2 Unix SMB/CIFS implementation.
3 Samba utility functions
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Tim Potter 2000-2001
6 Copyright (C) Jeremy Allison 1992-2007
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 /*******************************************************************
25 Map a text hostname or IP address (IPv4 or IPv6) into a
26 struct sockaddr_storage.
27 ******************************************************************/
29 bool interpret_string_addr(struct sockaddr_storage
*pss
,
33 struct addrinfo
*res
= NULL
;
34 #if defined(HAVE_IPV6)
35 char addr
[INET6_ADDRSTRLEN
];
36 unsigned int scope_id
= 0;
38 if (strchr_m(str
, ':')) {
39 char *p
= strchr_m(str
, '%');
42 * Cope with link-local.
43 * This is IP:v6:addr%ifname.
46 if (p
&& (p
> str
) && ((scope_id
= if_nametoindex(p
+1)) != 0)) {
48 MIN(PTR_DIFF(p
,str
)+1,
57 if (!interpret_string_addr_internal(&res
, str
, flags
|AI_ADDRCONFIG
)) {
63 /* Copy the first sockaddr. */
64 memcpy(pss
, res
->ai_addr
, res
->ai_addrlen
);
66 #if defined(HAVE_IPV6)
67 if (pss
->ss_family
== AF_INET6
&& scope_id
) {
68 struct sockaddr_in6
*ps6
= (struct sockaddr_in6
*)pss
;
69 if (IN6_IS_ADDR_LINKLOCAL(&ps6
->sin6_addr
) &&
70 ps6
->sin6_scope_id
== 0) {
71 ps6
->sin6_scope_id
= scope_id
;
80 /*******************************************************************
81 Set an address to INADDR_ANY.
82 ******************************************************************/
84 void zero_sockaddr(struct sockaddr_storage
*pss
)
86 memset(pss
, '\0', sizeof(*pss
));
87 /* Ensure we're at least a valid sockaddr-storage. */
88 pss
->ss_family
= AF_INET
;
91 /****************************************************************************
92 Get a port number in host byte order from a sockaddr_storage.
93 ****************************************************************************/
95 uint16_t get_sockaddr_port(const struct sockaddr_storage
*pss
)
99 if (pss
->ss_family
!= AF_INET
) {
100 #if defined(HAVE_IPV6)
102 const struct sockaddr_in6
*sa6
=
103 (const struct sockaddr_in6
*)pss
;
104 port
= ntohs(sa6
->sin6_port
);
107 const struct sockaddr_in
*sa
=
108 (const struct sockaddr_in
*)pss
;
109 port
= ntohs(sa
->sin_port
);
114 /****************************************************************************
115 Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
116 ****************************************************************************/
118 static char *print_sockaddr_len(char *dest
,
120 const struct sockaddr
*psa
,
126 (void)sys_getnameinfo(psa
,
134 /****************************************************************************
135 Print out an IPv4 or IPv6 address from a struct sockaddr_storage.
136 ****************************************************************************/
138 char *print_sockaddr(char *dest
,
140 const struct sockaddr_storage
*psa
)
142 return print_sockaddr_len(dest
, destlen
, (struct sockaddr
*)psa
,
143 sizeof(struct sockaddr_storage
));
146 /****************************************************************************
147 Print out a canonical IPv4 or IPv6 address from a struct sockaddr_storage.
148 ****************************************************************************/
150 char *print_canonical_sockaddr(TALLOC_CTX
*ctx
,
151 const struct sockaddr_storage
*pss
)
153 char addr
[INET6_ADDRSTRLEN
];
157 /* Linux getnameinfo() man pages says port is unitialized if
158 service name is NULL. */
160 ret
= sys_getnameinfo((const struct sockaddr
*)pss
,
161 sizeof(struct sockaddr_storage
),
169 if (pss
->ss_family
!= AF_INET
) {
170 #if defined(HAVE_IPV6)
171 dest
= talloc_asprintf(ctx
, "[%s]", addr
);
176 dest
= talloc_asprintf(ctx
, "%s", addr
);
182 /****************************************************************************
183 Return the string of an IP address (IPv4 or IPv6).
184 ****************************************************************************/
186 static const char *get_socket_addr(int fd
, char *addr_buf
, size_t addr_len
)
188 struct sockaddr_storage sa
;
189 socklen_t length
= sizeof(sa
);
191 /* Ok, returning a hard coded IPv4 address
192 * is bogus, but it's just as bogus as a
193 * zero IPv6 address. No good choice here.
196 strlcpy(addr_buf
, "0.0.0.0", addr_len
);
202 if (getsockname(fd
, (struct sockaddr
*)&sa
, &length
) < 0) {
203 DEBUG(0,("getsockname failed. Error was %s\n",
208 return print_sockaddr_len(addr_buf
, addr_len
, (struct sockaddr
*)&sa
, length
);
212 /* Not currently used. JRA. */
213 /****************************************************************************
214 Return the port number we've bound to on a socket.
215 ****************************************************************************/
217 static int get_socket_port(int fd
)
219 struct sockaddr_storage sa
;
220 socklen_t length
= sizeof(sa
);
226 if (getsockname(fd
, (struct sockaddr
*)&sa
, &length
) < 0) {
227 DEBUG(0,("getpeername failed. Error was %s\n",
232 #if defined(HAVE_IPV6)
233 if (sa
.ss_family
== AF_INET6
) {
234 return ntohs(((struct sockaddr_in6
*)&sa
)->sin6_port
);
237 if (sa
.ss_family
== AF_INET
) {
238 return ntohs(((struct sockaddr_in
*)&sa
)->sin_port
);
244 const char *client_name(int fd
)
246 return get_peer_name(fd
,false);
249 const char *client_addr(int fd
, char *addr
, size_t addrlen
)
251 return get_peer_addr(fd
,addr
,addrlen
);
254 const char *client_socket_addr(int fd
, char *addr
, size_t addr_len
)
256 return get_socket_addr(fd
, addr
, addr_len
);
260 /* Not currently used. JRA. */
261 int client_socket_port(int fd
)
263 return get_socket_port(fd
);
267 /****************************************************************************
268 Accessor functions to make thread-safe code easier later...
269 ****************************************************************************/
271 void set_smb_read_error(enum smb_read_errors
*pre
,
272 enum smb_read_errors newerr
)
279 void cond_set_smb_read_error(enum smb_read_errors
*pre
,
280 enum smb_read_errors newerr
)
282 if (pre
&& *pre
== SMB_READ_OK
) {
287 /****************************************************************************
288 Determine if a file descriptor is in fact a socket.
289 ****************************************************************************/
291 bool is_a_socket(int fd
)
296 return(getsockopt(fd
, SOL_SOCKET
, SO_TYPE
, (char *)&v
, &l
) == 0);
299 enum SOCK_OPT_TYPES
{OPT_BOOL
,OPT_INT
,OPT_ON
};
301 typedef struct smb_socket_option
{
309 static const smb_socket_option socket_options
[] = {
310 {"SO_KEEPALIVE", SOL_SOCKET
, SO_KEEPALIVE
, 0, OPT_BOOL
},
311 {"SO_REUSEADDR", SOL_SOCKET
, SO_REUSEADDR
, 0, OPT_BOOL
},
312 {"SO_BROADCAST", SOL_SOCKET
, SO_BROADCAST
, 0, OPT_BOOL
},
314 {"TCP_NODELAY", IPPROTO_TCP
, TCP_NODELAY
, 0, OPT_BOOL
},
317 {"TCP_KEEPCNT", IPPROTO_TCP
, TCP_KEEPCNT
, 0, OPT_INT
},
320 {"TCP_KEEPIDLE", IPPROTO_TCP
, TCP_KEEPIDLE
, 0, OPT_INT
},
323 {"TCP_KEEPINTVL", IPPROTO_TCP
, TCP_KEEPINTVL
, 0, OPT_INT
},
325 #ifdef IPTOS_LOWDELAY
326 {"IPTOS_LOWDELAY", IPPROTO_IP
, IP_TOS
, IPTOS_LOWDELAY
, OPT_ON
},
328 #ifdef IPTOS_THROUGHPUT
329 {"IPTOS_THROUGHPUT", IPPROTO_IP
, IP_TOS
, IPTOS_THROUGHPUT
, OPT_ON
},
332 {"SO_REUSEPORT", SOL_SOCKET
, SO_REUSEPORT
, 0, OPT_BOOL
},
335 {"SO_SNDBUF", SOL_SOCKET
, SO_SNDBUF
, 0, OPT_INT
},
338 {"SO_RCVBUF", SOL_SOCKET
, SO_RCVBUF
, 0, OPT_INT
},
341 {"SO_SNDLOWAT", SOL_SOCKET
, SO_SNDLOWAT
, 0, OPT_INT
},
344 {"SO_RCVLOWAT", SOL_SOCKET
, SO_RCVLOWAT
, 0, OPT_INT
},
347 {"SO_SNDTIMEO", SOL_SOCKET
, SO_SNDTIMEO
, 0, OPT_INT
},
350 {"SO_RCVTIMEO", SOL_SOCKET
, SO_RCVTIMEO
, 0, OPT_INT
},
353 {"TCP_FASTACK", IPPROTO_TCP
, TCP_FASTACK
, 0, OPT_INT
},
357 /****************************************************************************
358 Print socket options.
359 ****************************************************************************/
361 static void print_socket_options(int s
)
365 const smb_socket_option
*p
= &socket_options
[0];
367 /* wrapped in if statement to prevent streams
368 * leak in SCO Openserver 5.0 */
369 /* reported on samba-technical --jerry */
370 if ( DEBUGLEVEL
>= 5 ) {
371 DEBUG(5,("Socket options:\n"));
372 for (; p
->name
!= NULL
; p
++) {
373 if (getsockopt(s
, p
->level
, p
->option
,
374 (void *)&value
, &vlen
) == -1) {
375 DEBUGADD(5,("\tCould not test socket option %s.\n",
378 DEBUGADD(5,("\t%s = %d\n",
385 /****************************************************************************
386 Set user socket options.
387 ****************************************************************************/
389 void set_socket_options(int fd
, const char *options
)
391 TALLOC_CTX
*ctx
= talloc_stackframe();
394 while (next_token_talloc(ctx
, &options
, &tok
," \t,")) {
398 bool got_value
= false;
400 if ((p
= strchr_m(tok
,'='))) {
406 for (i
=0;socket_options
[i
].name
;i
++)
407 if (strequal(socket_options
[i
].name
,tok
))
410 if (!socket_options
[i
].name
) {
411 DEBUG(0,("Unknown socket option %s\n",tok
));
415 switch (socket_options
[i
].opttype
) {
418 ret
= setsockopt(fd
,socket_options
[i
].level
,
419 socket_options
[i
].option
,
420 (char *)&value
,sizeof(int));
425 DEBUG(0,("syntax error - %s "
426 "does not take a value\n",tok
));
429 int on
= socket_options
[i
].value
;
430 ret
= setsockopt(fd
,socket_options
[i
].level
,
431 socket_options
[i
].option
,
432 (char *)&on
,sizeof(int));
438 /* be aware that some systems like Solaris return
439 * EINVAL to a setsockopt() call when the client
440 * sent a RST previously - no need to worry */
441 DEBUG(2,("Failed to set socket option %s (Error %s)\n",
442 tok
, strerror(errno
) ));
447 print_socket_options(fd
);
450 /****************************************************************************
452 ****************************************************************************/
454 ssize_t
read_udp_v4_socket(int fd
,
457 struct sockaddr_storage
*psa
)
460 socklen_t socklen
= sizeof(*psa
);
461 struct sockaddr_in
*si
= (struct sockaddr_in
*)psa
;
463 memset((char *)psa
,'\0',socklen
);
465 ret
= (ssize_t
)sys_recvfrom(fd
,buf
,len
,0,
466 (struct sockaddr
*)psa
,&socklen
);
468 /* Don't print a low debug error for a non-blocking socket. */
469 if (errno
== EAGAIN
) {
470 DEBUG(10,("read_udp_v4_socket: returned EAGAIN\n"));
472 DEBUG(2,("read_udp_v4_socket: failed. errno=%s\n",
478 if (psa
->ss_family
!= AF_INET
) {
479 DEBUG(2,("read_udp_v4_socket: invalid address family %d "
480 "(not IPv4)\n", (int)psa
->ss_family
));
484 DEBUG(10,("read_udp_v4_socket: ip %s port %d read: %lu\n",
485 inet_ntoa(si
->sin_addr
),
487 (unsigned long)ret
));
492 /****************************************************************************
493 Read data from a socket with a timout in msec.
494 mincount = if timeout, minimum to read before returning
495 maxcount = number to be read.
496 time_out = timeout in milliseconds
497 ****************************************************************************/
499 NTSTATUS
read_socket_with_timeout(int fd
, char *buf
,
500 size_t mincnt
, size_t maxcnt
,
501 unsigned int time_out
,
508 struct timeval timeout
;
509 char addr
[INET6_ADDRSTRLEN
];
511 /* just checking .... */
521 while (nread
< mincnt
) {
522 readret
= sys_read(fd
, buf
+ nread
, maxcnt
- nread
);
525 DEBUG(5,("read_socket_with_timeout: "
526 "blocking read. EOF from client.\n"));
527 return NT_STATUS_END_OF_FILE
;
531 if (fd
== get_client_fd()) {
532 /* Try and give an error message
533 * saying what client failed. */
534 DEBUG(0,("read_socket_with_timeout: "
535 "client %s read error = %s.\n",
536 get_peer_addr(fd
,addr
,sizeof(addr
)),
539 DEBUG(0,("read_socket_with_timeout: "
540 "read error = %s.\n",
543 return map_nt_error_from_unix(errno
);
550 /* Most difficult - timeout read */
551 /* If this is ever called on a disk file and
552 mincnt is greater then the filesize then
553 system performance will suffer severely as
554 select always returns true on disk files */
556 /* Set initial timeout */
557 timeout
.tv_sec
= (time_t)(time_out
/ 1000);
558 timeout
.tv_usec
= (long)(1000 * (time_out
% 1000));
560 for (nread
=0; nread
< mincnt
; ) {
564 selrtn
= sys_select_intr(fd
+1,&fds
,NULL
,NULL
,&timeout
);
568 /* something is wrong. Maybe the socket is dead? */
569 if (fd
== get_client_fd()) {
570 /* Try and give an error message saying
571 * what client failed. */
572 DEBUG(0,("read_socket_with_timeout: timeout "
573 "read for client %s. select error = %s.\n",
574 get_peer_addr(fd
,addr
,sizeof(addr
)),
577 DEBUG(0,("read_socket_with_timeout: timeout "
578 "read. select error = %s.\n",
581 return map_nt_error_from_unix(errno
);
584 /* Did we timeout ? */
586 DEBUG(10,("read_socket_with_timeout: timeout read. "
587 "select timed out.\n"));
588 return NT_STATUS_IO_TIMEOUT
;
591 readret
= sys_read(fd
, buf
+nread
, maxcnt
-nread
);
594 /* we got EOF on the file descriptor */
595 DEBUG(5,("read_socket_with_timeout: timeout read. "
596 "EOF from client.\n"));
597 return NT_STATUS_END_OF_FILE
;
601 /* the descriptor is probably dead */
602 if (fd
== get_client_fd()) {
603 /* Try and give an error message
604 * saying what client failed. */
605 DEBUG(0,("read_socket_with_timeout: timeout "
606 "read to client %s. read error = %s.\n",
607 get_peer_addr(fd
,addr
,sizeof(addr
)),
610 DEBUG(0,("read_socket_with_timeout: timeout "
611 "read. read error = %s.\n",
614 return map_nt_error_from_unix(errno
);
621 /* Return the number we got */
628 /****************************************************************************
629 Read data from the client, reading exactly N bytes.
630 ****************************************************************************/
632 NTSTATUS
read_data(int fd
, char *buffer
, size_t N
)
634 return read_socket_with_timeout(fd
, buffer
, N
, N
, 0, NULL
);
637 /****************************************************************************
638 Write all data from an iov array
639 ****************************************************************************/
641 ssize_t
write_data_iov(int fd
, const struct iovec
*orig_iov
, int iovcnt
)
647 struct iovec
*iov_copy
, *iov
;
650 for (i
=0; i
<iovcnt
; i
++) {
651 to_send
+= orig_iov
[i
].iov_len
;
654 thistime
= sys_writev(fd
, orig_iov
, iovcnt
);
655 if ((thistime
<= 0) || (thistime
== to_send
)) {
661 * We could not send everything in one call. Make a copy of iov that
662 * we can mess with. We keep a copy of the array start in iov_copy for
663 * the TALLOC_FREE, because we're going to modify iov later on,
664 * discarding elements.
667 iov_copy
= (struct iovec
*)TALLOC_MEMDUP(
668 talloc_tos(), orig_iov
, sizeof(struct iovec
) * iovcnt
);
670 if (iov_copy
== NULL
) {
676 while (sent
< to_send
) {
678 * We have to discard "thistime" bytes from the beginning
679 * iov array, "thistime" contains the number of bytes sent
682 while (thistime
> 0) {
683 if (thistime
< iov
[0].iov_len
) {
685 (char *)iov
[0].iov_base
+ thistime
;
686 iov
[0].iov_base
= new_base
;
687 iov
[0].iov_len
-= thistime
;
690 thistime
-= iov
[0].iov_len
;
695 thistime
= sys_writev(fd
, iov
, iovcnt
);
702 TALLOC_FREE(iov_copy
);
706 /****************************************************************************
708 ****************************************************************************/
710 /****************************************************************************
712 ****************************************************************************/
714 ssize_t
write_data(int fd
, const char *buffer
, size_t N
)
719 iov
.iov_base
= CONST_DISCARD(char *, buffer
);
722 ret
= write_data_iov(fd
, &iov
, 1);
727 if (fd
== get_client_fd()) {
728 char addr
[INET6_ADDRSTRLEN
];
730 * Try and give an error message saying what client failed.
732 DEBUG(0, ("write_data: write failure in writing to client %s. "
733 "Error %s\n", get_peer_addr(fd
,addr
,sizeof(addr
)),
736 DEBUG(0,("write_data: write failure. Error = %s\n",
743 /****************************************************************************
744 Send a keepalive packet (rfc1002).
745 ****************************************************************************/
747 bool send_keepalive(int client
)
749 unsigned char buf
[4];
751 buf
[0] = SMBkeepalive
;
752 buf
[1] = buf
[2] = buf
[3] = 0;
754 return(write_data(client
,(char *)buf
,4) == 4);
757 /****************************************************************************
758 Read 4 bytes of a smb packet and return the smb length of the packet.
759 Store the result in the buffer.
760 This version of the function will return a length of zero on receiving
762 Timeout is in milliseconds.
763 ****************************************************************************/
765 NTSTATUS
read_smb_length_return_keepalive(int fd
, char *inbuf
,
766 unsigned int timeout
,
772 status
= read_socket_with_timeout(fd
, inbuf
, 4, 4, timeout
, NULL
);
774 if (!NT_STATUS_IS_OK(status
)) {
778 *len
= smb_len(inbuf
);
779 msg_type
= CVAL(inbuf
,0);
781 if (msg_type
== SMBkeepalive
) {
782 DEBUG(5,("Got keepalive packet\n"));
785 DEBUG(10,("got smb length of %lu\n",(unsigned long)(*len
)));
790 /****************************************************************************
791 Read 4 bytes of a smb packet and return the smb length of the packet.
792 Store the result in the buffer. This version of the function will
793 never return a session keepalive (length of zero).
794 Timeout is in milliseconds.
795 ****************************************************************************/
797 NTSTATUS
read_smb_length(int fd
, char *inbuf
, unsigned int timeout
,
800 uint8_t msgtype
= SMBkeepalive
;
802 while (msgtype
== SMBkeepalive
) {
805 status
= read_smb_length_return_keepalive(fd
, inbuf
, timeout
,
807 if (!NT_STATUS_IS_OK(status
)) {
811 msgtype
= CVAL(inbuf
, 0);
814 DEBUG(10,("read_smb_length: got smb length of %lu\n",
815 (unsigned long)len
));
820 /****************************************************************************
821 Read an smb from a fd.
822 The timeout is in milliseconds.
823 This function will return on receipt of a session keepalive packet.
824 maxlen is the max number of bytes to return, not including the 4 byte
825 length. If zero it means buflen limit.
826 Doesn't check the MAC on signed packets.
827 ****************************************************************************/
829 NTSTATUS
receive_smb_raw(int fd
, char *buffer
, size_t buflen
, unsigned int timeout
,
830 size_t maxlen
, size_t *p_len
)
835 status
= read_smb_length_return_keepalive(fd
,buffer
,timeout
,&len
);
837 if (!NT_STATUS_IS_OK(status
)) {
838 DEBUG(10, ("receive_smb_raw: %s!\n", nt_errstr(status
)));
843 DEBUG(0,("Invalid packet length! (%lu bytes).\n",
844 (unsigned long)len
));
845 return NT_STATUS_INVALID_PARAMETER
;
850 len
= MIN(len
,maxlen
);
853 status
= read_socket_with_timeout(
854 fd
, buffer
+4, len
, len
, timeout
, &len
);
856 if (!NT_STATUS_IS_OK(status
)) {
860 /* not all of samba3 properly checks for packet-termination
861 * of strings. This ensures that we don't run off into
863 SSVAL(buffer
+4,len
, 0);
870 /****************************************************************************
871 Open a socket of the specified type, port, and address for incoming data.
872 ****************************************************************************/
874 int open_socket_in(int type
,
877 const struct sockaddr_storage
*psock
,
880 struct sockaddr_storage sock
;
882 socklen_t slen
= sizeof(struct sockaddr_in
);
886 #if defined(HAVE_IPV6)
887 if (sock
.ss_family
== AF_INET6
) {
888 ((struct sockaddr_in6
*)&sock
)->sin6_port
= htons(port
);
889 slen
= sizeof(struct sockaddr_in6
);
892 if (sock
.ss_family
== AF_INET
) {
893 ((struct sockaddr_in
*)&sock
)->sin_port
= htons(port
);
896 res
= socket(sock
.ss_family
, type
, 0 );
899 dbgtext( "open_socket_in(): socket() call failed: " );
900 dbgtext( "%s\n", strerror( errno
) );
905 /* This block sets/clears the SO_REUSEADDR and possibly SO_REUSEPORT. */
907 int val
= rebind
? 1 : 0;
908 if( setsockopt(res
,SOL_SOCKET
,SO_REUSEADDR
,
909 (char *)&val
,sizeof(val
)) == -1 ) {
910 if( DEBUGLVL( dlevel
) ) {
911 dbgtext( "open_socket_in(): setsockopt: " );
912 dbgtext( "SO_REUSEADDR = %s ",
913 val
?"true":"false" );
914 dbgtext( "on port %d failed ", port
);
915 dbgtext( "with error = %s\n", strerror(errno
) );
919 if( setsockopt(res
,SOL_SOCKET
,SO_REUSEPORT
,
920 (char *)&val
,sizeof(val
)) == -1 ) {
921 if( DEBUGLVL( dlevel
) ) {
922 dbgtext( "open_socket_in(): setsockopt: ");
923 dbgtext( "SO_REUSEPORT = %s ",
925 dbgtext( "on port %d failed ", port
);
926 dbgtext( "with error = %s\n", strerror(errno
));
929 #endif /* SO_REUSEPORT */
932 /* now we've got a socket - we need to bind it */
933 if (bind(res
, (struct sockaddr
*)&sock
, slen
) == -1 ) {
934 if( DEBUGLVL(dlevel
) && (port
== SMB_PORT1
||
935 port
== SMB_PORT2
|| port
== NMB_PORT
) ) {
936 char addr
[INET6_ADDRSTRLEN
];
937 print_sockaddr(addr
, sizeof(addr
),
939 dbgtext( "bind failed on port %d ", port
);
940 dbgtext( "socket_addr = %s.\n", addr
);
941 dbgtext( "Error = %s\n", strerror(errno
));
947 DEBUG( 10, ( "bind succeeded on port %d\n", port
) );
951 /****************************************************************************
952 Create an outgoing socket. timeout is in milliseconds.
953 **************************************************************************/
955 int open_socket_out(const struct sockaddr_storage
*pss
, uint16_t port
,
958 char addr
[INET6_ADDRSTRLEN
];
959 struct sockaddr_storage sock_out
= *pss
;
961 int connect_loop
= 10;
964 /* create a socket to write to */
965 res
= socket(pss
->ss_family
, SOCK_STREAM
, 0);
967 DEBUG(0,("socket error (%s)\n", strerror(errno
)));
971 #if defined(HAVE_IPV6)
972 if (pss
->ss_family
== AF_INET6
) {
973 struct sockaddr_in6
*psa6
= (struct sockaddr_in6
*)&sock_out
;
974 psa6
->sin6_port
= htons(port
);
975 if (psa6
->sin6_scope_id
== 0 &&
976 IN6_IS_ADDR_LINKLOCAL(&psa6
->sin6_addr
)) {
977 setup_linklocal_scope_id((struct sockaddr
*)&sock_out
);
981 if (pss
->ss_family
== AF_INET
) {
982 struct sockaddr_in
*psa
= (struct sockaddr_in
*)&sock_out
;
983 psa
->sin_port
= htons(port
);
986 /* set it non-blocking */
987 set_blocking(res
,false);
989 print_sockaddr(addr
, sizeof(addr
), &sock_out
);
990 DEBUG(3,("Connecting to %s at port %u\n",
992 (unsigned int)port
));
994 /* and connect it to the destination */
997 ret
= sys_connect(res
, (struct sockaddr
*)&sock_out
);
999 /* Some systems return EAGAIN when they mean EINPROGRESS */
1000 if (ret
< 0 && (errno
== EINPROGRESS
|| errno
== EALREADY
||
1001 errno
== EAGAIN
) && (connect_loop
< timeout
) ) {
1002 smb_msleep(connect_loop
);
1003 timeout
-= connect_loop
;
1004 connect_loop
+= increment
;
1005 if (increment
< 250) {
1006 /* After 8 rounds we end up at a max of 255 msec */
1012 if (ret
< 0 && (errno
== EINPROGRESS
|| errno
== EALREADY
||
1014 DEBUG(1,("timeout connecting to %s:%u\n",
1016 (unsigned int)port
));
1022 if (ret
< 0 && errno
== EISCONN
) {
1029 DEBUG(2,("error connecting to %s:%d (%s)\n",
1037 /* set it blocking again */
1038 set_blocking(res
,true);
1043 /*******************************************************************
1044 Create an outgoing TCP socket to the first addr that connects.
1046 This is for simultaneous connection attempts to port 445 and 139 of a host
1047 or for simultatneous connection attempts to multiple DCs at once. We return
1048 a socket fd of the first successful connection.
1050 @param[in] addrs list of Internet addresses and ports to connect to
1051 @param[in] num_addrs number of address/port pairs in the addrs list
1052 @param[in] timeout time after which we stop waiting for a socket connection
1053 to succeed, given in milliseconds
1054 @param[out] fd_index the entry in addrs which we successfully connected to
1055 @param[out] fd fd of the open and connected socket
1056 @return true on a successful connection, false if all connection attempts
1057 failed or we timed out
1058 *******************************************************************/
1060 bool open_any_socket_out(struct sockaddr_storage
*addrs
, int num_addrs
,
1061 int timeout
, int *fd_index
, int *fd
)
1063 int i
, resulting_index
, res
;
1067 fd_set r_fds
, wr_fds
;
1071 int connect_loop
= 10000; /* 10 milliseconds */
1073 timeout
*= 1000; /* convert to microseconds */
1075 sockets
= SMB_MALLOC_ARRAY(int, num_addrs
);
1077 if (sockets
== NULL
)
1080 resulting_index
= -1;
1082 for (i
=0; i
<num_addrs
; i
++)
1085 for (i
=0; i
<num_addrs
; i
++) {
1086 sockets
[i
] = socket(addrs
[i
].ss_family
, SOCK_STREAM
, 0);
1089 set_blocking(sockets
[i
], false);
1093 good_connect
= false;
1095 for (i
=0; i
<num_addrs
; i
++) {
1096 const struct sockaddr
* a
=
1097 (const struct sockaddr
*)&(addrs
[i
]);
1099 if (sockets
[i
] == -1)
1102 if (sys_connect(sockets
[i
], a
) == 0) {
1103 /* Rather unlikely as we are non-blocking, but it
1104 * might actually happen. */
1105 resulting_index
= i
;
1109 if (errno
== EINPROGRESS
|| errno
== EALREADY
||
1113 errno
== EAGAIN
|| errno
== EINTR
) {
1114 /* These are the error messages that something is
1116 good_connect
= true;
1117 } else if (errno
!= 0) {
1118 /* There was a direct error */
1124 if (!good_connect
) {
1125 /* All of the connect's resulted in real error conditions */
1129 /* Lets see if any of the connect attempts succeeded */
1135 for (i
=0; i
<num_addrs
; i
++) {
1136 if (sockets
[i
] == -1)
1138 FD_SET(sockets
[i
], &wr_fds
);
1139 FD_SET(sockets
[i
], &r_fds
);
1140 if (sockets
[i
]>maxfd
)
1145 tv
.tv_usec
= connect_loop
;
1147 res
= sys_select_intr(maxfd
+1, &r_fds
, &wr_fds
, NULL
, &tv
);
1155 for (i
=0; i
<num_addrs
; i
++) {
1157 if (sockets
[i
] == -1)
1160 /* Stevens, Network Programming says that if there's a
1161 * successful connect, the socket is only writable. Upon an
1162 * error, it's both readable and writable. */
1164 if (FD_ISSET(sockets
[i
], &r_fds
) &&
1165 FD_ISSET(sockets
[i
], &wr_fds
)) {
1166 /* readable and writable, so it's an error */
1172 if (!FD_ISSET(sockets
[i
], &r_fds
) &&
1173 FD_ISSET(sockets
[i
], &wr_fds
)) {
1174 /* Only writable, so it's connected */
1175 resulting_index
= i
;
1182 timeout
-= connect_loop
;
1185 connect_loop
*= 1.5;
1186 if (connect_loop
> timeout
)
1187 connect_loop
= timeout
;
1191 for (i
=0; i
<num_addrs
; i
++) {
1192 if (i
== resulting_index
)
1194 if (sockets
[i
] >= 0)
1198 if (resulting_index
>= 0) {
1199 *fd_index
= resulting_index
;
1200 *fd
= sockets
[*fd_index
];
1201 set_blocking(*fd
, true);
1206 return (resulting_index
>= 0);
1208 /****************************************************************************
1209 Open a connected UDP socket to host on port
1210 **************************************************************************/
1212 int open_udp_socket(const char *host
, int port
)
1214 int type
= SOCK_DGRAM
;
1215 struct sockaddr_in sock_out
;
1217 struct in_addr addr
;
1219 addr
= interpret_addr2(host
);
1221 res
= socket(PF_INET
, type
, 0);
1226 memset((char *)&sock_out
,'\0',sizeof(sock_out
));
1227 putip((char *)&sock_out
.sin_addr
,(char *)&addr
);
1228 sock_out
.sin_port
= htons(port
);
1229 sock_out
.sin_family
= PF_INET
;
1231 if (sys_connect(res
,(struct sockaddr
*)&sock_out
)) {
1239 /*******************************************************************
1240 Return the IP addr of the remote end of a socket as a string.
1241 Optionally return the struct sockaddr_storage.
1242 ******************************************************************/
1244 static const char *get_peer_addr_internal(int fd
,
1246 size_t addr_buf_len
,
1247 struct sockaddr
*pss
,
1250 struct sockaddr_storage ss
;
1251 socklen_t length
= sizeof(ss
);
1253 strlcpy(addr_buf
,"0.0.0.0",addr_buf_len
);
1260 pss
= (struct sockaddr
*)&ss
;
1264 if (getpeername(fd
, (struct sockaddr
*)pss
, plength
) < 0) {
1265 DEBUG(0,("getpeername failed. Error was %s\n",
1270 print_sockaddr_len(addr_buf
,
1277 /*******************************************************************
1278 Matchname - determine if host name matches IP address. Used to
1279 confirm a hostname lookup to prevent spoof attacks.
1280 ******************************************************************/
1282 static bool matchname(const char *remotehost
,
1283 const struct sockaddr
*pss
,
1286 struct addrinfo
*res
= NULL
;
1287 struct addrinfo
*ailist
= NULL
;
1288 char addr_buf
[INET6_ADDRSTRLEN
];
1289 bool ret
= interpret_string_addr_internal(&ailist
,
1291 AI_ADDRCONFIG
|AI_CANONNAME
);
1293 if (!ret
|| ailist
== NULL
) {
1294 DEBUG(3,("matchname: getaddrinfo failed for "
1297 gai_strerror(ret
) ));
1302 * Make sure that getaddrinfo() returns the "correct" host name.
1305 if (ailist
->ai_canonname
== NULL
||
1306 (!strequal(remotehost
, ailist
->ai_canonname
) &&
1307 !strequal(remotehost
, "localhost"))) {
1308 DEBUG(0,("matchname: host name/name mismatch: %s != %s\n",
1310 ailist
->ai_canonname
?
1311 ailist
->ai_canonname
: "(NULL)"));
1312 freeaddrinfo(ailist
);
1316 /* Look up the host address in the address list we just got. */
1317 for (res
= ailist
; res
; res
= res
->ai_next
) {
1318 if (!res
->ai_addr
) {
1321 if (sockaddr_equal((const struct sockaddr
*)res
->ai_addr
,
1322 (struct sockaddr
*)pss
)) {
1323 freeaddrinfo(ailist
);
1329 * The host name does not map to the original host address. Perhaps
1330 * someone has compromised a name server. More likely someone botched
1331 * it, but that could be dangerous, too.
1334 DEBUG(0,("matchname: host name/address mismatch: %s != %s\n",
1335 print_sockaddr_len(addr_buf
,
1339 ailist
->ai_canonname
? ailist
->ai_canonname
: "(NULL)"));
1342 freeaddrinfo(ailist
);
1347 /*******************************************************************
1348 Deal with the singleton cache.
1349 ******************************************************************/
1351 struct name_addr_pair
{
1352 struct sockaddr_storage ss
;
1356 /*******************************************************************
1357 Lookup a name/addr pair. Returns memory allocated from memcache.
1358 ******************************************************************/
1360 static bool lookup_nc(struct name_addr_pair
*nc
)
1366 if (!memcache_lookup(
1367 NULL
, SINGLETON_CACHE
,
1368 data_blob_string_const_null("get_peer_name"),
1373 memcpy(&nc
->ss
, tmp
.data
, sizeof(nc
->ss
));
1374 nc
->name
= (const char *)tmp
.data
+ sizeof(nc
->ss
);
1378 /*******************************************************************
1379 Save a name/addr pair.
1380 ******************************************************************/
1382 static void store_nc(const struct name_addr_pair
*nc
)
1385 size_t namelen
= strlen(nc
->name
);
1387 tmp
= data_blob(NULL
, sizeof(nc
->ss
) + namelen
+ 1);
1391 memcpy(tmp
.data
, &nc
->ss
, sizeof(nc
->ss
));
1392 memcpy(tmp
.data
+sizeof(nc
->ss
), nc
->name
, namelen
+1);
1394 memcache_add(NULL
, SINGLETON_CACHE
,
1395 data_blob_string_const_null("get_peer_name"),
1397 data_blob_free(&tmp
);
1400 /*******************************************************************
1401 Return the DNS name of the remote end of a socket.
1402 ******************************************************************/
1404 const char *get_peer_name(int fd
, bool force_lookup
)
1406 struct name_addr_pair nc
;
1407 char addr_buf
[INET6_ADDRSTRLEN
];
1408 struct sockaddr_storage ss
;
1409 socklen_t length
= sizeof(ss
);
1412 char name_buf
[MAX_DNS_NAME_LENGTH
];
1413 char tmp_name
[MAX_DNS_NAME_LENGTH
];
1415 /* reverse lookups can be *very* expensive, and in many
1416 situations won't work because many networks don't link dhcp
1417 with dns. To avoid the delay we avoid the lookup if
1419 if (!lp_hostname_lookups() && (force_lookup
== false)) {
1420 length
= sizeof(nc
.ss
);
1421 nc
.name
= get_peer_addr_internal(fd
, addr_buf
, sizeof(addr_buf
),
1422 (struct sockaddr
*)&nc
.ss
, &length
);
1425 return nc
.name
? nc
.name
: "UNKNOWN";
1430 memset(&ss
, '\0', sizeof(ss
));
1431 p
= get_peer_addr_internal(fd
, addr_buf
, sizeof(addr_buf
), (struct sockaddr
*)&ss
, &length
);
1433 /* it might be the same as the last one - save some DNS work */
1434 if (sockaddr_equal((struct sockaddr
*)&ss
, (struct sockaddr
*)&nc
.ss
)) {
1435 return nc
.name
? nc
.name
: "UNKNOWN";
1438 /* Not the same. We need to lookup. */
1443 /* Look up the remote host name. */
1444 ret
= sys_getnameinfo((struct sockaddr
*)&ss
,
1453 DEBUG(1,("get_peer_name: getnameinfo failed "
1454 "for %s with error %s\n",
1456 gai_strerror(ret
)));
1457 strlcpy(name_buf
, p
, sizeof(name_buf
));
1459 if (!matchname(name_buf
, (struct sockaddr
*)&ss
, length
)) {
1460 DEBUG(0,("Matchname failed on %s %s\n",name_buf
,p
));
1461 strlcpy(name_buf
,"UNKNOWN",sizeof(name_buf
));
1465 /* can't pass the same source and dest strings in when you
1466 use --enable-developer or the clobber_region() call will
1469 strlcpy(tmp_name
, name_buf
, sizeof(tmp_name
));
1470 alpha_strcpy(name_buf
, tmp_name
, "_-.", sizeof(name_buf
));
1471 if (strstr(name_buf
,"..")) {
1472 strlcpy(name_buf
, "UNKNOWN", sizeof(name_buf
));
1480 return nc
.name
? nc
.name
: "UNKNOWN";
1483 /*******************************************************************
1484 Return the IP addr of the remote end of a socket as a string.
1485 ******************************************************************/
1487 const char *get_peer_addr(int fd
, char *addr
, size_t addr_len
)
1489 return get_peer_addr_internal(fd
, addr
, addr_len
, NULL
, NULL
);
1492 /*******************************************************************
1493 Create protected unix domain socket.
1495 Some unixes cannot set permissions on a ux-dom-sock, so we
1496 have to make sure that the directory contains the protection
1497 permissions instead.
1498 ******************************************************************/
1500 int create_pipe_sock(const char *socket_dir
,
1501 const char *socket_name
,
1504 #ifdef HAVE_UNIXSOCKET
1505 struct sockaddr_un sunaddr
;
1511 old_umask
= umask(0);
1513 /* Create the socket directory or reuse the existing one */
1515 if (lstat(socket_dir
, &st
) == -1) {
1516 if (errno
== ENOENT
) {
1517 /* Create directory */
1518 if (mkdir(socket_dir
, dir_perms
) == -1) {
1519 DEBUG(0, ("error creating socket directory "
1520 "%s: %s\n", socket_dir
,
1525 DEBUG(0, ("lstat failed on socket directory %s: %s\n",
1526 socket_dir
, strerror(errno
)));
1530 /* Check ownership and permission on existing directory */
1531 if (!S_ISDIR(st
.st_mode
)) {
1532 DEBUG(0, ("socket directory %s isn't a directory\n",
1536 if ((st
.st_uid
!= sec_initial_uid()) ||
1537 ((st
.st_mode
& 0777) != dir_perms
)) {
1538 DEBUG(0, ("invalid permissions on socket directory "
1539 "%s\n", socket_dir
));
1544 /* Create the socket file */
1546 sock
= socket(AF_UNIX
, SOCK_STREAM
, 0);
1549 DEBUG(0, ("create_pipe_sock: socket error %s\n",
1554 if (asprintf(&path
, "%s/%s", socket_dir
, socket_name
) == -1) {
1559 memset(&sunaddr
, 0, sizeof(sunaddr
));
1560 sunaddr
.sun_family
= AF_UNIX
;
1561 strlcpy(sunaddr
.sun_path
, path
, sizeof(sunaddr
.sun_path
));
1563 if (bind(sock
, (struct sockaddr
*)&sunaddr
, sizeof(sunaddr
)) == -1) {
1564 DEBUG(0, ("bind failed on pipe socket %s: %s\n", path
,
1569 if (listen(sock
, 5) == -1) {
1570 DEBUG(0, ("listen failed on pipe socket %s: %s\n", path
,
1590 DEBUG(0, ("create_pipe_sock: No Unix sockets on this system\n"));
1592 #endif /* HAVE_UNIXSOCKET */
1595 /****************************************************************************
1596 Get my own canonical name, including domain.
1597 ****************************************************************************/
1599 const char *get_mydnsfullname(void)
1601 struct addrinfo
*res
= NULL
;
1602 char my_hostname
[HOST_NAME_MAX
];
1606 if (memcache_lookup(NULL
, SINGLETON_CACHE
,
1607 data_blob_string_const_null("get_mydnsfullname"),
1609 SMB_ASSERT(tmp
.length
> 0);
1610 return (const char *)tmp
.data
;
1613 /* get my host name */
1614 if (gethostname(my_hostname
, sizeof(my_hostname
)) == -1) {
1615 DEBUG(0,("get_mydnsfullname: gethostname failed\n"));
1619 /* Ensure null termination. */
1620 my_hostname
[sizeof(my_hostname
)-1] = '\0';
1622 ret
= interpret_string_addr_internal(&res
,
1624 AI_ADDRCONFIG
|AI_CANONNAME
);
1626 if (!ret
|| res
== NULL
) {
1627 DEBUG(3,("get_mydnsfullname: getaddrinfo failed for "
1630 gai_strerror(ret
) ));
1635 * Make sure that getaddrinfo() returns the "correct" host name.
1638 if (res
->ai_canonname
== NULL
) {
1639 DEBUG(3,("get_mydnsfullname: failed to get "
1640 "canonical name for %s\n",
1646 /* This copies the data, so we must do a lookup
1647 * afterwards to find the value to return.
1650 memcache_add(NULL
, SINGLETON_CACHE
,
1651 data_blob_string_const_null("get_mydnsfullname"),
1652 data_blob_string_const_null(res
->ai_canonname
));
1654 if (!memcache_lookup(NULL
, SINGLETON_CACHE
,
1655 data_blob_string_const_null("get_mydnsfullname"),
1657 tmp
= data_blob_talloc(talloc_tos(), res
->ai_canonname
,
1658 strlen(res
->ai_canonname
) + 1);
1663 return (const char *)tmp
.data
;
1666 /************************************************************
1668 ************************************************************/
1670 bool is_myname_or_ipaddr(const char *s
)
1672 TALLOC_CTX
*ctx
= talloc_tos();
1674 const char *dnsname
;
1675 char *servername
= NULL
;
1681 /* Santize the string from '\\name' */
1682 name
= talloc_strdup(ctx
, s
);
1687 servername
= strrchr_m(name
, '\\' );
1694 /* Optimize for the common case */
1695 if (strequal(servername
, global_myname())) {
1699 /* Check for an alias */
1700 if (is_myname(servername
)) {
1704 /* Check for loopback */
1705 if (strequal(servername
, "127.0.0.1") ||
1706 strequal(servername
, "::1")) {
1710 if (strequal(servername
, "localhost")) {
1714 /* Maybe it's my dns name */
1715 dnsname
= get_mydnsfullname();
1716 if (dnsname
&& strequal(servername
, dnsname
)) {
1720 /* Handle possible CNAME records - convert to an IP addr. */
1721 if (!is_ipaddress(servername
)) {
1722 /* Use DNS to resolve the name, but only the first address */
1723 struct sockaddr_storage ss
;
1724 if (interpret_string_addr(&ss
, servername
,0)) {
1725 print_sockaddr(name
,
1732 /* Maybe its an IP address? */
1733 if (is_ipaddress(servername
)) {
1734 struct sockaddr_storage ss
;
1735 struct iface_struct
*nics
;
1738 if (!interpret_string_addr(&ss
, servername
, AI_NUMERICHOST
)) {
1742 if (is_zero_addr((struct sockaddr
*)&ss
) ||
1743 is_loopback_addr((struct sockaddr
*)&ss
)) {
1747 nics
= TALLOC_ARRAY(ctx
, struct iface_struct
,
1752 n
= get_interfaces(nics
, MAX_INTERFACES
);
1753 for (i
=0; i
<n
; i
++) {
1754 if (sockaddr_equal((struct sockaddr
*)&nics
[i
].ip
, (struct sockaddr
*)&ss
)) {