/*
Unix SMB/CIFS implementation.
Printing routines that bridge to spoolss
Copyright (C) Simo Sorce 2010
This program is free software; you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation; either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
You should have received a copy of the GNU General Public License
along with this program. If not, see .
*/
#include "includes.h"
#include "system/filesys.h"
#include "printing.h"
#include "rpc_client/rpc_client.h"
#include "../librpc/gen_ndr/ndr_spoolss_c.h"
#include "rpc_server/rpc_ncacn_np.h"
#include "smbd/globals.h"
#include "../libcli/security/security.h"
#include "smbd/fd_handle.h"
#include "source3/printing/rap_jobid.h"
struct print_file_data {
char *svcname;
char *docname;
char *filename;
struct policy_handle handle;
uint32_t jobid;
uint16_t rap_jobid;
};
uint16_t print_spool_rap_jobid(struct print_file_data *print_file)
{
if (print_file == NULL) {
return 0;
}
return print_file->rap_jobid;
}
void print_spool_terminate(struct connection_struct *conn,
struct print_file_data *print_file);
/***************************************************************************
* Open a Document over spoolss
***************************************************************************/
#define DOCNAME_DEFAULT "Remote Downlevel Document"
NTSTATUS print_spool_open(files_struct *fsp,
const char *fname,
uint64_t current_vuid)
{
const struct loadparm_substitution *lp_sub =
loadparm_s3_global_substitution();
NTSTATUS status;
TALLOC_CTX *tmp_ctx;
struct print_file_data *pf;
struct dcerpc_binding_handle *b = NULL;
struct spoolss_DevmodeContainer devmode_ctr;
struct spoolss_DocumentInfoCtr info_ctr;
struct spoolss_DocumentInfo1 *info1;
int fd = -1;
WERROR werr;
mode_t mask;
tmp_ctx = talloc_new(fsp);
if (!tmp_ctx) {
return NT_STATUS_NO_MEMORY;
}
pf = talloc_zero(fsp, struct print_file_data);
if (!pf) {
status = NT_STATUS_NO_MEMORY;
goto done;
}
pf->svcname = lp_servicename(pf, lp_sub, SNUM(fsp->conn));
/* the document name is derived from the file name.
* "Remote Downlevel Document" is added in front to
* mimic what windows does in this case */
pf->docname = talloc_strdup(pf, DOCNAME_DEFAULT);
if (!pf->docname) {
status = NT_STATUS_NO_MEMORY;
goto done;
}
if (fname) {
const char *p = strrchr(fname, '/');
if (!p) {
p = fname;
}
pf->docname = talloc_asprintf_append(pf->docname, " %s", p);
if (!pf->docname) {
status = NT_STATUS_NO_MEMORY;
goto done;
}
}
/*
* Ok, now we have to open an actual file.
* Here is the reason:
* We want to write the spool job to this file in
* smbd for scalability reason (and also because
* apparently window printer drivers can seek when
* spooling to a file).
* So we first create a file, and then we pass it
* to spoolss in output_file so it can monitor and
* take over once we call EndDocPrinter().
* Of course we will not start writing until
* StartDocPrinter() actually gives the ok.
* smbd spooler files do not include a print jobid
* path component, as the jobid is only known after
* calling StartDocPrinter().
*/
pf->filename = talloc_asprintf(pf, "%s/%sXXXXXX",
lp_path(talloc_tos(),
lp_sub,
SNUM(fsp->conn)),
PRINT_SPOOL_PREFIX);
if (!pf->filename) {
status = NT_STATUS_NO_MEMORY;
goto done;
}
errno = 0;
mask = umask(S_IRWXO | S_IRWXG);
fd = mkstemp(pf->filename);
umask(mask);
if (fd == -1) {
if (errno == EACCES) {
/* Common setup error, force a report. */
DEBUG(0, ("Insufficient permissions "
"to open spool file %s.\n",
pf->filename));
} else {
/* Normal case, report at level 3 and above. */
DEBUG(3, ("can't open spool file %s,\n",
pf->filename));
DEBUGADD(3, ("errno = %d (%s).\n",
errno, strerror(errno)));
}
status = map_nt_error_from_unix(errno);
goto done;
}
/* now open a document over spoolss so that it does
* all printer verification, and eventually assigns
* a job id */
status = rpc_pipe_open_interface(fsp->conn,
&ndr_table_spoolss,
fsp->conn->session_info,
fsp->conn->sconn->remote_address,
fsp->conn->sconn->local_address,
fsp->conn->sconn->msg_ctx,
&fsp->conn->spoolss_pipe);
if (!NT_STATUS_IS_OK(status)) {
goto done;
}
b = fsp->conn->spoolss_pipe->binding_handle;
ZERO_STRUCT(devmode_ctr);
status = dcerpc_spoolss_OpenPrinter(b, pf, pf->svcname,
"RAW", devmode_ctr,
PRINTER_ACCESS_USE,
&pf->handle, &werr);
if (!NT_STATUS_IS_OK(status)) {
goto done;
}
if (!W_ERROR_IS_OK(werr)) {
status = werror_to_ntstatus(werr);
goto done;
}
info1 = talloc(tmp_ctx, struct spoolss_DocumentInfo1);
if (info1 == NULL) {
status = NT_STATUS_NO_MEMORY;
goto done;
}
info1->document_name = pf->docname;
info1->output_file = pf->filename;
info1->datatype = "RAW";
info_ctr.level = 1;
info_ctr.info.info1 = info1;
status = dcerpc_spoolss_StartDocPrinter(b, tmp_ctx,
&pf->handle,
&info_ctr,
&pf->jobid,
&werr);
if (!NT_STATUS_IS_OK(status)) {
goto done;
}
if (!W_ERROR_IS_OK(werr)) {
status = werror_to_ntstatus(werr);
goto done;
}
/* Convert to RAP id. */
pf->rap_jobid = pjobid_to_rap(pf->svcname, pf->jobid);
if (pf->rap_jobid == 0) {
/* No errno around here */
status = NT_STATUS_ACCESS_DENIED;
goto done;
}
/* setup a full fsp */
fsp->fsp_name = synthetic_smb_fname(fsp,
pf->filename,
NULL,
NULL,
0,
0);
if (fsp->fsp_name == NULL) {
status = NT_STATUS_NO_MEMORY;
goto done;
}
if (sys_fstat(fd, &fsp->fsp_name->st, false) != 0) {
status = map_nt_error_from_unix(errno);
goto done;
}
fsp->file_id = vfs_file_id_from_sbuf(fsp->conn, &fsp->fsp_name->st);
fsp_set_fd(fsp, fd);
fsp->vuid = current_vuid;
fsp->fsp_flags.can_lock = false;
fsp->fsp_flags.can_read = false;
fsp->access_mask = FILE_GENERIC_WRITE;
fsp->fsp_flags.can_write = true;
fsp->fsp_flags.modified = false;
fsp->oplock_type = NO_OPLOCK;
fsp->sent_oplock_break = NO_BREAK_SENT;
fsp->fsp_flags.is_directory = false;
fsp->fsp_flags.delete_on_close = false;
fsp->fsp_flags.is_fsa = true;
fsp->print_file = pf;
status = NT_STATUS_OK;
done:
if (!NT_STATUS_IS_OK(status)) {
if (fd != -1) {
close(fd);
if (fsp->print_file) {
unlink(fsp->print_file->filename);
}
}
/* We need to delete the job from spoolss too */
if (pf && pf->jobid) {
print_spool_terminate(fsp->conn, pf);
}
}
talloc_free(tmp_ctx);
return status;
}
int print_spool_write(files_struct *fsp,
const char *data, uint32_t size,
off_t offset, uint32_t *written)
{
SMB_STRUCT_STAT st;
ssize_t n;
int ret;
*written = 0;
/* first of all stat file to find out if it is still there.
* spoolss may have deleted it to signal someone has killed
* the job through it's interface */
if (sys_fstat(fsp_get_io_fd(fsp), &st, false) != 0) {
ret = errno;
DEBUG(3, ("printfile_offset: sys_fstat failed on %s (%s)\n",
fsp_str_dbg(fsp), strerror(ret)));
return ret;
}
/* check if the file is unlinked, this will signal spoolss has
* killed it, just return an error and close the file */
if (st.st_ex_nlink == 0) {
close(fsp_get_io_fd(fsp));
return EBADF;
}
/* When print files go beyond 4GB, the 32-bit offset sent in
* old SMBwrite calls is relative to the current 4GB chunk
* we're writing to.
* Discovered by Sebastian Kloska .
*/
if (offset < 0xffffffff00000000LL) {
offset = (st.st_ex_size & 0xffffffff00000000LL) + offset;
}
n = write_data_at_offset(fsp_get_io_fd(fsp), data, size, offset);
if (n == -1) {
ret = errno;
print_spool_terminate(fsp->conn, fsp->print_file);
} else {
*written = n;
ret = 0;
}
return ret;
}
void print_spool_end(files_struct *fsp, enum file_close_type close_type)
{
NTSTATUS status;
WERROR werr;
struct dcerpc_binding_handle *b = NULL;
if (fsp->fsp_flags.delete_on_close) {
int ret;
/*
* Job was requested to be cancelled by setting
* delete on close so truncate the job file.
* print_job_end() which is called from
* _spoolss_EndDocPrinter() will take
* care of deleting it for us.
*/
ret = ftruncate(fsp_get_io_fd(fsp), 0);
if (ret == -1) {
DBG_ERR("ftruncate failed: %s\n", strerror(errno));
}
}
b = fsp->conn->spoolss_pipe->binding_handle;
switch (close_type) {
case NORMAL_CLOSE:
case SHUTDOWN_CLOSE:
/* this also automatically calls spoolss_EndDocPrinter */
status = dcerpc_spoolss_ClosePrinter(b, fsp->print_file,
&fsp->print_file->handle,
&werr);
if (!NT_STATUS_IS_OK(status) ||
!NT_STATUS_IS_OK(status = werror_to_ntstatus(werr))) {
DEBUG(3, ("Failed to close printer %s [%s]\n",
fsp->print_file->svcname, nt_errstr(status)));
}
break;
case ERROR_CLOSE:
print_spool_terminate(fsp->conn, fsp->print_file);
break;
}
}
void print_spool_terminate(struct connection_struct *conn,
struct print_file_data *print_file)
{
NTSTATUS status;
WERROR werr;
struct dcerpc_binding_handle *b = NULL;
rap_jobid_delete(print_file->svcname, print_file->jobid);
status = rpc_pipe_open_interface(conn,
&ndr_table_spoolss,
conn->session_info,
conn->sconn->remote_address,
conn->sconn->local_address,
conn->sconn->msg_ctx,
&conn->spoolss_pipe);
if (!NT_STATUS_IS_OK(status)) {
DEBUG(0, ("print_spool_terminate: "
"Failed to get spoolss pipe [%s]\n",
nt_errstr(status)));
return;
}
b = conn->spoolss_pipe->binding_handle;
status = dcerpc_spoolss_SetJob(b, print_file,
&print_file->handle,
print_file->jobid,
NULL, SPOOLSS_JOB_CONTROL_DELETE,
&werr);
if (!NT_STATUS_IS_OK(status) ||
!NT_STATUS_IS_OK(status = werror_to_ntstatus(werr))) {
DEBUG(3, ("Failed to delete job %d [%s]\n",
print_file->jobid, nt_errstr(status)));
return;
}
status = dcerpc_spoolss_ClosePrinter(b, print_file,
&print_file->handle,
&werr);
if (!NT_STATUS_IS_OK(status) ||
!NT_STATUS_IS_OK(status = werror_to_ntstatus(werr))) {
DEBUG(3, ("Failed to close printer %s [%s]\n",
print_file->svcname, nt_errstr(status)));
return;
}
}