/* Unix SMB/CIFS mplementation. KCC service periodic handling Copyright (C) Andrew Tridgell 2009 based on repl service code This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 3 of the License, or (at your option) any later version. This program is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details. You should have received a copy of the GNU General Public License along with this program. If not, see . */ #include "includes.h" #include "lib/events/events.h" #include "dsdb/samdb/samdb.h" #include "auth/auth.h" #include "smbd/service.h" #include "lib/messaging/irpc.h" #include "dsdb/kcc/kcc_service.h" #include "lib/ldb/include/ldb_errors.h" #include "../lib/util/dlinklist.h" #include "librpc/gen_ndr/ndr_misc.h" #include "librpc/gen_ndr/ndr_drsuapi.h" #include "librpc/gen_ndr/ndr_drsblobs.h" #include "param/param.h" /* * add a repsFrom to all our partitions */ /* this is the core of our initial simple KCC We just add a repsFrom entry for all DCs we find that have nTDSDSA objects, except for ourselves */ static NTSTATUS kccsrv_simple_update(struct kccsrv_service *s, TALLOC_CTX *mem_ctx) { struct ldb_result *res; int ret, i; const char *attrs[] = { "objectGUID", "invocationID", NULL }; struct ldb_message *msg; struct ldb_message_element *el; struct kccsrv_partition *p; ret = ldb_search(s->samdb, mem_ctx, &res, s->config_dn, LDB_SCOPE_SUBTREE, attrs, "objectClass=nTDSDSA"); if (ret != LDB_SUCCESS) { DEBUG(0,(__location__ ": Failed nTDSDSA search - %s\n", ldb_errstring(s->samdb))); return NT_STATUS_INTERNAL_DB_CORRUPTION; } msg = ldb_msg_new(mem_ctx); NT_STATUS_HAVE_NO_MEMORY(msg); ret = ldb_msg_add_empty(msg, "repsFrom", LDB_FLAG_MOD_REPLACE, &el); if (ret != LDB_SUCCESS) { return NT_STATUS_NO_MEMORY; } for (i=0; icount; i++) { struct repsFromToBlob r; struct repsFromTo1 *r1; struct repsFromTo1OtherInfo oi; struct GUID ntds_guid, invocation_id; struct ldb_val v; enum ndr_err_code ndr_err; ntds_guid = samdb_result_guid(res->msgs[i], "objectGUID"); if (GUID_compare(&ntds_guid, &s->ntds_guid) == 0) { /* don't replicate with ourselves */ continue; } invocation_id = samdb_result_guid(res->msgs[i], "invocationID"); ZERO_STRUCT(r); ZERO_STRUCT(oi); r.version = 1; r1 = &r.ctr.ctr1; oi.dns_name = talloc_asprintf(mem_ctx, "%s._msdcs.%s", GUID_string(mem_ctx, &ntds_guid), lp_realm(s->task->lp_ctx)); r1->other_info = &oi; r1->source_dsa_obj_guid = ntds_guid; r1->source_dsa_invocation_id = invocation_id; r1->replica_flags = DRSUAPI_DS_REPLICA_NEIGHBOUR_WRITEABLE | DRSUAPI_DS_REPLICA_NEIGHBOUR_SYNC_ON_STARTUP | DRSUAPI_DS_REPLICA_NEIGHBOUR_DO_SCHEDULED_SYNCS; memset(r1->schedule, 0x11, sizeof(r1->schedule)); ndr_err = ndr_push_struct_blob(&v, mem_ctx, lp_iconv_convenience(s->task->lp_ctx), &r, (ndr_push_flags_fn_t)ndr_push_repsFromToBlob); if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err)) { DEBUG(0,(__location__ ": Failed tp push repsFrom blob\n")); return NT_STATUS_INTERNAL_ERROR; } el->values = talloc_realloc(msg, el->values, struct ldb_val, el->num_values+1); NT_STATUS_HAVE_NO_MEMORY(el->values); el->values[el->num_values] = v; el->num_values++; } /* replace the repsFrom on all partitions */ for (p=s->partitions; p; p=p->next) { msg->dn = p->dn; ret = ldb_modify(s->samdb, msg); if (ret != LDB_SUCCESS) { DEBUG(0,(__location__ ": Failed to store repsFrom for %s - %s\n", ldb_dn_get_linearized(msg->dn), ldb_errstring(s->samdb))); return NT_STATUS_INTERNAL_ERROR; } } return NT_STATUS_OK; } static void kccsrv_periodic_run(struct kccsrv_service *service); static void kccsrv_periodic_handler_te(struct tevent_context *ev, struct tevent_timer *te, struct timeval t, void *ptr) { struct kccsrv_service *service = talloc_get_type(ptr, struct kccsrv_service); WERROR status; service->periodic.te = NULL; kccsrv_periodic_run(service); status = kccsrv_periodic_schedule(service, service->periodic.interval); if (!W_ERROR_IS_OK(status)) { task_server_terminate(service->task, win_errstr(status)); return; } } WERROR kccsrv_periodic_schedule(struct kccsrv_service *service, uint32_t next_interval) { TALLOC_CTX *tmp_mem; struct tevent_timer *new_te; struct timeval next_time; /* prevent looping */ if (next_interval == 0) next_interval = 1; next_time = timeval_current_ofs(next_interval, 50); if (service->periodic.te) { /* * if the timestamp of the new event is higher, * as current next we don't need to reschedule */ if (timeval_compare(&next_time, &service->periodic.next_event) > 0) { return WERR_OK; } } /* reset the next scheduled timestamp */ service->periodic.next_event = next_time; new_te = event_add_timed(service->task->event_ctx, service, service->periodic.next_event, kccsrv_periodic_handler_te, service); W_ERROR_HAVE_NO_MEMORY(new_te); tmp_mem = talloc_new(service); DEBUG(2,("kccsrv_periodic_schedule(%u) %sscheduled for: %s\n", next_interval, (service->periodic.te?"re":""), nt_time_string(tmp_mem, timeval_to_nttime(&next_time)))); talloc_free(tmp_mem); talloc_free(service->periodic.te); service->periodic.te = new_te; return WERR_OK; } static void kccsrv_periodic_run(struct kccsrv_service *service) { TALLOC_CTX *mem_ctx; NTSTATUS status; DEBUG(2,("kccsrv_periodic_run(): simple update\n")); mem_ctx = talloc_new(service); status = kccsrv_simple_update(service, mem_ctx); if (!NT_STATUS_IS_OK(status)) { DEBUG(0,("kccsrv_simple_update failed - %s\n", nt_errstr(status))); } talloc_free(mem_ctx); }