source4/smb_server/session.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Password and authentication handling
   4    Copyright (C) Andrew Tridgell 1992-2005
   5    Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005
   6    Copyright (C) Stefan Metzmacher 2005-2006
   7
   8    This program is free software; you can redistribute it and/or modify
   9    it under the terms of the GNU General Public License as published by
  10    the Free Software Foundation; either version 3 of the License, or
  11    (at your option) any later version.
  12
  13    This program is distributed in the hope that it will be useful,
  14    but WITHOUT ANY WARRANTY; without even the implied warranty of
  15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  16    GNU General Public License for more details.
  17
  18    You should have received a copy of the GNU General Public License
  19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  20 */
  21
  22 #include "includes.h"
  23 #include "smb_server/smb_server.h"
  24
  25
  26 /*
  27  * init the sessions structures
  28  */
  29 NTSTATUS smbsrv_init_sessions(struct smbsrv_connection *smb_conn, uint64_t limit)
  30 {
  31         /*
  32          * the idr_* functions take 'int' as limit,
  33          * and only work with a max limit 0x00FFFFFF
  34          */
  35         limit &= 0x00FFFFFF;
  36
  37         smb_conn->sessions.idtree_vuid  = idr_init(smb_conn);
  38         NT_STATUS_HAVE_NO_MEMORY(smb_conn->sessions.idtree_vuid);
  39         smb_conn->sessions.idtree_limit = limit;
  40         smb_conn->sessions.list         = NULL;
  41
  42         return NT_STATUS_OK;
  43 }
  44
  45 /*
  46  * Find the session structure assoicated with a VUID
  47  * (not one from an in-progress session setup)
  48  */
  49 struct smbsrv_session *smbsrv_session_find(struct smbsrv_connection *smb_conn,
  50                                            uint64_t vuid, struct timeval request_time)
  51 {
  52         void *p;
  53         struct smbsrv_session *sess;
  54
  55         if (vuid == 0) return NULL;
  56
  57         if (vuid > smb_conn->sessions.idtree_limit) return NULL;
  58
  59         p = idr_find(smb_conn->sessions.idtree_vuid, vuid);
  60         if (!p) return NULL;
  61
  62         /* only return a finished session */
  63         sess = talloc_get_type(p, struct smbsrv_session);
  64         if (sess && sess->session_info) {
  65                 sess->statistics.last_request_time = request_time;
  66                 return sess;
  67         }
  68
  69         return NULL;
  70 }
  71
  72 /*
  73  * Find the session structure assoicated with a VUID
  74  * (assoicated with an in-progress session setup)
  75  */
  76 struct smbsrv_session *smbsrv_session_find_sesssetup(struct smbsrv_connection *smb_conn, uint64_t vuid)
  77 {
  78         void *p;
  79         struct smbsrv_session *sess;
  80
  81         if (vuid == 0) return NULL;
  82
  83         if (vuid > smb_conn->sessions.idtree_limit) return NULL;
  84
  85         p = idr_find(smb_conn->sessions.idtree_vuid, vuid);
  86         if (!p) return NULL;
  87
  88         /* only return an unfinished session */
  89         sess = talloc_get_type(p, struct smbsrv_session);
  90         if (sess && !sess->session_info) {
  91                 return sess;
  92         }
  93         return NULL;
  94 }
  95
  96 /*
  97  * the session will be marked as valid for usage
  98  * by attaching a auth_session_info to the session.
  99  *
 100  * session_info will be talloc_stealed
 101  */
 102 NTSTATUS smbsrv_session_sesssetup_finished(struct smbsrv_session *sess,
 103                                            struct auth_session_info *session_info)
 104 {
 105         /* this check is to catch programmer errors */
 106         if (!session_info) {
 107                 talloc_free(sess);
 108                 return NT_STATUS_ACCESS_DENIED;
 109         }
 110
 111         /* mark the session as successful authenticated */
 112         sess->session_info = talloc_steal(sess, session_info);
 113
 114         /* now fill in some statistics */
 115         sess->statistics.auth_time = timeval_current();
 116
 117         return NT_STATUS_OK;
 118 }
 119
 120 /****************************************************************************
 121 destroy a session structure
 122 ****************************************************************************/
 123 static int smbsrv_session_destructor(struct smbsrv_session *sess)
 124 {
 125         struct smbsrv_connection *smb_conn = sess->smb_conn;
 126
 127         idr_remove(smb_conn->sessions.idtree_vuid, sess->vuid);
 128         DLIST_REMOVE(smb_conn->sessions.list, sess);
 129         return 0;
 130 }
 131
 132 /*
 133  * allocate a new session structure with a VUID.
 134  * gensec_ctx is optional, but talloc_steal'ed when present
 135  */
 136 struct smbsrv_session *smbsrv_session_new(struct smbsrv_connection *smb_conn,
 137                                           TALLOC_CTX *mem_ctx,
 138                                           struct gensec_security *gensec_ctx)
 139 {
 140         struct smbsrv_session *sess = NULL;
 141         int i;
 142
 143         /* Ensure no vuid gets registered in share level security. */
 144         if (smb_conn->config.security == SEC_SHARE) return NULL;
 145
 146         sess = talloc_zero(mem_ctx, struct smbsrv_session);
 147         if (!sess) return NULL;
 148         sess->smb_conn = smb_conn;
 149
 150         i = idr_get_new_random(smb_conn->sessions.idtree_vuid, sess, smb_conn->sessions.idtree_limit);
 151         if (i == -1) {
 152                 DEBUG(1,("ERROR! Out of connection structures\n"));
 153                 talloc_free(sess);
 154                 return NULL;
 155         }
 156         sess->vuid = i;
 157
 158         /* use this to keep tabs on all our info from the authentication */
 159         sess->gensec_ctx = talloc_steal(sess, gensec_ctx);
 160
 161         DLIST_ADD(smb_conn->sessions.list, sess);
 162         talloc_set_destructor(sess, smbsrv_session_destructor);
 163
 164         /* now fill in some statistics */
 165         sess->statistics.connect_time = timeval_current();
 166
 167         return sess;
 168 }