libsmbfs/smb/ssnsetup.c

613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross/*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * Copyright (c) 2000-2001 Boris Popov
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * All rights reserved.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * Redistribution and use in source and binary forms, with or without
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * modification, are permitted provided that the following conditions
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * are met:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * 1. Redistributions of source code must retain the above copyright
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *    notice, this list of conditions and the following disclaimer.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * 2. Redistributions in binary form must reproduce the above copyright
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *    notice, this list of conditions and the following disclaimer in the
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *    documentation and/or other materials provided with the distribution.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * 3. All advertising materials mentioning features or use of this software
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *    must display the following acknowledgement:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *    This product includes software developed by Boris Popov.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * 4. Neither the name of the author nor the names of any co-contributors
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *    may be used to endorse or promote products derived from this software
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *    without specific prior written permission.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * THIS SOFTWARE IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS ``AS IS'' AND
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * ARE DISCLAIMED.  IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS BE LIABLE
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * SUCH DAMAGE.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross/*
15359501f7d4b9abebd7b7bf6efd5982a8e7eb27Gordon Ross * Copyright (c) 2009, 2010, Oracle and/or its affiliates. All rights reserved.
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross * Copyright 2013 Nexenta Systems, Inc.  All rights reserved.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross/*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * SMB Session Setup, and related.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <errno.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <stdio.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <stdlib.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <unistd.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <strings.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netdb.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <libintl.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <xti.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <assert.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <sys/types.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <sys/time.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <sys/byteorder.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <sys/socket.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <sys/fcntl.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netinet/in.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netinet/tcp.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <arpa/inet.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netsmb/mchain.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netsmb/netbios.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netsmb/smb_dev.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netsmb/smb.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netsmb/smb_lib.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include <netsmb/nb_lib.h>
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include "private.h"
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include "charsets.h"
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include "ntlm.h"
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross#include "smb_crypt.h"
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossstatic int
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rosssmb__ssnsetup(struct smb_ctx *ctx,
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct mbdata *mbc1, struct mbdata *mbc2,
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint32_t *statusp, uint16_t *actionp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross/*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * Session Setup: NULL session (anonymous)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossint
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rosssmb_ssnsetup_null(struct smb_ctx *ctx)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross{
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    int err;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint32_t ntstatus;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint16_t action = 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross    if (ctx->ct_clnt_caps & SMB_CAP_EXT_SECURITY) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /* Should not get here with... */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = EINVAL;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = smb__ssnsetup(ctx, NULL, NULL, &ntstatus, &action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    DPRINT("status 0x%x action 0x%x", ntstatus, (int)action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (ntstatus != 0)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = EAUTH;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossout:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    return (err);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross}
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross/*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * SMB Session Setup, using NTLMv1 (and maybe LMv1)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossint
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rosssmb_ssnsetup_ntlm1(struct smb_ctx *ctx)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross{
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct mbdata lm_mbc, nt_mbc;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    int err;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint32_t ntstatus;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint16_t action = 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross    if (ctx->ct_clnt_caps & SMB_CAP_EXT_SECURITY) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /* Should not get here with... */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = EINVAL;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* Make mb_done calls at out safe. */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    bzero(&lm_mbc, sizeof (lm_mbc));
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    bzero(&nt_mbc, sizeof (nt_mbc));
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* Put the LM,NTLM responses (as mbdata). */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = ntlm_put_v1_responses(ctx, &lm_mbc, &nt_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross    if ((ctx->ct_vcflags & SMBV_WILL_SIGN) != 0 &&
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        (ctx->ct_hflags2 & SMB_FLAGS2_SECURITY_SIGNATURE) == 0) {
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross        err = ntlm_build_mac_key(ctx, &nt_mbc);
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross        if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /* OK, start signing! */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        ctx->ct_hflags2 |= SMB_FLAGS2_SECURITY_SIGNATURE;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = smb__ssnsetup(ctx, &lm_mbc, &nt_mbc, &ntstatus, &action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    DPRINT("status 0x%x action 0x%x", ntstatus, (int)action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (ntstatus != 0)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = EAUTH;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossout:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_done(&lm_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_done(&nt_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    return (err);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross}
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross/*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * SMB Session Setup, using NTLMv2 (and LMv2)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossint
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rosssmb_ssnsetup_ntlm2(struct smb_ctx *ctx)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross{
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct mbdata lm_mbc, nt_mbc, ti_mbc;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    int err;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint32_t ntstatus;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint16_t action = 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross    if (ctx->ct_clnt_caps & SMB_CAP_EXT_SECURITY) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /* Should not get here with... */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = EINVAL;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* Make mb_done calls at out safe. */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    bzero(&lm_mbc, sizeof (lm_mbc));
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    bzero(&nt_mbc, sizeof (nt_mbc));
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    bzero(&ti_mbc, sizeof (ti_mbc));
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* Build the NTLMv2 "target info" blob (as mbdata) */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = ntlm_build_target_info(ctx, NULL, &ti_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* Put the LMv2, NTLMv2 responses (as mbdata). */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = ntlm_put_v2_responses(ctx, &ti_mbc, &lm_mbc, &nt_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross    if ((ctx->ct_vcflags & SMBV_WILL_SIGN) != 0 &&
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        (ctx->ct_hflags2 & SMB_FLAGS2_SECURITY_SIGNATURE) == 0) {
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross        err = ntlm_build_mac_key(ctx, &nt_mbc);
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross        if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /* OK, start signing! */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        ctx->ct_hflags2 |= SMB_FLAGS2_SECURITY_SIGNATURE;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = smb__ssnsetup(ctx, &lm_mbc, &nt_mbc, &ntstatus, &action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    DPRINT("status 0x%x action 0x%x", ntstatus, (int)action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (ntstatus != 0)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = EAUTH;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossout:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_done(&ti_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_done(&lm_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_done(&nt_mbc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    return (err);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross}
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossint
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rosssmb_ssnsetup_spnego(struct smb_ctx *ctx, struct mbdata *hint_mb)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross{
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct mbdata send_mb, recv_mb;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    int     err;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint32_t    ntstatus;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint16_t    action = 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = ssp_ctx_create_client(ctx, hint_mb);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    bzero(&send_mb, sizeof (send_mb));
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    bzero(&recv_mb, sizeof (recv_mb));
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* NULL input indicates first call. */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = ssp_ctx_next_token(ctx, NULL, &send_mb);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    for (;;) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = smb__ssnsetup(ctx, &send_mb, &recv_mb,
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            &ntstatus, &action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (ntstatus == 0)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            break; /* normal loop termination */
148c5f43199ca0b43fc8e3b643aab11cd66ea327Alan Wright        if (ntstatus != NT_STATUS_MORE_PROCESSING_REQUIRED) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            err = EAUTH;
15359501f7d4b9abebd7b7bf6efd5982a8e7eb27Gordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /* middle calls get both in, out */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        err = ssp_ctx_next_token(ctx, &recv_mb, &send_mb);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    DPRINT("status 0x%x action 0x%x", ntstatus, (int)action);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* NULL output indicates last call. */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    (void) ssp_ctx_next_token(ctx, &recv_mb, NULL);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossout:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    ssp_ctx_destroy(ctx);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    return (err);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross}
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross/*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * Session Setup function used for all the forms we support.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * To allow this sharing, the crypto stuff is computed by
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * callers and passed in as mbdata chains.  Also, the args
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * have different meanings for extended security vs. old.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * Some may be used as either IN or OUT parameters.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * For NTLM (v1, v2), all parameters are inputs
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *  mbc1: [in] LM password hash
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *  mbc2: [in] NT password hash
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * For Extended security (spnego)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *  mbc1: [in]  outgoing blob data
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *  mbc2: [out] received blob data
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross * For both forms, these are optional:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *  statusp: [out] NT status
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross *  actionp: [out] Logon Action (i.e. SMB_ACT_GUEST)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossstatic int
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rosssmb__ssnsetup(struct smb_ctx *ctx,
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct mbdata *mbc1, struct mbdata *mbc2,
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint32_t *statusp, uint16_t *actionp)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross{
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    static const char NativeOS[] = "Solaris";
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    static const char LanMan[] = "NETSMB";
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct smb_sopt *sv = &ctx->ct_sopt;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct smb_iods *is = &ctx->ct_iods;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct smb_rq   *rqp = NULL;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct mbdata   *mbp;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    struct mbuf *m;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    int err, uc;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint32_t caps;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint16_t bc, len1, len2, sblen;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uint8_t wc;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
85e6b6747d07050e01ec91acef2453655821f9abGordon Ross    caps = ctx->ct_clnt_caps;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uc = ctx->ct_hflags2 & SMB_FLAGS2_UNICODE;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = smb_rq_init(ctx, SMB_COM_SESSION_SETUP_ANDX, &rqp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Build the SMB request.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mbp = &rqp->rq_rq;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    smb_rq_wstart(rqp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_put_uint16le(mbp, 0xff);     /* 0: AndXCommand */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_put_uint16le(mbp, 0);        /* 1: AndXOffset */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_put_uint16le(mbp, sv->sv_maxtx); /* 2: MaxBufferSize */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_put_uint16le(mbp, sv->sv_maxmux);    /* 3: MaxMpxCount */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_put_uint16le(mbp, 1);        /* 4: VcNumber */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mb_put_uint32le(mbp, sv->sv_skey);  /* 5,6: Session Key */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (caps & SMB_CAP_EXT_SECURITY) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        len1 = mbc1 ? mbc1->mb_count : 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_put_uint16le(mbp, len1); /* 7: Sec. Blob Len */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_put_uint32le(mbp, 0);    /* 8,9: reserved */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_put_uint32le(mbp, caps); /* 10,11: Capabilities */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        smb_rq_wend(rqp);       /* 12: Byte Count */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        smb_rq_bstart(rqp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (mbc1 && mbc1->mb_top) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            mb_put_mbuf(mbp, mbc1->mb_top); /* sec. blob */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            mbc1->mb_top = NULL; /* consumed */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /* mbc2 is required below */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (mbc2 == NULL) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            err = EINVAL;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    } else {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        len1 = mbc1 ? mbc1->mb_count : 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        len2 = mbc2 ? mbc2->mb_count : 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_put_uint16le(mbp, len1); /* 7: LM pass. len */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_put_uint16le(mbp, len2); /* 8: NT pass. len */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_put_uint32le(mbp, 0);    /* 9,10: reserved */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_put_uint32le(mbp, caps); /* 11,12: Capabilities */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        smb_rq_wend(rqp);       /* 13: Byte Count */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        smb_rq_bstart(rqp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (mbc1 && mbc1->mb_top) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            mb_put_mbuf(mbp, mbc1->mb_top); /* LM password */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            mbc1->mb_top = NULL; /* consumed */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (mbc2 && mbc2->mb_top) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            mb_put_mbuf(mbp, mbc2->mb_top); /* NT password */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            mbc2->mb_top = NULL; /* consumed */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        }
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        mb_put_string(mbp, ctx->ct_user, uc);
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        mb_put_string(mbp, ctx->ct_domain, uc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross    mb_put_string(mbp, NativeOS, uc);
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross    mb_put_string(mbp, LanMan, uc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    smb_rq_bend(rqp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = smb_rq_internal(ctx, rqp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (statusp)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        *statusp = rqp->rq_status;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * If we have a real error, the response probably has
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * no more data, so don't try to parse any more.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Note: err=0, means rq_status is valid.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (rqp->rq_status != 0 &&
148c5f43199ca0b43fc8e3b643aab11cd66ea327Alan Wright        rqp->rq_status != NT_STATUS_MORE_PROCESSING_REQUIRED) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Parse the reply
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    uc = rqp->rq_hflags2 & SMB_FLAGS2_UNICODE;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    is->is_smbuid = rqp->rq_uid;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    mbp = &rqp->rq_rp;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross    err = md_get_uint8(mbp, &wc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = EBADRPC; /* for any problems in this section */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (caps & SMB_CAP_EXT_SECURITY) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (wc != 4)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, NULL); /* secondary cmd */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, NULL); /* andxoffset */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, actionp);  /* action */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, &sblen);   /* sec. blob len */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, &bc);  /* byte count */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        /*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross         * Get the security blob, after
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross         * sanity-checking the length.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross         */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (sblen == 0 || bc < sblen)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        err = md_get_mbuf(mbp, sblen, &m);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mb_initm(mbc2, m);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        mbc2->mb_count = sblen;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    } else {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (wc != 3)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, NULL); /* secondary cmd */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, NULL); /* andxoffset */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        md_get_uint16le(mbp, actionp);  /* action */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross        err = md_get_uint16le(mbp, &bc); /* byte count */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (err)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Native OS, LANMGR, & Domain follow here.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Parse these strings and store for later.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * If unicode, they should be aligned.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     *
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Note that with Extended security, we may use
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * multiple calls to this function.  Only parse
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * these strings on the last one (status == 0).
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Ditto for the CAP_LARGE work-around.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (rqp->rq_status != 0)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        goto out;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* Ignore any parsing errors for these strings. */
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross    err = md_get_string(mbp, &ctx->ct_srv_OS, uc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    DPRINT("server OS: %s", err ? "?" : ctx->ct_srv_OS);
02d09e03eb27f3a2dc299de704e45dae5173f43fGordon Ross    err = md_get_string(mbp, &ctx->ct_srv_LM, uc);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    DPRINT("server LM: %s", err ? "?" : ctx->ct_srv_LM);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * There's sometimes a server domain folloing
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * at this point, but we don't need it.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /* Success! (See Ignore any ... above) */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    err = 0;
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    /*
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * Windows systems don't suport CAP_LARGE_READX,WRITEX
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     * when signing is enabled, so adjust sv_caps.
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross     */
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (ctx->ct_srv_OS &&
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        0 == strncmp(ctx->ct_srv_OS, "Windows ", 8)) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        DPRINT("Server is Windows");
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        if (ctx->ct_vcflags & SMBV_WILL_SIGN) {
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            DPRINT("disable CAP_LARGE_(r/w)");
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross            ctx->ct_sopt.sv_caps &=
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross                ~(SMB_CAP_LARGE_READX | SMB_CAP_LARGE_WRITEX);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    }
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Rossout:
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    if (rqp)
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross        smb_rq_done(rqp);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross    return (err);
613a2f6ba31e891e3d947a356daf5e563d43c1ceGordon Ross}