source3/libsmb/dsgetdcname.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    dsgetdcname
   5
   6    Copyright (C) Gerald Carter 2006
   7    Copyright (C) Guenther Deschner 2007-2008
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #include "includes.h"
  24
  25 #define DSGETDCNAME_FMT "DSGETDCNAME/DOMAIN/%s"
  26 /* 15 minutes */
  27 #define DSGETDCNAME_CACHE_TTL   60*15
  28
  29 struct ip_service_name {
  30         struct sockaddr_storage ss;
  31         unsigned port;
  32         const char *hostname;
  33 };
  34
  35 /****************************************************************
  36 ****************************************************************/
  37
  38 void debug_dsdcinfo_flags(int lvl, uint32_t flags)
  39 {
  40         DEBUG(lvl,("debug_dsdcinfo_flags: 0x%08x\n\t", flags));
  41
  42         if (flags & DS_FORCE_REDISCOVERY)
  43                 DEBUGADD(lvl,("DS_FORCE_REDISCOVERY "));
  44         if (flags & 0x000000002)
  45                 DEBUGADD(lvl,("0x00000002 "));
  46         if (flags & 0x000000004)
  47                 DEBUGADD(lvl,("0x00000004 "));
  48         if (flags & 0x000000008)
  49                 DEBUGADD(lvl,("0x00000008 "));
  50         if (flags & DS_DIRECTORY_SERVICE_REQUIRED)
  51                 DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_REQUIRED "));
  52         if (flags & DS_DIRECTORY_SERVICE_PREFERRED)
  53                 DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_PREFERRED "));
  54         if (flags & DS_GC_SERVER_REQUIRED)
  55                 DEBUGADD(lvl,("DS_GC_SERVER_REQUIRED "));
  56         if (flags & DS_PDC_REQUIRED)
  57                 DEBUGADD(lvl,("DS_PDC_REQUIRED "));
  58         if (flags & DS_BACKGROUND_ONLY)
  59                 DEBUGADD(lvl,("DS_BACKGROUND_ONLY "));
  60         if (flags & DS_IP_REQUIRED)
  61                 DEBUGADD(lvl,("DS_IP_REQUIRED "));
  62         if (flags & DS_KDC_REQUIRED)
  63                 DEBUGADD(lvl,("DS_KDC_REQUIRED "));
  64         if (flags & DS_TIMESERV_REQUIRED)
  65                 DEBUGADD(lvl,("DS_TIMESERV_REQUIRED "));
  66         if (flags & DS_WRITABLE_REQUIRED)
  67                 DEBUGADD(lvl,("DS_WRITABLE_REQUIRED "));
  68         if (flags & DS_GOOD_TIMESERV_PREFERRED)
  69                 DEBUGADD(lvl,("DS_GOOD_TIMESERV_PREFERRED "));
  70         if (flags & DS_AVOID_SELF)
  71                 DEBUGADD(lvl,("DS_AVOID_SELF "));
  72         if (flags & DS_ONLY_LDAP_NEEDED)
  73                 DEBUGADD(lvl,("DS_ONLY_LDAP_NEEDED "));
  74         if (flags & DS_IS_FLAT_NAME)
  75                 DEBUGADD(lvl,("DS_IS_FLAT_NAME "));
  76         if (flags & DS_IS_DNS_NAME)
  77                 DEBUGADD(lvl,("DS_IS_DNS_NAME "));
  78         if (flags & 0x00040000)
  79                 DEBUGADD(lvl,("0x00040000 "));
  80         if (flags & 0x00080000)
  81                 DEBUGADD(lvl,("0x00080000 "));
  82         if (flags & 0x00100000)
  83                 DEBUGADD(lvl,("0x00100000 "));
  84         if (flags & 0x00200000)
  85                 DEBUGADD(lvl,("0x00200000 "));
  86         if (flags & 0x00400000)
  87                 DEBUGADD(lvl,("0x00400000 "));
  88         if (flags & 0x00800000)
  89                 DEBUGADD(lvl,("0x00800000 "));
  90         if (flags & 0x01000000)
  91                 DEBUGADD(lvl,("0x01000000 "));
  92         if (flags & 0x02000000)
  93                 DEBUGADD(lvl,("0x02000000 "));
  94         if (flags & 0x04000000)
  95                 DEBUGADD(lvl,("0x04000000 "));
  96         if (flags & 0x08000000)
  97                 DEBUGADD(lvl,("0x08000000 "));
  98         if (flags & 0x10000000)
  99                 DEBUGADD(lvl,("0x10000000 "));
 100         if (flags & 0x20000000)
 101                 DEBUGADD(lvl,("0x20000000 "));
 102         if (flags & DS_RETURN_DNS_NAME)
 103                 DEBUGADD(lvl,("DS_RETURN_DNS_NAME "));
 104         if (flags & DS_RETURN_FLAT_NAME)
 105                 DEBUGADD(lvl,("DS_RETURN_FLAT_NAME "));
 106         if (flags)
 107                 DEBUGADD(lvl,("\n"));
 108 }
 109
 110 /****************************************************************
 111 ****************************************************************/
 112
 113 static char *dsgetdcname_cache_key(TALLOC_CTX *mem_ctx, const char *domain)
 114 {
 115         if (!mem_ctx || !domain) {
 116                 return NULL;
 117         }
 118
 119         return talloc_asprintf_strupper_m(mem_ctx, DSGETDCNAME_FMT, domain);
 120 }
 121
 122 /****************************************************************
 123 ****************************************************************/
 124
 125 static NTSTATUS dsgetdcname_cache_delete(TALLOC_CTX *mem_ctx,
 126                                         const char *domain_name)
 127 {
 128         char *key;
 129
 130         if (!gencache_init()) {
 131                 return NT_STATUS_INTERNAL_DB_ERROR;
 132         }
 133
 134         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 135         if (!key) {
 136                 return NT_STATUS_NO_MEMORY;
 137         }
 138
 139         if (!gencache_del(key)) {
 140                 return NT_STATUS_UNSUCCESSFUL;
 141         }
 142
 143         return NT_STATUS_OK;
 144 }
 145
 146 /****************************************************************
 147 ****************************************************************/
 148
 149 static NTSTATUS dsgetdcname_cache_store(TALLOC_CTX *mem_ctx,
 150                                         const char *domain_name,
 151                                         struct netr_DsRGetDCNameInfo *info)
 152 {
 153         time_t expire_time;
 154         char *key;
 155         bool ret = false;
 156         DATA_BLOB blob;
 157         enum ndr_err_code ndr_err;
 158
 159         if (!gencache_init()) {
 160                 return NT_STATUS_INTERNAL_DB_ERROR;
 161         }
 162
 163         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 164         if (!key) {
 165                 return NT_STATUS_NO_MEMORY;
 166         }
 167
 168         expire_time = time(NULL) + DSGETDCNAME_CACHE_TTL;
 169
 170         ndr_err = ndr_push_struct_blob(&blob, mem_ctx, info,
 171                        (ndr_push_flags_fn_t)ndr_push_netr_DsRGetDCNameInfo);
 172         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 173                 return ndr_map_error2ntstatus(ndr_err);
 174         }
 175
 176         if (gencache_lock_entry(key) != 0) {
 177                 data_blob_free(&blob);
 178                 return NT_STATUS_LOCK_NOT_GRANTED;
 179         }
 180
 181         ret = gencache_set_data_blob(key, &blob, expire_time);
 182         data_blob_free(&blob);
 183
 184         gencache_unlock_entry(key);
 185
 186         return ret ? NT_STATUS_OK : NT_STATUS_UNSUCCESSFUL;
 187 }
 188
 189 /****************************************************************
 190 ****************************************************************/
 191
 192 static NTSTATUS dsgetdcname_cache_refresh(TALLOC_CTX *mem_ctx,
 193                                           const char *domain_name,
 194                                           struct GUID *domain_guid,
 195                                           uint32_t flags,
 196                                           const char *site_name,
 197                                           struct netr_DsRGetDCNameInfo *info)
 198 {
 199         uint32_t nt_version = NETLOGON_VERSION_1;
 200
 201         /* check if matching entry is older then 15 minutes, if yes, send
 202          * CLDAP/MAILSLOT ping again and store the cached data */
 203
 204         if (ads_cldap_netlogon(mem_ctx, info->dc_unc,
 205                                info->domain_name, &nt_version, NULL)) {
 206
 207                 dsgetdcname_cache_delete(mem_ctx, domain_name);
 208
 209                 return dsgetdcname_cache_store(mem_ctx,
 210                                                info->domain_name,
 211                                                info);
 212         }
 213
 214         return NT_STATUS_INVALID_NETWORK_RESPONSE;
 215 }
 216
 217 /****************************************************************
 218 ****************************************************************/
 219
 220 static uint32_t get_cldap_reply_server_flags(union nbt_cldap_netlogon *r,
 221                                              uint32_t nt_version)
 222 {
 223         switch (nt_version & 0x000000ff) {
 224                 case 0:
 225                 case 1:
 226                         return 0;
 227                 case 2:
 228                 case 3:
 229                         return r->logon3.server_type;
 230                 case 4:
 231                 case 5:
 232                 case 6:
 233                 case 7:
 234                         return r->logon5.server_type;
 235                 case 8:
 236                 case 9:
 237                 case 10:
 238                 case 11:
 239                 case 12:
 240                 case 13:
 241                 case 14:
 242                 case 15:
 243                         return r->logon13.server_type;
 244                 default:
 245                         return r->logon29.server_type;
 246         }
 247 }
 248
 249 /****************************************************************
 250 ****************************************************************/
 251
 252 #define RETURN_ON_FALSE(x) if (!x) return false;
 253
 254 static bool check_cldap_reply_required_flags(uint32_t ret_flags,
 255                                              uint32_t req_flags)
 256 {
 257         if (ret_flags == 0) {
 258                 return true;
 259         }
 260
 261         if (req_flags & DS_PDC_REQUIRED)
 262                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_PDC);
 263
 264         if (req_flags & DS_GC_SERVER_REQUIRED)
 265                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_GC);
 266
 267         if (req_flags & DS_ONLY_LDAP_NEEDED)
 268                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_LDAP);
 269
 270         if ((req_flags & DS_DIRECTORY_SERVICE_REQUIRED) ||
 271             (req_flags & DS_DIRECTORY_SERVICE_PREFERRED))
 272                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_DS);
 273
 274         if (req_flags & DS_KDC_REQUIRED)
 275                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_KDC);
 276
 277         if (req_flags & DS_TIMESERV_REQUIRED)
 278                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_TIMESERV);
 279
 280         if (req_flags & DS_WRITABLE_REQUIRED)
 281                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_WRITABLE);
 282
 283         return true;
 284 }
 285
 286 /****************************************************************
 287 ****************************************************************/
 288
 289 static NTSTATUS dsgetdcname_cache_fetch(TALLOC_CTX *mem_ctx,
 290                                         const char *domain_name,
 291                                         struct GUID *domain_guid,
 292                                         uint32_t flags,
 293                                         const char *site_name,
 294                                         struct netr_DsRGetDCNameInfo **info_p,
 295                                         bool *expired)
 296 {
 297         char *key;
 298         DATA_BLOB blob;
 299         enum ndr_err_code ndr_err;
 300         struct netr_DsRGetDCNameInfo *info;
 301
 302         if (!gencache_init()) {
 303                 return NT_STATUS_INTERNAL_DB_ERROR;
 304         }
 305
 306         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 307         if (!key) {
 308                 return NT_STATUS_NO_MEMORY;
 309         }
 310
 311         if (!gencache_get_data_blob(key, &blob, expired)) {
 312                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
 313         }
 314
 315         info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
 316         if (!info) {
 317                 return NT_STATUS_NO_MEMORY;
 318         }
 319
 320         ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, info,
 321                       (ndr_pull_flags_fn_t)ndr_pull_netr_DsRGetDCNameInfo);
 322
 323         data_blob_free(&blob);
 324         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 325                 dsgetdcname_cache_delete(mem_ctx, domain_name);
 326                 return ndr_map_error2ntstatus(ndr_err);
 327         }
 328
 329         if (DEBUGLEVEL >= 10) {
 330                 NDR_PRINT_DEBUG(netr_DsRGetDCNameInfo, info);
 331         }
 332
 333         /* check flags */
 334         if (!check_cldap_reply_required_flags(info->dc_flags, flags)) {
 335                 DEBUG(10,("invalid flags\n"));
 336                 return NT_STATUS_INVALID_PARAMETER;
 337         }
 338
 339         if ((flags & DS_IP_REQUIRED) &&
 340             (info->dc_address_type != DS_ADDRESS_TYPE_INET)) {
 341                 return NT_STATUS_INVALID_PARAMETER_MIX;
 342         }
 343
 344         *info_p = info;
 345
 346         return NT_STATUS_OK;
 347 }
 348
 349 /****************************************************************
 350 ****************************************************************/
 351
 352 static NTSTATUS dsgetdcname_cached(TALLOC_CTX *mem_ctx,
 353                                    const char *domain_name,
 354                                    struct GUID *domain_guid,
 355                                    uint32_t flags,
 356                                    const char *site_name,
 357                                    struct netr_DsRGetDCNameInfo **info)
 358 {
 359         NTSTATUS status;
 360         bool expired = false;
 361
 362         status = dsgetdcname_cache_fetch(mem_ctx, domain_name, domain_guid,
 363                                          flags, site_name, info, &expired);
 364         if (!NT_STATUS_IS_OK(status)) {
 365                 DEBUG(10,("dsgetdcname_cached: cache fetch failed with: %s\n",
 366                         nt_errstr(status)));
 367                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 368         }
 369
 370         if (flags & DS_BACKGROUND_ONLY) {
 371                 return status;
 372         }
 373
 374         if (expired) {
 375                 status = dsgetdcname_cache_refresh(mem_ctx, domain_name,
 376                                                    domain_guid, flags,
 377                                                    site_name, *info);
 378                 if (!NT_STATUS_IS_OK(status)) {
 379                         return status;
 380                 }
 381         }
 382
 383         return status;
 384 }
 385
 386 /****************************************************************
 387 ****************************************************************/
 388
 389 static bool check_allowed_required_flags(uint32_t flags)
 390 {
 391         uint32_t return_type = flags & (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME);
 392         uint32_t offered_type = flags & (DS_IS_FLAT_NAME|DS_IS_DNS_NAME);
 393         uint32_t query_type = flags & (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY);
 394
 395         /* FIXME: check for DSGETDC_VALID_FLAGS and check for excluse bits
 396          * (DS_PDC_REQUIRED, DS_KDC_REQUIRED, DS_GC_SERVER_REQUIRED) */
 397
 398         debug_dsdcinfo_flags(10, flags);
 399
 400         if (return_type == (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME)) {
 401                 return false;
 402         }
 403
 404         if (offered_type == (DS_IS_DNS_NAME|DS_IS_FLAT_NAME)) {
 405                 return false;
 406         }
 407
 408         if (query_type == (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY)) {
 409                 return false;
 410         }
 411
 412 #if 0
 413         if ((flags & DS_RETURN_DNS_NAME) && (!(flags & DS_IP_REQUIRED))) {
 414                 printf("gd: here5 \n");
 415                 return false;
 416         }
 417 #endif
 418         return true;
 419 }
 420
 421 /****************************************************************
 422 ****************************************************************/
 423
 424 static NTSTATUS discover_dc_netbios(TALLOC_CTX *mem_ctx,
 425                                     const char *domain_name,
 426                                     uint32_t flags,
 427                                     struct ip_service_name **returned_dclist,
 428                                     int *returned_count)
 429 {
 430         NTSTATUS status;
 431         enum nbt_name_type name_type = NBT_NAME_LOGON;
 432         struct ip_service *iplist;
 433         int i;
 434         struct ip_service_name *dclist = NULL;
 435         int count;
 436
 437         *returned_dclist = NULL;
 438         *returned_count = 0;
 439
 440         if (lp_disable_netbios()) {
 441                 return NT_STATUS_NOT_SUPPORTED;
 442         }
 443
 444         if (flags & DS_PDC_REQUIRED) {
 445                 name_type = NBT_NAME_PDC;
 446         }
 447
 448         status = internal_resolve_name(domain_name, name_type, NULL,
 449                                        &iplist, &count,
 450                                        "lmhosts wins bcast");
 451         if (!NT_STATUS_IS_OK(status)) {
 452                 DEBUG(10,("discover_dc_netbios: failed to find DC\n"));
 453                 return status;
 454         }
 455
 456         dclist = TALLOC_ZERO_ARRAY(mem_ctx, struct ip_service_name, count);
 457         if (!dclist) {
 458                 return NT_STATUS_NO_MEMORY;
 459         }
 460
 461         for (i=0; i<count; i++) {
 462
 463                 char addr[INET6_ADDRSTRLEN];
 464                 struct ip_service_name *r = &dclist[i];
 465
 466                 print_sockaddr(addr, sizeof(addr),
 467                                &iplist[i].ss);
 468
 469                 r->ss   = iplist[i].ss;
 470                 r->port = iplist[i].port;
 471                 r->hostname = talloc_strdup(mem_ctx, addr);
 472                 if (!r->hostname) {
 473                         return NT_STATUS_NO_MEMORY;
 474                 }
 475
 476         }
 477
 478         *returned_dclist = dclist;
 479         *returned_count = count;
 480
 481         return NT_STATUS_OK;
 482 }
 483
 484 /****************************************************************
 485 ****************************************************************/
 486
 487 static NTSTATUS discover_dc_dns(TALLOC_CTX *mem_ctx,
 488                                 const char *domain_name,
 489                                 struct GUID *domain_guid,
 490                                 uint32_t flags,
 491                                 const char *site_name,
 492                                 struct ip_service_name **returned_dclist,
 493                                 int *return_count)
 494 {
 495         int i, j;
 496         NTSTATUS status;
 497         struct dns_rr_srv *dcs = NULL;
 498         int numdcs = 0;
 499         int numaddrs = 0;
 500         struct ip_service_name *dclist = NULL;
 501         int count = 0;
 502
 503         if (flags & DS_PDC_REQUIRED) {
 504                 status = ads_dns_query_pdc(mem_ctx, domain_name,
 505                                            &dcs, &numdcs);
 506         } else if (flags & DS_GC_SERVER_REQUIRED) {
 507                 status = ads_dns_query_gcs(mem_ctx, domain_name, site_name,
 508                                            &dcs, &numdcs);
 509         } else if (flags & DS_KDC_REQUIRED) {
 510                 status = ads_dns_query_kdcs(mem_ctx, domain_name, site_name,
 511                                             &dcs, &numdcs);
 512         } else if (flags & DS_DIRECTORY_SERVICE_REQUIRED) {
 513                 status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
 514                                            &dcs, &numdcs);
 515         } else if (domain_guid) {
 516                 status = ads_dns_query_dcs_guid(mem_ctx, domain_name,
 517                                                 domain_guid, &dcs, &numdcs);
 518         } else {
 519                 status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
 520                                            &dcs, &numdcs);
 521         }
 522
 523         if (!NT_STATUS_IS_OK(status)) {
 524                 return status;
 525         }
 526
 527         if (numdcs == 0) {
 528                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 529         }
 530
 531         for (i=0;i<numdcs;i++) {
 532                 numaddrs += MAX(dcs[i].num_ips,1);
 533         }
 534
 535         dclist = TALLOC_ZERO_ARRAY(mem_ctx,
 536                                    struct ip_service_name,
 537                                    numaddrs);
 538         if (!dclist) {
 539                 return NT_STATUS_NO_MEMORY;
 540         }
 541
 542         /* now unroll the list of IP addresses */
 543
 544         *return_count = 0;
 545         i = 0;
 546         j = 0;
 547
 548         while ((i < numdcs) && (count < numaddrs)) {
 549
 550                 struct ip_service_name *r = &dclist[count];
 551
 552                 r->port = dcs[count].port;
 553                 r->hostname = dcs[count].hostname;
 554
 555                 if (!(flags & DS_IP_REQUIRED)) {
 556                         count++;
 557                         continue;
 558                 }
 559
 560                 /* If we don't have an IP list for a name, lookup it up */
 561
 562                 if (!dcs[i].ss_s) {
 563                         interpret_string_addr(&r->ss, dcs[i].hostname, 0);
 564                         i++;
 565                         j = 0;
 566                 } else {
 567                         /* use the IP addresses from the SRV sresponse */
 568
 569                         if (j >= dcs[i].num_ips) {
 570                                 i++;
 571                                 j = 0;
 572                                 continue;
 573                         }
 574
 575                         r->ss = dcs[i].ss_s[j];
 576                         j++;
 577                 }
 578
 579                 /* make sure it is a valid IP.  I considered checking the
 580                  * negative connection cache, but this is the wrong place for
 581                  * it.  Maybe only as a hac.  After think about it, if all of
 582                  * the IP addresses retuend from DNS are dead, what hope does a
 583                  * netbios name lookup have?  The standard reason for falling
 584                  * back to netbios lookups is that our DNS server doesn't know
 585                  * anything about the DC's   -- jerry */
 586
 587                 if (!is_zero_addr(&r->ss)) {
 588                         count++;
 589                         continue;
 590                 }
 591         }
 592
 593         *returned_dclist = dclist;
 594         *return_count = count;
 595
 596         if (count > 0) {
 597                 return NT_STATUS_OK;
 598         }
 599
 600         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 601 }
 602
 603 /****************************************************************
 604 ****************************************************************/
 605
 606 static NTSTATUS make_domain_controller_info(TALLOC_CTX *mem_ctx,
 607                                             const char *dc_unc,
 608                                             const char *dc_address,
 609                                             uint32_t dc_address_type,
 610                                             const struct GUID *domain_guid,
 611                                             const char *domain_name,
 612                                             const char *forest_name,
 613                                             uint32_t flags,
 614                                             const char *dc_site_name,
 615                                             const char *client_site_name,
 616                                             struct netr_DsRGetDCNameInfo **info_out)
 617 {
 618         struct netr_DsRGetDCNameInfo *info;
 619
 620         info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
 621         NT_STATUS_HAVE_NO_MEMORY(info);
 622
 623         if (dc_unc) {
 624                 info->dc_unc = talloc_strdup(mem_ctx, dc_unc);
 625                 NT_STATUS_HAVE_NO_MEMORY(info->dc_unc);
 626         }
 627
 628         if (dc_address) {
 629                 info->dc_address = talloc_strdup(mem_ctx, dc_address);
 630                 NT_STATUS_HAVE_NO_MEMORY(info->dc_address);
 631         }
 632
 633         info->dc_address_type = dc_address_type;
 634
 635         if (domain_guid) {
 636                 info->domain_guid = *domain_guid;
 637         }
 638
 639         if (domain_name) {
 640                 info->domain_name = talloc_strdup(mem_ctx, domain_name);
 641                 NT_STATUS_HAVE_NO_MEMORY(info->domain_name);
 642         }
 643
 644         if (forest_name) {
 645                 info->forest_name = talloc_strdup(mem_ctx, forest_name);
 646                 NT_STATUS_HAVE_NO_MEMORY(info->forest_name);
 647                 flags |= DS_DNS_FOREST;
 648         }
 649
 650         info->dc_flags = flags;
 651
 652         if (dc_site_name) {
 653                 info->dc_site_name = talloc_strdup(mem_ctx, dc_site_name);
 654                 NT_STATUS_HAVE_NO_MEMORY(info->dc_site_name);
 655         }
 656
 657         if (client_site_name) {
 658                 info->client_site_name = talloc_strdup(mem_ctx,
 659                                                        client_site_name);
 660                 NT_STATUS_HAVE_NO_MEMORY(info->client_site_name);
 661         }
 662
 663         *info_out = info;
 664
 665         return NT_STATUS_OK;
 666 }
 667
 668 /****************************************************************
 669 ****************************************************************/
 670
 671 static NTSTATUS make_dc_info_from_cldap_reply(TALLOC_CTX *mem_ctx,
 672                                               uint32_t flags,
 673                                               struct sockaddr_storage *ss,
 674                                               uint32_t nt_version,
 675                                               union nbt_cldap_netlogon *r,
 676                                               struct netr_DsRGetDCNameInfo **info)
 677 {
 678         const char *dc_hostname, *dc_domain_name;
 679         const char *dc_address = NULL;
 680         const char *dc_forest = NULL;
 681         uint32_t dc_address_type = 0;
 682         uint32_t dc_flags = 0;
 683         struct GUID *dc_domain_guid = NULL;
 684         const char *dc_server_site = NULL;
 685         const char *dc_client_site = NULL;
 686
 687         char addr[INET6_ADDRSTRLEN];
 688
 689         print_sockaddr(addr, sizeof(addr), ss);
 690
 691         dc_address = talloc_asprintf(mem_ctx, "\\\\%s", addr);
 692         NT_STATUS_HAVE_NO_MEMORY(dc_address);
 693         dc_address_type = DS_ADDRESS_TYPE_INET;
 694
 695         switch (nt_version & 0x000000ff) {
 696                 case 0:
 697                         return NT_STATUS_INVALID_PARAMETER;
 698                 case 1:
 699                         dc_hostname     = r->logon1.pdc_name;
 700                         dc_domain_name  = r->logon1.domain_name;
 701                         if (flags & DS_PDC_REQUIRED) {
 702                                 dc_flags = NBT_SERVER_WRITABLE | NBT_SERVER_PDC;
 703                         }
 704                         break;
 705                 case 2:
 706                 case 3:
 707                         switch (flags & 0xf0000000) {
 708                                 case DS_RETURN_FLAT_NAME:
 709                                         dc_hostname     = r->logon3.pdc_name;
 710                                         dc_domain_name  = r->logon3.domain_name;
 711                                         break;
 712                                 case DS_RETURN_DNS_NAME:
 713                                 default:
 714                                         dc_hostname     = r->logon3.pdc_dns_name;
 715                                         dc_domain_name  = r->logon3.dns_domain;
 716                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 717                                         break;
 718                         }
 719
 720                         dc_flags        |= r->logon3.server_type;
 721                         dc_forest       = r->logon3.forest;
 722                         dc_domain_guid  = &r->logon3.domain_uuid;
 723
 724                         break;
 725                 case 4:
 726                 case 5:
 727                 case 6:
 728                 case 7:
 729                         switch (flags & 0xf0000000) {
 730                                 case DS_RETURN_FLAT_NAME:
 731                                         dc_hostname     = r->logon5.pdc_name;
 732                                         dc_domain_name  = r->logon5.domain;
 733                                         break;
 734                                 case DS_RETURN_DNS_NAME:
 735                                 default:
 736                                         dc_hostname     = r->logon5.pdc_dns_name;
 737                                         dc_domain_name  = r->logon5.dns_domain;
 738                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 739                                         break;
 740                         }
 741
 742                         dc_flags        |= r->logon5.server_type;
 743                         dc_forest       = r->logon5.forest;
 744                         dc_domain_guid  = &r->logon5.domain_uuid;
 745                         dc_server_site  = r->logon5.server_site;
 746                         dc_client_site  = r->logon5.client_site;
 747
 748                         break;
 749                 case 8:
 750                 case 9:
 751                 case 10:
 752                 case 11:
 753                 case 12:
 754                 case 13:
 755                 case 14:
 756                 case 15:
 757                         switch (flags & 0xf0000000) {
 758                                 case DS_RETURN_FLAT_NAME:
 759                                         dc_hostname     = r->logon13.pdc_name;
 760                                         dc_domain_name  = r->logon13.domain;
 761                                         break;
 762                                 case DS_RETURN_DNS_NAME:
 763                                 default:
 764                                         dc_hostname     = r->logon13.pdc_dns_name;
 765                                         dc_domain_name  = r->logon13.dns_domain;
 766                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 767                                         break;
 768                         }
 769
 770                         dc_flags        |= r->logon13.server_type;
 771                         dc_forest       = r->logon13.forest;
 772                         dc_domain_guid  = &r->logon13.domain_uuid;
 773                         dc_server_site  = r->logon13.server_site;
 774                         dc_client_site  = r->logon13.client_site;
 775
 776                         break;
 777                 default:
 778                         switch (flags & 0xf0000000) {
 779                                 case DS_RETURN_FLAT_NAME:
 780                                         dc_hostname     = r->logon29.pdc_name;
 781                                         dc_domain_name  = r->logon29.domain;
 782                                         break;
 783                                 case DS_RETURN_DNS_NAME:
 784                                 default:
 785                                         dc_hostname     = r->logon29.pdc_dns_name;
 786                                         dc_domain_name  = r->logon29.dns_domain;
 787                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 788                                         break;
 789                         }
 790
 791                         dc_flags        |= r->logon29.server_type;
 792                         dc_forest       = r->logon29.forest;
 793                         dc_domain_guid  = &r->logon29.domain_uuid;
 794                         dc_server_site  = r->logon29.server_site;
 795                         dc_client_site  = r->logon29.client_site;
 796
 797                         break;
 798         }
 799
 800         return make_domain_controller_info(mem_ctx,
 801                                            dc_hostname,
 802                                            dc_address,
 803                                            dc_address_type,
 804                                            dc_domain_guid,
 805                                            dc_domain_name,
 806                                            dc_forest,
 807                                            dc_flags,
 808                                            dc_server_site,
 809                                            dc_client_site,
 810                                            info);
 811 }
 812
 813 /****************************************************************
 814 ****************************************************************/
 815
 816 static uint32_t map_ds_flags_to_nt_version(uint32_t flags)
 817 {
 818         uint32_t nt_version = 0;
 819
 820         if (flags & DS_PDC_REQUIRED) {
 821                 nt_version |= NETLOGON_VERSION_PDC;
 822         }
 823
 824         if (flags & DS_GC_SERVER_REQUIRED) {
 825                 nt_version |= NETLOGON_VERSION_GC;
 826         }
 827
 828         if (flags & DS_TRY_NEXTCLOSEST_SITE) {
 829                 nt_version |= NETLOGON_VERSION_WITH_CLOSEST_SITE;
 830         }
 831
 832         if (flags & DS_IP_REQUIRED) {
 833                 nt_version |= NETLOGON_VERSION_IP;
 834         }
 835
 836         return nt_version;
 837 }
 838
 839 /****************************************************************
 840 ****************************************************************/
 841
 842 static NTSTATUS process_dc_dns(TALLOC_CTX *mem_ctx,
 843                                const char *domain_name,
 844                                uint32_t flags,
 845                                struct ip_service_name *dclist,
 846                                int num_dcs,
 847                                struct netr_DsRGetDCNameInfo **info)
 848 {
 849         int i = 0;
 850         bool valid_dc = false;
 851         union nbt_cldap_netlogon *r = NULL;
 852         uint32_t nt_version = NETLOGON_VERSION_5 |
 853                               NETLOGON_VERSION_5EX;
 854         uint32_t ret_flags = 0;
 855
 856         for (i=0; i<num_dcs; i++) {
 857
 858                 DEBUG(10,("LDAP ping to %s\n", dclist[i].hostname));
 859
 860                 if (ads_cldap_netlogon(mem_ctx, dclist[i].hostname,
 861                                         domain_name,
 862                                         &nt_version,
 863                                         &r))
 864                 {
 865                         ret_flags = get_cldap_reply_server_flags(r, nt_version);
 866
 867                         if (check_cldap_reply_required_flags(ret_flags, flags)) {
 868                                 valid_dc = true;
 869                                 break;
 870                         }
 871                 }
 872
 873                 continue;
 874         }
 875
 876         if (!valid_dc) {
 877                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 878         }
 879
 880         return make_dc_info_from_cldap_reply(mem_ctx, flags, &dclist[i].ss,
 881                                              nt_version, r, info);
 882 }
 883
 884 /****************************************************************
 885 ****************************************************************/
 886
 887 static struct event_context *ev_context(void)
 888 {
 889         static struct event_context *ctx;
 890
 891         if (!ctx && !(ctx = event_context_init(NULL))) {
 892                 smb_panic("Could not init event context");
 893         }
 894         return ctx;
 895 }
 896
 897 /****************************************************************
 898 ****************************************************************/
 899
 900 static struct messaging_context *msg_context(TALLOC_CTX *mem_ctx)
 901 {
 902         static struct messaging_context *ctx;
 903
 904         if (!ctx && !(ctx = messaging_init(mem_ctx, server_id_self(),
 905                                            ev_context()))) {
 906                 smb_panic("Could not init messaging context");
 907         }
 908         return ctx;
 909 }
 910
 911 /****************************************************************
 912 ****************************************************************/
 913
 914 static NTSTATUS process_dc_netbios(TALLOC_CTX *mem_ctx,
 915                                    const char *domain_name,
 916                                    uint32_t flags,
 917                                    struct ip_service_name *dclist,
 918                                    int num_dcs,
 919                                    struct netr_DsRGetDCNameInfo **info)
 920 {
 921         struct sockaddr_storage ss;
 922         struct ip_service ip_list;
 923         enum nbt_name_type name_type = NBT_NAME_LOGON;
 924
 925         int i;
 926         const char *dc_hostname, *dc_domain_name;
 927         const char *dc_address;
 928         uint32_t dc_address_type;
 929         uint32_t dc_flags = 0;
 930         const char *dc_name = NULL;
 931         const char *dc_forest = NULL;
 932         const char *dc_server_site = NULL;
 933         const char *dc_client_site = NULL;
 934         struct GUID *dc_domain_guid = NULL;
 935         fstring tmp_dc_name;
 936         struct messaging_context *msg_ctx = msg_context(mem_ctx);
 937         struct nbt_ntlogon_packet *reply = NULL;
 938         uint32_t nt_version = NETLOGON_VERSION_1 |
 939                               NETLOGON_VERSION_5 |
 940                               NETLOGON_VERSION_5EX_WITH_IP;
 941
 942         if (flags & DS_PDC_REQUIRED) {
 943                 name_type = NBT_NAME_PDC;
 944         }
 945
 946         nt_version |= map_ds_flags_to_nt_version(flags);
 947
 948         DEBUG(10,("process_dc_netbios\n"));
 949
 950         for (i=0; i<num_dcs; i++) {
 951
 952                 ip_list.ss = dclist[i].ss;
 953                 ip_list.port = 0;
 954
 955                 if (!interpret_string_addr(&ss, dclist[i].hostname, AI_NUMERICHOST)) {
 956                         return NT_STATUS_UNSUCCESSFUL;
 957                 }
 958
 959                 if (send_getdc_request(mem_ctx, msg_ctx,
 960                                        &dclist[i].ss, domain_name,
 961                                        NULL, nt_version))
 962                 {
 963                         int k;
 964                         smb_msleep(100);
 965                         for (k=0; k<5; k++) {
 966                                 if (receive_getdc_response(mem_ctx,
 967                                                            &dclist[i].ss,
 968                                                            domain_name,
 969                                                            &dc_name,
 970                                                            &reply)) {
 971                                         namecache_store(dc_name, NBT_NAME_SERVER, 1, &ip_list);
 972                                         dc_hostname = dc_name;
 973                                         dc_domain_name = talloc_strdup_upper(mem_ctx, domain_name);
 974                                         NT_STATUS_HAVE_NO_MEMORY(dc_domain_name);
 975                                         goto make_reply;
 976                                 }
 977                                 smb_msleep(500);
 978                         }
 979                 }
 980
 981                 if (name_status_find(domain_name,
 982                                      name_type,
 983                                      NBT_NAME_SERVER,
 984                                      &dclist[i].ss,
 985                                      tmp_dc_name))
 986                 {
 987                         dc_hostname = tmp_dc_name;
 988                         dc_domain_name = talloc_strdup_upper(mem_ctx, domain_name);
 989                         namecache_store(tmp_dc_name, NBT_NAME_SERVER, 1, &ip_list);
 990                         goto make_reply;
 991                 }
 992         }
 993
 994         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 995
 996  make_reply:
 997
 998         if (reply && reply->command == NTLOGON_RESPONSE_FROM_PDC2) {
 999
1000                 dc_flags |= reply->req.reply2.server_type;
1001                 dc_forest = reply->req.reply2.forest;
1002                 dc_server_site = reply->req.reply2.server_site;
1003                 dc_client_site = reply->req.reply2.client_site;
1004
1005                 dc_domain_guid = &reply->req.reply2.domain_uuid;
1006
1007                 if (flags & DS_RETURN_DNS_NAME) {
1008                         dc_domain_name = reply->req.reply2.dns_domain;
1009                         dc_hostname = reply->req.reply2.pdc_dns_name;
1010                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
1011                 } else if (flags & DS_RETURN_FLAT_NAME) {
1012                         dc_domain_name = reply->req.reply2.domain;
1013                         dc_hostname = reply->req.reply2.pdc_name;
1014                 }
1015         }
1016
1017         if (flags & DS_IP_REQUIRED) {
1018                 char addr[INET6_ADDRSTRLEN];
1019                 print_sockaddr(addr, sizeof(addr), &dclist[i].ss);
1020                 dc_address = talloc_asprintf(mem_ctx, "\\\\%s", addr);
1021                 dc_address_type = DS_ADDRESS_TYPE_INET;
1022         } else {
1023                 dc_address = talloc_asprintf(mem_ctx, "\\\\%s", dc_hostname);
1024                 dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
1025         }
1026
1027         if (flags & DS_PDC_REQUIRED) {
1028                 dc_flags |= NBT_SERVER_PDC | NBT_SERVER_WRITABLE;
1029         }
1030
1031         if (dc_forest) {
1032                 dc_flags |= DS_DNS_FOREST;
1033         }
1034
1035         return make_domain_controller_info(mem_ctx,
1036                                            dc_hostname,
1037                                            dc_address,
1038                                            dc_address_type,
1039                                            dc_domain_guid,
1040                                            dc_domain_name,
1041                                            dc_forest,
1042                                            dc_flags,
1043                                            dc_server_site,
1044                                            dc_client_site,
1045                                            info);
1046 }
1047
1048 /****************************************************************
1049 ****************************************************************/
1050
1051 static NTSTATUS dsgetdcname_rediscover(TALLOC_CTX *mem_ctx,
1052                                        const char *domain_name,
1053                                        struct GUID *domain_guid,
1054                                        uint32_t flags,
1055                                        const char *site_name,
1056                                        struct netr_DsRGetDCNameInfo **info)
1057 {
1058         NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1059         struct ip_service_name *dclist = NULL;
1060         int num_dcs;
1061
1062         DEBUG(10,("dsgetdcname_rediscover\n"));
1063
1064         if (flags & DS_IS_FLAT_NAME) {
1065
1066                 status = discover_dc_netbios(mem_ctx, domain_name, flags,
1067                                              &dclist, &num_dcs);
1068                 NT_STATUS_NOT_OK_RETURN(status);
1069
1070                 return process_dc_netbios(mem_ctx, domain_name, flags,
1071                                           dclist, num_dcs, info);
1072         }
1073
1074         if (flags & DS_IS_DNS_NAME) {
1075
1076                 status = discover_dc_dns(mem_ctx, domain_name, domain_guid,
1077                                          flags, site_name, &dclist, &num_dcs);
1078                 NT_STATUS_NOT_OK_RETURN(status);
1079
1080                 return process_dc_dns(mem_ctx, domain_name, flags,
1081                                       dclist, num_dcs, info);
1082         }
1083
1084         status = discover_dc_dns(mem_ctx, domain_name, domain_guid, flags,
1085                                  site_name, &dclist, &num_dcs);
1086
1087         if (NT_STATUS_IS_OK(status) && num_dcs != 0) {
1088
1089                 status = process_dc_dns(mem_ctx, domain_name, flags, dclist,
1090                                         num_dcs, info);
1091                 if (NT_STATUS_IS_OK(status)) {
1092                         return status;
1093                 }
1094         }
1095
1096         status = discover_dc_netbios(mem_ctx, domain_name, flags, &dclist,
1097                                      &num_dcs);
1098         NT_STATUS_NOT_OK_RETURN(status);
1099
1100         return process_dc_netbios(mem_ctx, domain_name, flags, dclist,
1101                                   num_dcs, info);
1102 }
1103
1104 /********************************************************************
1105  dsgetdcname.
1106
1107  This will be the only public function here.
1108 ********************************************************************/
1109
1110 NTSTATUS dsgetdcname(TALLOC_CTX *mem_ctx,
1111                      const char *domain_name,
1112                      struct GUID *domain_guid,
1113                      const char *site_name,
1114                      uint32_t flags,
1115                      struct netr_DsRGetDCNameInfo **info)
1116 {
1117         NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1118         struct netr_DsRGetDCNameInfo *myinfo = NULL;
1119
1120         DEBUG(10,("dsgetdcname: domain_name: %s, "
1121                   "domain_guid: %s, site_name: %s, flags: 0x%08x\n",
1122                   domain_name,
1123                   domain_guid ? GUID_string(mem_ctx, domain_guid) : "(null)",
1124                   site_name, flags));
1125
1126         *info = NULL;
1127
1128         if (!check_allowed_required_flags(flags)) {
1129                 DEBUG(0,("invalid flags specified\n"));
1130                 return NT_STATUS_INVALID_PARAMETER;
1131         }
1132
1133         if (flags & DS_FORCE_REDISCOVERY) {
1134                 goto rediscover;
1135         }
1136
1137         status = dsgetdcname_cached(mem_ctx, domain_name, domain_guid,
1138                                     flags, site_name, &myinfo);
1139         if (NT_STATUS_IS_OK(status)) {
1140                 *info = myinfo;
1141                 return status;
1142         }
1143
1144         if (flags & DS_BACKGROUND_ONLY) {
1145                 return status;
1146         }
1147
1148  rediscover:
1149         status = dsgetdcname_rediscover(mem_ctx, domain_name,
1150                                         domain_guid, flags, site_name,
1151                                         &myinfo);
1152
1153         if (NT_STATUS_IS_OK(status)) {
1154                 dsgetdcname_cache_store(mem_ctx, domain_name, myinfo);
1155                 *info = myinfo;
1156         }
1157
1158         return status;
1159 }
1160
1161 /****************************************************************
1162 ****************************************************************/
1163
1164 bool pull_mailslot_cldap_reply(TALLOC_CTX *mem_ctx,
1165                                const DATA_BLOB *blob,
1166                                union nbt_cldap_netlogon *r,
1167                                uint32_t *nt_version)
1168 {
1169         enum ndr_err_code ndr_err;
1170         uint32_t nt_version_query = ((*nt_version) & 0x000000ff);
1171         uint16_t command = 0;
1172
1173         ndr_err = ndr_pull_struct_blob(blob, mem_ctx, &command,
1174                         (ndr_pull_flags_fn_t)ndr_pull_uint16);
1175         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1176                 return false;
1177         }
1178
1179         switch (command) {
1180                 case 0x13: /* 19 */
1181                 case 0x15: /* 21 */
1182                 case 0x17: /* 23 */
1183                          break;
1184                 default:
1185                         DEBUG(1,("got unexpected command: %d (0x%08x)\n",
1186                                 command, command));
1187                         return false;
1188         }
1189
1190         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1191                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1192         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1193                 goto done;
1194         }
1195
1196         /* when the caller requested just those nt_version bits that the server
1197          * was able to reply to, we are fine and all done. otherwise we need to
1198          * assume downgraded replies which are painfully parsed here - gd */
1199
1200         if (nt_version_query & NETLOGON_VERSION_WITH_CLOSEST_SITE) {
1201                 nt_version_query &= ~NETLOGON_VERSION_WITH_CLOSEST_SITE;
1202         }
1203         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1204                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1205         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1206                 goto done;
1207         }
1208         if (nt_version_query & NETLOGON_VERSION_5EX_WITH_IP) {
1209                 nt_version_query &= ~NETLOGON_VERSION_5EX_WITH_IP;
1210         }
1211         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1212                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1213         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1214                 goto done;
1215         }
1216         if (nt_version_query & NETLOGON_VERSION_5EX) {
1217                 nt_version_query &= ~NETLOGON_VERSION_5EX;
1218         }
1219         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1220                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1221         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1222                 goto done;
1223         }
1224         if (nt_version_query & NETLOGON_VERSION_5) {
1225                 nt_version_query &= ~NETLOGON_VERSION_5;
1226         }
1227         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1228                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1229         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1230                 goto done;
1231         }
1232
1233         return false;
1234
1235  done:
1236         if (DEBUGLEVEL >= 10) {
1237                 NDR_PRINT_UNION_DEBUG(nbt_cldap_netlogon, nt_version_query, r);
1238         }
1239
1240         *nt_version = nt_version_query;
1241
1242         return true;
1243 }