1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
|
/*
* Unix SMB/CIFS implementation.
*
* Copyright (C) 2023 Stefan Metzmacher
*
* This program is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published by
* the Free Software Foundation; either version 3 of the License, or
* (at your option) any later version.
*
* This program is distributed in the hope that it will be useful,
* but WITHOUT ANY WARRANTY; without even the implied warranty of
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
* GNU General Public License for more details.
*
* You should have received a copy of the GNU General Public License
* along with this program; if not, see <http://www.gnu.org/licenses/>.
*/
#include "includes.h"
#include "rpc_worker.h"
#include "librpc/gen_ndr/ndr_witness.h"
#include "librpc/gen_ndr/ndr_witness_scompat.h"
static size_t witness_interfaces(
const struct ndr_interface_table ***pifaces,
void *private_data)
{
static const struct ndr_interface_table *ifaces[] = {
&ndr_table_witness,
};
if (!lp_clustering()) {
/*
* Without clustering there's no need for witness.
*/
*pifaces = NULL;
return 0;
}
*pifaces = ifaces;
return ARRAY_SIZE(ifaces);
}
static NTSTATUS witness_servers(
struct dcesrv_context *dce_ctx,
const struct dcesrv_endpoint_server ***_ep_servers,
size_t *_num_ep_servers,
void *private_data)
{
static const struct dcesrv_endpoint_server *ep_servers[1] = { NULL };
char *principal = NULL;
NTSTATUS status;
if (!lp_clustering()) {
/*
* Without clustering there's no need for witness.
*/
*_ep_servers = NULL;
*_num_ep_servers = 0;
return NT_STATUS_OK;
}
principal = talloc_asprintf(talloc_tos(),
"cifs/%s",
lp_netbios_name());
if (principal == NULL) {
return NT_STATUS_NO_MEMORY;
}
status = dcesrv_auth_type_principal_register(dce_ctx,
DCERPC_AUTH_TYPE_NTLMSSP,
principal);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
status = dcesrv_auth_type_principal_register(dce_ctx,
DCERPC_AUTH_TYPE_SPNEGO,
principal);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
if (lp_security() == SEC_ADS) {
status = dcesrv_auth_type_principal_register(dce_ctx,
DCERPC_AUTH_TYPE_KRB5,
principal);
if (!NT_STATUS_IS_OK(status)) {
return status;
}
}
TALLOC_FREE(principal);
/*
* We prefer NDR64 for witness,
* as it's a very simple protocol and
* we support it from the beginning,
* which means it's well tested.
*/
dce_ctx->preferred_transfer = &ndr_transfer_syntax_ndr64;
ep_servers[0] = witness_get_ep_server();
*_ep_servers = ep_servers;
*_num_ep_servers = ARRAY_SIZE(ep_servers);
return NT_STATUS_OK;
}
int main(int argc, const char *argv[])
{
return rpc_worker_main(
argc,
argv,
"rpcd_witness",
5,
60,
witness_interfaces,
witness_servers,
NULL);
}
|
