| 1 | /*
|
|---|
| 2 | * Expand msdfs targets based on client IP
|
|---|
| 3 | *
|
|---|
| 4 | * Copyright (C) Volker Lendecke, 2004
|
|---|
| 5 | *
|
|---|
| 6 | * This program is free software; you can redistribute it and/or modify
|
|---|
| 7 | * it under the terms of the GNU General Public License as published by
|
|---|
| 8 | * the Free Software Foundation; either version 3 of the License, or
|
|---|
| 9 | * (at your option) any later version.
|
|---|
| 10 | *
|
|---|
| 11 | * This program is distributed in the hope that it will be useful,
|
|---|
| 12 | * but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|---|
| 13 | * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|---|
| 14 | * GNU General Public License for more details.
|
|---|
| 15 | *
|
|---|
| 16 | * You should have received a copy of the GNU General Public License
|
|---|
| 17 | * along with this program; if not, see <http://www.gnu.org/licenses/>.
|
|---|
| 18 | */
|
|---|
| 19 |
|
|---|
| 20 | #include "includes.h"
|
|---|
| 21 | #include "system/filesys.h"
|
|---|
| 22 | #include "smbd/smbd.h"
|
|---|
| 23 | #include "../librpc/gen_ndr/ndr_netlogon.h"
|
|---|
| 24 | #include "smbd/globals.h"
|
|---|
| 25 | #include "auth.h"
|
|---|
| 26 |
|
|---|
| 27 | #undef DBGC_CLASS
|
|---|
| 28 | #define DBGC_CLASS DBGC_VFS
|
|---|
| 29 |
|
|---|
| 30 | /**********************************************************
|
|---|
| 31 | Under mapfile we expect a table of the following format:
|
|---|
| 32 |
|
|---|
| 33 | IP-Prefix whitespace expansion
|
|---|
| 34 |
|
|---|
| 35 | For example:
|
|---|
| 36 | 192.168.234 local.samba.org
|
|---|
| 37 | 192.168 remote.samba.org
|
|---|
| 38 | default.samba.org
|
|---|
| 39 |
|
|---|
| 40 | This is to redirect a DFS client to a host close to it.
|
|---|
| 41 | ***********************************************************/
|
|---|
| 42 |
|
|---|
| 43 | static char *read_target_host(TALLOC_CTX *ctx, const char *mapfile,
|
|---|
| 44 | const char *clientaddr)
|
|---|
| 45 | {
|
|---|
| 46 | XFILE *f;
|
|---|
| 47 | char buf[1024];
|
|---|
| 48 | char *space = buf;
|
|---|
| 49 | bool found = false;
|
|---|
| 50 |
|
|---|
| 51 | f = x_fopen(mapfile, O_RDONLY, 0);
|
|---|
| 52 |
|
|---|
| 53 | if (f == NULL) {
|
|---|
| 54 | DEBUG(0,("can't open IP map %s. Error %s\n",
|
|---|
| 55 | mapfile, strerror(errno) ));
|
|---|
| 56 | return NULL;
|
|---|
| 57 | }
|
|---|
| 58 |
|
|---|
| 59 | DEBUG(10, ("Scanning mapfile [%s]\n", mapfile));
|
|---|
| 60 |
|
|---|
| 61 | while (x_fgets(buf, sizeof(buf), f) != NULL) {
|
|---|
| 62 |
|
|---|
| 63 | if ((strlen(buf) > 0) && (buf[strlen(buf)-1] == '\n'))
|
|---|
| 64 | buf[strlen(buf)-1] = '\0';
|
|---|
| 65 |
|
|---|
| 66 | DEBUG(10, ("Scanning line [%s]\n", buf));
|
|---|
| 67 |
|
|---|
| 68 | space = strchr_m(buf, ' ');
|
|---|
| 69 |
|
|---|
| 70 | if (space == NULL) {
|
|---|
| 71 | DEBUG(0, ("Ignoring invalid line %s\n", buf));
|
|---|
| 72 | continue;
|
|---|
| 73 | }
|
|---|
| 74 |
|
|---|
| 75 | *space = '\0';
|
|---|
| 76 |
|
|---|
| 77 | if (strncmp(clientaddr, buf, strlen(buf)) == 0) {
|
|---|
| 78 | found = true;
|
|---|
| 79 | break;
|
|---|
| 80 | }
|
|---|
| 81 | }
|
|---|
| 82 |
|
|---|
| 83 | x_fclose(f);
|
|---|
| 84 |
|
|---|
| 85 | if (!found) {
|
|---|
| 86 | return NULL;
|
|---|
| 87 | }
|
|---|
| 88 |
|
|---|
| 89 | space += 1;
|
|---|
| 90 |
|
|---|
| 91 | while (isspace(*space))
|
|---|
| 92 | space += 1;
|
|---|
| 93 |
|
|---|
| 94 | return talloc_strdup(ctx, space);
|
|---|
| 95 | }
|
|---|
| 96 |
|
|---|
| 97 | /**********************************************************
|
|---|
| 98 |
|
|---|
| 99 | Expand the msdfs target host using read_target_host
|
|---|
| 100 | explained above. The syntax used in the msdfs link is
|
|---|
| 101 |
|
|---|
| 102 | msdfs:@table-filename@/share
|
|---|
| 103 |
|
|---|
| 104 | Everything between and including the two @-signs is
|
|---|
| 105 | replaced by the substitution string found in the table
|
|---|
| 106 | described above.
|
|---|
| 107 |
|
|---|
| 108 | ***********************************************************/
|
|---|
| 109 |
|
|---|
| 110 | static char *expand_msdfs_target(TALLOC_CTX *ctx,
|
|---|
| 111 | connection_struct *conn,
|
|---|
| 112 | char *target)
|
|---|
| 113 | {
|
|---|
| 114 | char *mapfilename = NULL;
|
|---|
| 115 | char *filename_start = strchr_m(target, '@');
|
|---|
| 116 | char *filename_end = NULL;
|
|---|
| 117 | int filename_len = 0;
|
|---|
| 118 | char *targethost = NULL;
|
|---|
| 119 | char *new_target = NULL;
|
|---|
| 120 |
|
|---|
| 121 | if (filename_start == NULL) {
|
|---|
| 122 | DEBUG(10, ("No filename start in %s\n", target));
|
|---|
| 123 | return NULL;
|
|---|
| 124 | }
|
|---|
| 125 |
|
|---|
| 126 | filename_end = strchr_m(filename_start+1, '@');
|
|---|
| 127 |
|
|---|
| 128 | if (filename_end == NULL) {
|
|---|
| 129 | DEBUG(10, ("No filename end in %s\n", target));
|
|---|
| 130 | return NULL;
|
|---|
| 131 | }
|
|---|
| 132 |
|
|---|
| 133 | filename_len = PTR_DIFF(filename_end, filename_start+1);
|
|---|
| 134 | mapfilename = talloc_strdup(ctx, filename_start+1);
|
|---|
| 135 | if (!mapfilename) {
|
|---|
| 136 | return NULL;
|
|---|
| 137 | }
|
|---|
| 138 | mapfilename[filename_len] = '\0';
|
|---|
| 139 |
|
|---|
| 140 | DEBUG(10, ("Expanding from table [%s]\n", mapfilename));
|
|---|
| 141 |
|
|---|
| 142 | targethost = read_target_host(
|
|---|
| 143 | ctx, conn->sconn->client_id.addr, mapfilename);
|
|---|
| 144 | if (targethost == NULL) {
|
|---|
| 145 | DEBUG(1, ("Could not expand target host from file %s\n",
|
|---|
| 146 | mapfilename));
|
|---|
| 147 | return NULL;
|
|---|
| 148 | }
|
|---|
| 149 |
|
|---|
| 150 | targethost = talloc_sub_advanced(ctx,
|
|---|
| 151 | lp_servicename(SNUM(conn)),
|
|---|
| 152 | conn->session_info->unix_name,
|
|---|
| 153 | conn->connectpath,
|
|---|
| 154 | conn->session_info->utok.gid,
|
|---|
| 155 | conn->session_info->sanitized_username,
|
|---|
| 156 | conn->session_info->info3->base.domain.string,
|
|---|
| 157 | targethost);
|
|---|
| 158 |
|
|---|
| 159 | DEBUG(10, ("Expanded targethost to %s\n", targethost));
|
|---|
| 160 |
|
|---|
| 161 | /* Replace the part between '@...@' */
|
|---|
| 162 | *filename_start = '\0';
|
|---|
| 163 | new_target = talloc_asprintf(ctx,
|
|---|
| 164 | "%s%s%s",
|
|---|
| 165 | target,
|
|---|
| 166 | targethost,
|
|---|
| 167 | filename_end+1);
|
|---|
| 168 | if (!new_target) {
|
|---|
| 169 | return NULL;
|
|---|
| 170 | }
|
|---|
| 171 |
|
|---|
| 172 | DEBUG(10, ("New DFS target: %s\n", new_target));
|
|---|
| 173 | return new_target;
|
|---|
| 174 | }
|
|---|
| 175 |
|
|---|
| 176 | static int expand_msdfs_readlink(struct vfs_handle_struct *handle,
|
|---|
| 177 | const char *path, char *buf, size_t bufsiz)
|
|---|
| 178 | {
|
|---|
| 179 | TALLOC_CTX *ctx = talloc_tos();
|
|---|
| 180 | int result;
|
|---|
| 181 | char *target = TALLOC_ARRAY(ctx, char, PATH_MAX+1);
|
|---|
| 182 | size_t len;
|
|---|
| 183 |
|
|---|
| 184 | if (!target) {
|
|---|
| 185 | errno = ENOMEM;
|
|---|
| 186 | return -1;
|
|---|
| 187 | }
|
|---|
| 188 | if (bufsiz == 0) {
|
|---|
| 189 | errno = EINVAL;
|
|---|
| 190 | return -1;
|
|---|
| 191 | }
|
|---|
| 192 |
|
|---|
| 193 | result = SMB_VFS_NEXT_READLINK(handle, path, target,
|
|---|
| 194 | PATH_MAX);
|
|---|
| 195 |
|
|---|
| 196 | if (result <= 0)
|
|---|
| 197 | return result;
|
|---|
| 198 |
|
|---|
| 199 | target[result] = '\0';
|
|---|
| 200 |
|
|---|
| 201 | if ((strncmp(target, "msdfs:", 6) == 0) &&
|
|---|
| 202 | (strchr_m(target, '@') != NULL)) {
|
|---|
| 203 | target = expand_msdfs_target(ctx, handle->conn, target);
|
|---|
| 204 | if (!target) {
|
|---|
| 205 | errno = ENOENT;
|
|---|
| 206 | return -1;
|
|---|
| 207 | }
|
|---|
| 208 | }
|
|---|
| 209 |
|
|---|
| 210 | len = MIN(bufsiz, strlen(target));
|
|---|
| 211 |
|
|---|
| 212 | memcpy(buf, target, len);
|
|---|
| 213 |
|
|---|
| 214 | TALLOC_FREE(target);
|
|---|
| 215 | return len;
|
|---|
| 216 | }
|
|---|
| 217 |
|
|---|
| 218 | static struct vfs_fn_pointers vfs_expand_msdfs_fns = {
|
|---|
| 219 | .vfs_readlink = expand_msdfs_readlink
|
|---|
| 220 | };
|
|---|
| 221 |
|
|---|
| 222 | NTSTATUS vfs_expand_msdfs_init(void);
|
|---|
| 223 | NTSTATUS vfs_expand_msdfs_init(void)
|
|---|
| 224 | {
|
|---|
| 225 | return smb_register_vfs(SMB_VFS_INTERFACE_VERSION, "expand_msdfs",
|
|---|
| 226 | &vfs_expand_msdfs_fns);
|
|---|
| 227 | }
|
|---|