source4/libcli/smb_composite/connect.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    Copyright (C) Andrew Tridgell 2005
   5
   6    This program is free software; you can redistribute it and/or modify
   7    it under the terms of the GNU General Public License as published by
   8    the Free Software Foundation; either version 3 of the License, or
   9    (at your option) any later version.
  10
  11    This program is distributed in the hope that it will be useful,
  12    but WITHOUT ANY WARRANTY; without even the implied warranty of
  13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  14    GNU General Public License for more details.
  15
  16    You should have received a copy of the GNU General Public License
  17    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  18 */
  19 /*
  20   a composite API for making a full SMB connection
  21 */
  22
  23 #include "includes.h"
  24 #include "libcli/raw/libcliraw.h"
  25 #include "libcli/raw/raw_proto.h"
  26 #include "libcli/composite/composite.h"
  27 #include "libcli/smb_composite/smb_composite.h"
  28 #include "lib/events/events.h"
  29 #include "libcli/resolve/resolve.h"
  30 #include "auth/credentials/credentials.h"
  31 #include "librpc/gen_ndr/ndr_nbt.h"
  32 #include "param/param.h"
  33 #include "lib/util/util_net.h"
  34
  35 /* the stages of this call */
  36 enum connect_stage {CONNECT_SOCKET,
  37                     CONNECT_NEGPROT,
  38                     CONNECT_SESSION_SETUP,
  39                     CONNECT_SESSION_SETUP_ANON,
  40                     CONNECT_TCON,
  41                     CONNECT_DONE
  42 };
  43
  44 struct connect_state {
  45         enum connect_stage stage;
  46         struct smbcli_socket *sock;
  47         struct smbcli_transport *transport;
  48         struct smbcli_session *session;
  49         struct smb_composite_connect *io;
  50         union smb_tcon *io_tcon;
  51         struct smb_composite_sesssetup *io_setup;
  52         struct smbcli_request *req;
  53         struct composite_context *creq;
  54         struct tevent_req *subreq;
  55         struct nbt_name calling, called;
  56 };
  57
  58
  59 static void request_handler(struct smbcli_request *);
  60 static void composite_handler(struct composite_context *);
  61 static void subreq_handler(struct tevent_req *subreq);
  62
  63 /*
  64   a tree connect request has completed
  65 */
  66 static NTSTATUS connect_tcon(struct composite_context *c,
  67                              struct smb_composite_connect *io)
  68 {
  69         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
  70         NTSTATUS status;
  71
  72         status = smb_raw_tcon_recv(state->req, c, state->io_tcon);
  73         NT_STATUS_NOT_OK_RETURN(status);
  74
  75         io->out.tree->tid = state->io_tcon->tconx.out.tid;
  76         if (state->io_tcon->tconx.out.dev_type) {
  77                 io->out.tree->device = talloc_strdup(io->out.tree,
  78                                                      state->io_tcon->tconx.out.dev_type);
  79         }
  80         if (state->io_tcon->tconx.out.fs_type) {
  81                 io->out.tree->fs_type = talloc_strdup(io->out.tree,
  82                                                       state->io_tcon->tconx.out.fs_type);
  83         }
  84
  85         state->stage = CONNECT_DONE;
  86
  87         return NT_STATUS_OK;
  88 }
  89
  90
  91 /*
  92   a session setup request with anonymous fallback has completed
  93 */
  94 static NTSTATUS connect_session_setup_anon(struct composite_context *c,
  95                                            struct smb_composite_connect *io)
  96 {
  97         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
  98         NTSTATUS status;
  99
 100         status = smb_composite_sesssetup_recv(state->creq);
 101         NT_STATUS_NOT_OK_RETURN(status);
 102
 103         io->out.anonymous_fallback_done = true;
 104
 105         state->session->vuid = state->io_setup->out.vuid;
 106
 107         /* setup for a tconx */
 108         state->io_tcon = talloc(c, union smb_tcon);
 109         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon);
 110
 111         /* connect to a share using a tree connect */
 112         state->io_tcon->generic.level = RAW_TCON_TCONX;
 113         state->io_tcon->tconx.in.flags = 0;
 114         state->io_tcon->tconx.in.password = data_blob(NULL, 0);
 115
 116         state->io_tcon->tconx.in.path = talloc_asprintf(state->io_tcon,
 117                                                  "\\\\%s\\%s",
 118                                                  io->in.called_name,
 119                                                  io->in.service);
 120         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon->tconx.in.path);
 121         if (!io->in.service_type) {
 122                 state->io_tcon->tconx.in.device = "?????";
 123         } else {
 124                 state->io_tcon->tconx.in.device = io->in.service_type;
 125         }
 126
 127         state->req = smb_raw_tcon_send(io->out.tree, state->io_tcon);
 128         NT_STATUS_HAVE_NO_MEMORY(state->req);
 129         if (state->req->state == SMBCLI_REQUEST_ERROR) {
 130                 return state->req->status;
 131         }
 132
 133         state->req->async.fn = request_handler;
 134         state->req->async.private_data = c;
 135         state->stage = CONNECT_TCON;
 136
 137         return NT_STATUS_OK;
 138 }
 139
 140 /*
 141   a session setup request has completed
 142 */
 143 static NTSTATUS connect_session_setup(struct composite_context *c,
 144                                       struct smb_composite_connect *io)
 145 {
 146         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 147         NTSTATUS status;
 148
 149         status = smb_composite_sesssetup_recv(state->creq);
 150
 151         if (!NT_STATUS_IS_OK(status) &&
 152             !cli_credentials_is_anonymous(state->io->in.credentials) &&
 153             io->in.fallback_to_anonymous) {
 154
 155                 state->io_setup->in.credentials = cli_credentials_init(state);
 156                 NT_STATUS_HAVE_NO_MEMORY(state->io_setup->in.credentials);
 157                 cli_credentials_set_workstation(state->io_setup->in.credentials,
 158                    cli_credentials_get_workstation(state->io->in.credentials),
 159                    CRED_SPECIFIED);
 160                 cli_credentials_set_anonymous(state->io_setup->in.credentials);
 161
 162                 /* If the preceding attempt was with extended security, we
 163                  * have been given a uid in the NTLMSSP_CHALLENGE reply. This
 164                  * would lead to an invalid uid in the anonymous fallback */
 165                 state->session->vuid = 0;
 166                 data_blob_free(&state->session->user_session_key);
 167                 talloc_free(state->session->gensec);
 168                 state->session->gensec = NULL;
 169
 170                 state->creq = smb_composite_sesssetup_send(state->session,
 171                                                            state->io_setup);
 172                 NT_STATUS_HAVE_NO_MEMORY(state->creq);
 173                 if (state->creq->state == COMPOSITE_STATE_ERROR) {
 174                         return state->creq->status;
 175                 }
 176                 state->creq->async.fn = composite_handler;
 177                 state->creq->async.private_data = c;
 178                 state->stage = CONNECT_SESSION_SETUP_ANON;
 179
 180                 return NT_STATUS_OK;
 181         }
 182
 183         NT_STATUS_NOT_OK_RETURN(status);
 184
 185         state->session->vuid = state->io_setup->out.vuid;
 186
 187         /* If we don't have a remote share name then this indicates that
 188          * we don't want to do a tree connect */
 189         if (!io->in.service) {
 190                 state->stage = CONNECT_DONE;
 191                 return NT_STATUS_OK;
 192         }
 193
 194         state->io_tcon = talloc(c, union smb_tcon);
 195         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon);
 196
 197         /* connect to a share using a tree connect */
 198         state->io_tcon->generic.level = RAW_TCON_TCONX;
 199         state->io_tcon->tconx.in.flags = 0;
 200         state->io_tcon->tconx.in.password = data_blob(NULL, 0);
 201
 202         state->io_tcon->tconx.in.path = talloc_asprintf(state->io_tcon,
 203                                                  "\\\\%s\\%s",
 204                                                  io->in.called_name,
 205                                                  io->in.service);
 206         NT_STATUS_HAVE_NO_MEMORY(state->io_tcon->tconx.in.path);
 207         if (!io->in.service_type) {
 208                 state->io_tcon->tconx.in.device = "?????";
 209         } else {
 210                 state->io_tcon->tconx.in.device = io->in.service_type;
 211         }
 212
 213         state->req = smb_raw_tcon_send(io->out.tree, state->io_tcon);
 214         NT_STATUS_HAVE_NO_MEMORY(state->req);
 215         if (state->req->state == SMBCLI_REQUEST_ERROR) {
 216                 return state->req->status;
 217         }
 218
 219         state->req->async.fn = request_handler;
 220         state->req->async.private_data = c;
 221         state->stage = CONNECT_TCON;
 222
 223         return NT_STATUS_OK;
 224 }
 225
 226 /*
 227   a negprot request has completed
 228 */
 229 static NTSTATUS connect_negprot(struct composite_context *c,
 230                                 struct smb_composite_connect *io)
 231 {
 232         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 233         NTSTATUS status;
 234
 235         status = smb_raw_negotiate_recv(state->subreq);
 236         TALLOC_FREE(state->subreq);
 237         NT_STATUS_NOT_OK_RETURN(status);
 238
 239         /* next step is a session setup */
 240         state->session = smbcli_session_init(state->transport, state, true, io->in.session_options);
 241         NT_STATUS_HAVE_NO_MEMORY(state->session);
 242
 243         /* setup for a tconx (or at least have the structure ready to
 244          * return, if we won't go that far) */
 245         io->out.tree = smbcli_tree_init(state->session, state, true);
 246         NT_STATUS_HAVE_NO_MEMORY(io->out.tree);
 247
 248         /* If we don't have any credentials then this indicates that
 249          * we don't want to do a session setup */
 250         if (!io->in.credentials) {
 251                 state->stage = CONNECT_DONE;
 252                 return NT_STATUS_OK;
 253         }
 254
 255         state->io_setup = talloc(c, struct smb_composite_sesssetup);
 256         NT_STATUS_HAVE_NO_MEMORY(state->io_setup);
 257
 258         /* prepare a session setup to establish a security context */
 259         state->io_setup->in.sesskey      = state->transport->negotiate.sesskey;
 260         state->io_setup->in.capabilities = state->transport->negotiate.capabilities;
 261         state->io_setup->in.credentials  = io->in.credentials;
 262         state->io_setup->in.workgroup    = io->in.workgroup;
 263         state->io_setup->in.gensec_settings = io->in.gensec_settings;
 264
 265         state->creq = smb_composite_sesssetup_send(state->session, state->io_setup);
 266         NT_STATUS_HAVE_NO_MEMORY(state->creq);
 267         if (state->creq->state == COMPOSITE_STATE_ERROR) {
 268                 return state->creq->status;
 269         }
 270
 271         state->creq->async.fn = composite_handler;
 272         state->creq->async.private_data = c;
 273
 274         state->stage = CONNECT_SESSION_SETUP;
 275
 276         return NT_STATUS_OK;
 277 }
 278
 279 /*
 280   setup a negprot send
 281 */
 282 static NTSTATUS connect_send_negprot(struct composite_context *c,
 283                                      struct smb_composite_connect *io)
 284 {
 285         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 286
 287         /* the socket is up - we can initialise the smbcli transport layer */
 288         state->transport = smbcli_transport_init(state->sock, state, true,
 289                                                  &io->in.options);
 290         NT_STATUS_HAVE_NO_MEMORY(state->transport);
 291
 292         state->subreq = smb_raw_negotiate_send(state,
 293                                                state->transport->ev,
 294                                                state->transport,
 295                                                io->in.options.max_protocol);
 296         NT_STATUS_HAVE_NO_MEMORY(state->subreq);
 297         tevent_req_set_callback(state->subreq, subreq_handler, c);
 298         state->stage = CONNECT_NEGPROT;
 299
 300         return NT_STATUS_OK;
 301 }
 302
 303 /*
 304   a socket connection operation has completed
 305 */
 306 static NTSTATUS connect_socket(struct composite_context *c,
 307                                struct smb_composite_connect *io)
 308 {
 309         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 310         NTSTATUS status;
 311
 312         status = smbcli_sock_connect_recv(state->creq, state, &state->sock);
 313         NT_STATUS_NOT_OK_RETURN(status);
 314
 315         if (is_ipaddress(state->sock->hostname) &&
 316             (state->io->in.called_name != NULL)) {
 317                 /* If connecting to an IP address, we might want the real name
 318                  * of the host for later kerberos. The called name is a better
 319                  * approximation */
 320                 state->sock->hostname =
 321                         talloc_strdup(state->sock, io->in.called_name);
 322                 NT_STATUS_HAVE_NO_MEMORY(state->sock->hostname);
 323         }
 324
 325         /* next step is a negprot */
 326         return connect_send_negprot(c, io);
 327 }
 328
 329
 330 /*
 331   handle and dispatch state transitions
 332 */
 333 static void state_handler(struct composite_context *c)
 334 {
 335         struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 336
 337         switch (state->stage) {
 338         case CONNECT_SOCKET:
 339                 c->status = connect_socket(c, state->io);
 340                 break;
 341         case CONNECT_NEGPROT:
 342                 c->status = connect_negprot(c, state->io);
 343                 break;
 344         case CONNECT_SESSION_SETUP:
 345                 c->status = connect_session_setup(c, state->io);
 346                 break;
 347         case CONNECT_SESSION_SETUP_ANON:
 348                 c->status = connect_session_setup_anon(c, state->io);
 349                 break;
 350         case CONNECT_TCON:
 351                 c->status = connect_tcon(c, state->io);
 352                 break;
 353         case CONNECT_DONE:
 354                 break;
 355         }
 356
 357         if (state->stage == CONNECT_DONE) {
 358                 /* all done! */
 359                 composite_done(c);
 360         } else {
 361                 composite_is_ok(c);
 362         }
 363 }
 364
 365
 366 /*
 367   handler for completion of a smbcli_request sub-request
 368 */
 369 static void request_handler(struct smbcli_request *req)
 370 {
 371         struct composite_context *c = talloc_get_type(req->async.private_data,
 372                                                      struct composite_context);
 373         state_handler(c);
 374 }
 375
 376 /*
 377   handler for completion of a smbcli_composite sub-request
 378 */
 379 static void composite_handler(struct composite_context *creq)
 380 {
 381         struct composite_context *c = talloc_get_type(creq->async.private_data,
 382                                                      struct composite_context);
 383         state_handler(c);
 384 }
 385
 386 /*
 387   handler for completion of a tevent_req sub-request
 388 */
 389 static void subreq_handler(struct tevent_req *subreq)
 390 {
 391         struct composite_context *c =
 392                 tevent_req_callback_data(subreq,
 393                 struct composite_context);
 394         state_handler(c);
 395 }
 396
 397 /*
 398   a function to establish a smbcli_tree from scratch
 399 */
 400 struct composite_context *smb_composite_connect_send(struct smb_composite_connect *io,
 401                                                      TALLOC_CTX *mem_ctx,
 402                                                      struct resolve_context *resolve_ctx,
 403                                                      struct tevent_context *event_ctx)
 404 {
 405         struct composite_context *c;
 406         struct connect_state *state;
 407
 408         c = talloc_zero(mem_ctx, struct composite_context);
 409         if (c == NULL) goto failed;
 410
 411         c->event_ctx = event_ctx;
 412         if (c->event_ctx == NULL) goto failed;
 413
 414         state = talloc_zero(c, struct connect_state);
 415         if (state == NULL) goto failed;
 416
 417         if (io->in.gensec_settings == NULL) goto failed;
 418         state->io = io;
 419
 420         c->state = COMPOSITE_STATE_IN_PROGRESS;
 421         c->private_data = state;
 422
 423         make_nbt_name_client(&state->calling,
 424                              cli_credentials_get_workstation(io->in.credentials));
 425
 426         nbt_choose_called_name(state, &state->called,
 427                                io->in.called_name, NBT_NAME_SERVER);
 428
 429         state->creq = smbcli_sock_connect_send(state,
 430                                                NULL,
 431                                                io->in.dest_ports,
 432                                                io->in.dest_host,
 433                                                resolve_ctx, c->event_ctx,
 434                                                io->in.socket_options,
 435                                                &state->calling,
 436                                                &state->called);
 437         if (state->creq == NULL) goto failed;
 438
 439         state->stage = CONNECT_SOCKET;
 440         state->creq->async.private_data = c;
 441         state->creq->async.fn = composite_handler;
 442
 443         return c;
 444 failed:
 445         talloc_free(c);
 446         return NULL;
 447 }
 448
 449 /*
 450   recv half of async composite connect code
 451 */
 452 NTSTATUS smb_composite_connect_recv(struct composite_context *c, TALLOC_CTX *mem_ctx)
 453 {
 454         NTSTATUS status;
 455
 456         status = composite_wait(c);
 457
 458         if (NT_STATUS_IS_OK(status)) {
 459                 struct connect_state *state = talloc_get_type(c->private_data, struct connect_state);
 460                 talloc_steal(mem_ctx, state->io->out.tree);
 461         }
 462
 463         talloc_free(c);
 464         return status;
 465 }
 466
 467 /*
 468   sync version of smb_composite_connect
 469 */
 470 NTSTATUS smb_composite_connect(struct smb_composite_connect *io, TALLOC_CTX *mem_ctx,
 471                                struct resolve_context *resolve_ctx,
 472                                struct tevent_context *ev)
 473 {
 474         struct composite_context *c = smb_composite_connect_send(io, mem_ctx, resolve_ctx, ev);
 475         return smb_composite_connect_recv(c, mem_ctx);
 476 }