1023 lines
36 KiB
C
1023 lines
36 KiB
C
|
|
/*************************************************************************
|
|
*
|
|
* wait.c
|
|
*
|
|
* WinStation wait for connection routines
|
|
*
|
|
* Copyright Microsoft Corporation, 1998
|
|
*
|
|
*
|
|
*************************************************************************/
|
|
|
|
/*
|
|
* Includes
|
|
*/
|
|
#include "precomp.h"
|
|
#pragma hdrstop
|
|
|
|
#include "conntfy.h"
|
|
|
|
// These are the maximum lengths of UserName, Password and Domain allowed by Winlogon
|
|
#define MAX_ALLOWED_USERNAME_LEN 255
|
|
#define MAX_ALLOWED_PASSWORD_LEN 126
|
|
#define MAX_ALLOWED_DOMAIN_LEN 255
|
|
|
|
|
|
|
|
/*=============================================================================
|
|
== Data
|
|
=============================================================================*/
|
|
|
|
NTSTATUS
|
|
WinStationInheritSecurityDescriptor(
|
|
PVOID pSecurityDescriptor,
|
|
PWINSTATION pTargetWinStation
|
|
);
|
|
NTSTATUS
|
|
WaitForConsoleConnectWorker( PWINSTATION pWinStation );
|
|
BOOL
|
|
IsKernelDebuggerAttached();
|
|
|
|
|
|
extern PSECURITY_DESCRIPTOR DefaultConsoleSecurityDescriptor;
|
|
|
|
extern WINSTATIONCONFIG2 gConsoleConfig;
|
|
extern HANDLE WinStationIdleControlEvent;
|
|
extern RTL_CRITICAL_SECTION ConsoleLock;
|
|
extern RTL_RESOURCE WinStationSecurityLock;
|
|
|
|
|
|
/*****************************************************************************
|
|
*
|
|
* WaitForConnectWorker
|
|
*
|
|
* Message parameter unmarshalling function for WinStation API.
|
|
*
|
|
* ENTRY:
|
|
* pWinStation (input)
|
|
* Pointer to our WinStation (locked)
|
|
*
|
|
* Note, comes in locked and returned released.
|
|
*
|
|
* EXIT:
|
|
* STATUS_SUCCESS - no error
|
|
*
|
|
****************************************************************************/
|
|
|
|
NTSTATUS
|
|
WaitForConnectWorker( PWINSTATION pWinStation, HANDLE ClientProcessId )
|
|
{
|
|
OBJECT_ATTRIBUTES ObjA;
|
|
ULONG ReturnLength;
|
|
BYTE version;
|
|
ULONG Offset;
|
|
ICA_STACK_LAST_ERROR tdlasterror;
|
|
WINSTATION_APIMSG WMsg;
|
|
BOOLEAN rc;
|
|
NTSTATUS Status;
|
|
BOOLEAN fOwnsConsoleTerminal = FALSE;
|
|
ULONG BytesGot ;
|
|
|
|
#define MODULE_SIZE 1024
|
|
|
|
TRACE((hTrace,TC_ICASRV,TT_API1, "TERMSRV: WaitForConnectWorker, LogonId=%d\n",
|
|
pWinStation->LogonId ));
|
|
|
|
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_INFO_LEVEL, "TERMSRV: WaitForConnectWorker, LogonId=%d\n",pWinStation->LogonId ));
|
|
|
|
/*
|
|
* You only go through this API once
|
|
*/
|
|
if ( !pWinStation->NeverConnected ) {
|
|
ReleaseWinStation( pWinStation );
|
|
#ifdef DBG
|
|
DbgBreakPoint();
|
|
#endif
|
|
return( STATUS_ACCESS_DENIED );
|
|
}
|
|
|
|
// Should really be winlogon only here, however if ntsd is started
|
|
// then the first time we know it's winlogon is here.
|
|
|
|
/*
|
|
* Ensure this is WinLogon calling
|
|
*/
|
|
if ( ClientProcessId != pWinStation->InitialCommandProcessId ) {
|
|
|
|
/*
|
|
* If NTSD is started instead of winlogon, the InitialCommandProcessId is wrong.
|
|
*/
|
|
if ( !pWinStation->InitialProcessSet ) {
|
|
|
|
// need to close handle if already opened
|
|
if ( pWinStation->InitialCommandProcess ) {
|
|
NtClose( pWinStation->InitialCommandProcess );
|
|
pWinStation->InitialCommandProcess = NULL;
|
|
InvalidateTerminateWaitList();
|
|
}
|
|
|
|
pWinStation->InitialCommandProcess = OpenProcess(
|
|
PROCESS_ALL_ACCESS,
|
|
FALSE,
|
|
(DWORD)(UINT_PTR)ClientProcessId );
|
|
|
|
if ( pWinStation->InitialCommandProcess == NULL ) {
|
|
ReleaseWinStation( pWinStation );
|
|
Status = STATUS_ACCESS_DENIED;
|
|
goto done;
|
|
}
|
|
pWinStation->InitialCommandProcessId = ClientProcessId;
|
|
pWinStation->InitialProcessSet = TRUE;
|
|
|
|
}
|
|
else {
|
|
ReleaseWinStation( pWinStation );
|
|
Status = STATUS_SUCCESS;
|
|
goto done;
|
|
}
|
|
}
|
|
else {
|
|
/*
|
|
* Only do this once
|
|
*/
|
|
pWinStation->InitialProcessSet = TRUE;
|
|
}
|
|
|
|
/*
|
|
* Console's work is done
|
|
*/
|
|
|
|
|
|
/*
|
|
* At this point the create is done.
|
|
*/
|
|
if (pWinStation->CreateEvent != NULL) {
|
|
NtSetEvent( pWinStation->CreateEvent, NULL );
|
|
}
|
|
|
|
|
|
/*
|
|
* At this point The session may be terminating. If this is
|
|
* the case, fail the call now.
|
|
*/
|
|
|
|
if ( pWinStation->Terminating ) {
|
|
ReleaseWinStation( pWinStation );
|
|
Status = STATUS_CTX_CLOSE_PENDING;
|
|
goto done;
|
|
}
|
|
|
|
|
|
/*
|
|
* We are going to wait for a connect (Idle)
|
|
*/
|
|
memset( &WMsg, 0, sizeof(WMsg) );
|
|
pWinStation->State = State_Idle;
|
|
NotifySystemEvent( WEVENT_STATECHANGE );
|
|
|
|
/*
|
|
* Initialize connect event to wait on
|
|
*/
|
|
InitializeObjectAttributes( &ObjA, NULL, 0, NULL, NULL );
|
|
Status = NtCreateEvent( &pWinStation->ConnectEvent, EVENT_ALL_ACCESS, &ObjA,
|
|
NotificationEvent, FALSE );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* OK, now wait for a connection
|
|
*/
|
|
UnlockWinStation( pWinStation );
|
|
Status = NtWaitForSingleObject( pWinStation->ConnectEvent, FALSE, NULL );
|
|
rc = RelockWinStation( pWinStation );
|
|
|
|
if ( !NT_SUCCESS(Status) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
goto done;
|
|
|
|
}
|
|
|
|
fOwnsConsoleTerminal = pWinStation->fOwnsConsoleTerminal;
|
|
|
|
if (pWinStation->ConnectEvent) {
|
|
NtClose( pWinStation->ConnectEvent );
|
|
pWinStation->ConnectEvent = NULL;
|
|
}
|
|
if ( !rc || pWinStation->Terminating ) {
|
|
ReleaseWinStation( pWinStation );
|
|
Status = STATUS_CTX_CLOSE_PENDING;
|
|
goto done;
|
|
}
|
|
|
|
// if this is a connect to the console session, Do all the console specific.
|
|
if (fOwnsConsoleTerminal) {
|
|
Status = WaitForConsoleConnectWorker( pWinStation );
|
|
ReleaseWinStation( pWinStation );
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Reset the broken connection Flag.
|
|
*
|
|
*/
|
|
|
|
pWinStation->StateFlags &= ~WSF_ST_BROKEN_CONNECTION;
|
|
|
|
|
|
|
|
/*
|
|
* Duplicate the beep channel.
|
|
* This is one channel that both CSR and ICASRV have open.
|
|
*/
|
|
Status = IcaChannelOpen( pWinStation->hIca,
|
|
Channel_Beep,
|
|
NULL,
|
|
&pWinStation->hIcaBeepChannel );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationWaitForConnect, LogonId=%d, IcaChannelOpen 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
Status = NtDuplicateObject( NtCurrentProcess(),
|
|
pWinStation->hIcaBeepChannel,
|
|
pWinStation->WindowsSubSysProcess,
|
|
&WMsg.u.DoConnect.hIcaBeepChannel,
|
|
0,
|
|
0,
|
|
DUPLICATE_SAME_ACCESS );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationWaitForConnect, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Duplicate the thinwire channel.
|
|
* This is one channel that both CSR and ICASRV have open.
|
|
*/
|
|
Status = IcaChannelOpen( pWinStation->hIca,
|
|
Channel_Virtual,
|
|
VIRTUAL_THINWIRE,
|
|
&pWinStation->hIcaThinwireChannel );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationWaitForConnect, LogonId=%d, IcaChannelOpen 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
Status = NtDuplicateObject( NtCurrentProcess(),
|
|
pWinStation->hIcaThinwireChannel,
|
|
pWinStation->WindowsSubSysProcess,
|
|
&WMsg.u.DoConnect.hIcaThinwireChannel,
|
|
0,
|
|
0,
|
|
DUPLICATE_SAME_ACCESS );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationWaitForConnect, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
Status = IcaChannelIoControl( pWinStation->hIcaThinwireChannel,
|
|
IOCTL_ICA_CHANNEL_ENABLE_SHADOW,
|
|
NULL, 0, NULL, 0, NULL );
|
|
ASSERT( NT_SUCCESS( Status ) );
|
|
|
|
/*
|
|
* Video channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Video,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaVideoChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationOpenChannel, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Keyboard channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Keyboard,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaKeyboardChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationOpenChannel, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Mouse channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Mouse,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaMouseChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationOpenChannel, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Command channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Command,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaCommandChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WinStationOpenChannel, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
|
|
/*
|
|
* Secure any virtual channels
|
|
*/
|
|
VirtualChannelSecurity( pWinStation );
|
|
|
|
/*
|
|
* Client specific connection extension completion
|
|
*/
|
|
if ( pWinStation->pWsx &&
|
|
pWinStation->pWsx->pWsxInitializeClientData ) {
|
|
|
|
Status = pWinStation->pWsx->pWsxInitializeClientData( pWinStation->pWsxContext,
|
|
pWinStation->hStack,
|
|
pWinStation->hIca,
|
|
pWinStation->hIcaThinwireChannel,
|
|
pWinStation->VideoModuleName,
|
|
sizeof(pWinStation->VideoModuleName),
|
|
&pWinStation->Config.Config.User,
|
|
&pWinStation->Client.HRes,
|
|
&pWinStation->Client.VRes,
|
|
&pWinStation->Client.ColorDepth,
|
|
&WMsg.u.DoConnect );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
goto done;
|
|
}
|
|
|
|
if (pWinStation->LogonId == 0 || g_bPersonalTS) {
|
|
if (pWinStation->hWinmmConsoleAudioEvent) {
|
|
if (pWinStation->Client.fRemoteConsoleAudio) {
|
|
// Set the console audio event - means console audio can be remoted
|
|
SetEvent(pWinStation->hWinmmConsoleAudioEvent);
|
|
}
|
|
else {
|
|
// Set the console audio event - means console audio can't be remoted
|
|
ResetEvent(pWinStation->hWinmmConsoleAudioEvent);
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
/* Get long UserNames and Password now */
|
|
if ( pWinStation->pWsx &&
|
|
pWinStation->pWsx->pWsxEscape ) {
|
|
|
|
pWinStation->pNewClientCredentials = MemAlloc( sizeof(ExtendedClientCredentials) );
|
|
if (pWinStation->pNewClientCredentials == NULL) {
|
|
ReleaseWinStation( pWinStation );
|
|
goto done;
|
|
}
|
|
|
|
Status = pWinStation->pWsx->pWsxEscape( pWinStation->pWsxContext,
|
|
GET_LONG_USERNAME,
|
|
NULL,
|
|
0,
|
|
pWinStation->pNewClientCredentials,
|
|
sizeof(ExtendedClientCredentials),
|
|
&BytesGot) ;
|
|
|
|
if (NT_SUCCESS(Status)) {
|
|
|
|
// WsxEscape for GET_LONG_USERNAME succeeded
|
|
|
|
// Check if u need the ExtendedClientCredentials - the common case is short UserName and
|
|
// short password - so optimize the common case
|
|
|
|
if ( (wcslen(pWinStation->pNewClientCredentials->UserName) <= USERNAME_LENGTH) &&
|
|
(wcslen(pWinStation->pNewClientCredentials->Password) <= PASSWORD_LENGTH) &&
|
|
(wcslen(pWinStation->pNewClientCredentials->Domain) <= DOMAIN_LENGTH) ) {
|
|
|
|
// We can use the old credentials itself
|
|
MemFree(pWinStation->pNewClientCredentials);
|
|
pWinStation->pNewClientCredentials = NULL ;
|
|
}
|
|
|
|
// Winlogon does not allow > 126 chars for Password and > 255 chars for UserName and Domain in some code paths
|
|
// So we have to use the old truncated credentials in case the extended credentials exceed these limits
|
|
|
|
if (pWinStation->pNewClientCredentials != NULL) {
|
|
|
|
if (wcslen(pWinStation->pNewClientCredentials->UserName) > MAX_ALLOWED_USERNAME_LEN) {
|
|
wcscpy(pWinStation->pNewClientCredentials->UserName, pWinStation->Config.Config.User.UserName);
|
|
}
|
|
if (wcslen(pWinStation->pNewClientCredentials->Password) > MAX_ALLOWED_PASSWORD_LEN) {
|
|
wcscpy(pWinStation->pNewClientCredentials->Password, pWinStation->Config.Config.User.Password);
|
|
}
|
|
if (wcslen(pWinStation->pNewClientCredentials->Domain) > MAX_ALLOWED_DOMAIN_LEN) {
|
|
wcscpy(pWinStation->pNewClientCredentials->Domain, pWinStation->Config.Config.User.Domain);
|
|
}
|
|
}
|
|
} else {
|
|
// WsxEscape for GET_LONG_USERNAME failed
|
|
MemFree(pWinStation->pNewClientCredentials);
|
|
pWinStation->pNewClientCredentials = NULL ;
|
|
}
|
|
|
|
}
|
|
|
|
/*
|
|
* Store WinStation name in connect msg
|
|
*/
|
|
RtlCopyMemory( WMsg.u.DoConnect.WinStationName,
|
|
pWinStation->WinStationName,
|
|
sizeof(WINSTATIONNAME) );
|
|
|
|
/*
|
|
* KLUDGE ALERT!!
|
|
* The Wsx initializes AudioDriverName in the DoConnect struct.
|
|
* However, we need to save it for later use during reconnect,
|
|
* so we now copy it into the WinStation->Client struct.
|
|
* (This field was NOT not initialized during the earlier
|
|
* IOCTL_ICA_STACK_QUERY_CLIENT call.)
|
|
*/
|
|
RtlCopyMemory( pWinStation->Client.AudioDriverName,
|
|
WMsg.u.DoConnect.AudioDriverName,
|
|
sizeof( pWinStation->Client.AudioDriverName ) );
|
|
|
|
|
|
|
|
|
|
|
|
/*
|
|
* Store protocol and Display driver name in WINSTATION since we may need them later for reconnect.
|
|
*/
|
|
|
|
memset(pWinStation->ProtocolName, 0, sizeof(pWinStation->ProtocolName));
|
|
memcpy(pWinStation->ProtocolName, WMsg.u.DoConnect.ProtocolName, sizeof(pWinStation->ProtocolName) - sizeof(WCHAR));
|
|
|
|
memset(pWinStation->DisplayDriverName, 0, sizeof(pWinStation->DisplayDriverName));
|
|
memcpy(pWinStation->DisplayDriverName, WMsg.u.DoConnect.DisplayDriverName, sizeof(pWinStation->DisplayDriverName) - sizeof(WCHAR));
|
|
|
|
/*
|
|
* Save protocol type, screen resolution, and color depth
|
|
*/
|
|
WMsg.u.DoConnect.HRes = pWinStation->Client.HRes;
|
|
WMsg.u.DoConnect.VRes = pWinStation->Client.VRes;
|
|
WMsg.u.DoConnect.ProtocolType = pWinStation->Client.ProtocolType;
|
|
|
|
/*
|
|
* Translate the color to the format excpected in winsrv
|
|
*/
|
|
|
|
switch(pWinStation->Client.ColorDepth){
|
|
case 1:
|
|
WMsg.u.DoConnect.ColorDepth=4 ; // 16 colors
|
|
break;
|
|
case 2:
|
|
WMsg.u.DoConnect.ColorDepth=8 ; // 256
|
|
break;
|
|
case 4:
|
|
WMsg.u.DoConnect.ColorDepth= 16;// 64K
|
|
break;
|
|
case 8:
|
|
WMsg.u.DoConnect.ColorDepth= 24;// 16M
|
|
break;
|
|
#define DC_HICOLOR
|
|
#ifdef DC_HICOLOR
|
|
case 16:
|
|
WMsg.u.DoConnect.ColorDepth= 15;// 32K
|
|
break;
|
|
#endif
|
|
default:
|
|
WMsg.u.DoConnect.ColorDepth=8 ;
|
|
break;
|
|
}
|
|
|
|
|
|
WMsg.u.DoConnect.KeyboardType = pWinStation->Client.KeyboardType;
|
|
WMsg.u.DoConnect.KeyboardSubType = pWinStation->Client.KeyboardSubType;
|
|
WMsg.u.DoConnect.KeyboardFunctionKey = pWinStation->Client.KeyboardFunctionKey;
|
|
|
|
|
|
/*
|
|
* Tell Win32 about the connection
|
|
*/
|
|
|
|
WMsg.ApiNumber = SMWinStationDoConnect;
|
|
|
|
Status = SendWinStationCommand( pWinStation, &WMsg, 600 );
|
|
|
|
TRACE((hTrace,TC_ICASRV,TT_API1,"TERMSRV: SMWinStationDoConnect %d Status=0x%x\n",
|
|
pWinStation->LogonId, Status));
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
ReleaseWinStation( pWinStation );
|
|
goto done;
|
|
} else {
|
|
pWinStation->StateFlags |= WSF_ST_CONNECTED_TO_CSRSS;
|
|
|
|
}
|
|
|
|
//
|
|
//Set session time zone information.
|
|
//
|
|
#ifdef TERMSRV_USE_CLIENT_TIME_ZONE
|
|
{
|
|
WINSTATION_APIMSG TimezoneMsg;
|
|
memset( &TimezoneMsg, 0, sizeof(TimezoneMsg) );
|
|
|
|
TimezoneMsg.ApiNumber = SMWinStationSetTimeZone;
|
|
memcpy(&(TimezoneMsg.u.SetTimeZone.TimeZone),&(pWinStation->Client.ClientTimeZone),
|
|
sizeof(TS_TIME_ZONE_INFORMATION));
|
|
|
|
SendWinStationCommand( pWinStation, &TimezoneMsg, 600 );
|
|
|
|
}
|
|
#endif
|
|
/*
|
|
* Indicate we're now connected. Only after succesful connection to Win32/CSR.
|
|
*/
|
|
pWinStation->NeverConnected = FALSE;
|
|
|
|
|
|
/*
|
|
* Check if we received a broken connection indication while connecting to to Win32/CSR.
|
|
*/
|
|
|
|
if (pWinStation->StateFlags & WSF_ST_BROKEN_CONNECTION) {
|
|
QueueWinStationReset(pWinStation->LogonId);
|
|
Status = STATUS_CTX_CLOSE_PENDING;
|
|
ReleaseWinStation( pWinStation );
|
|
goto done;
|
|
}
|
|
|
|
|
|
/*
|
|
* Set connect time and start disconnect timer
|
|
*/
|
|
NtQuerySystemTime( &pWinStation->ConnectTime );
|
|
|
|
/*
|
|
* Attempt to connect to the CdmRedirector
|
|
* for Client Drive Mapping
|
|
*
|
|
* NOTE: We still init the WinStation even if Client Drive
|
|
* mapping does not connect.
|
|
*/
|
|
if ( pWinStation->pWsx &&
|
|
pWinStation->pWsx->pWsxCdmConnect ) {
|
|
Status = pWinStation->pWsx->pWsxCdmConnect( pWinStation->pWsxContext,
|
|
pWinStation->LogonId,
|
|
pWinStation->hIca );
|
|
}
|
|
|
|
TRACE((hTrace,TC_ICASRV,TT_API1,"TERMSRV: CdmConnect %d Status=0x%x\n",
|
|
pWinStation->LogonId, Status));
|
|
|
|
Status = STATUS_SUCCESS;
|
|
|
|
|
|
pWinStation->State = State_Connected;
|
|
NotifySystemEvent( WEVENT_CONNECT | WEVENT_STATECHANGE );
|
|
|
|
|
|
Status = NotifyConnect(pWinStation, fOwnsConsoleTerminal);
|
|
if ( !NT_SUCCESS(Status) ) {
|
|
DBGPRINT(( "TERMSRV: NotifyConsoleConnect failed Status= 0x%x\n", Status));
|
|
}
|
|
|
|
/*
|
|
* Release WinStation
|
|
*/
|
|
ReleaseWinStation( pWinStation );
|
|
|
|
|
|
|
|
done:
|
|
|
|
/*
|
|
* Failure here will cause Winlogon to terminate the session. If we are failing
|
|
* the console session, let wake up the IdleControlThread, he may have to create
|
|
* a new console session.
|
|
*/
|
|
if (!NT_SUCCESS( Status ) && fOwnsConsoleTerminal) {
|
|
NtSetEvent(WinStationIdleControlEvent, NULL);
|
|
}
|
|
|
|
|
|
return( Status );
|
|
}
|
|
|
|
// Since the physical console does not have a real client, init data to some defaults
|
|
void InitializeConsoleClientData( PWINSTATIONCLIENTW pWC )
|
|
{
|
|
pWC->fTextOnly = FALSE;
|
|
pWC->fDisableCtrlAltDel = FALSE;
|
|
pWC->fMouse = TRUE;
|
|
pWC->fDoubleClickDetect = FALSE;
|
|
pWC->fINetClient = FALSE;
|
|
pWC->fPromptForPassword = FALSE;
|
|
pWC->fMaximizeShell = TRUE;
|
|
pWC->fEnableWindowsKey = TRUE;
|
|
pWC->fRemoteConsoleAudio= FALSE;
|
|
|
|
wcscpy( pWC->ClientName , L"");
|
|
wcscpy( pWC->Domain , L"");
|
|
wcscpy( pWC->UserName , L"");
|
|
wcscpy( pWC->Password , L"");
|
|
wcscpy( pWC->WorkDirectory , L"");
|
|
wcscpy( pWC->InitialProgram , L"");
|
|
|
|
pWC->SerialNumber = 0; // client computer unique serial number
|
|
pWC->EncryptionLevel = 3; // security level of encryption pd
|
|
pWC->ClientAddressFamily = 0;
|
|
|
|
wcscpy( pWC->ClientAddress , L"");
|
|
|
|
pWC->HRes = 640;
|
|
pWC->VRes = 480;
|
|
pWC->ColorDepth = 0x2;
|
|
pWC->ProtocolType = PROTOCOL_CONSOLE ;
|
|
pWC->KeyboardLayout = 0;
|
|
pWC->KeyboardType = 0;
|
|
pWC->KeyboardSubType = 0;
|
|
pWC->KeyboardFunctionKey = 0;
|
|
|
|
wcscpy( pWC->imeFileName , L"");
|
|
wcscpy( pWC->ClientDirectory, L"");
|
|
wcscpy( pWC->ClientLicense , L"");
|
|
wcscpy( pWC->ClientModem , L"");
|
|
|
|
pWC->ClientBuildNumber = 0;
|
|
pWC->ClientHardwareId = 0; // client software serial number
|
|
pWC->ClientProductId = 0; // client software product id
|
|
pWC->OutBufCountHost = 0; // number of outbufs on host
|
|
pWC->OutBufCountClient = 0; // number of outbufs on client
|
|
pWC->OutBufLength = 0; // length of outbufs in bytes
|
|
|
|
wcscpy( pWC->AudioDriverName, L"" );
|
|
|
|
pWC->ClientSessionId = LOGONID_NONE;
|
|
|
|
{
|
|
//This time zone information is invalid
|
|
//using it we set BaseSrvpStaticServerData->TermsrvClientTimeZoneId to
|
|
//TIME_ZONE_ID_INVALID!
|
|
TS_TIME_ZONE_INFORMATION InvalidTZ={0,L"",
|
|
{0,10,0,6/*this number makes it invalid; day numbers >5 not allowed*/,0,0,0,0},0,L"",
|
|
{0,4,0,6/*this number makes it invalid*/,0,0,0,0},0};
|
|
|
|
memcpy(&(pWC->ClientTimeZone), &InvalidTZ,
|
|
sizeof(TS_TIME_ZONE_INFORMATION));
|
|
}
|
|
|
|
pWC->clientDigProductId[0] = 0;
|
|
}
|
|
|
|
BOOLEAN gConsoleNeverConnected = TRUE;
|
|
|
|
NTSTATUS
|
|
WaitForConsoleConnectWorker( PWINSTATION pWinStation )
|
|
{
|
|
OBJECT_ATTRIBUTES ObjA;
|
|
ULONG ReturnLength;
|
|
BYTE version;
|
|
ULONG Offset;
|
|
ICA_STACK_LAST_ERROR tdlasterror;
|
|
WINSTATION_APIMSG WMsg;
|
|
BOOLEAN rc;
|
|
NTSTATUS Status;
|
|
|
|
#define MODULE_SIZE 1024
|
|
|
|
TRACE((hTrace,TC_ICASRV,TT_API1, "TERMSRV: WaitForConnectWorker, LogonId=%d\n",
|
|
pWinStation->LogonId ));
|
|
|
|
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_INFO_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d\n", pWinStation->LogonId ));
|
|
|
|
if (pWinStation->LogonId == 0) {
|
|
/*
|
|
* We need to acquire console lock. UnLock winstation first to avoid deadlock.
|
|
*/
|
|
|
|
UnlockWinStation( pWinStation );
|
|
ENTERCRIT( &ConsoleLock );
|
|
if (!RelockWinStation( pWinStation )) {
|
|
LEAVECRIT( &ConsoleLock );
|
|
return STATUS_CTX_WINSTATION_NOT_FOUND;
|
|
}
|
|
|
|
/*
|
|
* You only go through this API once for console session.
|
|
*/
|
|
if (!gConsoleNeverConnected) {
|
|
LEAVECRIT( &ConsoleLock );
|
|
return STATUS_SUCCESS;
|
|
}
|
|
}
|
|
|
|
|
|
if (!pWinStation->pSecurityDescriptor && pWinStation->LogonId) {
|
|
RtlAcquireResourceShared(&WinStationSecurityLock, TRUE);
|
|
Status = RtlCopySecurityDescriptor(DefaultConsoleSecurityDescriptor,
|
|
&(pWinStation->pSecurityDescriptor));
|
|
RtlReleaseResource(&WinStationSecurityLock);
|
|
}
|
|
|
|
|
|
|
|
// Read console config,
|
|
// For the session 0, this was already initalized in WinStationCreateWorker()
|
|
|
|
if (pWinStation->LogonId != 0) {
|
|
|
|
pWinStation->Config = gConsoleConfig;
|
|
|
|
// initalize client data, since there isn't any real rdp client sending anythhing to us
|
|
InitializeConsoleClientData( & pWinStation->Client );
|
|
}
|
|
|
|
|
|
/*
|
|
* We are going to wait for a connect (Idle)
|
|
*/
|
|
memset( &WMsg, 0, sizeof(WMsg) );
|
|
pWinStation->State = State_ConnectQuery;
|
|
NotifySystemEvent( WEVENT_STATECHANGE );
|
|
|
|
/*
|
|
* Initialize connect event to wait on
|
|
*/
|
|
InitializeObjectAttributes( &ObjA, NULL, 0, NULL, NULL );
|
|
if (pWinStation->ConnectEvent == NULL) {
|
|
Status = NtCreateEvent( &pWinStation->ConnectEvent, EVENT_ALL_ACCESS, &ObjA,
|
|
NotificationEvent, FALSE );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, NtCreateEvent 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
* Duplicate the beep channel.
|
|
* This is one channel that both CSR and ICASRV have open.
|
|
*/
|
|
if (pWinStation->hIcaBeepChannel == NULL) {
|
|
Status = IcaChannelOpen( pWinStation->hIca,
|
|
Channel_Beep,
|
|
NULL,
|
|
&pWinStation->hIcaBeepChannel );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, IcaChannelOpen 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
}
|
|
|
|
Status = NtDuplicateObject( NtCurrentProcess(),
|
|
pWinStation->hIcaBeepChannel,
|
|
pWinStation->WindowsSubSysProcess,
|
|
&WMsg.u.DoConnect.hIcaBeepChannel,
|
|
0,
|
|
0,
|
|
DUPLICATE_SAME_ACCESS );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Duplicate the thinwire channel.
|
|
* This is one channel that both CSR and ICASRV have open.
|
|
*/
|
|
if (pWinStation->hIcaThinwireChannel == NULL) {
|
|
Status = IcaChannelOpen( pWinStation->hIca,
|
|
Channel_Virtual,
|
|
VIRTUAL_THINWIRE,
|
|
&pWinStation->hIcaThinwireChannel );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, IcaChannelOpen 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
}
|
|
|
|
Status = NtDuplicateObject( NtCurrentProcess(),
|
|
pWinStation->hIcaThinwireChannel,
|
|
pWinStation->WindowsSubSysProcess,
|
|
&WMsg.u.DoConnect.hIcaThinwireChannel,
|
|
0,
|
|
0,
|
|
DUPLICATE_SAME_ACCESS );
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
Status = IcaChannelIoControl( pWinStation->hIcaThinwireChannel,
|
|
IOCTL_ICA_CHANNEL_ENABLE_SHADOW,
|
|
NULL, 0, NULL, 0, NULL );
|
|
ASSERT( NT_SUCCESS( Status ) );
|
|
|
|
/*
|
|
* Video channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Video,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaVideoChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Keyboard channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Keyboard,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaKeyboardChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Mouse channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Mouse,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaMouseChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
/*
|
|
* Command channel
|
|
*/
|
|
Status = WinStationOpenChannel( pWinStation->hIca,
|
|
pWinStation->WindowsSubSysProcess,
|
|
Channel_Command,
|
|
NULL,
|
|
&WMsg.u.DoConnect.hIcaCommandChannel );
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker, LogonId=%d, NtDuplicateObject 0x%x\n",
|
|
pWinStation->LogonId, Status ));
|
|
goto done;
|
|
}
|
|
|
|
|
|
if (!pWinStation->LogonId) {
|
|
goto SkipClientData;
|
|
}
|
|
/*
|
|
* Secure any virtual channels
|
|
*/
|
|
VirtualChannelSecurity( pWinStation );
|
|
|
|
/*
|
|
* Tell Win32 about the connection
|
|
*/
|
|
|
|
WMsg.u.DoConnect.fEnableWindowsKey = (BOOLEAN) pWinStation->Client.fEnableWindowsKey;
|
|
SkipClientData:
|
|
WMsg.ApiNumber = SMWinStationDoConnect;
|
|
|
|
Status = SendWinStationCommand( pWinStation, &WMsg, 600 );
|
|
|
|
TRACE((hTrace,TC_ICASRV,TT_API1,"TERMSRV: SMWinStationDoConnect %d Status=0x%x\n",
|
|
pWinStation->LogonId, Status));
|
|
|
|
if ( !NT_SUCCESS( Status ) ) {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_ERROR_LEVEL, "TERMSRV: WaitForConsoleConnectWorker SMWinStationDoConnect failed Status= 0x%x\n", Status));
|
|
goto done;
|
|
} else {
|
|
KdPrintEx((DPFLTR_TERMSRV_ID, DPFLTR_INFO_LEVEL, "TERMSRV: WaitForConsoleConnectWorker SMWinStationDoConnect OK\n"));
|
|
pWinStation->StateFlags |= WSF_ST_CONNECTED_TO_CSRSS;
|
|
if (pWinStation->LogonId == 0) {
|
|
gConsoleNeverConnected=FALSE;
|
|
}
|
|
|
|
}
|
|
|
|
|
|
/*
|
|
* Indicate we're now connected. Only after succesful connection to Win32/CSR.
|
|
*/
|
|
pWinStation->NeverConnected = FALSE;
|
|
|
|
|
|
/*
|
|
* Check if we received a broken connection indication while connecting to to Win32/CSR.
|
|
*/
|
|
|
|
if (pWinStation->StateFlags & WSF_ST_BROKEN_CONNECTION) {
|
|
QueueWinStationReset(pWinStation->LogonId);
|
|
Status = STATUS_CTX_CLOSE_PENDING;
|
|
goto done;
|
|
}
|
|
|
|
|
|
/*
|
|
* Set connect time and start disconnect timer
|
|
*/
|
|
NtQuerySystemTime( &pWinStation->ConnectTime );
|
|
|
|
/*
|
|
* Attempt to connect to the CdmRedirector
|
|
* for Client Drive Mapping
|
|
*
|
|
* NOTE: We still init the WinStation even if Client Drive
|
|
* mapping does not connect.
|
|
*/
|
|
if ( pWinStation->pWsx &&
|
|
pWinStation->pWsx->pWsxCdmConnect ) {
|
|
Status = pWinStation->pWsx->pWsxCdmConnect( pWinStation->pWsxContext,
|
|
pWinStation->LogonId,
|
|
pWinStation->hIca );
|
|
}
|
|
|
|
TRACE((hTrace,TC_ICASRV,TT_API1,"TERMSRV: CdmConnect %d Status=0x%x\n",
|
|
pWinStation->LogonId, Status));
|
|
|
|
Status = STATUS_SUCCESS;
|
|
|
|
/*
|
|
* Start logon timers
|
|
*/
|
|
StartLogonTimers( pWinStation );
|
|
|
|
pWinStation->State = State_Connected;
|
|
NotifySystemEvent( WEVENT_CONNECT | WEVENT_STATECHANGE );
|
|
|
|
Status = NotifyConnect(pWinStation, pWinStation->fOwnsConsoleTerminal);
|
|
if ( !NT_SUCCESS(Status) ) {
|
|
DBGPRINT(( "TERMSRV: NotifyConsoleConnect failed Status= 0x%x\n", Status));
|
|
}
|
|
|
|
|
|
done:
|
|
//
|
|
// Set the licensing policy for the console session. This must be done
|
|
// to prevent a weird state when a console session goes remote. This must
|
|
// Done weither wi faill or succeed. Licensing code assumes the policy is
|
|
// set.
|
|
//
|
|
if (pWinStation->LogonId == 0) {
|
|
LEAVECRIT( &ConsoleLock );
|
|
}
|
|
LCAssignPolicy(pWinStation);
|
|
|
|
return( Status );
|
|
}
|