2 Unix SMB/CIFS mplementation.
4 DSDB replication service - FSMO role change
6 Copyright (C) Nadezhda Ivanova 2010
7 Copyright (C) Andrew Tridgell 2010
8 Copyright (C) Andrew Bartlett 2010
9 Copyright (C) Anatoliy Atanasov 2010
11 based on drepl_ridalloc.c
13 This program is free software; you can redistribute it and/or modify
14 it under the terms of the GNU General Public License as published by
15 the Free Software Foundation; either version 3 of the License, or
16 (at your option) any later version.
18 This program is distributed in the hope that it will be useful,
19 but WITHOUT ANY WARRANTY; without even the implied warranty of
20 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
21 GNU General Public License for more details.
23 You should have received a copy of the GNU General Public License
24 along with this program. If not, see <http://www.gnu.org/licenses/>.
29 #include "dsdb/samdb/samdb.h"
30 #include "smbd/service.h"
31 #include "dsdb/repl/drepl_service.h"
32 #include "param/param.h"
34 struct fsmo_role_state
{
35 struct irpc_message
*msg
;
36 struct drepl_takeFSMORole
*r
;
39 static void drepl_role_callback(struct dreplsrv_service
*service
,
41 enum drsuapi_DsExtendedError ext_err
,
44 struct fsmo_role_state
*fsmo
= talloc_get_type_abort(cb_data
, struct fsmo_role_state
);
45 if (!W_ERROR_IS_OK(werr
)) {
46 DEBUG(2,(__location__
": Failed role transfer - %s - extended_ret[0x%X]\n",
47 win_errstr(werr
), ext_err
));
49 DEBUG(2,(__location__
": Successful role transfer\n"));
51 fsmo
->r
->out
.result
= werr
;
52 irpc_send_reply(fsmo
->msg
, NT_STATUS_OK
);
56 see which role is we are asked to assume, initialize data and send request
58 NTSTATUS
drepl_take_FSMO_role(struct irpc_message
*msg
,
59 struct drepl_takeFSMORole
*r
)
61 struct dreplsrv_service
*service
= talloc_get_type(msg
->private_data
,
62 struct dreplsrv_service
);
63 struct ldb_dn
*role_owner_dn
, *fsmo_role_dn
;
64 TALLOC_CTX
*tmp_ctx
= talloc_new(service
);
65 uint64_t fsmo_info
= 0;
66 enum drsuapi_DsExtendedOperation extended_op
= DRSUAPI_EXOP_NONE
;
68 enum drepl_role_master role
= r
->in
.role
;
69 struct fsmo_role_state
*fsmo
;
73 werr
= dsdb_get_fsmo_role_info(tmp_ctx
, service
->samdb
, role
,
74 &fsmo_role_dn
, &role_owner_dn
);
75 if (!W_ERROR_IS_OK(werr
)) {
82 case DREPL_NAMING_MASTER
:
83 case DREPL_INFRASTRUCTURE_MASTER
:
84 case DREPL_SCHEMA_MASTER
:
85 extended_op
= DRSUAPI_EXOP_FSMO_REQ_ROLE
;
87 case DREPL_RID_MASTER
:
88 extended_op
= DRSUAPI_EXOP_FSMO_RID_REQ_ROLE
;
90 case DREPL_PDC_MASTER
:
91 extended_op
= DRSUAPI_EXOP_FSMO_REQ_PDC
;
94 DEBUG(0,("Unknown role %u in role transfer\n",
96 /* IRPC messages are trusted, so this really should not happen */
97 smb_panic("Unknown role despite dsdb_get_fsmo_role_info success");
100 ret
= samdb_dn_is_our_ntdsa(service
->samdb
, role_owner_dn
, &is_us
);
101 if (ret
!= LDB_SUCCESS
) {
102 DEBUG(0,("FSMO role check failed (failed to confirm if our ntdsDsa) for DN %s and owner %s \n",
103 ldb_dn_get_linearized(fsmo_role_dn
),
104 ldb_dn_get_linearized(role_owner_dn
)));
105 talloc_free(tmp_ctx
);
106 r
->out
.result
= WERR_DS_DRA_INTERNAL_ERROR
;
111 DEBUG(5,("FSMO role check failed, we already own DN %s with %s\n",
112 ldb_dn_get_linearized(fsmo_role_dn
),
113 ldb_dn_get_linearized(role_owner_dn
)));
114 r
->out
.result
= WERR_OK
;
115 talloc_free(tmp_ctx
);
119 fsmo
= talloc(msg
, struct fsmo_role_state
);
120 NT_STATUS_HAVE_NO_MEMORY(fsmo
);
125 werr
= drepl_request_extended_op(service
,
133 if (!W_ERROR_IS_OK(werr
)) {
134 r
->out
.result
= werr
;
135 talloc_free(tmp_ctx
);
139 /* mark this message to be answered later */
140 msg
->defer_reply
= true;
141 dreplsrv_run_pending_ops(service
);
142 talloc_free(tmp_ctx
);