NegotiateHelper.cs 4.3 KB

123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106
  1. /* Copyright (C) 2017 Tal Aloni <tal.aloni.il@gmail.com>. All rights reserved.
  2. *
  3. * You can redistribute this program and/or modify it under the terms of
  4. * the GNU Lesser Public License as published by the Free Software Foundation,
  5. * either version 3 of the License, or (at your option) any later version.
  6. */
  7. using System;
  8. using System.Collections.Generic;
  9. using SMBLibrary.Authentication.GSSAPI;
  10. using SMBLibrary.SMB2;
  11. using Utilities;
  12. namespace SMBLibrary.Server.SMB2
  13. {
  14. /// <summary>
  15. /// Negotiate helper
  16. /// </summary>
  17. internal class NegotiateHelper
  18. {
  19. public const string SMB2002Dialect = "SMB 2.002";
  20. public const string SMB2xxxDialect = "SMB 2.???";
  21. // Special case - SMB2 client initially connecting using SMB1
  22. internal static SMB2Command GetNegotiateResponse(List<string> smb2Dialects, GSSProvider securityProvider, ConnectionState state, Guid serverGuid, DateTime serverStartTime)
  23. {
  24. NegotiateResponse response = new NegotiateResponse();
  25. response.Header.Credits = 1;
  26. if (smb2Dialects.Contains(SMB2xxxDialect))
  27. {
  28. response.DialectRevision = SMB2Dialect.SMB2xx;
  29. }
  30. else if (smb2Dialects.Contains(SMB2002Dialect))
  31. {
  32. state.Dialect = SMBDialect.SMB202;
  33. response.DialectRevision = SMB2Dialect.SMB202;
  34. }
  35. else
  36. {
  37. throw new ArgumentException("SMB2 dialect is not present");
  38. }
  39. response.SecurityMode = SecurityMode.SigningEnabled;
  40. response.ServerGuid = serverGuid;
  41. response.MaxTransactSize = 65536;
  42. response.MaxReadSize = 65536;
  43. response.MaxWriteSize = 65536;
  44. response.SystemTime = DateTime.Now;
  45. response.ServerStartTime = serverStartTime;
  46. response.SecurityBuffer = securityProvider.GetSPNEGOTokenInitBytes();
  47. return response;
  48. }
  49. internal static SMB2Command GetNegotiateResponse(NegotiateRequest request, GSSProvider securityProvider, ConnectionState state, Guid serverGuid, DateTime serverStartTime)
  50. {
  51. NegotiateResponse response = new NegotiateResponse();
  52. if (request.Dialects.Contains(SMB2Dialect.SMB210))
  53. {
  54. state.Dialect = SMBDialect.SMB210;
  55. response.DialectRevision = SMB2Dialect.SMB210;
  56. }
  57. else if (request.Dialects.Contains(SMB2Dialect.SMB202))
  58. {
  59. state.Dialect = SMBDialect.SMB202;
  60. response.DialectRevision = SMB2Dialect.SMB202;
  61. }
  62. else
  63. {
  64. state.LogToServer(Severity.Verbose, "Negotiate failure: None of the requested SMB2 dialects is supported");
  65. return new ErrorResponse(request.CommandName, NTStatus.STATUS_NOT_SUPPORTED);
  66. }
  67. response.SecurityMode = SecurityMode.SigningEnabled;
  68. response.ServerGuid = serverGuid;
  69. response.MaxTransactSize = 65536;
  70. response.MaxReadSize = 65536;
  71. response.MaxWriteSize = 65536;
  72. response.SystemTime = DateTime.Now;
  73. response.ServerStartTime = serverStartTime;
  74. response.SecurityBuffer = securityProvider.GetSPNEGOTokenInitBytes();
  75. return response;
  76. }
  77. internal static List<string> FindSMB2Dialects(SMBLibrary.SMB1.SMB1Message message)
  78. {
  79. if (message.Commands.Count > 0 && message.Commands[0] is SMBLibrary.SMB1.NegotiateRequest)
  80. {
  81. SMBLibrary.SMB1.NegotiateRequest request = (SMBLibrary.SMB1.NegotiateRequest)message.Commands[0];
  82. return FindSMB2Dialects(request);
  83. }
  84. return new List<string>();
  85. }
  86. internal static List<string> FindSMB2Dialects(SMBLibrary.SMB1.NegotiateRequest request)
  87. {
  88. List<string> result = new List<string>();
  89. if (request.Dialects.Contains(SMB2002Dialect))
  90. {
  91. result.Add(SMB2002Dialect);
  92. }
  93. if (request.Dialects.Contains(SMB2xxxDialect))
  94. {
  95. result.Add(SMB2xxxDialect);
  96. }
  97. return result;
  98. }
  99. }
  100. }