2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Tridgell 1999
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
22 #include "system/passwd.h"
25 #include <asm/types.h>
26 #include <linux/smb_fs.h>
28 static pstring credentials
;
29 static pstring my_netbios_name
;
30 static pstring password
;
31 static pstring username
;
32 static pstring workgroup
;
33 static pstring mpoint
;
34 static pstring service
;
35 static pstring options
;
37 static struct ipv4_addr dest_ip
;
39 static int smb_port
= 0;
42 static uid_t mount_uid
;
43 static gid_t mount_gid
;
45 static uint_t mount_fmask
;
46 static uint_t mount_dmask
;
47 static BOOL use_kerberos
;
48 /* TODO: Add code to detect smbfs version in kernel */
49 static BOOL status32_smbfs
= False
;
51 static void usage(void);
53 static void exit_parent(int sig
)
55 /* parent simply exits when child says go... */
59 static void daemonize(void)
64 signal( SIGTERM
, exit_parent
);
66 if ((child_pid
= sys_fork()) < 0) {
67 DEBUG(0,("could not fork\n"));
72 j
= waitpid( child_pid
, &status
, 0 );
74 if( EINTR
== errno
) {
82 /* If we get here - the child exited with some error status */
83 if (WIFSIGNALED(status
))
84 exit(128 + WTERMSIG(status
));
86 exit(WEXITSTATUS(status
));
89 signal( SIGTERM
, SIG_DFL
);
93 static void close_our_files(int client_fd
)
98 getrlimit(RLIMIT_NOFILE
,&limits
);
99 for (i
= 0; i
< limits
.rlim_max
; i
++) {
106 static void usr1_handler(int x
)
112 /*****************************************************
113 return a connection to a server
114 *******************************************************/
115 static struct smbcli_state
*do_connection(char *the_service
)
117 struct smbcli_state
*c
;
118 struct nmb_name called
, calling
;
124 if (the_service
[0] != '\\' || the_service
[1] != '\\') {
129 pstrcpy(server
, the_service
+2);
130 share
= strchr_m(server
,'\\');
140 make_nmb_name(&calling
, my_netbios_name
, 0x0);
141 choose_called_name(&called
, server
, 0x20);
145 if (have_ip
) ip
= dest_ip
;
147 /* have to open a new connection */
148 if (!(c
=smbcli_initialise(NULL
)) || (smbcli_set_port(c
, smb_port
) != smb_port
) ||
149 !smbcli_connect(c
, server_n
, &ip
)) {
150 DEBUG(0,("%d: Connection to %s failed\n", sys_getpid(), server_n
));
157 /* SPNEGO doesn't work till we get NTSTATUS error support */
158 /* But it is REQUIRED for kerberos authentication */
159 if(!use_kerberos
) c
->use_spnego
= False
;
161 /* The kernel doesn't yet know how to sign it's packets */
162 c
->sign_info
.allow_smb_signing
= False
;
164 /* Use kerberos authentication if specified */
165 c
->use_kerberos
= use_kerberos
;
167 if (!smbcli_session_request(c
, &calling
, &called
)) {
169 DEBUG(0,("%d: session request to %s failed (%s)\n",
170 sys_getpid(), called
.name
, smbcli_errstr(c
)));
172 if ((p
=strchr_m(called
.name
, '.'))) {
176 if (strcmp(called
.name
, "*SMBSERVER")) {
177 make_nmb_name(&called
, "*SMBSERVER", 0x20);
183 DEBUG(4,("%d: session request ok\n", sys_getpid()));
185 if (!smbcli_negprot(c
)) {
186 DEBUG(0,("%d: protocol negotiation failed\n", sys_getpid()));
192 char *pass
= getpass("Password: ");
194 pstrcpy(password
, pass
);
198 /* This should be right for current smbfs. Future versions will support
199 large files as well as unicode and oplocks. */
200 if (status32_smbfs
) {
201 c
->capabilities
&= ~(CAP_UNICODE
| CAP_LARGE_FILES
| CAP_NT_SMBS
|
202 CAP_NT_FIND
| CAP_LEVEL_II_OPLOCKS
);
205 c
->capabilities
&= ~(CAP_UNICODE
| CAP_LARGE_FILES
| CAP_NT_SMBS
|
206 CAP_NT_FIND
| CAP_STATUS32
|
207 CAP_LEVEL_II_OPLOCKS
);
208 c
->force_dos_errors
= True
;
211 if (!smbcli_session_setup(c
, username
,
212 password
, strlen(password
),
213 password
, strlen(password
),
215 /* if a password was not supplied then try again with a
217 if (password
[0] || !username
[0] ||
218 !smbcli_session_setup(c
, "", "", 0, "", 0, workgroup
)) {
219 DEBUG(0,("%d: session setup failed: %s\n",
220 sys_getpid(), smbcli_errstr(c
)));
224 DEBUG(0,("Anonymous login successful\n"));
227 DEBUG(4,("%d: session setup ok\n", sys_getpid()));
229 if (!smbcli_tconX(c
, share
, "?????", password
, strlen(password
)+1)) {
230 DEBUG(0,("%d: tree connect failed: %s\n",
231 sys_getpid(), smbcli_errstr(c
)));
236 DEBUG(4,("%d: tconx ok\n", sys_getpid()));
244 /****************************************************************************
245 unmount smbfs (this is a bailout routine to clean up if a reconnect fails)
246 Code blatently stolen from smbumount.c
248 ****************************************************************************/
249 static void smb_umount(char *mount_point
)
257 This routine only gets called to the scene of a disaster
258 to shoot the survivors... A connection that was working
259 has now apparently failed. We have an active mount point
260 (presumably) that we need to dump. If we get errors along
261 the way - make some noise, but we are already turning out
262 the lights to exit anyways...
264 if (umount(mount_point
) != 0) {
265 DEBUG(0,("%d: Could not umount %s: %s\n",
266 sys_getpid(), mount_point
, strerror(errno
)));
270 if ((fd
= open(MOUNTED
"~", O_RDWR
|O_CREAT
|O_EXCL
, 0600)) == -1) {
271 DEBUG(0,("%d: Can't get "MOUNTED
"~ lock file", sys_getpid()));
277 if ((mtab
= setmntent(MOUNTED
, "r")) == NULL
) {
278 DEBUG(0,("%d: Can't open " MOUNTED
": %s\n",
279 sys_getpid(), strerror(errno
)));
283 #define MOUNTED_TMP MOUNTED".tmp"
285 if ((new_mtab
= setmntent(MOUNTED_TMP
, "w")) == NULL
) {
286 DEBUG(0,("%d: Can't open " MOUNTED_TMP
": %s\n",
287 sys_getpid(), strerror(errno
)));
292 while ((mnt
= getmntent(mtab
)) != NULL
) {
293 if (strcmp(mnt
->mnt_dir
, mount_point
) != 0) {
294 addmntent(new_mtab
, mnt
);
300 if (fchmod (fileno (new_mtab
), S_IRUSR
|S_IWUSR
|S_IRGRP
|S_IROTH
) < 0) {
301 DEBUG(0,("%d: Error changing mode of %s: %s\n",
302 sys_getpid(), MOUNTED_TMP
, strerror(errno
)));
308 if (rename(MOUNTED_TMP
, MOUNTED
) < 0) {
309 DEBUG(0,("%d: Cannot rename %s to %s: %s\n",
310 sys_getpid(), MOUNTED
, MOUNTED_TMP
, strerror(errno
)));
314 if (unlink(MOUNTED
"~") == -1) {
315 DEBUG(0,("%d: Can't remove "MOUNTED
"~", sys_getpid()));
322 * Call the smbfs ioctl to install a connection socket,
323 * then wait for a signal to reconnect. Note that we do
324 * not exit after open_sockets() or send_login() errors,
325 * as the smbfs mount would then have no way to recover.
327 static void send_fs_socket(char *the_service
, char *mount_point
, struct smbcli_state
*c
)
329 int fd
, closed
= 0, res
= 1;
330 pid_t parentpid
= getppid();
331 struct smb_conn_opt conn_options
;
333 memset(&conn_options
, 0, sizeof(conn_options
));
336 if ((fd
= open(mount_point
, O_RDONLY
)) < 0) {
337 DEBUG(0,("mount.smbfs[%d]: can't open %s\n",
338 sys_getpid(), mount_point
));
342 conn_options
.fd
= c
->fd
;
343 conn_options
.protocol
= c
->protocol
;
344 conn_options
.case_handling
= SMB_CASE_DEFAULT
;
345 conn_options
.max_xmit
= c
->max_xmit
;
346 conn_options
.server_uid
= c
->vuid
;
347 conn_options
.tid
= c
->cnum
;
348 conn_options
.secmode
= c
->sec_mode
;
349 conn_options
.rawmode
= 0;
350 conn_options
.sesskey
= c
->sesskey
;
351 conn_options
.maxraw
= 0;
352 conn_options
.capabilities
= c
->capabilities
;
353 conn_options
.serverzone
= c
->serverzone
/60;
355 res
= ioctl(fd
, SMB_IOC_NEWCONN
, &conn_options
);
357 DEBUG(0,("mount.smbfs[%d]: ioctl failed, res=%d\n",
364 /* Ok... We are going to kill the parent. Now
365 is the time to break the process group... */
367 /* Send a signal to the parent to terminate */
368 kill(parentpid
, SIGTERM
);
374 /* This looks wierd but we are only closing the userspace
375 side, the connection has already been passed to smbfs and
376 it has increased the usage count on the socket.
378 If we don't do this we will "leak" sockets and memory on
379 each reconnection we have to make. */
384 /* redirect stdout & stderr since we can't know that
385 the library functions we use are using DEBUG. */
386 if ( (fd
= open("/dev/null", O_WRONLY
)) < 0)
387 DEBUG(2,("mount.smbfs: can't open /dev/null\n"));
390 dup2(fd
, STDOUT_FILENO
);
391 dup2(fd
, STDERR_FILENO
);
395 /* here we are no longer interactive */
396 set_remote_machine_name("smbmount"); /* sneaky ... */
397 setup_logging("mount.smbfs", DEBUG_STDERR
);
399 DEBUG(0, ("mount.smbfs: entering daemon mode for service %s, pid=%d\n", the_service
, sys_getpid()));
404 /* Wait for a signal from smbfs ... but don't continue
405 until we actually get a new connection. */
407 CatchSignal(SIGUSR1
, &usr1_handler
);
409 DEBUG(2,("mount.smbfs[%d]: got signal, getting new socket\n", sys_getpid()));
410 c
= do_connection(the_service
);
414 smb_umount(mount_point
);
415 DEBUG(2,("mount.smbfs[%d]: exit\n", sys_getpid()));
423 static void init_mount(void)
425 char mount_point
[MAXPATHLEN
+1];
428 struct smbcli_state
*c
;
432 if (realpath(mpoint
, mount_point
) == NULL
) {
433 fprintf(stderr
, "Could not resolve mount point %s\n", mpoint
);
438 c
= do_connection(service
);
440 fprintf(stderr
,"SMB connection failed\n");
445 Set up to return as a daemon child and wait in the parent
446 until the child say it's ready...
450 pstrcpy(svc2
, service
);
451 string_replace(svc2
, '\\','/');
452 string_replace(svc2
, ' ','_');
454 memset(args
, 0, sizeof(args
[0])*20);
457 args
[i
++] = "smbmnt";
459 args
[i
++] = mount_point
;
467 slprintf(tmp
, sizeof(tmp
)-1, "%d", mount_uid
);
469 args
[i
++] = smb_xstrdup(tmp
);
472 slprintf(tmp
, sizeof(tmp
)-1, "%d", mount_gid
);
474 args
[i
++] = smb_xstrdup(tmp
);
477 slprintf(tmp
, sizeof(tmp
)-1, "0%o", mount_fmask
);
479 args
[i
++] = smb_xstrdup(tmp
);
482 slprintf(tmp
, sizeof(tmp
)-1, "0%o", mount_dmask
);
484 args
[i
++] = smb_xstrdup(tmp
);
491 if (sys_fork() == 0) {
494 asprintf(&smbmnt_path
, "%s/smbmnt", dyn_BINDIR
);
496 if (file_exist(smbmnt_path
)) {
497 execv(smbmnt_path
, args
);
499 "smbfs/init_mount: execv of %s failed. Error was %s.",
500 smbmnt_path
, strerror(errno
));
502 execvp("smbmnt", args
);
504 "smbfs/init_mount: execv of %s failed. Error was %s.",
505 "smbmnt", strerror(errno
));
511 if (waitpid(-1, &status
, 0) == -1) {
512 fprintf(stderr
,"waitpid failed: Error was %s", strerror(errno
) );
513 /* FIXME: do some proper error handling */
517 if (WIFEXITED(status
) && WEXITSTATUS(status
) != 0) {
518 fprintf(stderr
,"smbmnt failed: %d\n", WEXITSTATUS(status
));
519 /* FIXME: do some proper error handling */
521 } else if (WIFSIGNALED(status
)) {
522 fprintf(stderr
, "smbmnt killed by signal %d\n", WTERMSIG(status
));
526 /* Ok... This is the rubicon for that mount point... At any point
527 after this, if the connections fail and can not be reconstructed
528 for any reason, we will have to unmount the mount point. There
529 is no exit from the next call...
531 send_fs_socket(service
, mount_point
, c
);
535 /****************************************************************************
536 get a password from a a file or file descriptor
537 exit on failure (from smbclient, move to libsmb or shared .c file?)
538 ****************************************************************************/
539 static void get_password_file(void)
543 BOOL close_it
= False
;
547 if ((p
= getenv("PASSWD_FD")) != NULL
) {
548 pstrcpy(spec
, "descriptor ");
550 sscanf(p
, "%d", &fd
);
552 } else if ((p
= getenv("PASSWD_FILE")) != NULL
) {
553 fd
= open(p
, O_RDONLY
, 0);
556 fprintf(stderr
, "Error opening PASSWD_FILE %s: %s\n",
557 spec
, strerror(errno
));
563 for(p
= pass
, *p
= '\0'; /* ensure that pass is null-terminated */
564 p
&& p
- pass
< sizeof(pass
);) {
565 switch (read(fd
, p
, 1)) {
567 if (*p
!= '\n' && *p
!= '\0') {
568 *++p
= '\0'; /* advance p, and null-terminate pass */
573 *p
= '\0'; /* null-terminate it, just in case... */
574 p
= NULL
; /* then force the loop condition to become false */
577 fprintf(stderr
, "Error reading password from file %s: %s\n",
578 spec
, "empty password\n");
583 fprintf(stderr
, "Error reading password from file %s: %s\n",
584 spec
, strerror(errno
));
588 pstrcpy(password
, pass
);
593 /****************************************************************************
594 get username and password from a credentials file
595 exit on failure (from smbclient, move to libsmb or shared .c file?)
596 ****************************************************************************/
597 static void read_credentials_file(char *filename
)
602 char *ptr
, *val
, *param
;
604 if ((auth
=sys_fopen(filename
, "r")) == NULL
)
606 /* fail if we can't open the credentials file */
607 DEBUG(0,("ERROR: Unable to open credentials file!\n"));
613 /* get a line from the file */
614 if (!fgets (buf
, sizeof(buf
), auth
))
618 if ((len
) && (buf
[len
-1]=='\n'))
626 /* break up the line into parameter & value.
627 will need to eat a little whitespace possibly */
629 if (!(ptr
= strchr (buf
, '=')))
634 /* eat leading white space */
635 while ((*val
!='\0') && ((*val
==' ') || (*val
=='\t')))
638 if (strwicmp("password", param
) == 0)
640 pstrcpy(password
, val
);
643 else if (strwicmp("username", param
) == 0) {
644 pstrcpy(username
, val
);
647 memset(buf
, 0, sizeof(buf
));
653 /****************************************************************************
655 ****************************************************************************/
656 static void usage(void)
658 printf("Usage: mount.smbfs service mountpoint [-o options,...]\n");
660 printf("Version %s\n\n",VERSION
);
664 username=<arg> SMB username\n\
665 password=<arg> SMB password\n\
666 credentials=<filename> file with username/password\n\
667 krb use kerberos (active directory)\n\
668 netbiosname=<arg> source NetBIOS name\n\
669 uid=<arg> mount uid or username\n\
670 gid=<arg> mount gid or groupname\n\
671 port=<arg> remote SMB port number\n\
672 fmask=<arg> file umask\n\
673 dmask=<arg> directory umask\n\
674 debug=<arg> debug level\n\
675 ip=<arg> destination host or IP address\n\
676 workgroup=<arg> workgroup on destination\n\
677 sockopt=<arg> TCP socket options\n\
678 scope=<arg> NetBIOS scope\n\
679 iocharset=<arg> Linux charset (iso8859-1, utf8)\n\
680 codepage=<arg> server codepage (cp850)\n\
681 ttl=<arg> dircache time to live\n\
682 guest don't prompt for a password\n\
683 ro mount read-only\n\
684 rw mount read-write\n\
686 This command is designed to be run from within /bin/mount by giving\n\
687 the option '-t smbfs'. For example:\n\
688 mount -t smbfs -o username=tridge,password=foobar //fjall/test /data/test\n\
693 /****************************************************************************
694 Argument parsing for mount.smbfs interface
695 mount will call us like this:
696 mount.smbfs device mountpoint -o <options>
698 <options> is never empty, containing at least rw or ro
699 ****************************************************************************/
700 static void parse_mount_smb(int argc
, char **argv
)
709 /* FIXME: This function can silently fail if the arguments are
710 * not in the expected order.
712 > The arguments syntax of smbmount 2.2.3a (smbfs of Debian stable)
713 > requires that one gives "-o" before further options like username=...
714 > . Without -o, the username=.. setting is *silently* ignored. I've
715 > spent about an hour trying to find out why I couldn't log in now..
720 if (argc
< 2 || argv
[1][0] == '-') {
725 pstrcpy(service
, argv
[1]);
726 pstrcpy(mpoint
, argv
[2]);
728 /* Convert any '/' characters in the service name to
730 string_replace(service
, '/','\\');
734 opt
= getopt(argc
, argv
, "o:");
743 * option parsing from nfsmount.c (util-linux-2.9u)
745 for (opts
= strtok(optarg
, ","); opts
; opts
= strtok(NULL
, ",")) {
746 DEBUG(3, ("opts: %s\n", opts
));
747 if ((opteq
= strchr_m(opts
, '='))) {
748 val
= atoi(opteq
+ 1);
751 if (!strcmp(opts
, "username") ||
752 !strcmp(opts
, "logon")) {
755 pstrcpy(username
,opteq
+1);
756 if ((lp
=strchr_m(username
,'%'))) {
758 pstrcpy(password
,lp
+1);
760 memset(strchr_m(opteq
+1,'%')+1,'X',strlen(password
));
762 if ((lp
=strchr_m(username
,'/'))) {
764 pstrcpy(workgroup
,lp
+1);
766 } else if(!strcmp(opts
, "passwd") ||
767 !strcmp(opts
, "password")) {
768 pstrcpy(password
,opteq
+1);
770 memset(opteq
+1,'X',strlen(password
));
771 } else if(!strcmp(opts
, "credentials")) {
772 pstrcpy(credentials
,opteq
+1);
773 } else if(!strcmp(opts
, "netbiosname")) {
774 pstrcpy(my_netbios_name
,opteq
+1);
775 } else if(!strcmp(opts
, "uid")) {
776 mount_uid
= nametouid(opteq
+1);
777 } else if(!strcmp(opts
, "gid")) {
778 mount_gid
= nametogid(opteq
+1);
779 } else if(!strcmp(opts
, "port")) {
781 } else if(!strcmp(opts
, "fmask")) {
782 mount_fmask
= strtol(opteq
+1, NULL
, 8);
783 } else if(!strcmp(opts
, "dmask")) {
784 mount_dmask
= strtol(opteq
+1, NULL
, 8);
785 } else if(!strcmp(opts
, "debug")) {
787 } else if(!strcmp(opts
, "ip")) {
788 dest_ip
= interpret_addr2(opteq
+1);
789 if (is_zero_ip(dest_ip
)) {
790 fprintf(stderr
,"Can't resolve address %s\n", opteq
+1);
794 } else if(!strcmp(opts
, "workgroup")) {
795 pstrcpy(workgroup
,opteq
+1);
796 } else if(!strcmp(opts
, "sockopt")) {
797 lp_set_cmdline("socket options", opteq
+1);
798 } else if(!strcmp(opts
, "scope")) {
799 lp_set_cmdline("netbios scope", opteq
+1);
801 slprintf(p
, sizeof(pstring
) - (p
- options
) - 1, "%s=%s,", opts
, opteq
+1);
806 if(!strcmp(opts
, "nocaps")) {
807 fprintf(stderr
, "Unhandled option: %s\n", opteq
+1);
809 } else if(!strcmp(opts
, "guest")) {
812 } else if(!strcmp(opts
, "krb")) {
817 fprintf(stderr
, "Warning: kerberos support will only work for samba servers\n");
819 fprintf(stderr
,"No kerberos support compiled in\n");
822 } else if(!strcmp(opts
, "rw")) {
824 } else if(!strcmp(opts
, "ro")) {
827 strncpy(p
, opts
, sizeof(pstring
) - (p
- options
) - 1);
841 *(p
-1) = 0; /* remove trailing , */
842 DEBUG(3,("passthrough options '%s'\n", options
));
846 /****************************************************************************
848 ****************************************************************************/
849 int main(int argc
,char *argv
[])
857 /* here we are interactive, even if run from autofs */
858 setup_logging("mount.smbfs",DEBUG_STDERR
);
860 #if 0 /* JRA - Urban says not needed ? */
861 /* CLI_FORCE_ASCII=false makes smbmount negotiate unicode. The default
862 is to not announce any unicode capabilities as current smbfs does
864 p
= getenv("CLI_FORCE_ASCII");
865 if (p
&& !strcmp(p
, "false"))
866 unsetenv("CLI_FORCE_ASCII");
868 setenv("CLI_FORCE_ASCII", "true", 1);
871 if (getenv("USER")) {
872 pstrcpy(username
,getenv("USER"));
874 if ((p
=strchr_m(username
,'%'))) {
876 pstrcpy(password
,p
+1);
878 memset(strchr_m(getenv("USER"),'%')+1,'X',strlen(password
));
883 if (getenv("PASSWD")) {
884 pstrcpy(password
,getenv("PASSWD"));
888 if (getenv("PASSWD_FD") || getenv("PASSWD_FILE")) {
893 if (*username
== 0 && getenv("LOGNAME")) {
894 pstrcpy(username
,getenv("LOGNAME"));
898 fprintf(stderr
, "Can't load %s - run testparm to debug it\n",
902 parse_mount_smb(argc
, argv
);
904 if (use_kerberos
&& !got_user
) {
908 if (*credentials
!= 0) {
909 read_credentials_file(credentials
);
912 DEBUG(3,("mount.smbfs started (version %s)\n", VERSION
));
914 if (*workgroup
== 0) {
915 pstrcpy(workgroup
,lp_workgroup());
918 if (!*my_netbios_name
) {
919 pstrcpy(my_netbios_name
, myhostname());
921 strupper(my_netbios_name
);