[136] | 1 | /*
|
---|
| 2 | Unix SMB/CIFS implementation.
|
---|
| 3 |
|
---|
| 4 | dsgetdcname
|
---|
| 5 |
|
---|
| 6 | Copyright (C) Gerald Carter 2006
|
---|
| 7 | Copyright (C) Guenther Deschner 2007-2008
|
---|
| 8 |
|
---|
| 9 | This program is free software; you can redistribute it and/or modify
|
---|
| 10 | it under the terms of the GNU General Public License as published by
|
---|
| 11 | the Free Software Foundation; either version 3 of the License, or
|
---|
| 12 | (at your option) any later version.
|
---|
| 13 |
|
---|
| 14 | This program is distributed in the hope that it will be useful,
|
---|
| 15 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
---|
| 16 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
---|
| 17 | GNU General Public License for more details.
|
---|
| 18 |
|
---|
| 19 | You should have received a copy of the GNU General Public License
|
---|
| 20 | along with this program. If not, see <http://www.gnu.org/licenses/>.
|
---|
| 21 | */
|
---|
| 22 |
|
---|
| 23 | #include "includes.h"
|
---|
| 24 |
|
---|
| 25 | #define DSGETDCNAME_FMT "DSGETDCNAME/DOMAIN/%s"
|
---|
| 26 | /* 15 minutes */
|
---|
| 27 | #define DSGETDCNAME_CACHE_TTL 60*15
|
---|
| 28 |
|
---|
| 29 | struct ip_service_name {
|
---|
| 30 | struct sockaddr_storage ss;
|
---|
| 31 | unsigned port;
|
---|
| 32 | const char *hostname;
|
---|
| 33 | };
|
---|
| 34 |
|
---|
| 35 | static NTSTATUS make_dc_info_from_cldap_reply(TALLOC_CTX *mem_ctx,
|
---|
| 36 | uint32_t flags,
|
---|
| 37 | struct sockaddr_storage *ss,
|
---|
| 38 | uint32_t nt_version,
|
---|
| 39 | union nbt_cldap_netlogon *r,
|
---|
| 40 | struct netr_DsRGetDCNameInfo **info);
|
---|
| 41 |
|
---|
| 42 | /****************************************************************
|
---|
| 43 | ****************************************************************/
|
---|
| 44 |
|
---|
| 45 | void debug_dsdcinfo_flags(int lvl, uint32_t flags)
|
---|
| 46 | {
|
---|
| 47 | DEBUG(lvl,("debug_dsdcinfo_flags: 0x%08x\n\t", flags));
|
---|
| 48 |
|
---|
| 49 | if (flags & DS_FORCE_REDISCOVERY)
|
---|
| 50 | DEBUGADD(lvl,("DS_FORCE_REDISCOVERY "));
|
---|
| 51 | if (flags & 0x000000002)
|
---|
| 52 | DEBUGADD(lvl,("0x00000002 "));
|
---|
| 53 | if (flags & 0x000000004)
|
---|
| 54 | DEBUGADD(lvl,("0x00000004 "));
|
---|
| 55 | if (flags & 0x000000008)
|
---|
| 56 | DEBUGADD(lvl,("0x00000008 "));
|
---|
| 57 | if (flags & DS_DIRECTORY_SERVICE_REQUIRED)
|
---|
| 58 | DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_REQUIRED "));
|
---|
| 59 | if (flags & DS_DIRECTORY_SERVICE_PREFERRED)
|
---|
| 60 | DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_PREFERRED "));
|
---|
| 61 | if (flags & DS_GC_SERVER_REQUIRED)
|
---|
| 62 | DEBUGADD(lvl,("DS_GC_SERVER_REQUIRED "));
|
---|
| 63 | if (flags & DS_PDC_REQUIRED)
|
---|
| 64 | DEBUGADD(lvl,("DS_PDC_REQUIRED "));
|
---|
| 65 | if (flags & DS_BACKGROUND_ONLY)
|
---|
| 66 | DEBUGADD(lvl,("DS_BACKGROUND_ONLY "));
|
---|
| 67 | if (flags & DS_IP_REQUIRED)
|
---|
| 68 | DEBUGADD(lvl,("DS_IP_REQUIRED "));
|
---|
| 69 | if (flags & DS_KDC_REQUIRED)
|
---|
| 70 | DEBUGADD(lvl,("DS_KDC_REQUIRED "));
|
---|
| 71 | if (flags & DS_TIMESERV_REQUIRED)
|
---|
| 72 | DEBUGADD(lvl,("DS_TIMESERV_REQUIRED "));
|
---|
| 73 | if (flags & DS_WRITABLE_REQUIRED)
|
---|
| 74 | DEBUGADD(lvl,("DS_WRITABLE_REQUIRED "));
|
---|
| 75 | if (flags & DS_GOOD_TIMESERV_PREFERRED)
|
---|
| 76 | DEBUGADD(lvl,("DS_GOOD_TIMESERV_PREFERRED "));
|
---|
| 77 | if (flags & DS_AVOID_SELF)
|
---|
| 78 | DEBUGADD(lvl,("DS_AVOID_SELF "));
|
---|
| 79 | if (flags & DS_ONLY_LDAP_NEEDED)
|
---|
| 80 | DEBUGADD(lvl,("DS_ONLY_LDAP_NEEDED "));
|
---|
| 81 | if (flags & DS_IS_FLAT_NAME)
|
---|
| 82 | DEBUGADD(lvl,("DS_IS_FLAT_NAME "));
|
---|
| 83 | if (flags & DS_IS_DNS_NAME)
|
---|
| 84 | DEBUGADD(lvl,("DS_IS_DNS_NAME "));
|
---|
| 85 | if (flags & 0x00040000)
|
---|
| 86 | DEBUGADD(lvl,("0x00040000 "));
|
---|
| 87 | if (flags & 0x00080000)
|
---|
| 88 | DEBUGADD(lvl,("0x00080000 "));
|
---|
| 89 | if (flags & 0x00100000)
|
---|
| 90 | DEBUGADD(lvl,("0x00100000 "));
|
---|
| 91 | if (flags & 0x00200000)
|
---|
| 92 | DEBUGADD(lvl,("0x00200000 "));
|
---|
| 93 | if (flags & 0x00400000)
|
---|
| 94 | DEBUGADD(lvl,("0x00400000 "));
|
---|
| 95 | if (flags & 0x00800000)
|
---|
| 96 | DEBUGADD(lvl,("0x00800000 "));
|
---|
| 97 | if (flags & 0x01000000)
|
---|
| 98 | DEBUGADD(lvl,("0x01000000 "));
|
---|
| 99 | if (flags & 0x02000000)
|
---|
| 100 | DEBUGADD(lvl,("0x02000000 "));
|
---|
| 101 | if (flags & 0x04000000)
|
---|
| 102 | DEBUGADD(lvl,("0x04000000 "));
|
---|
| 103 | if (flags & 0x08000000)
|
---|
| 104 | DEBUGADD(lvl,("0x08000000 "));
|
---|
| 105 | if (flags & 0x10000000)
|
---|
| 106 | DEBUGADD(lvl,("0x10000000 "));
|
---|
| 107 | if (flags & 0x20000000)
|
---|
| 108 | DEBUGADD(lvl,("0x20000000 "));
|
---|
| 109 | if (flags & DS_RETURN_DNS_NAME)
|
---|
| 110 | DEBUGADD(lvl,("DS_RETURN_DNS_NAME "));
|
---|
| 111 | if (flags & DS_RETURN_FLAT_NAME)
|
---|
| 112 | DEBUGADD(lvl,("DS_RETURN_FLAT_NAME "));
|
---|
| 113 | if (flags)
|
---|
| 114 | DEBUGADD(lvl,("\n"));
|
---|
| 115 | }
|
---|
| 116 |
|
---|
| 117 | /****************************************************************
|
---|
| 118 | ****************************************************************/
|
---|
| 119 |
|
---|
| 120 | static char *dsgetdcname_cache_key(TALLOC_CTX *mem_ctx, const char *domain)
|
---|
| 121 | {
|
---|
| 122 | if (!mem_ctx || !domain) {
|
---|
| 123 | return NULL;
|
---|
| 124 | }
|
---|
| 125 |
|
---|
| 126 | return talloc_asprintf_strupper_m(mem_ctx, DSGETDCNAME_FMT, domain);
|
---|
| 127 | }
|
---|
| 128 |
|
---|
| 129 | /****************************************************************
|
---|
| 130 | ****************************************************************/
|
---|
| 131 |
|
---|
| 132 | static NTSTATUS dsgetdcname_cache_delete(TALLOC_CTX *mem_ctx,
|
---|
| 133 | const char *domain_name)
|
---|
| 134 | {
|
---|
| 135 | char *key;
|
---|
| 136 |
|
---|
| 137 | if (!gencache_init()) {
|
---|
| 138 | return NT_STATUS_INTERNAL_DB_ERROR;
|
---|
| 139 | }
|
---|
| 140 |
|
---|
| 141 | key = dsgetdcname_cache_key(mem_ctx, domain_name);
|
---|
| 142 | if (!key) {
|
---|
| 143 | return NT_STATUS_NO_MEMORY;
|
---|
| 144 | }
|
---|
| 145 |
|
---|
| 146 | if (!gencache_del(key)) {
|
---|
| 147 | return NT_STATUS_UNSUCCESSFUL;
|
---|
| 148 | }
|
---|
| 149 |
|
---|
| 150 | return NT_STATUS_OK;
|
---|
| 151 | }
|
---|
| 152 |
|
---|
| 153 | /****************************************************************
|
---|
| 154 | ****************************************************************/
|
---|
| 155 |
|
---|
| 156 | static NTSTATUS dsgetdcname_cache_store(TALLOC_CTX *mem_ctx,
|
---|
| 157 | const char *domain_name,
|
---|
| 158 | const DATA_BLOB *blob)
|
---|
| 159 | {
|
---|
| 160 | time_t expire_time;
|
---|
| 161 | char *key;
|
---|
| 162 | bool ret = false;
|
---|
| 163 |
|
---|
| 164 | if (!gencache_init()) {
|
---|
| 165 | return NT_STATUS_INTERNAL_DB_ERROR;
|
---|
| 166 | }
|
---|
| 167 |
|
---|
| 168 | key = dsgetdcname_cache_key(mem_ctx, domain_name);
|
---|
| 169 | if (!key) {
|
---|
| 170 | return NT_STATUS_NO_MEMORY;
|
---|
| 171 | }
|
---|
| 172 |
|
---|
| 173 | expire_time = time(NULL) + DSGETDCNAME_CACHE_TTL;
|
---|
| 174 |
|
---|
| 175 | if (gencache_lock_entry(key) != 0) {
|
---|
| 176 | return NT_STATUS_LOCK_NOT_GRANTED;
|
---|
| 177 | }
|
---|
| 178 |
|
---|
| 179 | ret = gencache_set_data_blob(key, blob, expire_time);
|
---|
| 180 |
|
---|
| 181 | gencache_unlock_entry(key);
|
---|
| 182 |
|
---|
| 183 | return ret ? NT_STATUS_OK : NT_STATUS_UNSUCCESSFUL;
|
---|
| 184 | }
|
---|
| 185 |
|
---|
| 186 | /****************************************************************
|
---|
| 187 | ****************************************************************/
|
---|
| 188 |
|
---|
| 189 | #define SET_STRING(x) \
|
---|
| 190 | talloc_strdup(mem_ctx, x); \
|
---|
| 191 | NT_STATUS_HAVE_NO_MEMORY(x);
|
---|
| 192 |
|
---|
| 193 | static NTSTATUS map_logon29_from_cldap_reply(TALLOC_CTX *mem_ctx,
|
---|
| 194 | uint32_t flags,
|
---|
| 195 | struct sockaddr_storage *ss,
|
---|
| 196 | uint32_t nt_version,
|
---|
| 197 | union nbt_cldap_netlogon *r,
|
---|
| 198 | struct nbt_cldap_netlogon_29 *p)
|
---|
| 199 | {
|
---|
| 200 | char addr[INET6_ADDRSTRLEN];
|
---|
| 201 |
|
---|
| 202 | ZERO_STRUCTP(p);
|
---|
| 203 |
|
---|
| 204 | print_sockaddr(addr, sizeof(addr), ss);
|
---|
| 205 |
|
---|
| 206 | /* FIXME */
|
---|
| 207 | p->dc_sock_addr_size = 0x10; /* the w32 winsock addr size */
|
---|
[137] | 208 | p->dc_sock_addr.family = 2; /* AF_INET */
|
---|
[136] | 209 | p->dc_sock_addr.pdc_ip = talloc_strdup(mem_ctx, addr);
|
---|
| 210 |
|
---|
| 211 | switch (nt_version & 0x0000001f) {
|
---|
| 212 | case 0:
|
---|
| 213 | return NT_STATUS_INVALID_PARAMETER;
|
---|
| 214 | case 1:
|
---|
| 215 | case 16:
|
---|
| 216 | case 17:
|
---|
| 217 | p->pdc_name = SET_STRING(r->logon1.pdc_name);
|
---|
| 218 | p->domain = SET_STRING(r->logon1.domain_name);
|
---|
| 219 |
|
---|
| 220 | if (flags & DS_PDC_REQUIRED) {
|
---|
| 221 | p->server_type = NBT_SERVER_WRITABLE |
|
---|
| 222 | NBT_SERVER_PDC;
|
---|
| 223 | }
|
---|
| 224 | break;
|
---|
| 225 | case 2:
|
---|
| 226 | case 3:
|
---|
| 227 | case 18:
|
---|
| 228 | case 19:
|
---|
| 229 | p->pdc_name = SET_STRING(r->logon3.pdc_name);
|
---|
| 230 | p->domain = SET_STRING(r->logon3.domain_name);
|
---|
| 231 | p->pdc_dns_name = SET_STRING(r->logon3.pdc_dns_name);
|
---|
| 232 | p->dns_domain = SET_STRING(r->logon3.dns_domain);
|
---|
| 233 | p->server_type = r->logon3.server_type;
|
---|
| 234 | p->forest = SET_STRING(r->logon3.forest);
|
---|
| 235 | p->domain_uuid = r->logon3.domain_uuid;
|
---|
| 236 |
|
---|
| 237 | break;
|
---|
| 238 | case 4:
|
---|
| 239 | case 5:
|
---|
| 240 | case 6:
|
---|
| 241 | case 7:
|
---|
| 242 | p->pdc_name = SET_STRING(r->logon5.pdc_name);
|
---|
| 243 | p->domain = SET_STRING(r->logon5.domain);
|
---|
| 244 | p->pdc_dns_name = SET_STRING(r->logon5.pdc_dns_name);
|
---|
| 245 | p->dns_domain = SET_STRING(r->logon5.dns_domain);
|
---|
| 246 | p->server_type = r->logon5.server_type;
|
---|
| 247 | p->forest = SET_STRING(r->logon5.forest);
|
---|
| 248 | p->domain_uuid = r->logon5.domain_uuid;
|
---|
| 249 | p->server_site = SET_STRING(r->logon5.server_site);
|
---|
| 250 | p->client_site = SET_STRING(r->logon5.client_site);
|
---|
| 251 |
|
---|
| 252 | break;
|
---|
| 253 | case 8:
|
---|
| 254 | case 9:
|
---|
| 255 | case 10:
|
---|
| 256 | case 11:
|
---|
| 257 | case 12:
|
---|
| 258 | case 13:
|
---|
| 259 | case 14:
|
---|
| 260 | case 15:
|
---|
| 261 | p->pdc_name = SET_STRING(r->logon13.pdc_name);
|
---|
| 262 | p->domain = SET_STRING(r->logon13.domain);
|
---|
| 263 | p->pdc_dns_name = SET_STRING(r->logon13.pdc_dns_name);
|
---|
| 264 | p->dns_domain = SET_STRING(r->logon13.dns_domain);
|
---|
| 265 | p->server_type = r->logon13.server_type;
|
---|
| 266 | p->forest = SET_STRING(r->logon13.forest);
|
---|
| 267 | p->domain_uuid = r->logon13.domain_uuid;
|
---|
| 268 | p->server_site = SET_STRING(r->logon13.server_site);
|
---|
| 269 | p->client_site = SET_STRING(r->logon13.client_site);
|
---|
| 270 |
|
---|
| 271 | break;
|
---|
| 272 | case 20:
|
---|
| 273 | case 21:
|
---|
| 274 | case 22:
|
---|
| 275 | case 23:
|
---|
| 276 | case 24:
|
---|
| 277 | case 25:
|
---|
| 278 | case 26:
|
---|
| 279 | case 27:
|
---|
| 280 | case 28:
|
---|
| 281 | p->pdc_name = SET_STRING(r->logon15.pdc_name);
|
---|
| 282 | p->domain = SET_STRING(r->logon15.domain);
|
---|
| 283 | p->pdc_dns_name = SET_STRING(r->logon15.pdc_dns_name);
|
---|
| 284 | p->dns_domain = SET_STRING(r->logon15.dns_domain);
|
---|
| 285 | p->server_type = r->logon15.server_type;
|
---|
| 286 | p->forest = SET_STRING(r->logon15.forest);
|
---|
| 287 | p->domain_uuid = r->logon15.domain_uuid;
|
---|
| 288 | p->server_site = SET_STRING(r->logon15.server_site);
|
---|
| 289 | p->client_site = SET_STRING(r->logon15.client_site);
|
---|
| 290 |
|
---|
| 291 | break;
|
---|
| 292 | case 29:
|
---|
| 293 | case 30:
|
---|
| 294 | case 31:
|
---|
| 295 | p->pdc_name = SET_STRING(r->logon29.pdc_name);
|
---|
| 296 | p->domain = SET_STRING(r->logon29.domain);
|
---|
| 297 | p->pdc_dns_name = SET_STRING(r->logon29.pdc_dns_name);
|
---|
| 298 | p->dns_domain = SET_STRING(r->logon29.dns_domain);
|
---|
| 299 | p->server_type = r->logon29.server_type;
|
---|
| 300 | p->forest = SET_STRING(r->logon29.forest);
|
---|
| 301 | p->domain_uuid = r->logon29.domain_uuid;
|
---|
| 302 | p->server_site = SET_STRING(r->logon29.server_site);
|
---|
| 303 | p->client_site = SET_STRING(r->logon29.client_site);
|
---|
| 304 | p->next_closest_site = SET_STRING(r->logon29.next_closest_site);
|
---|
| 305 |
|
---|
| 306 | break;
|
---|
| 307 | default:
|
---|
| 308 | return NT_STATUS_INVALID_PARAMETER;
|
---|
| 309 | }
|
---|
| 310 |
|
---|
| 311 | return NT_STATUS_OK;
|
---|
| 312 | }
|
---|
| 313 |
|
---|
| 314 | /****************************************************************
|
---|
| 315 | ****************************************************************/
|
---|
| 316 |
|
---|
| 317 | static NTSTATUS store_cldap_reply(TALLOC_CTX *mem_ctx,
|
---|
| 318 | uint32_t flags,
|
---|
| 319 | struct sockaddr_storage *ss,
|
---|
| 320 | uint32_t nt_version,
|
---|
| 321 | union nbt_cldap_netlogon *r)
|
---|
| 322 | {
|
---|
| 323 | DATA_BLOB blob;
|
---|
| 324 | enum ndr_err_code ndr_err;
|
---|
| 325 | NTSTATUS status;
|
---|
| 326 | struct nbt_cldap_netlogon_29 logon29;
|
---|
| 327 |
|
---|
| 328 | status = map_logon29_from_cldap_reply(mem_ctx, flags, ss,
|
---|
| 329 | nt_version, r, &logon29);
|
---|
| 330 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 331 | return status;
|
---|
| 332 | }
|
---|
| 333 |
|
---|
| 334 | ndr_err = ndr_push_struct_blob(&blob, mem_ctx, &logon29,
|
---|
| 335 | (ndr_push_flags_fn_t)ndr_push_nbt_cldap_netlogon_29);
|
---|
| 336 | if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
|
---|
| 337 | return ndr_map_error2ntstatus(ndr_err);
|
---|
| 338 | }
|
---|
| 339 |
|
---|
| 340 | if (logon29.domain) {
|
---|
| 341 | status = dsgetdcname_cache_store(mem_ctx, logon29.domain, &blob);
|
---|
| 342 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 343 | goto done;
|
---|
| 344 | }
|
---|
| 345 | if (logon29.client_site) {
|
---|
| 346 | sitename_store(logon29.domain, logon29.client_site);
|
---|
| 347 | }
|
---|
| 348 | }
|
---|
| 349 | if (logon29.dns_domain) {
|
---|
| 350 | status = dsgetdcname_cache_store(mem_ctx, logon29.dns_domain, &blob);
|
---|
| 351 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 352 | goto done;
|
---|
| 353 | }
|
---|
| 354 | if (logon29.client_site) {
|
---|
| 355 | sitename_store(logon29.dns_domain, logon29.client_site);
|
---|
| 356 | }
|
---|
| 357 | }
|
---|
| 358 |
|
---|
[228] | 359 | status = NT_STATUS_OK;
|
---|
| 360 |
|
---|
[136] | 361 | done:
|
---|
| 362 | data_blob_free(&blob);
|
---|
| 363 |
|
---|
| 364 | return status;
|
---|
| 365 | }
|
---|
| 366 |
|
---|
| 367 | /****************************************************************
|
---|
| 368 | ****************************************************************/
|
---|
| 369 |
|
---|
| 370 | static NTSTATUS dsgetdcname_cache_refresh(TALLOC_CTX *mem_ctx,
|
---|
| 371 | struct messaging_context *msg_ctx,
|
---|
| 372 | const char *domain_name,
|
---|
| 373 | struct GUID *domain_guid,
|
---|
| 374 | uint32_t flags,
|
---|
| 375 | const char *site_name,
|
---|
| 376 | struct netr_DsRGetDCNameInfo *info)
|
---|
| 377 | {
|
---|
| 378 | struct netr_DsRGetDCNameInfo *dc_info;
|
---|
| 379 |
|
---|
| 380 | return dsgetdcname(mem_ctx,
|
---|
| 381 | msg_ctx,
|
---|
| 382 | domain_name,
|
---|
| 383 | domain_guid,
|
---|
| 384 | site_name,
|
---|
| 385 | flags | DS_FORCE_REDISCOVERY,
|
---|
| 386 | &dc_info);
|
---|
| 387 | }
|
---|
| 388 |
|
---|
| 389 | /****************************************************************
|
---|
| 390 | ****************************************************************/
|
---|
| 391 |
|
---|
| 392 | static uint32_t get_cldap_reply_server_flags(union nbt_cldap_netlogon *r,
|
---|
| 393 | uint32_t nt_version)
|
---|
| 394 | {
|
---|
| 395 | switch (nt_version & 0x0000001f) {
|
---|
| 396 | case 0:
|
---|
| 397 | case 1:
|
---|
| 398 | case 16:
|
---|
| 399 | case 17:
|
---|
| 400 | return 0;
|
---|
| 401 | case 2:
|
---|
| 402 | case 3:
|
---|
| 403 | case 18:
|
---|
| 404 | case 19:
|
---|
| 405 | return r->logon3.server_type;
|
---|
| 406 | case 4:
|
---|
| 407 | case 5:
|
---|
| 408 | case 6:
|
---|
| 409 | case 7:
|
---|
| 410 | return r->logon5.server_type;
|
---|
| 411 | case 8:
|
---|
| 412 | case 9:
|
---|
| 413 | case 10:
|
---|
| 414 | case 11:
|
---|
| 415 | case 12:
|
---|
| 416 | case 13:
|
---|
| 417 | case 14:
|
---|
| 418 | case 15:
|
---|
| 419 | return r->logon13.server_type;
|
---|
| 420 | case 20:
|
---|
| 421 | case 21:
|
---|
| 422 | case 22:
|
---|
| 423 | case 23:
|
---|
| 424 | case 24:
|
---|
| 425 | case 25:
|
---|
| 426 | case 26:
|
---|
| 427 | case 27:
|
---|
| 428 | case 28:
|
---|
| 429 | return r->logon15.server_type;
|
---|
| 430 | case 29:
|
---|
| 431 | case 30:
|
---|
| 432 | case 31:
|
---|
| 433 | return r->logon29.server_type;
|
---|
| 434 | default:
|
---|
| 435 | return 0;
|
---|
| 436 | }
|
---|
| 437 | }
|
---|
| 438 |
|
---|
| 439 | /****************************************************************
|
---|
| 440 | ****************************************************************/
|
---|
| 441 |
|
---|
[233] | 442 | #define RETURN_ON_FALSE(x) if (!(x)) return false;
|
---|
[136] | 443 |
|
---|
| 444 | static bool check_cldap_reply_required_flags(uint32_t ret_flags,
|
---|
| 445 | uint32_t req_flags)
|
---|
| 446 | {
|
---|
| 447 | if (ret_flags == 0) {
|
---|
| 448 | return true;
|
---|
| 449 | }
|
---|
| 450 |
|
---|
| 451 | if (req_flags & DS_PDC_REQUIRED)
|
---|
| 452 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_PDC);
|
---|
| 453 |
|
---|
| 454 | if (req_flags & DS_GC_SERVER_REQUIRED)
|
---|
| 455 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_GC);
|
---|
| 456 |
|
---|
| 457 | if (req_flags & DS_ONLY_LDAP_NEEDED)
|
---|
| 458 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_LDAP);
|
---|
| 459 |
|
---|
| 460 | if ((req_flags & DS_DIRECTORY_SERVICE_REQUIRED) ||
|
---|
| 461 | (req_flags & DS_DIRECTORY_SERVICE_PREFERRED))
|
---|
| 462 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_DS);
|
---|
| 463 |
|
---|
| 464 | if (req_flags & DS_KDC_REQUIRED)
|
---|
| 465 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_KDC);
|
---|
| 466 |
|
---|
| 467 | if (req_flags & DS_TIMESERV_REQUIRED)
|
---|
| 468 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_TIMESERV);
|
---|
| 469 |
|
---|
| 470 | if (req_flags & DS_WRITABLE_REQUIRED)
|
---|
| 471 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_WRITABLE);
|
---|
| 472 |
|
---|
| 473 | return true;
|
---|
| 474 | }
|
---|
| 475 |
|
---|
| 476 | /****************************************************************
|
---|
| 477 | ****************************************************************/
|
---|
| 478 |
|
---|
| 479 | static NTSTATUS dsgetdcname_cache_fetch(TALLOC_CTX *mem_ctx,
|
---|
| 480 | const char *domain_name,
|
---|
| 481 | struct GUID *domain_guid,
|
---|
| 482 | uint32_t flags,
|
---|
| 483 | const char *site_name,
|
---|
| 484 | struct netr_DsRGetDCNameInfo **info_p,
|
---|
| 485 | bool *expired)
|
---|
| 486 | {
|
---|
| 487 | char *key;
|
---|
| 488 | DATA_BLOB blob;
|
---|
| 489 | enum ndr_err_code ndr_err;
|
---|
| 490 | struct netr_DsRGetDCNameInfo *info;
|
---|
| 491 | union nbt_cldap_netlogon p;
|
---|
| 492 | struct nbt_cldap_netlogon_29 r;
|
---|
| 493 | NTSTATUS status;
|
---|
| 494 |
|
---|
| 495 | if (!gencache_init()) {
|
---|
| 496 | return NT_STATUS_INTERNAL_DB_ERROR;
|
---|
| 497 | }
|
---|
| 498 |
|
---|
| 499 | key = dsgetdcname_cache_key(mem_ctx, domain_name);
|
---|
| 500 | if (!key) {
|
---|
| 501 | return NT_STATUS_NO_MEMORY;
|
---|
| 502 | }
|
---|
| 503 |
|
---|
| 504 | if (!gencache_get_data_blob(key, &blob, expired)) {
|
---|
| 505 | return NT_STATUS_OBJECT_NAME_NOT_FOUND;
|
---|
| 506 | }
|
---|
| 507 |
|
---|
| 508 | info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
|
---|
| 509 | if (!info) {
|
---|
| 510 | return NT_STATUS_NO_MEMORY;
|
---|
| 511 | }
|
---|
| 512 |
|
---|
| 513 | ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, &r,
|
---|
| 514 | (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon_29);
|
---|
| 515 |
|
---|
| 516 | data_blob_free(&blob);
|
---|
| 517 | if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
|
---|
| 518 | dsgetdcname_cache_delete(mem_ctx, domain_name);
|
---|
| 519 | return ndr_map_error2ntstatus(ndr_err);
|
---|
| 520 | }
|
---|
| 521 |
|
---|
| 522 | p.logon29 = r;
|
---|
| 523 |
|
---|
| 524 | status = make_dc_info_from_cldap_reply(mem_ctx, flags, NULL,
|
---|
| 525 | 29,
|
---|
| 526 | &p, &info);
|
---|
| 527 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 528 | return status;
|
---|
| 529 | }
|
---|
| 530 |
|
---|
| 531 | if (DEBUGLEVEL >= 10) {
|
---|
| 532 | NDR_PRINT_DEBUG(netr_DsRGetDCNameInfo, info);
|
---|
| 533 | }
|
---|
| 534 |
|
---|
| 535 | /* check flags */
|
---|
| 536 | if (!check_cldap_reply_required_flags(info->dc_flags, flags)) {
|
---|
| 537 | DEBUG(10,("invalid flags\n"));
|
---|
| 538 | return NT_STATUS_INVALID_PARAMETER;
|
---|
| 539 | }
|
---|
| 540 |
|
---|
| 541 | if ((flags & DS_IP_REQUIRED) &&
|
---|
| 542 | (info->dc_address_type != DS_ADDRESS_TYPE_INET)) {
|
---|
| 543 | return NT_STATUS_INVALID_PARAMETER_MIX;
|
---|
| 544 | }
|
---|
| 545 |
|
---|
| 546 | *info_p = info;
|
---|
| 547 |
|
---|
| 548 | return NT_STATUS_OK;
|
---|
| 549 | }
|
---|
| 550 |
|
---|
| 551 | /****************************************************************
|
---|
| 552 | ****************************************************************/
|
---|
| 553 |
|
---|
| 554 | static NTSTATUS dsgetdcname_cached(TALLOC_CTX *mem_ctx,
|
---|
| 555 | struct messaging_context *msg_ctx,
|
---|
| 556 | const char *domain_name,
|
---|
| 557 | struct GUID *domain_guid,
|
---|
| 558 | uint32_t flags,
|
---|
| 559 | const char *site_name,
|
---|
| 560 | struct netr_DsRGetDCNameInfo **info)
|
---|
| 561 | {
|
---|
| 562 | NTSTATUS status;
|
---|
| 563 | bool expired = false;
|
---|
| 564 |
|
---|
| 565 | status = dsgetdcname_cache_fetch(mem_ctx, domain_name, domain_guid,
|
---|
| 566 | flags, site_name, info, &expired);
|
---|
| 567 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 568 | DEBUG(10,("dsgetdcname_cached: cache fetch failed with: %s\n",
|
---|
| 569 | nt_errstr(status)));
|
---|
| 570 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
---|
| 571 | }
|
---|
| 572 |
|
---|
| 573 | if (flags & DS_BACKGROUND_ONLY) {
|
---|
| 574 | return status;
|
---|
| 575 | }
|
---|
| 576 |
|
---|
| 577 | if (expired) {
|
---|
| 578 | status = dsgetdcname_cache_refresh(mem_ctx, msg_ctx,
|
---|
| 579 | domain_name,
|
---|
| 580 | domain_guid, flags,
|
---|
| 581 | site_name, *info);
|
---|
| 582 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 583 | return status;
|
---|
| 584 | }
|
---|
| 585 | }
|
---|
| 586 |
|
---|
| 587 | return status;
|
---|
| 588 | }
|
---|
| 589 |
|
---|
| 590 | /****************************************************************
|
---|
| 591 | ****************************************************************/
|
---|
| 592 |
|
---|
| 593 | static bool check_allowed_required_flags(uint32_t flags,
|
---|
| 594 | const char *site_name)
|
---|
| 595 | {
|
---|
| 596 | uint32_t return_type = flags & (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME);
|
---|
| 597 | uint32_t offered_type = flags & (DS_IS_FLAT_NAME|DS_IS_DNS_NAME);
|
---|
| 598 | uint32_t query_type = flags & (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY);
|
---|
| 599 |
|
---|
| 600 | /* FIXME: check for DSGETDC_VALID_FLAGS and check for excluse bits
|
---|
| 601 | * (DS_PDC_REQUIRED, DS_KDC_REQUIRED, DS_GC_SERVER_REQUIRED) */
|
---|
| 602 |
|
---|
| 603 | debug_dsdcinfo_flags(10, flags);
|
---|
| 604 |
|
---|
| 605 | if ((flags & DS_TRY_NEXTCLOSEST_SITE) && site_name) {
|
---|
| 606 | return false;
|
---|
| 607 | }
|
---|
| 608 |
|
---|
| 609 | if (return_type == (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME)) {
|
---|
| 610 | return false;
|
---|
| 611 | }
|
---|
| 612 |
|
---|
| 613 | if (offered_type == (DS_IS_DNS_NAME|DS_IS_FLAT_NAME)) {
|
---|
| 614 | return false;
|
---|
| 615 | }
|
---|
| 616 |
|
---|
| 617 | if (query_type == (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY)) {
|
---|
| 618 | return false;
|
---|
| 619 | }
|
---|
| 620 |
|
---|
| 621 | #if 0
|
---|
| 622 | if ((flags & DS_RETURN_DNS_NAME) && (!(flags & DS_IP_REQUIRED))) {
|
---|
| 623 | printf("gd: here5 \n");
|
---|
| 624 | return false;
|
---|
| 625 | }
|
---|
| 626 | #endif
|
---|
| 627 | return true;
|
---|
| 628 | }
|
---|
| 629 |
|
---|
| 630 | /****************************************************************
|
---|
| 631 | ****************************************************************/
|
---|
| 632 |
|
---|
| 633 | static NTSTATUS discover_dc_netbios(TALLOC_CTX *mem_ctx,
|
---|
| 634 | const char *domain_name,
|
---|
| 635 | uint32_t flags,
|
---|
| 636 | struct ip_service_name **returned_dclist,
|
---|
| 637 | int *returned_count)
|
---|
| 638 | {
|
---|
| 639 | NTSTATUS status;
|
---|
| 640 | enum nbt_name_type name_type = NBT_NAME_LOGON;
|
---|
| 641 | struct ip_service *iplist;
|
---|
| 642 | int i;
|
---|
| 643 | struct ip_service_name *dclist = NULL;
|
---|
| 644 | int count;
|
---|
| 645 |
|
---|
| 646 | *returned_dclist = NULL;
|
---|
| 647 | *returned_count = 0;
|
---|
| 648 |
|
---|
| 649 | if (lp_disable_netbios()) {
|
---|
| 650 | return NT_STATUS_NOT_SUPPORTED;
|
---|
| 651 | }
|
---|
| 652 |
|
---|
| 653 | if (flags & DS_PDC_REQUIRED) {
|
---|
| 654 | name_type = NBT_NAME_PDC;
|
---|
| 655 | }
|
---|
| 656 |
|
---|
| 657 | status = internal_resolve_name(domain_name, name_type, NULL,
|
---|
| 658 | &iplist, &count,
|
---|
| 659 | "lmhosts wins bcast");
|
---|
| 660 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 661 | DEBUG(10,("discover_dc_netbios: failed to find DC\n"));
|
---|
| 662 | return status;
|
---|
| 663 | }
|
---|
| 664 |
|
---|
| 665 | dclist = TALLOC_ZERO_ARRAY(mem_ctx, struct ip_service_name, count);
|
---|
| 666 | if (!dclist) {
|
---|
| 667 | return NT_STATUS_NO_MEMORY;
|
---|
| 668 | }
|
---|
| 669 |
|
---|
| 670 | for (i=0; i<count; i++) {
|
---|
| 671 |
|
---|
| 672 | char addr[INET6_ADDRSTRLEN];
|
---|
| 673 | struct ip_service_name *r = &dclist[i];
|
---|
| 674 |
|
---|
| 675 | print_sockaddr(addr, sizeof(addr),
|
---|
| 676 | &iplist[i].ss);
|
---|
| 677 |
|
---|
| 678 | r->ss = iplist[i].ss;
|
---|
| 679 | r->port = iplist[i].port;
|
---|
| 680 | r->hostname = talloc_strdup(mem_ctx, addr);
|
---|
| 681 | if (!r->hostname) {
|
---|
| 682 | return NT_STATUS_NO_MEMORY;
|
---|
| 683 | }
|
---|
| 684 |
|
---|
| 685 | }
|
---|
| 686 |
|
---|
| 687 | *returned_dclist = dclist;
|
---|
| 688 | *returned_count = count;
|
---|
| 689 |
|
---|
| 690 | return NT_STATUS_OK;
|
---|
| 691 | }
|
---|
| 692 |
|
---|
| 693 | /****************************************************************
|
---|
| 694 | ****************************************************************/
|
---|
| 695 |
|
---|
| 696 | static NTSTATUS discover_dc_dns(TALLOC_CTX *mem_ctx,
|
---|
| 697 | const char *domain_name,
|
---|
| 698 | struct GUID *domain_guid,
|
---|
| 699 | uint32_t flags,
|
---|
| 700 | const char *site_name,
|
---|
| 701 | struct ip_service_name **returned_dclist,
|
---|
| 702 | int *return_count)
|
---|
| 703 | {
|
---|
| 704 | int i, j;
|
---|
| 705 | NTSTATUS status;
|
---|
| 706 | struct dns_rr_srv *dcs = NULL;
|
---|
| 707 | int numdcs = 0;
|
---|
| 708 | int numaddrs = 0;
|
---|
| 709 | struct ip_service_name *dclist = NULL;
|
---|
| 710 | int count = 0;
|
---|
| 711 |
|
---|
| 712 | if (flags & DS_PDC_REQUIRED) {
|
---|
| 713 | status = ads_dns_query_pdc(mem_ctx, domain_name,
|
---|
| 714 | &dcs, &numdcs);
|
---|
| 715 | } else if (flags & DS_GC_SERVER_REQUIRED) {
|
---|
| 716 | status = ads_dns_query_gcs(mem_ctx, domain_name, site_name,
|
---|
| 717 | &dcs, &numdcs);
|
---|
| 718 | } else if (flags & DS_KDC_REQUIRED) {
|
---|
| 719 | status = ads_dns_query_kdcs(mem_ctx, domain_name, site_name,
|
---|
| 720 | &dcs, &numdcs);
|
---|
| 721 | } else if (flags & DS_DIRECTORY_SERVICE_REQUIRED) {
|
---|
| 722 | status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
|
---|
| 723 | &dcs, &numdcs);
|
---|
| 724 | } else if (domain_guid) {
|
---|
| 725 | status = ads_dns_query_dcs_guid(mem_ctx, domain_name,
|
---|
| 726 | domain_guid, &dcs, &numdcs);
|
---|
| 727 | } else {
|
---|
| 728 | status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
|
---|
| 729 | &dcs, &numdcs);
|
---|
| 730 | }
|
---|
| 731 |
|
---|
| 732 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 733 | return status;
|
---|
| 734 | }
|
---|
| 735 |
|
---|
| 736 | if (numdcs == 0) {
|
---|
| 737 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
---|
| 738 | }
|
---|
| 739 |
|
---|
| 740 | for (i=0;i<numdcs;i++) {
|
---|
| 741 | numaddrs += MAX(dcs[i].num_ips,1);
|
---|
| 742 | }
|
---|
| 743 |
|
---|
| 744 | dclist = TALLOC_ZERO_ARRAY(mem_ctx,
|
---|
| 745 | struct ip_service_name,
|
---|
| 746 | numaddrs);
|
---|
| 747 | if (!dclist) {
|
---|
| 748 | return NT_STATUS_NO_MEMORY;
|
---|
| 749 | }
|
---|
| 750 |
|
---|
| 751 | /* now unroll the list of IP addresses */
|
---|
| 752 |
|
---|
| 753 | *return_count = 0;
|
---|
| 754 | i = 0;
|
---|
| 755 | j = 0;
|
---|
| 756 |
|
---|
| 757 | while ((i < numdcs) && (count < numaddrs)) {
|
---|
| 758 |
|
---|
| 759 | struct ip_service_name *r = &dclist[count];
|
---|
| 760 |
|
---|
| 761 | r->port = dcs[count].port;
|
---|
| 762 | r->hostname = dcs[count].hostname;
|
---|
| 763 |
|
---|
| 764 | /* If we don't have an IP list for a name, lookup it up */
|
---|
| 765 |
|
---|
| 766 | if (!dcs[i].ss_s) {
|
---|
| 767 | interpret_string_addr(&r->ss, dcs[i].hostname, 0);
|
---|
| 768 | i++;
|
---|
| 769 | j = 0;
|
---|
| 770 | } else {
|
---|
| 771 | /* use the IP addresses from the SRV sresponse */
|
---|
| 772 |
|
---|
| 773 | if (j >= dcs[i].num_ips) {
|
---|
| 774 | i++;
|
---|
| 775 | j = 0;
|
---|
| 776 | continue;
|
---|
| 777 | }
|
---|
| 778 |
|
---|
| 779 | r->ss = dcs[i].ss_s[j];
|
---|
| 780 | j++;
|
---|
| 781 | }
|
---|
| 782 |
|
---|
| 783 | /* make sure it is a valid IP. I considered checking the
|
---|
| 784 | * negative connection cache, but this is the wrong place for
|
---|
| 785 | * it. Maybe only as a hac. After think about it, if all of
|
---|
| 786 | * the IP addresses retuend from DNS are dead, what hope does a
|
---|
| 787 | * netbios name lookup have? The standard reason for falling
|
---|
| 788 | * back to netbios lookups is that our DNS server doesn't know
|
---|
| 789 | * anything about the DC's -- jerry */
|
---|
| 790 |
|
---|
| 791 | if (!is_zero_addr(&r->ss)) {
|
---|
| 792 | count++;
|
---|
| 793 | continue;
|
---|
| 794 | }
|
---|
| 795 | }
|
---|
| 796 |
|
---|
| 797 | *returned_dclist = dclist;
|
---|
| 798 | *return_count = count;
|
---|
| 799 |
|
---|
| 800 | if (count > 0) {
|
---|
| 801 | return NT_STATUS_OK;
|
---|
| 802 | }
|
---|
| 803 |
|
---|
| 804 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
---|
| 805 | }
|
---|
| 806 |
|
---|
| 807 | /****************************************************************
|
---|
| 808 | ****************************************************************/
|
---|
| 809 |
|
---|
| 810 | static NTSTATUS make_domain_controller_info(TALLOC_CTX *mem_ctx,
|
---|
| 811 | const char *dc_unc,
|
---|
| 812 | const char *dc_address,
|
---|
| 813 | uint32_t dc_address_type,
|
---|
| 814 | const struct GUID *domain_guid,
|
---|
| 815 | const char *domain_name,
|
---|
| 816 | const char *forest_name,
|
---|
| 817 | uint32_t flags,
|
---|
| 818 | const char *dc_site_name,
|
---|
| 819 | const char *client_site_name,
|
---|
| 820 | struct netr_DsRGetDCNameInfo **info_out)
|
---|
| 821 | {
|
---|
| 822 | struct netr_DsRGetDCNameInfo *info;
|
---|
| 823 |
|
---|
| 824 | info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
|
---|
| 825 | NT_STATUS_HAVE_NO_MEMORY(info);
|
---|
| 826 |
|
---|
| 827 | if (dc_unc) {
|
---|
| 828 | info->dc_unc = talloc_strdup(mem_ctx, dc_unc);
|
---|
| 829 | NT_STATUS_HAVE_NO_MEMORY(info->dc_unc);
|
---|
| 830 | }
|
---|
| 831 |
|
---|
| 832 | if (dc_address) {
|
---|
| 833 | if (!(dc_address[0] == '\\' && dc_address[1] == '\\')) {
|
---|
| 834 | info->dc_address = talloc_asprintf(mem_ctx, "\\\\%s",
|
---|
| 835 | dc_address);
|
---|
| 836 | } else {
|
---|
| 837 | info->dc_address = talloc_strdup(mem_ctx, dc_address);
|
---|
| 838 | }
|
---|
| 839 | NT_STATUS_HAVE_NO_MEMORY(info->dc_address);
|
---|
| 840 | }
|
---|
| 841 |
|
---|
| 842 | info->dc_address_type = dc_address_type;
|
---|
| 843 |
|
---|
| 844 | if (domain_guid) {
|
---|
| 845 | info->domain_guid = *domain_guid;
|
---|
| 846 | }
|
---|
| 847 |
|
---|
| 848 | if (domain_name) {
|
---|
| 849 | info->domain_name = talloc_strdup(mem_ctx, domain_name);
|
---|
| 850 | NT_STATUS_HAVE_NO_MEMORY(info->domain_name);
|
---|
| 851 | }
|
---|
| 852 |
|
---|
| 853 | if (forest_name && *forest_name) {
|
---|
| 854 | info->forest_name = talloc_strdup(mem_ctx, forest_name);
|
---|
| 855 | NT_STATUS_HAVE_NO_MEMORY(info->forest_name);
|
---|
| 856 | flags |= DS_DNS_FOREST;
|
---|
| 857 | }
|
---|
| 858 |
|
---|
| 859 | info->dc_flags = flags;
|
---|
| 860 |
|
---|
| 861 | if (dc_site_name) {
|
---|
| 862 | info->dc_site_name = talloc_strdup(mem_ctx, dc_site_name);
|
---|
| 863 | NT_STATUS_HAVE_NO_MEMORY(info->dc_site_name);
|
---|
| 864 | }
|
---|
| 865 |
|
---|
| 866 | if (client_site_name) {
|
---|
| 867 | info->client_site_name = talloc_strdup(mem_ctx,
|
---|
| 868 | client_site_name);
|
---|
| 869 | NT_STATUS_HAVE_NO_MEMORY(info->client_site_name);
|
---|
| 870 | }
|
---|
| 871 |
|
---|
| 872 | *info_out = info;
|
---|
| 873 |
|
---|
| 874 | return NT_STATUS_OK;
|
---|
| 875 | }
|
---|
| 876 |
|
---|
| 877 | /****************************************************************
|
---|
| 878 | ****************************************************************/
|
---|
| 879 |
|
---|
| 880 | static void map_dc_and_domain_names(uint32_t flags,
|
---|
| 881 | const char *dc_name,
|
---|
| 882 | const char *domain_name,
|
---|
| 883 | const char *dns_dc_name,
|
---|
| 884 | const char *dns_domain_name,
|
---|
| 885 | uint32_t *dc_flags,
|
---|
| 886 | const char **hostname_p,
|
---|
| 887 | const char **domain_p)
|
---|
| 888 | {
|
---|
| 889 | switch (flags & 0xf0000000) {
|
---|
| 890 | case DS_RETURN_FLAT_NAME:
|
---|
| 891 | if (dc_name && domain_name &&
|
---|
| 892 | *dc_name && *domain_name) {
|
---|
| 893 | *hostname_p = dc_name;
|
---|
| 894 | *domain_p = domain_name;
|
---|
| 895 | break;
|
---|
| 896 | }
|
---|
| 897 | case DS_RETURN_DNS_NAME:
|
---|
| 898 | default:
|
---|
| 899 | if (dns_dc_name && dns_domain_name &&
|
---|
| 900 | *dns_dc_name && *dns_domain_name) {
|
---|
| 901 | *hostname_p = dns_dc_name;
|
---|
| 902 | *domain_p = dns_domain_name;
|
---|
| 903 | *dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
|
---|
| 904 | break;
|
---|
| 905 | }
|
---|
| 906 | if (dc_name && domain_name &&
|
---|
| 907 | *dc_name && *domain_name) {
|
---|
| 908 | *hostname_p = dc_name;
|
---|
| 909 | *domain_p = domain_name;
|
---|
| 910 | break;
|
---|
| 911 | }
|
---|
| 912 | }
|
---|
| 913 | }
|
---|
| 914 |
|
---|
| 915 | /****************************************************************
|
---|
| 916 | ****************************************************************/
|
---|
| 917 |
|
---|
| 918 | static NTSTATUS make_dc_info_from_cldap_reply(TALLOC_CTX *mem_ctx,
|
---|
| 919 | uint32_t flags,
|
---|
| 920 | struct sockaddr_storage *ss,
|
---|
| 921 | uint32_t nt_version,
|
---|
| 922 | union nbt_cldap_netlogon *r,
|
---|
| 923 | struct netr_DsRGetDCNameInfo **info)
|
---|
| 924 | {
|
---|
[138] | 925 | const char *dc_hostname = NULL;
|
---|
| 926 | const char *dc_domain_name = NULL;
|
---|
[136] | 927 | const char *dc_address = NULL;
|
---|
| 928 | const char *dc_forest = NULL;
|
---|
| 929 | uint32_t dc_address_type = 0;
|
---|
| 930 | uint32_t dc_flags = 0;
|
---|
| 931 | struct GUID *dc_domain_guid = NULL;
|
---|
| 932 | const char *dc_server_site = NULL;
|
---|
| 933 | const char *dc_client_site = NULL;
|
---|
| 934 |
|
---|
| 935 | char addr[INET6_ADDRSTRLEN];
|
---|
| 936 |
|
---|
| 937 | if (ss) {
|
---|
| 938 | print_sockaddr(addr, sizeof(addr), ss);
|
---|
| 939 | dc_address = addr;
|
---|
| 940 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
---|
| 941 | }
|
---|
| 942 |
|
---|
| 943 | switch (nt_version & 0x0000001f) {
|
---|
| 944 | case 0:
|
---|
| 945 | case 1:
|
---|
| 946 | case 16:
|
---|
| 947 | case 17:
|
---|
| 948 | if (!ss) {
|
---|
| 949 | dc_address = r->logon1.pdc_name;
|
---|
| 950 | dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
|
---|
| 951 | }
|
---|
| 952 |
|
---|
| 953 | map_dc_and_domain_names(flags,
|
---|
| 954 | r->logon1.pdc_name,
|
---|
| 955 | r->logon1.domain_name,
|
---|
| 956 | NULL,
|
---|
| 957 | NULL,
|
---|
| 958 | &dc_flags,
|
---|
| 959 | &dc_hostname,
|
---|
| 960 | &dc_domain_name);
|
---|
| 961 |
|
---|
| 962 | if (flags & DS_PDC_REQUIRED) {
|
---|
| 963 | dc_flags = NBT_SERVER_WRITABLE | NBT_SERVER_PDC;
|
---|
| 964 | }
|
---|
| 965 | break;
|
---|
| 966 | case 2:
|
---|
| 967 | case 3:
|
---|
| 968 | case 18:
|
---|
| 969 | case 19:
|
---|
| 970 | if (!ss) {
|
---|
| 971 | dc_address = r->logon3.pdc_ip;
|
---|
| 972 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
---|
| 973 | }
|
---|
| 974 |
|
---|
| 975 | map_dc_and_domain_names(flags,
|
---|
| 976 | r->logon3.pdc_name,
|
---|
| 977 | r->logon3.domain_name,
|
---|
| 978 | r->logon3.pdc_dns_name,
|
---|
| 979 | r->logon3.dns_domain,
|
---|
| 980 | &dc_flags,
|
---|
| 981 | &dc_hostname,
|
---|
| 982 | &dc_domain_name);
|
---|
| 983 |
|
---|
| 984 | dc_flags |= r->logon3.server_type;
|
---|
| 985 | dc_forest = r->logon3.forest;
|
---|
| 986 | dc_domain_guid = &r->logon3.domain_uuid;
|
---|
| 987 |
|
---|
| 988 | break;
|
---|
| 989 | case 4:
|
---|
| 990 | case 5:
|
---|
| 991 | case 6:
|
---|
| 992 | case 7:
|
---|
| 993 | if (!ss) {
|
---|
| 994 | dc_address = r->logon5.pdc_name;
|
---|
| 995 | dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
|
---|
| 996 | }
|
---|
| 997 |
|
---|
| 998 | map_dc_and_domain_names(flags,
|
---|
| 999 | r->logon5.pdc_name,
|
---|
| 1000 | r->logon5.domain,
|
---|
| 1001 | r->logon5.pdc_dns_name,
|
---|
| 1002 | r->logon5.dns_domain,
|
---|
| 1003 | &dc_flags,
|
---|
| 1004 | &dc_hostname,
|
---|
| 1005 | &dc_domain_name);
|
---|
| 1006 |
|
---|
| 1007 | dc_flags |= r->logon5.server_type;
|
---|
| 1008 | dc_forest = r->logon5.forest;
|
---|
| 1009 | dc_domain_guid = &r->logon5.domain_uuid;
|
---|
| 1010 | dc_server_site = r->logon5.server_site;
|
---|
| 1011 | dc_client_site = r->logon5.client_site;
|
---|
| 1012 |
|
---|
| 1013 | break;
|
---|
| 1014 | case 8:
|
---|
| 1015 | case 9:
|
---|
| 1016 | case 10:
|
---|
| 1017 | case 11:
|
---|
| 1018 | case 12:
|
---|
| 1019 | case 13:
|
---|
| 1020 | case 14:
|
---|
| 1021 | case 15:
|
---|
| 1022 | if (!ss) {
|
---|
| 1023 | dc_address = r->logon13.dc_sock_addr.pdc_ip;
|
---|
| 1024 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
---|
| 1025 | }
|
---|
| 1026 |
|
---|
| 1027 | map_dc_and_domain_names(flags,
|
---|
| 1028 | r->logon13.pdc_name,
|
---|
| 1029 | r->logon13.domain,
|
---|
| 1030 | r->logon13.pdc_dns_name,
|
---|
| 1031 | r->logon13.dns_domain,
|
---|
| 1032 | &dc_flags,
|
---|
| 1033 | &dc_hostname,
|
---|
| 1034 | &dc_domain_name);
|
---|
| 1035 |
|
---|
| 1036 | dc_flags |= r->logon13.server_type;
|
---|
| 1037 | dc_forest = r->logon13.forest;
|
---|
| 1038 | dc_domain_guid = &r->logon13.domain_uuid;
|
---|
| 1039 | dc_server_site = r->logon13.server_site;
|
---|
| 1040 | dc_client_site = r->logon13.client_site;
|
---|
| 1041 |
|
---|
| 1042 | break;
|
---|
| 1043 | case 20:
|
---|
| 1044 | case 21:
|
---|
| 1045 | case 22:
|
---|
| 1046 | case 23:
|
---|
| 1047 | case 24:
|
---|
| 1048 | case 25:
|
---|
| 1049 | case 26:
|
---|
| 1050 | case 27:
|
---|
| 1051 | case 28:
|
---|
| 1052 | if (!ss) {
|
---|
| 1053 | dc_address = r->logon15.pdc_name;
|
---|
| 1054 | dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
|
---|
| 1055 | }
|
---|
| 1056 |
|
---|
| 1057 | map_dc_and_domain_names(flags,
|
---|
| 1058 | r->logon15.pdc_name,
|
---|
| 1059 | r->logon15.domain,
|
---|
| 1060 | r->logon15.pdc_dns_name,
|
---|
| 1061 | r->logon15.dns_domain,
|
---|
| 1062 | &dc_flags,
|
---|
| 1063 | &dc_hostname,
|
---|
| 1064 | &dc_domain_name);
|
---|
| 1065 |
|
---|
| 1066 | dc_flags |= r->logon15.server_type;
|
---|
| 1067 | dc_forest = r->logon15.forest;
|
---|
| 1068 | dc_domain_guid = &r->logon15.domain_uuid;
|
---|
| 1069 | dc_server_site = r->logon15.server_site;
|
---|
| 1070 | dc_client_site = r->logon15.client_site;
|
---|
| 1071 |
|
---|
| 1072 | break;
|
---|
| 1073 | case 29:
|
---|
| 1074 | case 30:
|
---|
| 1075 | case 31:
|
---|
| 1076 | if (!ss) {
|
---|
| 1077 | dc_address = r->logon29.dc_sock_addr.pdc_ip;
|
---|
| 1078 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
---|
| 1079 | }
|
---|
| 1080 |
|
---|
| 1081 | map_dc_and_domain_names(flags,
|
---|
| 1082 | r->logon29.pdc_name,
|
---|
| 1083 | r->logon29.domain,
|
---|
| 1084 | r->logon29.pdc_dns_name,
|
---|
| 1085 | r->logon29.dns_domain,
|
---|
| 1086 | &dc_flags,
|
---|
| 1087 | &dc_hostname,
|
---|
| 1088 | &dc_domain_name);
|
---|
| 1089 |
|
---|
| 1090 | dc_flags |= r->logon29.server_type;
|
---|
| 1091 | dc_forest = r->logon29.forest;
|
---|
| 1092 | dc_domain_guid = &r->logon29.domain_uuid;
|
---|
| 1093 | dc_server_site = r->logon29.server_site;
|
---|
| 1094 | dc_client_site = r->logon29.client_site;
|
---|
| 1095 |
|
---|
| 1096 | break;
|
---|
| 1097 | default:
|
---|
| 1098 | return NT_STATUS_INVALID_PARAMETER;
|
---|
| 1099 | }
|
---|
| 1100 |
|
---|
| 1101 | return make_domain_controller_info(mem_ctx,
|
---|
| 1102 | dc_hostname,
|
---|
| 1103 | dc_address,
|
---|
| 1104 | dc_address_type,
|
---|
| 1105 | dc_domain_guid,
|
---|
| 1106 | dc_domain_name,
|
---|
| 1107 | dc_forest,
|
---|
| 1108 | dc_flags,
|
---|
| 1109 | dc_server_site,
|
---|
| 1110 | dc_client_site,
|
---|
| 1111 | info);
|
---|
| 1112 | }
|
---|
| 1113 |
|
---|
| 1114 | /****************************************************************
|
---|
| 1115 | ****************************************************************/
|
---|
| 1116 |
|
---|
| 1117 | static uint32_t map_ds_flags_to_nt_version(uint32_t flags)
|
---|
| 1118 | {
|
---|
| 1119 | uint32_t nt_version = 0;
|
---|
| 1120 |
|
---|
| 1121 | if (flags & DS_PDC_REQUIRED) {
|
---|
| 1122 | nt_version |= NETLOGON_VERSION_PDC;
|
---|
| 1123 | }
|
---|
| 1124 |
|
---|
| 1125 | if (flags & DS_GC_SERVER_REQUIRED) {
|
---|
| 1126 | nt_version |= NETLOGON_VERSION_GC;
|
---|
| 1127 | }
|
---|
| 1128 |
|
---|
| 1129 | if (flags & DS_TRY_NEXTCLOSEST_SITE) {
|
---|
| 1130 | nt_version |= NETLOGON_VERSION_WITH_CLOSEST_SITE;
|
---|
| 1131 | }
|
---|
| 1132 |
|
---|
| 1133 | if (flags & DS_IP_REQUIRED) {
|
---|
| 1134 | nt_version |= NETLOGON_VERSION_IP;
|
---|
| 1135 | }
|
---|
| 1136 |
|
---|
| 1137 | return nt_version;
|
---|
| 1138 | }
|
---|
| 1139 |
|
---|
| 1140 | /****************************************************************
|
---|
| 1141 | ****************************************************************/
|
---|
| 1142 |
|
---|
| 1143 | static NTSTATUS process_dc_dns(TALLOC_CTX *mem_ctx,
|
---|
| 1144 | const char *domain_name,
|
---|
| 1145 | uint32_t flags,
|
---|
| 1146 | struct ip_service_name *dclist,
|
---|
| 1147 | int num_dcs,
|
---|
| 1148 | struct netr_DsRGetDCNameInfo **info)
|
---|
| 1149 | {
|
---|
| 1150 | int i = 0;
|
---|
| 1151 | bool valid_dc = false;
|
---|
| 1152 | union nbt_cldap_netlogon *r = NULL;
|
---|
| 1153 | uint32_t nt_version = NETLOGON_VERSION_5 |
|
---|
| 1154 | NETLOGON_VERSION_5EX;
|
---|
| 1155 | uint32_t ret_flags = 0;
|
---|
| 1156 | NTSTATUS status;
|
---|
| 1157 |
|
---|
| 1158 | nt_version |= map_ds_flags_to_nt_version(flags);
|
---|
| 1159 |
|
---|
| 1160 | for (i=0; i<num_dcs; i++) {
|
---|
| 1161 |
|
---|
| 1162 | DEBUG(10,("LDAP ping to %s\n", dclist[i].hostname));
|
---|
| 1163 |
|
---|
| 1164 | if (ads_cldap_netlogon(mem_ctx, dclist[i].hostname,
|
---|
| 1165 | domain_name,
|
---|
| 1166 | &nt_version,
|
---|
| 1167 | &r))
|
---|
| 1168 | {
|
---|
| 1169 | ret_flags = get_cldap_reply_server_flags(r, nt_version);
|
---|
| 1170 |
|
---|
| 1171 | if (check_cldap_reply_required_flags(ret_flags, flags)) {
|
---|
| 1172 | valid_dc = true;
|
---|
| 1173 | break;
|
---|
| 1174 | }
|
---|
| 1175 | }
|
---|
| 1176 |
|
---|
| 1177 | continue;
|
---|
| 1178 | }
|
---|
| 1179 |
|
---|
| 1180 | if (!valid_dc) {
|
---|
| 1181 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
---|
| 1182 | }
|
---|
| 1183 |
|
---|
| 1184 | status = make_dc_info_from_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
---|
| 1185 | nt_version, r, info);
|
---|
| 1186 | if (NT_STATUS_IS_OK(status)) {
|
---|
| 1187 | return store_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
---|
| 1188 | nt_version, r);
|
---|
| 1189 | }
|
---|
| 1190 |
|
---|
| 1191 | return status;
|
---|
| 1192 | }
|
---|
| 1193 |
|
---|
| 1194 | /****************************************************************
|
---|
| 1195 | ****************************************************************/
|
---|
| 1196 |
|
---|
| 1197 | static struct event_context *ev_context(void)
|
---|
| 1198 | {
|
---|
| 1199 | static struct event_context *ctx;
|
---|
| 1200 |
|
---|
| 1201 | if (!ctx && !(ctx = event_context_init(NULL))) {
|
---|
| 1202 | smb_panic("Could not init event context");
|
---|
| 1203 | }
|
---|
| 1204 | return ctx;
|
---|
| 1205 | }
|
---|
| 1206 |
|
---|
| 1207 | /****************************************************************
|
---|
| 1208 | ****************************************************************/
|
---|
| 1209 |
|
---|
| 1210 | static struct messaging_context *msg_context(TALLOC_CTX *mem_ctx)
|
---|
| 1211 | {
|
---|
| 1212 | static struct messaging_context *ctx;
|
---|
| 1213 |
|
---|
| 1214 | if (!ctx && !(ctx = messaging_init(mem_ctx, server_id_self(),
|
---|
| 1215 | ev_context()))) {
|
---|
| 1216 | smb_panic("Could not init messaging context");
|
---|
| 1217 | }
|
---|
| 1218 | return ctx;
|
---|
| 1219 | }
|
---|
| 1220 |
|
---|
| 1221 | /****************************************************************
|
---|
| 1222 | ****************************************************************/
|
---|
| 1223 |
|
---|
| 1224 | static NTSTATUS process_dc_netbios(TALLOC_CTX *mem_ctx,
|
---|
| 1225 | struct messaging_context *msg_ctx,
|
---|
| 1226 | const char *domain_name,
|
---|
| 1227 | uint32_t flags,
|
---|
| 1228 | struct ip_service_name *dclist,
|
---|
| 1229 | int num_dcs,
|
---|
| 1230 | struct netr_DsRGetDCNameInfo **info)
|
---|
| 1231 | {
|
---|
| 1232 | struct sockaddr_storage ss;
|
---|
| 1233 | struct ip_service ip_list;
|
---|
| 1234 | enum nbt_name_type name_type = NBT_NAME_LOGON;
|
---|
| 1235 | NTSTATUS status;
|
---|
| 1236 | int i;
|
---|
| 1237 | const char *dc_name = NULL;
|
---|
| 1238 | fstring tmp_dc_name;
|
---|
| 1239 | union nbt_cldap_netlogon *r = NULL;
|
---|
| 1240 | bool store_cache = false;
|
---|
| 1241 | uint32_t nt_version = NETLOGON_VERSION_1 |
|
---|
| 1242 | NETLOGON_VERSION_5 |
|
---|
| 1243 | NETLOGON_VERSION_5EX_WITH_IP;
|
---|
| 1244 |
|
---|
| 1245 | if (!msg_ctx) {
|
---|
| 1246 | msg_ctx = msg_context(mem_ctx);
|
---|
| 1247 | }
|
---|
| 1248 |
|
---|
| 1249 | if (flags & DS_PDC_REQUIRED) {
|
---|
| 1250 | name_type = NBT_NAME_PDC;
|
---|
| 1251 | }
|
---|
| 1252 |
|
---|
| 1253 | nt_version |= map_ds_flags_to_nt_version(flags);
|
---|
| 1254 |
|
---|
| 1255 | DEBUG(10,("process_dc_netbios\n"));
|
---|
| 1256 |
|
---|
| 1257 | for (i=0; i<num_dcs; i++) {
|
---|
| 1258 |
|
---|
| 1259 | ip_list.ss = dclist[i].ss;
|
---|
| 1260 | ip_list.port = 0;
|
---|
| 1261 |
|
---|
| 1262 | if (!interpret_string_addr(&ss, dclist[i].hostname, AI_NUMERICHOST)) {
|
---|
| 1263 | return NT_STATUS_UNSUCCESSFUL;
|
---|
| 1264 | }
|
---|
| 1265 |
|
---|
| 1266 | if (send_getdc_request(mem_ctx, msg_ctx,
|
---|
| 1267 | &dclist[i].ss, domain_name,
|
---|
| 1268 | NULL, nt_version))
|
---|
| 1269 | {
|
---|
| 1270 | int k;
|
---|
| 1271 | smb_msleep(300);
|
---|
| 1272 | for (k=0; k<5; k++) {
|
---|
| 1273 | if (receive_getdc_response(mem_ctx,
|
---|
| 1274 | &dclist[i].ss,
|
---|
| 1275 | domain_name,
|
---|
| 1276 | &nt_version,
|
---|
| 1277 | &dc_name,
|
---|
| 1278 | &r)) {
|
---|
| 1279 | store_cache = true;
|
---|
| 1280 | namecache_store(dc_name, NBT_NAME_SERVER, 1, &ip_list);
|
---|
| 1281 | goto make_reply;
|
---|
| 1282 | }
|
---|
| 1283 | smb_msleep(1500);
|
---|
| 1284 | }
|
---|
| 1285 | }
|
---|
| 1286 |
|
---|
| 1287 | if (name_status_find(domain_name,
|
---|
| 1288 | name_type,
|
---|
| 1289 | NBT_NAME_SERVER,
|
---|
| 1290 | &dclist[i].ss,
|
---|
| 1291 | tmp_dc_name))
|
---|
| 1292 | {
|
---|
| 1293 | struct nbt_cldap_netlogon_1 logon1;
|
---|
| 1294 |
|
---|
| 1295 | r = TALLOC_ZERO_P(mem_ctx, union nbt_cldap_netlogon);
|
---|
| 1296 | NT_STATUS_HAVE_NO_MEMORY(r);
|
---|
| 1297 |
|
---|
| 1298 | ZERO_STRUCT(logon1);
|
---|
| 1299 |
|
---|
| 1300 | nt_version = NETLOGON_VERSION_1;
|
---|
| 1301 |
|
---|
| 1302 | logon1.nt_version = nt_version;
|
---|
| 1303 | logon1.pdc_name = tmp_dc_name;
|
---|
| 1304 | logon1.domain_name = talloc_strdup_upper(mem_ctx, domain_name);
|
---|
| 1305 | NT_STATUS_HAVE_NO_MEMORY(logon1.domain_name);
|
---|
| 1306 |
|
---|
| 1307 | r->logon1 = logon1;
|
---|
| 1308 |
|
---|
| 1309 | namecache_store(tmp_dc_name, NBT_NAME_SERVER, 1, &ip_list);
|
---|
| 1310 |
|
---|
| 1311 | goto make_reply;
|
---|
| 1312 | }
|
---|
| 1313 | }
|
---|
| 1314 |
|
---|
| 1315 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
---|
| 1316 |
|
---|
| 1317 | make_reply:
|
---|
| 1318 |
|
---|
| 1319 | status = make_dc_info_from_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
---|
| 1320 | nt_version, r, info);
|
---|
| 1321 | if (NT_STATUS_IS_OK(status) && store_cache) {
|
---|
| 1322 | return store_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
---|
| 1323 | nt_version, r);
|
---|
| 1324 | }
|
---|
| 1325 |
|
---|
| 1326 | return status;
|
---|
| 1327 | }
|
---|
| 1328 |
|
---|
| 1329 | /****************************************************************
|
---|
| 1330 | ****************************************************************/
|
---|
| 1331 |
|
---|
| 1332 | static NTSTATUS dsgetdcname_rediscover(TALLOC_CTX *mem_ctx,
|
---|
| 1333 | struct messaging_context *msg_ctx,
|
---|
| 1334 | const char *domain_name,
|
---|
| 1335 | struct GUID *domain_guid,
|
---|
| 1336 | uint32_t flags,
|
---|
| 1337 | const char *site_name,
|
---|
| 1338 | struct netr_DsRGetDCNameInfo **info)
|
---|
| 1339 | {
|
---|
| 1340 | NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
---|
| 1341 | struct ip_service_name *dclist = NULL;
|
---|
| 1342 | int num_dcs;
|
---|
| 1343 |
|
---|
| 1344 | DEBUG(10,("dsgetdcname_rediscover\n"));
|
---|
| 1345 |
|
---|
| 1346 | if (flags & DS_IS_FLAT_NAME) {
|
---|
| 1347 |
|
---|
| 1348 | status = discover_dc_netbios(mem_ctx, domain_name, flags,
|
---|
| 1349 | &dclist, &num_dcs);
|
---|
| 1350 | NT_STATUS_NOT_OK_RETURN(status);
|
---|
| 1351 |
|
---|
| 1352 | return process_dc_netbios(mem_ctx, msg_ctx, domain_name, flags,
|
---|
| 1353 | dclist, num_dcs, info);
|
---|
| 1354 | }
|
---|
| 1355 |
|
---|
| 1356 | if (flags & DS_IS_DNS_NAME) {
|
---|
| 1357 |
|
---|
| 1358 | status = discover_dc_dns(mem_ctx, domain_name, domain_guid,
|
---|
| 1359 | flags, site_name, &dclist, &num_dcs);
|
---|
| 1360 | NT_STATUS_NOT_OK_RETURN(status);
|
---|
| 1361 |
|
---|
| 1362 | return process_dc_dns(mem_ctx, domain_name, flags,
|
---|
| 1363 | dclist, num_dcs, info);
|
---|
| 1364 | }
|
---|
| 1365 |
|
---|
| 1366 | status = discover_dc_dns(mem_ctx, domain_name, domain_guid, flags,
|
---|
| 1367 | site_name, &dclist, &num_dcs);
|
---|
| 1368 |
|
---|
| 1369 | if (NT_STATUS_IS_OK(status) && num_dcs != 0) {
|
---|
| 1370 |
|
---|
| 1371 | status = process_dc_dns(mem_ctx, domain_name, flags, dclist,
|
---|
| 1372 | num_dcs, info);
|
---|
| 1373 | if (NT_STATUS_IS_OK(status)) {
|
---|
| 1374 | return status;
|
---|
| 1375 | }
|
---|
| 1376 | }
|
---|
| 1377 |
|
---|
| 1378 | status = discover_dc_netbios(mem_ctx, domain_name, flags, &dclist,
|
---|
| 1379 | &num_dcs);
|
---|
| 1380 | NT_STATUS_NOT_OK_RETURN(status);
|
---|
| 1381 |
|
---|
| 1382 | return process_dc_netbios(mem_ctx, msg_ctx, domain_name, flags, dclist,
|
---|
| 1383 | num_dcs, info);
|
---|
| 1384 | }
|
---|
| 1385 |
|
---|
[232] | 1386 | static bool is_closest_site(struct netr_DsRGetDCNameInfo *info)
|
---|
| 1387 | {
|
---|
| 1388 | if (info->dc_flags & DS_SERVER_CLOSEST) {
|
---|
| 1389 | return true;
|
---|
| 1390 | }
|
---|
| 1391 |
|
---|
| 1392 | if (!info->client_site_name) {
|
---|
| 1393 | return true;
|
---|
| 1394 | }
|
---|
| 1395 |
|
---|
| 1396 | if (!info->dc_site_name) {
|
---|
| 1397 | return false;
|
---|
| 1398 | }
|
---|
| 1399 |
|
---|
| 1400 | if (strcmp(info->client_site_name, info->dc_site_name) == 0) {
|
---|
| 1401 | return true;
|
---|
| 1402 | }
|
---|
| 1403 |
|
---|
| 1404 | return false;
|
---|
| 1405 | }
|
---|
| 1406 |
|
---|
[136] | 1407 | /********************************************************************
|
---|
| 1408 | dsgetdcname.
|
---|
| 1409 |
|
---|
| 1410 | This will be the only public function here.
|
---|
| 1411 | ********************************************************************/
|
---|
| 1412 |
|
---|
| 1413 | NTSTATUS dsgetdcname(TALLOC_CTX *mem_ctx,
|
---|
| 1414 | struct messaging_context *msg_ctx,
|
---|
| 1415 | const char *domain_name,
|
---|
| 1416 | struct GUID *domain_guid,
|
---|
| 1417 | const char *site_name,
|
---|
| 1418 | uint32_t flags,
|
---|
| 1419 | struct netr_DsRGetDCNameInfo **info)
|
---|
| 1420 | {
|
---|
| 1421 | NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
---|
| 1422 | struct netr_DsRGetDCNameInfo *myinfo = NULL;
|
---|
| 1423 | char *query_site = NULL;
|
---|
[232] | 1424 | bool first = true;
|
---|
| 1425 | struct netr_DsRGetDCNameInfo *first_info = NULL;
|
---|
[136] | 1426 |
|
---|
| 1427 | DEBUG(10,("dsgetdcname: domain_name: %s, "
|
---|
| 1428 | "domain_guid: %s, site_name: %s, flags: 0x%08x\n",
|
---|
| 1429 | domain_name,
|
---|
| 1430 | domain_guid ? GUID_string(mem_ctx, domain_guid) : "(null)",
|
---|
| 1431 | site_name, flags));
|
---|
| 1432 |
|
---|
| 1433 | *info = NULL;
|
---|
| 1434 |
|
---|
| 1435 | if (!check_allowed_required_flags(flags, site_name)) {
|
---|
| 1436 | DEBUG(0,("invalid flags specified\n"));
|
---|
| 1437 | return NT_STATUS_INVALID_PARAMETER;
|
---|
| 1438 | }
|
---|
| 1439 |
|
---|
| 1440 | if (!site_name) {
|
---|
| 1441 | query_site = sitename_fetch(domain_name);
|
---|
| 1442 | } else {
|
---|
| 1443 | query_site = SMB_STRDUP(site_name);
|
---|
| 1444 | }
|
---|
| 1445 |
|
---|
| 1446 | if (flags & DS_FORCE_REDISCOVERY) {
|
---|
| 1447 | goto rediscover;
|
---|
| 1448 | }
|
---|
| 1449 |
|
---|
| 1450 | status = dsgetdcname_cached(mem_ctx, msg_ctx, domain_name, domain_guid,
|
---|
| 1451 | flags, query_site, &myinfo);
|
---|
| 1452 | if (NT_STATUS_IS_OK(status)) {
|
---|
| 1453 | goto done;
|
---|
| 1454 | }
|
---|
| 1455 |
|
---|
| 1456 | if (flags & DS_BACKGROUND_ONLY) {
|
---|
| 1457 | goto done;
|
---|
| 1458 | }
|
---|
| 1459 |
|
---|
| 1460 | rediscover:
|
---|
| 1461 | status = dsgetdcname_rediscover(mem_ctx, msg_ctx, domain_name,
|
---|
| 1462 | domain_guid, flags, query_site,
|
---|
| 1463 | &myinfo);
|
---|
| 1464 |
|
---|
| 1465 | done:
|
---|
| 1466 | SAFE_FREE(query_site);
|
---|
| 1467 |
|
---|
[232] | 1468 | if (!NT_STATUS_IS_OK(status)) {
|
---|
| 1469 | if (!first) {
|
---|
| 1470 | *info = first_info;
|
---|
| 1471 | return NT_STATUS_OK;
|
---|
| 1472 | }
|
---|
| 1473 | return status;
|
---|
| 1474 | }
|
---|
| 1475 |
|
---|
| 1476 | if (!first) {
|
---|
| 1477 | TALLOC_FREE(first_info);
|
---|
| 1478 | } else if (!is_closest_site(myinfo)) {
|
---|
| 1479 | first = false;
|
---|
| 1480 | first_info = myinfo;
|
---|
| 1481 | /* TODO: may use the next_closest_site here */
|
---|
| 1482 | query_site = SMB_STRDUP(myinfo->client_site_name);
|
---|
| 1483 | goto rediscover;
|
---|
| 1484 | }
|
---|
| 1485 |
|
---|
| 1486 | *info = myinfo;
|
---|
| 1487 | return NT_STATUS_OK;
|
---|
[136] | 1488 | }
|
---|