xref: /dragonfly/sys/netproto/smb/smb_conn.c (revision f9993810)
1 /*
2  * Copyright (c) 2000-2001 Boris Popov
3  * All rights reserved.
4  *
5  * Redistribution and use in source and binary forms, with or without
6  * modification, are permitted provided that the following conditions
7  * are met:
8  * 1. Redistributions of source code must retain the above copyright
9  *    notice, this list of conditions and the following disclaimer.
10  * 2. Redistributions in binary form must reproduce the above copyright
11  *    notice, this list of conditions and the following disclaimer in the
12  *    documentation and/or other materials provided with the distribution.
13  * 3. All advertising materials mentioning features or use of this software
14  *    must display the following acknowledgement:
15  *    This product includes software developed by Boris Popov.
16  * 4. Neither the name of the author nor the names of any co-contributors
17  *    may be used to endorse or promote products derived from this software
18  *    without specific prior written permission.
19  *
20  * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
21  * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
22  * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
23  * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
24  * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
25  * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
26  * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
27  * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
28  * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
29  * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
30  * SUCH DAMAGE.
31  *
32  * $FreeBSD: src/sys/netsmb/smb_conn.c,v 1.1.2.1 2001/05/22 08:32:33 bp Exp $
33  */
34 
35 /*
36  * Connection engine.
37  */
38 
39 #include <sys/param.h>
40 #include <sys/systm.h>
41 #include <sys/kernel.h>
42 #include <sys/malloc.h>
43 #include <sys/proc.h>
44 #include <sys/caps.h>
45 #include <sys/lock.h>
46 #include <sys/sysctl.h>
47 #include <sys/socketvar.h>
48 
49 #include <sys/iconv.h>
50 
51 #include "smb.h"
52 #include "smb_subr.h"
53 #include "smb_conn.h"
54 #include "smb_tran.h"
55 #include "smb_trantcp.h"
56 
57 static struct smb_connobj smb_vclist;
58 static int smb_vcnext = 1;	/* next unique id for VC */
59 
60 SYSCTL_NODE(_net, OID_AUTO, smb, CTLFLAG_RW, NULL, "SMB protocol");
61 
62 MALLOC_DEFINE(M_SMBCONN, "SMB conn", "SMB connection");
63 
64 static void smb_co_init(struct smb_connobj *cp, int level, char *objname);
65 static void smb_co_done(struct smb_connobj *cp);
66 static int  smb_co_lockstatus(struct smb_connobj *cp, struct thread *td);
67 
68 static int  smb_vc_disconnect(struct smb_vc *vcp);
69 static void smb_vc_free(struct smb_connobj *cp);
70 static void smb_vc_gone(struct smb_connobj *cp, struct smb_cred *scred);
71 
72 /*
73  * Connection object
74  */
75 static void smb_co_ref(struct smb_connobj *cp);
76 static void smb_co_rele(struct smb_connobj *cp, struct smb_cred *scred);
77 static int  smb_co_get(struct smb_connobj *cp, int flags, struct smb_cred *scred);
78 static void smb_co_put(struct smb_connobj *cp, struct smb_cred *scred);
79 static int  smb_co_lock(struct smb_connobj *cp, int flags);
80 static void smb_co_unlock(struct smb_connobj *cp, int flags);
81 
82 static smb_co_free_t smb_share_free;
83 static smb_co_gone_t smb_share_gone;
84 
85 static int  smb_sysctl_treedump(SYSCTL_HANDLER_ARGS);
86 
87 SYSCTL_PROC(_net_smb, OID_AUTO, treedump, CTLFLAG_RD | CTLTYPE_OPAQUE,
88 	    NULL, 0, smb_sysctl_treedump, "S,treedump", "Requester tree");
89 
90 int
91 smb_sm_init(void)
92 {
93 	smb_co_init(&smb_vclist, SMBL_SM, "smbsm");
94 	smb_co_unlock(&smb_vclist, 0);
95 	return 0;
96 }
97 
98 int
99 smb_sm_done(void)
100 {
101 
102 	/* XXX: hold the mutex */
103 	if (smb_vclist.co_usecount > 1) {
104 		SMBERROR("%d connections still active\n", smb_vclist.co_usecount - 1);
105 		return EBUSY;
106 	}
107 	smb_co_done(&smb_vclist);
108 	return 0;
109 }
110 
111 static int
112 smb_sm_lockvclist(int flags)
113 {
114 	return smb_co_lock(&smb_vclist, flags | LK_CANRECURSE);
115 }
116 
117 static void
118 smb_sm_unlockvclist(void)
119 {
120 	smb_co_unlock(&smb_vclist, LK_RELEASE);
121 }
122 
123 static int
124 smb_sm_lookupint(struct smb_vcspec *vcspec, struct smb_sharespec *shspec,
125 	struct smb_cred *scred,	struct smb_vc **vcpp)
126 {
127 	struct smb_connobj *scp;
128 	struct smb_vc *vcp;
129 	int exact = 1;
130 	int error;
131 
132 	vcspec->shspec = shspec;
133 	error = ENOENT;
134 	vcp = NULL;
135 	SMBCO_FOREACH(scp, &smb_vclist) {
136 		vcp = (struct smb_vc *)scp;
137 		error = smb_vc_lock(vcp, LK_EXCLUSIVE);
138 		if (error)
139 			continue;
140 
141 		error = 1;
142 		if ((vcp->obj.co_flags & SMBV_PRIVATE) ||
143 		    !CONNADDREQ(vcp->vc_paddr, vcspec->sap) ||
144 		    strcmp(vcp->vc_username, vcspec->username) != 0)
145 			goto unlock;
146 		if (vcspec->owner != SMBM_ANY_OWNER) {
147 			if (vcp->vc_uid != vcspec->owner)
148 				goto unlock;
149 		} else
150 			exact = 0;
151 		if (vcspec->group != SMBM_ANY_GROUP) {
152 			if (vcp->vc_grp != vcspec->group)
153 				goto unlock;
154 		} else
155 			exact = 0;
156 
157 		if (vcspec->mode & SMBM_EXACT) {
158 			if (!exact ||
159 			    (vcspec->mode & SMBM_MASK) != vcp->vc_mode)
160 				goto unlock;
161 		}
162 		if (smb_vc_access(vcp, scred, vcspec->mode) != 0)
163 			goto unlock;
164 		vcspec->ssp = NULL;
165 		if (shspec) {
166 			error = smb_vc_lookupshare(vcp, shspec, scred, &vcspec->ssp);
167 			if (error != 0)
168 				goto unlock;
169 		}
170 		error = 0;
171 		break;
172 unlock:
173 		smb_vc_unlock(vcp, 0);
174 	}
175 	if (vcp) {
176 		smb_vc_ref(vcp);
177 		*vcpp = vcp;
178 	}
179 	return error;
180 }
181 
182 int
183 smb_sm_lookup(struct smb_vcspec *vcspec, struct smb_sharespec *shspec,
184 	struct smb_cred *scred,	struct smb_vc **vcpp)
185 {
186 	struct smb_vc *vcp;
187 	struct smb_share *ssp = NULL;
188 	int error;
189 
190 	*vcpp = vcp = NULL;
191 
192 	error = smb_sm_lockvclist(LK_EXCLUSIVE);
193 	if (error)
194 		return error;
195 	error = smb_sm_lookupint(vcspec, shspec, scred, vcpp);
196 	if (error == 0 || (vcspec->flags & SMBV_CREATE) == 0) {
197 		smb_sm_unlockvclist();
198 		return error;
199 	}
200 	error = smb_sm_lookupint(vcspec, NULL, scred, &vcp);
201 	if (error) {
202 		error = smb_vc_create(vcspec, scred, &vcp);
203 		if (error)
204 			goto out;
205 		error = smb_vc_connect(vcp, scred);
206 		if (error)
207 			goto out;
208 	}
209 	if (shspec == NULL)
210 		goto out;
211 	error = smb_share_create(vcp, shspec, scred, &ssp);
212 	if (error)
213 		goto out;
214 	error = smb_smb_treeconnect(ssp, scred);
215 	if (error == 0)
216 		vcspec->ssp = ssp;
217 	else
218 		smb_share_put(ssp, scred);
219 out:
220 	smb_sm_unlockvclist();
221 	if (error == 0)
222 		*vcpp = vcp;
223 	else if (vcp)
224 		smb_vc_put(vcp, scred);
225 	return error;
226 }
227 
228 /*
229  * Common code for connection object
230  */
231 static void
232 smb_co_init(struct smb_connobj *cp, int level, char *objname)
233 {
234 	SLIST_INIT(&cp->co_children);
235 	smb_sl_init(&cp->co_interlock, objname);
236 	lockinit(&cp->co_lock, objname, 0, 0);
237 	cp->co_level = level;
238 	cp->co_usecount = 1;
239 	smb_co_lock(cp, LK_EXCLUSIVE);
240 }
241 
242 static void
243 smb_co_done(struct smb_connobj *cp)
244 {
245 	smb_sl_destroy(&cp->co_interlock);
246 	lockdestroy(&cp->co_lock);
247 }
248 
249 static void
250 smb_co_gone(struct smb_connobj *cp, struct smb_cred *scred)
251 {
252 	struct smb_connobj *parent;
253 
254 	if (cp->co_gone)
255 		cp->co_gone(cp, scred);
256 	parent = cp->co_parent;
257 	if (parent) {
258 		smb_co_lock(parent, LK_EXCLUSIVE);
259 		SLIST_REMOVE(&parent->co_children, cp, smb_connobj, co_next);
260 		smb_co_put(parent, scred);
261 	}
262 	lockmgr(&cp->co_lock, LK_RELEASE);
263 	while (cp->co_usecount > 0) {
264 		tsleep(&cp->co_lock, 0, "smbgone", hz);
265 	}
266 	if (cp->co_free)
267 		cp->co_free(cp);
268 }
269 
270 static void
271 smb_co_ref(struct smb_connobj *cp)
272 {
273 	SMB_CO_LOCK(cp);
274 	cp->co_usecount++;
275 	SMB_CO_UNLOCK(cp);
276 }
277 
278 static void
279 smb_co_rele(struct smb_connobj *cp, struct smb_cred *scred)
280 {
281 	SMB_CO_LOCK(cp);
282 	if (cp->co_usecount > 1) {
283 		cp->co_usecount--;
284 		SMB_CO_UNLOCK(cp);
285 		return;
286 	}
287 	if (cp->co_usecount <= 0) {
288 		SMBERROR("negative use_count for object %d", cp->co_level);
289 		SMB_CO_UNLOCK(cp);
290 		return;
291 	}
292 	cp->co_usecount = 0;
293 	if ((cp->co_flags & SMBO_GONE) == 0) {
294 		cp->co_flags |= SMBO_GONE;
295 		SMB_CO_UNLOCK(cp);
296 		lockmgr(&cp->co_lock, LK_EXCLUSIVE);
297 		smb_co_gone(cp, scred);
298 	} else {
299 		SMB_CO_UNLOCK(cp);
300 		wakeup(&cp->co_lock);
301 	}
302 }
303 
304 static int
305 smb_co_get(struct smb_connobj *cp, int flags, struct smb_cred *scred)
306 {
307 	int error;
308 
309 	SMB_CO_LOCK(cp);
310 	cp->co_usecount++;
311 	SMB_CO_UNLOCK(cp);
312 	error = smb_co_lock(cp, flags);
313 	if (error) {
314 		SMB_CO_LOCK(cp);
315 		if (cp->co_usecount > 1) {
316 			cp->co_usecount--;
317 			SMB_CO_UNLOCK(cp);
318 		} else if (cp->co_usecount <= 0) {
319 			SMBERROR("negative use_count for object %d", cp->co_level);
320 			SMB_CO_UNLOCK(cp);
321 		} else {
322 			cp->co_usecount = 0;
323 			if ((cp->co_flags & SMBO_GONE) == 0) {
324 				cp->co_flags |= SMBO_GONE;
325 				SMB_CO_UNLOCK(cp);
326 				lockmgr(&cp->co_lock, LK_EXCLUSIVE);
327 				smb_co_gone(cp, scred);
328 			} else {
329 				SMB_CO_UNLOCK(cp);
330 			}
331 		}
332 		return error;
333 	}
334 	return 0;
335 }
336 
337 static void
338 smb_co_put(struct smb_connobj *cp, struct smb_cred *scred)
339 {
340 	SMB_CO_LOCK(cp);
341 	if (cp->co_usecount > 1) {
342 		cp->co_usecount--;
343 		SMB_CO_UNLOCK(cp);
344 		lockmgr(&cp->co_lock, LK_RELEASE);
345 		return;
346 	}
347 	if (cp->co_usecount <= 0) {
348 		SMBERROR("negative use_count for object %d", cp->co_level);
349 		SMB_CO_UNLOCK(cp);
350 		return;
351 	}
352 	cp->co_usecount = 0;
353 	if ((cp->co_flags & SMBO_GONE) == 0) {
354 		cp->co_flags |= SMBO_GONE;
355 		SMB_CO_UNLOCK(cp);
356 		lockmgr(&cp->co_lock, LK_RELEASE);
357 		lockmgr(&cp->co_lock, LK_EXCLUSIVE);
358 		smb_co_gone(cp, scred);
359 	} else {
360 		SMB_CO_UNLOCK(cp);
361 		lockmgr(&cp->co_lock, LK_RELEASE);
362 		wakeup(&cp->co_lock);
363 	}
364 }
365 
366 static int
367 smb_co_lockstatus(struct smb_connobj *cp, struct thread *td)
368 {
369 	return lockstatus(&cp->co_lock, td);
370 }
371 
372 static int
373 smb_co_lock(struct smb_connobj *cp, int flags)
374 {
375 	int error;
376 
377 	KKASSERT(cp->co_usecount > 0);
378 	if (cp->co_flags & SMBO_GONE)
379 		return EINVAL;
380 	if ((flags & LK_TYPE_MASK) == 0)
381 		flags |= LK_EXCLUSIVE;
382 	if (smb_co_lockstatus(cp, curthread) == LK_EXCLUSIVE &&
383 	    (flags & LK_CANRECURSE) == 0) {
384 		SMBERROR("recursive lock for object %d\n", cp->co_level);
385 		return 0;
386 	}
387 	error = lockmgr(&cp->co_lock, flags);
388 	if (error == 0 && (cp->co_flags & SMBO_GONE)) {
389 		lockmgr(&cp->co_lock, LK_RELEASE);
390 		error = EINVAL;
391 	}
392 	return (error);
393 }
394 
395 static void
396 smb_co_unlock(struct smb_connobj *cp, int flags)
397 {
398 	lockmgr(&cp->co_lock, flags | LK_RELEASE);
399 }
400 
401 static void
402 smb_co_addchild(struct smb_connobj *parent, struct smb_connobj *child)
403 {
404 	KASSERT(smb_co_lockstatus(parent, curthread) == LK_EXCLUSIVE, ("smb_co_addchild: parent not locked"));
405 	KASSERT(smb_co_lockstatus(child, curthread) == LK_EXCLUSIVE, ("smb_co_addchild: child not locked"));
406 
407 	smb_co_ref(parent);
408 	SLIST_INSERT_HEAD(&parent->co_children, child, co_next);
409 	child->co_parent = parent;
410 }
411 
412 /*
413  * Session implementation
414  */
415 
416 int
417 smb_vc_create(struct smb_vcspec *vcspec,
418 	struct smb_cred *scred, struct smb_vc **vcpp)
419 {
420 	struct smb_vc *vcp;
421 	struct ucred *cred = scred->scr_cred;
422 	uid_t uid = vcspec->owner;
423 	gid_t gid = vcspec->group;
424 	uid_t realuid = cred->cr_uid;
425 	char *domain = vcspec->domain;
426 	int error, isroot;
427 
428 	isroot = smb_suser(cred) == 0;
429 	/*
430 	 * Only superuser can create VCs with different uid and gid
431 	 */
432 	if (uid != SMBM_ANY_OWNER && uid != realuid && !isroot)
433 		return EPERM;
434 	if (gid != SMBM_ANY_GROUP && !groupmember(gid, cred) && !isroot)
435 		return EPERM;
436 
437 	vcp = smb_zmalloc(sizeof(*vcp), M_SMBCONN, M_WAITOK);
438 	smb_co_init(VCTOCP(vcp), SMBL_VC, "smb_vc");
439 	vcp->obj.co_free = smb_vc_free;
440 	vcp->obj.co_gone = smb_vc_gone;
441 	vcp->vc_number = smb_vcnext++;
442 	vcp->vc_timo = SMB_DEFRQTIMO;
443 	vcp->vc_smbuid = SMB_UID_UNKNOWN;
444 	vcp->vc_mode = vcspec->rights & SMBM_MASK;
445 	vcp->obj.co_flags = vcspec->flags & (SMBV_PRIVATE | SMBV_SINGLESHARE);
446 	vcp->vc_tdesc = &smb_tran_nbtcp_desc;
447 	vcp->vc_seqno = 0;
448 	vcp->vc_mackey = NULL;
449 	vcp->vc_mackeylen = 0;
450 
451 	if (uid == SMBM_ANY_OWNER)
452 		uid = realuid;
453 	if (gid == SMBM_ANY_GROUP)
454 		gid = cred->cr_groups[0];
455 	vcp->vc_uid = uid;
456 	vcp->vc_grp = gid;
457 
458 	smb_sl_init(&vcp->vc_stlock, "vcstlock");
459 
460 	do {
461 		error = ENOMEM;
462 		vcp->vc_paddr = dup_sockaddr(vcspec->sap);
463 		if (vcp->vc_paddr == NULL)
464 			break;
465 
466 		vcp->vc_laddr = dup_sockaddr(vcspec->lap);
467 		if (vcp->vc_laddr == NULL)
468 			break;
469 
470 		vcp->vc_pass = smb_strdup(vcspec->pass);
471 		if (vcp->vc_pass == NULL)
472 			break;
473 
474 		vcp->vc_domain = smb_strdup((domain && domain[0]) ? domain
475 								  : "NODOMAIN");
476 		if (vcp->vc_domain == NULL)
477 			break;
478 
479 		vcp->vc_srvname = smb_strdup(vcspec->srvname);
480 		if (vcp->vc_srvname == NULL)
481 			break;
482 		vcp->vc_username = smb_strdup(vcspec->username);
483 		if (vcp->vc_username == NULL)
484 			break;
485 
486 		error = iconv_open("tolower", vcspec->localcs, &vcp->vc_tolower);
487 		if (error != 0)
488 			break;
489 		error = iconv_open("toupper", vcspec->localcs, &vcp->vc_toupper);
490 		if (error != 0)
491 			break;
492 
493 		if (vcspec->servercs[0]) {
494 			error = iconv_open(vcspec->servercs, vcspec->localcs,
495 			    &vcp->vc_toserver);
496 			if (error != 0)
497 				break;
498 			error = iconv_open(vcspec->localcs, vcspec->servercs,
499 			    &vcp->vc_tolocal);
500 			if (error != 0)
501 				break;
502 		}
503 
504 		error = smb_iod_create(vcp);
505 		if (error != 0)
506 			break;
507 		*vcpp = vcp;
508 		smb_co_addchild(&smb_vclist, VCTOCP(vcp));
509 		error = 0;
510 	} while (0);
511 
512 	if (error)
513 		smb_vc_put(vcp, scred);
514 	return error;
515 }
516 
517 static void
518 smb_vc_free(struct smb_connobj *cp)
519 {
520 	struct smb_vc *vcp = CPTOVC(cp);
521 
522 	if (vcp->vc_iod)
523 		smb_iod_destroy(vcp->vc_iod);
524 	SMB_STRFREE(vcp->vc_username);
525 	SMB_STRFREE(vcp->vc_srvname);
526 	SMB_STRFREE(vcp->vc_pass);
527 	SMB_STRFREE(vcp->vc_domain);
528 	if (vcp->vc_mackey)
529 		kfree(vcp->vc_mackey, M_SMBTEMP);
530 	if (vcp->vc_paddr)
531 		kfree(vcp->vc_paddr, M_SONAME);
532 	if (vcp->vc_laddr)
533 		kfree(vcp->vc_laddr, M_SONAME);
534 	if (vcp->vc_tolower)
535 		iconv_close(vcp->vc_tolower);
536 	if (vcp->vc_toupper)
537 		iconv_close(vcp->vc_toupper);
538 	if (vcp->vc_tolocal)
539 		iconv_close(vcp->vc_tolocal);
540 	if (vcp->vc_toserver)
541 		iconv_close(vcp->vc_toserver);
542 	smb_co_done(VCTOCP(vcp));
543 	smb_sl_destroy(&vcp->vc_stlock);
544 	kfree(vcp, M_SMBCONN);
545 }
546 
547 /*
548  * Called when use count of VC dropped to zero.
549  */
550 static void
551 smb_vc_gone(struct smb_connobj *cp, struct smb_cred *scred)
552 {
553 	struct smb_vc *vcp = CPTOVC(cp);
554 
555 	smb_vc_disconnect(vcp);
556 }
557 
558 void
559 smb_vc_ref(struct smb_vc *vcp)
560 {
561 	smb_co_ref(VCTOCP(vcp));
562 }
563 
564 void
565 smb_vc_rele(struct smb_vc *vcp, struct smb_cred *scred)
566 {
567 	smb_co_rele(VCTOCP(vcp), scred);
568 }
569 
570 int
571 smb_vc_get(struct smb_vc *vcp, int flags, struct smb_cred *scred)
572 {
573 	return smb_co_get(VCTOCP(vcp), flags, scred);
574 }
575 
576 void
577 smb_vc_put(struct smb_vc *vcp, struct smb_cred *scred)
578 {
579 	smb_co_put(VCTOCP(vcp), scred);
580 }
581 
582 int
583 smb_vc_lock(struct smb_vc *vcp, int flags)
584 {
585 	return smb_co_lock(VCTOCP(vcp), flags);
586 }
587 
588 void
589 smb_vc_unlock(struct smb_vc *vcp, int flags)
590 {
591 	smb_co_unlock(VCTOCP(vcp), flags);
592 }
593 
594 int
595 smb_vc_access(struct smb_vc *vcp, struct smb_cred *scred, mode_t mode)
596 {
597 	struct ucred *cred = scred->scr_cred;
598 
599 	if (smb_suser(cred) == 0 || cred->cr_uid == vcp->vc_uid)
600 		return 0;
601 	mode >>= 3;
602 	if (!groupmember(vcp->vc_grp, cred))
603 		mode >>= 3;
604 	return (vcp->vc_mode & mode) == mode ? 0 : EACCES;
605 }
606 
607 static int
608 smb_vc_cmpshare(struct smb_share *ssp, struct smb_sharespec *dp)
609 {
610 	int exact = 1;
611 
612 	if (strcmp(ssp->ss_name, dp->name) != 0)
613 		return 1;
614 	if (dp->owner != SMBM_ANY_OWNER) {
615 		if (ssp->ss_uid != dp->owner)
616 			return 1;
617 	} else
618 		exact = 0;
619 	if (dp->group != SMBM_ANY_GROUP) {
620 		if (ssp->ss_grp != dp->group)
621 			return 1;
622 	} else
623 		exact = 0;
624 
625 	if (dp->mode & SMBM_EXACT) {
626 		if (!exact)
627 			return 1;
628 		return (dp->mode & SMBM_MASK) == ssp->ss_mode ? 0 : 1;
629 	}
630 	if (smb_share_access(ssp, dp->scred, dp->mode) != 0)
631 		return 1;
632 	return 0;
633 }
634 
635 /*
636  * Lookup share in the given VC. Share referenced and locked on return.
637  * VC expected to be locked on entry and will be left locked on exit.
638  */
639 int
640 smb_vc_lookupshare(struct smb_vc *vcp, struct smb_sharespec *dp,
641 	struct smb_cred *scred,	struct smb_share **sspp)
642 {
643 	struct smb_connobj *scp = NULL;
644 	struct smb_share *ssp = NULL;
645 	int error;
646 
647 	*sspp = NULL;
648 	dp->scred = scred;
649 	SMBCO_FOREACH(scp, VCTOCP(vcp)) {
650 		ssp = (struct smb_share *)scp;
651 		error = smb_share_lock(ssp, LK_EXCLUSIVE);
652 		if (error)
653 			continue;
654 		if (smb_vc_cmpshare(ssp, dp) == 0)
655 			break;
656 		smb_share_unlock(ssp, 0);
657 	}
658 	if (ssp) {
659 		smb_share_ref(ssp);
660 		*sspp = ssp;
661 		error = 0;
662 	} else
663 		error = ENOENT;
664 	return error;
665 }
666 
667 int
668 smb_vc_connect(struct smb_vc *vcp, struct smb_cred *scred)
669 {
670 
671 	return smb_iod_request(vcp->vc_iod, SMBIOD_EV_CONNECT | SMBIOD_EV_SYNC, NULL);
672 }
673 
674 /*
675  * Destroy VC to server, invalidate shares linked with it.
676  * Transport should be locked on entry.
677  */
678 static int
679 smb_vc_disconnect(struct smb_vc *vcp)
680 {
681 
682 	smb_iod_request(vcp->vc_iod, SMBIOD_EV_DISCONNECT | SMBIOD_EV_SYNC, NULL);
683 	return 0;
684 }
685 
686 static char smb_emptypass[] = "";
687 
688 const char *
689 smb_vc_getpass(struct smb_vc *vcp)
690 {
691 	if (vcp->vc_pass)
692 		return vcp->vc_pass;
693 	return smb_emptypass;
694 }
695 
696 static int
697 smb_vc_getinfo(struct smb_vc *vcp, struct smb_vc_info *vip)
698 {
699 	bzero(vip, sizeof(struct smb_vc_info));
700 	vip->itype = SMB_INFO_VC;
701 	vip->usecount = vcp->obj.co_usecount;
702 	vip->uid = vcp->vc_uid;
703 	vip->gid = vcp->vc_grp;
704 	vip->mode = vcp->vc_mode;
705 	vip->flags = vcp->obj.co_flags;
706 	vip->sopt = vcp->vc_sopt;
707 	vip->iodstate = vcp->vc_iod->iod_state;
708 	bzero(&vip->sopt.sv_skey, sizeof(vip->sopt.sv_skey));
709 	ksnprintf(vip->srvname, sizeof(vip->srvname), "%s", vcp->vc_srvname);
710 	ksnprintf(vip->vcname, sizeof(vip->vcname), "%s", vcp->vc_username);
711 	return 0;
712 }
713 
714 u_short
715 smb_vc_nextmid(struct smb_vc *vcp)
716 {
717 	u_short r;
718 
719 	SMB_CO_LOCK(&vcp->obj);
720 	r = vcp->vc_mid++;
721 	SMB_CO_UNLOCK(&vcp->obj);
722 	return r;
723 }
724 
725 /*
726  * Share implementation
727  */
728 /*
729  * Allocate share structure and attach it to the given VC
730  * Connection expected to be locked on entry. Share will be returned
731  * in locked state.
732  */
733 int
734 smb_share_create(struct smb_vc *vcp, struct smb_sharespec *shspec,
735 	struct smb_cred *scred, struct smb_share **sspp)
736 {
737 	struct smb_share *ssp;
738 	struct ucred *cred = scred->scr_cred;
739 	uid_t realuid = cred->cr_uid;
740 	uid_t uid = shspec->owner;
741 	gid_t gid = shspec->group;
742 	int error, isroot;
743 
744 	isroot = smb_suser(cred) == 0;
745 	/*
746 	 * Only superuser can create shares with different uid and gid
747 	 */
748 	if (uid != SMBM_ANY_OWNER && uid != realuid && !isroot)
749 		return EPERM;
750 	if (gid != SMBM_ANY_GROUP && !groupmember(gid, cred) && !isroot)
751 		return EPERM;
752 	error = smb_vc_lookupshare(vcp, shspec, scred, &ssp);
753 	if (!error) {
754 		smb_share_put(ssp, scred);
755 		return EEXIST;
756 	}
757 	if (uid == SMBM_ANY_OWNER)
758 		uid = realuid;
759 	if (gid == SMBM_ANY_GROUP)
760 		gid = cred->cr_groups[0];
761 	ssp = smb_zmalloc(sizeof(*ssp), M_SMBCONN, M_WAITOK);
762 	smb_co_init(SSTOCP(ssp), SMBL_SHARE, "smbss");
763 	ssp->obj.co_free = smb_share_free;
764 	ssp->obj.co_gone = smb_share_gone;
765 	smb_sl_init(&ssp->ss_stlock, "ssstlock");
766 	ssp->ss_name = smb_strdup(shspec->name);
767 	if (shspec->pass && shspec->pass[0])
768 		ssp->ss_pass = smb_strdup(shspec->pass);
769 	ssp->ss_type = shspec->stype;
770 	ssp->ss_tid = SMB_TID_UNKNOWN;
771 	ssp->ss_uid = uid;
772 	ssp->ss_grp = gid;
773 	ssp->ss_mode = shspec->rights & SMBM_MASK;
774 	smb_co_addchild(VCTOCP(vcp), SSTOCP(ssp));
775 	*sspp = ssp;
776 	return 0;
777 }
778 
779 static void
780 smb_share_free(struct smb_connobj *cp)
781 {
782 	struct smb_share *ssp = CPTOSS(cp);
783 
784 	SMB_STRFREE(ssp->ss_name);
785 	SMB_STRFREE(ssp->ss_pass);
786 	smb_sl_destroy(&ssp->ss_stlock);
787 	smb_co_done(SSTOCP(ssp));
788 	kfree(ssp, M_SMBCONN);
789 }
790 
791 static void
792 smb_share_gone(struct smb_connobj *cp, struct smb_cred *scred)
793 {
794 	struct smb_share *ssp = CPTOSS(cp);
795 
796 	smb_smb_treedisconnect(ssp, scred);
797 }
798 
799 void
800 smb_share_ref(struct smb_share *ssp)
801 {
802 	smb_co_ref(SSTOCP(ssp));
803 }
804 
805 void
806 smb_share_rele(struct smb_share *ssp, struct smb_cred *scred)
807 {
808 	smb_co_rele(SSTOCP(ssp), scred);
809 }
810 
811 int
812 smb_share_get(struct smb_share *ssp, int flags, struct smb_cred *scred)
813 {
814 	return smb_co_get(SSTOCP(ssp), flags, scred);
815 }
816 
817 void
818 smb_share_put(struct smb_share *ssp, struct smb_cred *scred)
819 {
820 	smb_co_put(SSTOCP(ssp), scred);
821 }
822 
823 int
824 smb_share_lock(struct smb_share *ssp, int flags)
825 {
826 	return smb_co_lock(SSTOCP(ssp), flags);
827 }
828 
829 void
830 smb_share_unlock(struct smb_share *ssp, int flags)
831 {
832 	smb_co_unlock(SSTOCP(ssp), flags);
833 }
834 
835 int
836 smb_share_access(struct smb_share *ssp, struct smb_cred *scred, mode_t mode)
837 {
838 	struct ucred *cred = scred->scr_cred;
839 
840 	if (smb_suser(cred) == 0 || cred->cr_uid == ssp->ss_uid)
841 		return 0;
842 	mode >>= 3;
843 	if (!groupmember(ssp->ss_grp, cred))
844 		mode >>= 3;
845 	return (ssp->ss_mode & mode) == mode ? 0 : EACCES;
846 }
847 
848 void
849 smb_share_invalidate(struct smb_share *ssp)
850 {
851 	ssp->ss_tid = SMB_TID_UNKNOWN;
852 }
853 
854 int
855 smb_share_valid(struct smb_share *ssp)
856 {
857 	return ssp->ss_tid != SMB_TID_UNKNOWN &&
858 	    ssp->ss_vcgenid == SSTOVC(ssp)->vc_genid;
859 }
860 
861 const char*
862 smb_share_getpass(struct smb_share *ssp)
863 {
864 	struct smb_vc *vcp;
865 
866 	if (ssp->ss_pass)
867 		return ssp->ss_pass;
868 	vcp = SSTOVC(ssp);
869 	if (vcp->vc_pass)
870 		return vcp->vc_pass;
871 	return smb_emptypass;
872 }
873 
874 static int
875 smb_share_getinfo(struct smb_share *ssp, struct smb_share_info *sip)
876 {
877 	bzero(sip, sizeof(struct smb_share_info));
878 	sip->itype = SMB_INFO_SHARE;
879 	sip->usecount = ssp->obj.co_usecount;
880 	sip->tid  = ssp->ss_tid;
881 	sip->type= ssp->ss_type;
882 	sip->uid = ssp->ss_uid;
883 	sip->gid = ssp->ss_grp;
884 	sip->mode= ssp->ss_mode;
885 	sip->flags = ssp->obj.co_flags;
886 	ksnprintf(sip->sname, sizeof(sip->sname), "%s", ssp->ss_name);
887 	return 0;
888 }
889 
890 /*
891  * Dump an entire tree into sysctl call
892  */
893 static int
894 smb_sysctl_treedump(SYSCTL_HANDLER_ARGS)
895 {
896 	struct thread *td = req->td;
897 	struct ucred *ucred;
898 	struct smb_cred scred;
899 	struct smb_connobj *scp1, *scp2;
900 	struct smb_vc *vcp;
901 	struct smb_share *ssp;
902 	struct smb_vc_info vci;
903 	struct smb_share_info ssi;
904 	int error, itype;
905 
906 	KKASSERT(td->td_proc);
907 	ucred = td->td_proc->p_ucred;
908 
909 	smb_makescred(&scred, td, ucred);
910 	error = smb_sm_lockvclist(LK_SHARED);
911 	if (error)
912 		return error;
913 	SMBCO_FOREACH(scp1, &smb_vclist) {
914 		vcp = (struct smb_vc *)scp1;
915 		error = smb_vc_lock(vcp, LK_SHARED);
916 		if (error)
917 			continue;
918 		smb_vc_getinfo(vcp, &vci);
919 		error = SYSCTL_OUT(req, &vci, sizeof(struct smb_vc_info));
920 		if (error) {
921 			smb_vc_unlock(vcp, 0);
922 			break;
923 		}
924 		SMBCO_FOREACH(scp2, VCTOCP(vcp)) {
925 			ssp = (struct smb_share *)scp2;
926 			error = smb_share_lock(ssp, LK_SHARED);
927 			if (error) {
928 				error = 0;
929 				continue;
930 			}
931 			smb_share_getinfo(ssp, &ssi);
932 			smb_share_unlock(ssp, 0);
933 			error = SYSCTL_OUT(req, &ssi, sizeof(struct smb_share_info));
934 			if (error)
935 				break;
936 		}
937 		smb_vc_unlock(vcp, 0);
938 		if (error)
939 			break;
940 	}
941 	if (!error) {
942 		itype = SMB_INFO_NONE;
943 		error = SYSCTL_OUT(req, &itype, sizeof(itype));
944 	}
945 	smb_sm_unlockvclist();
946 	return error;
947 }
948