trying to get HEAD building again. If you want the code

[sfrench/samba-autobuild/.git] / source3 / passdb / machine_sid.c

diff --git a/source3/passdb/machine_sid.c b/source3/passdb/machine_sid.c
index af66471a3928595f5e45c62dd864b9a38a7382c3..4e7476781c8298ef55558087de9e3858dabfa8b3 100644 (file)
--- a/source3/passdb/machine_sid.c
+++ b/source3/passdb/machine_sid.c
@@ -4,6 +4,7 @@
    Copyright (C) Jeremy Allison                1996-2002
    Copyright (C) Andrew Tridgell               2002
    Copyright (C) Gerald (Jerry) Carter         2000
+   Copyright (C) Stefan (metze) Metzmacher     2002
       
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
@@ -22,6 +23,13 @@
 
 #include "includes.h"
 
+/* NOTE! the global_sam_sid is the SID of our local SAM. This is only
+   equal to the domain SID when we are a DC, otherwise its our
+   workstation SID */
+static DOM_SID *global_sam_sid=NULL;
+
+#undef DBGC_CLASS
+#define DBGC_CLASS DBGC_PASSDB
 
 /****************************************************************************
  Read a SID from a file. This is for compatibility with the old MACHINE.SID
@@ -68,13 +76,16 @@ static void generate_random_sid(DOM_SID *sid)
  Generate the global machine sid.
 ****************************************************************************/
 
-BOOL pdb_generate_sam_sid(void)
+static BOOL pdb_generate_sam_sid(void)
 {
+       DOM_SID domain_sid;
        char *fname = NULL;
-       extern pstring global_myname;
-       extern fstring global_myworkgroup;
        BOOL is_dc = False;
 
+       if(global_sam_sid==NULL)
+               if(!(global_sam_sid=(DOM_SID *)malloc(sizeof(DOM_SID))))
+                       return False;
+                       
        generate_wellknown_sids();
 
        switch (lp_server_role()) {
@@ -87,31 +98,37 @@ BOOL pdb_generate_sam_sid(void)
                break;
        }
 
-       if (secrets_fetch_domain_sid(global_myname, &global_sam_sid)) {
-               DOM_SID domain_sid;
+       if (is_dc) {
+               if (secrets_fetch_domain_sid(lp_workgroup(), &domain_sid)) {
+                       sid_copy(global_sam_sid, &domain_sid);
+                       return True;
+               }
+       }
+
+       if (secrets_fetch_domain_sid(global_myname(), global_sam_sid)) {
 
                /* We got our sid. If not a pdc/bdc, we're done. */
                if (!is_dc)
                        return True;
 
-               if (!secrets_fetch_domain_sid(global_myworkgroup, &domain_sid)) {
+               if (!secrets_fetch_domain_sid(lp_workgroup(), &domain_sid)) {
 
                        /* No domain sid and we're a pdc/bdc. Store it */
 
-                       if (!secrets_store_domain_sid(global_myworkgroup, &global_sam_sid)) {
+                       if (!secrets_store_domain_sid(lp_workgroup(), global_sam_sid)) {
                                DEBUG(0,("pdb_generate_sam_sid: Can't store domain SID as a pdc/bdc.\n"));
                                return False;
                        }
                        return True;
                }
 
-               if (!sid_equal(&domain_sid, &global_sam_sid)) {
+               if (!sid_equal(&domain_sid, global_sam_sid)) {
 
-                       /* Domain name sid doesn't match global sam sid. Re-store global sam sid as domain sid. */
+                       /* Domain name sid doesn't match global sam sid. Re-store domain sid as 'local' sid. */
 
                        DEBUG(0,("pdb_generate_sam_sid: Mismatched SIDs as a pdc/bdc.\n"));
-                       if (!secrets_store_domain_sid(global_myworkgroup, &global_sam_sid)) {
-                               DEBUG(0,("pdb_generate_sam_sid: Can't re-store domain SID as a pdc/bdc.\n"));
+                       if (!secrets_store_domain_sid(global_myname(), &domain_sid)) {
+                               DEBUG(0,("pdb_generate_sam_sid: Can't re-store domain SID for local sid as PDC/BDC.\n"));
                                return False;
                        }
                        return True;
@@ -124,35 +141,39 @@ BOOL pdb_generate_sam_sid(void)
        /* check for an old MACHINE.SID file for backwards compatibility */
        asprintf(&fname, "%s/MACHINE.SID", lp_private_dir());
 
-       if (read_sid_from_file(fname, &global_sam_sid)) {
+       if (read_sid_from_file(fname, global_sam_sid)) {
                /* remember it for future reference and unlink the old MACHINE.SID */
-               if (!secrets_store_domain_sid(global_myname, &global_sam_sid)) {
+               if (!secrets_store_domain_sid(global_myname(), global_sam_sid)) {
                        DEBUG(0,("pdb_generate_sam_sid: Failed to store SID from file.\n"));
                        SAFE_FREE(fname);
                        return False;
                }
                unlink(fname);
                if (is_dc) {
-                       if (!secrets_store_domain_sid(global_myworkgroup, &global_sam_sid)) {
+                       if (!secrets_store_domain_sid(lp_workgroup(), global_sam_sid)) {
                                DEBUG(0,("pdb_generate_sam_sid: Failed to store domain SID from file.\n"));
                                SAFE_FREE(fname);
                                return False;
                        }
                }
+
+               /* Stored the old sid from MACHINE.SID successfully.*/
+               SAFE_FREE(fname);
+               return True;
        }
 
        SAFE_FREE(fname);
 
        /* we don't have the SID in secrets.tdb, we will need to
            generate one and save it */
-       generate_random_sid(&global_sam_sid);
+       generate_random_sid(global_sam_sid);
 
-       if (!secrets_store_domain_sid(global_myname, &global_sam_sid)) {
+       if (!secrets_store_domain_sid(global_myname(), global_sam_sid)) {
                DEBUG(0,("pdb_generate_sam_sid: Failed to store generated machine SID.\n"));
                return False;
        }
        if (is_dc) {
-               if (!secrets_store_domain_sid(global_myworkgroup, &global_sam_sid)) {
+               if (!secrets_store_domain_sid(lp_workgroup(), global_sam_sid)) {
                        DEBUG(0,("pdb_generate_sam_sid: Failed to store generated domain SID.\n"));
                        return False;
                }
@@ -160,3 +181,20 @@ BOOL pdb_generate_sam_sid(void)
 
        return True;
 }   
+
+/* return our global_sam_sid */
+DOM_SID *get_global_sam_sid(void)
+{
+       if (global_sam_sid != NULL)
+               return global_sam_sid;
+       
+       /* memory for global_sam_sid is allocated in 
+          pdb_generate_sam_sid() as needed */
+
+       if (!pdb_generate_sam_sid()) {
+               smb_panic("Could not generate a machine SID\n");
+       }
+       
+       return global_sam_sid;
+}
+