/*
* CDDL HEADER START
*
* The contents of this file are subject to the terms of the
* Common Development and Distribution License (the "License").
* You may not use this file except in compliance with the License.
*
* You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE
* or http://www.opensolaris.org/os/licensing.
* See the License for the specific language governing permissions
* and limitations under the License.
*
* When distributing Covered Code, include this CDDL HEADER in each
* file and include the License file at usr/src/OPENSOLARIS.LICENSE.
* If applicable, add the following below this CDDL HEADER, with the
* fields enclosed by brackets "[]" replaced with your own identifying
* information: Portions Copyright [yyyy] [name of copyright owner]
*
* CDDL HEADER END
*/
/*
* Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved.
*/
/*
* Active Directory Setup RPC interface used by Windows 2000.
*/
#include <synch.h>
#include <strings.h>
#include <stdlib.h>
#include <netdb.h>
#include <smbsrv/libsmb.h>
#include <smbsrv/libmlrpc.h>
#include <smbsrv/libmlsvc.h>
#include <smbsrv/ndl/dssetup.ndl>
#include <smbsrv/smbinfo.h>
#include <smbsrv/nmpipes.h>
int dssetup_get_domain_info(ds_primary_domain_info_t *);
static int dssetup_DsRoleGetPrimaryDomainInfo(void *, ndr_xa_t *);
static uint32_t dssetup_member_server(ds_primary_domain_info_t *, ndr_xa_t *);
static uint32_t dssetup_standalone_server(ds_primary_domain_info_t *,
ndr_xa_t *);
static ndr_stub_table_t dssetup_stub_table[] = {
{ dssetup_DsRoleGetPrimaryDomainInfo,
DSSETUP_OPNUM_DsRoleGetPrimaryDomainInfo },
{0}
};
static ndr_service_t dssetup_service = {
"DSSETUP", /* name */
"Active Directory Setup", /* desc */
"\\lsarpc", /* endpoint */
PIPE_LSASS, /* sec_addr_port */
"3919286a-b10c-11d0-9ba8-00c04fd92ef5", 0, /* abstract */
NDR_TRANSFER_SYNTAX_UUID, 2, /* transfer */
0, /* no bind_instance_size */
0, /* no bind_req() */
0, /* no unbind_and_close() */
0, /* use generic_call_stub() */
&TYPEINFO(dssetup_interface), /* interface ti */
dssetup_stub_table /* stub_table */
};
static ds_primary_domain_info_t ds_info;
static mutex_t ds_info_mtx;
/*
* dssetup_initialize
*
* This function registers the DSSETUP interface with the RPC runtime
* library. It must be called in order to use either the client side
* or the server side functions.
*/
void
dssetup_initialize(void)
{
dssetup_clear_domain_info();
(void) ndr_svc_register(&dssetup_service);
}
void
dssetup_clear_domain_info(void)
{
(void) mutex_lock(&ds_info_mtx);
free(ds_info.nt_domain);
free(ds_info.dns_domain);
free(ds_info.forest);
bzero(&ds_info, sizeof (ds_primary_domain_info_t));
(void) mutex_unlock(&ds_info_mtx);
}
/*
* Request for machine role and primary domain information.
*/
static int
dssetup_DsRoleGetPrimaryDomainInfo(void *arg, ndr_xa_t *mxa)
{
dssetup_DsRoleGetPrimaryDomainInfo_t *param = arg;
dssetup_GetPrimaryDomainInfo_t *info;
ds_primary_domain_info_t *info1;
uint32_t status;
int security_mode;
info = NDR_MALLOC(mxa, sizeof (dssetup_GetPrimaryDomainInfo_t));
if (info == NULL) {
status = NT_STATUS_NO_MEMORY;
} else if (param->level != DS_ROLE_BASIC_INFORMATION) {
status = NT_STATUS_INVALID_LEVEL;
} else {
info->switch_value = param->level;
info1 = &info->ru.info1;
security_mode = smb_config_get_secmode();
if (security_mode == SMB_SECMODE_DOMAIN)
status = dssetup_member_server(info1, mxa);
else
status = dssetup_standalone_server(info1, mxa);
}
if (status != NT_STATUS_SUCCESS) {
bzero(param, sizeof (dssetup_DsRoleGetPrimaryDomainInfo_t));
param->status = NT_SC_ERROR(status);
} else {
param->info = info;
param->status = NT_STATUS_SUCCESS;
}
return (NDR_DRC_OK);
}
/*
* When the machine role is domain member:
* nt_domain must contain the NetBIOS domain name
* dns_domain must contain the DNS domain name (cannot be NULL)
* forest must contain the forest name (cannot be NULL)
*
* If DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT is set in flags, the domain_guid
* must contain the domain UUID. Otherwise domain_guid is ignored.
*/
static uint32_t
dssetup_member_server(ds_primary_domain_info_t *info, ndr_xa_t *mxa)
{
char dns_domain[MAXHOSTNAMELEN];
char nt_domain[MAXHOSTNAMELEN];
(void) mutex_lock(&ds_info_mtx);
if ((ds_info.flags & DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT) == 0) {
/*
* If we don't have the domain GUID, try to get it from a
* domain controller. Otherwise, use local configuration.
*/
free(ds_info.nt_domain);
free(ds_info.dns_domain);
free(ds_info.forest);
(void) dssetup_get_domain_info(&ds_info);
}
if (ds_info.flags & DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT) {
info->flags = DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT;
info->nt_domain = NDR_STRDUP(mxa, (char *)ds_info.nt_domain);
info->dns_domain = NDR_STRDUP(mxa, (char *)ds_info.dns_domain);
info->forest = NDR_STRDUP(mxa, (char *)ds_info.forest);
bcopy(&ds_info.domain_guid, &info->domain_guid,
sizeof (ndr_uuid_t));
} else {
if (smb_getdomainname(nt_domain, MAXHOSTNAMELEN) != 0) {
(void) mutex_unlock(&ds_info_mtx);
return (NT_STATUS_CANT_ACCESS_DOMAIN_INFO);
}
if (smb_getfqdomainname(dns_domain, MAXHOSTNAMELEN) != 0) {
(void) mutex_unlock(&ds_info_mtx);
return (NT_STATUS_CANT_ACCESS_DOMAIN_INFO);
}
(void) smb_strlwr(dns_domain);
info->flags = 0;
info->nt_domain = NDR_STRDUP(mxa, nt_domain);
info->dns_domain = NDR_STRDUP(mxa, dns_domain);
info->forest = NDR_STRDUP(mxa, dns_domain);
bzero(&info->domain_guid, sizeof (ndr_uuid_t));
}
(void) mutex_unlock(&ds_info_mtx);
if (info->nt_domain == NULL ||
info->dns_domain == NULL ||
info->forest == NULL)
return (NT_STATUS_NO_MEMORY);
info->role = DS_ROLE_MEMBER_SERVER;
return (NT_STATUS_SUCCESS);
}
/*
* When the machine role is standalone:
* nt_domain must contain the NetBIOS workgroup name
* dns_domain must be NULL
* forest must be NULL
*
* We don't maintain a domain GUID. When DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT
* is not set in flags, domain_guid is ignored.
*/
static uint32_t
dssetup_standalone_server(ds_primary_domain_info_t *info, ndr_xa_t *mxa)
{
char nt_domain[MAXHOSTNAMELEN];
if (smb_getdomainname(nt_domain, MAXHOSTNAMELEN) != 0)
return (NT_STATUS_CANT_ACCESS_DOMAIN_INFO);
info->nt_domain = NDR_STRDUP(mxa, nt_domain);
if (info->nt_domain == NULL)
return (NT_STATUS_NO_MEMORY);
info->role = DS_ROLE_STANDALONE_SERVER;
info->flags = 0;
info->dns_domain = NULL;
info->forest = NULL;
bzero(&info->domain_guid, sizeof (ndr_uuid_t));
return (NT_STATUS_SUCCESS);
}