2 Unix SMB/CIFS implementation.
4 Copyright (C) Stefan Metzmacher <metze@samba.org> 2006
6 This program is free software; you can redistribute it and/or modify
7 it under the terms of the GNU General Public License as published by
8 the Free Software Foundation; either version 3 of the License, or
9 (at your option) any later version.
11 This program is distributed in the hope that it will be useful,
12 but WITHOUT ANY WARRANTY; without even the implied warranty of
13 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
14 GNU General Public License for more details.
16 You should have received a copy of the GNU General Public License
17 along with this program. If not, see <http://www.gnu.org/licenses/>.
21 #include "libnet/libnet.h"
22 #include "libcli/composite/composite.h"
23 #include "libcli/cldap/cldap.h"
24 #include "lib/ldb/include/ldb.h"
25 #include "lib/ldb/include/ldb_errors.h"
26 #include "lib/ldb_wrap.h"
27 #include "dsdb/samdb/samdb.h"
28 #include "dsdb/common/flags.h"
29 #include "librpc/gen_ndr/ndr_drsuapi_c.h"
30 #include "libcli/security/security.h"
31 #include "librpc/gen_ndr/ndr_misc.h"
32 #include "librpc/gen_ndr/ndr_security.h"
33 #include "librpc/gen_ndr/ndr_nbt.h"
34 #include "librpc/gen_ndr/ndr_drsuapi.h"
35 #include "auth/gensec/gensec.h"
36 #include "param/param.h"
38 /*****************************************************************************
39 * Windows 2003 (w2k3) does the following steps when changing the server role
40 * from domain member to domain controller
42 * We mostly do the same.
43 *****************************************************************************/
47 * - using nbt name<1C> request and a samlogon mailslot request
49 * - using a DNS SRV _ldap._tcp.dc._msdcs. request and a CLDAP netlogon request
51 * see: becomeDC_recv_cldap() and becomeDC_send_cldap()
55 * Open 1st LDAP connection to the DC using admin credentials
57 * see: becomeDC_connect_ldap1() and becomeDC_ldap_connect()
61 * LDAP search 1st LDAP connection:
63 * see: becomeDC_ldap1_rootdse()
68 * filter: (objectClass=*)
72 * currentTime: 20061202155100.0Z
73 * subschemaSubentry: CN=Aggregate,CN=Schema,CN=Configuration,<domain_partition>
74 * dsServiceName: CN=<netbios_name>,CN=Servers,CN=<site_name>,CN=Sites,CN=Configuration,<domain_partition>
75 * namingContexts: <domain_partition>
76 * CN=Configuration,<domain_partition>
77 * CN=Schema,CN=Configuration,<domain_partition>
78 * defaultNamingContext: <domain_partition>
79 * schemaNamingContext: CN=Schema,CN=Configuration,<domain_partition>
80 * configurationNamingContext:CN=Configuration,<domain_partition>
81 * rootDomainNamingContext:<domain_partition>
82 * supportedControl: ...
83 * supportedLDAPVersion: 3
85 * supportedLDAPPolicies: ...
86 * highestCommitedUSN: ...
87 * supportedSASLMechanisms:GSSAPI
91 * dnsHostName: <dns_host_name>
92 * ldapServiceName: <domain_dns_name>:<netbios_name>$@<REALM>
93 * serverName: CN=Servers,CN=<site_name>,CN=Sites,CN=Configuration,<domain_partition>
94 * supportedCapabilities: ...
96 * isGlobalCatalogReady: TRUE
97 * domainFunctionality: 0
98 * forestFunctionality: 0
99 * domainControllerFunctionality: 2
103 * LDAP search 1st LDAP connection:
105 * see: becomeDC_ldap1_crossref_behavior_version()
108 * basedn: CN=Configuration,<domain_partition>
110 * filter: (cn=Partitions)
111 * attrs: msDS-Behavior-Version
113 * CN=Partitions,CN=Configuration,<domain_partition>
114 * msDS-Behavior-Version: 0
118 * LDAP search 1st LDAP connection:
120 * NOTE: this seems to be a bug! as the messageID of the LDAP message is corrupted!
122 * not implemented here
125 * basedn: CN=Schema,CN=Configuration,<domain_partition>
127 * filter: (cn=Partitions)
128 * attrs: msDS-Behavior-Version
135 * LDAP search 1st LDAP connection:
137 * see: becomeDC_ldap1_domain_behavior_version()
140 * basedn: <domain_partition>
142 * filter: (objectClass=*)
143 * attrs: msDS-Behavior-Version
146 * msDS-Behavior-Version: 0
150 * LDAP search 1st LDAP connection:
152 * see: becomeDC_ldap1_schema_object_version()
155 * basedn: CN=Schema,CN=Configuration,<domain_partition>
157 * filter: (objectClass=*)
158 * attrs: objectVersion
160 * CN=Schema,CN=Configuration,<domain_partition>
165 * LDAP search 1st LDAP connection:
167 * not implemented, because the information is already there
172 * filter: (objectClass=*)
173 * attrs: defaultNamingContext
177 * defaultNamingContext: <domain_partition>
178 * dnsHostName: <dns_host_name>
182 * LDAP search 1st LDAP connection:
184 * see: becomeDC_ldap1_infrastructure_fsmo()
187 * basedn: <WKGUID=2fbac1870ade11d297c400c04fd8d5cd,domain_partition>
189 * filter: (objectClass=*)
192 * CN=Infrastructure,<domain_partition>
196 * LDAP search 1st LDAP connection:
198 * see: becomeDC_ldap1_w2k3_update_revision()
201 * basedn: CN=Windows2003Update,CN=DomainUpdates,CN=System,<domain_partition>
203 * filter: (objectClass=*)
206 * CN=Windows2003Update,CN=DomainUpdates,CN=System,<domain_partition>
211 * LDAP search 1st LDAP connection:
213 * see: becomeDC_ldap1_infrastructure_fsmo()
216 * basedn: CN=Infrastructure,<domain_partition>
218 * filter: (objectClass=*)
219 * attrs: fSMORoleOwner
221 * CN=Infrastructure,<domain_partition>
222 * fSMORoleOwner: CN=NTDS Settings,<infrastructure_fsmo_server_object>
226 * LDAP search 1st LDAP connection:
228 * see: becomeDC_ldap1_infrastructure_fsmo()
231 * basedn: <infrastructure_fsmo_server_object>
233 * filter: (objectClass=*)
236 * <infrastructure_fsmo_server_object>
237 * dnsHostName: <dns_host_name>
241 * LDAP search 1st LDAP connection:
243 * see: becomeDC_ldap1_infrastructure_fsmo()
246 * basedn: CN=NTDS Settings,<infrastructure_fsmo_server_object>
248 * filter: (objectClass=*)
251 * CN=NTDS Settings,<infrastructure_fsmo_server_object>
252 * objectGUID: <object_guid>
256 * LDAP search 1st LDAP connection:
258 * see: becomeDC_ldap1_rid_manager_fsmo()
261 * basedn: <domain_partition>
263 * filter: (objectClass=*)
264 * attrs: rIDManagerReference
267 * rIDManagerReference: CN=RID Manager$,CN=System,<domain_partition>
271 * LDAP search 1st LDAP connection:
273 * see: becomeDC_ldap1_rid_manager_fsmo()
276 * basedn: CN=RID Manager$,CN=System,<domain_partition>
278 * filter: (objectClass=*)
279 * attrs: fSMORoleOwner
281 * CN=Infrastructure,<domain_partition>
282 * fSMORoleOwner: CN=NTDS Settings,<rid_manager_fsmo_server_object>
286 * LDAP search 1st LDAP connection:
288 * see: becomeDC_ldap1_rid_manager_fsmo()
291 * basedn: <rid_manager_fsmo_server_object>
293 * filter: (objectClass=*)
296 * <rid_manager_fsmo_server_object>
297 * dnsHostName: <dns_host_name>
301 * LDAP search 1st LDAP connection:
303 * see: becomeDC_ldap1_rid_manager_fsmo()
306 * basedn: CN=NTDS Settings,<rid_manager_fsmo_server_object>
308 * filter: (objectClass=*)
309 * attrs: msDs-ReplicationEpoch
311 * CN=NTDS Settings,<rid_manager_fsmo_server_object>
315 * LDAP search 1st LDAP connection:
317 * see: becomeDC_ldap1_site_object()
320 * basedn: CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>
322 * filter: (objectClass=*)
325 * CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>
328 * cn: <new_dc_site_name>
329 * distinguishedName:CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>
335 * showInAdvancedViewOnly: TRUE
336 * name: <new_dc_site_name>
337 * objectGUID: <object_guid>
338 * systemFlags: 1107296256 <0x42000000>
339 * objectCategory: CN=Site,C=Schema,CN=Configuration,<domain_partition>
342 /***************************************************************
343 * Add this stage we call the check_options() callback function
344 * of the caller, to see if he wants us to continue
346 * see: becomeDC_check_options()
347 ***************************************************************/
350 * LDAP search 1st LDAP connection:
352 * see: becomeDC_ldap1_computer_object()
355 * basedn: <domain_partition>
357 * filter: (&(|(objectClass=user)(objectClass=computer))(sAMAccountName=<new_dc_account_name>))
358 * attrs: distinguishedName
361 * CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
362 * distinguishedName: CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
363 * userAccoountControl: 4096 <0x1000>
367 * LDAP search 1st LDAP connection:
369 * see: becomeDC_ldap1_server_object_1()
372 * basedn: CN=<new_dc_netbios_name>,CN=Servers,CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>
374 * filter: (objectClass=*)
378 * <matchedDN:CN=Servers,CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>>
382 * LDAP search 1st LDAP connection:
384 * see: becomeDC_ldap1_server_object_2()
387 * basedn: CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
389 * filter: (objectClass=*)
390 * attrs: serverReferenceBL
393 * CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
397 * LDAP add 1st LDAP connection:
399 * see: becomeDC_ldap1_server_object_add()
402 * CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
403 * objectClass: server
404 * systemFlags: 50000000 <0x2FAF080>
405 * serverReference:CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
411 * LDAP search 1st LDAP connection:
413 * not implemented, maybe we can add that later
416 * basedn: CN=NTDS Settings,CN=<new_dc_netbios_name>,CN=Servers,CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>
418 * filter: (objectClass=*)
422 * <matchedDN:CN=<new_dc_netbios_name>,CN=Servers,CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>>
426 * LDAP search 1st LDAP connection:
428 * not implemented because it gives no new information
431 * basedn: CN=Partitions,CN=Configuration,<domain_partition>
433 * filter: (nCName=<domain_partition>)
436 * controls: LDAP_SERVER_EXTENDED_DN_OID:critical=false
438 * <GUID=<hex_guid>>;CN=<domain_netbios_name>,CN=Partitions,<domain_partition>>
439 * nCName: <GUID=<hex_guid>>;<SID=<hex_sid>>;<domain_partition>>
440 * dnsRoot: <domain_dns_name>
444 * LDAP modify 1st LDAP connection:
446 * see: becomeDC_ldap1_server_object_modify()
449 * CN=<new_dc_netbios_name>,CN=Servers,CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>>
450 * serverReference:CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
452 * <attributeOrValueExist>
456 * LDAP modify 1st LDAP connection:
458 * see: becomeDC_ldap1_server_object_modify()
461 * CN=<new_dc_netbios_name>,CN=Servers,CN=<new_dc_site_name>,CN=Sites,CN=Configuration,<domain_partition>>
462 * serverReference:CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
468 * Open 1st DRSUAPI connection to the DC using admin credentials
469 * DsBind with DRSUAPI_DS_BIND_GUID_W2K3 ("6afab99c-6e26-464a-975f-f58f105218bc")
470 * (w2k3 does 2 DsBind() calls here..., where is first is unused and contains garbage at the end)
472 * see: becomeDC_drsuapi_connect_send(), becomeDC_drsuapi1_connect_recv(),
473 * becomeDC_drsuapi_bind_send(), becomeDC_drsuapi_bind_recv() and becomeDC_drsuapi1_bind_recv()
477 * DsAddEntry to create the CN=NTDS Settings,CN=<machine_name>,CN=Servers,CN=Default-First-Site-Name, ...
478 * on the 1st DRSUAPI connection
480 * see: becomeDC_drsuapi1_add_entry_send() and becomeDC_drsuapi1_add_entry_recv()
483 /***************************************************************
484 * Add this stage we call the prepare_db() callback function
485 * of the caller, to see if he wants us to continue
487 * see: becomeDC_prepare_db()
488 ***************************************************************/
491 * Open 2nd and 3rd DRSUAPI connection to the DC using admin credentials
492 * - a DsBind with DRSUAPI_DS_BIND_GUID_W2K3 ("6afab99c-6e26-464a-975f-f58f105218bc")
493 * on the 2nd connection
495 * see: becomeDC_drsuapi_connect_send(), becomeDC_drsuapi2_connect_recv(),
496 * becomeDC_drsuapi_bind_send(), becomeDC_drsuapi_bind_recv(), becomeDC_drsuapi2_bind_recv()
497 * and becomeDC_drsuapi3_connect_recv()
501 * replicate CN=Schema,CN=Configuration,...
502 * on the 3rd DRSUAPI connection and the bind_handle from the 2nd connection
504 * see: becomeDC_drsuapi_pull_partition_send(), becomeDC_drsuapi_pull_partition_recv(),
505 * becomeDC_drsuapi3_pull_schema_send() and becomeDC_drsuapi3_pull_schema_recv()
507 ***************************************************************
508 * Add this stage we call the schema_chunk() callback function
509 * for each replication message
510 ***************************************************************/
513 * replicate CN=Configuration,...
514 * on the 3rd DRSUAPI connection and the bind_handle from the 2nd connection
516 * see: becomeDC_drsuapi_pull_partition_send(), becomeDC_drsuapi_pull_partition_recv(),
517 * becomeDC_drsuapi3_pull_config_send() and becomeDC_drsuapi3_pull_config_recv()
519 ***************************************************************
520 * Add this stage we call the config_chunk() callback function
521 * for each replication message
522 ***************************************************************/
525 * LDAP unbind on the 1st LDAP connection
527 * not implemented, because it's not needed...
531 * Open 2nd LDAP connection to the DC using admin credentials
533 * see: becomeDC_connect_ldap2() and becomeDC_ldap_connect()
537 * LDAP search 2nd LDAP connection:
539 * not implemented because it gives no new information
540 * same as becomeDC_ldap1_computer_object()
543 * basedn: <domain_partition>
545 * filter: (&(|(objectClass=user)(objectClass=computer))(sAMAccountName=<new_dc_account_name>))
546 * attrs: distinguishedName
549 * CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
550 * distinguishedName: CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
551 * userAccoountControl: 4096 <0x00001000>
555 * LDAP search 2nd LDAP connection:
557 * not implemented because it gives no new information
558 * same as becomeDC_ldap1_computer_object()
561 * basedn: CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
563 * filter: (objectClass=*)
564 * attrs: userAccountControl
566 * CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
567 * userAccoountControl: 4096 <0x00001000>
571 * LDAP modify 2nd LDAP connection:
573 * see: becomeDC_ldap2_modify_computer()
576 * CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
577 * userAccoountControl: 532480 <0x82000>
583 * LDAP search 2nd LDAP connection:
585 * see: becomeDC_ldap2_move_computer()
588 * basedn: <WKGUID=2fbac1870ade11d297c400c04fd8d5cd,<domain_partition>>
590 * filter: (objectClass=*)
593 * CN=Domain Controllers,<domain_partition>
597 * LDAP search 2nd LDAP connection:
599 * not implemented because it gives no new information
602 * basedn: CN=Domain Controllers,<domain_partition>
604 * filter: (objectClass=*)
605 * attrs: distinguishedName
607 * CN=Domain Controller,<domain_partition>
608 * distinguishedName: CN=Domain Controllers,<domain_partition>
612 * LDAP modifyRDN 2nd LDAP connection:
614 * see: becomeDC_ldap2_move_computer()
617 * entry: CN=<new_dc_netbios_name>,CN=Computers,<domain_partition>
618 * newrdn: CN=<new_dc_netbios_name>
620 * newparent: CN=Domain Controllers,<domain_partition>
626 * LDAP unbind on the 2nd LDAP connection
628 * not implemented, because it's not needed...
632 * replicate Domain Partition
633 * on the 3rd DRSUAPI connection and the bind_handle from the 2nd connection
635 * see: becomeDC_drsuapi_pull_partition_send(), becomeDC_drsuapi_pull_partition_recv(),
636 * becomeDC_drsuapi3_pull_domain_send() and becomeDC_drsuapi3_pull_domain_recv()
638 ***************************************************************
639 * Add this stage we call the domain_chunk() callback function
640 * for each replication message
641 ***************************************************************/
643 /* call DsReplicaUpdateRefs() for all partitions like this:
644 * req1: struct drsuapi_DsReplicaUpdateRefsRequest1
646 * naming_context: struct drsuapi_DsReplicaObjectIdentifier
647 * __ndr_size : 0x000000ae (174)
648 * __ndr_size_sid : 0x00000000 (0)
649 * guid : 00000000-0000-0000-0000-000000000000
651 * dn : 'CN=Schema,CN=Configuration,DC=w2k3,DC=vmnet1,DC=vm,DC=base'
653 * dest_dsa_dns_name : '4a0df188-a0b8-47ea-bbe5-e614723f16dd._msdcs.w2k3.vmnet1.vm.base'
654 * dest_dsa_guid : 4a0df188-a0b8-47ea-bbe5-e614723f16dd
655 * options : 0x0000001c (28)
656 * 0: DRSUAPI_DS_REPLICA_UPDATE_ASYNCHRONOUS_OPERATION
657 * 0: DRSUAPI_DS_REPLICA_UPDATE_WRITEABLE
658 * 1: DRSUAPI_DS_REPLICA_UPDATE_ADD_REFERENCE
659 * 1: DRSUAPI_DS_REPLICA_UPDATE_DELETE_REFERENCE
660 * 1: DRSUAPI_DS_REPLICA_UPDATE_0x00000010
662 * 4a0df188-a0b8-47ea-bbe5-e614723f16dd is the objectGUID the DsAddEntry() returned for the
663 * CN=NTDS Settings,CN=<machine_name>,CN=Servers,CN=Default-First-Site-Name, ...
664 * on the 2nd!!! DRSUAPI connection
666 * see: becomeDC_drsuapi_update_refs_send(), becomeDC_drsuapi2_update_refs_schema_recv(),
667 * becomeDC_drsuapi2_update_refs_config_recv() and becomeDC_drsuapi2_update_refs_domain_recv()
671 * Windows does opens the 4th and 5th DRSUAPI connection...
672 * and does a DsBind() with the objectGUID from DsAddEntry() as bind_guid
673 * on the 4th connection
675 * and then 2 full replications of the domain partition on the 5th connection
676 * with the bind_handle from the 4th connection
678 * not implemented because it gives no new information
681 struct libnet_BecomeDC_state
{
682 struct composite_context
*creq
;
684 struct libnet_context
*libnet
;
686 struct dom_sid zero_sid
;
689 struct cldap_socket
*sock
;
690 struct cldap_netlogon io
;
691 struct NETLOGON_SAM_LOGON_RESPONSE_EX netlogon
;
694 struct becomeDC_ldap
{
695 struct ldb_context
*ldb
;
696 const struct ldb_message
*rootdse
;
699 struct becomeDC_drsuapi
{
700 struct libnet_BecomeDC_state
*s
;
701 struct dcerpc_binding
*binding
;
702 struct dcerpc_pipe
*pipe
;
703 DATA_BLOB gensec_skey
;
704 struct drsuapi_DsBind bind_r
;
705 struct GUID bind_guid
;
706 struct drsuapi_DsBindInfoCtr bind_info_ctr
;
707 struct drsuapi_DsBindInfo28 local_info28
;
708 struct drsuapi_DsBindInfo28 remote_info28
;
709 struct policy_handle bind_handle
;
710 } drsuapi1
, drsuapi2
, drsuapi3
;
712 struct libnet_BecomeDC_Domain domain
;
713 struct libnet_BecomeDC_Forest forest
;
714 struct libnet_BecomeDC_SourceDSA source_dsa
;
715 struct libnet_BecomeDC_DestDSA dest_dsa
;
717 struct libnet_BecomeDC_Partition schema_part
, config_part
, domain_part
;
719 struct becomeDC_fsmo
{
720 const char *dns_name
;
721 const char *server_dn_str
;
722 const char *ntds_dn_str
;
723 struct GUID ntds_guid
;
724 } infrastructure_fsmo
;
726 struct becomeDC_fsmo rid_manager_fsmo
;
728 struct libnet_BecomeDC_CheckOptions _co
;
729 struct libnet_BecomeDC_PrepareDB _pp
;
730 struct libnet_BecomeDC_StoreChunk _sc
;
731 struct libnet_BecomeDC_Callbacks callbacks
;
734 static void becomeDC_recv_cldap(struct tevent_req
*req
);
736 static void becomeDC_send_cldap(struct libnet_BecomeDC_state
*s
)
738 struct composite_context
*c
= s
->creq
;
739 struct tevent_req
*req
;
741 s
->cldap
.io
.in
.dest_address
= s
->source_dsa
.address
;
742 s
->cldap
.io
.in
.dest_port
= lp_cldap_port(s
->libnet
->lp_ctx
);
743 s
->cldap
.io
.in
.realm
= s
->domain
.dns_name
;
744 s
->cldap
.io
.in
.host
= s
->dest_dsa
.netbios_name
;
745 s
->cldap
.io
.in
.user
= NULL
;
746 s
->cldap
.io
.in
.domain_guid
= NULL
;
747 s
->cldap
.io
.in
.domain_sid
= NULL
;
748 s
->cldap
.io
.in
.acct_control
= -1;
749 s
->cldap
.io
.in
.version
= NETLOGON_NT_VERSION_5
| NETLOGON_NT_VERSION_5EX
;
750 s
->cldap
.io
.in
.map_response
= true;
752 c
->status
= cldap_socket_init(s
, s
->libnet
->event_ctx
,
753 NULL
, NULL
, &s
->cldap
.sock
);//TODO
754 if (!composite_is_ok(c
)) return;
756 req
= cldap_netlogon_send(s
, s
->cldap
.sock
, &s
->cldap
.io
);
757 if (composite_nomem(req
, c
)) return;
758 tevent_req_set_callback(req
, becomeDC_recv_cldap
, s
);
761 static void becomeDC_connect_ldap1(struct libnet_BecomeDC_state
*s
);
763 static void becomeDC_recv_cldap(struct tevent_req
*req
)
765 struct libnet_BecomeDC_state
*s
= tevent_req_callback_data(req
,
766 struct libnet_BecomeDC_state
);
767 struct composite_context
*c
= s
->creq
;
769 c
->status
= cldap_netlogon_recv(req
,
770 lp_iconv_convenience(s
->libnet
->lp_ctx
),
773 if (!composite_is_ok(c
)) return;
775 s
->cldap
.netlogon
= s
->cldap
.io
.out
.netlogon
.data
.nt5_ex
;
777 s
->domain
.dns_name
= s
->cldap
.netlogon
.dns_domain
;
778 s
->domain
.netbios_name
= s
->cldap
.netlogon
.domain
;
779 s
->domain
.guid
= s
->cldap
.netlogon
.domain_uuid
;
781 s
->forest
.dns_name
= s
->cldap
.netlogon
.forest
;
783 s
->source_dsa
.dns_name
= s
->cldap
.netlogon
.pdc_dns_name
;
784 s
->source_dsa
.netbios_name
= s
->cldap
.netlogon
.pdc_name
;
785 s
->source_dsa
.site_name
= s
->cldap
.netlogon
.server_site
;
787 s
->dest_dsa
.site_name
= s
->cldap
.netlogon
.client_site
;
789 becomeDC_connect_ldap1(s
);
792 static NTSTATUS
becomeDC_ldap_connect(struct libnet_BecomeDC_state
*s
,
793 struct becomeDC_ldap
*ldap
)
797 url
= talloc_asprintf(s
, "ldap://%s/", s
->source_dsa
.dns_name
);
798 NT_STATUS_HAVE_NO_MEMORY(url
);
800 ldap
->ldb
= ldb_wrap_connect(s
, s
->libnet
->event_ctx
, s
->libnet
->lp_ctx
, url
,
805 if (ldap
->ldb
== NULL
) {
806 return NT_STATUS_UNEXPECTED_NETWORK_ERROR
;
812 static NTSTATUS
becomeDC_ldap1_rootdse(struct libnet_BecomeDC_state
*s
)
815 struct ldb_result
*r
;
816 struct ldb_dn
*basedn
;
817 static const char *attrs
[] = {
822 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, NULL
);
823 NT_STATUS_HAVE_NO_MEMORY(basedn
);
825 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
, attrs
,
828 if (ret
!= LDB_SUCCESS
) {
829 return NT_STATUS_LDAP(ret
);
830 } else if (r
->count
!= 1) {
832 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
835 s
->ldap1
.rootdse
= r
->msgs
[0];
837 s
->domain
.dn_str
= ldb_msg_find_attr_as_string(s
->ldap1
.rootdse
, "defaultNamingContext", NULL
);
838 if (!s
->domain
.dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
840 s
->forest
.root_dn_str
= ldb_msg_find_attr_as_string(s
->ldap1
.rootdse
, "rootDomainNamingContext", NULL
);
841 if (!s
->forest
.root_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
842 s
->forest
.config_dn_str
= ldb_msg_find_attr_as_string(s
->ldap1
.rootdse
, "configurationNamingContext", NULL
);
843 if (!s
->forest
.config_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
844 s
->forest
.schema_dn_str
= ldb_msg_find_attr_as_string(s
->ldap1
.rootdse
, "schemaNamingContext", NULL
);
845 if (!s
->forest
.schema_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
847 s
->source_dsa
.server_dn_str
= ldb_msg_find_attr_as_string(s
->ldap1
.rootdse
, "serverName", NULL
);
848 if (!s
->source_dsa
.server_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
849 s
->source_dsa
.ntds_dn_str
= ldb_msg_find_attr_as_string(s
->ldap1
.rootdse
, "dsServiceName", NULL
);
850 if (!s
->source_dsa
.ntds_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
855 static NTSTATUS
becomeDC_ldap1_crossref_behavior_version(struct libnet_BecomeDC_state
*s
)
858 struct ldb_result
*r
;
859 struct ldb_dn
*basedn
;
860 static const char *attrs
[] = {
861 "msDs-Behavior-Version",
865 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->forest
.config_dn_str
);
866 NT_STATUS_HAVE_NO_MEMORY(basedn
);
868 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_ONELEVEL
, attrs
,
871 if (ret
!= LDB_SUCCESS
) {
872 return NT_STATUS_LDAP(ret
);
873 } else if (r
->count
!= 1) {
875 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
878 s
->forest
.crossref_behavior_version
= ldb_msg_find_attr_as_uint(r
->msgs
[0], "msDs-Behavior-Version", 0);
884 static NTSTATUS
becomeDC_ldap1_domain_behavior_version(struct libnet_BecomeDC_state
*s
)
887 struct ldb_result
*r
;
888 struct ldb_dn
*basedn
;
889 static const char *attrs
[] = {
890 "msDs-Behavior-Version",
894 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->domain
.dn_str
);
895 NT_STATUS_HAVE_NO_MEMORY(basedn
);
897 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
, attrs
,
900 if (ret
!= LDB_SUCCESS
) {
901 return NT_STATUS_LDAP(ret
);
902 } else if (r
->count
!= 1) {
904 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
907 s
->domain
.behavior_version
= ldb_msg_find_attr_as_uint(r
->msgs
[0], "msDs-Behavior-Version", 0);
913 static NTSTATUS
becomeDC_ldap1_schema_object_version(struct libnet_BecomeDC_state
*s
)
916 struct ldb_result
*r
;
917 struct ldb_dn
*basedn
;
918 static const char *attrs
[] = {
923 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->forest
.schema_dn_str
);
924 NT_STATUS_HAVE_NO_MEMORY(basedn
);
926 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
, attrs
,
929 if (ret
!= LDB_SUCCESS
) {
930 return NT_STATUS_LDAP(ret
);
931 } else if (r
->count
!= 1) {
933 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
936 s
->forest
.schema_object_version
= ldb_msg_find_attr_as_uint(r
->msgs
[0], "objectVersion", 0);
942 static NTSTATUS
becomeDC_ldap1_w2k3_update_revision(struct libnet_BecomeDC_state
*s
)
945 struct ldb_result
*r
;
946 struct ldb_dn
*basedn
;
947 static const char *attrs
[] = {
952 basedn
= ldb_dn_new_fmt(s
, s
->ldap1
.ldb
, "CN=Windows2003Update,CN=DomainUpdates,CN=System,%s",
954 NT_STATUS_HAVE_NO_MEMORY(basedn
);
956 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
, attrs
,
959 if (ret
== LDB_ERR_NO_SUCH_OBJECT
) {
960 /* w2k doesn't have this object */
961 s
->domain
.w2k3_update_revision
= 0;
963 } else if (ret
!= LDB_SUCCESS
) {
964 return NT_STATUS_LDAP(ret
);
965 } else if (r
->count
!= 1) {
967 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
970 s
->domain
.w2k3_update_revision
= ldb_msg_find_attr_as_uint(r
->msgs
[0], "revision", 0);
976 static NTSTATUS
becomeDC_ldap1_infrastructure_fsmo(struct libnet_BecomeDC_state
*s
)
979 struct ldb_result
*r
;
980 struct ldb_dn
*basedn
;
981 struct ldb_dn
*ntds_dn
;
982 struct ldb_dn
*server_dn
;
983 static const char *_1_1_attrs
[] = {
987 static const char *fsmo_attrs
[] = {
991 static const char *dns_attrs
[] = {
995 static const char *guid_attrs
[] = {
1000 basedn
= ldb_dn_new_fmt(s
, s
->ldap1
.ldb
, "<WKGUID=2fbac1870ade11d297c400c04fd8d5cd,%s>",
1002 NT_STATUS_HAVE_NO_MEMORY(basedn
);
1004 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
1005 _1_1_attrs
, "(objectClass=*)");
1006 talloc_free(basedn
);
1007 if (ret
!= LDB_SUCCESS
) {
1008 return NT_STATUS_LDAP(ret
);
1009 } else if (r
->count
!= 1) {
1011 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1014 basedn
= talloc_steal(s
, r
->msgs
[0]->dn
);
1017 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
1018 fsmo_attrs
, "(objectClass=*)");
1019 talloc_free(basedn
);
1020 if (ret
!= LDB_SUCCESS
) {
1021 return NT_STATUS_LDAP(ret
);
1022 } else if (r
->count
!= 1) {
1024 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1027 s
->infrastructure_fsmo
.ntds_dn_str
= samdb_result_string(r
->msgs
[0], "fSMORoleOwner", NULL
);
1028 if (!s
->infrastructure_fsmo
.ntds_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1029 talloc_steal(s
, s
->infrastructure_fsmo
.ntds_dn_str
);
1033 ntds_dn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->infrastructure_fsmo
.ntds_dn_str
);
1034 NT_STATUS_HAVE_NO_MEMORY(ntds_dn
);
1036 server_dn
= ldb_dn_get_parent(s
, ntds_dn
);
1037 NT_STATUS_HAVE_NO_MEMORY(server_dn
);
1039 s
->infrastructure_fsmo
.server_dn_str
= ldb_dn_alloc_linearized(s
, server_dn
);
1040 NT_STATUS_HAVE_NO_MEMORY(s
->infrastructure_fsmo
.server_dn_str
);
1042 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, server_dn
, LDB_SCOPE_BASE
,
1043 dns_attrs
, "(objectClass=*)");
1044 if (ret
!= LDB_SUCCESS
) {
1045 return NT_STATUS_LDAP(ret
);
1046 } else if (r
->count
!= 1) {
1048 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1051 s
->infrastructure_fsmo
.dns_name
= samdb_result_string(r
->msgs
[0], "dnsHostName", NULL
);
1052 if (!s
->infrastructure_fsmo
.dns_name
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1053 talloc_steal(s
, s
->infrastructure_fsmo
.dns_name
);
1057 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, ntds_dn
, LDB_SCOPE_BASE
,
1058 guid_attrs
, "(objectClass=*)");
1059 if (ret
!= LDB_SUCCESS
) {
1060 return NT_STATUS_LDAP(ret
);
1061 } else if (r
->count
!= 1) {
1063 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1066 s
->infrastructure_fsmo
.ntds_guid
= samdb_result_guid(r
->msgs
[0], "objectGUID");
1070 return NT_STATUS_OK
;
1073 static NTSTATUS
becomeDC_ldap1_rid_manager_fsmo(struct libnet_BecomeDC_state
*s
)
1076 struct ldb_result
*r
;
1077 struct ldb_dn
*basedn
;
1078 const char *reference_dn_str
;
1079 struct ldb_dn
*ntds_dn
;
1080 struct ldb_dn
*server_dn
;
1081 static const char *rid_attrs
[] = {
1082 "rIDManagerReference",
1085 static const char *fsmo_attrs
[] = {
1089 static const char *dns_attrs
[] = {
1093 static const char *guid_attrs
[] = {
1098 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->domain
.dn_str
);
1099 NT_STATUS_HAVE_NO_MEMORY(basedn
);
1101 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
1102 rid_attrs
, "(objectClass=*)");
1103 talloc_free(basedn
);
1104 if (ret
!= LDB_SUCCESS
) {
1105 return NT_STATUS_LDAP(ret
);
1106 } else if (r
->count
!= 1) {
1108 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1111 reference_dn_str
= samdb_result_string(r
->msgs
[0], "rIDManagerReference", NULL
);
1112 if (!reference_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1114 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, reference_dn_str
);
1115 NT_STATUS_HAVE_NO_MEMORY(basedn
);
1119 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
1120 fsmo_attrs
, "(objectClass=*)");
1121 talloc_free(basedn
);
1122 if (ret
!= LDB_SUCCESS
) {
1123 return NT_STATUS_LDAP(ret
);
1124 } else if (r
->count
!= 1) {
1126 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1129 s
->rid_manager_fsmo
.ntds_dn_str
= samdb_result_string(r
->msgs
[0], "fSMORoleOwner", NULL
);
1130 if (!s
->rid_manager_fsmo
.ntds_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1131 talloc_steal(s
, s
->rid_manager_fsmo
.ntds_dn_str
);
1135 ntds_dn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->rid_manager_fsmo
.ntds_dn_str
);
1136 NT_STATUS_HAVE_NO_MEMORY(ntds_dn
);
1138 server_dn
= ldb_dn_get_parent(s
, ntds_dn
);
1139 NT_STATUS_HAVE_NO_MEMORY(server_dn
);
1141 s
->rid_manager_fsmo
.server_dn_str
= ldb_dn_alloc_linearized(s
, server_dn
);
1142 NT_STATUS_HAVE_NO_MEMORY(s
->rid_manager_fsmo
.server_dn_str
);
1144 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, server_dn
, LDB_SCOPE_BASE
,
1145 dns_attrs
, "(objectClass=*)");
1146 if (ret
!= LDB_SUCCESS
) {
1147 return NT_STATUS_LDAP(ret
);
1148 } else if (r
->count
!= 1) {
1150 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1153 s
->rid_manager_fsmo
.dns_name
= samdb_result_string(r
->msgs
[0], "dnsHostName", NULL
);
1154 if (!s
->rid_manager_fsmo
.dns_name
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1155 talloc_steal(s
, s
->rid_manager_fsmo
.dns_name
);
1159 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, ntds_dn
, LDB_SCOPE_BASE
,
1160 guid_attrs
, "(objectClass=*)");
1161 if (ret
!= LDB_SUCCESS
) {
1162 return NT_STATUS_LDAP(ret
);
1163 } else if (r
->count
!= 1) {
1165 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1168 s
->rid_manager_fsmo
.ntds_guid
= samdb_result_guid(r
->msgs
[0], "objectGUID");
1172 return NT_STATUS_OK
;
1175 static NTSTATUS
becomeDC_ldap1_site_object(struct libnet_BecomeDC_state
*s
)
1178 struct ldb_result
*r
;
1179 struct ldb_dn
*basedn
;
1181 basedn
= ldb_dn_new_fmt(s
, s
->ldap1
.ldb
, "CN=%s,CN=Sites,%s",
1182 s
->dest_dsa
.site_name
,
1183 s
->forest
.config_dn_str
);
1184 NT_STATUS_HAVE_NO_MEMORY(basedn
);
1186 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
1187 NULL
, "(objectClass=*)");
1188 talloc_free(basedn
);
1189 if (ret
!= LDB_SUCCESS
) {
1190 return NT_STATUS_LDAP(ret
);
1191 } else if (r
->count
!= 1) {
1193 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1196 s
->dest_dsa
.site_guid
= samdb_result_guid(r
->msgs
[0], "objectGUID");
1199 return NT_STATUS_OK
;
1202 static NTSTATUS
becomeDC_check_options(struct libnet_BecomeDC_state
*s
)
1204 if (!s
->callbacks
.check_options
) return NT_STATUS_OK
;
1206 s
->_co
.domain
= &s
->domain
;
1207 s
->_co
.forest
= &s
->forest
;
1208 s
->_co
.source_dsa
= &s
->source_dsa
;
1210 return s
->callbacks
.check_options(s
->callbacks
.private_data
, &s
->_co
);
1213 static NTSTATUS
becomeDC_ldap1_computer_object(struct libnet_BecomeDC_state
*s
)
1216 struct ldb_result
*r
;
1217 struct ldb_dn
*basedn
;
1218 static const char *attrs
[] = {
1219 "distinguishedName",
1220 "userAccountControl",
1224 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->domain
.dn_str
);
1225 NT_STATUS_HAVE_NO_MEMORY(basedn
);
1227 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_SUBTREE
, attrs
,
1228 "(&(|(objectClass=user)(objectClass=computer))(sAMAccountName=%s$))",
1229 s
->dest_dsa
.netbios_name
);
1230 talloc_free(basedn
);
1231 if (ret
!= LDB_SUCCESS
) {
1232 return NT_STATUS_LDAP(ret
);
1233 } else if (r
->count
!= 1) {
1235 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1238 s
->dest_dsa
.computer_dn_str
= samdb_result_string(r
->msgs
[0], "distinguishedName", NULL
);
1239 if (!s
->dest_dsa
.computer_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1240 talloc_steal(s
, s
->dest_dsa
.computer_dn_str
);
1242 s
->dest_dsa
.user_account_control
= samdb_result_uint(r
->msgs
[0], "userAccountControl", 0);
1245 return NT_STATUS_OK
;
1248 static NTSTATUS
becomeDC_ldap1_server_object_1(struct libnet_BecomeDC_state
*s
)
1251 struct ldb_result
*r
;
1252 struct ldb_dn
*basedn
;
1253 const char *server_reference_dn_str
;
1254 struct ldb_dn
*server_reference_dn
;
1255 struct ldb_dn
*computer_dn
;
1257 basedn
= ldb_dn_new_fmt(s
, s
->ldap1
.ldb
, "CN=%s,CN=Servers,CN=%s,CN=Sites,%s",
1258 s
->dest_dsa
.netbios_name
,
1259 s
->dest_dsa
.site_name
,
1260 s
->forest
.config_dn_str
);
1261 NT_STATUS_HAVE_NO_MEMORY(basedn
);
1263 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
1264 NULL
, "(objectClass=*)");
1265 talloc_free(basedn
);
1266 if (ret
== LDB_ERR_NO_SUCH_OBJECT
) {
1267 /* if the object doesn't exist, we'll create it later */
1268 return NT_STATUS_OK
;
1269 } else if (ret
!= LDB_SUCCESS
) {
1270 return NT_STATUS_LDAP(ret
);
1271 } else if (r
->count
!= 1) {
1273 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1276 server_reference_dn_str
= samdb_result_string(r
->msgs
[0], "serverReference", NULL
);
1277 if (server_reference_dn_str
) {
1278 server_reference_dn
= ldb_dn_new(r
, s
->ldap1
.ldb
, server_reference_dn_str
);
1279 NT_STATUS_HAVE_NO_MEMORY(server_reference_dn
);
1281 computer_dn
= ldb_dn_new(r
, s
->ldap1
.ldb
, s
->dest_dsa
.computer_dn_str
);
1282 NT_STATUS_HAVE_NO_MEMORY(computer_dn
);
1285 * if the server object belongs to another DC in another domain in the forest,
1286 * we should not touch this object!
1288 if (ldb_dn_compare(computer_dn
, server_reference_dn
) != 0) {
1290 return NT_STATUS_OBJECT_NAME_COLLISION
;
1294 /* if the server object is already for the dest_dsa, then we don't need to create it */
1295 s
->dest_dsa
.server_dn_str
= samdb_result_string(r
->msgs
[0], "distinguishedName", NULL
);
1296 if (!s
->dest_dsa
.server_dn_str
) return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1297 talloc_steal(s
, s
->dest_dsa
.server_dn_str
);
1300 return NT_STATUS_OK
;
1303 static NTSTATUS
becomeDC_ldap1_server_object_2(struct libnet_BecomeDC_state
*s
)
1306 struct ldb_result
*r
;
1307 struct ldb_dn
*basedn
;
1308 const char *server_reference_bl_dn_str
;
1309 static const char *attrs
[] = {
1310 "serverReferenceBL",
1314 /* if the server_dn_str has a valid value, we skip this lookup */
1315 if (s
->dest_dsa
.server_dn_str
) return NT_STATUS_OK
;
1317 basedn
= ldb_dn_new(s
, s
->ldap1
.ldb
, s
->dest_dsa
.computer_dn_str
);
1318 NT_STATUS_HAVE_NO_MEMORY(basedn
);
1320 ret
= ldb_search(s
->ldap1
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
1321 attrs
, "(objectClass=*)");
1322 talloc_free(basedn
);
1323 if (ret
!= LDB_SUCCESS
) {
1324 return NT_STATUS_LDAP(ret
);
1325 } else if (r
->count
!= 1) {
1327 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
1330 server_reference_bl_dn_str
= samdb_result_string(r
->msgs
[0], "serverReferenceBL", NULL
);
1331 if (!server_reference_bl_dn_str
) {
1332 /* if no back link is present, we're done for this function */
1334 return NT_STATUS_OK
;
1337 /* if the server object is already for the dest_dsa, then we don't need to create it */
1338 s
->dest_dsa
.server_dn_str
= samdb_result_string(r
->msgs
[0], "serverReferenceBL", NULL
);
1339 if (s
->dest_dsa
.server_dn_str
) {
1340 /* if a back link is present, we know that the server object is present */
1341 talloc_steal(s
, s
->dest_dsa
.server_dn_str
);
1345 return NT_STATUS_OK
;
1348 static NTSTATUS
becomeDC_ldap1_server_object_add(struct libnet_BecomeDC_state
*s
)
1351 struct ldb_message
*msg
;
1352 char *server_dn_str
;
1354 /* if the server_dn_str has a valid value, we skip this lookup */
1355 if (s
->dest_dsa
.server_dn_str
) return NT_STATUS_OK
;
1357 msg
= ldb_msg_new(s
);
1358 NT_STATUS_HAVE_NO_MEMORY(msg
);
1360 msg
->dn
= ldb_dn_new_fmt(msg
, s
->ldap1
.ldb
, "CN=%s,CN=Servers,CN=%s,CN=Sites,%s",
1361 s
->dest_dsa
.netbios_name
,
1362 s
->dest_dsa
.site_name
,
1363 s
->forest
.config_dn_str
);
1364 NT_STATUS_HAVE_NO_MEMORY(msg
->dn
);
1366 ret
= ldb_msg_add_string(msg
, "objectClass", "server");
1369 return NT_STATUS_NO_MEMORY
;
1371 ret
= ldb_msg_add_string(msg
, "systemFlags", "50000000");
1374 return NT_STATUS_NO_MEMORY
;
1376 ret
= ldb_msg_add_string(msg
, "serverReference", s
->dest_dsa
.computer_dn_str
);
1379 return NT_STATUS_NO_MEMORY
;
1382 server_dn_str
= ldb_dn_alloc_linearized(s
, msg
->dn
);
1383 NT_STATUS_HAVE_NO_MEMORY(server_dn_str
);
1385 ret
= ldb_add(s
->ldap1
.ldb
, msg
);
1387 if (ret
!= LDB_SUCCESS
) {
1388 talloc_free(server_dn_str
);
1389 return NT_STATUS_LDAP(ret
);
1392 s
->dest_dsa
.server_dn_str
= server_dn_str
;
1394 return NT_STATUS_OK
;
1397 static NTSTATUS
becomeDC_ldap1_server_object_modify(struct libnet_BecomeDC_state
*s
)
1400 struct ldb_message
*msg
;
1403 /* make a 'modify' msg, and only for serverReference */
1404 msg
= ldb_msg_new(s
);
1405 NT_STATUS_HAVE_NO_MEMORY(msg
);
1406 msg
->dn
= ldb_dn_new(msg
, s
->ldap1
.ldb
, s
->dest_dsa
.server_dn_str
);
1407 NT_STATUS_HAVE_NO_MEMORY(msg
->dn
);
1409 ret
= ldb_msg_add_string(msg
, "serverReference", s
->dest_dsa
.computer_dn_str
);
1412 return NT_STATUS_NO_MEMORY
;
1415 /* mark all the message elements (should be just one)
1416 as LDB_FLAG_MOD_ADD */
1417 for (i
=0;i
<msg
->num_elements
;i
++) {
1418 msg
->elements
[i
].flags
= LDB_FLAG_MOD_ADD
;
1421 ret
= ldb_modify(s
->ldap1
.ldb
, msg
);
1422 if (ret
== LDB_SUCCESS
) {
1424 return NT_STATUS_OK
;
1425 } else if (ret
== LDB_ERR_ATTRIBUTE_OR_VALUE_EXISTS
) {
1426 /* retry with LDB_FLAG_MOD_REPLACE */
1429 return NT_STATUS_LDAP(ret
);
1432 /* mark all the message elements (should be just one)
1433 as LDB_FLAG_MOD_REPLACE */
1434 for (i
=0;i
<msg
->num_elements
;i
++) {
1435 msg
->elements
[i
].flags
= LDB_FLAG_MOD_REPLACE
;
1438 ret
= ldb_modify(s
->ldap1
.ldb
, msg
);
1440 if (ret
!= LDB_SUCCESS
) {
1441 return NT_STATUS_LDAP(ret
);
1444 return NT_STATUS_OK
;
1447 static void becomeDC_drsuapi_connect_send(struct libnet_BecomeDC_state
*s
,
1448 struct becomeDC_drsuapi
*drsuapi
,
1449 void (*recv_fn
)(struct composite_context
*req
));
1450 static void becomeDC_drsuapi1_connect_recv(struct composite_context
*req
);
1451 static void becomeDC_connect_ldap2(struct libnet_BecomeDC_state
*s
);
1453 static void becomeDC_connect_ldap1(struct libnet_BecomeDC_state
*s
)
1455 struct composite_context
*c
= s
->creq
;
1457 c
->status
= becomeDC_ldap_connect(s
, &s
->ldap1
);
1458 if (!composite_is_ok(c
)) return;
1460 c
->status
= becomeDC_ldap1_rootdse(s
);
1461 if (!composite_is_ok(c
)) return;
1463 c
->status
= becomeDC_ldap1_crossref_behavior_version(s
);
1464 if (!composite_is_ok(c
)) return;
1466 c
->status
= becomeDC_ldap1_domain_behavior_version(s
);
1467 if (!composite_is_ok(c
)) return;
1469 c
->status
= becomeDC_ldap1_schema_object_version(s
);
1470 if (!composite_is_ok(c
)) return;
1472 c
->status
= becomeDC_ldap1_w2k3_update_revision(s
);
1473 if (!composite_is_ok(c
)) return;
1475 c
->status
= becomeDC_ldap1_infrastructure_fsmo(s
);
1476 if (!composite_is_ok(c
)) return;
1478 c
->status
= becomeDC_ldap1_rid_manager_fsmo(s
);
1479 if (!composite_is_ok(c
)) return;
1481 c
->status
= becomeDC_ldap1_site_object(s
);
1482 if (!composite_is_ok(c
)) return;
1484 c
->status
= becomeDC_check_options(s
);
1485 if (!composite_is_ok(c
)) return;
1487 c
->status
= becomeDC_ldap1_computer_object(s
);
1488 if (!composite_is_ok(c
)) return;
1490 c
->status
= becomeDC_ldap1_server_object_1(s
);
1491 if (!composite_is_ok(c
)) return;
1493 c
->status
= becomeDC_ldap1_server_object_2(s
);
1494 if (!composite_is_ok(c
)) return;
1496 c
->status
= becomeDC_ldap1_server_object_add(s
);
1497 if (!composite_is_ok(c
)) return;
1499 c
->status
= becomeDC_ldap1_server_object_modify(s
);
1500 if (!composite_is_ok(c
)) return;
1502 becomeDC_drsuapi_connect_send(s
, &s
->drsuapi1
, becomeDC_drsuapi1_connect_recv
);
1505 static void becomeDC_drsuapi_connect_send(struct libnet_BecomeDC_state
*s
,
1506 struct becomeDC_drsuapi
*drsuapi
,
1507 void (*recv_fn
)(struct composite_context
*req
))
1509 struct composite_context
*c
= s
->creq
;
1510 struct composite_context
*creq
;
1515 if (!drsuapi
->binding
) {
1516 const char *krb5_str
= "";
1517 const char *print_str
= "";
1519 * Note: Replication only works with Windows 2000 when 'krb5' is
1520 * passed as auth_type here. If NTLMSSP is used, Windows
1521 * 2000 returns garbage in the DsGetNCChanges() response
1522 * if encrypted password attributes would be in the response.
1523 * That means the replication of the schema and configuration
1524 * partition works fine, but it fails for the domain partition.
1526 if (lp_parm_bool(s
->libnet
->lp_ctx
, NULL
, "become_dc",
1527 "force krb5", true))
1531 if (lp_parm_bool(s
->libnet
->lp_ctx
, NULL
, "become_dc",
1534 print_str
= "print,";
1536 binding_str
= talloc_asprintf(s
, "ncacn_ip_tcp:%s[%s%sseal]",
1537 s
->source_dsa
.dns_name
,
1538 krb5_str
, print_str
);
1539 if (composite_nomem(binding_str
, c
)) return;
1540 c
->status
= dcerpc_parse_binding(s
, binding_str
, &drsuapi
->binding
);
1541 talloc_free(binding_str
);
1542 if (!composite_is_ok(c
)) return;
1545 creq
= dcerpc_pipe_connect_b_send(s
, drsuapi
->binding
, &ndr_table_drsuapi
,
1546 s
->libnet
->cred
, s
->libnet
->event_ctx
,
1548 composite_continue(c
, creq
, recv_fn
, s
);
1551 static void becomeDC_drsuapi_bind_send(struct libnet_BecomeDC_state
*s
,
1552 struct becomeDC_drsuapi
*drsuapi
,
1553 void (*recv_fn
)(struct rpc_request
*req
));
1554 static void becomeDC_drsuapi1_bind_recv(struct rpc_request
*req
);
1556 static void becomeDC_drsuapi1_connect_recv(struct composite_context
*req
)
1558 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
1559 struct libnet_BecomeDC_state
);
1560 struct composite_context
*c
= s
->creq
;
1562 c
->status
= dcerpc_pipe_connect_b_recv(req
, s
, &s
->drsuapi1
.pipe
);
1563 if (!composite_is_ok(c
)) return;
1565 c
->status
= gensec_session_key(s
->drsuapi1
.pipe
->conn
->security_state
.generic_state
,
1566 &s
->drsuapi1
.gensec_skey
);
1567 if (!composite_is_ok(c
)) return;
1569 becomeDC_drsuapi_bind_send(s
, &s
->drsuapi1
, becomeDC_drsuapi1_bind_recv
);
1572 static void becomeDC_drsuapi_bind_send(struct libnet_BecomeDC_state
*s
,
1573 struct becomeDC_drsuapi
*drsuapi
,
1574 void (*recv_fn
)(struct rpc_request
*req
))
1576 struct composite_context
*c
= s
->creq
;
1577 struct rpc_request
*req
;
1578 struct drsuapi_DsBindInfo28
*bind_info28
;
1580 GUID_from_string(DRSUAPI_DS_BIND_GUID_W2K3
, &drsuapi
->bind_guid
);
1582 bind_info28
= &drsuapi
->local_info28
;
1583 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_BASE
;
1584 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION
;
1585 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI
;
1586 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2
;
1587 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS
;
1588 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1
;
1589 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION
;
1590 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE
;
1591 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2
;
1592 if (s
->domain
.behavior_version
== 2) {
1593 /* TODO: find out how this is really triggered! */
1594 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION
;
1596 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2
;
1597 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD
;
1598 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND
;
1599 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO
;
1600 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION
;
1601 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01
;
1602 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP
;
1603 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY
;
1604 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3
;
1605 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_00100000
;
1606 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2
;
1607 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6
;
1608 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS
;
1609 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8
;
1610 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5
;
1611 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6
;
1612 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3
;
1613 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7
;
1614 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT
;
1615 #if 0 /* we don't support XPRESS compression yet */
1616 bind_info28
->supported_extensions
|= DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS
;
1618 bind_info28
->site_guid
= s
->dest_dsa
.site_guid
;
1619 bind_info28
->pid
= 0;
1620 bind_info28
->repl_epoch
= 0;
1622 drsuapi
->bind_info_ctr
.length
= 28;
1623 drsuapi
->bind_info_ctr
.info
.info28
= *bind_info28
;
1625 drsuapi
->bind_r
.in
.bind_guid
= &drsuapi
->bind_guid
;
1626 drsuapi
->bind_r
.in
.bind_info
= &drsuapi
->bind_info_ctr
;
1627 drsuapi
->bind_r
.out
.bind_handle
= &drsuapi
->bind_handle
;
1629 req
= dcerpc_drsuapi_DsBind_send(drsuapi
->pipe
, s
, &drsuapi
->bind_r
);
1630 composite_continue_rpc(c
, req
, recv_fn
, s
);
1633 static WERROR
becomeDC_drsuapi_bind_recv(struct libnet_BecomeDC_state
*s
,
1634 struct becomeDC_drsuapi
*drsuapi
)
1636 if (!W_ERROR_IS_OK(drsuapi
->bind_r
.out
.result
)) {
1637 return drsuapi
->bind_r
.out
.result
;
1640 ZERO_STRUCT(drsuapi
->remote_info28
);
1641 if (drsuapi
->bind_r
.out
.bind_info
) {
1642 switch (drsuapi
->bind_r
.out
.bind_info
->length
) {
1644 struct drsuapi_DsBindInfo24
*info24
;
1645 info24
= &drsuapi
->bind_r
.out
.bind_info
->info
.info24
;
1646 drsuapi
->remote_info28
.supported_extensions
= info24
->supported_extensions
;
1647 drsuapi
->remote_info28
.site_guid
= info24
->site_guid
;
1648 drsuapi
->remote_info28
.pid
= info24
->pid
;
1649 drsuapi
->remote_info28
.repl_epoch
= 0;
1653 struct drsuapi_DsBindInfo48
*info48
;
1654 info48
= &drsuapi
->bind_r
.out
.bind_info
->info
.info48
;
1655 drsuapi
->remote_info28
.supported_extensions
= info48
->supported_extensions
;
1656 drsuapi
->remote_info28
.site_guid
= info48
->site_guid
;
1657 drsuapi
->remote_info28
.pid
= info48
->pid
;
1658 drsuapi
->remote_info28
.repl_epoch
= info48
->repl_epoch
;
1662 drsuapi
->remote_info28
= drsuapi
->bind_r
.out
.bind_info
->info
.info28
;
1670 static void becomeDC_drsuapi1_add_entry_send(struct libnet_BecomeDC_state
*s
);
1672 static void becomeDC_drsuapi1_bind_recv(struct rpc_request
*req
)
1674 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
1675 struct libnet_BecomeDC_state
);
1676 struct composite_context
*c
= s
->creq
;
1681 if (req
->p
->conn
->flags
& DCERPC_DEBUG_PRINT_OUT
) {
1685 c
->status
= dcerpc_ndr_request_recv(req
);
1686 if (!composite_is_ok(c
)) return;
1689 NDR_PRINT_OUT_DEBUG(drsuapi_DsBind
, &s
->drsuapi1
.bind_r
);
1692 status
= becomeDC_drsuapi_bind_recv(s
, &s
->drsuapi1
);
1693 if (!W_ERROR_IS_OK(status
)) {
1694 composite_error(c
, werror_to_ntstatus(status
));
1698 becomeDC_drsuapi1_add_entry_send(s
);
1701 static void becomeDC_drsuapi1_add_entry_recv(struct rpc_request
*req
);
1703 static void becomeDC_drsuapi1_add_entry_send(struct libnet_BecomeDC_state
*s
)
1705 struct composite_context
*c
= s
->creq
;
1706 struct rpc_request
*req
;
1707 struct drsuapi_DsAddEntry
*r
;
1708 struct drsuapi_DsReplicaObjectIdentifier
*identifier
;
1709 uint32_t num_attrs
, i
= 0;
1710 struct drsuapi_DsReplicaAttribute
*attrs
;
1711 struct smb_iconv_convenience
*iconv_convenience
= lp_iconv_convenience(s
->libnet
->lp_ctx
);
1712 enum ndr_err_code ndr_err
;
1715 /* choose a random invocationId */
1716 s
->dest_dsa
.invocation_id
= GUID_random();
1719 * if the schema version indicates w2k3, then
1720 * also send some w2k3 specific attributes
1722 if (s
->forest
.schema_object_version
>= 30) {
1728 r
= talloc_zero(s
, struct drsuapi_DsAddEntry
);
1729 if (composite_nomem(r
, c
)) return;
1731 /* setup identifier */
1732 identifier
= talloc(r
, struct drsuapi_DsReplicaObjectIdentifier
);
1733 if (composite_nomem(identifier
, c
)) return;
1734 identifier
->guid
= GUID_zero();
1735 identifier
->sid
= s
->zero_sid
;
1736 identifier
->dn
= talloc_asprintf(identifier
, "CN=NTDS Settings,%s",
1737 s
->dest_dsa
.server_dn_str
);
1738 if (composite_nomem(identifier
->dn
, c
)) return;
1740 /* allocate attribute array */
1742 attrs
= talloc_array(r
, struct drsuapi_DsReplicaAttribute
, num_attrs
);
1743 if (composite_nomem(attrs
, c
)) return;
1745 /* ntSecurityDescriptor */
1747 struct drsuapi_DsAttributeValue
*vs
;
1749 struct security_descriptor
*v
;
1750 struct dom_sid
*domain_admins_sid
;
1751 const char *domain_admins_sid_str
;
1753 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
1754 if (composite_nomem(vs
, c
)) return;
1756 vd
= talloc_array(vs
, DATA_BLOB
, 1);
1757 if (composite_nomem(vd
, c
)) return;
1759 domain_admins_sid
= dom_sid_add_rid(vs
, s
->domain
.sid
, DOMAIN_RID_ADMINS
);
1760 if (composite_nomem(domain_admins_sid
, c
)) return;
1762 domain_admins_sid_str
= dom_sid_string(domain_admins_sid
, domain_admins_sid
);
1763 if (composite_nomem(domain_admins_sid_str
, c
)) return;
1765 v
= security_descriptor_dacl_create(vd
,
1767 /* owner: domain admins */
1768 domain_admins_sid_str
,
1769 /* owner group: domain admins */
1770 domain_admins_sid_str
,
1771 /* authenticated users */
1772 SID_NT_AUTHENTICATED_USERS
,
1773 SEC_ACE_TYPE_ACCESS_ALLOWED
,
1774 SEC_STD_READ_CONTROL
|
1777 SEC_ADS_LIST_OBJECT
,
1780 domain_admins_sid_str
,
1781 SEC_ACE_TYPE_ACCESS_ALLOWED
,
1783 SEC_ADS_CREATE_CHILD
|
1785 SEC_ADS_SELF_WRITE
|
1787 SEC_ADS_WRITE_PROP
|
1788 SEC_ADS_DELETE_TREE
|
1789 SEC_ADS_LIST_OBJECT
|
1790 SEC_ADS_CONTROL_ACCESS
,
1794 SEC_ACE_TYPE_ACCESS_ALLOWED
,
1796 SEC_ADS_CREATE_CHILD
|
1797 SEC_ADS_DELETE_CHILD
|
1799 SEC_ADS_SELF_WRITE
|
1801 SEC_ADS_WRITE_PROP
|
1802 SEC_ADS_DELETE_TREE
|
1803 SEC_ADS_LIST_OBJECT
|
1804 SEC_ADS_CONTROL_ACCESS
,
1808 if (composite_nomem(v
, c
)) return;
1810 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, v
,(ndr_push_flags_fn_t
)ndr_push_security_descriptor
);
1811 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1812 c
->status
= ndr_map_error2ntstatus(ndr_err
);
1813 if (!composite_is_ok(c
)) return;
1816 vs
[0].blob
= &vd
[0];
1818 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_ntSecurityDescriptor
;
1819 attrs
[i
].value_ctr
.num_values
= 1;
1820 attrs
[i
].value_ctr
.values
= vs
;
1825 /* objectClass: nTDSDSA */
1827 struct drsuapi_DsAttributeValue
*vs
;
1830 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
1831 if (composite_nomem(vs
, c
)) return;
1833 vd
= talloc_array(vs
, DATA_BLOB
, 1);
1834 if (composite_nomem(vd
, c
)) return;
1836 vd
[0] = data_blob_talloc(vd
, NULL
, 4);
1837 if (composite_nomem(vd
[0].data
, c
)) return;
1839 /* value for nTDSDSA */
1840 SIVAL(vd
[0].data
, 0, 0x0017002F);
1842 vs
[0].blob
= &vd
[0];
1844 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_objectClass
;
1845 attrs
[i
].value_ctr
.num_values
= 1;
1846 attrs
[i
].value_ctr
.values
= vs
;
1851 /* objectCategory: CN=NTDS-DSA,CN=Schema,... */
1853 struct drsuapi_DsAttributeValue
*vs
;
1855 struct drsuapi_DsReplicaObjectIdentifier3 v
[1];
1857 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
1858 if (composite_nomem(vs
, c
)) return;
1860 vd
= talloc_array(vs
, DATA_BLOB
, 1);
1861 if (composite_nomem(vd
, c
)) return;
1863 v
[0].guid
= GUID_zero();
1864 v
[0].sid
= s
->zero_sid
;
1865 v
[0].dn
= talloc_asprintf(vd
, "CN=NTDS-DSA,%s",
1866 s
->forest
.schema_dn_str
);
1867 if (composite_nomem(v
[0].dn
, c
)) return;
1869 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, &v
[0],
1870 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
1871 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1872 c
->status
= ndr_map_error2ntstatus(ndr_err
);
1873 if (!composite_is_ok(c
)) return;
1876 vs
[0].blob
= &vd
[0];
1878 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_objectCategory
;
1879 attrs
[i
].value_ctr
.num_values
= 1;
1880 attrs
[i
].value_ctr
.values
= vs
;
1885 /* invocationId: random guid */
1887 struct drsuapi_DsAttributeValue
*vs
;
1889 const struct GUID
*v
;
1891 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
1892 if (composite_nomem(vs
, c
)) return;
1894 vd
= talloc_array(vs
, DATA_BLOB
, 1);
1895 if (composite_nomem(vd
, c
)) return;
1897 v
= &s
->dest_dsa
.invocation_id
;
1899 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, v
, (ndr_push_flags_fn_t
)ndr_push_GUID
);
1900 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1901 c
->status
= ndr_map_error2ntstatus(ndr_err
);
1902 if (!composite_is_ok(c
)) return;
1905 vs
[0].blob
= &vd
[0];
1907 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_invocationId
;
1908 attrs
[i
].value_ctr
.num_values
= 1;
1909 attrs
[i
].value_ctr
.values
= vs
;
1914 /* hasMasterNCs: ... */
1916 struct drsuapi_DsAttributeValue
*vs
;
1918 struct drsuapi_DsReplicaObjectIdentifier3 v
[3];
1920 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 3);
1921 if (composite_nomem(vs
, c
)) return;
1923 vd
= talloc_array(vs
, DATA_BLOB
, 3);
1924 if (composite_nomem(vd
, c
)) return;
1926 v
[0].guid
= GUID_zero();
1927 v
[0].sid
= s
->zero_sid
;
1928 v
[0].dn
= s
->forest
.config_dn_str
;
1930 v
[1].guid
= GUID_zero();
1931 v
[1].sid
= s
->zero_sid
;
1932 v
[1].dn
= s
->domain
.dn_str
;
1934 v
[2].guid
= GUID_zero();
1935 v
[2].sid
= s
->zero_sid
;
1936 v
[2].dn
= s
->forest
.schema_dn_str
;
1938 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, &v
[0],
1939 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
1940 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1941 c
->status
= ndr_map_error2ntstatus(ndr_err
);
1942 if (!composite_is_ok(c
)) return;
1945 ndr_err
= ndr_push_struct_blob(&vd
[1], vd
, iconv_convenience
, &v
[1],
1946 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
1947 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1948 c
->status
= ndr_map_error2ntstatus(ndr_err
);
1949 if (!composite_is_ok(c
)) return;
1952 ndr_err
= ndr_push_struct_blob(&vd
[2], vd
, iconv_convenience
, &v
[2],
1953 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
1954 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1955 c
->status
= ndr_map_error2ntstatus(ndr_err
);
1956 if (!composite_is_ok(c
)) return;
1959 vs
[0].blob
= &vd
[0];
1960 vs
[1].blob
= &vd
[1];
1961 vs
[2].blob
= &vd
[2];
1963 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_hasMasterNCs
;
1964 attrs
[i
].value_ctr
.num_values
= 3;
1965 attrs
[i
].value_ctr
.values
= vs
;
1970 /* msDS-hasMasterNCs: ... */
1972 struct drsuapi_DsAttributeValue
*vs
;
1974 struct drsuapi_DsReplicaObjectIdentifier3 v
[3];
1976 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 3);
1977 if (composite_nomem(vs
, c
)) return;
1979 vd
= talloc_array(vs
, DATA_BLOB
, 3);
1980 if (composite_nomem(vd
, c
)) return;
1982 v
[0].guid
= GUID_zero();
1983 v
[0].sid
= s
->zero_sid
;
1984 v
[0].dn
= s
->forest
.config_dn_str
;
1986 v
[1].guid
= GUID_zero();
1987 v
[1].sid
= s
->zero_sid
;
1988 v
[1].dn
= s
->domain
.dn_str
;
1990 v
[2].guid
= GUID_zero();
1991 v
[2].sid
= s
->zero_sid
;
1992 v
[2].dn
= s
->forest
.schema_dn_str
;
1994 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, &v
[0],
1995 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
1996 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
1997 c
->status
= ndr_map_error2ntstatus(ndr_err
);
1998 if (!composite_is_ok(c
)) return;
2001 ndr_err
= ndr_push_struct_blob(&vd
[1], vd
, iconv_convenience
, &v
[1],
2002 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
2003 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
2004 c
->status
= ndr_map_error2ntstatus(ndr_err
);
2005 if (!composite_is_ok(c
)) return;
2008 ndr_err
= ndr_push_struct_blob(&vd
[2], vd
, iconv_convenience
, &v
[2],
2009 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
2010 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
2011 c
->status
= ndr_map_error2ntstatus(ndr_err
);
2012 if (!composite_is_ok(c
)) return;
2015 vs
[0].blob
= &vd
[0];
2016 vs
[1].blob
= &vd
[1];
2017 vs
[2].blob
= &vd
[2];
2019 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_msDS_hasMasterNCs
;
2020 attrs
[i
].value_ctr
.num_values
= 3;
2021 attrs
[i
].value_ctr
.values
= vs
;
2026 /* dMDLocation: CN=Schema,... */
2028 struct drsuapi_DsAttributeValue
*vs
;
2030 struct drsuapi_DsReplicaObjectIdentifier3 v
[1];
2032 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
2033 if (composite_nomem(vs
, c
)) return;
2035 vd
= talloc_array(vs
, DATA_BLOB
, 1);
2036 if (composite_nomem(vd
, c
)) return;
2038 v
[0].guid
= GUID_zero();
2039 v
[0].sid
= s
->zero_sid
;
2040 v
[0].dn
= s
->forest
.schema_dn_str
;
2042 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, &v
[0],
2043 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
2044 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
2045 c
->status
= ndr_map_error2ntstatus(ndr_err
);
2046 if (!composite_is_ok(c
)) return;
2049 vs
[0].blob
= &vd
[0];
2051 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_dMDLocation
;
2052 attrs
[i
].value_ctr
.num_values
= 1;
2053 attrs
[i
].value_ctr
.values
= vs
;
2058 /* msDS-HasDomainNCs: <domain_partition> */
2060 struct drsuapi_DsAttributeValue
*vs
;
2062 struct drsuapi_DsReplicaObjectIdentifier3 v
[1];
2064 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
2065 if (composite_nomem(vs
, c
)) return;
2067 vd
= talloc_array(vs
, DATA_BLOB
, 1);
2068 if (composite_nomem(vd
, c
)) return;
2070 v
[0].guid
= GUID_zero();
2071 v
[0].sid
= s
->zero_sid
;
2072 v
[0].dn
= s
->domain
.dn_str
;
2074 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, &v
[0],
2075 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
2076 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
2077 c
->status
= ndr_map_error2ntstatus(ndr_err
);
2078 if (!composite_is_ok(c
)) return;
2081 vs
[0].blob
= &vd
[0];
2083 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_msDS_HasDomainNCs
;
2084 attrs
[i
].value_ctr
.num_values
= 1;
2085 attrs
[i
].value_ctr
.values
= vs
;
2090 /* msDS-Behavior-Version */
2092 struct drsuapi_DsAttributeValue
*vs
;
2095 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
2096 if (composite_nomem(vs
, c
)) return;
2098 vd
= talloc_array(vs
, DATA_BLOB
, 1);
2099 if (composite_nomem(vd
, c
)) return;
2101 vd
[0] = data_blob_talloc(vd
, NULL
, 4);
2102 if (composite_nomem(vd
[0].data
, c
)) return;
2104 SIVAL(vd
[0].data
, 0, DS_BEHAVIOR_WIN2008
);
2106 vs
[0].blob
= &vd
[0];
2108 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_msDS_Behavior_Version
;
2109 attrs
[i
].value_ctr
.num_values
= 1;
2110 attrs
[i
].value_ctr
.values
= vs
;
2117 struct drsuapi_DsAttributeValue
*vs
;
2120 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
2121 if (composite_nomem(vs
, c
)) return;
2123 vd
= talloc_array(vs
, DATA_BLOB
, 1);
2124 if (composite_nomem(vd
, c
)) return;
2126 vd
[0] = data_blob_talloc(vd
, NULL
, 4);
2127 if (composite_nomem(vd
[0].data
, c
)) return;
2129 SIVAL(vd
[0].data
, 0, SYSTEM_FLAG_DISALLOW_MOVE_ON_DELETE
);
2131 vs
[0].blob
= &vd
[0];
2133 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_systemFlags
;
2134 attrs
[i
].value_ctr
.num_values
= 1;
2135 attrs
[i
].value_ctr
.values
= vs
;
2140 /* serverReference: ... */
2142 struct drsuapi_DsAttributeValue
*vs
;
2144 struct drsuapi_DsReplicaObjectIdentifier3 v
[1];
2146 vs
= talloc_array(attrs
, struct drsuapi_DsAttributeValue
, 1);
2147 if (composite_nomem(vs
, c
)) return;
2149 vd
= talloc_array(vs
, DATA_BLOB
, 1);
2150 if (composite_nomem(vd
, c
)) return;
2152 v
[0].guid
= GUID_zero();
2153 v
[0].sid
= s
->zero_sid
;
2154 v
[0].dn
= s
->dest_dsa
.computer_dn_str
;
2156 ndr_err
= ndr_push_struct_blob(&vd
[0], vd
, iconv_convenience
, &v
[0],
2157 (ndr_push_flags_fn_t
)ndr_push_drsuapi_DsReplicaObjectIdentifier3
);
2158 if (!NDR_ERR_CODE_IS_SUCCESS(ndr_err
)) {
2159 c
->status
= ndr_map_error2ntstatus(ndr_err
);
2160 if (!composite_is_ok(c
)) return;
2163 vs
[0].blob
= &vd
[0];
2165 attrs
[i
].attid
= DRSUAPI_ATTRIBUTE_serverReference
;
2166 attrs
[i
].value_ctr
.num_values
= 1;
2167 attrs
[i
].value_ctr
.values
= vs
;
2172 /* truncate the attribute list to the attribute count we have filled in */
2175 /* setup request structure */
2176 r
->in
.bind_handle
= &s
->drsuapi1
.bind_handle
;
2178 r
->in
.req
= talloc(s
, union drsuapi_DsAddEntryRequest
);
2179 r
->in
.req
->req2
.first_object
.next_object
= NULL
;
2180 r
->in
.req
->req2
.first_object
.object
.identifier
= identifier
;
2181 r
->in
.req
->req2
.first_object
.object
.flags
= 0x00000000;
2182 r
->in
.req
->req2
.first_object
.object
.attribute_ctr
.num_attributes
= num_attrs
;
2183 r
->in
.req
->req2
.first_object
.object
.attribute_ctr
.attributes
= attrs
;
2185 r
->out
.level_out
= talloc(s
, int32_t);
2186 r
->out
.ctr
= talloc(s
, union drsuapi_DsAddEntryCtr
);
2188 req
= dcerpc_drsuapi_DsAddEntry_send(s
->drsuapi1
.pipe
, r
, r
);
2189 composite_continue_rpc(c
, req
, becomeDC_drsuapi1_add_entry_recv
, s
);
2192 static void becomeDC_drsuapi2_connect_recv(struct composite_context
*req
);
2193 static NTSTATUS
becomeDC_prepare_db(struct libnet_BecomeDC_state
*s
);
2195 static void becomeDC_drsuapi1_add_entry_recv(struct rpc_request
*req
)
2197 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2198 struct libnet_BecomeDC_state
);
2199 struct composite_context
*c
= s
->creq
;
2200 struct drsuapi_DsAddEntry
*r
= talloc_get_type(req
->ndr
.struct_ptr
,
2201 struct drsuapi_DsAddEntry
);
2205 if (req
->p
->conn
->flags
& DCERPC_DEBUG_PRINT_OUT
) {
2209 c
->status
= dcerpc_ndr_request_recv(req
);
2210 if (!composite_is_ok(c
)) return;
2213 NDR_PRINT_OUT_DEBUG(drsuapi_DsAddEntry
, r
);
2216 if (!W_ERROR_IS_OK(r
->out
.result
)) {
2217 composite_error(c
, werror_to_ntstatus(r
->out
.result
));
2221 if (*r
->out
.level_out
== 3) {
2222 if (r
->out
.ctr
->ctr3
.count
!= 1) {
2225 if (r
->out
.ctr
->ctr3
.level
!= 1) {
2226 composite_error(c
, NT_STATUS_INVALID_NETWORK_RESPONSE
);
2230 if (!r
->out
.ctr
->ctr3
.error
) {
2231 composite_error(c
, NT_STATUS_INVALID_NETWORK_RESPONSE
);
2235 status
= r
->out
.ctr
->ctr3
.error
->info1
.status
;
2237 if (!r
->out
.ctr
->ctr3
.error
->info1
.info
) {
2238 composite_error(c
, werror_to_ntstatus(status
));
2242 /* see if we can get a more detailed error */
2243 switch (r
->out
.ctr
->ctr3
.error
->info1
.level
) {
2245 status
= r
->out
.ctr
->ctr3
.error
->info1
.info
->error1
.status
;
2251 status
= r
->out
.ctr
->ctr3
.error
->info1
.info
->errorX
.status
;
2255 composite_error(c
, werror_to_ntstatus(status
));
2259 s
->dest_dsa
.ntds_guid
= r
->out
.ctr
->ctr3
.objects
[0].guid
;
2260 } else if (*r
->out
.level_out
== 2) {
2261 if (r
->out
.ctr
->ctr2
.count
!= 1) {
2262 composite_error(c
, werror_to_ntstatus(r
->out
.ctr
->ctr2
.error
.status
));
2266 s
->dest_dsa
.ntds_guid
= r
->out
.ctr
->ctr2
.objects
[0].guid
;
2268 composite_error(c
, NT_STATUS_INVALID_NETWORK_RESPONSE
);
2274 s
->dest_dsa
.ntds_dn_str
= talloc_asprintf(s
, "CN=NTDS Settings,%s",
2275 s
->dest_dsa
.server_dn_str
);
2276 if (composite_nomem(s
->dest_dsa
.ntds_dn_str
, c
)) return;
2278 c
->status
= becomeDC_prepare_db(s
);
2279 if (!composite_is_ok(c
)) return;
2281 /* this avoids the epmapper lookup on the 2nd connection */
2282 binding_str
= dcerpc_binding_string(s
, s
->drsuapi1
.binding
);
2283 if (composite_nomem(binding_str
, c
)) return;
2285 c
->status
= dcerpc_parse_binding(s
, binding_str
, &s
->drsuapi2
.binding
);
2286 talloc_free(binding_str
);
2287 if (!composite_is_ok(c
)) return;
2289 /* w2k3 uses the same assoc_group_id as on the first connection, so we do */
2290 s
->drsuapi2
.binding
->assoc_group_id
= s
->drsuapi1
.pipe
->assoc_group_id
;
2292 becomeDC_drsuapi_connect_send(s
, &s
->drsuapi2
, becomeDC_drsuapi2_connect_recv
);
2295 static NTSTATUS
becomeDC_prepare_db(struct libnet_BecomeDC_state
*s
)
2297 if (!s
->callbacks
.prepare_db
) return NT_STATUS_OK
;
2299 s
->_pp
.domain
= &s
->domain
;
2300 s
->_pp
.forest
= &s
->forest
;
2301 s
->_pp
.source_dsa
= &s
->source_dsa
;
2302 s
->_pp
.dest_dsa
= &s
->dest_dsa
;
2304 return s
->callbacks
.prepare_db(s
->callbacks
.private_data
, &s
->_pp
);
2307 static void becomeDC_drsuapi2_bind_recv(struct rpc_request
*req
);
2309 static void becomeDC_drsuapi2_connect_recv(struct composite_context
*req
)
2311 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2312 struct libnet_BecomeDC_state
);
2313 struct composite_context
*c
= s
->creq
;
2315 c
->status
= dcerpc_pipe_connect_b_recv(req
, s
, &s
->drsuapi2
.pipe
);
2316 if (!composite_is_ok(c
)) return;
2318 c
->status
= gensec_session_key(s
->drsuapi2
.pipe
->conn
->security_state
.generic_state
,
2319 &s
->drsuapi2
.gensec_skey
);
2320 if (!composite_is_ok(c
)) return;
2322 becomeDC_drsuapi_bind_send(s
, &s
->drsuapi2
, becomeDC_drsuapi2_bind_recv
);
2325 static void becomeDC_drsuapi3_connect_recv(struct composite_context
*req
);
2327 static void becomeDC_drsuapi2_bind_recv(struct rpc_request
*req
)
2329 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2330 struct libnet_BecomeDC_state
);
2331 struct composite_context
*c
= s
->creq
;
2337 if (req
->p
->conn
->flags
& DCERPC_DEBUG_PRINT_OUT
) {
2341 c
->status
= dcerpc_ndr_request_recv(req
);
2342 if (!composite_is_ok(c
)) return;
2345 NDR_PRINT_OUT_DEBUG(drsuapi_DsBind
, &s
->drsuapi2
.bind_r
);
2348 status
= becomeDC_drsuapi_bind_recv(s
, &s
->drsuapi2
);
2349 if (!W_ERROR_IS_OK(status
)) {
2350 composite_error(c
, werror_to_ntstatus(status
));
2354 /* this avoids the epmapper lookup on the 3rd connection */
2355 binding_str
= dcerpc_binding_string(s
, s
->drsuapi1
.binding
);
2356 if (composite_nomem(binding_str
, c
)) return;
2358 c
->status
= dcerpc_parse_binding(s
, binding_str
, &s
->drsuapi3
.binding
);
2359 talloc_free(binding_str
);
2360 if (!composite_is_ok(c
)) return;
2362 /* w2k3 uses the same assoc_group_id as on the first connection, so we do */
2363 s
->drsuapi3
.binding
->assoc_group_id
= s
->drsuapi1
.pipe
->assoc_group_id
;
2364 /* w2k3 uses the concurrent multiplex feature on the 3rd connection, so we do */
2365 s
->drsuapi3
.binding
->flags
|= DCERPC_CONCURRENT_MULTIPLEX
;
2367 becomeDC_drsuapi_connect_send(s
, &s
->drsuapi3
, becomeDC_drsuapi3_connect_recv
);
2370 static void becomeDC_drsuapi3_pull_schema_send(struct libnet_BecomeDC_state
*s
);
2372 static void becomeDC_drsuapi3_connect_recv(struct composite_context
*req
)
2374 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2375 struct libnet_BecomeDC_state
);
2376 struct composite_context
*c
= s
->creq
;
2378 c
->status
= dcerpc_pipe_connect_b_recv(req
, s
, &s
->drsuapi3
.pipe
);
2379 if (!composite_is_ok(c
)) return;
2381 c
->status
= gensec_session_key(s
->drsuapi3
.pipe
->conn
->security_state
.generic_state
,
2382 &s
->drsuapi3
.gensec_skey
);
2383 if (!composite_is_ok(c
)) return;
2385 becomeDC_drsuapi3_pull_schema_send(s
);
2388 static void becomeDC_drsuapi_pull_partition_send(struct libnet_BecomeDC_state
*s
,
2389 struct becomeDC_drsuapi
*drsuapi_h
,
2390 struct becomeDC_drsuapi
*drsuapi_p
,
2391 struct libnet_BecomeDC_Partition
*partition
,
2392 void (*recv_fn
)(struct rpc_request
*req
))
2394 struct composite_context
*c
= s
->creq
;
2395 struct rpc_request
*req
;
2396 struct drsuapi_DsGetNCChanges
*r
;
2398 r
= talloc(s
, struct drsuapi_DsGetNCChanges
);
2399 if (composite_nomem(r
, c
)) return;
2401 r
->out
.level_out
= talloc(r
, int32_t);
2402 if (composite_nomem(r
->out
.level_out
, c
)) return;
2403 r
->in
.req
= talloc(r
, union drsuapi_DsGetNCChangesRequest
);
2404 if (composite_nomem(r
->in
.req
, c
)) return;
2405 r
->out
.ctr
= talloc(r
, union drsuapi_DsGetNCChangesCtr
);
2406 if (composite_nomem(r
->out
.ctr
, c
)) return;
2408 r
->in
.bind_handle
= &drsuapi_h
->bind_handle
;
2409 if (drsuapi_h
->remote_info28
.supported_extensions
& DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8
) {
2411 r
->in
.req
->req8
.destination_dsa_guid
= partition
->destination_dsa_guid
;
2412 r
->in
.req
->req8
.source_dsa_invocation_id
= partition
->source_dsa_invocation_id
;
2413 r
->in
.req
->req8
.naming_context
= &partition
->nc
;
2414 r
->in
.req
->req8
.highwatermark
= partition
->highwatermark
;
2415 r
->in
.req
->req8
.uptodateness_vector
= NULL
;
2416 r
->in
.req
->req8
.replica_flags
= partition
->replica_flags
;
2417 r
->in
.req
->req8
.max_object_count
= 133;
2418 r
->in
.req
->req8
.max_ndr_size
= 1336811;
2419 r
->in
.req
->req8
.extended_op
= DRSUAPI_EXOP_NONE
;
2420 r
->in
.req
->req8
.fsmo_info
= 0;
2421 r
->in
.req
->req8
.partial_attribute_set
= NULL
;
2422 r
->in
.req
->req8
.partial_attribute_set_ex
= NULL
;
2423 r
->in
.req
->req8
.mapping_ctr
.num_mappings
= 0;
2424 r
->in
.req
->req8
.mapping_ctr
.mappings
= NULL
;
2427 r
->in
.req
->req5
.destination_dsa_guid
= partition
->destination_dsa_guid
;
2428 r
->in
.req
->req5
.source_dsa_invocation_id
= partition
->source_dsa_invocation_id
;
2429 r
->in
.req
->req5
.naming_context
= &partition
->nc
;
2430 r
->in
.req
->req5
.highwatermark
= partition
->highwatermark
;
2431 r
->in
.req
->req5
.uptodateness_vector
= NULL
;
2432 r
->in
.req
->req5
.replica_flags
= partition
->replica_flags
;
2433 r
->in
.req
->req5
.max_object_count
= 133;
2434 r
->in
.req
->req5
.max_ndr_size
= 1336770;
2435 r
->in
.req
->req5
.extended_op
= DRSUAPI_EXOP_NONE
;
2436 r
->in
.req
->req5
.fsmo_info
= 0;
2440 * we should try to use the drsuapi_p->pipe here, as w2k3 does
2441 * but it seems that some extra flags in the DCERPC Bind call
2442 * are needed for it. Or the same KRB5 TGS is needed on both
2445 req
= dcerpc_drsuapi_DsGetNCChanges_send(drsuapi_p
->pipe
, r
, r
);
2446 composite_continue_rpc(c
, req
, recv_fn
, s
);
2449 static WERROR
becomeDC_drsuapi_pull_partition_recv(struct libnet_BecomeDC_state
*s
,
2450 struct becomeDC_drsuapi
*drsuapi_h
,
2451 struct becomeDC_drsuapi
*drsuapi_p
,
2452 struct libnet_BecomeDC_Partition
*partition
,
2453 struct drsuapi_DsGetNCChanges
*r
)
2455 uint32_t ctr_level
= 0;
2456 struct drsuapi_DsGetNCChangesCtr1
*ctr1
= NULL
;
2457 struct drsuapi_DsGetNCChangesCtr6
*ctr6
= NULL
;
2458 struct GUID
*source_dsa_guid
;
2459 struct GUID
*source_dsa_invocation_id
;
2460 struct drsuapi_DsReplicaHighWaterMark
*new_highwatermark
;
2461 bool more_data
= false;
2464 if (!W_ERROR_IS_OK(r
->out
.result
)) {
2465 return r
->out
.result
;
2468 if (*r
->out
.level_out
== 1) {
2470 ctr1
= &r
->out
.ctr
->ctr1
;
2471 } else if (*r
->out
.level_out
== 2 &&
2472 r
->out
.ctr
->ctr2
.mszip1
.ts
) {
2474 ctr1
= &r
->out
.ctr
->ctr2
.mszip1
.ts
->ctr1
;
2475 } else if (*r
->out
.level_out
== 6) {
2477 ctr6
= &r
->out
.ctr
->ctr6
;
2478 } else if (*r
->out
.level_out
== 7 &&
2479 r
->out
.ctr
->ctr7
.level
== 6 &&
2480 r
->out
.ctr
->ctr7
.type
== DRSUAPI_COMPRESSION_TYPE_MSZIP
&&
2481 r
->out
.ctr
->ctr7
.ctr
.mszip6
.ts
) {
2483 ctr6
= &r
->out
.ctr
->ctr7
.ctr
.mszip6
.ts
->ctr6
;
2484 } else if (*r
->out
.level_out
== 7 &&
2485 r
->out
.ctr
->ctr7
.level
== 6 &&
2486 r
->out
.ctr
->ctr7
.type
== DRSUAPI_COMPRESSION_TYPE_XPRESS
&&
2487 r
->out
.ctr
->ctr7
.ctr
.xpress6
.ts
) {
2489 ctr6
= &r
->out
.ctr
->ctr7
.ctr
.xpress6
.ts
->ctr6
;
2491 return WERR_BAD_NET_RESP
;
2494 if (!ctr1
&& ! ctr6
) {
2495 return WERR_BAD_NET_RESP
;
2498 if (ctr_level
== 6) {
2499 if (!W_ERROR_IS_OK(ctr6
->drs_error
)) {
2500 return ctr6
->drs_error
;
2504 switch (ctr_level
) {
2506 source_dsa_guid
= &ctr1
->source_dsa_guid
;
2507 source_dsa_invocation_id
= &ctr1
->source_dsa_invocation_id
;
2508 new_highwatermark
= &ctr1
->new_highwatermark
;
2509 more_data
= ctr1
->more_data
;
2512 source_dsa_guid
= &ctr6
->source_dsa_guid
;
2513 source_dsa_invocation_id
= &ctr6
->source_dsa_invocation_id
;
2514 new_highwatermark
= &ctr6
->new_highwatermark
;
2515 more_data
= ctr6
->more_data
;
2519 partition
->highwatermark
= *new_highwatermark
;
2520 partition
->source_dsa_guid
= *source_dsa_guid
;
2521 partition
->source_dsa_invocation_id
= *source_dsa_invocation_id
;
2522 partition
->more_data
= more_data
;
2524 if (!partition
->store_chunk
) return WERR_OK
;
2526 s
->_sc
.domain
= &s
->domain
;
2527 s
->_sc
.forest
= &s
->forest
;
2528 s
->_sc
.source_dsa
= &s
->source_dsa
;
2529 s
->_sc
.dest_dsa
= &s
->dest_dsa
;
2530 s
->_sc
.partition
= partition
;
2531 s
->_sc
.ctr_level
= ctr_level
;
2535 * we need to use the drsuapi_p->gensec_skey here,
2536 * when we use drsuapi_p->pipe in the for this request
2538 s
->_sc
.gensec_skey
= &drsuapi_p
->gensec_skey
;
2540 nt_status
= partition
->store_chunk(s
->callbacks
.private_data
, &s
->_sc
);
2541 if (!NT_STATUS_IS_OK(nt_status
)) {
2542 return ntstatus_to_werror(nt_status
);
2548 static void becomeDC_drsuapi3_pull_schema_recv(struct rpc_request
*req
);
2550 static void becomeDC_drsuapi3_pull_schema_send(struct libnet_BecomeDC_state
*s
)
2552 s
->schema_part
.nc
.guid
= GUID_zero();
2553 s
->schema_part
.nc
.sid
= s
->zero_sid
;
2554 s
->schema_part
.nc
.dn
= s
->forest
.schema_dn_str
;
2556 s
->schema_part
.destination_dsa_guid
= s
->drsuapi2
.bind_guid
;
2558 s
->schema_part
.replica_flags
= DRSUAPI_DS_REPLICA_NEIGHBOUR_WRITEABLE
2559 | DRSUAPI_DS_REPLICA_NEIGHBOUR_SYNC_ON_STARTUP
2560 | DRSUAPI_DS_REPLICA_NEIGHBOUR_DO_SCHEDULED_SYNCS
2561 | DRSUAPI_DS_REPLICA_NEIGHBOUR_FULL_IN_PROGRESS
2562 | DRSUAPI_DS_REPLICA_NEIGHBOUR_NEVER_SYNCED
2563 | DRSUAPI_DS_REPLICA_NEIGHBOUR_COMPRESS_CHANGES
;
2565 s
->schema_part
.store_chunk
= s
->callbacks
.schema_chunk
;
2567 becomeDC_drsuapi_pull_partition_send(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->schema_part
,
2568 becomeDC_drsuapi3_pull_schema_recv
);
2571 static void becomeDC_drsuapi3_pull_config_send(struct libnet_BecomeDC_state
*s
);
2573 static void becomeDC_drsuapi3_pull_schema_recv(struct rpc_request
*req
)
2575 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2576 struct libnet_BecomeDC_state
);
2577 struct composite_context
*c
= s
->creq
;
2578 struct drsuapi_DsGetNCChanges
*r
= talloc_get_type(req
->ndr
.struct_ptr
,
2579 struct drsuapi_DsGetNCChanges
);
2584 if (req
->p
->conn
->flags
& DCERPC_DEBUG_PRINT_OUT
) {
2588 c
->status
= dcerpc_ndr_request_recv(req
);
2589 if (!composite_is_ok(c
)) return;
2592 NDR_PRINT_OUT_DEBUG(drsuapi_DsGetNCChanges
, r
);
2595 status
= becomeDC_drsuapi_pull_partition_recv(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->schema_part
, r
);
2596 if (!W_ERROR_IS_OK(status
)) {
2597 composite_error(c
, werror_to_ntstatus(status
));
2603 if (s
->schema_part
.more_data
) {
2604 becomeDC_drsuapi_pull_partition_send(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->schema_part
,
2605 becomeDC_drsuapi3_pull_schema_recv
);
2609 becomeDC_drsuapi3_pull_config_send(s
);
2612 static void becomeDC_drsuapi3_pull_config_recv(struct rpc_request
*req
);
2614 static void becomeDC_drsuapi3_pull_config_send(struct libnet_BecomeDC_state
*s
)
2616 s
->config_part
.nc
.guid
= GUID_zero();
2617 s
->config_part
.nc
.sid
= s
->zero_sid
;
2618 s
->config_part
.nc
.dn
= s
->forest
.config_dn_str
;
2620 s
->config_part
.destination_dsa_guid
= s
->drsuapi2
.bind_guid
;
2622 s
->config_part
.replica_flags
= DRSUAPI_DS_REPLICA_NEIGHBOUR_WRITEABLE
2623 | DRSUAPI_DS_REPLICA_NEIGHBOUR_SYNC_ON_STARTUP
2624 | DRSUAPI_DS_REPLICA_NEIGHBOUR_DO_SCHEDULED_SYNCS
2625 | DRSUAPI_DS_REPLICA_NEIGHBOUR_FULL_IN_PROGRESS
2626 | DRSUAPI_DS_REPLICA_NEIGHBOUR_NEVER_SYNCED
2627 | DRSUAPI_DS_REPLICA_NEIGHBOUR_COMPRESS_CHANGES
;
2629 s
->config_part
.store_chunk
= s
->callbacks
.config_chunk
;
2631 becomeDC_drsuapi_pull_partition_send(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->config_part
,
2632 becomeDC_drsuapi3_pull_config_recv
);
2635 static void becomeDC_drsuapi3_pull_config_recv(struct rpc_request
*req
)
2637 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2638 struct libnet_BecomeDC_state
);
2639 struct composite_context
*c
= s
->creq
;
2640 struct drsuapi_DsGetNCChanges
*r
= talloc_get_type(req
->ndr
.struct_ptr
,
2641 struct drsuapi_DsGetNCChanges
);
2646 if (req
->p
->conn
->flags
& DCERPC_DEBUG_PRINT_OUT
) {
2650 c
->status
= dcerpc_ndr_request_recv(req
);
2651 if (!composite_is_ok(c
)) return;
2654 NDR_PRINT_OUT_DEBUG(drsuapi_DsGetNCChanges
, r
);
2657 status
= becomeDC_drsuapi_pull_partition_recv(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->config_part
, r
);
2658 if (!W_ERROR_IS_OK(status
)) {
2659 composite_error(c
, werror_to_ntstatus(status
));
2665 if (s
->config_part
.more_data
) {
2666 becomeDC_drsuapi_pull_partition_send(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->config_part
,
2667 becomeDC_drsuapi3_pull_config_recv
);
2671 becomeDC_connect_ldap2(s
);
2674 static void becomeDC_drsuapi3_pull_domain_recv(struct rpc_request
*req
);
2676 static void becomeDC_drsuapi3_pull_domain_send(struct libnet_BecomeDC_state
*s
)
2678 s
->domain_part
.nc
.guid
= GUID_zero();
2679 s
->domain_part
.nc
.sid
= s
->zero_sid
;
2680 s
->domain_part
.nc
.dn
= s
->domain
.dn_str
;
2682 s
->domain_part
.destination_dsa_guid
= s
->drsuapi2
.bind_guid
;
2684 s
->domain_part
.replica_flags
= DRSUAPI_DS_REPLICA_NEIGHBOUR_WRITEABLE
2685 | DRSUAPI_DS_REPLICA_NEIGHBOUR_SYNC_ON_STARTUP
2686 | DRSUAPI_DS_REPLICA_NEIGHBOUR_DO_SCHEDULED_SYNCS
2687 | DRSUAPI_DS_REPLICA_NEIGHBOUR_FULL_IN_PROGRESS
2688 | DRSUAPI_DS_REPLICA_NEIGHBOUR_NEVER_SYNCED
2689 | DRSUAPI_DS_REPLICA_NEIGHBOUR_COMPRESS_CHANGES
;
2691 s
->domain_part
.store_chunk
= s
->callbacks
.domain_chunk
;
2693 becomeDC_drsuapi_pull_partition_send(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->domain_part
,
2694 becomeDC_drsuapi3_pull_domain_recv
);
2697 static void becomeDC_drsuapi_update_refs_send(struct libnet_BecomeDC_state
*s
,
2698 struct becomeDC_drsuapi
*drsuapi
,
2699 struct libnet_BecomeDC_Partition
*partition
,
2700 void (*recv_fn
)(struct rpc_request
*req
));
2701 static void becomeDC_drsuapi2_update_refs_schema_recv(struct rpc_request
*req
);
2703 static void becomeDC_drsuapi3_pull_domain_recv(struct rpc_request
*req
)
2705 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2706 struct libnet_BecomeDC_state
);
2707 struct composite_context
*c
= s
->creq
;
2708 struct drsuapi_DsGetNCChanges
*r
= talloc_get_type(req
->ndr
.struct_ptr
,
2709 struct drsuapi_DsGetNCChanges
);
2713 if (req
->p
->conn
->flags
& DCERPC_DEBUG_PRINT_OUT
) {
2717 c
->status
= dcerpc_ndr_request_recv(req
);
2718 if (!composite_is_ok(c
)) return;
2721 NDR_PRINT_OUT_DEBUG(drsuapi_DsGetNCChanges
, r
);
2724 status
= becomeDC_drsuapi_pull_partition_recv(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->domain_part
, r
);
2725 if (!W_ERROR_IS_OK(status
)) {
2726 composite_error(c
, werror_to_ntstatus(status
));
2732 if (s
->domain_part
.more_data
) {
2733 becomeDC_drsuapi_pull_partition_send(s
, &s
->drsuapi2
, &s
->drsuapi3
, &s
->domain_part
,
2734 becomeDC_drsuapi3_pull_domain_recv
);
2738 becomeDC_drsuapi_update_refs_send(s
, &s
->drsuapi2
, &s
->schema_part
,
2739 becomeDC_drsuapi2_update_refs_schema_recv
);
2742 static void becomeDC_drsuapi_update_refs_send(struct libnet_BecomeDC_state
*s
,
2743 struct becomeDC_drsuapi
*drsuapi
,
2744 struct libnet_BecomeDC_Partition
*partition
,
2745 void (*recv_fn
)(struct rpc_request
*req
))
2747 struct composite_context
*c
= s
->creq
;
2748 struct rpc_request
*req
;
2749 struct drsuapi_DsReplicaUpdateRefs
*r
;
2750 const char *ntds_guid_str
;
2751 const char *ntds_dns_name
;
2753 r
= talloc(s
, struct drsuapi_DsReplicaUpdateRefs
);
2754 if (composite_nomem(r
, c
)) return;
2756 ntds_guid_str
= GUID_string(r
, &s
->dest_dsa
.ntds_guid
);
2757 if (composite_nomem(ntds_guid_str
, c
)) return;
2759 ntds_dns_name
= talloc_asprintf(r
, "%s._msdcs.%s",
2761 s
->domain
.dns_name
);
2762 if (composite_nomem(ntds_dns_name
, c
)) return;
2764 r
->in
.bind_handle
= &drsuapi
->bind_handle
;
2766 r
->in
.req
.req1
.naming_context
= &partition
->nc
;
2767 r
->in
.req
.req1
.dest_dsa_dns_name
= ntds_dns_name
;
2768 r
->in
.req
.req1
.dest_dsa_guid
= s
->dest_dsa
.ntds_guid
;
2769 r
->in
.req
.req1
.options
= DRSUAPI_DS_REPLICA_UPDATE_ADD_REFERENCE
2770 | DRSUAPI_DS_REPLICA_UPDATE_DELETE_REFERENCE
2771 | DRSUAPI_DS_REPLICA_UPDATE_0x00000010
;
2773 req
= dcerpc_drsuapi_DsReplicaUpdateRefs_send(drsuapi
->pipe
, r
, r
);
2774 composite_continue_rpc(c
, req
, recv_fn
, s
);
2777 static void becomeDC_drsuapi2_update_refs_config_recv(struct rpc_request
*req
);
2779 static void becomeDC_drsuapi2_update_refs_schema_recv(struct rpc_request
*req
)
2781 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2782 struct libnet_BecomeDC_state
);
2783 struct composite_context
*c
= s
->creq
;
2784 struct drsuapi_DsReplicaUpdateRefs
*r
= talloc_get_type(req
->ndr
.struct_ptr
,
2785 struct drsuapi_DsReplicaUpdateRefs
);
2788 if (req
->p
->conn
->flags
& DCERPC_DEBUG_PRINT_OUT
) {
2792 c
->status
= dcerpc_ndr_request_recv(req
);
2793 if (!composite_is_ok(c
)) return;
2796 NDR_PRINT_OUT_DEBUG(drsuapi_DsReplicaUpdateRefs
, r
);
2799 if (!W_ERROR_IS_OK(r
->out
.result
)) {
2800 composite_error(c
, werror_to_ntstatus(r
->out
.result
));
2806 becomeDC_drsuapi_update_refs_send(s
, &s
->drsuapi2
, &s
->config_part
,
2807 becomeDC_drsuapi2_update_refs_config_recv
);
2810 static void becomeDC_drsuapi2_update_refs_domain_recv(struct rpc_request
*req
);
2812 static void becomeDC_drsuapi2_update_refs_config_recv(struct rpc_request
*req
)
2814 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2815 struct libnet_BecomeDC_state
);
2816 struct composite_context
*c
= s
->creq
;
2817 struct drsuapi_DsReplicaUpdateRefs
*r
= talloc_get_type(req
->ndr
.struct_ptr
,
2818 struct drsuapi_DsReplicaUpdateRefs
);
2820 c
->status
= dcerpc_ndr_request_recv(req
);
2821 if (!composite_is_ok(c
)) return;
2823 if (!W_ERROR_IS_OK(r
->out
.result
)) {
2824 composite_error(c
, werror_to_ntstatus(r
->out
.result
));
2830 becomeDC_drsuapi_update_refs_send(s
, &s
->drsuapi2
, &s
->domain_part
,
2831 becomeDC_drsuapi2_update_refs_domain_recv
);
2834 static void becomeDC_drsuapi2_update_refs_domain_recv(struct rpc_request
*req
)
2836 struct libnet_BecomeDC_state
*s
= talloc_get_type(req
->async
.private_data
,
2837 struct libnet_BecomeDC_state
);
2838 struct composite_context
*c
= s
->creq
;
2839 struct drsuapi_DsReplicaUpdateRefs
*r
= talloc_get_type(req
->ndr
.struct_ptr
,
2840 struct drsuapi_DsReplicaUpdateRefs
);
2842 c
->status
= dcerpc_ndr_request_recv(req
);
2843 if (!composite_is_ok(c
)) return;
2845 if (!W_ERROR_IS_OK(r
->out
.result
)) {
2846 composite_error(c
, werror_to_ntstatus(r
->out
.result
));
2852 /* TODO: use DDNS updates and register dns names */
2856 static NTSTATUS
becomeDC_ldap2_modify_computer(struct libnet_BecomeDC_state
*s
)
2859 struct ldb_message
*msg
;
2861 uint32_t user_account_control
= UF_SERVER_TRUST_ACCOUNT
|
2862 UF_TRUSTED_FOR_DELEGATION
;
2864 /* as the value is already as we want it to be, we're done */
2865 if (s
->dest_dsa
.user_account_control
== user_account_control
) {
2866 return NT_STATUS_OK
;
2869 /* make a 'modify' msg, and only for serverReference */
2870 msg
= ldb_msg_new(s
);
2871 NT_STATUS_HAVE_NO_MEMORY(msg
);
2872 msg
->dn
= ldb_dn_new(msg
, s
->ldap2
.ldb
, s
->dest_dsa
.computer_dn_str
);
2873 NT_STATUS_HAVE_NO_MEMORY(msg
->dn
);
2875 ret
= ldb_msg_add_fmt(msg
, "userAccountControl", "%u", user_account_control
);
2878 return NT_STATUS_NO_MEMORY
;
2881 /* mark all the message elements (should be just one)
2882 as LDB_FLAG_MOD_REPLACE */
2883 for (i
=0;i
<msg
->num_elements
;i
++) {
2884 msg
->elements
[i
].flags
= LDB_FLAG_MOD_REPLACE
;
2887 ret
= ldb_modify(s
->ldap2
.ldb
, msg
);
2889 if (ret
!= LDB_SUCCESS
) {
2890 return NT_STATUS_LDAP(ret
);
2893 s
->dest_dsa
.user_account_control
= user_account_control
;
2895 return NT_STATUS_OK
;
2898 static NTSTATUS
becomeDC_ldap2_move_computer(struct libnet_BecomeDC_state
*s
)
2901 struct ldb_result
*r
;
2902 struct ldb_dn
*basedn
;
2903 struct ldb_dn
*old_dn
;
2904 struct ldb_dn
*new_dn
;
2905 static const char *_1_1_attrs
[] = {
2910 basedn
= ldb_dn_new_fmt(s
, s
->ldap2
.ldb
, "<WKGUID=a361b2ffffd211d1aa4b00c04fd7d83a,%s>",
2912 NT_STATUS_HAVE_NO_MEMORY(basedn
);
2914 ret
= ldb_search(s
->ldap2
.ldb
, s
, &r
, basedn
, LDB_SCOPE_BASE
,
2915 _1_1_attrs
, "(objectClass=*)");
2916 talloc_free(basedn
);
2917 if (ret
!= LDB_SUCCESS
) {
2918 return NT_STATUS_LDAP(ret
);
2919 } else if (r
->count
!= 1) {
2921 return NT_STATUS_INVALID_NETWORK_RESPONSE
;
2924 old_dn
= ldb_dn_new(r
, s
->ldap2
.ldb
, s
->dest_dsa
.computer_dn_str
);
2925 NT_STATUS_HAVE_NO_MEMORY(old_dn
);
2927 new_dn
= r
->msgs
[0]->dn
;
2929 if (!ldb_dn_add_child_fmt(new_dn
, "CN=%s", s
->dest_dsa
.netbios_name
)) {
2931 return NT_STATUS_NO_MEMORY
;
2934 if (ldb_dn_compare(old_dn
, new_dn
) == 0) {
2935 /* we don't need to rename if the old and new dn match */
2937 return NT_STATUS_OK
;
2940 ret
= ldb_rename(s
->ldap2
.ldb
, old_dn
, new_dn
);
2941 if (ret
!= LDB_SUCCESS
) {
2943 return NT_STATUS_LDAP(ret
);
2946 s
->dest_dsa
.computer_dn_str
= ldb_dn_alloc_linearized(s
, new_dn
);
2947 NT_STATUS_HAVE_NO_MEMORY(s
->dest_dsa
.computer_dn_str
);
2951 return NT_STATUS_OK
;
2954 static void becomeDC_connect_ldap2(struct libnet_BecomeDC_state
*s
)
2956 struct composite_context
*c
= s
->creq
;
2958 c
->status
= becomeDC_ldap_connect(s
, &s
->ldap2
);
2959 if (!composite_is_ok(c
)) return;
2961 c
->status
= becomeDC_ldap2_modify_computer(s
);
2962 if (!composite_is_ok(c
)) return;
2964 c
->status
= becomeDC_ldap2_move_computer(s
);
2965 if (!composite_is_ok(c
)) return;
2967 becomeDC_drsuapi3_pull_domain_send(s
);
2970 struct composite_context
*libnet_BecomeDC_send(struct libnet_context
*ctx
, TALLOC_CTX
*mem_ctx
, struct libnet_BecomeDC
*r
)
2972 struct composite_context
*c
;
2973 struct libnet_BecomeDC_state
*s
;
2976 c
= composite_create(mem_ctx
, ctx
->event_ctx
);
2977 if (c
== NULL
) return NULL
;
2979 s
= talloc_zero(c
, struct libnet_BecomeDC_state
);
2980 if (composite_nomem(s
, c
)) return c
;
2981 c
->private_data
= s
;
2986 s
->domain
.dns_name
= talloc_strdup(s
, r
->in
.domain_dns_name
);
2987 if (composite_nomem(s
->domain
.dns_name
, c
)) return c
;
2988 s
->domain
.netbios_name
= talloc_strdup(s
, r
->in
.domain_netbios_name
);
2989 if (composite_nomem(s
->domain
.netbios_name
, c
)) return c
;
2990 s
->domain
.sid
= dom_sid_dup(s
, r
->in
.domain_sid
);
2991 if (composite_nomem(s
->domain
.sid
, c
)) return c
;
2993 /* Source DSA input */
2994 s
->source_dsa
.address
= talloc_strdup(s
, r
->in
.source_dsa_address
);
2995 if (composite_nomem(s
->source_dsa
.address
, c
)) return c
;
2997 /* Destination DSA input */
2998 s
->dest_dsa
.netbios_name
= talloc_strdup(s
, r
->in
.dest_dsa_netbios_name
);
2999 if (composite_nomem(s
->dest_dsa
.netbios_name
, c
)) return c
;
3001 /* Destination DSA dns_name construction */
3002 tmp_name
= strlower_talloc(s
, s
->dest_dsa
.netbios_name
);
3003 if (composite_nomem(tmp_name
, c
)) return c
;
3004 tmp_name
= talloc_asprintf_append_buffer(tmp_name
, ".%s",s
->domain
.dns_name
);
3005 if (composite_nomem(tmp_name
, c
)) return c
;
3006 s
->dest_dsa
.dns_name
= tmp_name
;
3008 /* Callback function pointers */
3009 s
->callbacks
= r
->in
.callbacks
;
3011 becomeDC_send_cldap(s
);
3015 NTSTATUS
libnet_BecomeDC_recv(struct composite_context
*c
, TALLOC_CTX
*mem_ctx
, struct libnet_BecomeDC
*r
)
3019 status
= composite_wait(c
);
3021 ZERO_STRUCT(r
->out
);
3027 NTSTATUS
libnet_BecomeDC(struct libnet_context
*ctx
, TALLOC_CTX
*mem_ctx
, struct libnet_BecomeDC
*r
)
3030 struct composite_context
*c
;
3031 c
= libnet_BecomeDC_send(ctx
, mem_ctx
, r
);
3032 status
= libnet_BecomeDC_recv(c
, mem_ctx
, r
);