~zulcss/samba/server-dailies-3.4

« back to all changes in this revision

Viewing changes to source4/dsdb/repl/drepl_service.c

  • Committer: Chuck Short
  • Date: 2010-09-28 20:38:39 UTC
  • Revision ID: zulcss@ubuntu.com-20100928203839-pgjulytsi9ue63x1
Initial version

Show diffs side-by-side

added added

removed removed

Lines of Context:
 
1
/* 
 
2
   Unix SMB/CIFS mplementation.
 
3
   DSDB replication service
 
4
   
 
5
   Copyright (C) Stefan Metzmacher 2007
 
6
    
 
7
   This program is free software; you can redistribute it and/or modify
 
8
   it under the terms of the GNU General Public License as published by
 
9
   the Free Software Foundation; either version 3 of the License, or
 
10
   (at your option) any later version.
 
11
   
 
12
   This program is distributed in the hope that it will be useful,
 
13
   but WITHOUT ANY WARRANTY; without even the implied warranty of
 
14
   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
 
15
   GNU General Public License for more details.
 
16
   
 
17
   You should have received a copy of the GNU General Public License
 
18
   along with this program.  If not, see <http://www.gnu.org/licenses/>.
 
19
   
 
20
*/
 
21
 
 
22
#include "includes.h"
 
23
#include "dsdb/samdb/samdb.h"
 
24
#include "auth/auth.h"
 
25
#include "smbd/service.h"
 
26
#include "lib/events/events.h"
 
27
#include "lib/messaging/irpc.h"
 
28
#include "dsdb/repl/drepl_service.h"
 
29
#include "lib/ldb/include/ldb_errors.h"
 
30
#include "../lib/util/dlinklist.h"
 
31
#include "librpc/gen_ndr/ndr_misc.h"
 
32
#include "librpc/gen_ndr/ndr_drsuapi.h"
 
33
#include "librpc/gen_ndr/ndr_drsblobs.h"
 
34
#include "param/param.h"
 
35
 
 
36
static WERROR dreplsrv_init_creds(struct dreplsrv_service *service)
 
37
{
 
38
        NTSTATUS status;
 
39
 
 
40
        status = auth_system_session_info(service, service->task->lp_ctx, 
 
41
                                          &service->system_session_info);
 
42
        if (!NT_STATUS_IS_OK(status)) {
 
43
                return ntstatus_to_werror(status);
 
44
        }
 
45
 
 
46
        return WERR_OK;
 
47
}
 
48
 
 
49
static WERROR dreplsrv_connect_samdb(struct dreplsrv_service *service, struct loadparm_context *lp_ctx)
 
50
{
 
51
        const struct GUID *ntds_guid;
 
52
        struct drsuapi_DsBindInfo28 *bind_info28;
 
53
 
 
54
        service->samdb = samdb_connect(service, service->task->event_ctx, lp_ctx, service->system_session_info);
 
55
        if (!service->samdb) {
 
56
                return WERR_DS_SERVICE_UNAVAILABLE;
 
57
        }
 
58
 
 
59
        ntds_guid = samdb_ntds_objectGUID(service->samdb);
 
60
        if (!ntds_guid) {
 
61
                return WERR_DS_SERVICE_UNAVAILABLE;
 
62
        }
 
63
 
 
64
        service->ntds_guid = *ntds_guid;
 
65
 
 
66
        bind_info28                             = &service->bind_info28;
 
67
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_BASE;
 
68
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_ASYNC_REPLICATION;
 
69
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_REMOVEAPI;
 
70
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_MOVEREQ_V2;
 
71
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GETCHG_COMPRESS;
 
72
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V1;
 
73
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_RESTORE_USN_OPTIMIZATION;
 
74
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_KCC_EXECUTE;
 
75
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_ADDENTRY_V2;
 
76
#if 0
 
77
        if (s->domain_behavior_version == 2) {
 
78
                /* TODO: find out how this is really triggered! */
 
79
                bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_LINKED_VALUE_REPLICATION;
 
80
        }
 
81
#endif
 
82
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V2;
 
83
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_INSTANCE_TYPE_NOT_REQ_ON_MOD;
 
84
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_CRYPTO_BIND;
 
85
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GET_REPL_INFO;
 
86
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_STRONG_ENCRYPTION;
 
87
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_DCINFO_V01;
 
88
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_TRANSITIVE_MEMBERSHIP;
 
89
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_ADD_SID_HISTORY;
 
90
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_POST_BETA3;
 
91
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_00100000;
 
92
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GET_MEMBERSHIPS2;
 
93
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V6;
 
94
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_NONDOMAIN_NCS;
 
95
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREQ_V8;
 
96
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V5;
 
97
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V6;
 
98
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_ADDENTRYREPLY_V3;
 
99
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_GETCHGREPLY_V7;
 
100
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_VERIFY_OBJECT;
 
101
#if 0 /* we don't support XPRESS compression yet */
 
102
        bind_info28->supported_extensions       |= DRSUAPI_SUPPORTED_EXTENSION_XPRESS_COMPRESS;
 
103
#endif
 
104
        /* TODO: fill in site_guid */
 
105
        bind_info28->site_guid                  = GUID_zero();
 
106
        /* TODO: find out how this is really triggered! */
 
107
        bind_info28->pid                        = 0;
 
108
        bind_info28->repl_epoch                 = 0;
 
109
 
 
110
        return WERR_OK;
 
111
}
 
112
 
 
113
/*
 
114
  startup the dsdb replicator service task
 
115
*/
 
116
static void dreplsrv_task_init(struct task_server *task)
 
117
{
 
118
        WERROR status;
 
119
        struct dreplsrv_service *service;
 
120
        uint32_t periodic_startup_interval;
 
121
 
 
122
        switch (lp_server_role(task->lp_ctx)) {
 
123
        case ROLE_STANDALONE:
 
124
                task_server_terminate(task, "dreplsrv: no DSDB replication required in standalone configuration");
 
125
                return;
 
126
        case ROLE_DOMAIN_MEMBER:
 
127
                task_server_terminate(task, "dreplsrv: no DSDB replication required in domain member configuration");
 
128
                return;
 
129
        case ROLE_DOMAIN_CONTROLLER:
 
130
                /* Yes, we want DSDB replication */
 
131
                break;
 
132
        }
 
133
 
 
134
        task_server_set_title(task, "task[dreplsrv]");
 
135
 
 
136
        service = talloc_zero(task, struct dreplsrv_service);
 
137
        if (!service) {
 
138
                task_server_terminate(task, "dreplsrv_task_init: out of memory");
 
139
                return;
 
140
        }
 
141
        service->task           = task;
 
142
        service->startup_time   = timeval_current();
 
143
        task->private_data      = service;
 
144
 
 
145
        status = dreplsrv_init_creds(service);
 
146
        if (!W_ERROR_IS_OK(status)) {
 
147
                task_server_terminate(task, talloc_asprintf(task,
 
148
                                      "dreplsrv: Failed to obtain server credentials: %s\n",
 
149
                                      win_errstr(status)));
 
150
                return;
 
151
        }
 
152
 
 
153
        status = dreplsrv_connect_samdb(service, task->lp_ctx);
 
154
        if (!W_ERROR_IS_OK(status)) {
 
155
                task_server_terminate(task, talloc_asprintf(task,
 
156
                                      "dreplsrv: Failed to connect to local samdb: %s\n",
 
157
                                      win_errstr(status)));
 
158
                return;
 
159
        }
 
160
 
 
161
        status = dreplsrv_load_partitions(service);
 
162
        if (!W_ERROR_IS_OK(status)) {
 
163
                task_server_terminate(task, talloc_asprintf(task,
 
164
                                      "dreplsrv: Failed to load partitions: %s\n",
 
165
                                      win_errstr(status)));
 
166
                return;
 
167
        }
 
168
 
 
169
        periodic_startup_interval       = lp_parm_int(task->lp_ctx, NULL, "dreplsrv", "periodic_startup_interval", 15); /* in seconds */
 
170
        service->periodic.interval      = lp_parm_int(task->lp_ctx, NULL, "dreplsrv", "periodic_interval", 300); /* in seconds */
 
171
 
 
172
        status = dreplsrv_periodic_schedule(service, periodic_startup_interval);
 
173
        if (!W_ERROR_IS_OK(status)) {
 
174
                task_server_terminate(task, talloc_asprintf(task,
 
175
                                      "dreplsrv: Failed to periodic schedule: %s\n",
 
176
                                      win_errstr(status)));
 
177
                return;
 
178
        }
 
179
 
 
180
        irpc_add_name(task->msg_ctx, "dreplsrv");
 
181
}
 
182
 
 
183
/*
 
184
  register ourselves as a available server
 
185
*/
 
186
NTSTATUS server_service_drepl_init(void)
 
187
{
 
188
        return register_server_service("drepl", dreplsrv_task_init);
 
189
}