s4 net: rename to samba-tool in order to not clash with s3 net

Autobuild-User: Kai Blin <kai@samba.org>
Autobuild-Date: Thu Oct 28 07:25:16 UTC 2010 on sn-devel-104

1 files changed, 361 insertions, 0 deletions

diff --git a/source4/samba_tool/drs/drs.c b/source4/samba_tool/drs/drs.c
new file mode 100644
index 0000000000..78f8c144c2
--- /dev/null
+++ b/source4/samba_tool/drs/drs.c
@@ -0,0 +1,361 @@
+/*
+   Samba Unix/Linux SMB client library
+
+   Implements functions offered by repadmin.exe tool under Windows
+
+   Copyright (C) Kamen Mazdrashki <kamen.mazdrashki@postpath.com> 2010
+
+   This program is free software; you can redistribute it and/or modify
+   it under the terms of the GNU General Public License as published by
+   the Free Software Foundation; either version 3 of the License, or
+   (at your option) any later version.
+
+   This program is distributed in the hope that it will be useful,
+   but WITHOUT ANY WARRANTY; without even the implied warranty of
+   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
+   GNU General Public License for more details.
+
+   You should have received a copy of the GNU General Public License
+   along with this program.  If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#include "includes.h"
+#include "samba_tool/samba_tool.h"
+#include "librpc/gen_ndr/ndr_drsuapi_c.h"
+#include "samba_tool/drs/drs.h"
+#include "lib/ldb/include/ldb.h"
+#include "ldb_wrap.h"
+#include "system/filesys.h"
+
+
+/**
+ * 'samba-tool drs' supported sub-commands
+ */
+static const struct net_functable net_drs_functable[] = {
+	{ "bind", "Display replication features for a domain controller\n", net_drs_bind_cmd, net_drs_bind_usage },
+	{ "kcc", "Forces the KCC to recalculate replication topology for a specified domain controller\n",
+			net_drs_kcc_cmd, net_drs_kcc_usage },
+	{ "replicate", "Triggers replication event for the specified naming context between the source and destination domain controllers.\n",
+			net_drs_replicate_cmd, net_drs_replicate_usage },
+	{ "showrepl", "Displays the replication partners for each directory partition on the specified domain controller.\n",
+			net_drs_showrepl_cmd, net_drs_showrepl_usage },
+	{ NULL, NULL }
+};
+
+/**
+ * 'samba-tool drs' entry point
+ */
+int net_drs(struct net_context *ctx, int argc, const char **argv)
+{
+	return net_run_function(ctx, argc, argv, net_drs_functable, net_drs_usage);
+}
+
+/**
+ * 'samba-tool drs' usage message
+ */
+int net_drs_usage(struct net_context *ctx, int argc, const char **argv)
+{
+	d_printf("samba-tool drs <command> [options]\n");
+	d_printf("\n");
+	d_printf("Currently implemented commands:\n");
+	d_printf("  bind      - Display DC replication features\n");
+	d_printf("  kcc       - Forces the KCC to recalculate replication topology for a specified domain controller\n");
+	d_printf("  replicate - Triggers replication event for the specified naming context between the source and destination domain controllers.\n");
+	d_printf("  showrepl  - Displays the replication partners for each directory partition on the specified domain controller.\n");
+	return 0;
+}
+
+/**
+ * Create drsuapi connection to remote DC
+ * and fill-in DC capabilities
+ */
+static bool net_drs_DsBind(struct net_drs_context *drs_ctx, struct net_drs_connection *conn)
+{
+	NTSTATUS status;
+	struct GUID bind_guid;
+	struct drsuapi_DsBind req;
+	struct drsuapi_DsBindInfoCtr in_bind_ctr;
+	union drsuapi_DsBindInfo *bind_info;
+
+	SMB_ASSERT(conn->binding != NULL);
+
+	status = dcerpc_pipe_connect_b(conn,
+				       &conn->drs_pipe,
+				       conn->binding,
+				       &ndr_table_drsuapi,
+				       drs_ctx->net_ctx->credentials,
+				       drs_ctx->net_ctx->event_ctx,
+				       drs_ctx->net_ctx->lp_ctx);
+	if (!NT_STATUS_IS_OK(status)) {
+		d_printf("Failed to connect to server: %s\n", nt_errstr(status));
+		return false;
+	}
+	conn->drs_handle = conn->drs_pipe->binding_handle;
+
+	ZERO_STRUCT(in_bind_ctr);
+	in_bind_ctr.length = 48;
+	in_bind_ctr.info.info48.pid = (uint32_t)getpid();
+	GUID_from_string(DRSUAPI_DS_BIND_GUID, &bind_guid);
+	req.in.bind_guid = &bind_guid;
+	req.in.bind_info = &in_bind_ctr;
+	req.out.bind_handle = &conn->bind_handle;
+
+	status = dcerpc_drsuapi_DsBind_r(conn->drs_handle, conn, &req);
+	if (!NT_STATUS_IS_OK(status)) {
+		const char *errstr = nt_errstr(status);
+		d_printf("dcerpc_drsuapi_DsBind failed - %s\n", errstr);
+		return false;
+	} else if (!W_ERROR_IS_OK(req.out.result)) {
+		d_printf("DsBind failed - %s\n", win_errstr(req.out.result));
+		return false;
+	}
+
+	/* fill-in remote DC capabilities */
+	ZERO_STRUCT(conn->info48);
+	bind_info = &req.out.bind_info->info;
+	conn->bind_info_len = req.out.bind_info->length;
+	switch (conn->bind_info_len) {
+	case 48:
+		conn->info48.supported_extensions_ext = bind_info->info48.supported_extensions_ext;
+		conn->info48.config_dn_guid = bind_info->info48.config_dn_guid;
+	case 28:
+		conn->info48.repl_epoch = bind_info->info28.repl_epoch;
+	case 24:
+		conn->info48.supported_extensions = bind_info->info24.supported_extensions;
+		conn->info48.site_guid = bind_info->info24.site_guid;
+		conn->info48.pid = bind_info->info24.pid;
+		break;
+	default:
+		d_printf("Error: server returned BindInfo length %d", req.out.bind_info->length);
+		return false;
+	}
+
+	return true;
+}
+
+/**
+ * Close DRSUAPI connection to remote DC
+ */
+static bool net_drs_DsUnbind(struct net_drs_connection *conn)
+{
+	struct drsuapi_DsUnbind r;
+	struct policy_handle bind_handle;
+
+	SMB_ASSERT(conn->drs_pipe);
+
+	ZERO_STRUCT(r);
+	r.out.bind_handle = &bind_handle;
+
+	r.in.bind_handle = &conn->bind_handle;
+	dcerpc_drsuapi_DsUnbind_r(conn->drs_handle, conn, &r);
+
+	/* free dcerpc pipe in case we get called more than once */
+	talloc_free(conn->drs_pipe);
+	conn->drs_pipe = NULL;
+	conn->drs_handle = NULL;
+
+	return true;
+}
+
+/**
+ * Destroy drsuapi connection
+ */
+static int net_drs_connection_destructor(struct net_drs_connection *conn)
+{
+	if (conn->drs_pipe) {
+		net_drs_DsUnbind(conn);
+	}
+	return 0;
+}
+
+/**
+ * Create DRSUAPI connection to target DC
+ * @return ptr to net_drs_connection or NULL on failure
+ */
+struct net_drs_connection * net_drs_connect_dc(struct net_drs_context *drs_ctx, const char *dc_name)
+{
+	struct net_drs_connection *conn = NULL;
+
+	conn = talloc_zero(drs_ctx, struct net_drs_connection);
+	NET_DRS_NOMEM_GOTO(conn, failed);
+
+	/* init binding */
+	conn->binding = talloc_zero(conn, struct dcerpc_binding);
+	conn->binding->transport = NCACN_IP_TCP;
+	conn->binding->flags = drs_ctx->drs_conn->binding->flags;
+	conn->binding->host = talloc_strdup(conn, dc_name);
+	conn->binding->target_hostname = conn->binding->host;
+
+	if (!net_drs_DsBind(drs_ctx, conn)) {
+		goto failed;
+	}
+
+	talloc_set_destructor(conn, net_drs_connection_destructor);
+
+	return conn;
+
+failed:
+	talloc_free(conn);
+	return NULL;
+}
+
+/**
+ * Open secured LDAP connection to remote DC
+ */
+static bool net_drs_ldap_connect(struct net_drs_context *drs_ctx)
+{
+	char *url;
+	bool bret = true;
+
+	url = talloc_asprintf(drs_ctx, "ldap://%s/", drs_ctx->dc_name);
+	if (!url) {
+		d_printf(__location__ ": Have no memory");
+		return false;
+	}
+
+	drs_ctx->ldap.ldb = ldb_wrap_connect(drs_ctx,
+	                                     drs_ctx->net_ctx->event_ctx, drs_ctx->net_ctx->lp_ctx,
+	                                     url,
+	                                     NULL,
+	                                     drs_ctx->net_ctx->credentials,
+	                                     0);
+	if (drs_ctx->ldap.ldb == NULL) {
+		d_printf("Unable to connect to LDAP %s", url);
+		bret = false;
+	}
+
+	talloc_free(url);
+
+	return bret;
+}
+
+/**
+ * fetch RootDSE record
+ */
+static bool net_drs_ldap_rootdse(struct net_drs_context *drs_ctx)
+{
+	int ret;
+	struct ldb_result *r;
+	struct ldb_dn *basedn;
+	static const char *attrs[] = {
+		"*",
+		NULL
+	};
+
+	SMB_ASSERT(drs_ctx->ldap.ldb != NULL);
+
+	basedn = ldb_dn_new(drs_ctx, drs_ctx->ldap.ldb, NULL);
+	if (!basedn) {
+		d_printf(__location__ ": No memory");
+		return false;
+	}
+
+	ret = ldb_search(drs_ctx->ldap.ldb, drs_ctx, &r,
+	                 basedn, LDB_SCOPE_BASE, attrs,
+			 "(objectClass=*)");
+	talloc_free(basedn);
+	if (ret != LDB_SUCCESS) {
+		d_printf("RootDSE search failed: %s", ldb_errstring(drs_ctx->ldap.ldb));
+		talloc_free(r);
+		return false;
+	} else if (r->count != 1) {
+		d_printf("RootDSE search returned more than one record!");
+		talloc_free(r);
+		return false;
+	}
+
+	drs_ctx->ldap.rootdse = r->msgs[0];
+
+	return true;
+}
+
+/**
+ * parses binding from command line
+ * and gets target DC name
+ */
+static bool net_drs_parse_binding(struct net_drs_context *drs_ctx, const char *dc_binding)
+{
+	NTSTATUS status;
+	struct dcerpc_binding *b;
+
+	status = dcerpc_parse_binding(drs_ctx->drs_conn, dc_binding, &b);
+	if (!NT_STATUS_IS_OK(status)) {
+		d_printf("Bad binding supplied %s\n", dc_binding);
+		return false;
+	}
+
+	b->transport = NCACN_IP_TCP;
+	b->flags |= DCERPC_SIGN | DCERPC_SEAL;
+
+	/* cache target DC name */
+	drs_ctx->dc_name = b->target_hostname;
+
+	drs_ctx->drs_conn->binding = b;
+
+	return true;
+}
+
+/**
+ * Free DRSUAPI connection upon net_drs_context
+ * destruction
+ */
+static int net_drs_context_destructor(struct net_drs_context *drs_ctx)
+{
+	if (drs_ctx->drs_conn && drs_ctx->drs_conn->drs_pipe) {
+		net_drs_DsUnbind(drs_ctx->drs_conn);
+	}
+	return 0;
+}
+
+/**
+ * Create net_drs_context context to be used
+ * by 'samba-tool drs' sub-commands
+ */
+bool net_drs_create_context(struct net_context *net_ctx,
+			    const char *dc_binding,
+			    struct net_drs_context **_drs_ctx)
+{
+	struct net_drs_context *drs_ctx;
+
+	drs_ctx = talloc_zero(net_ctx, struct net_drs_context);
+	if (!drs_ctx) {
+		d_printf(__location__ ": No memory");
+		return false;
+	}
+
+	drs_ctx->drs_conn = talloc_zero(drs_ctx, struct net_drs_connection);
+	if (!drs_ctx->drs_conn) {
+		d_printf(__location__ ": No memory");
+		return false;
+	}
+
+	drs_ctx->net_ctx = net_ctx;
+
+	if (!net_drs_parse_binding(drs_ctx, dc_binding)) {
+		goto failed;
+	}
+
+	/* LDAP connect */
+	if (!net_drs_ldap_connect(drs_ctx)) {
+		goto failed;
+	}
+	/* fetch RootDSE */
+	if (!net_drs_ldap_rootdse(drs_ctx)) {
+		goto failed;
+	}
+
+	/* DRSUAPI connection */
+	if (!net_drs_DsBind(drs_ctx, drs_ctx->drs_conn)) {
+		goto failed;
+	}
+
+	/* set destructor to free any open connections */
+	talloc_set_destructor(drs_ctx, net_drs_context_destructor);
+
+	*_drs_ctx = drs_ctx;
+	return true;
+
+failed:
+	talloc_free(drs_ctx);
+	return false;
+}