2 Unix SMB/CIFS implementation.
3 session handling for utmp and PAM
5 Copyright (C) tridge@samba.org 2001
6 Copyright (C) abartlet@samba.org 2001
7 Copyright (C) Gerald (Jerry) Carter 2006
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 /* a "session" is claimed when we do a SessionSetupX operation
24 and is yielded when the corresponding vuid is destroyed.
26 sessions are used to populate utmp and PAM session structures
30 #include "smbd/globals.h"
32 /********************************************************************
33 called when a session is created
34 ********************************************************************/
36 bool session_claim(user_struct
*vuser
)
40 struct sessionid sessionid
;
41 struct server_id pid
= procid_self();
43 const char * hostname
;
44 struct db_record
*rec
;
46 char addr
[INET6_ADDRSTRLEN
];
48 vuser
->session_keystr
= NULL
;
50 /* don't register sessions for the guest user - its just too
51 expensive to go through pam session code for browsing etc */
52 if (vuser
->server_info
->guest
) {
56 if (!sessionid_init()) {
60 ZERO_STRUCT(sessionid
);
67 for (i
=1;i
<MAX_SESSION_ID
;i
++) {
70 * This is very inefficient and needs fixing -- vl
73 struct server_id sess_pid
;
75 snprintf(keystr
, sizeof(keystr
), "ID/%d", i
);
77 rec
= sessionid_fetch_record(NULL
, keystr
);
79 DEBUG(1, ("Could not lock \"%s\"\n", keystr
));
83 if (rec
->value
.dsize
!= sizeof(sessionid
)) {
84 DEBUG(1, ("Re-using invalid record\n"));
89 ((char *)rec
->value
.dptr
)
90 + offsetof(struct sessionid
, pid
),
93 if (!process_exists(sess_pid
)) {
94 DEBUG(5, ("%s has died -- re-using session\n",
95 procid_str_static(&sess_pid
)));
102 if (i
== MAX_SESSION_ID
) {
103 SMB_ASSERT(rec
== NULL
);
104 DEBUG(1,("session_claim: out of session IDs "
105 "(max is %d)\n", MAX_SESSION_ID
));
109 snprintf(sessionid
.id_str
, sizeof(sessionid
.id_str
),
110 SESSION_UTMP_TEMPLATE
, i
);
113 snprintf(keystr
, sizeof(keystr
), "ID/%s/%u",
114 procid_str_static(&pid
), vuser
->vuid
);
116 rec
= sessionid_fetch_record(NULL
, keystr
);
118 DEBUG(1, ("Could not lock \"%s\"\n", keystr
));
122 snprintf(sessionid
.id_str
, sizeof(sessionid
.id_str
),
123 SESSION_TEMPLATE
, (long unsigned int)sys_getpid(),
127 SMB_ASSERT(rec
!= NULL
);
129 /* If 'hostname lookup' == yes, then do the DNS lookup. This is
130 needed because utmp and PAM both expect DNS names
132 client_name() handles this case internally.
135 hostname
= client_name(get_client_fd());
136 if (strcmp(hostname
, "UNKNOWN") == 0) {
137 hostname
= client_addr(get_client_fd(),addr
,sizeof(addr
));
140 fstrcpy(sessionid
.username
, vuser
->server_info
->unix_name
);
141 fstrcpy(sessionid
.hostname
, hostname
);
142 sessionid
.id_num
= i
; /* Only valid for utmp sessions */
144 sessionid
.uid
= vuser
->server_info
->utok
.uid
;
145 sessionid
.gid
= vuser
->server_info
->utok
.gid
;
146 fstrcpy(sessionid
.remote_machine
, get_remote_machine_name());
147 fstrcpy(sessionid
.ip_addr_str
,
148 client_addr(get_client_fd(),addr
,sizeof(addr
)));
149 sessionid
.connect_start
= time(NULL
);
151 if (!smb_pam_claim_session(sessionid
.username
, sessionid
.id_str
,
152 sessionid
.hostname
)) {
153 DEBUG(1,("pam_session rejected the session for %s [%s]\n",
154 sessionid
.username
, sessionid
.id_str
));
160 data
.dptr
= (uint8
*)&sessionid
;
161 data
.dsize
= sizeof(sessionid
);
163 status
= rec
->store(rec
, data
, TDB_REPLACE
);
167 if (!NT_STATUS_IS_OK(status
)) {
168 DEBUG(1,("session_claim: unable to create session id "
169 "record: %s\n", nt_errstr(status
)));
174 sys_utmp_claim(sessionid
.username
, sessionid
.hostname
,
175 sessionid
.ip_addr_str
,
176 sessionid
.id_str
, sessionid
.id_num
);
179 vuser
->session_keystr
= talloc_strdup(vuser
, keystr
);
180 if (!vuser
->session_keystr
) {
181 DEBUG(0, ("session_claim: talloc_strdup() failed for session_keystr\n"));
187 /********************************************************************
188 called when a session is destroyed
189 ********************************************************************/
191 void session_yield(user_struct
*vuser
)
193 struct sessionid sessionid
;
194 struct db_record
*rec
;
196 if (!vuser
->session_keystr
) {
200 rec
= sessionid_fetch_record(NULL
, vuser
->session_keystr
);
205 if (rec
->value
.dsize
!= sizeof(sessionid
))
208 memcpy(&sessionid
, rec
->value
.dptr
, sizeof(sessionid
));
211 sys_utmp_yield(sessionid
.username
, sessionid
.hostname
,
212 sessionid
.ip_addr_str
,
213 sessionid
.id_str
, sessionid
.id_num
);
216 smb_pam_close_session(sessionid
.username
, sessionid
.id_str
,
219 rec
->delete_rec(rec
);
224 /********************************************************************
225 ********************************************************************/
227 struct session_list
{
230 struct sessionid
*sessions
;
233 static int gather_sessioninfo(const char *key
, struct sessionid
*session
,
236 struct session_list
*sesslist
= (struct session_list
*)private_data
;
238 sesslist
->sessions
= TALLOC_REALLOC_ARRAY(
239 sesslist
->mem_ctx
, sesslist
->sessions
, struct sessionid
,
242 if (!sesslist
->sessions
) {
247 memcpy(&sesslist
->sessions
[sesslist
->count
], session
,
248 sizeof(struct sessionid
));
252 DEBUG(7, ("gather_sessioninfo session from %s@%s\n",
253 session
->username
, session
->remote_machine
));
258 /********************************************************************
259 ********************************************************************/
261 int list_sessions(TALLOC_CTX
*mem_ctx
, struct sessionid
**session_list
)
263 struct session_list sesslist
;
266 sesslist
.mem_ctx
= mem_ctx
;
268 sesslist
.sessions
= NULL
;
270 ret
= sessionid_traverse_read(gather_sessioninfo
, (void *) &sesslist
);
272 DEBUG(3, ("Session traverse failed\n"));
273 SAFE_FREE(sesslist
.sessions
);
274 *session_list
= NULL
;
278 *session_list
= sesslist
.sessions
;
279 return sesslist
.count
;