source3/utils/net_dns.c

   1
   2 /*
   3    Samba Unix/Linux Dynamic DNS Update
   4    net ads commands
   5
   6    Copyright (C) Krishna Ganugapati (krishnag@centeris.com)         2006
   7    Copyright (C) Gerald Carter                                      2006
   8
   9    This program is free software; you can redistribute it and/or modify
  10    it under the terms of the GNU General Public License as published by
  11    the Free Software Foundation; either version 3 of the License, or
  12    (at your option) any later version.
  13
  14    This program is distributed in the hope that it will be useful,
  15    but WITHOUT ANY WARRANTY; without even the implied warranty of
  16    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  17    GNU General Public License for more details.
  18
  19    You should have received a copy of the GNU General Public License
  20    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  21 */
  22
  23 #include "includes.h"
  24 #include "utils/net.h"
  25 #include "dns.h"
  26
  27 #if defined(WITH_DNS_UPDATES)
  28
  29 /*
  30  * Silly prototype to get rid of a warning
  31  */
  32
  33 DNS_ERROR DoDNSUpdate(char *pszServerName,
  34                       const char *pszDomainName, const char *pszHostName,
  35                       const struct sockaddr_storage *sslist,
  36                       size_t num_addrs );
  37
  38 /*********************************************************************
  39 *********************************************************************/
  40
  41 DNS_ERROR DoDNSUpdate(char *pszServerName,
  42                       const char *pszDomainName, const char *pszHostName,
  43                       const struct sockaddr_storage *sslist, size_t num_addrs )
  44 {
  45         DNS_ERROR err;
  46         struct dns_connection *conn;
  47         TALLOC_CTX *mem_ctx;
  48         OM_uint32 minor;
  49         struct dns_update_request *req, *resp;
  50
  51         if ( (num_addrs <= 0) || !sslist ) {
  52                 return ERROR_DNS_INVALID_PARAMETER;
  53         }
  54
  55         if (!(mem_ctx = talloc_init("DoDNSUpdate"))) {
  56                 return ERROR_DNS_NO_MEMORY;
  57         }
  58
  59         err = dns_open_connection( pszServerName, DNS_TCP, mem_ctx, &conn );
  60         if (!ERR_DNS_IS_OK(err)) {
  61                 goto error;
  62         }
  63
  64         /*
  65          * Probe if everything's fine
  66          */
  67
  68         err = dns_create_probe(mem_ctx, pszDomainName, pszHostName,
  69                                num_addrs, sslist, &req);
  70         if (!ERR_DNS_IS_OK(err)) goto error;
  71
  72         err = dns_update_transaction(mem_ctx, conn, req, &resp);
  73         if (!ERR_DNS_IS_OK(err)) goto error;
  74
  75         if (dns_response_code(resp->flags) == DNS_NO_ERROR) {
  76                 TALLOC_FREE(mem_ctx);
  77                 return ERROR_DNS_SUCCESS;
  78         }
  79
  80         /*
  81          * First try without signing
  82          */
  83
  84         err = dns_create_update_request(mem_ctx, pszDomainName, pszHostName,
  85                                         sslist, num_addrs, &req);
  86         if (!ERR_DNS_IS_OK(err)) goto error;
  87
  88         err = dns_update_transaction(mem_ctx, conn, req, &resp);
  89         if (!ERR_DNS_IS_OK(err)) goto error;
  90
  91         if (dns_response_code(resp->flags) == DNS_NO_ERROR) {
  92                 TALLOC_FREE(mem_ctx);
  93                 return ERROR_DNS_SUCCESS;
  94         }
  95
  96         /*
  97          * Okay, we have to try with signing
  98          */
  99         {
 100                 gss_ctx_id_t gss_context;
 101                 char *keyname;
 102
 103                 if (!(keyname = dns_generate_keyname( mem_ctx ))) {
 104                         err = ERROR_DNS_NO_MEMORY;
 105                         goto error;
 106                 }
 107
 108                 err = dns_negotiate_sec_ctx( pszDomainName, pszServerName,
 109                                              keyname, &gss_context, DNS_SRV_ANY );
 110
 111                 /* retry using the Windows 2000 DNS hack */
 112                 if (!ERR_DNS_IS_OK(err)) {
 113                         err = dns_negotiate_sec_ctx( pszDomainName, pszServerName,
 114                                                      keyname, &gss_context,
 115                                                      DNS_SRV_WIN2000 );
 116                 }
 117
 118                 if (!ERR_DNS_IS_OK(err))
 119                         goto error;
 120
 121
 122                 err = dns_sign_update(req, gss_context, keyname,
 123                                       "gss.microsoft.com", time(NULL), 3600);
 124
 125                 gss_delete_sec_context(&minor, &gss_context, GSS_C_NO_BUFFER);
 126
 127                 if (!ERR_DNS_IS_OK(err)) goto error;
 128
 129                 err = dns_update_transaction(mem_ctx, conn, req, &resp);
 130                 if (!ERR_DNS_IS_OK(err)) goto error;
 131
 132                 err = (dns_response_code(resp->flags) == DNS_NO_ERROR) ?
 133                         ERROR_DNS_SUCCESS : ERROR_DNS_UPDATE_FAILED;
 134         }
 135
 136
 137 error:
 138         TALLOC_FREE(mem_ctx);
 139         return err;
 140 }
 141
 142 /*********************************************************************
 143 *********************************************************************/
 144
 145 int get_my_ip_address( struct sockaddr_storage **pp_ss )
 146
 147 {
 148         struct iface_struct nics[MAX_INTERFACES];
 149         int i, n;
 150         struct sockaddr_storage *list = NULL;
 151         int count = 0;
 152
 153         /* find the first non-loopback address from our list of interfaces */
 154
 155         n = get_interfaces(nics, MAX_INTERFACES);
 156
 157         if (n <= 0) {
 158                 return -1;
 159         }
 160
 161         if ( (list = SMB_MALLOC_ARRAY( struct sockaddr_storage, n )) == NULL ) {
 162                 return -1;
 163         }
 164
 165         for ( i=0; i<n; i++ ) {
 166                 if (is_loopback_addr(&nics[i].ip)) {
 167                         continue;
 168                 }
 169 #if defined(HAVE_IPV6)
 170                 if ((nics[i].ip.ss_family == AF_INET6)) {
 171                         memcpy(&list[count++], &nics[i].ip,
 172                                sizeof(struct sockaddr_storage));
 173                 } else
 174 #endif
 175                 if (nics[i].ip.ss_family == AF_INET) {
 176                         memcpy(&list[count++], &nics[i].ip,
 177                                sizeof(struct sockaddr_storage));
 178                 }
 179         }
 180         *pp_ss = list;
 181
 182         return count;
 183 }
 184
 185 /*
 186  * Silly prototype to get rid of a warning
 187  */
 188
 189 DNS_ERROR do_gethostbyname(const char *server, const char *host);
 190
 191 DNS_ERROR do_gethostbyname(const char *server, const char *host)
 192 {
 193         struct dns_connection *conn;
 194         struct dns_request *req, *resp;
 195         DNS_ERROR err;
 196
 197         err = dns_open_connection(server, DNS_UDP, NULL, &conn);
 198         if (!ERR_DNS_IS_OK(err)) goto error;
 199
 200         err = dns_create_query(conn, host, QTYPE_A, DNS_CLASS_IN, &req);
 201         if (!ERR_DNS_IS_OK(err)) goto error;
 202
 203         err = dns_transaction(conn, conn, req, &resp);
 204
 205  error:
 206         TALLOC_FREE(conn);
 207         return err;
 208 }
 209
 210 #endif  /* defined(WITH_DNS_UPDATES) */