2 Unix SMB/CIFS implementation.
4 Copyright (C) Andrew Tridgell 1994-1998
5 Copyright (C) Jeremy Allison 2007.
7 This program is free software; you can redistribute it and/or modify
8 it under the terms of the GNU General Public License as published by
9 the Free Software Foundation; either version 3 of the License, or
10 (at your option) any later version.
12 This program is distributed in the hope that it will be useful,
13 but WITHOUT ANY WARRANTY; without even the implied warranty of
14 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
15 GNU General Public License for more details.
17 You should have received a copy of the GNU General Public License
18 along with this program. If not, see <http://www.gnu.org/licenses/>.
23 /* nmbd.c sets this to True. */
24 bool global_in_nmbd = False;
26 /****************************
27 * SERVER AFFINITY ROUTINES *
28 ****************************/
30 /* Server affinity is the concept of preferring the last domain
31 controller with whom you had a successful conversation */
33 /****************************************************************************
34 ****************************************************************************/
35 #define SAFKEY_FMT "SAF/DOMAIN/%s"
38 static char *saf_key(const char *domain)
42 asprintf_strupper_m(&keystr, SAFKEY_FMT, domain);
47 /****************************************************************************
48 ****************************************************************************/
50 bool saf_store( const char *domain, const char *servername )
56 if ( !domain || !servername ) {
57 DEBUG(2,("saf_store: "
58 "Refusing to store empty domain or servername!\n"));
62 if ( (strlen(domain) == 0) || (strlen(servername) == 0) ) {
63 DEBUG(0,("saf_store: "
64 "refusing to store 0 length domain or servername!\n"));
68 if ( !gencache_init() )
71 key = saf_key( domain );
72 expire = time( NULL ) + SAF_TTL;
74 DEBUG(10,("saf_store: domain = [%s], server = [%s], expire = [%u]\n",
75 domain, servername, (unsigned int)expire ));
77 ret = gencache_set( key, servername, expire );
84 bool saf_delete( const char *domain )
90 DEBUG(2,("saf_delete: Refusing to delete empty domain\n"));
94 if ( !gencache_init() )
97 key = saf_key(domain);
98 ret = gencache_del(key);
101 DEBUG(10,("saf_delete: domain = [%s]\n", domain ));
109 /****************************************************************************
110 ****************************************************************************/
112 char *saf_fetch( const char *domain )
119 if ( !domain || strlen(domain) == 0) {
120 DEBUG(2,("saf_fetch: Empty domain name!\n"));
124 if ( !gencache_init() )
127 key = saf_key( domain );
129 ret = gencache_get( key, &server, &timeout );
134 DEBUG(5,("saf_fetch: failed to find server for \"%s\" domain\n",
137 DEBUG(5,("saf_fetch: Returning \"%s\" for \"%s\" domain\n",
144 /****************************************************************************
145 Generate a random trn_id.
146 ****************************************************************************/
148 static int generate_trn_id(void)
152 generate_random_buffer((uint8 *)&id, sizeof(id));
154 return id % (unsigned)0x7FFF;
157 /****************************************************************************
158 Parse a node status response into an array of structures.
159 ****************************************************************************/
161 static NODE_STATUS_STRUCT *parse_node_status(char *p,
163 struct node_status_extra *extra)
165 NODE_STATUS_STRUCT *ret;
168 *num_names = CVAL(p,0);
173 ret = SMB_MALLOC_ARRAY(NODE_STATUS_STRUCT,*num_names);
178 for (i=0;i< *num_names;i++) {
179 StrnCpy(ret[i].name,p,15);
180 trim_char(ret[i].name,'\0',' ');
181 ret[i].type = CVAL(p,15);
182 ret[i].flags = p[16];
184 DEBUG(10, ("%s#%02x: flags = 0x%02x\n", ret[i].name,
185 ret[i].type, ret[i].flags));
188 * Also, pick up the MAC address ...
191 memcpy(&extra->mac_addr, p, 6); /* Fill in the mac addr */
197 /****************************************************************************
198 Do a NBT node status query on an open socket and return an array of
199 structures holding the returned names or NULL if the query failed.
200 **************************************************************************/
202 NODE_STATUS_STRUCT *node_status_query(int fd,
203 struct nmb_name *name,
204 const struct sockaddr_storage *to_ss,
206 struct node_status_extra *extra)
210 int retry_time = 2000;
212 struct packet_struct p;
213 struct packet_struct *p2;
214 struct nmb_packet *nmb = &p.packet.nmb;
215 NODE_STATUS_STRUCT *ret;
219 if (to_ss->ss_family != AF_INET) {
220 /* Can't do node status to IPv6 */
223 nmb->header.name_trn_id = generate_trn_id();
224 nmb->header.opcode = 0;
225 nmb->header.response = false;
226 nmb->header.nm_flags.bcast = false;
227 nmb->header.nm_flags.recursion_available = false;
228 nmb->header.nm_flags.recursion_desired = false;
229 nmb->header.nm_flags.trunc = false;
230 nmb->header.nm_flags.authoritative = false;
231 nmb->header.rcode = 0;
232 nmb->header.qdcount = 1;
233 nmb->header.ancount = 0;
234 nmb->header.nscount = 0;
235 nmb->header.arcount = 0;
236 nmb->question.question_name = *name;
237 nmb->question.question_type = 0x21;
238 nmb->question.question_class = 0x1;
240 p.ip = ((const struct sockaddr_in *)to_ss)->sin_addr;
243 p.timestamp = time(NULL);
244 p.packet_type = NMB_PACKET;
248 if (!send_packet(&p))
254 struct timeval tval2;
255 GetTimeOfDay(&tval2);
256 if (TvalDiff(&tval,&tval2) > retry_time) {
259 if (!found && !send_packet(&p))
265 if ((p2=receive_nmb_packet(fd,90,nmb->header.name_trn_id))) {
266 struct nmb_packet *nmb2 = &p2->packet.nmb;
267 debug_nmb_packet(p2);
269 if (nmb2->header.opcode != 0 ||
270 nmb2->header.nm_flags.bcast ||
271 nmb2->header.rcode ||
272 !nmb2->header.ancount ||
273 nmb2->answers->rr_type != 0x21) {
274 /* XXXX what do we do with this? could be a
275 redirect, but we'll discard it for the
281 ret = parse_node_status(&nmb2->answers->rdata[0],
291 /****************************************************************************
292 Find the first type XX name in a node status reply - used for finding
293 a servers name given its IP. Return the matched name in *name.
294 **************************************************************************/
296 bool name_status_find(const char *q_name,
299 const struct sockaddr_storage *to_ss,
302 char addr[INET6_ADDRSTRLEN];
303 struct sockaddr_storage ss;
304 NODE_STATUS_STRUCT *status = NULL;
305 struct nmb_name nname;
310 if (lp_disable_netbios()) {
311 DEBUG(5,("name_status_find(%s#%02x): netbios is disabled\n",
316 print_sockaddr(addr, sizeof(addr), to_ss);
318 DEBUG(10, ("name_status_find: looking up %s#%02x at %s\n", q_name,
321 /* Check the cache first. */
323 if (namecache_status_fetch(q_name, q_type, type, to_ss, name)) {
327 if (to_ss->ss_family != AF_INET) {
328 /* Can't do node status to IPv6 */
332 if (!interpret_string_addr(&ss, lp_socket_address(),
333 AI_NUMERICHOST|AI_PASSIVE)) {
337 sock = open_socket_in(SOCK_DGRAM, 0, 3, &ss, True);
341 /* W2K PDC's seem not to respond to '*'#0. JRA */
342 make_nmb_name(&nname, q_name, q_type);
343 status = node_status_query(sock, &nname, to_ss, &count, NULL);
348 for (i=0;i<count;i++) {
349 if (status[i].type == type)
355 pull_ascii_nstring(name, sizeof(fstring), status[i].name);
357 /* Store the result in the cache. */
358 /* but don't store an entry for 0x1c names here. Here we have
359 a single host and DOMAIN<0x1c> names should be a list of hosts */
361 if ( q_type != 0x1c ) {
362 namecache_status_store(q_name, q_type, type, to_ss, name);
370 DEBUG(10, ("name_status_find: name %sfound", result ? "" : "not "));
373 DEBUGADD(10, (", name %s ip address is %s", name, addr));
381 comparison function used by sort_addr_list
384 static int addr_compare(const struct sockaddr_storage *ss1,
385 const struct sockaddr_storage *ss2)
387 int max_bits1=0, max_bits2=0;
388 int num_interfaces = iface_count();
391 /* Sort IPv6 addresses first. */
392 if (ss1->ss_family != ss2->ss_family) {
393 if (ss2->ss_family == AF_INET) {
400 /* Here we know both addresses are of the same
403 for (i=0;i<num_interfaces;i++) {
404 const struct sockaddr_storage *pss = iface_n_bcast(i);
405 unsigned char *p_ss1 = NULL;
406 unsigned char *p_ss2 = NULL;
407 unsigned char *p_if = NULL;
411 if (pss->ss_family != ss1->ss_family) {
412 /* Ignore interfaces of the wrong type. */
415 if (pss->ss_family == AF_INET) {
416 p_if = (unsigned char *)
417 &((const struct sockaddr_in *)pss)->sin_addr;
418 p_ss1 = (unsigned char *)
419 &((const struct sockaddr_in *)ss1)->sin_addr;
420 p_ss2 = (unsigned char *)
421 &((const struct sockaddr_in *)ss2)->sin_addr;
424 #if defined(HAVE_IPV6)
425 if (pss->ss_family == AF_INET6) {
426 p_if = (unsigned char *)
427 &((const struct sockaddr_in6 *)pss)->sin6_addr;
428 p_ss1 = (unsigned char *)
429 &((const struct sockaddr_in6 *)ss1)->sin6_addr;
430 p_ss2 = (unsigned char *)
431 &((const struct sockaddr_in6 *)ss2)->sin6_addr;
435 if (!p_ss1 || !p_ss2 || !p_if || len == 0) {
438 bits1 = matching_len_bits(p_ss1, p_if, len);
439 bits2 = matching_len_bits(p_ss2, p_if, len);
440 max_bits1 = MAX(bits1, max_bits1);
441 max_bits2 = MAX(bits2, max_bits2);
444 /* Bias towards directly reachable IPs */
445 if (iface_local(ss1)) {
446 if (ss1->ss_family == AF_INET) {
452 if (iface_local(ss2)) {
453 if (ss2->ss_family == AF_INET) {
459 return max_bits2 - max_bits1;
462 /*******************************************************************
463 compare 2 ldap IPs by nearness to our interfaces - used in qsort
464 *******************************************************************/
466 int ip_service_compare(struct ip_service *ss1, struct ip_service *ss2)
470 if ((result = addr_compare(&ss1->ss, &ss2->ss)) != 0) {
474 if (ss1->port > ss2->port) {
478 if (ss1->port < ss2->port) {
486 sort an IP list so that names that are close to one of our interfaces
487 are at the top. This prevents the problem where a WINS server returns an IP
488 that is not reachable from our subnet as the first match
491 static void sort_addr_list(struct sockaddr_storage *sslist, int count)
497 qsort(sslist, count, sizeof(struct sockaddr_storage),
498 QSORT_CAST addr_compare);
501 static void sort_service_list(struct ip_service *servlist, int count)
507 qsort(servlist, count, sizeof(struct ip_service),
508 QSORT_CAST ip_service_compare);
511 /**********************************************************************
512 Remove any duplicate address/port pairs in the list
513 *********************************************************************/
515 static int remove_duplicate_addrs2(struct ip_service *iplist, int count )
519 DEBUG(10,("remove_duplicate_addrs2: "
520 "looking for duplicate address/port pairs\n"));
522 /* one loop to remove duplicates */
523 for ( i=0; i<count; i++ ) {
524 if ( is_zero_addr(&iplist[i].ss)) {
528 for ( j=i+1; j<count; j++ ) {
529 if (addr_equal(&iplist[i].ss, &iplist[j].ss) &&
530 iplist[i].port == iplist[j].port) {
531 zero_addr(&iplist[j].ss);
536 /* one loop to clean up any holes we left */
537 /* first ip should never be a zero_ip() */
538 for (i = 0; i<count; ) {
539 if (is_zero_addr(&iplist[i].ss) ) {
541 memmove(&iplist[i], &iplist[i+1],
542 (count - i - 1)*sizeof(iplist[i]));
553 /****************************************************************************
554 Do a netbios name query to find someones IP.
555 Returns an array of IP addresses or NULL if none.
556 *count will be set to the number of addresses returned.
557 *timed_out is set if we failed by timing out
558 ****************************************************************************/
560 struct sockaddr_storage *name_query(int fd,
565 const struct sockaddr_storage *to_ss,
572 int retry_time = bcast?250:2000;
574 struct packet_struct p;
575 struct packet_struct *p2;
576 struct nmb_packet *nmb = &p.packet.nmb;
577 struct sockaddr_storage *ss_list = NULL;
579 if (lp_disable_netbios()) {
580 DEBUG(5,("name_query(%s#%02x): netbios is disabled\n",
585 if (to_ss->ss_family != AF_INET) {
593 memset((char *)&p,'\0',sizeof(p));
597 nmb->header.name_trn_id = generate_trn_id();
598 nmb->header.opcode = 0;
599 nmb->header.response = false;
600 nmb->header.nm_flags.bcast = bcast;
601 nmb->header.nm_flags.recursion_available = false;
602 nmb->header.nm_flags.recursion_desired = recurse;
603 nmb->header.nm_flags.trunc = false;
604 nmb->header.nm_flags.authoritative = false;
605 nmb->header.rcode = 0;
606 nmb->header.qdcount = 1;
607 nmb->header.ancount = 0;
608 nmb->header.nscount = 0;
609 nmb->header.arcount = 0;
611 make_nmb_name(&nmb->question.question_name,name,name_type);
613 nmb->question.question_type = 0x20;
614 nmb->question.question_class = 0x1;
616 p.ip = ((struct sockaddr_in *)to_ss)->sin_addr;
619 p.timestamp = time(NULL);
620 p.packet_type = NMB_PACKET;
624 if (!send_packet(&p))
630 struct timeval tval2;
632 GetTimeOfDay(&tval2);
633 if (TvalDiff(&tval,&tval2) > retry_time) {
636 if (!found && !send_packet(&p))
642 if ((p2=receive_nmb_packet(fd,90,nmb->header.name_trn_id))) {
643 struct nmb_packet *nmb2 = &p2->packet.nmb;
644 debug_nmb_packet(p2);
646 /* If we get a Negative Name Query Response from a WINS
647 * server, we should report it and give up.
649 if( 0 == nmb2->header.opcode /* A query response */
650 && !(bcast) /* from a WINS server */
651 && nmb2->header.rcode /* Error returned */
654 if( DEBUGLVL( 3 ) ) {
655 /* Only executed if DEBUGLEVEL >= 3 */
656 dbgtext( "Negative name query "
657 "response, rcode 0x%02x: ",
658 nmb2->header.rcode );
659 switch( nmb2->header.rcode ) {
662 "was invalidly formatted.\n" );
665 dbgtext( "Problem with NBNS, "
666 "cannot process name.\n");
669 dbgtext( "The name requested "
670 "does not exist.\n" );
673 dbgtext( "Unsupported request "
677 dbgtext( "Query refused "
681 dbgtext( "Unrecognized error "
690 if (nmb2->header.opcode != 0 ||
691 nmb2->header.nm_flags.bcast ||
692 nmb2->header.rcode ||
693 !nmb2->header.ancount) {
695 * XXXX what do we do with this? Could be a
696 * redirect, but we'll discard it for the
703 ss_list = SMB_REALLOC_ARRAY(ss_list,
704 struct sockaddr_storage,
706 nmb2->answers->rdlength/6);
709 DEBUG(0,("name_query: Realloc failed.\n"));
714 DEBUG(2,("Got a positive name query response "
718 for (i=0;i<nmb2->answers->rdlength/6;i++) {
720 putip((char *)&ip,&nmb2->answers->rdata[2+i*6]);
721 in_addr_to_sockaddr_storage(&ss_list[(*count)],
723 DEBUGADD(2,("%s ",inet_ntoa(ip)));
730 /* We add the flags back ... */
731 if (nmb2->header.response)
732 (*flags) |= NM_FLAGS_RS;
733 if (nmb2->header.nm_flags.authoritative)
734 (*flags) |= NM_FLAGS_AA;
735 if (nmb2->header.nm_flags.trunc)
736 (*flags) |= NM_FLAGS_TC;
737 if (nmb2->header.nm_flags.recursion_desired)
738 (*flags) |= NM_FLAGS_RD;
739 if (nmb2->header.nm_flags.recursion_available)
740 (*flags) |= NM_FLAGS_RA;
741 if (nmb2->header.nm_flags.bcast)
742 (*flags) |= NM_FLAGS_B;
745 * If we're doing a unicast lookup we only
746 * expect one reply. Don't wait the full 2
747 * seconds if we got one. JRA.
754 /* only set timed_out if we didn't fund what we where looking for*/
756 if ( !found && timed_out ) {
760 /* sort the ip list so we choose close servers first if possible */
761 sort_addr_list(ss_list, *count);
766 /********************************************************
767 Start parsing the lmhosts file.
768 *********************************************************/
770 XFILE *startlmhosts(const char *fname)
772 XFILE *fp = x_fopen(fname,O_RDONLY, 0);
774 DEBUG(4,("startlmhosts: Can't open lmhosts file %s. "
776 fname, strerror(errno)));
782 /********************************************************
783 Parse the next line in the lmhosts file.
784 *********************************************************/
786 bool getlmhostsent(TALLOC_CTX *ctx, XFILE *fp, char **pp_name, int *name_type,
787 struct sockaddr_storage *pss)
793 while(!x_feof(fp) && !x_ferror(fp)) {
804 if (!fgets_slash(line,sizeof(line),fp)) {
818 if (next_token_talloc(ctx, &ptr, &ip, NULL))
820 if (next_token_talloc(ctx, &ptr, &name, NULL))
822 if (next_token_talloc(ctx, &ptr, &flags, NULL))
824 if (next_token_talloc(ctx, &ptr, &extra, NULL))
830 if (count > 0 && count < 2) {
831 DEBUG(0,("getlmhostsent: Ill formed hosts line [%s]\n",
837 DEBUG(0,("getlmhostsent: too many columns "
838 "in lmhosts file (obsolete syntax)\n"));
842 DEBUG(4, ("getlmhostsent: lmhost entry: %s %s %s\n",
845 if (strchr_m(flags,'G') || strchr_m(flags,'S')) {
846 DEBUG(0,("getlmhostsent: group flag "
847 "in lmhosts ignored (obsolete)\n"));
851 if (!interpret_string_addr(pss, ip, AI_NUMERICHOST)) {
852 DEBUG(0,("getlmhostsent: invalid address "
856 /* Extra feature. If the name ends in '#XX',
857 * where XX is a hex number, then only add that name type. */
858 if((ptr1 = strchr_m(name, '#')) != NULL) {
862 *name_type = (int)strtol(ptr1, &endptr, 16);
863 if(!*ptr1 || (endptr == ptr1)) {
864 DEBUG(0,("getlmhostsent: invalid name "
865 "%s containing '#'.\n", name));
869 *(--ptr1) = '\0'; /* Truncate at the '#' */
872 *pp_name = talloc_strdup(ctx, name);
882 /********************************************************
883 Finish parsing the lmhosts file.
884 *********************************************************/
886 void endlmhosts(XFILE *fp)
891 /********************************************************
892 convert an array if struct sockaddr_storage to struct ip_service
893 return false on failure. Port is set to PORT_NONE;
894 *********************************************************/
896 static bool convert_ss2service(struct ip_service **return_iplist,
897 const struct sockaddr_storage *ss_list,
902 if ( count==0 || !ss_list )
905 /* copy the ip address; port will be PORT_NONE */
906 if ((*return_iplist = SMB_MALLOC_ARRAY(struct ip_service, count)) ==
908 DEBUG(0,("convert_ip2service: malloc failed "
909 "for %d enetries!\n", count ));
913 for ( i=0; i<count; i++ ) {
914 (*return_iplist)[i].ss = ss_list[i];
915 (*return_iplist)[i].port = PORT_NONE;
921 /********************************************************
922 Resolve via "bcast" method.
923 *********************************************************/
925 NTSTATUS name_resolve_bcast(const char *name,
927 struct ip_service **return_iplist,
931 int num_interfaces = iface_count();
932 struct sockaddr_storage *ss_list;
933 struct sockaddr_storage ss;
936 if (lp_disable_netbios()) {
937 DEBUG(5,("name_resolve_bcast(%s#%02x): netbios is disabled\n",
939 return NT_STATUS_INVALID_PARAMETER;
942 *return_iplist = NULL;
946 * "bcast" means do a broadcast lookup on all the local interfaces.
949 DEBUG(3,("name_resolve_bcast: Attempting broadcast lookup "
950 "for name %s<0x%x>\n", name, name_type));
952 if (!interpret_string_addr(&ss, lp_socket_address(),
953 AI_NUMERICHOST|AI_PASSIVE)) {
957 sock = open_socket_in( SOCK_DGRAM, 0, 3, &ss, true );
959 return NT_STATUS_UNSUCCESSFUL;
962 set_socket_options(sock,"SO_BROADCAST");
964 * Lookup the name on all the interfaces, return on
965 * the first successful match.
967 for( i = num_interfaces-1; i >= 0; i--) {
968 const struct sockaddr_storage *pss = iface_n_bcast(i);
971 /* Done this way to fix compiler error on IRIX 5.x */
975 ss_list = name_query(sock, name, name_type, true,
976 true, pss, return_count, &flags, NULL);
982 /* failed - no response */
985 return NT_STATUS_UNSUCCESSFUL;
989 status = NT_STATUS_OK;
990 if (!convert_ss2service(return_iplist, ss_list, *return_count) )
991 status = NT_STATUS_INVALID_PARAMETER;
998 /********************************************************
999 Resolve via "wins" method.
1000 *********************************************************/
1002 NTSTATUS resolve_wins(const char *name,
1004 struct ip_service **return_iplist,
1009 struct sockaddr_storage src_ss, *ss_list = NULL;
1010 struct in_addr src_ip;
1013 if (lp_disable_netbios()) {
1014 DEBUG(5,("resolve_wins(%s#%02x): netbios is disabled\n",
1016 return NT_STATUS_INVALID_PARAMETER;
1019 *return_iplist = NULL;
1022 DEBUG(3,("resolve_wins: Attempting wins lookup for name %s<0x%x>\n",
1025 if (wins_srv_count() < 1) {
1026 DEBUG(3,("resolve_wins: WINS server resolution selected "
1027 "and no WINS servers listed.\n"));
1028 return NT_STATUS_INVALID_PARAMETER;
1031 /* we try a lookup on each of the WINS tags in turn */
1032 wins_tags = wins_srv_tags();
1035 /* huh? no tags?? give up in disgust */
1036 return NT_STATUS_INVALID_PARAMETER;
1039 /* the address we will be sending from */
1040 if (!interpret_string_addr(&src_ss, lp_socket_address(),
1041 AI_NUMERICHOST|AI_PASSIVE)) {
1045 if (src_ss.ss_family != AF_INET) {
1046 char addr[INET6_ADDRSTRLEN];
1047 print_sockaddr(addr, sizeof(addr), &src_ss);
1048 DEBUG(3,("resolve_wins: cannot receive WINS replies "
1049 "on IPv6 address %s\n",
1051 return NT_STATUS_INVALID_PARAMETER;
1054 src_ip = ((struct sockaddr_in *)&src_ss)->sin_addr;
1056 /* in the worst case we will try every wins server with every
1058 for (t=0; wins_tags && wins_tags[t]; t++) {
1059 int srv_count = wins_srv_count_tag(wins_tags[t]);
1060 for (i=0; i<srv_count; i++) {
1061 struct sockaddr_storage wins_ss;
1062 struct in_addr wins_ip;
1066 wins_ip = wins_srv_ip_tag(wins_tags[t], src_ip);
1068 if (global_in_nmbd && ismyip_v4(wins_ip)) {
1069 /* yikes! we'll loop forever */
1073 /* skip any that have been unresponsive lately */
1074 if (wins_srv_is_dead(wins_ip, src_ip)) {
1078 DEBUG(3,("resolve_wins: using WINS server %s "
1080 inet_ntoa(wins_ip), wins_tags[t]));
1082 sock = open_socket_in(SOCK_DGRAM, 0, 3, &src_ss, true);
1087 in_addr_to_sockaddr_storage(&wins_ss, wins_ip);
1088 ss_list = name_query(sock,
1098 /* exit loop if we got a list of addresses */
1106 /* Timed out wating for WINS server to respond.
1108 wins_srv_died(wins_ip, src_ip);
1110 /* The name definately isn't in this
1111 group of WINS servers.
1112 goto the next group */
1118 wins_srv_tags_free(wins_tags);
1119 return NT_STATUS_NO_LOGON_SERVERS;
1123 status = NT_STATUS_OK;
1124 if (!convert_ss2service(return_iplist, ss_list, *return_count))
1125 status = NT_STATUS_INVALID_PARAMETER;
1128 wins_srv_tags_free(wins_tags);
1134 /********************************************************
1135 Resolve via "lmhosts" method.
1136 *********************************************************/
1138 static NTSTATUS resolve_lmhosts(const char *name, int name_type,
1139 struct ip_service **return_iplist,
1143 * "lmhosts" means parse the local lmhosts file.
1147 char *lmhost_name = NULL;
1149 struct sockaddr_storage return_ss;
1150 NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1151 TALLOC_CTX *ctx = NULL;
1153 *return_iplist = NULL;
1156 DEBUG(3,("resolve_lmhosts: "
1157 "Attempting lmhosts lookup for name %s<0x%x>\n",
1160 fp = startlmhosts(dyn_LMHOSTSFILE);
1163 return NT_STATUS_NO_SUCH_FILE;
1165 ctx = talloc_init("resolve_lmhosts");
1168 return NT_STATUS_NO_MEMORY;
1171 while (getlmhostsent(ctx, fp, &lmhost_name, &name_type2, &return_ss)) {
1173 if (!strequal(name, lmhost_name)) {
1174 TALLOC_FREE(lmhost_name);
1178 if ((name_type2 != -1) && (name_type != name_type2)) {
1179 TALLOC_FREE(lmhost_name);
1183 *return_iplist = SMB_REALLOC_ARRAY((*return_iplist),
1187 if ((*return_iplist) == NULL) {
1190 DEBUG(3,("resolve_lmhosts: malloc fail !\n"));
1191 return NT_STATUS_NO_MEMORY;
1194 (*return_iplist)[*return_count].ss = return_ss;
1195 (*return_iplist)[*return_count].port = PORT_NONE;
1198 /* we found something */
1199 status = NT_STATUS_OK;
1201 /* Multiple names only for DC lookup */
1202 if (name_type != 0x1c)
1212 /********************************************************
1213 Resolve via "hosts" method.
1214 *********************************************************/
1216 static NTSTATUS resolve_hosts(const char *name, int name_type,
1217 struct ip_service **return_iplist,
1221 * "host" means do a localhost, or dns lookup.
1223 struct addrinfo hints;
1224 struct addrinfo *ailist = NULL;
1225 struct addrinfo *res = NULL;
1229 if ( name_type != 0x20 && name_type != 0x0) {
1230 DEBUG(5, ("resolve_hosts: not appropriate "
1231 "for name type <0x%x>\n",
1233 return NT_STATUS_INVALID_PARAMETER;
1236 *return_iplist = NULL;
1239 DEBUG(3,("resolve_hosts: Attempting host lookup for name %s<0x%x>\n",
1243 /* By default make sure it supports TCP. */
1244 hints.ai_socktype = SOCK_STREAM;
1245 hints.ai_flags = AI_ADDRCONFIG;
1247 ret = getaddrinfo(name,
1252 DEBUG(3,("resolve_hosts: getaddrinfo failed for name %s [%s]\n",
1254 gai_strerror(ret) ));
1257 for (res = ailist; res; res = res->ai_next) {
1258 struct sockaddr_storage ss;
1260 if (!res->ai_addr || res->ai_addrlen == 0) {
1264 memset(&ss, '\0', sizeof(ss));
1265 memcpy(&ss, res->ai_addr, res->ai_addrlen);
1269 *return_iplist = SMB_REALLOC_ARRAY(*return_iplist,
1272 if (!*return_iplist) {
1273 DEBUG(3,("resolve_hosts: malloc fail !\n"));
1274 freeaddrinfo(ailist);
1275 return NT_STATUS_NO_MEMORY;
1277 (*return_iplist)[i].ss = ss;
1278 (*return_iplist)[i].port = PORT_NONE;
1282 freeaddrinfo(ailist);
1284 if (*return_count) {
1285 return NT_STATUS_OK;
1287 return NT_STATUS_UNSUCCESSFUL;
1290 /********************************************************
1291 Resolve via "ADS" method.
1292 *********************************************************/
1294 NTSTATUS resolve_ads(const char *name,
1296 const char *sitename,
1297 struct ip_service **return_iplist,
1303 struct dns_rr_srv *dcs = NULL;
1307 if ((name_type != 0x1c) && (name_type != KDC_NAME_TYPE) &&
1308 (name_type != 0x1b)) {
1309 return NT_STATUS_INVALID_PARAMETER;
1312 if ( (ctx = talloc_init("resolve_ads")) == NULL ) {
1313 DEBUG(0,("resolve_ads: talloc_init() failed!\n"));
1314 return NT_STATUS_NO_MEMORY;
1317 /* The DNS code needs fixing to find IPv6 addresses... JRA. */
1319 switch (name_type) {
1321 DEBUG(5,("resolve_ads: Attempting to resolve "
1322 "PDC for %s using DNS\n", name));
1323 status = ads_dns_query_pdc(ctx, name, &dcs, &numdcs);
1327 DEBUG(5,("resolve_ads: Attempting to resolve "
1328 "DCs for %s using DNS\n", name));
1329 status = ads_dns_query_dcs(ctx, name, sitename, &dcs,
1333 DEBUG(5,("resolve_ads: Attempting to resolve "
1334 "KDCs for %s using DNS\n", name));
1335 status = ads_dns_query_kdcs(ctx, name, sitename, &dcs,
1339 status = NT_STATUS_INVALID_PARAMETER;
1343 if ( !NT_STATUS_IS_OK( status ) ) {
1344 talloc_destroy(ctx);
1348 for (i=0;i<numdcs;i++) {
1349 numaddrs += MAX(dcs[i].num_ips,1);
1352 if ((*return_iplist = SMB_MALLOC_ARRAY(struct ip_service, numaddrs)) ==
1354 DEBUG(0,("resolve_ads: malloc failed for %d entries\n",
1356 talloc_destroy(ctx);
1357 return NT_STATUS_NO_MEMORY;
1360 /* now unroll the list of IP addresses */
1365 while ( i < numdcs && (*return_count<numaddrs) ) {
1366 struct ip_service *r = &(*return_iplist)[*return_count];
1368 r->port = dcs[i].port;
1370 /* If we don't have an IP list for a name, lookup it up */
1373 interpret_string_addr(&r->ss, dcs[i].hostname, 0);
1377 /* use the IP addresses from the SRV sresponse */
1379 if ( j >= dcs[i].num_ips ) {
1385 r->ss = dcs[i].ss_s[j];
1389 /* make sure it is a valid IP. I considered checking the
1390 * negative connection cache, but this is the wrong place
1391 * for it. Maybe only as a hack. After think about it, if
1392 * all of the IP addresses returned from DNS are dead, what
1393 * hope does a netbios name lookup have ? The standard reason
1394 * for falling back to netbios lookups is that our DNS server
1395 * doesn't know anything about the DC's -- jerry */
1397 if (!is_zero_addr(&r->ss)) {
1402 talloc_destroy(ctx);
1403 return NT_STATUS_OK;
1406 /*******************************************************************
1407 Internal interface to resolve a name into an IP address.
1408 Use this function if the string is either an IP address, DNS
1409 or host name or NetBIOS name. This uses the name switch in the
1410 smb.conf to determine the order of name resolution.
1412 Added support for ip addr/port to support ADS ldap servers.
1413 the only place we currently care about the port is in the
1414 resolve_hosts() when looking up DC's via SRV RR entries in DNS
1415 **********************************************************************/
1417 NTSTATUS internal_resolve_name(const char *name,
1419 const char *sitename,
1420 struct ip_service **return_iplist,
1422 const char *resolve_order)
1424 const char *name_resolve_list;
1427 NTSTATUS status = NT_STATUS_UNSUCCESSFUL;
1429 TALLOC_CTX *frame = NULL;
1431 *return_iplist = NULL;
1434 DEBUG(10, ("internal_resolve_name: looking up %s#%x (sitename %s)\n",
1435 name, name_type, sitename ? sitename : NULL));
1437 if (is_ipaddress(name)) {
1438 if ((*return_iplist = SMB_MALLOC_P(struct ip_service)) ==
1440 DEBUG(0,("internal_resolve_name: malloc fail !\n"));
1441 return NT_STATUS_NO_MEMORY;
1444 /* ignore the port here */
1445 (*return_iplist)->port = PORT_NONE;
1447 /* if it's in the form of an IP address then get the lib to interpret it */
1448 if (!interpret_string_addr(&(*return_iplist)->ss,
1449 name, AI_NUMERICHOST)) {
1450 DEBUG(1,("internal_resolve_name: interpret_string_addr "
1453 SAFE_FREE(*return_iplist);
1454 return NT_STATUS_INVALID_PARAMETER;
1457 return NT_STATUS_OK;
1460 /* Check name cache */
1462 if (namecache_fetch(name, name_type, return_iplist, return_count)) {
1463 /* This could be a negative response */
1464 if (*return_count > 0) {
1465 return NT_STATUS_OK;
1467 return NT_STATUS_UNSUCCESSFUL;
1471 /* set the name resolution order */
1473 if (strcmp( resolve_order, "NULL") == 0) {
1474 DEBUG(8,("internal_resolve_name: all lookups disabled\n"));
1475 return NT_STATUS_INVALID_PARAMETER;
1478 if (!resolve_order) {
1479 name_resolve_list = lp_name_resolve_order();
1481 name_resolve_list = resolve_order;
1484 if (!name_resolve_list[0]) {
1487 ptr = name_resolve_list;
1490 /* iterate through the name resolution backends */
1492 frame = talloc_stackframe();
1493 while (next_token_talloc(frame, &ptr, &tok, LIST_SEP)) {
1494 if((strequal(tok, "host") || strequal(tok, "hosts"))) {
1495 status = resolve_hosts(name, name_type, return_iplist,
1497 if (NT_STATUS_IS_OK(status)) {
1500 } else if(strequal( tok, "kdc")) {
1501 /* deal with KDC_NAME_TYPE names here.
1502 * This will result in a SRV record lookup */
1503 status = resolve_ads(name, KDC_NAME_TYPE, sitename,
1504 return_iplist, return_count);
1505 if (NT_STATUS_IS_OK(status)) {
1506 /* Ensure we don't namecache
1507 * this with the KDC port. */
1508 name_type = KDC_NAME_TYPE;
1511 } else if(strequal( tok, "ads")) {
1512 /* deal with 0x1c and 0x1b names here.
1513 * This will result in a SRV record lookup */
1514 status = resolve_ads(name, name_type, sitename,
1515 return_iplist, return_count);
1516 if (NT_STATUS_IS_OK(status)) {
1519 } else if(strequal( tok, "lmhosts")) {
1520 status = resolve_lmhosts(name, name_type,
1521 return_iplist, return_count);
1522 if (NT_STATUS_IS_OK(status)) {
1525 } else if(strequal( tok, "wins")) {
1526 /* don't resolve 1D via WINS */
1527 if (name_type != 0x1D) {
1528 status = resolve_wins(name, name_type,
1531 if (NT_STATUS_IS_OK(status)) {
1535 } else if(strequal( tok, "bcast")) {
1536 status = name_resolve_bcast(name, name_type,
1539 if (NT_STATUS_IS_OK(status)) {
1543 DEBUG(0,("resolve_name: unknown name switch type %s\n",
1548 /* All of the resolve_* functions above have returned false. */
1551 SAFE_FREE(*return_iplist);
1554 return NT_STATUS_UNSUCCESSFUL;
1558 /* Remove duplicate entries. Some queries, notably #1c (domain
1559 controllers) return the PDC in iplist[0] and then all domain
1560 controllers including the PDC in iplist[1..n]. Iterating over
1561 the iplist when the PDC is down will cause two sets of timeouts. */
1563 if ( *return_count ) {
1564 *return_count = remove_duplicate_addrs2(*return_iplist,
1568 /* Save in name cache */
1569 if ( DEBUGLEVEL >= 100 ) {
1570 for (i = 0; i < *return_count && DEBUGLEVEL == 100; i++) {
1571 char addr[INET6_ADDRSTRLEN];
1572 print_sockaddr(addr, sizeof(addr),
1573 &(*return_iplist)[i].ss);
1574 DEBUG(100, ("Storing name %s of type %d (%s:%d)\n",
1578 (*return_iplist)[i].port));
1582 namecache_store(name, name_type, *return_count, *return_iplist);
1584 /* Display some debugging info */
1586 if ( DEBUGLEVEL >= 10 ) {
1587 DEBUG(10, ("internal_resolve_name: returning %d addresses: ",
1590 for (i = 0; i < *return_count; i++) {
1591 char addr[INET6_ADDRSTRLEN];
1592 print_sockaddr(addr, sizeof(addr),
1593 &(*return_iplist)[i].ss);
1594 DEBUGADD(10, ("%s:%d ",
1596 (*return_iplist)[i].port));
1605 /********************************************************
1606 Internal interface to resolve a name into one IP address.
1607 Use this function if the string is either an IP address, DNS
1608 or host name or NetBIOS name. This uses the name switch in the
1609 smb.conf to determine the order of name resolution.
1610 *********************************************************/
1612 bool resolve_name(const char *name,
1613 struct sockaddr_storage *return_ss,
1616 struct ip_service *ss_list = NULL;
1617 char *sitename = NULL;
1620 if (is_ipaddress(name)) {
1621 return interpret_string_addr(return_ss, name, AI_NUMERICHOST);
1624 sitename = sitename_fetch(lp_realm()); /* wild guess */
1626 if (NT_STATUS_IS_OK(internal_resolve_name(name, name_type, sitename,
1628 lp_name_resolve_order()))) {
1631 /* only return valid addresses for TCP connections */
1632 for (i=0; i<count; i++) {
1633 if (!is_zero_addr(&ss_list[i].ss) &&
1634 !is_broadcast_addr(&ss_list[i].ss)) {
1635 *return_ss = ss_list[i].ss;
1637 SAFE_FREE(sitename);
1644 SAFE_FREE(sitename);
1648 /********************************************************
1649 Find the IP address of the master browser or DMB for a workgroup.
1650 *********************************************************/
1652 bool find_master_ip(const char *group, struct sockaddr_storage *master_ss)
1654 struct ip_service *ip_list = NULL;
1658 if (lp_disable_netbios()) {
1659 DEBUG(5,("find_master_ip(%s): netbios is disabled\n", group));
1663 status = internal_resolve_name(group, 0x1D, NULL, &ip_list, &count,
1664 lp_name_resolve_order());
1665 if (NT_STATUS_IS_OK(status)) {
1666 *master_ss = ip_list[0].ss;
1671 status = internal_resolve_name(group, 0x1B, NULL, &ip_list, &count,
1672 lp_name_resolve_order());
1673 if (NT_STATUS_IS_OK(status)) {
1674 *master_ss = ip_list[0].ss;
1683 /********************************************************
1684 Get the IP address list of the primary domain controller
1686 *********************************************************/
1688 bool get_pdc_ip(const char *domain, struct sockaddr_storage *pss)
1690 struct ip_service *ip_list = NULL;
1692 NTSTATUS status = NT_STATUS_DOMAIN_CONTROLLER_NOT_FOUND;
1694 /* Look up #1B name */
1696 if (lp_security() == SEC_ADS) {
1697 status = internal_resolve_name(domain, 0x1b, NULL, &ip_list,
1701 if (!NT_STATUS_IS_OK(status) || count == 0) {
1702 status = internal_resolve_name(domain, 0x1b, NULL, &ip_list,
1704 lp_name_resolve_order());
1705 if (!NT_STATUS_IS_OK(status)) {
1710 /* if we get more than 1 IP back we have to assume it is a
1711 multi-homed PDC and not a mess up */
1714 DEBUG(6,("get_pdc_ip: PDC has %d IP addresses!\n", count));
1715 sort_service_list(ip_list, count);
1718 *pss = ip_list[0].ss;
1723 /* Private enum type for lookups. */
1725 enum dc_lookup_type { DC_NORMAL_LOOKUP, DC_ADS_ONLY, DC_KDC_ONLY };
1727 /********************************************************
1728 Get the IP address list of the domain controllers for
1730 *********************************************************/
1732 static NTSTATUS get_dc_list(const char *domain,
1733 const char *sitename,
1734 struct ip_service **ip_list,
1736 enum dc_lookup_type lookup_type,
1739 char *resolve_order = NULL;
1740 char *saf_servername = NULL;
1741 char *pserver = NULL;
1743 char *port_str = NULL;
1746 int num_addresses = 0;
1747 int local_count, i, j;
1748 struct ip_service *return_iplist = NULL;
1749 struct ip_service *auto_ip_list = NULL;
1750 bool done_auto_lookup = false;
1753 TALLOC_CTX *ctx = talloc_init("get_dc_list");
1756 return NT_STATUS_NO_MEMORY;
1761 /* if we are restricted to solely using DNS for looking
1762 up a domain controller, make sure that host lookups
1763 are enabled for the 'name resolve order'. If host lookups
1764 are disabled and ads_only is True, then set the string to
1767 resolve_order = talloc_strdup(ctx, lp_name_resolve_order());
1768 if (!resolve_order) {
1769 status = NT_STATUS_NO_MEMORY;
1772 strlower_m(resolve_order);
1773 if (lookup_type == DC_ADS_ONLY) {
1774 if (strstr( resolve_order, "host")) {
1775 resolve_order = talloc_strdup(ctx, "ads");
1777 /* DNS SRV lookups used by the ads resolver
1778 are already sorted by priority and weight */
1781 resolve_order = talloc_strdup(ctx, "NULL");
1783 } else if (lookup_type == DC_KDC_ONLY) {
1784 /* DNS SRV lookups used by the ads/kdc resolver
1785 are already sorted by priority and weight */
1787 resolve_order = talloc_strdup(ctx, "kdc");
1789 if (!resolve_order) {
1790 status = NT_STATUS_NO_MEMORY;
1794 /* fetch the server we have affinity for. Add the
1795 'password server' list to a search for our domain controllers */
1797 saf_servername = saf_fetch( domain);
1799 if (strequal(domain, lp_workgroup()) || strequal(domain, lp_realm())) {
1800 pserver = talloc_asprintf(NULL, "%s, %s",
1801 saf_servername ? saf_servername : "",
1802 lp_passwordserver());
1804 pserver = talloc_asprintf(NULL, "%s, *",
1805 saf_servername ? saf_servername : "");
1808 SAFE_FREE(saf_servername);
1810 status = NT_STATUS_NO_MEMORY;
1814 /* if we are starting from scratch, just lookup DOMAIN<0x1c> */
1817 DEBUG(10,("get_dc_list: no preferred domain controllers.\n"));
1818 status = internal_resolve_name(domain, 0x1C, sitename, ip_list,
1819 count, resolve_order);
1823 DEBUG(3,("get_dc_list: preferred server list: \"%s\"\n", pserver ));
1826 * if '*' appears in the "password server" list then add
1827 * an auto lookup to the list of manually configured
1828 * DC's. If any DC is listed by name, then the list should be
1829 * considered to be ordered
1833 while (next_token_talloc(ctx, &p, &name, LIST_SEP)) {
1834 if (strequal(name, "*")) {
1835 status = internal_resolve_name(domain, 0x1C, sitename,
1839 if (NT_STATUS_IS_OK(status)) {
1840 num_addresses += auto_count;
1842 done_auto_lookup = true;
1843 DEBUG(8,("Adding %d DC's from auto lookup\n",
1850 /* if we have no addresses and haven't done the auto lookup, then
1851 just return the list of DC's. Or maybe we just failed. */
1853 if ((num_addresses == 0)) {
1854 if (done_auto_lookup) {
1855 DEBUG(4,("get_dc_list: no servers found\n"));
1856 status = NT_STATUS_NO_LOGON_SERVERS;
1859 status = internal_resolve_name(domain, 0x1C, sitename, ip_list,
1860 count, resolve_order);
1864 if ((return_iplist = SMB_MALLOC_ARRAY(struct ip_service,
1865 num_addresses)) == NULL) {
1866 DEBUG(3,("get_dc_list: malloc fail !\n"));
1867 status = NT_STATUS_NO_MEMORY;
1874 /* fill in the return list now with real IP's */
1876 while ((local_count<num_addresses) &&
1877 next_token_talloc(ctx, &p, &name, LIST_SEP)) {
1878 struct sockaddr_storage name_ss;
1880 /* copy any addersses from the auto lookup */
1882 if (strequal(name, "*")) {
1883 for (j=0; j<auto_count; j++) {
1884 char addr[INET6_ADDRSTRLEN];
1885 print_sockaddr(addr,
1887 &auto_ip_list[j].ss);
1888 /* Check for and don't copy any
1889 * known bad DC IP's. */
1890 if(!NT_STATUS_IS_OK(check_negative_conn_cache(
1893 DEBUG(5,("get_dc_list: "
1894 "negative entry %s removed "
1899 return_iplist[local_count].ss =
1901 return_iplist[local_count].port =
1902 auto_ip_list[j].port;
1908 /* added support for address:port syntax for ads
1909 * (not that I think anyone will ever run the LDAP
1910 * server in an AD domain on something other than
1913 port = (lp_security() == SEC_ADS) ? LDAP_PORT : PORT_NONE;
1914 if ((port_str=strchr(name, ':')) != NULL) {
1917 port = atoi(port_str);
1920 /* explicit lookup; resolve_name() will
1921 * handle names & IP addresses */
1922 if (resolve_name( name, &name_ss, 0x20 )) {
1923 char addr[INET6_ADDRSTRLEN];
1924 print_sockaddr(addr,
1928 /* Check for and don't copy any known bad DC IP's. */
1929 if( !NT_STATUS_IS_OK(check_negative_conn_cache(domain,
1931 DEBUG(5,("get_dc_list: negative entry %s "
1932 "removed from DC list\n",
1937 return_iplist[local_count].ss = name_ss;
1938 return_iplist[local_count].port = port;
1944 /* need to remove duplicates in the list if we have any
1945 explicit password servers */
1948 local_count = remove_duplicate_addrs2(return_iplist,
1952 if ( DEBUGLEVEL >= 4 ) {
1953 DEBUG(4,("get_dc_list: returning %d ip addresses "
1954 "in an %sordered list\n",
1956 *ordered ? "":"un"));
1957 DEBUG(4,("get_dc_list: "));
1958 for ( i=0; i<local_count; i++ ) {
1959 char addr[INET6_ADDRSTRLEN];
1960 print_sockaddr(addr,
1962 &return_iplist[i].ss);
1963 DEBUGADD(4,("%s:%d ", addr, return_iplist[i].port ));
1968 *ip_list = return_iplist;
1969 *count = local_count;
1971 status = ( *count != 0 ? NT_STATUS_OK : NT_STATUS_NO_LOGON_SERVERS );
1975 SAFE_FREE(auto_ip_list);
1980 /*********************************************************************
1981 Small wrapper function to get the DC list and sort it if neccessary.
1982 *********************************************************************/
1984 NTSTATUS get_sorted_dc_list( const char *domain,
1985 const char *sitename,
1986 struct ip_service **ip_list,
1992 enum dc_lookup_type lookup_type = DC_NORMAL_LOOKUP;
1994 DEBUG(8,("get_sorted_dc_list: attempting lookup "
1995 "for name %s (sitename %s) using [%s]\n",
1997 sitename ? sitename : "NULL",
1998 (ads_only ? "ads" : lp_name_resolve_order())));
2001 lookup_type = DC_ADS_ONLY;
2004 status = get_dc_list(domain, sitename, ip_list,
2005 count, lookup_type, &ordered);
2006 if (!NT_STATUS_IS_OK(status)) {
2010 /* only sort if we don't already have an ordered list */
2012 sort_service_list(*ip_list, *count);
2015 return NT_STATUS_OK;
2018 /*********************************************************************
2019 Get the KDC list - re-use all the logic in get_dc_list.
2020 *********************************************************************/
2022 NTSTATUS get_kdc_list( const char *realm,
2023 const char *sitename,
2024 struct ip_service **ip_list,
2033 status = get_dc_list(realm, sitename, ip_list,
2034 count, DC_KDC_ONLY, &ordered);
2036 if (!NT_STATUS_IS_OK(status)) {
2040 /* only sort if we don't already have an ordered list */
2042 sort_service_list(*ip_list, *count);
2045 return NT_STATUS_OK;