source3/libsmb/dsgetdcname.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3
   4    dsgetdcname
   5
   6    Copyright (C) Gerald Carter 2006
   7    Copyright (C) Guenther Deschner 2007-2008
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #include "includes.h"
  24
  25 #define DSGETDCNAME_FMT "DSGETDCNAME/DOMAIN/%s"
  26 /* 15 minutes */
  27 #define DSGETDCNAME_CACHE_TTL   60*15
  28
  29 struct ip_service_name {
  30         struct sockaddr_storage ss;
  31         unsigned port;
  32         const char *hostname;
  33 };
  34
  35 /****************************************************************
  36 ****************************************************************/
  37
  38 void debug_dsdcinfo_flags(int lvl, uint32_t flags)
  39 {
  40         DEBUG(lvl,("debug_dsdcinfo_flags: 0x%08x\n\t", flags));
  41
  42         if (flags & DS_FORCE_REDISCOVERY)
  43                 DEBUGADD(lvl,("DS_FORCE_REDISCOVERY "));
  44         if (flags & 0x000000002)
  45                 DEBUGADD(lvl,("0x00000002 "));
  46         if (flags & 0x000000004)
  47                 DEBUGADD(lvl,("0x00000004 "));
  48         if (flags & 0x000000008)
  49                 DEBUGADD(lvl,("0x00000008 "));
  50         if (flags & DS_DIRECTORY_SERVICE_REQUIRED)
  51                 DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_REQUIRED "));
  52         if (flags & DS_DIRECTORY_SERVICE_PREFERRED)
  53                 DEBUGADD(lvl,("DS_DIRECTORY_SERVICE_PREFERRED "));
  54         if (flags & DS_GC_SERVER_REQUIRED)
  55                 DEBUGADD(lvl,("DS_GC_SERVER_REQUIRED "));
  56         if (flags & DS_PDC_REQUIRED)
  57                 DEBUGADD(lvl,("DS_PDC_REQUIRED "));
  58         if (flags & DS_BACKGROUND_ONLY)
  59                 DEBUGADD(lvl,("DS_BACKGROUND_ONLY "));
  60         if (flags & DS_IP_REQUIRED)
  61                 DEBUGADD(lvl,("DS_IP_REQUIRED "));
  62         if (flags & DS_KDC_REQUIRED)
  63                 DEBUGADD(lvl,("DS_KDC_REQUIRED "));
  64         if (flags & DS_TIMESERV_REQUIRED)
  65                 DEBUGADD(lvl,("DS_TIMESERV_REQUIRED "));
  66         if (flags & DS_WRITABLE_REQUIRED)
  67                 DEBUGADD(lvl,("DS_WRITABLE_REQUIRED "));
  68         if (flags & DS_GOOD_TIMESERV_PREFERRED)
  69                 DEBUGADD(lvl,("DS_GOOD_TIMESERV_PREFERRED "));
  70         if (flags & DS_AVOID_SELF)
  71                 DEBUGADD(lvl,("DS_AVOID_SELF "));
  72         if (flags & DS_ONLY_LDAP_NEEDED)
  73                 DEBUGADD(lvl,("DS_ONLY_LDAP_NEEDED "));
  74         if (flags & DS_IS_FLAT_NAME)
  75                 DEBUGADD(lvl,("DS_IS_FLAT_NAME "));
  76         if (flags & DS_IS_DNS_NAME)
  77                 DEBUGADD(lvl,("DS_IS_DNS_NAME "));
  78         if (flags & 0x00040000)
  79                 DEBUGADD(lvl,("0x00040000 "));
  80         if (flags & 0x00080000)
  81                 DEBUGADD(lvl,("0x00080000 "));
  82         if (flags & 0x00100000)
  83                 DEBUGADD(lvl,("0x00100000 "));
  84         if (flags & 0x00200000)
  85                 DEBUGADD(lvl,("0x00200000 "));
  86         if (flags & 0x00400000)
  87                 DEBUGADD(lvl,("0x00400000 "));
  88         if (flags & 0x00800000)
  89                 DEBUGADD(lvl,("0x00800000 "));
  90         if (flags & 0x01000000)
  91                 DEBUGADD(lvl,("0x01000000 "));
  92         if (flags & 0x02000000)
  93                 DEBUGADD(lvl,("0x02000000 "));
  94         if (flags & 0x04000000)
  95                 DEBUGADD(lvl,("0x04000000 "));
  96         if (flags & 0x08000000)
  97                 DEBUGADD(lvl,("0x08000000 "));
  98         if (flags & 0x10000000)
  99                 DEBUGADD(lvl,("0x10000000 "));
 100         if (flags & 0x20000000)
 101                 DEBUGADD(lvl,("0x20000000 "));
 102         if (flags & DS_RETURN_DNS_NAME)
 103                 DEBUGADD(lvl,("DS_RETURN_DNS_NAME "));
 104         if (flags & DS_RETURN_FLAT_NAME)
 105                 DEBUGADD(lvl,("DS_RETURN_FLAT_NAME "));
 106         if (flags)
 107                 DEBUGADD(lvl,("\n"));
 108 }
 109
 110 /****************************************************************
 111 ****************************************************************/
 112
 113 static char *dsgetdcname_cache_key(TALLOC_CTX *mem_ctx, const char *domain)
 114 {
 115         if (!mem_ctx || !domain) {
 116                 return NULL;
 117         }
 118
 119         return talloc_asprintf_strupper_m(mem_ctx, DSGETDCNAME_FMT, domain);
 120 }
 121
 122 /****************************************************************
 123 ****************************************************************/
 124
 125 static NTSTATUS dsgetdcname_cache_delete(TALLOC_CTX *mem_ctx,
 126                                         const char *domain_name)
 127 {
 128         char *key;
 129
 130         if (!gencache_init()) {
 131                 return NT_STATUS_INTERNAL_DB_ERROR;
 132         }
 133
 134         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 135         if (!key) {
 136                 return NT_STATUS_NO_MEMORY;
 137         }
 138
 139         if (!gencache_del(key)) {
 140                 return NT_STATUS_UNSUCCESSFUL;
 141         }
 142
 143         return NT_STATUS_OK;
 144 }
 145
 146 /****************************************************************
 147 ****************************************************************/
 148
 149 static NTSTATUS dsgetdcname_cache_store(TALLOC_CTX *mem_ctx,
 150                                         const char *domain_name,
 151                                         struct netr_DsRGetDCNameInfo *info)
 152 {
 153         time_t expire_time;
 154         char *key;
 155         bool ret = false;
 156         DATA_BLOB blob;
 157         enum ndr_err_code ndr_err;
 158
 159         if (!gencache_init()) {
 160                 return NT_STATUS_INTERNAL_DB_ERROR;
 161         }
 162
 163         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 164         if (!key) {
 165                 return NT_STATUS_NO_MEMORY;
 166         }
 167
 168         expire_time = time(NULL) + DSGETDCNAME_CACHE_TTL;
 169
 170         ndr_err = ndr_push_struct_blob(&blob, mem_ctx, info,
 171                        (ndr_push_flags_fn_t)ndr_push_netr_DsRGetDCNameInfo);
 172         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 173                 return ndr_map_error2ntstatus(ndr_err);
 174         }
 175
 176         if (gencache_lock_entry(key) != 0) {
 177                 data_blob_free(&blob);
 178                 return NT_STATUS_LOCK_NOT_GRANTED;
 179         }
 180
 181         ret = gencache_set_data_blob(key, &blob, expire_time);
 182         data_blob_free(&blob);
 183
 184         gencache_unlock_entry(key);
 185
 186         return ret ? NT_STATUS_OK : NT_STATUS_UNSUCCESSFUL;
 187 }
 188
 189 /****************************************************************
 190 ****************************************************************/
 191
 192 static NTSTATUS dsgetdcname_cache_refresh(TALLOC_CTX *mem_ctx,
 193                                           const char *domain_name,
 194                                           struct GUID *domain_guid,
 195                                           uint32_t flags,
 196                                           const char *site_name,
 197                                           struct netr_DsRGetDCNameInfo *info)
 198 {
 199         struct netr_DsRGetDCNameInfo *dc_info;
 200
 201         return dsgetdcname(mem_ctx,
 202                            domain_name,
 203                            domain_guid,
 204                            site_name,
 205                            flags | DS_FORCE_REDISCOVERY,
 206                            &dc_info);
 207 }
 208
 209 /****************************************************************
 210 ****************************************************************/
 211
 212 static uint32_t get_cldap_reply_server_flags(union nbt_cldap_netlogon *r,
 213                                              uint32_t nt_version)
 214 {
 215         switch (nt_version & 0x000000ff) {
 216                 case 0:
 217                 case 1:
 218                         return 0;
 219                 case 2:
 220                 case 3:
 221                         return r->logon3.server_type;
 222                 case 4:
 223                 case 5:
 224                 case 6:
 225                 case 7:
 226                         return r->logon5.server_type;
 227                 case 8:
 228                 case 9:
 229                 case 10:
 230                 case 11:
 231                 case 12:
 232                 case 13:
 233                 case 14:
 234                 case 15:
 235                         return r->logon13.server_type;
 236                 default:
 237                         return r->logon29.server_type;
 238         }
 239 }
 240
 241 /****************************************************************
 242 ****************************************************************/
 243
 244 #define RETURN_ON_FALSE(x) if (!x) return false;
 245
 246 static bool check_cldap_reply_required_flags(uint32_t ret_flags,
 247                                              uint32_t req_flags)
 248 {
 249         if (ret_flags == 0) {
 250                 return true;
 251         }
 252
 253         if (req_flags & DS_PDC_REQUIRED)
 254                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_PDC);
 255
 256         if (req_flags & DS_GC_SERVER_REQUIRED)
 257                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_GC);
 258
 259         if (req_flags & DS_ONLY_LDAP_NEEDED)
 260                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_LDAP);
 261
 262         if ((req_flags & DS_DIRECTORY_SERVICE_REQUIRED) ||
 263             (req_flags & DS_DIRECTORY_SERVICE_PREFERRED))
 264                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_DS);
 265
 266         if (req_flags & DS_KDC_REQUIRED)
 267                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_KDC);
 268
 269         if (req_flags & DS_TIMESERV_REQUIRED)
 270                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_TIMESERV);
 271
 272         if (req_flags & DS_WRITABLE_REQUIRED)
 273                 RETURN_ON_FALSE(ret_flags & NBT_SERVER_WRITABLE);
 274
 275         return true;
 276 }
 277
 278 /****************************************************************
 279 ****************************************************************/
 280
 281 static NTSTATUS dsgetdcname_cache_fetch(TALLOC_CTX *mem_ctx,
 282                                         const char *domain_name,
 283                                         struct GUID *domain_guid,
 284                                         uint32_t flags,
 285                                         const char *site_name,
 286                                         struct netr_DsRGetDCNameInfo **info_p,
 287                                         bool *expired)
 288 {
 289         char *key;
 290         DATA_BLOB blob;
 291         enum ndr_err_code ndr_err;
 292         struct netr_DsRGetDCNameInfo *info;
 293
 294         if (!gencache_init()) {
 295                 return NT_STATUS_INTERNAL_DB_ERROR;
 296         }
 297
 298         key = dsgetdcname_cache_key(mem_ctx, domain_name);
 299         if (!key) {
 300                 return NT_STATUS_NO_MEMORY;
 301         }
 302
 303         if (!gencache_get_data_blob(key, &blob, expired)) {
 304                 return NT_STATUS_OBJECT_NAME_NOT_FOUND;
 305         }
 306
 307         info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
 308         if (!info) {
 309                 return NT_STATUS_NO_MEMORY;
 310         }
 311
 312         ndr_err = ndr_pull_struct_blob(&blob, mem_ctx, info,
 313                       (ndr_pull_flags_fn_t)ndr_pull_netr_DsRGetDCNameInfo);
 314
 315         data_blob_free(&blob);
 316         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
 317                 dsgetdcname_cache_delete(mem_ctx, domain_name);
 318                 return ndr_map_error2ntstatus(ndr_err);
 319         }
 320
 321         if (DEBUGLEVEL >= 10) {
 322                 NDR_PRINT_DEBUG(netr_DsRGetDCNameInfo, info);
 323         }
 324
 325         /* check flags */
 326         if (!check_cldap_reply_required_flags(info->dc_flags, flags)) {
 327                 DEBUG(10,("invalid flags\n"));
 328                 return NT_STATUS_INVALID_PARAMETER;
 329         }
 330
 331         if ((flags & DS_IP_REQUIRED) &&
 332             (info->dc_address_type != DS_ADDRESS_TYPE_INET)) {
 333                 return NT_STATUS_INVALID_PARAMETER_MIX;
 334         }
 335
 336         *info_p = info;
 337
 338         return NT_STATUS_OK;
 339 }
 340
 341 /****************************************************************
 342 ****************************************************************/
 343
 344 static NTSTATUS dsgetdcname_cached(TALLOC_CTX *mem_ctx,
 345                                    const char *domain_name,
 346                                    struct GUID *domain_guid,
 347                                    uint32_t flags,
 348                                    const char *site_name,
 349                                    struct netr_DsRGetDCNameInfo **info)
 350 {
 351         NTSTATUS status;
 352         bool expired = false;
 353
 354         status = dsgetdcname_cache_fetch(mem_ctx, domain_name, domain_guid,
 355                                          flags, site_name, info, &expired);
 356         if (!NT_STATUS_IS_OK(status)) {
 357                 DEBUG(10,("dsgetdcname_cached: cache fetch failed with: %s\n",
 358                         nt_errstr(status)));
 359                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 360         }
 361
 362         if (flags & DS_BACKGROUND_ONLY) {
 363                 return status;
 364         }
 365
 366         if (expired) {
 367                 status = dsgetdcname_cache_refresh(mem_ctx, domain_name,
 368                                                    domain_guid, flags,
 369                                                    site_name, *info);
 370                 if (!NT_STATUS_IS_OK(status)) {
 371                         return status;
 372                 }
 373         }
 374
 375         return status;
 376 }
 377
 378 /****************************************************************
 379 ****************************************************************/
 380
 381 static bool check_allowed_required_flags(uint32_t flags)
 382 {
 383         uint32_t return_type = flags & (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME);
 384         uint32_t offered_type = flags & (DS_IS_FLAT_NAME|DS_IS_DNS_NAME);
 385         uint32_t query_type = flags & (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY);
 386
 387         /* FIXME: check for DSGETDC_VALID_FLAGS and check for excluse bits
 388          * (DS_PDC_REQUIRED, DS_KDC_REQUIRED, DS_GC_SERVER_REQUIRED) */
 389
 390         debug_dsdcinfo_flags(10, flags);
 391
 392         if (return_type == (DS_RETURN_FLAT_NAME|DS_RETURN_DNS_NAME)) {
 393                 return false;
 394         }
 395
 396         if (offered_type == (DS_IS_DNS_NAME|DS_IS_FLAT_NAME)) {
 397                 return false;
 398         }
 399
 400         if (query_type == (DS_BACKGROUND_ONLY|DS_FORCE_REDISCOVERY)) {
 401                 return false;
 402         }
 403
 404 #if 0
 405         if ((flags & DS_RETURN_DNS_NAME) && (!(flags & DS_IP_REQUIRED))) {
 406                 printf("gd: here5 \n");
 407                 return false;
 408         }
 409 #endif
 410         return true;
 411 }
 412
 413 /****************************************************************
 414 ****************************************************************/
 415
 416 static NTSTATUS discover_dc_netbios(TALLOC_CTX *mem_ctx,
 417                                     const char *domain_name,
 418                                     uint32_t flags,
 419                                     struct ip_service_name **returned_dclist,
 420                                     int *returned_count)
 421 {
 422         NTSTATUS status;
 423         enum nbt_name_type name_type = NBT_NAME_LOGON;
 424         struct ip_service *iplist;
 425         int i;
 426         struct ip_service_name *dclist = NULL;
 427         int count;
 428
 429         *returned_dclist = NULL;
 430         *returned_count = 0;
 431
 432         if (lp_disable_netbios()) {
 433                 return NT_STATUS_NOT_SUPPORTED;
 434         }
 435
 436         if (flags & DS_PDC_REQUIRED) {
 437                 name_type = NBT_NAME_PDC;
 438         }
 439
 440         status = internal_resolve_name(domain_name, name_type, NULL,
 441                                        &iplist, &count,
 442                                        "lmhosts wins bcast");
 443         if (!NT_STATUS_IS_OK(status)) {
 444                 DEBUG(10,("discover_dc_netbios: failed to find DC\n"));
 445                 return status;
 446         }
 447
 448         dclist = TALLOC_ZERO_ARRAY(mem_ctx, struct ip_service_name, count);
 449         if (!dclist) {
 450                 return NT_STATUS_NO_MEMORY;
 451         }
 452
 453         for (i=0; i<count; i++) {
 454
 455                 char addr[INET6_ADDRSTRLEN];
 456                 struct ip_service_name *r = &dclist[i];
 457
 458                 print_sockaddr(addr, sizeof(addr),
 459                                &iplist[i].ss);
 460
 461                 r->ss   = iplist[i].ss;
 462                 r->port = iplist[i].port;
 463                 r->hostname = talloc_strdup(mem_ctx, addr);
 464                 if (!r->hostname) {
 465                         return NT_STATUS_NO_MEMORY;
 466                 }
 467
 468         }
 469
 470         *returned_dclist = dclist;
 471         *returned_count = count;
 472
 473         return NT_STATUS_OK;
 474 }
 475
 476 /****************************************************************
 477 ****************************************************************/
 478
 479 static NTSTATUS discover_dc_dns(TALLOC_CTX *mem_ctx,
 480                                 const char *domain_name,
 481                                 struct GUID *domain_guid,
 482                                 uint32_t flags,
 483                                 const char *site_name,
 484                                 struct ip_service_name **returned_dclist,
 485                                 int *return_count)
 486 {
 487         int i, j;
 488         NTSTATUS status;
 489         struct dns_rr_srv *dcs = NULL;
 490         int numdcs = 0;
 491         int numaddrs = 0;
 492         struct ip_service_name *dclist = NULL;
 493         int count = 0;
 494
 495         if (flags & DS_PDC_REQUIRED) {
 496                 status = ads_dns_query_pdc(mem_ctx, domain_name,
 497                                            &dcs, &numdcs);
 498         } else if (flags & DS_GC_SERVER_REQUIRED) {
 499                 status = ads_dns_query_gcs(mem_ctx, domain_name, site_name,
 500                                            &dcs, &numdcs);
 501         } else if (flags & DS_KDC_REQUIRED) {
 502                 status = ads_dns_query_kdcs(mem_ctx, domain_name, site_name,
 503                                             &dcs, &numdcs);
 504         } else if (flags & DS_DIRECTORY_SERVICE_REQUIRED) {
 505                 status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
 506                                            &dcs, &numdcs);
 507         } else if (domain_guid) {
 508                 status = ads_dns_query_dcs_guid(mem_ctx, domain_name,
 509                                                 domain_guid, &dcs, &numdcs);
 510         } else {
 511                 status = ads_dns_query_dcs(mem_ctx, domain_name, site_name,
 512                                            &dcs, &numdcs);
 513         }
 514
 515         if (!NT_STATUS_IS_OK(status)) {
 516                 return status;
 517         }
 518
 519         if (numdcs == 0) {
 520                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 521         }
 522
 523         for (i=0;i<numdcs;i++) {
 524                 numaddrs += MAX(dcs[i].num_ips,1);
 525         }
 526
 527         dclist = TALLOC_ZERO_ARRAY(mem_ctx,
 528                                    struct ip_service_name,
 529                                    numaddrs);
 530         if (!dclist) {
 531                 return NT_STATUS_NO_MEMORY;
 532         }
 533
 534         /* now unroll the list of IP addresses */
 535
 536         *return_count = 0;
 537         i = 0;
 538         j = 0;
 539
 540         while ((i < numdcs) && (count < numaddrs)) {
 541
 542                 struct ip_service_name *r = &dclist[count];
 543
 544                 r->port = dcs[count].port;
 545                 r->hostname = dcs[count].hostname;
 546
 547                 /* If we don't have an IP list for a name, lookup it up */
 548
 549                 if (!dcs[i].ss_s) {
 550                         interpret_string_addr(&r->ss, dcs[i].hostname, 0);
 551                         i++;
 552                         j = 0;
 553                 } else {
 554                         /* use the IP addresses from the SRV sresponse */
 555
 556                         if (j >= dcs[i].num_ips) {
 557                                 i++;
 558                                 j = 0;
 559                                 continue;
 560                         }
 561
 562                         r->ss = dcs[i].ss_s[j];
 563                         j++;
 564                 }
 565
 566                 /* make sure it is a valid IP.  I considered checking the
 567                  * negative connection cache, but this is the wrong place for
 568                  * it.  Maybe only as a hac.  After think about it, if all of
 569                  * the IP addresses retuend from DNS are dead, what hope does a
 570                  * netbios name lookup have?  The standard reason for falling
 571                  * back to netbios lookups is that our DNS server doesn't know
 572                  * anything about the DC's   -- jerry */
 573
 574                 if (!is_zero_addr(&r->ss)) {
 575                         count++;
 576                         continue;
 577                 }
 578         }
 579
 580         *returned_dclist = dclist;
 581         *return_count = count;
 582
 583         if (count > 0) {
 584                 return NT_STATUS_OK;
 585         }
 586
 587         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 588 }
 589
 590 /****************************************************************
 591 ****************************************************************/
 592
 593 static NTSTATUS make_domain_controller_info(TALLOC_CTX *mem_ctx,
 594                                             const char *dc_unc,
 595                                             const char *dc_address,
 596                                             uint32_t dc_address_type,
 597                                             const struct GUID *domain_guid,
 598                                             const char *domain_name,
 599                                             const char *forest_name,
 600                                             uint32_t flags,
 601                                             const char *dc_site_name,
 602                                             const char *client_site_name,
 603                                             struct netr_DsRGetDCNameInfo **info_out)
 604 {
 605         struct netr_DsRGetDCNameInfo *info;
 606
 607         info = TALLOC_ZERO_P(mem_ctx, struct netr_DsRGetDCNameInfo);
 608         NT_STATUS_HAVE_NO_MEMORY(info);
 609
 610         if (dc_unc) {
 611                 info->dc_unc = talloc_strdup(mem_ctx, dc_unc);
 612                 NT_STATUS_HAVE_NO_MEMORY(info->dc_unc);
 613         }
 614
 615         if (dc_address) {
 616                 if (!(dc_address[0] == '\\' && dc_address[1] == '\\')) {
 617                         info->dc_address = talloc_asprintf(mem_ctx, "\\\\%s",
 618                                                            dc_address);
 619                 } else {
 620                         info->dc_address = talloc_strdup(mem_ctx, dc_address);
 621                 }
 622                 NT_STATUS_HAVE_NO_MEMORY(info->dc_address);
 623         }
 624
 625         info->dc_address_type = dc_address_type;
 626
 627         if (domain_guid) {
 628                 info->domain_guid = *domain_guid;
 629         }
 630
 631         if (domain_name) {
 632                 info->domain_name = talloc_strdup(mem_ctx, domain_name);
 633                 NT_STATUS_HAVE_NO_MEMORY(info->domain_name);
 634         }
 635
 636         if (forest_name) {
 637                 info->forest_name = talloc_strdup(mem_ctx, forest_name);
 638                 NT_STATUS_HAVE_NO_MEMORY(info->forest_name);
 639                 flags |= DS_DNS_FOREST;
 640         }
 641
 642         info->dc_flags = flags;
 643
 644         if (dc_site_name) {
 645                 info->dc_site_name = talloc_strdup(mem_ctx, dc_site_name);
 646                 NT_STATUS_HAVE_NO_MEMORY(info->dc_site_name);
 647         }
 648
 649         if (client_site_name) {
 650                 info->client_site_name = talloc_strdup(mem_ctx,
 651                                                        client_site_name);
 652                 NT_STATUS_HAVE_NO_MEMORY(info->client_site_name);
 653         }
 654
 655         *info_out = info;
 656
 657         return NT_STATUS_OK;
 658 }
 659
 660 /****************************************************************
 661 ****************************************************************/
 662
 663 static NTSTATUS make_dc_info_from_cldap_reply(TALLOC_CTX *mem_ctx,
 664                                               uint32_t flags,
 665                                               struct sockaddr_storage *ss,
 666                                               uint32_t nt_version,
 667                                               union nbt_cldap_netlogon *r,
 668                                               struct netr_DsRGetDCNameInfo **info)
 669 {
 670         const char *dc_hostname, *dc_domain_name;
 671         const char *dc_address = NULL;
 672         const char *dc_forest = NULL;
 673         uint32_t dc_address_type = 0;
 674         uint32_t dc_flags = 0;
 675         struct GUID *dc_domain_guid = NULL;
 676         const char *dc_server_site = NULL;
 677         const char *dc_client_site = NULL;
 678
 679         char addr[INET6_ADDRSTRLEN];
 680
 681         if (ss) {
 682                 print_sockaddr(addr, sizeof(addr), ss);
 683                 dc_address = addr;
 684                 dc_address_type = DS_ADDRESS_TYPE_INET;
 685         }
 686
 687         switch (nt_version & 0x000000ff) {
 688                 case 0:
 689                         return NT_STATUS_INVALID_PARAMETER;
 690                 case 1:
 691                         if (!ss) {
 692                                 dc_address      = r->logon1.pdc_name;
 693                                 dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
 694                         }
 695
 696                         dc_hostname     = r->logon1.pdc_name;
 697                         dc_domain_name  = r->logon1.domain_name;
 698                         if (flags & DS_PDC_REQUIRED) {
 699                                 dc_flags = NBT_SERVER_WRITABLE | NBT_SERVER_PDC;
 700                         }
 701                         break;
 702                 case 2:
 703                 case 3:
 704                         if (!ss) {
 705                                 dc_address      = r->logon3.pdc_ip;
 706                                 dc_address_type = DS_ADDRESS_TYPE_INET;
 707                         }
 708
 709                         switch (flags & 0xf0000000) {
 710                                 case DS_RETURN_FLAT_NAME:
 711                                         dc_hostname     = r->logon3.pdc_name;
 712                                         dc_domain_name  = r->logon3.domain_name;
 713                                         break;
 714                                 case DS_RETURN_DNS_NAME:
 715                                 default:
 716                                         dc_hostname     = r->logon3.pdc_dns_name;
 717                                         dc_domain_name  = r->logon3.dns_domain;
 718                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 719                                         break;
 720                         }
 721
 722                         dc_flags        |= r->logon3.server_type;
 723                         dc_forest       = r->logon3.forest;
 724                         dc_domain_guid  = &r->logon3.domain_uuid;
 725
 726                         break;
 727                 case 4:
 728                 case 5:
 729                 case 6:
 730                 case 7:
 731                         if (!ss) {
 732                                 dc_address      = r->logon5.pdc_name;
 733                                 dc_address_type = DS_ADDRESS_TYPE_NETBIOS;
 734                         }
 735
 736                         switch (flags & 0xf0000000) {
 737                                 case DS_RETURN_FLAT_NAME:
 738                                         dc_hostname     = r->logon5.pdc_name;
 739                                         dc_domain_name  = r->logon5.domain;
 740                                         break;
 741                                 case DS_RETURN_DNS_NAME:
 742                                 default:
 743                                         dc_hostname     = r->logon5.pdc_dns_name;
 744                                         dc_domain_name  = r->logon5.dns_domain;
 745                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 746                                         break;
 747                         }
 748
 749                         dc_flags        |= r->logon5.server_type;
 750                         dc_forest       = r->logon5.forest;
 751                         dc_domain_guid  = &r->logon5.domain_uuid;
 752                         dc_server_site  = r->logon5.server_site;
 753                         dc_client_site  = r->logon5.client_site;
 754
 755                         break;
 756                 case 8:
 757                 case 9:
 758                 case 10:
 759                 case 11:
 760                 case 12:
 761                 case 13:
 762                 case 14:
 763                 case 15:
 764                         if (!ss) {
 765                                 dc_address      = r->logon13.dc_sock_addr.pdc_ip;
 766                                 dc_address_type = DS_ADDRESS_TYPE_INET;
 767                         }
 768
 769                         switch (flags & 0xf0000000) {
 770                                 case DS_RETURN_FLAT_NAME:
 771                                         dc_hostname     = r->logon13.pdc_name;
 772                                         dc_domain_name  = r->logon13.domain;
 773                                         break;
 774                                 case DS_RETURN_DNS_NAME:
 775                                 default:
 776                                         dc_hostname     = r->logon13.pdc_dns_name;
 777                                         dc_domain_name  = r->logon13.dns_domain;
 778                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 779                                         break;
 780                         }
 781
 782                         dc_flags        |= r->logon13.server_type;
 783                         dc_forest       = r->logon13.forest;
 784                         dc_domain_guid  = &r->logon13.domain_uuid;
 785                         dc_server_site  = r->logon13.server_site;
 786                         dc_client_site  = r->logon13.client_site;
 787
 788                         break;
 789                 default:
 790                         if (!ss) {
 791                                 dc_address      = r->logon29.dc_sock_addr.pdc_ip;
 792                                 dc_address_type = DS_ADDRESS_TYPE_INET;
 793                         }
 794
 795                         switch (flags & 0xf0000000) {
 796                                 case DS_RETURN_FLAT_NAME:
 797                                         dc_hostname     = r->logon29.pdc_name;
 798                                         dc_domain_name  = r->logon29.domain;
 799                                         break;
 800                                 case DS_RETURN_DNS_NAME:
 801                                 default:
 802                                         dc_hostname     = r->logon29.pdc_dns_name;
 803                                         dc_domain_name  = r->logon29.dns_domain;
 804                                         dc_flags |= DS_DNS_DOMAIN | DS_DNS_CONTROLLER;
 805                                         break;
 806                         }
 807
 808                         dc_flags        |= r->logon29.server_type;
 809                         dc_forest       = r->logon29.forest;
 810                         dc_domain_guid  = &r->logon29.domain_uuid;
 811                         dc_server_site  = r->logon29.server_site;
 812                         dc_client_site  = r->logon29.client_site;
 813
 814                         break;
 815         }
 816
 817         return make_domain_controller_info(mem_ctx,
 818                                            dc_hostname,
 819                                            dc_address,
 820                                            dc_address_type,
 821                                            dc_domain_guid,
 822                                            dc_domain_name,
 823                                            dc_forest,
 824                                            dc_flags,
 825                                            dc_server_site,
 826                                            dc_client_site,
 827                                            info);
 828 }
 829
 830 /****************************************************************
 831 ****************************************************************/
 832
 833 static uint32_t map_ds_flags_to_nt_version(uint32_t flags)
 834 {
 835         uint32_t nt_version = 0;
 836
 837         if (flags & DS_PDC_REQUIRED) {
 838                 nt_version |= NETLOGON_VERSION_PDC;
 839         }
 840
 841         if (flags & DS_GC_SERVER_REQUIRED) {
 842                 nt_version |= NETLOGON_VERSION_GC;
 843         }
 844
 845         if (flags & DS_TRY_NEXTCLOSEST_SITE) {
 846                 nt_version |= NETLOGON_VERSION_WITH_CLOSEST_SITE;
 847         }
 848
 849         if (flags & DS_IP_REQUIRED) {
 850                 nt_version |= NETLOGON_VERSION_IP;
 851         }
 852
 853         return nt_version;
 854 }
 855
 856 /****************************************************************
 857 ****************************************************************/
 858
 859 static NTSTATUS process_dc_dns(TALLOC_CTX *mem_ctx,
 860                                const char *domain_name,
 861                                uint32_t flags,
 862                                struct ip_service_name *dclist,
 863                                int num_dcs,
 864                                struct netr_DsRGetDCNameInfo **info)
 865 {
 866         int i = 0;
 867         bool valid_dc = false;
 868         union nbt_cldap_netlogon *r = NULL;
 869         uint32_t nt_version = NETLOGON_VERSION_5 |
 870                               NETLOGON_VERSION_5EX;
 871         uint32_t ret_flags = 0;
 872
 873         nt_version |= map_ds_flags_to_nt_version(flags);
 874
 875         for (i=0; i<num_dcs; i++) {
 876
 877                 DEBUG(10,("LDAP ping to %s\n", dclist[i].hostname));
 878
 879                 if (ads_cldap_netlogon(mem_ctx, dclist[i].hostname,
 880                                         domain_name,
 881                                         &nt_version,
 882                                         &r))
 883                 {
 884                         ret_flags = get_cldap_reply_server_flags(r, nt_version);
 885
 886                         if (check_cldap_reply_required_flags(ret_flags, flags)) {
 887                                 valid_dc = true;
 888                                 break;
 889                         }
 890                 }
 891
 892                 continue;
 893         }
 894
 895         if (!valid_dc) {
 896                 return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
 897         }
 898
 899         return make_dc_info_from_cldap_reply(mem_ctx, flags, &dclist[i].ss,
 900                                              nt_version, r, info);
 901 }
 902
 903 /****************************************************************
 904 ****************************************************************/
 905
 906 static struct event_context *ev_context(void)
 907 {
 908         static struct event_context *ctx;
 909
 910         if (!ctx && !(ctx = event_context_init(NULL))) {
 911                 smb_panic("Could not init event context");
 912         }
 913         return ctx;
 914 }
 915
 916 /****************************************************************
 917 ****************************************************************/
 918
 919 static struct messaging_context *msg_context(TALLOC_CTX *mem_ctx)
 920 {
 921         static struct messaging_context *ctx;
 922
 923         if (!ctx && !(ctx = messaging_init(mem_ctx, server_id_self(),
 924                                            ev_context()))) {
 925                 smb_panic("Could not init messaging context");
 926         }
 927         return ctx;
 928 }
 929
 930 /****************************************************************
 931 ****************************************************************/
 932
 933 static NTSTATUS process_dc_netbios(TALLOC_CTX *mem_ctx,
 934                                    const char *domain_name,
 935                                    uint32_t flags,
 936                                    struct ip_service_name *dclist,
 937                                    int num_dcs,
 938                                    struct netr_DsRGetDCNameInfo **info)
 939 {
 940         struct sockaddr_storage ss;
 941         struct ip_service ip_list;
 942         enum nbt_name_type name_type = NBT_NAME_LOGON;
 943
 944         int i;
 945         const char *dc_name = NULL;
 946         fstring tmp_dc_name;
 947         struct messaging_context *msg_ctx = msg_context(mem_ctx);
 948         union nbt_cldap_netlogon *reply = NULL;
 949         uint32_t nt_version = NETLOGON_VERSION_1 |
 950                               NETLOGON_VERSION_5 |
 951                               NETLOGON_VERSION_5EX_WITH_IP;
 952
 953         if (flags & DS_PDC_REQUIRED) {
 954                 name_type = NBT_NAME_PDC;
 955         }
 956
 957         nt_version |= map_ds_flags_to_nt_version(flags);
 958
 959         DEBUG(10,("process_dc_netbios\n"));
 960
 961         for (i=0; i<num_dcs; i++) {
 962
 963                 ip_list.ss = dclist[i].ss;
 964                 ip_list.port = 0;
 965
 966                 if (!interpret_string_addr(&ss, dclist[i].hostname, AI_NUMERICHOST)) {
 967                         return NT_STATUS_UNSUCCESSFUL;
 968                 }
 969
 970                 if (send_getdc_request(mem_ctx, msg_ctx,
 971                                        &dclist[i].ss, domain_name,
 972                                        NULL, nt_version))
 973                 {
 974                         int k;
 975                         smb_msleep(300);
 976                         for (k=0; k<5; k++) {
 977                                 if (receive_getdc_response(mem_ctx,
 978                                                            &dclist[i].ss,
 979                                                            domain_name,
 980                                                            &nt_version,
 981                                                            &dc_name,
 982                                                            &reply)) {
 983                                         namecache_store(dc_name, NBT_NAME_SERVER, 1, &ip_list);
 984                                         goto make_reply;
 985                                 }
 986                                 smb_msleep(1500);
 987                         }
 988                 }
 989
 990                 if (name_status_find(domain_name,
 991                                      name_type,
 992                                      NBT_NAME_SERVER,
 993                                      &dclist[i].ss,
 994                                      tmp_dc_name))
 995                 {
 996                         struct nbt_cldap_netlogon_1 logon1;
 997
 998                         reply = TALLOC_ZERO_P(mem_ctx, union nbt_cldap_netlogon);
 999                         NT_STATUS_HAVE_NO_MEMORY(reply);
1000
1001                         ZERO_STRUCT(logon1);
1002
1003                         nt_version = NETLOGON_VERSION_1;
1004
1005                         logon1.nt_version = nt_version;
1006                         logon1.pdc_name = tmp_dc_name;
1007                         logon1.domain_name = talloc_strdup_upper(mem_ctx, domain_name);
1008                         NT_STATUS_HAVE_NO_MEMORY(logon1.domain_name);
1009
1010                         reply->logon1 = logon1;
1011
1012                         namecache_store(tmp_dc_name, NBT_NAME_SERVER, 1, &ip_list);
1013
1014                         goto make_reply;
1015                 }
1016         }
1017
1018         return NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1019
1020  make_reply:
1021
1022         return make_dc_info_from_cldap_reply(mem_ctx, flags, &dclist[i].ss,
1023                                              nt_version, reply, info);
1024 }
1025
1026 /****************************************************************
1027 ****************************************************************/
1028
1029 static NTSTATUS dsgetdcname_rediscover(TALLOC_CTX *mem_ctx,
1030                                        const char *domain_name,
1031                                        struct GUID *domain_guid,
1032                                        uint32_t flags,
1033                                        const char *site_name,
1034                                        struct netr_DsRGetDCNameInfo **info)
1035 {
1036         NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1037         struct ip_service_name *dclist = NULL;
1038         int num_dcs;
1039
1040         DEBUG(10,("dsgetdcname_rediscover\n"));
1041
1042         if (flags & DS_IS_FLAT_NAME) {
1043
1044                 status = discover_dc_netbios(mem_ctx, domain_name, flags,
1045                                              &dclist, &num_dcs);
1046                 NT_STATUS_NOT_OK_RETURN(status);
1047
1048                 return process_dc_netbios(mem_ctx, domain_name, flags,
1049                                           dclist, num_dcs, info);
1050         }
1051
1052         if (flags & DS_IS_DNS_NAME) {
1053
1054                 status = discover_dc_dns(mem_ctx, domain_name, domain_guid,
1055                                          flags, site_name, &dclist, &num_dcs);
1056                 NT_STATUS_NOT_OK_RETURN(status);
1057
1058                 return process_dc_dns(mem_ctx, domain_name, flags,
1059                                       dclist, num_dcs, info);
1060         }
1061
1062         status = discover_dc_dns(mem_ctx, domain_name, domain_guid, flags,
1063                                  site_name, &dclist, &num_dcs);
1064
1065         if (NT_STATUS_IS_OK(status) && num_dcs != 0) {
1066
1067                 status = process_dc_dns(mem_ctx, domain_name, flags, dclist,
1068                                         num_dcs, info);
1069                 if (NT_STATUS_IS_OK(status)) {
1070                         return status;
1071                 }
1072         }
1073
1074         status = discover_dc_netbios(mem_ctx, domain_name, flags, &dclist,
1075                                      &num_dcs);
1076         NT_STATUS_NOT_OK_RETURN(status);
1077
1078         return process_dc_netbios(mem_ctx, domain_name, flags, dclist,
1079                                   num_dcs, info);
1080 }
1081
1082 /********************************************************************
1083  dsgetdcname.
1084
1085  This will be the only public function here.
1086 ********************************************************************/
1087
1088 NTSTATUS dsgetdcname(TALLOC_CTX *mem_ctx,
1089                      const char *domain_name,
1090                      struct GUID *domain_guid,
1091                      const char *site_name,
1092                      uint32_t flags,
1093                      struct netr_DsRGetDCNameInfo **info)
1094 {
1095         NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1096         struct netr_DsRGetDCNameInfo *myinfo = NULL;
1097
1098         DEBUG(10,("dsgetdcname: domain_name: %s, "
1099                   "domain_guid: %s, site_name: %s, flags: 0x%08x\n",
1100                   domain_name,
1101                   domain_guid ? GUID_string(mem_ctx, domain_guid) : "(null)",
1102                   site_name, flags));
1103
1104         *info = NULL;
1105
1106         if (!check_allowed_required_flags(flags)) {
1107                 DEBUG(0,("invalid flags specified\n"));
1108                 return NT_STATUS_INVALID_PARAMETER;
1109         }
1110
1111         if (flags & DS_FORCE_REDISCOVERY) {
1112                 goto rediscover;
1113         }
1114
1115         status = dsgetdcname_cached(mem_ctx, domain_name, domain_guid,
1116                                     flags, site_name, &myinfo);
1117         if (NT_STATUS_IS_OK(status)) {
1118                 *info = myinfo;
1119                 return status;
1120         }
1121
1122         if (flags & DS_BACKGROUND_ONLY) {
1123                 return status;
1124         }
1125
1126  rediscover:
1127         status = dsgetdcname_rediscover(mem_ctx, domain_name,
1128                                         domain_guid, flags, site_name,
1129                                         &myinfo);
1130
1131         if (NT_STATUS_IS_OK(status)) {
1132                 dsgetdcname_cache_store(mem_ctx, domain_name, myinfo);
1133                 *info = myinfo;
1134         }
1135
1136         return status;
1137 }
1138
1139 /****************************************************************
1140 ****************************************************************/
1141
1142 bool pull_mailslot_cldap_reply(TALLOC_CTX *mem_ctx,
1143                                const DATA_BLOB *blob,
1144                                union nbt_cldap_netlogon *r,
1145                                uint32_t *nt_version)
1146 {
1147         enum ndr_err_code ndr_err;
1148         uint32_t nt_version_query = ((*nt_version) & 0x000000ff);
1149         uint16_t command = 0;
1150
1151         ndr_err = ndr_pull_struct_blob(blob, mem_ctx, &command,
1152                         (ndr_pull_flags_fn_t)ndr_pull_uint16);
1153         if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1154                 return false;
1155         }
1156
1157         switch (command) {
1158                 case 0x13: /* 19 */
1159                 case 0x15: /* 21 */
1160                 case 0x17: /* 23 */
1161                          break;
1162                 default:
1163                         DEBUG(1,("got unexpected command: %d (0x%08x)\n",
1164                                 command, command));
1165                         return false;
1166         }
1167
1168         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1169                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1170         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1171                 goto done;
1172         }
1173
1174         /* when the caller requested just those nt_version bits that the server
1175          * was able to reply to, we are fine and all done. otherwise we need to
1176          * assume downgraded replies which are painfully parsed here - gd */
1177
1178         if (nt_version_query & NETLOGON_VERSION_WITH_CLOSEST_SITE) {
1179                 nt_version_query &= ~NETLOGON_VERSION_WITH_CLOSEST_SITE;
1180         }
1181         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1182                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1183         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1184                 goto done;
1185         }
1186         if (nt_version_query & NETLOGON_VERSION_5EX_WITH_IP) {
1187                 nt_version_query &= ~NETLOGON_VERSION_5EX_WITH_IP;
1188         }
1189         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1190                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1191         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1192                 goto done;
1193         }
1194         if (nt_version_query & NETLOGON_VERSION_5EX) {
1195                 nt_version_query &= ~NETLOGON_VERSION_5EX;
1196         }
1197         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1198                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1199         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1200                 goto done;
1201         }
1202         if (nt_version_query & NETLOGON_VERSION_5) {
1203                 nt_version_query &= ~NETLOGON_VERSION_5;
1204         }
1205         ndr_err = ndr_pull_union_blob_all(blob, mem_ctx, r, nt_version_query,
1206                        (ndr_pull_flags_fn_t)ndr_pull_nbt_cldap_netlogon);
1207         if (NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
1208                 goto done;
1209         }
1210
1211         return false;
1212
1213  done:
1214         if (DEBUGLEVEL >= 10) {
1215                 NDR_PRINT_UNION_DEBUG(nbt_cldap_netlogon, nt_version_query, r);
1216         }
1217
1218         *nt_version = nt_version_query;
1219
1220         return true;
1221 }