libsmb: Pass "account_name/flags" through nb_getdc
[metze/samba/wip.git] / source3 / libsmb / clidgram.c
index 5ab6bef87b699d71b615fcd29dd5a4515f5678de..bed507626c1ec1d073c714b555871a87c020347b 100644 (file)
 
    This program is free software; you can redistribute it and/or modify
    it under the terms of the GNU General Public License as published by
-   the Free Software Foundation; either version 2 of the License, or
+   the Free Software Foundation; either version 3 of the License, or
    (at your option) any later version.
-   
+
    This program is distributed in the hope that it will be useful,
    but WITHOUT ANY WARRANTY; without even the implied warranty of
    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
    GNU General Public License for more details.
-   
+
    You should have received a copy of the GNU General Public License
-   along with this program; if not, write to the Free Software
-   Foundation, Inc., 675 Mass Ave, Cambridge, MA 02139, USA.
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 */
 
 #include "includes.h"
+#include "libsmb/libsmb.h"
+#include "../lib/util/tevent_ntstatus.h"
+#include "libsmb/clidgram.h"
+#include "libsmb/nmblib.h"
+#include "libsmb/unexpected.h"
+#include "messages.h"
+#include "librpc/gen_ndr/samr.h"
+#include "../lib/util/pidfile.h"
 
 /*
  * cli_send_mailslot, send a mailslot for client code ...
  */
 
-int cli_send_mailslot(int dgram_sock, BOOL unique, const char *mailslot, 
-                     char *buf, int len,
-                     const char *srcname, int src_type, 
-                     const char *dstname, int dest_type,
-                     struct in_addr dest_ip, struct in_addr src_ip,
-                     int dest_port, int src_port)
+static bool cli_prep_mailslot(bool unique, const char *mailslot,
+                      uint16_t priority,
+                      char *buf, int len,
+                      const char *srcname, int src_type,
+                      const char *dstname, int dest_type,
+                      const struct sockaddr_storage *dest_ss,
+                      int dgm_id,
+                      struct packet_struct *p)
 {
-  struct packet_struct p;
-  struct dgram_packet *dgram = &p.packet.dgram;
-  char *ptr, *p2;
-  char tmp[4];
-
-  memset((char *)&p, '\0', sizeof(p));
-
-  /*
-   * Next, build the DGRAM ...
-   */
-
-  /* DIRECT GROUP or UNIQUE datagram. */
-  dgram->header.msg_type = unique ? 0x10 : 0x11; 
-  dgram->header.flags.node_type = M_NODE;
-  dgram->header.flags.first = True;
-  dgram->header.flags.more = False;
-  dgram->header.dgm_id = ((unsigned)time(NULL)%(unsigned)0x7FFF) + ((unsigned)sys_getpid()%(unsigned)100);
-  dgram->header.source_ip.s_addr = src_ip.s_addr;
-  dgram->header.source_port = ntohs(src_port);
-  dgram->header.dgm_length = 0; /* Let build_dgram() handle this. */
-  dgram->header.packet_offset = 0;
-  
-  make_nmb_name(&dgram->source_name,srcname,src_type);
-  make_nmb_name(&dgram->dest_name,dstname,dest_type);
-
-  ptr = &dgram->data[0];
-
-  /* Setup the smb part. */
-  ptr -= 4; /* XXX Ugliness because of handling of tcp SMB length. */
-  memcpy(tmp,ptr,4);
-  set_message(ptr,17,17 + len,True);
-  memcpy(ptr,tmp,4);
-
-  SCVAL(ptr,smb_com,SMBtrans);
-  SSVAL(ptr,smb_vwv1,len);
-  SSVAL(ptr,smb_vwv11,len);
-  SSVAL(ptr,smb_vwv12,70 + strlen(mailslot));
-  SSVAL(ptr,smb_vwv13,3);
-  SSVAL(ptr,smb_vwv14,1);
-  SSVAL(ptr,smb_vwv15,1);
-  SSVAL(ptr,smb_vwv16,2);
-  p2 = smb_buf(ptr);
-  pstrcpy(p2,mailslot);
-  p2 = skip_string(p2,1);
-
-  memcpy(p2,buf,len);
-  p2 += len;
-
-  dgram->datasize = PTR_DIFF(p2,ptr+4); /* +4 for tcp length. */
-
-  p.ip = dest_ip;
-  p.port = dest_port;
-  p.fd = dgram_sock;
-  p.timestamp = time(NULL);
-  p.packet_type = DGRAM_PACKET;
-
-  DEBUG(4,("send_mailslot: Sending to mailslot %s from %s IP %s ", mailslot,
-                    nmb_namestr(&dgram->source_name), inet_ntoa(src_ip)));
-  DEBUG(4,("to %s IP %s\n", nmb_namestr(&dgram->dest_name), inet_ntoa(dest_ip)));
-
-  return send_packet(&p);
-
+       struct dgram_packet *dgram = &p->packet.dgram;
+       char *ptr, *p2;
+       char tmp[4];
+       char addr[INET6_ADDRSTRLEN];
+
+       ZERO_STRUCTP(p);
+
+       /*
+        * Next, build the DGRAM ...
+        */
+
+       /* DIRECT GROUP or UNIQUE datagram. */
+       dgram->header.msg_type = unique ? 0x10 : 0x11;
+       dgram->header.flags.node_type = M_NODE;
+       dgram->header.flags.first = True;
+       dgram->header.flags.more = False;
+       dgram->header.dgm_id = dgm_id;
+       /* source ip is filled by nmbd */
+       dgram->header.dgm_length = 0; /* Let build_dgram() handle this. */
+       dgram->header.packet_offset = 0;
+
+       make_nmb_name(&dgram->source_name,srcname,src_type);
+       make_nmb_name(&dgram->dest_name,dstname,dest_type);
+
+       ptr = &dgram->data[0];
+
+       /* Setup the smb part. */
+       ptr -= 4; /* XXX Ugliness because of handling of tcp SMB length. */
+       memcpy(tmp,ptr,4);
+
+       if (smb_size + 17*2 + strlen(mailslot) + 1 + len > MAX_DGRAM_SIZE) {
+               DEBUG(0, ("cli_send_mailslot: Cannot write beyond end of packet\n"));
+               return False;
+       }
+
+       cli_set_message(ptr,17,strlen(mailslot) + 1 + len,True);
+       memcpy(ptr,tmp,4);
+
+       SCVAL(ptr,smb_com,SMBtrans);
+       SSVAL(ptr,smb_vwv1,len);
+       SSVAL(ptr,smb_vwv11,len);
+       SSVAL(ptr,smb_vwv12,70 + strlen(mailslot));
+       SSVAL(ptr,smb_vwv13,3);
+       SSVAL(ptr,smb_vwv14,1);
+       SSVAL(ptr,smb_vwv15,priority);
+       SSVAL(ptr,smb_vwv16,2);
+       p2 = smb_buf(ptr);
+       fstrcpy(p2,mailslot);
+       p2 = skip_string(ptr,MAX_DGRAM_SIZE,p2);
+       if (!p2) {
+               return False;
+       }
+
+       memcpy(p2,buf,len);
+       p2 += len;
+
+       dgram->datasize = PTR_DIFF(p2,ptr+4); /* +4 for tcp length. */
+
+       p->packet_type = DGRAM_PACKET;
+       p->ip = ((const struct sockaddr_in *)dest_ss)->sin_addr;
+       p->timestamp = time(NULL);
+
+       DEBUG(4,("send_mailslot: Sending to mailslot %s from %s ",
+                mailslot, nmb_namestr(&dgram->source_name)));
+       print_sockaddr(addr, sizeof(addr), dest_ss);
+
+       DEBUGADD(4,("to %s IP %s\n", nmb_namestr(&dgram->dest_name), addr));
+
+       return true;
 }
 
-/*
- * cli_get_response: Get a response ...
- */
-int cli_get_response(int dgram_sock, BOOL unique, const char *mailslot, char *buf, int bufsiz)
+static char *mailslot_name(TALLOC_CTX *mem_ctx, struct in_addr dc_ip)
 {
-  struct packet_struct *packet;
-
-  packet = receive_dgram_packet(dgram_sock, 5, mailslot);
-
-  if (packet) { /* We got one, pull what we want out of the SMB data ... */
-
-    struct dgram_packet *dgram = &packet->packet.dgram;
-
-    /*
-     * We should probably parse the SMB, but for now, we will pull what
-     * from fixed, known locations ...
-     */
-
-    /* Copy the data to buffer, respecting sizes ... */
-
-    memcpy(buf, &dgram->data[92], MIN(bufsiz, (dgram->datasize - 92)));
-
-  }
-  else 
-    return -1;
-
-  return 0;
-
+       return talloc_asprintf(mem_ctx, "%s%X",
+                              NBT_MAILSLOT_GETDC, dc_ip.s_addr);
 }
 
-/*
- * cli_get_backup_list: Send a get backup list request ...
- */
-
-static char cli_backup_list[1024];
-
-int cli_get_backup_list(const char *myname, const char *send_to_name)
+static bool prep_getdc_request(const struct sockaddr_storage *dc_ss,
+                              const char *account_name,
+                              uint32_t account_flags,
+                              const char *domain_name,
+                              const struct dom_sid *sid,
+                              uint32_t nt_version,
+                              const char *my_mailslot,
+                              int dgm_id,
+                              struct packet_struct *p)
 {
-  char outbuf[15];
-  char *p;
-  struct in_addr sendto_ip, my_ip;
-  int dgram_sock;
-  struct sockaddr_in sock_out;
-  socklen_t name_size;
-
-  if (!resolve_name(send_to_name, &sendto_ip, 0x1d)) {
-
-    DEBUG(0, ("Could not resolve name: %s<1D>\n", send_to_name));
-    return False;
-
-  }
-
-  my_ip.s_addr = inet_addr("0.0.0.0");
-  if (!resolve_name(myname, &my_ip, 0x00)) { /* FIXME: Call others here */
-
-    DEBUG(0, ("Could not resolve name: %s<00>\n", myname));
-
-  }
-
-  if ((dgram_sock = open_socket_out(SOCK_DGRAM, &sendto_ip, 138, LONG_CONNECT_TIMEOUT)) < 0) {
-
-    DEBUG(4, ("open_sock_out failed ..."));
-    return False;
-
-  }
-
-  /* Make it a broadcast socket ... */
-
-  set_socket_options(dgram_sock, "SO_BROADCAST");
-
-  /* Make it non-blocking??? */
-
-  if (fcntl(dgram_sock, F_SETFL, O_NONBLOCK) < 0) {
-
-    DEBUG(0, ("Unable to set non blocking on dgram sock\n"));
-
-  }
-
-  /* Now, bind a local addr to it ... Try port 138 first ... */
-
-  memset((char *)&sock_out, '\0', sizeof(sock_out));
-  sock_out.sin_addr.s_addr = INADDR_ANY;
-  sock_out.sin_port = htons(138);
-  sock_out.sin_family = AF_INET;
-
-  if (bind(dgram_sock, (struct sockaddr *)&sock_out, sizeof(sock_out)) < 0) {
-
-    /* Try again on any port ... */
-
-    sock_out.sin_port = INADDR_ANY;
-
-    if (bind(dgram_sock, (struct sockaddr *)&sock_out, sizeof(sock_out)) < 0) {
-
-      DEBUG(4, ("failed to bind socket to address ...\n"));
-      return False;
-       
-    }
-
-  }
-
-  /* Now, figure out what socket name we were bound to. We want the port */
-
-  name_size = sizeof(sock_out);
-
-  getsockname(dgram_sock, (struct sockaddr *)&sock_out, &name_size);
-
-  DEBUG(5, ("Socket bound to IP:%s, port: %d\n", inet_ntoa(sock_out.sin_addr), ntohs(sock_out.sin_port)));
-
-  /* Now, build the request */
-
-  memset(cli_backup_list, '\0', sizeof(cli_backup_list));
-  memset(outbuf, '\0', sizeof(outbuf));
-
-  p = outbuf;
-
-  SCVAL(p, 0, ANN_GetBackupListReq);
-  p++;
-
-  SCVAL(p, 0, 1); /* Count pointer ... */
-  p++;
-
-  SIVAL(p, 0, 1); /* The sender's token ... */
-  p += 4;
-
-  cli_send_mailslot(dgram_sock, True, "\\MAILSLOT\\BROWSE", outbuf, 
-                   PTR_DIFF(p, outbuf), myname, 0, send_to_name, 
-                   0x1d, sendto_ip, my_ip, 138, sock_out.sin_port);
-
-  /* We should check the error and return if we got one */
-
-  /* Now, get the response ... */
-
-  cli_get_response(dgram_sock, True, "\\MAILSLOT\\BROWSE", cli_backup_list, sizeof(cli_backup_list));
-
-  /* Should check the response here ... FIXME */
-
-  close(dgram_sock);
-
-  return True;
-
+       TALLOC_CTX *frame = talloc_stackframe();
+       struct nbt_netlogon_packet packet;
+       struct NETLOGON_SAM_LOGON_REQUEST *s;
+       enum ndr_err_code ndr_err;
+       DATA_BLOB blob = data_blob_null;
+       struct dom_sid my_sid;
+       bool ret = false;
+
+       ZERO_STRUCT(packet);
+       ZERO_STRUCT(my_sid);
+
+       if (sid != NULL) {
+               my_sid = *sid;
+       }
+
+       packet.command  = LOGON_SAM_LOGON_REQUEST;
+       s               = &packet.req.logon;
+
+       s->request_count        = 0;
+       s->computer_name        = lp_netbios_name();
+       s->user_name            = account_name;
+       s->mailslot_name        = my_mailslot;
+       s->acct_control         = account_flags;
+       s->sid                  = my_sid;
+       s->nt_version           = nt_version;
+       s->lmnt_token           = 0xffff;
+       s->lm20_token           = 0xffff;
+
+       if (DEBUGLEVEL >= 10) {
+               NDR_PRINT_DEBUG(nbt_netlogon_packet, &packet);
+       }
+
+       ndr_err = ndr_push_struct_blob(&blob, talloc_tos(), &packet,
+                      (ndr_push_flags_fn_t)ndr_push_nbt_netlogon_packet);
+       if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
+               goto fail;
+       }
+
+       ret = cli_prep_mailslot(false, NBT_MAILSLOT_NTLOGON, 0,
+                               (char *)blob.data, blob.length,
+                               lp_netbios_name(), 0, domain_name, 0x1c,
+                               dc_ss, dgm_id, p);
+fail:
+       TALLOC_FREE(frame);
+       return ret;
 }
 
-/*
- * cli_get_backup_server: Get the backup list and retrieve a server from it
- */
-
-int cli_get_backup_server(char *my_name, char *target, char *servername, int namesize)
+static bool parse_getdc_response(
+       struct packet_struct *packet,
+       TALLOC_CTX *mem_ctx,
+       const char *domain_name,
+       uint32_t *nt_version,
+       const char **dc_name,
+       struct netlogon_samlogon_response **samlogon_response)
 {
+       DATA_BLOB blob;
+       struct netlogon_samlogon_response *r;
+       union dgram_message_body p;
+       enum ndr_err_code ndr_err;
+       NTSTATUS status;
+
+       const char *returned_dc = NULL;
+       const char *returned_domain = NULL;
+
+       blob = data_blob_const(packet->packet.dgram.data,
+                              packet->packet.dgram.datasize);
+       if (blob.length < 4) {
+               DEBUG(1, ("invalid length: %d\n", (int)blob.length));
+               return false;
+       }
+
+       if (RIVAL(blob.data,0) != DGRAM_SMB) {
+               DEBUG(1, ("invalid packet\n"));
+               return false;
+       }
+
+       blob.data += 4;
+       blob.length -= 4;
+
+       ndr_err = ndr_pull_union_blob_all(&blob, mem_ctx, &p, DGRAM_SMB,
+                      (ndr_pull_flags_fn_t)ndr_pull_dgram_smb_packet);
+       if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) {
+               DEBUG(1, ("failed to parse packet\n"));
+               return false;
+       }
+
+       if (p.smb.smb_command != SMB_TRANSACTION) {
+               DEBUG(1, ("invalid smb_command: %d\n", p.smb.smb_command));
+               return false;
+       }
+
+       if (DEBUGLEVEL >= 10) {
+               NDR_PRINT_DEBUG(dgram_smb_packet, &p);
+       }
+
+       blob = p.smb.body.trans.data;
+
+       r = talloc_zero(mem_ctx, struct netlogon_samlogon_response);
+       if (!r) {
+               return false;
+       }
+
+       status = pull_netlogon_samlogon_response(&blob, r, r);
+       if (!NT_STATUS_IS_OK(status)) {
+               TALLOC_FREE(r);
+               return false;
+       }
+
+       map_netlogon_samlogon_response(r);
+
+       /* do we still need this ? */
+       *nt_version = r->ntver;
+
+       returned_domain = r->data.nt5_ex.domain_name;
+       returned_dc = r->data.nt5_ex.pdc_name;
+
+       if (!strequal(returned_domain, domain_name)) {
+               DEBUG(3, ("GetDC: Expected domain %s, got %s\n",
+                         domain_name, returned_domain));
+               TALLOC_FREE(r);
+               return false;
+       }
+
+       if (*returned_dc == '\\') returned_dc += 1;
+       if (*returned_dc == '\\') returned_dc += 1;
+
+       *dc_name = talloc_strdup(mem_ctx, returned_dc);
+       if (!*dc_name) {
+               TALLOC_FREE(r);
+               return false;
+       }
+
+       if (samlogon_response) {
+               *samlogon_response = r;
+       } else {
+               TALLOC_FREE(r);
+       }
+
+       DEBUG(10, ("GetDC gave name %s for domain %s\n",
+                  *dc_name, returned_domain));
+
+       return True;
+}
 
-  /* Get the backup list first. We could pull this from the cache later */
-
-  cli_get_backup_list(my_name, target);  /* FIXME: Check the response */
-
-  if (!cli_backup_list[0]) { /* Empty list ... try again */
-
-    cli_get_backup_list(my_name, target);
-
-  }
-
-  strncpy(servername, cli_backup_list, MIN(16, namesize));
-
-  return True;
+struct nbt_getdc_state {
+       struct tevent_context *ev;
+       struct messaging_context *msg_ctx;
+       struct nb_packet_reader *reader;
+       const char *my_mailslot;
+       pid_t nmbd_pid;
+
+       const struct sockaddr_storage *dc_addr;
+       const char *domain_name;
+       const struct dom_sid *sid;
+       uint32_t nt_version;
+       const char *dc_name;
+       struct netlogon_samlogon_response *samlogon_response;
+
+       struct packet_struct p;
+};
+
+static void nbt_getdc_got_reader(struct tevent_req *subreq);
+static void nbt_getdc_got_response(struct tevent_req *subreq);
+
+struct tevent_req *nbt_getdc_send(TALLOC_CTX *mem_ctx,
+                                 struct tevent_context *ev,
+                                 struct messaging_context *msg_ctx,
+                                 const struct sockaddr_storage *dc_addr,
+                                 const char *domain_name,
+                                 const struct dom_sid *sid,
+                                 const char *account_name,
+                                 uint32_t account_flags,
+                                 uint32_t nt_version)
+{
+       struct tevent_req *req, *subreq;
+       struct nbt_getdc_state *state;
+       uint16_t dgm_id;
+       bool ok;
+
+       req = tevent_req_create(mem_ctx, &state, struct nbt_getdc_state);
+       if (req == NULL) {
+               return NULL;
+       }
+       state->ev = ev;
+       state->msg_ctx = msg_ctx;
+       state->dc_addr = dc_addr;
+       state->domain_name = domain_name;
+       state->sid = sid;
+       state->nt_version = nt_version;
+
+       if (dc_addr->ss_family != AF_INET) {
+               tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
+               return tevent_req_post(req, ev);
+       }
+       state->my_mailslot = mailslot_name(
+               state, ((const struct sockaddr_in *)dc_addr)->sin_addr);
+       if (tevent_req_nomem(state->my_mailslot, req)) {
+               return tevent_req_post(req, ev);
+       }
+       state->nmbd_pid = pidfile_pid(lp_pid_directory(), "nmbd");
+       if (state->nmbd_pid == 0) {
+               DEBUG(3, ("No nmbd found\n"));
+               tevent_req_nterror(req, NT_STATUS_NOT_SUPPORTED);
+               return tevent_req_post(req, ev);
+       }
+
+       generate_random_buffer((uint8_t *)(void *)&dgm_id, sizeof(dgm_id));
+
+       ok = prep_getdc_request(dc_addr, account_name, account_flags,
+                               domain_name, sid, nt_version,
+                               state->my_mailslot, dgm_id & 0x7fff,
+                               &state->p);
+
+       if (!ok) {
+               DEBUG(3, ("prep_getdc_request failed\n"));
+               tevent_req_nterror(req, NT_STATUS_INVALID_PARAMETER);
+               return tevent_req_post(req, ev);
+       }
+
+       subreq = nb_packet_reader_send(state, ev, DGRAM_PACKET, -1,
+                                      state->my_mailslot);
+       if (tevent_req_nomem(subreq, req)) {
+               return tevent_req_post(req, ev);
+       }
+       tevent_req_set_callback(subreq, nbt_getdc_got_reader, req);
+       return req;
+}
 
+static void nbt_getdc_got_reader(struct tevent_req *subreq)
+{
+       struct tevent_req *req = tevent_req_callback_data(
+               subreq, struct tevent_req);
+       struct nbt_getdc_state *state = tevent_req_data(
+               req, struct nbt_getdc_state);
+       NTSTATUS status;
+
+       status = nb_packet_reader_recv(subreq, state, &state->reader);
+       TALLOC_FREE(subreq);
+       if (tevent_req_nterror(req, status)) {
+               DEBUG(10, ("nb_packet_reader_recv returned %s\n",
+                          nt_errstr(status)));
+               return;
+       }
+
+       status = messaging_send_buf(
+               state->msg_ctx, pid_to_procid(state->nmbd_pid),
+               MSG_SEND_PACKET, (uint8_t *)&state->p, sizeof(state->p));
+
+       if (tevent_req_nterror(req, status)) {
+               DEBUG(10, ("messaging_send_buf returned %s\n",
+                          nt_errstr(status)));
+               return;
+       }
+       subreq = nb_packet_read_send(state, state->ev, state->reader);
+       if (tevent_req_nomem(subreq, req)) {
+               return;
+       }
+       tevent_req_set_callback(subreq, nbt_getdc_got_response, req);
 }
 
+static void nbt_getdc_got_response(struct tevent_req *subreq)
+{
+       struct tevent_req *req = tevent_req_callback_data(
+               subreq, struct tevent_req);
+       struct nbt_getdc_state *state = tevent_req_data(
+               req, struct nbt_getdc_state);
+       struct packet_struct *p;
+       NTSTATUS status;
+       bool ret;
+
+       status = nb_packet_read_recv(subreq, state, &p);
+       TALLOC_FREE(subreq);
+       if (tevent_req_nterror(req, status)) {
+               return;
+       }
+
+       ret = parse_getdc_response(p, state, state->domain_name,
+                                  &state->nt_version, &state->dc_name,
+                                  &state->samlogon_response);
+       if (!ret) {
+               tevent_req_nterror(req, NT_STATUS_INVALID_NETWORK_RESPONSE);
+               return;
+       }
+       tevent_req_done(req);
+}
 
+NTSTATUS nbt_getdc_recv(struct tevent_req *req, TALLOC_CTX *mem_ctx,
+                       uint32_t *nt_version, const char **dc_name,
+                       struct netlogon_samlogon_response **samlogon_response)
+{
+       struct nbt_getdc_state *state = tevent_req_data(
+               req, struct nbt_getdc_state);
+       NTSTATUS status;
+
+       if (tevent_req_is_nterror(req, &status)) {
+               return status;
+       }
+       if (nt_version != NULL) {
+               *nt_version = state->nt_version;
+       }
+       if (dc_name != NULL) {
+               *dc_name = talloc_move(mem_ctx, &state->dc_name);
+       }
+       if (samlogon_response != NULL) {
+               *samlogon_response = talloc_move(
+                       mem_ctx, &state->samlogon_response);
+       }
+       return NT_STATUS_OK;
+}
 
+NTSTATUS nbt_getdc(struct messaging_context *msg_ctx,
+                  uint32_t timeout_in_seconds,
+                  const struct sockaddr_storage *dc_addr,
+                  const char *domain_name,
+                  const struct dom_sid *sid,
+                  const char *account_name,
+                  uint32_t account_flags,
+                  uint32_t nt_version,
+                  TALLOC_CTX *mem_ctx,
+                  uint32_t *pnt_version,
+                  const char **dc_name,
+                  struct netlogon_samlogon_response **samlogon_response)
+{
+       TALLOC_CTX *frame = talloc_stackframe();
+       struct tevent_context *ev;
+       struct tevent_req *req;
+       NTSTATUS status = NT_STATUS_NO_MEMORY;
+
+       ev = samba_tevent_context_init(frame);
+       if (ev == NULL) {
+               goto fail;
+       }
+       req = nbt_getdc_send(ev, ev, msg_ctx, dc_addr, domain_name,
+                            sid, account_name, account_flags, nt_version);
+       if (req == NULL) {
+               goto fail;
+       }
+       if (!tevent_req_set_endtime(req, ev,
+                       timeval_current_ofs(timeout_in_seconds, 0))) {
+               goto fail;
+       }
+       if (!tevent_req_poll_ntstatus(req, ev, &status)) {
+               goto fail;
+       }
+       status = nbt_getdc_recv(req, mem_ctx, pnt_version, dc_name,
+                               samlogon_response);
+ fail:
+       TALLOC_FREE(frame);
+       return status;
+}