libsmb/namequery_dc.c

ソースコードを見る。

関数
static BOOL	is_our_primary_domain (const char *domain)
static BOOL	ads_dc_name (const char *domain, const char *realm, struct in_addr *dc_ip, fstring srv_name)
static BOOL	rpc_dc_name (const char *domain, fstring srv_name, struct in_addr *ip_out)
BOOL	get_dc_name (const char *domain, const char *realm, fstring srv_name, struct in_addr *ip_out)

---

関数

static BOOL is_our_primary_domain

(

const char *

domain

)

[static]

namequery_dc.c の 33 行で定義されています。

参照先 get_global_sam_name()・lp_workgroup()・ROLE_DOMAIN_MEMBER・strequal().

参照元 ads_dc_name().

{
        int role = lp_server_role();

        if ((role == ROLE_DOMAIN_MEMBER) && strequal(lp_workgroup(), domain)) {
                return True;
        } else if (strequal(get_global_sam_name(), domain)) {
                return True;
        }
        return False;
}

static BOOL ads_dc_name	(	const char *	domain,
		const char *	realm,
		struct in_addr *	dc_ip,
		fstring	srv_name
	)			[static]

namequery_dc.c の 50 行で定義されています。

参照先 ads_closest_dc()・ads_connect()・ads_destroy()・ads_init()・ADS_STRUCT::auth・ADS_STRUCT::config・create_local_private_krb5_conf_for_domain()・ADS_STRUCT::flags・is_our_primary_domain()・ADS_STRUCT::ldap_ip・ADS_STRUCT::ldap_server_name・lp_workgroup()・namecache_delete()・ADS_STRUCT::realm・sitename_fetch()・stored_sitename_changed()・strequal()・strupper_m().

参照元 get_dc_name().

{
        ADS_STRUCT *ads;
        char *sitename;
        int i;

        if (!realm && strequal(domain, lp_workgroup())) {
                realm = lp_realm();
        }

        sitename = sitename_fetch(realm);

        /* Try this 3 times then give up. */
        for( i =0 ; i < 3; i++) {
                ads = ads_init(realm, domain, NULL);
                if (!ads) {
                        SAFE_FREE(sitename);
                        return False;
                }

                DEBUG(4,("ads_dc_name: domain=%s\n", domain));

#ifdef HAVE_ADS
                /* we don't need to bind, just connect */
                ads->auth.flags |= ADS_AUTH_NO_BIND;
                ads_connect(ads);
#endif

                if (!ads->config.realm) {
                        SAFE_FREE(sitename);
                        ads_destroy(&ads);
                        return False;
                }

                /* Now we've found a server, see if our sitename
                   has changed. If so, we need to re-do the DNS query
                   to ensure we only find servers in our site. */

                if (stored_sitename_changed(realm, sitename)) {
                        SAFE_FREE(sitename);
                        sitename = sitename_fetch(realm);
                        ads_destroy(&ads);
                        /* Ensure we don't cache the DC we just connected to. */
                        namecache_delete(realm, 0x1C);
                        namecache_delete(domain, 0x1C);
                        continue;
                }

#ifdef HAVE_KRB5
                if (is_our_primary_domain(domain) && (ads->config.flags & ADS_KDC)) {
                        if (ads_closest_dc(ads)) {
                                /* We're going to use this KDC for this realm/domain.
                                   If we are using sites, then force the krb5 libs
                                   to use this KDC. */

                                create_local_private_krb5_conf_for_domain(realm,
                                                                        domain,
                                                                        sitename,
                                                                        ads->ldap_ip);
                        } else {
                                /* use an off site KDC */
                                create_local_private_krb5_conf_for_domain(realm,
                                                                        domain,
                                                                        NULL,
                                                                        ads->ldap_ip);
                        }
                }
#endif
                break;
        }

        if (i == 3) {
                DEBUG(1,("ads_dc_name: sitename (now \"%s\") keeps changing ???\n",
                        sitename ? sitename : ""));
                SAFE_FREE(sitename);
                return False;
        }

        SAFE_FREE(sitename);

        fstrcpy(srv_name, ads->config.ldap_server_name);
        strupper_m(srv_name);
        *dc_ip = ads->ldap_ip;
        ads_destroy(&ads);
        
        DEBUG(4,("ads_dc_name: using server='%s' IP=%s\n",
                 srv_name, inet_ntoa(*dc_ip)));
        
        return True;
}

static BOOL rpc_dc_name	(	const char *	domain,
		fstring	srv_name,
		struct in_addr *	ip_out
	)			[static]

namequery_dc.c の 149 行で定義されています。

参照先 check_negative_conn_cache()・get_sorted_dc_list()・is_zero_ip()・name_status_find()・result・zero_ip().

参照元 get_dc_name().

{
        struct ip_service *ip_list = NULL;
        struct in_addr dc_ip, exclude_ip;
        int count, i;
        NTSTATUS result;
        
        zero_ip(&exclude_ip);

        /* get a list of all domain controllers */
        
        if (!NT_STATUS_IS_OK(get_sorted_dc_list(domain, NULL, &ip_list, &count,
                                                False))) {
                DEBUG(3, ("Could not look up dc's for domain %s\n", domain));
                return False;
        }

        /* Remove the entry we've already failed with (should be the PDC). */

        for (i = 0; i < count; i++) {
                if (is_zero_ip(ip_list[i].ip))
                        continue;

                if (name_status_find(domain, 0x1c, 0x20, ip_list[i].ip, srv_name)) {
                        result = check_negative_conn_cache( domain, srv_name );
                        if ( NT_STATUS_IS_OK(result) ) {
                                dc_ip = ip_list[i].ip;
                                goto done;
                        }
                }
        }
        

        SAFE_FREE(ip_list);

        /* No-one to talk to )-: */
        return False;           /* Boo-hoo */
        
 done:
        /* We have the netbios name and IP address of a domain controller.
           Ideally we should sent a SAMLOGON request to determine whether
           the DC is alive and kicking.  If we can catch a dead DC before
           performing a cli_connect() we can avoid a 30-second timeout. */

        DEBUG(3, ("rpc_dc_name: Returning DC %s (%s) for domain %s\n", srv_name,
                  inet_ntoa(dc_ip), domain));

        *ip_out = dc_ip;

        SAFE_FREE(ip_list);

        return True;
}

BOOL get_dc_name	(	const char *	domain,
		const char *	realm,
		fstring	srv_name,
		struct in_addr *	ip_out
	)

namequery_dc.c の 207 行で定義されています。

参照先 ads_dc_name()・lp_workgroup()・rpc_dc_name()・SEC_ADS・strequal()・zero_ip().

参照元 _net_logon_ctrl2()・ad_idmap_cached_connection_internal()・ads_cached_connection()・check_ntdomain_security()・check_trustdomain_security()・enumerate_domain_trusts()・get_dcs()・net_ads_join().

{
        struct in_addr dc_ip;
        BOOL ret;
        BOOL our_domain = False;

        zero_ip(&dc_ip);

        ret = False;
        
        if ( strequal(lp_workgroup(), domain) || strequal(lp_realm(), realm) )
                our_domain = True;
        
        /* always try to obey what the admin specified in smb.conf 
           (for the local domain) */
        
        if ( (our_domain && lp_security()==SEC_ADS) || realm ) {
                ret = ads_dc_name(domain, realm, &dc_ip, srv_name);
        }

        if (!domain) {
                /* if we have only the realm we can't do anything else */
                return False;
        }
        
        if (!ret) {
                /* fall back on rpc methods if the ADS methods fail */
                ret = rpc_dc_name(domain, srv_name, &dc_ip);
        }
                
        *ip_out = dc_ip;

        return ret;
}

---