2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Tridgell 1994-1998
5 Copyright (C) Jeremy Allison 2007.
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
22 #include "../lib/util/tevent_ntstatus.h"
23 #include "libads/sitename_cache.h"
24 #include "libads/dns.h"
25 #include "../libcli/netlogon/netlogon.h"
26 #include "lib/async_req/async_sock.h"
27 #include "libsmb/nmblib.h"
29 /* nmbd.c sets this to True. */
30 bool global_in_nmbd = False;
32 /****************************
33 * SERVER AFFINITY ROUTINES *
34 ****************************/
36 /* Server affinity is the concept of preferring the last domain
37 controller with whom you had a successful conversation */
39 /****************************************************************************
40 ****************************************************************************/
41 #define SAFKEY_FMT "SAF/DOMAIN/%s"
43 #define SAFJOINKEY_FMT "SAFJOIN/DOMAIN/%s"
44 #define SAFJOIN_TTL 3600
46 static char *saf_key(const char *domain)
50 asprintf_strupper_m(&keystr, SAFKEY_FMT, domain);
55 static char *saf_join_key(const char *domain)
59 asprintf_strupper_m(&keystr, SAFJOINKEY_FMT, domain);
64 /****************************************************************************
65 ****************************************************************************/
67 bool saf_store( const char *domain, const char *servername )
73 if ( !domain || !servername ) {
74 DEBUG(2,("saf_store: "
75 "Refusing to store empty domain or servername!\n"));
79 if ( (strlen(domain) == 0) || (strlen(servername) == 0) ) {
80 DEBUG(0,("saf_store: "
81 "refusing to store 0 length domain or servername!\n"));
85 key = saf_key( domain );
86 expire = time( NULL ) + lp_parm_int(-1, "saf","ttl", SAF_TTL);
88 DEBUG(10,("saf_store: domain = [%s], server = [%s], expire = [%u]\n",
89 domain, servername, (unsigned int)expire ));
91 ret = gencache_set( key, servername, expire );
98 bool saf_join_store( const char *domain, const char *servername )
104 if ( !domain || !servername ) {
105 DEBUG(2,("saf_join_store: Refusing to store empty domain or servername!\n"));
109 if ( (strlen(domain) == 0) || (strlen(servername) == 0) ) {
110 DEBUG(0,("saf_join_store: refusing to store 0 length domain or servername!\n"));
114 key = saf_join_key( domain );
115 expire = time( NULL ) + lp_parm_int(-1, "saf","join ttl", SAFJOIN_TTL);
117 DEBUG(10,("saf_join_store: domain = [%s], server = [%s], expire = [%u]\n",
118 domain, servername, (unsigned int)expire ));
120 ret = gencache_set( key, servername, expire );
127 bool saf_delete( const char *domain )
133 DEBUG(2,("saf_delete: Refusing to delete empty domain\n"));
137 key = saf_join_key(domain);
138 ret = gencache_del(key);
142 DEBUG(10,("saf_delete[join]: domain = [%s]\n", domain ));
145 key = saf_key(domain);
146 ret = gencache_del(key);
150 DEBUG(10,("saf_delete: domain = [%s]\n", domain ));
156 /****************************************************************************
157 ****************************************************************************/
159 char *saf_fetch( const char *domain )
166 if ( !domain || strlen(domain) == 0) {
167 DEBUG(2,("saf_fetch: Empty domain name!\n"));
171 key = saf_join_key( domain );
173 ret = gencache_get( key, &server, &timeout );
178 DEBUG(5,("saf_fetch[join]: Returning \"%s\" for \"%s\" domain\n",
183 key = saf_key( domain );
185 ret = gencache_get( key, &server, &timeout );
190 DEBUG(5,("saf_fetch: failed to find server for \"%s\" domain\n",
193 DEBUG(5,("saf_fetch: Returning \"%s\" for \"%s\" domain\n",
200 static void set_socket_addr_v4(struct sockaddr_storage *addr)
202 if (!interpret_string_addr(addr, lp_socket_address(),
203 AI_NUMERICHOST|AI_PASSIVE)) {
206 if (addr->ss_family != AF_INET) {
211 static struct in_addr my_socket_addr_v4(void)
213 struct sockaddr_storage my_addr;
214 struct sockaddr_in *in_addr = (struct sockaddr_in *)((char *)&my_addr);
216 set_socket_addr_v4(&my_addr);
217 return in_addr->sin_addr;
220 /****************************************************************************
221 Generate a random trn_id.
222 ****************************************************************************/
224 static int generate_trn_id(void)
228 generate_random_buffer((uint8 *)&id, sizeof(id));
230 return id % (unsigned)0x7FFF;
233 /****************************************************************************
234 Parse a node status response into an array of structures.
235 ****************************************************************************/
237 static struct node_status *parse_node_status(TALLOC_CTX *mem_ctx, char *p,
239 struct node_status_extra *extra)
241 struct node_status *ret;
244 *num_names = CVAL(p,0);
249 ret = talloc_array(mem_ctx, struct node_status,*num_names);
254 for (i=0;i< *num_names;i++) {
255 StrnCpy(ret[i].name,p,15);
256 trim_char(ret[i].name,'\0',' ');
257 ret[i].type = CVAL(p,15);
258 ret[i].flags = p[16];
260 DEBUG(10, ("%s#%02x: flags = 0x%02x\n", ret[i].name,
261 ret[i].type, ret[i].flags));
264 * Also, pick up the MAC address ...
267 memcpy(&extra->mac_addr, p, 6); /* Fill in the mac addr */
272 struct sock_packet_read_state {
273 struct tevent_context *ev;
274 enum packet_type type;
277 struct nb_packet_reader *reader;
278 struct tevent_req *reader_req;
281 struct tevent_req *socket_req;
283 struct sockaddr_storage addr;
286 bool (*validator)(struct packet_struct *p,
290 struct packet_struct *packet;
293 static int sock_packet_read_state_destructor(struct sock_packet_read_state *s);
294 static void sock_packet_read_got_packet(struct tevent_req *subreq);
295 static void sock_packet_read_got_socket(struct tevent_req *subreq);
297 static struct tevent_req *sock_packet_read_send(
299 struct tevent_context *ev,
300 int sock, /* dgram socket */
301 struct nb_packet_reader *reader,
302 enum packet_type type,
304 bool (*validator)(struct packet_struct *p, void *private_data),
307 struct tevent_req *req;
308 struct sock_packet_read_state *state;
310 req = tevent_req_create(mem_ctx, &state,
311 struct sock_packet_read_state);
315 talloc_set_destructor(state, sock_packet_read_state_destructor);
317 state->reader = reader;
320 state->trn_id = trn_id;
321 state->validator = validator;
322 state->private_data = private_data;
324 if (reader != NULL) {
325 state->reader_req = nb_packet_read_send(state, ev, reader);
326 if (tevent_req_nomem(state->reader_req, req)) {
327 return tevent_req_post(req, ev);
329 tevent_req_set_callback(
330 state->reader_req, sock_packet_read_got_packet, req);
333 state->addr_len = sizeof(state->addr);
334 state->socket_req = recvfrom_send(state, ev, sock,
335 state->buf, sizeof(state->buf), 0,
336 &state->addr, &state->addr_len);
337 if (tevent_req_nomem(state->socket_req, req)) {
338 return tevent_req_post(req, ev);
340 tevent_req_set_callback(state->socket_req, sock_packet_read_got_socket,
346 static int sock_packet_read_state_destructor(struct sock_packet_read_state *s)
348 if (s->packet != NULL) {
349 free_packet(s->packet);
355 static void sock_packet_read_got_packet(struct tevent_req *subreq)
357 struct tevent_req *req = tevent_req_callback_data(
358 subreq, struct tevent_req);
359 struct sock_packet_read_state *state = tevent_req_data(
360 req, struct sock_packet_read_state);
363 status = nb_packet_read_recv(subreq, &state->packet);
365 TALLOC_FREE(state->reader_req);
367 if (!NT_STATUS_IS_OK(status)) {
368 if (state->socket_req != NULL) {
370 * Still waiting for socket
375 * Both socket and packet reader failed
377 tevent_req_nterror(req, status);
381 if ((state->validator != NULL) &&
382 !state->validator(state->packet, state->private_data)) {
383 DEBUG(10, ("validator failed\n"));
385 free_packet(state->packet);
386 state->packet = NULL;
388 state->reader_req = nb_packet_read_send(state, state->ev,
390 if (tevent_req_nomem(state->reader_req, req)) {
393 tevent_req_set_callback(
394 state->reader_req, sock_packet_read_got_packet, req);
398 TALLOC_FREE(state->socket_req);
399 tevent_req_done(req);
402 static void sock_packet_read_got_socket(struct tevent_req *subreq)
404 struct tevent_req *req = tevent_req_callback_data(
405 subreq, struct tevent_req);
406 struct sock_packet_read_state *state = tevent_req_data(
407 req, struct sock_packet_read_state);
408 struct sockaddr_in *in_addr;
412 received = recvfrom_recv(subreq, &err);
414 TALLOC_FREE(state->socket_req);
416 if (received == -1) {
417 if (state->reader_req != NULL) {
419 * Still waiting for reader
424 * Both socket and reader failed
426 tevent_req_nterror(req, map_nt_error_from_unix(err));
429 if (state->addr.ss_family != AF_INET) {
432 in_addr = (struct sockaddr_in *)(void *)&state->addr;
434 state->packet = parse_packet((char *)state->buf, received, state->type,
435 in_addr->sin_addr, in_addr->sin_port);
436 if (state->packet == NULL) {
437 DEBUG(10, ("parse_packet failed\n"));
440 if ((state->trn_id != -1) &&
441 (state->trn_id != packet_trn_id(state->packet))) {
442 DEBUG(10, ("Expected transaction id %d, got %d\n",
443 state->trn_id, packet_trn_id(state->packet)));
447 if ((state->validator != NULL) &&
448 !state->validator(state->packet, state->private_data)) {
449 DEBUG(10, ("validator failed\n"));
453 tevent_req_done(req);
457 if (state->packet != NULL) {
458 free_packet(state->packet);
459 state->packet = NULL;
461 state->socket_req = recvfrom_send(state, state->ev, state->sock,
462 state->buf, sizeof(state->buf), 0,
463 &state->addr, &state->addr_len);
464 if (tevent_req_nomem(state->socket_req, req)) {
467 tevent_req_set_callback(state->socket_req, sock_packet_read_got_socket,
471 static NTSTATUS sock_packet_read_recv(struct tevent_req *req,
472 struct packet_struct **ppacket)
474 struct sock_packet_read_state *state = tevent_req_data(
475 req, struct sock_packet_read_state);
478 if (tevent_req_is_nterror(req, &status)) {
481 *ppacket = state->packet;
482 state->packet = NULL;
486 struct nb_trans_state {
487 struct tevent_context *ev;
489 struct nb_packet_reader *reader;
491 const struct sockaddr_storage *dst_addr;
494 enum packet_type type;
497 bool (*validator)(struct packet_struct *p,
501 struct packet_struct *packet;
504 static int nb_trans_state_destructor(struct nb_trans_state *s);
505 static void nb_trans_got_reader(struct tevent_req *subreq);
506 static void nb_trans_done(struct tevent_req *subreq);
507 static void nb_trans_sent(struct tevent_req *subreq);
508 static void nb_trans_send_next(struct tevent_req *subreq);
510 static struct tevent_req *nb_trans_send(
512 struct tevent_context *ev,
513 const struct sockaddr_storage *my_addr,
514 const struct sockaddr_storage *dst_addr,
516 uint8_t *buf, size_t buflen,
517 enum packet_type type, int trn_id,
518 bool (*validator)(struct packet_struct *p,
522 struct tevent_req *req, *subreq;
523 struct nb_trans_state *state;
525 req = tevent_req_create(mem_ctx, &state, struct nb_trans_state);
529 talloc_set_destructor(state, nb_trans_state_destructor);
531 state->dst_addr = dst_addr;
533 state->buflen = buflen;
535 state->trn_id = trn_id;
536 state->validator = validator;
537 state->private_data = private_data;
539 state->sock = open_socket_in(SOCK_DGRAM, 0, 3, my_addr, True);
540 if (state->sock == -1) {
541 tevent_req_nterror(req, map_nt_error_from_unix(errno));
542 DEBUG(10, ("open_socket_in failed: %s\n", strerror(errno)));
543 return tevent_req_post(req, ev);
547 set_socket_options(state->sock,"SO_BROADCAST");
550 subreq = nb_packet_reader_send(state, ev, type, state->trn_id, NULL);
551 if (tevent_req_nomem(subreq, req)) {
552 return tevent_req_post(req, ev);
554 tevent_req_set_callback(subreq, nb_trans_got_reader, req);
558 static int nb_trans_state_destructor(struct nb_trans_state *s)
564 if (s->packet != NULL) {
565 free_packet(s->packet);
571 static void nb_trans_got_reader(struct tevent_req *subreq)
573 struct tevent_req *req = tevent_req_callback_data(
574 subreq, struct tevent_req);
575 struct nb_trans_state *state = tevent_req_data(
576 req, struct nb_trans_state);
579 status = nb_packet_reader_recv(subreq, state, &state->reader);
582 if (!NT_STATUS_IS_OK(status)) {
583 DEBUG(10, ("nmbd not around\n"));
584 state->reader = NULL;
587 subreq = sock_packet_read_send(
588 state, state->ev, state->sock,
589 state->reader, state->type, state->trn_id,
590 state->validator, state->private_data);
591 if (tevent_req_nomem(subreq, req)) {
594 tevent_req_set_callback(subreq, nb_trans_done, req);
596 subreq = sendto_send(state, state->ev, state->sock,
597 state->buf, state->buflen, 0, state->dst_addr);
598 if (tevent_req_nomem(subreq, req)) {
601 tevent_req_set_callback(subreq, nb_trans_sent, req);
604 static void nb_trans_sent(struct tevent_req *subreq)
606 struct tevent_req *req = tevent_req_callback_data(
607 subreq, struct tevent_req);
608 struct nb_trans_state *state = tevent_req_data(
609 req, struct nb_trans_state);
613 sent = sendto_recv(subreq, &err);
616 DEBUG(10, ("sendto failed: %s\n", strerror(err)));
617 tevent_req_nterror(req, map_nt_error_from_unix(err));
620 subreq = tevent_wakeup_send(state, state->ev,
621 timeval_current_ofs(1, 0));
622 if (tevent_req_nomem(subreq, req)) {
625 tevent_req_set_callback(subreq, nb_trans_send_next, req);
628 static void nb_trans_send_next(struct tevent_req *subreq)
630 struct tevent_req *req = tevent_req_callback_data(
631 subreq, struct tevent_req);
632 struct nb_trans_state *state = tevent_req_data(
633 req, struct nb_trans_state);
636 ret = tevent_wakeup_recv(subreq);
639 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
642 subreq = sendto_send(state, state->ev, state->sock,
643 state->buf, state->buflen, 0, state->dst_addr);
644 if (tevent_req_nomem(subreq, req)) {
647 tevent_req_set_callback(subreq, nb_trans_sent, req);
650 static void nb_trans_done(struct tevent_req *subreq)
652 struct tevent_req *req = tevent_req_callback_data(
653 subreq, struct tevent_req);
654 struct nb_trans_state *state = tevent_req_data(
655 req, struct nb_trans_state);
658 status = sock_packet_read_recv(subreq, &state->packet);
660 if (tevent_req_nterror(req, status)) {
663 tevent_req_done(req);
666 static NTSTATUS nb_trans_recv(struct tevent_req *req,
667 struct packet_struct **ppacket)
669 struct nb_trans_state *state = tevent_req_data(
670 req, struct nb_trans_state);
673 if (tevent_req_is_nterror(req, &status)) {
676 *ppacket = state->packet;
677 state->packet = NULL;
681 /****************************************************************************
682 Do a NBT node status query on an open socket and return an array of
683 structures holding the returned names or NULL if the query failed.
684 **************************************************************************/
686 struct node_status_query_state {
687 struct sockaddr_storage my_addr;
688 struct sockaddr_storage addr;
691 struct packet_struct *packet;
694 static int node_status_query_state_destructor(
695 struct node_status_query_state *s);
696 static bool node_status_query_validator(struct packet_struct *p,
698 static void node_status_query_done(struct tevent_req *subreq);
700 struct tevent_req *node_status_query_send(TALLOC_CTX *mem_ctx,
701 struct tevent_context *ev,
702 struct nmb_name *name,
703 const struct sockaddr_storage *addr)
705 struct tevent_req *req, *subreq;
706 struct node_status_query_state *state;
707 struct packet_struct p;
708 struct nmb_packet *nmb = &p.packet.nmb;
709 struct sockaddr_in *in_addr;
711 req = tevent_req_create(mem_ctx, &state,
712 struct node_status_query_state);
716 talloc_set_destructor(state, node_status_query_state_destructor);
718 if (addr->ss_family != AF_INET) {
719 /* Can't do node status to IPv6 */
720 tevent_req_nterror(req, NT_STATUS_INVALID_ADDRESS);
721 return tevent_req_post(req, ev);
725 in_addr = (struct sockaddr_in *)(void *)&state->addr;
726 in_addr->sin_port = htons(NMB_PORT);
728 set_socket_addr_v4(&state->my_addr);
731 nmb->header.name_trn_id = generate_trn_id();
732 nmb->header.opcode = 0;
733 nmb->header.response = false;
734 nmb->header.nm_flags.bcast = false;
735 nmb->header.nm_flags.recursion_available = false;
736 nmb->header.nm_flags.recursion_desired = false;
737 nmb->header.nm_flags.trunc = false;
738 nmb->header.nm_flags.authoritative = false;
739 nmb->header.rcode = 0;
740 nmb->header.qdcount = 1;
741 nmb->header.ancount = 0;
742 nmb->header.nscount = 0;
743 nmb->header.arcount = 0;
744 nmb->question.question_name = *name;
745 nmb->question.question_type = 0x21;
746 nmb->question.question_class = 0x1;
748 state->buflen = build_packet((char *)state->buf, sizeof(state->buf),
750 if (state->buflen == 0) {
751 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
752 DEBUG(10, ("build_packet failed\n"));
753 return tevent_req_post(req, ev);
756 subreq = nb_trans_send(state, ev, &state->my_addr, &state->addr, false,
757 state->buf, state->buflen,
758 NMB_PACKET, nmb->header.name_trn_id,
759 node_status_query_validator, NULL);
760 if (tevent_req_nomem(subreq, req)) {
761 DEBUG(10, ("nb_trans_send failed\n"));
762 return tevent_req_post(req, ev);
764 if (!tevent_req_set_endtime(req, ev, timeval_current_ofs(10, 0))) {
765 return tevent_req_post(req, ev);
767 tevent_req_set_callback(subreq, node_status_query_done, req);
771 static bool node_status_query_validator(struct packet_struct *p,
774 struct nmb_packet *nmb = &p->packet.nmb;
777 if (nmb->header.opcode != 0 ||
778 nmb->header.nm_flags.bcast ||
780 !nmb->header.ancount ||
781 nmb->answers->rr_type != 0x21) {
783 * XXXX what do we do with this? could be a redirect,
784 * but we'll discard it for the moment
791 static int node_status_query_state_destructor(
792 struct node_status_query_state *s)
794 if (s->packet != NULL) {
795 free_packet(s->packet);
801 static void node_status_query_done(struct tevent_req *subreq)
803 struct tevent_req *req = tevent_req_callback_data(
804 subreq, struct tevent_req);
805 struct node_status_query_state *state = tevent_req_data(
806 req, struct node_status_query_state);
809 status = nb_trans_recv(subreq, &state->packet);
811 if (tevent_req_nterror(req, status)) {
814 tevent_req_done(req);
817 NTSTATUS node_status_query_recv(struct tevent_req *req, TALLOC_CTX *mem_ctx,
818 struct node_status **pnode_status,
820 struct node_status_extra *extra)
822 struct node_status_query_state *state = tevent_req_data(
823 req, struct node_status_query_state);
824 struct node_status *node_status;
828 if (tevent_req_is_nterror(req, &status)) {
831 node_status = parse_node_status(
832 mem_ctx, &state->packet->packet.nmb.answers->rdata[0],
834 if (node_status == NULL) {
835 return NT_STATUS_NO_MEMORY;
837 *pnode_status = node_status;
838 *pnum_names = num_names;
842 NTSTATUS node_status_query(TALLOC_CTX *mem_ctx, struct nmb_name *name,
843 const struct sockaddr_storage *addr,
844 struct node_status **pnode_status,
846 struct node_status_extra *extra)
848 TALLOC_CTX *frame = talloc_stackframe();
849 struct tevent_context *ev;
850 struct tevent_req *req;
851 NTSTATUS status = NT_STATUS_NO_MEMORY;
853 ev = tevent_context_init(frame);
857 req = node_status_query_send(ev, ev, name, addr);
861 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
864 status = node_status_query_recv(req, mem_ctx, pnode_status,
871 /****************************************************************************
872 Find the first type XX name in a node status reply - used for finding
873 a servers name given its IP. Return the matched name in *name.
874 **************************************************************************/
876 bool name_status_find(const char *q_name,
879 const struct sockaddr_storage *to_ss,
882 char addr[INET6_ADDRSTRLEN];
883 struct sockaddr_storage ss;
884 struct node_status *addrs = NULL;
885 struct nmb_name nname;
890 if (lp_disable_netbios()) {
891 DEBUG(5,("name_status_find(%s#%02x): netbios is disabled\n",
896 print_sockaddr(addr, sizeof(addr), to_ss);
898 DEBUG(10, ("name_status_find: looking up %s#%02x at %s\n", q_name,
901 /* Check the cache first. */
903 if (namecache_status_fetch(q_name, q_type, type, to_ss, name)) {
907 if (to_ss->ss_family != AF_INET) {
908 /* Can't do node status to IPv6 */
912 set_socket_addr_v4(&ss);
914 /* W2K PDC's seem not to respond to '*'#0. JRA */
915 make_nmb_name(&nname, q_name, q_type);
916 status = node_status_query(talloc_tos(), &nname, to_ss,
917 &addrs, &count, NULL);
918 if (!NT_STATUS_IS_OK(status)) {
922 for (i=0;i<count;i++) {
923 /* Find first one of the requested type that's not a GROUP. */
924 if (addrs[i].type == type && ! (addrs[i].flags & 0x80))
930 pull_ascii_nstring(name, sizeof(fstring), addrs[i].name);
932 /* Store the result in the cache. */
933 /* but don't store an entry for 0x1c names here. Here we have
934 a single host and DOMAIN<0x1c> names should be a list of hosts */
936 if ( q_type != 0x1c ) {
937 namecache_status_store(q_name, q_type, type, to_ss, name);
945 DEBUG(10, ("name_status_find: name %sfound", result ? "" : "not "));
948 DEBUGADD(10, (", name %s ip address is %s", name, addr));
956 comparison function used by sort_addr_list
959 static int addr_compare(const struct sockaddr_storage *ss1,
960 const struct sockaddr_storage *ss2)
962 int max_bits1=0, max_bits2=0;
963 int num_interfaces = iface_count();
966 /* Sort IPv4 addresses first. */
967 if (ss1->ss_family != ss2->ss_family) {
968 if (ss2->ss_family == AF_INET) {
975 /* Here we know both addresses are of the same
978 for (i=0;i<num_interfaces;i++) {
979 const struct sockaddr_storage *pss = iface_n_bcast(i);
980 const unsigned char *p_ss1 = NULL;
981 const unsigned char *p_ss2 = NULL;
982 const unsigned char *p_if = NULL;
986 if (pss->ss_family != ss1->ss_family) {
987 /* Ignore interfaces of the wrong type. */
990 if (pss->ss_family == AF_INET) {
991 p_if = (const unsigned char *)
992 &((const struct sockaddr_in *)pss)->sin_addr;
993 p_ss1 = (const unsigned char *)
994 &((const struct sockaddr_in *)ss1)->sin_addr;
995 p_ss2 = (const unsigned char *)
996 &((const struct sockaddr_in *)ss2)->sin_addr;
999 #if defined(HAVE_IPV6)
1000 if (pss->ss_family == AF_INET6) {
1001 p_if = (const unsigned char *)
1002 &((const struct sockaddr_in6 *)pss)->sin6_addr;
1003 p_ss1 = (const unsigned char *)
1004 &((const struct sockaddr_in6 *)ss1)->sin6_addr;
1005 p_ss2 = (const unsigned char *)
1006 &((const struct sockaddr_in6 *)ss2)->sin6_addr;
1010 if (!p_ss1 || !p_ss2 || !p_if || len == 0) {
1013 bits1 = matching_len_bits(p_ss1, p_if, len);
1014 bits2 = matching_len_bits(p_ss2, p_if, len);
1015 max_bits1 = MAX(bits1, max_bits1);
1016 max_bits2 = MAX(bits2, max_bits2);
1019 /* Bias towards directly reachable IPs */
1020 if (iface_local((const struct sockaddr *)ss1)) {
1021 if (ss1->ss_family == AF_INET) {
1027 if (iface_local((const struct sockaddr *)ss2)) {
1028 if (ss2->ss_family == AF_INET) {
1034 return max_bits2 - max_bits1;
1037 /*******************************************************************
1038 compare 2 ldap IPs by nearness to our interfaces - used in qsort
1039 *******************************************************************/
1041 int ip_service_compare(struct ip_service *ss1, struct ip_service *ss2)
1045 if ((result = addr_compare(&ss1->ss, &ss2->ss)) != 0) {
1049 if (ss1->port > ss2->port) {
1053 if (ss1->port < ss2->port) {
1061 sort an IP list so that names that are close to one of our interfaces
1062 are at the top. This prevents the problem where a WINS server returns an IP
1063 that is not reachable from our subnet as the first match
1066 static void sort_addr_list(struct sockaddr_storage *sslist, int count)
1072 TYPESAFE_QSORT(sslist, count, addr_compare);
1075 static void sort_service_list(struct ip_service *servlist, int count)
1081 TYPESAFE_QSORT(servlist, count, ip_service_compare);
1084 /**********************************************************************
1085 Remove any duplicate address/port pairs in the list
1086 *********************************************************************/
1088 static int remove_duplicate_addrs2(struct ip_service *iplist, int count )
1092 DEBUG(10,("remove_duplicate_addrs2: "
1093 "looking for duplicate address/port pairs\n"));
1095 /* one loop to remove duplicates */
1096 for ( i=0; i<count; i++ ) {
1097 if ( is_zero_addr(&iplist[i].ss)) {
1101 for ( j=i+1; j<count; j++ ) {
1102 if (sockaddr_equal((struct sockaddr *)&iplist[i].ss, (struct sockaddr *)&iplist[j].ss) &&
1103 iplist[i].port == iplist[j].port) {
1104 zero_sockaddr(&iplist[j].ss);
1109 /* one loop to clean up any holes we left */
1110 /* first ip should never be a zero_ip() */
1111 for (i = 0; i<count; ) {
1112 if (is_zero_addr(&iplist[i].ss) ) {
1114 memmove(&iplist[i], &iplist[i+1],
1115 (count - i - 1)*sizeof(iplist[i]));
1126 static bool prioritize_ipv4_list(struct ip_service *iplist, int count)
1128 TALLOC_CTX *frame = talloc_stackframe();
1129 struct ip_service *iplist_new = talloc_array(frame, struct ip_service, count);
1132 if (iplist_new == NULL) {
1139 /* Copy IPv4 first. */
1140 for (i = 0; i < count; i++) {
1141 if (iplist[i].ss.ss_family == AF_INET) {
1142 iplist_new[j++] = iplist[i];
1147 for (i = 0; i < count; i++) {
1148 if (iplist[i].ss.ss_family != AF_INET) {
1149 iplist_new[j++] = iplist[i];
1153 memcpy(iplist, iplist_new, sizeof(struct ip_service)*count);
1158 /****************************************************************************
1159 Do a netbios name query to find someones IP.
1160 Returns an array of IP addresses or NULL if none.
1161 *count will be set to the number of addresses returned.
1162 *timed_out is set if we failed by timing out
1163 ****************************************************************************/
1165 struct name_query_state {
1166 struct sockaddr_storage my_addr;
1167 struct sockaddr_storage addr;
1174 NTSTATUS validate_error;
1177 struct sockaddr_storage *addrs;
1181 static bool name_query_validator(struct packet_struct *p, void *private_data);
1182 static void name_query_done(struct tevent_req *subreq);
1184 struct tevent_req *name_query_send(TALLOC_CTX *mem_ctx,
1185 struct tevent_context *ev,
1186 const char *name, int name_type,
1187 bool bcast, bool recurse,
1188 const struct sockaddr_storage *addr)
1190 struct tevent_req *req, *subreq;
1191 struct name_query_state *state;
1192 struct packet_struct p;
1193 struct nmb_packet *nmb = &p.packet.nmb;
1194 struct sockaddr_in *in_addr;
1196 req = tevent_req_create(mem_ctx, &state, struct name_query_state);
1200 state->bcast = bcast;
1202 if (addr->ss_family != AF_INET) {
1203 /* Can't do node status to IPv6 */
1204 tevent_req_nterror(req, NT_STATUS_INVALID_ADDRESS);
1205 return tevent_req_post(req, ev);
1208 if (lp_disable_netbios()) {
1209 DEBUG(5,("name_query(%s#%02x): netbios is disabled\n",
1211 tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
1212 return tevent_req_post(req, ev);
1215 state->addr = *addr;
1216 in_addr = (struct sockaddr_in *)(void *)&state->addr;
1217 in_addr->sin_port = htons(NMB_PORT);
1219 set_socket_addr_v4(&state->my_addr);
1222 nmb->header.name_trn_id = generate_trn_id();
1223 nmb->header.opcode = 0;
1224 nmb->header.response = false;
1225 nmb->header.nm_flags.bcast = bcast;
1226 nmb->header.nm_flags.recursion_available = false;
1227 nmb->header.nm_flags.recursion_desired = recurse;
1228 nmb->header.nm_flags.trunc = false;
1229 nmb->header.nm_flags.authoritative = false;
1230 nmb->header.rcode = 0;
1231 nmb->header.qdcount = 1;
1232 nmb->header.ancount = 0;
1233 nmb->header.nscount = 0;
1234 nmb->header.arcount = 0;
1236 make_nmb_name(&nmb->question.question_name,name,name_type);
1238 nmb->question.question_type = 0x20;
1239 nmb->question.question_class = 0x1;
1241 state->buflen = build_packet((char *)state->buf, sizeof(state->buf),
1243 if (state->buflen == 0) {
1244 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
1245 DEBUG(10, ("build_packet failed\n"));
1246 return tevent_req_post(req, ev);
1249 subreq = nb_trans_send(state, ev, &state->my_addr, &state->addr, bcast,
1250 state->buf, state->buflen,
1251 NMB_PACKET, nmb->header.name_trn_id,
1252 name_query_validator, state);
1253 if (tevent_req_nomem(subreq, req)) {
1254 DEBUG(10, ("nb_trans_send failed\n"));
1255 return tevent_req_post(req, ev);
1257 tevent_req_set_callback(subreq, name_query_done, req);
1261 static bool name_query_validator(struct packet_struct *p, void *private_data)
1263 struct name_query_state *state = talloc_get_type_abort(
1264 private_data, struct name_query_state);
1265 struct nmb_packet *nmb = &p->packet.nmb;
1266 struct sockaddr_storage *tmp_addrs;
1267 bool got_unique_netbios_name = false;
1270 debug_nmb_packet(p);
1273 * If we get a Negative Name Query Response from a WINS
1274 * server, we should report it and give up.
1276 if( 0 == nmb->header.opcode /* A query response */
1277 && !state->bcast /* from a WINS server */
1278 && nmb->header.rcode /* Error returned */
1281 if( DEBUGLVL( 3 ) ) {
1282 /* Only executed if DEBUGLEVEL >= 3 */
1283 dbgtext( "Negative name query "
1284 "response, rcode 0x%02x: ",
1285 nmb->header.rcode );
1286 switch( nmb->header.rcode ) {
1288 dbgtext("Request was invalidly formatted.\n");
1291 dbgtext("Problem with NBNS, cannot process "
1295 dbgtext("The name requested does not "
1299 dbgtext("Unsupported request error.\n");
1302 dbgtext("Query refused error.\n");
1305 dbgtext("Unrecognized error code.\n" );
1311 * We accept this packet as valid, but tell the upper
1312 * layers that it's a negative response.
1314 state->validate_error = NT_STATUS_NOT_FOUND;
1318 if (nmb->header.opcode != 0 ||
1319 nmb->header.nm_flags.bcast ||
1320 nmb->header.rcode ||
1321 !nmb->header.ancount) {
1323 * XXXX what do we do with this? Could be a redirect,
1324 * but we'll discard it for the moment.
1329 tmp_addrs = talloc_realloc(
1330 state, state->addrs, struct sockaddr_storage,
1331 state->num_addrs + nmb->answers->rdlength/6);
1332 if (tmp_addrs == NULL) {
1333 state->validate_error = NT_STATUS_NO_MEMORY;
1336 state->addrs = tmp_addrs;
1338 DEBUG(2,("Got a positive name query response "
1339 "from %s ( ", inet_ntoa(p->ip)));
1341 for (i=0; i<nmb->answers->rdlength/6; i++) {
1344 struct sockaddr_storage addr;
1347 flags = RSVAL(&nmb->answers->rdata[i*6], 0);
1348 got_unique_netbios_name |= ((flags & 0x8000) == 0);
1350 putip((char *)&ip,&nmb->answers->rdata[2+i*6]);
1351 in_addr_to_sockaddr_storage(&addr, ip);
1353 for (j=0; j<state->num_addrs; j++) {
1355 (struct sockaddr *)&addr,
1356 (struct sockaddr *)&state->addrs[j])) {
1360 if (j < state->num_addrs) {
1361 /* Already got it */
1365 DEBUGADD(2,("%s ",inet_ntoa(ip)));
1367 state->addrs[state->num_addrs] = addr;
1368 state->num_addrs += 1;
1370 DEBUGADD(2,(")\n"));
1372 /* We add the flags back ... */
1373 if (nmb->header.response)
1374 state->flags |= NM_FLAGS_RS;
1375 if (nmb->header.nm_flags.authoritative)
1376 state->flags |= NM_FLAGS_AA;
1377 if (nmb->header.nm_flags.trunc)
1378 state->flags |= NM_FLAGS_TC;
1379 if (nmb->header.nm_flags.recursion_desired)
1380 state->flags |= NM_FLAGS_RD;
1381 if (nmb->header.nm_flags.recursion_available)
1382 state->flags |= NM_FLAGS_RA;
1383 if (nmb->header.nm_flags.bcast)
1384 state->flags |= NM_FLAGS_B;
1388 * We have to collect all entries coming in from broadcast
1389 * queries. If we got a unique name, we're done.
1391 return got_unique_netbios_name;
1394 * WINS responses are accepted when they are received
1399 static void name_query_done(struct tevent_req *subreq)
1401 struct tevent_req *req = tevent_req_callback_data(
1402 subreq, struct tevent_req);
1403 struct name_query_state *state = tevent_req_data(
1404 req, struct name_query_state);
1406 struct packet_struct *p = NULL;
1408 status = nb_trans_recv(subreq, &p);
1409 TALLOC_FREE(subreq);
1410 if (tevent_req_nterror(req, status)) {
1413 if (!NT_STATUS_IS_OK(state->validate_error)) {
1414 tevent_req_nterror(req, state->validate_error);
1419 * Free the packet here, we've collected the response in the
1424 tevent_req_done(req);
1427 NTSTATUS name_query_recv(struct tevent_req *req, TALLOC_CTX *mem_ctx,
1428 struct sockaddr_storage **addrs, int *num_addrs,
1431 struct name_query_state *state = tevent_req_data(
1432 req, struct name_query_state);
1435 if (tevent_req_is_nterror(req, &status)) {
1437 NT_STATUS_EQUAL(status, NT_STATUS_IO_TIMEOUT)) {
1439 * In the broadcast case we collect replies until the
1442 status = NT_STATUS_OK;
1444 if (!NT_STATUS_IS_OK(status)) {
1448 if (state->num_addrs == 0) {
1449 return NT_STATUS_NOT_FOUND;
1451 *addrs = talloc_move(mem_ctx, &state->addrs);
1452 sort_addr_list(*addrs, state->num_addrs);
1453 *num_addrs = state->num_addrs;
1454 if (flags != NULL) {
1455 *flags = state->flags;
1457 return NT_STATUS_OK;
1460 NTSTATUS name_query(const char *name, int name_type,
1461 bool bcast, bool recurse,
1462 const struct sockaddr_storage *to_ss,
1463 TALLOC_CTX *mem_ctx,
1464 struct sockaddr_storage **addrs,
1465 int *num_addrs, uint8_t *flags)
1467 TALLOC_CTX *frame = talloc_stackframe();
1468 struct tevent_context *ev;
1469 struct tevent_req *req;
1470 struct timeval timeout;
1471 NTSTATUS status = NT_STATUS_NO_MEMORY;
1473 ev = tevent_context_init(frame);
1477 req = name_query_send(ev, ev, name, name_type, bcast, recurse, to_ss);
1482 timeout = timeval_current_ofs(0, 250000);
1484 timeout = timeval_current_ofs(2, 0);
1486 if (!tevent_req_set_endtime(req, ev, timeout)) {
1489 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
1492 status = name_query_recv(req, mem_ctx, addrs, num_addrs, flags);
1498 /********************************************************
1499 convert an array if struct sockaddr_storage to struct ip_service
1500 return false on failure. Port is set to PORT_NONE;
1501 *********************************************************/
1503 static bool convert_ss2service(struct ip_service **return_iplist,
1504 const struct sockaddr_storage *ss_list,
1509 if ( count==0 || !ss_list )
1512 /* copy the ip address; port will be PORT_NONE */
1513 if ((*return_iplist = SMB_MALLOC_ARRAY(struct ip_service, count)) ==
1515 DEBUG(0,("convert_ip2service: malloc failed "
1516 "for %d enetries!\n", count ));
1520 for ( i=0; i<count; i++ ) {
1521 (*return_iplist)[i].ss = ss_list[i];
1522 (*return_iplist)[i].port = PORT_NONE;
1528 struct name_queries_state {
1529 struct tevent_context *ev;
1534 const struct sockaddr_storage *addrs;
1539 struct tevent_req **subreqs;
1544 struct sockaddr_storage *result_addrs;
1545 int num_result_addrs;
1549 static void name_queries_done(struct tevent_req *subreq);
1550 static void name_queries_next(struct tevent_req *subreq);
1553 * Send a name query to multiple destinations with a wait time in between
1556 static struct tevent_req *name_queries_send(
1557 TALLOC_CTX *mem_ctx, struct tevent_context *ev,
1558 const char *name, int name_type,
1559 bool bcast, bool recurse,
1560 const struct sockaddr_storage *addrs,
1561 int num_addrs, int wait_msec, int timeout_msec)
1563 struct tevent_req *req, *subreq;
1564 struct name_queries_state *state;
1566 req = tevent_req_create(mem_ctx, &state,
1567 struct name_queries_state);
1573 state->name_type = name_type;
1574 state->bcast = bcast;
1575 state->recurse = recurse;
1576 state->addrs = addrs;
1577 state->num_addrs = num_addrs;
1578 state->wait_msec = wait_msec;
1579 state->timeout_msec = timeout_msec;
1581 state->subreqs = talloc_zero_array(
1582 state, struct tevent_req *, num_addrs);
1583 if (tevent_req_nomem(state->subreqs, req)) {
1584 return tevent_req_post(req, ev);
1586 state->num_sent = 0;
1588 subreq = name_query_send(
1589 state->subreqs, state->ev, name, name_type, bcast, recurse,
1590 &state->addrs[state->num_sent]);
1591 if (tevent_req_nomem(subreq, req)) {
1592 return tevent_req_post(req, ev);
1594 if (!tevent_req_set_endtime(
1596 timeval_current_ofs(0, state->timeout_msec * 1000))) {
1597 tevent_req_nomem(NULL, req);
1598 return tevent_req_post(req, ev);
1600 tevent_req_set_callback(subreq, name_queries_done, req);
1602 state->subreqs[state->num_sent] = subreq;
1603 state->num_sent += 1;
1605 if (state->num_sent < state->num_addrs) {
1606 subreq = tevent_wakeup_send(
1608 timeval_current_ofs(0, state->wait_msec * 1000));
1609 if (tevent_req_nomem(subreq, req)) {
1610 return tevent_req_post(req, ev);
1612 tevent_req_set_callback(subreq, name_queries_next, req);
1617 static void name_queries_done(struct tevent_req *subreq)
1619 struct tevent_req *req = tevent_req_callback_data(
1620 subreq, struct tevent_req);
1621 struct name_queries_state *state = tevent_req_data(
1622 req, struct name_queries_state);
1626 status = name_query_recv(subreq, state, &state->result_addrs,
1627 &state->num_result_addrs, &state->flags);
1629 for (i=0; i<state->num_sent; i++) {
1630 if (state->subreqs[i] == subreq) {
1634 if (i == state->num_sent) {
1635 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
1638 TALLOC_FREE(state->subreqs[i]);
1640 state->num_received += 1;
1642 if (!NT_STATUS_IS_OK(status)) {
1644 if (state->num_received >= state->num_addrs) {
1645 tevent_req_nterror(req, status);
1649 * Still outstanding requests, just wait
1653 state->received_index = i;
1654 tevent_req_done(req);
1657 static void name_queries_next(struct tevent_req *subreq)
1659 struct tevent_req *req = tevent_req_callback_data(
1660 subreq, struct tevent_req);
1661 struct name_queries_state *state = tevent_req_data(
1662 req, struct name_queries_state);
1664 if (!tevent_wakeup_recv(subreq)) {
1665 tevent_req_nterror(req, NT_STATUS_INTERNAL_ERROR);
1669 subreq = name_query_send(
1670 state->subreqs, state->ev,
1671 state->name, state->name_type, state->bcast, state->recurse,
1672 &state->addrs[state->num_sent]);
1673 if (tevent_req_nomem(subreq, req)) {
1676 tevent_req_set_callback(subreq, name_queries_done, req);
1677 if (!tevent_req_set_endtime(
1679 timeval_current_ofs(0, state->timeout_msec * 1000))) {
1680 tevent_req_nomem(NULL, req);
1683 state->subreqs[state->num_sent] = subreq;
1684 state->num_sent += 1;
1686 if (state->num_sent < state->num_addrs) {
1687 subreq = tevent_wakeup_send(
1689 timeval_current_ofs(0, state->wait_msec * 1000));
1690 if (tevent_req_nomem(subreq, req)) {
1693 tevent_req_set_callback(subreq, name_queries_next, req);
1697 static NTSTATUS name_queries_recv(struct tevent_req *req, TALLOC_CTX *mem_ctx,
1698 struct sockaddr_storage **result_addrs,
1699 int *num_result_addrs, uint8_t *flags,
1700 int *received_index)
1702 struct name_queries_state *state = tevent_req_data(
1703 req, struct name_queries_state);
1706 if (tevent_req_is_nterror(req, &status)) {
1710 if (result_addrs != NULL) {
1711 *result_addrs = talloc_move(mem_ctx, &state->result_addrs);
1713 if (num_result_addrs != NULL) {
1714 *num_result_addrs = state->num_result_addrs;
1716 if (flags != NULL) {
1717 *flags = state->flags;
1719 if (received_index != NULL) {
1720 *received_index = state->received_index;
1722 return NT_STATUS_OK;
1725 static NTSTATUS name_queries(const char *name, int name_type,
1726 bool bcast, bool recurse,
1727 const struct sockaddr_storage *addrs,
1728 int num_addrs, int wait_msec, int timeout_msec,
1729 TALLOC_CTX *mem_ctx,
1730 struct sockaddr_storage **result_addrs,
1731 int *num_result_addrs, uint8_t *flags,
1732 int *received_index)
1734 TALLOC_CTX *frame = talloc_stackframe();
1735 struct event_context *ev;
1736 struct tevent_req *req;
1737 NTSTATUS status = NT_STATUS_NO_MEMORY;
1739 ev = event_context_init(frame);
1743 req = name_queries_send(frame, ev, name, name_type, bcast,
1744 recurse, addrs, num_addrs, wait_msec,
1749 if (!tevent_req_poll_ntstatus(req, ev, &status)) {
1752 status = name_queries_recv(req, mem_ctx, result_addrs,
1753 num_result_addrs, flags, received_index);
1759 /********************************************************
1760 Resolve via "bcast" method.
1761 *********************************************************/
1763 NTSTATUS name_resolve_bcast(const char *name,
1765 TALLOC_CTX *mem_ctx,
1766 struct sockaddr_storage **return_iplist,
1769 struct sockaddr_storage *bcast_addrs;
1770 int i, num_addrs, num_bcast_addrs;
1772 if (lp_disable_netbios()) {
1773 DEBUG(5,("name_resolve_bcast(%s#%02x): netbios is disabled\n",
1775 return NT_STATUS_INVALID_PARAMETER;
1779 * "bcast" means do a broadcast lookup on all the local interfaces.
1782 DEBUG(3,("name_resolve_bcast: Attempting broadcast lookup "
1783 "for name %s<0x%x>\n", name, name_type));
1785 num_addrs = iface_count();
1786 bcast_addrs = talloc_array(talloc_tos(), struct sockaddr_storage,
1788 if (bcast_addrs == NULL) {
1789 return NT_STATUS_NO_MEMORY;
1793 * Lookup the name on all the interfaces, return on
1794 * the first successful match.
1796 num_bcast_addrs = 0;
1798 for (i=0; i<num_addrs; i++) {
1799 const struct sockaddr_storage *pss = iface_n_bcast(i);
1801 if (pss->ss_family != AF_INET) {
1804 bcast_addrs[num_bcast_addrs] = *pss;
1805 num_bcast_addrs += 1;
1808 return name_queries(name, name_type, true, true,
1809 bcast_addrs, num_bcast_addrs, 0, 1000,
1810 mem_ctx, return_iplist, return_count,
1814 struct query_wins_list_state {
1815 struct tevent_context *ev;
1818 struct in_addr *servers;
1819 uint32_t num_servers;
1820 struct sockaddr_storage server;
1823 struct sockaddr_storage *addrs;
1828 static void query_wins_list_done(struct tevent_req *subreq);
1831 * Query a list of (replicating) wins servers in sequence, call them
1832 * dead if they don't reply
1835 static struct tevent_req *query_wins_list_send(
1836 TALLOC_CTX *mem_ctx, struct tevent_context *ev,
1837 struct in_addr src_ip, const char *name, uint8_t name_type,
1838 struct in_addr *servers, int num_servers)
1840 struct tevent_req *req, *subreq;
1841 struct query_wins_list_state *state;
1843 req = tevent_req_create(mem_ctx, &state,
1844 struct query_wins_list_state);
1850 state->name_type = name_type;
1851 state->servers = servers;
1852 state->num_servers = num_servers;
1854 if (state->num_servers == 0) {
1855 tevent_req_nterror(req, NT_STATUS_NOT_FOUND);
1856 return tevent_req_post(req, ev);
1859 in_addr_to_sockaddr_storage(
1860 &state->server, state->servers[state->num_sent]);
1862 subreq = name_query_send(state, state->ev,
1863 state->name, state->name_type,
1864 false, true, &state->server);
1865 state->num_sent += 1;
1866 if (tevent_req_nomem(subreq, req)) {
1867 return tevent_req_post(req, ev);
1869 if (!tevent_req_set_endtime(subreq, state->ev,
1870 timeval_current_ofs(2, 0))) {
1871 tevent_req_nomem(NULL, req);
1872 return tevent_req_post(req, ev);
1874 tevent_req_set_callback(subreq, query_wins_list_done, req);
1878 static void query_wins_list_done(struct tevent_req *subreq)
1880 struct tevent_req *req = tevent_req_callback_data(
1881 subreq, struct tevent_req);
1882 struct query_wins_list_state *state = tevent_req_data(
1883 req, struct query_wins_list_state);
1886 status = name_query_recv(subreq, state,
1887 &state->addrs, &state->num_addrs,
1889 TALLOC_FREE(subreq);
1890 if (NT_STATUS_IS_OK(status)) {
1891 tevent_req_done(req);
1894 if (!NT_STATUS_EQUAL(status, NT_STATUS_IO_TIMEOUT)) {
1895 tevent_req_nterror(req, status);
1898 wins_srv_died(state->servers[state->num_sent-1],
1899 my_socket_addr_v4());
1901 if (state->num_sent == state->num_servers) {
1902 tevent_req_nterror(req, NT_STATUS_NOT_FOUND);
1906 in_addr_to_sockaddr_storage(
1907 &state->server, state->servers[state->num_sent]);
1909 subreq = name_query_send(state, state->ev,
1910 state->name, state->name_type,
1911 false, true, &state->server);
1912 state->num_sent += 1;
1913 if (tevent_req_nomem(subreq, req)) {
1916 if (!tevent_req_set_endtime(subreq, state->ev,
1917 timeval_current_ofs(2, 0))) {
1918 tevent_req_nomem(NULL, req);
1921 tevent_req_set_callback(subreq, query_wins_list_done, req);
1924 static NTSTATUS query_wins_list_recv(struct tevent_req *req,
1925 TALLOC_CTX *mem_ctx,
1926 struct sockaddr_storage **addrs,
1930 struct query_wins_list_state *state = tevent_req_data(
1931 req, struct query_wins_list_state);
1934 if (tevent_req_is_nterror(req, &status)) {
1937 if (addrs != NULL) {
1938 *addrs = talloc_move(mem_ctx, &state->addrs);
1940 if (num_addrs != NULL) {
1941 *num_addrs = state->num_addrs;
1943 if (flags != NULL) {
1944 *flags = state->flags;
1946 return NT_STATUS_OK;
1949 /********************************************************
1950 Resolve via "wins" method.
1951 *********************************************************/
1953 NTSTATUS resolve_wins(const char *name,
1955 TALLOC_CTX *mem_ctx,
1956 struct sockaddr_storage **return_iplist,
1961 struct sockaddr_storage src_ss;
1962 struct in_addr src_ip;
1965 if (lp_disable_netbios()) {
1966 DEBUG(5,("resolve_wins(%s#%02x): netbios is disabled\n",
1968 return NT_STATUS_INVALID_PARAMETER;
1971 *return_iplist = NULL;
1974 DEBUG(3,("resolve_wins: Attempting wins lookup for name %s<0x%x>\n",
1977 if (wins_srv_count() < 1) {
1978 DEBUG(3,("resolve_wins: WINS server resolution selected "
1979 "and no WINS servers listed.\n"));
1980 return NT_STATUS_INVALID_PARAMETER;
1983 /* we try a lookup on each of the WINS tags in turn */
1984 wins_tags = wins_srv_tags();
1987 /* huh? no tags?? give up in disgust */
1988 return NT_STATUS_INVALID_PARAMETER;
1991 /* the address we will be sending from */
1992 if (!interpret_string_addr(&src_ss, lp_socket_address(),
1993 AI_NUMERICHOST|AI_PASSIVE)) {
1994 zero_sockaddr(&src_ss);
1997 if (src_ss.ss_family != AF_INET) {
1998 char addr[INET6_ADDRSTRLEN];
1999 print_sockaddr(addr, sizeof(addr), &src_ss);
2000 DEBUG(3,("resolve_wins: cannot receive WINS replies "
2001 "on IPv6 address %s\n",
2003 wins_srv_tags_free(wins_tags);
2004 return NT_STATUS_INVALID_PARAMETER;
2007 src_ip = ((struct sockaddr_in *)&src_ss)->sin_addr;
2009 /* in the worst case we will try every wins server with every
2011 for (t=0; wins_tags && wins_tags[t]; t++) {
2012 int srv_count = wins_srv_count_tag(wins_tags[t]);
2013 for (i=0; i<srv_count; i++) {
2014 struct sockaddr_storage wins_ss;
2015 struct in_addr wins_ip;
2017 wins_ip = wins_srv_ip_tag(wins_tags[t], src_ip);
2019 if (global_in_nmbd && ismyip_v4(wins_ip)) {
2020 /* yikes! we'll loop forever */
2024 /* skip any that have been unresponsive lately */
2025 if (wins_srv_is_dead(wins_ip, src_ip)) {
2029 DEBUG(3,("resolve_wins: using WINS server %s "
2031 inet_ntoa(wins_ip), wins_tags[t]));
2033 in_addr_to_sockaddr_storage(&wins_ss, wins_ip);
2034 status = name_query(name,
2044 /* exit loop if we got a list of addresses */
2046 if (NT_STATUS_IS_OK(status)) {
2050 if (NT_STATUS_EQUAL(status,
2051 NT_STATUS_IO_TIMEOUT)) {
2052 /* Timed out waiting for WINS server to
2055 wins_srv_died(wins_ip, src_ip);
2057 /* The name definitely isn't in this
2058 group of WINS servers.
2059 goto the next group */
2065 wins_srv_tags_free(wins_tags);
2066 return NT_STATUS_NO_LOGON_SERVERS;
2070 status = NT_STATUS_OK;
2071 wins_srv_tags_free(wins_tags);
2076 /********************************************************
2077 Resolve via "lmhosts" method.
2078 *********************************************************/
2080 static NTSTATUS resolve_lmhosts(const char *name, int name_type,
2081 struct ip_service **return_iplist,
2085 * "lmhosts" means parse the local lmhosts file.
2087 struct sockaddr_storage *ss_list;
2088 NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
2089 TALLOC_CTX *ctx = NULL;
2091 *return_iplist = NULL;
2094 DEBUG(3,("resolve_lmhosts: "
2095 "Attempting lmhosts lookup for name %s<0x%x>\n",
2098 ctx = talloc_init("resolve_lmhosts");
2100 return NT_STATUS_NO_MEMORY;
2103 status = resolve_lmhosts_file_as_sockaddr(get_dyn_LMHOSTSFILE(),
2108 if (NT_STATUS_IS_OK(status)) {
2109 if (convert_ss2service(return_iplist,
2113 return NT_STATUS_OK;
2116 return NT_STATUS_NO_MEMORY;
2124 /********************************************************
2125 Resolve via "hosts" method.
2126 *********************************************************/
2128 static NTSTATUS resolve_hosts(const char *name, int name_type,
2129 struct ip_service **return_iplist,
2133 * "host" means do a localhost, or dns lookup.
2135 struct addrinfo hints;
2136 struct addrinfo *ailist = NULL;
2137 struct addrinfo *res = NULL;
2140 const char *dns_hosts_file;
2142 if ( name_type != 0x20 && name_type != 0x0) {
2143 DEBUG(5, ("resolve_hosts: not appropriate "
2144 "for name type <0x%x>\n",
2146 return NT_STATUS_INVALID_PARAMETER;
2149 *return_iplist = NULL;
2152 DEBUG(3,("resolve_hosts: Attempting host lookup for name %s<0x%x>\n",
2156 /* By default make sure it supports TCP. */
2157 hints.ai_socktype = SOCK_STREAM;
2158 hints.ai_flags = AI_ADDRCONFIG;
2160 #if !defined(HAVE_IPV6)
2161 /* Unless we have IPv6, we really only want IPv4 addresses back. */
2162 hints.ai_family = AF_INET;
2165 dns_hosts_file = lp_parm_const_string(-1, "resolv", "host file", NULL);
2166 if (dns_hosts_file) {
2167 struct sockaddr_storage *ss_list;
2169 TALLOC_CTX *ctx = talloc_stackframe();
2171 return NT_STATUS_NO_MEMORY;
2174 status = resolve_dns_hosts_file_as_sockaddr(dns_hosts_file, name, false,
2175 ctx, &ss_list, return_count);
2176 if (NT_STATUS_IS_OK(status)) {
2177 if (convert_ss2service(return_iplist,
2181 return NT_STATUS_OK;
2184 return NT_STATUS_NO_MEMORY;
2188 return NT_STATUS_UNSUCCESSFUL;
2191 ret = getaddrinfo(name,
2196 DEBUG(3,("resolve_hosts: getaddrinfo failed for name %s [%s]\n",
2198 gai_strerror(ret) ));
2201 for (res = ailist; res; res = res->ai_next) {
2202 struct sockaddr_storage ss;
2204 if (!res->ai_addr || res->ai_addrlen == 0) {
2209 memcpy(&ss, res->ai_addr, res->ai_addrlen);
2213 *return_iplist = SMB_REALLOC_ARRAY(*return_iplist,
2216 if (!*return_iplist) {
2217 DEBUG(3,("resolve_hosts: malloc fail !\n"));
2218 freeaddrinfo(ailist);
2219 return NT_STATUS_NO_MEMORY;
2221 (*return_iplist)[i].ss = ss;
2222 (*return_iplist)[i].port = PORT_NONE;
2226 freeaddrinfo(ailist);
2228 if (*return_count) {
2229 return NT_STATUS_OK;
2231 return NT_STATUS_UNSUCCESSFUL;
2234 /********************************************************
2235 Resolve via "ADS" method.
2236 *********************************************************/
2238 /* Special name type used to cause a _kerberos DNS lookup. */
2239 #define KDC_NAME_TYPE 0xDCDC
2241 static NTSTATUS resolve_ads(const char *name,
2243 const char *sitename,
2244 struct ip_service **return_iplist,
2250 struct dns_rr_srv *dcs = NULL;
2254 if ((name_type != 0x1c) && (name_type != KDC_NAME_TYPE) &&
2255 (name_type != 0x1b)) {
2256 return NT_STATUS_INVALID_PARAMETER;
2259 if ( (ctx = talloc_init("resolve_ads")) == NULL ) {
2260 DEBUG(0,("resolve_ads: talloc_init() failed!\n"));
2261 return NT_STATUS_NO_MEMORY;
2264 /* The DNS code needs fixing to find IPv6 addresses... JRA. */
2266 switch (name_type) {
2268 DEBUG(5,("resolve_ads: Attempting to resolve "
2269 "PDC for %s using DNS\n", name));
2270 status = ads_dns_query_pdc(ctx, name, &dcs, &numdcs);
2274 DEBUG(5,("resolve_ads: Attempting to resolve "
2275 "DCs for %s using DNS\n", name));
2276 status = ads_dns_query_dcs(ctx, name, sitename, &dcs,
2280 DEBUG(5,("resolve_ads: Attempting to resolve "
2281 "KDCs for %s using DNS\n", name));
2282 status = ads_dns_query_kdcs(ctx, name, sitename, &dcs,
2286 status = NT_STATUS_INVALID_PARAMETER;
2290 if ( !NT_STATUS_IS_OK( status ) ) {
2291 talloc_destroy(ctx);
2295 for (i=0;i<numdcs;i++) {
2296 numaddrs += MAX(dcs[i].num_ips,1);
2299 if ((*return_iplist = SMB_MALLOC_ARRAY(struct ip_service, numaddrs)) ==
2301 DEBUG(0,("resolve_ads: malloc failed for %d entries\n",
2303 talloc_destroy(ctx);
2304 return NT_STATUS_NO_MEMORY;
2307 /* now unroll the list of IP addresses */
2312 while ( i < numdcs && (*return_count<numaddrs) ) {
2313 struct ip_service *r = &(*return_iplist)[*return_count];
2315 r->port = dcs[i].port;
2317 /* If we don't have an IP list for a name, lookup it up */
2320 interpret_string_addr(&r->ss, dcs[i].hostname, 0);
2324 /* use the IP addresses from the SRV sresponse */
2326 if ( j >= dcs[i].num_ips ) {
2332 r->ss = dcs[i].ss_s[j];
2336 /* make sure it is a valid IP. I considered checking the
2337 * negative connection cache, but this is the wrong place
2338 * for it. Maybe only as a hack. After think about it, if
2339 * all of the IP addresses returned from DNS are dead, what
2340 * hope does a netbios name lookup have ? The standard reason
2341 * for falling back to netbios lookups is that our DNS server
2342 * doesn't know anything about the DC's -- jerry */
2344 if (!is_zero_addr(&r->ss)) {
2349 talloc_destroy(ctx);
2350 return NT_STATUS_OK;
2353 /*******************************************************************
2354 Internal interface to resolve a name into an IP address.
2355 Use this function if the string is either an IP address, DNS
2356 or host name or NetBIOS name. This uses the name switch in the
2357 smb.conf to determine the order of name resolution.
2359 Added support for ip addr/port to support ADS ldap servers.
2360 the only place we currently care about the port is in the
2361 resolve_hosts() when looking up DC's via SRV RR entries in DNS
2362 **********************************************************************/
2364 NTSTATUS internal_resolve_name(const char *name,
2366 const char *sitename,
2367 struct ip_service **return_iplist,
2369 const char *resolve_order)
2373 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
2375 TALLOC_CTX *frame = NULL;
2377 *return_iplist = NULL;
2380 DEBUG(10, ("internal_resolve_name: looking up %s#%x (sitename %s)\n",
2381 name, name_type, sitename ? sitename : "(null)"));
2383 if (is_ipaddress(name)) {
2384 if ((*return_iplist = SMB_MALLOC_P(struct ip_service)) ==
2386 DEBUG(0,("internal_resolve_name: malloc fail !\n"));
2387 return NT_STATUS_NO_MEMORY;
2390 /* ignore the port here */
2391 (*return_iplist)->port = PORT_NONE;
2393 /* if it's in the form of an IP address then get the lib to interpret it */
2394 if (!interpret_string_addr(&(*return_iplist)->ss,
2395 name, AI_NUMERICHOST)) {
2396 DEBUG(1,("internal_resolve_name: interpret_string_addr "
2399 SAFE_FREE(*return_iplist);
2400 return NT_STATUS_INVALID_PARAMETER;
2403 return NT_STATUS_OK;
2406 /* Check name cache */
2408 if (namecache_fetch(name, name_type, return_iplist, return_count)) {
2409 /* This could be a negative response */
2410 if (*return_count > 0) {
2411 return NT_STATUS_OK;
2413 return NT_STATUS_UNSUCCESSFUL;
2417 /* set the name resolution order */
2419 if (strcmp( resolve_order, "NULL") == 0) {
2420 DEBUG(8,("internal_resolve_name: all lookups disabled\n"));
2421 return NT_STATUS_INVALID_PARAMETER;
2424 if (!resolve_order[0]) {
2427 ptr = resolve_order;
2430 /* iterate through the name resolution backends */
2432 frame = talloc_stackframe();
2433 while (next_token_talloc(frame, &ptr, &tok, LIST_SEP)) {
2434 if((strequal(tok, "host") || strequal(tok, "hosts"))) {
2435 status = resolve_hosts(name, name_type, return_iplist,
2437 if (NT_STATUS_IS_OK(status)) {
2440 } else if(strequal( tok, "kdc")) {
2441 /* deal with KDC_NAME_TYPE names here.
2442 * This will result in a SRV record lookup */
2443 status = resolve_ads(name, KDC_NAME_TYPE, sitename,
2444 return_iplist, return_count);
2445 if (NT_STATUS_IS_OK(status)) {
2446 /* Ensure we don't namecache
2447 * this with the KDC port. */
2448 name_type = KDC_NAME_TYPE;
2451 } else if(strequal( tok, "ads")) {
2452 /* deal with 0x1c and 0x1b names here.
2453 * This will result in a SRV record lookup */
2454 status = resolve_ads(name, name_type, sitename,
2455 return_iplist, return_count);
2456 if (NT_STATUS_IS_OK(status)) {
2459 } else if(strequal( tok, "lmhosts")) {
2460 status = resolve_lmhosts(name, name_type,
2461 return_iplist, return_count);
2462 if (NT_STATUS_IS_OK(status)) {
2465 } else if(strequal( tok, "wins")) {
2466 /* don't resolve 1D via WINS */
2467 struct sockaddr_storage *ss_list;
2468 if (name_type != 0x1D) {
2469 status = resolve_wins(name, name_type,
2473 if (NT_STATUS_IS_OK(status)) {
2474 if (!convert_ss2service(return_iplist,
2477 status = NT_STATUS_NO_MEMORY;
2482 } else if(strequal( tok, "bcast")) {
2483 struct sockaddr_storage *ss_list;
2484 status = name_resolve_bcast(
2485 name, name_type, talloc_tos(),
2486 &ss_list, return_count);
2487 if (NT_STATUS_IS_OK(status)) {
2488 if (!convert_ss2service(return_iplist,
2491 status = NT_STATUS_NO_MEMORY;
2496 DEBUG(0,("resolve_name: unknown name switch type %s\n",
2501 /* All of the resolve_* functions above have returned false. */
2504 SAFE_FREE(*return_iplist);
2507 return NT_STATUS_UNSUCCESSFUL;
2511 /* Remove duplicate entries. Some queries, notably #1c (domain
2512 controllers) return the PDC in iplist[0] and then all domain
2513 controllers including the PDC in iplist[1..n]. Iterating over
2514 the iplist when the PDC is down will cause two sets of timeouts. */
2516 if ( *return_count ) {
2517 *return_count = remove_duplicate_addrs2(*return_iplist,
2521 /* Save in name cache */
2522 if ( DEBUGLEVEL >= 100 ) {
2523 for (i = 0; i < *return_count && DEBUGLEVEL == 100; i++) {
2524 char addr[INET6_ADDRSTRLEN];
2525 print_sockaddr(addr, sizeof(addr),
2526 &(*return_iplist)[i].ss);
2527 DEBUG(100, ("Storing name %s of type %d (%s:%d)\n",
2531 (*return_iplist)[i].port));
2535 namecache_store(name, name_type, *return_count, *return_iplist);
2537 /* Display some debugging info */
2539 if ( DEBUGLEVEL >= 10 ) {
2540 DEBUG(10, ("internal_resolve_name: returning %d addresses: ",
2543 for (i = 0; i < *return_count; i++) {
2544 char addr[INET6_ADDRSTRLEN];
2545 print_sockaddr(addr, sizeof(addr),
2546 &(*return_iplist)[i].ss);
2547 DEBUGADD(10, ("%s:%d ",
2549 (*return_iplist)[i].port));
2558 /********************************************************
2559 Internal interface to resolve a name into one IP address.
2560 Use this function if the string is either an IP address, DNS
2561 or host name or NetBIOS name. This uses the name switch in the
2562 smb.conf to determine the order of name resolution.
2563 *********************************************************/
2565 bool resolve_name(const char *name,
2566 struct sockaddr_storage *return_ss,
2570 struct ip_service *ss_list = NULL;
2571 char *sitename = NULL;
2574 if (is_ipaddress(name)) {
2575 return interpret_string_addr(return_ss, name, AI_NUMERICHOST);
2578 sitename = sitename_fetch(lp_realm()); /* wild guess */
2580 if (NT_STATUS_IS_OK(internal_resolve_name(name, name_type, sitename,
2582 lp_name_resolve_order()))) {
2586 for (i=0; i<count; i++) {
2587 if (!is_zero_addr(&ss_list[i].ss) &&
2588 !is_broadcast_addr((struct sockaddr *)&ss_list[i].ss) &&
2589 (ss_list[i].ss.ss_family == AF_INET)) {
2590 *return_ss = ss_list[i].ss;
2592 SAFE_FREE(sitename);
2598 /* only return valid addresses for TCP connections */
2599 for (i=0; i<count; i++) {
2600 if (!is_zero_addr(&ss_list[i].ss) &&
2601 !is_broadcast_addr((struct sockaddr *)&ss_list[i].ss)) {
2602 *return_ss = ss_list[i].ss;
2604 SAFE_FREE(sitename);
2611 SAFE_FREE(sitename);
2615 /********************************************************
2616 Internal interface to resolve a name into a list of IP addresses.
2617 Use this function if the string is either an IP address, DNS
2618 or host name or NetBIOS name. This uses the name switch in the
2619 smb.conf to determine the order of name resolution.
2620 *********************************************************/
2622 NTSTATUS resolve_name_list(TALLOC_CTX *ctx,
2625 struct sockaddr_storage **return_ss_arr,
2626 unsigned int *p_num_entries)
2628 struct ip_service *ss_list = NULL;
2629 char *sitename = NULL;
2632 unsigned int num_entries;
2636 *return_ss_arr = NULL;
2638 if (is_ipaddress(name)) {
2639 *return_ss_arr = talloc(ctx, struct sockaddr_storage);
2640 if (!*return_ss_arr) {
2641 return NT_STATUS_NO_MEMORY;
2643 if (!interpret_string_addr(*return_ss_arr, name, AI_NUMERICHOST)) {
2644 TALLOC_FREE(*return_ss_arr);
2645 return NT_STATUS_BAD_NETWORK_NAME;
2648 return NT_STATUS_OK;
2651 sitename = sitename_fetch(lp_realm()); /* wild guess */
2653 status = internal_resolve_name(name, name_type, sitename,
2655 lp_name_resolve_order());
2656 SAFE_FREE(sitename);
2658 if (!NT_STATUS_IS_OK(status)) {
2662 /* only return valid addresses for TCP connections */
2663 for (i=0, num_entries = 0; i<count; i++) {
2664 if (!is_zero_addr(&ss_list[i].ss) &&
2665 !is_broadcast_addr((struct sockaddr *)&ss_list[i].ss)) {
2669 if (num_entries == 0) {
2671 return NT_STATUS_BAD_NETWORK_NAME;
2674 *return_ss_arr = talloc_array(ctx,
2675 struct sockaddr_storage,
2677 if (!(*return_ss_arr)) {
2679 return NT_STATUS_NO_MEMORY;
2682 for (i=0, num_entries = 0; i<count; i++) {
2683 if (!is_zero_addr(&ss_list[i].ss) &&
2684 !is_broadcast_addr((struct sockaddr *)&ss_list[i].ss)) {
2685 (*return_ss_arr)[num_entries++] = ss_list[i].ss;
2689 status = NT_STATUS_OK;
2690 *p_num_entries = num_entries;
2693 return NT_STATUS_OK;
2696 /********************************************************
2697 Find the IP address of the master browser or DMB for a workgroup.
2698 *********************************************************/
2700 bool find_master_ip(const char *group, struct sockaddr_storage *master_ss)
2702 struct ip_service *ip_list = NULL;
2706 if (lp_disable_netbios()) {
2707 DEBUG(5,("find_master_ip(%s): netbios is disabled\n", group));
2711 status = internal_resolve_name(group, 0x1D, NULL, &ip_list, &count,
2712 lp_name_resolve_order());
2713 if (NT_STATUS_IS_OK(status)) {
2714 *master_ss = ip_list[0].ss;
2719 status = internal_resolve_name(group, 0x1B, NULL, &ip_list, &count,
2720 lp_name_resolve_order());
2721 if (NT_STATUS_IS_OK(status)) {
2722 *master_ss = ip_list[0].ss;
2731 /********************************************************
2732 Get the IP address list of the primary domain controller
2734 *********************************************************/
2736 bool get_pdc_ip(const char *domain, struct sockaddr_storage *pss)
2738 struct ip_service *ip_list = NULL;
2740 NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
2742 /* Look up #1B name */
2744 if (lp_security() == SEC_ADS) {
2745 status = internal_resolve_name(domain, 0x1b, NULL, &ip_list,
2749 if (!NT_STATUS_IS_OK(status) || count == 0) {
2750 status = internal_resolve_name(domain, 0x1b, NULL, &ip_list,
2752 lp_name_resolve_order());
2753 if (!NT_STATUS_IS_OK(status)) {
2758 /* if we get more than 1 IP back we have to assume it is a
2759 multi-homed PDC and not a mess up */
2762 DEBUG(6,("get_pdc_ip: PDC has %d IP addresses!\n", count));
2763 sort_service_list(ip_list, count);
2766 *pss = ip_list[0].ss;
2771 /* Private enum type for lookups. */
2773 enum dc_lookup_type { DC_NORMAL_LOOKUP, DC_ADS_ONLY, DC_KDC_ONLY };
2775 /********************************************************
2776 Get the IP address list of the domain controllers for
2778 *********************************************************/
2780 static NTSTATUS get_dc_list(const char *domain,
2781 const char *sitename,
2782 struct ip_service **ip_list,
2784 enum dc_lookup_type lookup_type,
2787 char *resolve_order = NULL;
2788 char *saf_servername = NULL;
2789 char *pserver = NULL;
2791 char *port_str = NULL;
2794 int num_addresses = 0;
2795 int local_count, i, j;
2796 struct ip_service *return_iplist = NULL;
2797 struct ip_service *auto_ip_list = NULL;
2798 bool done_auto_lookup = false;
2801 TALLOC_CTX *ctx = talloc_init("get_dc_list");
2807 return NT_STATUS_NO_MEMORY;
2812 /* if we are restricted to solely using DNS for looking
2813 up a domain controller, make sure that host lookups
2814 are enabled for the 'name resolve order'. If host lookups
2815 are disabled and ads_only is True, then set the string to
2818 resolve_order = talloc_strdup(ctx, lp_name_resolve_order());
2819 if (!resolve_order) {
2820 status = NT_STATUS_NO_MEMORY;
2823 strlower_m(resolve_order);
2824 if (lookup_type == DC_ADS_ONLY) {
2825 if (strstr( resolve_order, "host")) {
2826 resolve_order = talloc_strdup(ctx, "ads");
2828 /* DNS SRV lookups used by the ads resolver
2829 are already sorted by priority and weight */
2832 resolve_order = talloc_strdup(ctx, "NULL");
2834 } else if (lookup_type == DC_KDC_ONLY) {
2835 /* DNS SRV lookups used by the ads/kdc resolver
2836 are already sorted by priority and weight */
2838 resolve_order = talloc_strdup(ctx, "kdc");
2840 if (!resolve_order) {
2841 status = NT_STATUS_NO_MEMORY;
2845 /* fetch the server we have affinity for. Add the
2846 'password server' list to a search for our domain controllers */
2848 saf_servername = saf_fetch( domain);
2850 if (strequal(domain, lp_workgroup()) || strequal(domain, lp_realm())) {
2851 pserver = talloc_asprintf(ctx, "%s, %s",
2852 saf_servername ? saf_servername : "",
2853 lp_passwordserver());
2855 pserver = talloc_asprintf(ctx, "%s, *",
2856 saf_servername ? saf_servername : "");
2859 SAFE_FREE(saf_servername);
2861 status = NT_STATUS_NO_MEMORY;
2865 /* if we are starting from scratch, just lookup DOMAIN<0x1c> */
2868 DEBUG(10,("get_dc_list: no preferred domain controllers.\n"));
2869 status = internal_resolve_name(domain, 0x1C, sitename, ip_list,
2870 count, resolve_order);
2874 DEBUG(3,("get_dc_list: preferred server list: \"%s\"\n", pserver ));
2877 * if '*' appears in the "password server" list then add
2878 * an auto lookup to the list of manually configured
2879 * DC's. If any DC is listed by name, then the list should be
2880 * considered to be ordered
2884 while (next_token_talloc(ctx, &p, &name, LIST_SEP)) {
2885 if (!done_auto_lookup && strequal(name, "*")) {
2886 status = internal_resolve_name(domain, 0x1C, sitename,
2890 if (NT_STATUS_IS_OK(status)) {
2891 num_addresses += auto_count;
2893 done_auto_lookup = true;
2894 DEBUG(8,("Adding %d DC's from auto lookup\n",
2901 /* if we have no addresses and haven't done the auto lookup, then
2902 just return the list of DC's. Or maybe we just failed. */
2904 if ((num_addresses == 0)) {
2905 if (done_auto_lookup) {
2906 DEBUG(4,("get_dc_list: no servers found\n"));
2907 status = NT_STATUS_NO_LOGON_SERVERS;
2910 status = internal_resolve_name(domain, 0x1C, sitename, ip_list,
2911 count, resolve_order);
2915 if ((return_iplist = SMB_MALLOC_ARRAY(struct ip_service,
2916 num_addresses)) == NULL) {
2917 DEBUG(3,("get_dc_list: malloc fail !\n"));
2918 status = NT_STATUS_NO_MEMORY;
2925 /* fill in the return list now with real IP's */
2927 while ((local_count<num_addresses) &&
2928 next_token_talloc(ctx, &p, &name, LIST_SEP)) {
2929 struct sockaddr_storage name_ss;
2931 /* copy any addersses from the auto lookup */
2933 if (strequal(name, "*")) {
2934 for (j=0; j<auto_count; j++) {
2935 char addr[INET6_ADDRSTRLEN];
2936 print_sockaddr(addr,
2938 &auto_ip_list[j].ss);
2939 /* Check for and don't copy any
2940 * known bad DC IP's. */
2941 if(!NT_STATUS_IS_OK(check_negative_conn_cache(
2944 DEBUG(5,("get_dc_list: "
2945 "negative entry %s removed "
2950 return_iplist[local_count].ss =
2952 return_iplist[local_count].port =
2953 auto_ip_list[j].port;
2959 /* added support for address:port syntax for ads
2960 * (not that I think anyone will ever run the LDAP
2961 * server in an AD domain on something other than
2964 port = (lp_security() == SEC_ADS) ? LDAP_PORT : PORT_NONE;
2965 if ((port_str=strchr(name, ':')) != NULL) {
2968 port = atoi(port_str);
2971 /* explicit lookup; resolve_name() will
2972 * handle names & IP addresses */
2973 if (resolve_name( name, &name_ss, 0x20, true )) {
2974 char addr[INET6_ADDRSTRLEN];
2975 print_sockaddr(addr,
2979 /* Check for and don't copy any known bad DC IP's. */
2980 if( !NT_STATUS_IS_OK(check_negative_conn_cache(domain,
2982 DEBUG(5,("get_dc_list: negative entry %s "
2983 "removed from DC list\n",
2988 return_iplist[local_count].ss = name_ss;
2989 return_iplist[local_count].port = port;
2995 /* need to remove duplicates in the list if we have any
2996 explicit password servers */
2999 local_count = remove_duplicate_addrs2(return_iplist,
3003 /* For DC's we always prioritize IPv4 due to W2K3 not
3004 * supporting LDAP, KRB5 or CLDAP over IPv6. */
3006 if (local_count && return_iplist) {
3007 prioritize_ipv4_list(return_iplist, local_count);
3010 if ( DEBUGLEVEL >= 4 ) {
3011 DEBUG(4,("get_dc_list: returning %d ip addresses "
3012 "in an %sordered list\n",
3014 *ordered ? "":"un"));
3015 DEBUG(4,("get_dc_list: "));
3016 for ( i=0; i<local_count; i++ ) {
3017 char addr[INET6_ADDRSTRLEN];
3018 print_sockaddr(addr,
3020 &return_iplist[i].ss);
3021 DEBUGADD(4,("%s:%d ", addr, return_iplist[i].port ));
3026 *ip_list = return_iplist;
3027 *count = local_count;
3029 status = ( *count != 0 ? NT_STATUS_OK : NT_STATUS_NO_LOGON_SERVERS );
3033 if (!NT_STATUS_IS_OK(status)) {
3034 SAFE_FREE(return_iplist);
3039 SAFE_FREE(auto_ip_list);
3044 /*********************************************************************
3045 Small wrapper function to get the DC list and sort it if neccessary.
3046 *********************************************************************/
3048 NTSTATUS get_sorted_dc_list( const char *domain,
3049 const char *sitename,
3050 struct ip_service **ip_list,
3054 bool ordered = false;
3056 enum dc_lookup_type lookup_type = DC_NORMAL_LOOKUP;
3061 DEBUG(8,("get_sorted_dc_list: attempting lookup "
3062 "for name %s (sitename %s) using [%s]\n",
3064 sitename ? sitename : "NULL",
3065 (ads_only ? "ads" : lp_name_resolve_order())));
3068 lookup_type = DC_ADS_ONLY;
3071 status = get_dc_list(domain, sitename, ip_list,
3072 count, lookup_type, &ordered);
3073 if (NT_STATUS_EQUAL(status, NT_STATUS_NO_LOGON_SERVERS)
3075 DEBUG(3,("get_sorted_dc_list: no server for name %s available"
3076 " in site %s, fallback to all servers\n",
3078 status = get_dc_list(domain, NULL, ip_list,
3079 count, lookup_type, &ordered);
3082 if (!NT_STATUS_IS_OK(status)) {
3083 SAFE_FREE(*ip_list);
3088 /* only sort if we don't already have an ordered list */
3090 sort_service_list(*ip_list, *count);
3093 return NT_STATUS_OK;
3096 /*********************************************************************
3097 Get the KDC list - re-use all the logic in get_dc_list.
3098 *********************************************************************/
3100 NTSTATUS get_kdc_list( const char *realm,
3101 const char *sitename,
3102 struct ip_service **ip_list,
3111 status = get_dc_list(realm, sitename, ip_list,
3112 count, DC_KDC_ONLY, &ordered);
3114 if (!NT_STATUS_IS_OK(status)) {
3115 SAFE_FREE(*ip_list);
3120 /* only sort if we don't already have an ordered list */
3122 sort_service_list(*ip_list, *count);
3125 return NT_STATUS_OK;