2 Unix SMB/CIFS implementation.
4 dcerpc connect functions
6 Copyright (C) Andrew Tridgell 2003
7 Copyright (C) Jelmer Vernooij 2004
8 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2005-2007
9 Copyright (C) Rafal Szczesniak 2005
11 This program is free software; you can redistribute it and/or modify
12 it under the terms of the GNU General Public License as published by
13 the Free Software Foundation; either version 3 of the License, or
14 (at your option) any later version.
16 This program is distributed in the hope that it will be useful,
17 but WITHOUT ANY WARRANTY; without even the implied warranty of
18 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
19 GNU General Public License for more details.
21 You should have received a copy of the GNU General Public License
22 along with this program. If not, see <http://www.gnu.org/licenses/>.
27 #include "libcli/composite/composite.h"
28 #include "lib/events/events.h"
29 #include "librpc/rpc/dcerpc.h"
30 #include "librpc/rpc/dcerpc_proto.h"
31 #include "auth/credentials/credentials.h"
32 #include "param/param.h"
33 #include "libcli/resolve/resolve.h"
34 #include "lib/socket/socket.h"
36 struct sec_conn_state
{
37 struct dcerpc_pipe
*pipe
;
38 struct dcerpc_pipe
*pipe2
;
39 const struct dcerpc_binding
*binding
;
40 struct socket_address
*peer_addr
;
41 const char *localaddress
;
45 static void continue_open_smb(struct composite_context
*ctx
);
46 static void continue_open_tcp(struct composite_context
*ctx
);
47 static void continue_open_pipe(struct composite_context
*ctx
);
48 static void continue_pipe_open(struct composite_context
*c
);
52 Send request to create a secondary dcerpc connection from a primary
55 _PUBLIC_
struct composite_context
* dcerpc_secondary_connection_send(struct dcerpc_pipe
*p
,
56 const struct dcerpc_binding
*b
)
58 struct composite_context
*c
;
59 struct sec_conn_state
*s
;
60 struct composite_context
*pipe_smb_req
;
61 struct composite_context
*pipe_tcp_req
;
62 struct composite_context
*pipe_ncalrpc_req
;
63 const char *target_hostname
;
66 /* composite context allocation and setup */
67 c
= composite_create(p
, p
->conn
->event_ctx
);
68 if (c
== NULL
) return NULL
;
70 s
= talloc_zero(c
, struct sec_conn_state
);
71 if (composite_nomem(s
, c
)) return c
;
77 /* initialise second dcerpc pipe based on primary pipe's event context */
78 s
->pipe2
= dcerpc_pipe_init(c
, s
->pipe
->conn
->event_ctx
);
79 if (composite_nomem(s
->pipe2
, c
)) return c
;
82 s
->pipe2
->conn
->packet_log_dir
= s
->pipe
->conn
->packet_log_dir
;
84 target_hostname
= dcerpc_binding_get_string_option(s
->binding
, "target_hostname");
85 endpoint
= dcerpc_binding_get_string_option(s
->binding
, "endpoint");
86 if (endpoint
== NULL
) {
88 * We may fallback to the endpoint of the given connection
90 endpoint
= dcerpc_binding_get_string_option(s
->pipe
->binding
, "endpoint");
92 if (endpoint
== NULL
) {
93 composite_error(c
, NT_STATUS_INVALID_PARAMETER_MIX
);
97 /* open second dcerpc pipe using the same transport as for primary pipe */
98 switch (s
->pipe
->conn
->transport
.transport
) {
100 pipe_smb_req
= dcerpc_secondary_smb_send(s
->pipe
->conn
,
103 composite_continue(c
, pipe_smb_req
, continue_open_smb
, c
);
107 s
->peer_addr
= dcerpc_socket_peer_addr(s
->pipe
->conn
, s
);
109 composite_error(c
, NT_STATUS_INVALID_PARAMETER
);
113 s
->localaddress
= dcerpc_binding_get_string_option(s
->binding
,
116 pipe_tcp_req
= dcerpc_pipe_open_tcp_send(s
->pipe2
->conn
,
121 resolve_context_init(s
));
122 composite_continue(c
, pipe_tcp_req
, continue_open_tcp
, c
);
126 case NCACN_UNIX_STREAM
:
127 pipe_ncalrpc_req
= dcerpc_pipe_open_unix_stream_send(s
->pipe2
->conn
,
128 dcerpc_unix_socket_path(s
->pipe
->conn
));
129 composite_continue(c
, pipe_ncalrpc_req
, continue_open_pipe
, c
);
133 /* looks like a transport we don't support */
134 composite_error(c
, NT_STATUS_NOT_SUPPORTED
);
142 Stage 2 of secondary_connection: Receive result of pipe open request on smb
144 static void continue_open_smb(struct composite_context
*ctx
)
146 struct composite_context
*c
= talloc_get_type(ctx
->async
.private_data
,
147 struct composite_context
);
149 c
->status
= dcerpc_secondary_smb_recv(ctx
);
150 if (!composite_is_ok(c
)) return;
152 continue_pipe_open(c
);
157 Stage 2 of secondary_connection: Receive result of pipe open request on tcp/ip
159 static void continue_open_tcp(struct composite_context
*ctx
)
161 struct composite_context
*c
= talloc_get_type(ctx
->async
.private_data
,
162 struct composite_context
);
164 c
->status
= dcerpc_pipe_open_tcp_recv(ctx
);
165 if (!composite_is_ok(c
)) return;
167 continue_pipe_open(c
);
172 Stage 2 of secondary_connection: Receive result of pipe open request on ncalrpc
174 static void continue_open_pipe(struct composite_context
*ctx
)
176 struct composite_context
*c
= talloc_get_type(ctx
->async
.private_data
,
177 struct composite_context
);
179 c
->status
= dcerpc_pipe_open_unix_stream_recv(ctx
);
180 if (!composite_is_ok(c
)) return;
182 continue_pipe_open(c
);
187 Stage 3 of secondary_connection: Get binding data and flags from primary pipe
188 and say if we're done ok.
190 static void continue_pipe_open(struct composite_context
*c
)
192 struct sec_conn_state
*s
;
194 s
= talloc_get_type(c
->private_data
, struct sec_conn_state
);
196 s
->pipe2
->conn
->flags
= s
->pipe
->conn
->flags
;
197 s
->pipe2
->binding
= dcerpc_binding_dup(s
->pipe2
, s
->binding
);
198 if (composite_nomem(s
->pipe2
->binding
, c
)) {
207 Receive result of secondary rpc connection request and return
210 _PUBLIC_ NTSTATUS
dcerpc_secondary_connection_recv(struct composite_context
*c
,
211 struct dcerpc_pipe
**p2
)
213 NTSTATUS status
= composite_wait(c
);
214 struct sec_conn_state
*s
;
216 s
= talloc_get_type(c
->private_data
, struct sec_conn_state
);
218 if (NT_STATUS_IS_OK(status
)) {
219 *p2
= talloc_steal(s
->pipe
, s
->pipe2
);
227 Create a secondary dcerpc connection from a primary connection
230 If the primary is a SMB connection then the secondary connection
231 will be on the same SMB connection, but using a new fnum
233 _PUBLIC_ NTSTATUS
dcerpc_secondary_connection(struct dcerpc_pipe
*p
,
234 struct dcerpc_pipe
**p2
,
235 const struct dcerpc_binding
*b
)
237 struct composite_context
*c
;
239 c
= dcerpc_secondary_connection_send(p
, b
);
240 return dcerpc_secondary_connection_recv(c
, p2
);
244 Create a secondary DCERPC connection, then bind (and possibly
245 authenticate) using the supplied credentials.
247 This creates a second connection, to the same host (and on ncacn_np on the same connection) as the first
249 struct sec_auth_conn_state
{
250 struct dcerpc_pipe
*pipe2
;
251 const struct dcerpc_binding
*binding
;
252 const struct ndr_interface_table
*table
;
253 struct cli_credentials
*credentials
;
254 struct composite_context
*ctx
;
255 struct loadparm_context
*lp_ctx
;
258 static void dcerpc_secondary_auth_connection_bind(struct composite_context
*ctx
);
259 static void dcerpc_secondary_auth_connection_continue(struct composite_context
*ctx
);
261 _PUBLIC_
struct composite_context
* dcerpc_secondary_auth_connection_send(struct dcerpc_pipe
*p
,
262 const struct dcerpc_binding
*binding
,
263 const struct ndr_interface_table
*table
,
264 struct cli_credentials
*credentials
,
265 struct loadparm_context
*lp_ctx
)
268 struct composite_context
*c
, *secondary_conn_ctx
;
269 struct sec_auth_conn_state
*s
;
271 /* composite context allocation and setup */
272 c
= composite_create(p
, p
->conn
->event_ctx
);
273 if (c
== NULL
) return NULL
;
275 s
= talloc_zero(c
, struct sec_auth_conn_state
);
276 if (composite_nomem(s
, c
)) return c
;
280 s
->binding
= binding
;
282 s
->credentials
= credentials
;
285 secondary_conn_ctx
= dcerpc_secondary_connection_send(p
, binding
);
287 if (composite_nomem(secondary_conn_ctx
, s
->ctx
)) {
292 composite_continue(s
->ctx
, secondary_conn_ctx
, dcerpc_secondary_auth_connection_bind
,
298 Stage 2 of secondary_auth_connection:
299 Having made the secondary connection, we will need to do an (authenticated) bind
301 static void dcerpc_secondary_auth_connection_bind(struct composite_context
*ctx
)
303 struct composite_context
*secondary_auth_ctx
;
304 struct sec_auth_conn_state
*s
= talloc_get_type(ctx
->async
.private_data
,
305 struct sec_auth_conn_state
);
307 s
->ctx
->status
= dcerpc_secondary_connection_recv(ctx
, &s
->pipe2
);
308 if (!composite_is_ok(s
->ctx
)) return;
310 secondary_auth_ctx
= dcerpc_pipe_auth_send(s
->pipe2
, s
->binding
, s
->table
, s
->credentials
,
312 composite_continue(s
->ctx
, secondary_auth_ctx
, dcerpc_secondary_auth_connection_continue
, s
);
317 Stage 3 of secondary_auth_connection: Receive result of authenticated bind request
319 static void dcerpc_secondary_auth_connection_continue(struct composite_context
*ctx
)
321 struct sec_auth_conn_state
*s
= talloc_get_type(ctx
->async
.private_data
,
322 struct sec_auth_conn_state
);
324 s
->ctx
->status
= dcerpc_pipe_auth_recv(ctx
, s
, &s
->pipe2
);
325 if (!composite_is_ok(s
->ctx
)) return;
327 composite_done(s
->ctx
);
331 Receive an authenticated pipe, created as a secondary connection
333 _PUBLIC_ NTSTATUS
dcerpc_secondary_auth_connection_recv(struct composite_context
*c
,
335 struct dcerpc_pipe
**p
)
337 NTSTATUS status
= composite_wait(c
);
338 struct sec_auth_conn_state
*s
;
340 s
= talloc_get_type(c
->private_data
, struct sec_auth_conn_state
);
342 if (NT_STATUS_IS_OK(status
)) {
343 *p
= talloc_steal(mem_ctx
, s
->pipe2
);