?  search:
summary | log | graphiclog1 | graphiclog2 | commit | commitdiff | tree | refs | edit | fork
blame | history | raw | HEAD
s3:utils: Fix 'Usage:' for 'net ads enctypes'
[samba4-gss.git] / source3 / smbd / smbXsrv_open.c
blob6fd64a028c952385569026c306e1c15aa9d5cb71
1 /*
2 Unix SMB/CIFS implementation.
3
4 Copyright (C) Stefan Metzmacher 2012
5 Copyright (C) Michael Adam 2012
6
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
11
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
16
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
19 */
20
21 #include "smbXsrv_open.h"
22 #include "includes.h"
23 #include "system/filesys.h"
24 #include "lib/util/server_id.h"
25 #include "smbd/smbd.h"
26 #include "smbd/globals.h"
27 #include "dbwrap/dbwrap.h"
28 #include "dbwrap/dbwrap_rbt.h"
29 #include "dbwrap/dbwrap_open.h"
30 #include "../libcli/security/security.h"
31 #include "messages.h"
32 #include "lib/util/util_tdb.h"
33 #include "librpc/gen_ndr/ndr_smbXsrv.h"
34 #include "serverid.h"
35 #include "source3/include/util_tdb.h"
36 #include "lib/util/idtree_random.h"
37 #include "lib/util/time_basic.h"
38
39 struct smbXsrv_open_table {
40 struct {
41 struct idr_context *idr;
42 struct db_context *replay_cache_db_ctx;
43 uint32_t lowest_id;
44 uint32_t highest_id;
45 uint32_t max_opens;
46 uint32_t num_opens;
47 } local;
48 struct {
49 struct db_context *db_ctx;
50 } global;
51 };
52
53 static struct db_context *smbXsrv_open_global_db_ctx = NULL;
54
55 NTSTATUS smbXsrv_open_global_init(void)
56 {
57 char *global_path = NULL;
58 struct db_context *db_ctx = NULL;
59
60 if (smbXsrv_open_global_db_ctx != NULL) {
61 return NT_STATUS_OK;
62 }
63
64 global_path = lock_path(talloc_tos(), "smbXsrv_open_global.tdb");
65 if (global_path == NULL) {
66 return NT_STATUS_NO_MEMORY;
67 }
68
69 db_ctx = db_open(NULL, global_path,
70 SMBD_VOLATILE_TDB_HASH_SIZE,
71 SMBD_VOLATILE_TDB_FLAGS,
72 O_RDWR | O_CREAT, 0600,
73 DBWRAP_LOCK_ORDER_1,
74 DBWRAP_FLAG_NONE);
75 TALLOC_FREE(global_path);
76 if (db_ctx == NULL) {
77 NTSTATUS status = map_nt_error_from_unix_common(errno);
78 return status;
79 }
80
81 smbXsrv_open_global_db_ctx = db_ctx;
82
83 return NT_STATUS_OK;
84 }
85
86 /*
87 * NOTE:
88 * We need to store the keys in big endian so that dbwrap_rbt's memcmp
89 * has the same result as integer comparison between the uint32_t
90 * values.
91 *
92 * TODO: implement string based key
93 */
94
95 struct smbXsrv_open_global_key_buf { uint8_t buf[sizeof(uint32_t)]; };
96
97 static TDB_DATA smbXsrv_open_global_id_to_key(
98 uint32_t id, struct smbXsrv_open_global_key_buf *key_buf)
99 {
100 RSIVAL(key_buf->buf, 0, id);
101
102 return (TDB_DATA) {
103 .dptr = key_buf->buf,
104 .dsize = sizeof(key_buf->buf),
105 };
106 }
107
108 static NTSTATUS smbXsrv_open_table_init(struct smbXsrv_connection *conn,
109 uint32_t lowest_id,
110 uint32_t highest_id,
111 uint32_t max_opens)
112 {
113 struct smbXsrv_client *client = conn->client;
114 struct smbXsrv_open_table *table;
115 NTSTATUS status;
116 uint64_t max_range;
117
118 if (lowest_id > highest_id) {
119 return NT_STATUS_INTERNAL_ERROR;
120 }
121
122 max_range = highest_id;
123 max_range -= lowest_id;
124 max_range += 1;
125
126 if (max_opens > max_range) {
127 return NT_STATUS_INTERNAL_ERROR;
128 }
129
130 table = talloc_zero(client, struct smbXsrv_open_table);
131 if (table == NULL) {
132 return NT_STATUS_NO_MEMORY;
133 }
134
135 table->local.idr = idr_init(table);
136 if (table->local.idr == NULL) {
137 TALLOC_FREE(table);
138 return NT_STATUS_NO_MEMORY;
139 }
140 table->local.replay_cache_db_ctx = db_open_rbt(table);
141 if (table->local.replay_cache_db_ctx == NULL) {
142 TALLOC_FREE(table);
143 return NT_STATUS_NO_MEMORY;
144 }
145 table->local.lowest_id = lowest_id;
146 table->local.highest_id = highest_id;
147 table->local.max_opens = max_opens;
148
149 status = smbXsrv_open_global_init();
150 if (!NT_STATUS_IS_OK(status)) {
151 TALLOC_FREE(table);
152 return status;
153 }
154
155 table->global.db_ctx = smbXsrv_open_global_db_ctx;
156
157 client->open_table = table;
158 return NT_STATUS_OK;
159 }
160
161 static NTSTATUS smbXsrv_open_local_lookup(struct smbXsrv_open_table *table,
162 uint32_t open_local_id,
163 uint32_t open_global_id,
164 NTTIME now,
165 struct smbXsrv_open **_open)
166 {
167 struct smbXsrv_open *op = NULL;
168
169 *_open = NULL;
170
171 if (open_local_id == 0) {
172 return NT_STATUS_FILE_CLOSED;
173 }
174
175 if (table == NULL) {
176 /* this might happen before the end of negprot */
177 return NT_STATUS_FILE_CLOSED;
178 }
179
180 if (table->local.idr == NULL) {
181 return NT_STATUS_INTERNAL_ERROR;
182 }
183
184 op = idr_find(table->local.idr, open_local_id);
185 if (op == NULL) {
186 return NT_STATUS_FILE_CLOSED;
187 }
188
189 if (open_global_id == 0) {
190 /* make the global check a no-op for SMB1 */
191 open_global_id = op->global->open_global_id;
192 }
193
194 if (op->global->open_global_id != open_global_id) {
195 return NT_STATUS_FILE_CLOSED;
196 }
197
198 if (now != 0) {
199 op->idle_time = now;
200 }
201
202 *_open = op;
203 return NT_STATUS_OK;
204 }
205
206 static NTSTATUS smbXsrv_open_global_parse_record(
207 TALLOC_CTX *mem_ctx,
208 TDB_DATA key,
209 TDB_DATA val,
210 struct smbXsrv_open_global0 **global)
211 {
212 DATA_BLOB blob = data_blob_const(val.dptr, val.dsize);
213 struct smbXsrv_open_globalB global_blob;
214 enum ndr_err_code ndr_err;
215 NTSTATUS status;
216 TALLOC_CTX *frame = talloc_stackframe();
217
218 ndr_err = ndr_pull_struct_blob(&blob, frame, &global_blob,
219 (ndr_pull_flags_fn_t)ndr_pull_smbXsrv_open_globalB);
220 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
221 DEBUG(1,("Invalid record in smbXsrv_open_global.tdb:"
222 "key '%s' ndr_pull_struct_blob - %s\n",
223 tdb_data_dbg(key),
224 ndr_errstr(ndr_err)));
225 status = ndr_map_error2ntstatus(ndr_err);
226 goto done;
227 }
228
229 DBG_DEBUG("\n");
230 if (CHECK_DEBUGLVL(10)) {
231 NDR_PRINT_DEBUG(smbXsrv_open_globalB, &global_blob);
232 }
233
234 if (global_blob.version != SMBXSRV_VERSION_0) {
235 status = NT_STATUS_INTERNAL_DB_CORRUPTION;
236 DEBUG(1,("Invalid record in smbXsrv_open_global.tdb:"
237 "key '%s' unsupported version - %d - %s\n",
238 tdb_data_dbg(key),
239 (int)global_blob.version,
240 nt_errstr(status)));
241 goto done;
242 }
243
244 if (global_blob.info.info0 == NULL) {
245 status = NT_STATUS_INTERNAL_DB_CORRUPTION;
246 DEBUG(1,("Invalid record in smbXsrv_open_global.tdb:"
247 "key '%s' info0 NULL pointer - %s\n",
248 tdb_data_dbg(key),
249 nt_errstr(status)));
250 goto done;
251 }
252
253 *global = talloc_move(mem_ctx, &global_blob.info.info0);
254 status = NT_STATUS_OK;
255 done:
256 talloc_free(frame);
257 return status;
258 }
259
260 static NTSTATUS smbXsrv_open_global_verify_record(
261 TDB_DATA key,
262 TDB_DATA val,
263 TALLOC_CTX *mem_ctx,
264 struct smbXsrv_open_global0 **_global0)
265 {
266 struct smbXsrv_open_global0 *global0 = NULL;
267 struct server_id_buf buf;
268 NTSTATUS status;
269
270 if (val.dsize == 0) {
271 return NT_STATUS_NOT_FOUND;
272 }
273
274 status = smbXsrv_open_global_parse_record(mem_ctx, key, val, &global0);
275 if (!NT_STATUS_IS_OK(status)) {
276 DBG_WARNING("smbXsrv_open_global_parse_record for %s failed: "
277 "%s\n",
278 tdb_data_dbg(key),
279 nt_errstr(status));
280 return status;
281 }
282 *_global0 = global0;
283
284 if (server_id_is_disconnected(&global0->server_id)) {
285 return NT_STATUS_OK;
286 }
287 if (serverid_exists(&global0->server_id)) {
288 return NT_STATUS_OK;
289 }
290
291 DBG_WARNING("smbd %s did not clean up record %s\n",
292 server_id_str_buf(global0->server_id, &buf),
293 tdb_data_dbg(key));
294
295 return NT_STATUS_FATAL_APP_EXIT;
296 }
297
298 static NTSTATUS smbXsrv_open_global_store(
299 struct db_record *rec,
300 TDB_DATA key,
301 TDB_DATA oldval,
302 struct smbXsrv_open_global0 *global)
303 {
304 struct smbXsrv_open_globalB global_blob;
305 DATA_BLOB blob = data_blob_null;
306 TDB_DATA val = { .dptr = NULL, };
307 NTSTATUS status;
308 enum ndr_err_code ndr_err;
309
310 /*
311 * TODO: if we use other versions than '0'
312 * we would add glue code here, that would be able to
313 * store the information in the old format.
314 */
315
316 global_blob = (struct smbXsrv_open_globalB) {
317 .version = smbXsrv_version_global_current(),
318 };
319
320 if (oldval.dsize >= 8) {
321 global_blob.seqnum = IVAL(oldval.dptr, 4);
322 }
323 global_blob.seqnum += 1;
324 global_blob.info.info0 = global;
325
326 ndr_err = ndr_push_struct_blob(&blob, talloc_tos(), &global_blob,
327 (ndr_push_flags_fn_t)ndr_push_smbXsrv_open_globalB);
328 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
329 DBG_WARNING("key '%s' ndr_push - %s\n",
330 tdb_data_dbg(key),
331 ndr_map_error2string(ndr_err));
332 return ndr_map_error2ntstatus(ndr_err);
333 }
334
335 val = make_tdb_data(blob.data, blob.length);
336 status = dbwrap_record_store(rec, val, TDB_REPLACE);
337 TALLOC_FREE(blob.data);
338 if (!NT_STATUS_IS_OK(status)) {
339 DBG_WARNING("key '%s' store - %s\n",
340 tdb_data_dbg(key),
341 nt_errstr(status));
342 return status;
343 }
344
345 if (CHECK_DEBUGLVL(10)) {
346 DBG_DEBUG("key '%s' stored\n", tdb_data_dbg(key));
347 NDR_PRINT_DEBUG(smbXsrv_open_globalB, &global_blob);
348 }
349
350 return NT_STATUS_OK;
351 }
352
353 struct smbXsrv_open_global_allocate_state {
354 uint32_t id;
355 struct smbXsrv_open_global0 *global;
356 NTSTATUS status;
357 };
358
359 static void smbXsrv_open_global_allocate_fn(
360 struct db_record *rec, TDB_DATA oldval, void *private_data)
361 {
362 struct smbXsrv_open_global_allocate_state *state = private_data;
363 struct smbXsrv_open_global0 *global = state->global;
364 struct smbXsrv_open_global0 *tmp_global0 = NULL;
365 TDB_DATA key = dbwrap_record_get_key(rec);
366
367 state->status = smbXsrv_open_global_verify_record(
368 key, oldval, talloc_tos(), &tmp_global0);
369
370 if (NT_STATUS_IS_OK(state->status)) {
371 /*
372 * Found an existing record
373 */
374 TALLOC_FREE(tmp_global0);
375 state->status = NT_STATUS_RETRY;
376 return;
377 }
378
379 if (NT_STATUS_EQUAL(state->status, NT_STATUS_NOT_FOUND)) {
380 /*
381 * Found an empty slot
382 */
383 global->open_global_id = state->id;
384 global->open_persistent_id = state->id;
385
386 state->status = smbXsrv_open_global_store(
387 rec, key, (TDB_DATA) { .dsize = 0, }, state->global);
388 if (!NT_STATUS_IS_OK(state->status)) {
389 DBG_WARNING("smbXsrv_open_global_store() for "
390 "id %"PRIu32" failed: %s\n",
391 state->id,
392 nt_errstr(state->status));
393 }
394 return;
395 }
396
397 if (NT_STATUS_EQUAL(state->status, NT_STATUS_FATAL_APP_EXIT)) {
398 NTSTATUS status;
399
400 TALLOC_FREE(tmp_global0);
401
402 /*
403 * smbd crashed
404 */
405 status = dbwrap_record_delete(rec);
406 if (!NT_STATUS_IS_OK(status)) {
407 DBG_WARNING("dbwrap_record_delete() failed "
408 "for record %"PRIu32": %s\n",
409 state->id,
410 nt_errstr(status));
411 state->status = NT_STATUS_INTERNAL_DB_CORRUPTION;
412 return;
413 }
414 return;
415 }
416 }
417
418 static NTSTATUS smbXsrv_open_global_allocate(
419 struct db_context *db, struct smbXsrv_open_global0 *global)
420 {
421 struct smbXsrv_open_global_allocate_state state = {
422 .global = global,
423 };
424 uint32_t i;
425 uint32_t last_free = 0;
426 const uint32_t min_tries = 3;
427
428 /*
429 * Here we just randomly try the whole 32-bit space
430 *
431 * We use just 32-bit, because we want to reuse the
432 * ID for SRVSVC.
433 */
434 for (i = 0; i < UINT32_MAX; i++) {
435 struct smbXsrv_open_global_key_buf key_buf;
436 TDB_DATA key;
437 NTSTATUS status;
438
439 if (i >= min_tries && last_free != 0) {
440 state.id = last_free;
441 } else {
442 generate_nonce_buffer(
443 (uint8_t *)&state.id, sizeof(state.id));
444 state.id = MAX(state.id, 1);
445 state.id = MIN(state.id, UINT32_MAX-1);
446 }
447
448 key = smbXsrv_open_global_id_to_key(state.id, &key_buf);
449
450 status = dbwrap_do_locked(
451 db, key, smbXsrv_open_global_allocate_fn, &state);
452
453 if (!NT_STATUS_IS_OK(status)) {
454 DBG_WARNING("dbwrap_do_locked() failed: %s\n",
455 nt_errstr(status));
456 return NT_STATUS_INTERNAL_DB_ERROR;
457 }
458
459 if (NT_STATUS_IS_OK(state.status)) {
460 /*
461 * Found an empty slot, done.
462 */
463 DBG_DEBUG("Found slot %"PRIu32"\n", state.id);
464 return NT_STATUS_OK;
465 }
466
467 if (NT_STATUS_EQUAL(state.status, NT_STATUS_FATAL_APP_EXIT)) {
468
469 if ((i < min_tries) && (last_free == 0)) {
470 /*
471 * Remember "id" as free but also try
472 * others to not recycle ids too
473 * quickly.
474 */
475 last_free = state.id;
476 }
477 continue;
478 }
479
480 if (NT_STATUS_EQUAL(state.status, NT_STATUS_RETRY)) {
481 /*
482 * Normal collision, try next
483 */
484 DBG_DEBUG("Found record for id %"PRIu32"\n",
485 state.id);
486 continue;
487 }
488
489 DBG_WARNING("smbXsrv_open_global_allocate_fn() failed: %s\n",
490 nt_errstr(state.status));
491 return state.status;
492 }
493
494 /* should not be reached */
495 return NT_STATUS_INTERNAL_ERROR;
496 }
497
498 static int smbXsrv_open_destructor(struct smbXsrv_open *op)
499 {
500 NTSTATUS status;
501
502 status = smbXsrv_open_close(op, 0);
503 if (!NT_STATUS_IS_OK(status)) {
504 DEBUG(0, ("smbXsrv_open_destructor: "
505 "smbXsrv_open_close() failed - %s\n",
506 nt_errstr(status)));
507 }
508
509 TALLOC_FREE(op->global);
510
511 return 0;
512 }
513
514 NTSTATUS smbXsrv_open_create(struct smbXsrv_connection *conn,
515 struct auth_session_info *session_info,
516 NTTIME now,
517 struct smbXsrv_open **_open)
518 {
519 struct smbXsrv_open_table *table = conn->client->open_table;
520 struct smbXsrv_open *op = NULL;
521 struct smbXsrv_open_global0 *global = NULL;
522 NTSTATUS status;
523 struct dom_sid *current_sid = NULL;
524 struct security_token *current_token = NULL;
525 int local_id;
526
527 if (session_info == NULL) {
528 return NT_STATUS_INVALID_HANDLE;
529 }
530 current_token = session_info->security_token;
531
532 if ((current_token == NULL) ||
533 (current_token->num_sids <= PRIMARY_USER_SID_INDEX)) {
534 return NT_STATUS_INVALID_HANDLE;
535 }
536 current_sid = &current_token->sids[PRIMARY_USER_SID_INDEX];
537
538 if (table->local.num_opens >= table->local.max_opens) {
539 return NT_STATUS_INSUFFICIENT_RESOURCES;
540 }
541
542 op = talloc_zero(table, struct smbXsrv_open);
543 if (op == NULL) {
544 return NT_STATUS_NO_MEMORY;
545 }
546 op->table = table;
547 op->status = NT_STATUS_OK; /* TODO: start with INTERNAL_ERROR */
548 op->idle_time = now;
549
550 global = talloc_zero(op, struct smbXsrv_open_global0);
551 if (global == NULL) {
552 TALLOC_FREE(op);
553 return NT_STATUS_NO_MEMORY;
554 }
555 op->global = global;
556
557 /*
558 * We mark every slot as invalid using 0xFF.
559 * Valid values are masked with 0xF.
560 */
561 memset(global->lock_sequence_array, 0xFF,
562 sizeof(global->lock_sequence_array));
563
564 local_id = idr_get_new_random(
565 table->local.idr,
566 op,
567 table->local.lowest_id,
568 table->local.highest_id);
569 if (local_id == -1) {
570 TALLOC_FREE(op);
571 return NT_STATUS_INSUFFICIENT_RESOURCES;
572 }
573 op->local_id = local_id;
574
575 global->open_volatile_id = op->local_id;
576
577 global->server_id = messaging_server_id(conn->client->msg_ctx);
578 global->open_time = now;
579 global->open_owner = *current_sid;
580 if (conn->protocol >= PROTOCOL_SMB2_10) {
581 global->client_guid = conn->smb2.client.guid;
582 }
583
584 status = smbXsrv_open_global_allocate(table->global.db_ctx,
585 global);
586 if (!NT_STATUS_IS_OK(status)) {
587 int ret = idr_remove(table->local.idr, local_id);
588 SMB_ASSERT(ret == 0);
589
590 DBG_WARNING("smbXsrv_open_global_allocate() failed: %s\n",
591 nt_errstr(status));
592 TALLOC_FREE(op);
593 return status;
594 }
595
596 table->local.num_opens += 1;
597 talloc_set_destructor(op, smbXsrv_open_destructor);
598
599 if (CHECK_DEBUGLVL(10)) {
600 struct smbXsrv_openB open_blob = {
601 .version = SMBXSRV_VERSION_0,
602 .info.info0 = op,
603 };
604
605 DEBUG(10,("smbXsrv_open_create: global_id (0x%08x) stored\n",
606 op->global->open_global_id));
607 NDR_PRINT_DEBUG(smbXsrv_openB, &open_blob);
608 }
609
610 *_open = op;
611 return NT_STATUS_OK;
612 }
613
614 static NTSTATUS smbXsrv_open_set_replay_cache(struct smbXsrv_open *op)
615 {
616 struct GUID *create_guid;
617 struct GUID_txt_buf buf;
618 char *guid_string;
619 struct db_context *db = op->table->local.replay_cache_db_ctx;
620 struct smbXsrv_open_replay_cache rc = {
621 .idle_time = op->idle_time,
622 .local_id = op->local_id,
623 };
624 uint8_t data[SMBXSRV_OPEN_REPLAY_CACHE_FIXED_SIZE] = { 0 };
625 DATA_BLOB blob = { .data = data, .length = sizeof(data), };
626 enum ndr_err_code ndr_err;
627 NTSTATUS status;
628 TDB_DATA val;
629
630 if (!(op->flags & SMBXSRV_OPEN_NEED_REPLAY_CACHE)) {
631 return NT_STATUS_OK;
632 }
633
634 if (op->flags & SMBXSRV_OPEN_HAVE_REPLAY_CACHE) {
635 return NT_STATUS_OK;
636 }
637
638 create_guid = &op->global->create_guid;
639 guid_string = GUID_buf_string(create_guid, &buf);
640
641 ndr_err = ndr_push_struct_into_fixed_blob(&blob, &rc,
642 (ndr_push_flags_fn_t)ndr_push_smbXsrv_open_replay_cache);
643 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
644 status = ndr_map_error2ntstatus(ndr_err);
645 return status;
646 }
647 val = make_tdb_data(blob.data, blob.length);
648
649 status = dbwrap_store_bystring(db, guid_string, val, TDB_REPLACE);
650
651 if (NT_STATUS_IS_OK(status)) {
652 op->flags |= SMBXSRV_OPEN_HAVE_REPLAY_CACHE;
653 op->flags &= ~SMBXSRV_OPEN_NEED_REPLAY_CACHE;
654 }
655
656 return status;
657 }
658
659 NTSTATUS smbXsrv_open_purge_replay_cache(struct smbXsrv_client *client,
660 const struct GUID *create_guid)
661 {
662 struct GUID_txt_buf buf;
663 NTSTATUS status;
664
665 if (client->open_table == NULL) {
666 return NT_STATUS_OK;
667 }
668
669 status = dbwrap_purge_bystring(
670 client->open_table->local.replay_cache_db_ctx,
671 GUID_buf_string(create_guid, &buf));
672 return status;
673 }
674
675 static NTSTATUS smbXsrv_open_clear_replay_cache(struct smbXsrv_open *op)
676 {
677 struct GUID *create_guid;
678 struct GUID_txt_buf buf;
679 struct db_context *db;
680 NTSTATUS status;
681
682 if (op->table == NULL) {
683 return NT_STATUS_OK;
684 }
685
686 db = op->table->local.replay_cache_db_ctx;
687
688 if (!(op->flags & SMBXSRV_OPEN_HAVE_REPLAY_CACHE)) {
689 return NT_STATUS_OK;
690 }
691
692 create_guid = &op->global->create_guid;
693 if (GUID_all_zero(create_guid)) {
694 return NT_STATUS_OK;
695 }
696
697 status = dbwrap_purge_bystring(db, GUID_buf_string(create_guid, &buf));
698
699 if (NT_STATUS_IS_OK(status)) {
700 op->flags &= ~SMBXSRV_OPEN_HAVE_REPLAY_CACHE;
701 }
702
703 return status;
704 }
705
706 struct smbXsrv_open_update_state {
707 struct smbXsrv_open_global0 *global;
708 NTSTATUS status;
709 };
710
711 static void smbXsrv_open_update_fn(
712 struct db_record *rec, TDB_DATA oldval, void *private_data)
713 {
714 struct smbXsrv_open_update_state *state = private_data;
715 TDB_DATA key = dbwrap_record_get_key(rec);
716
717 state->status = smbXsrv_open_global_store(
718 rec, key, oldval, state->global);
719 }
720
721 NTSTATUS smbXsrv_open_update(struct smbXsrv_open *op)
722 {
723 struct smbXsrv_open_update_state state = { .global = op->global, };
724 struct smbXsrv_open_table *table = op->table;
725 struct smbXsrv_open_global_key_buf key_buf;
726 TDB_DATA key = smbXsrv_open_global_id_to_key(
727 op->global->open_global_id, &key_buf);
728 NTSTATUS status;
729
730 status = dbwrap_do_locked(
731 table->global.db_ctx, key, smbXsrv_open_update_fn, &state);
732 if (!NT_STATUS_IS_OK(status)) {
733 DBG_WARNING("global_id (0x%08x) dbwrap_do_locked failed: %s\n",
734 op->global->open_global_id,
735 nt_errstr(status));
736 return NT_STATUS_INTERNAL_DB_ERROR;
737 }
738
739 if (!NT_STATUS_IS_OK(state.status)) {
740 DBG_WARNING("global_id (0x%08x) smbXsrv_open_global_store "
741 "failed: %s\n",
742 op->global->open_global_id,
743 nt_errstr(state.status));
744 return state.status;
745 }
746
747 status = smbXsrv_open_set_replay_cache(op);
748 if (!NT_STATUS_IS_OK(status)) {
749 DBG_ERR("smbXsrv_open_set_replay_cache failed: %s\n",
750 nt_errstr(status));
751 return status;
752 }
753
754 if (CHECK_DEBUGLVL(10)) {
755 struct smbXsrv_openB open_blob = {
756 .version = SMBXSRV_VERSION_0,
757 .info.info0 = op,
758 };
759
760 DEBUG(10,("smbXsrv_open_update: global_id (0x%08x) stored\n",
761 op->global->open_global_id));
762 NDR_PRINT_DEBUG(smbXsrv_openB, &open_blob);
763 }
764
765 return NT_STATUS_OK;
766 }
767
768 struct smbXsrv_open_close_state {
769 struct smbXsrv_open *op;
770 NTSTATUS status;
771 };
772
773 static void smbXsrv_open_close_fn(
774 struct db_record *rec, TDB_DATA oldval, void *private_data)
775 {
776 struct smbXsrv_open_close_state *state = private_data;
777 struct smbXsrv_open_global0 *global = state->op->global;
778 TDB_DATA key = dbwrap_record_get_key(rec);
779
780 if (global->durable) {
781 /*
782 * Durable open -- we need to update the global part
783 * instead of deleting it
784 */
785 state->status = smbXsrv_open_global_store(
786 rec, key, oldval, global);
787 if (!NT_STATUS_IS_OK(state->status)) {
788 DBG_WARNING("failed to store global key '%s': %s\n",
789 tdb_data_dbg(key),
790 nt_errstr(state->status));
791 return;
792 }
793
794 if (CHECK_DEBUGLVL(10)) {
795 struct smbXsrv_openB open_blob = {
796 .version = SMBXSRV_VERSION_0,
797 .info.info0 = state->op,
798 };
799
800 DBG_DEBUG("(0x%08x) stored disconnect\n",
801 global->open_global_id);
802 NDR_PRINT_DEBUG(smbXsrv_openB, &open_blob);
803 }
804 return;
805 }
806
807 state->status = dbwrap_record_delete(rec);
808 if (!NT_STATUS_IS_OK(state->status)) {
809 DBG_WARNING("failed to delete global key '%s': %s\n",
810 tdb_data_dbg(key),
811 nt_errstr(state->status));
812 }
813 }
814
815 NTSTATUS smbXsrv_open_close(struct smbXsrv_open *op, NTTIME now)
816 {
817 struct smbXsrv_open_close_state state = { .op = op, };
818 struct smbXsrv_open_global0 *global = op->global;
819 struct smbXsrv_open_table *table;
820 NTSTATUS status;
821 NTSTATUS error = NT_STATUS_OK;
822 struct smbXsrv_open_global_key_buf key_buf;
823 TDB_DATA key = smbXsrv_open_global_id_to_key(
824 global->open_global_id, &key_buf);
825 int ret;
826
827 error = smbXsrv_open_clear_replay_cache(op);
828 if (!NT_STATUS_IS_OK(error)) {
829 DBG_ERR("smbXsrv_open_clear_replay_cache failed: %s\n",
830 nt_errstr(error));
831 }
832
833 if (op->table == NULL) {
834 return error;
835 }
836
837 table = op->table;
838 op->table = NULL;
839
840 op->status = NT_STATUS_FILE_CLOSED;
841 global->disconnect_time = now;
842 server_id_set_disconnected(&global->server_id);
843
844 status = dbwrap_do_locked(
845 table->global.db_ctx, key, smbXsrv_open_close_fn, &state);
846 if (!NT_STATUS_IS_OK(status)) {
847 DBG_WARNING("dbwrap_do_locked() for %s failed: %s\n",
848 tdb_data_dbg(key),
849 nt_errstr(status));
850 error = status;
851 } else if (!NT_STATUS_IS_OK(state.status)) {
852 DBG_WARNING("smbXsrv_open_close_fn() for %s failed: %s\n",
853 tdb_data_dbg(key),
854 nt_errstr(state.status));
855 error = state.status;
856 }
857
858 ret = idr_remove(table->local.idr, op->local_id);
859 SMB_ASSERT(ret == 0);
860
861 table->local.num_opens -= 1;
862
863 if (op->compat) {
864 op->compat->op = NULL;
865 file_free(NULL, op->compat);
866 op->compat = NULL;
867 }
868
869 return error;
870 }
871
872 NTSTATUS smb1srv_open_table_init(struct smbXsrv_connection *conn)
873 {
874 uint32_t max_opens;
875
876 /*
877 * Allow a range from 1..65534.
878 *
879 * With real_max_open_files possible ids,
880 * truncated to the SMB1 limit of 16-bit.
881 *
882 * 0 and 0xFFFF are no valid ids.
883 */
884 max_opens = conn->client->sconn->real_max_open_files;
885 max_opens = MIN(max_opens, UINT16_MAX - 1);
886
887 return smbXsrv_open_table_init(conn, 1, UINT16_MAX - 1, max_opens);
888 }
889
890 NTSTATUS smb1srv_open_lookup(struct smbXsrv_connection *conn,
891 uint16_t fnum, NTTIME now,
892 struct smbXsrv_open **_open)
893 {
894 struct smbXsrv_open_table *table = conn->client->open_table;
895 uint32_t local_id = fnum;
896 uint32_t global_id = 0;
897
898 return smbXsrv_open_local_lookup(table, local_id, global_id, now, _open);
899 }
900
901 NTSTATUS smb2srv_open_table_init(struct smbXsrv_connection *conn)
902 {
903 uint32_t max_opens;
904 uint32_t highest_id;
905
906 /*
907 * Allow a range from 1..4294967294.
908 *
909 * With real_max_open_files possible ids,
910 * truncated to 16-bit (the same as SMB1 for now).
911 *
912 * 0 and 0xFFFFFFFF are no valid ids.
913 *
914 * The usage of conn->sconn->real_max_open_files
915 * is the reason that we use one open table per
916 * transport connection (as we still have a 1:1 mapping
917 * between process and transport connection).
918 */
919 max_opens = conn->client->sconn->real_max_open_files;
920 max_opens = MIN(max_opens, UINT16_MAX - 1);
921
922 /*
923 * idtree uses "int" for local IDs. Limit the maximum ID to
924 * what "int" can hold.
925 */
926 highest_id = UINT32_MAX-1;
927 highest_id = MIN(highest_id, INT_MAX);
928
929 return smbXsrv_open_table_init(conn, 1, highest_id, max_opens);
930 }
931
932 NTSTATUS smb2srv_open_lookup(struct smbXsrv_connection *conn,
933 uint64_t persistent_id,
934 uint64_t volatile_id,
935 NTTIME now,
936 struct smbXsrv_open **_open)
937 {
938 struct smbXsrv_open_table *table = conn->client->open_table;
939 uint32_t local_id = volatile_id & UINT32_MAX;
940 uint64_t local_zeros = volatile_id & 0xFFFFFFFF00000000LLU;
941 uint32_t global_id = persistent_id & UINT32_MAX;
942 uint64_t global_zeros = persistent_id & 0xFFFFFFFF00000000LLU;
943 NTSTATUS status;
944
945 if (local_zeros != 0) {
946 return NT_STATUS_FILE_CLOSED;
947 }
948
949 if (global_zeros != 0) {
950 return NT_STATUS_FILE_CLOSED;
951 }
952
953 if (global_id == 0) {
954 return NT_STATUS_FILE_CLOSED;
955 }
956
957 status = smbXsrv_open_local_lookup(table, local_id, global_id, now,
958 _open);
959 if (!NT_STATUS_IS_OK(status)) {
960 return status;
961 }
962
963 /*
964 * Clear the replay cache for this create_guid if it exists:
965 * This is based on the assumption that this lookup will be
966 * triggered by a client request using the file-id for lookup.
967 * Hence the client has proven that it has in fact seen the
968 * reply to its initial create call. So subsequent create replays
969 * should be treated as invalid. Hence the index for create_guid
970 * lookup needs to be removed.
971 */
972 status = smbXsrv_open_clear_replay_cache(*_open);
973
974 return status;
975 }
976
977 /*
978 * This checks or marks the replay cache, we have the following
979 * cases:
980 *
981 * 1. There is no record in the cache
982 * => we add the passes caller_req_guid as holder_req_guid
983 * together with local_id as 0.
984 * => We return STATUS_FWP_RESERVED in order to indicate
985 * that the caller holds the current reservation
986 *
987 * 2. There is a record in the cache and holder_req_guid
988 * is already the same as caller_req_guid and local_id is 0
989 * => We return STATUS_FWP_RESERVED in order to indicate
990 * that the caller holds the current reservation
991 *
992 * 3. There is a record in the cache with a holder_req_guid
993 * other than caller_req_guid (and local_id is 0):
994 * => We return NT_STATUS_FILE_NOT_AVAILABLE to indicate
995 * the original request is still pending
996 *
997 * 4. There is a record in the cache with a zero holder_req_guid
998 * and a valid local_id:
999 * => We lookup the existing open by local_id
1000 * => We return NT_STATUS_OK together with the smbXsrv_open
1001 *
1002 *
1003 * With NT_STATUS_OK the caller can continue the replay processing.
1004 *
1005 * With STATUS_FWP_RESERVED the caller should continue the normal
1006 * open processing:
1007 * - On success:
1008 * - smbXsrv_open_update()/smbXsrv_open_set_replay_cache()
1009 * will convert the record to a zero holder_req_guid
1010 * with a valid local_id.
1011 * - On failure:
1012 * - smbXsrv_open_purge_replay_cache() should cleanup
1013 * the reservation.
1014 *
1015 * All other values should be returned to the client,
1016 * while NT_STATUS_FILE_NOT_AVAILABLE will trigger the
1017 * retry loop on the client.
1018 */
1019 NTSTATUS smb2srv_open_lookup_replay_cache(struct smbXsrv_connection *conn,
1020 struct GUID caller_req_guid,
1021 struct GUID create_guid,
1022 const char *name,
1023 NTTIME now,
1024 struct smbXsrv_open **_open)
1025 {
1026 TALLOC_CTX *frame = talloc_stackframe();
1027 NTSTATUS status;
1028 struct smbXsrv_open_table *table = conn->client->open_table;
1029 struct db_context *db = table->local.replay_cache_db_ctx;
1030 struct GUID_txt_buf tmp_guid_buf;
1031 struct GUID_txt_buf _create_guid_buf;
1032 const char *create_guid_str = GUID_buf_string(&create_guid, &_create_guid_buf);
1033 TDB_DATA create_guid_key = string_term_tdb_data(create_guid_str);
1034 struct db_record *db_rec = NULL;
1035 struct smbXsrv_open *op = NULL;
1036 struct smbXsrv_open_replay_cache rc = {
1037 .holder_req_guid = caller_req_guid,
1038 .idle_time = now,
1039 .local_id = 0,
1040 };
1041 enum ndr_err_code ndr_err;
1042 DATA_BLOB blob = data_blob_null;
1043 TDB_DATA val;
1044
1045 *_open = NULL;
1046
1047 db_rec = dbwrap_fetch_locked(db, frame, create_guid_key);
1048 if (db_rec == NULL) {
1049 TALLOC_FREE(frame);
1050 return NT_STATUS_INTERNAL_DB_ERROR;
1051 }
1052
1053 val = dbwrap_record_get_value(db_rec);
1054 if (val.dsize == 0) {
1055 uint8_t data[SMBXSRV_OPEN_REPLAY_CACHE_FIXED_SIZE];
1056
1057 blob = data_blob_const(data, ARRAY_SIZE(data));
1058 ndr_err = ndr_push_struct_into_fixed_blob(&blob, &rc,
1059 (ndr_push_flags_fn_t)ndr_push_smbXsrv_open_replay_cache);
1060 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1061 status = ndr_map_error2ntstatus(ndr_err);
1062 TALLOC_FREE(frame);
1063 return status;
1064 }
1065
1066 val = make_tdb_data(blob.data, blob.length);
1067 status = dbwrap_record_store(db_rec, val, TDB_REPLACE);
1068 if (!NT_STATUS_IS_OK(status)) {
1069 TALLOC_FREE(frame);
1070 return status;
1071 }
1072
1073 /*
1074 * We're the new holder
1075 */
1076 *_open = NULL;
1077 TALLOC_FREE(frame);
1078 return NT_STATUS_FWP_RESERVED;
1079 }
1080
1081 if (val.dsize != SMBXSRV_OPEN_REPLAY_CACHE_FIXED_SIZE) {
1082 TALLOC_FREE(frame);
1083 return NT_STATUS_INTERNAL_DB_CORRUPTION;
1084 }
1085
1086 blob = data_blob_const(val.dptr, val.dsize);
1087 ndr_err = ndr_pull_struct_blob_all_noalloc(&blob, &rc,
1088 (ndr_pull_flags_fn_t)ndr_pull_smbXsrv_open_replay_cache);
1089 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1090 status = ndr_map_error2ntstatus(ndr_err);
1091 TALLOC_FREE(frame);
1092 return status;
1093 }
1094 if (rc.local_id != 0) {
1095 if (GUID_equal(&rc.holder_req_guid, &caller_req_guid)) {
1096 /*
1097 * This should not happen
1098 */
1099 status = NT_STATUS_INTERNAL_ERROR;
1100 DBG_ERR("caller %s already holds local_id %u for create %s [%s] - %s\n",
1101 GUID_buf_string(&caller_req_guid, &tmp_guid_buf),
1102 (unsigned)rc.local_id,
1103 create_guid_str,
1104 name,
1105 nt_errstr(status));
1106
1107 TALLOC_FREE(frame);
1108 return status;
1109 }
1110
1111 status = smbXsrv_open_local_lookup(table,
1112 rc.local_id,
1113 0, /* global_id */
1114 now,
1115 &op);
1116 if (!NT_STATUS_IS_OK(status)) {
1117 DBG_ERR("holder %s stale for local_id %u for create %s [%s] - %s\n",
1118 GUID_buf_string(&rc.holder_req_guid, &tmp_guid_buf),
1119 (unsigned)rc.local_id,
1120 create_guid_str,
1121 name,
1122 nt_errstr(status));
1123
1124 TALLOC_FREE(frame);
1125 return status;
1126 }
1127
1128 /*
1129 * We found an open the caller can reuse.
1130 */
1131 SMB_ASSERT(op != NULL);
1132 *_open = op;
1133 TALLOC_FREE(frame);
1134 return NT_STATUS_OK;
1135 }
1136
1137 if (GUID_equal(&rc.holder_req_guid, &caller_req_guid)) {
1138 /*
1139 * We're still the holder
1140 */
1141 *_open = NULL;
1142 TALLOC_FREE(frame);
1143 return NT_STATUS_FWP_RESERVED;
1144 }
1145
1146 /*
1147 * The original request (or a former replay) is still
1148 * pending, ask the client to retry by sending FILE_NOT_AVAILABLE.
1149 */
1150 status = NT_STATUS_FILE_NOT_AVAILABLE;
1151 DBG_DEBUG("holder %s still pending for create %s [%s] - %s\n",
1152 GUID_buf_string(&rc.holder_req_guid, &tmp_guid_buf),
1153 create_guid_str,
1154 name,
1155 nt_errstr(status));
1156 TALLOC_FREE(frame);
1157 return status;
1158 }
1159
1160 struct smb2srv_open_recreate_state {
1161 struct smbXsrv_open *op;
1162 const struct GUID *create_guid;
1163 struct security_token *current_token;
1164 struct server_id me;
1165
1166 NTSTATUS status;
1167 };
1168
1169 static void smb2srv_open_recreate_fn(
1170 struct db_record *rec, TDB_DATA oldval, void *private_data)
1171 {
1172 struct smb2srv_open_recreate_state *state = private_data;
1173 TDB_DATA key = dbwrap_record_get_key(rec);
1174 struct smbXsrv_open_global0 *global = NULL;
1175
1176 state->status = smbXsrv_open_global_verify_record(
1177 key, oldval, state->op, &state->op->global);
1178 if (!NT_STATUS_IS_OK(state->status)) {
1179 DBG_WARNING("smbXsrv_open_global_verify_record for %s "
1180 "failed: %s\n",
1181 tdb_data_dbg(key),
1182 nt_errstr(state->status));
1183 goto not_found;
1184 }
1185 global = state->op->global;
1186
1187 /*
1188 * If the provided create_guid is NULL, this means that
1189 * the reconnect request was a v1 request. In that case
1190 * we should skip the create GUID verification, since
1191 * it is valid to v1-reconnect a v2-opened handle.
1192 */
1193 if ((state->create_guid != NULL) &&
1194 !GUID_equal(&global->create_guid, state->create_guid)) {
1195 struct GUID_txt_buf buf1, buf2;
1196 DBG_NOTICE("%s != %s in %s\n",
1197 GUID_buf_string(&global->create_guid, &buf1),
1198 GUID_buf_string(state->create_guid, &buf2),
1199 tdb_data_dbg(key));
1200 goto not_found;
1201 }
1202
1203 if (!security_token_is_sid(
1204 state->current_token, &global->open_owner)) {
1205 struct dom_sid_buf buf;
1206 DBG_NOTICE("global owner %s not in our token in %s\n",
1207 dom_sid_str_buf(&global->open_owner, &buf),
1208 tdb_data_dbg(key));
1209 goto not_found;
1210 }
1211
1212 if (!global->durable) {
1213 DBG_NOTICE("%"PRIu64"/%"PRIu64" not durable in %s\n",
1214 global->open_persistent_id,
1215 global->open_volatile_id,
1216 tdb_data_dbg(key));
1217 goto not_found;
1218 }
1219
1220 global->open_volatile_id = state->op->local_id;
1221 global->server_id = state->me;
1222
1223 state->status = smbXsrv_open_global_store(rec, key, oldval, global);
1224 if (!NT_STATUS_IS_OK(state->status)) {
1225 DBG_WARNING("smbXsrv_open_global_store for %s failed: %s\n",
1226 tdb_data_dbg(key),
1227 nt_errstr(state->status));
1228 return;
1229 }
1230 return;
1231
1232 not_found:
1233 state->status = NT_STATUS_OBJECT_NAME_NOT_FOUND;
1234 }
1235
1236 NTSTATUS smb2srv_open_recreate(struct smbXsrv_connection *conn,
1237 struct auth_session_info *session_info,
1238 uint64_t persistent_id,
1239 const struct GUID *create_guid,
1240 NTTIME now,
1241 struct smbXsrv_open **_open)
1242 {
1243 struct smbXsrv_open_table *table = conn->client->open_table;
1244 struct smb2srv_open_recreate_state state = {
1245 .create_guid = create_guid,
1246 .me = messaging_server_id(conn->client->msg_ctx),
1247 };
1248 struct smbXsrv_open_global_key_buf key_buf;
1249 TDB_DATA key = smbXsrv_open_global_id_to_key(
1250 persistent_id & UINT32_MAX, &key_buf);
1251 int ret, local_id;
1252 NTSTATUS status;
1253
1254 if (session_info == NULL) {
1255 DEBUG(10, ("session_info=NULL\n"));
1256 return NT_STATUS_INVALID_HANDLE;
1257 }
1258 state.current_token = session_info->security_token;
1259
1260 if (state.current_token == NULL) {
1261 DEBUG(10, ("current_token=NULL\n"));
1262 return NT_STATUS_INVALID_HANDLE;
1263 }
1264
1265 if ((persistent_id & 0xFFFFFFFF00000000LLU) != 0) {
1266 /*
1267 * We only use 32 bit for the persistent ID
1268 */
1269 DBG_DEBUG("persistent_id=%"PRIx64"\n", persistent_id);
1270 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
1271 }
1272
1273 if (table->local.num_opens >= table->local.max_opens) {
1274 return NT_STATUS_INSUFFICIENT_RESOURCES;
1275 }
1276
1277 state.op = talloc_zero(table, struct smbXsrv_open);
1278 if (state.op == NULL) {
1279 return NT_STATUS_NO_MEMORY;
1280 }
1281 state.op->table = table;
1282
1283 local_id = idr_get_new_random(
1284 table->local.idr,
1285 state.op,
1286 table->local.lowest_id,
1287 table->local.highest_id);
1288 if (local_id == -1) {
1289 TALLOC_FREE(state.op);
1290 return NT_STATUS_INSUFFICIENT_RESOURCES;
1291 }
1292 state.op->local_id = local_id;
1293 SMB_ASSERT(state.op->local_id == local_id); /* No coercion loss */
1294
1295 table->local.num_opens += 1;
1296
1297 state.op->idle_time = now;
1298 state.op->status = NT_STATUS_FILE_CLOSED;
1299
1300 status = dbwrap_do_locked(
1301 table->global.db_ctx, key, smb2srv_open_recreate_fn, &state);
1302 if (!NT_STATUS_IS_OK(status)) {
1303 DBG_DEBUG("dbwrap_do_locked() for %s failed: %s\n",
1304 tdb_data_dbg(key),
1305 nt_errstr(status));
1306 goto fail;
1307 }
1308
1309 if (!NT_STATUS_IS_OK(state.status)) {
1310 status = state.status;
1311 DBG_DEBUG("smb2srv_open_recreate_fn for %s failed: %s\n",
1312 tdb_data_dbg(key),
1313 nt_errstr(status));
1314 goto fail;
1315 }
1316
1317 talloc_set_destructor(state.op, smbXsrv_open_destructor);
1318
1319 if (CHECK_DEBUGLVL(10)) {
1320 struct smbXsrv_openB open_blob = {
1321 .info.info0 = state.op,
1322 };
1323 DBG_DEBUG("global_id (0x%08x) stored\n",
1324 state.op->global->open_global_id);
1325 NDR_PRINT_DEBUG(smbXsrv_openB, &open_blob);
1326 }
1327
1328 *_open = state.op;
1329
1330 return NT_STATUS_OK;
1331 fail:
1332 table->local.num_opens -= 1;
1333
1334 ret = idr_remove(table->local.idr, state.op->local_id);
1335 SMB_ASSERT(ret == 0);
1336 TALLOC_FREE(state.op);
1337 return status;
1338 }
1339
1340 struct smbXsrv_open_global_traverse_state {
1341 int (*fn)(struct db_record *rec, struct smbXsrv_open_global0 *, void *);
1342 void *private_data;
1343 };
1344
1345 static int smbXsrv_open_global_traverse_fn(struct db_record *rec, void *data)
1346 {
1347 struct smbXsrv_open_global_traverse_state *state =
1348 (struct smbXsrv_open_global_traverse_state*)data;
1349 struct smbXsrv_open_global0 *global = NULL;
1350 TDB_DATA key = dbwrap_record_get_key(rec);
1351 TDB_DATA val = dbwrap_record_get_value(rec);
1352 NTSTATUS status;
1353 int ret = -1;
1354
1355 status = smbXsrv_open_global_parse_record(
1356 talloc_tos(), key, val, &global);
1357 if (!NT_STATUS_IS_OK(status)) {
1358 return -1;
1359 }
1360
1361 ret = state->fn(rec, global, state->private_data);
1362 talloc_free(global);
1363 return ret;
1364 }
1365
1366 NTSTATUS smbXsrv_open_global_traverse(
1367 int (*fn)(struct db_record *rec, struct smbXsrv_open_global0 *, void *),
1368 void *private_data)
1369 {
1370
1371 NTSTATUS status;
1372 int count = 0;
1373 struct smbXsrv_open_global_traverse_state state = {
1374 .fn = fn,
1375 .private_data = private_data,
1376 };
1377
1378 become_root();
1379 status = smbXsrv_open_global_init();
1380 if (!NT_STATUS_IS_OK(status)) {
1381 unbecome_root();
1382 DEBUG(0, ("Failed to initialize open_global: %s\n",
1383 nt_errstr(status)));
1384 return status;
1385 }
1386
1387 status = dbwrap_traverse_read(smbXsrv_open_global_db_ctx,
1388 smbXsrv_open_global_traverse_fn,
1389 &state,
1390 &count);
1391 unbecome_root();
1392
1393 return status;
1394 }
1395
1396 struct smbXsrv_open_cleanup_state {
1397 uint32_t global_id;
1398 NTSTATUS status;
1399 };
1400
1401 static void smbXsrv_open_cleanup_fn(
1402 struct db_record *rec, TDB_DATA oldval, void *private_data)
1403 {
1404 struct smbXsrv_open_cleanup_state *state = private_data;
1405 struct smbXsrv_open_global0 *global = NULL;
1406 TDB_DATA key = dbwrap_record_get_key(rec);
1407 bool delete_open = false;
1408
1409 if (oldval.dsize == 0) {
1410 DBG_DEBUG("[global: 0x%08x] "
1411 "empty record in %s, skipping...\n",
1412 state->global_id,
1413 dbwrap_name(dbwrap_record_get_db(rec)));
1414 state->status = NT_STATUS_OK;
1415 return;
1416 }
1417
1418 state->status = smbXsrv_open_global_parse_record(
1419 talloc_tos(), key, oldval, &global);
1420 if (!NT_STATUS_IS_OK(state->status)) {
1421 DBG_WARNING("[global: %x08x] "
1422 "smbXsrv_open_global_parse_record() in %s "
1423 "failed: %s, deleting record\n",
1424 state->global_id,
1425 dbwrap_name(dbwrap_record_get_db(rec)),
1426 nt_errstr(state->status));
1427 delete_open = true;
1428 goto do_delete;
1429 }
1430
1431 if (server_id_is_disconnected(&global->server_id)) {
1432 struct timeval now = timeval_current();
1433 struct timeval disconnect_time;
1434 struct timeval_buf buf;
1435 int64_t tdiff;
1436
1437 nttime_to_timeval(&disconnect_time, global->disconnect_time);
1438 tdiff = usec_time_diff(&now, &disconnect_time);
1439 delete_open = (tdiff >= 1000*global->durable_timeout_msec);
1440
1441 DBG_DEBUG("[global: 0x%08x] "
1442 "disconnected at [%s] %"PRIi64"s ago with "
1443 "timeout of %"PRIu32"s -%s reached\n",
1444 state->global_id,
1445 timeval_str_buf(&disconnect_time,
1446 false,
1447 false,
1448 &buf),
1449 tdiff/1000000,
1450 global->durable_timeout_msec / 1000,
1451 delete_open ? "" : " not");
1452 } else if (!serverid_exists(&global->server_id)) {
1453 struct server_id_buf idbuf;
1454 DBG_DEBUG("[global: 0x%08x] "
1455 "server[%s] does not exist\n",
1456 state->global_id,
1457 server_id_str_buf(global->server_id, &idbuf));
1458 delete_open = true;
1459 }
1460
1461 if (!delete_open) {
1462 state->status = NT_STATUS_OK;
1463 return;
1464 }
1465 do_delete:
1466 state->status = dbwrap_record_delete(rec);
1467 if (!NT_STATUS_IS_OK(state->status)) {
1468 DBG_WARNING("[global: 0x%08x] "
1469 "failed to delete record "
1470 "from %s: %s\n",
1471 state->global_id,
1472 dbwrap_name(dbwrap_record_get_db(rec)),
1473 nt_errstr(state->status));
1474 return;
1475 }
1476
1477 DBG_DEBUG("[global: 0x%08x] "
1478 "deleted record from %s\n",
1479 state->global_id,
1480 dbwrap_name(dbwrap_record_get_db(rec)));
1481 }
1482
1483 NTSTATUS smbXsrv_open_cleanup(uint64_t persistent_id)
1484 {
1485 struct smbXsrv_open_cleanup_state state = {
1486 .global_id = persistent_id & UINT32_MAX,
1487 };
1488 struct smbXsrv_open_global_key_buf key_buf;
1489 TDB_DATA key = smbXsrv_open_global_id_to_key(
1490 state.global_id, &key_buf);
1491 NTSTATUS status;
1492
1493 status = dbwrap_do_locked(
1494 smbXsrv_open_global_db_ctx,
1495 key,
1496 smbXsrv_open_cleanup_fn,
1497 &state);
1498 if (!NT_STATUS_IS_OK(status)) {
1499 DBG_DEBUG("[global: 0x%08x] dbwrap_do_locked failed: %s\n",
1500 state.global_id,
1501 nt_errstr(status));
1502 return status;
1503 }
1504
1505 return state.status;
1506 }
GSS-enabled samba4