1
0
mirror of https://github.com/samba-team/samba.git synced 2025-01-21 18:04:06 +03:00
Luke Leighton 0ce128e355 delineation between smb and msrpc more marked. smbd now constructs
pdus, and then feeds them over either a "local" function call or a "remote"
function call to an msrpc service.  the "remote" msrpc daemon, on the
other side of a unix socket, then calls the same "local" function that
smbd would, if the msrpc service were being run from inside smbd.

this allows a transition from local msrpc services (inside the same smbd
process) to remote (over a unix socket).

removed reference to pipes_struct in msrpc services.  all msrpc processing
functions take rpcsrv_struct which is a structure containing state info
for the msrpc functions to decode and create pdus.

created become_vuser() which does everything not related to connection_struct
that become_user() does.

removed, as best i could, connection_struct dependencies from the nt spoolss
printing code.

todo: remove dcinfo from rpcsrv_struct because this stores NETLOGON-specific
info on a per-connection basis, and if the connection dies then so does
the info, and that's a fairly serious problem.

had to put pretty much everything that is in user_struct into parse_creds.c
to feed unix user info over to the msrpc daemons.  why?  because it's
expensive to do unix password/group database lookups, and it's definitely
expensive to do nt user profile lookups, not to mention pretty difficult
and if you did either of these it would introduce a complication /
unnecessary interdependency.  so, send uid/gid/num_groups/gid_t* +
SID+num_rids+domain_group_rids* + unix username + nt username + nt domain
+ user session key etc.  this is the MINIMUM info identified so far that's
actually implemented.  missing bits include the called and calling
netbios names etc.  (basically, anything that can be loaded into
standard_sub() and standard_sub_basic()...)
(This used to be commit aa3c659a8dba0437c17c60055a6ed30fdfecdb6d)
1999-12-12 01:25:49 +00:00

259 lines
7.0 KiB
C

/*
* Unix SMB/Netbios implementation.
* Version 1.9.
* RPC Pipe client / server routines
* Copyright (C) Andrew Tridgell 1992-1997,
* Copyright (C) Luke Kenneth Casson Leighton 1996-1997,
* Copyright (C) Paul Ashton 1997.
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 2 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, write to the Free Software
* Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/
#include "includes.h"
#include "nterr.h"
extern int DEBUGLEVEL;
/*******************************************************************
reg_reply_unknown_1
********************************************************************/
static void reg_reply_close(REG_Q_CLOSE *q_r,
prs_struct *rdata)
{
REG_R_CLOSE r_u;
/* set up the REG unknown_1 response */
bzero(r_u.pol.data, POL_HND_SIZE);
/* close the policy handle */
if (close_policy_hnd(&(q_r->pol)))
{
r_u.status = 0;
}
else
{
r_u.status = 0xC0000000 | NT_STATUS_OBJECT_NAME_INVALID;
}
DEBUG(5,("reg_unknown_1: %d\n", __LINE__));
/* store the response in the SMB stream */
reg_io_r_close("", &r_u, rdata, 0);
DEBUG(5,("reg_unknown_1: %d\n", __LINE__));
}
/*******************************************************************
api_reg_close
********************************************************************/
static void api_reg_close( rpcsrv_struct *p, prs_struct *data,
prs_struct *rdata )
{
REG_Q_CLOSE q_r;
/* grab the reg unknown 1 */
reg_io_q_close("", &q_r, data, 0);
/* construct reply. always indicate success */
reg_reply_close(&q_r, rdata);
}
/*******************************************************************
reg_reply_open
********************************************************************/
static void reg_reply_open(REG_Q_OPEN_HKLM *q_r,
prs_struct *rdata)
{
REG_R_OPEN_HKLM r_u;
r_u.status = 0x0;
/* get a (unique) handle. open a policy on it. */
if (r_u.status == 0x0 && !open_policy_hnd(&(r_u.pol)))
{
r_u.status = 0xC0000000 | NT_STATUS_OBJECT_NAME_NOT_FOUND;
}
DEBUG(5,("reg_open: %d\n", __LINE__));
/* store the response in the SMB stream */
reg_io_r_open_hklm("", &r_u, rdata, 0);
DEBUG(5,("reg_open: %d\n", __LINE__));
}
/*******************************************************************
api_reg_open
********************************************************************/
static void api_reg_open( rpcsrv_struct *p, prs_struct *data,
prs_struct *rdata )
{
REG_Q_OPEN_HKLM q_u;
/* grab the reg open */
reg_io_q_open_hklm("", &q_u, data, 0);
/* construct reply. always indicate success */
reg_reply_open(&q_u, rdata);
}
/*******************************************************************
reg_reply_open_entry
********************************************************************/
static void reg_reply_open_entry(REG_Q_OPEN_ENTRY *q_u,
prs_struct *rdata)
{
uint32 status = 0;
POLICY_HND pol;
REG_R_OPEN_ENTRY r_u;
fstring name;
DEBUG(5,("reg_open_entry: %d\n", __LINE__));
if (status == 0 && find_policy_by_hnd(&(q_u->pol)) == -1)
{
status = 0xC000000 | NT_STATUS_INVALID_HANDLE;
}
if (status == 0x0 && !open_policy_hnd(&pol))
{
status = 0xC000000 | NT_STATUS_TOO_MANY_SECRETS; /* ha ha very droll */
}
unistr2_to_ascii(name, &q_u->uni_name, sizeof(name)-1);
if (status == 0x0)
{
DEBUG(5,("reg_open_entry: %s\n", name));
/* lkcl XXXX do a check on the name, here */
if (!strequal(name, "SYSTEM\\CurrentControlSet\\Control\\ProductOptions") &&
!strequal(name, "SYSTEM\\CurrentControlSet\\Services\\NETLOGON\\Parameters\\"))
{
status = 0xC000000 | NT_STATUS_ACCESS_DENIED;
}
}
if (status == 0x0 && !set_policy_reg_name(&pol, name))
{
status = 0xC000000 | NT_STATUS_TOO_MANY_SECRETS; /* ha ha very droll */
}
make_reg_r_open_entry(&r_u, &pol, status);
/* store the response in the SMB stream */
reg_io_r_open_entry("", &r_u, rdata, 0);
DEBUG(5,("reg_open_entry: %d\n", __LINE__));
}
/*******************************************************************
api_reg_open_entry
********************************************************************/
static void api_reg_open_entry( rpcsrv_struct *p, prs_struct *data,
prs_struct *rdata )
{
REG_Q_OPEN_ENTRY q_u;
/* grab the reg open entry */
reg_io_q_open_entry("", &q_u, data, 0);
/* construct reply. */
reg_reply_open_entry(&q_u, rdata);
}
/*******************************************************************
reg_reply_info
********************************************************************/
static void reg_reply_info(REG_Q_INFO *q_u,
prs_struct *rdata)
{
uint32 status = 0;
REG_R_INFO r_u;
uint32 type = 0xcafeface;
BUFFER2 buf;
fstring name;
ZERO_STRUCT(buf);
DEBUG(5,("reg_info: %d\n", __LINE__));
if (status == 0x0 && !get_policy_reg_name(&q_u->pol, name))
{
status = 0xC000000 | NT_STATUS_INVALID_HANDLE;
}
if (status == 0 &&
strequal(name, "SYSTEM\\CurrentControlSet\\Control\\ProductOptions"))
{
char *key = "LanmanNT";
make_buffer2(&buf, key, strlen(key));
type = 0x1;
}
else
{
status = 0x2; /* Win32 status code. ick */
}
make_reg_r_info(&r_u, &type, &buf, status);
/* store the response in the SMB stream */
reg_io_r_info("", &r_u, rdata, 0);
DEBUG(5,("reg_open_entry: %d\n", __LINE__));
}
/*******************************************************************
api_reg_info
********************************************************************/
static void api_reg_info( rpcsrv_struct *p, prs_struct *data,
prs_struct *rdata )
{
REG_Q_INFO q_u;
/* grab the reg unknown 0x11*/
reg_io_q_info("", &q_u, data, 0);
/* construct reply. always indicate success */
reg_reply_info(&q_u, rdata);
}
/*******************************************************************
array of \PIPE\reg operations
********************************************************************/
static struct api_struct api_reg_cmds[] =
{
{ "REG_CLOSE" , REG_CLOSE , api_reg_close },
{ "REG_OPEN_ENTRY" , REG_OPEN_ENTRY , api_reg_open_entry },
{ "REG_OPEN" , REG_OPEN_HKLM , api_reg_open },
{ "REG_INFO" , REG_INFO , api_reg_info },
{ NULL, 0 , NULL }
};
/*******************************************************************
receives a reg pipe and responds.
********************************************************************/
BOOL api_reg_rpc(rpcsrv_struct *p, prs_struct *data)
{
return api_rpcTNP(p, "api_reg_rpc", api_reg_cmds, data);
}