1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-27 03:21:53 +03:00
samba-mirror/source3/rpc_server/rpc_pipes.h
Alexander Bokovoy c7a4578d06 s3: pass DCE RPC handle type to create_policy_hnd
Various RPC services expect policy handles of a specific type.

s3 RPC server did not allow to create policy handles with a specific
type while actually requiring that policy handle type itself in some
places.

Make sure we are able to specify the policy on-wire handle type when
creating the policy handle. The changes follow s4 DCE RPC server
implementation.

The original logic to always set on-wire handle type to 0 can be tracked
down to commit fdeea341ed when we didn't
really know about differences in on-wire handle types.

All but LSA trusted domain RPC calls do not check the on-wire handle
type in s3 RPC server.

Fixes trusted domain operations when Samba RPC client attempts to call
s3 RPC server to perform lsa_lsaRSetForestTrustInformation in FreeIPA.
This fix is a pre-requisite for FreeIPA-FreeIPA forest trust.

Signed-off-by: Alexander Bokovoy <ab@samba.org>
Reviewed-by: Jeremy Allison <jra@samba.org>

Autobuild-User(master): Jeremy Allison <jra@samba.org>
Autobuild-Date(master): Tue Apr 28 22:55:29 UTC 2020 on sn-devel-184
2020-04-28 22:55:29 +00:00

155 lines
4.4 KiB
C

/*
Unix SMB/Netbios implementation.
RPC Server Headers
Copyright (C) Andrew Tridgell 1992-1997
Copyright (C) Luke Kenneth Casson Leighton 1996-1997
Copyright (C) Paul Ashton 1997
Copyright (C) Jeremy Allison 2000-2004
Copyright (C) Simo Sorce 2010-2011
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see <http://www.gnu.org/licenses/>.
*/
#ifndef _RPC_PIPES_H_
#define _RPC_PIPES_H_
#include "librpc/rpc/dcerpc.h"
struct dcesrv_ep_entry_list;
struct tsocket_address;
struct handle_list;
struct pipes_struct;
struct pipe_rpc_fns {
struct pipe_rpc_fns *next, *prev;
/* RPC function table associated with the current rpc_bind (associated by context) */
uint32_t context_id;
struct ndr_syntax_id syntax;
/*
* shall we allow "connect" auth level for this interface ?
*/
bool allow_connect;
/*
* minimal required auth level
*/
enum dcerpc_AuthLevel min_auth_level;
};
/*
* DCE/RPC-specific samba-internal-specific handling of data on
* NamedPipes.
*/
struct pipes_struct {
struct pipes_struct *next, *prev;
const struct tsocket_address *local_address;
const struct tsocket_address *remote_address;
enum dcerpc_transport_t transport;
struct auth_session_info *session_info;
struct messaging_context *msg_ctx;
struct dcesrv_ep_entry_list *ep_entries;
/* linked list of rpc dispatch tables associated
with the open rpc contexts */
struct pipe_rpc_fns *contexts;
struct pipe_auth_data auth;
/*
* Set to true when an RPC bind has been done on this pipe.
*/
bool pipe_bound;
/*
* Set the DCERPC_FAULT to return.
*/
int fault_state;
/*
* Set to RPC_BIG_ENDIAN when dealing with big-endian PDU's
*/
bool endian;
/* This context is used for PDU data and is freed between each pdu.
Don't use for pipe state storage. */
TALLOC_CTX *mem_ctx;
/* handle database to use on this pipe. */
struct handle_list *pipe_handles;
/* call id retrieved from the pdu header */
uint32_t call_id;
/* operation number retrieved from the rpc header */
uint16_t opnum;
/* private data for the interface implementation */
void *private_data;
};
int make_base_pipes_struct(TALLOC_CTX *mem_ctx,
struct messaging_context *msg_ctx,
const char *pipe_name,
enum dcerpc_transport_t transport,
bool endian,
const struct tsocket_address *remote_address,
const struct tsocket_address *local_address,
struct pipes_struct **_p);
bool check_open_pipes(void);
int close_internal_rpc_pipe_hnd(struct pipes_struct *p);
size_t num_pipe_handles(struct pipes_struct *p);
bool init_pipe_handles(struct pipes_struct *p, const struct ndr_syntax_id *syntax);
bool create_policy_hnd(struct pipes_struct *p,
struct policy_handle *hnd,
uint8_t handle_type,
void *data_ptr);
bool find_policy_by_hnd(struct pipes_struct *p, const struct policy_handle *hnd,
void **data_p);
bool close_policy_hnd(struct pipes_struct *p, struct policy_handle *hnd);
void close_policy_by_pipe(struct pipes_struct *p);
bool pipe_access_check(struct pipes_struct *p);
void *_policy_handle_create(struct pipes_struct *p,
struct policy_handle *hnd,
uint8_t handle_type,
uint32_t access_granted,
size_t data_size,
const char *type,
NTSTATUS *pstatus);
#define policy_handle_create(_p, _hnd, _hnd_type, _access, _type, _pstatus) \
(_type *)_policy_handle_create((_p), (_hnd), (_hnd_type), (_access), sizeof(_type), #_type, \
(_pstatus))
void *_policy_handle_find(struct pipes_struct *p,
const struct policy_handle *hnd,
uint32_t access_required, uint32_t *paccess_granted,
const char *name, const char *location,
NTSTATUS *pstatus);
#define policy_handle_find(_p, _hnd, _access_required, _access_granted, _type, _pstatus) \
(_type *)_policy_handle_find((_p), (_hnd), (_access_required), \
(_access_granted), #_type, __location__, (_pstatus))
#endif /* _RPC_PIPES_H_ */