2 Unix SMB/CIFS implementation.
4 Copyright (C) Stefan Metzmacher 2006
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 2 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program; if not, write to the Free Software
18 Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
22 #include "libnet/libnet.h"
23 #include "libcli/composite/composite.h"
24 #include "libcli/cldap/cldap.h"
25 #include "lib/ldb/include/ldb.h"
26 #include "lib/ldb/include/ldb_errors.h"
27 #include "lib/db_wrap.h"
28 #include "dsdb/samdb/samdb.h"
29 #include "dsdb/common/flags.h"
30 #include "librpc/gen_ndr/ndr_drsuapi_c.h"
32 struct libnet_UnbecomeDC_state {
33 struct composite_context *creq;
35 struct libnet_context *libnet;
38 struct cldap_socket *sock;
39 struct cldap_netlogon io;
40 struct nbt_cldap_netlogon_5 netlogon5;
44 struct ldb_context *ldb;
48 struct dcerpc_binding *binding;
49 struct dcerpc_pipe *pipe;
50 struct drsuapi_DsBind bind_r;
51 struct GUID bind_guid;
52 struct drsuapi_DsBindInfoCtr bind_info_ctr;
53 struct drsuapi_DsBindInfo28 local_info28;
54 struct drsuapi_DsBindInfo28 remote_info28;
55 struct policy_handle bind_handle;
56 struct drsuapi_DsRemoveDSServer rm_ds_srv_r;
62 const char *netbios_name;
71 const char *config_dn_str;
80 const char *netbios_name;
81 const char *site_name;
86 const char *netbios_name;
90 const char *site_name;
91 const char *computer_dn_str;
92 const char *server_dn_str;
93 uint32_t user_account_control;
97 static void unbecomeDC_recv_cldap(struct cldap_request *req);
99 static void unbecomeDC_send_cldap(struct libnet_UnbecomeDC_state *s)
101 struct composite_context *c = s->creq;
102 struct cldap_request *req;
104 s->cldap.io.in.dest_address = s->source_dsa.address;
105 s->cldap.io.in.realm = s->domain.dns_name;
106 s->cldap.io.in.host = s->dest_dsa.netbios_name;
107 s->cldap.io.in.user = NULL;
108 s->cldap.io.in.domain_guid = NULL;
109 s->cldap.io.in.domain_sid = NULL;
110 s->cldap.io.in.acct_control = -1;
111 s->cldap.io.in.version = 6;
113 s->cldap.sock = cldap_socket_init(s, s->libnet->event_ctx);
114 if (composite_nomem(s->cldap.sock, c)) return;
116 req = cldap_netlogon_send(s->cldap.sock, &s->cldap.io);
117 if (composite_nomem(req, c)) return;
118 req->async.fn = unbecomeDC_recv_cldap;
119 req->async.private = s;
122 static void unbecomeDC_connect_ldap(struct libnet_UnbecomeDC_state *s);
124 static void unbecomeDC_recv_cldap(struct cldap_request *req)
126 struct libnet_UnbecomeDC_state *s = talloc_get_type(req->async.private,
127 struct libnet_UnbecomeDC_state);
128 struct composite_context *c = s->creq;
130 c->status = cldap_netlogon_recv(req, s, &s->cldap.io);
131 if (!composite_is_ok(c)) return;
133 s->cldap.netlogon5 = s->cldap.io.out.netlogon.logon5;
135 s->domain.dns_name = s->cldap.netlogon5.dns_domain;
136 s->domain.netbios_name = s->cldap.netlogon5.domain;
137 s->domain.guid = s->cldap.netlogon5.domain_uuid;
139 s->source_dsa.dns_name = s->cldap.netlogon5.pdc_dns_name;
140 s->source_dsa.netbios_name = s->cldap.netlogon5.pdc_name;
141 s->source_dsa.site_name = s->cldap.netlogon5.server_site;
143 s->dest_dsa.site_name = s->cldap.netlogon5.client_site;
145 unbecomeDC_connect_ldap(s);
148 static NTSTATUS unbecomeDC_ldap_connect(struct libnet_UnbecomeDC_state *s)
152 url = talloc_asprintf(s, "ldap://%s/", s->source_dsa.dns_name);
153 NT_STATUS_HAVE_NO_MEMORY(url);
155 s->ldap.ldb = ldb_wrap_connect(s, url,
160 if (s->ldap.ldb == NULL) {
161 return NT_STATUS_UNEXPECTED_NETWORK_ERROR;
167 static NTSTATUS unbecomeDC_ldap_rootdse(struct libnet_UnbecomeDC_state *s)
170 struct ldb_result *r;
171 struct ldb_dn *basedn;
172 static const char *attrs[] = {
173 "defaultNamingContext",
174 "configurationNamingContext",
178 basedn = ldb_dn_new(s, s->ldap.ldb, NULL);
179 NT_STATUS_HAVE_NO_MEMORY(basedn);
181 ret = ldb_search(s->ldap.ldb, basedn, LDB_SCOPE_BASE,
182 "(objectClass=*)", attrs, &r);
184 if (ret != LDB_SUCCESS) {
185 return NT_STATUS_LDAP(ret);
186 } else if (r->count != 1) {
188 return NT_STATUS_INVALID_NETWORK_RESPONSE;
192 s->domain.dn_str = ldb_msg_find_attr_as_string(r->msgs[0], "defaultNamingContext", NULL);
193 if (!s->domain.dn_str) return NT_STATUS_INVALID_NETWORK_RESPONSE;
194 talloc_steal(s, s->domain.dn_str);
196 s->forest.config_dn_str = ldb_msg_find_attr_as_string(r->msgs[0], "configurationNamingContext", NULL);
197 if (!s->forest.config_dn_str) return NT_STATUS_INVALID_NETWORK_RESPONSE;
198 talloc_steal(s, s->forest.config_dn_str);
200 s->dest_dsa.server_dn_str = talloc_asprintf(s, "CN=%s,CN=Servers,CN=%s,CN=Sites,%s",
201 s->dest_dsa.netbios_name,
202 s->dest_dsa.site_name,
203 s->forest.config_dn_str);
204 NT_STATUS_HAVE_NO_MEMORY(s->dest_dsa.server_dn_str);
210 static NTSTATUS unbecomeDC_ldap_computer_object(struct libnet_UnbecomeDC_state *s)
213 struct ldb_result *r;
214 struct ldb_dn *basedn;
216 static const char *attrs[] = {
218 "userAccountControl",
222 basedn = ldb_dn_new(s, s->ldap.ldb, s->domain.dn_str);
223 NT_STATUS_HAVE_NO_MEMORY(basedn);
225 filter = talloc_asprintf(basedn, "(&(|(objectClass=user)(objectClass=computer))(sAMAccountName=%s$))",
226 s->dest_dsa.netbios_name);
227 NT_STATUS_HAVE_NO_MEMORY(filter);
229 ret = ldb_search(s->ldap.ldb, basedn, LDB_SCOPE_SUBTREE,
232 if (ret != LDB_SUCCESS) {
233 return NT_STATUS_LDAP(ret);
234 } else if (r->count != 1) {
236 return NT_STATUS_INVALID_NETWORK_RESPONSE;
239 s->dest_dsa.computer_dn_str = samdb_result_string(r->msgs[0], "distinguishedName", NULL);
240 if (!s->dest_dsa.computer_dn_str) return NT_STATUS_INVALID_NETWORK_RESPONSE;
241 talloc_steal(s, s->dest_dsa.computer_dn_str);
243 s->dest_dsa.user_account_control = samdb_result_uint(r->msgs[0], "userAccountControl", 0);
249 static NTSTATUS unbecomeDC_ldap_modify_computer(struct libnet_UnbecomeDC_state *s)
252 struct ldb_message *msg;
253 uint32_t user_account_control = UF_WORKSTATION_TRUST_ACCOUNT;
256 /* as the value is already as we want it to be, we're done */
257 if (s->dest_dsa.user_account_control == user_account_control) {
261 /* make a 'modify' msg, and only for serverReference */
262 msg = ldb_msg_new(s);
263 NT_STATUS_HAVE_NO_MEMORY(msg);
264 msg->dn = ldb_dn_new(msg, s->ldap.ldb, s->dest_dsa.computer_dn_str);
265 NT_STATUS_HAVE_NO_MEMORY(msg->dn);
267 ret = ldb_msg_add_fmt(msg, "userAccountControl", "%u", user_account_control);
270 return NT_STATUS_NO_MEMORY;
273 /* mark all the message elements (should be just one)
274 as LDB_FLAG_MOD_REPLACE */
275 for (i=0;i<msg->num_elements;i++) {
276 msg->elements[i].flags = LDB_FLAG_MOD_REPLACE;
279 ret = ldb_modify(s->ldap.ldb, msg);
281 if (ret != LDB_SUCCESS) {
282 return NT_STATUS_LDAP(ret);
285 s->dest_dsa.user_account_control = user_account_control;
290 static NTSTATUS unbecomeDC_ldap_move_computer(struct libnet_UnbecomeDC_state *s)
293 struct ldb_result *r;
294 struct ldb_dn *basedn;
295 struct ldb_dn *old_dn;
296 struct ldb_dn *new_dn;
297 static const char *_1_1_attrs[] = {
302 basedn = ldb_dn_new_fmt(s, s->ldap.ldb, "<WKGUID=aa312825768811d1aded00c04fd8d5cd,%s>",
304 NT_STATUS_HAVE_NO_MEMORY(basedn);
306 ret = ldb_search(s->ldap.ldb, basedn, LDB_SCOPE_BASE,
307 "(objectClass=*)", _1_1_attrs, &r);
309 if (ret != LDB_SUCCESS) {
310 return NT_STATUS_LDAP(ret);
311 } else if (r->count != 1) {
313 return NT_STATUS_INVALID_NETWORK_RESPONSE;
316 old_dn = ldb_dn_new(r, s->ldap.ldb, s->dest_dsa.computer_dn_str);
317 NT_STATUS_HAVE_NO_MEMORY(old_dn);
319 new_dn = r->msgs[0]->dn;
321 if (!ldb_dn_add_child_fmt(new_dn, "CN=%s", s->dest_dsa.netbios_name)) {
323 return NT_STATUS_NO_MEMORY;
326 if (ldb_dn_compare(old_dn, new_dn) == 0) {
327 /* we don't need to rename if the old and new dn match */
332 ret = ldb_rename(s->ldap.ldb, old_dn, new_dn);
333 if (ret != LDB_SUCCESS) {
335 return NT_STATUS_LDAP(ret);
338 s->dest_dsa.computer_dn_str = ldb_dn_alloc_linearized(s, new_dn);
339 NT_STATUS_HAVE_NO_MEMORY(s->dest_dsa.computer_dn_str);
346 static void unbecomeDC_drsuapi_connect_send(struct libnet_UnbecomeDC_state *s);
348 static void unbecomeDC_connect_ldap(struct libnet_UnbecomeDC_state *s)
350 struct composite_context *c = s->creq;
352 c->status = unbecomeDC_ldap_connect(s);
353 if (!composite_is_ok(c)) return;
355 c->status = unbecomeDC_ldap_rootdse(s);
356 if (!composite_is_ok(c)) return;
358 c->status = unbecomeDC_ldap_computer_object(s);
359 if (!composite_is_ok(c)) return;
361 c->status = unbecomeDC_ldap_modify_computer(s);
362 if (!composite_is_ok(c)) return;
364 c->status = unbecomeDC_ldap_move_computer(s);
365 if (!composite_is_ok(c)) return;
367 unbecomeDC_drsuapi_connect_send(s);
370 static void unbecomeDC_drsuapi_connect_recv(struct composite_context *creq);
372 static void unbecomeDC_drsuapi_connect_send(struct libnet_UnbecomeDC_state *s)
374 struct composite_context *c = s->creq;
375 struct composite_context *creq;
378 binding_str = talloc_asprintf(s, "ncacn_ip_tcp:%s[seal]", s->source_dsa.dns_name);
379 if (composite_nomem(binding_str, c)) return;
381 c->status = dcerpc_parse_binding(s, binding_str, &s->drsuapi.binding);
382 talloc_free(binding_str);
383 if (!composite_is_ok(c)) return;
385 creq = dcerpc_pipe_connect_b_send(s, s->drsuapi.binding, &dcerpc_table_drsuapi,
386 s->libnet->cred, s->libnet->event_ctx);
387 composite_continue(c, creq, unbecomeDC_drsuapi_connect_recv, s);
390 static void unbecomeDC_drsuapi_bind_send(struct libnet_UnbecomeDC_state *s);
392 static void unbecomeDC_drsuapi_connect_recv(struct composite_context *req)
394 struct libnet_UnbecomeDC_state *s = talloc_get_type(req->async.private_data,
395 struct libnet_UnbecomeDC_state);
396 struct composite_context *c = s->creq;
398 c->status = dcerpc_pipe_connect_b_recv(req, s, &s->drsuapi.pipe);
399 if (!composite_is_ok(c)) return;
401 unbecomeDC_drsuapi_bind_send(s);
404 static void unbecomeDC_drsuapi_bind_recv(struct rpc_request *req);
406 static void unbecomeDC_drsuapi_bind_send(struct libnet_UnbecomeDC_state *s)
408 struct composite_context *c = s->creq;
409 struct rpc_request *req;
410 struct drsuapi_DsBindInfo28 *bind_info28;
412 GUID_from_string(DRSUAPI_DS_BIND_GUID, &s->drsuapi.bind_guid);
414 bind_info28 = &s->drsuapi.local_info28;
415 bind_info28->supported_extensions = 0;
416 bind_info28->site_guid = GUID_zero();
417 bind_info28->u1 = 508;
418 bind_info28->repl_epoch = 0;
420 s->drsuapi.bind_info_ctr.length = 28;
421 s->drsuapi.bind_info_ctr.info.info28 = *bind_info28;
423 s->drsuapi.bind_r.in.bind_guid = &s->drsuapi.bind_guid;
424 s->drsuapi.bind_r.in.bind_info = &s->drsuapi.bind_info_ctr;
425 s->drsuapi.bind_r.out.bind_handle = &s->drsuapi.bind_handle;
427 req = dcerpc_drsuapi_DsBind_send(s->drsuapi.pipe, s, &s->drsuapi.bind_r);
428 composite_continue_rpc(c, req, unbecomeDC_drsuapi_bind_recv, s);
431 static void unbecomeDC_drsuapi_remove_ds_server_send(struct libnet_UnbecomeDC_state *s);
433 static void unbecomeDC_drsuapi_bind_recv(struct rpc_request *req)
435 struct libnet_UnbecomeDC_state *s = talloc_get_type(req->async.private,
436 struct libnet_UnbecomeDC_state);
437 struct composite_context *c = s->creq;
439 c->status = dcerpc_ndr_request_recv(req);
440 if (!composite_is_ok(c)) return;
442 if (!W_ERROR_IS_OK(s->drsuapi.bind_r.out.result)) {
443 composite_error(c, werror_to_ntstatus(s->drsuapi.bind_r.out.result));
447 ZERO_STRUCT(s->drsuapi.remote_info28);
448 if (s->drsuapi.bind_r.out.bind_info) {
449 switch (s->drsuapi.bind_r.out.bind_info->length) {
451 struct drsuapi_DsBindInfo24 *info24;
452 info24 = &s->drsuapi.bind_r.out.bind_info->info.info24;
453 s->drsuapi.remote_info28.supported_extensions = info24->supported_extensions;
454 s->drsuapi.remote_info28.site_guid = info24->site_guid;
455 s->drsuapi.remote_info28.u1 = info24->u1;
456 s->drsuapi.remote_info28.repl_epoch = 0;
460 s->drsuapi.remote_info28 = s->drsuapi.bind_r.out.bind_info->info.info28;
465 unbecomeDC_drsuapi_remove_ds_server_send(s);
468 static void unbecomeDC_drsuapi_remove_ds_server_recv(struct rpc_request *req);
470 static void unbecomeDC_drsuapi_remove_ds_server_send(struct libnet_UnbecomeDC_state *s)
472 struct composite_context *c = s->creq;
473 struct rpc_request *req;
474 struct drsuapi_DsRemoveDSServer *r = &s->drsuapi.rm_ds_srv_r;
476 r->in.bind_handle = &s->drsuapi.bind_handle;
478 r->in.req.req1.server_dn= s->dest_dsa.server_dn_str;
479 r->in.req.req1.domain_dn= s->domain.dn_str;
480 r->in.req.req1.unknown = 0x00000001;
482 req = dcerpc_drsuapi_DsRemoveDSServer_send(s->drsuapi.pipe, s, r);
483 composite_continue_rpc(c, req, unbecomeDC_drsuapi_remove_ds_server_recv, s);
486 static void unbecomeDC_drsuapi_remove_ds_server_recv(struct rpc_request *req)
488 struct libnet_UnbecomeDC_state *s = talloc_get_type(req->async.private,
489 struct libnet_UnbecomeDC_state);
490 struct composite_context *c = s->creq;
491 struct drsuapi_DsRemoveDSServer *r = &s->drsuapi.rm_ds_srv_r;
493 c->status = dcerpc_ndr_request_recv(req);
494 if (!composite_is_ok(c)) return;
496 if (!W_ERROR_IS_OK(r->out.result)) {
497 composite_error(c, werror_to_ntstatus(r->out.result));
501 if (r->out.level != 1) {
502 composite_error(c, NT_STATUS_INVALID_NETWORK_RESPONSE);
506 if (!W_ERROR_IS_OK(r->out.res.res1.status)) {
507 composite_error(c, werror_to_ntstatus(r->out.res.res1.status));
514 struct composite_context *libnet_UnbecomeDC_send(struct libnet_context *ctx, TALLOC_CTX *mem_ctx, struct libnet_UnbecomeDC *r)
516 struct composite_context *c;
517 struct libnet_UnbecomeDC_state *s;
520 c = composite_create(mem_ctx, ctx->event_ctx);
521 if (c == NULL) return NULL;
523 s = talloc_zero(c, struct libnet_UnbecomeDC_state);
524 if (composite_nomem(s, c)) return c;
530 s->domain.dns_name = talloc_strdup(s, r->in.domain_dns_name);
531 if (composite_nomem(s->domain.dns_name, c)) return c;
532 s->domain.netbios_name = talloc_strdup(s, r->in.domain_netbios_name);
533 if (composite_nomem(s->domain.netbios_name, c)) return c;
535 /* Source DSA input */
536 s->source_dsa.address = talloc_strdup(s, r->in.source_dsa_address);
537 if (composite_nomem(s->source_dsa.address, c)) return c;
539 /* Destination DSA input */
540 s->dest_dsa.netbios_name= talloc_strdup(s, r->in.dest_dsa_netbios_name);
541 if (composite_nomem(s->dest_dsa.netbios_name, c)) return c;
543 /* Destination DSA dns_name construction */
544 tmp_name = strlower_talloc(s, s->dest_dsa.netbios_name);
545 if (composite_nomem(tmp_name, c)) return c;
546 s->dest_dsa.dns_name = talloc_asprintf_append(tmp_name, ".%s",
548 if (composite_nomem(s->dest_dsa.dns_name, c)) return c;
550 unbecomeDC_send_cldap(s);
554 NTSTATUS libnet_UnbecomeDC_recv(struct composite_context *c, TALLOC_CTX *mem_ctx, struct libnet_UnbecomeDC *r)
558 status = composite_wait(c);
566 NTSTATUS libnet_UnbecomeDC(struct libnet_context *ctx, TALLOC_CTX *mem_ctx, struct libnet_UnbecomeDC *r)
569 struct composite_context *c;
570 c = libnet_UnbecomeDC_send(ctx, mem_ctx, r);
571 status = libnet_UnbecomeDC_recv(c, mem_ctx, r);