source3/smbd/server.c

   1 /*
   2    Unix SMB/CIFS implementation.
   3    Main SMB server routines
   4    Copyright (C) Andrew Tridgell                1992-1998
   5    Copyright (C) Martin Pool                    2002
   6    Copyright (C) Jelmer Vernooij                2002-2003
   7    Copyright (C) Volker Lendecke                1993-2007
   8    Copyright (C) Jeremy Allison                 1993-2007
   9
  10    This program is free software; you can redistribute it and/or modify
  11    it under the terms of the GNU General Public License as published by
  12    the Free Software Foundation; either version 3 of the License, or
  13    (at your option) any later version.
  14
  15    This program is distributed in the hope that it will be useful,
  16    but WITHOUT ANY WARRANTY; without even the implied warranty of
  17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
  18    GNU General Public License for more details.
  19
  20    You should have received a copy of the GNU General Public License
  21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
  22 */
  23
  24 #include "includes.h"
  25
  26 static_decl_rpc;
  27
  28 static int am_parent = 1;
  29
  30 extern struct auth_context *negprot_global_auth_context;
  31 extern SIG_ATOMIC_T got_sig_term;
  32 extern SIG_ATOMIC_T reload_after_sighup;
  33 static SIG_ATOMIC_T got_sig_cld;
  34
  35 #ifdef WITH_DFS
  36 extern int dcelogin_atmost_once;
  37 #endif /* WITH_DFS */
  38
  39 /* really we should have a top level context structure that has the
  40    client file descriptor as an element. That would require a major rewrite :(
  41
  42    the following 2 functions are an alternative - they make the file
  43    descriptor private to smbd
  44  */
  45 static int server_fd = -1;
  46
  47 int smbd_server_fd(void)
  48 {
  49         return server_fd;
  50 }
  51
  52 static void smbd_set_server_fd(int fd)
  53 {
  54         server_fd = fd;
  55 }
  56
  57 int get_client_fd(void)
  58 {
  59         return server_fd;
  60 }
  61
  62 int client_get_tcp_info(struct sockaddr_in *server, struct sockaddr_in *client)
  63 {
  64         socklen_t length;
  65         if (server_fd == -1) {
  66                 return -1;
  67         }
  68         length = sizeof(*server);
  69         if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
  70                 return -1;
  71         }
  72         length = sizeof(*client);
  73         if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
  74                 return -1;
  75         }
  76         return 0;
  77 }
  78
  79 struct event_context *smbd_event_context(void)
  80 {
  81         static struct event_context *ctx;
  82
  83         if (!ctx && !(ctx = event_context_init(NULL))) {
  84                 smb_panic("Could not init smbd event context");
  85         }
  86         return ctx;
  87 }
  88
  89 struct messaging_context *smbd_messaging_context(void)
  90 {
  91         static struct messaging_context *ctx;
  92
  93         if (ctx == NULL) {
  94                 ctx = messaging_init(NULL, server_id_self(),
  95                                      smbd_event_context());
  96         }
  97         if (ctx == NULL) {
  98                 DEBUG(0, ("Could not init smbd messaging context.\n"));
  99         }
 100         return ctx;
 101 }
 102
 103 struct memcache *smbd_memcache(void)
 104 {
 105         static struct memcache *cache;
 106
 107         if (!cache
 108             && !(cache = memcache_init(NULL,
 109                                        lp_max_stat_cache_size()*1024))) {
 110
 111                 smb_panic("Could not init smbd memcache");
 112         }
 113         return cache;
 114 }
 115
 116 /*******************************************************************
 117  What to do when smb.conf is updated.
 118  ********************************************************************/
 119
 120 static void smb_conf_updated(struct messaging_context *msg,
 121                              void *private_data,
 122                              uint32_t msg_type,
 123                              struct server_id server_id,
 124                              DATA_BLOB *data)
 125 {
 126         DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
 127                   "updated. Reloading.\n"));
 128         reload_services(False);
 129 }
 130
 131
 132 /*******************************************************************
 133  Delete a statcache entry.
 134  ********************************************************************/
 135
 136 static void smb_stat_cache_delete(struct messaging_context *msg,
 137                                   void *private_data,
 138                                   uint32_t msg_tnype,
 139                                   struct server_id server_id,
 140                                   DATA_BLOB *data)
 141 {
 142         const char *name = (const char *)data->data;
 143         DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
 144         stat_cache_delete(name);
 145 }
 146
 147 /****************************************************************************
 148  Terminate signal.
 149 ****************************************************************************/
 150
 151 static void sig_term(void)
 152 {
 153         got_sig_term = 1;
 154         sys_select_signal(SIGTERM);
 155 }
 156
 157 /****************************************************************************
 158  Catch a sighup.
 159 ****************************************************************************/
 160
 161 static void sig_hup(int sig)
 162 {
 163         reload_after_sighup = 1;
 164         sys_select_signal(SIGHUP);
 165 }
 166
 167 /****************************************************************************
 168  Catch a sigcld
 169 ****************************************************************************/
 170 static void sig_cld(int sig)
 171 {
 172         got_sig_cld = 1;
 173         sys_select_signal(SIGCLD);
 174 }
 175
 176 /****************************************************************************
 177   Send a SIGTERM to our process group.
 178 *****************************************************************************/
 179
 180 static void  killkids(void)
 181 {
 182         if(am_parent) kill(0,SIGTERM);
 183 }
 184
 185 /****************************************************************************
 186  Process a sam sync message - not sure whether to do this here or
 187  somewhere else.
 188 ****************************************************************************/
 189
 190 static void msg_sam_sync(struct messaging_context *msg,
 191                          void *private_data,
 192                          uint32_t msg_type,
 193                          struct server_id server_id,
 194                          DATA_BLOB *data)
 195 {
 196         DEBUG(10, ("** sam sync message received, ignoring\n"));
 197 }
 198
 199
 200 /****************************************************************************
 201  Open the socket communication - inetd.
 202 ****************************************************************************/
 203
 204 static bool open_sockets_inetd(void)
 205 {
 206         /* Started from inetd. fd 0 is the socket. */
 207         /* We will abort gracefully when the client or remote system
 208            goes away */
 209         smbd_set_server_fd(dup(0));
 210
 211         /* close our standard file descriptors */
 212         close_low_fds(False); /* Don't close stderr */
 213
 214         set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 215         set_socket_options(smbd_server_fd(), lp_socket_options());
 216
 217         return True;
 218 }
 219
 220 static void msg_exit_server(struct messaging_context *msg,
 221                             void *private_data,
 222                             uint32_t msg_type,
 223                             struct server_id server_id,
 224                             DATA_BLOB *data)
 225 {
 226         DEBUG(3, ("got a SHUTDOWN message\n"));
 227         exit_server_cleanly(NULL);
 228 }
 229
 230 #ifdef DEVELOPER
 231 static void msg_inject_fault(struct messaging_context *msg,
 232                              void *private_data,
 233                              uint32_t msg_type,
 234                              struct server_id src,
 235                              DATA_BLOB *data)
 236 {
 237         int sig;
 238
 239         if (data->length != sizeof(sig)) {
 240
 241                 DEBUG(0, ("Process %s sent bogus signal injection request\n",
 242                           procid_str_static(&src)));
 243                 return;
 244         }
 245
 246         sig = *(int *)data->data;
 247         if (sig == -1) {
 248                 exit_server("internal error injected");
 249                 return;
 250         }
 251
 252 #if HAVE_STRSIGNAL
 253         DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
 254                   procid_str_static(&src), sig, strsignal(sig)));
 255 #else
 256         DEBUG(0, ("Process %s requested injection of signal %d\n",
 257                   procid_str_static(&src), sig));
 258 #endif
 259
 260         kill(sys_getpid(), sig);
 261 }
 262 #endif /* DEVELOPER */
 263
 264 struct child_pid {
 265         struct child_pid *prev, *next;
 266         pid_t pid;
 267 };
 268
 269 static struct child_pid *children;
 270 static int num_children;
 271
 272 static void add_child_pid(pid_t pid)
 273 {
 274         struct child_pid *child;
 275
 276         if (lp_max_smbd_processes() == 0) {
 277                 /* Don't bother with the child list if we don't care anyway */
 278                 return;
 279         }
 280
 281         child = SMB_MALLOC_P(struct child_pid);
 282         if (child == NULL) {
 283                 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
 284                 return;
 285         }
 286         child->pid = pid;
 287         DLIST_ADD(children, child);
 288         num_children += 1;
 289 }
 290
 291 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
 292 {
 293         struct child_pid *child;
 294
 295         if (unclean_shutdown) {
 296                 /* a child terminated uncleanly so tickle all processes to see
 297                    if they can grab any of the pending locks
 298                 */
 299                 DEBUG(0,(__location__ " Unclean shutdown of pid %u\n", pid));
 300                 messaging_send_buf(smbd_messaging_context(), procid_self(),
 301                                    MSG_SMB_BRL_VALIDATE, NULL, 0);
 302                 message_send_all(smbd_messaging_context(),
 303                                  MSG_SMB_UNLOCK, NULL, 0, NULL);
 304         }
 305
 306         if (lp_max_smbd_processes() == 0) {
 307                 /* Don't bother with the child list if we don't care anyway */
 308                 return;
 309         }
 310
 311         for (child = children; child != NULL; child = child->next) {
 312                 if (child->pid == pid) {
 313                         struct child_pid *tmp = child;
 314                         DLIST_REMOVE(children, child);
 315                         SAFE_FREE(tmp);
 316                         num_children -= 1;
 317                         return;
 318                 }
 319         }
 320
 321         DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
 322 }
 323
 324 /****************************************************************************
 325  Have we reached the process limit ?
 326 ****************************************************************************/
 327
 328 static bool allowable_number_of_smbd_processes(void)
 329 {
 330         int max_processes = lp_max_smbd_processes();
 331
 332         if (!max_processes)
 333                 return True;
 334
 335         return num_children < max_processes;
 336 }
 337
 338 /****************************************************************************
 339  Open the socket communication.
 340 ****************************************************************************/
 341
 342 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
 343 {
 344         int num_interfaces = iface_count();
 345         int num_sockets = 0;
 346         int fd_listenset[FD_SETSIZE];
 347         fd_set listen_set;
 348         int s;
 349         int maxfd = 0;
 350         int i;
 351         char *ports;
 352         struct dns_reg_state * dns_reg = NULL;
 353         unsigned dns_port = 0;
 354
 355         if (!is_daemon) {
 356                 return open_sockets_inetd();
 357         }
 358
 359 #ifdef HAVE_ATEXIT
 360         {
 361                 static int atexit_set;
 362                 if(atexit_set == 0) {
 363                         atexit_set=1;
 364                         atexit(killkids);
 365                 }
 366         }
 367 #endif
 368
 369         /* Stop zombies */
 370         CatchSignal(SIGCLD, sig_cld);
 371
 372         FD_ZERO(&listen_set);
 373
 374         /* use a reasonable default set of ports - listing on 445 and 139 */
 375         if (!smb_ports) {
 376                 ports = lp_smb_ports();
 377                 if (!ports || !*ports) {
 378                         ports = smb_xstrdup(SMB_PORTS);
 379                 } else {
 380                         ports = smb_xstrdup(ports);
 381                 }
 382         } else {
 383                 ports = smb_xstrdup(smb_ports);
 384         }
 385
 386         if (lp_interfaces() && lp_bind_interfaces_only()) {
 387                 /* We have been given an interfaces line, and been
 388                    told to only bind to those interfaces. Create a
 389                    socket per interface and bind to only these.
 390                 */
 391
 392                 /* Now open a listen socket for each of the
 393                    interfaces. */
 394                 for(i = 0; i < num_interfaces; i++) {
 395                         TALLOC_CTX *frame = NULL;
 396                         const struct sockaddr_storage *ifss =
 397                                         iface_n_sockaddr_storage(i);
 398                         char *tok;
 399                         const char *ptr;
 400
 401                         if (ifss == NULL) {
 402                                 DEBUG(0,("open_sockets_smbd: "
 403                                         "interface %d has NULL IP address !\n",
 404                                         i));
 405                                 continue;
 406                         }
 407
 408                         frame = talloc_stackframe();
 409                         for (ptr=ports;
 410                                         next_token_talloc(frame,&ptr, &tok, " \t,");) {
 411                                 unsigned port = atoi(tok);
 412                                 if (port == 0 || port > 0xffff) {
 413                                         continue;
 414                                 }
 415
 416                                 /* Keep the first port for mDNS service
 417                                  * registration.
 418                                  */
 419                                 if (dns_port == 0) {
 420                                         dns_port = port;
 421                                 }
 422
 423                                 s = fd_listenset[num_sockets] =
 424                                         open_socket_in(SOCK_STREAM,
 425                                                         port,
 426                                                         num_sockets == 0 ? 0 : 2,
 427                                                         ifss,
 428                                                         true);
 429                                 if(s == -1) {
 430                                         continue;
 431                                 }
 432
 433                                 /* ready to listen */
 434                                 set_socket_options(s,"SO_KEEPALIVE");
 435                                 set_socket_options(s,lp_socket_options());
 436
 437                                 /* Set server socket to
 438                                  * non-blocking for the accept. */
 439                                 set_blocking(s,False);
 440
 441                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
 442                                         DEBUG(0,("open_sockets_smbd: listen: "
 443                                                 "%s\n", strerror(errno)));
 444                                         close(s);
 445                                         TALLOC_FREE(frame);
 446                                         return False;
 447                                 }
 448                                 FD_SET(s,&listen_set);
 449                                 maxfd = MAX( maxfd, s);
 450
 451                                 num_sockets++;
 452                                 if (num_sockets >= FD_SETSIZE) {
 453                                         DEBUG(0,("open_sockets_smbd: Too "
 454                                                 "many sockets to bind to\n"));
 455                                         TALLOC_FREE(frame);
 456                                         return False;
 457                                 }
 458                         }
 459                         TALLOC_FREE(frame);
 460                 }
 461         } else {
 462                 /* Just bind to 0.0.0.0 - accept connections
 463                    from anywhere. */
 464
 465                 TALLOC_CTX *frame = talloc_stackframe();
 466                 char *tok;
 467                 const char *ptr;
 468                 const char *sock_addr = lp_socket_address();
 469                 char *sock_tok;
 470                 const char *sock_ptr;
 471
 472                 if (strequal(sock_addr, "0.0.0.0") ||
 473                                 strequal(sock_addr, "::")) {
 474 #if HAVE_IPV6
 475                         sock_addr = "::,0.0.0.0";
 476 #else
 477                         sock_addr = "0.0.0.0";
 478 #endif
 479                 }
 480
 481                 for (sock_ptr=sock_addr;
 482                                 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
 483                         for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
 484                                 struct sockaddr_storage ss;
 485
 486                                 unsigned port = atoi(tok);
 487                                 if (port == 0 || port > 0xffff) {
 488                                         continue;
 489                                 }
 490
 491                                 /* Keep the first port for mDNS service
 492                                  * registration.
 493                                  */
 494                                 if (dns_port == 0) {
 495                                         dns_port = port;
 496                                 }
 497
 498                                 /* open an incoming socket */
 499                                 if (!interpret_string_addr(&ss, sock_tok,
 500                                                 AI_NUMERICHOST|AI_PASSIVE)) {
 501                                         continue;
 502                                 }
 503
 504                                 s = open_socket_in(SOCK_STREAM,
 505                                                 port,
 506                                                 num_sockets == 0 ? 0 : 2,
 507                                                 &ss,
 508                                                 true);
 509                                 if (s == -1) {
 510                                         continue;
 511                                 }
 512
 513                                 /* ready to listen */
 514                                 set_socket_options(s,"SO_KEEPALIVE");
 515                                 set_socket_options(s,lp_socket_options());
 516
 517                                 /* Set server socket to non-blocking
 518                                  * for the accept. */
 519                                 set_blocking(s,False);
 520
 521                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
 522                                         DEBUG(0,("open_sockets_smbd: "
 523                                                 "listen: %s\n",
 524                                                  strerror(errno)));
 525                                         close(s);
 526                                         TALLOC_FREE(frame);
 527                                         return False;
 528                                 }
 529
 530                                 fd_listenset[num_sockets] = s;
 531                                 FD_SET(s,&listen_set);
 532                                 maxfd = MAX( maxfd, s);
 533
 534                                 num_sockets++;
 535
 536                                 if (num_sockets >= FD_SETSIZE) {
 537                                         DEBUG(0,("open_sockets_smbd: Too "
 538                                                 "many sockets to bind to\n"));
 539                                         TALLOC_FREE(frame);
 540                                         return False;
 541                                 }
 542                         }
 543                 }
 544                 TALLOC_FREE(frame);
 545         }
 546
 547         SAFE_FREE(ports);
 548
 549         if (num_sockets == 0) {
 550                 DEBUG(0,("open_sockets_smbd: No "
 551                         "sockets available to bind to.\n"));
 552                 return false;
 553         }
 554
 555         /* Setup the main smbd so that we can get messages. Note that
 556            do this after starting listening. This is needed as when in
 557            clustered mode, ctdb won't allow us to start doing database
 558            operations until it has gone thru a full startup, which
 559            includes checking to see that smbd is listening. */
 560         claim_connection(NULL,"",
 561                          FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
 562
 563         /* Listen to messages */
 564
 565         messaging_register(smbd_messaging_context(), NULL,
 566                            MSG_SMB_SAM_SYNC, msg_sam_sync);
 567         messaging_register(smbd_messaging_context(), NULL,
 568                            MSG_SHUTDOWN, msg_exit_server);
 569         messaging_register(smbd_messaging_context(), NULL,
 570                            MSG_SMB_FILE_RENAME, msg_file_was_renamed);
 571         messaging_register(smbd_messaging_context(), NULL,
 572                            MSG_SMB_CONF_UPDATED, smb_conf_updated);
 573         messaging_register(smbd_messaging_context(), NULL,
 574                            MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
 575         brl_register_msgs(smbd_messaging_context());
 576
 577 #ifdef CLUSTER_SUPPORT
 578         ctdbd_register_reconfigure(messaging_ctdbd_connection());
 579 #endif
 580
 581 #ifdef DEVELOPER
 582         messaging_register(smbd_messaging_context(), NULL,
 583                            MSG_SMB_INJECT_FAULT, msg_inject_fault);
 584 #endif
 585
 586         /* now accept incoming connections - forking a new process
 587            for each incoming connection */
 588         DEBUG(2,("waiting for a connection\n"));
 589         while (1) {
 590                 struct timeval now, idle_timeout;
 591                 fd_set r_fds, w_fds;
 592                 int num;
 593
 594                 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
 595                 message_dispatch(smbd_messaging_context());
 596
 597                 if (got_sig_cld) {
 598                         pid_t pid;
 599                         int status;
 600
 601                         got_sig_cld = False;
 602
 603                         while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
 604                                 bool unclean_shutdown = False;
 605
 606                                 /* If the child terminated normally, assume
 607                                    it was an unclean shutdown unless the
 608                                    status is 0
 609                                 */
 610                                 if (WIFEXITED(status)) {
 611                                         unclean_shutdown = WEXITSTATUS(status);
 612                                 }
 613                                 /* If the child terminated due to a signal
 614                                    we always assume it was unclean.
 615                                 */
 616                                 if (WIFSIGNALED(status)) {
 617                                         unclean_shutdown = True;
 618                                 }
 619                                 remove_child_pid(pid, unclean_shutdown);
 620                         }
 621                 }
 622
 623                 idle_timeout = timeval_zero();
 624
 625                 memcpy((char *)&r_fds, (char *)&listen_set,
 626                        sizeof(listen_set));
 627                 FD_ZERO(&w_fds);
 628                 GetTimeOfDay(&now);
 629
 630                 /* Kick off our mDNS registration. */
 631                 if (dns_port != 0) {
 632                         dns_register_smbd(&dns_reg, dns_port, &maxfd,
 633                                         &r_fds, &idle_timeout);
 634                 }
 635
 636                 event_add_to_select_args(smbd_event_context(), &now,
 637                                          &r_fds, &w_fds, &idle_timeout,
 638                                          &maxfd);
 639
 640                 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
 641                                  timeval_is_zero(&idle_timeout) ?
 642                                  NULL : &idle_timeout);
 643
 644                 if (num == -1 && errno == EINTR) {
 645                         if (got_sig_term) {
 646                                 exit_server_cleanly(NULL);
 647                         }
 648
 649                         /* check for sighup processing */
 650                         if (reload_after_sighup) {
 651                                 change_to_root_user();
 652                                 DEBUG(1,("Reloading services after SIGHUP\n"));
 653                                 reload_services(False);
 654                                 reload_after_sighup = 0;
 655                         }
 656
 657                         continue;
 658                 }
 659
 660
 661                 /* If the idle timeout fired and we don't have any connected
 662                  * users, exit gracefully. We should be running under a process
 663                  * controller that will restart us if necessry.
 664                  */
 665                 if (num == 0 && count_all_current_connections() == 0) {
 666                         exit_server_cleanly("idle timeout");
 667                 }
 668
 669                 /* process pending nDNS responses */
 670                 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
 671                         --num;
 672                 }
 673
 674                 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
 675                         continue;
 676                 }
 677
 678                 /* check if we need to reload services */
 679                 check_reload(time(NULL));
 680
 681                 /* Find the sockets that are read-ready -
 682                    accept on these. */
 683                 for( ; num > 0; num--) {
 684                         struct sockaddr addr;
 685                         socklen_t in_addrlen = sizeof(addr);
 686                         pid_t child = 0;
 687
 688                         s = -1;
 689                         for(i = 0; i < num_sockets; i++) {
 690                                 if(FD_ISSET(fd_listenset[i],&r_fds)) {
 691                                         s = fd_listenset[i];
 692                                         /* Clear this so we don't look
 693                                            at it again. */
 694                                         FD_CLR(fd_listenset[i],&r_fds);
 695                                         break;
 696                                 }
 697                         }
 698
 699                         smbd_set_server_fd(accept(s,&addr,&in_addrlen));
 700
 701                         if (smbd_server_fd() == -1 && errno == EINTR)
 702                                 continue;
 703
 704                         if (smbd_server_fd() == -1) {
 705                                 DEBUG(2,("open_sockets_smbd: accept: %s\n",
 706                                          strerror(errno)));
 707                                 continue;
 708                         }
 709
 710                         /* Ensure child is set to blocking mode */
 711                         set_blocking(smbd_server_fd(),True);
 712
 713                         if (smbd_server_fd() != -1 && interactive)
 714                                 return True;
 715
 716                         if (allowable_number_of_smbd_processes() &&
 717                             smbd_server_fd() != -1 &&
 718                             ((child = sys_fork())==0)) {
 719                                 char remaddr[INET6_ADDRSTRLEN];
 720
 721                                 /* Child code ... */
 722
 723                                 /* Stop zombies, the parent explicitly handles
 724                                  * them, counting worker smbds. */
 725                                 CatchChild();
 726
 727                                 /* close the listening socket(s) */
 728                                 for(i = 0; i < num_sockets; i++)
 729                                         close(fd_listenset[i]);
 730
 731                                 /* close our mDNS daemon handle */
 732                                 dns_register_close(&dns_reg);
 733
 734                                 /* close our standard file
 735                                    descriptors */
 736                                 close_low_fds(False);
 737                                 am_parent = 0;
 738
 739                                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 740                                 set_socket_options(smbd_server_fd(),
 741                                                    lp_socket_options());
 742
 743                                 /* this is needed so that we get decent entries
 744                                    in smbstatus for port 445 connects */
 745                                 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
 746                                                                 remaddr,
 747                                                                 sizeof(remaddr)),
 748                                                                 false);
 749
 750                                 if (!reinit_after_fork(
 751                                             smbd_messaging_context(), true)) {
 752                                         DEBUG(0,("reinit_after_fork() failed\n"));
 753                                         smb_panic("reinit_after_fork() failed");
 754                                 }
 755
 756                                 return True;
 757                         }
 758                         /* The parent doesn't need this socket */
 759                         close(smbd_server_fd());
 760
 761                         /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
 762                                 Clear the closed fd info out of server_fd --
 763                                 and more importantly, out of client_fd in
 764                                 util_sock.c, to avoid a possible
 765                                 getpeername failure if we reopen the logs
 766                                 and use %I in the filename.
 767                         */
 768
 769                         smbd_set_server_fd(-1);
 770
 771                         if (child != 0) {
 772                                 add_child_pid(child);
 773                         }
 774
 775                         /* Force parent to check log size after
 776                          * spawning child.  Fix from
 777                          * klausr@ITAP.Physik.Uni-Stuttgart.De.  The
 778                          * parent smbd will log to logserver.smb.  It
 779                          * writes only two messages for each child
 780                          * started/finished. But each child writes,
 781                          * say, 50 messages also in logserver.smb,
 782                          * begining with the debug_count of the
 783                          * parent, before the child opens its own log
 784                          * file logserver.client. In a worst case
 785                          * scenario the size of logserver.smb would be
 786                          * checked after about 50*50=2500 messages
 787                          * (ca. 100kb).
 788                          * */
 789                         force_check_log_size();
 790
 791                 } /* end for num */
 792         } /* end while 1 */
 793
 794 /* NOTREACHED   return True; */
 795 }
 796
 797 /****************************************************************************
 798  Reload printers
 799 **************************************************************************/
 800 void reload_printers(void)
 801 {
 802         int snum;
 803         int n_services = lp_numservices();
 804         int pnum = lp_servicenumber(PRINTERS_NAME);
 805         const char *pname;
 806
 807         pcap_cache_reload();
 808
 809         /* remove stale printers */
 810         for (snum = 0; snum < n_services; snum++) {
 811                 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
 812                 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
 813                                       lp_autoloaded(snum)))
 814                         continue;
 815
 816                 pname = lp_printername(snum);
 817                 if (!pcap_printername_ok(pname)) {
 818                         DEBUG(3, ("removing stale printer %s\n", pname));
 819
 820                         if (is_printer_published(NULL, snum, NULL))
 821                                 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
 822                         del_a_printer(pname);
 823                         lp_killservice(snum);
 824                 }
 825         }
 826
 827         load_printers();
 828 }
 829
 830 /****************************************************************************
 831  Reload the services file.
 832 **************************************************************************/
 833
 834 bool reload_services(bool test)
 835 {
 836         bool ret;
 837
 838         if (lp_loaded()) {
 839                 char *fname = lp_configfile();
 840                 if (file_exist(fname, NULL) &&
 841                     !strcsequal(fname, get_dyn_CONFIGFILE())) {
 842                         set_dyn_CONFIGFILE(fname);
 843                         test = False;
 844                 }
 845         }
 846
 847         reopen_logs();
 848
 849         if (test && !lp_file_list_changed())
 850                 return(True);
 851
 852         lp_killunused(conn_snum_used);
 853
 854         ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
 855
 856         reload_printers();
 857
 858         /* perhaps the config filename is now set */
 859         if (!test)
 860                 reload_services(True);
 861
 862         reopen_logs();
 863
 864         load_interfaces();
 865
 866         if (smbd_server_fd() != -1) {
 867                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
 868                 set_socket_options(smbd_server_fd(), lp_socket_options());
 869         }
 870
 871         mangle_reset_cache();
 872         reset_stat_cache();
 873
 874         /* this forces service parameters to be flushed */
 875         set_current_service(NULL,0,True);
 876
 877         return(ret);
 878 }
 879
 880 /****************************************************************************
 881  Exit the server.
 882 ****************************************************************************/
 883
 884 /* Reasons for shutting down a server process. */
 885 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
 886
 887 static void exit_server_common(enum server_exit_reason how,
 888         const char *const reason) NORETURN_ATTRIBUTE;
 889
 890 static void exit_server_common(enum server_exit_reason how,
 891         const char *const reason)
 892 {
 893         static int firsttime=1;
 894
 895         if (!firsttime)
 896                 exit(0);
 897         firsttime = 0;
 898
 899         change_to_root_user();
 900
 901         if (negprot_global_auth_context) {
 902                 (negprot_global_auth_context->free)(&negprot_global_auth_context);
 903         }
 904
 905         conn_close_all();
 906
 907         invalidate_all_vuids();
 908
 909         /* 3 second timeout. */
 910         print_notify_send_messages(smbd_messaging_context(), 3);
 911
 912         /* delete our entry in the connections database. */
 913         yield_connection(NULL,"");
 914
 915         respond_to_all_remaining_local_messages();
 916
 917 #ifdef WITH_DFS
 918         if (dcelogin_atmost_once) {
 919                 dfs_unlogin();
 920         }
 921 #endif
 922
 923 #ifdef USE_DMAPI
 924         /* Destroy Samba DMAPI session only if we are master smbd process */
 925         if (am_parent) {
 926                 if (!dmapi_destroy_session()) {
 927                         DEBUG(0,("Unable to close Samba DMAPI session\n"));
 928                 }
 929         }
 930 #endif
 931
 932         locking_end();
 933         printing_end();
 934
 935         if (how != SERVER_EXIT_NORMAL) {
 936                 int oldlevel = DEBUGLEVEL;
 937
 938                 DEBUGLEVEL = 10;
 939
 940                 DEBUGSEP(0);
 941                 DEBUG(0,("Abnormal server exit: %s\n",
 942                         reason ? reason : "no explanation provided"));
 943                 DEBUGSEP(0);
 944
 945                 log_stack_trace();
 946
 947                 DEBUGLEVEL = oldlevel;
 948                 dump_core();
 949
 950         } else {
 951                 DEBUG(3,("Server exit (%s)\n",
 952                         (reason ? reason : "normal exit")));
 953         }
 954
 955         exit(0);
 956 }
 957
 958 void exit_server(const char *const explanation)
 959 {
 960         exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
 961 }
 962
 963 void exit_server_cleanly(const char *const explanation)
 964 {
 965         exit_server_common(SERVER_EXIT_NORMAL, explanation);
 966 }
 967
 968 void exit_server_fault(void)
 969 {
 970         exit_server("critical server fault");
 971 }
 972
 973
 974 /****************************************************************************
 975 received when we should release a specific IP
 976 ****************************************************************************/
 977 static void release_ip(const char *ip, void *priv)
 978 {
 979         char addr[INET6_ADDRSTRLEN];
 980
 981         if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
 982                 /* we can't afford to do a clean exit - that involves
 983                    database writes, which would potentially mean we
 984                    are still running after the failover has finished -
 985                    we have to get rid of this process ID straight
 986                    away */
 987                 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
 988                         ip));
 989                 /* note we must exit with non-zero status so the unclean handler gets
 990                    called in the parent, so that the brl database is tickled */
 991                 _exit(1);
 992         }
 993 }
 994
 995 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
 996                            uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
 997 {
 998         release_ip((char *)data->data, NULL);
 999 }
1000
1001 /****************************************************************************
1002  Initialise connect, service and file structs.
1003 ****************************************************************************/
1004
1005 static bool init_structs(void )
1006 {
1007         /*
1008          * Set the machine NETBIOS name if not already
1009          * set from the config file.
1010          */
1011
1012         if (!init_names())
1013                 return False;
1014
1015         conn_init();
1016
1017         file_init();
1018
1019         /* for RPC pipes */
1020         init_rpc_pipe_hnd();
1021
1022         init_dptrs();
1023
1024         if (!secrets_init())
1025                 return False;
1026
1027         return True;
1028 }
1029
1030 /*
1031  * Send keepalive packets to our client
1032  */
1033 static bool keepalive_fn(const struct timeval *now, void *private_data)
1034 {
1035         if (!send_keepalive(smbd_server_fd())) {
1036                 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1037                 return False;
1038         }
1039         return True;
1040 }
1041
1042 /*
1043  * Do the recurring check if we're idle
1044  */
1045 static bool deadtime_fn(const struct timeval *now, void *private_data)
1046 {
1047         if ((conn_num_open() == 0)
1048             || (conn_idle_all(now->tv_sec))) {
1049                 DEBUG( 2, ( "Closing idle connection\n" ) );
1050                 messaging_send(smbd_messaging_context(), procid_self(),
1051                                MSG_SHUTDOWN, &data_blob_null);
1052                 return False;
1053         }
1054
1055         return True;
1056 }
1057
1058
1059 /****************************************************************************
1060  main program.
1061 ****************************************************************************/
1062
1063 /* Declare prototype for build_options() to avoid having to run it through
1064    mkproto.h.  Mixing $(builddir) and $(srcdir) source files in the current
1065    prototype generation system is too complicated. */
1066
1067 extern void build_options(bool screen);
1068
1069  int main(int argc,const char *argv[])
1070 {
1071         /* shall I run as a daemon */
1072         static bool is_daemon = False;
1073         static bool interactive = False;
1074         static bool Fork = True;
1075         static bool no_process_group = False;
1076         static bool log_stdout = False;
1077         static char *ports = NULL;
1078         static char *profile_level = NULL;
1079         int opt;
1080         poptContext pc;
1081         bool print_build_options = False;
1082         enum {
1083                 OPT_DAEMON = 1000,
1084                 OPT_INTERACTIVE,
1085                 OPT_FORK,
1086                 OPT_NO_PROCESS_GROUP,
1087                 OPT_LOG_STDOUT
1088         };
1089         struct poptOption long_options[] = {
1090         POPT_AUTOHELP
1091         {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1092         {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1093         {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1094         {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1095         {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1096         {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1097         {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1098         {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1099         POPT_COMMON_SAMBA
1100         POPT_COMMON_DYNCONFIG
1101         POPT_TABLEEND
1102         };
1103         TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1104
1105         TimeInit();
1106
1107 #ifdef HAVE_SET_AUTH_PARAMETERS
1108         set_auth_parameters(argc,argv);
1109 #endif
1110
1111         pc = poptGetContext("smbd", argc, argv, long_options, 0);
1112         while((opt = poptGetNextOpt(pc)) != -1) {
1113                 switch (opt)  {
1114                 case OPT_DAEMON:
1115                         is_daemon = true;
1116                         break;
1117                 case OPT_INTERACTIVE:
1118                         interactive = true;
1119                         break;
1120                 case OPT_FORK:
1121                         Fork = false;
1122                         break;
1123                 case OPT_NO_PROCESS_GROUP:
1124                         no_process_group = true;
1125                         break;
1126                 case OPT_LOG_STDOUT:
1127                         log_stdout = true;
1128                         break;
1129                 case 'b':
1130                         print_build_options = True;
1131                         break;
1132                 default:
1133                         d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1134                                   poptBadOption(pc, 0), poptStrerror(opt));
1135                         poptPrintUsage(pc, stderr, 0);
1136                         exit(1);
1137                 }
1138         }
1139         poptFreeContext(pc);
1140
1141         if (interactive) {
1142                 Fork = False;
1143                 log_stdout = True;
1144         }
1145
1146         setup_logging(argv[0],log_stdout);
1147
1148         if (print_build_options) {
1149                 build_options(True); /* Display output to screen as well as debug */
1150                 exit(0);
1151         }
1152
1153         load_case_tables();
1154
1155 #ifdef HAVE_SETLUID
1156         /* needed for SecureWare on SCO */
1157         setluid(0);
1158 #endif
1159
1160         sec_init();
1161
1162         set_remote_machine_name("smbd", False);
1163
1164         if (interactive && (DEBUGLEVEL >= 9)) {
1165                 talloc_enable_leak_report();
1166         }
1167
1168         if (log_stdout && Fork) {
1169                 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1170                 exit(1);
1171         }
1172
1173         /* we want to re-seed early to prevent time delays causing
1174            client problems at a later date. (tridge) */
1175         generate_random_buffer(NULL, 0);
1176
1177         /* make absolutely sure we run as root - to handle cases where people
1178            are crazy enough to have it setuid */
1179
1180         gain_root_privilege();
1181         gain_root_group_privilege();
1182
1183         fault_setup((void (*)(void *))exit_server_fault);
1184         dump_core_setup("smbd");
1185
1186         CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1187         CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1188
1189         /* we are never interested in SIGPIPE */
1190         BlockSignals(True,SIGPIPE);
1191
1192 #if defined(SIGFPE)
1193         /* we are never interested in SIGFPE */
1194         BlockSignals(True,SIGFPE);
1195 #endif
1196
1197 #if defined(SIGUSR2)
1198         /* We are no longer interested in USR2 */
1199         BlockSignals(True,SIGUSR2);
1200 #endif
1201
1202         /* POSIX demands that signals are inherited. If the invoking process has
1203          * these signals masked, we will have problems, as we won't recieve them. */
1204         BlockSignals(False, SIGHUP);
1205         BlockSignals(False, SIGUSR1);
1206         BlockSignals(False, SIGTERM);
1207
1208         /* we want total control over the permissions on created files,
1209            so set our umask to 0 */
1210         umask(0);
1211
1212         init_sec_ctx();
1213
1214         reopen_logs();
1215
1216         DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1217         DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1218
1219         DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1220                  (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1221
1222         /* Output the build options to the debug log */
1223         build_options(False);
1224
1225         if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1226                 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1227                 exit(1);
1228         }
1229
1230         if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1231                 DEBUG(0, ("error opening config file\n"));
1232                 exit(1);
1233         }
1234
1235         if (smbd_messaging_context() == NULL)
1236                 exit(1);
1237
1238         if (!reload_services(False))
1239                 return(-1);
1240
1241         init_structs();
1242
1243 #ifdef WITH_PROFILE
1244         if (!profile_setup(smbd_messaging_context(), False)) {
1245                 DEBUG(0,("ERROR: failed to setup profiling\n"));
1246                 return -1;
1247         }
1248         if (profile_level != NULL) {
1249                 int pl = atoi(profile_level);
1250                 struct server_id src;
1251
1252                 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1253                 src.pid = getpid();
1254                 set_profile_level(pl, src);
1255         }
1256 #endif
1257
1258         DEBUG(3,( "loaded services\n"));
1259
1260         if (!is_daemon && !is_a_socket(0)) {
1261                 if (!interactive)
1262                         DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1263
1264                 /*
1265                  * Setting is_daemon here prevents us from eventually calling
1266                  * the open_sockets_inetd()
1267                  */
1268
1269                 is_daemon = True;
1270         }
1271
1272         if (is_daemon && !interactive) {
1273                 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1274                 become_daemon(Fork, no_process_group);
1275         }
1276
1277 #if HAVE_SETPGID
1278         /*
1279          * If we're interactive we want to set our own process group for
1280          * signal management.
1281          */
1282         if (interactive && !no_process_group)
1283                 setpgid( (pid_t)0, (pid_t)0);
1284 #endif
1285
1286         if (!directory_exist(lp_lockdir(), NULL))
1287                 mkdir(lp_lockdir(), 0755);
1288
1289         if (is_daemon)
1290                 pidfile_create("smbd");
1291
1292         if (!reinit_after_fork(smbd_messaging_context(), false)) {
1293                 DEBUG(0,("reinit_after_fork() failed\n"));
1294                 exit(1);
1295         }
1296
1297         /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1298
1299         if (smbd_memcache() == NULL) {
1300                 exit(1);
1301         }
1302
1303         memcache_set_global(smbd_memcache());
1304
1305         /* Initialise the password backed before the global_sam_sid
1306            to ensure that we fetch from ldap before we make a domain sid up */
1307
1308         if(!initialize_password_db(False, smbd_event_context()))
1309                 exit(1);
1310
1311         if (!secrets_init()) {
1312                 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1313                 exit(1);
1314         }
1315
1316         if(!get_global_sam_sid()) {
1317                 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1318                 exit(1);
1319         }
1320
1321         if (!session_init())
1322                 exit(1);
1323
1324         if (!connections_init(True))
1325                 exit(1);
1326
1327         if (!locking_init())
1328                 exit(1);
1329
1330         namecache_enable();
1331
1332         if (!W_ERROR_IS_OK(registry_init_full()))
1333                 exit(1);
1334
1335 #if 0
1336         if (!init_svcctl_db())
1337                 exit(1);
1338 #endif
1339
1340         if (!print_backend_init(smbd_messaging_context()))
1341                 exit(1);
1342
1343         if (!init_guest_info()) {
1344                 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1345                 return -1;
1346         }
1347
1348         /* only start the background queue daemon if we are
1349            running as a daemon -- bad things will happen if
1350            smbd is launched via inetd and we fork a copy of
1351            ourselves here */
1352
1353         if (is_daemon && !interactive
1354             && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1355                 start_background_queue();
1356         }
1357
1358         if (!open_sockets_smbd(is_daemon, interactive, ports))
1359                 exit(1);
1360
1361         /*
1362          * everything after this point is run after the fork()
1363          */
1364
1365         static_init_rpc;
1366
1367         init_modules();
1368
1369         /* Possibly reload the services file. Only worth doing in
1370          * daemon mode. In inetd mode, we know we only just loaded this.
1371          */
1372         if (is_daemon) {
1373                 reload_services(True);
1374         }
1375
1376         if (!init_account_policy()) {
1377                 DEBUG(0,("Could not open account policy tdb.\n"));
1378                 exit(1);
1379         }
1380
1381         if (*lp_rootdir()) {
1382                 if (sys_chroot(lp_rootdir()) == 0)
1383                         DEBUG(2,("Changed root to %s\n", lp_rootdir()));
1384         }
1385
1386         /* Setup oplocks */
1387         if (!init_oplocks(smbd_messaging_context()))
1388                 exit(1);
1389
1390         /* Setup aio signal handler. */
1391         initialize_async_io_handler();
1392
1393         /* register our message handlers */
1394         messaging_register(smbd_messaging_context(), NULL,
1395                            MSG_SMB_FORCE_TDIS, msg_force_tdis);
1396         messaging_register(smbd_messaging_context(), NULL,
1397                            MSG_SMB_RELEASE_IP, msg_release_ip);
1398         messaging_register(smbd_messaging_context(), NULL,
1399                            MSG_SMB_CLOSE_FILE, msg_close_file);
1400
1401         if ((lp_keepalive() != 0)
1402             && !(event_add_idle(smbd_event_context(), NULL,
1403                                 timeval_set(lp_keepalive(), 0),
1404                                 "keepalive", keepalive_fn,
1405                                 NULL))) {
1406                 DEBUG(0, ("Could not add keepalive event\n"));
1407                 exit(1);
1408         }
1409
1410         if (!(event_add_idle(smbd_event_context(), NULL,
1411                              timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1412                              "deadtime", deadtime_fn, NULL))) {
1413                 DEBUG(0, ("Could not add deadtime event\n"));
1414                 exit(1);
1415         }
1416
1417 #ifdef CLUSTER_SUPPORT
1418
1419         if (lp_clustering()) {
1420                 /*
1421                  * We need to tell ctdb about our client's TCP
1422                  * connection, so that for failover ctdbd can send
1423                  * tickle acks, triggering a reconnection by the
1424                  * client.
1425                  */
1426
1427                 struct sockaddr_in srv, clnt;
1428
1429                 if (client_get_tcp_info(&srv, &clnt) == 0) {
1430
1431                         NTSTATUS status;
1432
1433                         status = ctdbd_register_ips(
1434                                 messaging_ctdbd_connection(),
1435                                 &srv, &clnt, release_ip, NULL);
1436
1437                         if (!NT_STATUS_IS_OK(status)) {
1438                                 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1439                                           nt_errstr(status)));
1440                         }
1441                 } else
1442                 {
1443                         DEBUG(0,("Unable to get tcp info for "
1444                                  "CTDB_CONTROL_TCP_CLIENT: %s\n",
1445                                  strerror(errno)));
1446                 }
1447         }
1448
1449 #endif
1450
1451         TALLOC_FREE(frame);
1452
1453         smbd_process();
1454
1455         namecache_shutdown();
1456
1457         exit_server_cleanly(NULL);
1458         return(0);
1459 }