source3/libsmb/dsgetdcname.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    dsgetdcname
   5
   6    Copyright (C) Gerald Carter 2006
   7    Copyright (C) Guenther Deschner 2007-2008
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #include "includes.h"
  24
  25 #define DSGETDCNAME_FMT "DSGETDCNAME/DOMAIN/%s"
  26 /* 15 minutes */
  27 #define DSGETDCNAME_CACHE_TTL   60*15
  28
  29 struct ip_service_name {
  30         struct sockaddr_storage ss;
  31         unsigned port;
  32         const char *hostname;
  33 };
  34
  35 /****************************************************************
  36 ****************************************************************/
  37
  38 void debug_dsdcinfo_flags(int lvl, uint32_t flags)
  39 {
  40         DEBUG(lvl,("debug_dsdcinfo_flags: 0x%08x\n\t", flags));
  41
  42         if (flags & DS_FORCE_REDISCOVERY)
  43                 DEBUGADD(lvl,("DS_FORCE_REDISCOVERY "));
  44         if (flags & 0x000000002)
  45                 DEBUGADD(lvl,("0x00000002 "));
  46         if (flags & 0x000000004)
  47                 DEBUGADD(lvl,("0x00000004 "));
  48         if (flags & 0x000000008)
  49                 DEBUGADD(lvl,("0x00000008 "));
  50         if (flags & DS_DIRECTORY_SERVICE_REQUIRED)
  51                 DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_REQUIRED "));
  52         if (flags & DS_DIRECTORY_SERVICE_PREFERRED)
  53                 DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_PREFERRED "));
  54         if (flags & DS_GC_SERVER_REQUIRED)
  55                 DEBUGADD(lvl,("DS_GC_SERVER_REQUIRED "));
  56         if (flags & DS_PDC_REQUIRED)
  57                 DEBUGADD(lvl,("DS_PDC_REQUIRED "));
  58         if (flags & DS_BACKGROUND_ONLY)
  59                 DEBUGADD(lvl,("DS_BACKGROUND_ONLY "));
  60         if (flags & DS_IP_REQUIRED)
  61                 DEBUGADD(lvl,("DS_IP_REQUIRED "));
  62         if (flags & DS_KDC_REQUIRED)
  63                 DEBUGADD(lvl,("DS_KDC_REQUIRED "));
  64         if (flags & DS_TIMESERV_REQUIRED)
  65                 DEBUGADD(lvl,("DS_TIMESERV_REQUIRED "));
  66         if (flags & DS_WRITABLE_REQUIRED)
  67                 DEBUGADD(lvl,("DS_WRITABLE_REQUIRED "));
  68         if (flags & DS_GOOD_TIMESERV_PREFERRED)
  69                 DEBUGADD(lvl,("DS_GOOD_TIMESERV_PREFERRED "));
  70         if (flags & DS_AVOID_SELF)
  71                 DEBUGADD(lvl,("DS_AVOID_SELF "));
  72         if (flags & DS_ONLY_LDAP_NEEDED)
  73                 DEBUGADD(lvl,("DS_ONLY_LDAP_NEEDED "));
  74         if (flags & DS_IS_FLAT_NAME)
  75                 DEBUGADD(lvl,("DS_IS_FLAT_NAME "));
  76         if (flags & DS_IS_DNS_NAME)
  77                 DEBUGADD(lvl,("DS_IS_DNS_NAME "));
  78         if (flags & 0x00040000)
  79                 DEBUGADD(lvl,("0x00040000 "));
  80         if (flags & 0x00080000)
  81                 DEBUGADD(lvl,("0x00080000 "));
  82         if (flags & 0x00100000)
  83                 DEBUGADD(lvl,("0x00100000 "));
  84         if (flags & 0x00200000)
  85                 DEBUGADD(lvl,("0x00200000 "));
  86         if (flags & 0x00400000)
  87                 DEBUGADD(lvl,("0x00400000 "));
  88         if (flags & 0x00800000)
  89                 DEBUGADD(lvl,("0x00800000 "));
  90         if (flags & 0x01000000)
  91                 DEBUGADD(lvl,("0x01000000 "));
  92         if (flags & 0x02000000)
  93                 DEBUGADD(lvl,("0x02000000 "));
  94         if (flags & 0x04000000)
  95                 DEBUGADD(lvl,("0x04000000 "));
  96         if (flags & 0x08000000)
  97                 DEBUGADD(lvl,("0x08000000 "));
  98         if (flags & 0x10000000)
  99                 DEBUGADD(lvl,("0x10000000 "));
 100         if (flags & 0x20000000)
 101                 DEBUGADD(lvl,("0x20000000 "));
 102         if (flags & DS_RETURN_DNS_NAME)
 103                 DEBUGADD(lvl,("DS_RETURN_DNS_NAME "));
 104         if (flags & DS_RETURN_FLAT_NAME)
 105                 DEBUGADD(lvl,("DS_RETURN_FLAT_NAME "));
 106         if (flags)
 107                 DEBUGADD(lvl,("\n"));
 108 }
 109
 110 /****************************************************************
 111 ****************************************************************/
 112
 113 static char *dsgetdcname_cache_key(TALLOC_CTX *mem_ctx, const char *domain)
 114 {
 115         if (!mem_ctx || !domain) {
 116                 return NULL;
 117         }
 118
 119         return talloc_asprintf_strupper_m(mem_ctx, DSGETDCNAME_FMT, domain);
 120 }
 121
 122 /****************************************************************
 123 ****************************************************************/
 124
 125 static NTSTATUS dsgetdcname_cache_delete(TALLOC_CTX *mem_ctx,
 126                                         const char *domain_name)
 127 {
 128         char *key;
 129
 130         if (!gencache_init()) {
 131                 return NT_STATUS_INTERNAL_DB_ERROR;
 132         }
 133
 134         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 135         if (!key) {
 136                 return NT_STATUS_NO_MEMORY;
 137         }
 138
 139         if (!gencache_del(key)) {
 140                 return NT_STATUS_UNSUCCESSFUL;
 141         }
 142
 143         return NT_STATUS_OK;
 144 }
 145
 146 /****************************************************************
 147 ****************************************************************/
 148
 149 static NTSTATUS dsgetdcname_cache_store(TALLOC_CTX *mem_ctx,
 150                                         const char *domain_name,
 151                                         struct netr_DsRGetDCNameInfo *info)
 152 {
 153         time_t expire_time;
 154         char *key;
 155         bool ret = false;
 156         DATA_BLOB blob;
 157         enum ndr_err_code ndr_err;
 158
 159         if (!gencache_init()) {
 160                 return NT_STATUS_INTERNAL_DB_ERROR;
 161         }
 162
 163         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 164         if (!key) {
 165                 return NT_STATUS_NO_MEMORY;
 166         }
 167
 168         expire_time = time(NULL) + DSGETDCNAME_CACHE_TTL;
 169
 170         ndr_err = ndr_push_struct_blob(&blob, mem_ctx, info,
 171                        (ndr_push_flags_fn_t)ndr_push_netr_DsRGetDCNameInfo);
 172         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 173                 return ndr_map_error2ntstatus(ndr_err);
 174         }
 175
 176         if (gencache_lock_entry(key) != 0) {
 177                 data_blob_free(&blob);
 178                 return NT_STATUS_LOCK_NOT_GRANTED;
 179         }
 180
 181         ret = gencache_set_data_blob(key, &blob, expire_time);
 182         data_blob_free(&blob);
 183
 184         gencache_unlock_entry(key);
 185
 186         return ret ? NT_STATUS_OK : NT_STATUS_UNSUCCESSFUL;
 187 }
 188
 189 /****************************************************************
 190 ****************************************************************/
 191
 192 static NTSTATUS dsgetdcname_cache_refresh(TALLOC_CTX *mem_ctx,
 193                                           const char *domain_name,
 194                                           struct GUID *domain_guid,
 195                                           uint32_t flags,
 196                                           const char *site_name,
 197                                           struct netr_DsRGetDCNameInfo *info)
 198 {
 199         uint32_t nt_version = NETLOGON_VERSION_1;
 200
 201         /* check if matching entry is older then 15 minutes, if yes, send
 202          * CLDAP/MAILSLOT ping again and store the cached data */
 203
 204         if (ads_cldap_netlogon(mem_ctx, info->dc_unc,
 205                                info->domain_name, &nt_version, NULL)) {
 206
 207                 dsgetdcname_cache_delete(mem_ctx, domain_name);
 208
 209                 return dsgetdcname_cache_store(mem_ctx,
 210                                                info->domain_name,
 211                                                info);
 212         }
 213
 214         return NT_STATUS_INVALID_NETWORK_RESPONSE;
 215 }
 216
 217 /****************************************************************
 218 ****************************************************************/
 219
 220 static uint32_t get_cldap_reply_server_flags(union nbt_cldap_netlogon *r,
 221                                              uint32_t nt_version)
 222 {
 223         switch (nt_version & 0x000000ff) {
 224                 case 0:
 225                 case 1:
 226                         return 0;
 227                 case 2:
 228                 case 3:
 229                         return r->logon3.server_type;
 230                 case 4:
 231                 case 5:
 232                 case 6:
 233                 case 7:
 234                         return r->logon5.server_type;
 235                 case 8:
 236                 case 9:
 237                 case 10:
 238                 case 11:
 239                 case 12:
 240                 case 13:
 241                 case 14:
 242                 case 15:
 243                         return r->logon13.server_type;
 244                 default:
 245                         return r->logon29.server_type;
 246         }
 247 }
 248
 249 /****************************************************************
 250 ****************************************************************/
 251
 252 #define RETURN_ON_FALSE(x) if (!x) return false;
 253
 254 static bool check_cldap_reply_required_flags(uint32_t ret_flags,
 255                                              uint32_t req_flags)
 256 {
 257         if (req_flags & DS_PDC_REQUIRED)
 258                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_PDC);
 259
 260         if (req_flags & DS_GC_SERVER_REQUIRED)
 261                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_GC);
 262
 263         if (req_flags & DS_ONLY_LDAP_NEEDED)
 264                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_LDAP);
 265
 266         if ((req_flags & DS_DIRECTORY_SERVICE_REQUIRED) ||
 267             (req_flags & DS_DIRECTORY_SERVICE_PREFERRED))
 268                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_DS);
 269
 270         if (req_flags & DS_KDC_REQUIRED)
 271                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_KDC);
 272
 273         if (req_flags & DS_TIMESERV_REQUIRED)
 274                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_TIMESERV);
 275
 276         if (req_flags & DS_WRITABLE_REQUIRED)
 277                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_WRITABLE);
 278
 279         return true;
 280 }
 281
 282 /****************************************************************
 283 ****************************************************************/
 284
 285 static NTSTATUS dsgetdcname_cache_fetch(TALLOC_CTX *mem_ctx,
 286                                         const char *domain_name,
 287                                         struct GUID *domain_guid,
 288                                         uint32_t flags,
 289                                         const char *site_name,
 290                                         struct netr_DsRGetDCNameInfo **info_p,
 291                                         bool *expired)
 292 {
 293         char *key;
 294         DATA_BLOB blob;
 295         enum ndr_err_code ndr_err;
 296         struct netr_DsRGetDCNameInfo *info;
 297
 298         if (!gencache_init()) {
 299                 return NT_STATUS_INTERNAL_DB_ERROR;
 300         }
 301
 302         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 303         if (!key) {
 304                 return NT_STATUS_NO_MEMORY;
 305         }
 306
 307         if (!gencache_get_data_blob(key, &blob, expired)) {
 308                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
 309         }
 310
 311         info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
 312         if (!info) {
 313                 return NT_STATUS_NO_MEMORY;
 314         }
 315
 316         ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, info,
 317                       (ndr_pull_flags_fn_t)ndr_pull_netr_DsRGetDCNameInfo);
 318
 319         data_blob_free(&blob);
 320         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 321                 dsgetdcname_cache_delete(mem_ctx, domain_name);
 322                 return ndr_map_error2ntstatus(ndr_err);
 323         }
 324
 325         if (DEBUGLEVEL >= 10) {
 326                 NDR_PRINT_DEBUG(netr_DsRGetDCNameInfo, info);
 327         }
 328
 329         /* check flags */
 330         if (!check_cldap_reply_required_flags(info->dc_flags, flags)) {
 331                 DEBUG(10,("invalid flags\n"));
 332                 return NT_STATUS_INVALID_PARAMETER;
 333         }
 334
 335         if ((flags & DS_IP_REQUIRED) &&
 336             (info->dc_address_type != DS_ADDRESS_TYPE_INET)) {
 337                 return NT_STATUS_INVALID_PARAMETER_MIX;
 338         }
 339
 340         *info_p = info;
 341
 342         return NT_STATUS_OK;
 343 }
 344
 345 /****************************************************************
 346 ****************************************************************/
 347
 348 static NTSTATUS dsgetdcname_cached(TALLOC_CTX *mem_ctx,
 349                                    const char *domain_name,
 350                                    struct GUID *domain_guid,
 351                                    uint32_t flags,
 352                                    const char *site_name,
 353                                    struct netr_DsRGetDCNameInfo **info)
 354 {
 355         NTSTATUS status;
 356         bool expired = false;
 357
 358         status = dsgetdcname_cache_fetch(mem_ctx, domain_name, domain_guid,
 359                                          flags, site_name, info, &expired);
 360         if (!NT_STATUS_IS_OK(status)) {
 361                 DEBUG(10,("dsgetdcname_cached: cache fetch failed with: %s\n",
 362                         nt_errstr(status)));
 363                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 364         }
 365
 366         if (flags & DS_BACKGROUND_ONLY) {
 367                 return status;
 368         }
 369
 370         if (expired) {
 371                 status = dsgetdcname_cache_refresh(mem_ctx, domain_name,
 372                                                    domain_guid, flags,
 373                                                    site_name, *info);
 374                 if (!NT_STATUS_IS_OK(status)) {
 375                         return status;
 376                 }
 377         }
 378
 379         return status;
 380 }
 381
 382 /****************************************************************
 383 ****************************************************************/
 384
 385 static bool check_allowed_required_flags(uint32_t flags)
 386 {
 387         uint32_t return_type = flags & (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME);
 388         uint32_t offered_type = flags & (DS_IS_FLAT_NAME|DS_IS_DNS_NAME);
 389         uint32_t query_type = flags & (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY);
 390
 391         /* FIXME: check for DSGETDC_VALID_FLAGS and check for excluse bits
 392          * (DS_PDC_REQUIRED, DS_KDC_REQUIRED, DS_GC_SERVER_REQUIRED) */
 393
 394         debug_dsdcinfo_flags(10, flags);
 395
 396         if (return_type == (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME)) {
 397                 return false;
 398         }
 399
 400         if (offered_type == (DS_IS_DNS_NAME|DS_IS_FLAT_NAME)) {
 401                 return false;
 402         }
 403
 404         if (query_type == (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY)) {
 405                 return false;
 406         }
 407
 408 #if 0
 409         if ((flags & DS_RETURN_DNS_NAME) && (!(flags & DS_IP_REQUIRED))) {
 410                 printf("gd: here5 \n");
 411                 return false;
 412         }
 413 #endif
 414         return true;
 415 }
 416
 417 /****************************************************************
 418 ****************************************************************/
 419
 420 static NTSTATUS discover_dc_netbios(TALLOC_CTX *mem_ctx,
 421                                     const char *domain_name,
 422                                     uint32_t flags,
 423                                     struct ip_service_name **returned_dclist,
 424                                     int *returned_count)
 425 {
 426         NTSTATUS status;
 427         enum nbt_name_type name_type = NBT_NAME_LOGON;
 428         struct ip_service *iplist;
 429         int i;
 430         struct ip_service_name *dclist = NULL;
 431         int count;
 432
 433         *returned_dclist = NULL;
 434         *returned_count = 0;
 435
 436         if (lp_disable_netbios()) {
 437                 return NT_STATUS_NOT_SUPPORTED;
 438         }
 439
 440         if (flags & DS_PDC_REQUIRED) {
 441                 name_type = NBT_NAME_PDC;
 442         }
 443
 444         status = internal_resolve_name(domain_name, name_type, NULL,
 445                                        &iplist, &count,
 446                                        "lmhosts wins bcast");
 447         if (!NT_STATUS_IS_OK(status)) {
 448                 DEBUG(10,("discover_dc_netbios: failed to find DC\n"));
 449                 return status;
 450         }
 451
 452         dclist = TALLOC_ZERO_ARRAY(mem_ctx, struct ip_service_name, count);
 453         if (!dclist) {
 454                 return NT_STATUS_NO_MEMORY;
 455         }
 456
 457         for (i=0; i<count; i++) {
 458
 459                 char addr[INET6_ADDRSTRLEN];
 460                 struct ip_service_name *r = &dclist[i];
 461
 462                 print_sockaddr(addr, sizeof(addr),
 463                                &iplist[i].ss);
 464
 465                 r->ss   = iplist[i].ss;
 466                 r->port = iplist[i].port;
 467                 r->hostname = talloc_strdup(mem_ctx, addr);
 468                 if (!r->hostname) {
 469                         return NT_STATUS_NO_MEMORY;
 470                 }
 471
 472         }
 473
 474         *returned_dclist = dclist;
 475         *returned_count = count;
 476
 477         return NT_STATUS_OK;
 478 }
 479
 480 /****************************************************************
 481 ****************************************************************/
 482
 483 static NTSTATUS discover_dc_dns(TALLOC_CTX *mem_ctx,
 484                                 const char *domain_name,
 485                                 struct GUID *domain_guid,
 486                                 uint32_t flags,
 487                                 const char *site_name,
 488                                 struct ip_service_name **returned_dclist,
 489                                 int *return_count)
 490 {
 491         int i, j;
 492         NTSTATUS status;
 493         struct dns_rr_srv *dcs = NULL;
 494         int numdcs = 0;
 495         int numaddrs = 0;
 496         struct ip_service_name *dclist = NULL;
 497         int count = 0;
 498
 499         if (flags & DS_PDC_REQUIRED) {
 500                 status = ads_dns_query_pdc(mem_ctx, domain_name,
 501                                            &dcs, &numdcs);
 502         } else if (flags & DS_GC_SERVER_REQUIRED) {
 503                 status = ads_dns_query_gcs(mem_ctx, domain_name, site_name,
 504                                            &dcs, &numdcs);
 505         } else if (flags & DS_KDC_REQUIRED) {
 506                 status = ads_dns_query_kdcs(mem_ctx, domain_name, site_name,
 507                                             &dcs, &numdcs);
 508         } else if (flags & DS_DIRECTORY_SERVICE_REQUIRED) {
 509                 status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
 510                                            &dcs, &numdcs);
 511         } else if (domain_guid) {
 512                 status = ads_dns_query_dcs_guid(mem_ctx, domain_name,
 513                                                 domain_guid, &dcs, &numdcs);
 514         } else {
 515                 status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
 516                                            &dcs, &numdcs);
 517         }
 518
 519         if (!NT_STATUS_IS_OK(status)) {
 520                 return status;
 521         }
 522
 523         if (numdcs == 0) {
 524                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 525         }
 526
 527         for (i=0;i<numdcs;i++) {
 528                 numaddrs += MAX(dcs[i].num_ips,1);
 529         }
 530
 531         dclist = TALLOC_ZERO_ARRAY(mem_ctx,
 532                                    struct ip_service_name,
 533                                    numaddrs);
 534         if (!dclist) {
 535                 return NT_STATUS_NO_MEMORY;
 536         }
 537
 538         /* now unroll the list of IP addresses */
 539
 540         *return_count = 0;
 541         i = 0;
 542         j = 0;
 543
 544         while ((i < numdcs) && (count < numaddrs)) {
 545
 546                 struct ip_service_name *r = &dclist[count];
 547
 548                 r->port = dcs[count].port;
 549                 r->hostname = dcs[count].hostname;
 550
 551                 if (!(flags & DS_IP_REQUIRED)) {
 552                         count++;
 553                         continue;
 554                 }
 555
 556                 /* If we don't have an IP list for a name, lookup it up */
 557
 558                 if (!dcs[i].ss_s) {
 559                         interpret_string_addr(&r->ss, dcs[i].hostname, 0);
 560                         i++;
 561                         j = 0;
 562                 } else {
 563                         /* use the IP addresses from the SRV sresponse */
 564
 565                         if (j >= dcs[i].num_ips) {
 566                                 i++;
 567                                 j = 0;
 568                                 continue;
 569                         }
 570
 571                         r->ss = dcs[i].ss_s[j];
 572                         j++;
 573                 }
 574
 575                 /* make sure it is a valid IP.  I considered checking the
 576                  * negative connection cache, but this is the wrong place for
 577                  * it.  Maybe only as a hac.  After think about it, if all of
 578                  * the IP addresses retuend from DNS are dead, what hope does a
 579                  * netbios name lookup have?  The standard reason for falling
 580                  * back to netbios lookups is that our DNS server doesn't know
 581                  * anything about the DC's   -- jerry */
 582
 583                 if (!is_zero_addr(&r->ss)) {
 584                         count++;
 585                         continue;
 586                 }
 587         }
 588
 589         *returned_dclist = dclist;
 590         *return_count = count;
 591
 592         if (count > 0) {
 593                 return NT_STATUS_OK;
 594         }
 595
 596         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 597 }
 598
 599 /****************************************************************
 600 ****************************************************************/
 601
 602 static NTSTATUS make_domain_controller_info(TALLOC_CTX *mem_ctx,
 603                                             const char *dc_unc,
 604                                             const char *dc_address,
 605                                             uint32_t dc_address_type,
 606                                             const struct GUID *domain_guid,
 607                                             const char *domain_name,
 608                                             const char *forest_name,
 609                                             uint32_t flags,
 610                                             const char *dc_site_name,
 611                                             const char *client_site_name,
 612                                             struct netr_DsRGetDCNameInfo **info_out)
 613 {
 614         struct netr_DsRGetDCNameInfo *info;
 615
 616         info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
 617         NT_STATUS_HAVE_NO_MEMORY(info);
 618
 619         if (dc_unc) {
 620                 info->dc_unc = talloc_strdup(mem_ctx, dc_unc);
 621                 NT_STATUS_HAVE_NO_MEMORY(info->dc_unc);
 622         }
 623
 624         if (dc_address) {
 625                 info->dc_address = talloc_strdup(mem_ctx, dc_address);
 626                 NT_STATUS_HAVE_NO_MEMORY(info->dc_address);
 627         }
 628
 629         info->dc_address_type = dc_address_type;
 630
 631         if (domain_guid) {
 632                 info->domain_guid = *domain_guid;
 633         }
 634
 635         if (domain_name) {
 636                 info->domain_name = talloc_strdup(mem_ctx, domain_name);
 637                 NT_STATUS_HAVE_NO_MEMORY(info->domain_name);
 638         }
 639
 640         if (forest_name) {
 641                 info->forest_name = talloc_strdup(mem_ctx, forest_name);
 642                 NT_STATUS_HAVE_NO_MEMORY(info->forest_name);
 643         }
 644
 645         info->dc_flags = flags;
 646
 647         if (dc_site_name) {
 648                 info->dc_site_name = talloc_strdup(mem_ctx, dc_site_name);
 649                 NT_STATUS_HAVE_NO_MEMORY(info->dc_site_name);
 650         }
 651
 652         if (client_site_name) {
 653                 info->client_site_name = talloc_strdup(mem_ctx,
 654                                                        client_site_name);
 655                 NT_STATUS_HAVE_NO_MEMORY(info->client_site_name);
 656         }
 657
 658         *info_out = info;
 659
 660         return NT_STATUS_OK;
 661 }
 662
 663 /****************************************************************
 664 ****************************************************************/
 665
 666 static uint32_t map_ds_flags_to_nt_version(uint32_t flags)
 667 {
 668         uint32_t nt_version = 0;
 669
 670         if (flags & DS_PDC_REQUIRED) {
 671                 nt_version |= NETLOGON_VERSION_PDC;
 672         }
 673
 674         if (flags & DS_GC_SERVER_REQUIRED) {
 675                 nt_version |= NETLOGON_VERSION_GC;
 676         }
 677
 678         if (flags & DS_TRY_NEXTCLOSEST_SITE) {
 679                 nt_version |= NETLOGON_VERSION_WITH_CLOSEST_SITE;
 680         }
 681
 682         if (flags & DS_IP_REQUIRED) {
 683                 nt_version |= NETLOGON_VERSION_IP;
 684         }
 685
 686         return nt_version;
 687 }
 688
 689 /****************************************************************
 690 ****************************************************************/
 691
 692 static NTSTATUS process_dc_dns(TALLOC_CTX *mem_ctx,
 693                                const char *domain_name,
 694                                uint32_t flags,
 695                                struct ip_service_name *dclist,
 696                                int num_dcs,
 697                                struct netr_DsRGetDCNameInfo **info)
 698 {
 699         int i = 0;
 700         bool valid_dc = false;
 701         struct nbt_cldap_netlogon_5 r;
 702         const char *dc_hostname, *dc_domain_name;
 703         const char *dc_address;
 704         uint32_t dc_address_type;
 705         uint32_t dc_flags;
 706
 707         for (i=0; i<num_dcs; i++) {
 708
 709                 ZERO_STRUCT(r);
 710
 711                 DEBUG(10,("LDAP ping to %s\n", dclist[i].hostname));
 712
 713                 if ((ads_cldap_netlogon(mem_ctx, dclist[i].hostname,
 714                                         domain_name, &r)) &&
 715                     (check_cldap_reply_required_flags(r.server_type, flags))) {
 716                         valid_dc = true;
 717                         break;
 718                 }
 719
 720                 continue;
 721         }
 722
 723         if (!valid_dc) {
 724                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 725         }
 726
 727         dc_flags = r.server_type;
 728
 729         if (flags & DS_RETURN_FLAT_NAME) {
 730                 if (!strlen(r.pdc_name) || !strlen(r.domain)) {
 731                         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 732                 }
 733                 dc_hostname = r.pdc_name;
 734                 dc_domain_name = r.domain;
 735         } else if (flags & DS_RETURN_DNS_NAME) {
 736                 if (!strlen(r.pdc_dns_name) || !strlen(r.dns_domain)) {
 737                         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 738                 }
 739                 dc_hostname = r.pdc_dns_name;
 740                 dc_domain_name = r.dns_domain;
 741                 dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 742         } else {
 743                 /* FIXME */
 744                 dc_hostname = r.pdc_dns_name;
 745                 dc_domain_name = r.dns_domain;
 746                 dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 747         }
 748
 749         if (flags & DS_IP_REQUIRED) {
 750                 char addr[INET6_ADDRSTRLEN];
 751                 print_sockaddr(addr, sizeof(addr), &dclist[i].ss);
 752                 dc_address = talloc_asprintf(mem_ctx, "\\\\%s",
 753                                                 addr);
 754                 dc_address_type = DS_ADDRESS_TYPE_INET;
 755         } else {
 756                 dc_address = talloc_asprintf(mem_ctx, "\\\\%s",
 757                                              r.pdc_name);
 758                 dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
 759         }
 760         NT_STATUS_HAVE_NO_MEMORY(dc_address);
 761
 762         if (r.forest) {
 763                 dc_flags |= DS_DNS_FOREST;
 764         }
 765
 766         return make_domain_controller_info(mem_ctx,
 767                                            dc_hostname,
 768                                            dc_address,
 769                                            dc_address_type,
 770                                            &r.domain_uuid,
 771                                            dc_domain_name,
 772                                            r.forest,
 773                                            dc_flags,
 774                                            r.server_site,
 775                                            r.client_site,
 776                                            info);
 777
 778 }
 779
 780 /****************************************************************
 781 ****************************************************************/
 782
 783 static struct event_context *ev_context(void)
 784 {
 785         static struct event_context *ctx;
 786
 787         if (!ctx && !(ctx = event_context_init(NULL))) {
 788                 smb_panic("Could not init event context");
 789         }
 790         return ctx;
 791 }
 792
 793 /****************************************************************
 794 ****************************************************************/
 795
 796 static struct messaging_context *msg_context(TALLOC_CTX *mem_ctx)
 797 {
 798         static struct messaging_context *ctx;
 799
 800         if (!ctx && !(ctx = messaging_init(mem_ctx, server_id_self(),
 801                                            ev_context()))) {
 802                 smb_panic("Could not init messaging context");
 803         }
 804         return ctx;
 805 }
 806
 807 /****************************************************************
 808 ****************************************************************/
 809
 810 static NTSTATUS process_dc_netbios(TALLOC_CTX *mem_ctx,
 811                                    const char *domain_name,
 812                                    uint32_t flags,
 813                                    struct ip_service_name *dclist,
 814                                    int num_dcs,
 815                                    struct netr_DsRGetDCNameInfo **info)
 816 {
 817         struct sockaddr_storage ss;
 818         struct ip_service ip_list;
 819         enum nbt_name_type name_type = NBT_NAME_LOGON;
 820
 821         int i;
 822         const char *dc_hostname, *dc_domain_name;
 823         const char *dc_address;
 824         uint32_t dc_address_type;
 825         uint32_t dc_flags = 0;
 826         const char *dc_name = NULL;
 827         const char *dc_forest = NULL;
 828         const char *dc_server_site = NULL;
 829         const char *dc_client_site = NULL;
 830         struct GUID *dc_domain_guid = NULL;
 831         fstring tmp_dc_name;
 832         struct messaging_context *msg_ctx = msg_context(mem_ctx);
 833         struct nbt_ntlogon_packet *reply = NULL;
 834         uint32_t nt_version = NETLOGON_VERSION_1 |
 835                               NETLOGON_VERSION_5 |
 836                               NETLOGON_VERSION_5EX_WITH_IP;
 837
 838         if (flags & DS_PDC_REQUIRED) {
 839                 name_type = NBT_NAME_PDC;
 840         }
 841
 842         nt_version |= map_ds_flags_to_nt_version(flags);
 843
 844         DEBUG(10,("process_dc_netbios\n"));
 845
 846         for (i=0; i<num_dcs; i++) {
 847
 848                 ip_list.ss = dclist[i].ss;
 849                 ip_list.port = 0;
 850
 851                 if (!interpret_string_addr(&ss, dclist[i].hostname, AI_NUMERICHOST)) {
 852                         return NT_STATUS_UNSUCCESSFUL;
 853                 }
 854
 855                 if (send_getdc_request(mem_ctx, msg_ctx,
 856                                        &dclist[i].ss, domain_name,
 857                                        NULL, nt_version))
 858                 {
 859                         int k;
 860                         smb_msleep(100);
 861                         for (k=0; k<5; k++) {
 862                                 if (receive_getdc_response(mem_ctx,
 863                                                            &dclist[i].ss,
 864                                                            domain_name,
 865                                                            &dc_name,
 866                                                            &reply)) {
 867                                         namecache_store(dc_name, NBT_NAME_SERVER, 1, &ip_list);
 868                                         dc_hostname = dc_name;
 869                                         dc_domain_name = talloc_strdup_upper(mem_ctx, domain_name);
 870                                         NT_STATUS_HAVE_NO_MEMORY(dc_domain_name);
 871                                         goto make_reply;
 872                                 }
 873                                 smb_msleep(500);
 874                         }
 875                 }
 876
 877                 if (name_status_find(domain_name,
 878                                      name_type,
 879                                      NBT_NAME_SERVER,
 880                                      &dclist[i].ss,
 881                                      tmp_dc_name))
 882                 {
 883                         dc_hostname = tmp_dc_name;
 884                         dc_domain_name = talloc_strdup_upper(mem_ctx, domain_name);
 885                         namecache_store(tmp_dc_name, NBT_NAME_SERVER, 1, &ip_list);
 886                         goto make_reply;
 887                 }
 888         }
 889
 890         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 891
 892  make_reply:
 893
 894         if (reply && reply->command == NTLOGON_RESPONSE_FROM_PDC2) {
 895
 896                 dc_flags |= reply->req.reply2.server_type;
 897                 dc_forest = reply->req.reply2.forest;
 898                 dc_server_site = reply->req.reply2.server_site;
 899                 dc_client_site = reply->req.reply2.client_site;
 900
 901                 dc_domain_guid = &reply->req.reply2.domain_uuid;
 902
 903                 if (flags & DS_RETURN_DNS_NAME) {
 904                         dc_domain_name = reply->req.reply2.dns_domain;
 905                         dc_hostname = reply->req.reply2.pdc_dns_name;
 906                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 907                 } else if (flags & DS_RETURN_FLAT_NAME) {
 908                         dc_domain_name = reply->req.reply2.domain;
 909                         dc_hostname = reply->req.reply2.pdc_name;
 910                 }
 911         }
 912
 913         if (flags & DS_IP_REQUIRED) {
 914                 char addr[INET6_ADDRSTRLEN];
 915                 print_sockaddr(addr, sizeof(addr), &dclist[i].ss);
 916                 dc_address = talloc_asprintf(mem_ctx, "\\\\%s", addr);
 917                 dc_address_type = DS_ADDRESS_TYPE_INET;
 918         } else {
 919                 dc_address = talloc_asprintf(mem_ctx, "\\\\%s", dc_hostname);
 920                 dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
 921         }
 922
 923         if (flags & DS_PDC_REQUIRED) {
 924                 dc_flags |= NBT_SERVER_PDC | NBT_SERVER_WRITABLE;
 925         }
 926
 927         if (dc_forest) {
 928                 dc_flags |= DS_DNS_FOREST;
 929         }
 930
 931         return make_domain_controller_info(mem_ctx,
 932                                            dc_hostname,
 933                                            dc_address,
 934                                            dc_address_type,
 935                                            dc_domain_guid,
 936                                            dc_domain_name,
 937                                            dc_forest,
 938                                            dc_flags,
 939                                            dc_server_site,
 940                                            dc_client_site,
 941                                            info);
 942 }
 943
 944 /****************************************************************
 945 ****************************************************************/
 946
 947 static NTSTATUS dsgetdcname_rediscover(TALLOC_CTX *mem_ctx,
 948                                        const char *domain_name,
 949                                        struct GUID *domain_guid,
 950                                        uint32_t flags,
 951                                        const char *site_name,
 952                                        struct netr_DsRGetDCNameInfo **info)
 953 {
 954         NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 955         struct ip_service_name *dclist = NULL;
 956         int num_dcs;
 957
 958         DEBUG(10,("dsgetdcname_rediscover\n"));
 959
 960         if (flags & DS_IS_FLAT_NAME) {
 961
 962                 status = discover_dc_netbios(mem_ctx, domain_name, flags,
 963                                              &dclist, &num_dcs);
 964                 NT_STATUS_NOT_OK_RETURN(status);
 965
 966                 return process_dc_netbios(mem_ctx, domain_name, flags,
 967                                           dclist, num_dcs, info);
 968         }
 969
 970         if (flags & DS_IS_DNS_NAME) {
 971
 972                 status = discover_dc_dns(mem_ctx, domain_name, domain_guid,
 973                                          flags, site_name, &dclist, &num_dcs);
 974                 NT_STATUS_NOT_OK_RETURN(status);
 975
 976                 return process_dc_dns(mem_ctx, domain_name, flags,
 977                                       dclist, num_dcs, info);
 978         }
 979
 980         status = discover_dc_dns(mem_ctx, domain_name, domain_guid, flags,
 981                                  site_name, &dclist, &num_dcs);
 982
 983         if (NT_STATUS_IS_OK(status) && num_dcs != 0) {
 984
 985                 status = process_dc_dns(mem_ctx, domain_name, flags, dclist,
 986                                         num_dcs, info);
 987                 if (NT_STATUS_IS_OK(status)) {
 988                         return status;
 989                 }
 990         }
 991
 992         status = discover_dc_netbios(mem_ctx, domain_name, flags, &dclist,
 993                                      &num_dcs);
 994         NT_STATUS_NOT_OK_RETURN(status);
 995
 996         return process_dc_netbios(mem_ctx, domain_name, flags, dclist,
 997                                   num_dcs, info);
 998 }
 999
1000 /********************************************************************
1001  dsgetdcname.
1002
1003  This will be the only public function here.
1004 ********************************************************************/
1005
1006 NTSTATUS dsgetdcname(TALLOC_CTX *mem_ctx,
1007                      const char *domain_name,
1008                      struct GUID *domain_guid,
1009                      const char *site_name,
1010                      uint32_t flags,
1011                      struct netr_DsRGetDCNameInfo **info)
1012 {
1013         NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1014         struct netr_DsRGetDCNameInfo *myinfo = NULL;
1015
1016         DEBUG(10,("dsgetdcname: domain_name: %s, "
1017                   "domain_guid: %s, site_name: %s, flags: 0x%08x\n",
1018                   domain_name,
1019                   domain_guid ? GUID_string(mem_ctx, domain_guid) : "(null)",
1020                   site_name, flags));
1021
1022         *info = NULL;
1023
1024         if (!check_allowed_required_flags(flags)) {
1025                 DEBUG(0,("invalid flags specified\n"));
1026                 return NT_STATUS_INVALID_PARAMETER;
1027         }
1028
1029         if (flags & DS_FORCE_REDISCOVERY) {
1030                 goto rediscover;
1031         }
1032
1033         status = dsgetdcname_cached(mem_ctx, domain_name, domain_guid,
1034                                     flags, site_name, &myinfo);
1035         if (NT_STATUS_IS_OK(status)) {
1036                 *info = myinfo;
1037                 return status;
1038         }
1039
1040         if (flags & DS_BACKGROUND_ONLY) {
1041                 return status;
1042         }
1043
1044  rediscover:
1045         status = dsgetdcname_rediscover(mem_ctx, domain_name,
1046                                         domain_guid, flags, site_name,
1047                                         &myinfo);
1048
1049         if (NT_STATUS_IS_OK(status)) {
1050                 dsgetdcname_cache_store(mem_ctx, domain_name, myinfo);
1051                 *info = myinfo;
1052         }
1053
1054         return status;
1055 }
1056
1057 /****************************************************************
1058 ****************************************************************/
1059
1060 bool pull_mailslot_cldap_reply(TALLOC_CTX *mem_ctx,
1061                                const DATA_BLOB *blob,
1062                                union nbt_cldap_netlogon *r,
1063                                uint32_t *nt_version)
1064 {
1065         enum ndr_err_code ndr_err;
1066         uint32_t nt_version_query = ((*nt_version) & 0x000000ff);
1067         uint16_t command = 0;
1068
1069         ndr_err = ndr_pull_struct_blob(blob, mem_ctx, &command,
1070                         (ndr_pull_flags_fn_t)ndr_pull_uint16);
1071         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1072                 return false;
1073         }
1074
1075         switch (command) {
1076                 case 0x13: /* 19 */
1077                 case 0x15: /* 21 */
1078                 case 0x17: /* 23 */
1079                          break;
1080                 default:
1081                         DEBUG(1,("got unexpected command: %d (0x%08x)\n",
1082                                 command, command));
1083                         return false;
1084         }
1085
1086         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1087                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1088         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1089                 goto done;
1090         }
1091
1092         /* when the caller requested just those nt_version bits that the server
1093          * was able to reply to, we are fine and all done. otherwise we need to
1094          * assume downgraded replies which are painfully parsed here - gd */
1095
1096         if (nt_version_query & NETLOGON_VERSION_WITH_CLOSEST_SITE) {
1097                 nt_version_query &= ~NETLOGON_VERSION_WITH_CLOSEST_SITE;
1098         }
1099         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1100                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1101         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1102                 goto done;
1103         }
1104         if (nt_version_query & NETLOGON_VERSION_5EX_WITH_IP) {
1105                 nt_version_query &= ~NETLOGON_VERSION_5EX_WITH_IP;
1106         }
1107         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1108                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1109         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1110                 goto done;
1111         }
1112         if (nt_version_query & NETLOGON_VERSION_5EX) {
1113                 nt_version_query &= ~NETLOGON_VERSION_5EX;
1114         }
1115         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1116                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1117         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1118                 goto done;
1119         }
1120         if (nt_version_query & NETLOGON_VERSION_5) {
1121                 nt_version_query &= ~NETLOGON_VERSION_5;
1122         }
1123         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1124                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1125         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1126                 goto done;
1127         }
1128
1129         return false;
1130
1131  done:
1132         if (DEBUGLEVEL >= 10) {
1133                 NDR_PRINT_UNION_DEBUG(nbt_cldap_netlogon, nt_version_query, r);
1134         }
1135
1136         *nt_version = nt_version_query;
1137
1138         return true;
1139 }