2 Unix SMB/CIFS implementation.
3 SMB parameters and setup, plus a whole lot more.
5 Copyright (C) Andrew Tridgell 1992-2000
6 Copyright (C) John H Terpstra 1996-2002
7 Copyright (C) Luke Kenneth Casson Leighton 1996-2000
8 Copyright (C) Paul Ashton 1998-2000
9 Copyright (C) Simo Sorce 2001-2002
10 Copyright (C) Martin Pool 2002
12 This program is free software; you can redistribute it and/or modify
13 it under the terms of the GNU General Public License as published by
14 the Free Software Foundation; either version 2 of the License, or
15 (at your option) any later version.
17 This program is distributed in the hope that it will be useful,
18 but WITHOUT ANY WARRANTY; without even the implied warranty of
19 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
20 GNU General Public License for more details.
22 You should have received a copy of the GNU General Public License
23 along with this program; if not, write to the Free Software
24 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
30 /* logged when starting the various Samba daemons */
31 #define COPYRIGHT_STARTUP_MESSAGE "Copyright Andrew Tridgell and the Samba Team 1992-2006"
34 #if defined(LARGE_SMB_OFF_T)
35 #define BUFFER_SIZE (128*1024)
36 #else /* no large readwrite possible */
37 #define BUFFER_SIZE (0xFFFF)
40 #define SAFETY_MARGIN 1024
41 #define LARGE_WRITEX_HDR_SIZE 65
44 #define DGRAM_PORT 138
47 #define SMB_PORTS "445 139"
49 #define Undefined (-1)
57 #ifndef DEF_CREATE_MASK
58 #define DEF_CREATE_MASK (0755)
61 /* string manipulation flags - see clistr.c and srvstr.c */
62 #define STR_TERMINATE 1
66 #define STR_NOALIGN 16
67 #define STR_TERMINATE_ASCII 128
69 /* how long to wait for secondary SMB packets (milli-seconds) */
70 #define SMB_SECONDARY_WAIT (60*1000)
75 /* this defines the error codes that receive_smb can put in smb_read_error */
76 #define READ_TIMEOUT 1
79 #define WRITE_ERROR 4 /* This error code can go into the client smb_rw_error. */
80 #define READ_BAD_SIG 5
81 #define DO_NOT_DO_TDIS 6 /* cli_close_connection() check for this when smbfs wants to keep tree connected */
83 #define DIR_STRUCT_SIZE 43
85 /* these define the attribute byte as seen by DOS */
86 #define aRONLY (1L<<0) /* 0x01 */
87 #define aHIDDEN (1L<<1) /* 0x02 */
88 #define aSYSTEM (1L<<2) /* 0x04 */
89 #define aVOLID (1L<<3) /* 0x08 */
90 #define aDIR (1L<<4) /* 0x10 */
91 #define aARCH (1L<<5) /* 0x20 */
102 #define DOS_OPEN_RDONLY 0
103 #define DOS_OPEN_WRONLY 1
104 #define DOS_OPEN_RDWR 2
105 #define DOS_OPEN_EXEC 3
106 #define DOS_OPEN_FCB 0xF
108 /* define shifts and masks for share and open modes. */
109 #define OPENX_MODE_MASK 0xF
110 #define DENY_MODE_SHIFT 4
111 #define DENY_MODE_MASK 0x7
112 #define GET_OPENX_MODE(x) ((x) & OPENX_MODE_MASK)
113 #define SET_OPENX_MODE(x) ((x) & OPENX_MODE_MASK)
114 #define GET_DENY_MODE(x) (((x)>>DENY_MODE_SHIFT) & DENY_MODE_MASK)
115 #define SET_DENY_MODE(x) (((x) & DENY_MODE_MASK) <<DENY_MODE_SHIFT)
117 /* Sync on open file (not sure if used anymore... ?) */
118 #define FILE_SYNC_OPENMODE (1<<14)
119 #define GET_FILE_SYNC_OPENMODE(x) (((x) & FILE_SYNC_OPENMODE) ? True : False)
121 /* open disposition values */
122 #define OPENX_FILE_EXISTS_FAIL 0
123 #define OPENX_FILE_EXISTS_OPEN 1
124 #define OPENX_FILE_EXISTS_TRUNCATE 2
126 /* mask for open disposition. */
127 #define OPENX_FILE_OPEN_MASK 0x3
129 #define GET_FILE_OPENX_DISPOSITION(x) ((x) & FILE_OPEN_MASK)
130 #define SET_FILE_OPENX_DISPOSITION(x) ((x) & FILE_OPEN_MASK)
132 /* The above can be OR'ed with... */
133 #define OPENX_FILE_CREATE_IF_NOT_EXIST 0x10
134 #define OPENX_FILE_FAIL_IF_NOT_EXIST 0
137 #define STYPE_DISKTREE 0 /* Disk drive */
138 #define STYPE_PRINTQ 1 /* Spooler queue */
139 #define STYPE_DEVICE 2 /* Serial device */
140 #define STYPE_IPC 3 /* Interprocess communication (IPC) */
141 #define STYPE_HIDDEN 0x80000000 /* share is a hidden one (ends with $) */
145 typedef union unid_t {
151 * SMB UCS2 (16-bit unicode) internal type.
152 * smb_ucs2_t is *always* in little endian format.
155 typedef uint16 smb_ucs2_t;
157 /* ucs2 string types. */
158 typedef smb_ucs2_t wpstring[PSTRING_LEN];
159 typedef smb_ucs2_t wfstring[FSTRING_LEN];
161 #ifdef WORDS_BIGENDIAN
167 /* turn a 7 bit character into a ucs2 character */
168 #define UCS2_CHAR(c) ((c) << UCS2_SHIFT)
170 /* return an ascii version of a ucs2 character */
171 #define UCS2_TO_CHAR(c) (((c) >> UCS2_SHIFT) & 0xff)
173 /* Copy into a smb_ucs2_t from a possibly unaligned buffer. Return the copied smb_ucs2_t */
174 #define COPY_UCS2_CHAR(dest,src) (((unsigned char *)(dest))[0] = ((unsigned char *)(src))[0],\
175 ((unsigned char *)(dest))[1] = ((unsigned char *)(src))[1], (dest))
177 /* pipe string names */
178 #define PIPE_LANMAN "\\PIPE\\LANMAN"
179 #define PIPE_SRVSVC "\\PIPE\\srvsvc"
180 #define PIPE_SAMR "\\PIPE\\samr"
181 #define PIPE_WINREG "\\PIPE\\winreg"
182 #define PIPE_WKSSVC "\\PIPE\\wkssvc"
183 #define PIPE_NETLOGON "\\PIPE\\NETLOGON"
184 #define PIPE_NTLSA "\\PIPE\\ntlsa"
185 #define PIPE_NTSVCS "\\PIPE\\ntsvcs"
186 #define PIPE_LSASS "\\PIPE\\lsass"
187 #define PIPE_LSARPC "\\PIPE\\lsarpc"
188 #define PIPE_SPOOLSS "\\PIPE\\spoolss"
189 #define PIPE_NETDFS "\\PIPE\\netdfs"
190 #define PIPE_ECHO "\\PIPE\\rpcecho"
191 #define PIPE_SHUTDOWN "\\PIPE\\initshutdown"
192 #define PIPE_EPM "\\PIPE\\epmapper"
193 #define PIPE_SVCCTL "\\PIPE\\svcctl"
194 #define PIPE_EVENTLOG "\\PIPE\\eventlog"
195 #define PIPE_UNIXINFO "\\PIPE\\unixinfo"
197 #define PIPE_NETLOGON_PLAIN "\\NETLOGON"
200 #define PI_LSARPC_DS 1
202 #define PI_NETLOGON 3
209 #define PI_SHUTDOWN 10
211 #define PI_EVENTLOG 12
212 #define PI_UNIXINFO 13
214 #define PI_MAX_PIPES 15
216 typedef struct uint64_s
222 /* 64 bit time (100usec) since ????? - cifs6.txt, section 3.5, page 30 */
223 typedef UINT64_S NTTIME;
226 /* Allowable account control bits */
227 #define ACB_DISABLED 0x00000001 /* 1 = User account disabled */
228 #define ACB_HOMDIRREQ 0x00000002 /* 1 = Home directory required */
229 #define ACB_PWNOTREQ 0x00000004 /* 1 = User password not required */
230 #define ACB_TEMPDUP 0x00000008 /* 1 = Temporary duplicate account */
231 #define ACB_NORMAL 0x00000010 /* 1 = Normal user account */
232 #define ACB_MNS 0x00000020 /* 1 = MNS logon user account */
233 #define ACB_DOMTRUST 0x00000040 /* 1 = Interdomain trust account */
234 #define ACB_WSTRUST 0x00000080 /* 1 = Workstation trust account */
235 #define ACB_SVRTRUST 0x00000100 /* 1 = Server trust account (BDC) */
236 #define ACB_PWNOEXP 0x00000200 /* 1 = User password does not expire */
237 #define ACB_AUTOLOCK 0x00000400 /* 1 = Account auto locked */
239 /* only valid for > Windows 2000 */
240 #define ACB_ENC_TXT_PWD_ALLOWED 0x00000800 /* 1 = Text password encryped */
241 #define ACB_SMARTCARD_REQUIRED 0x00001000 /* 1 = Smart Card required */
242 #define ACB_TRUSTED_FOR_DELEGATION 0x00002000 /* 1 = Trusted for Delegation */
243 #define ACB_NOT_DELEGATED 0x00004000 /* 1 = Not delegated */
244 #define ACB_USE_DES_KEY_ONLY 0x00008000 /* 1 = Use DES key only */
245 #define ACB_DONT_REQUIRE_PREAUTH 0x00010000 /* 1 = Preauth not required */
246 #define ACB_PWEXPIRED 0x00020000 /* 1 = Password is expired */
247 #define ACB_NO_AUTH_DATA_REQD 0x00080000 /* 1 = No authorization data required */
249 #define MAX_HOURS_LEN 32
252 #define MAXSUBAUTHS 15 /* max sub authorities in a SID */
255 #define SID_MAX_SIZE ((size_t)(8+(MAXSUBAUTHS*4)))
259 SID_NAME_USE_NONE = 0,
260 SID_NAME_USER = 1, /* user */
261 SID_NAME_DOM_GRP, /* domain group */
262 SID_NAME_DOMAIN, /* domain sid */
263 SID_NAME_ALIAS, /* local group */
264 SID_NAME_WKN_GRP, /* well-known group */
265 SID_NAME_DELETED, /* deleted account: needed for c2 rating */
266 SID_NAME_INVALID, /* invalid account */
267 SID_NAME_UNKNOWN, /* unknown sid type */
268 SID_NAME_COMPUTER /* sid for a computer */
271 #define LOOKUP_NAME_ISOLATED 1 /* Look up unqualified names */
272 #define LOOKUP_NAME_REMOTE 2 /* Ask others */
273 #define LOOKUP_NAME_ALL (LOOKUP_NAME_ISOLATED|LOOKUP_NAME_REMOTE)
275 #define LOOKUP_NAME_GROUP 4 /* (unused) This is a NASTY hack for valid users = @foo
276 * where foo also exists in as user. */
279 * @brief Security Identifier
281 * @sa http://msdn.microsoft.com/library/default.asp?url=/library/en-us/security/accctrl_38yn.asp
283 typedef struct sid_info {
284 uint8 sid_rev_num; /**< SID revision number */
285 uint8 num_auths; /**< Number of sub-authorities */
286 uint8 id_auth[6]; /**< Identifier Authority */
288 * Pointer to sub-authorities.
290 * @note The values in these uint32's are in *native* byteorder, not
291 * neccessarily little-endian...... JRA.
293 uint32 sub_auths[MAXSUBAUTHS];
296 struct lsa_dom_info {
304 struct lsa_name_info {
306 enum SID_NAME_USE type;
311 /* Some well-known SIDs */
312 extern const DOM_SID global_sid_World_Domain;
313 extern const DOM_SID global_sid_World;
314 extern const DOM_SID global_sid_Creator_Owner_Domain;
315 extern const DOM_SID global_sid_NT_Authority;
316 extern const DOM_SID global_sid_System;
317 extern const DOM_SID global_sid_NULL;
318 extern const DOM_SID global_sid_Authenticated_Users;
319 extern const DOM_SID global_sid_Network;
320 extern const DOM_SID global_sid_Creator_Owner;
321 extern const DOM_SID global_sid_Creator_Group;
322 extern const DOM_SID global_sid_Anonymous;
323 extern const DOM_SID global_sid_Builtin;
324 extern const DOM_SID global_sid_Builtin_Administrators;
325 extern const DOM_SID global_sid_Builtin_Users;
326 extern const DOM_SID global_sid_Builtin_Guests;
327 extern const DOM_SID global_sid_Builtin_Power_Users;
328 extern const DOM_SID global_sid_Builtin_Account_Operators;
329 extern const DOM_SID global_sid_Builtin_Server_Operators;
330 extern const DOM_SID global_sid_Builtin_Print_Operators;
331 extern const DOM_SID global_sid_Builtin_Backup_Operators;
332 extern const DOM_SID global_sid_Builtin_Replicator;
333 extern const DOM_SID global_sid_Builtin_PreWin2kAccess;
334 extern const DOM_SID global_sid_Unix_Users;
335 extern const DOM_SID global_sid_Unix_Groups;
338 * The complete list of SIDS belonging to this user.
339 * Created when a vuid is registered.
340 * The definition of the user_sids array is as follows :
342 * token->user_sids[0] = primary user SID.
343 * token->user_sids[1] = primary group SID.
344 * token->user_sids[2..num_sids] = supplementary group SIDS.
347 #define PRIMARY_USER_SID_INDEX 0
348 #define PRIMARY_GROUP_SID_INDEX 1
350 typedef struct nt_user_token {
356 typedef struct _unix_token {
363 /* 32 bit time (sec) since 01jan1970 - cifs6.txt, section 3.5, page 30 */
364 typedef struct time_info {
368 /* Structure used when SMBwritebmpx is active */
370 size_t wr_total_written; /* So we know when to discard this */
372 int32 wr_errclass; /* Cached errors */
373 int32 wr_error; /* Cached errors */
374 NTSTATUS wr_status; /* Cached errors */
375 BOOL wr_mode; /* write through mode) */
376 BOOL wr_discard; /* discard all further data */
379 typedef struct write_cache {
388 smb_ucs2_t *origname;
389 smb_ucs2_t *filename;
390 SMB_STRUCT_STAT *statinfo;
393 #include "fake_file.h"
398 SMB_BIG_UINT position_information;
400 uint32 private_options; /* NT Create options, but we only look at
401 * NTCREATEX_OPTIONS_PRIVATE_DENY_DOS and
402 * NTCREATEX_OPTIONS_PRIVATE_DENY_FCB (Except
403 * for print files *only*, where
404 * DELETE_ON_CLOSE is not stored in the share
407 unsigned long file_id;
412 struct share_mode_entry;
414 struct vfs_fsp_data {
415 struct vfs_fsp_data *next;
416 struct vfs_handle_struct *owner;
417 /* NOTE: This structure contains two pointers so that we can guarantee
418 * that the end of the structure is always both 4-byte and 8-byte aligned.
422 typedef struct files_struct {
423 struct files_struct *next, *prev;
425 struct connection_struct *conn;
426 struct fd_handle *fh;
427 unsigned int num_smb_operations;
428 uint16 rap_print_jobid;
431 SMB_BIG_UINT initial_allocation_size; /* Faked up initial allocation on disk. */
435 write_bmpx_struct *wbmpx_ptr;
437 struct timeval open_time;
438 uint32 access_mask; /* NTCreateX access bits (FILE_READ_DATA etc.) */
439 uint32 share_access; /* NTCreateX share constants (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE). */
440 BOOL pending_modtime_owner;
441 time_t pending_modtime;
442 time_t last_write_time;
444 int sent_oplock_break;
445 struct timed_event *oplock_timeout;
446 struct lock_struct last_lock_failure;
448 struct share_mode_entry *pending_break_messages;
449 int num_pending_break_messages;
458 BOOL aio_write_behind;
462 struct vfs_fsp_data *vfs_extension;
463 FAKE_FILE_HANDLE *fake_file_handle;
466 #include "ntquotas.h"
467 #include "sysquotas.h"
469 /* used to hold an arbitrary blob of data */
470 typedef struct data_blob_ {
473 void (*free)(struct data_blob_ *data_blob);
477 * Structure used to keep directory state information around.
478 * Used in NT change-notify code.
486 struct vuid_cache_entry {
493 unsigned int entries;
494 struct vuid_cache_entry array[VUID_CACHE_SIZE];
500 } name_compare_entry;
503 struct trans_state *next, *prev;
507 uint32 max_param_return;
508 uint32 max_data_return;
509 uint32 max_setup_return;
511 uint8 cmd; /* SMBtrans or SMBtrans2 */
513 fstring name; /* for trans requests */
514 uint16 call; /* for trans2 and nttrans requests */
516 BOOL close_on_completion;
519 unsigned int setup_count;
522 size_t received_data;
523 size_t received_param;
532 /* Include VFS stuff */
534 #include "smb_acls.h"
537 struct dfree_cached_info {
538 time_t last_dfree_time;
539 SMB_BIG_UINT dfree_ret;
547 struct share_params {
551 struct share_iterator {
555 typedef struct connection_struct {
556 struct connection_struct *next, *prev;
558 unsigned cnum; /* an index passed over the wire */
559 struct share_params *params;
562 struct vuid_cache vuid_cache;
563 struct dptr_struct *dirptr;
566 BOOL read_only; /* Attributes for the current user of the share. */
567 BOOL admin_user; /* Attributes for the current user of the share. */
572 struct vfs_ops vfs; /* Filesystem operations */
573 struct vfs_ops vfs_opaque; /* OPAQUE Filesystem operations */
574 struct vfs_handle_struct *vfs_handles; /* for the new plugins */
576 char *user; /* name of user who *opened* this connection */
577 uid_t uid; /* uid of user who *opened* this connection */
578 gid_t gid; /* gid of user who *opened* this connection */
579 char client_address[18]; /* String version of client IP address. */
581 uint16 vuid; /* vuid of user who *opened* this connection, or UID_FIELD_INVALID */
583 /* following groups stuff added by ih */
585 /* This groups info is valid for the user that *opened* the connection */
588 NT_USER_TOKEN *nt_user_token;
591 time_t lastused_count;
594 unsigned int num_smb_operations; /* Count of smb operations on this tree. */
598 BOOL short_case_preserve;
600 name_compare_entry *hide_list; /* Per-share list of files to return as hidden. */
601 name_compare_entry *veto_list; /* Per-share list of files to veto (never show). */
602 name_compare_entry *veto_oplock_list; /* Per-share list of files to refuse oplocks on. */
603 name_compare_entry *aio_write_behind_list; /* Per-share list of files to use aio write behind on. */
604 struct dfree_cached_info *dfree_info;
605 struct trans_state *pending_trans;
608 struct current_user {
609 connection_struct *conn;
612 NT_USER_TOKEN *nt_user_token;
615 /* Defines for the sent_oplock_break field above. */
616 #define NO_BREAK_SENT 0
617 #define BREAK_TO_NONE_SENT 1
618 #define LEVEL_II_BREAK_SENT 2
621 fstring smb_name; /* user name from the client */
622 fstring unix_name; /* unix user name of a validated user */
623 fstring full_name; /* to store full name (such as "Joe Bloggs") from gecos field of password file */
624 fstring domain; /* domain that the client specified */
627 /* Extra fields above "LPQ_PRINTING" are used to map extra NT status codes. */
629 enum {LPQ_QUEUED=0,LPQ_PAUSED,LPQ_SPOOLING,LPQ_PRINTING,LPQ_ERROR,LPQ_DELETING,
630 LPQ_OFFLINE,LPQ_PAPEROUT,LPQ_PRINTED,LPQ_DELETED,LPQ_BLOCKED,LPQ_USER_INTERVENTION};
632 typedef struct _print_queue_struct {
633 int job; /* normally the UNIX jobid -- see note in
634 printing.c:traverse_fn_delete() */
642 } print_queue_struct;
644 enum {LPSTAT_OK, LPSTAT_STOPPED, LPSTAT_ERROR};
650 } print_status_struct;
652 /* used for server information: client, nameserv and ipc */
653 struct server_info_struct {
657 fstring domain; /* used ONLY in ipc.c NOT namework.c */
658 BOOL server_added; /* used ONLY in ipc.c NOT namework.c */
661 /* used for network interfaces */
663 struct interface *next, *prev;
665 struct in_addr bcast;
666 struct in_addr nmask;
669 /* Internal message queue for deferred opens. */
670 struct pending_message_list {
671 struct pending_message_list *next, *prev;
672 struct timeval request_time; /* When was this first issued? */
673 struct timeval end_time; /* When does this time out? */
675 DATA_BLOB private_data;
678 /* struct returned by get_share_modes */
679 struct share_mode_entry {
680 struct process_id pid;
683 uint32 access_mask; /* NTCreateX access bits (FILE_READ_DATA etc.) */
684 uint32 share_access; /* NTCreateX share constants (FILE_SHARE_READ|FILE_SHARE_WRITE|FILE_SHARE_DELETE). */
685 uint32 private_options; /* NT Create options, but we only look at
686 * NTCREATEX_OPTIONS_PRIVATE_DENY_DOS and
687 * NTCREATEX_OPTIONS_PRIVATE_DENY_FCB for
688 * smbstatus and swat */
692 unsigned long share_file_id;
693 uint32 uid; /* uid of file opener. */
696 /* oplock break message definition - linearization of share_mode_entry.
699 0 struct process_id pid 4
702 8 uint32 access_mask 4
703 12 uint32 share_access 4
704 16 uint32 private_options 4
706 24 uint32 time usec 4
707 28 SMB_DEV_T dev 8 bytes.
708 36 SMB_INO_T inode 8 bytes
709 44 unsigned long file_id 4 bytes
710 48 uint32 uid 4 bytes
714 #define MSG_SMB_SHARE_MODE_ENTRY_SIZE 52
716 struct share_mode_lock {
717 const char *servicepath; /* canonicalized. */
718 const char *filename;
722 struct share_mode_entry *share_modes;
723 UNIX_USER_TOKEN *delete_token;
724 BOOL delete_on_close;
725 BOOL initial_delete_on_close;
731 * Internal structure of locking.tdb share mode db.
732 * Used by locking.c and libsmbsharemodes.c
735 struct locking_data {
738 int num_share_mode_entries;
739 BOOL delete_on_close;
740 BOOL initial_delete_on_close; /* Only set at NTCreateX if file was created. */
741 uint32 delete_token_size; /* Only valid if either of
742 the two previous fields
745 struct share_mode_entry dummy; /* Needed for alignment. */
747 /* The following four entries are implicit
748 struct share_mode_entry modes[num_share_mode_entries];
749 char unix_token[delete_token_size] (divisible by 4).
755 /* Used to store pipe open records for NetFileEnum() */
757 struct pipe_open_rec {
758 struct process_id pid;
765 #define NT_HASH_LEN 16
766 #define LM_HASH_LEN 16
768 /* Password history contants. */
769 #define PW_HISTORY_SALT_LEN 16
770 #define SALTED_MD5_HASH_LEN 16
771 #define PW_HISTORY_ENTRY_LEN (PW_HISTORY_SALT_LEN+SALTED_MD5_HASH_LEN)
772 #define MAX_PW_HISTORY_LEN 24
775 * Flags for account policy.
777 #define AP_MIN_PASSWORD_LEN 1
778 #define AP_PASSWORD_HISTORY 2
779 #define AP_USER_MUST_LOGON_TO_CHG_PASS 3
780 #define AP_MAX_PASSWORD_AGE 4
781 #define AP_MIN_PASSWORD_AGE 5
782 #define AP_LOCK_ACCOUNT_DURATION 6
783 #define AP_RESET_COUNT_TIME 7
784 #define AP_BAD_ATTEMPT_LOCKOUT 8
785 #define AP_TIME_TO_LOGOUT 9
786 #define AP_REFUSE_MACHINE_PW_CHANGE 10
789 * Flags for local user manipulation.
792 #define LOCAL_ADD_USER 0x1
793 #define LOCAL_DELETE_USER 0x2
794 #define LOCAL_DISABLE_USER 0x4
795 #define LOCAL_ENABLE_USER 0x8
796 #define LOCAL_TRUST_ACCOUNT 0x10
797 #define LOCAL_SET_NO_PASSWORD 0x20
798 #define LOCAL_SET_PASSWORD 0x40
799 #define LOCAL_SET_LDAP_ADMIN_PW 0x80
800 #define LOCAL_INTERDOM_ACCOUNT 0x100
801 #define LOCAL_AM_ROOT 0x200 /* Act as root */
803 /* key and data in the connections database - used in smbstatus and smbd */
804 struct connections_key {
805 struct process_id pid;
810 struct connections_data {
812 struct process_id pid;
818 char machine[FSTRING_LEN];
820 uint32 bcast_msg_flags;
824 /* the following are used by loadparm for option lists */
826 P_BOOL,P_BOOLREV,P_CHAR,P_INTEGER,P_OCTAL,P_LIST,
827 P_STRING,P_USTRING,P_GSTRING,P_UGSTRING,P_ENUM,P_SEP
831 P_LOCAL,P_GLOBAL,P_SEPARATOR,P_NONE
844 BOOL (*special)(int snum, const char *, char **);
845 const struct enum_list *enum_list;
856 /* The following flags are used in SWAT */
857 #define FLAG_BASIC 0x0001 /* Display only in BASIC view */
858 #define FLAG_SHARE 0x0002 /* file sharing options */
859 #define FLAG_PRINT 0x0004 /* printing options */
860 #define FLAG_GLOBAL 0x0008 /* local options that should be globally settable in SWAT */
861 #define FLAG_WIZARD 0x0010 /* Parameters that the wizard will operate on */
862 #define FLAG_ADVANCED 0x0020 /* Parameters that will be visible in advanced view */
863 #define FLAG_DEVELOPER 0x0040 /* No longer used */
864 #define FLAG_DEPRECATED 0x1000 /* options that should no longer be used */
865 #define FLAG_HIDE 0x2000 /* options that should be hidden in SWAT */
866 #define FLAG_DOS_STRING 0x4000 /* convert from UNIX to DOS codepage when reading this string. */
873 /* the basic packet size, assuming no words or bytes */
876 /* offsets into message for common items */
883 #define smb_pidhigh 16
884 #define smb_ss_field 18
910 /* flag defines. CIFS spec 3.1.1 */
911 #define FLAG_SUPPORT_LOCKREAD 0x01
912 #define FLAG_CLIENT_BUF_AVAIL 0x02
913 #define FLAG_RESERVED 0x04
914 #define FLAG_CASELESS_PATHNAMES 0x08
915 #define FLAG_CANONICAL_PATHNAMES 0x10
916 #define FLAG_REQUEST_OPLOCK 0x20
917 #define FLAG_REQUEST_BATCH_OPLOCK 0x40
918 #define FLAG_REPLY 0x80
921 #define SMBmkdir 0x00 /* create directory */
922 #define SMBrmdir 0x01 /* delete directory */
923 #define SMBopen 0x02 /* open file */
924 #define SMBcreate 0x03 /* create file */
925 #define SMBclose 0x04 /* close file */
926 #define SMBflush 0x05 /* flush file */
927 #define SMBunlink 0x06 /* delete file */
928 #define SMBmv 0x07 /* rename file */
929 #define SMBgetatr 0x08 /* get file attributes */
930 #define SMBsetatr 0x09 /* set file attributes */
931 #define SMBread 0x0A /* read from file */
932 #define SMBwrite 0x0B /* write to file */
933 #define SMBlock 0x0C /* lock byte range */
934 #define SMBunlock 0x0D /* unlock byte range */
935 #define SMBctemp 0x0E /* create temporary file */
936 #define SMBmknew 0x0F /* make new file */
937 #define SMBchkpth 0x10 /* check directory path */
938 #define SMBexit 0x11 /* process exit */
939 #define SMBlseek 0x12 /* seek */
940 #define SMBtcon 0x70 /* tree connect */
941 #define SMBtconX 0x75 /* tree connect and X*/
942 #define SMBtdis 0x71 /* tree disconnect */
943 #define SMBnegprot 0x72 /* negotiate protocol */
944 #define SMBdskattr 0x80 /* get disk attributes */
945 #define SMBsearch 0x81 /* search directory */
946 #define SMBsplopen 0xC0 /* open print spool file */
947 #define SMBsplwr 0xC1 /* write to print spool file */
948 #define SMBsplclose 0xC2 /* close print spool file */
949 #define SMBsplretq 0xC3 /* return print queue */
950 #define SMBsends 0xD0 /* send single block message */
951 #define SMBsendb 0xD1 /* send broadcast message */
952 #define SMBfwdname 0xD2 /* forward user name */
953 #define SMBcancelf 0xD3 /* cancel forward */
954 #define SMBgetmac 0xD4 /* get machine name */
955 #define SMBsendstrt 0xD5 /* send start of multi-block message */
956 #define SMBsendend 0xD6 /* send end of multi-block message */
957 #define SMBsendtxt 0xD7 /* send text of multi-block message */
960 #define SMBlockread 0x13 /* Lock a range and read */
961 #define SMBwriteunlock 0x14 /* Unlock a range then write */
962 #define SMBreadbraw 0x1a /* read a block of data with no smb header */
963 #define SMBwritebraw 0x1d /* write a block of data with no smb header */
964 #define SMBwritec 0x20 /* secondary write request */
965 #define SMBwriteclose 0x2c /* write a file then close it */
967 /* dos extended protocol */
968 #define SMBreadBraw 0x1A /* read block raw */
969 #define SMBreadBmpx 0x1B /* read block multiplexed */
970 #define SMBreadBs 0x1C /* read block (secondary response) */
971 #define SMBwriteBraw 0x1D /* write block raw */
972 #define SMBwriteBmpx 0x1E /* write block multiplexed */
973 #define SMBwriteBs 0x1F /* write block (secondary request) */
974 #define SMBwriteC 0x20 /* write complete response */
975 #define SMBsetattrE 0x22 /* set file attributes expanded */
976 #define SMBgetattrE 0x23 /* get file attributes expanded */
977 #define SMBlockingX 0x24 /* lock/unlock byte ranges and X */
978 #define SMBtrans 0x25 /* transaction - name, bytes in/out */
979 #define SMBtranss 0x26 /* transaction (secondary request/response) */
980 #define SMBioctl 0x27 /* IOCTL */
981 #define SMBioctls 0x28 /* IOCTL (secondary request/response) */
982 #define SMBcopy 0x29 /* copy */
983 #define SMBmove 0x2A /* move */
984 #define SMBecho 0x2B /* echo */
985 #define SMBopenX 0x2D /* open and X */
986 #define SMBreadX 0x2E /* read and X */
987 #define SMBwriteX 0x2F /* write and X */
988 #define SMBsesssetupX 0x73 /* Session Set Up & X (including User Logon) */
989 #define SMBffirst 0x82 /* find first */
990 #define SMBfunique 0x83 /* find unique */
991 #define SMBfclose 0x84 /* find close */
992 #define SMBkeepalive 0x85 /* keepalive */
993 #define SMBinvalid 0xFE /* invalid command */
995 /* Extended 2.0 protocol */
996 #define SMBtrans2 0x32 /* TRANS2 protocol set */
997 #define SMBtranss2 0x33 /* TRANS2 protocol set, secondary command */
998 #define SMBfindclose 0x34 /* Terminate a TRANSACT2_FINDFIRST */
999 #define SMBfindnclose 0x35 /* Terminate a TRANSACT2_FINDNOTIFYFIRST */
1000 #define SMBulogoffX 0x74 /* user logoff */
1002 /* NT SMB extensions. */
1003 #define SMBnttrans 0xA0 /* NT transact */
1004 #define SMBnttranss 0xA1 /* NT transact secondary */
1005 #define SMBntcreateX 0xA2 /* NT create and X */
1006 #define SMBntcancel 0xA4 /* NT cancel */
1007 #define SMBntrename 0xA5 /* NT rename */
1009 /* These are the trans subcommands */
1010 #define TRANSACT_SETNAMEDPIPEHANDLESTATE 0x01
1011 #define TRANSACT_DCERPCCMD 0x26
1012 #define TRANSACT_WAITNAMEDPIPEHANDLESTATE 0x53
1014 /* These are the TRANS2 sub commands */
1015 #define TRANSACT2_OPEN 0x00
1016 #define TRANSACT2_FINDFIRST 0x01
1017 #define TRANSACT2_FINDNEXT 0x02
1018 #define TRANSACT2_QFSINFO 0x03
1019 #define TRANSACT2_SETFSINFO 0x04
1020 #define TRANSACT2_QPATHINFO 0x05
1021 #define TRANSACT2_SETPATHINFO 0x06
1022 #define TRANSACT2_QFILEINFO 0x07
1023 #define TRANSACT2_SETFILEINFO 0x08
1024 #define TRANSACT2_FSCTL 0x09
1025 #define TRANSACT2_IOCTL 0x0A
1026 #define TRANSACT2_FINDNOTIFYFIRST 0x0B
1027 #define TRANSACT2_FINDNOTIFYNEXT 0x0C
1028 #define TRANSACT2_MKDIR 0x0D
1029 #define TRANSACT2_SESSION_SETUP 0x0E
1030 #define TRANSACT2_GET_DFS_REFERRAL 0x10
1031 #define TRANSACT2_REPORT_DFS_INCONSISTANCY 0x11
1033 /* These are the NT transact sub commands. */
1034 #define NT_TRANSACT_CREATE 1
1035 #define NT_TRANSACT_IOCTL 2
1036 #define NT_TRANSACT_SET_SECURITY_DESC 3
1037 #define NT_TRANSACT_NOTIFY_CHANGE 4
1038 #define NT_TRANSACT_RENAME 5
1039 #define NT_TRANSACT_QUERY_SECURITY_DESC 6
1040 #define NT_TRANSACT_GET_USER_QUOTA 7
1041 #define NT_TRANSACT_SET_USER_QUOTA 8
1043 /* These are the NT transact_get_user_quota sub commands */
1044 #define TRANSACT_GET_USER_QUOTA_LIST_CONTINUE 0x0000
1045 #define TRANSACT_GET_USER_QUOTA_LIST_START 0x0100
1046 #define TRANSACT_GET_USER_QUOTA_FOR_SID 0x0101
1048 /* Relevant IOCTL codes */
1049 #define IOCTL_QUERY_JOB_INFO 0x530060
1051 /* these are the trans2 sub fields for primary requests */
1052 #define smb_tpscnt smb_vwv0
1053 #define smb_tdscnt smb_vwv1
1054 #define smb_mprcnt smb_vwv2
1055 #define smb_mdrcnt smb_vwv3
1056 #define smb_msrcnt smb_vwv4
1057 #define smb_flags smb_vwv5
1058 #define smb_timeout smb_vwv6
1059 #define smb_pscnt smb_vwv9
1060 #define smb_psoff smb_vwv10
1061 #define smb_dscnt smb_vwv11
1062 #define smb_dsoff smb_vwv12
1063 #define smb_suwcnt smb_vwv13
1064 #define smb_setup smb_vwv14
1065 #define smb_setup0 smb_setup
1066 #define smb_setup1 (smb_setup+2)
1067 #define smb_setup2 (smb_setup+4)
1069 /* these are for the secondary requests */
1070 #define smb_spscnt smb_vwv2
1071 #define smb_spsoff smb_vwv3
1072 #define smb_spsdisp smb_vwv4
1073 #define smb_sdscnt smb_vwv5
1074 #define smb_sdsoff smb_vwv6
1075 #define smb_sdsdisp smb_vwv7
1076 #define smb_sfid smb_vwv8
1078 /* and these for responses */
1079 #define smb_tprcnt smb_vwv0
1080 #define smb_tdrcnt smb_vwv1
1081 #define smb_prcnt smb_vwv3
1082 #define smb_proff smb_vwv4
1083 #define smb_prdisp smb_vwv5
1084 #define smb_drcnt smb_vwv6
1085 #define smb_droff smb_vwv7
1086 #define smb_drdisp smb_vwv8
1088 /* these are for the NT trans primary request. */
1089 #define smb_nt_MaxSetupCount smb_vwv0
1090 #define smb_nt_Flags (smb_vwv0 + 1)
1091 #define smb_nt_TotalParameterCount (smb_vwv0 + 3)
1092 #define smb_nt_TotalDataCount (smb_vwv0 + 7)
1093 #define smb_nt_MaxParameterCount (smb_vwv0 + 11)
1094 #define smb_nt_MaxDataCount (smb_vwv0 + 15)
1095 #define smb_nt_ParameterCount (smb_vwv0 + 19)
1096 #define smb_nt_ParameterOffset (smb_vwv0 + 23)
1097 #define smb_nt_DataCount (smb_vwv0 + 27)
1098 #define smb_nt_DataOffset (smb_vwv0 + 31)
1099 #define smb_nt_SetupCount (smb_vwv0 + 35)
1100 #define smb_nt_Function (smb_vwv0 + 36)
1101 #define smb_nt_SetupStart (smb_vwv0 + 38)
1103 /* these are for the NT trans secondary request. */
1104 #define smb_nts_TotalParameterCount (smb_vwv0 + 3)
1105 #define smb_nts_TotalDataCount (smb_vwv0 + 7)
1106 #define smb_nts_ParameterCount (smb_vwv0 + 11)
1107 #define smb_nts_ParameterOffset (smb_vwv0 + 15)
1108 #define smb_nts_ParameterDisplacement (smb_vwv0 + 19)
1109 #define smb_nts_DataCount (smb_vwv0 + 23)
1110 #define smb_nts_DataOffset (smb_vwv0 + 27)
1111 #define smb_nts_DataDisplacement (smb_vwv0 + 31)
1113 /* these are for the NT trans reply. */
1114 #define smb_ntr_TotalParameterCount (smb_vwv0 + 3)
1115 #define smb_ntr_TotalDataCount (smb_vwv0 + 7)
1116 #define smb_ntr_ParameterCount (smb_vwv0 + 11)
1117 #define smb_ntr_ParameterOffset (smb_vwv0 + 15)
1118 #define smb_ntr_ParameterDisplacement (smb_vwv0 + 19)
1119 #define smb_ntr_DataCount (smb_vwv0 + 23)
1120 #define smb_ntr_DataOffset (smb_vwv0 + 27)
1121 #define smb_ntr_DataDisplacement (smb_vwv0 + 31)
1123 /* these are for the NT create_and_X */
1124 #define smb_ntcreate_NameLength (smb_vwv0 + 5)
1125 #define smb_ntcreate_Flags (smb_vwv0 + 7)
1126 #define smb_ntcreate_RootDirectoryFid (smb_vwv0 + 11)
1127 #define smb_ntcreate_DesiredAccess (smb_vwv0 + 15)
1128 #define smb_ntcreate_AllocationSize (smb_vwv0 + 19)
1129 #define smb_ntcreate_FileAttributes (smb_vwv0 + 27)
1130 #define smb_ntcreate_ShareAccess (smb_vwv0 + 31)
1131 #define smb_ntcreate_CreateDisposition (smb_vwv0 + 35)
1132 #define smb_ntcreate_CreateOptions (smb_vwv0 + 39)
1133 #define smb_ntcreate_ImpersonationLevel (smb_vwv0 + 43)
1134 #define smb_ntcreate_SecurityFlags (smb_vwv0 + 47)
1136 /* this is used on a TConX. I'm not sure the name is very helpful though */
1137 #define SMB_SUPPORT_SEARCH_BITS 0x0001
1138 #define SMB_SHARE_IN_DFS 0x0002
1140 /* Named pipe write mode flags. Used in writeX calls. */
1141 #define PIPE_RAW_MODE 0x4
1142 #define PIPE_START_MESSAGE 0x8
1144 /* File Specific access rights */
1145 #define FILE_READ_DATA 0x00000001
1146 #define FILE_WRITE_DATA 0x00000002
1147 #define FILE_APPEND_DATA 0x00000004
1148 #define FILE_READ_EA 0x00000008 /* File and directory */
1149 #define FILE_WRITE_EA 0x00000010 /* File and directory */
1150 #define FILE_EXECUTE 0x00000020
1151 #define FILE_DELETE_CHILD 0x00000040
1152 #define FILE_READ_ATTRIBUTES 0x00000080
1153 #define FILE_WRITE_ATTRIBUTES 0x00000100
1155 #define FILE_ALL_ACCESS 0x000001FF
1157 /* Directory specific access rights */
1158 #define FILE_LIST_DIRECTORY 0x00000001
1159 #define FILE_ADD_FILE 0x00000002
1160 #define FILE_ADD_SUBDIRECTORY 0x00000004
1161 #define FILE_TRAVERSE 0x00000020
1162 #define FILE_DELETE_CHILD 0x00000040
1164 /* the desired access to use when opening a pipe */
1165 #define DESIRED_ACCESS_PIPE 0x2019f
1167 /* Generic access masks & rights. */
1168 #define DELETE_ACCESS 0x00010000 /* (1L<<16) */
1169 #define READ_CONTROL_ACCESS 0x00020000 /* (1L<<17) */
1170 #define WRITE_DAC_ACCESS 0x00040000 /* (1L<<18) */
1171 #define WRITE_OWNER_ACCESS 0x00080000 /* (1L<<19) */
1172 #define SYNCHRONIZE_ACCESS 0x00100000 /* (1L<<20) */
1174 #define SYSTEM_SECURITY_ACCESS 0x01000000 /* (1L<<24) */
1175 #define MAXIMUM_ALLOWED_ACCESS 0x02000000 /* (1L<<25) */
1176 #define GENERIC_ALL_ACCESS 0x10000000 /* (1<<28) */
1177 #define GENERIC_EXECUTE_ACCESS 0x20000000 /* (1<<29) */
1178 #define GENERIC_WRITE_ACCESS 0x40000000 /* (1<<30) */
1179 #define GENERIC_READ_ACCESS ((unsigned)0x80000000) /* (((unsigned)1)<<31) */
1181 /* Mapping of generic access rights for files to specific rights. */
1183 #define FILE_GENERIC_ALL (STANDARD_RIGHTS_REQUIRED_ACCESS| SYNCHRONIZE_ACCESS|FILE_ALL_ACCESS)
1185 #define FILE_GENERIC_READ (STANDARD_RIGHTS_READ_ACCESS|FILE_READ_DATA|FILE_READ_ATTRIBUTES|\
1186 FILE_READ_EA|SYNCHRONIZE_ACCESS)
1188 #define FILE_GENERIC_WRITE (STD_RIGHT_READ_CONTROL_ACCESS|FILE_WRITE_DATA|FILE_WRITE_ATTRIBUTES|\
1189 FILE_WRITE_EA|FILE_APPEND_DATA|SYNCHRONIZE_ACCESS)
1191 #define FILE_GENERIC_EXECUTE (STANDARD_RIGHTS_EXECUTE_ACCESS|\
1192 FILE_EXECUTE|SYNCHRONIZE_ACCESS)
1194 /* Mapping of access rights to UNIX perms. */
1195 #define UNIX_ACCESS_RWX FILE_GENERIC_ALL
1196 #define UNIX_ACCESS_R FILE_GENERIC_READ
1197 #define UNIX_ACCESS_W FILE_GENERIC_WRITE
1198 #define UNIX_ACCESS_X FILE_GENERIC_EXECUTE
1200 /* Mapping of access rights to UNIX perms. for a UNIX directory. */
1201 #define UNIX_DIRECTORY_ACCESS_RWX FILE_GENERIC_ALL
1202 #define UNIX_DIRECTORY_ACCESS_R FILE_GENERIC_READ
1203 #define UNIX_DIRECTORY_ACCESS_W FILE_GENERIC_WRITE
1204 #define UNIX_DIRECTORY_ACCESS_X FILE_GENERIC_EXECUTE
1208 * This is the old mapping we used to use. To get W2KSP2 profiles
1209 * working we need to map to the canonical file perms.
1211 #define UNIX_ACCESS_RWX (UNIX_ACCESS_R|UNIX_ACCESS_W|UNIX_ACCESS_X)
1212 #define UNIX_ACCESS_R (READ_CONTROL_ACCESS|SYNCHRONIZE_ACCESS|\
1213 FILE_READ_ATTRIBUTES|FILE_READ_EA|FILE_READ_DATA)
1214 #define UNIX_ACCESS_W (READ_CONTROL_ACCESS|SYNCHRONIZE_ACCESS|\
1215 FILE_WRITE_ATTRIBUTES|FILE_WRITE_EA|\
1216 FILE_APPEND_DATA|FILE_WRITE_DATA)
1217 #define UNIX_ACCESS_X (READ_CONTROL_ACCESS|SYNCHRONIZE_ACCESS|\
1218 FILE_EXECUTE|FILE_READ_ATTRIBUTES)
1221 #define UNIX_ACCESS_NONE (WRITE_OWNER_ACCESS)
1224 #define REQUEST_OPLOCK 2
1225 #define REQUEST_BATCH_OPLOCK 4
1226 #define OPEN_DIRECTORY 8
1227 #define EXTENDED_RESPONSE_REQUIRED 0x10
1229 /* ShareAccess field. */
1230 #define FILE_SHARE_NONE 0 /* Cannot be used in bitmask. */
1231 #define FILE_SHARE_READ 1
1232 #define FILE_SHARE_WRITE 2
1233 #define FILE_SHARE_DELETE 4
1235 /* FileAttributesField */
1236 #define FILE_ATTRIBUTE_READONLY 0x001L
1237 #define FILE_ATTRIBUTE_HIDDEN 0x002L
1238 #define FILE_ATTRIBUTE_SYSTEM 0x004L
1239 #define FILE_ATTRIBUTE_DIRECTORY 0x010L
1240 #define FILE_ATTRIBUTE_ARCHIVE 0x020L
1241 #define FILE_ATTRIBUTE_NORMAL 0x080L
1242 #define FILE_ATTRIBUTE_TEMPORARY 0x100L
1243 #define FILE_ATTRIBUTE_SPARSE 0x200L
1244 #define FILE_ATTRIBUTE_REPARSE_POINT 0x400L
1245 #define FILE_ATTRIBUTE_COMPRESSED 0x800L
1246 #define FILE_ATTRIBUTE_OFFLINE 0x1000L
1247 #define FILE_ATTRIBUTE_NONINDEXED 0x2000L
1248 #define FILE_ATTRIBUTE_ENCRYPTED 0x4000L
1249 #define SAMBA_ATTRIBUTES_MASK 0x7F
1251 /* Flags - combined with attributes. */
1252 #define FILE_FLAG_WRITE_THROUGH 0x80000000L
1253 #define FILE_FLAG_NO_BUFFERING 0x20000000L
1254 #define FILE_FLAG_RANDOM_ACCESS 0x10000000L
1255 #define FILE_FLAG_SEQUENTIAL_SCAN 0x08000000L
1256 #define FILE_FLAG_DELETE_ON_CLOSE 0x04000000L
1257 #define FILE_FLAG_BACKUP_SEMANTICS 0x02000000L
1258 #define FILE_FLAG_POSIX_SEMANTICS 0x01000000L
1260 /* CreateDisposition field. */
1261 #define FILE_SUPERSEDE 0 /* File exists overwrite/supersede. File not exist create. */
1262 #define FILE_OPEN 1 /* File exists open. File not exist fail. */
1263 #define FILE_CREATE 2 /* File exists fail. File not exist create. */
1264 #define FILE_OPEN_IF 3 /* File exists open. File not exist create. */
1265 #define FILE_OVERWRITE 4 /* File exists overwrite. File not exist fail. */
1266 #define FILE_OVERWRITE_IF 5 /* File exists overwrite. File not exist create. */
1268 /* CreateOptions field. */
1269 #define FILE_DIRECTORY_FILE 0x0001
1270 #define FILE_WRITE_THROUGH 0x0002
1271 #define FILE_SEQUENTIAL_ONLY 0x0004
1272 #define FILE_NON_DIRECTORY_FILE 0x0040
1273 #define FILE_NO_EA_KNOWLEDGE 0x0200
1274 #define FILE_EIGHT_DOT_THREE_ONLY 0x0400
1275 #define FILE_RANDOM_ACCESS 0x0800
1276 #define FILE_DELETE_ON_CLOSE 0x1000
1277 #define FILE_OPEN_BY_FILE_ID 0x2000
1279 /* Private create options used by the ntcreatex processing code. From Samba4. */
1280 #define NTCREATEX_OPTIONS_PRIVATE_DENY_DOS 0x01000000
1281 #define NTCREATEX_OPTIONS_PRIVATE_DENY_FCB 0x02000000
1283 /* Responses when opening a file. */
1284 #define FILE_WAS_SUPERSEDED 0
1285 #define FILE_WAS_OPENED 1
1286 #define FILE_WAS_CREATED 2
1287 #define FILE_WAS_OVERWRITTEN 3
1289 /* File type flags */
1290 #define FILE_TYPE_DISK 0
1291 #define FILE_TYPE_BYTE_MODE_PIPE 1
1292 #define FILE_TYPE_MESSAGE_MODE_PIPE 2
1293 #define FILE_TYPE_PRINTER 3
1294 #define FILE_TYPE_COMM_DEVICE 4
1295 #define FILE_TYPE_UNKNOWN 0xFFFF
1297 /* Flag for NT transact rename call. */
1298 #define RENAME_REPLACE_IF_EXISTS 1
1300 /* flags for SMBntrename call (from Samba4) */
1301 #define RENAME_FLAG_MOVE_CLUSTER_INFORMATION 0x102 /* ???? */
1302 #define RENAME_FLAG_HARD_LINK 0x103
1303 #define RENAME_FLAG_RENAME 0x104
1304 #define RENAME_FLAG_COPY 0x105
1306 /* Filesystem Attributes. */
1307 #define FILE_CASE_SENSITIVE_SEARCH 0x00000001
1308 #define FILE_CASE_PRESERVED_NAMES 0x00000002
1309 #define FILE_UNICODE_ON_DISK 0x00000004
1310 /* According to cifs9f, this is 4, not 8 */
1311 /* Acconding to testing, this actually sets the security attribute! */
1312 #define FILE_PERSISTENT_ACLS 0x00000008
1313 #define FILE_FILE_COMPRESSION 0x00000010
1314 #define FILE_VOLUME_QUOTAS 0x00000020
1315 #define FILE_SUPPORTS_SPARSE_FILES 0x00000040
1316 #define FILE_SUPPORTS_REPARSE_POINTS 0x00000080
1317 #define FILE_SUPPORTS_REMOTE_STORAGE 0x00000100
1318 #define FS_LFN_APIS 0x00004000
1319 #define FILE_VOLUME_IS_COMPRESSED 0x00008000
1320 #define FILE_SUPPORTS_OBJECT_IDS 0x00010000
1321 #define FILE_SUPPORTS_ENCRYPTION 0x00020000
1322 #define FILE_NAMED_STREAMS 0x00040000
1323 #define FILE_READ_ONLY_VOLUME 0x00080000
1325 /* ChangeNotify flags. */
1326 #define FILE_NOTIFY_CHANGE_FILE 0x001
1327 #define FILE_NOTIFY_CHANGE_DIR_NAME 0x002
1328 #define FILE_NOTIFY_CHANGE_ATTRIBUTES 0x004
1329 #define FILE_NOTIFY_CHANGE_SIZE 0x008
1330 #define FILE_NOTIFY_CHANGE_LAST_WRITE 0x010
1331 #define FILE_NOTIFY_CHANGE_LAST_ACCESS 0x020
1332 #define FILE_NOTIFY_CHANGE_CREATION 0x040
1333 #define FILE_NOTIFY_CHANGE_EA 0x080
1334 #define FILE_NOTIFY_CHANGE_SECURITY 0x100
1335 #define FILE_NOTIFY_CHANGE_FILE_NAME 0x200
1337 /* where to find the base of the SMB packet proper */
1338 #define smb_base(buf) (((char *)(buf))+4)
1340 /* we don't allow server strings to be longer than 48 characters as
1341 otherwise NT will not honour the announce packets */
1342 #define MAX_SERVER_STRING_LENGTH 48
1345 #define SMB_SUCCESS 0 /* The request was successful. */
1348 void dfs_unlogin(void);
1349 extern int dcelogin_atmost_once;
1353 char *strdup(char *s);
1357 #define SIGNAL_CAST (RETSIGTYPE (*)(int))
1364 /* these are used in NetServerEnum to choose what to receive */
1365 #define SV_TYPE_WORKSTATION 0x00000001
1366 #define SV_TYPE_SERVER 0x00000002
1367 #define SV_TYPE_SQLSERVER 0x00000004
1368 #define SV_TYPE_DOMAIN_CTRL 0x00000008
1369 #define SV_TYPE_DOMAIN_BAKCTRL 0x00000010
1370 #define SV_TYPE_TIME_SOURCE 0x00000020
1371 #define SV_TYPE_AFP 0x00000040
1372 #define SV_TYPE_NOVELL 0x00000080
1373 #define SV_TYPE_DOMAIN_MEMBER 0x00000100
1374 #define SV_TYPE_PRINTQ_SERVER 0x00000200
1375 #define SV_TYPE_DIALIN_SERVER 0x00000400
1376 #define SV_TYPE_SERVER_UNIX 0x00000800
1377 #define SV_TYPE_NT 0x00001000
1378 #define SV_TYPE_WFW 0x00002000
1379 #define SV_TYPE_SERVER_MFPN 0x00004000
1380 #define SV_TYPE_SERVER_NT 0x00008000
1381 #define SV_TYPE_POTENTIAL_BROWSER 0x00010000
1382 #define SV_TYPE_BACKUP_BROWSER 0x00020000
1383 #define SV_TYPE_MASTER_BROWSER 0x00040000
1384 #define SV_TYPE_DOMAIN_MASTER 0x00080000
1385 #define SV_TYPE_SERVER_OSF 0x00100000
1386 #define SV_TYPE_SERVER_VMS 0x00200000
1387 #define SV_TYPE_WIN95_PLUS 0x00400000
1388 #define SV_TYPE_DFS_SERVER 0x00800000
1389 #define SV_TYPE_ALTERNATE_XPORT 0x20000000
1390 #define SV_TYPE_LOCAL_LIST_ONLY 0x40000000
1391 #define SV_TYPE_DOMAIN_ENUM 0x80000000
1392 #define SV_TYPE_ALL 0xFFFFFFFF
1394 /* This was set by JHT in liaison with Jeremy Allison early 1997
1396 * Version 4.0 - never made public
1397 * Version 4.10 - New to 1.9.16p2, lost in space 1.9.16p3 to 1.9.16p9
1398 * - Reappeared in 1.9.16p11 with fixed smbd services
1399 * Version 4.20 - To indicate that nmbd and browsing now works better
1400 * Version 4.50 - Set at release of samba-2.2.0 by JHT
1402 * Note: In the presence of NT4.X do not set above 4.9
1403 * Setting this above 4.9 can have undesired side-effects.
1404 * This may change again in Samba-3.0 after further testing. JHT
1407 #define DEFAULT_MAJOR_VERSION 0x04
1408 #define DEFAULT_MINOR_VERSION 0x09
1410 /* Browser Election Values */
1411 #define BROWSER_ELECTION_VERSION 0x010f
1412 #define BROWSER_CONSTANT 0xaa55
1414 /* Sercurity mode bits. */
1415 #define NEGOTIATE_SECURITY_USER_LEVEL 0x01
1416 #define NEGOTIATE_SECURITY_CHALLENGE_RESPONSE 0x02
1417 #define NEGOTIATE_SECURITY_SIGNATURES_ENABLED 0x04
1418 #define NEGOTIATE_SECURITY_SIGNATURES_REQUIRED 0x08
1420 /* NT Flags2 bits - cifs6.txt section 3.1.2 */
1422 #define FLAGS2_LONG_PATH_COMPONENTS 0x0001
1423 #define FLAGS2_EXTENDED_ATTRIBUTES 0x0002
1424 #define FLAGS2_SMB_SECURITY_SIGNATURES 0x0004
1425 #define FLAGS2_IS_LONG_NAME 0x0040
1426 #define FLAGS2_EXTENDED_SECURITY 0x0800
1427 #define FLAGS2_DFS_PATHNAMES 0x1000
1428 #define FLAGS2_READ_PERMIT_EXECUTE 0x2000
1429 #define FLAGS2_32_BIT_ERROR_CODES 0x4000
1430 #define FLAGS2_UNICODE_STRINGS 0x8000
1432 #define FLAGS2_WIN2K_SIGNATURE 0xC852 /* Hack alert ! For now... JRA. */
1434 /* Capabilities. see ftp.microsoft.com/developr/drg/cifs/cifs/cifs4.txt */
1436 #define CAP_RAW_MODE 0x0001
1437 #define CAP_MPX_MODE 0x0002
1438 #define CAP_UNICODE 0x0004
1439 #define CAP_LARGE_FILES 0x0008
1440 #define CAP_NT_SMBS 0x0010
1441 #define CAP_RPC_REMOTE_APIS 0x0020
1442 #define CAP_STATUS32 0x0040
1443 #define CAP_LEVEL_II_OPLOCKS 0x0080
1444 #define CAP_LOCK_AND_READ 0x0100
1445 #define CAP_NT_FIND 0x0200
1446 #define CAP_DFS 0x1000
1447 #define CAP_W2K_SMBS 0x2000
1448 #define CAP_LARGE_READX 0x4000
1449 #define CAP_LARGE_WRITEX 0x8000
1450 #define CAP_UNIX 0x800000 /* Capabilities for UNIX extensions. Created by HP. */
1451 #define CAP_EXTENDED_SECURITY 0x80000000
1453 /* protocol types. It assumes that higher protocols include lower protocols
1455 enum protocol_types {PROTOCOL_NONE,PROTOCOL_CORE,PROTOCOL_COREPLUS,PROTOCOL_LANMAN1,PROTOCOL_LANMAN2,PROTOCOL_NT1};
1457 /* security levels */
1458 enum security_types {SEC_SHARE,SEC_USER,SEC_SERVER,SEC_DOMAIN,SEC_ADS};
1468 /* printing types */
1469 enum printing_types {PRINT_BSD,PRINT_SYSV,PRINT_AIX,PRINT_HPUX,
1470 PRINT_QNX,PRINT_PLP,PRINT_LPRNG,PRINT_SOFTQ,
1471 PRINT_CUPS,PRINT_LPRNT,PRINT_LPROS2,PRINT_IPRINT
1472 #if defined(DEVELOPER) || defined(ENABLE_BUILD_FARM_HACKS)
1473 ,PRINT_TEST,PRINT_VLP
1474 #endif /* DEVELOPER */
1477 /* LDAP schema types */
1478 enum schema_types {SCHEMA_COMPAT, SCHEMA_AD, SCHEMA_SAMBA};
1480 /* LDAP SSL options */
1481 enum ldap_ssl_types {LDAP_SSL_ON, LDAP_SSL_OFF, LDAP_SSL_START_TLS};
1483 /* LDAP PASSWD SYNC methods */
1484 enum ldap_passwd_sync_types {LDAP_PASSWD_SYNC_ON, LDAP_PASSWD_SYNC_OFF, LDAP_PASSWD_SYNC_ONLY};
1486 /* Remote architectures we know about. */
1487 enum remote_arch_types {RA_UNKNOWN, RA_WFWG, RA_OS2, RA_WIN95, RA_WINNT,
1488 RA_WIN2K, RA_WINXP, RA_WIN2K3, RA_SAMBA, RA_CIFSFS};
1491 enum case_handling {CASE_LOWER,CASE_UPPER};
1493 /* ACL compatibility */
1494 enum acl_compatibility {ACL_COMPAT_AUTO, ACL_COMPAT_WINNT, ACL_COMPAT_WIN2K};
1496 * Global value meaing that the smb_uid field should be
1497 * ingored (in share level security and protocol level == CORE)
1500 #define UID_FIELD_INVALID 0
1501 #define VUID_OFFSET 100 /* Amount to bias returned vuid numbers */
1504 * Size of buffer to use when moving files across filesystems.
1506 #define COPYBUF_SIZE (8*1024)
1509 * Used in chaining code.
1511 extern int chain_size;
1514 * Map the Core and Extended Oplock requesst bits down
1515 * to common bits (EXCLUSIVE_OPLOCK & BATCH_OPLOCK).
1521 #define CORE_OPLOCK_REQUEST(inbuf) \
1522 ((CVAL(inbuf,smb_flg)&(FLAG_REQUEST_OPLOCK|FLAG_REQUEST_BATCH_OPLOCK))>>5)
1525 * Extended protocol.
1527 #define EXTENDED_OPLOCK_REQUEST(inbuf) ((SVAL(inbuf,smb_vwv2)&((1<<1)|(1<<2)))>>1)
1530 #define LOCKING_ANDX_SHARED_LOCK 0x1
1531 #define LOCKING_ANDX_OPLOCK_RELEASE 0x2
1532 #define LOCKING_ANDX_CHANGE_LOCKTYPE 0x4
1533 #define LOCKING_ANDX_CANCEL_LOCK 0x8
1534 #define LOCKING_ANDX_LARGE_FILES 0x10
1537 * Bits we test with.
1538 * Note these must fit into 16-bits.
1542 #define EXCLUSIVE_OPLOCK 1
1543 #define BATCH_OPLOCK 2
1544 #define LEVEL_II_OPLOCK 4
1546 /* The following are Samba-private. */
1547 #define INTERNAL_OPEN_ONLY 8
1548 #define FAKE_LEVEL_II_OPLOCK 16 /* Client requested no_oplock, but we have to
1549 * inform potential level2 holders on
1551 #define DEFERRED_OPEN_ENTRY 32
1552 #define UNUSED_SHARE_MODE_ENTRY 64
1553 #define FORCE_OPLOCK_BREAK_TO_NONE 128
1555 /* None of the following should ever appear in fsp->oplock_request. */
1556 #define SAMBA_PRIVATE_OPLOCK_MASK (INTERNAL_OPEN_ONLY|DEFERRED_OPEN_ENTRY|UNUSED_SHARE_MODE_ENTRY|FORCE_OPLOCK_BREAK_TO_NONE)
1558 #define EXCLUSIVE_OPLOCK_TYPE(lck) ((lck) & ((unsigned int)EXCLUSIVE_OPLOCK|(unsigned int)BATCH_OPLOCK))
1559 #define BATCH_OPLOCK_TYPE(lck) ((lck) & (unsigned int)BATCH_OPLOCK)
1560 #define LEVEL_II_OPLOCK_TYPE(lck) ((lck) & ((unsigned int)LEVEL_II_OPLOCK|(unsigned int)FAKE_LEVEL_II_OPLOCK))
1562 struct inform_level2_message {
1566 unsigned long target_file_id;
1567 unsigned long source_file_id;
1570 /* kernel_oplock_message definition.
1572 struct kernel_oplock_message {
1575 unsigned long file_id;
1579 0 SMB_DEV_T dev 8 bytes.
1580 8 SMB_INO_T inode 8 bytes
1581 16 unsigned long file_id 4 bytes
1585 #define MSG_SMB_KERNEL_BREAK_SIZE 20
1587 /* file_renamed_message definition.
1589 struct file_renamed_message {
1592 char names[1]; A variable area containing sharepath and filename.
1596 0 SMB_DEV_T dev 8 bytes.
1597 8 SMB_INO_T inode 8 bytes
1598 16 char [] name zero terminated namelen bytes
1599 minimum length == 18.
1603 #define MSG_FILE_RENAMED_MIN_SIZE 16
1606 * On the wire return values for oplock types.
1609 #define CORE_OPLOCK_GRANTED (1<<5)
1610 #define EXTENDED_OPLOCK_GRANTED (1<<15)
1612 #define NO_OPLOCK_RETURN 0
1613 #define EXCLUSIVE_OPLOCK_RETURN 1
1614 #define BATCH_OPLOCK_RETURN 2
1615 #define LEVEL_II_OPLOCK_RETURN 3
1618 #define OPLOCKLEVEL_NONE 0
1619 #define OPLOCKLEVEL_II 1
1622 * Capabilities abstracted for different systems.
1625 enum smbd_capability {
1626 KERNEL_OPLOCK_CAPABILITY,
1627 DMAPI_ACCESS_CAPABILITY
1630 /* if a kernel does support oplocks then a structure of the following
1631 typee is used to describe how to interact with the kernel */
1632 struct kernel_oplocks {
1633 files_struct * (*receive_message)(fd_set *fds);
1634 BOOL (*set_oplock)(files_struct *fsp, int oplock_type);
1635 void (*release_oplock)(files_struct *fsp);
1636 BOOL (*msg_waiting)(fd_set *fds);
1637 int notification_fd;
1641 /* this structure defines the functions for doing change notify in
1642 various implementations */
1643 struct cnotify_fns {
1644 void * (*register_notify)(connection_struct *conn, char *path, uint32 flags);
1645 BOOL (*check_notify)(connection_struct *conn, uint16 vuid, char *path, uint32 flags, void *data, time_t t);
1646 void (*remove_notify)(void *data);
1648 int notification_fd;
1651 #include "smb_macros.h"
1653 #define MAX_NETBIOSNAME_LEN 16
1654 /* DOS character, NetBIOS namestring. Type used on the wire. */
1655 typedef char nstring[MAX_NETBIOSNAME_LEN];
1656 /* Unix character, NetBIOS namestring. Type used to manipulate name in nmbd. */
1657 typedef char unstring[MAX_NETBIOSNAME_LEN*4];
1659 /* A netbios name structure. */
1663 unsigned int name_type;
1666 /* A netbios node status array element. */
1667 typedef struct node_status_ {
1670 unsigned char flags;
1671 } NODE_STATUS_STRUCT;
1673 /* The extra info from a NetBIOS node status query */
1674 struct node_status_extra {
1675 unsigned char mac_addr[6];
1676 /* There really is more here ... */
1686 typedef struct user_struct {
1687 struct user_struct *next, *prev;
1688 uint16 vuid; /* Tag for this entry. */
1689 uid_t uid; /* uid of a validated user */
1690 gid_t gid; /* gid of a validated user */
1692 userdom_struct user;
1699 /* following groups stuff added by ih */
1700 /* This groups info is needed for when we become_user() for this uid */
1704 NT_USER_TOKEN *nt_user_token;
1706 DATA_BLOB session_key;
1708 char *session_keystr; /* used by utmp and pam session code.
1712 struct auth_serversupplied_info *server_info;
1714 struct auth_ntlmssp_state *auth_ntlmssp_state;
1718 struct unix_error_map {
1726 * Size of new password account encoding string. This is enough space to
1727 * hold 11 ACB characters, plus the surrounding [] and a terminating null.
1728 * Do not change unless you are adding new ACB bits!
1731 #define NEW_PW_FORMAT_SPACE_PADDED_LEN 14
1734 Do you want session setups at user level security with a invalid
1735 password to be rejected or allowed in as guest? WinNT rejects them
1736 but it can be a pain as it means "net view" needs to use a password
1738 You have 3 choices in the setting of map_to_guest:
1740 "NEVER_MAP_TO_GUEST" means session setups with an invalid password
1741 are rejected. This is the default.
1743 "MAP_TO_GUEST_ON_BAD_USER" means session setups with an invalid password
1744 are rejected, unless the username does not exist, in which case it
1745 is treated as a guest login
1747 "MAP_TO_GUEST_ON_BAD_PASSWORD" means session setups with an invalid password
1748 are treated as a guest login
1750 Note that map_to_guest only has an effect in user or server
1754 #define NEVER_MAP_TO_GUEST 0
1755 #define MAP_TO_GUEST_ON_BAD_USER 1
1756 #define MAP_TO_GUEST_ON_BAD_PASSWORD 2
1757 #define MAP_TO_GUEST_ON_BAD_UID 3
1759 #define SAFE_NETBIOS_CHARS ". -_"
1761 /* generic iconv conversion structure */
1762 typedef struct _smb_iconv_t {
1763 size_t (*direct)(void *cd, const char **inbuf, size_t *inbytesleft,
1764 char **outbuf, size_t *outbytesleft);
1765 size_t (*pull)(void *cd, const char **inbuf, size_t *inbytesleft,
1766 char **outbuf, size_t *outbytesleft);
1767 size_t (*push)(void *cd, const char **inbuf, size_t *inbytesleft,
1768 char **outbuf, size_t *outbytesleft);
1769 void *cd_direct, *cd_pull, *cd_push;
1770 char *from_name, *to_name;
1773 /* The maximum length of a trust account password.
1774 Used when we randomly create it, 15 char passwords
1775 exceed NT4's max password length */
1777 #define DEFAULT_TRUST_ACCOUNT_PASSWORD_LENGTH 14
1779 #include "popt_common.h"
1783 #define LDAP_PORT 389
1786 /* used by the IP comparison function */
1792 /* Used by the SMB signing functions. */
1794 typedef struct smb_sign_info {
1795 void (*sign_outgoing_message)(char *outbuf, struct smb_sign_info *si);
1796 BOOL (*check_incoming_message)(char *inbuf, struct smb_sign_info *si, BOOL must_be_ok);
1797 void (*free_signing_context)(struct smb_sign_info *si);
1798 void *signing_context;
1800 BOOL negotiated_smb_signing;
1801 BOOL allow_smb_signing;
1803 BOOL mandatory_signing;
1804 BOOL seen_valid; /* Have I ever seen a validly signed packet? */
1814 struct ea_list *next, *prev;
1815 struct ea_struct ea;
1818 /* EA names used internally in Samba. KEEP UP TO DATE with prohibited_ea_names in trans2.c !. */
1819 #define SAMBA_POSIX_INHERITANCE_EA_NAME "user.SAMBA_PAI"
1820 /* EA to use for DOS attributes */
1821 #define SAMBA_XATTR_DOS_ATTRIB "user.DOSATTRIB"
1826 uint16 time_hi_and_version;
1830 #define UUID_SIZE 16
1832 #define UUID_FLAT_SIZE 16
1833 typedef struct uuid_flat {
1834 uint8 info[UUID_FLAT_SIZE];
1837 /* map readonly options */
1838 enum mapreadonly_options {MAP_READONLY_NO, MAP_READONLY_YES, MAP_READONLY_PERMISSIONS};
1840 /* usershare error codes. */
1841 enum usershare_err {
1843 USERSHARE_MALFORMED_FILE,
1844 USERSHARE_BAD_VERSION,
1845 USERSHARE_MALFORMED_PATH,
1846 USERSHARE_MALFORMED_COMMENT_DEF,
1847 USERSHARE_MALFORMED_ACL_DEF,
1849 USERSHARE_PATH_NOT_ABSOLUTE,
1850 USERSHARE_PATH_IS_DENIED,
1851 USERSHARE_PATH_NOT_ALLOWED,
1852 USERSHARE_PATH_NOT_DIRECTORY,
1856 /* Different reasons for closing a file. */
1857 enum file_close_type {NORMAL_CLOSE=0,SHUTDOWN_CLOSE,ERROR_CLOSE};