source4/rpc_server/service_rpc.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    smbd-specific dcerpc server code
   5
   6    Copyright (C) Andrew Tridgell 2003-2005
   7    Copyright (C) Stefan (metze) Metzmacher 2004-2005
   8    Copyright (C) Jelmer Vernooij <jelmer@samba.org> 2004,2007
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22 */
  23
  24 #include "includes.h"
  25 #include "librpc/gen_ndr/ndr_dcerpc.h"
  26 #include "auth/auth.h"
  27 #include "../lib/util/dlinklist.h"
  28 #include "rpc_server/dcerpc_server.h"
  29 #include "rpc_server/dcerpc_server_proto.h"
  30 #include "system/filesys.h"
  31 #include "lib/messaging/irpc.h"
  32 #include "system/network.h"
  33 #include "lib/socket/netif.h"
  34 #include "param/param.h"
  35 #include "../lib/tsocket/tsocket.h"
  36 #include "librpc/rpc/dcerpc_proto.h"
  37 #include "../lib/util/tevent_ntstatus.h"
  38 #include "libcli/raw/smb.h"
  39 #include "../libcli/named_pipe_auth/npa_tstream.h"
  40 #include "smbd/process_model.h"
  41
  42 struct dcesrv_socket_context {
  43         const struct dcesrv_endpoint *endpoint;
  44         struct dcesrv_context *dcesrv_ctx;
  45 };
  46
  47 static void dcesrv_terminate_connection(struct dcesrv_connection *dce_conn, const char *reason)
  48 {
  49         struct stream_connection *srv_conn;
  50         srv_conn = talloc_get_type(dce_conn->transport.private_data,
  51                                    struct stream_connection);
  52
  53         stream_terminate_connection(srv_conn, reason);
  54 }
  55
  56 static void dcesrv_sock_reply_done(struct tevent_req *subreq);
  57
  58 struct dcesrv_sock_reply_state {
  59         struct dcesrv_connection *dce_conn;
  60         struct dcesrv_call_state *call;
  61         struct iovec iov;
  62 };
  63
  64 static void dcesrv_sock_report_output_data(struct dcesrv_connection *dce_conn)
  65 {
  66         struct dcesrv_call_state *call;
  67
  68         call = dce_conn->call_list;
  69         if (!call || !call->replies) {
  70                 return;
  71         }
  72
  73         while (call->replies) {
  74                 struct data_blob_list_item *rep = call->replies;
  75                 struct dcesrv_sock_reply_state *substate;
  76                 struct tevent_req *subreq;
  77
  78                 substate = talloc(call, struct dcesrv_sock_reply_state);
  79                 if (!substate) {
  80                         dcesrv_terminate_connection(dce_conn, "no memory");
  81                         return;
  82                 }
  83
  84                 substate->dce_conn = dce_conn;
  85                 substate->call = NULL;
  86
  87                 DLIST_REMOVE(call->replies, rep);
  88
  89                 if (call->replies == NULL) {
  90                         substate->call = call;
  91                 }
  92
  93                 substate->iov.iov_base = (void *) rep->blob.data;
  94                 substate->iov.iov_len = rep->blob.length;
  95
  96                 subreq = tstream_writev_queue_send(substate,
  97                                                    dce_conn->event_ctx,
  98                                                    dce_conn->stream,
  99                                                    dce_conn->send_queue,
 100                                                    &substate->iov, 1);
 101                 if (!subreq) {
 102                         dcesrv_terminate_connection(dce_conn, "no memory");
 103                         return;
 104                 }
 105                 tevent_req_set_callback(subreq, dcesrv_sock_reply_done,
 106                                         substate);
 107         }
 108
 109         DLIST_REMOVE(call->conn->call_list, call);
 110         call->list = DCESRV_LIST_NONE;
 111 }
 112
 113 static void dcesrv_sock_reply_done(struct tevent_req *subreq)
 114 {
 115         struct dcesrv_sock_reply_state *substate = tevent_req_callback_data(subreq,
 116                                                 struct dcesrv_sock_reply_state);
 117         int ret;
 118         int sys_errno;
 119         NTSTATUS status;
 120         struct dcesrv_call_state *call = substate->call;
 121
 122         ret = tstream_writev_queue_recv(subreq, &sys_errno);
 123         TALLOC_FREE(subreq);
 124         if (ret == -1) {
 125                 status = map_nt_error_from_unix(sys_errno);
 126                 dcesrv_terminate_connection(substate->dce_conn, nt_errstr(status));
 127                 return;
 128         }
 129
 130         talloc_free(substate);
 131         if (call) {
 132                 talloc_free(call);
 133         }
 134 }
 135
 136 static void dcesrv_read_fragment_done(struct tevent_req *subreq);
 137
 138 static void dcesrv_sock_accept(struct stream_connection *srv_conn)
 139 {
 140         NTSTATUS status;
 141         struct dcesrv_socket_context *dcesrv_sock =
 142                 talloc_get_type(srv_conn->private_data, struct dcesrv_socket_context);
 143         struct dcesrv_connection *dcesrv_conn = NULL;
 144         int ret;
 145         struct tevent_req *subreq;
 146         struct loadparm_context *lp_ctx = dcesrv_sock->dcesrv_ctx->lp_ctx;
 147
 148         if (!srv_conn->session_info) {
 149                 status = auth_anonymous_session_info(srv_conn,
 150                                                      lp_ctx,
 151                                                      &srv_conn->session_info);
 152                 if (!NT_STATUS_IS_OK(status)) {
 153                         DEBUG(0,("dcesrv_sock_accept: auth_anonymous_session_info failed: %s\n",
 154                                 nt_errstr(status)));
 155                         stream_terminate_connection(srv_conn, nt_errstr(status));
 156                         return;
 157                 }
 158         }
 159
 160         status = dcesrv_endpoint_connect(dcesrv_sock->dcesrv_ctx,
 161                                          srv_conn,
 162                                          dcesrv_sock->endpoint,
 163                                          srv_conn->session_info,
 164                                          srv_conn->event.ctx,
 165                                          srv_conn->msg_ctx,
 166                                          srv_conn->server_id,
 167                                          DCESRV_CALL_STATE_FLAG_MAY_ASYNC,
 168                                          &dcesrv_conn);
 169         if (!NT_STATUS_IS_OK(status)) {
 170                 DEBUG(0,("dcesrv_sock_accept: dcesrv_endpoint_connect failed: %s\n",
 171                         nt_errstr(status)));
 172                 stream_terminate_connection(srv_conn, nt_errstr(status));
 173                 return;
 174         }
 175
 176         dcesrv_conn->transport.private_data             = srv_conn;
 177         dcesrv_conn->transport.report_output_data       = dcesrv_sock_report_output_data;
 178
 179         TALLOC_FREE(srv_conn->event.fde);
 180
 181         dcesrv_conn->send_queue = tevent_queue_create(dcesrv_conn, "dcesrv send queue");
 182         if (!dcesrv_conn->send_queue) {
 183                 status = NT_STATUS_NO_MEMORY;
 184                 DEBUG(0,("dcesrv_sock_accept: tevent_queue_create(%s)\n",
 185                         nt_errstr(status)));
 186                 stream_terminate_connection(srv_conn, nt_errstr(status));
 187                 return;
 188         }
 189
 190         if (dcesrv_sock->endpoint->ep_description->transport == NCACN_NP) {
 191                 dcesrv_conn->auth_state.session_key = dcesrv_inherited_session_key;
 192                 dcesrv_conn->stream = talloc_move(dcesrv_conn,
 193                                                   &srv_conn->tstream);
 194         } else {
 195                 ret = tstream_bsd_existing_socket(dcesrv_conn,
 196                                                   socket_get_fd(srv_conn->socket),
 197                                                   &dcesrv_conn->stream);
 198                 if (ret == -1) {
 199                         status = map_nt_error_from_unix(errno);
 200                         DEBUG(0, ("dcesrv_sock_accept: "
 201                                   "failed to setup tstream: %s\n",
 202                                   nt_errstr(status)));
 203                         stream_terminate_connection(srv_conn, nt_errstr(status));
 204                         return;
 205                 }
 206         }
 207
 208         dcesrv_conn->local_address = srv_conn->local_address;
 209         dcesrv_conn->remote_address = srv_conn->remote_address;
 210
 211         srv_conn->private_data = dcesrv_conn;
 212
 213         irpc_add_name(srv_conn->msg_ctx, "rpc_server");
 214
 215         subreq = dcerpc_read_ncacn_packet_send(dcesrv_conn,
 216                                                dcesrv_conn->event_ctx,
 217                                                dcesrv_conn->stream);
 218         if (!subreq) {
 219                 status = NT_STATUS_NO_MEMORY;
 220                 DEBUG(0,("dcesrv_sock_accept: dcerpc_read_fragment_buffer_send(%s)\n",
 221                         nt_errstr(status)));
 222                 stream_terminate_connection(srv_conn, nt_errstr(status));
 223                 return;
 224         }
 225         tevent_req_set_callback(subreq, dcesrv_read_fragment_done, dcesrv_conn);
 226
 227         return;
 228 }
 229
 230 static void dcesrv_read_fragment_done(struct tevent_req *subreq)
 231 {
 232         struct dcesrv_connection *dce_conn = tevent_req_callback_data(subreq,
 233                                              struct dcesrv_connection);
 234         struct ncacn_packet *pkt;
 235         DATA_BLOB buffer;
 236         NTSTATUS status;
 237
 238         status = dcerpc_read_ncacn_packet_recv(subreq, dce_conn,
 239                                                &pkt, &buffer);
 240         TALLOC_FREE(subreq);
 241         if (!NT_STATUS_IS_OK(status)) {
 242                 dcesrv_terminate_connection(dce_conn, nt_errstr(status));
 243                 return;
 244         }
 245
 246         status = dcesrv_process_ncacn_packet(dce_conn, pkt, buffer);
 247         if (!NT_STATUS_IS_OK(status)) {
 248                 dcesrv_terminate_connection(dce_conn, nt_errstr(status));
 249                 return;
 250         }
 251
 252         subreq = dcerpc_read_ncacn_packet_send(dce_conn,
 253                                                dce_conn->event_ctx,
 254                                                dce_conn->stream);
 255         if (!subreq) {
 256                 status = NT_STATUS_NO_MEMORY;
 257                 dcesrv_terminate_connection(dce_conn, nt_errstr(status));
 258                 return;
 259         }
 260         tevent_req_set_callback(subreq, dcesrv_read_fragment_done, dce_conn);
 261 }
 262
 263 static void dcesrv_sock_recv(struct stream_connection *conn, uint16_t flags)
 264 {
 265         struct dcesrv_connection *dce_conn = talloc_get_type(conn->private_data,
 266                                              struct dcesrv_connection);
 267         dcesrv_terminate_connection(dce_conn, "dcesrv_sock_recv triggered");
 268 }
 269
 270 static void dcesrv_sock_send(struct stream_connection *conn, uint16_t flags)
 271 {
 272         struct dcesrv_connection *dce_conn = talloc_get_type(conn->private_data,
 273                                              struct dcesrv_connection);
 274         dcesrv_terminate_connection(dce_conn, "dcesrv_sock_send triggered");
 275 }
 276
 277
 278 static const struct stream_server_ops dcesrv_stream_ops = {
 279         .name                   = "rpc",
 280         .accept_connection      = dcesrv_sock_accept,
 281         .recv_handler           = dcesrv_sock_recv,
 282         .send_handler           = dcesrv_sock_send,
 283 };
 284
 285
 286
 287 static NTSTATUS dcesrv_add_ep_unix(struct dcesrv_context *dce_ctx,
 288                                    struct loadparm_context *lp_ctx,
 289                                    struct dcesrv_endpoint *e,
 290                             struct tevent_context *event_ctx, const struct model_ops *model_ops)
 291 {
 292         struct dcesrv_socket_context *dcesrv_sock;
 293         uint16_t port = 1;
 294         NTSTATUS status;
 295
 296         dcesrv_sock = talloc(event_ctx, struct dcesrv_socket_context);
 297         NT_STATUS_HAVE_NO_MEMORY(dcesrv_sock);
 298
 299         /* remember the endpoint of this socket */
 300         dcesrv_sock->endpoint           = e;
 301         dcesrv_sock->dcesrv_ctx         = talloc_reference(dcesrv_sock, dce_ctx);
 302
 303         status = stream_setup_socket(event_ctx, lp_ctx,
 304                                      model_ops, &dcesrv_stream_ops,
 305                                      "unix", e->ep_description->endpoint, &port,
 306                                      lpcfg_socket_options(lp_ctx),
 307                                      dcesrv_sock);
 308         if (!NT_STATUS_IS_OK(status)) {
 309                 DEBUG(0,("service_setup_stream_socket(path=%s) failed - %s\n",
 310                          e->ep_description->endpoint, nt_errstr(status)));
 311         }
 312
 313         return status;
 314 }
 315
 316 static NTSTATUS dcesrv_add_ep_ncalrpc(struct dcesrv_context *dce_ctx,
 317                                       struct loadparm_context *lp_ctx,
 318                                       struct dcesrv_endpoint *e,
 319                                       struct tevent_context *event_ctx, const struct model_ops *model_ops)
 320 {
 321         struct dcesrv_socket_context *dcesrv_sock;
 322         uint16_t port = 1;
 323         char *full_path;
 324         NTSTATUS status;
 325
 326         if (!e->ep_description->endpoint) {
 327                 /* No identifier specified: use DEFAULT.
 328                  * DO NOT hardcode this value anywhere else. Rather, specify
 329                  * no endpoint and let the epmapper worry about it. */
 330                 e->ep_description->endpoint = talloc_strdup(dce_ctx, "DEFAULT");
 331         }
 332
 333         full_path = talloc_asprintf(dce_ctx, "%s/%s", lpcfg_ncalrpc_dir(lp_ctx),
 334                                     e->ep_description->endpoint);
 335
 336         dcesrv_sock = talloc(event_ctx, struct dcesrv_socket_context);
 337         NT_STATUS_HAVE_NO_MEMORY(dcesrv_sock);
 338
 339         /* remember the endpoint of this socket */
 340         dcesrv_sock->endpoint           = e;
 341         dcesrv_sock->dcesrv_ctx         = talloc_reference(dcesrv_sock, dce_ctx);
 342
 343         status = stream_setup_socket(event_ctx, lp_ctx,
 344                                      model_ops, &dcesrv_stream_ops,
 345                                      "unix", full_path, &port,
 346                                      lpcfg_socket_options(lp_ctx),
 347                                      dcesrv_sock);
 348         if (!NT_STATUS_IS_OK(status)) {
 349                 DEBUG(0,("service_setup_stream_socket(identifier=%s,path=%s) failed - %s\n",
 350                          e->ep_description->endpoint, full_path, nt_errstr(status)));
 351         }
 352         return status;
 353 }
 354
 355 static NTSTATUS dcesrv_add_ep_np(struct dcesrv_context *dce_ctx,
 356                                  struct loadparm_context *lp_ctx,
 357                                  struct dcesrv_endpoint *e,
 358                                  struct tevent_context *event_ctx, const struct model_ops *model_ops)
 359 {
 360         struct dcesrv_socket_context *dcesrv_sock;
 361         NTSTATUS status;
 362
 363         if (e->ep_description->endpoint == NULL) {
 364                 DEBUG(0, ("Endpoint mandatory for named pipes\n"));
 365                 return NT_STATUS_INVALID_PARAMETER;
 366         }
 367
 368         dcesrv_sock = talloc(event_ctx, struct dcesrv_socket_context);
 369         NT_STATUS_HAVE_NO_MEMORY(dcesrv_sock);
 370
 371         /* remember the endpoint of this socket */
 372         dcesrv_sock->endpoint           = e;
 373         dcesrv_sock->dcesrv_ctx         = talloc_reference(dcesrv_sock, dce_ctx);
 374
 375         status = tstream_setup_named_pipe(event_ctx, lp_ctx,
 376                                           model_ops, &dcesrv_stream_ops,
 377                                           e->ep_description->endpoint,
 378                                           dcesrv_sock);
 379         if (!NT_STATUS_IS_OK(status)) {
 380                 DEBUG(0,("stream_setup_named_pipe(pipe=%s) failed - %s\n",
 381                          e->ep_description->endpoint, nt_errstr(status)));
 382                 return status;
 383         }
 384
 385         return NT_STATUS_OK;
 386 }
 387
 388 /*
 389   add a socket address to the list of events, one event per dcerpc endpoint
 390 */
 391 static NTSTATUS add_socket_rpc_tcp_iface(struct dcesrv_context *dce_ctx, struct dcesrv_endpoint *e,
 392                                          struct tevent_context *event_ctx, const struct model_ops *model_ops,
 393                                          const char *address)
 394 {
 395         struct dcesrv_socket_context *dcesrv_sock;
 396         uint16_t port = 0;
 397         NTSTATUS status;
 398
 399         if (e->ep_description->endpoint) {
 400                 port = atoi(e->ep_description->endpoint);
 401         }
 402
 403         dcesrv_sock = talloc(event_ctx, struct dcesrv_socket_context);
 404         NT_STATUS_HAVE_NO_MEMORY(dcesrv_sock);
 405
 406         /* remember the endpoint of this socket */
 407         dcesrv_sock->endpoint           = e;
 408         dcesrv_sock->dcesrv_ctx         = talloc_reference(dcesrv_sock, dce_ctx);
 409
 410         status = stream_setup_socket(event_ctx, dce_ctx->lp_ctx,
 411                                      model_ops, &dcesrv_stream_ops,
 412                                      "ipv4", address, &port,
 413                                      lpcfg_socket_options(dce_ctx->lp_ctx),
 414                                      dcesrv_sock);
 415         if (!NT_STATUS_IS_OK(status)) {
 416                 DEBUG(0,("service_setup_stream_socket(address=%s,port=%u) failed - %s\n",
 417                          address, port, nt_errstr(status)));
 418         }
 419
 420         if (e->ep_description->endpoint == NULL) {
 421                 e->ep_description->endpoint = talloc_asprintf(dce_ctx, "%d", port);
 422         }
 423
 424         return status;
 425 }
 426
 427 static NTSTATUS dcesrv_add_ep_tcp(struct dcesrv_context *dce_ctx,
 428                                   struct loadparm_context *lp_ctx,
 429                                   struct dcesrv_endpoint *e,
 430                                   struct tevent_context *event_ctx, const struct model_ops *model_ops)
 431 {
 432         NTSTATUS status;
 433
 434         /* Add TCP/IP sockets */
 435         if (lpcfg_interfaces(lp_ctx) && lpcfg_bind_interfaces_only(lp_ctx)) {
 436                 int num_interfaces;
 437                 int i;
 438                 struct interface *ifaces;
 439
 440                 load_interfaces(dce_ctx, lpcfg_interfaces(lp_ctx), &ifaces);
 441
 442                 num_interfaces = iface_count(ifaces);
 443                 for(i = 0; i < num_interfaces; i++) {
 444                         const char *address = iface_n_ip(ifaces, i);
 445                         status = add_socket_rpc_tcp_iface(dce_ctx, e, event_ctx, model_ops, address);
 446                         NT_STATUS_NOT_OK_RETURN(status);
 447                 }
 448         } else {
 449                 status = add_socket_rpc_tcp_iface(dce_ctx, e, event_ctx, model_ops,
 450                                                   lpcfg_socket_address(lp_ctx));
 451                 NT_STATUS_NOT_OK_RETURN(status);
 452         }
 453
 454         return NT_STATUS_OK;
 455 }
 456
 457 NTSTATUS dcesrv_add_ep(struct dcesrv_context *dce_ctx,
 458                        struct loadparm_context *lp_ctx,
 459                        struct dcesrv_endpoint *e,
 460                        struct tevent_context *event_ctx,
 461                        const struct model_ops *model_ops)
 462 {
 463         switch (e->ep_description->transport) {
 464         case NCACN_UNIX_STREAM:
 465                 return dcesrv_add_ep_unix(dce_ctx, lp_ctx, e, event_ctx, model_ops);
 466
 467         case NCALRPC:
 468                 return dcesrv_add_ep_ncalrpc(dce_ctx, lp_ctx, e, event_ctx, model_ops);
 469
 470         case NCACN_IP_TCP:
 471                 return dcesrv_add_ep_tcp(dce_ctx, lp_ctx, e, event_ctx, model_ops);
 472
 473         case NCACN_NP:
 474                 return dcesrv_add_ep_np(dce_ctx, lp_ctx, e, event_ctx, model_ops);
 475
 476         default:
 477                 return NT_STATUS_NOT_SUPPORTED;
 478         }
 479 }
 480
 481 /*
 482   open the dcerpc server sockets
 483 */
 484 static void dcesrv_task_init(struct task_server *task)
 485 {
 486         NTSTATUS status;
 487         struct dcesrv_context *dce_ctx;
 488         struct dcesrv_endpoint *e;
 489         const struct model_ops *model_ops;
 490
 491         dcerpc_server_init(task->lp_ctx);
 492
 493         task_server_set_title(task, "task[dcesrv]");
 494
 495         /* run the rpc server as a single process to allow for shard
 496          * handles, and sharing of ldb contexts */
 497         model_ops = process_model_startup(task->event_ctx, "single");
 498         if (!model_ops) goto failed;
 499
 500         status = dcesrv_init_context(task->event_ctx,
 501                                      task->lp_ctx,
 502                                      lpcfg_dcerpc_endpoint_servers(task->lp_ctx),
 503                                      &dce_ctx);
 504         if (!NT_STATUS_IS_OK(status)) goto failed;
 505
 506         /* Make sure the directory for NCALRPC exists */
 507         if (!directory_exist(lpcfg_ncalrpc_dir(task->lp_ctx))) {
 508                 mkdir(lpcfg_ncalrpc_dir(task->lp_ctx), 0755);
 509         }
 510
 511         for (e=dce_ctx->endpoint_list;e;e=e->next) {
 512                 status = dcesrv_add_ep(dce_ctx, task->lp_ctx, e, task->event_ctx, model_ops);
 513                 if (!NT_STATUS_IS_OK(status)) goto failed;
 514         }
 515
 516         return;
 517 failed:
 518         task_server_terminate(task, "Failed to startup dcerpc server task", true);
 519 }
 520
 521 NTSTATUS server_service_rpc_init(void)
 522 {
 523
 524         return register_server_service("rpc", dcesrv_task_init);
 525 }