1 /*
2    Unix SMB/CIFS implementation.
3 
4    endpoint server for the epmapper pipe
5 
6    Copyright (C) Andrew Tridgell 2003
7    Copyright (C) Jelmer Vernooij 2004
8 
9    This program is free software; you can redistribute it and/or modify
10    it under the terms of the GNU General Public License as published by
11    the Free Software Foundation; either version 2 of the License, or
12    (at your option) any later version.
13 
14    This program is distributed in the hope that it will be useful,
15    but WITHOUT ANY WARRANTY; without even the implied warranty of
16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17    GNU General Public License for more details.
18 
19    You should have received a copy of the GNU General Public License
20    along with this program; if not, write to the Free Software
21    Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
22 */
23 
24 #include "includes.h"
25 #include "librpc/gen_ndr/ndr_epmapper.h"
26 #include "rpc_server/dcerpc_server.h"
27 #include "rpc_server/common/common.h"
28 
29 typedef uint32_t error_status_t;
30 
31 /* handle types for this module */
32 enum handle_types {HTYPE_LOOKUP};
33 
34 /* a endpoint combined with an interface description */
35 struct dcesrv_ep_iface {
36 	const char *name;
37 	struct epm_tower ep;
38 };
39 
40 /*
41   build a list of all interfaces handled by all endpoint servers
42 */
build_ep_list(TALLOC_CTX * mem_ctx,struct dcesrv_endpoint * endpoint_list,struct dcesrv_ep_iface ** eps)43 static uint32_t build_ep_list(TALLOC_CTX *mem_ctx,
44 			      struct dcesrv_endpoint *endpoint_list,
45 			      struct dcesrv_ep_iface **eps)
46 {
47 	struct dcesrv_endpoint *d;
48 	uint32_t total = 0;
49 	NTSTATUS status;
50 
51 	*eps = NULL;
52 
53 	for (d=endpoint_list; d; d=d->next) {
54 		struct dcesrv_if_list *iface;
55 		struct dcerpc_binding *description;
56 
57 		for (iface=d->interface_list;iface;iface=iface->next) {
58 			(*eps) = talloc_realloc(mem_ctx,
59 						  *eps,
60 						  struct dcesrv_ep_iface,
61 						  total + 1);
62 			if (!*eps) {
63 				return 0;
64 			}
65 			(*eps)[total].name = iface->iface.name;
66 
67 			description = d->ep_description;
68 			description->object = iface->iface.syntax_id;
69 
70 			status = dcerpc_binding_build_tower(mem_ctx, description, &(*eps)[total].ep);
71 			if (NT_STATUS_IS_ERR(status)) {
72 				DEBUG(1, ("Unable to build tower for %s\n", iface->iface.name));
73 				continue;
74 			}
75 			total++;
76 		}
77 	}
78 
79 	return total;
80 }
81 
82 
epm_Insert(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_Insert * r)83 static error_status_t epm_Insert(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
84 				 struct epm_Insert *r)
85 {
86 	DCESRV_FAULT(DCERPC_FAULT_OP_RNG_ERROR);
87 }
88 
epm_Delete(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_Delete * r)89 static error_status_t epm_Delete(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
90 				 struct epm_Delete *r)
91 {
92 	DCESRV_FAULT(DCERPC_FAULT_OP_RNG_ERROR);
93 }
94 
95 
96 /*
97   implement epm_Lookup. This call is used to enumerate the interfaces
98   available on a rpc server
99 */
epm_Lookup(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_Lookup * r)100 static error_status_t epm_Lookup(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
101 				 struct epm_Lookup *r)
102 {
103 	struct dcesrv_handle *h;
104 	struct rpc_eps {
105 		uint32_t count;
106 		struct dcesrv_ep_iface *e;
107 	} *eps;
108 	uint32_t num_ents;
109 	int i;
110 
111 	DCESRV_PULL_HANDLE_FAULT(h, r->in.entry_handle, HTYPE_LOOKUP);
112 
113 	eps = h->data;
114 
115 	if (!eps) {
116 		/* this is the first call - fill the list. Subsequent calls
117 		   will feed from this list, stored in the handle */
118 		eps = talloc(h, struct rpc_eps);
119 		if (!eps) {
120 			return EPMAPPER_STATUS_NO_MEMORY;
121 		}
122 		h->data = eps;
123 
124 		eps->count = build_ep_list(h, dce_call->conn->dce_ctx->endpoint_list, &eps->e);
125 	}
126 
127 	/* return the next N elements */
128 	num_ents = r->in.max_ents;
129 	if (num_ents > eps->count) {
130 		num_ents = eps->count;
131 	}
132 
133 	*r->out.entry_handle = h->wire_handle;
134 	r->out.num_ents = talloc(mem_ctx, uint32_t);
135 	*r->out.num_ents = num_ents;
136 
137 	if (num_ents == 0) {
138 		r->out.entries = NULL;
139 		ZERO_STRUCTP(r->out.entry_handle);
140 		talloc_free(h);
141 		return EPMAPPER_STATUS_NO_MORE_ENTRIES;
142 	}
143 
144 	r->out.entries = talloc_array(mem_ctx, struct epm_entry_t, num_ents);
145 	if (!r->out.entries) {
146 		return EPMAPPER_STATUS_NO_MEMORY;
147 	}
148 
149 	for (i=0;i<num_ents;i++) {
150 		ZERO_STRUCT(r->out.entries[i].object);
151 		r->out.entries[i].annotation = eps->e[i].name;
152 		r->out.entries[i].tower = talloc(mem_ctx, struct epm_twr_t);
153 		if (!r->out.entries[i].tower) {
154 			return EPMAPPER_STATUS_NO_MEMORY;
155 		}
156 		r->out.entries[i].tower->tower = eps->e[i].ep;
157 	}
158 
159 	eps->count -= num_ents;
160 	eps->e += num_ents;
161 
162 	return EPMAPPER_STATUS_OK;
163 }
164 
165 
166 /*
167   implement epm_Map. This is used to find the specific endpoint to talk to given
168   a generic protocol tower
169 */
epm_Map(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_Map * r)170 static error_status_t epm_Map(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
171 			      struct epm_Map *r)
172 {
173 	uint32_t count;
174 	int i;
175 	struct dcesrv_ep_iface *eps;
176 	struct epm_floor *floors;
177 	enum dcerpc_transport_t transport;
178 	struct dcerpc_syntax_id ndr_syntax;
179 
180 	count = build_ep_list(mem_ctx, dce_call->conn->dce_ctx->endpoint_list, &eps);
181 
182 	ZERO_STRUCT(*r->out.entry_handle);
183 	r->out.num_towers = talloc(mem_ctx, uint32_t);
184 	*r->out.num_towers = 1;
185 	r->out.towers = talloc(mem_ctx, struct epm_twr_p_t);
186 	if (!r->out.towers) {
187 		return EPMAPPER_STATUS_NO_MEMORY;
188 	}
189 	r->out.towers->twr = talloc(mem_ctx, struct epm_twr_t);
190 	if (!r->out.towers->twr) {
191 		return EPMAPPER_STATUS_NO_MEMORY;
192 	}
193 
194 	if (!r->in.map_tower || r->in.max_towers == 0 ||
195 	    r->in.map_tower->tower.num_floors < 3) {
196 		goto failed;
197 	}
198 
199 	floors = r->in.map_tower->tower.floors;
200 
201 	dcerpc_floor_get_lhs_data(&r->in.map_tower->tower.floors[1], &ndr_syntax);
202 
203 	if (floors[1].lhs.protocol != EPM_PROTOCOL_UUID ||
204 		!GUID_equal(&ndr_syntax.uuid, &ndr_transfer_syntax.uuid) ||
205 	    ndr_syntax.if_version != ndr_transfer_syntax.if_version) {
206 		goto failed;
207 	}
208 
209 	transport = dcerpc_transport_by_tower(&r->in.map_tower->tower);
210 
211 	if (transport == -1) {
212 		DEBUG(2, ("Client requested unknown transport with levels: "));
213 		for (i = 2; i < r->in.map_tower->tower.num_floors; i++) {
214 			DEBUG(2, ("%d, ", r->in.map_tower->tower.floors[i].lhs.protocol));
215 		}
216 		DEBUG(2, ("\n"));
217 		goto failed;
218 	}
219 
220 	for (i=0;i<count;i++) {
221 		if (
222 			!data_blob_equal(&r->in.map_tower->tower.floors[0].lhs.lhs_data,
223 			&eps[i].ep.floors[0].lhs.lhs_data)
224 			|| transport != dcerpc_transport_by_tower(&eps[i].ep)) {
225 			continue;
226 		}
227 
228 		r->out.towers->twr->tower = eps[i].ep;
229 		r->out.towers->twr->tower_length = 0;
230 		return EPMAPPER_STATUS_OK;
231 	}
232 
233 
234 failed:
235 	*r->out.num_towers = 0;
236 	r->out.towers->twr = NULL;
237 
238 	return EPMAPPER_STATUS_NO_MORE_ENTRIES;
239 }
240 
epm_LookupHandleFree(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_LookupHandleFree * r)241 static error_status_t epm_LookupHandleFree(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
242 					   struct epm_LookupHandleFree *r)
243 {
244 	DCESRV_FAULT(DCERPC_FAULT_OP_RNG_ERROR);
245 }
246 
epm_InqObject(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_InqObject * r)247 static error_status_t epm_InqObject(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
248 				    struct epm_InqObject *r)
249 {
250 	DCESRV_FAULT(DCERPC_FAULT_OP_RNG_ERROR);
251 }
252 
epm_MgmtDelete(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_MgmtDelete * r)253 static error_status_t epm_MgmtDelete(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
254 			       struct epm_MgmtDelete *r)
255 {
256 	DCESRV_FAULT(DCERPC_FAULT_OP_RNG_ERROR);
257 }
258 
epm_MapAuth(struct dcesrv_call_state * dce_call,TALLOC_CTX * mem_ctx,struct epm_MapAuth * r)259 static error_status_t epm_MapAuth(struct dcesrv_call_state *dce_call, TALLOC_CTX *mem_ctx,
260 			    struct epm_MapAuth *r)
261 {
262 	DCESRV_FAULT(DCERPC_FAULT_OP_RNG_ERROR);
263 }
264 
265 /* include the generated boilerplate */
266 #include "librpc/gen_ndr/ndr_epmapper_s.c"
267