dcerpc.idl: add DCERPC_NCACN_{REQUEST,RESPONSE}_DEFAULT_MAX_SIZE
[samba.git] / librpc / idl / dcerpc.idl
index dc8a24fa922fa821b0f7245e5f925fb81199c882..5e0f9193d08872386ba9fdfc8177c755d00f30cb 100644 (file)
@@ -56,19 +56,49 @@ interface dcerpc
                uint32 alloc_hint;
                uint16 context_id;
                uint16 opnum;
-               [switch_is(ndr->flags & LIBNDR_FLAG_OBJECT_PRESENT)] dcerpc_object object;
+               /*
+                * NDR_DCERPC_REQUEST_OBJECT_PRESENT
+                * is defined differently for ndr_dcerpc.c and py_dcerpc.c
+                */
+               [switch_is(NDR_DCERPC_REQUEST_OBJECT_PRESENT)] dcerpc_object object;
                [flag(NDR_ALIGN8)]    DATA_BLOB _pad;
                [flag(NDR_REMAINING)] DATA_BLOB stub_and_verifier;
        } dcerpc_request;
 
-       const int DCERPC_BIND_REASON_ASYNTAX                 = 1;
-       const int DCERPC_BIND_PROVIDER_REJECT                = 2;
-       const int DECRPC_BIND_PROTOCOL_VERSION_NOT_SUPPORTED = 4;
-       const int DCERPC_BIND_REASON_INVALID_AUTH_TYPE       = 8;
+       typedef [enum16bit] enum {
+               DCERPC_BIND_ACK_RESULT_ACCEPTANCE          = 0,
+               DCERPC_BIND_ACK_RESULT_USER_REJECTION      = 1,
+               DCERPC_BIND_ACK_RESULT_PROVIDER_REJECTION  = 2,
+               DCERPC_BIND_ACK_RESULT_NEGOTIATE_ACK       = 3
+       } dcerpc_bind_ack_result;
+
+       const int DCERPC_BIND_PROVIDER_REJECT =
+               DCERPC_BIND_ACK_RESULT_PROVIDER_REJECTION;
+
+       typedef [enum16bit] enum {
+               DCERPC_BIND_ACK_REASON_NOT_SPECIFIED                   = 0,
+               DCERPC_BIND_ACK_REASON_ABSTRACT_SYNTAX_NOT_SUPPORTED   = 1,
+               DCERPC_BIND_ACK_REASON_TRANSFER_SYNTAXES_NOT_SUPPORTED = 2,
+               DCERPC_BIND_ACK_REASON_LOCAL_LIMIT_EXCEEDED            = 3
+       } dcerpc_bind_ack_reason_values;
+
+       const int DCERPC_BIND_REASON_ASYNTAX =
+               DCERPC_BIND_ACK_REASON_ABSTRACT_SYNTAX_NOT_SUPPORTED;
+
+       typedef [bitmap16bit] bitmap {
+               DCERPC_BIND_TIME_SECURITY_CONTEXT_MULTIPLEXING = 0x0001,
+               DCERPC_BIND_TIME_KEEP_CONNECTION_ON_ORPHAN     = 0x0002
+       } dcerpc_bind_time_features;
+
+       typedef [nodiscriminant] union {
+               [case(DCERPC_BIND_ACK_RESULT_NEGOTIATE_ACK)]
+                       dcerpc_bind_time_features negotiate;
+               [default] dcerpc_bind_ack_reason_values value;
+       } dcerpc_bind_ack_reason;
 
        typedef struct {
-               uint16 result;
-               uint16 reason;
+               dcerpc_bind_ack_result result;
+               [switch_is(result)] dcerpc_bind_ack_reason reason;
                ndr_syntax_id syntax;
        } dcerpc_ack_ctx;
 
@@ -76,7 +106,7 @@ interface dcerpc
                uint16 max_xmit_frag;
                uint16 max_recv_frag;
                uint32 assoc_group_id;
-               [value(strlen(secondary_address)+1)] uint16 secondary_address_size;
+               [value(strlen_m_term_null(secondary_address))] uint16 secondary_address_size;
                [charset(DOS)] uint8 secondary_address[secondary_address_size];
                [flag(NDR_ALIGN4)]    DATA_BLOB _pad1;
                uint8 num_results;
@@ -84,19 +114,30 @@ interface dcerpc
                [flag(NDR_REMAINING)] DATA_BLOB auth_info;
        } dcerpc_bind_ack;
 
-       typedef struct {
-               uint32 num_versions;
-               uint32 versions[num_versions];
-       } dcerpc_bind_nak_versions;
+       typedef [public,enum16bit] enum {
+               DCERPC_BIND_NAK_REASON_NOT_SPECIFIED                  = 0,
+               DCERPC_BIND_NAK_REASON_TEMPORARY_CONGESTION           = 1,
+               DCERPC_BIND_NAK_REASON_LOCAL_LIMIT_EXCEEDED           = 2,
+               DCERPC_BIND_NAK_REASON_PROTOCOL_VERSION_NOT_SUPPORTED = 4,
+               DCERPC_BIND_NAK_REASON_INVALID_AUTH_TYPE              = 8,
+               DCERPC_BIND_NAK_REASON_INVALID_CHECKSUM               = 9
+       } dcerpc_bind_nak_reason;
 
-       typedef [nodiscriminant] union {
-               [case(DECRPC_BIND_PROTOCOL_VERSION_NOT_SUPPORTED)] dcerpc_bind_nak_versions v;
-               [default] ;
-       } dcerpc_bind_nak_versions_ctr;
+       const int DECRPC_BIND_PROTOCOL_VERSION_NOT_SUPPORTED =
+               DCERPC_BIND_NAK_REASON_PROTOCOL_VERSION_NOT_SUPPORTED;
+       const int DCERPC_BIND_REASON_INVALID_AUTH_TYPE =
+               DCERPC_BIND_NAK_REASON_INVALID_AUTH_TYPE;
 
-       typedef struct {
-               uint16 reject_reason;
-               [switch_is(reject_reason)] dcerpc_bind_nak_versions_ctr versions;
+       typedef [public] struct {
+               uint8 rpc_vers;         /* RPC version */
+               uint8 rpc_vers_minor;   /* Minor version */
+       } dcerpc_bind_nak_version;
+
+       typedef [public,nopull] struct {
+               dcerpc_bind_nak_reason reject_reason;
+               uint8 num_versions;
+               dcerpc_bind_nak_version versions[num_versions];
+               [flag(NDR_REMAINING)] DATA_BLOB _pad;
        } dcerpc_bind_nak;
 
        const uint8 DCERPC_RESPONSE_LENGTH = 24;
@@ -156,18 +197,21 @@ interface dcerpc
                DCERPC_NCA_S_FAULT_TX_OPEN_FAILED       = 0x1C000022,
                DCERPC_NCA_S_FAULT_CODESET_CONV_ERROR   = 0x1C000023,
                DCERPC_NCA_S_FAULT_OBJECT_NOT_FOUND     = 0x1C000024,
-               DCERPC_NCA_S_FAULT_NO_CLIENT_STUB       = 0x1C000025
+               DCERPC_NCA_S_FAULT_NO_CLIENT_STUB       = 0x1C000025,
+               DCERPC_FAULT_ACCESS_DENIED              = 0x00000005,
+               DCERPC_FAULT_NO_CALL_ACTIVE             = 0x000006bd,
+               DCERPC_FAULT_CANT_PERFORM               = 0x000006d8,
+               DCERPC_FAULT_OUT_OF_RESOURCES           = 0x000006d9,
+               DCERPC_FAULT_BAD_STUB_DATA              = 0x000006f7,
+               DCERPC_FAULT_SEC_PKG_ERROR              = 0x00000721
        } dcerpc_nca_status;
 
-       const int DCERPC_FAULT_OP_RNG_ERROR       = 0x1c010002;
-       const int DCERPC_FAULT_UNK_IF             = 0x1c010003;
-       const int DCERPC_FAULT_NDR                = 0x000006f7;
-       const int DCERPC_FAULT_INVALID_TAG        = 0x1c000006;
-       const int DCERPC_FAULT_CONTEXT_MISMATCH   = 0x1c00001a;
+       const int DCERPC_FAULT_OP_RNG_ERROR       = DCERPC_NCA_S_OP_RNG_ERROR;
+       const int DCERPC_FAULT_UNK_IF             = DCERPC_NCA_S_UNKNOWN_IF;
+       const int DCERPC_FAULT_NDR                = DCERPC_FAULT_BAD_STUB_DATA;
+       const int DCERPC_FAULT_INVALID_TAG        = DCERPC_NCA_S_FAULT_INVALID_TAG;
+       const int DCERPC_FAULT_CONTEXT_MISMATCH   = DCERPC_NCA_S_FAULT_CONTEXT_MISMATCH;
        const int DCERPC_FAULT_OTHER              = 0x00000001;
-       const int DCERPC_FAULT_ACCESS_DENIED      = 0x00000005;
-       const int DCERPC_FAULT_CANT_PERFORM       = 0x000006d8;
-       const int DCERPC_FAULT_SEC_PKG_ERROR      = 0x00000721;
 
        /* we return this fault when we haven't yet run the test
           to see what fault w2k3 returns in this case */
@@ -218,6 +262,7 @@ interface dcerpc
        } dcerpc_auth;
 
        const uint8 DCERPC_AUTH_TRAILER_LENGTH = 8;
+       const uint8 DCERPC_AUTH_PAD_ALIGNMENT = 16;
 
        typedef [public] struct {
                [value(0)]            uint32    _pad;
@@ -467,21 +512,47 @@ interface dcerpc
        } dcerpc_payload;
 
        /* pfc_flags values */
-       const uint8 DCERPC_PFC_FLAG_FIRST               = 0x01; /* First fragment */
-       const uint8 DCERPC_PFC_FLAG_LAST                = 0x02; /* Last fragment */
-       const uint8 DCERPC_PFC_FLAG_PENDING_CANCEL      = 0x04; /* Cancel was pending at sender */
-       const uint8 DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN = DCERPC_PFC_FLAG_PENDING_CANCEL; /* depends on the pdu type */
-       const uint8 DCERPC_PFC_FLAG_CONC_MPX            = 0x10; /* supports concurrent multiplexing of a single connection. */
-       const uint8 DCERPC_PFC_FLAG_DID_NOT_EXECUTE     = 0x20; /* on a fault it means the server hasn't done anything */
-       const uint8 DCERPC_PFC_FLAG_MAYBE               = 0x40; /* `maybe' call semantics requested */
-       const uint8 DCERPC_PFC_FLAG_OBJECT_UUID         = 0x80; /* on valid guid is in the optional object field */
+       typedef [bitmap8bit] bitmap {
+               DCERPC_PFC_FLAG_FIRST           = 0x01, /* First fragment */
+               DCERPC_PFC_FLAG_LAST            = 0x02, /* Last fragment */
+               DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING = 0x04, /* depends on the pdu type */
+               DCERPC_PFC_FLAG_CONC_MPX        = 0x10, /* supports concurrent multiplexing of a single connection. */
+               DCERPC_PFC_FLAG_DID_NOT_EXECUTE = 0x20, /* on a fault it means the server hasn't done anything */
+               DCERPC_PFC_FLAG_MAYBE           = 0x40, /* `maybe' call semantics requested */
+               DCERPC_PFC_FLAG_OBJECT_UUID     = 0x80 /* on valid guid is in the optional object field */
+       } dcerpc_pfc_flags;
+
+       /* Cancel was pending at sender */
+       const int DCERPC_PFC_FLAG_PENDING_CANCEL =
+               DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING;
+       const int DCERPC_PFC_FLAG_SUPPORT_HEADER_SIGN =
+               DCERPC_PFC_FLAG_PENDING_CANCEL_OR_HDR_SIGNING;
 
        /* these offsets are needed by the signing code */
        const uint8 DCERPC_PFC_OFFSET      =  3;
        const uint8 DCERPC_DREP_OFFSET     =  4;
        const uint8 DCERPC_FRAG_LEN_OFFSET =  8;
+       const uint32 DCERPC_FRAG_MAX_SIZE  = 5840;
        const uint8 DCERPC_AUTH_LEN_OFFSET = 10;
        const uint8 DCERPC_NCACN_PAYLOAD_OFFSET = 16;
+       const uint32 DCERPC_NCACN_PAYLOAD_MAX_SIZE = 0x400000; /* 4 MByte */
+
+       /*
+        * See [MS-RPCE] 3.3.3.5.4 Maximum Server Input Data Size
+        * 4 MByte is the default limit of reassembled request payload
+        */
+       const uint32 DCERPC_NCACN_REQUEST_DEFAULT_MAX_SIZE = 0x400000;
+
+       /*
+        * See [MS-RPCE] 3.3.2.5.2 Handling Responses
+        *
+        * Indicates that Windows accepts up to 0x7FFFFFFF ~2 GByte
+        *
+        * talloc has a limit of 256 MByte, so we need to use something smaller.
+        *
+        * For now we try our luck with 240 MByte.
+        */
+       const uint32 DCERPC_NCACN_RESPONSE_DEFAULT_MAX_SIZE = 0xf000000; /* 240 MByte */
 
        /* little-endian flag */
        const uint8 DCERPC_DREP_LE  = 0x10;
@@ -490,7 +561,7 @@ interface dcerpc
                uint8 rpc_vers;         /* RPC version */
                uint8 rpc_vers_minor;   /* Minor version */
                dcerpc_pkt_type ptype;  /* Packet type */
-               uint8 pfc_flags;        /* Fragmentation flags */
+               dcerpc_pfc_flags pfc_flags; /* Fragmentation flags */
                uint8 drep[4];          /* NDR data representation */
                uint16 frag_length;     /* Total length of fragment */
                uint16 auth_length;     /* authenticator length */