2 Unix SMB/CIFS mplementation.
4 DSDB replication service - FSMO role change
6 Copyright (C) Nadezhda Ivanova 2010
7 Copyright (C) Andrew Tridgell 2010
8 Copyright (C) Andrew Bartlett 2010
9 Copyright (C) Anatoliy Atanasov 2010
11 based on drepl_ridalloc.c
13 This program is free software; you can redistribute it and/or modify
14 it under the terms of the GNU General Public License as published by
15 the Free Software Foundation; either version 3 of the License, or
16 (at your option) any later version.
18 This program is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 GNU General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with this program. If not, see <http://www.gnu.org/licenses/>.
29 #include "dsdb/samdb/samdb.h"
30 #include "smbd/service.h"
31 #include "dsdb/repl/drepl_service.h"
32 #include "param/param.h"
35 #define DBGC_CLASS DBGC_DRS_REPL
37 struct fsmo_role_state
{
38 struct irpc_message
*msg
;
39 struct drepl_takeFSMORole
*r
;
42 static void drepl_role_callback(struct dreplsrv_service
*service
,
44 enum drsuapi_DsExtendedError ext_err
,
47 struct fsmo_role_state
*fsmo
= talloc_get_type_abort(cb_data
, struct fsmo_role_state
);
48 if (!W_ERROR_IS_OK(werr
)) {
49 DEBUG(2,(__location__
": Failed role transfer - %s - extended_ret[0x%X]\n",
50 win_errstr(werr
), ext_err
));
52 DEBUG(2,(__location__
": Successful role transfer\n"));
54 fsmo
->r
->out
.result
= werr
;
55 irpc_send_reply(fsmo
->msg
, NT_STATUS_OK
);
59 see which role is we are asked to assume, initialize data and send request
61 NTSTATUS
drepl_take_FSMO_role(struct irpc_message
*msg
,
62 struct drepl_takeFSMORole
*r
)
64 struct dreplsrv_service
*service
= talloc_get_type(msg
->private_data
,
65 struct dreplsrv_service
);
66 struct ldb_dn
*role_owner_dn
, *fsmo_role_dn
;
67 TALLOC_CTX
*tmp_ctx
= talloc_new(service
);
68 uint64_t fsmo_info
= 0;
69 enum drsuapi_DsExtendedOperation extended_op
= DRSUAPI_EXOP_NONE
;
71 enum drepl_role_master role
= r
->in
.role
;
72 struct fsmo_role_state
*fsmo
;
76 werr
= dsdb_get_fsmo_role_info(tmp_ctx
, service
->samdb
, role
,
77 &fsmo_role_dn
, &role_owner_dn
);
78 if (!W_ERROR_IS_OK(werr
)) {
85 case DREPL_NAMING_MASTER
:
86 case DREPL_INFRASTRUCTURE_MASTER
:
87 case DREPL_SCHEMA_MASTER
:
88 extended_op
= DRSUAPI_EXOP_FSMO_REQ_ROLE
;
90 case DREPL_RID_MASTER
:
91 extended_op
= DRSUAPI_EXOP_FSMO_RID_REQ_ROLE
;
93 case DREPL_PDC_MASTER
:
94 extended_op
= DRSUAPI_EXOP_FSMO_REQ_PDC
;
97 DEBUG(0,("Unknown role %u in role transfer\n",
99 /* IRPC messages are trusted, so this really should not happen */
100 smb_panic("Unknown role despite dsdb_get_fsmo_role_info success");
103 ret
= samdb_dn_is_our_ntdsa(service
->samdb
, role_owner_dn
, &is_us
);
104 if (ret
!= LDB_SUCCESS
) {
105 DEBUG(0,("FSMO role check failed (failed to confirm if our ntdsDsa) for DN %s and owner %s \n",
106 ldb_dn_get_linearized(fsmo_role_dn
),
107 ldb_dn_get_linearized(role_owner_dn
)));
108 talloc_free(tmp_ctx
);
109 r
->out
.result
= WERR_DS_DRA_INTERNAL_ERROR
;
114 DEBUG(5,("FSMO role check failed, we already own DN %s with %s\n",
115 ldb_dn_get_linearized(fsmo_role_dn
),
116 ldb_dn_get_linearized(role_owner_dn
)));
117 r
->out
.result
= WERR_OK
;
118 talloc_free(tmp_ctx
);
122 fsmo
= talloc(msg
, struct fsmo_role_state
);
123 NT_STATUS_HAVE_NO_MEMORY(fsmo
);
128 werr
= drepl_request_extended_op(service
,
136 if (!W_ERROR_IS_OK(werr
)) {
137 r
->out
.result
= werr
;
138 talloc_free(tmp_ctx
);
142 /* mark this message to be answered later */
143 msg
->defer_reply
= true;
144 dreplsrv_run_pending_ops(service
);
145 talloc_free(tmp_ctx
);