source3/rpc_server/rpcd_lsad.c

   1 /*
   2  *  Unix SMB/CIFS implementation.
   3  *
   4  *  This program is free software; you can redistribute it and/or modify
   5  *  it under the terms of the GNU General Public License as published by
   6  *  the Free Software Foundation; either version 3 of the License, or
   7  *  (at your option) any later version.
   8  *
   9  *  This program is distributed in the hope that it will be useful,
  10  *  but WITHOUT ANY WARRANTY; without even the implied warranty of
  11  *  MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  12  *  GNU General Public License for more details.
  13  *
  14  *  You should have received a copy of the GNU General Public License
  15  *  along with this program; if not, see <http://www.gnu.org/licenses/>.
  16  */
  17
  18 #include "includes.h"
  19 #include "rpc_worker.h"
  20 #include "librpc/gen_ndr/ndr_lsa.h"
  21 #include "librpc/gen_ndr/ndr_lsa_scompat.h"
  22 #include "librpc/gen_ndr/ndr_samr.h"
  23 #include "librpc/gen_ndr/ndr_samr_scompat.h"
  24 #include "librpc/gen_ndr/ndr_netlogon.h"
  25 #include "librpc/gen_ndr/ndr_netlogon_scompat.h"
  26 #include "librpc/gen_ndr/ndr_dssetup.h"
  27 #include "librpc/gen_ndr/ndr_dssetup_scompat.h"
  28 #include "source3/include/auth.h"
  29 #include "source3/include/secrets.h"
  30
  31 static size_t lsad_interfaces(
  32         const struct ndr_interface_table ***pifaces,
  33         void *private_data)
  34 {
  35         static const struct ndr_interface_table *ifaces[] = {
  36                 &ndr_table_lsarpc,
  37                 &ndr_table_samr,
  38                 &ndr_table_dssetup,
  39                 /*
  40                  * This last item is truncated from the list by the
  41                  * num_ifaces -= 1 below for the fileserver.  Take
  42                  * care when adding new services.
  43                  */
  44                 &ndr_table_netlogon,
  45         };
  46         size_t num_ifaces = ARRAY_SIZE(ifaces);
  47
  48         switch(lp_server_role()) {
  49         case ROLE_STANDALONE:
  50         case ROLE_DOMAIN_MEMBER:
  51                 /* no netlogon for non-dc */
  52                 num_ifaces -= 1;
  53                 break;
  54         case ROLE_ACTIVE_DIRECTORY_DC:
  55                 /*
  56                  * All these services are provided by the 'samba'
  57                  * binary from source4, not this code which is the
  58                  * source3 / NT4-like "classic" DC implementation
  59                  */
  60                 num_ifaces = 0;
  61                 break;
  62         default:
  63                 break;
  64         }
  65
  66         *pifaces = ifaces;
  67         return num_ifaces;
  68 }
  69
  70 static NTSTATUS lsad_servers(
  71         struct dcesrv_context *dce_ctx,
  72         const struct dcesrv_endpoint_server ***_ep_servers,
  73         size_t *_num_ep_servers,
  74         void *private_data)
  75 {
  76         static const struct dcesrv_endpoint_server *ep_servers[4] = { NULL, };
  77         size_t num_servers = ARRAY_SIZE(ep_servers);
  78         NTSTATUS status;
  79         bool ok;
  80
  81         ep_servers[0] = lsarpc_get_ep_server();
  82         ep_servers[1] = samr_get_ep_server();
  83         ep_servers[2] = dssetup_get_ep_server();
  84         ep_servers[3] = netlogon_get_ep_server();
  85
  86         ok = secrets_init();
  87         if (!ok) {
  88                 DBG_ERR("secrets_init() failed\n");
  89                 exit(1);
  90         }
  91
  92         status = dcesrv_register_default_auth_types_machine_principal(dce_ctx);
  93         if (!NT_STATUS_IS_OK(status)) {
  94                 return status;
  95         }
  96
  97         switch(lp_server_role()) {
  98         case ROLE_STANDALONE:
  99         case ROLE_DOMAIN_MEMBER:
 100                 /* no netlogon for non-dc */
 101                 num_servers -= 1;
 102                 break;
 103         case ROLE_ACTIVE_DIRECTORY_DC:
 104                 /*
 105                  * All these services are provided by the 'samba'
 106                  * binary from source4, not this code which is the
 107                  * source3 / NT4-like "classic" DC implementation
 108                  */
 109                 num_servers = 0;
 110                 break;
 111         default:
 112                 /*
 113                  * As DC we also register schannel with an
 114                  * empty principal
 115                  */
 116                 status = dcesrv_auth_type_principal_register(dce_ctx,
 117                                                              DCERPC_AUTH_TYPE_SCHANNEL,
 118                                                              "");
 119                 if (!NT_STATUS_IS_OK(status)) {
 120                         return status;
 121                 }
 122                 break;
 123         }
 124
 125         *_ep_servers = ep_servers;
 126         *_num_ep_servers = num_servers;
 127         return NT_STATUS_OK;
 128 }
 129
 130 int main(int argc, const char *argv[])
 131 {
 132         return rpc_worker_main(
 133                 argc,
 134                 argv,
 135                 "rpcd_lsad",
 136                 5,
 137                 60,
 138                 lsad_interfaces,
 139                 lsad_servers,
 140                 NULL);
 141 }