s4-dsdb: some more attribuutes that we should only give if asked for
[ira/wip.git] / source4 / dsdb / kcc / kcc_service.c
1 /* 
2    Unix SMB/CIFS mplementation.
3
4    KCC service
5    
6    Copyright (C) Andrew Tridgell 2009
7    based on repl service code
8     
9    This program is free software; you can redistribute it and/or modify
10    it under the terms of the GNU General Public License as published by
11    the Free Software Foundation; either version 3 of the License, or
12    (at your option) any later version.
13    
14    This program is distributed in the hope that it will be useful,
15    but WITHOUT ANY WARRANTY; without even the implied warranty of
16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
17    GNU General Public License for more details.
18    
19    You should have received a copy of the GNU General Public License
20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
21    
22 */
23
24 #include "includes.h"
25 #include "dsdb/samdb/samdb.h"
26 #include "auth/auth.h"
27 #include "smbd/service.h"
28 #include "lib/events/events.h"
29 #include "lib/messaging/irpc.h"
30 #include "dsdb/kcc/kcc_service.h"
31 #include "lib/ldb/include/ldb_errors.h"
32 #include "../lib/util/dlinklist.h"
33 #include "librpc/gen_ndr/ndr_misc.h"
34 #include "librpc/gen_ndr/ndr_drsuapi.h"
35 #include "librpc/gen_ndr/ndr_drsblobs.h"
36 #include "param/param.h"
37
38 /*
39   establish system creds
40  */
41 static WERROR kccsrv_init_creds(struct kccsrv_service *service)
42 {
43         service->system_session_info = system_session(service->task->lp_ctx);
44         if (!service->system_session_info) {
45                 return WERR_NOMEM;
46         }
47
48         return WERR_OK;
49 }
50
51 /*
52   connect to the local SAM
53  */
54 static WERROR kccsrv_connect_samdb(struct kccsrv_service *service, struct loadparm_context *lp_ctx)
55 {
56         const struct GUID *ntds_guid;
57
58         service->samdb = samdb_connect(service, service->task->event_ctx, lp_ctx, service->system_session_info);
59         if (!service->samdb) {
60                 return WERR_DS_UNAVAILABLE;
61         }
62
63         ntds_guid = samdb_ntds_objectGUID(service->samdb);
64         if (!ntds_guid) {
65                 return WERR_DS_UNAVAILABLE;
66         }
67
68         service->ntds_guid = *ntds_guid;
69
70         return WERR_OK;
71 }
72
73
74 /*
75   load our local partition list
76  */
77 static WERROR kccsrv_load_partitions(struct kccsrv_service *s)
78 {
79         struct ldb_dn *basedn;
80         struct ldb_result *r;
81         struct ldb_message_element *el;
82         static const char *attrs[] = { "namingContexts", "configurationNamingContext", NULL };
83         uint32_t i;
84         int ret;
85
86         basedn = ldb_dn_new(s, s->samdb, NULL);
87         W_ERROR_HAVE_NO_MEMORY(basedn);
88
89         ret = ldb_search(s->samdb, s, &r, basedn, LDB_SCOPE_BASE, attrs,
90                          "(objectClass=*)");
91         talloc_free(basedn);
92         if (ret != LDB_SUCCESS) {
93                 return WERR_FOOBAR;
94         } else if (r->count != 1) {
95                 talloc_free(r);
96                 return WERR_FOOBAR;
97         }
98
99         el = ldb_msg_find_element(r->msgs[0], "namingContexts");
100         if (!el) {
101                 return WERR_FOOBAR;
102         }
103
104         for (i=0; el && i < el->num_values; i++) {
105                 const char *v = (const char *)el->values[i].data;
106                 struct ldb_dn *pdn;
107                 struct kccsrv_partition *p;
108
109                 pdn = ldb_dn_new(s, s->samdb, v);
110                 if (!ldb_dn_validate(pdn)) {
111                         return WERR_FOOBAR;
112                 }
113
114                 p = talloc_zero(s, struct kccsrv_partition);
115                 W_ERROR_HAVE_NO_MEMORY(p);
116
117                 p->dn = talloc_steal(p, pdn);
118                 p->service = s;
119
120                 DLIST_ADD(s->partitions, p);
121
122                 DEBUG(2, ("kccsrv_partition[%s] loaded\n", v));
123         }
124
125         el = ldb_msg_find_element(r->msgs[0], "configurationNamingContext");
126         if (!el) {
127                 return WERR_FOOBAR;
128         }
129         s->config_dn = ldb_dn_new(s, s->samdb, (const char *)el->values[0].data);
130         if (!ldb_dn_validate(s->config_dn)) {
131                 return WERR_FOOBAR;
132         }
133
134         talloc_free(r);
135
136         return WERR_OK;
137 }
138
139 static NTSTATUS kccsrv_execute_kcc(struct irpc_message *msg,
140                                         struct drsuapi_DsExecuteKCC *r)
141 {
142         TALLOC_CTX *mem_ctx;
143         NTSTATUS status;
144         struct kccsrv_service *service = talloc_get_type(msg->private_data, struct kccsrv_service);
145
146         mem_ctx = talloc_new(service);
147         status = kccsrv_simple_update(service, mem_ctx);
148
149         if (!NT_STATUS_IS_OK(status)) {
150                 DEBUG(0,("kccsrv_simple_update failed - %s\n", nt_errstr(status)));
151                 talloc_free(mem_ctx);
152                 return status;
153         }
154
155         talloc_free(mem_ctx);
156         return NT_STATUS_OK;
157 }
158
159 /*
160   startup the kcc service task
161 */
162 static void kccsrv_task_init(struct task_server *task)
163 {
164         WERROR status;
165         struct kccsrv_service *service;
166         uint32_t periodic_startup_interval;
167
168         switch (lp_server_role(task->lp_ctx)) {
169         case ROLE_STANDALONE:
170                 task_server_terminate(task, "kccsrv: no KCC required in standalone configuration", false);
171                 return;
172         case ROLE_DOMAIN_MEMBER:
173                 task_server_terminate(task, "kccsrv: no KCC required in domain member configuration", false);
174                 return;
175         case ROLE_DOMAIN_CONTROLLER:
176                 /* Yes, we want a KCC */
177                 break;
178         }
179
180         task_server_set_title(task, "task[kccsrv]");
181
182         service = talloc_zero(task, struct kccsrv_service);
183         if (!service) {
184                 task_server_terminate(task, "kccsrv_task_init: out of memory", true);
185                 return;
186         }
187         service->task           = task;
188         service->startup_time   = timeval_current();
189         task->private_data      = service;
190
191         status = kccsrv_init_creds(service);
192         if (!W_ERROR_IS_OK(status)) {
193                 task_server_terminate(task, 
194                                       talloc_asprintf(task,
195                                                       "kccsrv: Failed to obtain server credentials: %s\n",
196                                                       win_errstr(status)), true);
197                 return;
198         }
199
200         status = kccsrv_connect_samdb(service, task->lp_ctx);
201         if (!W_ERROR_IS_OK(status)) {
202                 task_server_terminate(task, talloc_asprintf(task,
203                                       "kccsrv: Failed to connect to local samdb: %s\n",
204                                                             win_errstr(status)), true);
205                 return;
206         }
207
208         status = kccsrv_load_partitions(service);
209         if (!W_ERROR_IS_OK(status)) {
210                 task_server_terminate(task, talloc_asprintf(task,
211                                       "kccsrv: Failed to load partitions: %s\n",
212                                                             win_errstr(status)), true);
213                 return;
214         }
215
216         periodic_startup_interval       = lp_parm_int(task->lp_ctx, NULL, "kccsrv", 
217                                                       "periodic_startup_interval", 15); /* in seconds */
218         service->periodic.interval      = lp_parm_int(task->lp_ctx, NULL, "kccsrv", 
219                                                       "periodic_interval", 300); /* in seconds */
220
221         status = kccsrv_periodic_schedule(service, periodic_startup_interval);
222         if (!W_ERROR_IS_OK(status)) {
223                 task_server_terminate(task, talloc_asprintf(task,
224                                       "kccsrv: Failed to periodic schedule: %s\n",
225                                                             win_errstr(status)), true);
226                 return;
227         }
228
229         irpc_add_name(task->msg_ctx, "kccsrv");
230         IRPC_REGISTER(task->msg_ctx, drsuapi, DRSUAPI_DSEXECUTEKCC, kccsrv_execute_kcc, service);
231 }
232
233 /*
234   register ourselves as a available server
235 */
236 NTSTATUS server_service_kcc_init(void)
237 {
238         return register_server_service("kcc", kccsrv_task_init);
239 }