2 Unix SMB/CIFS implementation.
4 SMB2 client session handling
6 Copyright (C) Andrew Tridgell 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "system/network.h"
25 #include "lib/util/tevent_ntstatus.h"
26 #include "libcli/raw/libcliraw.h"
27 #include "libcli/smb2/smb2.h"
28 #include "libcli/smb2/smb2_calls.h"
29 #include "auth/gensec/gensec.h"
30 #include "../libcli/smb/smbXcli_base.h"
31 #include "../source3/libsmb/smb2cli.h"
34 initialise a smb2_session structure
36 struct smb2_session
*smb2_session_init(struct smb2_transport
*transport
,
37 struct gensec_settings
*settings
,
38 TALLOC_CTX
*parent_ctx
, bool primary
)
40 struct smb2_session
*session
;
43 session
= talloc_zero(parent_ctx
, struct smb2_session
);
48 session
->transport
= talloc_steal(session
, transport
);
50 session
->transport
= talloc_reference(session
, transport
);
53 session
->pid
= getpid();
55 session
->smbXcli
= smbXcli_session_create(session
, transport
->conn
);
56 if (session
->smbXcli
== NULL
) {
61 /* prepare a gensec context for later use */
62 status
= gensec_client_start(session
, &session
->gensec
,
64 if (!NT_STATUS_IS_OK(status
)) {
69 gensec_want_feature(session
->gensec
, GENSEC_FEATURE_SESSION_KEY
);
74 struct smb2_session_setup_spnego_state
{
75 struct tevent_context
*ev
;
76 struct smb2_session
*session
;
77 struct cli_credentials
*credentials
;
78 uint64_t previous_session_id
;
80 NTSTATUS gensec_status
;
82 DATA_BLOB out_secblob
;
85 static void smb2_session_setup_spnego_done(struct tevent_req
*subreq
);
88 a composite function that does a full SPNEGO session setup
90 struct tevent_req
*smb2_session_setup_spnego_send(
92 struct tevent_context
*ev
,
93 struct smb2_session
*session
,
94 struct cli_credentials
*credentials
,
95 uint64_t previous_session_id
)
97 struct tevent_req
*req
;
98 struct smb2_session_setup_spnego_state
*state
;
99 uint64_t current_session_id
;
100 const char *chosen_oid
;
101 struct tevent_req
*subreq
;
103 const DATA_BLOB
*server_gss_blob
;
104 DATA_BLOB negprot_secblob
= data_blob_null
;
105 uint32_t timeout_msec
;
107 timeout_msec
= session
->transport
->options
.request_timeout
* 1000;
109 req
= tevent_req_create(mem_ctx
, &state
,
110 struct smb2_session_setup_spnego_state
);
115 state
->session
= session
;
116 state
->credentials
= credentials
;
117 state
->previous_session_id
= previous_session_id
;
119 current_session_id
= smb2cli_session_current_id(state
->session
->smbXcli
);
120 if (current_session_id
!= 0) {
121 state
->reauth
= true;
124 server_gss_blob
= smbXcli_conn_server_gss_blob(session
->transport
->conn
);
125 if (server_gss_blob
) {
126 negprot_secblob
= *server_gss_blob
;
129 status
= gensec_set_credentials(session
->gensec
, credentials
);
130 if (tevent_req_nterror(req
, status
)) {
131 return tevent_req_post(req
, ev
);
134 status
= gensec_set_target_hostname(session
->gensec
,
135 smbXcli_conn_remote_name(session
->transport
->conn
));
136 if (tevent_req_nterror(req
, status
)) {
137 return tevent_req_post(req
, ev
);
140 status
= gensec_set_target_service(session
->gensec
, "cifs");
141 if (tevent_req_nterror(req
, status
)) {
142 return tevent_req_post(req
, ev
);
145 if (negprot_secblob
.length
> 0) {
146 chosen_oid
= GENSEC_OID_SPNEGO
;
148 chosen_oid
= GENSEC_OID_NTLMSSP
;
151 status
= gensec_start_mech_by_oid(session
->gensec
, chosen_oid
);
152 if (tevent_req_nterror(req
, status
)) {
153 return tevent_req_post(req
, ev
);
156 status
= gensec_update(session
->gensec
, state
,
160 if (!NT_STATUS_EQUAL(status
, NT_STATUS_MORE_PROCESSING_REQUIRED
)) {
161 tevent_req_nterror(req
, status
);
162 return tevent_req_post(req
, ev
);
164 state
->gensec_status
= status
;
166 subreq
= smb2cli_session_setup_send(state
, state
->ev
,
167 session
->transport
->conn
,
171 0, /* in_capabilities */
173 state
->previous_session_id
,
175 if (tevent_req_nomem(subreq
, req
)) {
176 return tevent_req_post(req
, ev
);
178 tevent_req_set_callback(subreq
, smb2_session_setup_spnego_done
, req
);
184 handle continuations of the spnego session setup
186 static void smb2_session_setup_spnego_done(struct tevent_req
*subreq
)
188 struct tevent_req
*req
=
189 tevent_req_callback_data(subreq
,
191 struct smb2_session_setup_spnego_state
*state
=
193 struct smb2_session_setup_spnego_state
);
194 struct smb2_session
*session
= state
->session
;
195 NTSTATUS peer_status
;
197 struct iovec
*recv_iov
;
198 uint32_t timeout_msec
;
200 timeout_msec
= session
->transport
->options
.request_timeout
* 1000;
202 status
= smb2cli_session_setup_recv(subreq
, state
,
204 &state
->out_secblob
);
205 if (!NT_STATUS_IS_OK(status
) &&
206 !NT_STATUS_EQUAL(status
, NT_STATUS_MORE_PROCESSING_REQUIRED
)) {
207 tevent_req_nterror(req
, status
);
210 peer_status
= status
;
212 if (NT_STATUS_EQUAL(state
->gensec_status
, NT_STATUS_MORE_PROCESSING_REQUIRED
)) {
213 status
= gensec_update(session
->gensec
, state
,
217 state
->gensec_status
= status
;
220 if (!NT_STATUS_IS_OK(status
) &&
221 !NT_STATUS_EQUAL(status
, NT_STATUS_MORE_PROCESSING_REQUIRED
)) {
222 tevent_req_nterror(req
, status
);
226 if (NT_STATUS_IS_OK(peer_status
) && NT_STATUS_IS_OK(state
->gensec_status
)) {
227 DATA_BLOB session_key
;
230 tevent_req_done(req
);
234 status
= gensec_session_key(session
->gensec
, state
,
236 if (tevent_req_nterror(req
, status
)) {
240 status
= smb2cli_session_set_session_key(session
->smbXcli
,
243 if (tevent_req_nterror(req
, status
)) {
247 tevent_req_done(req
);
251 subreq
= smb2cli_session_setup_send(state
, state
->ev
,
252 session
->transport
->conn
,
256 0, /* in_capabilities */
258 state
->previous_session_id
,
260 if (tevent_req_nomem(subreq
, req
)) {
263 tevent_req_set_callback(subreq
, smb2_session_setup_spnego_done
, req
);
267 receive a composite session setup reply
269 NTSTATUS
smb2_session_setup_spnego_recv(struct tevent_req
*req
)
271 return tevent_req_simple_recv_ntstatus(req
);
275 sync version of smb2_session_setup_spnego
277 NTSTATUS
smb2_session_setup_spnego(struct smb2_session
*session
,
278 struct cli_credentials
*credentials
,
279 uint64_t previous_session_id
)
281 struct tevent_req
*subreq
;
284 TALLOC_CTX
*frame
= talloc_stackframe();
285 struct tevent_context
*ev
= session
->transport
->ev
;
288 return NT_STATUS_NO_MEMORY
;
291 subreq
= smb2_session_setup_spnego_send(frame
, ev
,
292 session
, credentials
,
293 previous_session_id
);
294 if (subreq
== NULL
) {
296 return NT_STATUS_NO_MEMORY
;
299 ok
= tevent_req_poll(subreq
, ev
);
301 status
= map_nt_error_from_unix_common(errno
);
306 status
= smb2_session_setup_spnego_recv(subreq
);
308 if (!NT_STATUS_IS_OK(status
)) {