1 /* 2 * CDDL HEADER START 3 * 4 * The contents of this file are subject to the terms of the 5 * Common Development and Distribution License (the "License"). 6 * You may not use this file except in compliance with the License. 7 * 8 * You can obtain a copy of the license at usr/src/OPENSOLARIS.LICENSE 9 * or http://www.opensolaris.org/os/licensing. 10 * See the License for the specific language governing permissions 11 * and limitations under the License. 12 * 13 * When distributing Covered Code, include this CDDL HEADER in each 14 * file and include the License file at usr/src/OPENSOLARIS.LICENSE. 15 * If applicable, add the following below this CDDL HEADER, with the 16 * fields enclosed by brackets "[]" replaced with your own identifying 17 * information: Portions Copyright [yyyy] [name of copyright owner] 18 * 19 * CDDL HEADER END 20 */ 21 22 /* 23 * Copyright (c) 2008, 2010, Oracle and/or its affiliates. All rights reserved. 24 */ 25 26 /* 27 * Active Directory Setup RPC interface used by Windows 2000. 28 */ 29 30 #include <synch.h> 31 #include <strings.h> 32 #include <stdlib.h> 33 #include <netdb.h> 34 35 #include <smbsrv/libsmb.h> 36 #include <smbsrv/libmlrpc.h> 37 #include <smbsrv/libmlsvc.h> 38 #include <smbsrv/ndl/dssetup.ndl> 39 #include <smbsrv/smbinfo.h> 40 #include <smbsrv/nmpipes.h> 41 42 int dssetup_get_domain_info(ds_primary_domain_info_t *); 43 44 static int dssetup_DsRoleGetPrimaryDomainInfo(void *, ndr_xa_t *); 45 static uint32_t dssetup_member_server(ds_primary_domain_info_t *, ndr_xa_t *); 46 static uint32_t dssetup_standalone_server(ds_primary_domain_info_t *, 47 ndr_xa_t *); 48 49 static ndr_stub_table_t dssetup_stub_table[] = { 50 { dssetup_DsRoleGetPrimaryDomainInfo, 51 DSSETUP_OPNUM_DsRoleGetPrimaryDomainInfo }, 52 {0} 53 }; 54 55 static ndr_service_t dssetup_service = { 56 "DSSETUP", /* name */ 57 "Active Directory Setup", /* desc */ 58 "\\lsarpc", /* endpoint */ 59 PIPE_LSASS, /* sec_addr_port */ 60 "3919286a-b10c-11d0-9ba8-00c04fd92ef5", 0, /* abstract */ 61 NDR_TRANSFER_SYNTAX_UUID, 2, /* transfer */ 62 0, /* no bind_instance_size */ 63 0, /* no bind_req() */ 64 0, /* no unbind_and_close() */ 65 0, /* use generic_call_stub() */ 66 &TYPEINFO(dssetup_interface), /* interface ti */ 67 dssetup_stub_table /* stub_table */ 68 }; 69 70 static ds_primary_domain_info_t ds_info; 71 static mutex_t ds_info_mtx; 72 73 /* 74 * dssetup_initialize 75 * 76 * This function registers the DSSETUP interface with the RPC runtime 77 * library. It must be called in order to use either the client side 78 * or the server side functions. 79 */ 80 void 81 dssetup_initialize(void) 82 { 83 dssetup_clear_domain_info(); 84 (void) ndr_svc_register(&dssetup_service); 85 } 86 87 void 88 dssetup_clear_domain_info(void) 89 { 90 (void) mutex_lock(&ds_info_mtx); 91 92 free(ds_info.nt_domain); 93 free(ds_info.dns_domain); 94 free(ds_info.forest); 95 bzero(&ds_info, sizeof (ds_primary_domain_info_t)); 96 97 (void) mutex_unlock(&ds_info_mtx); 98 } 99 100 /* 101 * Request for machine role and primary domain information. 102 */ 103 static int 104 dssetup_DsRoleGetPrimaryDomainInfo(void *arg, ndr_xa_t *mxa) 105 { 106 dssetup_DsRoleGetPrimaryDomainInfo_t *param = arg; 107 dssetup_GetPrimaryDomainInfo_t *info; 108 ds_primary_domain_info_t *info1; 109 uint32_t status; 110 int security_mode; 111 112 info = NDR_MALLOC(mxa, sizeof (dssetup_GetPrimaryDomainInfo_t)); 113 if (info == NULL) { 114 status = NT_STATUS_NO_MEMORY; 115 } else if (param->level != DS_ROLE_BASIC_INFORMATION) { 116 status = NT_STATUS_INVALID_LEVEL; 117 } else { 118 info->switch_value = param->level; 119 info1 = &info->ru.info1; 120 121 security_mode = smb_config_get_secmode(); 122 123 if (security_mode == SMB_SECMODE_DOMAIN) 124 status = dssetup_member_server(info1, mxa); 125 else 126 status = dssetup_standalone_server(info1, mxa); 127 } 128 129 if (status != NT_STATUS_SUCCESS) { 130 bzero(param, sizeof (dssetup_DsRoleGetPrimaryDomainInfo_t)); 131 param->status = NT_SC_ERROR(status); 132 } else { 133 param->info = info; 134 param->status = NT_STATUS_SUCCESS; 135 } 136 137 return (NDR_DRC_OK); 138 } 139 140 /* 141 * When the machine role is domain member: 142 * nt_domain must contain the NetBIOS domain name 143 * dns_domain must contain the DNS domain name (cannot be NULL) 144 * forest must contain the forest name (cannot be NULL) 145 * 146 * If DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT is set in flags, the domain_guid 147 * must contain the domain UUID. Otherwise domain_guid is ignored. 148 */ 149 static uint32_t 150 dssetup_member_server(ds_primary_domain_info_t *info, ndr_xa_t *mxa) 151 { 152 char dns_domain[MAXHOSTNAMELEN]; 153 char nt_domain[MAXHOSTNAMELEN]; 154 155 (void) mutex_lock(&ds_info_mtx); 156 157 if ((ds_info.flags & DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT) == 0) { 158 /* 159 * If we don't have the domain GUID, try to get it from a 160 * domain controller. Otherwise, use local configuration. 161 */ 162 free(ds_info.nt_domain); 163 free(ds_info.dns_domain); 164 free(ds_info.forest); 165 (void) dssetup_get_domain_info(&ds_info); 166 } 167 168 if (ds_info.flags & DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT) { 169 info->flags = DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT; 170 info->nt_domain = NDR_STRDUP(mxa, (char *)ds_info.nt_domain); 171 info->dns_domain = NDR_STRDUP(mxa, (char *)ds_info.dns_domain); 172 info->forest = NDR_STRDUP(mxa, (char *)ds_info.forest); 173 bcopy(&ds_info.domain_guid, &info->domain_guid, 174 sizeof (ndr_uuid_t)); 175 } else { 176 if (smb_getdomainname(nt_domain, MAXHOSTNAMELEN) != 0) { 177 (void) mutex_unlock(&ds_info_mtx); 178 return (NT_STATUS_CANT_ACCESS_DOMAIN_INFO); 179 } 180 181 if (smb_getfqdomainname(dns_domain, MAXHOSTNAMELEN) != 0) { 182 (void) mutex_unlock(&ds_info_mtx); 183 return (NT_STATUS_CANT_ACCESS_DOMAIN_INFO); 184 } 185 186 (void) smb_strlwr(dns_domain); 187 188 info->flags = 0; 189 info->nt_domain = NDR_STRDUP(mxa, nt_domain); 190 info->dns_domain = NDR_STRDUP(mxa, dns_domain); 191 info->forest = NDR_STRDUP(mxa, dns_domain); 192 bzero(&info->domain_guid, sizeof (ndr_uuid_t)); 193 } 194 195 (void) mutex_unlock(&ds_info_mtx); 196 197 if (info->nt_domain == NULL || 198 info->dns_domain == NULL || 199 info->forest == NULL) 200 return (NT_STATUS_NO_MEMORY); 201 202 info->role = DS_ROLE_MEMBER_SERVER; 203 return (NT_STATUS_SUCCESS); 204 } 205 206 /* 207 * When the machine role is standalone: 208 * nt_domain must contain the NetBIOS workgroup name 209 * dns_domain must be NULL 210 * forest must be NULL 211 * 212 * We don't maintain a domain GUID. When DS_ROLE_PRIMARY_DOMAIN_GUID_PRESENT 213 * is not set in flags, domain_guid is ignored. 214 */ 215 static uint32_t 216 dssetup_standalone_server(ds_primary_domain_info_t *info, ndr_xa_t *mxa) 217 { 218 char nt_domain[MAXHOSTNAMELEN]; 219 220 if (smb_getdomainname(nt_domain, MAXHOSTNAMELEN) != 0) 221 return (NT_STATUS_CANT_ACCESS_DOMAIN_INFO); 222 223 info->nt_domain = NDR_STRDUP(mxa, nt_domain); 224 if (info->nt_domain == NULL) 225 return (NT_STATUS_NO_MEMORY); 226 227 info->role = DS_ROLE_STANDALONE_SERVER; 228 info->flags = 0; 229 info->dns_domain = NULL; 230 info->forest = NULL; 231 bzero(&info->domain_guid, sizeof (ndr_uuid_t)); 232 return (NT_STATUS_SUCCESS); 233 } 234