source: trunk/server/source4/libnet/libnet_site.c

Last change on this file was 745, checked in by Silvan Scherrer, 13 years ago

Samba Server: updated trunk to 3.6.0
File size: 8.2 KB
Line 
1/*
2 Unix SMB/CIFS implementation.
3
4 Copyright (C) Brad Henry 2005
5
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
10
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
15
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
18*/
19
20#include "includes.h"
21#include "libnet/libnet.h"
22#include "libcli/cldap/cldap.h"
23#include <ldb.h>
24#include <ldb_errors.h>
25#include "libcli/resolve/resolve.h"
26#include "param/param.h"
27#include "lib/tsocket/tsocket.h"
28
29/**
30 * 1. Setup a CLDAP socket.
31 * 2. Lookup the default Site-Name.
32 */
33NTSTATUS libnet_FindSite(TALLOC_CTX *ctx, struct libnet_context *lctx, struct libnet_JoinSite *r)
34{
35 NTSTATUS status;
36 TALLOC_CTX *tmp_ctx;
37
38 char *site_name_str;
39 char *config_dn_str;
40 char *server_dn_str;
41
42 struct cldap_socket *cldap = NULL;
43 struct cldap_netlogon search;
44 int ret;
45 struct tsocket_address *dest_address;
46
47 tmp_ctx = talloc_named(ctx, 0, "libnet_FindSite temp context");
48 if (!tmp_ctx) {
49 r->out.error_string = NULL;
50 return NT_STATUS_NO_MEMORY;
51 }
52
53 /* Resolve the site name. */
54 ZERO_STRUCT(search);
55 search.in.dest_address = NULL;
56 search.in.dest_port = 0;
57 search.in.acct_control = -1;
58 search.in.version = NETLOGON_NT_VERSION_5 | NETLOGON_NT_VERSION_5EX;
59 search.in.map_response = true;
60
61 ret = tsocket_address_inet_from_strings(tmp_ctx, "ip",
62 r->in.dest_address,
63 r->in.cldap_port,
64 &dest_address);
65 if (ret != 0) {
66 r->out.error_string = NULL;
67 status = map_nt_error_from_unix(errno);
68 return status;
69 }
70
71 /* we want to use non async calls, so we're not passing an event context */
72 status = cldap_socket_init(tmp_ctx, NULL, NULL, dest_address, &cldap);
73 if (!NT_STATUS_IS_OK(status)) {
74 talloc_free(tmp_ctx);
75 r->out.error_string = NULL;
76 return status;
77 }
78 status = cldap_netlogon(cldap, tmp_ctx, &search);
79 if (!NT_STATUS_IS_OK(status)
80 || !search.out.netlogon.data.nt5_ex.client_site) {
81 /*
82 If cldap_netlogon() returns in error,
83 default to using Default-First-Site-Name.
84 */
85 site_name_str = talloc_asprintf(tmp_ctx, "%s",
86 "Default-First-Site-Name");
87 if (!site_name_str) {
88 r->out.error_string = NULL;
89 talloc_free(tmp_ctx);
90 return NT_STATUS_NO_MEMORY;
91 }
92 } else {
93 site_name_str = talloc_asprintf(tmp_ctx, "%s",
94 search.out.netlogon.data.nt5_ex.client_site);
95 if (!site_name_str) {
96 r->out.error_string = NULL;
97 talloc_free(tmp_ctx);
98 return NT_STATUS_NO_MEMORY;
99 }
100 }
101
102 /* Generate the CN=Configuration,... DN. */
103/* TODO: look it up! */
104 config_dn_str = talloc_asprintf(tmp_ctx, "CN=Configuration,%s", r->in.domain_dn_str);
105 if (!config_dn_str) {
106 r->out.error_string = NULL;
107 talloc_free(tmp_ctx);
108 return NT_STATUS_NO_MEMORY;
109 }
110
111 /* Generate the CN=Servers,... DN. */
112 server_dn_str = talloc_asprintf(tmp_ctx, "CN=%s,CN=Servers,CN=%s,CN=Sites,%s",
113 r->in.netbios_name, site_name_str, config_dn_str);
114 if (!server_dn_str) {
115 r->out.error_string = NULL;
116 talloc_free(tmp_ctx);
117 return NT_STATUS_NO_MEMORY;
118 }
119
120 r->out.site_name_str = site_name_str;
121 talloc_steal(r, site_name_str);
122
123 r->out.config_dn_str = config_dn_str;
124 talloc_steal(r, config_dn_str);
125
126 r->out.server_dn_str = server_dn_str;
127 talloc_steal(r, server_dn_str);
128
129 talloc_free(tmp_ctx);
130 return NT_STATUS_OK;
131}
132
133/*
134 * find out Site specific stuff:
135 * 1. Lookup the Site name.
136 * 2. Add entry CN=<netbios name>,CN=Servers,CN=<site name>,CN=Sites,CN=Configuration,<domain dn>.
137 * TODO: 3.) use DsAddEntry() to create CN=NTDS Settings,CN=<netbios name>,CN=Servers,CN=<site name>,...
138 */
139NTSTATUS libnet_JoinSite(struct libnet_context *ctx,
140 struct ldb_context *remote_ldb,
141 struct libnet_JoinDomain *libnet_r)
142{
143 NTSTATUS status;
144 TALLOC_CTX *tmp_ctx;
145
146 struct libnet_JoinSite *r;
147
148 struct ldb_dn *server_dn;
149 struct ldb_message *msg;
150 int rtn;
151
152 const char *server_dn_str;
153 const char *config_dn_str;
154 struct nbt_name name;
155 const char *dest_addr = NULL;
156
157 tmp_ctx = talloc_named(libnet_r, 0, "libnet_JoinSite temp context");
158 if (!tmp_ctx) {
159 libnet_r->out.error_string = NULL;
160 return NT_STATUS_NO_MEMORY;
161 }
162
163 r = talloc(tmp_ctx, struct libnet_JoinSite);
164 if (!r) {
165 libnet_r->out.error_string = NULL;
166 talloc_free(tmp_ctx);
167 return NT_STATUS_NO_MEMORY;
168 }
169
170 make_nbt_name_client(&name, libnet_r->out.samr_binding->host);
171 status = resolve_name(lpcfg_resolve_context(ctx->lp_ctx), &name, r, &dest_addr, ctx->event_ctx);
172 if (!NT_STATUS_IS_OK(status)) {
173 libnet_r->out.error_string = NULL;
174 talloc_free(tmp_ctx);
175 return status;
176 }
177
178 /* Resolve the site name and AD DN's. */
179 r->in.dest_address = dest_addr;
180 r->in.netbios_name = libnet_r->in.netbios_name;
181 r->in.domain_dn_str = libnet_r->out.domain_dn_str;
182 r->in.cldap_port = lpcfg_cldap_port(ctx->lp_ctx);
183
184 status = libnet_FindSite(tmp_ctx, ctx, r);
185 if (!NT_STATUS_IS_OK(status)) {
186 libnet_r->out.error_string =
187 talloc_steal(libnet_r, r->out.error_string);
188 talloc_free(tmp_ctx);
189 return status;
190 }
191
192 config_dn_str = r->out.config_dn_str;
193 server_dn_str = r->out.server_dn_str;
194
195 /*
196 Add entry CN=<netbios name>,CN=Servers,CN=<site name>,CN=Sites,CN=Configuration,<domain dn>.
197 */
198 msg = ldb_msg_new(tmp_ctx);
199 if (!msg) {
200 libnet_r->out.error_string = NULL;
201 talloc_free(tmp_ctx);
202 return NT_STATUS_NO_MEMORY;
203 }
204
205 rtn = ldb_msg_add_string(msg, "objectClass", "server");
206 if (rtn != LDB_SUCCESS) {
207 libnet_r->out.error_string = NULL;
208 talloc_free(tmp_ctx);
209 return NT_STATUS_NO_MEMORY;
210 }
211 rtn = ldb_msg_add_string(msg, "systemFlags", "50000000");
212 if (rtn != LDB_SUCCESS) {
213 libnet_r->out.error_string = NULL;
214 talloc_free(tmp_ctx);
215 return NT_STATUS_NO_MEMORY;
216 }
217 rtn = ldb_msg_add_string(msg, "serverReference", libnet_r->out.account_dn_str);
218 if (rtn != LDB_SUCCESS) {
219 libnet_r->out.error_string = NULL;
220 talloc_free(tmp_ctx);
221 return NT_STATUS_NO_MEMORY;
222 }
223
224 server_dn = ldb_dn_new(tmp_ctx, remote_ldb, server_dn_str);
225 if ( ! ldb_dn_validate(server_dn)) {
226 libnet_r->out.error_string = talloc_asprintf(libnet_r,
227 "Invalid server dn: %s",
228 server_dn_str);
229 talloc_free(tmp_ctx);
230 return NT_STATUS_UNSUCCESSFUL;
231 }
232
233 msg->dn = server_dn;
234
235 rtn = ldb_add(remote_ldb, msg);
236 if (rtn == LDB_ERR_ENTRY_ALREADY_EXISTS) {
237 unsigned int i;
238
239 /* make a 'modify' msg, and only for serverReference */
240 msg = ldb_msg_new(tmp_ctx);
241 if (!msg) {
242 libnet_r->out.error_string = NULL;
243 talloc_free(tmp_ctx);
244 return NT_STATUS_NO_MEMORY;
245 }
246 msg->dn = server_dn;
247
248 rtn = ldb_msg_add_string(msg, "serverReference",libnet_r->out.account_dn_str);
249 if (rtn != LDB_SUCCESS) {
250 libnet_r->out.error_string = NULL;
251 talloc_free(tmp_ctx);
252 return NT_STATUS_NO_MEMORY;
253 }
254
255 /* mark all the message elements (should be just one)
256 as LDB_FLAG_MOD_REPLACE */
257 for (i=0;i<msg->num_elements;i++) {
258 msg->elements[i].flags = LDB_FLAG_MOD_REPLACE;
259 }
260
261 rtn = ldb_modify(remote_ldb, msg);
262 if (rtn != LDB_SUCCESS) {
263 libnet_r->out.error_string
264 = talloc_asprintf(libnet_r,
265 "Failed to modify server entry %s: %s: %d",
266 server_dn_str,
267 ldb_errstring(remote_ldb), rtn);
268 talloc_free(tmp_ctx);
269 return NT_STATUS_INTERNAL_DB_CORRUPTION;
270 }
271 } else if (rtn != LDB_SUCCESS) {
272 libnet_r->out.error_string
273 = talloc_asprintf(libnet_r,
274 "Failed to add server entry %s: %s: %d",
275 server_dn_str, ldb_errstring(remote_ldb),
276 rtn);
277 talloc_free(tmp_ctx);
278 return NT_STATUS_INTERNAL_DB_CORRUPTION;
279 }
280 DEBUG(0, ("We still need to perform a DsAddEntry() so that we can create the CN=NTDS Settings container.\n"));
281
282 /* Store the server DN in libnet_r */
283 libnet_r->out.server_dn_str = server_dn_str;
284 talloc_steal(libnet_r, server_dn_str);
285
286 talloc_free(tmp_ctx);
287 return NT_STATUS_OK;
288}
Note: See TracBrowser for help on using the repository browser.