source4/librpc/rpc/dcerpc_sock.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    dcerpc over standard sockets transport
   5
   6    Copyright (C) Andrew Tridgell 2003
   7    Copyright (C) Jelmer Vernooij 2004
   8    Copyright (C) Rafal Szczesniak 2006
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 2 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program; if not, write to the Free Software
  22    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
  23 */
  24
  25 #include "includes.h"
  26 #include "lib/events/events.h"
  27 #include "lib/socket/socket.h"
  28 #include "lib/stream/packet.h"
  29 #include "libcli/composite/composite.h"
  30 #include "librpc/rpc/dcerpc.h"
  31
  32 /* transport private information used by general socket pipe transports */
  33 struct sock_private {
  34         struct fd_event *fde;
  35         struct socket_context *sock;
  36         char *server_name;
  37
  38         struct packet_context *packet;
  39         uint32_t pending_reads;
  40 };
  41
  42
  43 /*
  44   mark the socket dead
  45 */
  46 static void sock_dead(struct dcerpc_connection *p, NTSTATUS status)
  47 {
  48         struct sock_private *sock = p->transport.private;
  49
  50         if (sock && sock->sock != NULL) {
  51                 talloc_free(sock->fde);
  52                 talloc_free(sock->sock);
  53                 sock->sock = NULL;
  54         }
  55
  56         if (!NT_STATUS_IS_OK(status)) {
  57                 p->transport.recv_data(p, NULL, status);
  58         }
  59 }
  60
  61
  62 /*
  63   handle socket recv errors
  64 */
  65 static void sock_error_handler(void *private, NTSTATUS status)
  66 {
  67         struct dcerpc_connection *p = talloc_get_type(private,
  68                                                       struct dcerpc_connection);
  69         sock_dead(p, status);
  70 }
  71
  72 /*
  73   check if a blob is a complete packet
  74 */
  75 static NTSTATUS sock_complete_packet(void *private, DATA_BLOB blob, size_t *size)
  76 {
  77         if (blob.length < DCERPC_FRAG_LEN_OFFSET+2) {
  78                 return STATUS_MORE_ENTRIES;
  79         }
  80         *size = dcerpc_get_frag_length(&blob);
  81         if (*size > blob.length) {
  82                 return STATUS_MORE_ENTRIES;
  83         }
  84         return NT_STATUS_OK;
  85 }
  86
  87 /*
  88   process recv requests
  89 */
  90 static NTSTATUS sock_process_recv(void *private, DATA_BLOB blob)
  91 {
  92         struct dcerpc_connection *p = talloc_get_type(private,
  93                                                       struct dcerpc_connection);
  94         struct sock_private *sock = p->transport.private;
  95         sock->pending_reads--;
  96         if (sock->pending_reads == 0) {
  97                 packet_recv_disable(sock->packet);
  98         }
  99         p->transport.recv_data(p, &blob, NT_STATUS_OK);
 100         return NT_STATUS_OK;
 101 }
 102
 103 /*
 104   called when a IO is triggered by the events system
 105 */
 106 static void sock_io_handler(struct event_context *ev, struct fd_event *fde,
 107                             uint16_t flags, void *private)
 108 {
 109         struct dcerpc_connection *p = talloc_get_type(private,
 110                                                       struct dcerpc_connection);
 111         struct sock_private *sock = p->transport.private;
 112
 113         if (flags & EVENT_FD_WRITE) {
 114                 packet_queue_run(sock->packet);
 115                 return;
 116         }
 117
 118         if (sock->sock == NULL) {
 119                 return;
 120         }
 121
 122         if (flags & EVENT_FD_READ) {
 123                 packet_recv(sock->packet);
 124         }
 125 }
 126
 127 /*
 128    initiate a read request - not needed for dcerpc sockets
 129 */
 130 static NTSTATUS sock_send_read(struct dcerpc_connection *p)
 131 {
 132         struct sock_private *sock = p->transport.private;
 133         sock->pending_reads++;
 134         if (sock->pending_reads == 1) {
 135                 packet_recv_enable(sock->packet);
 136         }
 137         return NT_STATUS_OK;
 138 }
 139
 140 /*
 141    send an initial pdu in a multi-pdu sequence
 142 */
 143 static NTSTATUS sock_send_request(struct dcerpc_connection *p, DATA_BLOB *data,
 144                                   BOOL trigger_read)
 145 {
 146         struct sock_private *sock = p->transport.private;
 147         DATA_BLOB blob;
 148         NTSTATUS status;
 149
 150         if (sock->sock == NULL) {
 151                 return NT_STATUS_CONNECTION_DISCONNECTED;
 152         }
 153
 154         blob = data_blob_talloc(sock->packet, data->data, data->length);
 155         if (blob.data == NULL) {
 156                 return NT_STATUS_NO_MEMORY;
 157         }
 158
 159         status = packet_send(sock->packet, blob);
 160         if (!NT_STATUS_IS_OK(status)) {
 161                 return status;
 162         }
 163
 164         if (trigger_read) {
 165                 sock_send_read(p);
 166         }
 167
 168         return NT_STATUS_OK;
 169 }
 170
 171 /*
 172    shutdown sock pipe connection
 173 */
 174 static NTSTATUS sock_shutdown_pipe(struct dcerpc_connection *p)
 175 {
 176         struct sock_private *sock = p->transport.private;
 177
 178         if (sock && sock->sock) {
 179                 sock_dead(p, NT_STATUS_OK);
 180         }
 181
 182         return NT_STATUS_OK;
 183 }
 184
 185 /*
 186   return sock server name
 187 */
 188 static const char *sock_peer_name(struct dcerpc_connection *p)
 189 {
 190         struct sock_private *sock = talloc_get_type(p->transport.private, struct sock_private);
 191         return sock->server_name;
 192 }
 193
 194 /*
 195   return remote name we make the actual connection (good for kerberos)
 196 */
 197 static const char *sock_target_hostname(struct dcerpc_connection *p)
 198 {
 199         struct sock_private *sock = talloc_get_type(p->transport.private, struct sock_private);
 200         return sock->server_name;
 201 }
 202
 203
 204 struct pipe_open_socket_state {
 205         struct dcerpc_connection *conn;
 206         struct socket_context *socket_ctx;
 207         struct sock_private *sock;
 208         struct socket_address *server;
 209         const char *target_hostname;
 210         enum dcerpc_transport_t transport;
 211 };
 212
 213
 214 static void continue_socket_connect(struct composite_context *ctx)
 215 {
 216         struct dcerpc_connection *conn;
 217         struct sock_private *sock;
 218         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 219                                                       struct composite_context);
 220         struct pipe_open_socket_state *s = talloc_get_type(c->private_data,
 221                                                            struct pipe_open_socket_state);
 222
 223         /* make it easier to write a function calls */
 224         conn = s->conn;
 225         sock = s->sock;
 226
 227         c->status = socket_connect_recv(ctx);
 228         if (!NT_STATUS_IS_OK(c->status)) {
 229                 DEBUG(0, ("Failed to connect host %s on port %d - %s\n",
 230                           s->server->addr, s->server->port,
 231                           nt_errstr(c->status)));
 232                 composite_error(c, c->status);
 233                 return;
 234         }
 235
 236         /*
 237           fill in the transport methods
 238         */
 239         conn->transport.transport       = s->transport;
 240         conn->transport.private         = NULL;
 241
 242         conn->transport.send_request    = sock_send_request;
 243         conn->transport.send_read       = sock_send_read;
 244         conn->transport.recv_data       = NULL;
 245
 246         conn->transport.shutdown_pipe   = sock_shutdown_pipe;
 247         conn->transport.peer_name       = sock_peer_name;
 248         conn->transport.target_hostname = sock_target_hostname;
 249
 250         sock->sock          = s->socket_ctx;
 251         sock->pending_reads = 0;
 252         sock->server_name   = strupper_talloc(sock, s->target_hostname);
 253
 254         sock->fde = event_add_fd(conn->event_ctx, sock->sock, socket_get_fd(sock->sock),
 255                                  0, sock_io_handler, conn);
 256
 257         conn->transport.private = sock;
 258
 259         sock->packet = packet_init(sock);
 260         if (sock->packet == NULL) {
 261                 composite_error(c, NT_STATUS_NO_MEMORY);
 262                 talloc_free(sock);
 263                 return;
 264         }
 265
 266         packet_set_private(sock->packet, conn);
 267         packet_set_socket(sock->packet, sock->sock);
 268         packet_set_callback(sock->packet, sock_process_recv);
 269         packet_set_full_request(sock->packet, sock_complete_packet);
 270         packet_set_error_handler(sock->packet, sock_error_handler);
 271         packet_set_event_context(sock->packet, conn->event_ctx);
 272         packet_set_fde(sock->packet, sock->fde);
 273         packet_set_serialise(sock->packet);
 274         packet_recv_disable(sock->packet);
 275         packet_set_initial_read(sock->packet, 16);
 276
 277         /* ensure we don't get SIGPIPE */
 278         BlockSignals(True,SIGPIPE);
 279
 280         composite_done(c);
 281 }
 282
 283
 284 struct composite_context *dcerpc_pipe_open_socket_send(TALLOC_CTX *mem_ctx,
 285                                                        struct dcerpc_connection *cn,
 286                                                        struct socket_address *server,
 287                                                        const char *target_hostname,
 288                                                        enum dcerpc_transport_t transport)
 289 {
 290         struct composite_context *c;
 291         struct pipe_open_socket_state *s;
 292         struct composite_context *conn_req;
 293
 294         c = composite_create(mem_ctx, cn->event_ctx);
 295         if (c == NULL) return NULL;
 296
 297         s = talloc_zero(c, struct pipe_open_socket_state);
 298         if (composite_nomem(s, c)) return c;
 299         c->private_data = s;
 300
 301         s->conn      = cn;
 302         s->transport = transport;
 303         s->server    = talloc_reference(c, server);
 304         if (composite_nomem(s->server, c)) return c;
 305         s->target_hostname = talloc_reference(s, target_hostname);
 306
 307         s->sock = talloc(cn, struct sock_private);
 308         if (composite_nomem(s->sock, c)) return c;
 309
 310         c->status = socket_create(server->family, SOCKET_TYPE_STREAM, &s->socket_ctx, 0);
 311         if (!composite_is_ok(c)) return c;
 312
 313         talloc_steal(s->sock, s->socket_ctx);
 314
 315         conn_req = socket_connect_send(s->socket_ctx, NULL, s->server, 0, c->event_ctx);
 316         composite_continue(c, conn_req, continue_socket_connect, c);
 317         return c;
 318 }
 319
 320
 321 NTSTATUS dcerpc_pipe_open_socket_recv(struct composite_context *c)
 322 {
 323         NTSTATUS status = composite_wait(c);
 324
 325         talloc_free(c);
 326         return status;
 327 }
 328
 329 /*
 330    open a rpc connection using the generic socket library
 331 */
 332 NTSTATUS dcerpc_pipe_open_socket(struct dcerpc_connection *conn,
 333                                  struct socket_address *server,
 334                                  const char *target_hostname,
 335                                  enum dcerpc_transport_t transport)
 336 {
 337         struct composite_context *c;
 338
 339         c = dcerpc_pipe_open_socket_send(conn, conn, server, target_hostname, transport);
 340         return dcerpc_pipe_open_socket_recv(c);
 341 }
 342
 343
 344 struct pipe_tcp_state {
 345         const char *target_hostname;
 346         const char *address;
 347         uint32_t port;
 348         struct socket_address *srvaddr;
 349         struct dcerpc_connection *conn;
 350 };
 351
 352
 353 void continue_ipv6_open_socket(struct composite_context *ctx);
 354 void continue_ipv4_open_socket(struct composite_context *ctx);
 355
 356
 357 /*
 358   Stage 2 of dcerpc_pipe_open_tcp_send: receive result of pipe open request
 359   on IPv6 and send the request on IPv4 unless IPv6 transport succeeded.
 360 */
 361 void continue_ipv6_open_socket(struct composite_context *ctx)
 362 {
 363         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 364                                                       struct composite_context);
 365         struct pipe_tcp_state *s = talloc_get_type(c->private_data,
 366                                                    struct pipe_tcp_state);
 367         struct composite_context *sock_ipv4_req;
 368
 369         /* receive result of socket open request */
 370         c->status = dcerpc_pipe_open_socket_recv(ctx);
 371         if (NT_STATUS_IS_OK(c->status)) {
 372                 composite_done(c);
 373                 return;
 374         }
 375
 376         talloc_free(s->srvaddr);
 377
 378         /* prepare server address using host:ip and transport name */
 379         s->srvaddr = socket_address_from_strings(s->conn, "ipv4", s->address, s->port);
 380         if (composite_nomem(s->srvaddr, c)) return;
 381
 382         /* try IPv4 if IPv6 fails */
 383         sock_ipv4_req = dcerpc_pipe_open_socket_send(c, s->conn,
 384                                                      s->srvaddr, s->target_hostname,
 385                                                      NCACN_IP_TCP);
 386         composite_continue(c, sock_ipv4_req, continue_ipv4_open_socket, c);
 387 }
 388
 389
 390 /*
 391   Stage 2 of dcerpc_pipe_open_tcp_send: receive result of pipe open request
 392   on IPv4 transport.
 393 */
 394 void continue_ipv4_open_socket(struct composite_context *ctx)
 395 {
 396         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 397                                                       struct composite_context);
 398         struct pipe_tcp_state *s = talloc_get_type(c->private_data,
 399                                                    struct pipe_tcp_state);
 400
 401         /* receive result socket open request */
 402         c->status = dcerpc_pipe_open_socket_recv(ctx);
 403         if (!NT_STATUS_IS_OK(c->status)) {
 404                 /* something went wrong... */
 405                 DEBUG(0, ("Failed to connect host %s (%s) on port %d - %s.\n",
 406                           s->address, s->target_hostname,
 407                           s->port, nt_errstr(c->status)));
 408
 409                 composite_error(c, c->status);
 410                 return;
 411         }
 412
 413         composite_done(c);
 414 }
 415
 416
 417 /*
 418   Send rpc pipe open request to given host:port using
 419   tcp/ip transport
 420 */
 421 struct composite_context* dcerpc_pipe_open_tcp_send(struct dcerpc_connection *conn,
 422                                                     const char *address,
 423                                                     const char *target_hostname,
 424                                                     uint32_t port)
 425 {
 426         struct composite_context *c;
 427         struct composite_context *sock_ipv6_req;
 428         struct pipe_tcp_state *s;
 429
 430         /* composite context allocation and setup */
 431         c = composite_create(conn, conn->event_ctx);
 432         if (c == NULL) return NULL;
 433
 434         s = talloc_zero(c, struct pipe_tcp_state);
 435         if (composite_nomem(s, c)) return c;
 436         c->private_data = s;
 437
 438         /* store input parameters in state structure */
 439         s->address         = talloc_strdup(c, address);
 440         s->target_hostname = talloc_strdup(c, target_hostname);
 441         s->port            = port;
 442         s->conn            = conn;
 443
 444         /* prepare server address using host ip:port and transport name */
 445         s->srvaddr = socket_address_from_strings(s->conn, "ipv6", address, s->port);
 446         if (composite_nomem(s->srvaddr, c)) return c;
 447
 448         /* try IPv6 first - send socket open request */
 449         sock_ipv6_req = dcerpc_pipe_open_socket_send(c, s->conn,
 450                                                      s->srvaddr, s->target_hostname,
 451                                                      NCACN_IP_TCP);
 452         composite_continue(c, sock_ipv6_req, continue_ipv6_open_socket, c);
 453         return c;
 454 }
 455
 456
 457 /*
 458   Receive result of pipe open request on tcp/ip
 459 */
 460 NTSTATUS dcerpc_pipe_open_tcp_recv(struct composite_context *c)
 461 {
 462         NTSTATUS status;
 463         status = composite_wait(c);
 464
 465         talloc_free(c);
 466         return status;
 467 }
 468
 469
 470 /*
 471   Open rpc pipe on tcp/ip transport - sync version
 472 */
 473 NTSTATUS dcerpc_pipe_open_tcp(struct dcerpc_connection *conn, const char *server,
 474                               const char *target_hostname,
 475                               uint32_t port)
 476 {
 477         struct composite_context *c;
 478
 479         c = dcerpc_pipe_open_tcp_send(conn, server, target_hostname, port);
 480         return dcerpc_pipe_open_tcp_recv(c);
 481 }
 482
 483
 484 struct pipe_unix_state {
 485         const char *path;
 486         struct socket_address *srvaddr;
 487         struct dcerpc_connection *conn;
 488 };
 489
 490
 491 /*
 492   Stage 2 of dcerpc_pipe_open_unix_stream_send: receive result of pipe open
 493   request on unix socket.
 494 */
 495 void continue_unix_open_socket(struct composite_context *ctx)
 496 {
 497         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 498                                                       struct composite_context);
 499
 500         c->status = dcerpc_pipe_open_socket_recv(ctx);
 501         if (NT_STATUS_IS_OK(c->status)) {
 502                 composite_done(c);
 503                 return;
 504         }
 505
 506         composite_error(c, c->status);
 507 }
 508
 509
 510 /*
 511   Send pipe open request on unix socket
 512 */
 513 struct composite_context *dcerpc_pipe_open_unix_stream_send(struct dcerpc_connection *conn,
 514                                                             const char *path)
 515 {
 516         struct composite_context *c;
 517         struct composite_context *sock_unix_req;
 518         struct pipe_unix_state *s;
 519
 520         /* composite context allocation and setup */
 521         c = composite_create(conn, conn->event_ctx);
 522         if (c == NULL) return NULL;
 523
 524         s = talloc_zero(c, struct pipe_unix_state);
 525         if (composite_nomem(s, c)) return c;
 526         c->private_data = s;
 527
 528         /* store parameters in state structure */
 529         s->path = talloc_strdup(c, path);
 530         if (composite_nomem(s->path, c)) return c;
 531         s->conn = conn;
 532
 533         /* prepare server address using socket path and transport name */
 534         s->srvaddr = socket_address_from_strings(conn, "unix", s->path, 0);
 535         if (composite_nomem(s->srvaddr, c)) return c;
 536
 537         /* send socket open request */
 538         sock_unix_req = dcerpc_pipe_open_socket_send(c, s->conn,
 539                                                      s->srvaddr, NULL,
 540                                                      NCALRPC);
 541         composite_continue(c, sock_unix_req, continue_unix_open_socket, c);
 542         return c;
 543 }
 544
 545
 546 /*
 547   Receive result of pipe open request on unix socket
 548 */
 549 NTSTATUS dcerpc_pipe_open_unix_stream_recv(struct composite_context *c)
 550 {
 551         NTSTATUS status = composite_wait(c);
 552
 553         talloc_free(c);
 554         return status;
 555 }
 556
 557
 558 /*
 559   Open a rpc pipe on a unix socket - sync version
 560 */
 561 NTSTATUS dcerpc_pipe_open_unix_stream(struct dcerpc_connection *conn, const char *path)
 562 {
 563         struct composite_context *c = dcerpc_pipe_open_unix_stream_send(conn, path);
 564         return dcerpc_pipe_open_unix_stream_recv(c);
 565 }
 566
 567
 568 struct pipe_np_state {
 569         char *full_path;
 570         struct socket_address *srvaddr;
 571         struct dcerpc_connection *conn;
 572 };
 573
 574
 575 /*
 576   Stage 2 of dcerpc_pipe_open_pipe_send: receive socket open request
 577 */
 578 void continue_np_open_socket(struct composite_context *ctx)
 579 {
 580         struct composite_context *c = talloc_get_type(ctx->async.private_data,
 581                                                       struct composite_context);
 582
 583         c->status = dcerpc_pipe_open_socket_recv(ctx);
 584         if (!composite_is_ok(c)) return;
 585
 586         composite_done(c);
 587 }
 588
 589
 590 /*
 591   Send pipe open request on ncalrpc
 592 */
 593 struct composite_context* dcerpc_pipe_open_pipe_send(struct dcerpc_connection *conn,
 594                                                      const char *identifier)
 595 {
 596         char *canon = NULL;
 597
 598         struct composite_context *c;
 599         struct composite_context *sock_np_req;
 600         struct pipe_np_state *s;
 601
 602         /* composite context allocation and setup */
 603         c = composite_create(conn, conn->event_ctx);
 604         if (c == NULL) return NULL;
 605
 606         s = talloc_zero(c, struct pipe_np_state);
 607         if (composite_nomem(s, c)) return c;
 608         c->private_data = s;
 609
 610         /* store parameters in state structure */
 611         canon = talloc_strdup(s, identifier);
 612         if (composite_nomem(canon, c)) return c;
 613         s->conn = conn;
 614
 615         string_replace(canon, '/', '\\');
 616         s->full_path = talloc_asprintf(canon, "%s/%s", lp_ncalrpc_dir(), canon);
 617         if (composite_nomem(s->full_path, c)) return c;
 618
 619         /* prepare server address using path and transport name */
 620         s->srvaddr = socket_address_from_strings(conn, "unix", s->full_path, 0);
 621         if (composite_nomem(s->srvaddr, c)) return c;
 622
 623         /* send socket open request */
 624         sock_np_req = dcerpc_pipe_open_socket_send(c, s->conn, s->srvaddr, NULL, NCALRPC);
 625         composite_continue(c, sock_np_req, continue_np_open_socket, c);
 626         return c;
 627 }
 628
 629
 630 /*
 631   Receive result of pipe open request on ncalrpc
 632 */
 633 NTSTATUS dcerpc_pipe_open_pipe_recv(struct composite_context *c)
 634 {
 635         NTSTATUS status = composite_wait(c);
 636
 637         talloc_free(c);
 638         return status;
 639 }
 640
 641
 642 /*
 643   Open a rpc pipe on a named pipe - sync version
 644 */
 645 NTSTATUS dcerpc_pipe_open_pipe(struct dcerpc_connection *conn, const char *identifier)
 646 {
 647         struct composite_context *c = dcerpc_pipe_open_pipe_send(conn, identifier);
 648         return dcerpc_pipe_open_pipe_recv(c);
 649 }