2 Unix SMB/CIFS implementation.
4 a composite API for finding a DC and its name
6 Copyright (C) Volker Lendecke 2005
7 Copyright (C) Andrew Bartlett <abartlet@samba.org> 2006
9 This program is free software; you can redistribute it and/or modify
10 it under the terms of the GNU General Public License as published by
11 the Free Software Foundation; either version 3 of the License, or
12 (at your option) any later version.
14 This program is distributed in the hope that it will be useful,
15 but WITHOUT ANY WARRANTY; without even the implied warranty of
16 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
17 GNU General Public License for more details.
19 You should have received a copy of the GNU General Public License
20 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 #include "include/includes.h"
24 #include "lib/messaging/irpc.h"
25 #include "librpc/gen_ndr/ndr_irpc.h"
26 #include "librpc/gen_ndr/samr.h"
27 #include "libcli/composite/composite.h"
28 #include "libcli/libcli.h"
29 #include "libcli/resolve/resolve.h"
30 #include "libcli/finddcs.h"
31 #include "param/param.h"
33 struct finddcs_state {
34 struct composite_context *ctx;
35 struct messaging_context *msg_ctx;
37 const char *my_netbios_name;
38 const char *domain_name;
39 struct dom_sid *domain_sid;
41 struct nbtd_getdcname r;
42 struct nbt_name_status node_status;
45 struct nbt_dc_name *dcs;
48 static void finddcs_name_resolved(struct composite_context *ctx);
49 static void finddcs_getdc_replied(struct irpc_request *ireq);
50 static void fallback_node_status(struct finddcs_state *state);
51 static void fallback_node_status_replied(struct nbt_name_request *name_req);
54 * Setup and send off the a normal name resolution for the target name.
56 * The domain_sid parameter is optional, and is used in the subsequent getdc request.
58 * This will try a GetDC request, but this may not work. It will try
59 * a node status as a fallback, then return no name (but still include
63 struct composite_context *finddcs_send(TALLOC_CTX *mem_ctx,
64 const char *my_netbios_name,
65 const char *domain_name,
67 struct dom_sid *domain_sid,
68 struct resolve_context *resolve_ctx,
69 struct event_context *event_ctx,
70 struct messaging_context *msg_ctx)
72 struct composite_context *c, *creq;
73 struct finddcs_state *state;
76 c = composite_create(mem_ctx, event_ctx);
77 if (c == NULL) return NULL;
79 state = talloc(c, struct finddcs_state);
80 if (composite_nomem(state, c)) return c;
81 c->private_data = state;
85 state->my_netbios_name = talloc_strdup(state, my_netbios_name);
86 state->domain_name = talloc_strdup(state, domain_name);
87 if (composite_nomem(state->domain_name, c)) return c;
90 state->domain_sid = talloc_reference(state, domain_sid);
91 if (composite_nomem(state->domain_sid, c)) return c;
93 state->domain_sid = NULL;
96 state->msg_ctx = msg_ctx;
98 make_nbt_name(&name, state->domain_name, name_type);
99 creq = resolve_name_send(resolve_ctx, &name, event_ctx);
100 composite_continue(c, creq, finddcs_name_resolved, state);
104 /* Having got an name query answer, fire off a GetDC request, so we
105 * can find the target's all-important name. (Kerberos and some
106 * netlogon operations are quite picky about names)
108 * The name is a courtesy, if we don't find it, don't completely fail.
110 * However, if the nbt server is down, fall back to a node status
113 static void finddcs_name_resolved(struct composite_context *ctx)
115 struct finddcs_state *state =
116 talloc_get_type(ctx->async.private_data, struct finddcs_state);
117 struct irpc_request *ireq;
118 struct server_id *nbt_servers;
121 state->ctx->status = resolve_name_recv(ctx, state, &address);
122 if (!composite_is_ok(state->ctx)) return;
124 /* TODO: This should try and find all the DCs, and give the
125 * caller them in the order they responded */
128 state->dcs = talloc_array(state, struct nbt_dc_name, state->num_dcs);
129 if (composite_nomem(state->dcs, state->ctx)) return;
131 state->dcs[0].address = talloc_steal(state->dcs, address);
133 /* Try and find the nbt server. Fallback to a node status
134 * request if we can't make this happen The nbt server just
135 * might not be running, or we may not have a messaging
136 * context (not root etc) */
137 if (!state->msg_ctx) {
138 fallback_node_status(state);
142 nbt_servers = irpc_servers_byname(state->msg_ctx, state, "nbt_server");
143 if ((nbt_servers == NULL) || (nbt_servers[0].id == 0)) {
144 fallback_node_status(state);
148 state->r.in.domainname = state->domain_name;
149 state->r.in.ip_address = state->dcs[0].address;
150 state->r.in.my_computername = state->my_netbios_name;
151 state->r.in.my_accountname = talloc_asprintf(state, "%s$", state->my_netbios_name);
152 if (composite_nomem(state->r.in.my_accountname, state->ctx)) return;
153 state->r.in.account_control = ACB_WSTRUST;
154 state->r.in.domain_sid = state->domain_sid;
156 ireq = irpc_call_send(state->msg_ctx, nbt_servers[0],
157 &ndr_table_irpc, NDR_NBTD_GETDCNAME,
160 fallback_node_status(state);
164 composite_continue_irpc(state->ctx, ireq, finddcs_getdc_replied, state);
167 /* Called when the GetDC request returns */
168 static void finddcs_getdc_replied(struct irpc_request *ireq)
170 struct finddcs_state *state =
171 talloc_get_type(ireq->async.private, struct finddcs_state);
173 state->ctx->status = irpc_call_recv(ireq);
174 if (!composite_is_ok(state->ctx)) return;
176 state->dcs[0].name = talloc_steal(state->dcs, state->r.out.dcname);
177 composite_done(state->ctx);
180 /* The GetDC request might not be availible (such as occours when the
181 * NBT server is down). Fallback to a node status. It is the best
183 static void fallback_node_status(struct finddcs_state *state)
185 struct nbt_name_socket *nbtsock;
186 struct nbt_name_request *name_req;
188 state->node_status.in.name.name = "*";
189 state->node_status.in.name.type = NBT_NAME_CLIENT;
190 state->node_status.in.name.scope = NULL;
191 state->node_status.in.dest_addr = state->dcs[0].address;
192 state->node_status.in.timeout = 1;
193 state->node_status.in.retries = 2;
195 nbtsock = nbt_name_socket_init(state, state->ctx->event_ctx);
196 if (composite_nomem(nbtsock, state->ctx)) return;
198 name_req = nbt_name_status_send(nbtsock, &state->node_status);
199 if (composite_nomem(name_req, state->ctx)) return;
201 composite_continue_nbt(state->ctx,
203 fallback_node_status_replied,
207 /* We have a node status reply (or perhaps a timeout) */
208 static void fallback_node_status_replied(struct nbt_name_request *name_req)
211 struct finddcs_state *state = talloc_get_type(name_req->async.private, struct finddcs_state);
212 state->ctx->status = nbt_name_status_recv(name_req, state, &state->node_status);
213 if (!composite_is_ok(state->ctx)) return;
215 for (i=0; i < state->node_status.out.status.num_names; i++) {
217 if (state->node_status.out.status.names[i].type == NBT_NAME_SERVER) {
218 char *name = talloc_strndup(state->dcs, state->node_status.out.status.names[0].name, 15);
219 /* Strip space padding */
221 j = MIN(strlen(name), 15);
222 for (; j > 0 && name[j - 1] == ' '; j--) {
226 state->dcs[0].name = name;
227 composite_done(state->ctx);
231 composite_error(state->ctx, NT_STATUS_NO_LOGON_SERVERS);
234 NTSTATUS finddcs_recv(struct composite_context *c, TALLOC_CTX *mem_ctx,
235 int *num_dcs, struct nbt_dc_name **dcs)
237 NTSTATUS status = composite_wait(c);
238 if (NT_STATUS_IS_OK(status)) {
239 struct finddcs_state *state =
240 talloc_get_type(c->private_data, struct finddcs_state);
241 *num_dcs = state->num_dcs;
242 *dcs = talloc_steal(mem_ctx, state->dcs);
248 NTSTATUS finddcs(TALLOC_CTX *mem_ctx,
249 const char *my_netbios_name,
250 const char *domain_name, int name_type,
251 struct dom_sid *domain_sid,
252 struct resolve_context *resolve_ctx,
253 struct event_context *event_ctx,
254 struct messaging_context *msg_ctx,
255 int *num_dcs, struct nbt_dc_name **dcs)
257 struct composite_context *c = finddcs_send(mem_ctx,
259 domain_name, name_type,
260 domain_sid, resolve_ctx,
262 return finddcs_recv(c, mem_ctx, num_dcs, dcs);