s3:smbd: variables in a main() don't need to be static
[samba.git] / source3 / smbd / server.c
1 /*
2    Unix SMB/CIFS implementation.
3    Main SMB server routines
4    Copyright (C) Andrew Tridgell                1992-1998
5    Copyright (C) Martin Pool                    2002
6    Copyright (C) Jelmer Vernooij                2002-2003
7    Copyright (C) Volker Lendecke                1993-2007
8    Copyright (C) Jeremy Allison                 1993-2007
9
10    This program is free software; you can redistribute it and/or modify
11    it under the terms of the GNU General Public License as published by
12    the Free Software Foundation; either version 3 of the License, or
13    (at your option) any later version.
14
15    This program is distributed in the hope that it will be useful,
16    but WITHOUT ANY WARRANTY; without even the implied warranty of
17    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
18    GNU General Public License for more details.
19
20    You should have received a copy of the GNU General Public License
21    along with this program.  If not, see <http://www.gnu.org/licenses/>.
22 */
23
24 #include "includes.h"
25
26 static_decl_rpc;
27
28 static int am_parent = 1;
29
30 extern struct auth_context *negprot_global_auth_context;
31 extern SIG_ATOMIC_T got_sig_term;
32 extern SIG_ATOMIC_T reload_after_sighup;
33 static SIG_ATOMIC_T got_sig_cld;
34
35 #ifdef WITH_DFS
36 extern int dcelogin_atmost_once;
37 #endif /* WITH_DFS */
38
39 /* really we should have a top level context structure that has the
40    client file descriptor as an element. That would require a major rewrite :(
41
42    the following 2 functions are an alternative - they make the file
43    descriptor private to smbd
44  */
45 static int server_fd = -1;
46
47 int smbd_server_fd(void)
48 {
49         return server_fd;
50 }
51
52 static void smbd_set_server_fd(int fd)
53 {
54         server_fd = fd;
55 }
56
57 int get_client_fd(void)
58 {
59         return server_fd;
60 }
61
62 #ifdef CLUSTER_SUPPORT
63 static int client_get_tcp_info(struct sockaddr_storage *server,
64                                struct sockaddr_storage *client)
65 {
66         socklen_t length;
67         if (server_fd == -1) {
68                 return -1;
69         }
70         length = sizeof(*server);
71         if (getsockname(server_fd, (struct sockaddr *)server, &length) != 0) {
72                 return -1;
73         }
74         length = sizeof(*client);
75         if (getpeername(server_fd, (struct sockaddr *)client, &length) != 0) {
76                 return -1;
77         }
78         return 0;
79 }
80 #endif
81
82 struct event_context *smbd_event_context(void)
83 {
84         static struct event_context *ctx;
85
86         if (!ctx && !(ctx = event_context_init(talloc_autofree_context()))) {
87                 smb_panic("Could not init smbd event context");
88         }
89         return ctx;
90 }
91
92 struct messaging_context *smbd_messaging_context(void)
93 {
94         static struct messaging_context *ctx;
95
96         if (ctx == NULL) {
97                 ctx = messaging_init(talloc_autofree_context(), server_id_self(),
98                                      smbd_event_context());
99         }
100         if (ctx == NULL) {
101                 DEBUG(0, ("Could not init smbd messaging context.\n"));
102         }
103         return ctx;
104 }
105
106 struct memcache *smbd_memcache(void)
107 {
108         static struct memcache *cache;
109
110         if (!cache
111             && !(cache = memcache_init(talloc_autofree_context(),
112                                        lp_max_stat_cache_size()*1024))) {
113
114                 smb_panic("Could not init smbd memcache");
115         }
116         return cache;
117 }
118
119 /*******************************************************************
120  What to do when smb.conf is updated.
121  ********************************************************************/
122
123 static void smb_conf_updated(struct messaging_context *msg,
124                              void *private_data,
125                              uint32_t msg_type,
126                              struct server_id server_id,
127                              DATA_BLOB *data)
128 {
129         DEBUG(10,("smb_conf_updated: Got message saying smb.conf was "
130                   "updated. Reloading.\n"));
131         reload_services(False);
132 }
133
134
135 /*******************************************************************
136  Delete a statcache entry.
137  ********************************************************************/
138
139 static void smb_stat_cache_delete(struct messaging_context *msg,
140                                   void *private_data,
141                                   uint32_t msg_tnype,
142                                   struct server_id server_id,
143                                   DATA_BLOB *data)
144 {
145         const char *name = (const char *)data->data;
146         DEBUG(10,("smb_stat_cache_delete: delete name %s\n", name));
147         stat_cache_delete(name);
148 }
149
150 /****************************************************************************
151  Terminate signal.
152 ****************************************************************************/
153
154 static void sig_term(void)
155 {
156         got_sig_term = 1;
157         sys_select_signal(SIGTERM);
158 }
159
160 /****************************************************************************
161  Catch a sighup.
162 ****************************************************************************/
163
164 static void sig_hup(int sig)
165 {
166         reload_after_sighup = 1;
167         sys_select_signal(SIGHUP);
168 }
169
170 /****************************************************************************
171  Catch a sigcld
172 ****************************************************************************/
173 static void sig_cld(int sig)
174 {
175         got_sig_cld = 1;
176         sys_select_signal(SIGCLD);
177 }
178
179 /****************************************************************************
180   Send a SIGTERM to our process group.
181 *****************************************************************************/
182
183 static void  killkids(void)
184 {
185         if(am_parent) kill(0,SIGTERM);
186 }
187
188 /****************************************************************************
189  Process a sam sync message - not sure whether to do this here or
190  somewhere else.
191 ****************************************************************************/
192
193 static void msg_sam_sync(struct messaging_context *msg,
194                          void *private_data,
195                          uint32_t msg_type,
196                          struct server_id server_id,
197                          DATA_BLOB *data)
198 {
199         DEBUG(10, ("** sam sync message received, ignoring\n"));
200 }
201
202
203 /****************************************************************************
204  Open the socket communication - inetd.
205 ****************************************************************************/
206
207 static bool open_sockets_inetd(void)
208 {
209         /* Started from inetd. fd 0 is the socket. */
210         /* We will abort gracefully when the client or remote system 
211            goes away */
212         smbd_set_server_fd(dup(0));
213         
214         /* close our standard file descriptors */
215         close_low_fds(False); /* Don't close stderr */
216         
217         set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
218         set_socket_options(smbd_server_fd(), lp_socket_options());
219
220         return True;
221 }
222
223 static void msg_exit_server(struct messaging_context *msg,
224                             void *private_data,
225                             uint32_t msg_type,
226                             struct server_id server_id,
227                             DATA_BLOB *data)
228 {
229         DEBUG(3, ("got a SHUTDOWN message\n"));
230         exit_server_cleanly(NULL);
231 }
232
233 #ifdef DEVELOPER
234 static void msg_inject_fault(struct messaging_context *msg,
235                              void *private_data,
236                              uint32_t msg_type,
237                              struct server_id src,
238                              DATA_BLOB *data)
239 {
240         int sig;
241
242         if (data->length != sizeof(sig)) {
243                 
244                 DEBUG(0, ("Process %s sent bogus signal injection request\n",
245                           procid_str_static(&src)));
246                 return;
247         }
248
249         sig = *(int *)data->data;
250         if (sig == -1) {
251                 exit_server("internal error injected");
252                 return;
253         }
254
255 #if HAVE_STRSIGNAL
256         DEBUG(0, ("Process %s requested injection of signal %d (%s)\n",
257                   procid_str_static(&src), sig, strsignal(sig)));
258 #else
259         DEBUG(0, ("Process %s requested injection of signal %d\n",
260                   procid_str_static(&src), sig));
261 #endif
262
263         kill(sys_getpid(), sig);
264 }
265 #endif /* DEVELOPER */
266
267 struct child_pid {
268         struct child_pid *prev, *next;
269         pid_t pid;
270 };
271
272 static struct child_pid *children;
273 static int num_children;
274
275 static void add_child_pid(pid_t pid)
276 {
277         struct child_pid *child;
278
279         if (lp_max_smbd_processes() == 0) {
280                 /* Don't bother with the child list if we don't care anyway */
281                 return;
282         }
283
284         child = SMB_MALLOC_P(struct child_pid);
285         if (child == NULL) {
286                 DEBUG(0, ("Could not add child struct -- malloc failed\n"));
287                 return;
288         }
289         child->pid = pid;
290         DLIST_ADD(children, child);
291         num_children += 1;
292 }
293
294 static void remove_child_pid(pid_t pid, bool unclean_shutdown)
295 {
296         struct child_pid *child;
297
298         if (unclean_shutdown) {
299                 /* a child terminated uncleanly so tickle all processes to see 
300                    if they can grab any of the pending locks
301                 */
302                 DEBUG(3,(__location__ " Unclean shutdown of pid %u\n", pid));
303                 messaging_send_buf(smbd_messaging_context(), procid_self(), 
304                                    MSG_SMB_BRL_VALIDATE, NULL, 0);
305                 message_send_all(smbd_messaging_context(), 
306                                  MSG_SMB_UNLOCK, NULL, 0, NULL);
307         }
308
309         if (lp_max_smbd_processes() == 0) {
310                 /* Don't bother with the child list if we don't care anyway */
311                 return;
312         }
313
314         for (child = children; child != NULL; child = child->next) {
315                 if (child->pid == pid) {
316                         struct child_pid *tmp = child;
317                         DLIST_REMOVE(children, child);
318                         SAFE_FREE(tmp);
319                         num_children -= 1;
320                         return;
321                 }
322         }
323
324         DEBUG(0, ("Could not find child %d -- ignoring\n", (int)pid));
325 }
326
327 /****************************************************************************
328  Have we reached the process limit ?
329 ****************************************************************************/
330
331 static bool allowable_number_of_smbd_processes(void)
332 {
333         int max_processes = lp_max_smbd_processes();
334
335         if (!max_processes)
336                 return True;
337
338         return num_children < max_processes;
339 }
340
341 /****************************************************************************
342  Open the socket communication.
343 ****************************************************************************/
344
345 static bool open_sockets_smbd(bool is_daemon, bool interactive, const char *smb_ports)
346 {
347         int num_interfaces = iface_count();
348         int num_sockets = 0;
349         int fd_listenset[FD_SETSIZE];
350         fd_set listen_set;
351         int s;
352         int maxfd = 0;
353         int i;
354         char *ports;
355         struct dns_reg_state * dns_reg = NULL;
356         unsigned dns_port = 0;
357
358         if (!is_daemon) {
359                 return open_sockets_inetd();
360         }
361
362 #ifdef HAVE_ATEXIT
363         atexit(killkids);
364 #endif
365
366         /* Stop zombies */
367         CatchSignal(SIGCLD, sig_cld);
368
369         FD_ZERO(&listen_set);
370
371         /* use a reasonable default set of ports - listing on 445 and 139 */
372         if (!smb_ports) {
373                 ports = lp_smb_ports();
374                 if (!ports || !*ports) {
375                         ports = smb_xstrdup(SMB_PORTS);
376                 } else {
377                         ports = smb_xstrdup(ports);
378                 }
379         } else {
380                 ports = smb_xstrdup(smb_ports);
381         }
382
383         if (lp_interfaces() && lp_bind_interfaces_only()) {
384                 /* We have been given an interfaces line, and been
385                    told to only bind to those interfaces. Create a
386                    socket per interface and bind to only these.
387                 */
388
389                 /* Now open a listen socket for each of the
390                    interfaces. */
391                 for(i = 0; i < num_interfaces; i++) {
392                         TALLOC_CTX *frame = NULL;
393                         const struct sockaddr_storage *ifss =
394                                         iface_n_sockaddr_storage(i);
395                         char *tok;
396                         const char *ptr;
397
398                         if (ifss == NULL) {
399                                 DEBUG(0,("open_sockets_smbd: "
400                                         "interface %d has NULL IP address !\n",
401                                         i));
402                                 continue;
403                         }
404
405                         frame = talloc_stackframe();
406                         for (ptr=ports;
407                                         next_token_talloc(frame,&ptr, &tok, " \t,");) {
408                                 unsigned port = atoi(tok);
409                                 if (port == 0 || port > 0xffff) {
410                                         continue;
411                                 }
412
413                                 /* Keep the first port for mDNS service
414                                  * registration.
415                                  */
416                                 if (dns_port == 0) {
417                                         dns_port = port;
418                                 }
419
420                                 s = fd_listenset[num_sockets] =
421                                         open_socket_in(SOCK_STREAM,
422                                                         port,
423                                                         num_sockets == 0 ? 0 : 2,
424                                                         ifss,
425                                                         true);
426                                 if(s == -1) {
427                                         continue;
428                                 }
429
430                                 /* ready to listen */
431                                 set_socket_options(s,"SO_KEEPALIVE");
432                                 set_socket_options(s,lp_socket_options());
433
434                                 /* Set server socket to
435                                  * non-blocking for the accept. */
436                                 set_blocking(s,False);
437
438                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
439                                         DEBUG(0,("open_sockets_smbd: listen: "
440                                                 "%s\n", strerror(errno)));
441                                         close(s);
442                                         TALLOC_FREE(frame);
443                                         return False;
444                                 }
445                                 FD_SET(s,&listen_set);
446                                 maxfd = MAX( maxfd, s);
447
448                                 num_sockets++;
449                                 if (num_sockets >= FD_SETSIZE) {
450                                         DEBUG(0,("open_sockets_smbd: Too "
451                                                 "many sockets to bind to\n"));
452                                         TALLOC_FREE(frame);
453                                         return False;
454                                 }
455                         }
456                         TALLOC_FREE(frame);
457                 }
458         } else {
459                 /* Just bind to 0.0.0.0 - accept connections
460                    from anywhere. */
461
462                 TALLOC_CTX *frame = talloc_stackframe();
463                 char *tok;
464                 const char *ptr;
465                 const char *sock_addr = lp_socket_address();
466                 char *sock_tok;
467                 const char *sock_ptr;
468
469                 if (strequal(sock_addr, "0.0.0.0") ||
470                     strequal(sock_addr, "::")) {
471 #if HAVE_IPV6
472                         sock_addr = "::,0.0.0.0";
473 #else
474                         sock_addr = "0.0.0.0";
475 #endif
476                 }
477
478                 for (sock_ptr=sock_addr;
479                                 next_token_talloc(frame, &sock_ptr, &sock_tok, " \t,"); ) {
480                         for (ptr=ports; next_token_talloc(frame, &ptr, &tok, " \t,"); ) {
481                                 struct sockaddr_storage ss;
482
483                                 unsigned port = atoi(tok);
484                                 if (port == 0 || port > 0xffff) {
485                                         continue;
486                                 }
487
488                                 /* Keep the first port for mDNS service
489                                  * registration.
490                                  */
491                                 if (dns_port == 0) {
492                                         dns_port = port;
493                                 }
494
495                                 /* open an incoming socket */
496                                 if (!interpret_string_addr(&ss, sock_tok,
497                                                 AI_NUMERICHOST|AI_PASSIVE)) {
498                                         continue;
499                                 }
500
501                                 s = open_socket_in(SOCK_STREAM,
502                                                 port,
503                                                 num_sockets == 0 ? 0 : 2,
504                                                 &ss,
505                                                 true);
506                                 if (s == -1) {
507                                         continue;
508                                 }
509
510                                 /* ready to listen */
511                                 set_socket_options(s,"SO_KEEPALIVE");
512                                 set_socket_options(s,lp_socket_options());
513
514                                 /* Set server socket to non-blocking
515                                  * for the accept. */
516                                 set_blocking(s,False);
517
518                                 if (listen(s, SMBD_LISTEN_BACKLOG) == -1) {
519                                         DEBUG(0,("open_sockets_smbd: "
520                                                 "listen: %s\n",
521                                                  strerror(errno)));
522                                         close(s);
523                                         TALLOC_FREE(frame);
524                                         return False;
525                                 }
526
527                                 fd_listenset[num_sockets] = s;
528                                 FD_SET(s,&listen_set);
529                                 maxfd = MAX( maxfd, s);
530
531                                 num_sockets++;
532
533                                 if (num_sockets >= FD_SETSIZE) {
534                                         DEBUG(0,("open_sockets_smbd: Too "
535                                                 "many sockets to bind to\n"));
536                                         TALLOC_FREE(frame);
537                                         return False;
538                                 }
539                         }
540                 }
541                 TALLOC_FREE(frame);
542         }
543
544         SAFE_FREE(ports);
545
546         if (num_sockets == 0) {
547                 DEBUG(0,("open_sockets_smbd: No "
548                         "sockets available to bind to.\n"));
549                 return false;
550         }
551
552         /* Setup the main smbd so that we can get messages. Note that
553            do this after starting listening. This is needed as when in
554            clustered mode, ctdb won't allow us to start doing database
555            operations until it has gone thru a full startup, which
556            includes checking to see that smbd is listening. */
557         claim_connection(NULL,"",
558                          FLAG_MSG_GENERAL|FLAG_MSG_SMBD|FLAG_MSG_DBWRAP);
559
560         /* Listen to messages */
561
562         messaging_register(smbd_messaging_context(), NULL,
563                            MSG_SMB_SAM_SYNC, msg_sam_sync);
564         messaging_register(smbd_messaging_context(), NULL,
565                            MSG_SHUTDOWN, msg_exit_server);
566         messaging_register(smbd_messaging_context(), NULL,
567                            MSG_SMB_FILE_RENAME, msg_file_was_renamed);
568         messaging_register(smbd_messaging_context(), NULL,
569                            MSG_SMB_CONF_UPDATED, smb_conf_updated);
570         messaging_register(smbd_messaging_context(), NULL,
571                            MSG_SMB_STAT_CACHE_DELETE, smb_stat_cache_delete);
572         brl_register_msgs(smbd_messaging_context());
573
574 #ifdef CLUSTER_SUPPORT
575         if (lp_clustering()) {
576                 ctdbd_register_reconfigure(messaging_ctdbd_connection());
577         }
578 #endif
579
580 #ifdef DEVELOPER
581         messaging_register(smbd_messaging_context(), NULL,
582                            MSG_SMB_INJECT_FAULT, msg_inject_fault);
583 #endif
584
585         /* now accept incoming connections - forking a new process
586            for each incoming connection */
587         DEBUG(2,("waiting for a connection\n"));
588         while (1) {
589                 struct timeval now, idle_timeout;
590                 fd_set r_fds, w_fds;
591                 int num;
592
593                 /* Ensure we respond to PING and DEBUG messages from the main smbd. */
594                 message_dispatch(smbd_messaging_context());
595
596                 if (got_sig_cld) {
597                         pid_t pid;
598                         int status;
599
600                         got_sig_cld = False;
601
602                         while ((pid = sys_waitpid(-1, &status, WNOHANG)) > 0) {
603                                 bool unclean_shutdown = False;
604                                 
605                                 /* If the child terminated normally, assume
606                                    it was an unclean shutdown unless the
607                                    status is 0 
608                                 */
609                                 if (WIFEXITED(status)) {
610                                         unclean_shutdown = WEXITSTATUS(status);
611                                 }
612                                 /* If the child terminated due to a signal
613                                    we always assume it was unclean.
614                                 */
615                                 if (WIFSIGNALED(status)) {
616                                         unclean_shutdown = True;
617                                 }
618                                 remove_child_pid(pid, unclean_shutdown);
619                         }
620                 }
621
622                 idle_timeout = timeval_zero();
623
624                 memcpy((char *)&r_fds, (char *)&listen_set,
625                        sizeof(listen_set));
626                 FD_ZERO(&w_fds);
627                 GetTimeOfDay(&now);
628
629                 /* Kick off our mDNS registration. */
630                 if (dns_port != 0) {
631                         dns_register_smbd(&dns_reg, dns_port, &maxfd,
632                                         &r_fds, &idle_timeout);
633                 }
634
635                 event_add_to_select_args(smbd_event_context(), &now,
636                                          &r_fds, &w_fds, &idle_timeout,
637                                          &maxfd);
638
639                 num = sys_select(maxfd+1,&r_fds,&w_fds,NULL,
640                                  timeval_is_zero(&idle_timeout) ?
641                                  NULL : &idle_timeout);
642
643                 if (num == -1 && errno == EINTR) {
644                         if (got_sig_term) {
645                                 exit_server_cleanly(NULL);
646                         }
647
648                         /* check for sighup processing */
649                         if (reload_after_sighup) {
650                                 change_to_root_user();
651                                 DEBUG(1,("Reloading services after SIGHUP\n"));
652                                 reload_services(False);
653                                 reload_after_sighup = 0;
654                         }
655
656                         continue;
657                 }
658                 
659
660                 /* If the idle timeout fired and we don't have any connected
661                  * users, exit gracefully. We should be running under a process
662                  * controller that will restart us if necessry.
663                  */
664                 if (num == 0 && count_all_current_connections() == 0) {
665                         exit_server_cleanly("idle timeout");
666                 }
667
668                 /* process pending nDNS responses */
669                 if (dns_register_smbd_reply(dns_reg, &r_fds, &idle_timeout)) {
670                         --num;
671                 }
672
673                 if (run_events(smbd_event_context(), num, &r_fds, &w_fds)) {
674                         continue;
675                 }
676
677                 /* check if we need to reload services */
678                 check_reload(time(NULL));
679
680                 /* Find the sockets that are read-ready -
681                    accept on these. */
682                 for( ; num > 0; num--) {
683                         struct sockaddr addr;
684                         socklen_t in_addrlen = sizeof(addr);
685                         pid_t child = 0;
686
687                         s = -1;
688                         for(i = 0; i < num_sockets; i++) {
689                                 if(FD_ISSET(fd_listenset[i],&r_fds)) {
690                                         s = fd_listenset[i];
691                                         /* Clear this so we don't look
692                                            at it again. */
693                                         FD_CLR(fd_listenset[i],&r_fds);
694                                         break;
695                                 }
696                         }
697
698                         smbd_set_server_fd(accept(s,&addr,&in_addrlen));
699
700                         if (smbd_server_fd() == -1 && errno == EINTR)
701                                 continue;
702
703                         if (smbd_server_fd() == -1) {
704                                 DEBUG(2,("open_sockets_smbd: accept: %s\n",
705                                          strerror(errno)));
706                                 continue;
707                         }
708
709                         /* Ensure child is set to blocking mode */
710                         set_blocking(smbd_server_fd(),True);
711
712                         if (smbd_server_fd() != -1 && interactive)
713                                 return True;
714
715                         if (allowable_number_of_smbd_processes() &&
716                             smbd_server_fd() != -1 &&
717                             ((child = sys_fork())==0)) {
718                                 char remaddr[INET6_ADDRSTRLEN];
719
720                                 /* Child code ... */
721
722                                 /* Stop zombies, the parent explicitly handles
723                                  * them, counting worker smbds. */
724                                 CatchChild();
725
726                                 /* close the listening socket(s) */
727                                 for(i = 0; i < num_sockets; i++)
728                                         close(fd_listenset[i]);
729
730                                 /* close our mDNS daemon handle */
731                                 dns_register_close(&dns_reg);
732
733                                 /* close our standard file
734                                    descriptors */
735                                 close_low_fds(False);
736                                 am_parent = 0;
737
738                                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
739                                 set_socket_options(smbd_server_fd(),
740                                                    lp_socket_options());
741
742                                 /* this is needed so that we get decent entries
743                                    in smbstatus for port 445 connects */
744                                 set_remote_machine_name(get_peer_addr(smbd_server_fd(),
745                                                                 remaddr,
746                                                                 sizeof(remaddr)),
747                                                                 false);
748
749                                 if (!reinit_after_fork(
750                                             smbd_messaging_context(),
751                                             smbd_event_context(),
752                                             true)) {
753                                         DEBUG(0,("reinit_after_fork() failed\n"));
754                                         smb_panic("reinit_after_fork() failed");
755                                 }
756
757                                 return True;
758                         }
759                         /* The parent doesn't need this socket */
760                         close(smbd_server_fd());
761
762                         /* Sun May 6 18:56:14 2001 ackley@cs.unm.edu:
763                                 Clear the closed fd info out of server_fd --
764                                 and more importantly, out of client_fd in
765                                 util_sock.c, to avoid a possible
766                                 getpeername failure if we reopen the logs
767                                 and use %I in the filename.
768                         */
769
770                         smbd_set_server_fd(-1);
771
772                         if (child != 0) {
773                                 add_child_pid(child);
774                         }
775
776                         /* Force parent to check log size after
777                          * spawning child.  Fix from
778                          * klausr@ITAP.Physik.Uni-Stuttgart.De.  The
779                          * parent smbd will log to logserver.smb.  It
780                          * writes only two messages for each child
781                          * started/finished. But each child writes,
782                          * say, 50 messages also in logserver.smb,
783                          * begining with the debug_count of the
784                          * parent, before the child opens its own log
785                          * file logserver.client. In a worst case
786                          * scenario the size of logserver.smb would be
787                          * checked after about 50*50=2500 messages
788                          * (ca. 100kb).
789                          * */
790                         force_check_log_size();
791
792                 } /* end for num */
793         } /* end while 1 */
794
795 /* NOTREACHED   return True; */
796 }
797
798 /****************************************************************************
799  Reload printers
800 **************************************************************************/
801 void reload_printers(void)
802 {
803         int snum;
804         int n_services = lp_numservices();
805         int pnum = lp_servicenumber(PRINTERS_NAME);
806         const char *pname;
807
808         pcap_cache_reload();
809
810         /* remove stale printers */
811         for (snum = 0; snum < n_services; snum++) {
812                 /* avoid removing PRINTERS_NAME or non-autoloaded printers */
813                 if (snum == pnum || !(lp_snum_ok(snum) && lp_print_ok(snum) &&
814                                       lp_autoloaded(snum)))
815                         continue;
816
817                 pname = lp_printername(snum);
818                 if (!pcap_printername_ok(pname)) {
819                         DEBUG(3, ("removing stale printer %s\n", pname));
820
821                         if (is_printer_published(NULL, snum, NULL))
822                                 nt_printer_publish(NULL, snum, SPOOL_DS_UNPUBLISH);
823                         del_a_printer(pname);
824                         lp_killservice(snum);
825                 }
826         }
827
828         load_printers();
829 }
830
831 /****************************************************************************
832  Reload the services file.
833 **************************************************************************/
834
835 bool reload_services(bool test)
836 {
837         bool ret;
838
839         if (lp_loaded()) {
840                 char *fname = lp_configfile();
841                 if (file_exist(fname) &&
842                     !strcsequal(fname, get_dyn_CONFIGFILE())) {
843                         set_dyn_CONFIGFILE(fname);
844                         test = False;
845                 }
846         }
847
848         reopen_logs();
849
850         if (test && !lp_file_list_changed())
851                 return(True);
852
853         lp_killunused(conn_snum_used);
854
855         ret = lp_load(get_dyn_CONFIGFILE(), False, False, True, True);
856
857         reload_printers();
858
859         /* perhaps the config filename is now set */
860         if (!test)
861                 reload_services(True);
862
863         reopen_logs();
864
865         load_interfaces();
866
867         if (smbd_server_fd() != -1) {
868                 set_socket_options(smbd_server_fd(),"SO_KEEPALIVE");
869                 set_socket_options(smbd_server_fd(), lp_socket_options());
870         }
871
872         mangle_reset_cache();
873         reset_stat_cache();
874
875         /* this forces service parameters to be flushed */
876         set_current_service(NULL,0,True);
877
878         return(ret);
879 }
880
881 /****************************************************************************
882  Exit the server.
883 ****************************************************************************/
884
885 /* Reasons for shutting down a server process. */
886 enum server_exit_reason { SERVER_EXIT_NORMAL, SERVER_EXIT_ABNORMAL };
887
888 static void exit_server_common(enum server_exit_reason how,
889         const char *const reason) _NORETURN_;
890
891 static void exit_server_common(enum server_exit_reason how,
892         const char *const reason)
893 {
894         static int firsttime=1;
895         bool had_open_conn;
896
897         if (!firsttime)
898                 exit(0);
899         firsttime = 0;
900
901         change_to_root_user();
902
903         if (negprot_global_auth_context) {
904                 (negprot_global_auth_context->free)(&negprot_global_auth_context);
905         }
906
907         had_open_conn = conn_close_all();
908
909         invalidate_all_vuids();
910
911         /* 3 second timeout. */
912         print_notify_send_messages(smbd_messaging_context(), 3);
913
914         /* delete our entry in the connections database. */
915         yield_connection(NULL,"");
916
917         respond_to_all_remaining_local_messages();
918
919 #ifdef WITH_DFS
920         if (dcelogin_atmost_once) {
921                 dfs_unlogin();
922         }
923 #endif
924
925 #ifdef USE_DMAPI
926         /* Destroy Samba DMAPI session only if we are master smbd process */
927         if (am_parent) {
928                 if (!dmapi_destroy_session()) {
929                         DEBUG(0,("Unable to close Samba DMAPI session\n"));
930                 }
931         }
932 #endif
933
934         locking_end();
935         printing_end();
936
937         if (how != SERVER_EXIT_NORMAL) {
938                 int oldlevel = DEBUGLEVEL;
939
940                 DEBUGLEVEL = 10;
941
942                 DEBUGSEP(0);
943                 DEBUG(0,("Abnormal server exit: %s\n",
944                         reason ? reason : "no explanation provided"));
945                 DEBUGSEP(0);
946
947                 log_stack_trace();
948
949                 DEBUGLEVEL = oldlevel;
950                 dump_core();
951
952         } else {    
953                 DEBUG(3,("Server exit (%s)\n",
954                         (reason ? reason : "normal exit")));
955         }
956
957         /* if we had any open SMB connections when we exited then we
958            need to tell the parent smbd so that it can trigger a retry
959            of any locks we may have been holding or open files we were
960            blocking */
961         if (had_open_conn) {
962                 exit(1);
963         } else {
964                 exit(0);
965         }
966 }
967
968 void exit_server(const char *const explanation)
969 {
970         exit_server_common(SERVER_EXIT_ABNORMAL, explanation);
971 }
972
973 void exit_server_cleanly(const char *const explanation)
974 {
975         exit_server_common(SERVER_EXIT_NORMAL, explanation);
976 }
977
978 void exit_server_fault(void)
979 {
980         exit_server("critical server fault");
981 }
982
983
984 /****************************************************************************
985 received when we should release a specific IP
986 ****************************************************************************/
987 static void release_ip(const char *ip, void *priv)
988 {
989         char addr[INET6_ADDRSTRLEN];
990
991         if (strcmp(client_socket_addr(get_client_fd(),addr,sizeof(addr)), ip) == 0) {
992                 /* we can't afford to do a clean exit - that involves
993                    database writes, which would potentially mean we
994                    are still running after the failover has finished -
995                    we have to get rid of this process ID straight
996                    away */
997                 DEBUG(0,("Got release IP message for our IP %s - exiting immediately\n",
998                         ip));
999                 /* note we must exit with non-zero status so the unclean handler gets
1000                    called in the parent, so that the brl database is tickled */
1001                 _exit(1);
1002         }
1003 }
1004
1005 static void msg_release_ip(struct messaging_context *msg_ctx, void *private_data,
1006                            uint32_t msg_type, struct server_id server_id, DATA_BLOB *data)
1007 {
1008         release_ip((char *)data->data, NULL);
1009 }
1010
1011 /****************************************************************************
1012  Initialise connect, service and file structs.
1013 ****************************************************************************/
1014
1015 static bool init_structs(void )
1016 {
1017         /*
1018          * Set the machine NETBIOS name if not already
1019          * set from the config file.
1020          */
1021
1022         if (!init_names())
1023                 return False;
1024
1025         conn_init();
1026
1027         file_init();
1028
1029         /* for RPC pipes */
1030         init_rpc_pipe_hnd();
1031
1032         init_dptrs();
1033
1034         if (!secrets_init())
1035                 return False;
1036
1037         return True;
1038 }
1039
1040 /*
1041  * Send keepalive packets to our client
1042  */
1043 static bool keepalive_fn(const struct timeval *now, void *private_data)
1044 {
1045         if (!send_keepalive(smbd_server_fd())) {
1046                 DEBUG( 2, ( "Keepalive failed - exiting.\n" ) );
1047                 return False;
1048         }
1049         return True;
1050 }
1051
1052 /*
1053  * Do the recurring check if we're idle
1054  */
1055 static bool deadtime_fn(const struct timeval *now, void *private_data)
1056 {
1057         if ((conn_num_open() == 0)
1058             || (conn_idle_all(now->tv_sec))) {
1059                 DEBUG( 2, ( "Closing idle connection\n" ) );
1060                 messaging_send(smbd_messaging_context(), procid_self(),
1061                                MSG_SHUTDOWN, &data_blob_null);
1062                 return False;
1063         }
1064
1065         return True;
1066 }
1067
1068 /*
1069  * Do the recurring log file and smb.conf reload checks.
1070  */
1071
1072 static bool housekeeping_fn(const struct timeval *now, void *private_data)
1073 {
1074         change_to_root_user();
1075
1076         /* update printer queue caches if necessary */
1077         update_monitored_printq_cache();
1078
1079         /* check if we need to reload services */
1080         check_reload(time(NULL));
1081
1082         /* Change machine password if neccessary. */
1083         attempt_machine_password_change();
1084
1085         /*
1086          * Force a log file check.
1087          */
1088         force_check_log_size();
1089         check_log_size();
1090         return true;
1091 }
1092
1093 /****************************************************************************
1094  main program.
1095 ****************************************************************************/
1096
1097 /* Declare prototype for build_options() to avoid having to run it through
1098    mkproto.h.  Mixing $(builddir) and $(srcdir) source files in the current
1099    prototype generation system is too complicated. */
1100
1101 extern void build_options(bool screen);
1102
1103  int main(int argc,const char *argv[])
1104 {
1105         /* shall I run as a daemon */
1106         bool is_daemon = false;
1107         bool interactive = false;
1108         bool Fork = true;
1109         bool no_process_group = false;
1110         bool log_stdout = false;
1111         char *ports = NULL;
1112         char *profile_level = NULL;
1113         int opt;
1114         poptContext pc;
1115         bool print_build_options = False;
1116         enum {
1117                 OPT_DAEMON = 1000,
1118                 OPT_INTERACTIVE,
1119                 OPT_FORK,
1120                 OPT_NO_PROCESS_GROUP,
1121                 OPT_LOG_STDOUT
1122         };
1123         struct poptOption long_options[] = {
1124         POPT_AUTOHELP
1125         {"daemon", 'D', POPT_ARG_NONE, NULL, OPT_DAEMON, "Become a daemon (default)" },
1126         {"interactive", 'i', POPT_ARG_NONE, NULL, OPT_INTERACTIVE, "Run interactive (not a daemon)"},
1127         {"foreground", 'F', POPT_ARG_NONE, NULL, OPT_FORK, "Run daemon in foreground (for daemontools, etc.)" },
1128         {"no-process-group", '\0', POPT_ARG_NONE, NULL, OPT_NO_PROCESS_GROUP, "Don't create a new process group" },
1129         {"log-stdout", 'S', POPT_ARG_NONE, NULL, OPT_LOG_STDOUT, "Log to stdout" },
1130         {"build-options", 'b', POPT_ARG_NONE, NULL, 'b', "Print build options" },
1131         {"port", 'p', POPT_ARG_STRING, &ports, 0, "Listen on the specified ports"},
1132         {"profiling-level", 'P', POPT_ARG_STRING, &profile_level, 0, "Set profiling level","PROFILE_LEVEL"},
1133         POPT_COMMON_SAMBA
1134         POPT_COMMON_DYNCONFIG
1135         POPT_TABLEEND
1136         };
1137         TALLOC_CTX *frame = talloc_stackframe(); /* Setup tos. */
1138
1139         TimeInit();
1140
1141 #ifdef HAVE_SET_AUTH_PARAMETERS
1142         set_auth_parameters(argc,argv);
1143 #endif
1144
1145         pc = poptGetContext("smbd", argc, argv, long_options, 0);
1146         while((opt = poptGetNextOpt(pc)) != -1) {
1147                 switch (opt)  {
1148                 case OPT_DAEMON:
1149                         is_daemon = true;
1150                         break;
1151                 case OPT_INTERACTIVE:
1152                         interactive = true;
1153                         break;
1154                 case OPT_FORK:
1155                         Fork = false;
1156                         break;
1157                 case OPT_NO_PROCESS_GROUP:
1158                         no_process_group = true;
1159                         break;
1160                 case OPT_LOG_STDOUT:
1161                         log_stdout = true;
1162                         break;
1163                 case 'b':
1164                         print_build_options = True;
1165                         break;
1166                 default:
1167                         d_fprintf(stderr, "\nInvalid option %s: %s\n\n",
1168                                   poptBadOption(pc, 0), poptStrerror(opt));
1169                         poptPrintUsage(pc, stderr, 0);
1170                         exit(1);
1171                 }
1172         }
1173         poptFreeContext(pc);
1174
1175         if (interactive) {
1176                 Fork = False;
1177                 log_stdout = True;
1178         }
1179
1180         setup_logging(argv[0],log_stdout);
1181
1182         if (print_build_options) {
1183                 build_options(True); /* Display output to screen as well as debug */
1184                 exit(0);
1185         }
1186
1187         load_case_tables();
1188
1189 #ifdef HAVE_SETLUID
1190         /* needed for SecureWare on SCO */
1191         setluid(0);
1192 #endif
1193
1194         sec_init();
1195
1196         set_remote_machine_name("smbd", False);
1197
1198         if (interactive && (DEBUGLEVEL >= 9)) {
1199                 talloc_enable_leak_report();
1200         }
1201
1202         if (log_stdout && Fork) {
1203                 DEBUG(0,("ERROR: Can't log to stdout (-S) unless daemon is in foreground (-F) or interactive (-i)\n"));
1204                 exit(1);
1205         }
1206
1207         /* we want to re-seed early to prevent time delays causing
1208            client problems at a later date. (tridge) */
1209         generate_random_buffer(NULL, 0);
1210
1211         /* make absolutely sure we run as root - to handle cases where people
1212            are crazy enough to have it setuid */
1213
1214         gain_root_privilege();
1215         gain_root_group_privilege();
1216
1217         fault_setup((void (*)(void *))exit_server_fault);
1218         dump_core_setup("smbd");
1219
1220         CatchSignal(SIGTERM , SIGNAL_CAST sig_term);
1221         CatchSignal(SIGHUP,SIGNAL_CAST sig_hup);
1222         
1223         /* we are never interested in SIGPIPE */
1224         BlockSignals(True,SIGPIPE);
1225
1226 #if defined(SIGFPE)
1227         /* we are never interested in SIGFPE */
1228         BlockSignals(True,SIGFPE);
1229 #endif
1230
1231 #if defined(SIGUSR2)
1232         /* We are no longer interested in USR2 */
1233         BlockSignals(True,SIGUSR2);
1234 #endif
1235
1236         /* POSIX demands that signals are inherited. If the invoking process has
1237          * these signals masked, we will have problems, as we won't recieve them. */
1238         BlockSignals(False, SIGHUP);
1239         BlockSignals(False, SIGUSR1);
1240         BlockSignals(False, SIGTERM);
1241
1242         /* we want total control over the permissions on created files,
1243            so set our umask to 0 */
1244         umask(0);
1245
1246         init_sec_ctx();
1247
1248         reopen_logs();
1249
1250         DEBUG(0,("smbd version %s started.\n", SAMBA_VERSION_STRING));
1251         DEBUGADD(0,("%s\n", COPYRIGHT_STARTUP_MESSAGE));
1252
1253         DEBUG(2,("uid=%d gid=%d euid=%d egid=%d\n",
1254                  (int)getuid(),(int)getgid(),(int)geteuid(),(int)getegid()));
1255
1256         /* Output the build options to the debug log */ 
1257         build_options(False);
1258
1259         if (sizeof(uint16) < 2 || sizeof(uint32) < 4) {
1260                 DEBUG(0,("ERROR: Samba is not configured correctly for the word size on your machine\n"));
1261                 exit(1);
1262         }
1263
1264         if (!lp_load_initial_only(get_dyn_CONFIGFILE())) {
1265                 DEBUG(0, ("error opening config file\n"));
1266                 exit(1);
1267         }
1268
1269         if (smbd_messaging_context() == NULL)
1270                 exit(1);
1271
1272         if (!reload_services(False))
1273                 return(-1);     
1274
1275         init_structs();
1276
1277 #ifdef WITH_PROFILE
1278         if (!profile_setup(smbd_messaging_context(), False)) {
1279                 DEBUG(0,("ERROR: failed to setup profiling\n"));
1280                 return -1;
1281         }
1282         if (profile_level != NULL) {
1283                 int pl = atoi(profile_level);
1284                 struct server_id src;
1285
1286                 DEBUG(1, ("setting profiling level: %s\n",profile_level));
1287                 src.pid = getpid();
1288                 set_profile_level(pl, src);
1289         }
1290 #endif
1291
1292         DEBUG(3,( "loaded services\n"));
1293
1294         if (!is_daemon && !is_a_socket(0)) {
1295                 if (!interactive)
1296                         DEBUG(0,("standard input is not a socket, assuming -D option\n"));
1297
1298                 /*
1299                  * Setting is_daemon here prevents us from eventually calling
1300                  * the open_sockets_inetd()
1301                  */
1302
1303                 is_daemon = True;
1304         }
1305
1306         if (is_daemon && !interactive) {
1307                 DEBUG( 3, ( "Becoming a daemon.\n" ) );
1308                 become_daemon(Fork, no_process_group);
1309         }
1310
1311 #if HAVE_SETPGID
1312         /*
1313          * If we're interactive we want to set our own process group for
1314          * signal management.
1315          */
1316         if (interactive && !no_process_group)
1317                 setpgid( (pid_t)0, (pid_t)0);
1318 #endif
1319
1320         if (!directory_exist(lp_lockdir()))
1321                 mkdir(lp_lockdir(), 0755);
1322
1323         if (is_daemon)
1324                 pidfile_create("smbd");
1325
1326         if (!reinit_after_fork(smbd_messaging_context(),
1327                                smbd_event_context(), false)) {
1328                 DEBUG(0,("reinit_after_fork() failed\n"));
1329                 exit(1);
1330         }
1331
1332         /* Setup all the TDB's - including CLEAR_IF_FIRST tdb's. */
1333
1334         if (smbd_memcache() == NULL) {
1335                 exit(1);
1336         }
1337
1338         memcache_set_global(smbd_memcache());
1339
1340         /* Initialise the password backed before the global_sam_sid
1341            to ensure that we fetch from ldap before we make a domain sid up */
1342
1343         if(!initialize_password_db(False, smbd_event_context()))
1344                 exit(1);
1345
1346         if (!secrets_init()) {
1347                 DEBUG(0, ("ERROR: smbd can not open secrets.tdb\n"));
1348                 exit(1);
1349         }
1350
1351         if(!get_global_sam_sid()) {
1352                 DEBUG(0,("ERROR: Samba cannot create a SAM SID.\n"));
1353                 exit(1);
1354         }
1355
1356         if (!session_init())
1357                 exit(1);
1358
1359         if (!connections_init(True))
1360                 exit(1);
1361
1362         if (!locking_init())
1363                 exit(1);
1364
1365         namecache_enable();
1366
1367         if (!W_ERROR_IS_OK(registry_init_full()))
1368                 exit(1);
1369
1370 #if 0
1371         if (!init_svcctl_db())
1372                 exit(1);
1373 #endif
1374
1375         if (!print_backend_init(smbd_messaging_context()))
1376                 exit(1);
1377
1378         if (!init_guest_info()) {
1379                 DEBUG(0,("ERROR: failed to setup guest info.\n"));
1380                 return -1;
1381         }
1382
1383         /* only start the background queue daemon if we are 
1384            running as a daemon -- bad things will happen if
1385            smbd is launched via inetd and we fork a copy of 
1386            ourselves here */
1387
1388         if (is_daemon && !interactive
1389             && lp_parm_bool(-1, "smbd", "backgroundqueue", true)) {
1390                 start_background_queue();
1391         }
1392
1393         if (!open_sockets_smbd(is_daemon, interactive, ports))
1394                 exit(1);
1395
1396         /*
1397          * everything after this point is run after the fork()
1398          */ 
1399
1400         static_init_rpc;
1401
1402         init_modules();
1403
1404         /* Possibly reload the services file. Only worth doing in
1405          * daemon mode. In inetd mode, we know we only just loaded this.
1406          */
1407         if (is_daemon) {
1408                 reload_services(True);
1409         }
1410
1411         if (!init_account_policy()) {
1412                 DEBUG(0,("Could not open account policy tdb.\n"));
1413                 exit(1);
1414         }
1415
1416         if (*lp_rootdir()) {
1417                 if (chroot(lp_rootdir()) == 0)
1418                         DEBUG(2,("Changed root to %s\n", lp_rootdir()));
1419         }
1420
1421         /* Setup oplocks */
1422         if (!init_oplocks(smbd_messaging_context()))
1423                 exit(1);
1424
1425         /* Setup aio signal handler. */
1426         initialize_async_io_handler();
1427
1428         /* register our message handlers */
1429         messaging_register(smbd_messaging_context(), NULL,
1430                            MSG_SMB_FORCE_TDIS, msg_force_tdis);
1431         messaging_register(smbd_messaging_context(), NULL,
1432                            MSG_SMB_RELEASE_IP, msg_release_ip);
1433         messaging_register(smbd_messaging_context(), NULL,
1434                            MSG_SMB_CLOSE_FILE, msg_close_file);
1435
1436         if ((lp_keepalive() != 0)
1437             && !(event_add_idle(smbd_event_context(), NULL,
1438                                 timeval_set(lp_keepalive(), 0),
1439                                 "keepalive", keepalive_fn,
1440                                 NULL))) {
1441                 DEBUG(0, ("Could not add keepalive event\n"));
1442                 exit(1);
1443         }
1444
1445         if (!(event_add_idle(smbd_event_context(), NULL,
1446                              timeval_set(IDLE_CLOSED_TIMEOUT, 0),
1447                              "deadtime", deadtime_fn, NULL))) {
1448                 DEBUG(0, ("Could not add deadtime event\n"));
1449                 exit(1);
1450         }
1451
1452         if (!(event_add_idle(smbd_event_context(), NULL,
1453                              timeval_set(SMBD_SELECT_TIMEOUT, 0),
1454                              "housekeeping", housekeeping_fn, NULL))) {
1455                 DEBUG(0, ("Could not add housekeeping event\n"));
1456                 exit(1);
1457         }
1458
1459 #ifdef CLUSTER_SUPPORT
1460
1461         if (lp_clustering()) {
1462                 /*
1463                  * We need to tell ctdb about our client's TCP
1464                  * connection, so that for failover ctdbd can send
1465                  * tickle acks, triggering a reconnection by the
1466                  * client.
1467                  */
1468
1469                 struct sockaddr_storage srv, clnt;
1470
1471                 if (client_get_tcp_info(&srv, &clnt) == 0) {
1472
1473                         NTSTATUS status;
1474
1475                         status = ctdbd_register_ips(
1476                                 messaging_ctdbd_connection(),
1477                                 (struct sockaddr *)&srv,
1478                                 (struct sockaddr *)&clnt,
1479                                 release_ip, NULL);
1480
1481                         if (!NT_STATUS_IS_OK(status)) {
1482                                 DEBUG(0, ("ctdbd_register_ips failed: %s\n",
1483                                           nt_errstr(status)));
1484                         }
1485                 } else
1486                 {
1487                         DEBUG(0,("Unable to get tcp info for "
1488                                  "CTDB_CONTROL_TCP_CLIENT: %s\n",
1489                                  strerror(errno)));
1490                 }
1491         }
1492
1493 #endif
1494
1495         TALLOC_FREE(frame);
1496
1497         smbd_process();
1498
1499         namecache_shutdown();
1500
1501         exit_server_cleanly(NULL);
1502         return(0);
1503 }