c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder#include "providers/ldap/sdap_async.h"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#include "providers/ad/ad_subdomains.h"

4eef7cf5a507dbc9d9edec3cb6860e4ca35f6998Christian Maeder#include "providers/ad/ad_domain_info.h"

1833ca8e3b041e84202410da047b68c3c4259e32Klaus Luettich#include "providers/ad/ad_srv.h"

1833ca8e3b041e84202410da047b68c3c4259e32Klaus Luettich#include "providers/ad/ad_common.h"

1833ca8e3b041e84202410da047b68c3c4259e32Klaus Luettich

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#include "providers/ldap/sdap_idmap.h"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#include "util/util_sss_idmap.h"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#include <ctype.h>

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#include <ndr.h>

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#include <ndr/ndr_nbt.h>

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define AD_AT_FLATNAME "flatName"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define AD_AT_SID "securityIdentifier"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define AD_AT_TRUST_TYPE "trustType"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define AD_AT_TRUST_PARTNER "trustPartner"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define AD_AT_TRUST_ATTRS "trustAttributes"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define SLAVE_DOMAIN_FILTER_BASE "(objectclass=trustedDomain)(trustType=2)(!(msDS-TrustForestTrustInfo=*))"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define SLAVE_DOMAIN_FILTER "(&"SLAVE_DOMAIN_FILTER_BASE")"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define FOREST_ROOT_FILTER_FMT "(&"SLAVE_DOMAIN_FILTER_BASE"(cn=%s))"

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers#define AD_SUBDOMAIN_REFRESH_LIMIT 5

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstruct ad_subdomains_ctx {

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder struct be_ctx *be_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sdap_id_ctx *sdap_id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_domain *sdom;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_id_conn_ctx *ldap_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sss_idmap_ctx *idmap_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder char *domain_name;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers time_t last_refreshed;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct tevent_timer *timer_event;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_id_ctx *ad_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers};

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

151198a104f7a2bd3e84539f0f809bc41392eba8Christian Maederstruct ad_subdomains_req_ctx {

151198a104f7a2bd3e84539f0f809bc41392eba8Christian Maeder struct be_req *be_req;

151198a104f7a2bd3e84539f0f809bc41392eba8Christian Maeder struct ad_subdomains_ctx *sd_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_id_op *sdap_op;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder char *current_filter;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder size_t base_iter;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_id_ctx *root_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sdap_id_op *root_op;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers size_t root_base_iter;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sysdb_attrs *root_domain_attrs;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sss_domain_info *root_domain;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers size_t reply_count;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sysdb_attrs **reply;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers char *master_sid;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers char *flat_name;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder char *site;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder char *forest;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers};

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic errno_t

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maederad_subdom_ad_ctx_new(struct be_ctx *be_ctx,

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder struct ad_id_ctx *id_ctx,

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder struct sss_domain_info *subdom,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_id_ctx **_subdom_id_ctx)

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers{

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_options *ad_options;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_id_ctx *ad_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *gc_service_name;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_srv_plugin_ctx *srv_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers char *ad_domain;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers char *ad_site_override;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sdap_domain *sdom;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers errno_t ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder const char *realm;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *hostname;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *keytab;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers realm = dp_opt_get_cstring(id_ctx->ad_options->basic, AD_KRB5_REALM);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers hostname = dp_opt_get_cstring(id_ctx->ad_options->basic, AD_HOSTNAME);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers keytab = dp_opt_get_cstring(id_ctx->ad_options->basic, AD_KEYTAB);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_domain = subdom->name;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (realm == NULL || hostname == NULL || ad_domain == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CONF_SETTINGS, "Missing realm or hostname.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EINVAL;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ad_options = ad_create_2way_trust_options(id_ctx, realm,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ad_domain, hostname, keytab);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ad_options == NULL) {

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Cannot initialize AD options\n");

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder talloc_free(ad_options);

4eef7cf5a507dbc9d9edec3cb6860e4ca35f6998Christian Maeder return ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ad_site_override = dp_opt_get_string(ad_options->basic, AD_SITE);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder gc_service_name = talloc_asprintf(ad_options, "%s%s", "gc_", subdom->name);

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder if (gc_service_name == NULL) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers talloc_free(ad_options);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = ad_failover_init(ad_options, be_ctx, NULL, NULL, realm,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers subdom->name, gc_service_name,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers subdom->name, &ad_options->service);

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder if (ret != EOK) {

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Cannot initialize AD failover\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers talloc_free(ad_options);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_id_ctx = ad_id_ctx_init(ad_options, be_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ad_id_ctx == NULL) {

c64d33a7fbeae730cbe65193fe3cc24e7aa1ddd6Christian Maeder talloc_free(ad_options);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder ad_id_ctx->sdap_id_ctx->opts = ad_options->id;

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder ad_options->id_ctx = ad_id_ctx;

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers /* use AD plugin */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder srv_ctx = ad_srv_plugin_ctx_init(be_ctx, be_ctx->be_res,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers default_host_dbs,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ad_id_ctx->ad_options->id,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder hostname,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_domain,

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder ad_site_override);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (srv_ctx == NULL) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_FATAL_FAILURE, "Out of memory?\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers be_fo_set_srv_lookup_plugin(be_ctx, ad_srv_plugin_send,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ad_srv_plugin_recv, srv_ctx, "AD");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sdap_domain_subdom_add(ad_id_ctx->sdap_id_ctx,

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder ad_id_ctx->sdap_id_ctx->opts->sdom,

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder subdom->parent);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Cannot initialize sdap domain\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers talloc_free(ad_options);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers sdom = sdap_domain_get(ad_id_ctx->sdap_id_ctx->opts, subdom);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (sdom == NULL) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return EFAULT;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers sdap_inherit_options(subdom->parent->sd_inherit,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder id_ctx->sdap_id_ctx->opts,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_id_ctx->sdap_id_ctx->opts);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Set up the ID mapping object */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_id_ctx->sdap_id_ctx->opts->idmap_ctx =

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers id_ctx->sdap_id_ctx->opts->idmap_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers *_subdom_id_ctx = ad_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return EOK;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers}

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic errno_t

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersads_store_sdap_subdom(struct ad_subdomains_ctx *ctx,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sss_domain_info *parent)

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sdap_domain *sditer;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_id_ctx *subdom_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sdap_domain_subdom_add(ctx->sdap_id_ctx, ctx->sdom, parent);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "sdap_domain_subdom_add failed.\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DLIST_FOR_EACH(sditer, ctx->sdom) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (IS_SUBDOMAIN(sditer->dom) && sditer->pvt == NULL) {

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder ret = ad_subdom_ad_ctx_new(ctx->be_ctx, ctx->ad_id_ctx,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers sditer->dom, &subdom_id_ctx);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "ad_subdom_ad_ctx_new failed.\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers } else {

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder sditer->pvt = subdom_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return EOK;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers}

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic errno_t ad_subdom_enumerates(struct sss_domain_info *parent,

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder struct sysdb_attrs *attrs,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers bool *_enumerates)

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers{

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers errno_t ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *name;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder ret = sysdb_attrs_get_string(attrs, AD_AT_TRUST_PARTNER, &name);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_get_string failed.\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers *_enumerates = subdomain_enumerates(parent, name);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return EOK;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers}

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic errno_t

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersad_subdom_store(struct ad_subdomains_ctx *ctx,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sss_domain_info *domain,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sysdb_attrs *subdom_attrs,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers bool enumerate)

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers{

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers TALLOC_CTX *tmp_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *name;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers char *realm;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *flat;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers errno_t ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers enum idmap_error_code err;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ldb_message_element *el;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers char *sid_str = NULL;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers uint32_t trust_type;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers bool mpg;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers tmp_ctx = talloc_new(NULL);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (tmp_ctx == NULL) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers goto done;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sysdb_attrs_get_uint32_t(subdom_attrs, AD_AT_TRUST_TYPE,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers &trust_type);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_get_uint32_t failed.\n");

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sysdb_attrs_get_string(subdom_attrs, AD_AT_TRUST_PARTNER, &name);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "failed to get subdomain name\n");

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder goto done;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers realm = get_uppercase_realm(tmp_ctx, name);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (!realm) {

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder ret = ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers goto done;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sysdb_attrs_get_string(subdom_attrs, AD_AT_FLATNAME, &flat);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "failed to get flat name of subdomain %s\n",

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers name);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers goto done;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sysdb_attrs_get_el(subdom_attrs, AD_AT_SID, &el);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK || el->num_values != 1) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "sdap_attrs_get_el failed.\n");

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder goto done;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers err = sss_idmap_bin_sid_to_sid(ctx->idmap_ctx,

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder el->values[0].data,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder el->values[0].length,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder &sid_str);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (err != IDMAP_SUCCESS) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_MINOR_FAILURE,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers "Could not convert SID: [%s].\n", idmap_error_string(err));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = EFAULT;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder mpg = sdap_idmap_domain_has_algorithmic_mapping(

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->sdap_id_ctx->opts->idmap_ctx,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers name,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers sid_str);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sysdb_subdomain_store(domain->sysdb, name, realm, flat, sid_str,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers mpg, enumerate, domain->forest, 0);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "sysdb_subdomain_store failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0e9494f7ac18b504a9dab7e9f001d8a94bd3baaaChristian Maeder ret = EOK;

0e9494f7ac18b504a9dab7e9f001d8a94bd3baaaChristian Maederdone:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sss_idmap_free_sid(ctx->sdap_id_ctx->opts->idmap_ctx->map, sid_str);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_free(tmp_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic errno_t ad_subdomains_refresh(struct ad_subdomains_ctx *ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int count, bool root_domain,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sysdb_attrs **reply,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder bool *changes)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_domain *sdom;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sss_domain_info *domain, *dom;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder bool handled[count];

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *value;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *root_name = NULL;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers int c, h;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers int ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers bool enumerate;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder domain = ctx->be_ctx->domain;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder memset(handled, 0, sizeof(bool) * count);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers h = 0;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (root_domain) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sysdb_attrs_get_string(reply[0], AD_AT_TRUST_PARTNER,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers &root_name);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_get_string failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* check existing subdomains */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder for (dom = get_next_domain(domain, SSS_GND_DESCEND);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder dom && IS_SUBDOMAIN(dom); /* if we get back to a parent, stop */

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder dom = get_next_domain(dom, 0)) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers /* If we are handling root domain, skip all the other domains. We don't

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (root_name && strcmp(root_name, dom->name) != 0) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers continue;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder for (c = 0; c < count; c++) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (handled[c]) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder continue;

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sysdb_attrs_get_string(reply[c], AD_AT_TRUST_PARTNER, &value);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_get_string failed.\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers goto done;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (strcmp(value, dom->name) == 0) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers break;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (c >= count) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* ok this subdomain does not exist anymore, let's clean up */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sss_domain_set_state(dom, DOM_DISABLED);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sysdb_subdomain_delete(dom->sysdb, dom->name);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers goto done;

dd38bafd384f5a5bc9634aad395505a0fd74395aChristian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers sdom = sdap_domain_get(ctx->sdap_id_ctx->opts, dom);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (sdom == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CRIT_FAILURE, "BUG: Domain does not exist?\n");

b645cf3dc1e449038ed291bbd11fcc6e02b2fc7fChristian Maeder continue;

b645cf3dc1e449038ed291bbd11fcc6e02b2fc7fChristian Maeder }

b645cf3dc1e449038ed291bbd11fcc6e02b2fc7fChristian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Remove the subdomain from the list of LDAP domains */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdap_domain_remove(ctx->sdap_id_ctx->opts, dom);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_ptask_destroy(&sdom->enum_task);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers be_ptask_destroy(&sdom->cleanup_task);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder /* terminate all requests for this subdomain so we can free it */

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers be_terminate_domain_requests(ctx->be_ctx, dom->name);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_zfree(sdom);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder } else {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* ok let's try to update it */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_enumerates(domain, reply[c], &enumerate);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_store(ctx, domain, reply[c], enumerate);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Nothing we can do about the error. Let's at least try

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_MINOR_FAILURE, "Failed to parse subdom data, "

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder "will try to use cached subdomain\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder handled[c] = true;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder h++;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (count == h) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* all domains were already accounted for and have been updated */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder *changes = false;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* if we get here it means we have changes to the subdomains list */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder *changes = true;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder for (c = 0; c < count; c++) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (handled[c]) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder continue;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Nothing we can do about the error. Let's at least try

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_enumerates(domain, reply[c], &enumerate);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_store(ctx, domain, reply[c], enumerate);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE, "Failed to parse subdom data, "

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "will try to use cached subdomain\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederdone:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->last_refreshed = 0;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers } else {

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder ctx->last_refreshed = time(NULL);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic errno_t ad_subdom_reinit(struct ad_subdomains_ctx *ctx)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder errno_t ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sss_write_krb5_conf_snippet(

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder dp_opt_get_string(ctx->ad_id_ctx->ad_options->basic,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder AD_KRB5_CONFD_PATH));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE, "sss_write_krb5_conf_snippet failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Just continue */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sysdb_update_subdomains(ctx->be_ctx->domain);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sysdb_update_subdomains failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sss_write_domain_mappings(ctx->be_ctx->domain);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE, "sss_krb5_write_mappings failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Just continue */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ads_store_sdap_subdom(ctx, ctx->be_ctx->domain);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "ads_store_sdap_subdom failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic void ad_subdomains_get_conn_done(struct tevent_req *req);

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maederstatic void ad_subdomains_master_dom_done(struct tevent_req *req);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic errno_t ad_subdomains_get_root(struct ad_subdomains_req_ctx *ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic errno_t ad_subdomains_get_slave(struct ad_subdomains_req_ctx *ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_retrieve(struct ad_subdomains_ctx *ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct be_req *be_req)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_req_ctx *req_ctx = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct tevent_req *req;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int dp_error = DP_ERR_FATAL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx = talloc_zero(be_req, struct ad_subdomains_req_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (req_ctx == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->be_req = be_req;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->sd_ctx = ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->current_filter = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->base_iter = 0;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->root_base_iter = 0;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->root_id_ctx = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->root_op = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->root_domain = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->root_domain_attrs = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->reply_count = 0;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->reply = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req_ctx->sdap_op = sdap_id_op_create(req_ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->ldap_ctx->conn_cache);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (req_ctx->sdap_op == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sdap_id_op_create failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder req = sdap_id_op_connect_send(req_ctx->sdap_op, req_ctx, &ret);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (req == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sdap_id_op_connect_send failed: %d(%s).\n",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret, strerror(ret));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder tevent_req_set_callback(req, ad_subdomains_get_conn_done, req_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederdone:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_free(req_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret == EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder dp_error = DP_ERR_OK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req_terminate(be_req, dp_error, ret, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_get_conn_done(struct tevent_req *req)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int dp_error = DP_ERR_FATAL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_req_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = tevent_req_callback_data(req, struct ad_subdomains_req_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = sdap_id_op_connect_recv(req, &dp_error);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers talloc_zfree(req);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (dp_error == DP_ERR_OFFLINE) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "No AD server is available, cannot get the "

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "subdomain list while offline\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder } else {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE,

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder "Failed to connect to AD server: [%d](%s)\n",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret, strerror(ret));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req = ad_master_domain_send(ctx, ctx->sd_ctx->be_ctx->ev,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->sd_ctx->ldap_ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->sdap_op,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->sd_ctx->domain_name);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (req == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "ad_master_domain_send failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers tevent_req_set_callback(req, ad_subdomains_master_dom_done, ctx);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederfail:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req_terminate(ctx->be_req, dp_error, ret, NULL);

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_master_dom_done(struct tevent_req *req)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_req_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder errno_t ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder const char *realm;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = tevent_req_callback_data(req, struct ad_subdomains_req_ctx);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = ad_master_domain_recv(req, ctx,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers &ctx->flat_name, &ctx->master_sid,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers &ctx->site, &ctx->forest);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers talloc_zfree(req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Cannot retrieve master domain info\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder realm = dp_opt_get_cstring(ctx->sd_ctx->ad_id_ctx->ad_options->basic,

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder AD_KRB5_REALM);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (realm == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CONF_SETTINGS, "Missing realm.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = EINVAL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sysdb_master_domain_add_info(ctx->sd_ctx->be_ctx->domain,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder realm,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->flat_name, ctx->master_sid,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->forest);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Cannot save master domain info\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ctx->forest == NULL ||

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers strcasecmp(ctx->sd_ctx->be_ctx->domain->name, ctx->forest) != 0) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_TRACE_FUNC,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers "SSSD needs to look up the forest root domain\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = ad_subdomains_get_root(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder } else {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_TRACE_FUNC,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Connected to forest root, looking up child domains..\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_op = ctx->sdap_op;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_id_ctx = ctx->sd_ctx->ad_id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = ad_subdomains_get_slave(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret == EAGAIN) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder } else if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersdone:

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder be_req_terminate(ctx->be_req, DP_ERR_FATAL, ret, NULL);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_get_root_domain_done(struct tevent_req *req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic errno_t ad_subdomains_get_root(struct ad_subdomains_req_ctx *ctx)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct tevent_req *req;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_search_base *base;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_id_ctx *sdap_id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder char *filter;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder const char *forest_root_attrs[] = { AD_AT_FLATNAME, AD_AT_TRUST_PARTNER,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder AD_AT_SID, AD_AT_TRUST_TYPE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder AD_AT_TRUST_ATTRS, NULL };

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdap_id_ctx = ctx->sd_ctx->sdap_id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder base = sdap_id_ctx->opts->sdom->search_bases[ctx->root_base_iter];

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (base == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder filter = talloc_asprintf(ctx, FOREST_ROOT_FILTER_FMT, ctx->forest);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (filter == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers req = sdap_get_generic_send(ctx, ctx->sd_ctx->be_ctx->ev,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdap_id_ctx->opts,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdap_id_op_handle(ctx->sdap_op),

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder base->basedn, LDAP_SCOPE_SUBTREE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder filter, forest_root_attrs,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder NULL, 0,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder dp_opt_get_int(sdap_id_ctx->opts->basic,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder SDAP_SEARCH_TIMEOUT),

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder false);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (req == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sdap_get_generic_send failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder tevent_req_set_callback(req, ad_subdomains_get_root_domain_done, ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EAGAIN;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic struct sss_domain_info *ads_get_root_domain(struct ad_subdomains_req_ctx *ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic struct ad_id_ctx *ads_get_root_id_ctx(struct ad_subdomains_req_ctx *ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_root_conn_done(struct tevent_req *req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic void ad_subdomains_get_root_domain_done(struct tevent_req *req)

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers{

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers int ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder size_t reply_count;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sysdb_attrs **reply = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_req_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int dp_error = DP_ERR_FATAL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder bool has_changes = false;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = tevent_req_callback_data(req, struct ad_subdomains_req_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sdap_get_generic_recv(req, ctx, &reply_count, &reply);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_zfree(req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sdap_get_generic_send request failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (reply_count == 0) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers /* If no root domain was found in the default search base, try the

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_base_iter++;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdomains_get_root(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret == EAGAIN) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder } else if (reply_count > 1) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CRIT_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Multiple results for root domain search, "

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "domain list might be incomplete!\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->root_op = ctx->sdap_op;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->root_id_ctx = ctx->sd_ctx->ad_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdomains_get_slave(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret == EAGAIN) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Exactly one result, good. */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* We won't use the operation to the local LDAP anymore, but

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sdap_id_op_done(ctx->sdap_op, ret, &dp_error);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (dp_error == DP_ERR_OFFLINE) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "No AD server is available, cannot get the "

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers "subdomain list while offline\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers } else {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Failed to search the AD server: [%d](%s)\n",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret, strerror(ret));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder ret = ad_subdomains_refresh(ctx->sd_ctx, 1, true, reply, &has_changes);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "ad_subdomains_refresh failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder if (has_changes) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_reinit(ctx->sd_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Could not reinitialize subdomains\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_domain_attrs = reply[0];

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_domain = ads_get_root_domain(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx->root_domain == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Could not find the root domain\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = EFAULT;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->root_id_ctx = ads_get_root_id_ctx(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx->root_id_ctx == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Cannot create id ctx for the root domain\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = EFAULT;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder ctx->root_op = sdap_id_op_create(ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_id_ctx->ldap_ctx->conn_cache);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx->root_op == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sdap_id_op_create failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

f7d2e793728bbb7fd185e027eb9dfd7b9dd11c21Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder req = sdap_id_op_connect_send(ctx->root_op, ctx, &ret);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (req == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sdap_id_op_connect_send failed: %d(%s).\n",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret, strerror(ret));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder tevent_req_set_callback(req, ad_subdomains_root_conn_done, ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederfail:

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret == EOK) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->sd_ctx->last_refreshed = time(NULL);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers dp_error = DP_ERR_OK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req_terminate(ctx->be_req, dp_error, ret, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic struct sss_domain_info *ads_get_root_domain(struct ad_subdomains_req_ctx *ctx)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder errno_t ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder const char *name;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sss_domain_info *root;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder ret = sysdb_attrs_get_string(ctx->root_domain_attrs, AD_AT_TRUST_PARTNER, &name);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_get_string failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* With a subsequent run, the root should already be known */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder root = find_domain_by_name(ctx->sd_ctx->be_ctx->domain,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder name, false);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return root;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic struct ad_id_ctx *ads_get_root_id_ctx(struct ad_subdomains_req_ctx *ctx)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder errno_t ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_domain *sdom;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_id_ctx *root_id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdom = sdap_domain_get(ctx->sd_ctx->ad_id_ctx->sdap_id_ctx->opts,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_domain);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (sdom == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Cannot get the sdom for %s!\n", ctx->root_domain->name);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (sdom->pvt == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_ad_ctx_new(ctx->sd_ctx->be_ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->sd_ctx->ad_id_ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_domain,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder &root_id_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "ad_subdom_ad_ctx_new failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdom->pvt = root_id_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers } else {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers root_id_ctx = sdom->pvt;

a843be818ba3c494cb5d9315dc270e558a198bdaChristian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder root_id_ctx->ldap_ctx->ignore_mark_offline = true;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return root_id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_root_conn_done(struct tevent_req *req)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int dp_error = DP_ERR_FATAL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_req_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = tevent_req_callback_data(req, struct ad_subdomains_req_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sdap_id_op_connect_recv(req, &dp_error);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_zfree(req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_mark_dom_offline(ctx->root_domain, be_req_get_be_ctx(ctx->be_req));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Failed to connect to AD server: [%d](%s)\n",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret, strerror(ret));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdomains_get_slave(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret == EAGAIN) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder } else if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederfail:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req_terminate(ctx->be_req, dp_error, ret, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_get_slave_domain_done(struct tevent_req *req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic errno_t ad_subdomains_get_slave(struct ad_subdomains_req_ctx *ctx)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct tevent_req *req;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sdap_search_base *base;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder const char *slave_dom_attrs[] = { AD_AT_FLATNAME, AD_AT_TRUST_PARTNER,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers AD_AT_SID, AD_AT_TRUST_TYPE,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers AD_AT_TRUST_ATTRS, NULL };

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers base = ctx->root_id_ctx->sdap_id_ctx->opts->sdom->search_bases[ctx->base_iter];

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (base == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EOK;

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers req = sdap_get_generic_send(ctx, ctx->sd_ctx->be_ctx->ev,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_id_ctx->sdap_id_ctx->opts,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdap_id_op_handle(ctx->root_op),

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder base->basedn, LDAP_SCOPE_SUBTREE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder SLAVE_DOMAIN_FILTER, slave_dom_attrs,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder NULL, 0,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers dp_opt_get_int(ctx->root_id_ctx->sdap_id_ctx->opts->basic,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers SDAP_SEARCH_TIMEOUT),

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers false);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (req == NULL) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_OP_FAILURE, "sdap_get_generic_send failed.\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

fea14169cb07365fe4d12fea734d7b761ea8b287Christian Maeder tevent_req_set_callback(req, ad_subdomains_get_slave_domain_done, ctx);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return EAGAIN;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers}

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic errno_t ad_subdomains_process(TALLOC_CTX *mem_ctx,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sss_domain_info *domain,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers size_t nsd, struct sysdb_attrs **sd,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sysdb_attrs *root,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder size_t *_nsd_out,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sysdb_attrs ***_sd_out)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers size_t i, sdi;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct sysdb_attrs **sd_out;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers const char *sd_name;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers errno_t ret;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (root == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* We are connected directly to the root domain. The 'sd'

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder *_nsd_out = nsd;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder *_sd_out = sd;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* If we searched for root separately, we must:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sd_out = talloc_zero_array(mem_ctx, struct sysdb_attrs *, nsd+1);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (sd_out == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers sdi = 0;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers for (i = 0; i < nsd; i++) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sysdb_attrs_get_string(sd[i], AD_AT_TRUST_PARTNER, &sd_name);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sysdb_attrs_get_string failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto fail;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (strcasecmp(sd_name, domain->name) == 0) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_TRACE_INTERNAL,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Not including primary domain %s in the subdomain list\n",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder domain->name);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder continue;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sd_out[sdi] = talloc_steal(sd_out, sd[i]);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sdi++;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Now include the root */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder sd_out[sdi] = talloc_steal(sd_out, root);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers *_nsd_out = sdi+1;

e07538a3c4dbc690e57f61aded6db89d876b2374Christian Maeder *_sd_out = sd_out;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederfail:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_free(sd_out);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdomains_get_slave_domain_done(struct tevent_req *req)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder size_t reply_count;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sysdb_attrs **reply = NULL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_req_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int dp_error = DP_ERR_FATAL;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder bool refresh_has_changes = false;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder size_t nsubdoms;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct sysdb_attrs **subdoms;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = tevent_req_callback_data(req, struct ad_subdomains_req_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sdap_get_generic_recv(req, ctx, &reply_count, &reply);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_zfree(req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "sdap_get_generic_send request failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (reply_count) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->reply = talloc_realloc(ctx, ctx->reply, struct sysdb_attrs *,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->reply_count + reply_count);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx->reply == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder memcpy(ctx->reply+ctx->reply_count, reply,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder reply_count * sizeof(struct sysdb_attrs *));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->reply_count += reply_count;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->base_iter++;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdomains_get_slave(ctx);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers if (ret == EAGAIN) {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers /* Search in progress */

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = sdap_id_op_done(ctx->root_op, ret, &dp_error);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (dp_error == DP_ERR_OFFLINE) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "No AD server is available, cannot get the "

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "subdomain list while offline\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder } else {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Failed to search the AD server: [%d](%s)\n",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret, strerror(ret));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder tevent_req_error(req, ret);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Based on whether we are connected to the forest root or not, we might

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ret = ad_subdomains_process(ctx, ctx->sd_ctx->be_ctx->domain,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->reply_count, ctx->reply,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->root_domain_attrs, &nsubdoms, &subdoms);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, ("Cannot process subdomain list\n"));

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder tevent_req_error(req, ret);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Got all the subdomains, let's process them */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdomains_refresh(ctx->sd_ctx, nsubdoms, false, subdoms,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder &refresh_has_changes);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Failed to refresh subdomains.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers DEBUG(SSSDBG_TRACE_LIBS, "There are %schanges\n",

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers refresh_has_changes ? "" : "no ");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (refresh_has_changes) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_reinit(ctx->sd_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "Could not reinitialize subdomains\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder goto done;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederdone:

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret == EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->sd_ctx->last_refreshed = time(NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder dp_error = DP_ERR_OK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req_terminate(ctx->be_req, dp_error, ret, NULL);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers}

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstatic void ad_subdom_online_cb(void *pvt);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdom_timer_refresh(struct tevent_context *ev,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct tevent_timer *te,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct timeval current_time,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder void *pvt)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_subdom_online_cb(pvt);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdom_be_req_callback(struct be_req *be_req,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int dp_err, int dp_ret,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder const char *errstr)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_free(be_req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdom_online_cb(void *pvt)

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers{

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_subdomains_ctx *ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct be_req *be_req;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct timeval tv;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder uint32_t refresh_interval;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = talloc_get_type(pvt, struct ad_subdomains_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (!ctx) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CRIT_FAILURE, "Bad private pointer\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder refresh_interval = ctx->be_ctx->domain->subdomain_refresh_interval;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req = be_req_create(ctx, NULL, ctx->be_ctx, "AD subdomains",

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_subdom_be_req_callback, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (be_req == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CRIT_FAILURE, "be_req_create() failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_subdomains_retrieve(ctx, be_req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers tv = tevent_timeval_current_ofs(refresh_interval, 0);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->timer_event = tevent_add_timer(ctx->be_ctx->ev, ctx, tv,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ad_subdom_timer_refresh, ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (!ctx->timer_event) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE, "Failed to add subdom timer event\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederstatic void ad_subdom_offline_cb(void *pvt)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = talloc_get_type(pvt, struct ad_subdomains_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder talloc_zfree(ctx->timer_event);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maedervoid ad_subdomains_handler(struct be_req *be_req)

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers{

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct be_ctx *be_ctx = be_req_get_be_ctx(be_req);

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers struct ad_subdomains_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder time_t now;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = talloc_get_type(be_ctx->bet_info[BET_SUBDOMAINS].pvt_bet_data,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (!ctx) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req_terminate(be_req, DP_ERR_FATAL, EINVAL, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder now = time(NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx->last_refreshed > now - AD_SUBDOMAIN_REFRESH_LIMIT) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder be_req_terminate(be_req, DP_ERR_OK, EOK, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ad_subdomains_retrieve(ctx, be_req);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckersstruct bet_ops ad_subdomains_ops = {

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers .handler = ad_subdomains_handler,

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers .finalize = NULL

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers};

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maederint ad_subdom_init(struct be_ctx *be_ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_id_ctx *id_ctx,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder const char *ad_domain,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct bet_ops **ops,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder void **pvt_data)

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder{

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder struct ad_subdomains_ctx *ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder int ret;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder enum idmap_error_code err;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx = talloc_zero(id_ctx, struct ad_subdomains_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CRIT_FAILURE, "talloc_zero failed.\n");

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers return ENOMEM;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers }

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->be_ctx = be_ctx;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->sdom = id_ctx->sdap_id_ctx->opts->sdom;

c1c5a93b6f5bf18be1f4a0a9da6c0e32ff00266cFelix Reckers ctx->ldap_ctx = id_ctx->ldap_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->sdap_id_ctx = id_ctx->sdap_id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->domain_name = talloc_strdup(ctx, ad_domain);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ctx->domain_name == NULL) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_OP_FAILURE, "talloc_strdup failed.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return ENOMEM;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ctx->ad_id_ctx = id_ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder *ops = &ad_subdomains_ops;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder *pvt_data = ctx;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = be_add_online_cb(ctx, be_ctx, ad_subdom_online_cb, ctx, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE, "Failed to add subdom online callback\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = be_add_offline_cb(ctx, be_ctx, ad_subdom_offline_cb, ctx, NULL);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE, "Failed to add subdom offline callback\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder err = sss_idmap_init(sss_idmap_talloc, ctx, sss_idmap_talloc_free,

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder &ctx->idmap_ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (err != IDMAP_SUCCESS) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_CRIT_FAILURE, "Failed to initialize idmap context.\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EFAULT;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder ret = ad_subdom_reinit(ctx);

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder if (ret != EOK) {

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder DEBUG(SSSDBG_MINOR_FAILURE, "Could not reinitialize subdomains. "

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder "Users from trusted domains might not be resolved correctly\n");

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder /* Ignore this error and try to discover the subdomains later */

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder }

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder return EOK;

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder}

0cb5f9c8582ad87ceef1c16b5d92347ae0878019Christian Maeder