summaryrefslogtreecommitdiffstats
path: root/src/providers/ad/ad_dyndns.c
diff options
context:
space:
mode:
Diffstat (limited to 'src/providers/ad/ad_dyndns.c')
-rw-r--r--src/providers/ad/ad_dyndns.c295
1 files changed, 295 insertions, 0 deletions
diff --git a/src/providers/ad/ad_dyndns.c b/src/providers/ad/ad_dyndns.c
new file mode 100644
index 0000000..1a91e4b
--- /dev/null
+++ b/src/providers/ad/ad_dyndns.c
@@ -0,0 +1,295 @@
+/*
+ SSSD
+
+ ad_dyndns.c
+
+ Authors:
+ Jakub Hrozek <jhrozek@redhat.com>
+
+ Copyright (C) 2013 Red Hat
+
+ This program is free software; you can redistribute it and/or modify
+ it under the terms of the GNU General Public License as published by
+ the Free Software Foundation; either version 3 of the License, or
+ (at your option) any later version.
+
+ This program is distributed in the hope that it will be useful,
+ but WITHOUT ANY WARRANTY; without even the implied warranty of
+ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
+ GNU General Public License for more details.
+
+ You should have received a copy of the GNU General Public License
+ along with this program. If not, see <http://www.gnu.org/licenses/>.
+*/
+
+#include <ctype.h>
+#include "util/util.h"
+#include "providers/ldap/sdap_dyndns.h"
+#include "providers/data_provider.h"
+#include "providers/be_dyndns.h"
+#include "providers/ad/ad_common.h"
+
+struct ad_dyndns_update_state {
+ struct ad_options *ad_ctx;
+ struct sdap_id_op *sdap_op;
+};
+
+static void
+ad_dyndns_sdap_update_done(struct tevent_req *subreq);
+
+static struct tevent_req *
+ad_dyndns_update_send(TALLOC_CTX *mem_ctx,
+ struct tevent_context *ev,
+ struct be_ctx *be_ctx,
+ struct be_ptask *be_ptask,
+ void *pvt);
+
+static errno_t
+ad_dyndns_update_recv(struct tevent_req *req);
+
+static void
+ad_dyndns_update_connect_done(struct tevent_req *subreq);
+
+errno_t ad_dyndns_init(struct be_ctx *be_ctx,
+ struct ad_options *ad_opts)
+{
+ errno_t ret;
+ const time_t ptask_first_delay = 10;
+ int period;
+ int offset;
+ uint32_t extraflags = 0;
+
+ /* nsupdate is available. Dynamic updates
+ * are supported
+ */
+ ret = ad_get_dyndns_options(be_ctx, ad_opts);
+ if (ret != EOK) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Could not get AD dyndns options\n");
+ return ret;
+ }
+
+ if (dp_opt_get_bool(ad_opts->dyndns_ctx->opts,
+ DP_OPT_DYNDNS_UPDATE) == false) {
+ DEBUG(SSSDBG_CONF_SETTINGS, "Dynamic DNS updates are off.\n");
+ return EOK;
+ }
+
+ DEBUG(SSSDBG_CONF_SETTINGS,
+ "Dynamic DNS updates are on. Checking for nsupdate..\n");
+ ret = be_nsupdate_check();
+ if (ret == ENOENT) {
+ DEBUG(SSSDBG_MINOR_FAILURE,
+ "DNS updates requested but nsupdate not available\n");
+ return EOK;
+ } else if (ret != EOK) {
+ DEBUG(SSSDBG_OP_FAILURE, "Could not check for nsupdate\n");
+ return ret;
+ }
+
+ ad_opts->be_res = be_ctx->be_res;
+ if (ad_opts->be_res == NULL) {
+ DEBUG(SSSDBG_OP_FAILURE, "Resolver must be initialized in order "
+ "to use the AD dynamic DNS updates\n");
+ return EINVAL;
+ }
+
+ period = dp_opt_get_int(ad_opts->dyndns_ctx->opts, DP_OPT_DYNDNS_REFRESH_INTERVAL);
+ if (period == 0) {
+ DEBUG(SSSDBG_TRACE_FUNC, "DNS will not be updated periodically, "
+ "dyndns_refresh_interval is 0\n");
+ extraflags |= BE_PTASK_NO_PERIODIC;
+ offset = 0;
+ } else {
+ offset = dp_opt_get_int(ad_opts->dyndns_ctx->opts, DP_OPT_DYNDNS_REFRESH_OFFSET);
+ }
+
+ ret = be_ptask_create(ad_opts, be_ctx, period, ptask_first_delay, 0, offset,
+ period, 0,
+ ad_dyndns_update_send, ad_dyndns_update_recv, ad_opts,
+ "Dyndns update",
+ extraflags |
+ BE_PTASK_OFFLINE_DISABLE |
+ BE_PTASK_SCHEDULE_FROM_LAST,
+ NULL);
+
+ if (ret != EOK) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Unable to setup ptask "
+ "[%d]: %s\n", ret, sss_strerror(ret));
+ }
+ return ret;
+}
+
+static struct tevent_req *
+ad_dyndns_update_send(TALLOC_CTX *mem_ctx,
+ struct tevent_context *ev,
+ struct be_ctx *be_ctx,
+ struct be_ptask *be_ptask,
+ void *pvt)
+{
+ int ret;
+ struct ad_options *ctx;
+ struct ad_dyndns_update_state *state;
+ struct tevent_req *req, *subreq;
+ struct sdap_id_ctx *sdap_ctx;
+
+ DEBUG(SSSDBG_TRACE_FUNC, "Performing update\n");
+
+ ctx = talloc_get_type(pvt, struct ad_options);
+ sdap_ctx = ctx->id_ctx->sdap_id_ctx;
+
+ req = tevent_req_create(ctx, &state, struct ad_dyndns_update_state);
+ if (req == NULL) {
+ return NULL;
+ }
+ state->ad_ctx = ctx;
+
+ if (ctx->dyndns_ctx->last_refresh + 60 > time(NULL) ||
+ ctx->dyndns_ctx->timer_in_progress) {
+ DEBUG(SSSDBG_FUNC_DATA, "Last periodic update ran recently or timer "
+ "in progress, not scheduling another update\n");
+ tevent_req_done(req);
+ tevent_req_post(req, sdap_ctx->be->ev);
+ return req;
+ }
+ state->ad_ctx->dyndns_ctx->last_refresh = time(NULL);
+
+ /* Make sure to have a valid LDAP connection */
+ state->sdap_op = sdap_id_op_create(state, sdap_ctx->conn->conn_cache);
+ if (state->sdap_op == NULL) {
+ DEBUG(SSSDBG_OP_FAILURE, "sdap_id_op_create failed\n");
+ ret = ENOMEM;
+ goto done;
+ }
+
+ subreq = sdap_id_op_connect_send(state->sdap_op, state, &ret);
+ if (!subreq) {
+ DEBUG(SSSDBG_OP_FAILURE, "sdap_id_op_connect_send failed: [%d](%s)\n",
+ ret, sss_strerror(ret));
+ ret = ENOMEM;
+ goto done;
+ }
+ tevent_req_set_callback(subreq, ad_dyndns_update_connect_done, req);
+ ret = EOK;
+done:
+ if (ret != EOK) {
+ tevent_req_error(req, ret);
+ tevent_req_post(req, sdap_ctx->be->ev);
+ }
+ return req;
+}
+
+static void ad_dyndns_update_connect_done(struct tevent_req *subreq)
+{
+ int dp_error;
+ int ret;
+ struct tevent_req *req;
+ struct ad_dyndns_update_state *state;
+ struct sdap_id_ctx *sdap_ctx;
+ struct ad_options *ctx;
+ LDAPURLDesc *lud;
+
+ req = tevent_req_callback_data(subreq, struct tevent_req);
+ state = tevent_req_data(req, struct ad_dyndns_update_state);
+
+ ret = sdap_id_op_connect_recv(subreq, &dp_error);
+ talloc_zfree(subreq);
+
+ if (ret != EOK) {
+ if (dp_error == DP_ERR_OFFLINE) {
+ DEBUG(SSSDBG_MINOR_FAILURE, "No server is available, "
+ "dynamic DNS update is skipped in offline mode.\n");
+ tevent_req_error(req, ERR_DYNDNS_OFFLINE);
+ } else {
+ DEBUG(SSSDBG_OP_FAILURE,
+ "Failed to connect to LDAP server: [%d](%s)\n",
+ ret, sss_strerror(ret));
+ tevent_req_error(req, ERR_NETWORK_IO);
+ }
+ return;
+ }
+
+ ctx = state->ad_ctx;
+ sdap_ctx = ctx->id_ctx->sdap_id_ctx;
+
+ ret = ldap_url_parse(ctx->service->sdap->uri, &lud);
+ if (ret != LDAP_SUCCESS) {
+ DEBUG(SSSDBG_CRIT_FAILURE, "Failed to parse ldap URI '%s': %d\n",
+ ctx->service->sdap->uri, ret);
+ ret = EINVAL;
+ goto done;
+ }
+
+ if (lud->lud_scheme != NULL &&
+ strcasecmp(lud->lud_scheme, "ldapi") == 0) {
+ DEBUG(SSSDBG_CRIT_FAILURE,
+ "The LDAP scheme is ldapi://, cannot proceed with update\n");
+ ldap_free_urldesc(lud);
+ ret = EINVAL;
+ goto done;
+ }
+
+ if (lud->lud_host == NULL) {
+ DEBUG(SSSDBG_CRIT_FAILURE,
+ "The LDAP URI (%s) did not contain a host name\n",
+ ctx->service->sdap->uri);
+ ldap_free_urldesc(lud);
+ ret = EINVAL;
+ goto done;
+ }
+
+ subreq = sdap_dyndns_update_send(state, sdap_ctx->be->ev,
+ sdap_ctx->be,
+ ctx->dyndns_ctx->opts,
+ sdap_ctx,
+ ctx->dyndns_ctx->auth_type,
+ ctx->dyndns_ctx->auth_ptr_type,
+ dp_opt_get_string(ctx->dyndns_ctx->opts,
+ DP_OPT_DYNDNS_IFACE),
+ dp_opt_get_string(ctx->basic,
+ AD_HOSTNAME),
+ dp_opt_get_string(ctx->basic,
+ AD_KRB5_REALM),
+ dp_opt_get_int(ctx->dyndns_ctx->opts,
+ DP_OPT_DYNDNS_TTL),
+ false);
+ if (!subreq) {
+ ret = EIO;
+ DEBUG(SSSDBG_OP_FAILURE,
+ "sdap_dyndns_update_send failed: [%d](%s)\n",
+ ret, sss_strerror(ret));
+ goto done;
+ }
+ tevent_req_set_callback(subreq, ad_dyndns_sdap_update_done, req);
+ ret = EOK;
+done:
+ if (ret != EOK) {
+ tevent_req_error(req, ret);
+ tevent_req_post(req, sdap_ctx->be->ev);
+ }
+}
+
+static void ad_dyndns_sdap_update_done(struct tevent_req *subreq)
+{
+ struct tevent_req *req = tevent_req_callback_data(subreq,
+ struct tevent_req);
+ errno_t ret;
+
+ ret = sdap_dyndns_update_recv(subreq);
+ talloc_zfree(subreq);
+ if (ret != EOK) {
+ DEBUG(SSSDBG_OP_FAILURE,
+ "Dynamic DNS update failed [%d]: %s\n",
+ ret, sss_strerror(ret));
+ tevent_req_error(req, ret);
+ return;
+ }
+
+ tevent_req_done(req);
+}
+
+static errno_t ad_dyndns_update_recv(struct tevent_req *req)
+{
+ TEVENT_REQ_RETURN_ON_ERROR(req);
+
+ return EOK;
+}
generated by cgit v1.2.3 (git 2.39.1) at 2025-02-04 05:20:22 +0000