4 * Copyright (C) International Business Machines Corp., 2002,2008
5 * Author(s): Steve French (sfrench@us.ibm.com)
7 * This library is free software; you can redistribute it and/or modify
8 * it under the terms of the GNU Lesser General Public License as published
9 * by the Free Software Foundation; either version 2.1 of the License, or
10 * (at your option) any later version.
12 * This library is distributed in the hope that it will be useful,
13 * but WITHOUT ANY WARRANTY; without even the implied warranty of
14 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
15 * the GNU Lesser General Public License for more details.
17 * You should have received a copy of the GNU Lesser General Public License
18 * along with this library; if not, write to the Free Software
19 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 #include <linux/net.h>
23 #include <linux/string.h>
24 #include <linux/list.h>
25 #include <linux/wait.h>
26 #include <linux/pagemap.h>
27 #include <linux/ctype.h>
28 #include <linux/utsname.h>
29 #include <linux/mempool.h>
30 #include <linux/delay.h>
31 #include <linux/completion.h>
32 #include <linux/kthread.h>
33 #include <linux/pagevec.h>
34 #include <linux/freezer.h>
35 #include <asm/uaccess.h>
36 #include <asm/processor.h>
40 #include "cifsproto.h"
41 #include "cifs_unicode.h"
42 #include "cifs_debug.h"
43 #include "cifs_fs_sb.h"
46 #include "rfc1002pdu.h"
50 #define RFC1001_PORT 139
52 extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
55 extern mempool_t *cifs_req_poolp;
63 char *in6_addr; /* ipv6 address as human readable form of in6_addr */
64 char *iocharset; /* local code page for mapping to and from Unicode */
65 char source_rfc1001_name[16]; /* netbios name of client */
66 char target_rfc1001_name[16]; /* netbios name of server for Win9x/ME */
80 bool no_psx_acl:1; /* set if posix acl support should be disabled */
82 bool no_xattr:1; /* set if xattr (EA) support should be disabled*/
83 bool server_ino:1; /* use inode numbers from server ie UniqueId */
85 bool remap:1; /* set to remap seven reserved chars in filenames */
86 bool posix_paths:1; /* unset to not ask for posix pathnames. */
89 bool nullauth:1; /* attempt to authenticate with null user */
90 bool nocase:1; /* request case insensitive filenames */
91 bool nobrl:1; /* disable sending byte range locks to srv */
92 bool mand_lock:1; /* send mandatory not posix byte range lock reqs */
93 bool seal:1; /* request transport encryption on share */
94 bool nodfs:1; /* Do not request DFS, even if available */
95 bool local_lease:1; /* check leases only on local system, not remote */
98 bool nostrictsync:1; /* do not force expensive SMBflush on every sync */
101 unsigned int sockopt;
102 unsigned short int port;
106 static int ipv4_connect(struct TCP_Server_Info *server);
107 static int ipv6_connect(struct TCP_Server_Info *server);
110 * cifs tcp session reconnection
112 * mark tcp session as reconnecting so temporarily locked
113 * mark all smb sessions as reconnecting for tcp session
114 * reconnect tcp session
115 * wake up waiters on reconnection? - (not needed currently)
118 cifs_reconnect(struct TCP_Server_Info *server)
121 struct list_head *tmp, *tmp2;
122 struct cifsSesInfo *ses;
123 struct cifsTconInfo *tcon;
124 struct mid_q_entry *mid_entry;
126 spin_lock(&GlobalMid_Lock);
127 if (server->tcpStatus == CifsExiting) {
128 /* the demux thread will exit normally
129 next time through the loop */
130 spin_unlock(&GlobalMid_Lock);
133 server->tcpStatus = CifsNeedReconnect;
134 spin_unlock(&GlobalMid_Lock);
137 cFYI(1, ("Reconnecting tcp session"));
139 /* before reconnecting the tcp session, mark the smb session (uid)
140 and the tid bad so they are not used until reconnected */
141 read_lock(&cifs_tcp_ses_lock);
142 list_for_each(tmp, &server->smb_ses_list) {
143 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
144 ses->need_reconnect = true;
146 list_for_each(tmp2, &ses->tcon_list) {
147 tcon = list_entry(tmp2, struct cifsTconInfo, tcon_list);
148 tcon->need_reconnect = true;
151 read_unlock(&cifs_tcp_ses_lock);
152 /* do not want to be sending data on a socket we are freeing */
153 mutex_lock(&server->srv_mutex);
154 if (server->ssocket) {
155 cFYI(1, ("State: 0x%x Flags: 0x%lx", server->ssocket->state,
156 server->ssocket->flags));
157 kernel_sock_shutdown(server->ssocket, SHUT_WR);
158 cFYI(1, ("Post shutdown state: 0x%x Flags: 0x%lx",
159 server->ssocket->state,
160 server->ssocket->flags));
161 sock_release(server->ssocket);
162 server->ssocket = NULL;
165 spin_lock(&GlobalMid_Lock);
166 list_for_each(tmp, &server->pending_mid_q) {
167 mid_entry = list_entry(tmp, struct
170 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
171 /* Mark other intransit requests as needing
172 retry so we do not immediately mark the
173 session bad again (ie after we reconnect
174 below) as they timeout too */
175 mid_entry->midState = MID_RETRY_NEEDED;
178 spin_unlock(&GlobalMid_Lock);
179 mutex_unlock(&server->srv_mutex);
181 while ((server->tcpStatus != CifsExiting) &&
182 (server->tcpStatus != CifsGood)) {
184 if (server->addr.sockAddr6.sin6_family == AF_INET6)
185 rc = ipv6_connect(server);
187 rc = ipv4_connect(server);
189 cFYI(1, ("reconnect error %d", rc));
192 atomic_inc(&tcpSesReconnectCount);
193 spin_lock(&GlobalMid_Lock);
194 if (server->tcpStatus != CifsExiting)
195 server->tcpStatus = CifsGood;
196 server->sequence_number = 0;
197 spin_unlock(&GlobalMid_Lock);
198 /* atomic_set(&server->inFlight,0);*/
199 wake_up(&server->response_q);
207 0 not a transact2, or all data present
208 >0 transact2 with that much data missing
209 -EINVAL = invalid transact2
212 static int check2ndT2(struct smb_hdr *pSMB, unsigned int maxBufSize)
214 struct smb_t2_rsp *pSMBt;
216 int data_in_this_rsp;
219 if (pSMB->Command != SMB_COM_TRANSACTION2)
222 /* check for plausible wct, bcc and t2 data and parm sizes */
223 /* check for parm and data offset going beyond end of smb */
224 if (pSMB->WordCount != 10) { /* coalesce_t2 depends on this */
225 cFYI(1, ("invalid transact2 word count"));
229 pSMBt = (struct smb_t2_rsp *)pSMB;
231 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
232 data_in_this_rsp = le16_to_cpu(pSMBt->t2_rsp.DataCount);
234 remaining = total_data_size - data_in_this_rsp;
238 else if (remaining < 0) {
239 cFYI(1, ("total data %d smaller than data in frame %d",
240 total_data_size, data_in_this_rsp));
243 cFYI(1, ("missing %d bytes from transact2, check next response",
245 if (total_data_size > maxBufSize) {
246 cERROR(1, ("TotalDataSize %d is over maximum buffer %d",
247 total_data_size, maxBufSize));
254 static int coalesce_t2(struct smb_hdr *psecond, struct smb_hdr *pTargetSMB)
256 struct smb_t2_rsp *pSMB2 = (struct smb_t2_rsp *)psecond;
257 struct smb_t2_rsp *pSMBt = (struct smb_t2_rsp *)pTargetSMB;
262 char *data_area_of_target;
263 char *data_area_of_buf2;
266 total_data_size = le16_to_cpu(pSMBt->t2_rsp.TotalDataCount);
268 if (total_data_size != le16_to_cpu(pSMB2->t2_rsp.TotalDataCount)) {
269 cFYI(1, ("total data size of primary and secondary t2 differ"));
272 total_in_buf = le16_to_cpu(pSMBt->t2_rsp.DataCount);
274 remaining = total_data_size - total_in_buf;
279 if (remaining == 0) /* nothing to do, ignore */
282 total_in_buf2 = le16_to_cpu(pSMB2->t2_rsp.DataCount);
283 if (remaining < total_in_buf2) {
284 cFYI(1, ("transact2 2nd response contains too much data"));
287 /* find end of first SMB data area */
288 data_area_of_target = (char *)&pSMBt->hdr.Protocol +
289 le16_to_cpu(pSMBt->t2_rsp.DataOffset);
290 /* validate target area */
292 data_area_of_buf2 = (char *) &pSMB2->hdr.Protocol +
293 le16_to_cpu(pSMB2->t2_rsp.DataOffset);
295 data_area_of_target += total_in_buf;
297 /* copy second buffer into end of first buffer */
298 memcpy(data_area_of_target, data_area_of_buf2, total_in_buf2);
299 total_in_buf += total_in_buf2;
300 pSMBt->t2_rsp.DataCount = cpu_to_le16(total_in_buf);
301 byte_count = le16_to_cpu(BCC_LE(pTargetSMB));
302 byte_count += total_in_buf2;
303 BCC_LE(pTargetSMB) = cpu_to_le16(byte_count);
305 byte_count = pTargetSMB->smb_buf_length;
306 byte_count += total_in_buf2;
308 /* BB also add check that we are not beyond maximum buffer size */
310 pTargetSMB->smb_buf_length = byte_count;
312 if (remaining == total_in_buf2) {
313 cFYI(1, ("found the last secondary response"));
314 return 0; /* we are done */
315 } else /* more responses to go */
321 cifs_demultiplex_thread(struct TCP_Server_Info *server)
324 unsigned int pdu_length, total_read;
325 struct smb_hdr *smb_buffer = NULL;
326 struct smb_hdr *bigbuf = NULL;
327 struct smb_hdr *smallbuf = NULL;
328 struct msghdr smb_msg;
330 struct socket *csocket = server->ssocket;
331 struct list_head *tmp;
332 struct cifsSesInfo *ses;
333 struct task_struct *task_to_wake = NULL;
334 struct mid_q_entry *mid_entry;
336 bool isLargeBuf = false;
340 current->flags |= PF_MEMALLOC;
341 cFYI(1, ("Demultiplex PID: %d", task_pid_nr(current)));
343 length = atomic_inc_return(&tcpSesAllocCount);
345 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
349 while (server->tcpStatus != CifsExiting) {
352 if (bigbuf == NULL) {
353 bigbuf = cifs_buf_get();
355 cERROR(1, ("No memory for large SMB response"));
357 /* retry will check if exiting */
360 } else if (isLargeBuf) {
361 /* we are reusing a dirty large buf, clear its start */
362 memset(bigbuf, 0, sizeof(struct smb_hdr));
365 if (smallbuf == NULL) {
366 smallbuf = cifs_small_buf_get();
368 cERROR(1, ("No memory for SMB response"));
370 /* retry will check if exiting */
373 /* beginning of smb buffer is cleared in our buf_get */
374 } else /* if existing small buf clear beginning */
375 memset(smallbuf, 0, sizeof(struct smb_hdr));
379 smb_buffer = smallbuf;
380 iov.iov_base = smb_buffer;
382 smb_msg.msg_control = NULL;
383 smb_msg.msg_controllen = 0;
384 pdu_length = 4; /* enough to get RFC1001 header */
387 kernel_recvmsg(csocket, &smb_msg,
388 &iov, 1, pdu_length, 0 /* BB other flags? */);
390 if (server->tcpStatus == CifsExiting) {
392 } else if (server->tcpStatus == CifsNeedReconnect) {
393 cFYI(1, ("Reconnect after server stopped responding"));
394 cifs_reconnect(server);
395 cFYI(1, ("call to reconnect done"));
396 csocket = server->ssocket;
398 } else if ((length == -ERESTARTSYS) || (length == -EAGAIN)) {
399 msleep(1); /* minimum sleep to prevent looping
400 allowing socket to clear and app threads to set
401 tcpStatus CifsNeedReconnect if server hung */
402 if (pdu_length < 4) {
403 iov.iov_base = (4 - pdu_length) +
405 iov.iov_len = pdu_length;
406 smb_msg.msg_control = NULL;
407 smb_msg.msg_controllen = 0;
411 } else if (length <= 0) {
412 if (server->tcpStatus == CifsNew) {
413 cFYI(1, ("tcp session abend after SMBnegprot"));
414 /* some servers kill the TCP session rather than
415 returning an SMB negprot error, in which
416 case reconnecting here is not going to help,
417 and so simply return error to mount */
420 if (!try_to_freeze() && (length == -EINTR)) {
421 cFYI(1, ("cifsd thread killed"));
424 cFYI(1, ("Reconnect after unexpected peek error %d",
426 cifs_reconnect(server);
427 csocket = server->ssocket;
428 wake_up(&server->response_q);
430 } else if (length < pdu_length) {
431 cFYI(1, ("requested %d bytes but only got %d bytes",
432 pdu_length, length));
433 pdu_length -= length;
438 /* The right amount was read from socket - 4 bytes */
439 /* so we can now interpret the length field */
441 /* the first byte big endian of the length field,
442 is actually not part of the length but the type
443 with the most common, zero, as regular data */
444 temp = *((char *) smb_buffer);
446 /* Note that FC 1001 length is big endian on the wire,
447 but we convert it here so it is always manipulated
448 as host byte order */
449 pdu_length = be32_to_cpu((__force __be32)smb_buffer->smb_buf_length);
450 smb_buffer->smb_buf_length = pdu_length;
452 cFYI(1, ("rfc1002 length 0x%x", pdu_length+4));
454 if (temp == (char) RFC1002_SESSION_KEEP_ALIVE) {
456 } else if (temp == (char)RFC1002_POSITIVE_SESSION_RESPONSE) {
457 cFYI(1, ("Good RFC 1002 session rsp"));
459 } else if (temp == (char)RFC1002_NEGATIVE_SESSION_RESPONSE) {
460 /* we get this from Windows 98 instead of
461 an error on SMB negprot response */
462 cFYI(1, ("Negative RFC1002 Session Response Error 0x%x)",
464 if (server->tcpStatus == CifsNew) {
465 /* if nack on negprot (rather than
466 ret of smb negprot error) reconnecting
467 not going to help, ret error to mount */
470 /* give server a second to
471 clean up before reconnect attempt */
473 /* always try 445 first on reconnect
474 since we get NACK on some if we ever
475 connected to port 139 (the NACK is
476 since we do not begin with RFC1001
477 session initialize frame) */
478 server->addr.sockAddr.sin_port =
480 cifs_reconnect(server);
481 csocket = server->ssocket;
482 wake_up(&server->response_q);
485 } else if (temp != (char) 0) {
486 cERROR(1, ("Unknown RFC 1002 frame"));
487 cifs_dump_mem(" Received Data: ", (char *)smb_buffer,
489 cifs_reconnect(server);
490 csocket = server->ssocket;
494 /* else we have an SMB response */
495 if ((pdu_length > CIFSMaxBufSize + MAX_CIFS_HDR_SIZE - 4) ||
496 (pdu_length < sizeof(struct smb_hdr) - 1 - 4)) {
497 cERROR(1, ("Invalid size SMB length %d pdu_length %d",
498 length, pdu_length+4));
499 cifs_reconnect(server);
500 csocket = server->ssocket;
501 wake_up(&server->response_q);
508 if (pdu_length > MAX_CIFS_SMALL_BUFFER_SIZE - 4) {
510 memcpy(bigbuf, smallbuf, 4);
514 iov.iov_base = 4 + (char *)smb_buffer;
515 iov.iov_len = pdu_length;
516 for (total_read = 0; total_read < pdu_length;
517 total_read += length) {
518 length = kernel_recvmsg(csocket, &smb_msg, &iov, 1,
519 pdu_length - total_read, 0);
520 if ((server->tcpStatus == CifsExiting) ||
521 (length == -EINTR)) {
525 } else if (server->tcpStatus == CifsNeedReconnect) {
526 cifs_reconnect(server);
527 csocket = server->ssocket;
528 /* Reconnect wakes up rspns q */
529 /* Now we will reread sock */
532 } else if ((length == -ERESTARTSYS) ||
533 (length == -EAGAIN)) {
534 msleep(1); /* minimum sleep to prevent looping,
535 allowing socket to clear and app
536 threads to set tcpStatus
537 CifsNeedReconnect if server hung*/
540 } else if (length <= 0) {
541 cERROR(1, ("Received no data, expecting %d",
542 pdu_length - total_read));
543 cifs_reconnect(server);
544 csocket = server->ssocket;
551 else if (reconnect == 1)
554 length += 4; /* account for rfc1002 hdr */
557 dump_smb(smb_buffer, length);
558 if (checkSMB(smb_buffer, smb_buffer->Mid, total_read+4)) {
559 cifs_dump_mem("Bad SMB: ", smb_buffer, 48);
565 spin_lock(&GlobalMid_Lock);
566 list_for_each(tmp, &server->pending_mid_q) {
567 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
569 if ((mid_entry->mid == smb_buffer->Mid) &&
570 (mid_entry->midState == MID_REQUEST_SUBMITTED) &&
571 (mid_entry->command == smb_buffer->Command)) {
572 if (check2ndT2(smb_buffer,server->maxBuf) > 0) {
573 /* We have a multipart transact2 resp */
575 if (mid_entry->resp_buf) {
576 /* merge response - fix up 1st*/
577 if (coalesce_t2(smb_buffer,
578 mid_entry->resp_buf)) {
579 mid_entry->multiRsp =
583 /* all parts received */
584 mid_entry->multiEnd =
590 cERROR(1,("1st trans2 resp needs bigbuf"));
591 /* BB maybe we can fix this up, switch
592 to already allocated large buffer? */
594 /* Have first buffer */
595 mid_entry->resp_buf =
597 mid_entry->largeBuf =
604 mid_entry->resp_buf = smb_buffer;
605 mid_entry->largeBuf = isLargeBuf;
607 task_to_wake = mid_entry->tsk;
608 mid_entry->midState = MID_RESPONSE_RECEIVED;
609 #ifdef CONFIG_CIFS_STATS2
610 mid_entry->when_received = jiffies;
612 /* so we do not time out requests to server
613 which is still responding (since server could
614 be busy but not dead) */
615 server->lstrp = jiffies;
619 spin_unlock(&GlobalMid_Lock);
621 /* Was previous buf put in mpx struct for multi-rsp? */
623 /* smb buffer will be freed by user thread */
629 wake_up_process(task_to_wake);
630 } else if (!is_valid_oplock_break(smb_buffer, server) &&
632 cERROR(1, ("No task to wake, unknown frame received! "
633 "NumMids %d", midCount.counter));
634 cifs_dump_mem("Received Data is: ", (char *)smb_buffer,
635 sizeof(struct smb_hdr));
636 #ifdef CONFIG_CIFS_DEBUG2
637 cifs_dump_detail(smb_buffer);
638 cifs_dump_mids(server);
639 #endif /* CIFS_DEBUG2 */
642 } /* end while !EXITING */
644 /* take it off the list, if it's not already */
645 write_lock(&cifs_tcp_ses_lock);
646 list_del_init(&server->tcp_ses_list);
647 write_unlock(&cifs_tcp_ses_lock);
649 spin_lock(&GlobalMid_Lock);
650 server->tcpStatus = CifsExiting;
651 spin_unlock(&GlobalMid_Lock);
652 wake_up_all(&server->response_q);
654 /* check if we have blocked requests that need to free */
655 /* Note that cifs_max_pending is normally 50, but
656 can be set at module install time to as little as two */
657 spin_lock(&GlobalMid_Lock);
658 if (atomic_read(&server->inFlight) >= cifs_max_pending)
659 atomic_set(&server->inFlight, cifs_max_pending - 1);
660 /* We do not want to set the max_pending too low or we
661 could end up with the counter going negative */
662 spin_unlock(&GlobalMid_Lock);
663 /* Although there should not be any requests blocked on
664 this queue it can not hurt to be paranoid and try to wake up requests
665 that may haven been blocked when more than 50 at time were on the wire
666 to the same server - they now will see the session is in exit state
667 and get out of SendReceive. */
668 wake_up_all(&server->request_q);
669 /* give those requests time to exit */
672 if (server->ssocket) {
673 sock_release(csocket);
674 server->ssocket = NULL;
676 /* buffer usuallly freed in free_mid - need to free it here on exit */
677 cifs_buf_release(bigbuf);
678 if (smallbuf) /* no sense logging a debug message if NULL */
679 cifs_small_buf_release(smallbuf);
682 * BB: we shouldn't have to do any of this. It shouldn't be
683 * possible to exit from the thread with active SMB sessions
685 read_lock(&cifs_tcp_ses_lock);
686 if (list_empty(&server->pending_mid_q)) {
687 /* loop through server session structures attached to this and
689 list_for_each(tmp, &server->smb_ses_list) {
690 ses = list_entry(tmp, struct cifsSesInfo,
692 ses->status = CifsExiting;
695 read_unlock(&cifs_tcp_ses_lock);
697 /* although we can not zero the server struct pointer yet,
698 since there are active requests which may depnd on them,
699 mark the corresponding SMB sessions as exiting too */
700 list_for_each(tmp, &server->smb_ses_list) {
701 ses = list_entry(tmp, struct cifsSesInfo,
703 ses->status = CifsExiting;
706 spin_lock(&GlobalMid_Lock);
707 list_for_each(tmp, &server->pending_mid_q) {
708 mid_entry = list_entry(tmp, struct mid_q_entry, qhead);
709 if (mid_entry->midState == MID_REQUEST_SUBMITTED) {
710 cFYI(1, ("Clearing Mid 0x%x - waking up ",
712 task_to_wake = mid_entry->tsk;
714 wake_up_process(task_to_wake);
717 spin_unlock(&GlobalMid_Lock);
718 read_unlock(&cifs_tcp_ses_lock);
719 /* 1/8th of sec is more than enough time for them to exit */
723 if (!list_empty(&server->pending_mid_q)) {
724 /* mpx threads have not exited yet give them
725 at least the smb send timeout time for long ops */
726 /* due to delays on oplock break requests, we need
727 to wait at least 45 seconds before giving up
728 on a request getting a response and going ahead
730 cFYI(1, ("Wait for exit from demultiplex thread"));
732 /* if threads still have not exited they are probably never
733 coming home not much else we can do but free the memory */
736 /* last chance to mark ses pointers invalid
737 if there are any pointing to this (e.g
738 if a crazy root user tried to kill cifsd
739 kernel thread explicitly this might happen) */
740 /* BB: This shouldn't be necessary, see above */
741 read_lock(&cifs_tcp_ses_lock);
742 list_for_each(tmp, &server->smb_ses_list) {
743 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
746 read_unlock(&cifs_tcp_ses_lock);
748 kfree(server->hostname);
749 task_to_wake = xchg(&server->tsk, NULL);
752 length = atomic_dec_return(&tcpSesAllocCount);
754 mempool_resize(cifs_req_poolp, length + cifs_min_rcv,
757 /* if server->tsk was NULL then wait for a signal before exiting */
759 set_current_state(TASK_INTERRUPTIBLE);
760 while (!signal_pending(current)) {
762 set_current_state(TASK_INTERRUPTIBLE);
764 set_current_state(TASK_RUNNING);
767 module_put_and_exit(0);
770 /* extract the host portion of the UNC string */
772 extract_hostname(const char *unc)
778 /* skip double chars at beginning of string */
779 /* BB: check validity of these bytes? */
782 /* delimiter between hostname and sharename is always '\\' now */
783 delim = strchr(src, '\\');
785 return ERR_PTR(-EINVAL);
788 dst = kmalloc((len + 1), GFP_KERNEL);
790 return ERR_PTR(-ENOMEM);
792 memcpy(dst, src, len);
799 cifs_parse_mount_options(char *options, const char *devname,
804 unsigned int temp_len, i, j;
810 if (Local_System_Name[0] != 0)
811 memcpy(vol->source_rfc1001_name, Local_System_Name, 15);
813 char *nodename = utsname()->nodename;
814 int n = strnlen(nodename, 15);
815 memset(vol->source_rfc1001_name, 0x20, 15);
816 for (i = 0; i < n; i++) {
817 /* does not have to be perfect mapping since field is
818 informational, only used for servers that do not support
819 port 445 and it can be overridden at mount time */
820 vol->source_rfc1001_name[i] = toupper(nodename[i]);
823 vol->source_rfc1001_name[15] = 0;
824 /* null target name indicates to use *SMBSERVR default called name
825 if we end up sending RFC1001 session initialize */
826 vol->target_rfc1001_name[0] = 0;
827 vol->linux_uid = current_uid(); /* use current_euid() instead? */
828 vol->linux_gid = current_gid();
829 vol->dir_mode = S_IRWXUGO;
830 /* 2767 perms indicate mandatory locking support */
831 vol->file_mode = (S_IRWXUGO | S_ISGID) & (~S_IXGRP);
833 /* vol->retry default is 0 (i.e. "soft" limited retry not hard retry) */
835 /* default is always to request posix paths. */
836 vol->posix_paths = 1;
841 if (strncmp(options, "sep=", 4) == 0) {
842 if (options[4] != 0) {
843 separator[0] = options[4];
846 cFYI(1, ("Null separator not allowed"));
850 while ((data = strsep(&options, separator)) != NULL) {
853 if ((value = strchr(data, '=')) != NULL)
856 /* Have to parse this before we parse for "user" */
857 if (strnicmp(data, "user_xattr", 10) == 0) {
859 } else if (strnicmp(data, "nouser_xattr", 12) == 0) {
861 } else if (strnicmp(data, "user", 4) == 0) {
864 "CIFS: invalid or missing username\n");
865 return 1; /* needs_arg; */
866 } else if (!*value) {
867 /* null user, ie anonymous, authentication */
870 if (strnlen(value, 200) < 200) {
871 vol->username = value;
873 printk(KERN_WARNING "CIFS: username too long\n");
876 } else if (strnicmp(data, "pass", 4) == 0) {
878 vol->password = NULL;
880 } else if (value[0] == 0) {
881 /* check if string begins with double comma
882 since that would mean the password really
883 does start with a comma, and would not
884 indicate an empty string */
885 if (value[1] != separator[0]) {
886 vol->password = NULL;
890 temp_len = strlen(value);
891 /* removed password length check, NTLM passwords
892 can be arbitrarily long */
894 /* if comma in password, the string will be
895 prematurely null terminated. Commas in password are
896 specified across the cifs mount interface by a double
897 comma ie ,, and a comma used as in other cases ie ','
898 as a parameter delimiter/separator is single and due
899 to the strsep above is temporarily zeroed. */
901 /* NB: password legally can have multiple commas and
902 the only illegal character in a password is null */
904 if ((value[temp_len] == 0) &&
905 (value[temp_len+1] == separator[0])) {
907 value[temp_len] = separator[0];
908 temp_len += 2; /* move after second comma */
909 while (value[temp_len] != 0) {
910 if (value[temp_len] == separator[0]) {
911 if (value[temp_len+1] ==
913 /* skip second comma */
916 /* single comma indicating start
923 if (value[temp_len] == 0) {
927 /* point option to start of next parm */
928 options = value + temp_len + 1;
930 /* go from value to value + temp_len condensing
931 double commas to singles. Note that this ends up
932 allocating a few bytes too many, which is ok */
933 vol->password = kzalloc(temp_len, GFP_KERNEL);
934 if (vol->password == NULL) {
935 printk(KERN_WARNING "CIFS: no memory "
939 for (i = 0, j = 0; i < temp_len; i++, j++) {
940 vol->password[j] = value[i];
941 if (value[i] == separator[0]
942 && value[i+1] == separator[0]) {
943 /* skip second comma */
947 vol->password[j] = 0;
949 vol->password = kzalloc(temp_len+1, GFP_KERNEL);
950 if (vol->password == NULL) {
951 printk(KERN_WARNING "CIFS: no memory "
955 strcpy(vol->password, value);
957 } else if (strnicmp(data, "ip", 2) == 0) {
958 if (!value || !*value) {
960 } else if (strnlen(value, 35) < 35) {
963 printk(KERN_WARNING "CIFS: ip address "
967 } else if (strnicmp(data, "sec", 3) == 0) {
968 if (!value || !*value) {
969 cERROR(1, ("no security value specified"));
971 } else if (strnicmp(value, "krb5i", 5) == 0) {
972 vol->secFlg |= CIFSSEC_MAY_KRB5 |
974 } else if (strnicmp(value, "krb5p", 5) == 0) {
975 /* vol->secFlg |= CIFSSEC_MUST_SEAL |
977 cERROR(1, ("Krb5 cifs privacy not supported"));
979 } else if (strnicmp(value, "krb5", 4) == 0) {
980 vol->secFlg |= CIFSSEC_MAY_KRB5;
981 } else if (strnicmp(value, "ntlmv2i", 7) == 0) {
982 vol->secFlg |= CIFSSEC_MAY_NTLMV2 |
984 } else if (strnicmp(value, "ntlmv2", 6) == 0) {
985 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
986 } else if (strnicmp(value, "ntlmi", 5) == 0) {
987 vol->secFlg |= CIFSSEC_MAY_NTLM |
989 } else if (strnicmp(value, "ntlm", 4) == 0) {
990 /* ntlm is default so can be turned off too */
991 vol->secFlg |= CIFSSEC_MAY_NTLM;
992 } else if (strnicmp(value, "nontlm", 6) == 0) {
993 /* BB is there a better way to do this? */
994 vol->secFlg |= CIFSSEC_MAY_NTLMV2;
995 #ifdef CONFIG_CIFS_WEAK_PW_HASH
996 } else if (strnicmp(value, "lanman", 6) == 0) {
997 vol->secFlg |= CIFSSEC_MAY_LANMAN;
999 } else if (strnicmp(value, "none", 4) == 0) {
1002 cERROR(1, ("bad security option: %s", value));
1005 } else if ((strnicmp(data, "unc", 3) == 0)
1006 || (strnicmp(data, "target", 6) == 0)
1007 || (strnicmp(data, "path", 4) == 0)) {
1008 if (!value || !*value) {
1009 printk(KERN_WARNING "CIFS: invalid path to "
1010 "network resource\n");
1011 return 1; /* needs_arg; */
1013 if ((temp_len = strnlen(value, 300)) < 300) {
1014 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1015 if (vol->UNC == NULL)
1017 strcpy(vol->UNC, value);
1018 if (strncmp(vol->UNC, "//", 2) == 0) {
1021 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1023 "CIFS: UNC Path does not begin "
1024 "with // or \\\\ \n");
1028 printk(KERN_WARNING "CIFS: UNC name too long\n");
1031 } else if ((strnicmp(data, "domain", 3) == 0)
1032 || (strnicmp(data, "workgroup", 5) == 0)) {
1033 if (!value || !*value) {
1034 printk(KERN_WARNING "CIFS: invalid domain name\n");
1035 return 1; /* needs_arg; */
1037 /* BB are there cases in which a comma can be valid in
1038 a domain name and need special handling? */
1039 if (strnlen(value, 256) < 256) {
1040 vol->domainname = value;
1041 cFYI(1, ("Domain name set"));
1043 printk(KERN_WARNING "CIFS: domain name too "
1047 } else if (strnicmp(data, "prefixpath", 10) == 0) {
1048 if (!value || !*value) {
1050 "CIFS: invalid path prefix\n");
1051 return 1; /* needs_argument */
1053 if ((temp_len = strnlen(value, 1024)) < 1024) {
1054 if (value[0] != '/')
1055 temp_len++; /* missing leading slash */
1056 vol->prepath = kmalloc(temp_len+1, GFP_KERNEL);
1057 if (vol->prepath == NULL)
1059 if (value[0] != '/') {
1060 vol->prepath[0] = '/';
1061 strcpy(vol->prepath+1, value);
1063 strcpy(vol->prepath, value);
1064 cFYI(1, ("prefix path %s", vol->prepath));
1066 printk(KERN_WARNING "CIFS: prefix too long\n");
1069 } else if (strnicmp(data, "iocharset", 9) == 0) {
1070 if (!value || !*value) {
1071 printk(KERN_WARNING "CIFS: invalid iocharset "
1073 return 1; /* needs_arg; */
1075 if (strnlen(value, 65) < 65) {
1076 if (strnicmp(value, "default", 7))
1077 vol->iocharset = value;
1078 /* if iocharset not set then load_nls_default
1079 is used by caller */
1080 cFYI(1, ("iocharset set to %s", value));
1082 printk(KERN_WARNING "CIFS: iocharset name "
1086 } else if (strnicmp(data, "uid", 3) == 0) {
1087 if (value && *value) {
1089 simple_strtoul(value, &value, 0);
1090 vol->override_uid = 1;
1092 } else if (strnicmp(data, "gid", 3) == 0) {
1093 if (value && *value) {
1095 simple_strtoul(value, &value, 0);
1096 vol->override_gid = 1;
1098 } else if (strnicmp(data, "file_mode", 4) == 0) {
1099 if (value && *value) {
1101 simple_strtoul(value, &value, 0);
1103 } else if (strnicmp(data, "dir_mode", 4) == 0) {
1104 if (value && *value) {
1106 simple_strtoul(value, &value, 0);
1108 } else if (strnicmp(data, "dirmode", 4) == 0) {
1109 if (value && *value) {
1111 simple_strtoul(value, &value, 0);
1113 } else if (strnicmp(data, "port", 4) == 0) {
1114 if (value && *value) {
1116 simple_strtoul(value, &value, 0);
1118 } else if (strnicmp(data, "rsize", 5) == 0) {
1119 if (value && *value) {
1121 simple_strtoul(value, &value, 0);
1123 } else if (strnicmp(data, "wsize", 5) == 0) {
1124 if (value && *value) {
1126 simple_strtoul(value, &value, 0);
1128 } else if (strnicmp(data, "sockopt", 5) == 0) {
1129 if (value && *value) {
1131 simple_strtoul(value, &value, 0);
1133 } else if (strnicmp(data, "netbiosname", 4) == 0) {
1134 if (!value || !*value || (*value == ' ')) {
1135 cFYI(1, ("invalid (empty) netbiosname"));
1137 memset(vol->source_rfc1001_name, 0x20, 15);
1138 for (i = 0; i < 15; i++) {
1139 /* BB are there cases in which a comma can be
1140 valid in this workstation netbios name (and need
1141 special handling)? */
1143 /* We do not uppercase netbiosname for user */
1147 vol->source_rfc1001_name[i] =
1150 /* The string has 16th byte zero still from
1151 set at top of the function */
1152 if ((i == 15) && (value[i] != 0))
1153 printk(KERN_WARNING "CIFS: netbiosname"
1154 " longer than 15 truncated.\n");
1156 } else if (strnicmp(data, "servern", 7) == 0) {
1157 /* servernetbiosname specified override *SMBSERVER */
1158 if (!value || !*value || (*value == ' ')) {
1159 cFYI(1, ("empty server netbiosname specified"));
1161 /* last byte, type, is 0x20 for servr type */
1162 memset(vol->target_rfc1001_name, 0x20, 16);
1164 for (i = 0; i < 15; i++) {
1165 /* BB are there cases in which a comma can be
1166 valid in this workstation netbios name
1167 (and need special handling)? */
1169 /* user or mount helper must uppercase
1174 vol->target_rfc1001_name[i] =
1177 /* The string has 16th byte zero still from
1178 set at top of the function */
1179 if ((i == 15) && (value[i] != 0))
1180 printk(KERN_WARNING "CIFS: server net"
1181 "biosname longer than 15 truncated.\n");
1183 } else if (strnicmp(data, "credentials", 4) == 0) {
1185 } else if (strnicmp(data, "version", 3) == 0) {
1187 } else if (strnicmp(data, "guest", 5) == 0) {
1189 } else if (strnicmp(data, "rw", 2) == 0) {
1191 } else if (strnicmp(data, "noblocksend", 11) == 0) {
1192 vol->noblocksnd = 1;
1193 } else if (strnicmp(data, "noautotune", 10) == 0) {
1194 vol->noautotune = 1;
1195 } else if ((strnicmp(data, "suid", 4) == 0) ||
1196 (strnicmp(data, "nosuid", 6) == 0) ||
1197 (strnicmp(data, "exec", 4) == 0) ||
1198 (strnicmp(data, "noexec", 6) == 0) ||
1199 (strnicmp(data, "nodev", 5) == 0) ||
1200 (strnicmp(data, "noauto", 6) == 0) ||
1201 (strnicmp(data, "dev", 3) == 0)) {
1202 /* The mount tool or mount.cifs helper (if present)
1203 uses these opts to set flags, and the flags are read
1204 by the kernel vfs layer before we get here (ie
1205 before read super) so there is no point trying to
1206 parse these options again and set anything and it
1207 is ok to just ignore them */
1209 } else if (strnicmp(data, "ro", 2) == 0) {
1211 } else if (strnicmp(data, "hard", 4) == 0) {
1213 } else if (strnicmp(data, "soft", 4) == 0) {
1215 } else if (strnicmp(data, "perm", 4) == 0) {
1217 } else if (strnicmp(data, "noperm", 6) == 0) {
1219 } else if (strnicmp(data, "mapchars", 8) == 0) {
1221 } else if (strnicmp(data, "nomapchars", 10) == 0) {
1223 } else if (strnicmp(data, "sfu", 3) == 0) {
1225 } else if (strnicmp(data, "nosfu", 5) == 0) {
1227 } else if (strnicmp(data, "nodfs", 5) == 0) {
1229 } else if (strnicmp(data, "posixpaths", 10) == 0) {
1230 vol->posix_paths = 1;
1231 } else if (strnicmp(data, "noposixpaths", 12) == 0) {
1232 vol->posix_paths = 0;
1233 } else if (strnicmp(data, "nounix", 6) == 0) {
1234 vol->no_linux_ext = 1;
1235 } else if (strnicmp(data, "nolinux", 7) == 0) {
1236 vol->no_linux_ext = 1;
1237 } else if ((strnicmp(data, "nocase", 6) == 0) ||
1238 (strnicmp(data, "ignorecase", 10) == 0)) {
1240 } else if (strnicmp(data, "brl", 3) == 0) {
1242 } else if ((strnicmp(data, "nobrl", 5) == 0) ||
1243 (strnicmp(data, "nolock", 6) == 0)) {
1245 /* turn off mandatory locking in mode
1246 if remote locking is turned off since the
1247 local vfs will do advisory */
1248 if (vol->file_mode ==
1249 (S_IALLUGO & ~(S_ISUID | S_IXGRP)))
1250 vol->file_mode = S_IALLUGO;
1251 } else if (strnicmp(data, "forcemandatorylock", 9) == 0) {
1252 /* will take the shorter form "forcemand" as well */
1253 /* This mount option will force use of mandatory
1254 (DOS/Windows style) byte range locks, instead of
1255 using posix advisory byte range locks, even if the
1256 Unix extensions are available and posix locks would
1257 be supported otherwise. If Unix extensions are not
1258 negotiated this has no effect since mandatory locks
1259 would be used (mandatory locks is all that those
1260 those servers support) */
1262 } else if (strnicmp(data, "setuids", 7) == 0) {
1264 } else if (strnicmp(data, "nosetuids", 9) == 0) {
1266 } else if (strnicmp(data, "dynperm", 7) == 0) {
1267 vol->dynperm = true;
1268 } else if (strnicmp(data, "nodynperm", 9) == 0) {
1269 vol->dynperm = false;
1270 } else if (strnicmp(data, "nohard", 6) == 0) {
1272 } else if (strnicmp(data, "nosoft", 6) == 0) {
1274 } else if (strnicmp(data, "nointr", 6) == 0) {
1276 } else if (strnicmp(data, "intr", 4) == 0) {
1278 } else if (strnicmp(data, "nostrictsync", 12) == 0) {
1279 vol->nostrictsync = 1;
1280 } else if (strnicmp(data, "strictsync", 10) == 0) {
1281 vol->nostrictsync = 0;
1282 } else if (strnicmp(data, "serverino", 7) == 0) {
1283 vol->server_ino = 1;
1284 } else if (strnicmp(data, "noserverino", 9) == 0) {
1285 vol->server_ino = 0;
1286 } else if (strnicmp(data, "cifsacl", 7) == 0) {
1288 } else if (strnicmp(data, "nocifsacl", 9) == 0) {
1290 } else if (strnicmp(data, "acl", 3) == 0) {
1291 vol->no_psx_acl = 0;
1292 } else if (strnicmp(data, "noacl", 5) == 0) {
1293 vol->no_psx_acl = 1;
1294 #ifdef CONFIG_CIFS_EXPERIMENTAL
1295 } else if (strnicmp(data, "locallease", 6) == 0) {
1296 vol->local_lease = 1;
1298 } else if (strnicmp(data, "sign", 4) == 0) {
1299 vol->secFlg |= CIFSSEC_MUST_SIGN;
1300 } else if (strnicmp(data, "seal", 4) == 0) {
1301 /* we do not do the following in secFlags because seal
1302 is a per tree connection (mount) not a per socket
1303 or per-smb connection option in the protocol */
1304 /* vol->secFlg |= CIFSSEC_MUST_SEAL; */
1306 } else if (strnicmp(data, "direct", 6) == 0) {
1308 } else if (strnicmp(data, "forcedirectio", 13) == 0) {
1310 } else if (strnicmp(data, "in6_addr", 8) == 0) {
1311 if (!value || !*value) {
1312 vol->in6_addr = NULL;
1313 } else if (strnlen(value, 49) == 48) {
1314 vol->in6_addr = value;
1316 printk(KERN_WARNING "CIFS: ip v6 address not "
1317 "48 characters long\n");
1320 } else if (strnicmp(data, "noac", 4) == 0) {
1321 printk(KERN_WARNING "CIFS: Mount option noac not "
1322 "supported. Instead set "
1323 "/proc/fs/cifs/LookupCacheEnabled to 0\n");
1325 printk(KERN_WARNING "CIFS: Unknown mount option %s\n",
1328 if (vol->UNC == NULL) {
1329 if (devname == NULL) {
1330 printk(KERN_WARNING "CIFS: Missing UNC name for mount "
1334 if ((temp_len = strnlen(devname, 300)) < 300) {
1335 vol->UNC = kmalloc(temp_len+1, GFP_KERNEL);
1336 if (vol->UNC == NULL)
1338 strcpy(vol->UNC, devname);
1339 if (strncmp(vol->UNC, "//", 2) == 0) {
1342 } else if (strncmp(vol->UNC, "\\\\", 2) != 0) {
1343 printk(KERN_WARNING "CIFS: UNC Path does not "
1344 "begin with // or \\\\ \n");
1347 value = strpbrk(vol->UNC+2, "/\\");
1351 printk(KERN_WARNING "CIFS: UNC name too long\n");
1355 if (vol->UNCip == NULL)
1356 vol->UNCip = &vol->UNC[2];
1361 static struct TCP_Server_Info *
1362 cifs_find_tcp_session(struct sockaddr_storage *addr)
1364 struct list_head *tmp;
1365 struct TCP_Server_Info *server;
1366 struct sockaddr_in *addr4 = (struct sockaddr_in *) addr;
1367 struct sockaddr_in6 *addr6 = (struct sockaddr_in6 *) addr;
1369 write_lock(&cifs_tcp_ses_lock);
1370 list_for_each(tmp, &cifs_tcp_ses_list) {
1371 server = list_entry(tmp, struct TCP_Server_Info,
1374 * the demux thread can exit on its own while still in CifsNew
1375 * so don't accept any sockets in that state. Since the
1376 * tcpStatus never changes back to CifsNew it's safe to check
1377 * for this without a lock.
1379 if (server->tcpStatus == CifsNew)
1382 if (addr->ss_family == AF_INET &&
1383 (addr4->sin_addr.s_addr !=
1384 server->addr.sockAddr.sin_addr.s_addr))
1386 else if (addr->ss_family == AF_INET6 &&
1387 !ipv6_addr_equal(&server->addr.sockAddr6.sin6_addr,
1391 ++server->srv_count;
1392 write_unlock(&cifs_tcp_ses_lock);
1393 cFYI(1, ("Existing tcp session with server found"));
1396 write_unlock(&cifs_tcp_ses_lock);
1401 cifs_put_tcp_session(struct TCP_Server_Info *server)
1403 struct task_struct *task;
1405 write_lock(&cifs_tcp_ses_lock);
1406 if (--server->srv_count > 0) {
1407 write_unlock(&cifs_tcp_ses_lock);
1411 list_del_init(&server->tcp_ses_list);
1412 write_unlock(&cifs_tcp_ses_lock);
1414 spin_lock(&GlobalMid_Lock);
1415 server->tcpStatus = CifsExiting;
1416 spin_unlock(&GlobalMid_Lock);
1418 task = xchg(&server->tsk, NULL);
1420 force_sig(SIGKILL, task);
1423 static struct TCP_Server_Info *
1424 cifs_get_tcp_session(struct smb_vol *volume_info)
1426 struct TCP_Server_Info *tcp_ses = NULL;
1427 struct sockaddr_storage addr;
1428 struct sockaddr_in *sin_server = (struct sockaddr_in *) &addr;
1429 struct sockaddr_in6 *sin_server6 = (struct sockaddr_in6 *) &addr;
1432 memset(&addr, 0, sizeof(struct sockaddr_storage));
1434 if (volume_info->UNCip && volume_info->UNC) {
1435 rc = cifs_inet_pton(AF_INET, volume_info->UNCip,
1436 &sin_server->sin_addr.s_addr);
1439 /* not ipv4 address, try ipv6 */
1440 rc = cifs_inet_pton(AF_INET6, volume_info->UNCip,
1441 &sin_server6->sin6_addr.in6_u);
1443 addr.ss_family = AF_INET6;
1445 addr.ss_family = AF_INET;
1449 /* we failed translating address */
1454 cFYI(1, ("UNC: %s ip: %s", volume_info->UNC,
1455 volume_info->UNCip));
1456 } else if (volume_info->UNCip) {
1457 /* BB using ip addr as tcp_ses name to connect to the
1459 cERROR(1, ("Connecting to DFS root not implemented yet"));
1462 } else /* which tcp_sess DFS root would we conect to */ {
1464 ("CIFS mount error: No UNC path (e.g. -o "
1465 "unc=//192.168.1.100/public) specified"));
1470 /* see if we already have a matching tcp_ses */
1471 tcp_ses = cifs_find_tcp_session(&addr);
1475 tcp_ses = kzalloc(sizeof(struct TCP_Server_Info), GFP_KERNEL);
1481 tcp_ses->hostname = extract_hostname(volume_info->UNC);
1482 if (IS_ERR(tcp_ses->hostname)) {
1483 rc = PTR_ERR(tcp_ses->hostname);
1487 tcp_ses->noblocksnd = volume_info->noblocksnd;
1488 tcp_ses->noautotune = volume_info->noautotune;
1489 atomic_set(&tcp_ses->inFlight, 0);
1490 init_waitqueue_head(&tcp_ses->response_q);
1491 init_waitqueue_head(&tcp_ses->request_q);
1492 INIT_LIST_HEAD(&tcp_ses->pending_mid_q);
1493 mutex_init(&tcp_ses->srv_mutex);
1494 memcpy(tcp_ses->workstation_RFC1001_name,
1495 volume_info->source_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1496 memcpy(tcp_ses->server_RFC1001_name,
1497 volume_info->target_rfc1001_name, RFC1001_NAME_LEN_WITH_NULL);
1498 tcp_ses->sequence_number = 0;
1499 INIT_LIST_HEAD(&tcp_ses->tcp_ses_list);
1500 INIT_LIST_HEAD(&tcp_ses->smb_ses_list);
1503 * at this point we are the only ones with the pointer
1504 * to the struct since the kernel thread not created yet
1505 * no need to spinlock this init of tcpStatus or srv_count
1507 tcp_ses->tcpStatus = CifsNew;
1508 ++tcp_ses->srv_count;
1510 if (addr.ss_family == AF_INET6) {
1511 cFYI(1, ("attempting ipv6 connect"));
1512 /* BB should we allow ipv6 on port 139? */
1513 /* other OS never observed in Wild doing 139 with v6 */
1514 memcpy(&tcp_ses->addr.sockAddr6, sin_server6,
1515 sizeof(struct sockaddr_in6));
1516 sin_server6->sin6_port = htons(volume_info->port);
1517 rc = ipv6_connect(tcp_ses);
1519 memcpy(&tcp_ses->addr.sockAddr, sin_server,
1520 sizeof(struct sockaddr_in));
1521 sin_server->sin_port = htons(volume_info->port);
1522 rc = ipv4_connect(tcp_ses);
1525 cERROR(1, ("Error connecting to socket. Aborting operation"));
1530 * since we're in a cifs function already, we know that
1531 * this will succeed. No need for try_module_get().
1533 __module_get(THIS_MODULE);
1534 tcp_ses->tsk = kthread_run((void *)(void *)cifs_demultiplex_thread,
1536 if (IS_ERR(tcp_ses->tsk)) {
1537 rc = PTR_ERR(tcp_ses->tsk);
1538 cERROR(1, ("error %d create cifsd thread", rc));
1539 module_put(THIS_MODULE);
1543 /* thread spawned, put it on the list */
1544 write_lock(&cifs_tcp_ses_lock);
1545 list_add(&tcp_ses->tcp_ses_list, &cifs_tcp_ses_list);
1546 write_unlock(&cifs_tcp_ses_lock);
1552 kfree(tcp_ses->hostname);
1553 if (tcp_ses->ssocket)
1554 sock_release(tcp_ses->ssocket);
1560 static struct cifsSesInfo *
1561 cifs_find_smb_ses(struct TCP_Server_Info *server, char *username)
1563 struct list_head *tmp;
1564 struct cifsSesInfo *ses;
1566 write_lock(&cifs_tcp_ses_lock);
1567 list_for_each(tmp, &server->smb_ses_list) {
1568 ses = list_entry(tmp, struct cifsSesInfo, smb_ses_list);
1569 if (strncmp(ses->userName, username, MAX_USERNAME_SIZE))
1573 write_unlock(&cifs_tcp_ses_lock);
1576 write_unlock(&cifs_tcp_ses_lock);
1581 cifs_put_smb_ses(struct cifsSesInfo *ses)
1584 struct TCP_Server_Info *server = ses->server;
1586 write_lock(&cifs_tcp_ses_lock);
1587 if (--ses->ses_count > 0) {
1588 write_unlock(&cifs_tcp_ses_lock);
1592 list_del_init(&ses->smb_ses_list);
1593 write_unlock(&cifs_tcp_ses_lock);
1595 if (ses->status == CifsGood) {
1597 CIFSSMBLogoff(xid, ses);
1601 cifs_put_tcp_session(server);
1604 static struct cifsTconInfo *
1605 cifs_find_tcon(struct cifsSesInfo *ses, const char *unc)
1607 struct list_head *tmp;
1608 struct cifsTconInfo *tcon;
1610 write_lock(&cifs_tcp_ses_lock);
1611 list_for_each(tmp, &ses->tcon_list) {
1612 tcon = list_entry(tmp, struct cifsTconInfo, tcon_list);
1613 if (tcon->tidStatus == CifsExiting)
1615 if (strncmp(tcon->treeName, unc, MAX_TREE_SIZE))
1619 write_unlock(&cifs_tcp_ses_lock);
1622 write_unlock(&cifs_tcp_ses_lock);
1627 cifs_put_tcon(struct cifsTconInfo *tcon)
1630 struct cifsSesInfo *ses = tcon->ses;
1632 write_lock(&cifs_tcp_ses_lock);
1633 if (--tcon->tc_count > 0) {
1634 write_unlock(&cifs_tcp_ses_lock);
1638 list_del_init(&tcon->tcon_list);
1639 write_unlock(&cifs_tcp_ses_lock);
1642 CIFSSMBTDis(xid, tcon);
1645 DeleteTconOplockQEntries(tcon);
1647 cifs_put_smb_ses(ses);
1651 get_dfs_path(int xid, struct cifsSesInfo *pSesInfo, const char *old_path,
1652 const struct nls_table *nls_codepage, unsigned int *pnum_referrals,
1653 struct dfs_info3_param **preferrals, int remap)
1658 *pnum_referrals = 0;
1661 if (pSesInfo->ipc_tid == 0) {
1662 temp_unc = kmalloc(2 /* for slashes */ +
1663 strnlen(pSesInfo->serverName,
1664 SERVER_NAME_LEN_WITH_NULL * 2)
1665 + 1 + 4 /* slash IPC$ */ + 2,
1667 if (temp_unc == NULL)
1671 strcpy(temp_unc + 2, pSesInfo->serverName);
1672 strcpy(temp_unc + 2 + strlen(pSesInfo->serverName), "\\IPC$");
1673 rc = CIFSTCon(xid, pSesInfo, temp_unc, NULL, nls_codepage);
1675 ("CIFS Tcon rc = %d ipc_tid = %d", rc, pSesInfo->ipc_tid));
1679 rc = CIFSGetDFSRefer(xid, pSesInfo, old_path, preferrals,
1680 pnum_referrals, nls_codepage, remap);
1681 /* BB map targetUNCs to dfs_info3 structures, here or
1682 in CIFSGetDFSRefer BB */
1687 #ifdef CONFIG_DEBUG_LOCK_ALLOC
1688 static struct lock_class_key cifs_key[2];
1689 static struct lock_class_key cifs_slock_key[2];
1692 cifs_reclassify_socket4(struct socket *sock)
1694 struct sock *sk = sock->sk;
1695 BUG_ON(sock_owned_by_user(sk));
1696 sock_lock_init_class_and_name(sk, "slock-AF_INET-CIFS",
1697 &cifs_slock_key[0], "sk_lock-AF_INET-CIFS", &cifs_key[0]);
1701 cifs_reclassify_socket6(struct socket *sock)
1703 struct sock *sk = sock->sk;
1704 BUG_ON(sock_owned_by_user(sk));
1705 sock_lock_init_class_and_name(sk, "slock-AF_INET6-CIFS",
1706 &cifs_slock_key[1], "sk_lock-AF_INET6-CIFS", &cifs_key[1]);
1710 cifs_reclassify_socket4(struct socket *sock)
1715 cifs_reclassify_socket6(struct socket *sock)
1720 /* See RFC1001 section 14 on representation of Netbios names */
1721 static void rfc1002mangle(char *target, char *source, unsigned int length)
1725 for (i = 0, j = 0; i < (length); i++) {
1726 /* mask a nibble at a time and encode */
1727 target[j] = 'A' + (0x0F & (source[i] >> 4));
1728 target[j+1] = 'A' + (0x0F & source[i]);
1736 ipv4_connect(struct TCP_Server_Info *server)
1739 bool connected = false;
1740 __be16 orig_port = 0;
1741 struct socket *socket = server->ssocket;
1743 if (socket == NULL) {
1744 rc = sock_create_kern(PF_INET, SOCK_STREAM,
1745 IPPROTO_TCP, &socket);
1747 cERROR(1, ("Error %d creating socket", rc));
1751 /* BB other socket options to set KEEPALIVE, NODELAY? */
1752 cFYI(1, ("Socket created"));
1753 server->ssocket = socket;
1754 socket->sk->sk_allocation = GFP_NOFS;
1755 cifs_reclassify_socket4(socket);
1758 /* user overrode default port */
1759 if (server->addr.sockAddr.sin_port) {
1760 rc = socket->ops->connect(socket, (struct sockaddr *)
1761 &server->addr.sockAddr,
1762 sizeof(struct sockaddr_in), 0);
1768 /* save original port so we can retry user specified port
1769 later if fall back ports fail this time */
1770 orig_port = server->addr.sockAddr.sin_port;
1772 /* do not retry on the same port we just failed on */
1773 if (server->addr.sockAddr.sin_port != htons(CIFS_PORT)) {
1774 server->addr.sockAddr.sin_port = htons(CIFS_PORT);
1775 rc = socket->ops->connect(socket,
1777 &server->addr.sockAddr,
1778 sizeof(struct sockaddr_in), 0);
1784 server->addr.sockAddr.sin_port = htons(RFC1001_PORT);
1785 rc = socket->ops->connect(socket, (struct sockaddr *)
1786 &server->addr.sockAddr,
1787 sizeof(struct sockaddr_in), 0);
1792 /* give up here - unless we want to retry on different
1793 protocol families some day */
1796 server->addr.sockAddr.sin_port = orig_port;
1797 cFYI(1, ("Error %d connecting to server via ipv4", rc));
1798 sock_release(socket);
1799 server->ssocket = NULL;
1805 * Eventually check for other socket options to change from
1806 * the default. sock_setsockopt not used because it expects
1809 socket->sk->sk_rcvtimeo = 7 * HZ;
1810 socket->sk->sk_sndtimeo = 5 * HZ;
1812 /* make the bufsizes depend on wsize/rsize and max requests */
1813 if (server->noautotune) {
1814 if (socket->sk->sk_sndbuf < (200 * 1024))
1815 socket->sk->sk_sndbuf = 200 * 1024;
1816 if (socket->sk->sk_rcvbuf < (140 * 1024))
1817 socket->sk->sk_rcvbuf = 140 * 1024;
1820 cFYI(1, ("sndbuf %d rcvbuf %d rcvtimeo 0x%lx",
1821 socket->sk->sk_sndbuf,
1822 socket->sk->sk_rcvbuf, socket->sk->sk_rcvtimeo));
1824 /* send RFC1001 sessinit */
1825 if (server->addr.sockAddr.sin_port == htons(RFC1001_PORT)) {
1826 /* some servers require RFC1001 sessinit before sending
1827 negprot - BB check reconnection in case where second
1828 sessinit is sent but no second negprot */
1829 struct rfc1002_session_packet *ses_init_buf;
1830 struct smb_hdr *smb_buf;
1831 ses_init_buf = kzalloc(sizeof(struct rfc1002_session_packet),
1834 ses_init_buf->trailer.session_req.called_len = 32;
1835 if (server->server_RFC1001_name &&
1836 server->server_RFC1001_name[0] != 0)
1837 rfc1002mangle(ses_init_buf->trailer.
1838 session_req.called_name,
1839 server->server_RFC1001_name,
1840 RFC1001_NAME_LEN_WITH_NULL);
1842 rfc1002mangle(ses_init_buf->trailer.
1843 session_req.called_name,
1844 DEFAULT_CIFS_CALLED_NAME,
1845 RFC1001_NAME_LEN_WITH_NULL);
1847 ses_init_buf->trailer.session_req.calling_len = 32;
1849 /* calling name ends in null (byte 16) from old smb
1851 if (server->workstation_RFC1001_name &&
1852 server->workstation_RFC1001_name[0] != 0)
1853 rfc1002mangle(ses_init_buf->trailer.
1854 session_req.calling_name,
1855 server->workstation_RFC1001_name,
1856 RFC1001_NAME_LEN_WITH_NULL);
1858 rfc1002mangle(ses_init_buf->trailer.
1859 session_req.calling_name,
1861 RFC1001_NAME_LEN_WITH_NULL);
1863 ses_init_buf->trailer.session_req.scope1 = 0;
1864 ses_init_buf->trailer.session_req.scope2 = 0;
1865 smb_buf = (struct smb_hdr *)ses_init_buf;
1866 /* sizeof RFC1002_SESSION_REQUEST with no scope */
1867 smb_buf->smb_buf_length = 0x81000044;
1868 rc = smb_send(server, smb_buf, 0x44);
1869 kfree(ses_init_buf);
1870 msleep(1); /* RFC1001 layer in at least one server
1871 requires very short break before negprot
1872 presumably because not expecting negprot
1873 to follow so fast. This is a simple
1874 solution that works without
1875 complicating the code and causes no
1876 significant slowing down on mount
1877 for everyone else */
1879 /* else the negprot may still work without this
1880 even though malloc failed */
1888 ipv6_connect(struct TCP_Server_Info *server)
1891 bool connected = false;
1892 __be16 orig_port = 0;
1893 struct socket *socket = server->ssocket;
1895 if (socket == NULL) {
1896 rc = sock_create_kern(PF_INET6, SOCK_STREAM,
1897 IPPROTO_TCP, &socket);
1899 cERROR(1, ("Error %d creating ipv6 socket", rc));
1904 /* BB other socket options to set KEEPALIVE, NODELAY? */
1905 cFYI(1, ("ipv6 Socket created"));
1906 server->ssocket = socket;
1907 socket->sk->sk_allocation = GFP_NOFS;
1908 cifs_reclassify_socket6(socket);
1911 /* user overrode default port */
1912 if (server->addr.sockAddr6.sin6_port) {
1913 rc = socket->ops->connect(socket,
1914 (struct sockaddr *) &server->addr.sockAddr6,
1915 sizeof(struct sockaddr_in6), 0);
1921 /* save original port so we can retry user specified port
1922 later if fall back ports fail this time */
1924 orig_port = server->addr.sockAddr6.sin6_port;
1925 /* do not retry on the same port we just failed on */
1926 if (server->addr.sockAddr6.sin6_port != htons(CIFS_PORT)) {
1927 server->addr.sockAddr6.sin6_port = htons(CIFS_PORT);
1928 rc = socket->ops->connect(socket, (struct sockaddr *)
1929 &server->addr.sockAddr6,
1930 sizeof(struct sockaddr_in6), 0);
1936 server->addr.sockAddr6.sin6_port = htons(RFC1001_PORT);
1937 rc = socket->ops->connect(socket, (struct sockaddr *)
1938 &server->addr.sockAddr6,
1939 sizeof(struct sockaddr_in6), 0);
1944 /* give up here - unless we want to retry on different
1945 protocol families some day */
1948 server->addr.sockAddr6.sin6_port = orig_port;
1949 cFYI(1, ("Error %d connecting to server via ipv6", rc));
1950 sock_release(socket);
1951 server->ssocket = NULL;
1956 * Eventually check for other socket options to change from
1957 * the default. sock_setsockopt not used because it expects
1960 socket->sk->sk_rcvtimeo = 7 * HZ;
1961 socket->sk->sk_sndtimeo = 5 * HZ;
1962 server->ssocket = socket;
1967 void reset_cifs_unix_caps(int xid, struct cifsTconInfo *tcon,
1968 struct super_block *sb, struct smb_vol *vol_info)
1970 /* if we are reconnecting then should we check to see if
1971 * any requested capabilities changed locally e.g. via
1972 * remount but we can not do much about it here
1973 * if they have (even if we could detect it by the following)
1974 * Perhaps we could add a backpointer to array of sb from tcon
1975 * or if we change to make all sb to same share the same
1976 * sb as NFS - then we only have one backpointer to sb.
1977 * What if we wanted to mount the server share twice once with
1978 * and once without posixacls or posix paths? */
1979 __u64 saved_cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1981 if (vol_info && vol_info->no_linux_ext) {
1982 tcon->fsUnixInfo.Capability = 0;
1983 tcon->unix_ext = 0; /* Unix Extensions disabled */
1984 cFYI(1, ("Linux protocol extensions disabled"));
1986 } else if (vol_info)
1987 tcon->unix_ext = 1; /* Unix Extensions supported */
1989 if (tcon->unix_ext == 0) {
1990 cFYI(1, ("Unix extensions disabled so not set on reconnect"));
1994 if (!CIFSSMBQFSUnixInfo(xid, tcon)) {
1995 __u64 cap = le64_to_cpu(tcon->fsUnixInfo.Capability);
1997 /* check for reconnect case in which we do not
1998 want to change the mount behavior if we can avoid it */
1999 if (vol_info == NULL) {
2000 /* turn off POSIX ACL and PATHNAMES if not set
2001 originally at mount time */
2002 if ((saved_cap & CIFS_UNIX_POSIX_ACL_CAP) == 0)
2003 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2004 if ((saved_cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2005 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2006 cERROR(1, ("POSIXPATH support change"));
2007 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2008 } else if ((cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) == 0) {
2009 cERROR(1, ("possible reconnect error"));
2011 ("server disabled POSIX path support"));
2015 cap &= CIFS_UNIX_CAP_MASK;
2016 if (vol_info && vol_info->no_psx_acl)
2017 cap &= ~CIFS_UNIX_POSIX_ACL_CAP;
2018 else if (CIFS_UNIX_POSIX_ACL_CAP & cap) {
2019 cFYI(1, ("negotiated posix acl support"));
2021 sb->s_flags |= MS_POSIXACL;
2024 if (vol_info && vol_info->posix_paths == 0)
2025 cap &= ~CIFS_UNIX_POSIX_PATHNAMES_CAP;
2026 else if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP) {
2027 cFYI(1, ("negotiate posix pathnames"));
2029 CIFS_SB(sb)->mnt_cifs_flags |=
2030 CIFS_MOUNT_POSIX_PATHS;
2033 /* We might be setting the path sep back to a different
2034 form if we are reconnecting and the server switched its
2035 posix path capability for this share */
2036 if (sb && (CIFS_SB(sb)->prepathlen > 0))
2037 CIFS_SB(sb)->prepath[0] = CIFS_DIR_SEP(CIFS_SB(sb));
2039 if (sb && (CIFS_SB(sb)->rsize > 127 * 1024)) {
2040 if ((cap & CIFS_UNIX_LARGE_READ_CAP) == 0) {
2041 CIFS_SB(sb)->rsize = 127 * 1024;
2043 ("larger reads not supported by srv"));
2048 cFYI(1, ("Negotiate caps 0x%x", (int)cap));
2049 #ifdef CONFIG_CIFS_DEBUG2
2050 if (cap & CIFS_UNIX_FCNTL_CAP)
2051 cFYI(1, ("FCNTL cap"));
2052 if (cap & CIFS_UNIX_EXTATTR_CAP)
2053 cFYI(1, ("EXTATTR cap"));
2054 if (cap & CIFS_UNIX_POSIX_PATHNAMES_CAP)
2055 cFYI(1, ("POSIX path cap"));
2056 if (cap & CIFS_UNIX_XATTR_CAP)
2057 cFYI(1, ("XATTR cap"));
2058 if (cap & CIFS_UNIX_POSIX_ACL_CAP)
2059 cFYI(1, ("POSIX ACL cap"));
2060 if (cap & CIFS_UNIX_LARGE_READ_CAP)
2061 cFYI(1, ("very large read cap"));
2062 if (cap & CIFS_UNIX_LARGE_WRITE_CAP)
2063 cFYI(1, ("very large write cap"));
2064 #endif /* CIFS_DEBUG2 */
2065 if (CIFSSMBSetFSUnixInfo(xid, tcon, cap)) {
2066 if (vol_info == NULL) {
2067 cFYI(1, ("resetting capabilities failed"));
2069 cERROR(1, ("Negotiating Unix capabilities "
2070 "with the server failed. Consider "
2071 "mounting with the Unix Extensions\n"
2072 "disabled, if problems are found, "
2073 "by specifying the nounix mount "
2081 convert_delimiter(char *path, char delim)
2094 for (i = 0; path[i] != '\0'; i++) {
2095 if (path[i] == old_delim)
2100 static void setup_cifs_sb(struct smb_vol *pvolume_info,
2101 struct cifs_sb_info *cifs_sb)
2103 if (pvolume_info->rsize > CIFSMaxBufSize) {
2104 cERROR(1, ("rsize %d too large, using MaxBufSize",
2105 pvolume_info->rsize));
2106 cifs_sb->rsize = CIFSMaxBufSize;
2107 } else if ((pvolume_info->rsize) &&
2108 (pvolume_info->rsize <= CIFSMaxBufSize))
2109 cifs_sb->rsize = pvolume_info->rsize;
2111 cifs_sb->rsize = CIFSMaxBufSize;
2113 if (pvolume_info->wsize > PAGEVEC_SIZE * PAGE_CACHE_SIZE) {
2114 cERROR(1, ("wsize %d too large, using 4096 instead",
2115 pvolume_info->wsize));
2116 cifs_sb->wsize = 4096;
2117 } else if (pvolume_info->wsize)
2118 cifs_sb->wsize = pvolume_info->wsize;
2120 cifs_sb->wsize = min_t(const int,
2121 PAGEVEC_SIZE * PAGE_CACHE_SIZE,
2123 /* old default of CIFSMaxBufSize was too small now
2124 that SMB Write2 can send multiple pages in kvec.
2125 RFC1001 does not describe what happens when frame
2126 bigger than 128K is sent so use that as max in
2127 conjunction with 52K kvec constraint on arch with 4K
2130 if (cifs_sb->rsize < 2048) {
2131 cifs_sb->rsize = 2048;
2132 /* Windows ME may prefer this */
2133 cFYI(1, ("readsize set to minimum: 2048"));
2135 /* calculate prepath */
2136 cifs_sb->prepath = pvolume_info->prepath;
2137 if (cifs_sb->prepath) {
2138 cifs_sb->prepathlen = strlen(cifs_sb->prepath);
2139 /* we can not convert the / to \ in the path
2140 separators in the prefixpath yet because we do not
2141 know (until reset_cifs_unix_caps is called later)
2142 whether POSIX PATH CAP is available. We normalize
2143 the / to \ after reset_cifs_unix_caps is called */
2144 pvolume_info->prepath = NULL;
2146 cifs_sb->prepathlen = 0;
2147 cifs_sb->mnt_uid = pvolume_info->linux_uid;
2148 cifs_sb->mnt_gid = pvolume_info->linux_gid;
2149 cifs_sb->mnt_file_mode = pvolume_info->file_mode;
2150 cifs_sb->mnt_dir_mode = pvolume_info->dir_mode;
2151 cFYI(1, ("file mode: 0x%x dir mode: 0x%x",
2152 cifs_sb->mnt_file_mode, cifs_sb->mnt_dir_mode));
2154 if (pvolume_info->noperm)
2155 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_PERM;
2156 if (pvolume_info->setuids)
2157 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SET_UID;
2158 if (pvolume_info->server_ino)
2159 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_SERVER_INUM;
2160 if (pvolume_info->remap)
2161 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_MAP_SPECIAL_CHR;
2162 if (pvolume_info->no_xattr)
2163 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_XATTR;
2164 if (pvolume_info->sfu_emul)
2165 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_UNX_EMUL;
2166 if (pvolume_info->nobrl)
2167 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NO_BRL;
2168 if (pvolume_info->nostrictsync)
2169 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOSSYNC;
2170 if (pvolume_info->mand_lock)
2171 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_NOPOSIXBRL;
2172 if (pvolume_info->cifs_acl)
2173 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_CIFS_ACL;
2174 if (pvolume_info->override_uid)
2175 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_UID;
2176 if (pvolume_info->override_gid)
2177 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_OVERR_GID;
2178 if (pvolume_info->dynperm)
2179 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DYNPERM;
2180 if (pvolume_info->direct_io) {
2181 cFYI(1, ("mounting share using direct i/o"));
2182 cifs_sb->mnt_cifs_flags |= CIFS_MOUNT_DIRECT_IO;
2185 if ((pvolume_info->cifs_acl) && (pvolume_info->dynperm))
2186 cERROR(1, ("mount option dynperm ignored if cifsacl "
2187 "mount option supported"));
2191 is_path_accessible(int xid, struct cifsTconInfo *tcon,
2192 struct cifs_sb_info *cifs_sb, const char *full_path)
2196 FILE_ALL_INFO *pfile_info;
2198 rc = CIFSGetSrvInodeNumber(xid, tcon, full_path, &inode_num,
2200 cifs_sb->mnt_cifs_flags &
2201 CIFS_MOUNT_MAP_SPECIAL_CHR);
2202 if (rc != -EOPNOTSUPP)
2205 pfile_info = kmalloc(sizeof(FILE_ALL_INFO), GFP_KERNEL);
2206 if (pfile_info == NULL)
2209 rc = CIFSSMBQPathInfo(xid, tcon, full_path, pfile_info,
2210 0 /* not legacy */, cifs_sb->local_nls,
2211 cifs_sb->mnt_cifs_flags &
2212 CIFS_MOUNT_MAP_SPECIAL_CHR);
2218 cleanup_volume_info(struct smb_vol **pvolume_info)
2220 struct smb_vol *volume_info;
2222 if (!pvolume_info && !*pvolume_info)
2225 volume_info = *pvolume_info;
2226 kzfree(volume_info->password);
2227 kfree(volume_info->UNC);
2228 kfree(volume_info->prepath);
2230 *pvolume_info = NULL;
2234 /* build_path_to_root returns full path to root when
2235 * we do not have an exiting connection (tcon) */
2237 build_unc_path_to_root(const struct smb_vol *volume_info,
2238 const struct cifs_sb_info *cifs_sb)
2242 int unc_len = strnlen(volume_info->UNC, MAX_TREE_SIZE + 1);
2243 full_path = kmalloc(unc_len + cifs_sb->prepathlen + 1, GFP_KERNEL);
2244 if (full_path == NULL)
2245 return ERR_PTR(-ENOMEM);
2247 strncpy(full_path, volume_info->UNC, unc_len);
2248 if (cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) {
2250 for (i = 0; i < unc_len; i++) {
2251 if (full_path[i] == '\\')
2256 if (cifs_sb->prepathlen)
2257 strncpy(full_path + unc_len, cifs_sb->prepath,
2258 cifs_sb->prepathlen);
2260 full_path[unc_len + cifs_sb->prepathlen] = 0; /* add trailing null */
2265 cifs_mount(struct super_block *sb, struct cifs_sb_info *cifs_sb,
2266 char *mount_data_global, const char *devname)
2270 struct smb_vol *volume_info;
2271 struct cifsSesInfo *pSesInfo = NULL;
2272 struct cifsTconInfo *tcon = NULL;
2273 struct TCP_Server_Info *srvTcp = NULL;
2275 struct dfs_info3_param *referrals = NULL;
2276 unsigned int num_referrals = 0;
2278 char *mount_data = mount_data_global;
2285 volume_info = kzalloc(sizeof(struct smb_vol), GFP_KERNEL);
2291 if (cifs_parse_mount_options(mount_data, devname, volume_info)) {
2296 if (volume_info->nullauth) {
2297 cFYI(1, ("null user"));
2298 volume_info->username = "";
2299 } else if (volume_info->username) {
2300 /* BB fixme parse for domain name here */
2301 cFYI(1, ("Username: %s", volume_info->username));
2303 cifserror("No username specified");
2304 /* In userspace mount helper we can get user name from alternate
2305 locations such as env variables and files on disk */
2311 /* this is needed for ASCII cp to Unicode converts */
2312 if (volume_info->iocharset == NULL) {
2313 cifs_sb->local_nls = load_nls_default();
2314 /* load_nls_default can not return null */
2316 cifs_sb->local_nls = load_nls(volume_info->iocharset);
2317 if (cifs_sb->local_nls == NULL) {
2318 cERROR(1, ("CIFS mount error: iocharset %s not found",
2319 volume_info->iocharset));
2325 /* get a reference to a tcp session */
2326 srvTcp = cifs_get_tcp_session(volume_info);
2327 if (IS_ERR(srvTcp)) {
2328 rc = PTR_ERR(srvTcp);
2332 pSesInfo = cifs_find_smb_ses(srvTcp, volume_info->username);
2334 cFYI(1, ("Existing smb sess found (status=%d)",
2337 * The existing SMB session already has a reference to srvTcp,
2338 * so we can put back the extra one we got before
2340 cifs_put_tcp_session(srvTcp);
2342 down(&pSesInfo->sesSem);
2343 if (pSesInfo->need_reconnect) {
2344 cFYI(1, ("Session needs reconnect"));
2345 rc = cifs_setup_session(xid, pSesInfo,
2346 cifs_sb->local_nls);
2348 up(&pSesInfo->sesSem);
2350 cFYI(1, ("Existing smb sess not found"));
2351 pSesInfo = sesInfoAlloc();
2352 if (pSesInfo == NULL) {
2354 goto mount_fail_check;
2357 /* new SMB session uses our srvTcp ref */
2358 pSesInfo->server = srvTcp;
2359 if (srvTcp->addr.sockAddr6.sin6_family == AF_INET6)
2360 sprintf(pSesInfo->serverName, "%pI6",
2361 &srvTcp->addr.sockAddr6.sin6_addr);
2363 sprintf(pSesInfo->serverName, "%pI4",
2364 &srvTcp->addr.sockAddr.sin_addr.s_addr);
2366 write_lock(&cifs_tcp_ses_lock);
2367 list_add(&pSesInfo->smb_ses_list, &srvTcp->smb_ses_list);
2368 write_unlock(&cifs_tcp_ses_lock);
2370 /* volume_info->password freed at unmount */
2371 if (volume_info->password) {
2372 pSesInfo->password = kstrdup(volume_info->password,
2374 if (!pSesInfo->password) {
2376 goto mount_fail_check;
2379 if (volume_info->username)
2380 strncpy(pSesInfo->userName, volume_info->username,
2382 if (volume_info->domainname) {
2383 int len = strlen(volume_info->domainname);
2384 pSesInfo->domainName = kmalloc(len + 1, GFP_KERNEL);
2385 if (pSesInfo->domainName)
2386 strcpy(pSesInfo->domainName,
2387 volume_info->domainname);
2389 pSesInfo->linux_uid = volume_info->linux_uid;
2390 pSesInfo->overrideSecFlg = volume_info->secFlg;
2391 down(&pSesInfo->sesSem);
2393 /* BB FIXME need to pass vol->secFlgs BB */
2394 rc = cifs_setup_session(xid, pSesInfo,
2395 cifs_sb->local_nls);
2396 up(&pSesInfo->sesSem);
2399 /* search for existing tcon to this server share */
2401 setup_cifs_sb(volume_info, cifs_sb);
2403 tcon = cifs_find_tcon(pSesInfo, volume_info->UNC);
2405 cFYI(1, ("Found match on UNC path"));
2406 /* existing tcon already has a reference */
2407 cifs_put_smb_ses(pSesInfo);
2408 if (tcon->seal != volume_info->seal)
2409 cERROR(1, ("transport encryption setting "
2410 "conflicts with existing tid"));
2412 tcon = tconInfoAlloc();
2415 goto mount_fail_check;
2418 tcon->ses = pSesInfo;
2419 if (volume_info->password) {
2420 tcon->password = kstrdup(volume_info->password,
2422 if (!tcon->password) {
2424 goto mount_fail_check;
2428 if ((strchr(volume_info->UNC + 3, '\\') == NULL)
2429 && (strchr(volume_info->UNC + 3, '/') == NULL)) {
2430 cERROR(1, ("Missing share name"));
2432 goto mount_fail_check;
2434 /* BB Do we need to wrap sesSem around
2435 * this TCon call and Unix SetFS as
2436 * we do on SessSetup and reconnect? */
2437 rc = CIFSTCon(xid, pSesInfo, volume_info->UNC,
2438 tcon, cifs_sb->local_nls);
2439 cFYI(1, ("CIFS Tcon rc = %d", rc));
2440 if (volume_info->nodfs) {
2441 tcon->Flags &= ~SMB_SHARE_IS_IN_DFS;
2442 cFYI(1, ("DFS disabled (%d)",
2447 goto remote_path_check;
2448 tcon->seal = volume_info->seal;
2449 write_lock(&cifs_tcp_ses_lock);
2450 list_add(&tcon->tcon_list, &pSesInfo->tcon_list);
2451 write_unlock(&cifs_tcp_ses_lock);
2454 /* we can have only one retry value for a connection
2455 to a share so for resources mounted more than once
2456 to the same server share the last value passed in
2457 for the retry flag is used */
2458 tcon->retry = volume_info->retry;
2459 tcon->nocase = volume_info->nocase;
2460 tcon->local_lease = volume_info->local_lease;
2463 if (pSesInfo->capabilities & CAP_LARGE_FILES) {
2464 sb->s_maxbytes = (u64) 1 << 63;
2466 sb->s_maxbytes = (u64) 1 << 31; /* 2 GB */
2469 /* BB FIXME fix time_gran to be larger for LANMAN sessions */
2470 sb->s_time_gran = 100;
2473 goto remote_path_check;
2475 cifs_sb->tcon = tcon;
2477 /* do not care if following two calls succeed - informational */
2479 CIFSSMBQFSDeviceInfo(xid, tcon);
2480 CIFSSMBQFSAttributeInfo(xid, tcon);
2483 /* tell server which Unix caps we support */
2484 if (tcon->ses->capabilities & CAP_UNIX)
2485 /* reset of caps checks mount to see if unix extensions
2486 disabled for just this mount */
2487 reset_cifs_unix_caps(xid, tcon, sb, volume_info);
2489 tcon->unix_ext = 0; /* server does not support them */
2491 /* convert forward to back slashes in prepath here if needed */
2492 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2493 convert_delimiter(cifs_sb->prepath, CIFS_DIR_SEP(cifs_sb));
2495 if ((tcon->unix_ext == 0) && (cifs_sb->rsize > (1024 * 127))) {
2496 cifs_sb->rsize = 1024 * 127;
2497 cFYI(DBG2, ("no very large read support, rsize now 127K"));
2499 if (!(tcon->ses->capabilities & CAP_LARGE_WRITE_X))
2500 cifs_sb->wsize = min(cifs_sb->wsize,
2501 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2502 if (!(tcon->ses->capabilities & CAP_LARGE_READ_X))
2503 cifs_sb->rsize = min(cifs_sb->rsize,
2504 (tcon->ses->server->maxBuf - MAX_CIFS_HDR_SIZE));
2507 /* check if a whole path (including prepath) is not remote */
2508 if (!rc && cifs_sb->prepathlen && tcon) {
2509 /* build_path_to_root works only when we have a valid tcon */
2510 full_path = cifs_build_path_to_root(cifs_sb);
2511 if (full_path == NULL) {
2513 goto mount_fail_check;
2515 rc = is_path_accessible(xid, tcon, cifs_sb, full_path);
2516 if (rc != -EREMOTE) {
2518 goto mount_fail_check;
2523 /* get referral if needed */
2524 if (rc == -EREMOTE) {
2525 #ifdef CONFIG_CIFS_DFS_UPCALL
2526 /* convert forward to back slashes in prepath here if needed */
2527 if ((cifs_sb->mnt_cifs_flags & CIFS_MOUNT_POSIX_PATHS) == 0)
2528 convert_delimiter(cifs_sb->prepath,
2529 CIFS_DIR_SEP(cifs_sb));
2530 full_path = build_unc_path_to_root(volume_info, cifs_sb);
2531 if (IS_ERR(full_path)) {
2532 rc = PTR_ERR(full_path);
2533 goto mount_fail_check;
2536 cFYI(1, ("Getting referral for: %s", full_path));
2537 rc = get_dfs_path(xid, pSesInfo , full_path + 1,
2538 cifs_sb->local_nls, &num_referrals, &referrals,
2539 cifs_sb->mnt_cifs_flags & CIFS_MOUNT_MAP_SPECIAL_CHR);
2540 if (!rc && num_referrals > 0) {
2541 char *fake_devname = NULL;
2543 if (mount_data != mount_data_global)
2545 mount_data = cifs_compose_mount_options(
2546 cifs_sb->mountdata, full_path + 1,
2547 referrals, &fake_devname);
2548 kfree(fake_devname);
2549 free_dfs_info_array(referrals, num_referrals);
2552 cifs_put_tcon(tcon);
2554 cifs_put_smb_ses(pSesInfo);
2556 cleanup_volume_info(&volume_info);
2559 goto try_mount_again;
2561 #else /* No DFS support, return error on mount */
2567 /* on error free sesinfo and tcon struct if needed */
2569 if (mount_data != mount_data_global)
2571 /* If find_unc succeeded then rc == 0 so we can not end */
2572 /* up accidently freeing someone elses tcon struct */
2574 cifs_put_tcon(tcon);
2576 cifs_put_smb_ses(pSesInfo);
2578 cifs_put_tcp_session(srvTcp);
2582 /* volume_info->password is freed above when existing session found
2583 (in which case it is not needed anymore) but when new sesion is created
2584 the password ptr is put in the new session structure (in which case the
2585 password will be freed at unmount time) */
2587 /* zero out password before freeing */
2588 cleanup_volume_info(&volume_info);
2594 CIFSSessSetup(unsigned int xid, struct cifsSesInfo *ses,
2595 char session_key[CIFS_SESS_KEY_SIZE],
2596 const struct nls_table *nls_codepage)
2598 struct smb_hdr *smb_buffer;
2599 struct smb_hdr *smb_buffer_response;
2600 SESSION_SETUP_ANDX *pSMB;
2601 SESSION_SETUP_ANDX *pSMBr;
2606 int remaining_words = 0;
2607 int bytes_returned = 0;
2612 cFYI(1, ("In sesssetup"));
2615 user = ses->userName;
2616 domain = ses->domainName;
2617 smb_buffer = cifs_buf_get();
2619 if (smb_buffer == NULL)
2622 smb_buffer_response = smb_buffer;
2623 pSMBr = pSMB = (SESSION_SETUP_ANDX *) smb_buffer;
2625 /* send SMBsessionSetup here */
2626 header_assemble(smb_buffer, SMB_COM_SESSION_SETUP_ANDX,
2627 NULL /* no tCon exists yet */ , 13 /* wct */ );
2629 smb_buffer->Mid = GetNextMid(ses->server);
2630 pSMB->req_no_secext.AndXCommand = 0xFF;
2631 pSMB->req_no_secext.MaxBufferSize = cpu_to_le16(ses->server->maxBuf);
2632 pSMB->req_no_secext.MaxMpxCount = cpu_to_le16(ses->server->maxReq);
2634 if (ses->server->secMode &
2635 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2636 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2638 capabilities = CAP_LARGE_FILES | CAP_NT_SMBS | CAP_LEVEL_II_OPLOCKS |
2639 CAP_LARGE_WRITE_X | CAP_LARGE_READ_X;
2640 if (ses->capabilities & CAP_UNICODE) {
2641 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2642 capabilities |= CAP_UNICODE;
2644 if (ses->capabilities & CAP_STATUS32) {
2645 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2646 capabilities |= CAP_STATUS32;
2648 if (ses->capabilities & CAP_DFS) {
2649 smb_buffer->Flags2 |= SMBFLG2_DFS;
2650 capabilities |= CAP_DFS;
2652 pSMB->req_no_secext.Capabilities = cpu_to_le32(capabilities);
2654 pSMB->req_no_secext.CaseInsensitivePasswordLength =
2655 cpu_to_le16(CIFS_SESS_KEY_SIZE);
2657 pSMB->req_no_secext.CaseSensitivePasswordLength =
2658 cpu_to_le16(CIFS_SESS_KEY_SIZE);
2659 bcc_ptr = pByteArea(smb_buffer);
2660 memcpy(bcc_ptr, (char *) session_key, CIFS_SESS_KEY_SIZE);
2661 bcc_ptr += CIFS_SESS_KEY_SIZE;
2662 memcpy(bcc_ptr, (char *) session_key, CIFS_SESS_KEY_SIZE);
2663 bcc_ptr += CIFS_SESS_KEY_SIZE;
2665 if (ses->capabilities & CAP_UNICODE) {
2666 if ((long) bcc_ptr % 2) { /* must be word aligned for Unicode */
2671 bytes_returned = 0; /* skip null user */
2674 cifs_strtoUCS((__le16 *) bcc_ptr, user, 100,
2676 /* convert number of 16 bit words to bytes */
2677 bcc_ptr += 2 * bytes_returned;
2678 bcc_ptr += 2; /* trailing null */
2681 cifs_strtoUCS((__le16 *) bcc_ptr,
2682 "CIFS_LINUX_DOM", 32, nls_codepage);
2685 cifs_strtoUCS((__le16 *) bcc_ptr, domain, 64,
2687 bcc_ptr += 2 * bytes_returned;
2690 cifs_strtoUCS((__le16 *) bcc_ptr, "Linux version ",
2692 bcc_ptr += 2 * bytes_returned;
2694 cifs_strtoUCS((__le16 *) bcc_ptr, utsname()->release,
2696 bcc_ptr += 2 * bytes_returned;
2699 cifs_strtoUCS((__le16 *) bcc_ptr, CIFS_NETWORK_OPSYS,
2701 bcc_ptr += 2 * bytes_returned;
2705 strncpy(bcc_ptr, user, 200);
2706 bcc_ptr += strnlen(user, 200);
2710 if (domain == NULL) {
2711 strcpy(bcc_ptr, "CIFS_LINUX_DOM");
2712 bcc_ptr += strlen("CIFS_LINUX_DOM") + 1;
2714 strncpy(bcc_ptr, domain, 64);
2715 bcc_ptr += strnlen(domain, 64);
2719 strcpy(bcc_ptr, "Linux version ");
2720 bcc_ptr += strlen("Linux version ");
2721 strcpy(bcc_ptr, utsname()->release);
2722 bcc_ptr += strlen(utsname()->release) + 1;
2723 strcpy(bcc_ptr, CIFS_NETWORK_OPSYS);
2724 bcc_ptr += strlen(CIFS_NETWORK_OPSYS) + 1;
2726 count = (long) bcc_ptr - (long) pByteArea(smb_buffer);
2727 smb_buffer->smb_buf_length += count;
2728 pSMB->req_no_secext.ByteCount = cpu_to_le16(count);
2730 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response,
2731 &bytes_returned, CIFS_LONG_OP);
2733 /* rc = map_smb_to_linux_error(smb_buffer_response); now done in SendReceive */
2734 } else if ((smb_buffer_response->WordCount == 3)
2735 || (smb_buffer_response->WordCount == 4)) {
2736 __u16 action = le16_to_cpu(pSMBr->resp.Action);
2737 __u16 blob_len = le16_to_cpu(pSMBr->resp.SecurityBlobLength);
2738 if (action & GUEST_LOGIN)
2739 cFYI(1, ("Guest login")); /* BB mark SesInfo struct? */
2740 ses->Suid = smb_buffer_response->Uid; /* UID left in wire format
2742 cFYI(1, ("UID = %d ", ses->Suid));
2743 /* response can have either 3 or 4 word count - Samba sends 3 */
2744 bcc_ptr = pByteArea(smb_buffer_response);
2745 if ((pSMBr->resp.hdr.WordCount == 3)
2746 || ((pSMBr->resp.hdr.WordCount == 4)
2747 && (blob_len < pSMBr->resp.ByteCount))) {
2748 if (pSMBr->resp.hdr.WordCount == 4)
2749 bcc_ptr += blob_len;
2751 if (smb_buffer->Flags2 & SMBFLG2_UNICODE) {
2752 if ((long) (bcc_ptr) % 2) {
2754 (BCC(smb_buffer_response) - 1) / 2;
2755 /* Unicode strings must be word
2760 BCC(smb_buffer_response) / 2;
2763 UniStrnlen((wchar_t *) bcc_ptr,
2764 remaining_words - 1);
2765 /* We look for obvious messed up bcc or strings in response so we do not go off
2766 the end since (at least) WIN2K and Windows XP have a major bug in not null
2767 terminating last Unicode string in response */
2768 kfree(ses->serverOS);
2769 ses->serverOS = kzalloc(2 * (len + 1),
2771 if (ses->serverOS == NULL)
2772 goto sesssetup_nomem;
2773 cifs_strfromUCS_le(ses->serverOS,
2776 bcc_ptr += 2 * (len + 1);
2777 remaining_words -= len + 1;
2778 ses->serverOS[2 * len] = 0;
2779 ses->serverOS[1 + (2 * len)] = 0;
2780 if (remaining_words > 0) {
2781 len = UniStrnlen((wchar_t *)bcc_ptr,
2783 kfree(ses->serverNOS);
2784 ses->serverNOS = kzalloc(2 * (len + 1),
2786 if (ses->serverNOS == NULL)
2787 goto sesssetup_nomem;
2788 cifs_strfromUCS_le(ses->serverNOS,
2791 bcc_ptr += 2 * (len + 1);
2792 ses->serverNOS[2 * len] = 0;
2793 ses->serverNOS[1 + (2 * len)] = 0;
2794 if (strncmp(ses->serverNOS,
2795 "NT LAN Manager 4", 16) == 0) {
2796 cFYI(1, ("NT4 server"));
2797 ses->flags |= CIFS_SES_NT4;
2799 remaining_words -= len + 1;
2800 if (remaining_words > 0) {
2801 len = UniStrnlen((wchar_t *) bcc_ptr, remaining_words);
2802 /* last string is not always null terminated
2803 (for e.g. for Windows XP & 2000) */
2804 kfree(ses->serverDomain);
2808 if (ses->serverDomain == NULL)
2809 goto sesssetup_nomem;
2810 cifs_strfromUCS_le(ses->serverDomain,
2813 bcc_ptr += 2 * (len + 1);
2814 ses->serverDomain[2*len] = 0;
2815 ses->serverDomain[1+(2*len)] = 0;
2816 } else { /* else no more room so create
2817 dummy domain string */
2818 kfree(ses->serverDomain);
2820 kzalloc(2, GFP_KERNEL);
2822 } else { /* no room so create dummy domain
2825 /* if these kcallocs fail not much we
2826 can do, but better to not fail the
2828 kfree(ses->serverDomain);
2830 kzalloc(2, GFP_KERNEL);
2831 kfree(ses->serverNOS);
2833 kzalloc(2, GFP_KERNEL);
2835 } else { /* ASCII */
2836 len = strnlen(bcc_ptr, 1024);
2837 if (((long) bcc_ptr + len) - (long)
2838 pByteArea(smb_buffer_response)
2839 <= BCC(smb_buffer_response)) {
2840 kfree(ses->serverOS);
2841 ses->serverOS = kzalloc(len + 1,
2843 if (ses->serverOS == NULL)
2844 goto sesssetup_nomem;
2845 strncpy(ses->serverOS, bcc_ptr, len);
2848 /* null terminate the string */
2852 len = strnlen(bcc_ptr, 1024);
2853 kfree(ses->serverNOS);
2854 ses->serverNOS = kzalloc(len + 1,
2856 if (ses->serverNOS == NULL)
2857 goto sesssetup_nomem;
2858 strncpy(ses->serverNOS, bcc_ptr, len);
2863 len = strnlen(bcc_ptr, 1024);
2864 kfree(ses->serverDomain);
2865 ses->serverDomain = kzalloc(len + 1,
2867 if (ses->serverDomain == NULL)
2868 goto sesssetup_nomem;
2869 strncpy(ses->serverDomain, bcc_ptr,
2876 ("Variable field of length %d "
2877 "extends beyond end of smb ",
2881 cERROR(1, ("Security Blob Length extends beyond "
2885 cERROR(1, ("Invalid Word count %d: ",
2886 smb_buffer_response->WordCount));
2889 sesssetup_nomem: /* do not return an error on nomem for the info strings,
2890 since that could make reconnection harder, and
2891 reconnection might be needed to free memory */
2892 cifs_buf_release(smb_buffer);
2898 CIFSNTLMSSPNegotiateSessSetup(unsigned int xid,
2899 struct cifsSesInfo *ses, bool *pNTLMv2_flag,
2900 const struct nls_table *nls_codepage)
2902 struct smb_hdr *smb_buffer;
2903 struct smb_hdr *smb_buffer_response;
2904 SESSION_SETUP_ANDX *pSMB;
2905 SESSION_SETUP_ANDX *pSMBr;
2909 int remaining_words = 0;
2910 int bytes_returned = 0;
2912 int SecurityBlobLength = sizeof(NEGOTIATE_MESSAGE);
2913 PNEGOTIATE_MESSAGE SecurityBlob;
2914 PCHALLENGE_MESSAGE SecurityBlob2;
2915 __u32 negotiate_flags, capabilities;
2918 cFYI(1, ("In NTLMSSP sesssetup (negotiate)"));
2921 domain = ses->domainName;
2922 *pNTLMv2_flag = false;
2923 smb_buffer = cifs_buf_get();
2924 if (smb_buffer == NULL) {
2927 smb_buffer_response = smb_buffer;
2928 pSMB = (SESSION_SETUP_ANDX *) smb_buffer;
2929 pSMBr = (SESSION_SETUP_ANDX *) smb_buffer_response;
2931 /* send SMBsessionSetup here */
2932 header_assemble(smb_buffer, SMB_COM_SESSION_SETUP_ANDX,
2933 NULL /* no tCon exists yet */ , 12 /* wct */ );
2935 smb_buffer->Mid = GetNextMid(ses->server);
2936 pSMB->req.hdr.Flags2 |= SMBFLG2_EXT_SEC;
2937 pSMB->req.hdr.Flags |= (SMBFLG_CASELESS | SMBFLG_CANONICAL_PATH_FORMAT);
2939 pSMB->req.AndXCommand = 0xFF;
2940 pSMB->req.MaxBufferSize = cpu_to_le16(ses->server->maxBuf);
2941 pSMB->req.MaxMpxCount = cpu_to_le16(ses->server->maxReq);
2943 if (ses->server->secMode & (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
2944 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
2946 capabilities = CAP_LARGE_FILES | CAP_NT_SMBS | CAP_LEVEL_II_OPLOCKS |
2947 CAP_EXTENDED_SECURITY;
2948 if (ses->capabilities & CAP_UNICODE) {
2949 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
2950 capabilities |= CAP_UNICODE;
2952 if (ses->capabilities & CAP_STATUS32) {
2953 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
2954 capabilities |= CAP_STATUS32;
2956 if (ses->capabilities & CAP_DFS) {
2957 smb_buffer->Flags2 |= SMBFLG2_DFS;
2958 capabilities |= CAP_DFS;
2960 pSMB->req.Capabilities = cpu_to_le32(capabilities);
2962 bcc_ptr = (char *) &pSMB->req.SecurityBlob;
2963 SecurityBlob = (PNEGOTIATE_MESSAGE) bcc_ptr;
2964 strncpy(SecurityBlob->Signature, NTLMSSP_SIGNATURE, 8);
2965 SecurityBlob->MessageType = NtLmNegotiate;
2967 NTLMSSP_NEGOTIATE_UNICODE | NTLMSSP_NEGOTIATE_OEM |
2968 NTLMSSP_REQUEST_TARGET | NTLMSSP_NEGOTIATE_NTLM |
2969 NTLMSSP_NEGOTIATE_56 |
2970 /* NTLMSSP_NEGOTIATE_ALWAYS_SIGN | */ NTLMSSP_NEGOTIATE_128;
2972 negotiate_flags |= NTLMSSP_NEGOTIATE_SIGN;
2973 /* if (ntlmv2_support)
2974 negotiate_flags |= NTLMSSP_NEGOTIATE_NTLMV2;*/
2975 /* setup pointers to domain name and workstation name */
2976 bcc_ptr += SecurityBlobLength;
2978 SecurityBlob->WorkstationName.Buffer = 0;
2979 SecurityBlob->WorkstationName.Length = 0;
2980 SecurityBlob->WorkstationName.MaximumLength = 0;
2982 /* Domain not sent on first Sesssetup in NTLMSSP, instead it is sent
2983 along with username on auth request (ie the response to challenge) */
2984 SecurityBlob->DomainName.Buffer = 0;
2985 SecurityBlob->DomainName.Length = 0;
2986 SecurityBlob->DomainName.MaximumLength = 0;
2987 if (ses->capabilities & CAP_UNICODE) {
2988 if ((long) bcc_ptr % 2) {
2994 cifs_strtoUCS((__le16 *) bcc_ptr, "Linux version ",
2996 bcc_ptr += 2 * bytes_returned;
2998 cifs_strtoUCS((__le16 *) bcc_ptr, utsname()->release, 32,
3000 bcc_ptr += 2 * bytes_returned;
3001 bcc_ptr += 2; /* null terminate Linux version */
3003 cifs_strtoUCS((__le16 *) bcc_ptr, CIFS_NETWORK_OPSYS,
3005 bcc_ptr += 2 * bytes_returned;
3008 bcc_ptr += 2; /* null terminate network opsys string */
3011 bcc_ptr += 2; /* null domain */
3012 } else { /* ASCII */
3013 strcpy(bcc_ptr, "Linux version ");
3014 bcc_ptr += strlen("Linux version ");
3015 strcpy(bcc_ptr, utsname()->release);
3016 bcc_ptr += strlen(utsname()->release) + 1;
3017 strcpy(bcc_ptr, CIFS_NETWORK_OPSYS);
3018 bcc_ptr += strlen(CIFS_NETWORK_OPSYS) + 1;
3019 bcc_ptr++; /* empty domain field */
3022 SecurityBlob->NegotiateFlags = cpu_to_le32(negotiate_flags);
3023 pSMB->req.SecurityBlobLength = cpu_to_le16(SecurityBlobLength);
3024 count = (long) bcc_ptr - (long) pByteArea(smb_buffer);
3025 smb_buffer->smb_buf_length += count;
3026 pSMB->req.ByteCount = cpu_to_le16(count);
3028 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response,
3029 &bytes_returned, CIFS_LONG_OP);
3031 if (smb_buffer_response->Status.CifsError ==
3032 cpu_to_le32(NT_STATUS_MORE_PROCESSING_REQUIRED))
3036 /* rc = map_smb_to_linux_error(smb_buffer_response); *//* done in SendReceive now */
3037 } else if ((smb_buffer_response->WordCount == 3)
3038 || (smb_buffer_response->WordCount == 4)) {
3039 __u16 action = le16_to_cpu(pSMBr->resp.Action);
3040 __u16 blob_len = le16_to_cpu(pSMBr->resp.SecurityBlobLength);
3042 if (action & GUEST_LOGIN)
3043 cFYI(1, ("Guest login"));
3044 /* Do we want to set anything in SesInfo struct when guest login? */
3046 bcc_ptr = pByteArea(smb_buffer_response);
3047 /* response can have either 3 or 4 word count - Samba sends 3 */
3049 SecurityBlob2 = (PCHALLENGE_MESSAGE) bcc_ptr;
3050 if (SecurityBlob2->MessageType != NtLmChallenge) {
3051 cFYI(1, ("Unexpected NTLMSSP message type received %d",
3052 SecurityBlob2->MessageType));
3054 ses->Suid = smb_buffer_response->Uid; /* UID left in le format */
3055 cFYI(1, ("UID = %d", ses->Suid));
3056 if ((pSMBr->resp.hdr.WordCount == 3)
3057 || ((pSMBr->resp.hdr.WordCount == 4)
3059 pSMBr->resp.ByteCount))) {
3061 if (pSMBr->resp.hdr.WordCount == 4) {
3062 bcc_ptr += blob_len;
3063 cFYI(1, ("Security Blob Length %d",
3067 cFYI(1, ("NTLMSSP Challenge rcvd"));
3069 memcpy(ses->server->cryptKey,
3070 SecurityBlob2->Challenge,
3071 CIFS_CRYPTO_KEY_SIZE);
3072 if (SecurityBlob2->NegotiateFlags &
3073 cpu_to_le32(NTLMSSP_NEGOTIATE_NTLMV2))
3074 *pNTLMv2_flag = true;
3076 if ((SecurityBlob2->NegotiateFlags &
3077 cpu_to_le32(NTLMSSP_NEGOTIATE_ALWAYS_SIGN))
3078 || (sign_CIFS_PDUs > 1))
3079 ses->server->secMode |=
3080 SECMODE_SIGN_REQUIRED;
3081 if ((SecurityBlob2->NegotiateFlags &
3082 cpu_to_le32(NTLMSSP_NEGOTIATE_SIGN)) && (sign_CIFS_PDUs))
3083 ses->server->secMode |=
3084 SECMODE_SIGN_ENABLED;
3086 if (smb_buffer->Flags2 & SMBFLG2_UNICODE) {
3087 if ((long) (bcc_ptr) % 2) {
3089 (BCC(smb_buffer_response)
3091 /* Must word align unicode strings */
3096 (smb_buffer_response) / 2;
3099 UniStrnlen((wchar_t *) bcc_ptr,
3100 remaining_words - 1);
3101 /* We look for obvious messed up bcc or strings in response so we do not go off
3102 the end since (at least) WIN2K and Windows XP have a major bug in not null
3103 terminating last Unicode string in response */
3104 kfree(ses->serverOS);
3106 kzalloc(2 * (len + 1), GFP_KERNEL);
3107 cifs_strfromUCS_le(ses->serverOS,
3111 bcc_ptr += 2 * (len + 1);
3112 remaining_words -= len + 1;
3113 ses->serverOS[2 * len] = 0;
3114 ses->serverOS[1 + (2 * len)] = 0;
3115 if (remaining_words > 0) {
3116 len = UniStrnlen((wchar_t *)
3120 kfree(ses->serverNOS);
3122 kzalloc(2 * (len + 1),
3124 cifs_strfromUCS_le(ses->
3130 bcc_ptr += 2 * (len + 1);
3131 ses->serverNOS[2 * len] = 0;
3134 remaining_words -= len + 1;
3135 if (remaining_words > 0) {
3136 len = UniStrnlen((wchar_t *) bcc_ptr, remaining_words);
3137 /* last string not always null terminated
3138 (for e.g. for Windows XP & 2000) */
3139 kfree(ses->serverDomain);
3151 ses->serverDomain[2*len]
3156 } /* else no more room so create dummy domain string */
3158 kfree(ses->serverDomain);
3163 } else { /* no room so create dummy domain and NOS string */
3164 kfree(ses->serverDomain);
3166 kzalloc(2, GFP_KERNEL);
3167 kfree(ses->serverNOS);
3169 kzalloc(2, GFP_KERNEL);
3171 } else { /* ASCII */
3172 len = strnlen(bcc_ptr, 1024);
3173 if (((long) bcc_ptr + len) - (long)
3174 pByteArea(smb_buffer_response)
3175 <= BCC(smb_buffer_response)) {
3176 kfree(ses->serverOS);
3180 strncpy(ses->serverOS,
3184 bcc_ptr[0] = 0; /* null terminate string */
3187 len = strnlen(bcc_ptr, 1024);
3188 kfree(ses->serverNOS);
3192 strncpy(ses->serverNOS, bcc_ptr, len);
3197 len = strnlen(bcc_ptr, 1024);
3198 kfree(ses->serverDomain);
3202 strncpy(ses->serverDomain,
3209 ("field of length %d "
3210 "extends beyond end of smb",
3214 cERROR(1, ("Security Blob Length extends beyond"
3218 cERROR(1, ("No session structure passed in."));
3221 cERROR(1, ("Invalid Word count %d:",
3222 smb_buffer_response->WordCount));
3226 cifs_buf_release(smb_buffer);
3231 CIFSNTLMSSPAuthSessSetup(unsigned int xid, struct cifsSesInfo *ses,
3232 char *ntlm_session_key, bool ntlmv2_flag,
3233 const struct nls_table *nls_codepage)
3235 struct smb_hdr *smb_buffer;
3236 struct smb_hdr *smb_buffer_response;
3237 SESSION_SETUP_ANDX *pSMB;
3238 SESSION_SETUP_ANDX *pSMBr;
3243 int remaining_words = 0;
3244 int bytes_returned = 0;
3246 int SecurityBlobLength = sizeof(AUTHENTICATE_MESSAGE);
3247 PAUTHENTICATE_MESSAGE SecurityBlob;
3248 __u32 negotiate_flags, capabilities;
3251 cFYI(1, ("In NTLMSSPSessSetup (Authenticate)"));
3254 user = ses->userName;
3255 domain = ses->domainName;
3256 smb_buffer = cifs_buf_get();
3257 if (smb_buffer == NULL) {
3260 smb_buffer_response = smb_buffer;
3261 pSMB = (SESSION_SETUP_ANDX *)smb_buffer;
3262 pSMBr = (SESSION_SETUP_ANDX *)smb_buffer_response;
3264 /* send SMBsessionSetup here */
3265 header_assemble(smb_buffer, SMB_COM_SESSION_SETUP_ANDX,
3266 NULL /* no tCon exists yet */ , 12 /* wct */ );
3268 smb_buffer->Mid = GetNextMid(ses->server);
3269 pSMB->req.hdr.Flags |= (SMBFLG_CASELESS | SMBFLG_CANONICAL_PATH_FORMAT);
3270 pSMB->req.hdr.Flags2 |= SMBFLG2_EXT_SEC;
3271 pSMB->req.AndXCommand = 0xFF;
3272 pSMB->req.MaxBufferSize = cpu_to_le16(ses->server->maxBuf);
3273 pSMB->req.MaxMpxCount = cpu_to_le16(ses->server->maxReq);
3275 pSMB->req.hdr.Uid = ses->Suid;
3277 if (ses->server->secMode & (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3278 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3280 capabilities = CAP_LARGE_FILES | CAP_NT_SMBS | CAP_LEVEL_II_OPLOCKS |
3281 CAP_EXTENDED_SECURITY;
3282 if (ses->capabilities & CAP_UNICODE) {
3283 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3284 capabilities |= CAP_UNICODE;
3286 if (ses->capabilities & CAP_STATUS32) {
3287 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3288 capabilities |= CAP_STATUS32;
3290 if (ses->capabilities & CAP_DFS) {
3291 smb_buffer->Flags2 |= SMBFLG2_DFS;
3292 capabilities |= CAP_DFS;
3294 pSMB->req.Capabilities = cpu_to_le32(capabilities);
3296 bcc_ptr = (char *)&pSMB->req.SecurityBlob;
3297 SecurityBlob = (PAUTHENTICATE_MESSAGE)bcc_ptr;
3298 strncpy(SecurityBlob->Signature, NTLMSSP_SIGNATURE, 8);
3299 SecurityBlob->MessageType = NtLmAuthenticate;
3300 bcc_ptr += SecurityBlobLength;
3301 negotiate_flags = NTLMSSP_NEGOTIATE_UNICODE | NTLMSSP_REQUEST_TARGET |
3302 NTLMSSP_NEGOTIATE_NTLM | NTLMSSP_NEGOTIATE_TARGET_INFO |
3303 0x80000000 | NTLMSSP_NEGOTIATE_128;
3305 negotiate_flags |= /* NTLMSSP_NEGOTIATE_ALWAYS_SIGN |*/ NTLMSSP_NEGOTIATE_SIGN;
3307 negotiate_flags |= NTLMSSP_NEGOTIATE_NTLMV2;
3309 /* setup pointers to domain name and workstation name */
3311 SecurityBlob->WorkstationName.Buffer = 0;
3312 SecurityBlob->WorkstationName.Length = 0;
3313 SecurityBlob->WorkstationName.MaximumLength = 0;
3314 SecurityBlob->SessionKey.Length = 0;
3315 SecurityBlob->SessionKey.MaximumLength = 0;
3316 SecurityBlob->SessionKey.Buffer = 0;
3318 SecurityBlob->LmChallengeResponse.Length = 0;
3319 SecurityBlob->LmChallengeResponse.MaximumLength = 0;
3320 SecurityBlob->LmChallengeResponse.Buffer = 0;
3322 SecurityBlob->NtChallengeResponse.Length =
3323 cpu_to_le16(CIFS_SESS_KEY_SIZE);
3324 SecurityBlob->NtChallengeResponse.MaximumLength =
3325 cpu_to_le16(CIFS_SESS_KEY_SIZE);
3326 memcpy(bcc_ptr, ntlm_session_key, CIFS_SESS_KEY_SIZE);
3327 SecurityBlob->NtChallengeResponse.Buffer =
3328 cpu_to_le32(SecurityBlobLength);
3329 SecurityBlobLength += CIFS_SESS_KEY_SIZE;
3330 bcc_ptr += CIFS_SESS_KEY_SIZE;
3332 if (ses->capabilities & CAP_UNICODE) {
3333 if (domain == NULL) {
3334 SecurityBlob->DomainName.Buffer = 0;
3335 SecurityBlob->DomainName.Length = 0;
3336 SecurityBlob->DomainName.MaximumLength = 0;
3338 __u16 ln = cifs_strtoUCS((__le16 *) bcc_ptr, domain, 64,
3341 SecurityBlob->DomainName.MaximumLength =
3343 SecurityBlob->DomainName.Buffer =
3344 cpu_to_le32(SecurityBlobLength);
3346 SecurityBlobLength += ln;
3347 SecurityBlob->DomainName.Length = cpu_to_le16(ln);
3350 SecurityBlob->UserName.Buffer = 0;
3351 SecurityBlob->UserName.Length = 0;
3352 SecurityBlob->UserName.MaximumLength = 0;
3354 __u16 ln = cifs_strtoUCS((__le16 *) bcc_ptr, user, 64,
3357 SecurityBlob->UserName.MaximumLength =
3359 SecurityBlob->UserName.Buffer =
3360 cpu_to_le32(SecurityBlobLength);
3362 SecurityBlobLength += ln;
3363 SecurityBlob->UserName.Length = cpu_to_le16(ln);
3366 /* SecurityBlob->WorkstationName.Length =
3367 cifs_strtoUCS((__le16 *) bcc_ptr, "AMACHINE",64, nls_codepage);
3368 SecurityBlob->WorkstationName.Length *= 2;
3369 SecurityBlob->WorkstationName.MaximumLength =
3370 cpu_to_le16(SecurityBlob->WorkstationName.Length);
3371 SecurityBlob->WorkstationName.Buffer =
3372 cpu_to_le32(SecurityBlobLength);
3373 bcc_ptr += SecurityBlob->WorkstationName.Length;
3374 SecurityBlobLength += SecurityBlob->WorkstationName.Length;
3375 SecurityBlob->WorkstationName.Length =
3376 cpu_to_le16(SecurityBlob->WorkstationName.Length); */
3378 if ((long) bcc_ptr % 2) {
3383 cifs_strtoUCS((__le16 *) bcc_ptr, "Linux version ",
3385 bcc_ptr += 2 * bytes_returned;
3387 cifs_strtoUCS((__le16 *) bcc_ptr, utsname()->release, 32,
3389 bcc_ptr += 2 * bytes_returned;
3390 bcc_ptr += 2; /* null term version string */
3392 cifs_strtoUCS((__le16 *) bcc_ptr, CIFS_NETWORK_OPSYS,
3394 bcc_ptr += 2 * bytes_returned;
3397 bcc_ptr += 2; /* null terminate network opsys string */
3400 bcc_ptr += 2; /* null domain */
3401 } else { /* ASCII */
3402 if (domain == NULL) {
3403 SecurityBlob->DomainName.Buffer = 0;
3404 SecurityBlob->DomainName.Length = 0;
3405 SecurityBlob->DomainName.MaximumLength = 0;
3408 negotiate_flags |= NTLMSSP_NEGOTIATE_DOMAIN_SUPPLIED;
3409 strncpy(bcc_ptr, domain, 63);
3410 ln = strnlen(domain, 64);
3411 SecurityBlob->DomainName.MaximumLength =
3413 SecurityBlob->DomainName.Buffer =
3414 cpu_to_le32(SecurityBlobLength);
3416 SecurityBlobLength += ln;
3417 SecurityBlob->DomainName.Length = cpu_to_le16(ln);
3420 SecurityBlob->UserName.Buffer = 0;
3421 SecurityBlob->UserName.Length = 0;
3422 SecurityBlob->UserName.MaximumLength = 0;
3425 strncpy(bcc_ptr, user, 63);
3426 ln = strnlen(user, 64);
3427 SecurityBlob->UserName.MaximumLength = cpu_to_le16(ln);
3428 SecurityBlob->UserName.Buffer =
3429 cpu_to_le32(SecurityBlobLength);
3431 SecurityBlobLength += ln;
3432 SecurityBlob->UserName.Length = cpu_to_le16(ln);
3434 /* BB fill in our workstation name if known BB */
3436 strcpy(bcc_ptr, "Linux version ");
3437 bcc_ptr += strlen("Linux version ");
3438 strcpy(bcc_ptr, utsname()->release);
3439 bcc_ptr += strlen(utsname()->release) + 1;
3440 strcpy(bcc_ptr, CIFS_NETWORK_OPSYS);
3441 bcc_ptr += strlen(CIFS_NETWORK_OPSYS) + 1;
3442 bcc_ptr++; /* null domain */
3445 SecurityBlob->NegotiateFlags = cpu_to_le32(negotiate_flags);
3446 pSMB->req.SecurityBlobLength = cpu_to_le16(SecurityBlobLength);
3447 count = (long) bcc_ptr - (long) pByteArea(smb_buffer);
3448 smb_buffer->smb_buf_length += count;
3449 pSMB->req.ByteCount = cpu_to_le16(count);
3451 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response,
3452 &bytes_returned, CIFS_LONG_OP);
3454 /* rc = map_smb_to_linux_error(smb_buffer_response) done in SendReceive now */
3455 } else if ((smb_buffer_response->WordCount == 3) ||
3456 (smb_buffer_response->WordCount == 4)) {
3457 __u16 action = le16_to_cpu(pSMBr->resp.Action);
3458 __u16 blob_len = le16_to_cpu(pSMBr->resp.SecurityBlobLength);
3459 if (action & GUEST_LOGIN)
3460 cFYI(1, ("Guest login")); /* BB Should we set anything
3461 in SesInfo struct ? */
3462 /* if (SecurityBlob2->MessageType != NtLm??) {
3463 cFYI("Unexpected message type on auth response is %d"));
3468 ("Check challenge UID %d vs auth response UID %d",
3469 ses->Suid, smb_buffer_response->Uid));
3470 /* UID left in wire format */
3471 ses->Suid = smb_buffer_response->Uid;
3472 bcc_ptr = pByteArea(smb_buffer_response);
3473 /* response can have either 3 or 4 word count - Samba sends 3 */
3474 if ((pSMBr->resp.hdr.WordCount == 3)
3475 || ((pSMBr->resp.hdr.WordCount == 4)
3477 pSMBr->resp.ByteCount))) {
3478 if (pSMBr->resp.hdr.WordCount == 4) {
3482 ("Security Blob Length %d ",
3487 ("NTLMSSP response to Authenticate "));
3489 if (smb_buffer->Flags2 & SMBFLG2_UNICODE) {
3490 if ((long) (bcc_ptr) % 2) {
3492 (BCC(smb_buffer_response)
3494 bcc_ptr++; /* Unicode strings must be word aligned */
3496 remaining_words = BCC(smb_buffer_response) / 2;
3498 len = UniStrnlen((wchar_t *) bcc_ptr,
3499 remaining_words - 1);
3500 /* We look for obvious messed up bcc or strings in response so we do not go off
3501 the end since (at least) WIN2K and Windows XP have a major bug in not null
3502 terminating last Unicode string in response */
3503 kfree(ses->serverOS);
3505 kzalloc(2 * (len + 1), GFP_KERNEL);
3506 cifs_strfromUCS_le(ses->serverOS,
3510 bcc_ptr += 2 * (len + 1);
3511 remaining_words -= len + 1;
3512 ses->serverOS[2 * len] = 0;
3513 ses->serverOS[1 + (2 * len)] = 0;
3514 if (remaining_words > 0) {
3515 len = UniStrnlen((wchar_t *)
3519 kfree(ses->serverNOS);
3521 kzalloc(2 * (len + 1),
3523 cifs_strfromUCS_le(ses->
3529 bcc_ptr += 2 * (len + 1);
3530 ses->serverNOS[2 * len] = 0;
3531 ses->serverNOS[1+(2*len)] = 0;
3532 remaining_words -= len + 1;
3533 if (remaining_words > 0) {
3534 len = UniStrnlen((wchar_t *) bcc_ptr, remaining_words);
3535 /* last string not always null terminated (e.g. for Windows XP & 2000) */
3536 kfree(ses->serverDomain);
3561 } /* else no more room so create dummy domain string */
3563 kfree(ses->serverDomain);
3564 ses->serverDomain = kzalloc(2,GFP_KERNEL);
3566 } else { /* no room so create dummy domain and NOS string */
3567 kfree(ses->serverDomain);
3568 ses->serverDomain = kzalloc(2, GFP_KERNEL);
3569 kfree(ses->serverNOS);
3570 ses->serverNOS = kzalloc(2, GFP_KERNEL);
3572 } else { /* ASCII */
3573 len = strnlen(bcc_ptr, 1024);
3574 if (((long) bcc_ptr + len) -
3575 (long) pByteArea(smb_buffer_response)
3576 <= BCC(smb_buffer_response)) {
3577 kfree(ses->serverOS);
3578 ses->serverOS = kzalloc(len + 1, GFP_KERNEL);
3579 strncpy(ses->serverOS,bcc_ptr, len);
3582 bcc_ptr[0] = 0; /* null terminate the string */
3585 len = strnlen(bcc_ptr, 1024);
3586 kfree(ses->serverNOS);
3587 ses->serverNOS = kzalloc(len+1,
3589 strncpy(ses->serverNOS,
3595 len = strnlen(bcc_ptr, 1024);
3596 kfree(ses->serverDomain);
3600 strncpy(ses->serverDomain,
3606 cFYI(1, ("field of length %d "
3607 "extends beyond end of smb ",
3611 cERROR(1, ("Security Blob extends beyond end "
3615 cERROR(1, ("No session structure passed in."));
3618 cERROR(1, ("Invalid Word count %d: ",
3619 smb_buffer_response->WordCount));
3623 cifs_buf_release(smb_buffer);
3629 CIFSTCon(unsigned int xid, struct cifsSesInfo *ses,
3630 const char *tree, struct cifsTconInfo *tcon,
3631 const struct nls_table *nls_codepage)
3633 struct smb_hdr *smb_buffer;
3634 struct smb_hdr *smb_buffer_response;
3637 unsigned char *bcc_ptr;
3645 smb_buffer = cifs_buf_get();
3646 if (smb_buffer == NULL) {
3649 smb_buffer_response = smb_buffer;
3651 header_assemble(smb_buffer, SMB_COM_TREE_CONNECT_ANDX,
3652 NULL /*no tid */ , 4 /*wct */ );
3654 smb_buffer->Mid = GetNextMid(ses->server);
3655 smb_buffer->Uid = ses->Suid;
3656 pSMB = (TCONX_REQ *) smb_buffer;
3657 pSMBr = (TCONX_RSP *) smb_buffer_response;
3659 pSMB->AndXCommand = 0xFF;
3660 pSMB->Flags = cpu_to_le16(TCON_EXTENDED_SECINFO);
3661 bcc_ptr = &pSMB->Password[0];
3662 if ((ses->server->secMode) & SECMODE_USER) {
3663 pSMB->PasswordLength = cpu_to_le16(1); /* minimum */
3664 *bcc_ptr = 0; /* password is null byte */
3665 bcc_ptr++; /* skip password */
3666 /* already aligned so no need to do it below */
3668 pSMB->PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
3669 /* BB FIXME add code to fail this if NTLMv2 or Kerberos
3670 specified as required (when that support is added to
3671 the vfs in the future) as only NTLM or the much
3672 weaker LANMAN (which we do not send by default) is accepted
3673 by Samba (not sure whether other servers allow
3674 NTLMv2 password here) */
3675 #ifdef CONFIG_CIFS_WEAK_PW_HASH
3676 if ((extended_security & CIFSSEC_MAY_LANMAN) &&
3677 (ses->server->secType == LANMAN))
3678 calc_lanman_hash(tcon->password, ses->server->cryptKey,
3679 ses->server->secMode &
3680 SECMODE_PW_ENCRYPT ? true : false,
3683 #endif /* CIFS_WEAK_PW_HASH */
3684 SMBNTencrypt(tcon->password, ses->server->cryptKey,
3687 bcc_ptr += CIFS_SESS_KEY_SIZE;
3688 if (ses->capabilities & CAP_UNICODE) {
3689 /* must align unicode strings */
3690 *bcc_ptr = 0; /* null byte password */
3695 if (ses->server->secMode &
3696 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
3697 smb_buffer->Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
3699 if (ses->capabilities & CAP_STATUS32) {
3700 smb_buffer->Flags2 |= SMBFLG2_ERR_STATUS;
3702 if (ses->capabilities & CAP_DFS) {
3703 smb_buffer->Flags2 |= SMBFLG2_DFS;
3705 if (ses->capabilities & CAP_UNICODE) {
3706 smb_buffer->Flags2 |= SMBFLG2_UNICODE;
3708 cifs_strtoUCS((__le16 *) bcc_ptr, tree,
3709 6 /* max utf8 char length in bytes */ *
3710 (/* server len*/ + 256 /* share len */), nls_codepage);
3711 bcc_ptr += 2 * length; /* convert num 16 bit words to bytes */
3712 bcc_ptr += 2; /* skip trailing null */
3713 } else { /* ASCII */
3714 strcpy(bcc_ptr, tree);
3715 bcc_ptr += strlen(tree) + 1;
3717 strcpy(bcc_ptr, "?????");
3718 bcc_ptr += strlen("?????");
3720 count = bcc_ptr - &pSMB->Password[0];
3721 pSMB->hdr.smb_buf_length += count;
3722 pSMB->ByteCount = cpu_to_le16(count);
3724 rc = SendReceive(xid, ses, smb_buffer, smb_buffer_response, &length,
3727 /* if (rc) rc = map_smb_to_linux_error(smb_buffer_response); */
3728 /* above now done in SendReceive */
3729 if ((rc == 0) && (tcon != NULL)) {
3730 tcon->tidStatus = CifsGood;
3731 tcon->need_reconnect = false;
3732 tcon->tid = smb_buffer_response->Tid;
3733 bcc_ptr = pByteArea(smb_buffer_response);
3734 length = strnlen(bcc_ptr, BCC(smb_buffer_response) - 2);
3735 /* skip service field (NB: this field is always ASCII) */
3737 if ((bcc_ptr[0] == 'I') && (bcc_ptr[1] == 'P') &&
3738 (bcc_ptr[2] == 'C')) {
3739 cFYI(1, ("IPC connection"));
3742 } else if (length == 2) {
3743 if ((bcc_ptr[0] == 'A') && (bcc_ptr[1] == ':')) {
3744 /* the most common case */
3745 cFYI(1, ("disk share connection"));
3748 bcc_ptr += length + 1;
3749 strncpy(tcon->treeName, tree, MAX_TREE_SIZE);
3750 if (smb_buffer->Flags2 & SMBFLG2_UNICODE) {
3751 length = UniStrnlen((wchar_t *) bcc_ptr, 512);
3752 if ((bcc_ptr + (2 * length)) -
3753 pByteArea(smb_buffer_response) <=
3754 BCC(smb_buffer_response)) {
3755 kfree(tcon->nativeFileSystem);
3756 tcon->nativeFileSystem =
3757 kzalloc(2*(length + 1), GFP_KERNEL);
3758 if (tcon->nativeFileSystem)
3760 tcon->nativeFileSystem,
3762 length, nls_codepage);
3763 bcc_ptr += 2 * length;
3764 bcc_ptr[0] = 0; /* null terminate the string */
3768 /* else do not bother copying these information fields*/
3770 length = strnlen(bcc_ptr, 1024);
3771 if ((bcc_ptr + length) -
3772 pByteArea(smb_buffer_response) <=
3773 BCC(smb_buffer_response)) {
3774 kfree(tcon->nativeFileSystem);
3775 tcon->nativeFileSystem =
3776 kzalloc(length + 1, GFP_KERNEL);
3777 if (tcon->nativeFileSystem)
3778 strncpy(tcon->nativeFileSystem, bcc_ptr,
3781 /* else do not bother copying these information fields*/
3783 if ((smb_buffer_response->WordCount == 3) ||
3784 (smb_buffer_response->WordCount == 7))
3785 /* field is in same location */
3786 tcon->Flags = le16_to_cpu(pSMBr->OptionalSupport);
3789 cFYI(1, ("Tcon flags: 0x%x ", tcon->Flags));
3790 } else if ((rc == 0) && tcon == NULL) {
3791 /* all we need to save for IPC$ connection */
3792 ses->ipc_tid = smb_buffer_response->Tid;
3795 cifs_buf_release(smb_buffer);
3800 cifs_umount(struct super_block *sb, struct cifs_sb_info *cifs_sb)
3806 cifs_put_tcon(cifs_sb->tcon);
3808 cifs_sb->tcon = NULL;
3809 tmp = cifs_sb->prepath;
3810 cifs_sb->prepathlen = 0;
3811 cifs_sb->prepath = NULL;
3817 int cifs_setup_session(unsigned int xid, struct cifsSesInfo *pSesInfo,
3818 struct nls_table *nls_info)
3821 char ntlm_session_key[CIFS_SESS_KEY_SIZE];
3822 bool ntlmv2_flag = false;
3824 struct TCP_Server_Info *server = pSesInfo->server;
3826 /* what if server changes its buffer size after dropping the session? */
3827 if (server->maxBuf == 0) /* no need to send on reconnect */ {
3828 rc = CIFSSMBNegotiate(xid, pSesInfo);
3829 if (rc == -EAGAIN) {
3830 /* retry only once on 1st time connection */
3831 rc = CIFSSMBNegotiate(xid, pSesInfo);
3836 spin_lock(&GlobalMid_Lock);
3837 if (server->tcpStatus != CifsExiting)
3838 server->tcpStatus = CifsGood;
3841 spin_unlock(&GlobalMid_Lock);
3850 pSesInfo->flags = 0;
3851 pSesInfo->capabilities = server->capabilities;
3852 if (linuxExtEnabled == 0)
3853 pSesInfo->capabilities &= (~CAP_UNIX);
3854 /* pSesInfo->sequence_number = 0;*/
3855 cFYI(1, ("Security Mode: 0x%x Capabilities: 0x%x TimeAdjust: %d",
3856 server->secMode, server->capabilities, server->timeAdj));
3858 if (experimEnabled < 2)
3859 rc = CIFS_SessSetup(xid, pSesInfo, first_time, nls_info);
3860 else if (extended_security
3861 && (pSesInfo->capabilities & CAP_EXTENDED_SECURITY)
3862 && (server->secType == NTLMSSP)) {
3864 } else if (extended_security
3865 && (pSesInfo->capabilities & CAP_EXTENDED_SECURITY)
3866 && (server->secType == RawNTLMSSP)) {
3867 cFYI(1, ("NTLMSSP sesssetup"));
3868 rc = CIFSNTLMSSPNegotiateSessSetup(xid, pSesInfo, &ntlmv2_flag,
3873 cFYI(1, ("more secure NTLM ver2 hash"));
3874 if (CalcNTLMv2_partial_mac_key(pSesInfo,
3879 v2_response = kmalloc(16 + 64 /* blob*/,
3882 CalcNTLMv2_response(pSesInfo,
3885 cifs_calculate_ntlmv2_mac_key */
3887 /* BB Put dummy sig in SessSetup PDU? */
3894 SMBNTencrypt(pSesInfo->password,
3899 cifs_calculate_mac_key(
3900 &server->mac_signing_key,
3902 pSesInfo->password);
3904 /* for better security the weaker lanman hash not sent
3905 in AuthSessSetup so we no longer calculate it */
3907 rc = CIFSNTLMSSPAuthSessSetup(xid, pSesInfo,
3912 } else { /* old style NTLM 0.12 session setup */
3913 SMBNTencrypt(pSesInfo->password, server->cryptKey,
3917 cifs_calculate_mac_key(&server->mac_signing_key,
3919 pSesInfo->password);
3921 rc = CIFSSessSetup(xid, pSesInfo, ntlm_session_key, nls_info);
3924 cERROR(1, ("Send error in SessSetup = %d", rc));
3926 cFYI(1, ("CIFS Session Established successfully"));
3927 spin_lock(&GlobalMid_Lock);
3928 pSesInfo->status = CifsGood;
3929 pSesInfo->need_reconnect = false;
3930 spin_unlock(&GlobalMid_Lock);