blob: ed01ef382aa9e1613e22ef4876a7f14cd3a84888 [file] [log] [blame]
Steve French39798772006-05-31 22:40:51 +00001/*
2 * fs/cifs/sess.c
3 *
4 * SMB/CIFS session setup handling routines
5 *
Steve French790fe572007-07-07 19:25:05 +00006 * Copyright (c) International Business Machines Corp., 2006, 2007
Steve French39798772006-05-31 22:40:51 +00007 * Author(s): Steve French (sfrench@us.ibm.com)
8 *
9 * This library is free software; you can redistribute it and/or modify
10 * it under the terms of the GNU Lesser General Public License as published
11 * by the Free Software Foundation; either version 2.1 of the License, or
12 * (at your option) any later version.
13 *
14 * This library is distributed in the hope that it will be useful,
15 * but WITHOUT ANY WARRANTY; without even the implied warranty of
16 * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See
17 * the GNU Lesser General Public License for more details.
18 *
19 * You should have received a copy of the GNU Lesser General Public License
20 * along with this library; if not, write to the Free Software
21 * Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
22 */
23
24#include "cifspdu.h"
25#include "cifsglob.h"
26#include "cifsproto.h"
27#include "cifs_unicode.h"
28#include "cifs_debug.h"
29#include "ntlmssp.h"
30#include "nterr.h"
Steve French9c535882006-06-01 05:09:10 +000031#include <linux/utsname.h>
Steve French39798772006-05-31 22:40:51 +000032
Steve French39798772006-05-31 22:40:51 +000033extern void SMBNTencrypt(unsigned char *passwd, unsigned char *c8,
Steve French790fe572007-07-07 19:25:05 +000034 unsigned char *p24);
Steve French39798772006-05-31 22:40:51 +000035
Steve French39798772006-05-31 22:40:51 +000036static __u32 cifs_ssetup_hdr(struct cifsSesInfo *ses, SESSION_SETUP_ANDX *pSMB)
37{
38 __u32 capabilities = 0;
39
40 /* init fields common to all four types of SessSetup */
41 /* note that header is initialized to zero in header_assemble */
42 pSMB->req.AndXCommand = 0xFF;
43 pSMB->req.MaxBufferSize = cpu_to_le16(ses->server->maxBuf);
44 pSMB->req.MaxMpxCount = cpu_to_le16(ses->server->maxReq);
45
46 /* Now no need to set SMBFLG_CASELESS or obsolete CANONICAL PATH */
47
Steve French790fe572007-07-07 19:25:05 +000048 /* BB verify whether signing required on neg or just on auth frame
Steve French39798772006-05-31 22:40:51 +000049 (and NTLM case) */
50
51 capabilities = CAP_LARGE_FILES | CAP_NT_SMBS | CAP_LEVEL_II_OPLOCKS |
52 CAP_LARGE_WRITE_X | CAP_LARGE_READ_X;
53
Steve French790fe572007-07-07 19:25:05 +000054 if (ses->server->secMode &
55 (SECMODE_SIGN_REQUIRED | SECMODE_SIGN_ENABLED))
Steve French39798772006-05-31 22:40:51 +000056 pSMB->req.hdr.Flags2 |= SMBFLG2_SECURITY_SIGNATURE;
57
58 if (ses->capabilities & CAP_UNICODE) {
59 pSMB->req.hdr.Flags2 |= SMBFLG2_UNICODE;
60 capabilities |= CAP_UNICODE;
61 }
62 if (ses->capabilities & CAP_STATUS32) {
63 pSMB->req.hdr.Flags2 |= SMBFLG2_ERR_STATUS;
64 capabilities |= CAP_STATUS32;
65 }
66 if (ses->capabilities & CAP_DFS) {
67 pSMB->req.hdr.Flags2 |= SMBFLG2_DFS;
68 capabilities |= CAP_DFS;
69 }
Steve French26f57362007-08-30 22:09:15 +000070 if (ses->capabilities & CAP_UNIX)
Steve French39798772006-05-31 22:40:51 +000071 capabilities |= CAP_UNIX;
Steve French39798772006-05-31 22:40:51 +000072
73 /* BB check whether to init vcnum BB */
74 return capabilities;
75}
76
Jeff Layton0d3a01f2007-10-16 17:32:19 +000077static void
78unicode_oslm_strings(char **pbcc_area, const struct nls_table *nls_cp)
79{
80 char *bcc_ptr = *pbcc_area;
81 int bytes_ret = 0;
82
83 /* Copy OS version */
84 bytes_ret = cifs_strtoUCS((__le16 *)bcc_ptr, "Linux version ", 32,
85 nls_cp);
86 bcc_ptr += 2 * bytes_ret;
87 bytes_ret = cifs_strtoUCS((__le16 *) bcc_ptr, init_utsname()->release,
88 32, nls_cp);
89 bcc_ptr += 2 * bytes_ret;
90 bcc_ptr += 2; /* trailing null */
91
92 bytes_ret = cifs_strtoUCS((__le16 *) bcc_ptr, CIFS_NETWORK_OPSYS,
93 32, nls_cp);
94 bcc_ptr += 2 * bytes_ret;
95 bcc_ptr += 2; /* trailing null */
96
97 *pbcc_area = bcc_ptr;
98}
99
100static void unicode_domain_string(char **pbcc_area, struct cifsSesInfo *ses,
101 const struct nls_table *nls_cp)
102{
103 char *bcc_ptr = *pbcc_area;
104 int bytes_ret = 0;
105
106 /* copy domain */
107 if (ses->domainName == NULL) {
108 /* Sending null domain better than using a bogus domain name (as
109 we did briefly in 2.6.18) since server will use its default */
110 *bcc_ptr = 0;
111 *(bcc_ptr+1) = 0;
112 bytes_ret = 0;
113 } else
114 bytes_ret = cifs_strtoUCS((__le16 *) bcc_ptr, ses->domainName,
115 256, nls_cp);
116 bcc_ptr += 2 * bytes_ret;
117 bcc_ptr += 2; /* account for null terminator */
118
119 *pbcc_area = bcc_ptr;
120}
121
122
Steve French38702532007-07-08 15:40:40 +0000123static void unicode_ssetup_strings(char **pbcc_area, struct cifsSesInfo *ses,
Steve French790fe572007-07-07 19:25:05 +0000124 const struct nls_table *nls_cp)
Steve French39798772006-05-31 22:40:51 +0000125{
Steve French790fe572007-07-07 19:25:05 +0000126 char *bcc_ptr = *pbcc_area;
Steve French39798772006-05-31 22:40:51 +0000127 int bytes_ret = 0;
128
129 /* BB FIXME add check that strings total less
130 than 335 or will need to send them as arrays */
131
Steve French0223cf02006-06-27 19:50:57 +0000132 /* unicode strings, must be word aligned before the call */
133/* if ((long) bcc_ptr % 2) {
Steve French39798772006-05-31 22:40:51 +0000134 *bcc_ptr = 0;
135 bcc_ptr++;
Steve French0223cf02006-06-27 19:50:57 +0000136 } */
Steve French39798772006-05-31 22:40:51 +0000137 /* copy user */
Steve French790fe572007-07-07 19:25:05 +0000138 if (ses->userName == NULL) {
Steve French6e659c62006-11-08 23:10:46 +0000139 /* null user mount */
140 *bcc_ptr = 0;
141 *(bcc_ptr+1) = 0;
Steve French39798772006-05-31 22:40:51 +0000142 } else { /* 300 should be long enough for any conceivable user name */
143 bytes_ret = cifs_strtoUCS((__le16 *) bcc_ptr, ses->userName,
144 300, nls_cp);
145 }
146 bcc_ptr += 2 * bytes_ret;
147 bcc_ptr += 2; /* account for null termination */
Steve French39798772006-05-31 22:40:51 +0000148
Jeff Layton0d3a01f2007-10-16 17:32:19 +0000149 unicode_domain_string(&bcc_ptr, ses, nls_cp);
150 unicode_oslm_strings(&bcc_ptr, nls_cp);
Steve French39798772006-05-31 22:40:51 +0000151
152 *pbcc_area = bcc_ptr;
153}
154
Steve French38702532007-07-08 15:40:40 +0000155static void ascii_ssetup_strings(char **pbcc_area, struct cifsSesInfo *ses,
Steve French790fe572007-07-07 19:25:05 +0000156 const struct nls_table *nls_cp)
Steve French39798772006-05-31 22:40:51 +0000157{
Steve French790fe572007-07-07 19:25:05 +0000158 char *bcc_ptr = *pbcc_area;
Steve French39798772006-05-31 22:40:51 +0000159
160 /* copy user */
161 /* BB what about null user mounts - check that we do this BB */
Steve French790fe572007-07-07 19:25:05 +0000162 /* copy user */
163 if (ses->userName == NULL) {
164 /* BB what about null user mounts - check that we do this BB */
165 } else { /* 300 should be long enough for any conceivable user name */
166 strncpy(bcc_ptr, ses->userName, 300);
167 }
Steve French39798772006-05-31 22:40:51 +0000168 /* BB improve check for overflow */
Steve French790fe572007-07-07 19:25:05 +0000169 bcc_ptr += strnlen(ses->userName, 300);
Steve French39798772006-05-31 22:40:51 +0000170 *bcc_ptr = 0;
Steve French790fe572007-07-07 19:25:05 +0000171 bcc_ptr++; /* account for null termination */
Steve French39798772006-05-31 22:40:51 +0000172
Steve French790fe572007-07-07 19:25:05 +0000173 /* copy domain */
174
175 if (ses->domainName != NULL) {
176 strncpy(bcc_ptr, ses->domainName, 256);
Steve French39798772006-05-31 22:40:51 +0000177 bcc_ptr += strnlen(ses->domainName, 256);
Steve French790fe572007-07-07 19:25:05 +0000178 } /* else we will send a null domain name
Steve French6e659c62006-11-08 23:10:46 +0000179 so the server will default to its own domain */
Steve French39798772006-05-31 22:40:51 +0000180 *bcc_ptr = 0;
181 bcc_ptr++;
182
183 /* BB check for overflow here */
184
185 strcpy(bcc_ptr, "Linux version ");
186 bcc_ptr += strlen("Linux version ");
Serge E. Hallyn96b644b2006-10-02 02:18:13 -0700187 strcpy(bcc_ptr, init_utsname()->release);
188 bcc_ptr += strlen(init_utsname()->release) + 1;
Steve French39798772006-05-31 22:40:51 +0000189
190 strcpy(bcc_ptr, CIFS_NETWORK_OPSYS);
191 bcc_ptr += strlen(CIFS_NETWORK_OPSYS) + 1;
192
Steve French790fe572007-07-07 19:25:05 +0000193 *pbcc_area = bcc_ptr;
Steve French39798772006-05-31 22:40:51 +0000194}
195
Steve French790fe572007-07-07 19:25:05 +0000196static int decode_unicode_ssetup(char **pbcc_area, int bleft,
197 struct cifsSesInfo *ses,
198 const struct nls_table *nls_cp)
Steve French39798772006-05-31 22:40:51 +0000199{
200 int rc = 0;
201 int words_left, len;
Steve French790fe572007-07-07 19:25:05 +0000202 char *data = *pbcc_area;
Steve French39798772006-05-31 22:40:51 +0000203
204
205
Steve French790fe572007-07-07 19:25:05 +0000206 cFYI(1, ("bleft %d", bleft));
Steve French39798772006-05-31 22:40:51 +0000207
208
Steve French8e6f1952007-01-22 01:19:30 +0000209 /* SMB header is unaligned, so cifs servers word align start of
210 Unicode strings */
211 data++;
212 bleft--; /* Windows servers do not always double null terminate
213 their final Unicode string - in which case we
214 now will not attempt to decode the byte of junk
215 which follows it */
Steve French50c2f752007-07-13 00:33:32 +0000216
Steve French39798772006-05-31 22:40:51 +0000217 words_left = bleft / 2;
218
219 /* save off server operating system */
220 len = UniStrnlen((wchar_t *) data, words_left);
221
222/* We look for obvious messed up bcc or strings in response so we do not go off
223 the end since (at least) WIN2K and Windows XP have a major bug in not null
224 terminating last Unicode string in response */
Steve French790fe572007-07-07 19:25:05 +0000225 if (len >= words_left)
Steve French39798772006-05-31 22:40:51 +0000226 return rc;
227
Steve French26f57362007-08-30 22:09:15 +0000228 kfree(ses->serverOS);
Steve French39798772006-05-31 22:40:51 +0000229 /* UTF-8 string will not grow more than four times as big as UCS-16 */
230 ses->serverOS = kzalloc(4 * len, GFP_KERNEL);
Steve French26f57362007-08-30 22:09:15 +0000231 if (ses->serverOS != NULL)
232 cifs_strfromUCS_le(ses->serverOS, (__le16 *)data, len, nls_cp);
Steve French39798772006-05-31 22:40:51 +0000233 data += 2 * (len + 1);
234 words_left -= len + 1;
235
236 /* save off server network operating system */
237 len = UniStrnlen((wchar_t *) data, words_left);
238
Steve French790fe572007-07-07 19:25:05 +0000239 if (len >= words_left)
Steve French39798772006-05-31 22:40:51 +0000240 return rc;
241
Steve French26f57362007-08-30 22:09:15 +0000242 kfree(ses->serverNOS);
Steve French39798772006-05-31 22:40:51 +0000243 ses->serverNOS = kzalloc(4 * len, GFP_KERNEL); /* BB this is wrong length FIXME BB */
Steve French790fe572007-07-07 19:25:05 +0000244 if (ses->serverNOS != NULL) {
Steve French39798772006-05-31 22:40:51 +0000245 cifs_strfromUCS_le(ses->serverNOS, (__le16 *)data, len,
246 nls_cp);
Steve French790fe572007-07-07 19:25:05 +0000247 if (strncmp(ses->serverNOS, "NT LAN Manager 4", 16) == 0) {
248 cFYI(1, ("NT4 server"));
Steve French39798772006-05-31 22:40:51 +0000249 ses->flags |= CIFS_SES_NT4;
250 }
251 }
252 data += 2 * (len + 1);
253 words_left -= len + 1;
254
Steve French790fe572007-07-07 19:25:05 +0000255 /* save off server domain */
256 len = UniStrnlen((wchar_t *) data, words_left);
Steve French39798772006-05-31 22:40:51 +0000257
Steve French790fe572007-07-07 19:25:05 +0000258 if (len > words_left)
259 return rc;
Steve French39798772006-05-31 22:40:51 +0000260
Steve French26f57362007-08-30 22:09:15 +0000261 kfree(ses->serverDomain);
Steve French790fe572007-07-07 19:25:05 +0000262 ses->serverDomain = kzalloc(2 * (len + 1), GFP_KERNEL); /* BB FIXME wrong length */
263 if (ses->serverDomain != NULL) {
264 cifs_strfromUCS_le(ses->serverDomain, (__le16 *)data, len,
265 nls_cp);
266 ses->serverDomain[2*len] = 0;
267 ses->serverDomain[(2*len) + 1] = 0;
268 }
269 data += 2 * (len + 1);
270 words_left -= len + 1;
271
272 cFYI(1, ("words left: %d", words_left));
Steve French39798772006-05-31 22:40:51 +0000273
274 return rc;
275}
276
Steve French790fe572007-07-07 19:25:05 +0000277static int decode_ascii_ssetup(char **pbcc_area, int bleft,
278 struct cifsSesInfo *ses,
279 const struct nls_table *nls_cp)
Steve French39798772006-05-31 22:40:51 +0000280{
281 int rc = 0;
282 int len;
Steve French790fe572007-07-07 19:25:05 +0000283 char *bcc_ptr = *pbcc_area;
Steve French39798772006-05-31 22:40:51 +0000284
Steve French790fe572007-07-07 19:25:05 +0000285 cFYI(1, ("decode sessetup ascii. bleft %d", bleft));
Steve French50c2f752007-07-13 00:33:32 +0000286
Steve French39798772006-05-31 22:40:51 +0000287 len = strnlen(bcc_ptr, bleft);
Steve French790fe572007-07-07 19:25:05 +0000288 if (len >= bleft)
Steve French39798772006-05-31 22:40:51 +0000289 return rc;
Steve French50c2f752007-07-13 00:33:32 +0000290
Steve French26f57362007-08-30 22:09:15 +0000291 kfree(ses->serverOS);
Steve French39798772006-05-31 22:40:51 +0000292
293 ses->serverOS = kzalloc(len + 1, GFP_KERNEL);
Steve French790fe572007-07-07 19:25:05 +0000294 if (ses->serverOS)
Steve French39798772006-05-31 22:40:51 +0000295 strncpy(ses->serverOS, bcc_ptr, len);
Steve French790fe572007-07-07 19:25:05 +0000296 if (strncmp(ses->serverOS, "OS/2", 4) == 0) {
297 cFYI(1, ("OS/2 server"));
Steve French9ac00b72006-09-30 04:13:17 +0000298 ses->flags |= CIFS_SES_OS2;
299 }
Steve French39798772006-05-31 22:40:51 +0000300
301 bcc_ptr += len + 1;
302 bleft -= len + 1;
303
304 len = strnlen(bcc_ptr, bleft);
Steve French790fe572007-07-07 19:25:05 +0000305 if (len >= bleft)
Steve French39798772006-05-31 22:40:51 +0000306 return rc;
307
Steve French26f57362007-08-30 22:09:15 +0000308 kfree(ses->serverNOS);
Steve French39798772006-05-31 22:40:51 +0000309
310 ses->serverNOS = kzalloc(len + 1, GFP_KERNEL);
Steve French790fe572007-07-07 19:25:05 +0000311 if (ses->serverNOS)
Steve French39798772006-05-31 22:40:51 +0000312 strncpy(ses->serverNOS, bcc_ptr, len);
313
314 bcc_ptr += len + 1;
315 bleft -= len + 1;
316
Steve French790fe572007-07-07 19:25:05 +0000317 len = strnlen(bcc_ptr, bleft);
318 if (len > bleft)
319 return rc;
Steve French39798772006-05-31 22:40:51 +0000320
Steve French9ac00b72006-09-30 04:13:17 +0000321 /* No domain field in LANMAN case. Domain is
322 returned by old servers in the SMB negprot response */
323 /* BB For newer servers which do not support Unicode,
324 but thus do return domain here we could add parsing
325 for it later, but it is not very important */
Steve French790fe572007-07-07 19:25:05 +0000326 cFYI(1, ("ascii: bytes left %d", bleft));
Steve French39798772006-05-31 22:40:51 +0000327
328 return rc;
329}
330
Steve French790fe572007-07-07 19:25:05 +0000331int
Steve French39798772006-05-31 22:40:51 +0000332CIFS_SessSetup(unsigned int xid, struct cifsSesInfo *ses, int first_time,
333 const struct nls_table *nls_cp)
334{
335 int rc = 0;
336 int wct;
Steve French39798772006-05-31 22:40:51 +0000337 struct smb_hdr *smb_buf;
338 char *bcc_ptr;
Steve French750d1152006-06-27 06:28:30 +0000339 char *str_area;
Steve French39798772006-05-31 22:40:51 +0000340 SESSION_SETUP_ANDX *pSMB;
341 __u32 capabilities;
342 int count;
343 int resp_buf_type = 0;
Steve French750d1152006-06-27 06:28:30 +0000344 struct kvec iov[2];
Steve French39798772006-05-31 22:40:51 +0000345 enum securityEnum type;
346 __u16 action;
347 int bytes_remaining;
Steve French254e55e2006-06-04 05:53:15 +0000348
Steve French790fe572007-07-07 19:25:05 +0000349 if (ses == NULL)
Steve French39798772006-05-31 22:40:51 +0000350 return -EINVAL;
351
352 type = ses->server->secType;
Steve Frenchf40c5622006-06-28 00:13:38 +0000353
Steve French790fe572007-07-07 19:25:05 +0000354 cFYI(1, ("sess setup type %d", type));
355 if (type == LANMAN) {
Steve French39798772006-05-31 22:40:51 +0000356#ifndef CONFIG_CIFS_WEAK_PW_HASH
357 /* LANMAN and plaintext are less secure and off by default.
358 So we make this explicitly be turned on in kconfig (in the
359 build) and turned on at runtime (changed from the default)
360 in proc/fs/cifs or via mount parm. Unfortunately this is
361 needed for old Win (e.g. Win95), some obscure NAS and OS/2 */
362 return -EOPNOTSUPP;
363#endif
364 wct = 10; /* lanman 2 style sessionsetup */
Steve French790fe572007-07-07 19:25:05 +0000365 } else if ((type == NTLM) || (type == NTLMv2)) {
Steve French9312f672006-06-04 22:21:07 +0000366 /* For NTLMv2 failures eventually may need to retry NTLM */
Steve French39798772006-05-31 22:40:51 +0000367 wct = 13; /* old style NTLM sessionsetup */
Steve French790fe572007-07-07 19:25:05 +0000368 } else /* same size: negotiate or auth, NTLMSSP or extended security */
Steve French39798772006-05-31 22:40:51 +0000369 wct = 12;
370
371 rc = small_smb_init_no_tc(SMB_COM_SESSION_SETUP_ANDX, wct, ses,
372 (void **)&smb_buf);
Steve French790fe572007-07-07 19:25:05 +0000373 if (rc)
Steve French39798772006-05-31 22:40:51 +0000374 return rc;
375
376 pSMB = (SESSION_SETUP_ANDX *)smb_buf;
377
378 capabilities = cifs_ssetup_hdr(ses, pSMB);
Steve French750d1152006-06-27 06:28:30 +0000379
380 /* we will send the SMB in two pieces,
381 a fixed length beginning part, and a
382 second part which will include the strings
383 and rest of bcc area, in order to avoid having
384 to do a large buffer 17K allocation */
Steve French790fe572007-07-07 19:25:05 +0000385 iov[0].iov_base = (char *)pSMB;
386 iov[0].iov_len = smb_buf->smb_buf_length + 4;
Steve French750d1152006-06-27 06:28:30 +0000387
388 /* 2000 big enough to fit max user, domain, NOS name etc. */
389 str_area = kmalloc(2000, GFP_KERNEL);
Cyrill Gorcunov5e6e6232007-08-18 00:15:20 +0000390 if (str_area == NULL) {
391 cifs_small_buf_release(smb_buf);
392 return -ENOMEM;
393 }
Steve French750d1152006-06-27 06:28:30 +0000394 bcc_ptr = str_area;
Steve French39798772006-05-31 22:40:51 +0000395
Steve French9ac00b72006-09-30 04:13:17 +0000396 ses->flags &= ~CIFS_SES_LANMAN;
397
Steve French790fe572007-07-07 19:25:05 +0000398 if (type == LANMAN) {
Steve French39798772006-05-31 22:40:51 +0000399#ifdef CONFIG_CIFS_WEAK_PW_HASH
Steve French7c7b25b2006-06-01 19:20:10 +0000400 char lnm_session_key[CIFS_SESS_KEY_SIZE];
Steve French39798772006-05-31 22:40:51 +0000401
402 /* no capabilities flags in old lanman negotiation */
403
Steve French790fe572007-07-07 19:25:05 +0000404 pSMB->old_req.PasswordLength = cpu_to_le16(CIFS_SESS_KEY_SIZE);
Steve French39798772006-05-31 22:40:51 +0000405 /* BB calculate hash with password */
406 /* and copy into bcc */
407
Steve French7c7b25b2006-06-01 19:20:10 +0000408 calc_lanman_hash(ses, lnm_session_key);
Steve French790fe572007-07-07 19:25:05 +0000409 ses->flags |= CIFS_SES_LANMAN;
Steve French750d1152006-06-27 06:28:30 +0000410/* #ifdef CONFIG_CIFS_DEBUG2
Steve French39798772006-05-31 22:40:51 +0000411 cifs_dump_mem("cryptkey: ",ses->server->cryptKey,
Steve French7c7b25b2006-06-01 19:20:10 +0000412 CIFS_SESS_KEY_SIZE);
Steve French750d1152006-06-27 06:28:30 +0000413#endif */
Steve French7c7b25b2006-06-01 19:20:10 +0000414 memcpy(bcc_ptr, (char *)lnm_session_key, CIFS_SESS_KEY_SIZE);
415 bcc_ptr += CIFS_SESS_KEY_SIZE;
Steve French39798772006-05-31 22:40:51 +0000416
417 /* can not sign if LANMAN negotiated so no need
418 to calculate signing key? but what if server
419 changed to do higher than lanman dialect and
420 we reconnected would we ever calc signing_key? */
421
Steve French790fe572007-07-07 19:25:05 +0000422 cFYI(1, ("Negotiating LANMAN setting up strings"));
Steve French39798772006-05-31 22:40:51 +0000423 /* Unicode not allowed for LANMAN dialects */
424 ascii_ssetup_strings(&bcc_ptr, ses, nls_cp);
Steve French790fe572007-07-07 19:25:05 +0000425#endif
Steve French39798772006-05-31 22:40:51 +0000426 } else if (type == NTLM) {
Steve French7c7b25b2006-06-01 19:20:10 +0000427 char ntlm_session_key[CIFS_SESS_KEY_SIZE];
Steve French39798772006-05-31 22:40:51 +0000428
429 pSMB->req_no_secext.Capabilities = cpu_to_le32(capabilities);
430 pSMB->req_no_secext.CaseInsensitivePasswordLength =
Steve French7c7b25b2006-06-01 19:20:10 +0000431 cpu_to_le16(CIFS_SESS_KEY_SIZE);
Steve French39798772006-05-31 22:40:51 +0000432 pSMB->req_no_secext.CaseSensitivePasswordLength =
Steve French7c7b25b2006-06-01 19:20:10 +0000433 cpu_to_le16(CIFS_SESS_KEY_SIZE);
Steve French50c2f752007-07-13 00:33:32 +0000434
Steve French39798772006-05-31 22:40:51 +0000435 /* calculate session key */
436 SMBNTencrypt(ses->password, ses->server->cryptKey,
437 ntlm_session_key);
438
Steve French790fe572007-07-07 19:25:05 +0000439 if (first_time) /* should this be moved into common code
Steve French39798772006-05-31 22:40:51 +0000440 with similar ntlmv2 path? */
Steve Frenchb609f062007-07-09 07:55:14 +0000441 cifs_calculate_mac_key(&ses->server->mac_signing_key,
Steve French39798772006-05-31 22:40:51 +0000442 ntlm_session_key, ses->password);
443 /* copy session key */
444
Steve French790fe572007-07-07 19:25:05 +0000445 memcpy(bcc_ptr, (char *)ntlm_session_key, CIFS_SESS_KEY_SIZE);
Steve French7c7b25b2006-06-01 19:20:10 +0000446 bcc_ptr += CIFS_SESS_KEY_SIZE;
Steve French790fe572007-07-07 19:25:05 +0000447 memcpy(bcc_ptr, (char *)ntlm_session_key, CIFS_SESS_KEY_SIZE);
Steve French7c7b25b2006-06-01 19:20:10 +0000448 bcc_ptr += CIFS_SESS_KEY_SIZE;
Steve French790fe572007-07-07 19:25:05 +0000449 if (ses->capabilities & CAP_UNICODE) {
Steve French0223cf02006-06-27 19:50:57 +0000450 /* unicode strings must be word aligned */
451 if (iov[0].iov_len % 2) {
452 *bcc_ptr = 0;
Steve French790fe572007-07-07 19:25:05 +0000453 bcc_ptr++;
454 }
Steve French7c7b25b2006-06-01 19:20:10 +0000455 unicode_ssetup_strings(&bcc_ptr, ses, nls_cp);
Steve French0223cf02006-06-27 19:50:57 +0000456 } else
Steve French7c7b25b2006-06-01 19:20:10 +0000457 ascii_ssetup_strings(&bcc_ptr, ses, nls_cp);
458 } else if (type == NTLMv2) {
Steve French790fe572007-07-07 19:25:05 +0000459 char *v2_sess_key =
Steve French6d027cf2006-06-05 16:26:05 +0000460 kmalloc(sizeof(struct ntlmv2_resp), GFP_KERNEL);
Steve Frenchf64b23a2006-06-05 05:27:37 +0000461
462 /* BB FIXME change all users of v2_sess_key to
463 struct ntlmv2_resp */
Steve French7c7b25b2006-06-01 19:20:10 +0000464
Steve French790fe572007-07-07 19:25:05 +0000465 if (v2_sess_key == NULL) {
Steve French7c7b25b2006-06-01 19:20:10 +0000466 cifs_small_buf_release(smb_buf);
467 return -ENOMEM;
468 }
469
470 pSMB->req_no_secext.Capabilities = cpu_to_le32(capabilities);
471
472 /* LM2 password would be here if we supported it */
473 pSMB->req_no_secext.CaseInsensitivePasswordLength = 0;
474 /* cpu_to_le16(LM2_SESS_KEY_SIZE); */
475
476 pSMB->req_no_secext.CaseSensitivePasswordLength =
Steve Frenchf64b23a2006-06-05 05:27:37 +0000477 cpu_to_le16(sizeof(struct ntlmv2_resp));
Steve French7c7b25b2006-06-01 19:20:10 +0000478
479 /* calculate session key */
Steve French1717ffc2006-06-08 05:41:32 +0000480 setup_ntlmv2_rsp(ses, v2_sess_key, nls_cp);
Steve French790fe572007-07-07 19:25:05 +0000481 if (first_time) /* should this be moved into common code
482 with similar ntlmv2 path? */
Steve French7c7b25b2006-06-01 19:20:10 +0000483 /* cifs_calculate_ntlmv2_mac_key(ses->server->mac_signing_key,
484 response BB FIXME, v2_sess_key); */
485
486 /* copy session key */
487
488 /* memcpy(bcc_ptr, (char *)ntlm_session_key,LM2_SESS_KEY_SIZE);
489 bcc_ptr += LM2_SESS_KEY_SIZE; */
Steve French38702532007-07-08 15:40:40 +0000490 memcpy(bcc_ptr, (char *)v2_sess_key,
491 sizeof(struct ntlmv2_resp));
Steve Frenchf64b23a2006-06-05 05:27:37 +0000492 bcc_ptr += sizeof(struct ntlmv2_resp);
493 kfree(v2_sess_key);
Steve French790fe572007-07-07 19:25:05 +0000494 if (ses->capabilities & CAP_UNICODE) {
495 if (iov[0].iov_len % 2) {
Steve French0223cf02006-06-27 19:50:57 +0000496 *bcc_ptr = 0;
Steve French26f57362007-08-30 22:09:15 +0000497 bcc_ptr++;
498 }
Steve French39798772006-05-31 22:40:51 +0000499 unicode_ssetup_strings(&bcc_ptr, ses, nls_cp);
Steve French0223cf02006-06-27 19:50:57 +0000500 } else
Steve French39798772006-05-31 22:40:51 +0000501 ascii_ssetup_strings(&bcc_ptr, ses, nls_cp);
502 } else /* NTLMSSP or SPNEGO */ {
503 pSMB->req.hdr.Flags2 |= SMBFLG2_EXT_SEC;
504 capabilities |= CAP_EXTENDED_SECURITY;
505 pSMB->req.Capabilities = cpu_to_le32(capabilities);
506 /* BB set password lengths */
507 }
508
Steve French750d1152006-06-27 06:28:30 +0000509 count = (long) bcc_ptr - (long) str_area;
Steve French39798772006-05-31 22:40:51 +0000510 smb_buf->smb_buf_length += count;
511
Steve French39798772006-05-31 22:40:51 +0000512 BCC_LE(smb_buf) = cpu_to_le16(count);
513
Steve French750d1152006-06-27 06:28:30 +0000514 iov[1].iov_base = str_area;
Steve French790fe572007-07-07 19:25:05 +0000515 iov[1].iov_len = count;
Steve Frencha761ac52007-10-18 21:45:27 +0000516 rc = SendReceive2(xid, ses, iov, 2 /* num_iovecs */, &resp_buf_type,
Steve French133672e2007-11-13 22:41:37 +0000517 CIFS_STD_OP /* not long */ | CIFS_LOG_ERROR);
Steve French39798772006-05-31 22:40:51 +0000518 /* SMB request buf freed in SendReceive2 */
519
Steve French790fe572007-07-07 19:25:05 +0000520 cFYI(1, ("ssetup rc from sendrecv2 is %d", rc));
521 if (rc)
Steve French39798772006-05-31 22:40:51 +0000522 goto ssetup_exit;
523
524 pSMB = (SESSION_SETUP_ANDX *)iov[0].iov_base;
525 smb_buf = (struct smb_hdr *)iov[0].iov_base;
526
Steve French790fe572007-07-07 19:25:05 +0000527 if ((smb_buf->WordCount != 3) && (smb_buf->WordCount != 4)) {
Steve French39798772006-05-31 22:40:51 +0000528 rc = -EIO;
Steve French790fe572007-07-07 19:25:05 +0000529 cERROR(1, ("bad word count %d", smb_buf->WordCount));
Steve French39798772006-05-31 22:40:51 +0000530 goto ssetup_exit;
531 }
532 action = le16_to_cpu(pSMB->resp.Action);
533 if (action & GUEST_LOGIN)
Steve French189acaa2006-06-23 02:33:48 +0000534 cFYI(1, ("Guest login")); /* BB mark SesInfo struct? */
Steve French39798772006-05-31 22:40:51 +0000535 ses->Suid = smb_buf->Uid; /* UID left in wire format (le) */
536 cFYI(1, ("UID = %d ", ses->Suid));
537 /* response can have either 3 or 4 word count - Samba sends 3 */
538 /* and lanman response is 3 */
539 bytes_remaining = BCC(smb_buf);
540 bcc_ptr = pByteArea(smb_buf);
541
Steve French790fe572007-07-07 19:25:05 +0000542 if (smb_buf->WordCount == 4) {
Steve French39798772006-05-31 22:40:51 +0000543 __u16 blob_len;
544 blob_len = le16_to_cpu(pSMB->resp.SecurityBlobLength);
545 bcc_ptr += blob_len;
Steve French790fe572007-07-07 19:25:05 +0000546 if (blob_len > bytes_remaining) {
547 cERROR(1, ("bad security blob length %d", blob_len));
Steve French39798772006-05-31 22:40:51 +0000548 rc = -EINVAL;
549 goto ssetup_exit;
550 }
551 bytes_remaining -= blob_len;
Steve French790fe572007-07-07 19:25:05 +0000552 }
Steve French39798772006-05-31 22:40:51 +0000553
554 /* BB check if Unicode and decode strings */
Steve French790fe572007-07-07 19:25:05 +0000555 if (smb_buf->Flags2 & SMBFLG2_UNICODE)
Steve French39798772006-05-31 22:40:51 +0000556 rc = decode_unicode_ssetup(&bcc_ptr, bytes_remaining,
557 ses, nls_cp);
558 else
Steve French63135e02007-07-17 17:34:02 +0000559 rc = decode_ascii_ssetup(&bcc_ptr, bytes_remaining,
560 ses, nls_cp);
Steve French50c2f752007-07-13 00:33:32 +0000561
Steve French39798772006-05-31 22:40:51 +0000562ssetup_exit:
Steve French750d1152006-06-27 06:28:30 +0000563 kfree(str_area);
Steve French790fe572007-07-07 19:25:05 +0000564 if (resp_buf_type == CIFS_SMALL_BUFFER) {
565 cFYI(1, ("ssetup freeing small buf %p", iov[0].iov_base));
Steve French39798772006-05-31 22:40:51 +0000566 cifs_small_buf_release(iov[0].iov_base);
Steve French790fe572007-07-07 19:25:05 +0000567 } else if (resp_buf_type == CIFS_LARGE_BUFFER)
Steve French39798772006-05-31 22:40:51 +0000568 cifs_buf_release(iov[0].iov_base);
569
570 return rc;
571}