85 if (start_of_name_component
) {
86 if ((s
[0] == '.') && (s
[1] == '.') && (s
[2] == '/' || s
[2] == '\0')) {
87 /* Uh oh - "/../" or "/..\0" ! */
89 /* Go past the ../ or .. */
93 s
+= 2; /* Go past the .. */
96 /* If we just added a '/' - delete it */
97 if ((d
> destname
) && (*(d
-1) == '/')) {
102 /* Are we at the start ? Can't go back further if so. */
104 *d
++ = '/'; /* Can't delete root */
107 /* Go back one level... */
108 /* Decrement d first as d points to the *next* char to write into. */
109 for (d
--; d
> destname
; d
--) {
114 /* We're still at the start of a name component, just the previous one. */
116 } else if ((s
[0] == '.') && ((s
[1] == '\0') || s
[1] == '/')) {
117 /* Component of pathname can't be "." only - skip the '.' . */
131 /* Get the size of the next MB character. */
132 next_codepoint(s
,&siz
);
153 start_of_name_component
= false;
157 /* And must not end in '/' */
158 if (d
> destname
+ 1 && (*(d
-1) == '/')) {
162 DEBUG(10,("set_conn_connectpath: service %s, connectpath = %s\n",
163 lp_servicename(talloc_tos(), SNUM(conn
)), destname
));
165 talloc_free(conn
->connectpath
);
166 conn
->connectpath
= destname
;
170 /****************************************************************************
171 Load parameters specific to a connection/service.
172 ****************************************************************************/
174 bool set_current_service(connection_struct
*conn
, uint16 flags
, bool do_chdir
)
183 conn
->lastused_count
++;
188 vfs_ChDir(conn
,conn
->connectpath
) != 0 &&
189 vfs_ChDir(conn
,conn
->origpath
) != 0) {
190 DEBUG(((errno
!=EACCES
)?0:3),("chdir (%s) failed, reason: %s\n",
191 conn
->connectpath
, strerror(errno
)));
195 if ((conn
== last_conn
) && (last_flags
== flags
)) {
202 /* Obey the client case sensitivity requests - only for clients that support it. */
203 switch (lp_casesensitive(snum
)) {
206 /* We need this uglyness due to DOS/Win9x clients that lie about case insensitivity. */
207 enum remote_arch_types ra_type
= get_remote_arch();
208 if ((ra_type
!= RA_SAMBA
) && (ra_type
!= RA_CIFSFS
)) {
209 /* Client can't support per-packet case sensitive pathnames. */
210 conn
->case_sensitive
= False
;
212 conn
->case_sensitive
= !(flags
& FLAG_CASELESS_PATHNAMES
);
217 conn
->case_sensitive
= True
;
220 conn
->case_sensitive
= False
;
226 /****************************************************************************
227 do some basic sainity checks on the share.
228 This function modifies dev, ecode.
229 ****************************************************************************/
231 static NTSTATUS
share_sanity_checks(const struct tsocket_address
*remote_address
,
238 raddr
= tsocket_address_inet_addr_string(remote_address
,
241 return NT_STATUS_NO_MEMORY
;
244 if (!lp_snum_ok(snum
) ||
245 !allow_access(lp_hostsdeny(snum
), lp_hostsallow(snum
),
247 return NT_STATUS_ACCESS_DENIED
;
250 if (dev
[0] == '?' || !dev
[0]) {
251 if (lp_print_ok(snum
)) {
252 fstrcpy(dev
,"LPT1:");
253 } else if (strequal(lp_fstype(talloc_tos(), snum
), "IPC")) {
262 if (lp_print_ok(snum
)) {
263 if (!strequal(dev
, "LPT1:")) {
264 return NT_STATUS_BAD_DEVICE_TYPE
;
266 } else if (strequal(lp_fstype(talloc_tos(), snum
), "IPC")) {
267 if (!strequal(dev
, "IPC")) {
268 return NT_STATUS_BAD_DEVICE_TYPE
;
270 } else if (!strequal(dev
, "A:")) {
271 return NT_STATUS_BAD_DEVICE_TYPE
;
274 /* Behave as a printer if we are supposed to */
275 if (lp_print_ok(snum
) && (strcmp(dev
, "A:") == 0)) {
276 fstrcpy(dev
, "LPT1:");
283 * Go through lookup_name etc to find the force'd group.
285 * Create a new token from src_token, replacing the primary group sid with the
289 static NTSTATUS
find_forced_group(bool force_user
,
290 int snum
, const char *username
,
291 struct dom_sid
*pgroup_sid
,
294 NTSTATUS result
= NT_STATUS_NO_SUCH_GROUP
;
295 TALLOC_CTX
*frame
= talloc_stackframe();
296 struct dom_sid group_sid
;
297 enum lsa_SidType type
;
299 bool user_must_be_member
= False
;
302 groupname
= lp_force_group(talloc_tos(), snum
);
303 if (groupname
== NULL
) {
304 DEBUG(1, ("talloc_strdup failed\n"));
305 result
= NT_STATUS_NO_MEMORY
;
309 if (groupname
[0] == '+') {
310 user_must_be_member
= True
;
314 groupname
= talloc_string_sub(talloc_tos(), groupname
,
315 "%S", lp_servicename(talloc_tos(), snum
));
316 if (groupname
== NULL
) {
317 DEBUG(1, ("talloc_string_sub failed\n"));
318 result
= NT_STATUS_NO_MEMORY
;
322 if (!lookup_name_smbconf(talloc_tos(), groupname
,
323 LOOKUP_NAME_ALL
|LOOKUP_NAME_GROUP
,
324 NULL
, NULL
, &group_sid
, &type
)) {
325 DEBUG(10, ("lookup_name_smbconf(%s) failed\n",
330 if ((type
!= SID_NAME_DOM_GRP
) && (type
!= SID_NAME_ALIAS
) &&
331 (type
!= SID_NAME_WKN_GRP
)) {
332 DEBUG(10, ("%s is a %s, not a group\n", groupname
,
333 sid_type_lookup(type
)));
337 if (!sid_to_gid(&group_sid
, &gid
)) {
338 DEBUG(10, ("sid_to_gid(%s) for %s failed\n",
339 sid_string_dbg(&group_sid
), groupname
));
344 * If the user has been forced and the forced group starts with a '+',
345 * then we only set the group to be the forced group if the forced
346 * user is a member of that group. Otherwise, the meaning of the '+'
350 if (force_user
&& user_must_be_member
) {
351 if (user_in_group_sid(username
, &group_sid
)) {
352 sid_copy(pgroup_sid
, &group_sid
);
354 DEBUG(3,("Forced group %s for member %s\n",
355 groupname
, username
));
357 DEBUG(0,("find_forced_group: forced user %s is not a member "
358 "of forced group %s. Disallowing access.\n",
359 username
, groupname
));
360 result
= NT_STATUS_MEMBER_NOT_IN_GROUP
;
364 sid_copy(pgroup_sid
, &group_sid
);
366 DEBUG(3,("Forced group %s\n", groupname
));
369 result
= NT_STATUS_OK
;
375 /****************************************************************************
376 Create an auth_session_info structure for a connection_struct
377 ****************************************************************************/
379 static NTSTATUS
create_connection_session_info(struct smbd_server_connection
*sconn
,
380 TALLOC_CTX
*mem_ctx
, int snum
,
381 struct auth_session_info
*session_info
,
382 struct auth_session_info
**presult
)
384 struct auth_session_info
*result
;
386 if (lp_guest_only(snum
)) {
387 return make_session_info_guest(mem_ctx
, presult
);
391 * This is the normal security != share case where we have a
392 * valid vuid from the session setup. */
394 if (security_session_user_level(session_info
, NULL
) < SECURITY_USER
) {
395 if (!lp_guest_ok(snum
)) {
396 DEBUG(2, ("guest user (from session setup) "
397 "not permitted to access this share "
398 "(%s)\n", lp_servicename(talloc_tos(), snum
)));
399 return NT_STATUS_ACCESS_DENIED
;
402 if (!user_ok_token(session_info
->unix_info
->unix_name
,
403 session_info
->info
->domain_name
,
404 session_info
->security_token
, snum
)) {
405 DEBUG(2, ("user '%s' (from session setup) not "
406 "permitted to access this share "
408 session_info
->unix_info
->unix_name
,
409 lp_servicename(talloc_tos(), snum
)));
410 return NT_STATUS_ACCESS_DENIED
;
414 result
= copy_session_info(mem_ctx
, session_info
);
415 if (result
== NULL
) {
416 return NT_STATUS_NO_MEMORY
;
423 /****************************************************************************
424 set relavent user and group settings corresponding to force user/group
425 configuration for the given snum.
426 ****************************************************************************/
428 NTSTATUS
set_conn_force_user_group(connection_struct
*conn
, int snum
)
432 if (*lp_force_user(talloc_tos(), snum
)) {
435 * Replace conn->session_info with a completely faked up one
436 * from the username we are forced into :-)
440 char *sanitized_username
;
441 struct auth_session_info
*forced_serverinfo
;
444 fuser
= talloc_string_sub(conn
, lp_force_user(talloc_tos(), snum
), "%S",
445 lp_const_servicename(snum
));
447 return NT_STATUS_NO_MEMORY
;
450 guest
= security_session_user_level(conn
->session_info
, NULL
) < SECURITY_USER
;
452 status
= make_session_info_from_username(
456 if (!NT_STATUS_IS_OK(status
)) {
460 /* We don't want to replace the original sanitized_username
461 as it is the original user given in the connect attempt.
462 This is used in '%U' substitutions. */
463 sanitized_username
= discard_const_p(char,
464 forced_serverinfo
->unix_info
->sanitized_username
);
465 TALLOC_FREE(sanitized_username
);
466 forced_serverinfo
->unix_info
->sanitized_username
=
467 talloc_move(forced_serverinfo
->unix_info
,
468 &conn
->session_info
->unix_info
->sanitized_username
);
470 TALLOC_FREE(conn
->session_info
);
471 conn
->session_info
= forced_serverinfo
;
473 conn
->force_user
= true;
474 DEBUG(3,("Forced user %s\n", fuser
));
478 * If force group is true, then override
479 * any groupid stored for the connecting user.
482 if (*lp_force_group(talloc_tos(), snum
)) {
484 status
= find_forced_group(
485 conn
->force_user
, snum
, conn
->session_info
->unix_info
->unix_name
,
486 &conn
->session_info
->security_token
->sids
[1],
487 &conn
->session_info
->unix_token
->gid
);
489 if (!NT_STATUS_IS_OK(status
)) {
494 * We need to cache this gid, to use within
495 * change_to_user() separately from the conn->session_info
496 * struct. We only use conn->session_info directly if
497 * "force_user" was set.
499 conn
->force_group_gid
= conn
->session_info
->unix_token
->gid
;
505 /****************************************************************************
506 Setup the share access mask for a connection.
507 ****************************************************************************/
509 static void create_share_access_mask(connection_struct
*conn
, int snum
)
511 const struct security_token
*token
= conn
->session_info
->security_token
;
513 share_access_check(token
,
514 lp_servicename(talloc_tos(), snum
),
515 MAXIMUM_ALLOWED_ACCESS
,
516 &conn
->share_access
);
518 if (security_token_has_privilege(token
, SEC_PRIV_SECURITY
)) {
519 conn
->share_access
|= SEC_FLAG_SYSTEM_SECURITY
;
521 if (security_token_has_privilege(token
, SEC_PRIV_RESTORE
)) {
522 conn
->share_access
|= (SEC_RIGHTS_PRIV_RESTORE
);
524 if (security_token_has_privilege(token
, SEC_PRIV_BACKUP
)) {
525 conn
->share_access
|= (SEC_RIGHTS_PRIV_BACKUP
);
527 if (security_token_has_privilege(token
, SEC_PRIV_TAKE_OWNERSHIP
)) {
528 conn
->share_access
|= (SEC_STD_WRITE_OWNER
);
532 /****************************************************************************
533 Make a connection, given the snum to connect to, and the vuser of the
534 connecting user if appropriate.
535 ****************************************************************************/
537 static NTSTATUS
make_connection_snum(struct smbd_server_connection
*sconn
,
538 connection_struct
*conn
,
539 int snum
, struct user_struct
*vuser
,
542 struct smb_filename
*smb_fname_cpath
= NULL
;
545 bool on_err_call_dis_hook
= false;
546 bool claimed_connection
= false;
553 status
= share_sanity_checks(sconn
->remote_address
,
554 sconn
->remote_hostname
,
557 if (NT_STATUS_IS_ERR(status
)) {
561 conn
->params
->service
= snum
;
563 status
= create_connection_session_info(sconn
,
564 conn
, snum
, vuser
->session_info
,
565 &conn
->session_info
);
567 if (!NT_STATUS_IS_OK(status
)) {
568 DEBUG(1, ("create_connection_session_info failed: %s\n",
573 if (lp_guest_only(snum
)) {
574 conn
->force_user
= true;
577 conn
->num_files_open
= 0;
578 conn
->lastused
= conn
->lastused_count
= time(NULL
);
579 conn
->printer
= (strncmp(dev
,"LPT",3) == 0);
580 conn
->ipc
= ( (strncmp(dev
,"IPC",3) == 0) ||
581 ( lp_enable_asu_support() && strequal(dev
,"ADMIN$")) );
583 /* Case options for the share. */
584 if (lp_casesensitive(snum
) == Auto
) {
585 /* We will be setting this per packet. Set to be case
586 * insensitive for now. */
587 conn
->case_sensitive
= False
;
589 conn
->case_sensitive
= (bool)lp_casesensitive(snum
);
592 conn
->case_preserve
= lp_preservecase(snum
);
593 conn
->short_case_preserve
= lp_shortpreservecase(snum
);
595 conn
->encrypt_level
= lp_smb_encrypt(snum
);
597 conn
->veto_list
= NULL
;
598 conn
->hide_list
= NULL
;
599 conn
->veto_oplock_list
= NULL
;
600 conn
->aio_write_behind_list
= NULL
;
602 conn
->read_only
= lp_readonly(SNUM(conn
));
604 status
= set_conn_force_user_group(conn
, snum
);
605 if (!NT_STATUS_IS_OK(status
)) {
609 conn
->vuid
= vuser
->vuid
;
612 char *s
= talloc_sub_advanced(talloc_tos(),
613 lp_servicename(talloc_tos(), SNUM(conn
)),
614 conn
->session_info
->unix_info
->unix_name
,
616 conn
->session_info
->unix_token
->gid
,
617 conn
->session_info
->unix_info
->sanitized_username
,
618 conn
->session_info
->info
->domain_name
,
619 lp_pathname(talloc_tos(), snum
));
621 status
= NT_STATUS_NO_MEMORY
;
625 if (!set_conn_connectpath(conn
,s
)) {
627 status
= NT_STATUS_NO_MEMORY
;
630 DEBUG(3,("Connect path is '%s' for service [%s]\n",s
,
631 lp_servicename(talloc_tos(), snum
)));
636 * New code to check if there's a share security descripter
637 * added from NT server manager. This is done after the
638 * smb.conf checks are done as we need a uid and token. JRA.
642 create_share_access_mask(conn
, snum
);
644 if ((conn
->share_access
& FILE_WRITE_DATA
) == 0) {
645 if ((conn
->share_access
& FILE_READ_DATA
) == 0) {
646 /* No access, read or write. */
647 DEBUG(0,("make_connection: connection to %s "
648 "denied due to security "
650 lp_servicename(talloc_tos(), snum
)));
651 status
= NT_STATUS_ACCESS_DENIED
;
654 conn
->read_only
= True
;
657 /* Initialise VFS function pointers */
659 if (!smbd_vfs_init(conn
)) {
660 DEBUG(0, ("vfs_init failed for service %s\n",
661 lp_servicename(talloc_tos(), snum
)));
662 status
= NT_STATUS_BAD_NETWORK_NAME
;
666 /* ROOT Activities: */
667 /* explicitly check widelinks here so that we can correctly warn
669 widelinks_warning(snum
);
672 * Enforce the max connections parameter.
675 if ((lp_max_connections(snum
) > 0)
676 && (count_current_connections(lp_servicename(talloc_tos(), SNUM(conn
)), True
) >=
677 lp_max_connections(snum
))) {
679 DEBUG(1, ("Max connections (%d) exceeded for %s\n",
680 lp_max_connections(snum
),
681 lp_servicename(talloc_tos(), snum
)));
682 status
= NT_STATUS_INSUFFICIENT_RESOURCES
;
687 * Get us an entry in the connections db
689 if (!claim_connection(conn
, lp_servicename(talloc_tos(), snum
))) {
690 DEBUG(1, ("Could not store connections entry\n"));
691 status
= NT_STATUS_INTERNAL_DB_ERROR
;
694 claimed_connection
= true;
696 /* Invoke VFS make connection hook - this must be the first
697 filesystem operation that we do. */
699 if (SMB_VFS_CONNECT(conn
, lp_servicename(talloc_tos(), snum
),
700 conn
->session_info
->unix_info
->unix_name
) < 0) {
701 DEBUG(0,("make_connection: VFS make connection failed!\n"));
702 status
= NT_STATUS_UNSUCCESSFUL
;
706 /* Any error exit after here needs to call the disconnect hook. */
707 on_err_call_dis_hook
= true;
709 if ((!conn
->printer
) && (!conn
->ipc
) &&
710 lp_change_notify(conn
->params
)) {
711 if (sconn
->notify_ctx
== NULL
) {
712 sconn
->notify_ctx
= notify_init(
713 sconn
, sconn
->msg_ctx
, sconn
->ev_ctx
);
715 if (sconn
->sys_notify_ctx
== NULL
) {
716 sconn
->sys_notify_ctx
= sys_notify_context_create(
717 sconn
, sconn
->ev_ctx
);
721 if (lp_kernel_oplocks(snum
)) {
722 init_kernel_oplocks(conn
->sconn
);
726 * Fix compatibility issue pointed out by Volker.
727 * We pass the conn->connectpath to the preexec
728 * scripts as a parameter, so attempt to canonicalize
729 * it here before calling the preexec scripts.
730 * We ignore errors here, as it is possible that
731 * the conn->connectpath doesn't exist yet and
732 * the preexec scripts will create them.
735 (void)canonicalize_connect_path(conn
);
737 /* Preexecs are done here as they might make the dir we are to ChDir
739 /* execute any "root preexec = " line */
740 if (*lp_rootpreexec(talloc_tos(), snum
)) {
741 char *cmd
= talloc_sub_advanced(talloc_tos(),
742 lp_servicename(talloc_tos(), SNUM(conn
)),
743 conn
->session_info
->unix_info
->unix_name
,
745 conn
->session_info
->unix_token
->gid
,
746 conn
->session_info
->unix_info
->sanitized_username
,
747 conn
->session_info
->info
->domain_name
,
748 lp_rootpreexec(talloc_tos(), snum
));
749 DEBUG(5,("cmd=%s\n",cmd
));
750 ret
= smbrun(cmd
,NULL
);
752 if (ret
!= 0 && lp_rootpreexec_close(snum
)) {
753 DEBUG(1,("root preexec gave %d - failing "
754 "connection\n", ret
));
755 status
= NT_STATUS_ACCESS_DENIED
;
760 /* USER Activites: */
761 if (!change_to_user(conn
, conn
->vuid
)) {
762 /* No point continuing if they fail the basic checks */
763 DEBUG(0,("Can't become connected user!\n"));
764 status
= NT_STATUS_LOGON_FAILURE
;
771 /* Remember that a different vuid can connect later without these
774 /* Preexecs are done here as they might make the dir we are to ChDir
777 /* execute any "preexec = " line */
778 if (*lp_preexec(talloc_tos(), snum
)) {
779 char *cmd
= talloc_sub_advanced(talloc_tos(),
780 lp_servicename(talloc_tos(), SNUM(conn
)),
781 conn
->session_info
->unix_info
->unix_name
,
783 conn
->session_info
->unix_token
->gid
,
784 conn
->session_info
->unix_info
->sanitized_username
,
785 conn
->session_info
->info
->domain_name
,
786 lp_preexec(talloc_tos(), snum
));
787 ret
= smbrun(cmd
,NULL
);
789 if (ret
!= 0 && lp_preexec_close(snum
)) {
790 DEBUG(1,("preexec gave %d - failing connection\n",
792 status
= NT_STATUS_ACCESS_DENIED
;
797 #ifdef WITH_FAKE_KASERVER
798 if (lp_afs_share(snum
)) {
804 * we've finished with the user stuff - go back to root
805 * so the SMB_VFS_STAT call will only fail on path errors,
806 * not permission problems.
808 change_to_root_user();
809 /* ROOT Activites: */
812 * If widelinks are disallowed we need to canonicalise the connect
813 * path here to ensure we don't have any symlinks in the
814 * connectpath. We will be checking all paths on this connection are
815 * below this directory. We must do this after the VFS init as we
816 * depend on the realpath() pointer in the vfs table. JRA.
818 if (!lp_widelinks(snum
)) {
819 if (!canonicalize_connect_path(conn
)) {
820 DEBUG(0, ("canonicalize_connect_path failed "
821 "for service %s, path %s\n",
822 lp_servicename(talloc_tos(), snum
),
824 status
= NT_STATUS_BAD_NETWORK_NAME
;
829 /* Add veto/hide lists */
830 if (!IS_IPC(conn
) && !IS_PRINT(conn
)) {
831 set_namearray( &conn
->veto_list
,
832 lp_veto_files(talloc_tos(), snum
));
833 set_namearray( &conn
->hide_list
,
834 lp_hide_files(talloc_tos(), snum
));
835 set_namearray( &conn
->veto_oplock_list
,
836 lp_veto_oplocks(talloc_tos(), snum
));
837 set_namearray( &conn
->aio_write_behind_list
,
838 lp_aio_write_behind(talloc_tos(), snum
));
840 status
= create_synthetic_smb_fname(talloc_tos(), conn
->connectpath
,
841 NULL
, NULL
, &smb_fname_cpath
);
842 if (!NT_STATUS_IS_OK(status
)) {
846 /* win2000 does not check the permissions on the directory
847 during the tree connect, instead relying on permission
848 check during individual operations. To match this behaviour
849 I have disabled this chdir check (tridge) */
850 /* the alternative is just to check the directory exists */
852 if ((ret
= SMB_VFS_STAT(conn
, smb_fname_cpath
)) != 0 ||
853 !S_ISDIR(smb_fname_cpath
->st
.st_ex_mode
)) {
854 if (ret
== 0 && !S_ISDIR(smb_fname_cpath
->st
.st_ex_mode
)) {
855 DEBUG(0,("'%s' is not a directory, when connecting to "
856 "[%s]\n", conn
->connectpath
,
857 lp_servicename(talloc_tos(), snum
)));
859 DEBUG(0,("'%s' does not exist or permission denied "
860 "when connecting to [%s] Error was %s\n",
862 lp_servicename(talloc_tos(), snum
),
865 status
= NT_STATUS_BAD_NETWORK_NAME
;
868 conn
->base_share_dev
= smb_fname_cpath
->st
.st_ex_dev
;
870 talloc_free(conn
->origpath
);
871 conn
->origpath
= talloc_strdup(conn
, conn
->connectpath
);
873 /* Figure out the characteristics of the underlying filesystem. This
874 * assumes that all the filesystem mounted withing a share path have
875 * the same characteristics, which is likely but not guaranteed.
878 conn
->fs_capabilities
= SMB_VFS_FS_CAPABILITIES(conn
, &conn
->ts_res
);
881 * Print out the 'connected as' stuff here as we need
882 * to know the effective uid and gid we will be using
883 * (at least initially).
886 if( DEBUGLVL( IS_IPC(conn
) ? 3 : 1 ) ) {
887 dbgtext( "%s (%s) ", get_remote_machine_name(),
888 tsocket_address_string(conn
->sconn
->remote_address
,
890 dbgtext( "%s", srv_is_signing_active(sconn
) ? "signed " : "");
891 dbgtext( "connect to service %s ",
892 lp_servicename(talloc_tos(), snum
) );
893 dbgtext( "initially as user %s ",
894 conn
->session_info
->unix_info
->unix_name
);
895 dbgtext( "(uid=%d, gid=%d) ", (int)effuid
, (int)effgid
);
896 dbgtext( "(pid %d)\n", (int)getpid() );
903 TALLOC_FREE(smb_fname_cpath
);
904 /* We must exit this function as root. */
905 if (geteuid() != 0) {
906 change_to_root_user();
908 if (on_err_call_dis_hook
) {
909 /* Call VFS disconnect hook */
910 SMB_VFS_DISCONNECT(conn
);
912 if (claimed_connection
) {
913 yield_connection(conn
, lp_servicename(talloc_tos(), snum
));
918 /****************************************************************************
919 Make a connection to a service from SMB1. Internal interface.
920 ****************************************************************************/
922 static connection_struct
*make_connection_smb1(struct smbd_server_connection
*sconn
,
923 int snum
, struct user_struct
*vuser
,
927 struct smbXsrv_tcon
*tcon
;
930 struct connection_struct
*conn
;
932 status
= smb1srv_tcon_create(sconn
->conn
, now
, &tcon
);
933 if (!NT_STATUS_IS_OK(status
)) {
934 DEBUG(0,("make_connection_smb1: Couldn't find free tcon %s.\n",
940 conn
= conn_new(sconn
);
944 DEBUG(0,("make_connection_smb1: Couldn't find free connection.\n"));
945 *pstatus
= NT_STATUS_INSUFFICIENT_RESOURCES
;
949 conn
->cnum
= tcon
->global
->tcon_wire_id
;
952 *pstatus
= make_connection_snum(sconn
,
957 if (!NT_STATUS_IS_OK(*pstatus
)) {
963 tcon
->global
->share_name
= lp_servicename(tcon
->global
, SNUM(conn
));
964 if (tcon
->global
->share_name
== NULL
) {
967 *pstatus
= NT_STATUS_NO_MEMORY
;
971 tcon
->compat
= talloc_move(tcon
, &conn
);
972 tcon
->status
= NT_STATUS_OK
;
974 *pstatus
= smbXsrv_tcon_update(tcon
);
975 if (!NT_STATUS_IS_OK(*pstatus
)) {
983 /****************************************************************************
984 Make a connection to a service from SMB2. External SMB2 interface.
985 We must set cnum before claiming connection.
986 ****************************************************************************/
988 connection_struct
*make_connection_smb2(struct smbd_server_connection
*sconn
,
989 struct smbXsrv_tcon
*tcon
,
991 struct user_struct
*vuser
,
995 connection_struct
*conn
= conn_new(sconn
);
997 DEBUG(0,("make_connection_smb2: Couldn't find free connection.\n"));
998 *pstatus
= NT_STATUS_INSUFFICIENT_RESOURCES
;
1002 conn
->cnum
= tcon
->global
->tcon_wire_id
;
1005 *pstatus
= make_connection_snum(sconn
,
1010 if (!NT_STATUS_IS_OK(*pstatus
)) {
1017 /****************************************************************************
1018 Make a connection to a service. External SMB1 interface.
1021 ****************************************************************************/
1023 connection_struct
*make_connection(struct smbd_server_connection
*sconn
,
1024 const char *service_in
,
1025 const char *pdev
, uint64_t vuid
,
1029 struct user_struct
*vuser
= NULL
;
1030 char *service
= NULL
;
1036 /* This must ONLY BE CALLED AS ROOT. As it exits this function as
1038 if (!non_root_mode() && (euid
= geteuid()) != 0) {
1039 DEBUG(0,("make_connection: PANIC ERROR. Called as nonroot "
1040 "(%u)\n", (unsigned int)euid
));
1041 smb_panic("make_connection: PANIC ERROR. Called as nonroot\n");
1044 if (conn_num_open(sconn
) > 2047) {
1045 *status
= NT_STATUS_INSUFF_SERVER_RESOURCES
;
1049 vuser
= get_valid_user_struct(sconn
, vuid
);
1051 DEBUG(1,("make_connection: refusing to connect with "
1052 "no session setup\n"));
1053 *status
= NT_STATUS_ACCESS_DENIED
;
1057 /* Logic to try and connect to the correct [homes] share, preferably
1058 without too many getpwnam() lookups. This is particulary nasty for
1059 winbind usernames, where the share name isn't the same as unix
1062 The snum of the homes share is stored on the vuser at session setup
1066 if (strequal(service_in
,HOMES_NAME
)) {
1067 if (vuser
->homes_snum
== -1) {
1068 DEBUG(2, ("[homes] share not available for "
1069 "this user because it was not found "
1070 "or created at session setup "
1072 *status
= NT_STATUS_BAD_NETWORK_NAME
;
1075 DEBUG(5, ("making a connection to [homes] service "
1076 "created at session setup time\n"));
1077 return make_connection_smb1(sconn
,
1081 } else if ((vuser
->homes_snum
!= -1)
1082 && strequal(service_in
,
1083 lp_servicename(talloc_tos(), vuser
->homes_snum
))) {
1084 DEBUG(5, ("making a connection to 'homes' service [%s] "
1085 "created at session setup time\n", service_in
));
1086 return make_connection_smb1(sconn
,
1092 service
= talloc_strdup(talloc_tos(), service_in
);
1094 *status
= NT_STATUS_NO_MEMORY
;
1098 strlower_m(service
);
1100 snum
= find_service(talloc_tos(), service
, &service
);
1102 *status
= NT_STATUS_NO_MEMORY
;
1107 if (strequal(service
,"IPC$") ||
1108 (lp_enable_asu_support() && strequal(service
,"ADMIN$"))) {
1109 DEBUG(3,("refusing IPC connection to %s\n", service
));
1110 *status
= NT_STATUS_ACCESS_DENIED
;
1114 DEBUG(3,("%s (%s) couldn't find service %s\n",
1115 get_remote_machine_name(),
1116 tsocket_address_string(
1117 sconn
->remote_address
, talloc_tos()),
1119 *status
= NT_STATUS_BAD_NETWORK_NAME
;
1123 /* Handle non-Dfs clients attempting connections to msdfs proxy */
1124 if (lp_host_msdfs() && (*lp_msdfs_proxy(talloc_tos(), snum
) != '\0')) {
1125 DEBUG(3, ("refusing connection to dfs proxy share '%s' "
1126 "(pointing to %s)\n",
1127 service
, lp_msdfs_proxy(talloc_tos(), snum
)));
1128 *status
= NT_STATUS_BAD_NETWORK_NAME
;
1132 DEBUG(5, ("making a connection to 'normal' service %s\n", service
));
1134 return make_connection_smb1(sconn
, snum
, vuser
,
1138 /****************************************************************************
1140 ****************************************************************************/
1142 void close_cnum(connection_struct
*conn
, uint64_t vuid
)
1144 file_close_conn(conn
);
1146 if (!IS_IPC(conn
)) {
1147 dptr_closecnum(conn
);
1150 change_to_root_user();
1152 DEBUG(IS_IPC(conn
)?3:1, ("%s (%s) closed connection to service %s\n",
1153 get_remote_machine_name(),
1154 tsocket_address_string(conn
->sconn
->remote_address
,
1156 lp_servicename(talloc_tos(), SNUM(conn
))));
1158 /* Call VFS disconnect hook */
1159 SMB_VFS_DISCONNECT(conn
);
1161 yield_connection(conn
, lp_servicename(talloc_tos(), SNUM(conn
)));
1163 /* make sure we leave the directory available for unmount */
1164 vfs_ChDir(conn
, "/");
1166 /* execute any "postexec = " line */
1167 if (*lp_postexec(talloc_tos(), SNUM(conn
)) &&
1168 change_to_user(conn
, vuid
)) {
1169 char *cmd
= talloc_sub_advanced(talloc_tos(),
1170 lp_servicename(talloc_tos(), SNUM(conn
)),
1171 conn
->session_info
->unix_info
->unix_name
,
1173 conn
->session_info
->unix_token
->gid
,
1174 conn
->session_info
->unix_info
->sanitized_username
,
1175 conn
->session_info
->info
->domain_name
,
1176 lp_postexec(talloc_tos(), SNUM(conn
)));
1179 change_to_root_user();
1182 change_to_root_user();
1183 /* execute any "root postexec = " line */
1184 if (*lp_rootpostexec(talloc_tos(), SNUM(conn
))) {
1185 char *cmd
= talloc_sub_advanced(talloc_tos(),
1186 lp_servicename(talloc_tos(), SNUM(conn
)),
1187 conn
->session_info
->unix_info
->unix_name
,
1189 conn
->session_info
->unix_token
->gid
,
1190 conn
->session_info
->unix_info
->sanitized_username
,
1191 conn
->session_info
->info
->domain_name
,
1192 lp_rootpostexec(talloc_tos(), SNUM(conn
)));