/* Unix SMB/CIFS implementation. name query routines Copyright (C) Andrew Tridgell 1994-1998 This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ #include "includes.h" /* nmbd.c sets this to True. */ BOOL global_in_nmbd = False; /**************************** * SERVER AFFINITY ROUTINES * ****************************/ /* Server affinity is the concept of preferring the last domain controller with whom you had a successful conversation */ /**************************************************************************** ****************************************************************************/ #define SAFKEY_FMT "SAF/DOMAIN/%s" #define SAF_TTL 900 static char *saf_key(const char *domain) { char *keystr; asprintf( &keystr, SAFKEY_FMT, strupper_static(domain) ); return keystr; } /**************************************************************************** ****************************************************************************/ BOOL saf_store( const char *domain, const char *servername ) { char *key; time_t expire; BOOL ret = False; if ( !domain || !servername ) { DEBUG(2,("saf_store: Refusing to store empty domain or servername!\n")); return False; } if ( (strlen(domain) == 0) || (strlen(servername) == 0) ) { DEBUG(0,("saf_store: refusing to store 0 length domain or servername!\n")); return False; } if ( !gencache_init() ) return False; key = saf_key( domain ); expire = time( NULL ) + SAF_TTL; DEBUG(10,("saf_store: domain = [%s], server = [%s], expire = [%u]\n", domain, servername, (unsigned int)expire )); ret = gencache_set( key, servername, expire ); SAFE_FREE( key ); return ret; } BOOL saf_delete( const char *domain ) { char *key; BOOL ret = False; if ( !domain ) { DEBUG(2,("saf_delete: Refusing to delete empty domain\n")); return False; } if ( !gencache_init() ) return False; key = saf_key(domain); ret = gencache_del(key); if (ret) { DEBUG(10,("saf_delete: domain = [%s]\n", domain )); } SAFE_FREE( key ); return ret; } /**************************************************************************** ****************************************************************************/ char *saf_fetch( const char *domain ) { char *server = NULL; time_t timeout; BOOL ret = False; char *key = NULL; if ( !domain || strlen(domain) == 0) { DEBUG(2,("saf_fetch: Empty domain name!\n")); return NULL; } if ( !gencache_init() ) return False; key = saf_key( domain ); ret = gencache_get( key, &server, &timeout ); SAFE_FREE( key ); if ( !ret ) { DEBUG(5,("saf_fetch: failed to find server for \"%s\" domain\n", domain )); } else { DEBUG(5,("saf_fetch: Returning \"%s\" for \"%s\" domain\n", server, domain )); } return server; } /**************************************************************************** Generate a random trn_id. ****************************************************************************/ static int generate_trn_id(void) { uint16 id; generate_random_buffer((uint8 *)&id, sizeof(id)); return id % (unsigned)0x7FFF; } /**************************************************************************** Parse a node status response into an array of structures. ****************************************************************************/ static NODE_STATUS_STRUCT *parse_node_status(char *p, int *num_names, struct node_status_extra *extra) { NODE_STATUS_STRUCT *ret; int i; *num_names = CVAL(p,0); if (*num_names == 0) return NULL; ret = SMB_MALLOC_ARRAY(NODE_STATUS_STRUCT,*num_names); if (!ret) return NULL; p++; for (i=0;i< *num_names;i++) { StrnCpy(ret[i].name,p,15); trim_char(ret[i].name,'\0',' '); ret[i].type = CVAL(p,15); ret[i].flags = p[16]; p += 18; DEBUG(10, ("%s#%02x: flags = 0x%02x\n", ret[i].name, ret[i].type, ret[i].flags)); } /* * Also, pick up the MAC address ... */ if (extra) { memcpy(&extra->mac_addr, p, 6); /* Fill in the mac addr */ } return ret; } /**************************************************************************** Do a NBT node status query on an open socket and return an array of structures holding the returned names or NULL if the query failed. **************************************************************************/ NODE_STATUS_STRUCT *node_status_query(int fd,struct nmb_name *name, struct in_addr to_ip, int *num_names, struct node_status_extra *extra) { BOOL found=False; int retries = 2; int retry_time = 2000; struct timeval tval; struct packet_struct p; struct packet_struct *p2; struct nmb_packet *nmb = &p.packet.nmb; NODE_STATUS_STRUCT *ret; ZERO_STRUCT(p); nmb->header.name_trn_id = generate_trn_id(); nmb->header.opcode = 0; nmb->header.response = False; nmb->header.nm_flags.bcast = False; nmb->header.nm_flags.recursion_available = False; nmb->header.nm_flags.recursion_desired = False; nmb->header.nm_flags.trunc = False; nmb->header.nm_flags.authoritative = False; nmb->header.rcode = 0; nmb->header.qdcount = 1; nmb->header.ancount = 0; nmb->header.nscount = 0; nmb->header.arcount = 0; nmb->question.question_name = *name; nmb->question.question_type = 0x21; nmb->question.question_class = 0x1; p.ip = to_ip; p.port = NMB_PORT; p.fd = fd; p.timestamp = time(NULL); p.packet_type = NMB_PACKET; GetTimeOfDay(&tval); if (!send_packet(&p)) return NULL; retries--; while (1) { struct timeval tval2; GetTimeOfDay(&tval2); if (TvalDiff(&tval,&tval2) > retry_time) { if (!retries) break; if (!found && !send_packet(&p)) return NULL; GetTimeOfDay(&tval); retries--; } if ((p2=receive_nmb_packet(fd,90,nmb->header.name_trn_id))) { struct nmb_packet *nmb2 = &p2->packet.nmb; debug_nmb_packet(p2); if (nmb2->header.opcode != 0 || nmb2->header.nm_flags.bcast || nmb2->header.rcode || !nmb2->header.ancount || nmb2->answers->rr_type != 0x21) { /* XXXX what do we do with this? could be a redirect, but we'll discard it for the moment */ free_packet(p2); continue; } ret = parse_node_status(&nmb2->answers->rdata[0], num_names, extra); free_packet(p2); return ret; } } return NULL; } /**************************************************************************** Find the first type XX name in a node status reply - used for finding a servers name given its IP. Return the matched name in *name. **************************************************************************/ BOOL name_status_find(const char *q_name, int q_type, int type, struct in_addr to_ip, fstring name) { NODE_STATUS_STRUCT *status = NULL; struct nmb_name nname; int count, i; int sock; BOOL result = False; if (lp_disable_netbios()) { DEBUG(5,("name_status_find(%s#%02x): netbios is disabled\n", q_name, q_type)); return False; } DEBUG(10, ("name_status_find: looking up %s#%02x at %s\n", q_name, q_type, inet_ntoa(to_ip))); /* Check the cache first. */ if (namecache_status_fetch(q_name, q_type, type, to_ip, name)) return True; sock = open_socket_in(SOCK_DGRAM, 0, 3, interpret_addr(lp_socket_address()), True); if (sock == -1) goto done; /* W2K PDC's seem not to respond to '*'#0. JRA */ make_nmb_name(&nname, q_name, q_type); status = node_status_query(sock, &nname, to_ip, &count, NULL); close(sock); if (!status) goto done; for (i=0;i names should be a list of hosts */ if ( q_type != 0x1c ) namecache_status_store(q_name, q_type, type, to_ip, name); result = True; done: SAFE_FREE(status); DEBUG(10, ("name_status_find: name %sfound", result ? "" : "not ")); if (result) DEBUGADD(10, (", name %s ip address is %s", name, inet_ntoa(to_ip))); DEBUG(10, ("\n")); return result; } /* comparison function used by sort_ip_list */ static int ip_compare(struct in_addr *ip1, struct in_addr *ip2) { int max_bits1=0, max_bits2=0; int num_interfaces = iface_count(); struct sockaddr_storage ss; int i; for (i=0;iss_family != AF_INET) { continue; } ip = ((const struct sockaddr_in *)pss)->sin_addr; bits1 = matching_quad_bits((uchar *)&ip1->s_addr, (uchar *)&ip.s_addr); bits2 = matching_quad_bits((uchar *)&ip2->s_addr, (uchar *)&ip.s_addr); max_bits1 = MAX(bits1, max_bits1); max_bits2 = MAX(bits2, max_bits2); } /* bias towards directly reachable IPs */ in_addr_to_sockaddr_storage(&ss, *ip1); if (iface_local(&ss)) { max_bits1 += 32; } in_addr_to_sockaddr_storage(&ss, *ip1); if (iface_local(&ss)) { max_bits2 += 32; } return max_bits2 - max_bits1; } /******************************************************************* compare 2 ldap IPs by nearness to our interfaces - used in qsort *******************************************************************/ int ip_service_compare(struct ip_service *ip1, struct ip_service *ip2) { int result; if ( (result = ip_compare(&ip1->ip, &ip2->ip)) != 0 ) return result; if ( ip1->port > ip2->port ) return 1; if ( ip1->port < ip2->port ) return -1; return 0; } /* sort an IP list so that names that are close to one of our interfaces are at the top. This prevents the problem where a WINS server returns an IP that is not reachable from our subnet as the first match */ static void sort_ip_list(struct in_addr *iplist, int count) { if (count <= 1) { return; } qsort(iplist, count, sizeof(struct in_addr), QSORT_CAST ip_compare); } static void sort_ip_list2(struct ip_service *iplist, int count) { if (count <= 1) { return; } qsort(iplist, count, sizeof(struct ip_service), QSORT_CAST ip_service_compare); } /********************************************************************** Remove any duplicate address/port pairs in the list *********************************************************************/ static int remove_duplicate_addrs2( struct ip_service *iplist, int count ) { int i, j; DEBUG(10,("remove_duplicate_addrs2: looking for duplicate address/port pairs\n")); /* one loop to remove duplicates */ for ( i=0; iheader.name_trn_id = generate_trn_id(); nmb->header.opcode = 0; nmb->header.response = False; nmb->header.nm_flags.bcast = bcast; nmb->header.nm_flags.recursion_available = False; nmb->header.nm_flags.recursion_desired = recurse; nmb->header.nm_flags.trunc = False; nmb->header.nm_flags.authoritative = False; nmb->header.rcode = 0; nmb->header.qdcount = 1; nmb->header.ancount = 0; nmb->header.nscount = 0; nmb->header.arcount = 0; make_nmb_name(&nmb->question.question_name,name,name_type); nmb->question.question_type = 0x20; nmb->question.question_class = 0x1; p.ip = to_ip; p.port = NMB_PORT; p.fd = fd; p.timestamp = time(NULL); p.packet_type = NMB_PACKET; GetTimeOfDay(&tval); if (!send_packet(&p)) return NULL; retries--; while (1) { struct timeval tval2; GetTimeOfDay(&tval2); if (TvalDiff(&tval,&tval2) > retry_time) { if (!retries) break; if (!found && !send_packet(&p)) return NULL; GetTimeOfDay(&tval); retries--; } if ((p2=receive_nmb_packet(fd,90,nmb->header.name_trn_id))) { struct nmb_packet *nmb2 = &p2->packet.nmb; debug_nmb_packet(p2); /* If we get a Negative Name Query Response from a WINS * server, we should report it and give up. */ if( 0 == nmb2->header.opcode /* A query response */ && !(bcast) /* from a WINS server */ && nmb2->header.rcode /* Error returned */ ) { if( DEBUGLVL( 3 ) ) { /* Only executed if DEBUGLEVEL >= 3 */ dbgtext( "Negative name query response, rcode 0x%02x: ", nmb2->header.rcode ); switch( nmb2->header.rcode ) { case 0x01: dbgtext( "Request was invalidly formatted.\n" ); break; case 0x02: dbgtext( "Problem with NBNS, cannot process name.\n"); break; case 0x03: dbgtext( "The name requested does not exist.\n" ); break; case 0x04: dbgtext( "Unsupported request error.\n" ); break; case 0x05: dbgtext( "Query refused error.\n" ); break; default: dbgtext( "Unrecognized error code.\n" ); break; } } free_packet(p2); return( NULL ); } if (nmb2->header.opcode != 0 || nmb2->header.nm_flags.bcast || nmb2->header.rcode || !nmb2->header.ancount) { /* * XXXX what do we do with this? Could be a * redirect, but we'll discard it for the * moment. */ free_packet(p2); continue; } ip_list = SMB_REALLOC_ARRAY( ip_list, struct in_addr, (*count) + nmb2->answers->rdlength/6 ); if (!ip_list) { DEBUG(0,("name_query: Realloc failed.\n")); free_packet(p2); return( NULL ); } DEBUG(2,("Got a positive name query response from %s ( ", inet_ntoa(p2->ip))); for (i=0;ianswers->rdlength/6;i++) { putip((char *)&ip_list[(*count)],&nmb2->answers->rdata[2+i*6]); DEBUGADD(2,("%s ",inet_ntoa(ip_list[(*count)]))); (*count)++; } DEBUGADD(2,(")\n")); found=True; retries=0; /* We add the flags back ... */ if (nmb2->header.response) (*flags) |= NM_FLAGS_RS; if (nmb2->header.nm_flags.authoritative) (*flags) |= NM_FLAGS_AA; if (nmb2->header.nm_flags.trunc) (*flags) |= NM_FLAGS_TC; if (nmb2->header.nm_flags.recursion_desired) (*flags) |= NM_FLAGS_RD; if (nmb2->header.nm_flags.recursion_available) (*flags) |= NM_FLAGS_RA; if (nmb2->header.nm_flags.bcast) (*flags) |= NM_FLAGS_B; free_packet(p2); /* * If we're doing a unicast lookup we only * expect one reply. Don't wait the full 2 * seconds if we got one. JRA. */ if(!bcast && found) break; } } /* only set timed_out if we didn't fund what we where looking for*/ if ( !found && timed_out ) { *timed_out = True; } /* sort the ip list so we choose close servers first if possible */ sort_ip_list(ip_list, *count); return ip_list; } /******************************************************** Start parsing the lmhosts file. *********************************************************/ XFILE *startlmhosts(const char *fname) { XFILE *fp = x_fopen(fname,O_RDONLY, 0); if (!fp) { DEBUG(4,("startlmhosts: Can't open lmhosts file %s. Error was %s\n", fname, strerror(errno))); return NULL; } return fp; } /******************************************************** Parse the next line in the lmhosts file. *********************************************************/ BOOL getlmhostsent( XFILE *fp, pstring name, int *name_type, struct in_addr *ipaddr) { pstring line; while(!x_feof(fp) && !x_ferror(fp)) { pstring ip,flags,extra; const char *ptr; char *ptr1; int count = 0; *name_type = -1; if (!fgets_slash(line,sizeof(pstring),fp)) { continue; } if (*line == '#') { continue; } pstrcpy(ip,""); pstrcpy(name,""); pstrcpy(flags,""); ptr = line; if (next_token(&ptr,ip ,NULL,sizeof(ip))) ++count; if (next_token(&ptr,name ,NULL, sizeof(pstring))) ++count; if (next_token(&ptr,flags,NULL, sizeof(flags))) ++count; if (next_token(&ptr,extra,NULL, sizeof(extra))) ++count; if (count <= 0) continue; if (count > 0 && count < 2) { DEBUG(0,("getlmhostsent: Ill formed hosts line [%s]\n",line)); continue; } if (count >= 4) { DEBUG(0,("getlmhostsent: too many columns in lmhosts file (obsolete syntax)\n")); continue; } DEBUG(4, ("getlmhostsent: lmhost entry: %s %s %s\n", ip, name, flags)); if (strchr_m(flags,'G') || strchr_m(flags,'S')) { DEBUG(0,("getlmhostsent: group flag in lmhosts ignored (obsolete)\n")); continue; } *ipaddr = *interpret_addr2(ip); /* Extra feature. If the name ends in '#XX', where XX is a hex number, then only add that name type. */ if((ptr1 = strchr_m(name, '#')) != NULL) { char *endptr; ptr1++; *name_type = (int)strtol(ptr1, &endptr, 16); if(!*ptr1 || (endptr == ptr1)) { DEBUG(0,("getlmhostsent: invalid name %s containing '#'.\n", name)); continue; } *(--ptr1) = '\0'; /* Truncate at the '#' */ } return True; } return False; } /******************************************************** Finish parsing the lmhosts file. *********************************************************/ void endlmhosts(XFILE *fp) { x_fclose(fp); } /******************************************************** convert an array if struct in_addrs to struct ip_service return False on failure. Port is set to PORT_NONE; *********************************************************/ static BOOL convert_ip2service( struct ip_service **return_iplist, struct in_addr *ip_list, int count ) { int i; if ( count==0 || !ip_list ) return False; /* copy the ip address; port will be PORT_NONE */ if ( (*return_iplist = SMB_MALLOC_ARRAY(struct ip_service, count)) == NULL ) { DEBUG(0,("convert_ip2service: malloc failed for %d enetries!\n", count )); return False; } for ( i=0; i\n", name, name_type)); sock = open_socket_in( SOCK_DGRAM, 0, 3, interpret_addr(lp_socket_address()), True ); if (sock == -1) return NT_STATUS_UNSUCCESSFUL; set_socket_options(sock,"SO_BROADCAST"); /* * Lookup the name on all the interfaces, return on * the first successful match. */ for( i = num_interfaces-1; i >= 0; i--) { struct in_addr sendto_ip; const struct sockaddr_storage *ss = iface_n_bcast(i); int flags; /* Done this way to fix compiler error on IRIX 5.x */ if (!ss || ss->ss_family != AF_INET) { continue; } sendto_ip = ((const struct sockaddr_in *)ss)->sin_addr; ip_list = name_query(sock, name, name_type, True, True, sendto_ip, return_count, &flags, NULL); if( ip_list ) goto success; } /* failed - no response */ close(sock); return NT_STATUS_UNSUCCESSFUL; success: status = NT_STATUS_OK; if ( !convert_ip2service(return_iplist, ip_list, *return_count) ) status = NT_STATUS_INVALID_PARAMETER; SAFE_FREE( ip_list ); close(sock); return status; } /******************************************************** Resolve via "wins" method. *********************************************************/ NTSTATUS resolve_wins(const char *name, int name_type, struct ip_service **return_iplist, int *return_count) { int sock, t, i; char **wins_tags; struct in_addr src_ip, *ip_list = NULL; NTSTATUS status; if (lp_disable_netbios()) { DEBUG(5,("resolve_wins(%s#%02x): netbios is disabled\n", name, name_type)); return NT_STATUS_INVALID_PARAMETER; } *return_iplist = NULL; *return_count = 0; DEBUG(3,("resolve_wins: Attempting wins lookup for name %s<0x%x>\n", name, name_type)); if (wins_srv_count() < 1) { DEBUG(3,("resolve_wins: WINS server resolution selected and no WINS servers listed.\n")); return NT_STATUS_INVALID_PARAMETER; } /* we try a lookup on each of the WINS tags in turn */ wins_tags = wins_srv_tags(); if (!wins_tags) { /* huh? no tags?? give up in disgust */ return NT_STATUS_INVALID_PARAMETER; } /* the address we will be sending from */ src_ip = *interpret_addr2(lp_socket_address()); /* in the worst case we will try every wins server with every tag! */ for (t=0; wins_tags && wins_tags[t]; t++) { int srv_count = wins_srv_count_tag(wins_tags[t]); for (i=0; i\n", name, name_type)); fp = startlmhosts(dyn_LMHOSTSFILE); if ( fp == NULL ) return NT_STATUS_NO_SUCH_FILE; while (getlmhostsent(fp, lmhost_name, &name_type2, &return_ip)) { if (!strequal(name, lmhost_name)) continue; if ((name_type2 != -1) && (name_type != name_type2)) continue; *return_iplist = SMB_REALLOC_ARRAY((*return_iplist), struct ip_service, (*return_count)+1); if ((*return_iplist) == NULL) { endlmhosts(fp); DEBUG(3,("resolve_lmhosts: malloc fail !\n")); return NT_STATUS_NO_MEMORY; } (*return_iplist)[*return_count].ip = return_ip; (*return_iplist)[*return_count].port = PORT_NONE; *return_count += 1; /* we found something */ status = NT_STATUS_OK; /* Multiple names only for DC lookup */ if (name_type != 0x1c) break; } endlmhosts(fp); return status; } /******************************************************** Resolve via "hosts" method. *********************************************************/ static NTSTATUS resolve_hosts(const char *name, int name_type, struct ip_service **return_iplist, int *return_count) { /* * "host" means do a localhost, or dns lookup. */ struct addrinfo hints; struct addrinfo *ailist = NULL; struct addrinfo *res = NULL; int ret = -1; int i = 0; if ( name_type != 0x20 && name_type != 0x0) { DEBUG(5, ("resolve_hosts: not appropriate for name type <0x%x>\n", name_type)); return NT_STATUS_INVALID_PARAMETER; } *return_iplist = NULL; *return_count = 0; DEBUG(3,("resolve_hosts: Attempting host lookup for name %s<0x%x>\n", name, name_type)); ZERO_STRUCT(hints); /* By default make sure it supports TCP. */ hints.ai_socktype = SOCK_STREAM; hints.ai_flags = AI_ADDRCONFIG; ret = getaddrinfo(name, NULL, &hints, &ailist); if (ret) { DEBUG(3,("resolve_hosts: getaddrinfo failed for name %s [%s]\n", name, gai_strerror(ret) )); } for (res = ailist; res; res = res->ai_next) { struct in_addr return_ip; /* IPv4 only for now until I convert ip_service */ if (res->ai_family != AF_INET) { continue; } if (!res->ai_addr) { continue; } putip((char *)&return_ip, &((struct sockaddr_in *)res->ai_addr)->sin_addr); *return_count += 1; i++; *return_iplist = SMB_REALLOC_ARRAY(*return_iplist, struct ip_service, *return_count); if (!*return_iplist) { DEBUG(3,("resolve_hosts: malloc fail !\n")); freeaddrinfo(ailist); return NT_STATUS_NO_MEMORY; } (*return_iplist)[i].ip = return_ip; (*return_iplist)[i].port = PORT_NONE; } if (ailist) { freeaddrinfo(ailist); } if (*return_count) { return NT_STATUS_OK; } return NT_STATUS_UNSUCCESSFUL; } /******************************************************** Resolve via "ADS" method. *********************************************************/ NTSTATUS resolve_ads(const char *name, int name_type, const char *sitename, struct ip_service **return_iplist, int *return_count) { int i, j; NTSTATUS status; TALLOC_CTX *ctx; struct dns_rr_srv *dcs = NULL; int numdcs = 0; int numaddrs = 0; if ((name_type != 0x1c) && (name_type != KDC_NAME_TYPE) && (name_type != 0x1b)) { return NT_STATUS_INVALID_PARAMETER; } if ( (ctx = talloc_init("resolve_ads")) == NULL ) { DEBUG(0,("resolve_ads: talloc_init() failed!\n")); return NT_STATUS_NO_MEMORY; } switch (name_type) { case 0x1b: DEBUG(5,("resolve_ads: Attempting to resolve " "PDC for %s using DNS\n", name)); status = ads_dns_query_pdc(ctx, name, &dcs, &numdcs); break; case 0x1c: DEBUG(5,("resolve_ads: Attempting to resolve " "DCs for %s using DNS\n", name)); status = ads_dns_query_dcs(ctx, name, sitename, &dcs, &numdcs); break; case KDC_NAME_TYPE: DEBUG(5,("resolve_ads: Attempting to resolve " "KDCs for %s using DNS\n", name)); status = ads_dns_query_kdcs(ctx, name, sitename, &dcs, &numdcs); break; default: status = NT_STATUS_INVALID_PARAMETER; break; } if ( !NT_STATUS_IS_OK( status ) ) { talloc_destroy(ctx); return status; } for (i=0;iport = dcs[i].port; /* If we don't have an IP list for a name, lookup it up */ if ( !dcs[i].ips ) { r->ip = *interpret_addr2(dcs[i].hostname); i++; j = 0; } else { /* use the IP addresses from the SRV sresponse */ if ( j >= dcs[i].num_ips ) { i++; j = 0; continue; } r->ip = dcs[i].ips[j]; j++; } /* make sure it is a valid IP. I considered checking the negative connection cache, but this is the wrong place for it. Maybe only as a hac. After think about it, if all of the IP addresses retuend from DNS are dead, what hope does a netbios name lookup have? The standard reason for falling back to netbios lookups is that our DNS server doesn't know anything about the DC's -- jerry */ if ( ! is_zero_ip_v4(r->ip) ) (*return_count)++; } talloc_destroy(ctx); return NT_STATUS_OK; } /******************************************************************* Internal interface to resolve a name into an IP address. Use this function if the string is either an IP address, DNS or host name or NetBIOS name. This uses the name switch in the smb.conf to determine the order of name resolution. Added support for ip addr/port to support ADS ldap servers. the only place we currently care about the port is in the resolve_hosts() when looking up DC's via SRV RR entries in DNS **********************************************************************/ NTSTATUS internal_resolve_name(const char *name, int name_type, const char *sitename, struct ip_service **return_iplist, int *return_count, const char *resolve_order) { pstring name_resolve_list; fstring tok; const char *ptr; BOOL allones = (strcmp(name,"255.255.255.255") == 0); BOOL allzeros = (strcmp(name,"0.0.0.0") == 0); BOOL is_address = is_ipaddress_v4(name); NTSTATUS status = NT_STATUS_UNSUCCESSFUL; int i; *return_iplist = NULL; *return_count = 0; DEBUG(10, ("internal_resolve_name: looking up %s#%x (sitename %s)\n", name, name_type, sitename ? sitename : NULL)); if (allzeros || allones || is_address) { if ( (*return_iplist = SMB_MALLOC_P(struct ip_service)) == NULL ) { DEBUG(0,("internal_resolve_name: malloc fail !\n")); return NT_STATUS_NO_MEMORY; } if(is_address) { /* ignore the port here */ (*return_iplist)->port = PORT_NONE; /* if it's in the form of an IP address then get the lib to interpret it */ if (((*return_iplist)->ip.s_addr = inet_addr(name)) == 0xFFFFFFFF ){ DEBUG(1,("internal_resolve_name: inet_addr failed on %s\n", name)); SAFE_FREE(*return_iplist); return NT_STATUS_INVALID_PARAMETER; } } else { (*return_iplist)->ip.s_addr = allones ? 0xFFFFFFFF : 0; } *return_count = 1; return NT_STATUS_OK; } /* Check name cache */ if (namecache_fetch(name, name_type, return_iplist, return_count)) { /* This could be a negative response */ if (*return_count > 0) { return NT_STATUS_OK; } else { return NT_STATUS_UNSUCCESSFUL; } } /* set the name resolution order */ if ( strcmp( resolve_order, "NULL") == 0 ) { DEBUG(8,("internal_resolve_name: all lookups disabled\n")); return NT_STATUS_INVALID_PARAMETER; } if ( !resolve_order ) { pstrcpy(name_resolve_list, lp_name_resolve_order()); } else { pstrcpy(name_resolve_list, resolve_order); } if ( !name_resolve_list[0] ) { ptr = "host"; } else { ptr = name_resolve_list; } /* iterate through the name resolution backends */ while (next_token(&ptr, tok, LIST_SEP, sizeof(tok))) { if((strequal(tok, "host") || strequal(tok, "hosts"))) { status = resolve_hosts(name, name_type, return_iplist, return_count); if (NT_STATUS_IS_OK(status)) { goto done; } } else if(strequal( tok, "kdc")) { /* deal with KDC_NAME_TYPE names here. This will result in a SRV record lookup */ status = resolve_ads(name, KDC_NAME_TYPE, sitename, return_iplist, return_count); if (NT_STATUS_IS_OK(status)) { /* Ensure we don't namecache this with the KDC port. */ name_type = KDC_NAME_TYPE; goto done; } } else if(strequal( tok, "ads")) { /* deal with 0x1c and 0x1b names here. This will result in a SRV record lookup */ status = resolve_ads(name, name_type, sitename, return_iplist, return_count); if (NT_STATUS_IS_OK(status)) { goto done; } } else if(strequal( tok, "lmhosts")) { status = resolve_lmhosts(name, name_type, return_iplist, return_count); if (NT_STATUS_IS_OK(status)) { goto done; } } else if(strequal( tok, "wins")) { /* don't resolve 1D via WINS */ if (name_type != 0x1D) { status = resolve_wins(name, name_type, return_iplist, return_count); if (NT_STATUS_IS_OK(status)) { goto done; } } } else if(strequal( tok, "bcast")) { status = name_resolve_bcast(name, name_type, return_iplist, return_count); if (NT_STATUS_IS_OK(status)) { goto done; } } else { DEBUG(0,("resolve_name: unknown name switch type %s\n", tok)); } } /* All of the resolve_* functions above have returned false. */ SAFE_FREE(*return_iplist); *return_count = 0; return NT_STATUS_UNSUCCESSFUL; done: /* Remove duplicate entries. Some queries, notably #1c (domain controllers) return the PDC in iplist[0] and then all domain controllers including the PDC in iplist[1..n]. Iterating over the iplist when the PDC is down will cause two sets of timeouts. */ if ( *return_count ) { *return_count = remove_duplicate_addrs2( *return_iplist, *return_count ); } /* Save in name cache */ if ( DEBUGLEVEL >= 100 ) { for (i = 0; i < *return_count && DEBUGLEVEL == 100; i++) DEBUG(100, ("Storing name %s of type %d (%s:%d)\n", name, name_type, inet_ntoa((*return_iplist)[i].ip), (*return_iplist)[i].port)); } namecache_store(name, name_type, *return_count, *return_iplist); /* Display some debugging info */ if ( DEBUGLEVEL >= 10 ) { DEBUG(10, ("internal_resolve_name: returning %d addresses: ", *return_count)); for (i = 0; i < *return_count; i++) { DEBUGADD(10, ("%s:%d ", inet_ntoa((*return_iplist)[i].ip), (*return_iplist)[i].port)); } DEBUG(10, ("\n")); } return status; } /******************************************************** Internal interface to resolve a name into one IP address. Use this function if the string is either an IP address, DNS or host name or NetBIOS name. This uses the name switch in the smb.conf to determine the order of name resolution. *********************************************************/ BOOL resolve_name(const char *name, struct in_addr *return_ip, int name_type) { struct ip_service *ip_list = NULL; char *sitename = sitename_fetch(lp_realm()); /* wild guess */ int count = 0; if (is_ipaddress_v4(name)) { *return_ip = *interpret_addr2(name); SAFE_FREE(sitename); return True; } if (NT_STATUS_IS_OK(internal_resolve_name(name, name_type, sitename, &ip_list, &count, lp_name_resolve_order()))) { int i; /* only return valid addresses for TCP connections */ for (i=0; i 1 ) { DEBUG(6,("get_pdc_ip: PDC has %d IP addresses!\n", count)); sort_ip_list2( ip_list, count ); } *ip = ip_list[0].ip; SAFE_FREE(ip_list); return True; } /* Private enum type for lookups. */ enum dc_lookup_type { DC_NORMAL_LOOKUP, DC_ADS_ONLY, DC_KDC_ONLY }; /******************************************************** Get the IP address list of the domain controllers for a domain. *********************************************************/ static NTSTATUS get_dc_list(const char *domain, const char *sitename, struct ip_service **ip_list, int *count, enum dc_lookup_type lookup_type, int *ordered) { fstring resolve_order; char *saf_servername; pstring pserver; const char *p; char *port_str; int port; fstring name; int num_addresses = 0; int local_count, i, j; struct ip_service *return_iplist = NULL; struct ip_service *auto_ip_list = NULL; BOOL done_auto_lookup = False; int auto_count = 0; NTSTATUS status; *ordered = False; /* if we are restricted to solely using DNS for looking up a domain controller, make sure that host lookups are enabled for the 'name resolve order'. If host lookups are disabled and ads_only is True, then set the string to NULL. */ fstrcpy( resolve_order, lp_name_resolve_order() ); strlower_m( resolve_order ); if ( lookup_type == DC_ADS_ONLY) { if ( strstr( resolve_order, "host" ) ) { fstrcpy( resolve_order, "ads" ); /* DNS SRV lookups used by the ads resolver are already sorted by priority and weight */ *ordered = True; } else { fstrcpy( resolve_order, "NULL" ); } } else if (lookup_type == DC_KDC_ONLY) { /* DNS SRV lookups used by the ads/kdc resolver are already sorted by priority and weight */ *ordered = True; fstrcpy( resolve_order, "kdc" ); } /* fetch the server we have affinity for. Add the 'password server' list to a search for our domain controllers */ saf_servername = saf_fetch( domain); if ( strequal(domain, lp_workgroup()) || strequal(domain, lp_realm()) ) { pstr_sprintf( pserver, "%s, %s", saf_servername ? saf_servername : "", lp_passwordserver() ); } else { pstr_sprintf( pserver, "%s, *", saf_servername ? saf_servername : "" ); } SAFE_FREE( saf_servername ); /* if we are starting from scratch, just lookup DOMAIN<0x1c> */ if ( !*pserver ) { DEBUG(10,("get_dc_list: no preferred domain controllers.\n")); return internal_resolve_name(domain, 0x1C, sitename, ip_list, count, resolve_order); } DEBUG(3,("get_dc_list: preferred server list: \"%s\"\n", pserver )); /* * if '*' appears in the "password server" list then add * an auto lookup to the list of manually configured * DC's. If any DC is listed by name, then the list should be * considered to be ordered */ p = pserver; while (next_token(&p,name,LIST_SEP,sizeof(name))) { if (strequal(name, "*")) { status = internal_resolve_name(domain, 0x1C, sitename, &auto_ip_list, &auto_count, resolve_order); if (NT_STATUS_IS_OK(status)) { num_addresses += auto_count; } done_auto_lookup = True; DEBUG(8,("Adding %d DC's from auto lookup\n", auto_count)); } else { num_addresses++; } } /* if we have no addresses and haven't done the auto lookup, then just return the list of DC's. Or maybe we just failed. */ if ( (num_addresses == 0) ) { if ( done_auto_lookup ) { DEBUG(4,("get_dc_list: no servers found\n")); SAFE_FREE(auto_ip_list); return NT_STATUS_NO_LOGON_SERVERS; } return internal_resolve_name(domain, 0x1C, sitename, ip_list, count, resolve_order); } if ( (return_iplist = SMB_MALLOC_ARRAY(struct ip_service, num_addresses)) == NULL ) { DEBUG(3,("get_dc_list: malloc fail !\n")); SAFE_FREE(auto_ip_list); return NT_STATUS_NO_MEMORY; } p = pserver; local_count = 0; /* fill in the return list now with real IP's */ while ( (local_count= 4 ) { DEBUG(4,("get_dc_list: returning %d ip addresses in an %sordered list\n", local_count, *ordered ? "":"un")); DEBUG(4,("get_dc_list: ")); for ( i=0; i