s4 dns: When we got a TKEY, we need to remember which key to use for signing
[garming/samba-autobuild/.git] / source4 / dns_server / dns_server.h
1 /*
2    Unix SMB/CIFS implementation.
3
4    DNS structures
5
6    Copyright (C) 2010 Kai Blin  <kai@samba.org>
7
8    This program is free software; you can redistribute it and/or modify
9    it under the terms of the GNU General Public License as published by
10    the Free Software Foundation; either version 3 of the License, or
11    (at your option) any later version.
12
13    This program is distributed in the hope that it will be useful,
14    but WITHOUT ANY WARRANTY; without even the implied warranty of
15    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
16    GNU General Public License for more details.
17
18    You should have received a copy of the GNU General Public License
19    along with this program.  If not, see <http://www.gnu.org/licenses/>.
20 */
21
22 #ifndef __DNS_SERVER_H__
23 #define __DNS_SERVER_H__
24
25 #include "librpc/gen_ndr/dns.h"
26 #include "librpc/gen_ndr/ndr_dnsp.h"
27
28 struct tsocket_address;
29
30 struct dns_server_zone {
31         struct dns_server_zone *prev, *next;
32         const char *name;
33         struct ldb_dn *dn;
34 };
35
36 struct dns_server_tkey {
37         const char *name;
38         enum dns_tkey_mode mode;
39         const char *algorithm;
40         struct auth_session_info *session_info;
41         struct gensec_security *gensec;
42         bool complete;
43 };
44
45 #define TKEY_BUFFER_SIZE 128
46
47 struct dns_server_tkey_store {
48         struct dns_server_tkey **tkeys;
49         uint16_t next_idx;
50         uint16_t size;
51 };
52
53 struct dns_server {
54         struct task_server *task;
55         struct ldb_context *samdb;
56         struct dns_server_zone *zones;
57         struct dns_server_tkey_store *tkeys;
58         struct cli_credentials *server_credentials;
59 };
60
61 struct dns_request_state {
62         uint16_t flags;
63         bool authenticated;
64         bool sign;
65         char *key_name;
66         struct dns_res_rec *tsig;
67         uint16_t tsig_error;
68 };
69
70 struct tevent_req *dns_server_process_query_send(
71         TALLOC_CTX *mem_ctx, struct tevent_context *ev,
72         struct dns_server *dns, struct dns_request_state *req_state,
73         const struct dns_name_packet *in);
74 WERROR dns_server_process_query_recv(
75         struct tevent_req *req, TALLOC_CTX *mem_ctx,
76         struct dns_res_rec **answers,    uint16_t *ancount,
77         struct dns_res_rec **nsrecs,     uint16_t *nscount,
78         struct dns_res_rec **additional, uint16_t *arcount);
79
80 WERROR dns_server_process_update(struct dns_server *dns,
81                                  struct dns_request_state *state,
82                                  TALLOC_CTX *mem_ctx,
83                                  struct dns_name_packet *in,
84                                  struct dns_res_rec **prereqs,    uint16_t *prereq_count,
85                                  struct dns_res_rec **updates,    uint16_t *update_count,
86                                  struct dns_res_rec **additional, uint16_t *arcount);
87
88 uint8_t werr_to_dns_err(WERROR werror);
89 bool dns_name_match(const char *zone, const char *name, size_t *host_part_len);
90 bool dns_name_equal(const char *name1, const char *name2);
91 bool dns_records_match(struct dnsp_DnssrvRpcRecord *rec1,
92                        struct dnsp_DnssrvRpcRecord *rec2);
93 bool dns_authorative_for_zone(struct dns_server *dns,
94                               const char *name);
95 WERROR dns_lookup_records(struct dns_server *dns,
96                           TALLOC_CTX *mem_ctx,
97                           struct ldb_dn *dn,
98                           struct dnsp_DnssrvRpcRecord **records,
99                           uint16_t *rec_count);
100 WERROR dns_replace_records(struct dns_server *dns,
101                            TALLOC_CTX *mem_ctx,
102                            struct ldb_dn *dn,
103                            bool needs_add,
104                            const struct dnsp_DnssrvRpcRecord *records,
105                            uint16_t rec_count);
106 WERROR dns_name2dn(struct dns_server *dns,
107                    TALLOC_CTX *mem_ctx,
108                    const char *name,
109                    struct ldb_dn **_dn);
110 struct dns_server_tkey *dns_find_tkey(struct dns_server_tkey_store *store,
111                                       const char *name);
112
113 #define DNS_ERR(err_str) WERR_DNS_ERROR_RCODE_##err_str
114 #endif /* __DNS_SERVER_H__ */