Merge from HEAD client-side authentication changes:
[samba.git] / source / libsmb / clientgen.c
1 /* 
2    Unix SMB/CIFS implementation.
3    SMB client generic functions
4    Copyright (C) Andrew Tridgell 1994-1998
5    
6    This program is free software; you can redistribute it and/or modify
7    it under the terms of the GNU General Public License as published by
8    the Free Software Foundation; either version 2 of the License, or
9    (at your option) any later version.
10    
11    This program is distributed in the hope that it will be useful,
12    but WITHOUT ANY WARRANTY; without even the implied warranty of
13    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
14    GNU General Public License for more details.
15    
16    You should have received a copy of the GNU General Public License
17    along with this program; if not, write to the Free Software
18    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
19 */
20
21 #define NO_SYSLOG
22
23 #include "includes.h"
24
25 /****************************************************************************
26  Change the timeout (in milliseconds).
27 ****************************************************************************/
28
29 unsigned int cli_set_timeout(struct cli_state *cli, unsigned int timeout)
30 {
31         unsigned int old_timeout = cli->timeout;
32         cli->timeout = timeout;
33         return old_timeout;
34 }
35
36 /****************************************************************************
37  Change the port number used to call on.
38 ****************************************************************************/
39
40 int cli_set_port(struct cli_state *cli, int port)
41 {
42         cli->port = port;
43         return port;
44 }
45
46 /****************************************************************************
47  Read an smb from a fd ignoring all keepalive packets. Note that the buffer 
48  *MUST* be of size BUFFER_SIZE+SAFETY_MARGIN.
49  The timeout is in milliseconds
50
51  This is exactly the same as receive_smb except that it never returns
52  a session keepalive packet (just as receive_smb used to do).
53  receive_smb was changed to return keepalives as the oplock processing means this call
54  should never go into a blocking read.
55 ****************************************************************************/
56
57 static BOOL client_receive_smb(int fd,char *buffer, unsigned int timeout)
58 {
59         BOOL ret;
60
61         for(;;) {
62                 ret = receive_smb(fd, buffer, timeout);
63
64                 if (!ret) {
65                         DEBUG(10,("client_receive_smb failed\n"));
66                         show_msg(buffer);
67                         return ret;
68                 }
69
70                 /* Ignore session keepalive packets. */
71                 if(CVAL(buffer,0) != SMBkeepalive)
72                         break;
73         }
74         show_msg(buffer);
75         return ret;
76 }
77
78 /****************************************************************************
79  Recv an smb.
80 ****************************************************************************/
81
82 BOOL cli_receive_smb(struct cli_state *cli)
83 {
84         extern int smb_read_error;
85         BOOL ret;
86
87         /* fd == -1 causes segfaults -- Tom (tom@ninja.nl) */
88         if (cli->fd == -1)
89                 return False; 
90
91  again:
92         ret = client_receive_smb(cli->fd,cli->inbuf,cli->timeout);
93         
94         if (ret) {
95                 /* it might be an oplock break request */
96                 if (!(CVAL(cli->inbuf, smb_flg) & FLAG_REPLY) &&
97                     CVAL(cli->inbuf,smb_com) == SMBlockingX &&
98                     SVAL(cli->inbuf,smb_vwv6) == 0 &&
99                     SVAL(cli->inbuf,smb_vwv7) == 0) {
100                         if (cli->oplock_handler) {
101                                 int fnum = SVAL(cli->inbuf,smb_vwv2);
102                                 unsigned char level = CVAL(cli->inbuf,smb_vwv3+1);
103                                 if (!cli->oplock_handler(cli, fnum, level)) return False;
104                         }
105                         /* try to prevent loops */
106                         SCVAL(cli->inbuf,smb_com,0xFF);
107                         goto again;
108                 }
109         }
110
111         /* If the server is not responding, note that now */
112
113         if (!ret) {
114                 cli->smb_rw_error = smb_read_error;
115                 close(cli->fd);
116                 cli->fd = -1;
117                 return ret;
118         }
119
120         if (!cli_check_sign_mac(cli)) {
121                 DEBUG(0, ("SMB Signiture verification failed on incoming packet!\n"));
122                 return False;
123         };
124         return True;
125 }
126
127 /****************************************************************************
128  Send an smb to a fd.
129 ****************************************************************************/
130
131 BOOL cli_send_smb(struct cli_state *cli)
132 {
133         size_t len;
134         size_t nwritten=0;
135         ssize_t ret;
136
137         /* fd == -1 causes segfaults -- Tom (tom@ninja.nl) */
138         if (cli->fd == -1)
139                 return False;
140
141         cli_caclulate_sign_mac(cli);
142
143         len = smb_len(cli->outbuf) + 4;
144
145         while (nwritten < len) {
146                 ret = write_socket(cli->fd,cli->outbuf+nwritten,len - nwritten);
147                 if (ret <= 0) {
148                         close(cli->fd);
149                         cli->fd = -1;
150                         cli->smb_rw_error = WRITE_ERROR;
151                         DEBUG(0,("Error writing %d bytes to client. %d (%s)\n",
152                                 (int)len,(int)ret, strerror(errno) ));
153                         return False;
154                 }
155                 nwritten += ret;
156         }
157         return True;
158 }
159
160 /****************************************************************************
161  Setup basics in a outgoing packet.
162 ****************************************************************************/
163
164 void cli_setup_packet(struct cli_state *cli)
165 {
166         cli->rap_error = 0;
167         SSVAL(cli->outbuf,smb_pid,cli->pid);
168         SSVAL(cli->outbuf,smb_uid,cli->vuid);
169         SSVAL(cli->outbuf,smb_mid,cli->mid);
170         if (cli->protocol > PROTOCOL_CORE) {
171                 uint16 flags2;
172                 SCVAL(cli->outbuf,smb_flg,0x8);
173                 flags2 = FLAGS2_LONG_PATH_COMPONENTS;
174                 if (cli->capabilities & CAP_UNICODE)
175                         flags2 |= FLAGS2_UNICODE_STRINGS;
176                 if (cli->capabilities & CAP_STATUS32)
177                         flags2 |= FLAGS2_32_BIT_ERROR_CODES;
178                 if (cli->use_spnego)
179                         flags2 |= FLAGS2_EXTENDED_SECURITY;
180                 if (cli->sign_info.use_smb_signing 
181                     || cli->sign_info.temp_smb_signing)
182                         flags2 |= FLAGS2_SMB_SECURITY_SIGNATURES;
183                 SSVAL(cli->outbuf,smb_flg2, flags2);
184         }
185 }
186
187 /****************************************************************************
188  Setup the bcc length of the packet from a pointer to the end of the data.
189 ****************************************************************************/
190
191 void cli_setup_bcc(struct cli_state *cli, void *p)
192 {
193         set_message_bcc(cli->outbuf, PTR_DIFF(p, smb_buf(cli->outbuf)));
194 }
195
196 /****************************************************************************
197  Initialise credentials of a client structure.
198 ****************************************************************************/
199
200 void cli_init_creds(struct cli_state *cli, const struct ntuser_creds *usr)
201 {
202         /* copy_nt_creds(&cli->usr, usr); */
203         safe_strcpy(cli->domain   , usr->domain   , sizeof(usr->domain   )-1);
204         safe_strcpy(cli->user_name, usr->user_name, sizeof(usr->user_name)-1);
205         memcpy(&cli->pwd, &usr->pwd, sizeof(usr->pwd));
206         cli->ntlmssp_flags = usr->ntlmssp_flags;
207         cli->ntlmssp_cli_flgs = usr != NULL ? usr->ntlmssp_flags : 0;
208
209         DEBUG(10,("cli_init_creds: user %s domain %s flgs: %x\nntlmssp_cli_flgs:%x\n",
210                cli->user_name, cli->domain,
211                cli->ntlmssp_flags,cli->ntlmssp_cli_flgs));
212 }
213
214 /****************************************************************************
215  Initialise a client structure.
216 ****************************************************************************/
217
218 struct cli_state *cli_initialise(struct cli_state *cli)
219 {
220         BOOL alloced_cli = False;
221
222         /* Check the effective uid - make sure we are not setuid */
223         if (is_setuid_root()) {
224                 DEBUG(0,("libsmb based programs must *NOT* be setuid root.\n"));
225                 return NULL;
226         }
227
228         if (!cli) {
229                 cli = (struct cli_state *)malloc(sizeof(*cli));
230                 if (!cli)
231                         return NULL;
232                 ZERO_STRUCTP(cli);
233                 alloced_cli = True;
234         }
235
236         if (cli->initialised)
237                 cli_close_connection(cli);
238
239         ZERO_STRUCTP(cli);
240
241         cli->port = 0;
242         cli->fd = -1;
243         cli->cnum = -1;
244         cli->pid = (uint16)sys_getpid();
245         cli->mid = 1;
246         cli->vuid = UID_FIELD_INVALID;
247         cli->protocol = PROTOCOL_NT1;
248         cli->timeout = 20000; /* Timeout is in milliseconds. */
249         cli->bufsize = CLI_BUFFER_SIZE+4;
250         cli->max_xmit = cli->bufsize;
251         cli->outbuf = (char *)malloc(cli->bufsize);
252         cli->inbuf = (char *)malloc(cli->bufsize);
253         cli->oplock_handler = cli_oplock_ack;
254
255         cli->use_spnego = lp_client_use_spnego();
256
257         cli->capabilities = CAP_UNICODE | CAP_STATUS32;
258
259         /* Set the CLI_FORCE_DOSERR environment variable to test
260            client routines using DOS errors instead of STATUS32
261            ones.  This intended only as a temporary hack. */    
262         if (getenv("CLI_FORCE_DOSERR"))
263                 cli->force_dos_errors = True;
264
265         if (lp_client_signing()) 
266                 cli->sign_info.allow_smb_signing = True;
267                                    
268         if (!cli->outbuf || !cli->inbuf)
269                 goto error;
270
271         if ((cli->mem_ctx = talloc_init("cli based talloc")) == NULL)
272                 goto error;
273
274         memset(cli->outbuf, 0, cli->bufsize);
275         memset(cli->inbuf, 0, cli->bufsize);
276
277         cli->nt_pipe_fnum = 0;
278
279         cli->initialised = 1;
280         cli->allocated = alloced_cli;
281
282         return cli;
283
284         /* Clean up after malloc() error */
285
286  error:
287
288         SAFE_FREE(cli->inbuf);
289         SAFE_FREE(cli->outbuf);
290
291         if (alloced_cli)
292                 SAFE_FREE(cli);
293
294         return NULL;
295 }
296
297 /****************************************************************************
298  Close a client connection and free the memory without destroying cli itself.
299 ****************************************************************************/
300
301 void cli_close_connection(struct cli_state *cli)
302 {
303         SAFE_FREE(cli->outbuf);
304         SAFE_FREE(cli->inbuf);
305
306         data_blob_free(&cli->secblob);
307
308         if (cli->mem_ctx) {
309                 talloc_destroy(cli->mem_ctx);
310                 cli->mem_ctx = NULL;
311         }
312
313         if (cli->fd != -1) 
314                 close(cli->fd);
315         cli->fd = -1;
316         cli->smb_rw_error = 0;
317 }
318
319 /****************************************************************************
320  Shutdown a client structure.
321 ****************************************************************************/
322
323 void cli_shutdown(struct cli_state *cli)
324 {
325         BOOL allocated = cli->allocated;
326         cli_close_connection(cli);
327         ZERO_STRUCTP(cli);
328         if (allocated)
329                 free(cli);
330 }
331
332 /****************************************************************************
333  Set socket options on a open connection.
334 ****************************************************************************/
335
336 void cli_sockopt(struct cli_state *cli, const char *options)
337 {
338         set_socket_options(cli->fd, options);
339 }
340
341 /****************************************************************************
342  Set the PID to use for smb messages. Return the old pid.
343 ****************************************************************************/
344
345 uint16 cli_setpid(struct cli_state *cli, uint16 pid)
346 {
347         uint16 ret = cli->pid;
348         cli->pid = pid;
349         return ret;
350 }
351
352 /****************************************************************************
353 Send a keepalive packet to the server
354 ****************************************************************************/
355 BOOL cli_send_keepalive(struct cli_state *cli)
356 {
357         if (cli->fd == -1) {
358                 DEBUG(3, ("cli_send_keepalive: fd == -1\n"));
359                 return False;
360         }
361         if (!send_keepalive(cli->fd)) {
362                 close(cli->fd);
363                 cli->fd = -1;
364                 DEBUG(0,("Error sending keepalive packet to client.\n"));
365                 return False;
366         }
367         return True;
368 }