2 Unix SMB/CIFS implementation.
3 Samba utility functions
4 Copyright (C) Andrew Tridgell 1992-1998
5 Copyright (C) Tim Potter 2000-2001
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 2 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program; if not, write to the Free Software
19 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
24 /* the last IP received from */
25 struct in_addr lastip;
27 /* the last port received from */
30 int smb_read_error = 0;
32 static char *get_socket_addr(int fd)
35 struct sockaddr_in *sockin = (struct sockaddr_in *) (&sa);
36 socklen_t length = sizeof(sa);
37 static fstring addr_buf;
39 fstrcpy(addr_buf,"0.0.0.0");
45 if (getsockname(fd, &sa, &length) < 0) {
46 DEBUG(0,("getsockname failed. Error was %s\n", strerror(errno) ));
50 fstrcpy(addr_buf,(char *)inet_ntoa(sockin->sin_addr));
55 static int get_socket_port(int fd)
58 struct sockaddr_in *sockin = (struct sockaddr_in *) (&sa);
59 socklen_t length = sizeof(sa);
64 if (getsockname(fd, &sa, &length) < 0) {
65 DEBUG(0,("getpeername failed. Error was %s\n", strerror(errno) ));
69 return ntohs(sockin->sin_port);
72 /****************************************************************************
73 Determine if a file descriptor is in fact a socket.
74 ****************************************************************************/
76 BOOL is_a_socket(int fd)
81 return(getsockopt(fd, SOL_SOCKET, SO_TYPE, (char *)&v, &l) == 0);
84 enum SOCK_OPT_TYPES {OPT_BOOL,OPT_INT,OPT_ON};
86 typedef struct smb_socket_option {
94 static const smb_socket_option socket_options[] = {
95 {"SO_KEEPALIVE", SOL_SOCKET, SO_KEEPALIVE, 0, OPT_BOOL},
96 {"SO_REUSEADDR", SOL_SOCKET, SO_REUSEADDR, 0, OPT_BOOL},
97 {"SO_BROADCAST", SOL_SOCKET, SO_BROADCAST, 0, OPT_BOOL},
99 {"TCP_NODELAY", IPPROTO_TCP, TCP_NODELAY, 0, OPT_BOOL},
102 {"TCP_KEEPCNT", IPPROTO_TCP, TCP_KEEPCNT, 0, OPT_INT},
105 {"TCP_KEEPIDLE", IPPROTO_TCP, TCP_KEEPIDLE, 0, OPT_INT},
108 {"TCP_KEEPINTVL", IPPROTO_TCP, TCP_KEEPINTVL, 0, OPT_INT},
110 #ifdef IPTOS_LOWDELAY
111 {"IPTOS_LOWDELAY", IPPROTO_IP, IP_TOS, IPTOS_LOWDELAY, OPT_ON},
113 #ifdef IPTOS_THROUGHPUT
114 {"IPTOS_THROUGHPUT", IPPROTO_IP, IP_TOS, IPTOS_THROUGHPUT, OPT_ON},
117 {"SO_REUSEPORT", SOL_SOCKET, SO_REUSEPORT, 0, OPT_BOOL},
120 {"SO_SNDBUF", SOL_SOCKET, SO_SNDBUF, 0, OPT_INT},
123 {"SO_RCVBUF", SOL_SOCKET, SO_RCVBUF, 0, OPT_INT},
126 {"SO_SNDLOWAT", SOL_SOCKET, SO_SNDLOWAT, 0, OPT_INT},
129 {"SO_RCVLOWAT", SOL_SOCKET, SO_RCVLOWAT, 0, OPT_INT},
132 {"SO_SNDTIMEO", SOL_SOCKET, SO_SNDTIMEO, 0, OPT_INT},
135 {"SO_RCVTIMEO", SOL_SOCKET, SO_RCVTIMEO, 0, OPT_INT},
139 /****************************************************************************
140 Print socket options.
141 ****************************************************************************/
143 static void print_socket_options(int s)
147 const smb_socket_option *p = &socket_options[0];
149 /* wrapped in if statement to prevent streams leak in SCO Openserver 5.0 */
150 /* reported on samba-technical --jerry */
151 if ( DEBUGLEVEL >= 5 ) {
152 for (; p->name != NULL; p++) {
153 if (getsockopt(s, p->level, p->option, (void *)&value, &vlen) == -1) {
154 DEBUG(5,("Could not test socket option %s.\n", p->name));
156 DEBUG(5,("socket option %s = %d\n",p->name,value));
162 /****************************************************************************
163 Set user socket options.
164 ****************************************************************************/
166 void set_socket_options(int fd, const char *options)
170 while (next_token(&options,tok," \t,", sizeof(tok))) {
174 BOOL got_value = False;
176 if ((p = strchr_m(tok,'='))) {
182 for (i=0;socket_options[i].name;i++)
183 if (strequal(socket_options[i].name,tok))
186 if (!socket_options[i].name) {
187 DEBUG(0,("Unknown socket option %s\n",tok));
191 switch (socket_options[i].opttype) {
194 ret = setsockopt(fd,socket_options[i].level,
195 socket_options[i].option,(char *)&value,sizeof(int));
200 DEBUG(0,("syntax error - %s does not take a value\n",tok));
203 int on = socket_options[i].value;
204 ret = setsockopt(fd,socket_options[i].level,
205 socket_options[i].option,(char *)&on,sizeof(int));
211 DEBUG(0,("Failed to set socket option %s (Error %s)\n",tok, strerror(errno) ));
214 print_socket_options(fd);
217 /****************************************************************************
219 ****************************************************************************/
221 ssize_t read_udp_socket(int fd,char *buf,size_t len)
224 struct sockaddr_in sock;
225 socklen_t socklen = sizeof(sock);
227 memset((char *)&sock,'\0',socklen);
228 memset((char *)&lastip,'\0',sizeof(lastip));
229 ret = (ssize_t)sys_recvfrom(fd,buf,len,0,(struct sockaddr *)&sock,&socklen);
231 DEBUG(2,("read socket failed. ERRNO=%s\n",strerror(errno)));
235 lastip = sock.sin_addr;
236 lastport = ntohs(sock.sin_port);
238 DEBUG(10,("read_udp_socket: lastip %s lastport %d read: %lu\n",
239 inet_ntoa(lastip), lastport, (unsigned long)ret));
246 Socket routines from HEAD - maybe re-enable in future. JRA.
248 /****************************************************************************
249 Work out if we've timed out.
250 ****************************************************************************/
252 static BOOL timeout_until(struct timeval *timeout, const struct timeval *endtime)
259 t_dif = usec_time_diff(endtime, &now);
264 timeout->tv_sec = (t_dif / (SMB_BIG_INT)1000000);
265 timeout->tv_usec = (t_dif % (SMB_BIG_INT)1000000);
269 /****************************************************************************
270 Read data from the client, reading exactly N bytes, or until endtime timeout.
271 Use with a non-blocking socket if endtime != NULL.
272 ****************************************************************************/
274 ssize_t read_data_until(int fd,char *buffer,size_t N, const struct timeval *endtime)
283 if (endtime != NULL) {
285 struct timeval timeout;
288 if (!timeout_until(&timeout, endtime)) {
289 DEBUG(10,("read_data_until: read timed out\n"));
290 smb_read_error = READ_TIMEOUT;
297 /* Select but ignore EINTR. */
298 selrtn = sys_select_intr(fd+1, &r_fds, NULL, NULL, &timeout);
300 /* something is wrong. Maybe the socket is dead? */
301 DEBUG(0,("read_data_until: select error = %s.\n", strerror(errno) ));
302 smb_read_error = READ_ERROR;
306 /* Did we timeout ? */
308 DEBUG(10,("read_data_until: select timed out.\n"));
309 smb_read_error = READ_TIMEOUT;
314 ret = sys_read(fd,buffer + total,N - total);
317 DEBUG(10,("read_data_until: read of %d returned 0. Error = %s\n", (int)(N - total), strerror(errno) ));
318 smb_read_error = READ_EOF;
323 if (errno == EAGAIN) {
324 /* Non-blocking socket with no data available. Try select again. */
327 DEBUG(0,("read_data_until: read failure for %d. Error = %s\n", (int)(N - total), strerror(errno) ));
328 smb_read_error = READ_ERROR;
333 return (ssize_t)total;
337 /****************************************************************************
338 Read data from a socket with a timout in msec.
339 mincount = if timeout, minimum to read before returning
340 maxcount = number to be read.
341 time_out = timeout in milliseconds
342 ****************************************************************************/
344 ssize_t read_socket_with_timeout(int fd,char *buf,size_t mincnt,size_t maxcnt,unsigned int time_out)
350 struct timeval timeout;
352 /* just checking .... */
360 if (mincnt == 0) mincnt = maxcnt;
362 while (nread < mincnt) {
363 readret = sys_read(fd, buf + nread, maxcnt - nread);
366 DEBUG(5,("read_socket_with_timeout: blocking read. EOF from client.\n"));
367 smb_read_error = READ_EOF;
372 DEBUG(0,("read_socket_with_timeout: read error = %s.\n", strerror(errno) ));
373 smb_read_error = READ_ERROR;
378 return((ssize_t)nread);
381 /* Most difficult - timeout read */
382 /* If this is ever called on a disk file and
383 mincnt is greater then the filesize then
384 system performance will suffer severely as
385 select always returns true on disk files */
387 /* Set initial timeout */
388 timeout.tv_sec = (time_t)(time_out / 1000);
389 timeout.tv_usec = (long)(1000 * (time_out % 1000));
391 for (nread=0; nread < mincnt; ) {
395 selrtn = sys_select_intr(fd+1,&fds,NULL,NULL,&timeout);
399 /* something is wrong. Maybe the socket is dead? */
400 DEBUG(0,("read_socket_with_timeout: timeout read. select error = %s.\n", strerror(errno) ));
401 smb_read_error = READ_ERROR;
405 /* Did we timeout ? */
407 DEBUG(10,("read_socket_with_timeout: timeout read. select timed out.\n"));
408 smb_read_error = READ_TIMEOUT;
412 readret = sys_read(fd, buf+nread, maxcnt-nread);
415 /* we got EOF on the file descriptor */
416 DEBUG(5,("read_socket_with_timeout: timeout read. EOF from client.\n"));
417 smb_read_error = READ_EOF;
422 /* the descriptor is probably dead */
423 DEBUG(0,("read_socket_with_timeout: timeout read. read error = %s.\n", strerror(errno) ));
424 smb_read_error = READ_ERROR;
431 /* Return the number we got */
432 return (ssize_t)nread;
435 /****************************************************************************
436 Read data from the client, reading exactly N bytes.
437 ****************************************************************************/
439 ssize_t read_data(int fd,char *buffer,size_t N)
447 ret = sys_read(fd,buffer + total,N - total);
450 DEBUG(10,("read_data: read of %d returned 0. Error = %s\n", (int)(N - total), strerror(errno) ));
451 smb_read_error = READ_EOF;
456 DEBUG(0,("read_data: read failure for %d. Error = %s\n", (int)(N - total), strerror(errno) ));
457 smb_read_error = READ_ERROR;
462 return (ssize_t)total;
465 /****************************************************************************
466 Read data from a socket, reading exactly N bytes.
467 ****************************************************************************/
469 static ssize_t read_socket_data(int fd,char *buffer,size_t N)
477 ret = sys_read(fd,buffer + total,N - total);
480 DEBUG(10,("read_socket_data: recv of %d returned 0. Error = %s\n", (int)(N - total), strerror(errno) ));
481 smb_read_error = READ_EOF;
486 DEBUG(0,("read_socket_data: recv failure for %d. Error = %s\n", (int)(N - total), strerror(errno) ));
487 smb_read_error = READ_ERROR;
492 return (ssize_t)total;
495 /****************************************************************************
497 ****************************************************************************/
499 ssize_t write_data(int fd, const char *buffer, size_t N)
505 ret = sys_write(fd,buffer + total,N - total);
508 DEBUG(0,("write_data: write failure. Error = %s\n", strerror(errno) ));
516 return (ssize_t)total;
519 /****************************************************************************
520 Write data to a socket - use send rather than write.
521 ****************************************************************************/
523 static ssize_t write_socket_data(int fd, const char *buffer, size_t N)
529 ret = sys_send(fd,buffer + total,N - total,0);
532 DEBUG(0,("write_socket_data: write failure. Error = %s\n", strerror(errno) ));
540 return (ssize_t)total;
543 /****************************************************************************
545 ****************************************************************************/
547 ssize_t write_socket(int fd, const char *buf, size_t len)
551 DEBUG(6,("write_socket(%d,%d)\n",fd,(int)len));
552 ret = write_socket_data(fd,buf,len);
554 DEBUG(6,("write_socket(%d,%d) wrote %d\n",fd,(int)len,(int)ret));
556 DEBUG(0,("write_socket: Error writing %d bytes to socket %d: ERRNO = %s\n",
557 (int)len, fd, strerror(errno) ));
562 /****************************************************************************
563 Send a keepalive packet (rfc1002).
564 ****************************************************************************/
566 BOOL send_keepalive(int client)
568 unsigned char buf[4];
570 buf[0] = SMBkeepalive;
571 buf[1] = buf[2] = buf[3] = 0;
573 return(write_socket_data(client,(char *)buf,4) == 4);
577 /****************************************************************************
578 Read 4 bytes of a smb packet and return the smb length of the packet.
579 Store the result in the buffer.
580 This version of the function will return a length of zero on receiving
582 Timeout is in milliseconds.
583 ****************************************************************************/
585 static ssize_t read_smb_length_return_keepalive(int fd, char *inbuf, unsigned int timeout)
593 ok = (read_socket_with_timeout(fd,inbuf,4,4,timeout) == 4);
595 ok = (read_socket_data(fd,inbuf,4) == 4);
600 len = smb_len(inbuf);
601 msg_type = CVAL(inbuf,0);
603 if (msg_type == SMBkeepalive)
604 DEBUG(5,("Got keepalive packet\n"));
607 DEBUG(10,("got smb length of %lu\n",(unsigned long)len));
612 /****************************************************************************
613 Read 4 bytes of a smb packet and return the smb length of the packet.
614 Store the result in the buffer. This version of the function will
615 never return a session keepalive (length of zero).
616 Timeout is in milliseconds.
617 ****************************************************************************/
619 ssize_t read_smb_length(int fd, char *inbuf, unsigned int timeout)
624 len = read_smb_length_return_keepalive(fd, inbuf, timeout);
629 /* Ignore session keepalives. */
630 if(CVAL(inbuf,0) != SMBkeepalive)
634 DEBUG(10,("read_smb_length: got smb length of %lu\n",
635 (unsigned long)len));
640 /****************************************************************************
641 Read an smb from a fd. Note that the buffer *MUST* be of size
642 BUFFER_SIZE+SAFETY_MARGIN.
643 The timeout is in milliseconds.
644 This function will return on receipt of a session keepalive packet.
645 Doesn't check the MAC on signed packets.
646 ****************************************************************************/
648 BOOL receive_smb_raw(int fd, char *buffer, unsigned int timeout)
654 memset(buffer,'\0',smb_size + 100);
656 len = read_smb_length_return_keepalive(fd,buffer,timeout);
658 DEBUG(10,("receive_smb_raw: length < 0!\n"));
661 * Correct fix. smb_read_error may have already been
662 * set. Only set it here if not already set. Global
663 * variables still suck :-). JRA.
666 if (smb_read_error == 0)
667 smb_read_error = READ_ERROR;
672 * A WRITEX with CAP_LARGE_WRITEX can be 64k worth of data plus 65 bytes
673 * of header. Don't print the error if this fits.... JRA.
676 if (len > (BUFFER_SIZE + LARGE_WRITEX_HDR_SIZE)) {
677 DEBUG(0,("Invalid packet length! (%lu bytes).\n",(unsigned long)len));
678 if (len > BUFFER_SIZE + (SAFETY_MARGIN/2)) {
681 * Correct fix. smb_read_error may have already been
682 * set. Only set it here if not already set. Global
683 * variables still suck :-). JRA.
686 if (smb_read_error == 0)
687 smb_read_error = READ_ERROR;
694 ret = read_socket_with_timeout(fd,buffer+4,len,len,timeout);
696 ret = read_socket_data(fd,buffer+4,len);
700 if (smb_read_error == 0)
701 smb_read_error = READ_ERROR;
705 /* not all of samba3 properly checks for packet-termination of strings. This
706 ensures that we don't run off into empty space. */
707 SSVAL(buffer+4,len, 0);
713 /****************************************************************************
714 Wrapper for receive_smb_raw().
715 Checks the MAC on signed packets.
716 ****************************************************************************/
718 BOOL receive_smb(int fd, char *buffer, unsigned int timeout)
720 if (!receive_smb_raw(fd, buffer, timeout)) {
724 /* Check the incoming SMB signature. */
725 if (!srv_check_sign_mac(buffer, True)) {
726 DEBUG(0, ("receive_smb: SMB Signature verification failed on incoming packet!\n"));
727 if (smb_read_error == 0)
728 smb_read_error = READ_BAD_SIG;
735 /****************************************************************************
737 ****************************************************************************/
739 BOOL send_smb(int fd, char *buffer)
745 /* Sign the outgoing packet if required. */
746 srv_calculate_sign_mac(buffer);
748 len = smb_len(buffer) + 4;
750 while (nwritten < len) {
751 ret = write_socket(fd,buffer+nwritten,len - nwritten);
753 DEBUG(0,("Error writing %d bytes to client. %d. (%s)\n",
754 (int)len,(int)ret, strerror(errno) ));
763 /****************************************************************************
764 Open a socket of the specified type, port, and address for incoming data.
765 ****************************************************************************/
767 int open_socket_in( int type, int port, int dlevel, uint32 socket_addr, BOOL rebind )
769 struct sockaddr_in sock;
772 memset( (char *)&sock, '\0', sizeof(sock) );
774 #ifdef HAVE_SOCK_SIN_LEN
775 sock.sin_len = sizeof(sock);
777 sock.sin_port = htons( port );
778 sock.sin_family = AF_INET;
779 sock.sin_addr.s_addr = socket_addr;
781 res = socket( AF_INET, type, 0 );
784 dbgtext( "open_socket_in(): socket() call failed: " );
785 dbgtext( "%s\n", strerror( errno ) );
790 /* This block sets/clears the SO_REUSEADDR and possibly SO_REUSEPORT. */
792 int val = rebind ? 1 : 0;
793 if( setsockopt(res,SOL_SOCKET,SO_REUSEADDR,(char *)&val,sizeof(val)) == -1 ) {
794 if( DEBUGLVL( dlevel ) ) {
795 dbgtext( "open_socket_in(): setsockopt: " );
796 dbgtext( "SO_REUSEADDR = %s ", val?"True":"False" );
797 dbgtext( "on port %d failed ", port );
798 dbgtext( "with error = %s\n", strerror(errno) );
802 if( setsockopt(res,SOL_SOCKET,SO_REUSEPORT,(char *)&val,sizeof(val)) == -1 ) {
803 if( DEBUGLVL( dlevel ) ) {
804 dbgtext( "open_socket_in(): setsockopt: ");
805 dbgtext( "SO_REUSEPORT = %s ", val?"True":"False" );
806 dbgtext( "on port %d failed ", port );
807 dbgtext( "with error = %s\n", strerror(errno) );
810 #endif /* SO_REUSEPORT */
813 /* now we've got a socket - we need to bind it */
814 if( bind( res, (struct sockaddr *)&sock, sizeof(sock) ) == -1 ) {
815 if( DEBUGLVL(dlevel) && (port == SMB_PORT1 || port == SMB_PORT2 || port == NMB_PORT) ) {
816 dbgtext( "bind failed on port %d ", port );
817 dbgtext( "socket_addr = %s.\n", inet_ntoa( sock.sin_addr ) );
818 dbgtext( "Error = %s\n", strerror(errno) );
824 DEBUG( 10, ( "bind succeeded on port %d\n", port ) );
829 /****************************************************************************
830 Create an outgoing socket. timeout is in milliseconds.
831 **************************************************************************/
833 int open_socket_out(int type, struct in_addr *addr, int port ,int timeout)
835 struct sockaddr_in sock_out;
837 int connect_loop = 10;
840 /* create a socket to write to */
841 res = socket(PF_INET, type, 0);
843 DEBUG(0,("socket error (%s)\n", strerror(errno)));
847 if (type != SOCK_STREAM)
850 memset((char *)&sock_out,'\0',sizeof(sock_out));
851 putip((char *)&sock_out.sin_addr,(char *)addr);
853 sock_out.sin_port = htons( port );
854 sock_out.sin_family = PF_INET;
856 /* set it non-blocking */
857 set_blocking(res,False);
859 DEBUG(3,("Connecting to %s at port %d\n",inet_ntoa(*addr),port));
861 /* and connect it to the destination */
864 ret = connect(res,(struct sockaddr *)&sock_out,sizeof(sock_out));
866 /* Some systems return EAGAIN when they mean EINPROGRESS */
867 if (ret < 0 && (errno == EINPROGRESS || errno == EALREADY ||
868 errno == EAGAIN) && (connect_loop < timeout) ) {
869 smb_msleep(connect_loop);
870 timeout -= connect_loop;
871 connect_loop += increment;
872 if (increment < 250) {
873 /* After 8 rounds we end up at a max of 255 msec */
879 if (ret < 0 && (errno == EINPROGRESS || errno == EALREADY ||
881 DEBUG(1,("timeout connecting to %s:%d\n",inet_ntoa(*addr),port));
888 if (ret < 0 && errno == EISCONN) {
895 DEBUG(2,("error connecting to %s:%d (%s)\n",
896 inet_ntoa(*addr),port,strerror(errno)));
901 /* set it blocking again */
902 set_blocking(res,True);
907 /****************************************************************************
908 Create an outgoing TCP socket to any of the addrs. This is for
909 simultaneous connects to port 445 and 139 of a host or even a variety
910 of DC's all of which are equivalent for our purposes.
911 **************************************************************************/
913 BOOL open_any_socket_out(struct sockaddr_in *addrs, int num_addrs,
914 int timeout, int *fd_index, int *fd)
916 int i, resulting_index, res;
920 fd_set r_fds, wr_fds;
924 int connect_loop = 10000; /* 10 milliseconds */
926 timeout *= 1000; /* convert to microseconds */
928 sockets = SMB_MALLOC_ARRAY(int, num_addrs);
933 resulting_index = -1;
935 for (i=0; i<num_addrs; i++)
938 for (i=0; i<num_addrs; i++) {
939 sockets[i] = socket(PF_INET, SOCK_STREAM, 0);
942 set_blocking(sockets[i], False);
946 good_connect = False;
948 for (i=0; i<num_addrs; i++) {
950 if (sockets[i] == -1)
953 if (connect(sockets[i], (struct sockaddr *)&(addrs[i]),
954 sizeof(*addrs)) == 0) {
955 /* Rather unlikely as we are non-blocking, but it
956 * might actually happen. */
961 if (errno == EINPROGRESS || errno == EALREADY ||
963 /* These are the error messages that something is
966 } else if (errno != 0) {
967 /* There was a direct error */
974 /* All of the connect's resulted in real error conditions */
978 /* Lets see if any of the connect attempts succeeded */
984 for (i=0; i<num_addrs; i++) {
985 if (sockets[i] == -1)
987 FD_SET(sockets[i], &wr_fds);
988 FD_SET(sockets[i], &r_fds);
989 if (sockets[i]>maxfd)
994 tv.tv_usec = connect_loop;
996 res = sys_select(maxfd+1, &r_fds, &wr_fds, NULL, &tv);
1004 for (i=0; i<num_addrs; i++) {
1006 if (sockets[i] == -1)
1009 /* Stevens, Network Programming says that if there's a
1010 * successful connect, the socket is only writable. Upon an
1011 * error, it's both readable and writable. */
1013 if (FD_ISSET(sockets[i], &r_fds) &&
1014 FD_ISSET(sockets[i], &wr_fds)) {
1015 /* readable and writable, so it's an error */
1021 if (!FD_ISSET(sockets[i], &r_fds) &&
1022 FD_ISSET(sockets[i], &wr_fds)) {
1023 /* Only writable, so it's connected */
1024 resulting_index = i;
1031 timeout -= connect_loop;
1034 connect_loop *= 1.5;
1035 if (connect_loop > timeout)
1036 connect_loop = timeout;
1040 for (i=0; i<num_addrs; i++) {
1041 if (i == resulting_index)
1043 if (sockets[i] >= 0)
1047 if (resulting_index >= 0) {
1048 *fd_index = resulting_index;
1049 *fd = sockets[*fd_index];
1050 set_blocking(*fd, True);
1055 return (resulting_index >= 0);
1057 /****************************************************************************
1058 Open a connected UDP socket to host on port
1059 **************************************************************************/
1061 int open_udp_socket(const char *host, int port)
1063 int type = SOCK_DGRAM;
1064 struct sockaddr_in sock_out;
1066 struct in_addr *addr;
1068 addr = interpret_addr2(host);
1070 res = socket(PF_INET, type, 0);
1075 memset((char *)&sock_out,'\0',sizeof(sock_out));
1076 putip((char *)&sock_out.sin_addr,(char *)addr);
1077 sock_out.sin_port = htons(port);
1078 sock_out.sin_family = PF_INET;
1080 if (connect(res,(struct sockaddr *)&sock_out,sizeof(sock_out))) {
1089 /* the following 3 client_*() functions are nasty ways of allowing
1090 some generic functions to get info that really should be hidden in
1091 particular modules */
1092 static int client_fd = -1;
1094 void client_setfd(int fd)
1099 char *client_name(void)
1101 return get_peer_name(client_fd,False);
1104 char *client_addr(void)
1106 return get_peer_addr(client_fd);
1109 char *client_socket_addr(void)
1111 return get_socket_addr(client_fd);
1114 int client_socket_port(void)
1116 return get_socket_port(client_fd);
1119 struct in_addr *client_inaddr(struct sockaddr *sa)
1121 struct sockaddr_in *sockin = (struct sockaddr_in *) (sa);
1122 socklen_t length = sizeof(*sa);
1124 if (getpeername(client_fd, sa, &length) < 0) {
1125 DEBUG(0,("getpeername failed. Error was %s\n", strerror(errno) ));
1129 return &sockin->sin_addr;
1132 /*******************************************************************
1133 Matchname - determine if host name matches IP address. Used to
1134 confirm a hostname lookup to prevent spoof attacks.
1135 ******************************************************************/
1137 static BOOL matchname(char *remotehost,struct in_addr addr)
1142 if ((hp = sys_gethostbyname(remotehost)) == 0) {
1143 DEBUG(0,("sys_gethostbyname(%s): lookup failure.\n", remotehost));
1148 * Make sure that gethostbyname() returns the "correct" host name.
1149 * Unfortunately, gethostbyname("localhost") sometimes yields
1150 * "localhost.domain". Since the latter host name comes from the
1151 * local DNS, we just have to trust it (all bets are off if the local
1152 * DNS is perverted). We always check the address list, though.
1155 if (!strequal(remotehost, hp->h_name)
1156 && !strequal(remotehost, "localhost")) {
1157 DEBUG(0,("host name/name mismatch: %s != %s\n",
1158 remotehost, hp->h_name));
1162 /* Look up the host address in the address list we just got. */
1163 for (i = 0; hp->h_addr_list[i]; i++) {
1164 if (memcmp(hp->h_addr_list[i], (char *) & addr, sizeof(addr)) == 0)
1169 * The host name does not map to the original host address. Perhaps
1170 * someone has compromised a name server. More likely someone botched
1171 * it, but that could be dangerous, too.
1174 DEBUG(0,("host name/address mismatch: %s != %s\n",
1175 inet_ntoa(addr), hp->h_name));
1179 /*******************************************************************
1180 Return the DNS name of the remote end of a socket.
1181 ******************************************************************/
1183 char *get_peer_name(int fd, BOOL force_lookup)
1185 static pstring name_buf;
1187 static fstring addr_buf;
1189 struct in_addr addr;
1192 /* reverse lookups can be *very* expensive, and in many
1193 situations won't work because many networks don't link dhcp
1194 with dns. To avoid the delay we avoid the lookup if
1196 if (!lp_hostname_lookups() && (force_lookup == False)) {
1197 return get_peer_addr(fd);
1200 p = get_peer_addr(fd);
1202 /* it might be the same as the last one - save some DNS work */
1203 if (strcmp(p, addr_buf) == 0)
1206 pstrcpy(name_buf,"UNKNOWN");
1210 fstrcpy(addr_buf, p);
1212 addr = *interpret_addr2(p);
1214 /* Look up the remote host name. */
1215 if ((hp = gethostbyaddr((char *)&addr.s_addr, sizeof(addr.s_addr), AF_INET)) == 0) {
1216 DEBUG(1,("Gethostbyaddr failed for %s\n",p));
1217 pstrcpy(name_buf, p);
1219 pstrcpy(name_buf,(char *)hp->h_name);
1220 if (!matchname(name_buf, addr)) {
1221 DEBUG(0,("Matchname failed on %s %s\n",name_buf,p));
1222 pstrcpy(name_buf,"UNKNOWN");
1226 /* can't pass the same source and dest strings in when you
1227 use --enable-developer or the clobber_region() call will
1230 pstrcpy( tmp_name, name_buf );
1231 alpha_strcpy(name_buf, tmp_name, "_-.", sizeof(name_buf));
1232 if (strstr(name_buf,"..")) {
1233 pstrcpy(name_buf, "UNKNOWN");
1239 /*******************************************************************
1240 Return the IP addr of the remote end of a socket as a string.
1241 ******************************************************************/
1243 char *get_peer_addr(int fd)
1246 struct sockaddr_in *sockin = (struct sockaddr_in *) (&sa);
1247 socklen_t length = sizeof(sa);
1248 static fstring addr_buf;
1250 fstrcpy(addr_buf,"0.0.0.0");
1256 if (getpeername(fd, &sa, &length) < 0) {
1257 DEBUG(0,("getpeername failed. Error was %s\n", strerror(errno) ));
1261 fstrcpy(addr_buf,(char *)inet_ntoa(sockin->sin_addr));
1266 /*******************************************************************
1267 Create protected unix domain socket.
1269 Some unixes cannot set permissions on a ux-dom-sock, so we
1270 have to make sure that the directory contains the protection
1271 permissions instead.
1272 ******************************************************************/
1274 int create_pipe_sock(const char *socket_dir,
1275 const char *socket_name,
1278 #ifdef HAVE_UNIXSOCKET
1279 struct sockaddr_un sunaddr;
1285 old_umask = umask(0);
1287 /* Create the socket directory or reuse the existing one */
1289 if (lstat(socket_dir, &st) == -1) {
1290 if (errno == ENOENT) {
1291 /* Create directory */
1292 if (mkdir(socket_dir, dir_perms) == -1) {
1293 DEBUG(0, ("error creating socket directory "
1294 "%s: %s\n", socket_dir,
1299 DEBUG(0, ("lstat failed on socket directory %s: %s\n",
1300 socket_dir, strerror(errno)));
1304 /* Check ownership and permission on existing directory */
1305 if (!S_ISDIR(st.st_mode)) {
1306 DEBUG(0, ("socket directory %s isn't a directory\n",
1310 if ((st.st_uid != sec_initial_uid()) ||
1311 ((st.st_mode & 0777) != dir_perms)) {
1312 DEBUG(0, ("invalid permissions on socket directory "
1313 "%s\n", socket_dir));
1318 /* Create the socket file */
1320 sock = socket(AF_UNIX, SOCK_STREAM, 0);
1327 pstr_sprintf(path, "%s/%s", socket_dir, socket_name);
1330 memset(&sunaddr, 0, sizeof(sunaddr));
1331 sunaddr.sun_family = AF_UNIX;
1332 safe_strcpy(sunaddr.sun_path, path, sizeof(sunaddr.sun_path)-1);
1334 if (bind(sock, (struct sockaddr *)&sunaddr, sizeof(sunaddr)) == -1) {
1335 DEBUG(0, ("bind failed on pipe socket %s: %s\n", path,
1340 if (listen(sock, 5) == -1) {
1341 DEBUG(0, ("listen failed on pipe socket %s: %s\n", path,
1357 DEBUG(0, ("create_pipe_sock: No Unix sockets on this system\n"));
1359 #endif /* HAVE_UNIXSOCKET */