2 Unix SMB/CIFS implementation.
3 Printing routines that bridge to spoolss
4 Copyright (C) Simo Sorce 2010
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "system/filesys.h"
23 #include "rpc_client/rpc_client.h"
24 #include "../librpc/gen_ndr/ndr_spoolss_c.h"
25 #include "rpc_server/rpc_ncacn_np.h"
26 #include "smbd/globals.h"
27 #include "../libcli/security/security.h"
29 struct print_file_data {
34 struct rpc_pipe_client *spoolss_pipe;
35 struct policy_handle handle;
40 uint16_t print_spool_rap_jobid(struct print_file_data *print_file)
42 if (print_file == NULL) {
46 return print_file->rap_jobid;
49 void print_spool_terminate(struct connection_struct *conn,
50 struct print_file_data *print_file);
52 /***************************************************************************
53 * Open a Document over spoolss
54 ***************************************************************************/
56 #define DOCNAME_DEFAULT "Remote Downlevel Document"
58 NTSTATUS print_spool_open(files_struct *fsp,
60 uint64_t current_vuid)
64 struct print_file_data *pf;
65 struct dcerpc_binding_handle *b = NULL;
66 struct spoolss_DevmodeContainer devmode_ctr;
67 struct spoolss_DocumentInfoCtr info_ctr;
68 struct spoolss_DocumentInfo1 *info1;
73 tmp_ctx = talloc_new(fsp);
75 return NT_STATUS_NO_MEMORY;
78 pf = talloc_zero(fsp, struct print_file_data);
80 status = NT_STATUS_NO_MEMORY;
83 pf->svcname = lp_servicename(pf, SNUM(fsp->conn));
85 /* the document name is derived from the file name.
86 * "Remote Downlevel Document" is added in front to
87 * mimic what windows does in this case */
88 pf->docname = talloc_strdup(pf, DOCNAME_DEFAULT);
90 status = NT_STATUS_NO_MEMORY;
94 const char *p = strrchr(fname, '/');
98 pf->docname = talloc_asprintf_append(pf->docname, " %s", p);
100 status = NT_STATUS_NO_MEMORY;
106 * Ok, now we have to open an actual file.
107 * Here is the reason:
108 * We want to write the spool job to this file in
109 * smbd for scalability reason (and also because
110 * apparently window printer drivers can seek when
111 * spooling to a file).
112 * So we first create a file, and then we pass it
113 * to spoolss in output_file so it can monitor and
114 * take over once we call EndDocPrinter().
115 * Of course we will not start writing until
116 * StartDocPrinter() actually gives the ok.
117 * smbd spooler files do not include a print jobid
118 * path component, as the jobid is only known after
119 * calling StartDocPrinter().
122 pf->filename = talloc_asprintf(pf, "%s/%sXXXXXX",
123 lp_path(talloc_tos(),
126 pf->filename = talloc_asprintf(pf, "%s.raw", pf->docname);
128 status = NT_STATUS_NO_MEMORY;
132 mask = umask(S_IRWXO | S_IRWXG);
133 fd = -1;// mkstemp(pf->filename);
136 // if (errno == EACCES) {
137 // /* Common setup error, force a report. */
138 // DEBUG(0, ("Insufficient permissions "
139 // "to open spool file %s.\n",
142 // /* Normal case, report at level 3 and above. */
143 // DEBUG(3, ("can't open spool file %s,\n",
145 // DEBUGADD(3, ("errno = %d (%s).\n",
146 // errno, strerror(errno)));
148 // status = map_nt_error_from_unix(errno);
152 /* now open a document over spoolss so that it does
153 * all printer verification, and eventually assigns
156 status = rpc_pipe_open_interface(fsp->conn,
158 fsp->conn->session_info,
159 fsp->conn->sconn->remote_address,
160 fsp->conn->sconn->local_address,
161 fsp->conn->sconn->msg_ctx,
163 if (!NT_STATUS_IS_OK(status)) {
166 b = pf->spoolss_pipe->binding_handle;
168 ZERO_STRUCT(devmode_ctr);
170 status = dcerpc_spoolss_OpenPrinter(b, pf, pf->svcname,
174 if (!NT_STATUS_IS_OK(status)) {
177 if (!W_ERROR_IS_OK(werr)) {
178 status = werror_to_ntstatus(werr);
182 info1 = talloc(tmp_ctx, struct spoolss_DocumentInfo1);
184 status = NT_STATUS_NO_MEMORY;
187 info1->document_name = pf->docname;
188 info1->output_file = pf->filename;
189 info1->datatype = "RAW";
192 info_ctr.info.info1 = info1;
194 status = dcerpc_spoolss_StartDocPrinter(b, tmp_ctx,
199 if (!NT_STATUS_IS_OK(status)) {
202 if (!W_ERROR_IS_OK(werr)) {
203 status = werror_to_ntstatus(werr);
207 /* Convert to RAP id. */
208 pf->rap_jobid = pjobid_to_rap(pf->svcname, pf->jobid);
209 if (pf->rap_jobid == 0) {
210 /* No errno around here */
211 status = NT_STATUS_ACCESS_DENIED;
215 /* setup a full fsp */
216 fsp->fsp_name = synthetic_smb_fname(fsp, pf->filename, NULL, NULL, 0);
217 if (fsp->fsp_name == NULL) {
218 status = NT_STATUS_NO_MEMORY;
222 //if (sys_fstat(fd, &fsp->fsp_name->st, false) != 0) {
223 // status = map_nt_error_from_unix(errno);
227 //fsp->file_id = vfs_file_id_from_sbuf(fsp->conn, &fsp->fsp_name->st);
230 fsp->vuid = current_vuid;
231 fsp->can_lock = false;
232 fsp->can_read = false;
233 fsp->access_mask = FILE_GENERIC_WRITE;
234 fsp->can_write = true;
235 fsp->modified = false;
236 fsp->oplock_type = NO_OPLOCK;
237 fsp->sent_oplock_break = NO_BREAK_SENT;
238 fsp->is_directory = false;
240 fsp->print_file = pf;
242 status = NT_STATUS_OK;
244 if (!NT_STATUS_IS_OK(status)) {
247 if (fsp->print_file) {
248 unlink(fsp->print_file->filename);
251 /* We need to delete the job from spoolss too */
252 if (pf && pf->jobid) {
253 print_spool_terminate(fsp->conn, pf);
257 talloc_free(tmp_ctx);
261 int print_spool_write(files_struct *fsp,
262 const char *data, uint32_t size,
263 off_t offset, uint32_t *written)
265 struct print_file_data *pf = fsp->print_file;
267 TALLOC_CTX *tmp_ctx = talloc_tos();
268 struct dcerpc_binding_handle *b = NULL;
282 if (pf->spoolss_pipe == NULL) {
285 b = pf->spoolss_pipe->binding_handle;
287 /* When print files go beyond 4GB, the 32-bit offset sent in
288 * old SMBwrite calls is relative to the current 4GB chunk
290 * Discovered by Sebastian Kloska <oncaphillis@snafu.de>.
292 if (offset < 0xffffffff00000000LL) {
293 offset = (pf->offset & 0xffffffff00000000LL) + offset;
296 if ((uint64_t)offset != pf->offset) {
297 // TODO: check what windows does, with non sequential
303 remaining = UINT64_MAX - pf->offset;
304 if (size > remaining) {
309 buffer = data_blob_const(data, size);
311 status = dcerpc_spoolss_WritePrinter(b, tmp_ctx,
317 if (!NT_STATUS_IS_OK(status)) {
321 if (!W_ERROR_IS_OK(werr)) {
322 //status = werror_to_ntstatus(werr);
327 if (*written > size) {
328 //status = NT_STATUS_INVALID_PARAMETER;
333 pf->offset += *written;
336 print_spool_terminate(fsp->conn, fsp->print_file);
338 /* first of all stat file to find out if it is still there.
339 * spoolss may have deleted it to signal someone has killed
340 * the job through it's interface */
342 if (sys_fstat(fsp->fh->fd, &st, false) != 0) {
344 DEBUG(3, ("printfile_offset: sys_fstat failed on %s (%s)\n",
345 fsp_str_dbg(fsp), strerror(ret)));
349 /* check if the file is unlinked, this will signal spoolss has
350 * killed it, just return an error and close the file */
351 if (st.st_ex_nlink == 0) {
356 /* When print files go beyond 4GB, the 32-bit offset sent in
357 * old SMBwrite calls is relative to the current 4GB chunk
359 * Discovered by Sebastian Kloska <oncaphillis@snafu.de>.
361 if (offset < 0xffffffff00000000LL) {
362 offset = (st.st_ex_size & 0xffffffff00000000LL) + offset;
365 n = write_data_at_offset(fsp->fh->fd, data, size, offset);
368 print_spool_terminate(fsp->conn, fsp->print_file);
377 void print_spool_end(files_struct *fsp, enum file_close_type close_type)
379 struct print_file_data *pf = fsp->print_file;
382 struct dcerpc_binding_handle *b = NULL;
384 if (fsp->fh->private_options &
385 NTCREATEX_OPTIONS_PRIVATE_DELETE_ON_CLOSE) {
389 * Job was requested to be cancelled by setting
390 * delete on close so truncate the job file.
391 * print_job_end() which is called from
392 * _spoolss_EndDocPrinter() will take
393 * care of deleting it for us.
395 ret = ftruncate(fsp->fh->fd, 0);
397 DBG_ERR("ftruncate failed: %s\n", strerror(errno));
401 if (pf->spoolss_pipe == NULL) {
404 b = pf->spoolss_pipe->binding_handle;
406 switch (close_type) {
409 /* this also automatically calls spoolss_EndDocPrinter */
410 status = dcerpc_spoolss_ClosePrinter(b, fsp->print_file,
411 &fsp->print_file->handle,
413 if (!NT_STATUS_IS_OK(status) ||
414 !NT_STATUS_IS_OK(status = werror_to_ntstatus(werr))) {
415 DEBUG(3, ("Failed to close printer %s [%s]\n",
416 fsp->print_file->svcname, nt_errstr(status)));
420 print_spool_terminate(fsp->conn, fsp->print_file);
423 TALLOC_FREE(fsp->print_file);
427 void print_spool_terminate(struct connection_struct *conn,
428 struct print_file_data *print_file)
432 struct dcerpc_binding_handle *b = NULL;
434 rap_jobid_delete(print_file->svcname, print_file->jobid);
436 //status = rpc_pipe_open_interface(conn,
437 // &ndr_table_spoolss,
438 // conn->session_info,
439 // conn->sconn->remote_address,
440 // conn->sconn->local_address,
441 // conn->sconn->msg_ctx,
442 // &conn->spoolss_pipe);
443 //if (!NT_STATUS_IS_OK(status)) {
444 // DEBUG(0, ("print_spool_terminate: "
445 // "Failed to get spoolss pipe [%s]\n",
446 // nt_errstr(status)));
449 if (print_file->spoolss_pipe == NULL) {
452 b = print_file->spoolss_pipe->binding_handle;
454 status = dcerpc_spoolss_AbortPrinter(b, print_file,
457 if (!NT_STATUS_IS_OK(status) ||
458 !NT_STATUS_IS_OK(status = werror_to_ntstatus(werr))) {
459 DEBUG(3, ("Failed to abort printer job %d [%s]\n",
460 print_file->jobid, nt_errstr(status)));
463 status = dcerpc_spoolss_ClosePrinter(b, print_file,
466 if (!NT_STATUS_IS_OK(status) ||
467 !NT_STATUS_IS_OK(status = werror_to_ntstatus(werr))) {
468 DEBUG(3, ("Failed to close printer %s [%s]\n",
469 print_file->svcname, nt_errstr(status)));