1 /*
2 Unix SMB/CIFS implementation.
3 Parameter loading functions
4 Copyright (C) Karl Auer 1993-1998
5
6 Largely re-written by Andrew Tridgell, September 1994
7
8 Copyright (C) Simo Sorce 2001
9 Copyright (C) Alexander Bokovoy 2002
10 Copyright (C) Stefan (metze) Metzmacher 2002
11 Copyright (C) Jim McDonough <jmcd@us.ibm.com> 2003
12 Copyright (C) Michael Adam 2008
13 Copyright (C) Andrew Bartlett 2010
14
15 This program is free software; you can redistribute it and/or modify
16 it under the terms of the GNU General Public License as published by
17 the Free Software Foundation; either version 3 of the License, or
18 (at your option) any later version.
19
20 This program is distributed in the hope that it will be useful,
21 but WITHOUT ANY WARRANTY; without even the implied warranty of
22 MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
23 GNU General Public License for more details.
24
25 You should have received a copy of the GNU General Public License
26 along with this program. If not, see <http://www.gnu.org/licenses/>.
27 */
28 #include "includes.h"
29 #include "lib/param/loadparm.h"
30 #include "libds/common/roles.h"
31
32 /*******************************************************************
33 Set the server type we will announce as via nmbd.
34 ********************************************************************/
35
36 static const struct srv_role_tab {
37 uint32_t role;
38 const char *role_str;
39 } srv_role_tab [] = {
40 { ROLE_STANDALONE, "ROLE_STANDALONE" },
41 { ROLE_DOMAIN_MEMBER, "ROLE_DOMAIN_MEMBER" },
42 { ROLE_DOMAIN_BDC, "ROLE_DOMAIN_BDC" },
43 { ROLE_DOMAIN_PDC, "ROLE_DOMAIN_PDC" },
44 { ROLE_ACTIVE_DIRECTORY_DC, "ROLE_ACTIVE_DIRECTORY_DC" },
45 { 0, NULL }
46 };
47
server_role_str(uint32_t role)48 const char* server_role_str(uint32_t role)
49 {
50 int i = 0;
51 for (i=0; srv_role_tab[i].role_str; i++) {
52 if (role == srv_role_tab[i].role) {
53 return srv_role_tab[i].role_str;
54 }
55 }
56 return NULL;
57 }
58
59 /**
60 * Set the server role based on security, domain logons and domain master
61 */
lp_find_server_role(int server_role,int security,int domain_logons,int domain_master)62 int lp_find_server_role(int server_role, int security, int domain_logons, int domain_master)
63 {
64 int role;
65
66 if (server_role != ROLE_AUTO) {
67 if (lp_is_security_and_server_role_valid(server_role, security)) {
68 return server_role;
69 }
70 }
71
72 /* If server_role is set to ROLE_AUTO, or conflicted with the
73 * chosen security setting, figure out the correct role */
74 role = ROLE_STANDALONE;
75
76 switch (security) {
77 case SEC_DOMAIN:
78 case SEC_ADS:
79 role = ROLE_DOMAIN_MEMBER;
80 break;
81 case SEC_AUTO:
82 case SEC_USER:
83 if (domain_logons) {
84
85 if (domain_master) {
86 role = ROLE_DOMAIN_PDC;
87 } else {
88 role = ROLE_DOMAIN_BDC;
89 }
90 }
91 break;
92 default:
93 DEBUG(0, ("Server's Role undefined due to unknown security mode\n"));
94 break;
95 }
96
97 return role;
98 }
99
100 /**
101 * Set the server role based on security, domain logons and domain master
102 */
lp_find_security(int server_role,int security)103 int lp_find_security(int server_role, int security)
104 {
105 if (security != SEC_AUTO) {
106 return security;
107 }
108
109 switch (server_role) {
110 case ROLE_DOMAIN_MEMBER:
111 return SEC_ADS;
112 default:
113 return SEC_USER;
114 }
115 }
116
117
118 /**
119 * Check if server role and security parameters are contradictory
120 */
lp_is_security_and_server_role_valid(int server_role,int security)121 bool lp_is_security_and_server_role_valid(int server_role, int security)
122 {
123 bool valid = false;
124
125 if (security == SEC_AUTO) {
126 return true;
127 }
128
129 switch (server_role) {
130 case ROLE_AUTO:
131 valid = true;
132 break;
133 case ROLE_DOMAIN_MEMBER:
134 if (security == SEC_ADS || security == SEC_DOMAIN) {
135 valid = true;
136 }
137 break;
138
139 case ROLE_STANDALONE:
140 case ROLE_DOMAIN_PDC:
141 case ROLE_DOMAIN_BDC:
142 case ROLE_ACTIVE_DIRECTORY_DC:
143 if (security == SEC_USER) {
144 valid = true;
145 }
146 break;
147
148 default:
149 break;
150 }
151
152 return valid;
153 }
154