source/smbd/server.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Main SMB server routines
   4    Copyright (C) Andrew Tridgell                1992-1998
   5    Copyright (C) Martin Pool                    2002
   6    Copyright (C) Jelmer Vernooij                2002-2003
   7    Copyright (C) Volker Lendecke                1993-2007
   8    Copyright (C) Jeremy Allison                 1993-2007
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22 */
  23
  24 #include "includes.h"
  25
  26 static_decl_rpc;
  27
  28 static int am_parent = 1;
  29
  30 extern struct auth_context *negprot_global_auth_context;
  31 extern SIG_ATOMIC_T got_sig_term;
  32 extern SIG_ATOMIC_T reload_after_sighup;
  33 static SIG_ATOMIC_T got_sig_cld;
  34
  35 #ifdef WITH_DFS
  36 extern int dcelogin_atmost_once;
  37 #endif /* WITH_DFS */
  38
  39 /* really we should have a top level context structure that has the
  40    client file descriptor as an element. That would require a major rewrite :(
  41
  42    the following 2 functions are an alternative - they make the file
  43    descriptor private to smbd
  44  */
  45 static int server_fd = -1;
  46
  47 int smbd_server_fd(void)
  48 {
  49         return server_fd;
  50 }
  51
  52 static void smbd_set_server_fd(int fd)
  53 {
  54         server_fd = fd;
  55 }
  56
  57 int get_client_fd(void)
  58 {
  59         return server_fd;
  60 }
  61
  62 int client_get_tcp_info(struct sockaddr_in *server, struct sockaddr_in *client)
  63 {
  64         socklen_t length;
  65         if (server_fd == -1) {
  66                 return -1;
  67         }
  68         length = sizeof(*server);
  69         if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
  70                 return -1;
  71         }
  72         length = sizeof(*client);
  73         if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
  74                 return -1;
  75         }
  76         return 0;
  77 }
  78
  79 struct event_context *smbd_event_context(void)
  80 {
  81         static struct event_context *ctx;
  82
  83         if (!ctx && !(ctx = event_context_init(NULL))) {
  84                 smb_panic("Could not init smbd event context");
  85         }
  86         return ctx;
  87 }
  88
  89 struct messaging_context *smbd_messaging_context(void)
  90 {
  91         static struct messaging_context *ctx;
  92
  93         if (ctx == NULL) {
  94                 ctx = messaging_init(NULL, server_id_self(),
  95                                      smbd_event_context());
  96         }
  97         if (ctx == NULL) {
  98                 DEBUG(0, ("Could not init smbd messaging context.\n"));
  99         }
 100         return ctx;
 101 }
 102
 103 struct memcache *smbd_memcache(void)
 104 {
 105         static struct memcache *cache;
 106
 107         if (!cache
 108             && !(cache = memcache_init(NULL,
 109                                        lp_max_stat_cache_size()*1024))) {
 110
 111                 smb_panic("Could not init smbd memcache");
 112         }
 113         return cache;
 114 }
 115
 116 /*******************************************************************
 117  What to do when smb.conf is updated.
 118  ********************************************************************/
 119
 120 static void smb_conf_updated(struct messaging_context *msg,
 121                              void *private_data,
 122                              uint32_t msg_type,
 123                              struct server_id server_id,
 124                              DATA_BLOB *data)
 125 {
 126         DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
 127                   "updated. Reloading.\n"));
 128         reload_services(False);
 129 }
 130
 131
 132 /*******************************************************************
 133  Delete a statcache entry.
 134  ********************************************************************/
 135
 136 static void smb_stat_cache_delete(struct messaging_context *msg,
 137                                   void *private_data,
 138                                   uint32_t msg_tnype,
 139                                   struct server_id server_id,
 140                                   DATA_BLOB *data)
 141 {
 142         const char *name = (const char *)data->data;
 143         DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
 144         stat_cache_delete(name);
 145 }
 146
 147 /****************************************************************************
 148  Terminate signal.
 149 ****************************************************************************/
 150
 151 static void sig_term(void)
 152 {
 153         got_sig_term = 1;
 154         sys_select_signal(SIGTERM);
 155 }
 156
 157 /****************************************************************************
 158  Catch a sighup.
 159 ****************************************************************************/
 160
 161 static void sig_hup(int sig)
 162 {
 163         reload_after_sighup = 1;
 164         sys_select_signal(SIGHUP);
 165 }
 166
 167 /****************************************************************************
 168  Catch a sigcld
 169 ****************************************************************************/
 170 static void sig_cld(int sig)
 171 {
 172         got_sig_cld = 1;
 173         sys_select_signal(SIGCLD);
 174 }
 175
 176 /****************************************************************************
 177   Send a SIGTERM to our process group.
 178 *****************************************************************************/
 179
 180 static void  killkids(void)
 181 {
 182         if(am_parent) kill(0,SIGTERM);
 183 }
 184
 185 /****************************************************************************
 186  Process a sam sync message - not sure whether to do this here or
 187  somewhere else.
 188 ****************************************************************************/
 189
 190 static void msg_sam_sync(struct messaging_context *msg,
 191                          void *private_data,
 192                          uint32_t msg_type,
 193                          struct server_id server_id,
 194                          DATA_BLOB *data)
 195 {
 196         DEBUG(10, ("** sam sync message received, ignoring\n"));
 197 }
 198
 199
 200 /****************************************************************************
 201  Open the socket communication - inetd.
 202 ****************************************************************************/
 203
 204 static bool open_sockets_inetd(void)
 205 {
 206         /* Started from inetd. fd 0 is the socket. */
 207         /* We will abort gracefully when the client or remote system
 208            goes away */
 209         smbd_set_server_fd(dup(0));
 210
 211         /* close our standard file descriptors */
 212         close_low_fds(False); /* Don't close stderr */
 213
 214         set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 215         set_socket_options(smbd_server_fd(), lp_socket_options());
 216
 217         return True;
 218 }
 219
 220 static void msg_exit_server(struct messaging_context *msg,
 221                             void *private_data,
 222                             uint32_t msg_type,
 223                             struct server_id server_id,
 224                             DATA_BLOB *data)
 225 {
 226         DEBUG(3, ("got a SHUTDOWN message\n"));
 227         exit_server_cleanly(NULL);
 228 }
 229
 230 #ifdef DEVELOPER
 231 static void msg_inject_fault(struct messaging_context *msg,
 232                              void *private_data,
 233                              uint32_t msg_type,
 234                              struct server_id src,
 235                              DATA_BLOB *data)
 236 {
 237         int sig;
 238
 239         if (data->length != sizeof(sig)) {
 240
 241                 DEBUG(0, ("Process %s sent bogus signal injection request\n",
 242                           procid_str_static(&src)));
 243                 return;
 244         }
 245
 246         sig = *(int *)data->data;
 247         if (sig == -1) {
 248                 exit_server("internal error injected");
 249                 return;
 250         }
 251
 252 #if HAVE_STRSIGNAL
 253         DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
 254                   procid_str_static(&src), sig, strsignal(sig)));
 255 #else
 256         DEBUG(0, ("Process %s requested injection of signal %d\n",
 257                   procid_str_static(&src), sig));
 258 #endif
 259
 260         kill(sys_getpid(), sig);
 261 }
 262 #endif /* DEVELOPER */
 263
 264 struct child_pid {
 265         struct child_pid *prev, *next;
 266         pid_t pid;
 267 };
 268
 269 static struct child_pid *children;
 270 static int num_children;
 271
 272 static void add_child_pid(pid_t pid)
 273 {
 274         struct child_pid *child;
 275
 276         if (lp_max_smbd_processes() == 0) {
 277                 /* Don't bother with the child list if we don't care anyway */
 278                 return;
 279         }
 280
 281         child = SMB_MALLOC_P(struct child_pid);
 282         if (child == NULL) {
 283                 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
 284                 return;
 285         }
 286         child->pid = pid;
 287         DLIST_ADD(children, child);
 288         num_children += 1;
 289 }
 290
 291 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
 292 {
 293         struct child_pid *child;
 294
 295         if (unclean_shutdown) {
 296                 /* a child terminated uncleanly so tickle all processes to see
 297                    if they can grab any of the pending locks
 298                 */
 299                 DEBUG(0,(__location__ " Unclean shutdown of pid %u\n", pid));
 300                 messaging_send_buf(smbd_messaging_context(), procid_self(),
 301                                    MSG_SMB_BRL_VALIDATE, NULL, 0);
 302                 message_send_all(smbd_messaging_context(),
 303                                  MSG_SMB_UNLOCK, NULL, 0, NULL);
 304         }
 305
 306         if (lp_max_smbd_processes() == 0) {
 307                 /* Don't bother with the child list if we don't care anyway */
 308                 return;
 309         }
 310
 311         for (child = children; child != NULL; child = child->next) {
 312                 if (child->pid == pid) {
 313                         struct child_pid *tmp = child;
 314                         DLIST_REMOVE(children, child);
 315                         SAFE_FREE(tmp);
 316                         num_children -= 1;
 317                         return;
 318                 }
 319         }
 320
 321         DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
 322 }
 323
 324 /****************************************************************************
 325  Have we reached the process limit ?
 326 ****************************************************************************/
 327
 328 static bool allowable_number_of_smbd_processes(void)
 329 {
 330         int max_processes = lp_max_smbd_processes();
 331
 332         if (!max_processes)
 333                 return True;
 334
 335         return num_children < max_processes;
 336 }
 337
 338 /****************************************************************************
 339  Open the socket communication.
 340 ****************************************************************************/
 341
 342 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
 343 {
 344         int num_interfaces = iface_count();
 345         int num_sockets = 0;
 346         int fd_listenset[FD_SETSIZE];
 347         fd_set listen_set;
 348         int s;
 349         int maxfd = 0;
 350         int i;
 351         char *ports;
 352         struct dns_reg_state * dns_reg = NULL;
 353         unsigned dns_port = 0;
 354
 355         if (!is_daemon) {
 356                 return open_sockets_inetd();
 357         }
 358
 359 #ifdef HAVE_ATEXIT
 360         {
 361                 static int atexit_set;
 362                 if(atexit_set == 0) {
 363                         atexit_set=1;
 364                         atexit(killkids);
 365                 }
 366         }
 367 #endif
 368
 369         /* Stop zombies */
 370         CatchSignal(SIGCLD, sig_cld);
 371
 372         FD_ZERO(&listen_set);
 373
 374         /* use a reasonable default set of ports - listing on 445 and 139 */
 375         if (!smb_ports) {
 376                 ports = lp_smb_ports();
 377                 if (!ports || !*ports) {
 378                         ports = smb_xstrdup(SMB_PORTS);
 379                 } else {
 380                         ports = smb_xstrdup(ports);
 381                 }
 382         } else {
 383                 ports = smb_xstrdup(smb_ports);
 384         }
 385
 386         if (lp_interfaces() && lp_bind_interfaces_only()) {
 387                 /* We have been given an interfaces line, and been
 388                    told to only bind to those interfaces. Create a
 389                    socket per interface and bind to only these.
 390                 */
 391
 392                 /* Now open a listen socket for each of the
 393                    interfaces. */
 394                 for(i = 0; i < num_interfaces; i++) {
 395                         TALLOC_CTX *frame = NULL;
 396                         const struct sockaddr_storage *ifss =
 397                                         iface_n_sockaddr_storage(i);
 398                         char *tok;
 399                         const char *ptr;
 400
 401                         if (ifss == NULL) {
 402                                 DEBUG(0,("open_sockets_smbd: "
 403                                         "interface %d has NULL IP address !\n",
 404                                         i));
 405                                 continue;
 406                         }
 407
 408                         frame = talloc_stackframe();
 409                         for (ptr=ports;
 410                                         next_token_talloc(frame,&ptr, &tok, " \t,");) {
 411                                 unsigned port = atoi(tok);
 412                                 if (port == 0 || port > 0xffff) {
 413                                         continue;
 414                                 }
 415
 416                                 /* Keep the first port for mDNS service
 417                                  * registration.
 418                                  */
 419                                 if (dns_port == 0) {
 420                                         dns_port = port;
 421                                 }
 422
 423                                 s = fd_listenset[num_sockets] =
 424                                         open_socket_in(SOCK_STREAM,
 425                                                         port,
 426                                                         num_sockets == 0 ? 0 : 2,
 427                                                         ifss,
 428                                                         true);
 429                                 if(s == -1) {
 430                                         continue;
 431                                 }
 432
 433                                 /* ready to listen */
 434                                 set_socket_options(s,"SO_KEEPALIVE");
 435                                 set_socket_options(s,lp_socket_options());
 436
 437                                 /* Set server socket to
 438                                  * non-blocking for the accept. */
 439                                 set_blocking(s,False);
 440
 441                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
 442                                         DEBUG(0,("open_sockets_smbd: listen: "
 443                                                 "%s\n", strerror(errno)));
 444                                         close(s);
 445                                         TALLOC_FREE(frame);
 446                                         return False;
 447                                 }
 448                                 FD_SET(s,&listen_set);
 449                                 maxfd = MAX( maxfd, s);
 450
 451                                 num_sockets++;
 452                                 if (num_sockets >= FD_SETSIZE) {
 453                                         DEBUG(0,("open_sockets_smbd: Too "
 454                                                 "many sockets to bind to\n"));
 455                                         TALLOC_FREE(frame);
 456                                         return False;
 457                                 }
 458                         }
 459                         TALLOC_FREE(frame);
 460                 }
 461         } else {
 462                 /* Just bind to 0.0.0.0 - accept connections
 463                    from anywhere. */
 464
 465                 TALLOC_CTX *frame = talloc_stackframe();
 466                 char *tok;
 467                 const char *ptr;
 468                 const char *sock_addr = lp_socket_address();
 469                 char *sock_tok;
 470                 const char *sock_ptr;
 471
 472                 if (strequal(sock_addr, "0.0.0.0") ||
 473                                 strequal(sock_addr, "::")) {
 474 #if HAVE_IPV6
 475                         sock_addr = "::,0.0.0.0";
 476 #else
 477                         sock_addr = "0.0.0.0";
 478 #endif
 479                 }
 480
 481                 for (sock_ptr=sock_addr;
 482                                 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
 483                         for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
 484                                 struct sockaddr_storage ss;
 485
 486                                 unsigned port = atoi(tok);
 487                                 if (port == 0 || port > 0xffff) {
 488                                         continue;
 489                                 }
 490
 491                                 /* Keep the first port for mDNS service
 492                                  * registration.
 493                                  */
 494                                 if (dns_port == 0) {
 495                                         dns_port = port;
 496                                 }
 497
 498                                 /* open an incoming socket */
 499                                 if (!interpret_string_addr(&ss, sock_tok,
 500                                                 AI_NUMERICHOST|AI_PASSIVE)) {
 501                                         continue;
 502                                 }
 503
 504                                 s = open_socket_in(SOCK_STREAM,
 505                                                 port,
 506                                                 num_sockets == 0 ? 0 : 2,
 507                                                 &ss,
 508                                                 true);
 509                                 if (s == -1) {
 510                                         continue;
 511                                 }
 512
 513                                 /* ready to listen */
 514                                 set_socket_options(s,"SO_KEEPALIVE");
 515                                 set_socket_options(s,lp_socket_options());
 516
 517                                 /* Set server socket to non-blocking
 518                                  * for the accept. */
 519                                 set_blocking(s,False);
 520
 521                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
 522                                         DEBUG(0,("open_sockets_smbd: "
 523                                                 "listen: %s\n",
 524                                                  strerror(errno)));
 525                                         close(s);
 526                                         TALLOC_FREE(frame);
 527                                         return False;
 528                                 }
 529
 530                                 fd_listenset[num_sockets] = s;
 531                                 FD_SET(s,&listen_set);
 532                                 maxfd = MAX( maxfd, s);
 533
 534                                 num_sockets++;
 535
 536                                 if (num_sockets >= FD_SETSIZE) {
 537                                         DEBUG(0,("open_sockets_smbd: Too "
 538                                                 "many sockets to bind to\n"));
 539                                         TALLOC_FREE(frame);
 540                                         return False;
 541                                 }
 542                         }
 543                 }
 544                 TALLOC_FREE(frame);
 545         }
 546
 547         SAFE_FREE(ports);
 548
 549         if (num_sockets == 0) {
 550                 DEBUG(0,("open_sockets_smbd: No "
 551                         "sockets available to bind to.\n"));
 552                 return false;
 553         }
 554
 555         /* Setup the main smbd so that we can get messages. Note that
 556            do this after starting listening. This is needed as when in
 557            clustered mode, ctdb won't allow us to start doing database
 558            operations until it has gone thru a full startup, which
 559            includes checking to see that smbd is listening. */
 560         claim_connection(NULL,"",
 561                          FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
 562
 563         /* Listen to messages */
 564
 565         messaging_register(smbd_messaging_context(), NULL,
 566                            MSG_SMB_SAM_SYNC, msg_sam_sync);
 567         messaging_register(smbd_messaging_context(), NULL,
 568                            MSG_SHUTDOWN, msg_exit_server);
 569         messaging_register(smbd_messaging_context(), NULL,
 570                            MSG_SMB_FILE_RENAME, msg_file_was_renamed);
 571         messaging_register(smbd_messaging_context(), NULL,
 572                            MSG_SMB_CONF_UPDATED, smb_conf_updated);
 573         messaging_register(smbd_messaging_context(), NULL,
 574                            MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
 575         brl_register_msgs(smbd_messaging_context());
 576
 577 #ifdef CLUSTER_SUPPORT
 578         ctdbd_register_reconfigure(messaging_ctdbd_connection());
 579 #endif
 580
 581 #ifdef DEVELOPER
 582         messaging_register(smbd_messaging_context(), NULL,
 583                            MSG_SMB_INJECT_FAULT, msg_inject_fault);
 584 #endif
 585
 586         /* now accept incoming connections - forking a new process
 587            for each incoming connection */
 588         DEBUG(2,("waiting for a connection\n"));
 589         while (1) {
 590                 struct timeval now, idle_timeout;
 591                 fd_set r_fds, w_fds;
 592                 int num;
 593
 594                 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
 595                 message_dispatch(smbd_messaging_context());
 596
 597                 if (got_sig_cld) {
 598                         pid_t pid;
 599                         int status;
 600
 601                         got_sig_cld = False;
 602
 603                         while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
 604                                 bool unclean_shutdown = False;
 605
 606                                 /* If the child terminated normally, assume
 607                                    it was an unclean shutdown unless the
 608                                    status is 0
 609                                 */
 610                                 if (WIFEXITED(status)) {
 611                                         unclean_shutdown = WEXITSTATUS(status);
 612                                 }
 613                                 /* If the child terminated due to a signal
 614                                    we always assume it was unclean.
 615                                 */
 616                                 if (WIFSIGNALED(status)) {
 617                                         unclean_shutdown = True;
 618                                 }
 619                                 remove_child_pid(pid, unclean_shutdown);
 620                         }
 621                 }
 622
 623                 idle_timeout = timeval_zero();
 624
 625                 memcpy((char *)&r_fds, (char *)&listen_set,
 626                        sizeof(listen_set));
 627                 FD_ZERO(&w_fds);
 628                 GetTimeOfDay(&now);
 629
 630                 /* Kick off our mDNS registration. */
 631                 if (dns_port != 0) {
 632                         dns_register_smbd(&dns_reg, dns_port, &maxfd,
 633                                         &r_fds, &idle_timeout);
 634                 }
 635
 636                 event_add_to_select_args(smbd_event_context(), &now,
 637                                          &r_fds, &w_fds, &idle_timeout,
 638                                          &maxfd);
 639
 640                 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
 641                                  timeval_is_zero(&idle_timeout) ?
 642                                  NULL : &idle_timeout);
 643
 644                 if (num == -1 && errno == EINTR) {
 645                         if (got_sig_term) {
 646                                 exit_server_cleanly(NULL);
 647                         }
 648
 649                         /* check for sighup processing */
 650                         if (reload_after_sighup) {
 651                                 change_to_root_user();
 652                                 DEBUG(1,("Reloading services after SIGHUP\n"));
 653                                 reload_services(False);
 654                                 reload_after_sighup = 0;
 655                         }
 656
 657                         continue;
 658                 }
 659
 660
 661                 /* If the idle timeout fired and we don't have any connected
 662                  * users, exit gracefully. We should be running under a process
 663                  * controller that will restart us if necessry.
 664                  */
 665                 if (num == 0 && count_all_current_connections() == 0) {
 666                         exit_server_cleanly("idle timeout");
 667                 }
 668
 669                 /* process pending nDNS responses */
 670                 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
 671                         --num;
 672                 }
 673
 674                 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
 675                         continue;
 676                 }
 677
 678                 /* check if we need to reload services */
 679                 check_reload(time(NULL));
 680
 681                 /* Find the sockets that are read-ready -
 682                    accept on these. */
 683                 for( ; num > 0; num--) {
 684                         struct sockaddr addr;
 685                         socklen_t in_addrlen = sizeof(addr);
 686                         pid_t child = 0;
 687
 688                         s = -1;
 689                         for(i = 0; i < num_sockets; i++) {
 690                                 if(FD_ISSET(fd_listenset[i],&r_fds)) {
 691                                         s = fd_listenset[i];
 692                                         /* Clear this so we don't look
 693                                            at it again. */
 694                                         FD_CLR(fd_listenset[i],&r_fds);
 695                                         break;
 696                                 }
 697                         }
 698
 699                         smbd_set_server_fd(accept(s,&addr,&in_addrlen));
 700
 701                         if (smbd_server_fd() == -1 && errno == EINTR)
 702                                 continue;
 703
 704                         if (smbd_server_fd() == -1) {
 705                                 DEBUG(2,("open_sockets_smbd: accept: %s\n",
 706                                          strerror(errno)));
 707                                 continue;
 708                         }
 709
 710                         /* Ensure child is set to blocking mode */
 711                         set_blocking(smbd_server_fd(),True);
 712
 713                         if (smbd_server_fd() != -1 && interactive)
 714                                 return True;
 715
 716                         if (allowable_number_of_smbd_processes() &&
 717                             smbd_server_fd() != -1 &&
 718                             ((child = sys_fork())==0)) {
 719                                 char remaddr[INET6_ADDRSTRLEN];
 720
 721                                 /* Child code ... */
 722
 723                                 /* Stop zombies, the parent explicitly handles
 724                                  * them, counting worker smbds. */
 725                                 CatchChild();
 726
 727                                 /* close the listening socket(s) */
 728                                 for(i = 0; i < num_sockets; i++)
 729                                         close(fd_listenset[i]);
 730
 731                                 /* close our mDNS daemon handle */
 732                                 dns_register_close(&dns_reg);
 733
 734                                 /* close our standard file
 735                                    descriptors */
 736                                 close_low_fds(False);
 737                                 am_parent = 0;
 738
 739                                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 740                                 set_socket_options(smbd_server_fd(),
 741                                                    lp_socket_options());
 742
 743                                 /* this is needed so that we get decent entries
 744                                    in smbstatus for port 445 connects */
 745                                 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
 746                                                                 remaddr,
 747                                                                 sizeof(remaddr)),
 748                                                                 false);
 749
 750                                 if (!reinit_after_fork(
 751                                             smbd_messaging_context(), true)) {
 752                                         DEBUG(0,("reinit_after_fork() failed\n"));
 753                                         smb_panic("reinit_after_fork() failed");
 754                                 }
 755
 756                                 return True;
 757                         }
 758                         /* The parent doesn't need this socket */
 759                         close(smbd_server_fd());
 760
 761                         /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
 762                                 Clear the closed fd info out of server_fd --
 763                                 and more importantly, out of client_fd in
 764                                 util_sock.c, to avoid a possible
 765                                 getpeername failure if we reopen the logs
 766                                 and use %I in the filename.
 767                         */
 768
 769                         smbd_set_server_fd(-1);
 770
 771                         if (child != 0) {
 772                                 add_child_pid(child);
 773                         }
 774
 775                         /* Force parent to check log size after
 776                          * spawning child.  Fix from
 777                          * klausr@ITAP.Physik.Uni-Stuttgart.De.  The
 778                          * parent smbd will log to logserver.smb.  It
 779                          * writes only two messages for each child
 780                          * started/finished. But each child writes,
 781                          * say, 50 messages also in logserver.smb,
 782                          * begining with the debug_count of the
 783                          * parent, before the child opens its own log
 784                          * file logserver.client. In a worst case
 785                          * scenario the size of logserver.smb would be
 786                          * checked after about 50*50=2500 messages
 787                          * (ca. 100kb).
 788                          * */
 789                         force_check_log_size();
 790
 791                 } /* end for num */
 792         } /* end while 1 */
 793
 794 /* NOTREACHED   return True; */
 795 }
 796
 797 /****************************************************************************
 798  Reload printers
 799 **************************************************************************/
 800 void reload_printers(void)
 801 {
 802         int snum;
 803         int n_services = lp_numservices();
 804         int pnum = lp_servicenumber(PRINTERS_NAME);
 805         const char *pname;
 806
 807         pcap_cache_reload();
 808
 809         /* remove stale printers */
 810         for (snum = 0; snum < n_services; snum++) {
 811                 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
 812                 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
 813                                       lp_autoloaded(snum)))
 814                         continue;
 815
 816                 pname = lp_printername(snum);
 817                 if (!pcap_printername_ok(pname)) {
 818                         DEBUG(3, ("removing stale printer %s\n", pname));
 819
 820                         if (is_printer_published(NULL, snum, NULL))
 821                                 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
 822                         del_a_printer(pname);
 823                         lp_killservice(snum);
 824                 }
 825         }
 826
 827         load_printers();
 828 }
 829
 830 /****************************************************************************
 831  Reload the services file.
 832 **************************************************************************/
 833
 834 bool reload_services(bool test)
 835 {
 836         bool ret;
 837
 838         if (lp_loaded()) {
 839                 char *fname = lp_configfile();
 840                 if (file_exist(fname, NULL) &&
 841                     !strcsequal(fname, get_dyn_CONFIGFILE())) {
 842                         set_dyn_CONFIGFILE(fname);
 843                         test = False;
 844                 }
 845         }
 846
 847         reopen_logs();
 848
 849         if (test && !lp_file_list_changed())
 850                 return(True);
 851
 852         lp_killunused(conn_snum_used);
 853
 854         ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
 855
 856         reload_printers();
 857
 858         /* perhaps the config filename is now set */
 859         if (!test)
 860                 reload_services(True);
 861
 862         reopen_logs();
 863
 864         load_interfaces();
 865
 866         if (smbd_server_fd() != -1) {
 867                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 868                 set_socket_options(smbd_server_fd(), lp_socket_options());
 869         }
 870
 871         mangle_reset_cache();
 872         reset_stat_cache();
 873
 874         /* this forces service parameters to be flushed */
 875         set_current_service(NULL,0,True);
 876
 877         return(ret);
 878 }
 879
 880 /****************************************************************************
 881  Exit the server.
 882 ****************************************************************************/
 883
 884 /* Reasons for shutting down a server process. */
 885 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
 886
 887 static void exit_server_common(enum server_exit_reason how,
 888         const char *const reason) NORETURN_ATTRIBUTE;
 889
 890 static void exit_server_common(enum server_exit_reason how,
 891         const char *const reason)
 892 {
 893         static int firsttime=1;
 894
 895         if (!firsttime)
 896                 exit(0);
 897         firsttime = 0;
 898
 899         change_to_root_user();
 900
 901         if (negprot_global_auth_context) {
 902                 (negprot_global_auth_context->free)(&negprot_global_auth_context);
 903         }
 904
 905         conn_close_all();
 906
 907         invalidate_all_vuids();
 908
 909         /* 3 second timeout. */
 910         print_notify_send_messages(smbd_messaging_context(), 3);
 911
 912         /* delete our entry in the connections database. */
 913         yield_connection(NULL,"");
 914
 915         respond_to_all_remaining_local_messages();
 916
 917 #ifdef WITH_DFS
 918         if (dcelogin_atmost_once) {
 919                 dfs_unlogin();
 920         }
 921 #endif
 922
 923 #ifdef USE_DMAPI
 924         /* Destroy Samba DMAPI session only if we are master smbd process */
 925         if (am_parent) {
 926                 if (!dmapi_destroy_session()) {
 927                         DEBUG(0,("Unable to close Samba DMAPI session\n"));
 928                 }
 929         }
 930 #endif
 931
 932         locking_end();
 933         printing_end();
 934
 935         if (how != SERVER_EXIT_NORMAL) {
 936                 int oldlevel = DEBUGLEVEL;
 937
 938                 DEBUGLEVEL = 10;
 939
 940                 DEBUGSEP(0);
 941                 DEBUG(0,("Abnormal server exit: %s\n",
 942                         reason ? reason : "no explanation provided"));
 943                 DEBUGSEP(0);
 944
 945                 log_stack_trace();
 946
 947                 DEBUGLEVEL = oldlevel;
 948                 dump_core();
 949
 950         } else {
 951                 DEBUG(3,("Server exit (%s)\n",
 952                         (reason ? reason : "normal exit")));
 953         }
 954
 955         exit(0);
 956 }
 957
 958 void exit_server(const char *const explanation)
 959 {
 960         exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
 961 }
 962
 963 void exit_server_cleanly(const char *const explanation)
 964 {
 965         exit_server_common(SERVER_EXIT_NORMAL, explanation);
 966 }
 967
 968 void exit_server_fault(void)
 969 {
 970         exit_server("critical server fault");
 971 }
 972
 973
 974 /****************************************************************************
 975 received when we should release a specific IP
 976 ****************************************************************************/
 977 static void release_ip(const char *ip, void *priv)
 978 {
 979         char addr[INET6_ADDRSTRLEN];
 980
 981         if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
 982                 /* we can't afford to do a clean exit - that involves
 983                    database writes, which would potentially mean we
 984                    are still running after the failover has finished -
 985                    we have to get rid of this process ID straight
 986                    away */
 987                 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
 988                         ip));
 989                 _exit(0);
 990         }
 991 }
 992
 993 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
 994                            uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
 995 {
 996         release_ip((char *)data->data, NULL);
 997 }
 998
 999 /****************************************************************************
1000  Initialise connect, service and file structs.
1001 ****************************************************************************/
1002
1003 static bool init_structs(void )
1004 {
1005         /*
1006          * Set the machine NETBIOS name if not already
1007          * set from the config file.
1008          */
1009
1010         if (!init_names())
1011                 return False;
1012
1013         conn_init();
1014
1015         file_init();
1016
1017         /* for RPC pipes */
1018         init_rpc_pipe_hnd();
1019
1020         init_dptrs();
1021
1022         if (!secrets_init())
1023                 return False;
1024
1025         return True;
1026 }
1027
1028 /*
1029  * Send keepalive packets to our client
1030  */
1031 static bool keepalive_fn(const struct timeval *now, void *private_data)
1032 {
1033         if (!send_keepalive(smbd_server_fd())) {
1034                 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1035                 return False;
1036         }
1037         return True;
1038 }
1039
1040 /*
1041  * Do the recurring check if we're idle
1042  */
1043 static bool deadtime_fn(const struct timeval *now, void *private_data)
1044 {
1045         if ((conn_num_open() == 0)
1046             || (conn_idle_all(now->tv_sec))) {
1047                 DEBUG( 2, ( "Closing idle connection\n" ) );
1048                 messaging_send(smbd_messaging_context(), procid_self(),
1049                                MSG_SHUTDOWN, &data_blob_null);
1050                 return False;
1051         }
1052
1053         return True;
1054 }
1055
1056
1057 /****************************************************************************
1058  main program.
1059 ****************************************************************************/
1060
1061 /* Declare prototype for build_options() to avoid having to run it through
1062    mkproto.h.  Mixing $(builddir) and $(srcdir) source files in the current
1063    prototype generation system is too complicated. */
1064
1065 extern void build_options(bool screen);
1066
1067  int main(int argc,const char *argv[])
1068 {
1069         /* shall I run as a daemon */
1070         static bool is_daemon = False;
1071         static bool interactive = False;
1072         static bool Fork = True;
1073         static bool no_process_group = False;
1074         static bool log_stdout = False;
1075         static char *ports = NULL;
1076         static char *profile_level = NULL;
1077         int opt;
1078         poptContext pc;
1079         bool print_build_options = False;
1080         enum {
1081                 OPT_DAEMON = 1000,
1082                 OPT_INTERACTIVE,
1083                 OPT_FORK,
1084                 OPT_NO_PROCESS_GROUP,
1085                 OPT_LOG_STDOUT
1086         };
1087         struct poptOption long_options[] = {
1088         POPT_AUTOHELP
1089         {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1090         {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1091         {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1092         {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1093         {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1094         {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1095         {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1096         {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1097         POPT_COMMON_SAMBA
1098         POPT_COMMON_DYNCONFIG
1099         POPT_TABLEEND
1100         };
1101         TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1102
1103         TimeInit();
1104
1105 #ifdef HAVE_SET_AUTH_PARAMETERS
1106         set_auth_parameters(argc,argv);
1107 #endif
1108
1109         pc = poptGetContext("smbd", argc, argv, long_options, 0);
1110         while((opt = poptGetNextOpt(pc)) != -1) {
1111                 switch (opt)  {
1112                 case OPT_DAEMON:
1113                         is_daemon = true;
1114                         break;
1115                 case OPT_INTERACTIVE:
1116                         interactive = true;
1117                         break;
1118                 case OPT_FORK:
1119                         Fork = false;
1120                         break;
1121                 case OPT_NO_PROCESS_GROUP:
1122                         no_process_group = true;
1123                         break;
1124                 case OPT_LOG_STDOUT:
1125                         log_stdout = true;
1126                         break;
1127                 case 'b':
1128                         print_build_options = True;
1129                         break;
1130                 default:
1131                         d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1132                                   poptBadOption(pc, 0), poptStrerror(opt));
1133                         poptPrintUsage(pc, stderr, 0);
1134                         exit(1);
1135                 }
1136         }
1137         poptFreeContext(pc);
1138
1139         if (interactive) {
1140                 Fork = False;
1141                 log_stdout = True;
1142         }
1143
1144         setup_logging(argv[0],log_stdout);
1145
1146         if (print_build_options) {
1147                 build_options(True); /* Display output to screen as well as debug */
1148                 exit(0);
1149         }
1150
1151         load_case_tables();
1152
1153 #ifdef HAVE_SETLUID
1154         /* needed for SecureWare on SCO */
1155         setluid(0);
1156 #endif
1157
1158         sec_init();
1159
1160         set_remote_machine_name("smbd", False);
1161
1162         if (interactive && (DEBUGLEVEL >= 9)) {
1163                 talloc_enable_leak_report();
1164         }
1165
1166         if (log_stdout && Fork) {
1167                 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1168                 exit(1);
1169         }
1170
1171         /* we want to re-seed early to prevent time delays causing
1172            client problems at a later date. (tridge) */
1173         generate_random_buffer(NULL, 0);
1174
1175         /* make absolutely sure we run as root - to handle cases where people
1176            are crazy enough to have it setuid */
1177
1178         gain_root_privilege();
1179         gain_root_group_privilege();
1180
1181         fault_setup((void (*)(void *))exit_server_fault);
1182         dump_core_setup("smbd");
1183
1184         CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1185         CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1186
1187         /* we are never interested in SIGPIPE */
1188         BlockSignals(True,SIGPIPE);
1189
1190 #if defined(SIGFPE)
1191         /* we are never interested in SIGFPE */
1192         BlockSignals(True,SIGFPE);
1193 #endif
1194
1195 #if defined(SIGUSR2)
1196         /* We are no longer interested in USR2 */
1197         BlockSignals(True,SIGUSR2);
1198 #endif
1199
1200         /* POSIX demands that signals are inherited. If the invoking process has
1201          * these signals masked, we will have problems, as we won't recieve them. */
1202         BlockSignals(False, SIGHUP);
1203         BlockSignals(False, SIGUSR1);
1204         BlockSignals(False, SIGTERM);
1205
1206         /* we want total control over the permissions on created files,
1207            so set our umask to 0 */
1208         umask(0);
1209
1210         init_sec_ctx();
1211
1212         reopen_logs();
1213
1214         DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1215         DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1216
1217         DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1218                  (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1219
1220         /* Output the build options to the debug log */
1221         build_options(False);
1222
1223         if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1224                 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1225                 exit(1);
1226         }
1227
1228         if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1229                 DEBUG(0, ("error opening config file\n"));
1230                 exit(1);
1231         }
1232
1233         if (smbd_messaging_context() == NULL)
1234                 exit(1);
1235
1236         if (!reload_services(False))
1237                 return(-1);
1238
1239         init_structs();
1240
1241 #ifdef WITH_PROFILE
1242         if (!profile_setup(smbd_messaging_context(), False)) {
1243                 DEBUG(0,("ERROR: failed to setup profiling\n"));
1244                 return -1;
1245         }
1246         if (profile_level != NULL) {
1247                 int pl = atoi(profile_level);
1248                 struct server_id src;
1249
1250                 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1251                 src.pid = getpid();
1252                 set_profile_level(pl, src);
1253         }
1254 #endif
1255
1256         DEBUG(3,( "loaded services\n"));
1257
1258         if (!is_daemon && !is_a_socket(0)) {
1259                 if (!interactive)
1260                         DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1261
1262                 /*
1263                  * Setting is_daemon here prevents us from eventually calling
1264                  * the open_sockets_inetd()
1265                  */
1266
1267                 is_daemon = True;
1268         }
1269
1270         if (is_daemon && !interactive) {
1271                 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1272                 become_daemon(Fork, no_process_group);
1273         }
1274
1275 #if HAVE_SETPGID
1276         /*
1277          * If we're interactive we want to set our own process group for
1278          * signal management.
1279          */
1280         if (interactive && !no_process_group)
1281                 setpgid( (pid_t)0, (pid_t)0);
1282 #endif
1283
1284         if (!directory_exist(lp_lockdir(), NULL))
1285                 mkdir(lp_lockdir(), 0755);
1286
1287         if (is_daemon)
1288                 pidfile_create("smbd");
1289
1290         if (!reinit_after_fork(smbd_messaging_context(), false)) {
1291                 DEBUG(0,("reinit_after_fork() failed\n"));
1292                 exit(1);
1293         }
1294
1295         /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1296
1297         if (smbd_memcache() == NULL) {
1298                 exit(1);
1299         }
1300
1301         memcache_set_global(smbd_memcache());
1302
1303         /* Initialise the password backed before the global_sam_sid
1304            to ensure that we fetch from ldap before we make a domain sid up */
1305
1306         if(!initialize_password_db(False, smbd_event_context()))
1307                 exit(1);
1308
1309         if (!secrets_init()) {
1310                 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1311                 exit(1);
1312         }
1313
1314         if(!get_global_sam_sid()) {
1315                 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1316                 exit(1);
1317         }
1318
1319         if (!session_init())
1320                 exit(1);
1321
1322         if (!connections_init(True))
1323                 exit(1);
1324
1325         if (!locking_init())
1326                 exit(1);
1327
1328         namecache_enable();
1329
1330         if (!W_ERROR_IS_OK(registry_init_full()))
1331                 exit(1);
1332
1333 #if 0
1334         if (!init_svcctl_db())
1335                 exit(1);
1336 #endif
1337
1338         if (!print_backend_init(smbd_messaging_context()))
1339                 exit(1);
1340
1341         if (!init_guest_info()) {
1342                 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1343                 return -1;
1344         }
1345
1346         /* only start the background queue daemon if we are
1347            running as a daemon -- bad things will happen if
1348            smbd is launched via inetd and we fork a copy of
1349            ourselves here */
1350
1351         if (is_daemon && !interactive
1352             && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1353                 start_background_queue();
1354         }
1355
1356         if (!open_sockets_smbd(is_daemon, interactive, ports))
1357                 exit(1);
1358
1359         /*
1360          * everything after this point is run after the fork()
1361          */
1362
1363         static_init_rpc;
1364
1365         init_modules();
1366
1367         /* Possibly reload the services file. Only worth doing in
1368          * daemon mode. In inetd mode, we know we only just loaded this.
1369          */
1370         if (is_daemon) {
1371                 reload_services(True);
1372         }
1373
1374         if (!init_account_policy()) {
1375                 DEBUG(0,("Could not open account policy tdb.\n"));
1376                 exit(1);
1377         }
1378
1379         if (*lp_rootdir()) {
1380                 if (sys_chroot(lp_rootdir()) == 0)
1381                         DEBUG(2,("Changed root to %s\n", lp_rootdir()));
1382         }
1383
1384         /* Setup oplocks */
1385         if (!init_oplocks(smbd_messaging_context()))
1386                 exit(1);
1387
1388         /* Setup aio signal handler. */
1389         initialize_async_io_handler();
1390
1391         /* register our message handlers */
1392         messaging_register(smbd_messaging_context(), NULL,
1393                            MSG_SMB_FORCE_TDIS, msg_force_tdis);
1394         messaging_register(smbd_messaging_context(), NULL,
1395                            MSG_SMB_RELEASE_IP, msg_release_ip);
1396         messaging_register(smbd_messaging_context(), NULL,
1397                            MSG_SMB_CLOSE_FILE, msg_close_file);
1398
1399         if ((lp_keepalive() != 0)
1400             && !(event_add_idle(smbd_event_context(), NULL,
1401                                 timeval_set(lp_keepalive(), 0),
1402                                 "keepalive", keepalive_fn,
1403                                 NULL))) {
1404                 DEBUG(0, ("Could not add keepalive event\n"));
1405                 exit(1);
1406         }
1407
1408         if (!(event_add_idle(smbd_event_context(), NULL,
1409                              timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1410                              "deadtime", deadtime_fn, NULL))) {
1411                 DEBUG(0, ("Could not add deadtime event\n"));
1412                 exit(1);
1413         }
1414
1415 #ifdef CLUSTER_SUPPORT
1416
1417         if (lp_clustering()) {
1418                 /*
1419                  * We need to tell ctdb about our client's TCP
1420                  * connection, so that for failover ctdbd can send
1421                  * tickle acks, triggering a reconnection by the
1422                  * client.
1423                  */
1424
1425                 struct sockaddr_in srv, clnt;
1426
1427                 if (client_get_tcp_info(&srv, &clnt) == 0) {
1428
1429                         NTSTATUS status;
1430
1431                         status = ctdbd_register_ips(
1432                                 messaging_ctdbd_connection(),
1433                                 &srv, &clnt, release_ip, NULL);
1434
1435                         if (!NT_STATUS_IS_OK(status)) {
1436                                 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1437                                           nt_errstr(status)));
1438                         }
1439                 } else
1440                 {
1441                         DEBUG(0,("Unable to get tcp info for "
1442                                  "CTDB_CONTROL_TCP_CLIENT: %s\n",
1443                                  strerror(errno)));
1444                 }
1445         }
1446
1447 #endif
1448
1449         TALLOC_FREE(frame);
1450
1451         smbd_process();
1452
1453         namecache_shutdown();
1454
1455         exit_server_cleanly(NULL);
1456         return(0);
1457 }