summaryrefslogtreecommitdiff
path: root/source3/modules/vfs_smb_traffic_analyzer.c
Commit message (Collapse)AuthorAgeFilesLines
* libcli/security Provide a common, top level libcli/security/security.hAndrew Bartlett2010-10-121-1/+1
| | | | | | | | | | | | | | This will reduce the noise from merges of the rest of the libcli/security code, without this commit changing what code is actually used. This includes (along with other security headers) dom_sid.h and security_token.h Andrew Bartlett Autobuild-User: Andrew Bartlett <abartlet@samba.org> Autobuild-Date: Tue Oct 12 05:54:10 UTC 2010 on sn-devel-104
* s3-auth Rename NT_USER_TOKEN user_sids -> sidsAndrew Bartlett2010-08-311-1/+1
| | | | This is closer to the struct security_token from security.idl
* vfs_smb_traffic_analyzer: fix off by a second bugBjörn Jacke2010-08-301-1/+1
| | | | | convert_timespec_to_time_t is rounding but here we keep track of milliseconds here - so we should use plain the tv_sec.
* s3-netlogon: remove global include of netlogon.h.Günther Deschner2010-08-061-0/+1
| | | | | | | This reduces precompiled headers by another 4 MB and also slightly speeds up the build. Guenther
* s3-secrets: only include secrets.h when needed.Günther Deschner2010-08-051-0/+1
| | | | Guenther
* s3: remove unused librpc/ndr/sid.c.Günther Deschner2010-06-031-0/+1
| | | | Guenther
* s3-vfs: Send the share name instead of the path in smb_traffic_analyzer.Holger Hetterich2010-06-011-2/+5
| | | | | | | In protocol v2, the name of the service should be sent instead of the path. Signed-off-by: Andreas Schneider <asn@samba.org>
* s3:auth use info3 in auth_serversupplied_infoSimo Sorce2010-05-281-3/+3
| | | | Signed-off-by: Günther Deschner <gd@samba.org>
* vfs_smb_traffic_analyzer.c: set the len variable when running protocol v1.Holger Hetterich2010-05-271-0/+1
| | | | Signed-off-by: Andreas Schneider <asn@samba.org>
* s3: vfs_smb_traffic_analyzer.c: remove warnings from developer buildHolger Hetterich2010-03-251-14/+16
| | | | | | | | | | | This patch should remove all warnings coming up when compiling traffic analyzer with configure.developer. Re-activate the smb_traffic_analyzer_rmdir function by adding it's vfs_fn_pointer to vfs_smb_traffic_analyzer_fns. Copy the mode_t used in smb_traffic_analyzer_open to the corresponding data structure.
* s3-vfs: fix some buildwarnings in traffic analyzer, there are many more.Günther Deschner2010-03-161-9/+11
| | | | | | Holger, please check. Guenther
* Update copyrightJim McDonough2010-03-161-1/+1
|
* s3: vfs_smb_traffic_analyzer.c: add VFS functions for file open and closeHolger Hetterich2010-03-161-1/+51
|
* smb_traffic_analyzer.c: optimize marshalling function and documentHolger Hetterich2010-03-161-33/+53
| | | | | | | | | Collect all data that is needed, and use only one talloc_asprintf operation to create the string of common data. This simplifies the code a bit and is most probably faster than the old method. Also, #define SMBTA_COMMON_DATA_COUNT as a complete string, speeding things up because we know the value at compile time.
* vfs_smb_traffic_analyzer.c: added functionHolger Hetterich2010-03-161-63/+58
| | | | | | | | | static char *smb_traffic_analyzer_anonymize This takes a lot of code out of the main functions, and makes it a bit simpler. Do the anonymization in a function. Since we already anonymized the username we don't need to do this a second time in the v2 marshalling function.
* Simplify the code a bit by creating the functions:Holger Hetterich2010-03-161-84/+123
| | | | | | | smb_traffic_analyzer_encrypt - doing the encryption of a data block, smb_traffic_analyzer_create_header - create the protocol header, smb_traffic_analyzer_write_data - actually write the data to the socket.
* Add the number of common data blocks to the protocol.Holger Hetterich2010-03-161-4/+23
| | | | | | | | | | | Always send the number of common data blocks first. This way, we can make the protocol backwards compatible. A receiver running with an older subprotocol can just ignore if a newer sender sends more common data. Add a few remarks to the marshalling function. Add two #define lines defining the protocol subrelease number and the number of common data blocks to the header file.
* Put all the protocol stuff into a separate header file.Holger Hetterich2010-03-161-114/+12
| | | | | | All the structures and the vfs function identifier list is required by the receiver. It's therefore very handy to have this in an extra header file.
* Add smbta-util to manage the encryption key.Holger Hetterich2010-03-161-0/+1
| | | | | | | This program allows the administrator to enable or disable AES encryption when using vfs_smb_traffic_analyzer. It also generates new keys, stores them to a file, so that the file can be reused on another client or server.
* Implement AES encryption of the data block.Holger Hetterich2010-03-161-13/+33
| | | | | | | | | | | | First try. This runs on 16 bytes long AES block size, and enlarges the data block with 16 bytes, to make sure all bytes are in. The added bytes are filled with '.'. It then creates a header featuring the new length to be send, and finally sends the data block, then returns. This code is untested, as creating the receiver will be my next step. To simplify traffic_analyzer's code, this code should run as a function. It's on the do-to-list.
* Implement anonymization for protocol v2.Holger Hetterich2010-03-161-14/+53
| | | | | | | | | Since we need to care for the SID too, do the anonymization in the marshalling function and anonymize both the username and the SID. Remove the 'A' status flag from the header definition. A listener could see from the unencrypted header if the module is anonymizing or not, which is certainly not wanted.
* Make all remarks compatible to the linux kernel coding styleguide.Holger Hetterich2010-03-161-27/+33
|
* Added an exact description of the V2 protocol.Holger Hetterich2010-03-161-0/+62
| | | | | I don't think it should have it's place the man page, because this is developer information.
* Move the creation of the header.Holger Hetterich2010-03-161-11/+37
| | | | | | | | | | | | | | | | | | | | Since the header block of the protocol contains the number of bytes to come, we always send the header itself unmodified. If we compress or crypt the data we are about to send, the length of the data to send may change. Therefore, we no longer create the header in smb_traffic_analyzer_create_string, but shortly before we send the data. For both cases, encryption and normal, we create our own header, and send it before the actual data. In case of protocol v1, we don't need to create an extra header. Just send the data, and return from the function. Change a debug message to say that the header for crypted data has been created. Add a status flags consisting of 6 bytes to the header. Their function will be descriped in one of the next patches, which is descriping the header in a longer comment. When anonymization and/or encryption is used, set the flags accordingly.
* Fetch the SID of the user we are running as and send with the commonHolger Hetterich2010-03-161-2/+5
| | | | data.
* Additionally send the vfs function id with the protocol.Holger Hetterich2010-03-161-7/+11
|
* According to the linux kernel coding styleguide, it's better toHolger Hetterich2010-03-161-46/+46
| | | | | align the switch and it's case statements in the same column. This saves us one indentation level.
* Don't use typedefs on the VFS function data structures asHolger Hetterich2010-03-161-27/+27
| | | | | typedefs are evil according to the linux kernel coding styleguide.
* Add read,pread,write,pwrite support to the V2 protocol.Holger Hetterich2010-03-161-3/+14
|
* Enable AES encryption of the data if a key was found in secrets.tdb.Holger Hetterich2010-03-161-3/+22
|
* Add rmdir, chdir, and rename as supported VFS functionsHolger Hetterich2010-03-161-9/+87
|
* The format of data we are sending over the network will be flexible when ↵Holger Hetterich2010-03-161-4/+74
| | | | | | | sending over the network in protocol v2. To be able to do this, we create a new va-list function that is creating the buffer to send. Also it makes it easier for the receiver to parse the data; it sends an initial header containing the full length of the buffer to be send. For the individual strings, it sends sub headers containing the length of the upcoming substring to be send. With the header-data-header-data [..] structure we don't need to quote the sub strings finally enabling having all possible character sets in filenames etc.. In the sending function, implement mkdir to actually send it's data for testing.
* Create structs carrying the data of individual VFS functions, and hand those ↵Holger Hetterich2010-03-161-33/+47
| | | | over to the send function, which then casts the void pointer to the struct required by looking at the id. This allows us to return different result data depending on the VFS function that is running. Make the protocol v1 sender compatible to this. Adapt the existing VFS functions to use the new data structures. Make use of the new functionality and extend the mkdir VFS logger function to return the creation mode additionally.
* Introduce smb_traffic_analyzer protocol v2.Holger Hetterich2010-03-161-7/+62
| | | | | | | From Holger: Make smb_traffic_analyzer differ the protocol versions to enable the development of version 2 of the protocol. To do this, a new parameter "protocol_version" has been introduced, which can be set to "V1", "V2", or nothing. If protocol_version is not set, V1 will be chosen automatically. Created an enum for identifying VFS functions in the upcoming protocol v2. Converted the existing VFS functions to use the identifier, and set the read/write bool used in protocol v1 accordingly, also ignore any other VFS functions except read/write/pread/pwrite in v1. Added a first new VFS function for mkdir, which I use for testing and implementing both the sender and receiver for v2.
* Restructure the connect function code to always callJeremy Allison2009-11-301-1/+9
| | | | | | | | down to NEXT-> before initializing. This allows us to do cleanup (by calling DISCONNECT) if initialization fails. Also fix vfs_acl_xattr which was failing to call the NEXT connect function. Jeremy.
* Make the smbd VFS typesafeVolker Lendecke2009-07-241-17/+9
|
* s3: Finish plumbing the fsp->fsp_name smb_fname conversion through the modules.Tim Prouty2009-07-201-8/+10
|
* Enable total anonymization in vfs_smb_traffic_analyzer, by mapping any user ↵Holger Hetterich2009-02-131-5/+16
| | | | names to the one given by anonymize_prefix, without generating a hash number. This setting is optional and is compatible with the module configuration format of Samba 3.3.
* Async wrapper for open_socket_out_send/recvVolker Lendecke2009-01-041-2/+3
|
* open_socket_out is always used with SOCK_STREAM, remove argument "type"Volker Lendecke2009-01-031-1/+1
|
* Fix CID 606 - failed to return -1 after socket() fail.Jeremy Allison2008-10-291-0/+1
| | | | Jeremy.
* Whitespace tidyup and an optimization to remove a talloc.Jeremy Allison2008-10-131-7/+5
| | | | Jeremy.
* Enable optional anonymization of user names,Holger Hetterich2008-10-131-1/+24
| | | | | if the configuration parameter anonymization_prefix is defined in smb.conf, and use the prefix given there.
* Fixed build warning "passing arg from incompatible pointer type"Tim Prouty2008-10-061-1/+3
| | | | | | | | | The fix explicitly makes the conversion from timeval to time_t using the existing time utility functions. Compiling modules/vfs_smb_traffic_analyzer.c modules/vfs_smb_traffic_analyzer.c: In function `smb_traffic_analyzer_send_data': modules/vfs_smb_traffic_analyzer.c:173: warning: passing arg 1 of `localtime' from incompatible pointer type
* Turn the socket connections into a refcounted list - in the common case ↵Jeremy Allison2008-10-011-44/+95
| | | | | | | | | there'll now only be one socket per smbd. Changed the format of the wire data to (a) include a version number (V1) as the first element. (b) removed the ";)" at the end an replaced it with a "\n". Receiver can change back if needed, and now receiver can just log "as-is" to a text file (making testing easier). Added my (C). Sorry Holger, but I've changed quite a bit now. Jeremy.
* Convert to allocated strings. Use write_data(), not send as this doesn't ↵Jeremy Allison2008-09-301-58/+42
| | | | | | | correctly deal with EINTR. Jim and Holger please check this still works. Jeremy.
* Remove current_user_info - not needed.Jeremy Allison2008-09-301-4/+2
| | | | Jeremy.
* Restructure the module so it connects to the remote data sinkJeremy Allison2008-09-301-150/+156
| | | | | | | | on connect, and closes the socket on client disconnect. This should make it much more efficient. Store the remote fd in a private data pointer off the handle. Finally we need to remove the fstrings and convert to allocated buffer storage. Jeremy.
* Use IPv4/v6 independent calls. Change safe_strcpy/cat to strlcpy/cat (thisJeremy Allison2008-09-251-84/+97
| | | | | | needs changing to talloc_sprintf) and fix file descriptor resource leaks in error paths. Jim and Holger please check ! Jeremy.
* Fix the new vfs_smb_traffic_analyzer build for static linksJim McDonough2008-09-241-2/+2
|
View Lorry Controller Status