2 Unix SMB/CIFS implementation.
3 kerberos locator plugin
4 Copyright (C) Guenther Deschner 2007
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
20 #include "nsswitch/winbind_client.h"
26 #if defined(HAVE_KRB5) && defined(HAVE_KRB5_LOCATE_PLUGIN_H)
28 #include <krb5/locate_plugin.h>
30 #ifndef KRB5_PLUGIN_NO_HANDLE
31 #define KRB5_PLUGIN_NO_HANDLE KRB5_KDC_UNREACH /* Heimdal */
34 static const char *get_service_from_locate_service_type(enum locate_service_type svc)
37 case locate_service_kdc:
38 case locate_service_master_kdc:
40 case locate_service_kadmin:
41 case locate_service_krb524:
44 case locate_service_kpasswd:
54 static const char *locate_service_type_name(enum locate_service_type svc)
57 case locate_service_kdc:
58 return "locate_service_kdc";
59 case locate_service_master_kdc:
60 return "locate_service_master_kdc";
61 case locate_service_kadmin:
62 return "locate_service_kadmin";
63 case locate_service_krb524:
64 return "locate_service_krb524";
65 case locate_service_kpasswd:
66 return "locate_service_kpasswd";
73 static const char *socktype_name(int socktype)
86 static const char *family_name(int family)
93 #if defined(HAVE_IPv6)
105 * Check input parameters, return KRB5_PLUGIN_NO_HANDLE for unsupported ones
108 * @param realm string
109 * @param socktype integer
110 * @param family integer
115 static int smb_krb5_locator_lookup_sanity_check(enum locate_service_type svc,
120 if (!realm || strlen(realm) == 0) {
125 case locate_service_kdc:
126 case locate_service_master_kdc:
127 case locate_service_kpasswd:
129 case locate_service_kadmin:
130 case locate_service_krb524:
131 return KRB5_PLUGIN_NO_HANDLE;
140 #if defined(HAVE_IPv6)
141 case AF_INET6: /* not yet */
142 return KRB5_PLUGIN_NO_HANDLE;
151 case 0: /* Heimdal uses that */
161 * Try to get addrinfo for a given host and call the krb5 callback
164 * @param service string
165 * @param in struct addrinfo hint
166 * @param cbfunc krb5 callback function
167 * @param cbdata void pointer cbdata
169 * @return krb5_error_code.
172 static krb5_error_code smb_krb5_locator_call_cbfunc(const char *name,
175 int (*cbfunc)(void *, int, struct sockaddr *),
178 struct addrinfo *out = NULL;
184 ret = getaddrinfo(name, service, in, &out);
189 if (ret == EAI_AGAIN) {
195 fprintf(stderr, "[%5u]: smb_krb5_locator_lookup: "
196 "getaddrinfo failed: %s (%d)\n",
197 (unsigned int)getpid(), gai_strerror(ret), ret);
200 return KRB5_PLUGIN_NO_HANDLE;
203 ret = cbfunc(cbdata, out->ai_socktype, out->ai_addr);
206 fprintf(stderr, "[%5u]: smb_krb5_locator_lookup: "
207 "failed to call callback: %s (%d)\n",
208 (unsigned int)getpid(), error_message(ret), ret);
217 * PUBLIC INTERFACE: locate init
219 * @param context krb5_context
220 * @param privata_data pointer to private data pointer
222 * @return krb5_error_code.
225 krb5_error_code smb_krb5_locator_init(krb5_context context,
232 * PUBLIC INTERFACE: close locate
234 * @param private_data pointer to private data
239 void smb_krb5_locator_close(void *private_data)
245 static bool ask_winbind(const char *realm, char **dcname)
248 struct winbindd_request request;
249 struct winbindd_response response;
251 ZERO_STRUCT(request);
252 ZERO_STRUCT(response);
254 request.flags = 0x40020600;
260 strncpy(request.domain_name, realm,
261 sizeof(request.domain_name)-1);
263 status = winbindd_request_response(WINBINDD_DSGETDCNAME,
264 &request, &response);
265 if (status != NSS_STATUS_SUCCESS) {
267 fprintf(stderr,"[%5u]: smb_krb5_locator_lookup: failed with: %s\n",
268 (unsigned int)getpid(), nss_err_str(status));
273 *dcname = strdup(response.data.dc_name);
282 * PUBLIC INTERFACE: locate lookup
284 * @param private_data pointer to private data
285 * @param svc enum locate_service_type.
286 * @param realm string
287 * @param socktype integer
288 * @param family integer
289 * @param cbfunc callback function to send back entries
290 * @param cbdata void pointer to cbdata
292 * @return krb5_error_code.
295 krb5_error_code smb_krb5_locator_lookup(void *private_data,
296 enum locate_service_type svc,
300 int (*cbfunc)(void *, int, struct sockaddr *),
304 struct addrinfo aihints;
305 char *kdc_name = NULL;
306 const char *service = get_service_from_locate_service_type(svc);
308 ZERO_STRUCT(aihints);
311 fprintf(stderr,"[%5u]: smb_krb5_locator_lookup: called for '%s' "
313 "socktype: '%s' (%d), family: '%s' (%d)\n",
314 (unsigned int)getpid(), realm,
315 locate_service_type_name(svc), svc,
316 socktype_name(socktype), socktype,
317 family_name(family), family);
319 ret = smb_krb5_locator_lookup_sanity_check(svc, realm, socktype,
323 fprintf(stderr, "[%5u]: smb_krb5_locator_lookup: "
324 "returning ret: %s (%d)\n",
325 (unsigned int)getpid(), error_message(ret), ret);
330 if (!winbind_env_set()) {
331 if (!ask_winbind(realm, &kdc_name)) {
333 fprintf(stderr, "[%5u]: smb_krb5_locator_lookup: "
334 "failed to query winbindd\n",
335 (unsigned int)getpid());
340 const char *env = NULL;
342 if (asprintf(&var, "%s_%s",
343 WINBINDD_LOCATOR_KDC_ADDRESS, realm) == -1) {
349 fprintf(stderr, "[%5u]: smb_krb5_locator_lookup: "
350 "failed to get kdc from env %s\n",
351 (unsigned int)getpid(), var);
358 kdc_name = strdup(env);
364 fprintf(stderr, "[%5u]: smb_krb5_locator_lookup: "
365 "got '%s' for '%s' from winbindd\n", (unsigned int)getpid(),
369 aihints.ai_family = family;
370 aihints.ai_socktype = socktype;
372 ret = smb_krb5_locator_call_cbfunc(kdc_name,
381 return KRB5_PLUGIN_NO_HANDLE;
384 #ifdef HEIMDAL_KRB5_LOCATE_PLUGIN_H
385 #define SMB_KRB5_LOCATOR_SYMBOL_NAME resolve /* Heimdal */
387 #define SMB_KRB5_LOCATOR_SYMBOL_NAME service_locator /* MIT */
390 const krb5plugin_service_locate_ftable SMB_KRB5_LOCATOR_SYMBOL_NAME = {
392 smb_krb5_locator_init,
393 smb_krb5_locator_close,
394 smb_krb5_locator_lookup,