summaryrefslogtreecommitdiff
path: root/source4/winbind/wb_server.h
blob: 30737bccbfbfb7c17e7ee719665eba4bf3808129 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
/* 
   Unix SMB/CIFS implementation.
   Main winbindd server routines

   Copyright (C) Stefan Metzmacher	2005
   Copyright (C) Andrew Tridgell	2005
   
   This program is free software; you can redistribute it and/or modify
   it under the terms of the GNU General Public License as published by
   the Free Software Foundation; either version 2 of the License, or
   (at your option) any later version.
   
   This program is distributed in the hope that it will be useful,
   but WITHOUT ANY WARRANTY; without even the implied warranty of
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
   GNU General Public License for more details.
   
   You should have received a copy of the GNU General Public License
   along with this program; if not, write to the Free Software
   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
*/

#define WINBINDD_DIR "/tmp/.winbindd/"
#define WINBINDD_SOCKET WINBINDD_DIR"socket"
/* the privileged socket is in smbd_tmp_dir() */
#define WINBINDD_PRIVILEGED_SOCKET "winbind_socket"

#define WINBINDD_SAMBA3_SOCKET WINBINDD_DIR"pipe"
/* the privileged socket is in smbd_tmp_dir() */
#define WINBINDD_SAMBA3_PRIVILEGED_SOCKET "winbind_pipe"

/* this struct stores global data for the winbind task */
struct wbsrv_service {
	struct task_server *task;

	const struct dom_sid *primary_sid;
	struct wbsrv_domain *domains;
};

struct wbsrv_samconn {
	struct wbsrv_domain *domain;
	void *private_data;

	struct composite_context (*seqnum_send)(struct wbsrv_samconn *);
	NTSTATUS (*seqnum_recv)(struct composite_context *, uint64_t *);
};

struct wbsrv_domain {
	struct wbsrv_domain *next, *prev;

	BOOL initialized;

	const char *name;
	const struct dom_sid *sid;
	const char *dcname;

	struct dcerpc_pipe *lsa_pipe;
	struct policy_handle *lsa_policy;
	uint8_t lsa_auth_type;

	struct dcerpc_pipe *samr_pipe;
	struct policy_handle *samr_handle;
	struct policy_handle *domain_handle;

	struct dcerpc_pipe *netlogon_auth2_pipe;
	struct dcerpc_pipe *netlogon_pipe;
	struct cli_credentials *schannel_creds;

	BOOL busy;
	struct domain_request_state *request_queue;
};

/* 
  this is an abstraction for the actual protocol being used,
  so that we can listen on different sockets with different protocols
  e.g. the old samba3 protocol on one socket and a new protocol on another socket
*/
struct wbsrv_protocol_ops {
	const char *name;
	BOOL allow_pending_calls;
	uint32_t (*packet_length)(DATA_BLOB blob);
	NTSTATUS (*pull_request)(DATA_BLOB blob, TALLOC_CTX *mem_ctx, struct wbsrv_call **call);
	NTSTATUS (*handle_call)(struct wbsrv_call *call);
	NTSTATUS (*push_reply)(struct wbsrv_call *call, TALLOC_CTX *mem_ctx, DATA_BLOB *blob);
};

/*
  state of a listen socket and it's protocol information
*/
struct wbsrv_listen_socket {
	const char *socket_path;
	struct wbsrv_service *service;
	BOOL privileged;
	const struct wbsrv_protocol_ops *ops;
};

/*
  state of an open winbind connection
*/
struct wbsrv_connection {
	/* stream connection we belong to */
	struct stream_connection *conn;

	/* the listening socket we belong to, it holds protocol hooks */
	struct wbsrv_listen_socket *listen_socket;

	/* storage for protocol specific data */
	void *protocol_private_data;

	/* the partial data we've receiced yet */
	DATA_BLOB partial;

	/* the amount that we used yet from the partial buffer */
	uint32_t partial_read;

	/* prevent loops when we use half async code, while processing a requuest */
	BOOL processing;

	/* how many calls are pending */
	uint32_t pending_calls;

	struct data_blob_list_item *send_queue;
};

/*
  state of one request

  NOTE about async replies:
   if the backend wants to reply later:

   - it should set the WBSRV_CALL_FLAGS_REPLY_ASYNC flag, and may set a 
     talloc_destructor on the this structure or on the private_data (if it's a
     talloc child of this structure), so that wbsrv_terminate_connection
     called by another call clean up the whole connection correct.
   - When the backend is ready to reply it should call wbsrv_send_reply(call),
     wbsrv_send_reply implies talloc_free(call), so the backend should use 
     talloc_reference(call), if it needs it later. 
   - If wbsrv_send_reply doesn't return NT_STATUS_OK, the backend function 
     should call, wbsrv_terminate_connection(call->wbconn, nt_errstr(status));
     return;

*/
struct wbsrv_call {
#define WBSRV_CALL_FLAGS_REPLY_ASYNC 0x00000001
	uint32_t flags;

	/* the backend should use this event context */
	struct event_context *event_ctx;

	/* the connection the call belongs to */
	struct wbsrv_connection *wbconn;

	/* storage for protocol specific data */
	void *private_data;
};