2 Unix SMB/CIFS implementation.
6 Copyright (C) Andrew Tridgell 2005
8 This program is free software; you can redistribute it and/or modify
9 it under the terms of the GNU General Public License as published by
10 the Free Software Foundation; either version 3 of the License, or
11 (at your option) any later version.
13 This program is distributed in the hope that it will be useful,
14 but WITHOUT ANY WARRANTY; without even the implied warranty of
15 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
16 GNU General Public License for more details.
18 You should have received a copy of the GNU General Public License
19 along with this program. If not, see <http://www.gnu.org/licenses/>.
24 #include "lib/messaging/irpc.h"
25 #include "smbd/service_task.h"
26 #include "smbd/service.h"
27 #include "cldap_server/cldap_server.h"
28 #include "system/network.h"
29 #include "lib/socket/netif.h"
31 #include <ldb_errors.h>
32 #include "dsdb/samdb/samdb.h"
34 #include "auth/auth.h"
35 #include "param/param.h"
36 #include "../lib/tsocket/tsocket.h"
38 NTSTATUS
server_service_cldapd_init(void);
41 handle incoming cldap requests
43 static void cldapd_request_handler(struct cldap_socket
*cldap
,
45 struct cldap_incoming
*in
)
47 struct cldapd_server
*cldapd
= talloc_get_type(private_data
,
48 struct cldapd_server
);
49 struct ldap_SearchRequest
*search
;
51 if (in
->ldap_msg
->type
!= LDAP_TAG_SearchRequest
) {
52 DEBUG(0,("Invalid CLDAP request type %d from %s\n",
54 tsocket_address_string(in
->src
, in
)));
55 cldap_error_reply(cldap
, in
->ldap_msg
->messageid
, in
->src
,
56 LDAP_OPERATIONS_ERROR
, "Invalid CLDAP request");
61 search
= &in
->ldap_msg
->r
.SearchRequest
;
63 if (strcmp("", search
->basedn
) != 0) {
64 DEBUG(0,("Invalid CLDAP basedn '%s' from %s\n",
66 tsocket_address_string(in
->src
, in
)));
67 cldap_error_reply(cldap
, in
->ldap_msg
->messageid
, in
->src
,
68 LDAP_OPERATIONS_ERROR
, "Invalid CLDAP basedn");
73 if (search
->scope
!= LDAP_SEARCH_SCOPE_BASE
) {
74 DEBUG(0,("Invalid CLDAP scope %d from %s\n",
76 tsocket_address_string(in
->src
, in
)));
77 cldap_error_reply(cldap
, in
->ldap_msg
->messageid
, in
->src
,
78 LDAP_OPERATIONS_ERROR
, "Invalid CLDAP scope");
83 if (search
->num_attributes
== 1 &&
84 strcasecmp(search
->attributes
[0], "netlogon") == 0) {
85 cldapd_netlogon_request(cldap
,
88 in
->ldap_msg
->messageid
,
95 cldapd_rootdse_request(cldap
, cldapd
, in
,
96 in
->ldap_msg
->messageid
,
103 start listening on the given address
105 static NTSTATUS
cldapd_add_socket(struct cldapd_server
*cldapd
, struct loadparm_context
*lp_ctx
,
108 struct cldap_socket
*cldapsock
;
109 struct tsocket_address
*socket_address
;
113 ret
= tsocket_address_inet_from_strings(cldapd
,
116 lpcfg_cldap_port(lp_ctx
),
119 status
= map_nt_error_from_unix_common(errno
);
120 DEBUG(0,("invalid address %s:%d - %s:%s\n",
121 address
, lpcfg_cldap_port(lp_ctx
),
122 gai_strerror(ret
), nt_errstr(status
)));
126 /* listen for unicasts on the CLDAP port (389) */
127 status
= cldap_socket_init(cldapd
,
131 if (!NT_STATUS_IS_OK(status
)) {
132 DEBUG(0,("Failed to bind to %s - %s\n",
133 tsocket_address_string(socket_address
, socket_address
),
135 talloc_free(socket_address
);
138 talloc_free(socket_address
);
140 cldap_set_incoming_handler(cldapsock
, cldapd
->task
->event_ctx
,
141 cldapd_request_handler
, cldapd
);
147 setup our listening sockets on the configured network interfaces
149 static NTSTATUS
cldapd_startup_interfaces(struct cldapd_server
*cldapd
, struct loadparm_context
*lp_ctx
,
150 struct interface
*ifaces
)
152 int i
, num_interfaces
;
153 TALLOC_CTX
*tmp_ctx
= talloc_new(cldapd
);
156 num_interfaces
= iface_list_count(ifaces
);
158 /* if we are allowing incoming packets from any address, then
159 we need to bind to the wildcard address */
160 if (!lpcfg_bind_interfaces_only(lp_ctx
)) {
162 char **wcard
= iface_list_wildcard(cldapd
);
163 NT_STATUS_HAVE_NO_MEMORY(wcard
);
164 for (i
=0; wcard
[i
]; i
++) {
165 status
= cldapd_add_socket(cldapd
, lp_ctx
, wcard
[i
]);
166 if (NT_STATUS_IS_OK(status
)) {
171 if (num_binds
== 0) {
172 return NT_STATUS_INVALID_PARAMETER_MIX
;
176 /* now we have to also listen on the specific interfaces,
177 so that replies always come from the right IP */
178 for (i
=0; i
<num_interfaces
; i
++) {
179 const char *address
= talloc_strdup(tmp_ctx
, iface_list_n_ip(ifaces
, i
));
180 status
= cldapd_add_socket(cldapd
, lp_ctx
, address
);
181 NT_STATUS_NOT_OK_RETURN(status
);
184 talloc_free(tmp_ctx
);
190 startup the cldapd task
192 static void cldapd_task_init(struct task_server
*task
)
194 struct cldapd_server
*cldapd
;
196 struct interface
*ifaces
;
198 load_interface_list(task
, task
->lp_ctx
, &ifaces
);
200 if (iface_list_count(ifaces
) == 0) {
201 task_server_terminate(task
, "cldapd: no network interfaces configured", false);
205 switch (lpcfg_server_role(task
->lp_ctx
)) {
206 case ROLE_STANDALONE
:
207 task_server_terminate(task
, "cldap_server: no CLDAP server required in standalone configuration",
210 case ROLE_DOMAIN_MEMBER
:
211 task_server_terminate(task
, "cldap_server: no CLDAP server required in member server configuration",
214 case ROLE_ACTIVE_DIRECTORY_DC
:
215 /* Yes, we want an CLDAP server */
219 task_server_set_title(task
, "task[cldapd]");
221 cldapd
= talloc(task
, struct cldapd_server
);
222 if (cldapd
== NULL
) {
223 task_server_terminate(task
, "cldapd: out of memory", true);
228 cldapd
->samctx
= samdb_connect(cldapd
, task
->event_ctx
, task
->lp_ctx
, system_session(task
->lp_ctx
), 0);
229 if (cldapd
->samctx
== NULL
) {
230 task_server_terminate(task
, "cldapd failed to open samdb", true);
234 /* start listening on the configured network interfaces */
235 status
= cldapd_startup_interfaces(cldapd
, task
->lp_ctx
, ifaces
);
236 if (!NT_STATUS_IS_OK(status
)) {
237 task_server_terminate(task
, "cldapd failed to setup interfaces", true);
241 irpc_add_name(task
->msg_ctx
, "cldap_server");
246 register ourselves as a available server
248 NTSTATUS
server_service_cldapd_init(void)
250 return register_server_service("cldap", cldapd_task_init
);