2 Unix SMB/Netbios implementation.
4 service (connection) opening and closing
5 Copyright (C) Andrew Tridgell 1992-1998
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program; if not, write to the Free Software
19 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 extern int DEBUGLEVEL
;
26 extern struct timeval smb_last_time
;
27 extern int case_default
;
28 extern BOOL case_preserve
;
29 extern BOOL short_case_preserve
;
30 extern BOOL case_mangle
;
31 extern BOOL case_sensitive
;
32 extern BOOL use_mangled_map
;
33 extern fstring remote_machine
;
34 extern pstring sesssetup_user
;
35 extern fstring remote_machine
;
38 /****************************************************************************
39 load parameters specific to a connection/service
40 ****************************************************************************/
41 BOOL
become_service(connection_struct
*conn
,BOOL do_chdir
)
43 extern char magic_char
;
44 static connection_struct
*last_conn
;
52 conn
->lastused
= smb_last_time
.tv_sec
;
57 dos_ChDir(conn
->connectpath
) != 0 &&
58 dos_ChDir(conn
->origpath
) != 0) {
59 DEBUG(0,("chdir (%s) failed\n",
64 if (conn
== last_conn
)
69 case_default
= lp_defaultcase(snum
);
70 case_preserve
= lp_preservecase(snum
);
71 short_case_preserve
= lp_shortpreservecase(snum
);
72 case_mangle
= lp_casemangle(snum
);
73 case_sensitive
= lp_casesensitive(snum
);
74 magic_char
= lp_magicchar(snum
);
75 use_mangled_map
= (*lp_mangled_map(snum
) ? True
:False
);
80 /****************************************************************************
82 ****************************************************************************/
83 int find_service(char *service
)
87 string_sub(service
,"\\","/");
89 iService
= lp_servicenumber(service
);
91 /* now handle the special case of a home directory */
94 char *phome_dir
= get_home_dir(service
);
99 * Try mapping the servicename, it may
100 * be a Windows to unix mapped user name.
102 if(map_username(service
))
103 phome_dir
= get_home_dir(service
);
106 DEBUG(3,("checking for home directory %s gave %s\n",service
,
107 phome_dir
?phome_dir
:"(NULL)"));
112 if ((iHomeService
= lp_servicenumber(HOMES_NAME
)) >= 0)
114 lp_add_home(service
,iHomeService
,phome_dir
);
115 iService
= lp_servicenumber(service
);
120 /* If we still don't have a service, attempt to add it as a printer. */
125 if ((iPrinterService
= lp_servicenumber(PRINTERS_NAME
)) >= 0)
129 DEBUG(3,("checking whether %s is a valid printer name...\n", service
));
131 if ((pszTemp
!= NULL
) && pcap_printername_ok(service
, pszTemp
))
133 DEBUG(3,("%s is a valid printer name\n", service
));
134 DEBUG(3,("adding %s as a printer service\n", service
));
135 lp_add_printer(service
,iPrinterService
);
136 iService
= lp_servicenumber(service
);
138 DEBUG(0,("failed to add %s as a printer service!\n", service
));
141 DEBUG(3,("%s is not a valid printer name\n", service
));
145 /* just possibly it's a default service? */
148 char *pdefservice
= lp_defaultservice();
149 if (pdefservice
&& *pdefservice
&&
150 !strequal(pdefservice
,service
) &&
151 !strstr(service
,".."))
154 * We need to do a local copy here as lp_defaultservice()
155 * returns one of the rotating lp_string buffers that
156 * could get overwritten by the recursive find_service() call
157 * below. Fix from Josef Hinteregger <joehtg@joehtg.co.at>.
160 pstrcpy(defservice
, pdefservice
);
161 iService
= find_service(defservice
);
164 string_sub(service
,"_","/");
165 iService
= lp_add_service(service
,iService
);
171 if (!VALID_SNUM(iService
))
173 DEBUG(0,("Invalid snum %d for %s\n",iService
,service
));
178 DEBUG(3,("find_service() failed to find service %s\n", service
));
184 /****************************************************************************
185 make a connection to a service
186 ****************************************************************************/
187 connection_struct
*make_connection(char *service
,char *user
,char *password
, int pwlen
, char *dev
,uint16 vuid
, int *ecode
)
190 struct passwd
*pass
= NULL
;
194 connection_struct
*conn
;
198 snum
= find_service(service
);
201 if (strequal(service
,"IPC$")) {
202 DEBUG(3,("refusing IPC connection\n"));
207 DEBUG(0,("%s (%s) couldn't find service %s\n",
208 remote_machine
, client_addr(Client
), service
));
209 *ecode
= ERRinvnetname
;
213 if (strequal(service
,HOMES_NAME
)) {
214 if (*user
&& Get_Pwnam(user
,True
))
215 return(make_connection(user
,user
,password
,
216 pwlen
,dev
,vuid
,ecode
));
218 if(lp_security() != SEC_SHARE
) {
219 if (validated_username(vuid
)) {
220 pstrcpy(user
,validated_username(vuid
));
221 return(make_connection(user
,user
,password
,pwlen
,dev
,vuid
,ecode
));
224 /* Security = share. Try with sesssetup_user
225 * as the username. */
226 if(*sesssetup_user
) {
227 pstrcpy(user
,sesssetup_user
);
228 return(make_connection(user
,user
,password
,pwlen
,dev
,vuid
,ecode
));
233 if (!lp_snum_ok(snum
) ||
234 !check_access(Client
,
235 lp_hostsallow(snum
), lp_hostsdeny(snum
))) {
240 /* you can only connect to the IPC$ service as an ipc device */
241 if (strequal(service
,"IPC$"))
244 if (*dev
== '?' || !*dev
) {
245 if (lp_print_ok(snum
)) {
246 pstrcpy(dev
,"LPT1:");
252 /* if the request is as a printer and you can't print then refuse */
254 if (!lp_print_ok(snum
) && (strncmp(dev
,"LPT",3) == 0)) {
255 DEBUG(1,("Attempt to connect to non-printer as a printer\n"));
256 *ecode
= ERRinvdevice
;
260 /* lowercase the user name */
263 /* add it as a possible user name */
264 add_session_user(service
);
266 /* shall we let them in? */
267 if (!authorise_login(snum
,user
,password
,pwlen
,&guest
,&force
,vuid
)) {
268 DEBUG( 2, ( "Invalid username/password for %s\n", service
) );
275 DEBUG(0,("Couldn't find free connection.\n"));
276 *ecode
= ERRnoresource
;
281 /* find out some info about the user */
282 pass
= Get_Pwnam(user
,True
);
285 DEBUG(0,( "Couldn't find account %s\n",user
));
291 conn
->read_only
= lp_readonly(snum
);
295 StrnCpy(list
,lp_readlist(snum
),sizeof(pstring
)-1);
296 string_sub(list
,"%S",service
);
298 if (user_in_list(user
,list
))
299 conn
->read_only
= True
;
301 StrnCpy(list
,lp_writelist(snum
),sizeof(pstring
)-1);
302 string_sub(list
,"%S",service
);
304 if (user_in_list(user
,list
))
305 conn
->read_only
= False
;
308 /* admin user check */
310 /* JRA - original code denied admin user if the share was
311 marked read_only. Changed as I don't think this is needed,
312 but old code left in case there is a problem here.
314 if (user_in_list(user
,lp_admin_users(snum
))
319 conn
->admin_user
= True
;
320 DEBUG(0,("%s logged in as admin user (root privileges)\n",user
));
322 conn
->admin_user
= False
;
325 conn
->force_user
= force
;
327 conn
->uid
= pass
->pw_uid
;
328 conn
->gid
= pass
->pw_gid
;
329 conn
->num_files_open
= 0;
330 conn
->lastused
= time(NULL
);
331 conn
->service
= snum
;
333 conn
->printer
= (strncmp(dev
,"LPT",3) == 0);
334 conn
->ipc
= (strncmp(dev
,"IPC",3) == 0);
336 conn
->veto_list
= NULL
;
337 conn
->hide_list
= NULL
;
338 conn
->veto_oplock_list
= NULL
;
339 string_set(&conn
->dirpath
,"");
340 string_set(&conn
->user
,user
);
343 if (*lp_force_group(snum
)) {
347 StrnCpy(gname
,lp_force_group(snum
),sizeof(pstring
)-1);
348 /* default service may be a group name */
349 string_sub(gname
,"%S",service
);
350 gptr
= (struct group
*)getgrnam(gname
);
353 conn
->gid
= gptr
->gr_gid
;
354 DEBUG(3,("Forced group %s\n",gname
));
356 DEBUG(1,("Couldn't find group %s\n",gname
));
361 if (*lp_force_user(snum
)) {
362 struct passwd
*pass2
;
364 pstrcpy(fuser
,lp_force_user(snum
));
366 /* Allow %S to be used by force user. */
367 string_sub(fuser
,"%S",service
);
369 pass2
= (struct passwd
*)Get_Pwnam(fuser
,True
);
371 conn
->uid
= pass2
->pw_uid
;
372 string_set(&conn
->user
,fuser
);
374 conn
->force_user
= True
;
375 DEBUG(3,("Forced user %s\n",fuser
));
377 DEBUG(1,("Couldn't find user %s\n",fuser
));
383 pstrcpy(s
,lp_pathname(snum
));
384 standard_sub(conn
,s
);
385 string_set(&conn
->connectpath
,s
);
386 DEBUG(3,("Connect path is %s\n",s
));
389 /* groups stuff added by ih */
394 /* Find all the groups this uid is in and
395 store them. Used by become_user() */
396 setup_groups(conn
->user
,conn
->uid
,conn
->gid
,
397 &conn
->ngroups
,&conn
->groups
);
399 /* check number of connections */
400 if (!claim_connection(conn
,
401 lp_servicename(SNUM(conn
)),
402 lp_max_connections(SNUM(conn
)),
404 DEBUG(1,("too many connections - rejected\n"));
405 *ecode
= ERRnoresource
;
410 if (lp_status(SNUM(conn
)))
411 claim_connection(conn
,"STATUS.",
415 /* execute any "root preexec = " line */
416 if (*lp_rootpreexec(SNUM(conn
))) {
418 pstrcpy(cmd
,lp_rootpreexec(SNUM(conn
)));
419 standard_sub(conn
,cmd
);
420 DEBUG(5,("cmd=%s\n",cmd
));
421 smbrun(cmd
,NULL
,False
);
424 if (!become_user(conn
, conn
->vuid
)) {
425 DEBUG(0,("Can't become connected user!\n"));
427 yield_connection(conn
,
428 lp_servicename(SNUM(conn
)),
429 lp_max_connections(SNUM(conn
)));
430 if (lp_status(SNUM(conn
))) {
431 yield_connection(conn
,"STATUS.",MAXSTATUS
);
439 if (dos_ChDir(conn
->connectpath
) != 0) {
440 DEBUG(0,("Can't change directory to %s (%s)\n",
441 conn
->connectpath
,strerror(errno
)));
444 yield_connection(conn
,
445 lp_servicename(SNUM(conn
)),
446 lp_max_connections(SNUM(conn
)));
447 if (lp_status(SNUM(conn
)))
448 yield_connection(conn
,"STATUS.",MAXSTATUS
);
451 *ecode
= ERRinvnetname
;
455 string_set(&conn
->origpath
,conn
->connectpath
);
457 #if SOFTLINK_OPTIMISATION
458 /* resolve any soft links early */
461 pstrcpy(s
,conn
->connectpath
);
463 string_set(&conn
->connectpath
,s
);
464 dos_ChDir(conn
->connectpath
);
468 add_session_user(user
);
470 /* execute any "preexec = " line */
471 if (*lp_preexec(SNUM(conn
))) {
473 pstrcpy(cmd
,lp_preexec(SNUM(conn
)));
474 standard_sub(conn
,cmd
);
475 smbrun(cmd
,NULL
,False
);
478 /* we've finished with the sensitive stuff */
481 /* Add veto/hide lists */
482 if (!IS_IPC(conn
) && !IS_PRINT(conn
)) {
483 set_namearray( &conn
->veto_list
, lp_veto_files(SNUM(conn
)));
484 set_namearray( &conn
->hide_list
, lp_hide_files(SNUM(conn
)));
485 set_namearray( &conn
->veto_oplock_list
, lp_veto_oplocks(SNUM(conn
)));
488 if( DEBUGLVL( IS_IPC(conn
) ? 3 : 1 ) ) {
491 dbgtext( "%s (%s) ", remote_machine
, client_addr(Client
) );
492 dbgtext( "connect to service %s ", lp_servicename(SNUM(conn
)) );
493 dbgtext( "as user %s ", user
);
494 dbgtext( "(uid=%d, gid=%d) ", (int)conn
->uid
, (int)conn
->gid
);
495 dbgtext( "(pid %d)\n", (int)getpid() );
502 /****************************************************************************
504 ****************************************************************************/
505 void close_cnum(connection_struct
*conn
, uint16 vuid
)
508 DirCacheFlush(SNUM(conn
));
512 DEBUG(IS_IPC(conn
)?3:1, ("%s (%s) closed connection to service %s\n",
513 remote_machine
,client_addr(Client
),
514 lp_servicename(SNUM(conn
))));
516 yield_connection(conn
,
517 lp_servicename(SNUM(conn
)),
518 lp_max_connections(SNUM(conn
)));
520 if (lp_status(SNUM(conn
)))
521 yield_connection(conn
,"STATUS.",MAXSTATUS
);
523 file_close_conn(conn
);
524 dptr_closecnum(conn
);
526 /* execute any "postexec = " line */
527 if (*lp_postexec(SNUM(conn
)) &&
528 become_user(conn
, vuid
)) {
530 pstrcpy(cmd
,lp_postexec(SNUM(conn
)));
531 standard_sub(conn
,cmd
);
532 smbrun(cmd
,NULL
,False
);
537 /* execute any "root postexec = " line */
538 if (*lp_rootpostexec(SNUM(conn
))) {
540 pstrcpy(cmd
,lp_rootpostexec(SNUM(conn
)));
541 standard_sub(conn
,cmd
);
542 smbrun(cmd
,NULL
,False
);