2 Unix SMB/CIFS mplementation.
6 Copyright (C) Andrew Tridgell 2009
7 based on repl service code
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
25 #include "dsdb/samdb/samdb.h"
26 #include "auth/auth.h"
27 #include "smbd/service.h"
28 #include "lib/events/events.h"
29 #include "lib/messaging/irpc.h"
30 #include "dsdb/kcc/kcc_service.h"
31 #include <ldb_errors.h>
32 #include "../lib/util/dlinklist.h"
33 #include "librpc/gen_ndr/ndr_misc.h"
34 #include "librpc/gen_ndr/ndr_drsuapi.h"
35 #include "librpc/gen_ndr/ndr_drsblobs.h"
36 #include "param/param.h"
37 #include "libds/common/roles.h"
40 establish system creds
42 static WERROR kccsrv_init_creds(struct kccsrv_service *service)
44 service->system_session_info = system_session(service->task->lp_ctx);
45 if (!service->system_session_info) {
53 connect to the local SAM
55 static WERROR kccsrv_connect_samdb(struct kccsrv_service *service, struct loadparm_context *lp_ctx)
57 const struct GUID *ntds_guid;
59 service->samdb = samdb_connect(service, service->task->event_ctx, lp_ctx, service->system_session_info, 0);
60 if (!service->samdb) {
61 return WERR_DS_UNAVAILABLE;
64 ntds_guid = samdb_ntds_objectGUID(service->samdb);
66 return WERR_DS_UNAVAILABLE;
69 service->ntds_guid = *ntds_guid;
71 if (samdb_rodc(service->samdb, &service->am_rodc) != LDB_SUCCESS) {
72 DEBUG(0,(__location__ ": Failed to determine RODC status\n"));
73 return WERR_DS_UNAVAILABLE;
81 load our local partition list
83 static WERROR kccsrv_load_partitions(struct kccsrv_service *s)
85 struct ldb_dn *basedn;
87 struct ldb_message_element *el;
88 static const char *attrs[] = { "namingContexts", "configurationNamingContext", NULL };
92 basedn = ldb_dn_new(s, s->samdb, NULL);
93 W_ERROR_HAVE_NO_MEMORY(basedn);
95 ret = ldb_search(s->samdb, s, &r, basedn, LDB_SCOPE_BASE, attrs,
98 if (ret != LDB_SUCCESS) {
100 } else if (r->count != 1) {
105 el = ldb_msg_find_element(r->msgs[0], "namingContexts");
110 for (i=0; i < el->num_values; i++) {
111 const char *v = (const char *)el->values[i].data;
113 struct kccsrv_partition *p;
115 pdn = ldb_dn_new(s, s->samdb, v);
116 if (!ldb_dn_validate(pdn)) {
120 p = talloc_zero(s, struct kccsrv_partition);
121 W_ERROR_HAVE_NO_MEMORY(p);
123 p->dn = talloc_steal(p, pdn);
126 DLIST_ADD(s->partitions, p);
128 DEBUG(2, ("kccsrv_partition[%s] loaded\n", v));
131 el = ldb_msg_find_element(r->msgs[0], "configurationNamingContext");
135 s->config_dn = ldb_dn_new(s, s->samdb, (const char *)el->values[0].data);
136 if (!ldb_dn_validate(s->config_dn)) {
146 struct kcc_manual_runcmd_state {
147 struct irpc_message *msg;
148 struct drsuapi_DsExecuteKCC *r;
149 struct kccsrv_service *service;
154 * Called when samba_kcc script has finished
156 static void manual_samba_kcc_done(struct tevent_req *subreq)
158 struct kcc_manual_runcmd_state *st =
159 tevent_req_callback_data(subreq,
160 struct kcc_manual_runcmd_state);
165 st->service->periodic.subreq = NULL;
167 rc = samba_runcmd_recv(subreq, &sys_errno);
171 status = map_nt_error_from_unix_common(sys_errno);
173 status = NT_STATUS_OK;
176 if (!NT_STATUS_IS_OK(status)) {
177 DEBUG(0,(__location__ ": Failed manual run of samba_kcc - %s\n",
180 DEBUG(3,("Completed manual run of samba_kcc OK\n"));
183 if (!(st->r->in.req->ctr1.flags & DRSUAPI_DS_EXECUTE_KCC_ASYNCHRONOUS_OPERATION)) {
184 irpc_send_reply(st->msg, status);
188 static NTSTATUS kccsrv_execute_kcc(struct irpc_message *msg, struct drsuapi_DsExecuteKCC *r)
191 NTSTATUS status = NT_STATUS_OK;
192 struct kccsrv_service *service = talloc_get_type(msg->private_data, struct kccsrv_service);
194 const char * const *samba_kcc_command;
195 struct kcc_manual_runcmd_state *st;
197 if (!service->samba_kcc_code) {
198 mem_ctx = talloc_new(service);
200 status = kccsrv_simple_update(service, mem_ctx);
201 if (!NT_STATUS_IS_OK(status)) {
202 DEBUG(0,("kccsrv_execute_kcc failed - %s\n",
205 talloc_free(mem_ctx);
210 /* Invocation of the samba_kcc python script for replication
211 * topology generation.
215 lpcfg_samba_kcc_command(service->task->lp_ctx);
217 st = talloc(msg, struct kcc_manual_runcmd_state);
219 return NT_STATUS_NO_MEMORY;
224 st->service = service;
226 /* don't run at the same time as an existing child */
227 if (service->periodic.subreq) {
228 status = NT_STATUS_DS_BUSY;
232 DEBUG(2, ("Calling samba_kcc script\n"));
233 service->periodic.subreq = samba_runcmd_send(service,
234 service->task->event_ctx,
235 timeval_current_ofs(40, 0),
236 2, 0, samba_kcc_command, NULL);
238 if (service->periodic.subreq == NULL) {
239 status = NT_STATUS_NO_MEMORY;
240 DEBUG(0,(__location__ ": failed - %s\n", nt_errstr(status)));
243 tevent_req_set_callback(service->periodic.subreq,
244 manual_samba_kcc_done, st);
247 if (r->in.req->ctr1.flags & DRSUAPI_DS_EXECUTE_KCC_ASYNCHRONOUS_OPERATION) {
248 /* This actually means reply right away, let it run in the background */
250 /* mark the request as replied async, the caller wants to know when this is finished */
251 msg->defer_reply = true;
257 static NTSTATUS kccsrv_replica_get_info(struct irpc_message *msg, struct drsuapi_DsReplicaGetInfo *r)
259 return kccdrs_replica_get_info(msg, r);
263 startup the kcc service task
265 static void kccsrv_task_init(struct task_server *task)
268 struct kccsrv_service *service;
269 uint32_t periodic_startup_interval;
271 switch (lpcfg_server_role(task->lp_ctx)) {
272 case ROLE_STANDALONE:
273 task_server_terminate(task, "kccsrv: no KCC required in standalone configuration", false);
275 case ROLE_DOMAIN_MEMBER:
276 task_server_terminate(task, "kccsrv: no KCC required in domain member configuration", false);
278 case ROLE_ACTIVE_DIRECTORY_DC:
279 /* Yes, we want a KCC */
283 task_server_set_title(task, "task[kccsrv]");
285 service = talloc_zero(task, struct kccsrv_service);
287 task_server_terminate(task, "kccsrv_task_init: out of memory", true);
290 service->task = task;
291 service->startup_time = timeval_current();
292 task->private_data = service;
294 status = kccsrv_init_creds(service);
295 if (!W_ERROR_IS_OK(status)) {
296 task_server_terminate(task,
297 talloc_asprintf(task,
298 "kccsrv: Failed to obtain server credentials: %s\n",
299 win_errstr(status)), true);
303 status = kccsrv_connect_samdb(service, task->lp_ctx);
304 if (!W_ERROR_IS_OK(status)) {
305 task_server_terminate(task, talloc_asprintf(task,
306 "kccsrv: Failed to connect to local samdb: %s\n",
307 win_errstr(status)), true);
311 status = kccsrv_load_partitions(service);
312 if (!W_ERROR_IS_OK(status)) {
313 task_server_terminate(task, talloc_asprintf(task,
314 "kccsrv: Failed to load partitions: %s\n",
315 win_errstr(status)), true);
319 periodic_startup_interval =
320 lpcfg_parm_int(task->lp_ctx, NULL, "kccsrv",
321 "periodic_startup_interval", 15); /* in seconds */
322 service->periodic.interval =
323 lpcfg_parm_int(task->lp_ctx, NULL, "kccsrv",
324 "periodic_interval", 300); /* in seconds */
326 /* (kccsrv:samba_kcc=true) will run newer samba_kcc replication
327 * topology generation code.
329 service->samba_kcc_code = lpcfg_parm_bool(task->lp_ctx, NULL,
330 "kccsrv", "samba_kcc", false);
332 status = kccsrv_periodic_schedule(service, periodic_startup_interval);
333 if (!W_ERROR_IS_OK(status)) {
334 task_server_terminate(task, talloc_asprintf(task,
335 "kccsrv: Failed to periodic schedule: %s\n",
336 win_errstr(status)), true);
340 irpc_add_name(task->msg_ctx, "kccsrv");
342 IRPC_REGISTER(task->msg_ctx, drsuapi, DRSUAPI_DSEXECUTEKCC, kccsrv_execute_kcc, service);
343 IRPC_REGISTER(task->msg_ctx, drsuapi, DRSUAPI_DSREPLICAGETINFO, kccsrv_replica_get_info, service);
347 register ourselves as a available server
349 NTSTATUS server_service_kcc_init(void)
351 return register_server_service("kcc", kccsrv_task_init);