| 1 | /*
|
|---|
| 2 | Unix SMB/CIFS implementation.
|
|---|
| 3 |
|
|---|
| 4 | dsgetdcname
|
|---|
| 5 |
|
|---|
| 6 | Copyright (C) Gerald Carter 2006
|
|---|
| 7 | Copyright (C) Guenther Deschner 2007-2008
|
|---|
| 8 |
|
|---|
| 9 | This program is free software; you can redistribute it and/or modify
|
|---|
| 10 | it under the terms of the GNU General Public License as published by
|
|---|
| 11 | the Free Software Foundation; either version 3 of the License, or
|
|---|
| 12 | (at your option) any later version.
|
|---|
| 13 |
|
|---|
| 14 | This program is distributed in the hope that it will be useful,
|
|---|
| 15 | but WITHOUT ANY WARRANTY; without even the implied warranty of
|
|---|
| 16 | MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
|
|---|
| 17 | GNU General Public License for more details.
|
|---|
| 18 |
|
|---|
| 19 | You should have received a copy of the GNU General Public License
|
|---|
| 20 | along with this program. If not, see <http://www.gnu.org/licenses/>.
|
|---|
| 21 | */
|
|---|
| 22 |
|
|---|
| 23 | #include "includes.h"
|
|---|
| 24 |
|
|---|
| 25 | #define DSGETDCNAME_FMT "DSGETDCNAME/DOMAIN/%s"
|
|---|
| 26 | /* 15 minutes */
|
|---|
| 27 | #define DSGETDCNAME_CACHE_TTL 60*15
|
|---|
| 28 |
|
|---|
| 29 | struct ip_service_name {
|
|---|
| 30 | struct sockaddr_storage ss;
|
|---|
| 31 | unsigned port;
|
|---|
| 32 | const char *hostname;
|
|---|
| 33 | };
|
|---|
| 34 |
|
|---|
| 35 | static NTSTATUS make_dc_info_from_cldap_reply(TALLOC_CTX *mem_ctx,
|
|---|
| 36 | uint32_t flags,
|
|---|
| 37 | struct sockaddr_storage *ss,
|
|---|
| 38 | uint32_t nt_version,
|
|---|
| 39 | union nbt_cldap_netlogon *r,
|
|---|
| 40 | struct netr_DsRGetDCNameInfo **info);
|
|---|
| 41 |
|
|---|
| 42 | /****************************************************************
|
|---|
| 43 | ****************************************************************/
|
|---|
| 44 |
|
|---|
| 45 | void debug_dsdcinfo_flags(int lvl, uint32_t flags)
|
|---|
| 46 | {
|
|---|
| 47 | DEBUG(lvl,("debug_dsdcinfo_flags: 0x%08x\n\t", flags));
|
|---|
| 48 |
|
|---|
| 49 | if (flags & DS_FORCE_REDISCOVERY)
|
|---|
| 50 | DEBUGADD(lvl,("DS_FORCE_REDISCOVERY "));
|
|---|
| 51 | if (flags & 0x000000002)
|
|---|
| 52 | DEBUGADD(lvl,("0x00000002 "));
|
|---|
| 53 | if (flags & 0x000000004)
|
|---|
| 54 | DEBUGADD(lvl,("0x00000004 "));
|
|---|
| 55 | if (flags & 0x000000008)
|
|---|
| 56 | DEBUGADD(lvl,("0x00000008 "));
|
|---|
| 57 | if (flags & DS_DIRECTORY_SERVICE_REQUIRED)
|
|---|
| 58 | DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_REQUIRED "));
|
|---|
| 59 | if (flags & DS_DIRECTORY_SERVICE_PREFERRED)
|
|---|
| 60 | DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_PREFERRED "));
|
|---|
| 61 | if (flags & DS_GC_SERVER_REQUIRED)
|
|---|
| 62 | DEBUGADD(lvl,("DS_GC_SERVER_REQUIRED "));
|
|---|
| 63 | if (flags & DS_PDC_REQUIRED)
|
|---|
| 64 | DEBUGADD(lvl,("DS_PDC_REQUIRED "));
|
|---|
| 65 | if (flags & DS_BACKGROUND_ONLY)
|
|---|
| 66 | DEBUGADD(lvl,("DS_BACKGROUND_ONLY "));
|
|---|
| 67 | if (flags & DS_IP_REQUIRED)
|
|---|
| 68 | DEBUGADD(lvl,("DS_IP_REQUIRED "));
|
|---|
| 69 | if (flags & DS_KDC_REQUIRED)
|
|---|
| 70 | DEBUGADD(lvl,("DS_KDC_REQUIRED "));
|
|---|
| 71 | if (flags & DS_TIMESERV_REQUIRED)
|
|---|
| 72 | DEBUGADD(lvl,("DS_TIMESERV_REQUIRED "));
|
|---|
| 73 | if (flags & DS_WRITABLE_REQUIRED)
|
|---|
| 74 | DEBUGADD(lvl,("DS_WRITABLE_REQUIRED "));
|
|---|
| 75 | if (flags & DS_GOOD_TIMESERV_PREFERRED)
|
|---|
| 76 | DEBUGADD(lvl,("DS_GOOD_TIMESERV_PREFERRED "));
|
|---|
| 77 | if (flags & DS_AVOID_SELF)
|
|---|
| 78 | DEBUGADD(lvl,("DS_AVOID_SELF "));
|
|---|
| 79 | if (flags & DS_ONLY_LDAP_NEEDED)
|
|---|
| 80 | DEBUGADD(lvl,("DS_ONLY_LDAP_NEEDED "));
|
|---|
| 81 | if (flags & DS_IS_FLAT_NAME)
|
|---|
| 82 | DEBUGADD(lvl,("DS_IS_FLAT_NAME "));
|
|---|
| 83 | if (flags & DS_IS_DNS_NAME)
|
|---|
| 84 | DEBUGADD(lvl,("DS_IS_DNS_NAME "));
|
|---|
| 85 | if (flags & 0x00040000)
|
|---|
| 86 | DEBUGADD(lvl,("0x00040000 "));
|
|---|
| 87 | if (flags & 0x00080000)
|
|---|
| 88 | DEBUGADD(lvl,("0x00080000 "));
|
|---|
| 89 | if (flags & 0x00100000)
|
|---|
| 90 | DEBUGADD(lvl,("0x00100000 "));
|
|---|
| 91 | if (flags & 0x00200000)
|
|---|
| 92 | DEBUGADD(lvl,("0x00200000 "));
|
|---|
| 93 | if (flags & 0x00400000)
|
|---|
| 94 | DEBUGADD(lvl,("0x00400000 "));
|
|---|
| 95 | if (flags & 0x00800000)
|
|---|
| 96 | DEBUGADD(lvl,("0x00800000 "));
|
|---|
| 97 | if (flags & 0x01000000)
|
|---|
| 98 | DEBUGADD(lvl,("0x01000000 "));
|
|---|
| 99 | if (flags & 0x02000000)
|
|---|
| 100 | DEBUGADD(lvl,("0x02000000 "));
|
|---|
| 101 | if (flags & 0x04000000)
|
|---|
| 102 | DEBUGADD(lvl,("0x04000000 "));
|
|---|
| 103 | if (flags & 0x08000000)
|
|---|
| 104 | DEBUGADD(lvl,("0x08000000 "));
|
|---|
| 105 | if (flags & 0x10000000)
|
|---|
| 106 | DEBUGADD(lvl,("0x10000000 "));
|
|---|
| 107 | if (flags & 0x20000000)
|
|---|
| 108 | DEBUGADD(lvl,("0x20000000 "));
|
|---|
| 109 | if (flags & DS_RETURN_DNS_NAME)
|
|---|
| 110 | DEBUGADD(lvl,("DS_RETURN_DNS_NAME "));
|
|---|
| 111 | if (flags & DS_RETURN_FLAT_NAME)
|
|---|
| 112 | DEBUGADD(lvl,("DS_RETURN_FLAT_NAME "));
|
|---|
| 113 | if (flags)
|
|---|
| 114 | DEBUGADD(lvl,("\n"));
|
|---|
| 115 | }
|
|---|
| 116 |
|
|---|
| 117 | /****************************************************************
|
|---|
| 118 | ****************************************************************/
|
|---|
| 119 |
|
|---|
| 120 | static char *dsgetdcname_cache_key(TALLOC_CTX *mem_ctx, const char *domain)
|
|---|
| 121 | {
|
|---|
| 122 | if (!mem_ctx || !domain) {
|
|---|
| 123 | return NULL;
|
|---|
| 124 | }
|
|---|
| 125 |
|
|---|
| 126 | return talloc_asprintf_strupper_m(mem_ctx, DSGETDCNAME_FMT, domain);
|
|---|
| 127 | }
|
|---|
| 128 |
|
|---|
| 129 | /****************************************************************
|
|---|
| 130 | ****************************************************************/
|
|---|
| 131 |
|
|---|
| 132 | static NTSTATUS dsgetdcname_cache_delete(TALLOC_CTX *mem_ctx,
|
|---|
| 133 | const char *domain_name)
|
|---|
| 134 | {
|
|---|
| 135 | char *key;
|
|---|
| 136 |
|
|---|
| 137 | if (!gencache_init()) {
|
|---|
| 138 | return NT_STATUS_INTERNAL_DB_ERROR;
|
|---|
| 139 | }
|
|---|
| 140 |
|
|---|
| 141 | key = dsgetdcname_cache_key(mem_ctx, domain_name);
|
|---|
| 142 | if (!key) {
|
|---|
| 143 | return NT_STATUS_NO_MEMORY;
|
|---|
| 144 | }
|
|---|
| 145 |
|
|---|
| 146 | if (!gencache_del(key)) {
|
|---|
| 147 | return NT_STATUS_UNSUCCESSFUL;
|
|---|
| 148 | }
|
|---|
| 149 |
|
|---|
| 150 | return NT_STATUS_OK;
|
|---|
| 151 | }
|
|---|
| 152 |
|
|---|
| 153 | /****************************************************************
|
|---|
| 154 | ****************************************************************/
|
|---|
| 155 |
|
|---|
| 156 | static NTSTATUS dsgetdcname_cache_store(TALLOC_CTX *mem_ctx,
|
|---|
| 157 | const char *domain_name,
|
|---|
| 158 | const DATA_BLOB *blob)
|
|---|
| 159 | {
|
|---|
| 160 | time_t expire_time;
|
|---|
| 161 | char *key;
|
|---|
| 162 | bool ret = false;
|
|---|
| 163 |
|
|---|
| 164 | if (!gencache_init()) {
|
|---|
| 165 | return NT_STATUS_INTERNAL_DB_ERROR;
|
|---|
| 166 | }
|
|---|
| 167 |
|
|---|
| 168 | key = dsgetdcname_cache_key(mem_ctx, domain_name);
|
|---|
| 169 | if (!key) {
|
|---|
| 170 | return NT_STATUS_NO_MEMORY;
|
|---|
| 171 | }
|
|---|
| 172 |
|
|---|
| 173 | expire_time = time(NULL) + DSGETDCNAME_CACHE_TTL;
|
|---|
| 174 |
|
|---|
| 175 | if (gencache_lock_entry(key) != 0) {
|
|---|
| 176 | return NT_STATUS_LOCK_NOT_GRANTED;
|
|---|
| 177 | }
|
|---|
| 178 |
|
|---|
| 179 | ret = gencache_set_data_blob(key, blob, expire_time);
|
|---|
| 180 |
|
|---|
| 181 | gencache_unlock_entry(key);
|
|---|
| 182 |
|
|---|
| 183 | return ret ? NT_STATUS_OK : NT_STATUS_UNSUCCESSFUL;
|
|---|
| 184 | }
|
|---|
| 185 |
|
|---|
| 186 | /****************************************************************
|
|---|
| 187 | ****************************************************************/
|
|---|
| 188 |
|
|---|
| 189 | #define SET_STRING(x) \
|
|---|
| 190 | talloc_strdup(mem_ctx, x); \
|
|---|
| 191 | NT_STATUS_HAVE_NO_MEMORY(x);
|
|---|
| 192 |
|
|---|
| 193 | static NTSTATUS map_logon29_from_cldap_reply(TALLOC_CTX *mem_ctx,
|
|---|
| 194 | uint32_t flags,
|
|---|
| 195 | struct sockaddr_storage *ss,
|
|---|
| 196 | uint32_t nt_version,
|
|---|
| 197 | union nbt_cldap_netlogon *r,
|
|---|
| 198 | struct nbt_cldap_netlogon_29 *p)
|
|---|
| 199 | {
|
|---|
| 200 | char addr[INET6_ADDRSTRLEN];
|
|---|
| 201 |
|
|---|
| 202 | ZERO_STRUCTP(p);
|
|---|
| 203 |
|
|---|
| 204 | print_sockaddr(addr, sizeof(addr), ss);
|
|---|
| 205 |
|
|---|
| 206 | /* FIXME */
|
|---|
| 207 | p->dc_sock_addr_size = 0x10; /* the w32 winsock addr size */
|
|---|
| 208 | p->dc_sock_addr.family = 2; /* AF_INET */
|
|---|
| 209 | p->dc_sock_addr.pdc_ip = talloc_strdup(mem_ctx, addr);
|
|---|
| 210 |
|
|---|
| 211 | switch (nt_version & 0x0000001f) {
|
|---|
| 212 | case 0:
|
|---|
| 213 | return NT_STATUS_INVALID_PARAMETER;
|
|---|
| 214 | case 1:
|
|---|
| 215 | case 16:
|
|---|
| 216 | case 17:
|
|---|
| 217 | p->pdc_name = SET_STRING(r->logon1.pdc_name);
|
|---|
| 218 | p->domain = SET_STRING(r->logon1.domain_name);
|
|---|
| 219 |
|
|---|
| 220 | if (flags & DS_PDC_REQUIRED) {
|
|---|
| 221 | p->server_type = NBT_SERVER_WRITABLE |
|
|---|
| 222 | NBT_SERVER_PDC;
|
|---|
| 223 | }
|
|---|
| 224 | break;
|
|---|
| 225 | case 2:
|
|---|
| 226 | case 3:
|
|---|
| 227 | case 18:
|
|---|
| 228 | case 19:
|
|---|
| 229 | p->pdc_name = SET_STRING(r->logon3.pdc_name);
|
|---|
| 230 | p->domain = SET_STRING(r->logon3.domain_name);
|
|---|
| 231 | p->pdc_dns_name = SET_STRING(r->logon3.pdc_dns_name);
|
|---|
| 232 | p->dns_domain = SET_STRING(r->logon3.dns_domain);
|
|---|
| 233 | p->server_type = r->logon3.server_type;
|
|---|
| 234 | p->forest = SET_STRING(r->logon3.forest);
|
|---|
| 235 | p->domain_uuid = r->logon3.domain_uuid;
|
|---|
| 236 |
|
|---|
| 237 | break;
|
|---|
| 238 | case 4:
|
|---|
| 239 | case 5:
|
|---|
| 240 | case 6:
|
|---|
| 241 | case 7:
|
|---|
| 242 | p->pdc_name = SET_STRING(r->logon5.pdc_name);
|
|---|
| 243 | p->domain = SET_STRING(r->logon5.domain);
|
|---|
| 244 | p->pdc_dns_name = SET_STRING(r->logon5.pdc_dns_name);
|
|---|
| 245 | p->dns_domain = SET_STRING(r->logon5.dns_domain);
|
|---|
| 246 | p->server_type = r->logon5.server_type;
|
|---|
| 247 | p->forest = SET_STRING(r->logon5.forest);
|
|---|
| 248 | p->domain_uuid = r->logon5.domain_uuid;
|
|---|
| 249 | p->server_site = SET_STRING(r->logon5.server_site);
|
|---|
| 250 | p->client_site = SET_STRING(r->logon5.client_site);
|
|---|
| 251 |
|
|---|
| 252 | break;
|
|---|
| 253 | case 8:
|
|---|
| 254 | case 9:
|
|---|
| 255 | case 10:
|
|---|
| 256 | case 11:
|
|---|
| 257 | case 12:
|
|---|
| 258 | case 13:
|
|---|
| 259 | case 14:
|
|---|
| 260 | case 15:
|
|---|
| 261 | p->pdc_name = SET_STRING(r->logon13.pdc_name);
|
|---|
| 262 | p->domain = SET_STRING(r->logon13.domain);
|
|---|
| 263 | p->pdc_dns_name = SET_STRING(r->logon13.pdc_dns_name);
|
|---|
| 264 | p->dns_domain = SET_STRING(r->logon13.dns_domain);
|
|---|
| 265 | p->server_type = r->logon13.server_type;
|
|---|
| 266 | p->forest = SET_STRING(r->logon13.forest);
|
|---|
| 267 | p->domain_uuid = r->logon13.domain_uuid;
|
|---|
| 268 | p->server_site = SET_STRING(r->logon13.server_site);
|
|---|
| 269 | p->client_site = SET_STRING(r->logon13.client_site);
|
|---|
| 270 |
|
|---|
| 271 | break;
|
|---|
| 272 | case 20:
|
|---|
| 273 | case 21:
|
|---|
| 274 | case 22:
|
|---|
| 275 | case 23:
|
|---|
| 276 | case 24:
|
|---|
| 277 | case 25:
|
|---|
| 278 | case 26:
|
|---|
| 279 | case 27:
|
|---|
| 280 | case 28:
|
|---|
| 281 | p->pdc_name = SET_STRING(r->logon15.pdc_name);
|
|---|
| 282 | p->domain = SET_STRING(r->logon15.domain);
|
|---|
| 283 | p->pdc_dns_name = SET_STRING(r->logon15.pdc_dns_name);
|
|---|
| 284 | p->dns_domain = SET_STRING(r->logon15.dns_domain);
|
|---|
| 285 | p->server_type = r->logon15.server_type;
|
|---|
| 286 | p->forest = SET_STRING(r->logon15.forest);
|
|---|
| 287 | p->domain_uuid = r->logon15.domain_uuid;
|
|---|
| 288 | p->server_site = SET_STRING(r->logon15.server_site);
|
|---|
| 289 | p->client_site = SET_STRING(r->logon15.client_site);
|
|---|
| 290 |
|
|---|
| 291 | break;
|
|---|
| 292 | case 29:
|
|---|
| 293 | case 30:
|
|---|
| 294 | case 31:
|
|---|
| 295 | p->pdc_name = SET_STRING(r->logon29.pdc_name);
|
|---|
| 296 | p->domain = SET_STRING(r->logon29.domain);
|
|---|
| 297 | p->pdc_dns_name = SET_STRING(r->logon29.pdc_dns_name);
|
|---|
| 298 | p->dns_domain = SET_STRING(r->logon29.dns_domain);
|
|---|
| 299 | p->server_type = r->logon29.server_type;
|
|---|
| 300 | p->forest = SET_STRING(r->logon29.forest);
|
|---|
| 301 | p->domain_uuid = r->logon29.domain_uuid;
|
|---|
| 302 | p->server_site = SET_STRING(r->logon29.server_site);
|
|---|
| 303 | p->client_site = SET_STRING(r->logon29.client_site);
|
|---|
| 304 | p->next_closest_site = SET_STRING(r->logon29.next_closest_site);
|
|---|
| 305 |
|
|---|
| 306 | break;
|
|---|
| 307 | default:
|
|---|
| 308 | return NT_STATUS_INVALID_PARAMETER;
|
|---|
| 309 | }
|
|---|
| 310 |
|
|---|
| 311 | return NT_STATUS_OK;
|
|---|
| 312 | }
|
|---|
| 313 |
|
|---|
| 314 | /****************************************************************
|
|---|
| 315 | ****************************************************************/
|
|---|
| 316 |
|
|---|
| 317 | static NTSTATUS store_cldap_reply(TALLOC_CTX *mem_ctx,
|
|---|
| 318 | uint32_t flags,
|
|---|
| 319 | struct sockaddr_storage *ss,
|
|---|
| 320 | uint32_t nt_version,
|
|---|
| 321 | union nbt_cldap_netlogon *r)
|
|---|
| 322 | {
|
|---|
| 323 | DATA_BLOB blob;
|
|---|
| 324 | enum ndr_err_code ndr_err;
|
|---|
| 325 | NTSTATUS status;
|
|---|
| 326 | struct nbt_cldap_netlogon_29 logon29;
|
|---|
| 327 |
|
|---|
| 328 | status = map_logon29_from_cldap_reply(mem_ctx, flags, ss,
|
|---|
| 329 | nt_version, r, &logon29);
|
|---|
| 330 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 331 | return status;
|
|---|
| 332 | }
|
|---|
| 333 |
|
|---|
| 334 | ndr_err = ndr_push_struct_blob(&blob, mem_ctx, &logon29,
|
|---|
| 335 | (ndr_push_flags_fn_t)ndr_push_nbt_cldap_netlogon_29);
|
|---|
| 336 | if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
|
|---|
| 337 | return ndr_map_error2ntstatus(ndr_err);
|
|---|
| 338 | }
|
|---|
| 339 |
|
|---|
| 340 | if (logon29.domain) {
|
|---|
| 341 | status = dsgetdcname_cache_store(mem_ctx, logon29.domain, &blob);
|
|---|
| 342 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 343 | goto done;
|
|---|
| 344 | }
|
|---|
| 345 | if (logon29.client_site) {
|
|---|
| 346 | sitename_store(logon29.domain, logon29.client_site);
|
|---|
| 347 | }
|
|---|
| 348 | }
|
|---|
| 349 | if (logon29.dns_domain) {
|
|---|
| 350 | status = dsgetdcname_cache_store(mem_ctx, logon29.dns_domain, &blob);
|
|---|
| 351 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 352 | goto done;
|
|---|
| 353 | }
|
|---|
| 354 | if (logon29.client_site) {
|
|---|
| 355 | sitename_store(logon29.dns_domain, logon29.client_site);
|
|---|
| 356 | }
|
|---|
| 357 | }
|
|---|
| 358 |
|
|---|
| 359 | done:
|
|---|
| 360 | data_blob_free(&blob);
|
|---|
| 361 |
|
|---|
| 362 | return status;
|
|---|
| 363 | }
|
|---|
| 364 |
|
|---|
| 365 | /****************************************************************
|
|---|
| 366 | ****************************************************************/
|
|---|
| 367 |
|
|---|
| 368 | static NTSTATUS dsgetdcname_cache_refresh(TALLOC_CTX *mem_ctx,
|
|---|
| 369 | struct messaging_context *msg_ctx,
|
|---|
| 370 | const char *domain_name,
|
|---|
| 371 | struct GUID *domain_guid,
|
|---|
| 372 | uint32_t flags,
|
|---|
| 373 | const char *site_name,
|
|---|
| 374 | struct netr_DsRGetDCNameInfo *info)
|
|---|
| 375 | {
|
|---|
| 376 | struct netr_DsRGetDCNameInfo *dc_info;
|
|---|
| 377 |
|
|---|
| 378 | return dsgetdcname(mem_ctx,
|
|---|
| 379 | msg_ctx,
|
|---|
| 380 | domain_name,
|
|---|
| 381 | domain_guid,
|
|---|
| 382 | site_name,
|
|---|
| 383 | flags | DS_FORCE_REDISCOVERY,
|
|---|
| 384 | &dc_info);
|
|---|
| 385 | }
|
|---|
| 386 |
|
|---|
| 387 | /****************************************************************
|
|---|
| 388 | ****************************************************************/
|
|---|
| 389 |
|
|---|
| 390 | static uint32_t get_cldap_reply_server_flags(union nbt_cldap_netlogon *r,
|
|---|
| 391 | uint32_t nt_version)
|
|---|
| 392 | {
|
|---|
| 393 | switch (nt_version & 0x0000001f) {
|
|---|
| 394 | case 0:
|
|---|
| 395 | case 1:
|
|---|
| 396 | case 16:
|
|---|
| 397 | case 17:
|
|---|
| 398 | return 0;
|
|---|
| 399 | case 2:
|
|---|
| 400 | case 3:
|
|---|
| 401 | case 18:
|
|---|
| 402 | case 19:
|
|---|
| 403 | return r->logon3.server_type;
|
|---|
| 404 | case 4:
|
|---|
| 405 | case 5:
|
|---|
| 406 | case 6:
|
|---|
| 407 | case 7:
|
|---|
| 408 | return r->logon5.server_type;
|
|---|
| 409 | case 8:
|
|---|
| 410 | case 9:
|
|---|
| 411 | case 10:
|
|---|
| 412 | case 11:
|
|---|
| 413 | case 12:
|
|---|
| 414 | case 13:
|
|---|
| 415 | case 14:
|
|---|
| 416 | case 15:
|
|---|
| 417 | return r->logon13.server_type;
|
|---|
| 418 | case 20:
|
|---|
| 419 | case 21:
|
|---|
| 420 | case 22:
|
|---|
| 421 | case 23:
|
|---|
| 422 | case 24:
|
|---|
| 423 | case 25:
|
|---|
| 424 | case 26:
|
|---|
| 425 | case 27:
|
|---|
| 426 | case 28:
|
|---|
| 427 | return r->logon15.server_type;
|
|---|
| 428 | case 29:
|
|---|
| 429 | case 30:
|
|---|
| 430 | case 31:
|
|---|
| 431 | return r->logon29.server_type;
|
|---|
| 432 | default:
|
|---|
| 433 | return 0;
|
|---|
| 434 | }
|
|---|
| 435 | }
|
|---|
| 436 |
|
|---|
| 437 | /****************************************************************
|
|---|
| 438 | ****************************************************************/
|
|---|
| 439 |
|
|---|
| 440 | #define RETURN_ON_FALSE(x) if (!x) return false;
|
|---|
| 441 |
|
|---|
| 442 | static bool check_cldap_reply_required_flags(uint32_t ret_flags,
|
|---|
| 443 | uint32_t req_flags)
|
|---|
| 444 | {
|
|---|
| 445 | if (ret_flags == 0) {
|
|---|
| 446 | return true;
|
|---|
| 447 | }
|
|---|
| 448 |
|
|---|
| 449 | if (req_flags & DS_PDC_REQUIRED)
|
|---|
| 450 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_PDC);
|
|---|
| 451 |
|
|---|
| 452 | if (req_flags & DS_GC_SERVER_REQUIRED)
|
|---|
| 453 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_GC);
|
|---|
| 454 |
|
|---|
| 455 | if (req_flags & DS_ONLY_LDAP_NEEDED)
|
|---|
| 456 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_LDAP);
|
|---|
| 457 |
|
|---|
| 458 | if ((req_flags & DS_DIRECTORY_SERVICE_REQUIRED) ||
|
|---|
| 459 | (req_flags & DS_DIRECTORY_SERVICE_PREFERRED))
|
|---|
| 460 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_DS);
|
|---|
| 461 |
|
|---|
| 462 | if (req_flags & DS_KDC_REQUIRED)
|
|---|
| 463 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_KDC);
|
|---|
| 464 |
|
|---|
| 465 | if (req_flags & DS_TIMESERV_REQUIRED)
|
|---|
| 466 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_TIMESERV);
|
|---|
| 467 |
|
|---|
| 468 | if (req_flags & DS_WRITABLE_REQUIRED)
|
|---|
| 469 | RETURN_ON_FALSE(ret_flags & NBT_SERVER_WRITABLE);
|
|---|
| 470 |
|
|---|
| 471 | return true;
|
|---|
| 472 | }
|
|---|
| 473 |
|
|---|
| 474 | /****************************************************************
|
|---|
| 475 | ****************************************************************/
|
|---|
| 476 |
|
|---|
| 477 | static NTSTATUS dsgetdcname_cache_fetch(TALLOC_CTX *mem_ctx,
|
|---|
| 478 | const char *domain_name,
|
|---|
| 479 | struct GUID *domain_guid,
|
|---|
| 480 | uint32_t flags,
|
|---|
| 481 | const char *site_name,
|
|---|
| 482 | struct netr_DsRGetDCNameInfo **info_p,
|
|---|
| 483 | bool *expired)
|
|---|
| 484 | {
|
|---|
| 485 | char *key;
|
|---|
| 486 | DATA_BLOB blob;
|
|---|
| 487 | enum ndr_err_code ndr_err;
|
|---|
| 488 | struct netr_DsRGetDCNameInfo *info;
|
|---|
| 489 | union nbt_cldap_netlogon p;
|
|---|
| 490 | struct nbt_cldap_netlogon_29 r;
|
|---|
| 491 | NTSTATUS status;
|
|---|
| 492 |
|
|---|
| 493 | if (!gencache_init()) {
|
|---|
| 494 | return NT_STATUS_INTERNAL_DB_ERROR;
|
|---|
| 495 | }
|
|---|
| 496 |
|
|---|
| 497 | key = dsgetdcname_cache_key(mem_ctx, domain_name);
|
|---|
| 498 | if (!key) {
|
|---|
| 499 | return NT_STATUS_NO_MEMORY;
|
|---|
| 500 | }
|
|---|
| 501 |
|
|---|
| 502 | if (!gencache_get_data_blob(key, &blob, expired)) {
|
|---|
| 503 | return NT_STATUS_OBJECT_NAME_NOT_FOUND;
|
|---|
| 504 | }
|
|---|
| 505 |
|
|---|
| 506 | info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
|
|---|
| 507 | if (!info) {
|
|---|
| 508 | return NT_STATUS_NO_MEMORY;
|
|---|
| 509 | }
|
|---|
| 510 |
|
|---|
| 511 | ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, &r,
|
|---|
| 512 | (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon_29);
|
|---|
| 513 |
|
|---|
| 514 | data_blob_free(&blob);
|
|---|
| 515 | if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
|
|---|
| 516 | dsgetdcname_cache_delete(mem_ctx, domain_name);
|
|---|
| 517 | return ndr_map_error2ntstatus(ndr_err);
|
|---|
| 518 | }
|
|---|
| 519 |
|
|---|
| 520 | p.logon29 = r;
|
|---|
| 521 |
|
|---|
| 522 | status = make_dc_info_from_cldap_reply(mem_ctx, flags, NULL,
|
|---|
| 523 | 29,
|
|---|
| 524 | &p, &info);
|
|---|
| 525 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 526 | return status;
|
|---|
| 527 | }
|
|---|
| 528 |
|
|---|
| 529 | if (DEBUGLEVEL >= 10) {
|
|---|
| 530 | NDR_PRINT_DEBUG(netr_DsRGetDCNameInfo, info);
|
|---|
| 531 | }
|
|---|
| 532 |
|
|---|
| 533 | /* check flags */
|
|---|
| 534 | if (!check_cldap_reply_required_flags(info->dc_flags, flags)) {
|
|---|
| 535 | DEBUG(10,("invalid flags\n"));
|
|---|
| 536 | return NT_STATUS_INVALID_PARAMETER;
|
|---|
| 537 | }
|
|---|
| 538 |
|
|---|
| 539 | if ((flags & DS_IP_REQUIRED) &&
|
|---|
| 540 | (info->dc_address_type != DS_ADDRESS_TYPE_INET)) {
|
|---|
| 541 | return NT_STATUS_INVALID_PARAMETER_MIX;
|
|---|
| 542 | }
|
|---|
| 543 |
|
|---|
| 544 | *info_p = info;
|
|---|
| 545 |
|
|---|
| 546 | return NT_STATUS_OK;
|
|---|
| 547 | }
|
|---|
| 548 |
|
|---|
| 549 | /****************************************************************
|
|---|
| 550 | ****************************************************************/
|
|---|
| 551 |
|
|---|
| 552 | static NTSTATUS dsgetdcname_cached(TALLOC_CTX *mem_ctx,
|
|---|
| 553 | struct messaging_context *msg_ctx,
|
|---|
| 554 | const char *domain_name,
|
|---|
| 555 | struct GUID *domain_guid,
|
|---|
| 556 | uint32_t flags,
|
|---|
| 557 | const char *site_name,
|
|---|
| 558 | struct netr_DsRGetDCNameInfo **info)
|
|---|
| 559 | {
|
|---|
| 560 | NTSTATUS status;
|
|---|
| 561 | bool expired = false;
|
|---|
| 562 |
|
|---|
| 563 | status = dsgetdcname_cache_fetch(mem_ctx, domain_name, domain_guid,
|
|---|
| 564 | flags, site_name, info, &expired);
|
|---|
| 565 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 566 | DEBUG(10,("dsgetdcname_cached: cache fetch failed with: %s\n",
|
|---|
| 567 | nt_errstr(status)));
|
|---|
| 568 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
|---|
| 569 | }
|
|---|
| 570 |
|
|---|
| 571 | if (flags & DS_BACKGROUND_ONLY) {
|
|---|
| 572 | return status;
|
|---|
| 573 | }
|
|---|
| 574 |
|
|---|
| 575 | if (expired) {
|
|---|
| 576 | status = dsgetdcname_cache_refresh(mem_ctx, msg_ctx,
|
|---|
| 577 | domain_name,
|
|---|
| 578 | domain_guid, flags,
|
|---|
| 579 | site_name, *info);
|
|---|
| 580 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 581 | return status;
|
|---|
| 582 | }
|
|---|
| 583 | }
|
|---|
| 584 |
|
|---|
| 585 | return status;
|
|---|
| 586 | }
|
|---|
| 587 |
|
|---|
| 588 | /****************************************************************
|
|---|
| 589 | ****************************************************************/
|
|---|
| 590 |
|
|---|
| 591 | static bool check_allowed_required_flags(uint32_t flags,
|
|---|
| 592 | const char *site_name)
|
|---|
| 593 | {
|
|---|
| 594 | uint32_t return_type = flags & (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME);
|
|---|
| 595 | uint32_t offered_type = flags & (DS_IS_FLAT_NAME|DS_IS_DNS_NAME);
|
|---|
| 596 | uint32_t query_type = flags & (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY);
|
|---|
| 597 |
|
|---|
| 598 | /* FIXME: check for DSGETDC_VALID_FLAGS and check for excluse bits
|
|---|
| 599 | * (DS_PDC_REQUIRED, DS_KDC_REQUIRED, DS_GC_SERVER_REQUIRED) */
|
|---|
| 600 |
|
|---|
| 601 | debug_dsdcinfo_flags(10, flags);
|
|---|
| 602 |
|
|---|
| 603 | if ((flags & DS_TRY_NEXTCLOSEST_SITE) && site_name) {
|
|---|
| 604 | return false;
|
|---|
| 605 | }
|
|---|
| 606 |
|
|---|
| 607 | if (return_type == (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME)) {
|
|---|
| 608 | return false;
|
|---|
| 609 | }
|
|---|
| 610 |
|
|---|
| 611 | if (offered_type == (DS_IS_DNS_NAME|DS_IS_FLAT_NAME)) {
|
|---|
| 612 | return false;
|
|---|
| 613 | }
|
|---|
| 614 |
|
|---|
| 615 | if (query_type == (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY)) {
|
|---|
| 616 | return false;
|
|---|
| 617 | }
|
|---|
| 618 |
|
|---|
| 619 | #if 0
|
|---|
| 620 | if ((flags & DS_RETURN_DNS_NAME) && (!(flags & DS_IP_REQUIRED))) {
|
|---|
| 621 | printf("gd: here5 \n");
|
|---|
| 622 | return false;
|
|---|
| 623 | }
|
|---|
| 624 | #endif
|
|---|
| 625 | return true;
|
|---|
| 626 | }
|
|---|
| 627 |
|
|---|
| 628 | /****************************************************************
|
|---|
| 629 | ****************************************************************/
|
|---|
| 630 |
|
|---|
| 631 | static NTSTATUS discover_dc_netbios(TALLOC_CTX *mem_ctx,
|
|---|
| 632 | const char *domain_name,
|
|---|
| 633 | uint32_t flags,
|
|---|
| 634 | struct ip_service_name **returned_dclist,
|
|---|
| 635 | int *returned_count)
|
|---|
| 636 | {
|
|---|
| 637 | NTSTATUS status;
|
|---|
| 638 | enum nbt_name_type name_type = NBT_NAME_LOGON;
|
|---|
| 639 | struct ip_service *iplist;
|
|---|
| 640 | int i;
|
|---|
| 641 | struct ip_service_name *dclist = NULL;
|
|---|
| 642 | int count;
|
|---|
| 643 |
|
|---|
| 644 | *returned_dclist = NULL;
|
|---|
| 645 | *returned_count = 0;
|
|---|
| 646 |
|
|---|
| 647 | if (lp_disable_netbios()) {
|
|---|
| 648 | return NT_STATUS_NOT_SUPPORTED;
|
|---|
| 649 | }
|
|---|
| 650 |
|
|---|
| 651 | if (flags & DS_PDC_REQUIRED) {
|
|---|
| 652 | name_type = NBT_NAME_PDC;
|
|---|
| 653 | }
|
|---|
| 654 |
|
|---|
| 655 | status = internal_resolve_name(domain_name, name_type, NULL,
|
|---|
| 656 | &iplist, &count,
|
|---|
| 657 | "lmhosts wins bcast");
|
|---|
| 658 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 659 | DEBUG(10,("discover_dc_netbios: failed to find DC\n"));
|
|---|
| 660 | return status;
|
|---|
| 661 | }
|
|---|
| 662 |
|
|---|
| 663 | dclist = TALLOC_ZERO_ARRAY(mem_ctx, struct ip_service_name, count);
|
|---|
| 664 | if (!dclist) {
|
|---|
| 665 | return NT_STATUS_NO_MEMORY;
|
|---|
| 666 | }
|
|---|
| 667 |
|
|---|
| 668 | for (i=0; i<count; i++) {
|
|---|
| 669 |
|
|---|
| 670 | char addr[INET6_ADDRSTRLEN];
|
|---|
| 671 | struct ip_service_name *r = &dclist[i];
|
|---|
| 672 |
|
|---|
| 673 | print_sockaddr(addr, sizeof(addr),
|
|---|
| 674 | &iplist[i].ss);
|
|---|
| 675 |
|
|---|
| 676 | r->ss = iplist[i].ss;
|
|---|
| 677 | r->port = iplist[i].port;
|
|---|
| 678 | r->hostname = talloc_strdup(mem_ctx, addr);
|
|---|
| 679 | if (!r->hostname) {
|
|---|
| 680 | return NT_STATUS_NO_MEMORY;
|
|---|
| 681 | }
|
|---|
| 682 |
|
|---|
| 683 | }
|
|---|
| 684 |
|
|---|
| 685 | *returned_dclist = dclist;
|
|---|
| 686 | *returned_count = count;
|
|---|
| 687 |
|
|---|
| 688 | return NT_STATUS_OK;
|
|---|
| 689 | }
|
|---|
| 690 |
|
|---|
| 691 | /****************************************************************
|
|---|
| 692 | ****************************************************************/
|
|---|
| 693 |
|
|---|
| 694 | static NTSTATUS discover_dc_dns(TALLOC_CTX *mem_ctx,
|
|---|
| 695 | const char *domain_name,
|
|---|
| 696 | struct GUID *domain_guid,
|
|---|
| 697 | uint32_t flags,
|
|---|
| 698 | const char *site_name,
|
|---|
| 699 | struct ip_service_name **returned_dclist,
|
|---|
| 700 | int *return_count)
|
|---|
| 701 | {
|
|---|
| 702 | int i, j;
|
|---|
| 703 | NTSTATUS status;
|
|---|
| 704 | struct dns_rr_srv *dcs = NULL;
|
|---|
| 705 | int numdcs = 0;
|
|---|
| 706 | int numaddrs = 0;
|
|---|
| 707 | struct ip_service_name *dclist = NULL;
|
|---|
| 708 | int count = 0;
|
|---|
| 709 |
|
|---|
| 710 | if (flags & DS_PDC_REQUIRED) {
|
|---|
| 711 | status = ads_dns_query_pdc(mem_ctx, domain_name,
|
|---|
| 712 | &dcs, &numdcs);
|
|---|
| 713 | } else if (flags & DS_GC_SERVER_REQUIRED) {
|
|---|
| 714 | status = ads_dns_query_gcs(mem_ctx, domain_name, site_name,
|
|---|
| 715 | &dcs, &numdcs);
|
|---|
| 716 | } else if (flags & DS_KDC_REQUIRED) {
|
|---|
| 717 | status = ads_dns_query_kdcs(mem_ctx, domain_name, site_name,
|
|---|
| 718 | &dcs, &numdcs);
|
|---|
| 719 | } else if (flags & DS_DIRECTORY_SERVICE_REQUIRED) {
|
|---|
| 720 | status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
|
|---|
| 721 | &dcs, &numdcs);
|
|---|
| 722 | } else if (domain_guid) {
|
|---|
| 723 | status = ads_dns_query_dcs_guid(mem_ctx, domain_name,
|
|---|
| 724 | domain_guid, &dcs, &numdcs);
|
|---|
| 725 | } else {
|
|---|
| 726 | status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
|
|---|
| 727 | &dcs, &numdcs);
|
|---|
| 728 | }
|
|---|
| 729 |
|
|---|
| 730 | if (!NT_STATUS_IS_OK(status)) {
|
|---|
| 731 | return status;
|
|---|
| 732 | }
|
|---|
| 733 |
|
|---|
| 734 | if (numdcs == 0) {
|
|---|
| 735 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
|---|
| 736 | }
|
|---|
| 737 |
|
|---|
| 738 | for (i=0;i<numdcs;i++) {
|
|---|
| 739 | numaddrs += MAX(dcs[i].num_ips,1);
|
|---|
| 740 | }
|
|---|
| 741 |
|
|---|
| 742 | dclist = TALLOC_ZERO_ARRAY(mem_ctx,
|
|---|
| 743 | struct ip_service_name,
|
|---|
| 744 | numaddrs);
|
|---|
| 745 | if (!dclist) {
|
|---|
| 746 | return NT_STATUS_NO_MEMORY;
|
|---|
| 747 | }
|
|---|
| 748 |
|
|---|
| 749 | /* now unroll the list of IP addresses */
|
|---|
| 750 |
|
|---|
| 751 | *return_count = 0;
|
|---|
| 752 | i = 0;
|
|---|
| 753 | j = 0;
|
|---|
| 754 |
|
|---|
| 755 | while ((i < numdcs) && (count < numaddrs)) {
|
|---|
| 756 |
|
|---|
| 757 | struct ip_service_name *r = &dclist[count];
|
|---|
| 758 |
|
|---|
| 759 | r->port = dcs[count].port;
|
|---|
| 760 | r->hostname = dcs[count].hostname;
|
|---|
| 761 |
|
|---|
| 762 | /* If we don't have an IP list for a name, lookup it up */
|
|---|
| 763 |
|
|---|
| 764 | if (!dcs[i].ss_s) {
|
|---|
| 765 | interpret_string_addr(&r->ss, dcs[i].hostname, 0);
|
|---|
| 766 | i++;
|
|---|
| 767 | j = 0;
|
|---|
| 768 | } else {
|
|---|
| 769 | /* use the IP addresses from the SRV sresponse */
|
|---|
| 770 |
|
|---|
| 771 | if (j >= dcs[i].num_ips) {
|
|---|
| 772 | i++;
|
|---|
| 773 | j = 0;
|
|---|
| 774 | continue;
|
|---|
| 775 | }
|
|---|
| 776 |
|
|---|
| 777 | r->ss = dcs[i].ss_s[j];
|
|---|
| 778 | j++;
|
|---|
| 779 | }
|
|---|
| 780 |
|
|---|
| 781 | /* make sure it is a valid IP. I considered checking the
|
|---|
| 782 | * negative connection cache, but this is the wrong place for
|
|---|
| 783 | * it. Maybe only as a hac. After think about it, if all of
|
|---|
| 784 | * the IP addresses retuend from DNS are dead, what hope does a
|
|---|
| 785 | * netbios name lookup have? The standard reason for falling
|
|---|
| 786 | * back to netbios lookups is that our DNS server doesn't know
|
|---|
| 787 | * anything about the DC's -- jerry */
|
|---|
| 788 |
|
|---|
| 789 | if (!is_zero_addr(&r->ss)) {
|
|---|
| 790 | count++;
|
|---|
| 791 | continue;
|
|---|
| 792 | }
|
|---|
| 793 | }
|
|---|
| 794 |
|
|---|
| 795 | *returned_dclist = dclist;
|
|---|
| 796 | *return_count = count;
|
|---|
| 797 |
|
|---|
| 798 | if (count > 0) {
|
|---|
| 799 | return NT_STATUS_OK;
|
|---|
| 800 | }
|
|---|
| 801 |
|
|---|
| 802 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
|---|
| 803 | }
|
|---|
| 804 |
|
|---|
| 805 | /****************************************************************
|
|---|
| 806 | ****************************************************************/
|
|---|
| 807 |
|
|---|
| 808 | static NTSTATUS make_domain_controller_info(TALLOC_CTX *mem_ctx,
|
|---|
| 809 | const char *dc_unc,
|
|---|
| 810 | const char *dc_address,
|
|---|
| 811 | uint32_t dc_address_type,
|
|---|
| 812 | const struct GUID *domain_guid,
|
|---|
| 813 | const char *domain_name,
|
|---|
| 814 | const char *forest_name,
|
|---|
| 815 | uint32_t flags,
|
|---|
| 816 | const char *dc_site_name,
|
|---|
| 817 | const char *client_site_name,
|
|---|
| 818 | struct netr_DsRGetDCNameInfo **info_out)
|
|---|
| 819 | {
|
|---|
| 820 | struct netr_DsRGetDCNameInfo *info;
|
|---|
| 821 |
|
|---|
| 822 | info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
|
|---|
| 823 | NT_STATUS_HAVE_NO_MEMORY(info);
|
|---|
| 824 |
|
|---|
| 825 | if (dc_unc) {
|
|---|
| 826 | info->dc_unc = talloc_strdup(mem_ctx, dc_unc);
|
|---|
| 827 | NT_STATUS_HAVE_NO_MEMORY(info->dc_unc);
|
|---|
| 828 | }
|
|---|
| 829 |
|
|---|
| 830 | if (dc_address) {
|
|---|
| 831 | if (!(dc_address[0] == '\\' && dc_address[1] == '\\')) {
|
|---|
| 832 | info->dc_address = talloc_asprintf(mem_ctx, "\\\\%s",
|
|---|
| 833 | dc_address);
|
|---|
| 834 | } else {
|
|---|
| 835 | info->dc_address = talloc_strdup(mem_ctx, dc_address);
|
|---|
| 836 | }
|
|---|
| 837 | NT_STATUS_HAVE_NO_MEMORY(info->dc_address);
|
|---|
| 838 | }
|
|---|
| 839 |
|
|---|
| 840 | info->dc_address_type = dc_address_type;
|
|---|
| 841 |
|
|---|
| 842 | if (domain_guid) {
|
|---|
| 843 | info->domain_guid = *domain_guid;
|
|---|
| 844 | }
|
|---|
| 845 |
|
|---|
| 846 | if (domain_name) {
|
|---|
| 847 | info->domain_name = talloc_strdup(mem_ctx, domain_name);
|
|---|
| 848 | NT_STATUS_HAVE_NO_MEMORY(info->domain_name);
|
|---|
| 849 | }
|
|---|
| 850 |
|
|---|
| 851 | if (forest_name && *forest_name) {
|
|---|
| 852 | info->forest_name = talloc_strdup(mem_ctx, forest_name);
|
|---|
| 853 | NT_STATUS_HAVE_NO_MEMORY(info->forest_name);
|
|---|
| 854 | flags |= DS_DNS_FOREST;
|
|---|
| 855 | }
|
|---|
| 856 |
|
|---|
| 857 | info->dc_flags = flags;
|
|---|
| 858 |
|
|---|
| 859 | if (dc_site_name) {
|
|---|
| 860 | info->dc_site_name = talloc_strdup(mem_ctx, dc_site_name);
|
|---|
| 861 | NT_STATUS_HAVE_NO_MEMORY(info->dc_site_name);
|
|---|
| 862 | }
|
|---|
| 863 |
|
|---|
| 864 | if (client_site_name) {
|
|---|
| 865 | info->client_site_name = talloc_strdup(mem_ctx,
|
|---|
| 866 | client_site_name);
|
|---|
| 867 | NT_STATUS_HAVE_NO_MEMORY(info->client_site_name);
|
|---|
| 868 | }
|
|---|
| 869 |
|
|---|
| 870 | *info_out = info;
|
|---|
| 871 |
|
|---|
| 872 | return NT_STATUS_OK;
|
|---|
| 873 | }
|
|---|
| 874 |
|
|---|
| 875 | /****************************************************************
|
|---|
| 876 | ****************************************************************/
|
|---|
| 877 |
|
|---|
| 878 | static void map_dc_and_domain_names(uint32_t flags,
|
|---|
| 879 | const char *dc_name,
|
|---|
| 880 | const char *domain_name,
|
|---|
| 881 | const char *dns_dc_name,
|
|---|
| 882 | const char *dns_domain_name,
|
|---|
| 883 | uint32_t *dc_flags,
|
|---|
| 884 | const char **hostname_p,
|
|---|
| 885 | const char **domain_p)
|
|---|
| 886 | {
|
|---|
| 887 | switch (flags & 0xf0000000) {
|
|---|
| 888 | case DS_RETURN_FLAT_NAME:
|
|---|
| 889 | if (dc_name && domain_name &&
|
|---|
| 890 | *dc_name && *domain_name) {
|
|---|
| 891 | *hostname_p = dc_name;
|
|---|
| 892 | *domain_p = domain_name;
|
|---|
| 893 | break;
|
|---|
| 894 | }
|
|---|
| 895 | case DS_RETURN_DNS_NAME:
|
|---|
| 896 | default:
|
|---|
| 897 | if (dns_dc_name && dns_domain_name &&
|
|---|
| 898 | *dns_dc_name && *dns_domain_name) {
|
|---|
| 899 | *hostname_p = dns_dc_name;
|
|---|
| 900 | *domain_p = dns_domain_name;
|
|---|
| 901 | *dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
|
|---|
| 902 | break;
|
|---|
| 903 | }
|
|---|
| 904 | if (dc_name && domain_name &&
|
|---|
| 905 | *dc_name && *domain_name) {
|
|---|
| 906 | *hostname_p = dc_name;
|
|---|
| 907 | *domain_p = domain_name;
|
|---|
| 908 | break;
|
|---|
| 909 | }
|
|---|
| 910 | }
|
|---|
| 911 | }
|
|---|
| 912 |
|
|---|
| 913 | /****************************************************************
|
|---|
| 914 | ****************************************************************/
|
|---|
| 915 |
|
|---|
| 916 | static NTSTATUS make_dc_info_from_cldap_reply(TALLOC_CTX *mem_ctx,
|
|---|
| 917 | uint32_t flags,
|
|---|
| 918 | struct sockaddr_storage *ss,
|
|---|
| 919 | uint32_t nt_version,
|
|---|
| 920 | union nbt_cldap_netlogon *r,
|
|---|
| 921 | struct netr_DsRGetDCNameInfo **info)
|
|---|
| 922 | {
|
|---|
| 923 | const char *dc_hostname = NULL;
|
|---|
| 924 | const char *dc_domain_name = NULL;
|
|---|
| 925 | const char *dc_address = NULL;
|
|---|
| 926 | const char *dc_forest = NULL;
|
|---|
| 927 | uint32_t dc_address_type = 0;
|
|---|
| 928 | uint32_t dc_flags = 0;
|
|---|
| 929 | struct GUID *dc_domain_guid = NULL;
|
|---|
| 930 | const char *dc_server_site = NULL;
|
|---|
| 931 | const char *dc_client_site = NULL;
|
|---|
| 932 |
|
|---|
| 933 | char addr[INET6_ADDRSTRLEN];
|
|---|
| 934 |
|
|---|
| 935 | if (ss) {
|
|---|
| 936 | print_sockaddr(addr, sizeof(addr), ss);
|
|---|
| 937 | dc_address = addr;
|
|---|
| 938 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
|---|
| 939 | }
|
|---|
| 940 |
|
|---|
| 941 | switch (nt_version & 0x0000001f) {
|
|---|
| 942 | case 0:
|
|---|
| 943 | case 1:
|
|---|
| 944 | case 16:
|
|---|
| 945 | case 17:
|
|---|
| 946 | if (!ss) {
|
|---|
| 947 | dc_address = r->logon1.pdc_name;
|
|---|
| 948 | dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
|
|---|
| 949 | }
|
|---|
| 950 |
|
|---|
| 951 | map_dc_and_domain_names(flags,
|
|---|
| 952 | r->logon1.pdc_name,
|
|---|
| 953 | r->logon1.domain_name,
|
|---|
| 954 | NULL,
|
|---|
| 955 | NULL,
|
|---|
| 956 | &dc_flags,
|
|---|
| 957 | &dc_hostname,
|
|---|
| 958 | &dc_domain_name);
|
|---|
| 959 |
|
|---|
| 960 | if (flags & DS_PDC_REQUIRED) {
|
|---|
| 961 | dc_flags = NBT_SERVER_WRITABLE | NBT_SERVER_PDC;
|
|---|
| 962 | }
|
|---|
| 963 | break;
|
|---|
| 964 | case 2:
|
|---|
| 965 | case 3:
|
|---|
| 966 | case 18:
|
|---|
| 967 | case 19:
|
|---|
| 968 | if (!ss) {
|
|---|
| 969 | dc_address = r->logon3.pdc_ip;
|
|---|
| 970 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
|---|
| 971 | }
|
|---|
| 972 |
|
|---|
| 973 | map_dc_and_domain_names(flags,
|
|---|
| 974 | r->logon3.pdc_name,
|
|---|
| 975 | r->logon3.domain_name,
|
|---|
| 976 | r->logon3.pdc_dns_name,
|
|---|
| 977 | r->logon3.dns_domain,
|
|---|
| 978 | &dc_flags,
|
|---|
| 979 | &dc_hostname,
|
|---|
| 980 | &dc_domain_name);
|
|---|
| 981 |
|
|---|
| 982 | dc_flags |= r->logon3.server_type;
|
|---|
| 983 | dc_forest = r->logon3.forest;
|
|---|
| 984 | dc_domain_guid = &r->logon3.domain_uuid;
|
|---|
| 985 |
|
|---|
| 986 | break;
|
|---|
| 987 | case 4:
|
|---|
| 988 | case 5:
|
|---|
| 989 | case 6:
|
|---|
| 990 | case 7:
|
|---|
| 991 | if (!ss) {
|
|---|
| 992 | dc_address = r->logon5.pdc_name;
|
|---|
| 993 | dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
|
|---|
| 994 | }
|
|---|
| 995 |
|
|---|
| 996 | map_dc_and_domain_names(flags,
|
|---|
| 997 | r->logon5.pdc_name,
|
|---|
| 998 | r->logon5.domain,
|
|---|
| 999 | r->logon5.pdc_dns_name,
|
|---|
| 1000 | r->logon5.dns_domain,
|
|---|
| 1001 | &dc_flags,
|
|---|
| 1002 | &dc_hostname,
|
|---|
| 1003 | &dc_domain_name);
|
|---|
| 1004 |
|
|---|
| 1005 | dc_flags |= r->logon5.server_type;
|
|---|
| 1006 | dc_forest = r->logon5.forest;
|
|---|
| 1007 | dc_domain_guid = &r->logon5.domain_uuid;
|
|---|
| 1008 | dc_server_site = r->logon5.server_site;
|
|---|
| 1009 | dc_client_site = r->logon5.client_site;
|
|---|
| 1010 |
|
|---|
| 1011 | break;
|
|---|
| 1012 | case 8:
|
|---|
| 1013 | case 9:
|
|---|
| 1014 | case 10:
|
|---|
| 1015 | case 11:
|
|---|
| 1016 | case 12:
|
|---|
| 1017 | case 13:
|
|---|
| 1018 | case 14:
|
|---|
| 1019 | case 15:
|
|---|
| 1020 | if (!ss) {
|
|---|
| 1021 | dc_address = r->logon13.dc_sock_addr.pdc_ip;
|
|---|
| 1022 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
|---|
| 1023 | }
|
|---|
| 1024 |
|
|---|
| 1025 | map_dc_and_domain_names(flags,
|
|---|
| 1026 | r->logon13.pdc_name,
|
|---|
| 1027 | r->logon13.domain,
|
|---|
| 1028 | r->logon13.pdc_dns_name,
|
|---|
| 1029 | r->logon13.dns_domain,
|
|---|
| 1030 | &dc_flags,
|
|---|
| 1031 | &dc_hostname,
|
|---|
| 1032 | &dc_domain_name);
|
|---|
| 1033 |
|
|---|
| 1034 | dc_flags |= r->logon13.server_type;
|
|---|
| 1035 | dc_forest = r->logon13.forest;
|
|---|
| 1036 | dc_domain_guid = &r->logon13.domain_uuid;
|
|---|
| 1037 | dc_server_site = r->logon13.server_site;
|
|---|
| 1038 | dc_client_site = r->logon13.client_site;
|
|---|
| 1039 |
|
|---|
| 1040 | break;
|
|---|
| 1041 | case 20:
|
|---|
| 1042 | case 21:
|
|---|
| 1043 | case 22:
|
|---|
| 1044 | case 23:
|
|---|
| 1045 | case 24:
|
|---|
| 1046 | case 25:
|
|---|
| 1047 | case 26:
|
|---|
| 1048 | case 27:
|
|---|
| 1049 | case 28:
|
|---|
| 1050 | if (!ss) {
|
|---|
| 1051 | dc_address = r->logon15.pdc_name;
|
|---|
| 1052 | dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
|
|---|
| 1053 | }
|
|---|
| 1054 |
|
|---|
| 1055 | map_dc_and_domain_names(flags,
|
|---|
| 1056 | r->logon15.pdc_name,
|
|---|
| 1057 | r->logon15.domain,
|
|---|
| 1058 | r->logon15.pdc_dns_name,
|
|---|
| 1059 | r->logon15.dns_domain,
|
|---|
| 1060 | &dc_flags,
|
|---|
| 1061 | &dc_hostname,
|
|---|
| 1062 | &dc_domain_name);
|
|---|
| 1063 |
|
|---|
| 1064 | dc_flags |= r->logon15.server_type;
|
|---|
| 1065 | dc_forest = r->logon15.forest;
|
|---|
| 1066 | dc_domain_guid = &r->logon15.domain_uuid;
|
|---|
| 1067 | dc_server_site = r->logon15.server_site;
|
|---|
| 1068 | dc_client_site = r->logon15.client_site;
|
|---|
| 1069 |
|
|---|
| 1070 | break;
|
|---|
| 1071 | case 29:
|
|---|
| 1072 | case 30:
|
|---|
| 1073 | case 31:
|
|---|
| 1074 | if (!ss) {
|
|---|
| 1075 | dc_address = r->logon29.dc_sock_addr.pdc_ip;
|
|---|
| 1076 | dc_address_type = DS_ADDRESS_TYPE_INET;
|
|---|
| 1077 | }
|
|---|
| 1078 |
|
|---|
| 1079 | map_dc_and_domain_names(flags,
|
|---|
| 1080 | r->logon29.pdc_name,
|
|---|
| 1081 | r->logon29.domain,
|
|---|
| 1082 | r->logon29.pdc_dns_name,
|
|---|
| 1083 | r->logon29.dns_domain,
|
|---|
| 1084 | &dc_flags,
|
|---|
| 1085 | &dc_hostname,
|
|---|
| 1086 | &dc_domain_name);
|
|---|
| 1087 |
|
|---|
| 1088 | dc_flags |= r->logon29.server_type;
|
|---|
| 1089 | dc_forest = r->logon29.forest;
|
|---|
| 1090 | dc_domain_guid = &r->logon29.domain_uuid;
|
|---|
| 1091 | dc_server_site = r->logon29.server_site;
|
|---|
| 1092 | dc_client_site = r->logon29.client_site;
|
|---|
| 1093 |
|
|---|
| 1094 | break;
|
|---|
| 1095 | default:
|
|---|
| 1096 | return NT_STATUS_INVALID_PARAMETER;
|
|---|
| 1097 | }
|
|---|
| 1098 |
|
|---|
| 1099 | return make_domain_controller_info(mem_ctx,
|
|---|
| 1100 | dc_hostname,
|
|---|
| 1101 | dc_address,
|
|---|
| 1102 | dc_address_type,
|
|---|
| 1103 | dc_domain_guid,
|
|---|
| 1104 | dc_domain_name,
|
|---|
| 1105 | dc_forest,
|
|---|
| 1106 | dc_flags,
|
|---|
| 1107 | dc_server_site,
|
|---|
| 1108 | dc_client_site,
|
|---|
| 1109 | info);
|
|---|
| 1110 | }
|
|---|
| 1111 |
|
|---|
| 1112 | /****************************************************************
|
|---|
| 1113 | ****************************************************************/
|
|---|
| 1114 |
|
|---|
| 1115 | static uint32_t map_ds_flags_to_nt_version(uint32_t flags)
|
|---|
| 1116 | {
|
|---|
| 1117 | uint32_t nt_version = 0;
|
|---|
| 1118 |
|
|---|
| 1119 | if (flags & DS_PDC_REQUIRED) {
|
|---|
| 1120 | nt_version |= NETLOGON_VERSION_PDC;
|
|---|
| 1121 | }
|
|---|
| 1122 |
|
|---|
| 1123 | if (flags & DS_GC_SERVER_REQUIRED) {
|
|---|
| 1124 | nt_version |= NETLOGON_VERSION_GC;
|
|---|
| 1125 | }
|
|---|
| 1126 |
|
|---|
| 1127 | if (flags & DS_TRY_NEXTCLOSEST_SITE) {
|
|---|
| 1128 | nt_version |= NETLOGON_VERSION_WITH_CLOSEST_SITE;
|
|---|
| 1129 | }
|
|---|
| 1130 |
|
|---|
| 1131 | if (flags & DS_IP_REQUIRED) {
|
|---|
| 1132 | nt_version |= NETLOGON_VERSION_IP;
|
|---|
| 1133 | }
|
|---|
| 1134 |
|
|---|
| 1135 | return nt_version;
|
|---|
| 1136 | }
|
|---|
| 1137 |
|
|---|
| 1138 | /****************************************************************
|
|---|
| 1139 | ****************************************************************/
|
|---|
| 1140 |
|
|---|
| 1141 | static NTSTATUS process_dc_dns(TALLOC_CTX *mem_ctx,
|
|---|
| 1142 | const char *domain_name,
|
|---|
| 1143 | uint32_t flags,
|
|---|
| 1144 | struct ip_service_name *dclist,
|
|---|
| 1145 | int num_dcs,
|
|---|
| 1146 | struct netr_DsRGetDCNameInfo **info)
|
|---|
| 1147 | {
|
|---|
| 1148 | int i = 0;
|
|---|
| 1149 | bool valid_dc = false;
|
|---|
| 1150 | union nbt_cldap_netlogon *r = NULL;
|
|---|
| 1151 | uint32_t nt_version = NETLOGON_VERSION_5 |
|
|---|
| 1152 | NETLOGON_VERSION_5EX;
|
|---|
| 1153 | uint32_t ret_flags = 0;
|
|---|
| 1154 | NTSTATUS status;
|
|---|
| 1155 |
|
|---|
| 1156 | nt_version |= map_ds_flags_to_nt_version(flags);
|
|---|
| 1157 |
|
|---|
| 1158 | for (i=0; i<num_dcs; i++) {
|
|---|
| 1159 |
|
|---|
| 1160 | DEBUG(10,("LDAP ping to %s\n", dclist[i].hostname));
|
|---|
| 1161 |
|
|---|
| 1162 | if (ads_cldap_netlogon(mem_ctx, dclist[i].hostname,
|
|---|
| 1163 | domain_name,
|
|---|
| 1164 | &nt_version,
|
|---|
| 1165 | &r))
|
|---|
| 1166 | {
|
|---|
| 1167 | ret_flags = get_cldap_reply_server_flags(r, nt_version);
|
|---|
| 1168 |
|
|---|
| 1169 | if (check_cldap_reply_required_flags(ret_flags, flags)) {
|
|---|
| 1170 | valid_dc = true;
|
|---|
| 1171 | break;
|
|---|
| 1172 | }
|
|---|
| 1173 | }
|
|---|
| 1174 |
|
|---|
| 1175 | continue;
|
|---|
| 1176 | }
|
|---|
| 1177 |
|
|---|
| 1178 | if (!valid_dc) {
|
|---|
| 1179 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
|---|
| 1180 | }
|
|---|
| 1181 |
|
|---|
| 1182 | status = make_dc_info_from_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
|---|
| 1183 | nt_version, r, info);
|
|---|
| 1184 | if (NT_STATUS_IS_OK(status)) {
|
|---|
| 1185 | return store_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
|---|
| 1186 | nt_version, r);
|
|---|
| 1187 | }
|
|---|
| 1188 |
|
|---|
| 1189 | return status;
|
|---|
| 1190 | }
|
|---|
| 1191 |
|
|---|
| 1192 | /****************************************************************
|
|---|
| 1193 | ****************************************************************/
|
|---|
| 1194 |
|
|---|
| 1195 | static struct event_context *ev_context(void)
|
|---|
| 1196 | {
|
|---|
| 1197 | static struct event_context *ctx;
|
|---|
| 1198 |
|
|---|
| 1199 | if (!ctx && !(ctx = event_context_init(NULL))) {
|
|---|
| 1200 | smb_panic("Could not init event context");
|
|---|
| 1201 | }
|
|---|
| 1202 | return ctx;
|
|---|
| 1203 | }
|
|---|
| 1204 |
|
|---|
| 1205 | /****************************************************************
|
|---|
| 1206 | ****************************************************************/
|
|---|
| 1207 |
|
|---|
| 1208 | static struct messaging_context *msg_context(TALLOC_CTX *mem_ctx)
|
|---|
| 1209 | {
|
|---|
| 1210 | static struct messaging_context *ctx;
|
|---|
| 1211 |
|
|---|
| 1212 | if (!ctx && !(ctx = messaging_init(mem_ctx, server_id_self(),
|
|---|
| 1213 | ev_context()))) {
|
|---|
| 1214 | smb_panic("Could not init messaging context");
|
|---|
| 1215 | }
|
|---|
| 1216 | return ctx;
|
|---|
| 1217 | }
|
|---|
| 1218 |
|
|---|
| 1219 | /****************************************************************
|
|---|
| 1220 | ****************************************************************/
|
|---|
| 1221 |
|
|---|
| 1222 | static NTSTATUS process_dc_netbios(TALLOC_CTX *mem_ctx,
|
|---|
| 1223 | struct messaging_context *msg_ctx,
|
|---|
| 1224 | const char *domain_name,
|
|---|
| 1225 | uint32_t flags,
|
|---|
| 1226 | struct ip_service_name *dclist,
|
|---|
| 1227 | int num_dcs,
|
|---|
| 1228 | struct netr_DsRGetDCNameInfo **info)
|
|---|
| 1229 | {
|
|---|
| 1230 | struct sockaddr_storage ss;
|
|---|
| 1231 | struct ip_service ip_list;
|
|---|
| 1232 | enum nbt_name_type name_type = NBT_NAME_LOGON;
|
|---|
| 1233 | NTSTATUS status;
|
|---|
| 1234 | int i;
|
|---|
| 1235 | const char *dc_name = NULL;
|
|---|
| 1236 | fstring tmp_dc_name;
|
|---|
| 1237 | union nbt_cldap_netlogon *r = NULL;
|
|---|
| 1238 | bool store_cache = false;
|
|---|
| 1239 | uint32_t nt_version = NETLOGON_VERSION_1 |
|
|---|
| 1240 | NETLOGON_VERSION_5 |
|
|---|
| 1241 | NETLOGON_VERSION_5EX_WITH_IP;
|
|---|
| 1242 |
|
|---|
| 1243 | if (!msg_ctx) {
|
|---|
| 1244 | msg_ctx = msg_context(mem_ctx);
|
|---|
| 1245 | }
|
|---|
| 1246 |
|
|---|
| 1247 | if (flags & DS_PDC_REQUIRED) {
|
|---|
| 1248 | name_type = NBT_NAME_PDC;
|
|---|
| 1249 | }
|
|---|
| 1250 |
|
|---|
| 1251 | nt_version |= map_ds_flags_to_nt_version(flags);
|
|---|
| 1252 |
|
|---|
| 1253 | DEBUG(10,("process_dc_netbios\n"));
|
|---|
| 1254 |
|
|---|
| 1255 | for (i=0; i<num_dcs; i++) {
|
|---|
| 1256 |
|
|---|
| 1257 | ip_list.ss = dclist[i].ss;
|
|---|
| 1258 | ip_list.port = 0;
|
|---|
| 1259 |
|
|---|
| 1260 | if (!interpret_string_addr(&ss, dclist[i].hostname, AI_NUMERICHOST)) {
|
|---|
| 1261 | return NT_STATUS_UNSUCCESSFUL;
|
|---|
| 1262 | }
|
|---|
| 1263 |
|
|---|
| 1264 | if (send_getdc_request(mem_ctx, msg_ctx,
|
|---|
| 1265 | &dclist[i].ss, domain_name,
|
|---|
| 1266 | NULL, nt_version))
|
|---|
| 1267 | {
|
|---|
| 1268 | int k;
|
|---|
| 1269 | smb_msleep(300);
|
|---|
| 1270 | for (k=0; k<5; k++) {
|
|---|
| 1271 | if (receive_getdc_response(mem_ctx,
|
|---|
| 1272 | &dclist[i].ss,
|
|---|
| 1273 | domain_name,
|
|---|
| 1274 | &nt_version,
|
|---|
| 1275 | &dc_name,
|
|---|
| 1276 | &r)) {
|
|---|
| 1277 | store_cache = true;
|
|---|
| 1278 | namecache_store(dc_name, NBT_NAME_SERVER, 1, &ip_list);
|
|---|
| 1279 | goto make_reply;
|
|---|
| 1280 | }
|
|---|
| 1281 | smb_msleep(1500);
|
|---|
| 1282 | }
|
|---|
| 1283 | }
|
|---|
| 1284 |
|
|---|
| 1285 | if (name_status_find(domain_name,
|
|---|
| 1286 | name_type,
|
|---|
| 1287 | NBT_NAME_SERVER,
|
|---|
| 1288 | &dclist[i].ss,
|
|---|
| 1289 | tmp_dc_name))
|
|---|
| 1290 | {
|
|---|
| 1291 | struct nbt_cldap_netlogon_1 logon1;
|
|---|
| 1292 |
|
|---|
| 1293 | r = TALLOC_ZERO_P(mem_ctx, union nbt_cldap_netlogon);
|
|---|
| 1294 | NT_STATUS_HAVE_NO_MEMORY(r);
|
|---|
| 1295 |
|
|---|
| 1296 | ZERO_STRUCT(logon1);
|
|---|
| 1297 |
|
|---|
| 1298 | nt_version = NETLOGON_VERSION_1;
|
|---|
| 1299 |
|
|---|
| 1300 | logon1.nt_version = nt_version;
|
|---|
| 1301 | logon1.pdc_name = tmp_dc_name;
|
|---|
| 1302 | logon1.domain_name = talloc_strdup_upper(mem_ctx, domain_name);
|
|---|
| 1303 | NT_STATUS_HAVE_NO_MEMORY(logon1.domain_name);
|
|---|
| 1304 |
|
|---|
| 1305 | r->logon1 = logon1;
|
|---|
| 1306 |
|
|---|
| 1307 | namecache_store(tmp_dc_name, NBT_NAME_SERVER, 1, &ip_list);
|
|---|
| 1308 |
|
|---|
| 1309 | goto make_reply;
|
|---|
| 1310 | }
|
|---|
| 1311 | }
|
|---|
| 1312 |
|
|---|
| 1313 | return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
|---|
| 1314 |
|
|---|
| 1315 | make_reply:
|
|---|
| 1316 |
|
|---|
| 1317 | status = make_dc_info_from_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
|---|
| 1318 | nt_version, r, info);
|
|---|
| 1319 | if (NT_STATUS_IS_OK(status) && store_cache) {
|
|---|
| 1320 | return store_cldap_reply(mem_ctx, flags, &dclist[i].ss,
|
|---|
| 1321 | nt_version, r);
|
|---|
| 1322 | }
|
|---|
| 1323 |
|
|---|
| 1324 | return status;
|
|---|
| 1325 | }
|
|---|
| 1326 |
|
|---|
| 1327 | /****************************************************************
|
|---|
| 1328 | ****************************************************************/
|
|---|
| 1329 |
|
|---|
| 1330 | static NTSTATUS dsgetdcname_rediscover(TALLOC_CTX *mem_ctx,
|
|---|
| 1331 | struct messaging_context *msg_ctx,
|
|---|
| 1332 | const char *domain_name,
|
|---|
| 1333 | struct GUID *domain_guid,
|
|---|
| 1334 | uint32_t flags,
|
|---|
| 1335 | const char *site_name,
|
|---|
| 1336 | struct netr_DsRGetDCNameInfo **info)
|
|---|
| 1337 | {
|
|---|
| 1338 | NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
|---|
| 1339 | struct ip_service_name *dclist = NULL;
|
|---|
| 1340 | int num_dcs;
|
|---|
| 1341 |
|
|---|
| 1342 | DEBUG(10,("dsgetdcname_rediscover\n"));
|
|---|
| 1343 |
|
|---|
| 1344 | if (flags & DS_IS_FLAT_NAME) {
|
|---|
| 1345 |
|
|---|
| 1346 | status = discover_dc_netbios(mem_ctx, domain_name, flags,
|
|---|
| 1347 | &dclist, &num_dcs);
|
|---|
| 1348 | NT_STATUS_NOT_OK_RETURN(status);
|
|---|
| 1349 |
|
|---|
| 1350 | return process_dc_netbios(mem_ctx, msg_ctx, domain_name, flags,
|
|---|
| 1351 | dclist, num_dcs, info);
|
|---|
| 1352 | }
|
|---|
| 1353 |
|
|---|
| 1354 | if (flags & DS_IS_DNS_NAME) {
|
|---|
| 1355 |
|
|---|
| 1356 | status = discover_dc_dns(mem_ctx, domain_name, domain_guid,
|
|---|
| 1357 | flags, site_name, &dclist, &num_dcs);
|
|---|
| 1358 | NT_STATUS_NOT_OK_RETURN(status);
|
|---|
| 1359 |
|
|---|
| 1360 | return process_dc_dns(mem_ctx, domain_name, flags,
|
|---|
| 1361 | dclist, num_dcs, info);
|
|---|
| 1362 | }
|
|---|
| 1363 |
|
|---|
| 1364 | status = discover_dc_dns(mem_ctx, domain_name, domain_guid, flags,
|
|---|
| 1365 | site_name, &dclist, &num_dcs);
|
|---|
| 1366 |
|
|---|
| 1367 | if (NT_STATUS_IS_OK(status) && num_dcs != 0) {
|
|---|
| 1368 |
|
|---|
| 1369 | status = process_dc_dns(mem_ctx, domain_name, flags, dclist,
|
|---|
| 1370 | num_dcs, info);
|
|---|
| 1371 | if (NT_STATUS_IS_OK(status)) {
|
|---|
| 1372 | return status;
|
|---|
| 1373 | }
|
|---|
| 1374 | }
|
|---|
| 1375 |
|
|---|
| 1376 | status = discover_dc_netbios(mem_ctx, domain_name, flags, &dclist,
|
|---|
| 1377 | &num_dcs);
|
|---|
| 1378 | NT_STATUS_NOT_OK_RETURN(status);
|
|---|
| 1379 |
|
|---|
| 1380 | return process_dc_netbios(mem_ctx, msg_ctx, domain_name, flags, dclist,
|
|---|
| 1381 | num_dcs, info);
|
|---|
| 1382 | }
|
|---|
| 1383 |
|
|---|
| 1384 | /********************************************************************
|
|---|
| 1385 | dsgetdcname.
|
|---|
| 1386 |
|
|---|
| 1387 | This will be the only public function here.
|
|---|
| 1388 | ********************************************************************/
|
|---|
| 1389 |
|
|---|
| 1390 | NTSTATUS dsgetdcname(TALLOC_CTX *mem_ctx,
|
|---|
| 1391 | struct messaging_context *msg_ctx,
|
|---|
| 1392 | const char *domain_name,
|
|---|
| 1393 | struct GUID *domain_guid,
|
|---|
| 1394 | const char *site_name,
|
|---|
| 1395 | uint32_t flags,
|
|---|
| 1396 | struct netr_DsRGetDCNameInfo **info)
|
|---|
| 1397 | {
|
|---|
| 1398 | NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
|
|---|
| 1399 | struct netr_DsRGetDCNameInfo *myinfo = NULL;
|
|---|
| 1400 | char *query_site = NULL;
|
|---|
| 1401 |
|
|---|
| 1402 | DEBUG(10,("dsgetdcname: domain_name: %s, "
|
|---|
| 1403 | "domain_guid: %s, site_name: %s, flags: 0x%08x\n",
|
|---|
| 1404 | domain_name,
|
|---|
| 1405 | domain_guid ? GUID_string(mem_ctx, domain_guid) : "(null)",
|
|---|
| 1406 | site_name, flags));
|
|---|
| 1407 |
|
|---|
| 1408 | *info = NULL;
|
|---|
| 1409 |
|
|---|
| 1410 | if (!check_allowed_required_flags(flags, site_name)) {
|
|---|
| 1411 | DEBUG(0,("invalid flags specified\n"));
|
|---|
| 1412 | return NT_STATUS_INVALID_PARAMETER;
|
|---|
| 1413 | }
|
|---|
| 1414 |
|
|---|
| 1415 | if (!site_name) {
|
|---|
| 1416 | query_site = sitename_fetch(domain_name);
|
|---|
| 1417 | } else {
|
|---|
| 1418 | query_site = SMB_STRDUP(site_name);
|
|---|
| 1419 | }
|
|---|
| 1420 |
|
|---|
| 1421 | if (flags & DS_FORCE_REDISCOVERY) {
|
|---|
| 1422 | goto rediscover;
|
|---|
| 1423 | }
|
|---|
| 1424 |
|
|---|
| 1425 | status = dsgetdcname_cached(mem_ctx, msg_ctx, domain_name, domain_guid,
|
|---|
| 1426 | flags, query_site, &myinfo);
|
|---|
| 1427 | if (NT_STATUS_IS_OK(status)) {
|
|---|
| 1428 | *info = myinfo;
|
|---|
| 1429 | goto done;
|
|---|
| 1430 | }
|
|---|
| 1431 |
|
|---|
| 1432 | if (flags & DS_BACKGROUND_ONLY) {
|
|---|
| 1433 | goto done;
|
|---|
| 1434 | }
|
|---|
| 1435 |
|
|---|
| 1436 | rediscover:
|
|---|
| 1437 | status = dsgetdcname_rediscover(mem_ctx, msg_ctx, domain_name,
|
|---|
| 1438 | domain_guid, flags, query_site,
|
|---|
| 1439 | &myinfo);
|
|---|
| 1440 |
|
|---|
| 1441 | if (NT_STATUS_IS_OK(status)) {
|
|---|
| 1442 | *info = myinfo;
|
|---|
| 1443 | }
|
|---|
| 1444 |
|
|---|
| 1445 | done:
|
|---|
| 1446 | SAFE_FREE(query_site);
|
|---|
| 1447 |
|
|---|
| 1448 | return status;
|
|---|
| 1449 | }
|
|---|