1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
samba-mirror/source3/modules/vfs_expand_msdfs.c
Andrew Bartlett 2e69e89456 s3-auth Rename auth_serversupplied_info varaiables: server_info -> session_info
These variables, of type struct auth_serversupplied_info were poorly
named when added into 2001, and in good consistant practice, this has
extended all over the codebase in the years since.

The structure is also not ideal for it's current purpose.  Originally
intended to convey the results of the authentication modules, it
really describes all the essential attributes of a session.  This
rename will reduce the volume of a future patch to replaced these with
a struct auth_session_info, with auth_serversupplied_info confined to
the lower levels of the auth subsystem, and then eliminated.

(The new structure will be the output of create_local_token(), and the
change in struct definition will ensure that this is always run, populating
local groups and privileges).

Andrew Bartlett

Signed-off-by: Stefan Metzmacher <metze@samba.org>
2011-02-22 16:20:10 +11:00

225 lines
5.1 KiB
C

/*
* Expand msdfs targets based on client IP
*
* Copyright (C) Volker Lendecke, 2004
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
#include "../librpc/gen_ndr/ndr_netlogon.h"
#include "smbd/globals.h"
#undef DBGC_CLASS
#define DBGC_CLASS DBGC_VFS
/**********************************************************
Under mapfile we expect a table of the following format:
IP-Prefix whitespace expansion
For example:
192.168.234 local.samba.org
192.168 remote.samba.org
default.samba.org
This is to redirect a DFS client to a host close to it.
***********************************************************/
static char *read_target_host(TALLOC_CTX *ctx, const char *mapfile,
const char *clientaddr)
{
XFILE *f;
char buf[1024];
char *space = buf;
bool found = false;
f = x_fopen(mapfile, O_RDONLY, 0);
if (f == NULL) {
DEBUG(0,("can't open IP map %s. Error %s\n",
mapfile, strerror(errno) ));
return NULL;
}
DEBUG(10, ("Scanning mapfile [%s]\n", mapfile));
while (x_fgets(buf, sizeof(buf), f) != NULL) {
if ((strlen(buf) > 0) && (buf[strlen(buf)-1] == '\n'))
buf[strlen(buf)-1] = '\0';
DEBUG(10, ("Scanning line [%s]\n", buf));
space = strchr_m(buf, ' ');
if (space == NULL) {
DEBUG(0, ("Ignoring invalid line %s\n", buf));
continue;
}
*space = '\0';
if (strncmp(clientaddr, buf, strlen(buf)) == 0) {
found = true;
break;
}
}
x_fclose(f);
if (!found) {
return NULL;
}
space += 1;
while (isspace(*space))
space += 1;
return talloc_strdup(ctx, space);
}
/**********************************************************
Expand the msdfs target host using read_target_host
explained above. The syntax used in the msdfs link is
msdfs:@table-filename@/share
Everything between and including the two @-signs is
replaced by the substitution string found in the table
described above.
***********************************************************/
static char *expand_msdfs_target(TALLOC_CTX *ctx,
connection_struct *conn,
char *target)
{
char *mapfilename = NULL;
char *filename_start = strchr_m(target, '@');
char *filename_end = NULL;
int filename_len = 0;
char *targethost = NULL;
char *new_target = NULL;
if (filename_start == NULL) {
DEBUG(10, ("No filename start in %s\n", target));
return NULL;
}
filename_end = strchr_m(filename_start+1, '@');
if (filename_end == NULL) {
DEBUG(10, ("No filename end in %s\n", target));
return NULL;
}
filename_len = PTR_DIFF(filename_end, filename_start+1);
mapfilename = talloc_strdup(ctx, filename_start+1);
if (!mapfilename) {
return NULL;
}
mapfilename[filename_len] = '\0';
DEBUG(10, ("Expanding from table [%s]\n", mapfilename));
targethost = read_target_host(
ctx, conn->sconn->client_id.addr, mapfilename);
if (targethost == NULL) {
DEBUG(1, ("Could not expand target host from file %s\n",
mapfilename));
return NULL;
}
targethost = talloc_sub_advanced(ctx,
lp_servicename(SNUM(conn)),
conn->session_info->unix_name,
conn->connectpath,
conn->session_info->utok.gid,
conn->session_info->sanitized_username,
conn->session_info->info3->base.domain.string,
targethost);
DEBUG(10, ("Expanded targethost to %s\n", targethost));
/* Replace the part between '@...@' */
*filename_start = '\0';
new_target = talloc_asprintf(ctx,
"%s%s%s",
target,
targethost,
filename_end+1);
if (!new_target) {
return NULL;
}
DEBUG(10, ("New DFS target: %s\n", new_target));
return new_target;
}
static int expand_msdfs_readlink(struct vfs_handle_struct *handle,
const char *path, char *buf, size_t bufsiz)
{
TALLOC_CTX *ctx = talloc_tos();
int result;
char *target = TALLOC_ARRAY(ctx, char, PATH_MAX+1);
size_t len;
if (!target) {
errno = ENOMEM;
return -1;
}
if (bufsiz == 0) {
errno = EINVAL;
return -1;
}
result = SMB_VFS_NEXT_READLINK(handle, path, target,
PATH_MAX);
if (result <= 0)
return result;
target[result] = '\0';
if ((strncmp(target, "msdfs:", 6) == 0) &&
(strchr_m(target, '@') != NULL)) {
target = expand_msdfs_target(ctx, handle->conn, target);
if (!target) {
errno = ENOENT;
return -1;
}
}
len = MIN(bufsiz, strlen(target));
memcpy(buf, target, len);
TALLOC_FREE(target);
return len;
}
static struct vfs_fn_pointers vfs_expand_msdfs_fns = {
.vfs_readlink = expand_msdfs_readlink
};
NTSTATUS vfs_expand_msdfs_init(void);
NTSTATUS vfs_expand_msdfs_init(void)
{
return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "expand_msdfs",
&vfs_expand_msdfs_fns);
}